import type { Scanner, ScannerResult, ScanContext, ToolPolicy, ToolManifestPin } from "../types.js";
export declare class ToolPolicyScanner implements Scanner {
    readonly name = "tool_policy";
    private policy;
    private pins;
    constructor(policy: ToolPolicy, pins?: ToolManifestPin[]);
    scan(_input: string, context: ScanContext): Promise<ScannerResult>;
    /** Check if tool matches global dangerous patterns */
    private isGloballyDangerous;
    /** Check if tool is explicitly denied */
    private isDenied;
    /** Check if tool is in the allow list */
    private isAllowed;
    /** Check manifest pin for drift */
    private checkManifestDrift;
    /** Pin a server's tool manifest */
    static pinManifest(serverId: string, toolNames: string[]): ToolManifestPin;
    /** Verify a manifest against a pin */
    static verifyManifest(pin: ToolManifestPin, currentTools: string[]): {
        valid: boolean;
        added: string[];
        removed: string[];
    };
}
//# sourceMappingURL=tools.d.ts.map