/**
 * Caveat synthesizer — the bridge from mcp-recon to capnagent.
 *
 * For each classified tool, generate a copy-pasteable capnagent
 * caveat string that bounds the tool's authority to the smallest
 * surface that preserves utility. The caveat is always a *suggestion*;
 * the operator should review and tighten further to fit their
 * deployment.
 *
 * Convention: every suggestion is a single DSL predicate that can be
 * passed to `Issuer.issue(...).caveat(...)` or `cap.attenuate(...)`.
 * The caveat language is documented in capnagent's
 * `caveat_dsl.rs`.
 */
import type { ToolFacts } from "../fuzz/schema.js";
import type { AuthorityLevel, DataClass } from "./types.js";
export interface CaveatInput {
    tool: string;
    data_class: DataClass;
    authority_level: AuthorityLevel;
    facts: ToolFacts;
}
/**
 * Suggest a capnagent caveat for the given classification + facts.
 * The suggestion places `<placeholder>` markers where the operator
 * must substitute deployment-specific values.
 */
export declare function synthesizeCaveat(input: CaveatInput): string;
//# sourceMappingURL=caveat.d.ts.map