import type { RemoteRiskLevel } from './protocol.js';
export interface RemoteInvocationGrantInput {
    userId: string;
    sessionId: string;
    toolName: string;
    riskLevel: RemoteRiskLevel;
    inputHash: string;
}
export interface RemoteInvocationGrantValidation {
    grantId: string;
    userId: string;
    sessionId: string;
    riskLevel: RemoteRiskLevel;
}
export declare class RemoteInvocationGrantStore {
    private readonly makeId;
    private readonly ttlMs;
    private readonly grants;
    constructor(makeId: () => string, ttlMs: number);
    issue(input: RemoteInvocationGrantInput, now: Date): string;
    validate(input: RemoteInvocationGrantValidation, now: Date): boolean;
    revoke(grantId: string): boolean;
    deleteForSession(sessionId: string): number;
}