import type { ScopeMapping } from '../../types/index.js';
/**
 * Built-in scope definitions for Planu hosted MCP.
 * Consumers can override/extend via AuthConfig.scopeMappings.
 */
export declare const BUILTIN_SCOPE_MAPPINGS: ScopeMapping[];
/**
 * Resolve the set of allowed tool names given the granted scopes.
 * Merges built-in mappings with any custom mappings from the config.
 *
 * @param grantedScopes - Scopes present in the validated token.
 * @param customMappings - Additional scope→tools mappings from AuthConfig.
 * @returns Deduplicated list of tool names the caller may invoke.
 */
export declare function resolveAllowedTools(grantedScopes: string[], customMappings?: Record<string, string[]>): string[];
/**
 * Check whether a specific tool is allowed given the resolved tool set.
 * When allowedTools is empty (no auth configured), all tools are accessible.
 */
export declare function isToolAllowed(toolName: string, allowedTools: string[]): boolean;
//# sourceMappingURL=scope-mapper.d.ts.map