/**
 * MCP Adapter — Generic governance wrapper for any MCP tool call.
 *
 * Works with any MCP server, any client. No MCP SDK dependency.
 * Wraps tool calls with APS delegation checks and signed receipts.
 */
import type { Delegation, ActionReceipt, SignedPassport } from '../types/passport.js';
export interface MCPToolCall {
    name: string;
    arguments: Record<string, unknown>;
    server?: string;
}
export interface MCPGovernanceConfig {
    passport: SignedPassport;
    delegation: Delegation;
    privateKey: string;
    scopePrefix?: string;
    destructiveTools?: string[];
    onReceipt?: (r: ActionReceipt) => void;
    onDenied?: (info: {
        tool: string;
        reason: string;
    }) => void;
}
/** Derive APS scope from MCP tool call */
export declare function mcpToolToScope(call: MCPToolCall, config: Pick<MCPGovernanceConfig, 'scopePrefix' | 'destructiveTools'>): string;
/** Govern a single MCP tool call */
export declare function governMCPToolCall(call: MCPToolCall, execute: (args: Record<string, unknown>) => Promise<unknown>, config: MCPGovernanceConfig): Promise<{
    result: unknown;
    receipt: ActionReceipt;
} | {
    denied: true;
    reason: string;
    receipt: ActionReceipt;
}>;
/** Create a governance interceptor for an MCP client */
export declare function createMCPGovernanceInterceptor(config: MCPGovernanceConfig): (call: MCPToolCall, execute: (args: Record<string, unknown>) => Promise<unknown>) => Promise<{
    result: unknown;
    receipt: ActionReceipt;
} | {
    denied: true;
    reason: string;
    receipt: ActionReceipt;
}>;
//# sourceMappingURL=mcp.d.ts.map