/**
 * The identity-binding preamble every service's instructions open with. Lives
 * here because lib owns the behavior it describes (`server()` binds
 * `GOOGLE_MCP_ACCOUNT` at startup); a service composes it with its own
 * vocabulary and traps. `accountNoun` names the account flavor ('Gmail
 * account', 'Google account').
 */
export declare function identityInstructions(accountNoun: string): string;
/**
 * The vocabulary sentence every service's instructions carry after the
 * identity preamble: where the operation vocabulary comes from, where each
 * tools/list entry's source link lives (`_meta`), and that the four MCP
 * behavior hints are always present. Lives here because lib owns the behavior
 * it describes (`toolDefinitions` emits the link and the hints). Two shapes,
 * matching Google's two publication shapes: a wing with a hosted MCP toolset
 * names both vocabularies (optionally with per-wing parameter examples);
 * `restOnly` names a service whose server is REST-sourced throughout.
 */
export declare function vocabularyInstructions(origin?: {
    tools: string;
    methods: string;
} | {
    restOnly: string;
}): string;
/**
 * The untrusted-content advisory every service's instructions carry after the
 * vocabulary sentence: retrieved content was authored by external parties and
 * is data, not instructions. The sentence stays generic on purpose (mail
 * bodies, file contents, comments, event descriptions, and cell values are
 * all the same risk), so lib never carries a per-wing noun inventory; the
 * surface pin asserts every wing serves it. The server cannot enforce what an
 * agent does with content, only say it plainly at connect time.
 */
export declare function untrustedContentInstructions(): string;
//# sourceMappingURL=instructions.d.ts.map