/**
 * Local Salesforce service-account integration tools.
 *
 * This source is opt-in. Materialize its tools with
 * `loadRemoteToolsFromSource` and pass the result through an agent's `tools`
 * field. It never registers globally or sends Salesforce credentials to
 * Veryfront APIs.
 */
import type { RemoteToolSource } from "../tool/index.js";
/** Project environment variables required by the local Salesforce service-account source. */
export declare const SALESFORCE_SERVICE_ACCOUNT_ENV_VARS: readonly ["SALESFORCE_SERVICE_ACCOUNT_CLIENT_ID", "SALESFORCE_SERVICE_ACCOUNT_CLIENT_SECRET", "SALESFORCE_SERVICE_ACCOUNT_LOGIN_URL"];
type OriginBoundFetchFactory = (baseUrl: string) => typeof fetch;
/** Options for the local Salesforce service-account source. */
export interface SalesforceServiceAccountToolSourceOptions {
    /** Exact canonical Salesforce tool names exposed by this source. */
    allowedTools: readonly string[];
}
interface SalesforceServiceAccountToolSourceTransportOptions extends SalesforceServiceAccountToolSourceOptions {
    createOriginBoundFetch: OriginBoundFetchFactory;
}
/**
 * Create a local Salesforce service-account tool source.
 *
 * Materialize the returned source with `loadRemoteToolsFromSource` and pass
 * the result through an agent's `tools` field. The source reads credentials
 * lazily from the active project environment when a tool executes.
 */
export declare function createSalesforceServiceAccountToolSource(options: SalesforceServiceAccountToolSourceOptions): RemoteToolSource;
/** @internal Test seam for the host-owned origin-bound transport. */
export declare function createSalesforceServiceAccountToolSourceWithTransport(options: SalesforceServiceAccountToolSourceTransportOptions): RemoteToolSource;
export {};
//# sourceMappingURL=salesforce-service-account.d.ts.map