/**
 * RecourseOS MCP Gateway Mode
 *
 * Proxies MCP tool calls through RecourseOS evaluation.
 * Agents connect to this gateway instead of directly to MCP servers.
 * Dangerous tool calls are blocked before reaching the underlying server.
 *
 * Architecture:
 *   Agent → RecourseOS Gateway → [Evaluate] → Upstream MCP Server
 *                                    ↓
 *                              Block if dangerous
 */
import { Readable, Writable } from 'stream';
export type RiskLevel = 'allow' | 'warn' | 'escalate' | 'block';
/**
 * Parse and validate risk levels from a comma-separated string.
 * Invalid values are filtered out with a warning.
 */
export declare function parseRiskLevels(input: string): RiskLevel[];
export interface GatewayConfig {
    upstreams: UpstreamServer[];
    allowedRiskLevels: ('allow' | 'warn' | 'escalate' | 'block')[];
    verbose?: boolean;
    attestation?: boolean;
}
interface UpstreamServer {
    name: string;
    command: string;
    args?: string[];
    env?: Record<string, string>;
}
/**
 * Start the MCP Gateway
 */
export declare function startGateway(config: GatewayConfig, input?: Readable, output?: Writable): Promise<void>;
/**
 * Load gateway config from file or environment
 */
export declare function loadGatewayConfig(configPath?: string): GatewayConfig;
export {};
//# sourceMappingURL=gateway.d.ts.map