/**
 * tool-owned-keys — validated identity set for binder and purge (ADR-0146).
 *
 * Builds every state-capable identity a Tool may address (metadata id, human
 * name, primary command/layout key, session-replay key, config namespace) and
 * rejects any candidate that claims the reserved host-plane prefix before a
 * bound context or purge path can use it.
 */
import { type Tool } from '@opensip-cli/core';
/**
 * Derive the deduplicated set of ordinary tool-owned keys after rejecting any
 * reserved host-plane identity on every candidate field.
 *
 * Candidates: metadata id, human name, primary command, identity layout key,
 * identity aliases, session-replay key, and config namespace.
 *
 * @throws {PluginIncompatibleError} when any candidate begins with the reserved
 *   host-plane prefix — validation completes before any seam is callable.
 */
export declare function toolOwnedKeys(tool: Tool): ReadonlySet<string>;
//# sourceMappingURL=tool-owned-keys.d.ts.map