/**
 * command-scope-index — the runtime lookup used by pre-action bootstrap to
 * decide whether a command may run without an opensip-cli project.
 *
 * The index is built from the same declarative CommandSpecs that are mounted
 * into Commander: top-level host specs, grouped host leaves, and tool
 * commandSpecs. This keeps `CommandSpec.scope` as the source of truth instead
 * of a parallel allowlist.
 */
import { type HostCommandRuntimePolicy } from './host-runtime-access.js';
import type { HostSubcommandGroup, ToolPluginGroup } from './host-subcommand-groups.js';
import type { CommandScopeRequirement } from '@opensip-cli/core';
import type { Command } from 'commander';
/**
 * The host-facing requirements of one mounted command, keyed by `commandPath`.
 *
 * Both facts are DECLARED on the CommandSpec and derived here — never
 * hand-listed in bootstrap. `noInit` used to live in a hardcoded allowlist in
 * `no-init-eligibility.ts`, which silently omitted `audit` (the canonical
 * first-run command) and so failed the exact workflow it was built for.
 */
export interface CommandScopeEntry {
    readonly scope: CommandScopeRequirement;
    /** True when this command may run outside an initialized project (ephemeral). */
    readonly noInit: boolean;
    /** CLI-private host bootstrap/resource declaration; Tools always receive the default. */
    readonly runtimePolicy: HostCommandRuntimePolicy;
}
export type CommandScopeIndex = ReadonlyMap<string, CommandScopeEntry>;
export interface CommandScopeSpec {
    readonly name: string;
    readonly aliases?: readonly string[];
    readonly scope: CommandScopeRequirement;
    /** See {@link CommandSpec.noInit} — may run with no opensip-cli project. */
    readonly noInit?: boolean;
    /**
     * When set, this tool command is nested under the named primary verb (the
     * `<tool> <verb>` grammar — see `CommandSpec.parent`). The index then keys it
     * under `${parent} ${name}` so `commandPath` resolves `graph export` /
     * `fit list` rather than a bare `export` / `list`. Omitted ⇒ flat root key.
     */
    readonly parent?: string;
}
export interface CommandScopeIndexInput {
    readonly hostSpecs: readonly CommandScopeSpec[];
    readonly hostGroups: readonly HostSubcommandGroup[];
    readonly toolSpecs: readonly CommandScopeSpec[];
    /**
     * The DOMAIN-BOUND per-tool `plugin` groups (mounted under each pack-supporting
     * tool primary, e.g. `opensip fit plugin list`). Each leaf keys under
     * `${parentVerb} plugin ${leaf}` so `commandPath` resolves the doubly-nested path.
     * Optional so callers without tools (isolated tests) can omit it.
     */
    readonly toolPluginGroups?: readonly ToolPluginGroup[];
}
export declare function buildCommandScopeIndex(input: CommandScopeIndexInput): CommandScopeIndex;
/**
 * Commander exposes the invoked leaf as `actionCommand`; walk its parents back
 * to the root program and keep only real subcommands. For `opensip tools list`,
 * this returns `tools list`, not just `list`.
 */
export declare function commandPath(actionCommand: Command): string;
//# sourceMappingURL=command-scope-index.d.ts.map