/** Inherited optional-tool authority: exact tool names and `*` patterns. */
export interface ChildToolAllowlist {
    readonly entries: readonly string[];
    /** The parent itself was launched with fabric_exec, named exactly. */
    readonly fabricExec: boolean;
    has(name: string): boolean;
}
/** Worker-owned optional-tool allowlist; absence leaves the host unrestricted. */
export declare function readChildToolAllowlist(raw?: string | undefined): ChildToolAllowlist | undefined;
/** Constrain Pi selectors before forwarding; never let relative lists restore defaults. */
export declare function constrainChildToolSelection(entries: readonly string[], inherited?: ChildToolAllowlist): string[];
/** Pi's relative selectors change defaults rather than becoming literal tool names. */
export declare function resolveNativeToolSelection(tools: readonly string[] | undefined, defaults: readonly string[], noTools?: "builtin" | "all"): {
    active: string[];
    allowed?: string[];
};
/** Native selection expands wildcards after launch; exclusion is the final boundary. */
export declare function nativeFabricExecExclusions(tools: readonly string[] | undefined): string[];
//# sourceMappingURL=child-tool-allowlist.d.ts.map