import type { AuditLogger } from '../audit/index.js';
/**
 * Enforces unified access boundaries for tools and resources.
 *
 * 1. Team Boundary Check (Fail-closed):
 *    Requires either a TEAM_AUTHOR environment variable or an active, valid OAuth session.
 * 2. Scope Validation:
 *    Ensures the active session possesses the required scope for the target operation.
 */
export declare function enforceAccessBoundary(targetName: string, targetType: 'resource' | 'tool' | 'prompt', capabilities?: {
    requiresTeamScope?: boolean;
    requiresAdminScope?: boolean;
    requiresAuditScope?: boolean;
}, auditLogger?: AuditLogger | null): void;
//# sourceMappingURL=validation.d.ts.map