import type { ToolModule } from '../lib/tool.js';
/**
 * Every reversible tool that can change something in Depot. Registered only when
 * DEPOT_MCP_ALLOW_WRITES is set; with the flag unset, tools/list never shows them. Depot has no
 * read-only token scope, so this list and the gate around it are the only thing enforcing least
 * privilege.
 *
 * Kept apart from index.ts so depot_whoami can report the count without a circular import.
 */
export declare const mutatingTools: readonly ToolModule[];
/**
 * Writes over Depot's beta sandbox API. Registered only when DEPOT_MCP_ALLOW_WRITES and
 * DEPOT_MCP_ENABLE_BETA are both set: the first because they mutate, the second because
 * `depot.sandbox.v1` is published only as a proto and may change without notice.
 */
export declare const betaMutatingTools: readonly ToolModule[];
/**
 * Writes that cannot be undone. Behind a second gate, DEPOT_MCP_ALLOW_DESTRUCTIVE, which only
 * counts when DEPOT_MCP_ALLOW_WRITES is set too; each also demands a confirmation argument that
 * names the thing destroyed.
 */
export declare const destructiveTools: readonly ToolModule[];
/** Whether the destructive tools are registered: both gates, never the second alone. */
export declare function destructiveWritesEnabled(config: {
    readonly allowWrites: boolean;
    readonly allowDestructive: boolean;
}): boolean;
//# sourceMappingURL=writes.d.ts.map