/**
 * Local access profiles for CLI, MCP, SDK, and optional HTTP server.
 */
export declare const ACCESS_PROFILE_SCHEMA = "todos.access_profile.v1";
export declare const ACCESS_PROFILES: readonly ["read_only", "agent_safe", "minimal", "standard", "full", "admin"];
export type AccessProfile = (typeof ACCESS_PROFILES)[number];
export interface AccessProfileMeta {
    name: AccessProfile;
    description: string;
    surfaces: Array<"cli" | "mcp" | "sdk" | "http">;
    allows_mutations: boolean;
    allows_admin: boolean;
}
export declare const READ_ONLY_TOOLS: Set<string>;
export declare const MINIMAL_TOOLS: Set<string>;
export declare const AGENT_SAFE_TOOLS: Set<string>;
export declare const STANDARD_EXCLUDED: Set<string>;
export declare const ADMIN_ONLY_TOOLS: Set<string>;
export declare const DANGEROUS_TOOLS: Set<string>;
export declare function resolveAccessProfile(envValue?: string): AccessProfile;
export declare function getAccessProfileMeta(profile?: AccessProfile): AccessProfileMeta;
export declare function listAccessProfiles(): AccessProfileMeta[];
export declare function shouldRegisterToolForProfile(toolName: string, profile?: AccessProfile): boolean;
export declare function assertToolAllowed(toolName: string, profile?: AccessProfile): void;
export declare function getProfileToolCount(profile: AccessProfile, allTools: string[]): number;
export declare function getHeadlessUsageNotes(profile?: AccessProfile): string[];
//# sourceMappingURL=access-profiles.d.ts.map