/** Public API contract for hosted runtime allowed tool names. */
export type HostedRuntimeAllowedToolNames = readonly string[] | ReadonlySet<string> | null;
/** Input payload for resolving hosted runtime allowed tools. */
export type ResolveHostedRuntimeAllowedToolNamesInput = {
    allowedToolNames?: HostedRuntimeAllowedToolNames;
    localToolNames: Iterable<string>;
    availableSkillIds?: readonly string[];
    /**
     * Provenance marker: the selector was built from the agent's own trusted
     * config (no request-level `allowedTools` override), which carries the
     * legacy runtime-essential inclusion semantics. Config-derived selectors
     * keep universal skill infrastructure when empty and keep skill delegation
     * (`invoke_agent`) for empty and non-empty configured sets alike.
     * Request- or delegation-derived selectors must leave this unset so they
     * never gain essential tools the caller did not request.
     */
    configDerivedSelector?: boolean;
};
/** Normalize hosted runtime allowed tools. */
export declare function normalizeHostedRuntimeAllowedToolNames(toolNames: HostedRuntimeAllowedToolNames | undefined): ReadonlySet<string> | null;
/** Resolve allowed tools after applying runtime-essential hosted tool policy. */
export declare function resolveHostedRuntimeAllowedToolNames(input: ResolveHostedRuntimeAllowedToolNamesInput): ReadonlySet<string> | null;
//# sourceMappingURL=runtime-essential-tools.d.ts.map