/**
 * RecourseOS Gateway MCP Server - v2 Enforcement Architecture
 *
 * Key invariant: Agents never receive raw mutation capability.
 * They only receive consequence-aware gateway tools.
 *
 * The agent is allowed to propose. The gateway decides whether the world changes.
 *
 * IMPORTANT: gateway_approve and gateway_reject are NOT exposed to agents.
 * Approval is a human-only control plane action.
 */
import type { Readable, Writable } from 'stream';
import { type GatewayPolicy, type Environment } from './types.js';
export interface GatewayMcpServerOptions {
    verbose?: boolean;
    environment?: Environment;
    policy?: Partial<GatewayPolicy>;
    policyFile?: string;
    agentId?: string;
}
export declare function runGatewayMcpServer(input?: Readable, output?: Writable, options?: GatewayMcpServerOptions): Promise<void>;
//# sourceMappingURL=mcp-server.d.ts.map