import type { FabricCapabilityBindingView } from "../protocol.js";
/** Private canonical state behind ActionRegistry's WeakMap-owned public views.
 * Root issuance is a trusted registry operation, not a caller-supplied permission
 * Boolean. The compiled kernel decides derivation/use/release over exact grants.
 * JS identity, WeakMap ownership, binding observations and abort delivery remain trusted.
 */
export declare class CapabilityAuthority {
    #private;
    private constructor();
    static issue(grants: readonly FabricCapabilityBindingView[]): CapabilityAuthority;
    derive(grants: readonly FabricCapabilityBindingView[]): CapabilityAuthority;
    get active(): boolean;
    release(): void;
    resolve(ref: string): FabricCapabilityBindingView | undefined;
    bindings(): FabricCapabilityBindingView[];
}
//# sourceMappingURL=authority.d.ts.map