/**
 * MCP config loader — reads .mcp.json files from plugin directories.
 *
 * File format (matches @github/copilot-sdk MCPServerConfig):
 *
 *   {
 *     "my-server": {
 *       "command": "node",
 *       "args": ["server.js"],
 *       "tools": ["*"]
 *     },
 *     "remote-api": {
 *       "type": "http",
 *       "url": "https://api.example.com/mcp",
 *       "tools": ["query"],
 *       "headers": { "Authorization": "Bearer ${MCP_TOKEN}" },
 *       "default": true
 *     }
 *   }
 *
 * Environment variable references like `${VAR}` in string values
 * are expanded at load time.
 *
 * Servers are a deployment CATALOG, not an automatic every-session grant:
 * agents receive a server by naming it in their `.agent.md` `mcpServers:`
 * frontmatter, or — for servers tagged `"default": true` (the deployment
 * default set; a PilotSwarm-only tag stripped before the config reaches the
 * Copilot CLI) — via `inheritDefaultMcpServers: true`.
 *
 * A deployment catalog entry may additionally carry `"allowedAgents"`: a
 * list of agent identities that are the ONLY agents allowed to reference
 * it. See {@link mcpAllowlistAdmits} for the identity forms. Like `default`,
 * it is a PilotSwarm-only field, stripped before configs reach the CLI, and
 * it is honoured only in deployment plugin dirs — a package `.mcp.json`
 * can neither restrict a server nor redefine a restricted one.
 *
 * @module
 */
/** Matches @github/copilot-sdk MCPServerConfig union. */
export type MCPServerConfig = MCPLocalServerConfig | MCPRemoteServerConfig;
export interface MCPLocalServerConfig {
    type?: "local" | "stdio";
    command: string;
    args: string[];
    tools: string[];
    env?: Record<string, string>;
    cwd?: string;
    timeout?: number;
    /**
     * PilotSwarm-only deployment tag (not a Copilot SDK field): marks this
     * server as part of the deployment default MCP set, granted to agents
     * with `inheritDefaultMcpServers: true`. Stripped by the worker before
     * configs reach the Copilot CLI.
     */
    default?: boolean;
    /**
     * PilotSwarm-only deployment tag (not a Copilot SDK field): the agent
     * identities allowed to reference this server. Any other reference is
     * dropped at load. Entries are `name` (a deployment agent) or
     * `namespace:name` (an agent from the plugin/package with that
     * namespace; for a package, its shared copy only). Stripped by the
     * worker before configs reach the Copilot CLI. Ignored in package dirs.
     */
    allowedAgents?: string[];
}
export interface MCPRemoteServerConfig {
    type: "http" | "sse";
    url: string;
    tools: string[];
    headers?: Record<string, string>;
    timeout?: number;
    /**
     * PilotSwarm-only deployment tag (not a Copilot SDK field): marks this
     * server as part of the deployment default MCP set, granted to agents
     * with `inheritDefaultMcpServers: true`. Stripped by the worker before
     * configs reach the Copilot CLI.
     */
    default?: boolean;
    /**
     * PilotSwarm-only deployment tag (not a Copilot SDK field): the agent
     * identities allowed to reference this server. Any other reference is
     * dropped at load. Entries are `name` (a deployment agent) or
     * `namespace:name` (an agent from the plugin/package with that
     * namespace; for a package, its shared copy only). Stripped by the
     * worker before configs reach the Copilot CLI. Ignored in package dirs.
     */
    allowedAgents?: string[];
}
/** The parts of a loaded agent that an `allowedAgents` entry is matched against. */
export interface McpAllowlistAgent {
    name: string;
    /** Plugin namespace: the plugin.json name of the dir the agent came from. */
    namespace?: string | null;
    /** Set for agents loaded from an installed agent package. */
    packageId?: string | null;
    /** Which copy of the package the agent came from. */
    packageScope?: "shared" | "user" | null;
}
/**
 * Does an `allowedAgents` list admit this agent?
 *
 * Entries are agent identities, in the two forms the loader already uses:
 *
 *   `name`            a DEPLOYMENT agent (baked plugin dir or inline config)
 *                     with that name. Never a package agent, even one with
 *                     the same name — any shared package could ship one.
 *   `namespace:name`  the agent `name` from the plugin or package whose
 *                     namespace is `namespace` (a package's namespace is its
 *                     plugin.json name). For a package agent this admits only
 *                     the SHARED copy: a user-scope copy of the same package
 *                     is a different package, and a personal copy must not be
 *                     a way to borrow a restricted server.
 *
 * Returns false for a missing agent (base-agent and direct-config references
 * carry no agent), so a restricted server never reaches the every-session map.
 */
export declare function mcpAllowlistAdmits(allowed: Iterable<string>, agent: McpAllowlistAgent | null | undefined): boolean;
/**
 * Names of servers that a deployment restricts with `allowedAgents`, read
 * from the given plugin dirs' `.mcp.json` files. Used at package publish
 * time: a package that defines one of these names would be dropped by every
 * worker, so validation rejects it up front.
 */
export declare function listRestrictedMcpServerNames(pluginDirs: string[]): string[];
/**
 * Every server name the deployment's plugin dirs define. A package may not
 * define any of these: the catalog is flat, and a package entry with a
 * deployment name would replace the server every agent in the fleet talks
 * to. The worker drops such entries at load; publish rejects them up front.
 */
export declare function listDeploymentMcpServerNames(pluginDirs: string[]): string[];
/**
 * Load MCP server config from a `.mcp.json` file in a plugin directory.
 *
 * @param pluginDir - Path to the plugin directory (looks for `.mcp.json` at root).
 * @returns Record of server name → config. Empty record if no `.mcp.json` found.
 */
export declare function loadMcpConfig(pluginDir: string): Record<string, MCPServerConfig>;
//# sourceMappingURL=mcp-loader.d.ts.map