import type { PluginMcpServer } from '../types.js';
export interface SessionMcpRuntimeEntry {
    pluginId: string;
    pluginDir: string;
    server: PluginMcpServer;
}
export interface SessionMcpRuntimeManifest {
    schemaVersion: 1;
    sessionId: string;
    pluginIds: string[];
    generatedAt: string;
    entries: SessionMcpRuntimeEntry[];
}
export declare function sessionMcpRuntimeManifestPath(sessionId: string, dataDir?: string): string;
export declare function readSessionMcpRuntimeManifest(sessionId: string, dataDir?: string): SessionMcpRuntimeManifest | null;
export declare function refreshSessionMcpRuntimeManifest(opts: {
    sessionId: string;
    pluginIds: readonly string[];
    dataDir?: string;
    now?: () => string;
}): SessionMcpRuntimeManifest;
/** Credential-bearing paths consumed only by the trusted Gateway host. They
 * must never become CLI sandbox read carve-outs. */
export declare function sessionMcpRuntimeHostOnlyPaths(manifest: SessionMcpRuntimeManifest, dataDir?: string): string[];
//# sourceMappingURL=session-runtime.d.ts.map