/**
 * Shared types for the agent-grant system.
 *
 * A mailpouch deployment typically serves more than one MCP client
 * (Claude Desktop, Claude Code, other hosts). Every client identifies
 * itself via an OAuth client_id issued by DCR. An AgentGrant records the
 * user's decision about that specific client: is it approved, what can
 * it do, when does the approval expire.
 *
 * Grants are orthogonal to the global permission preset. The global
 * preset is still the upper bound — a grant's effective permissions are
 * intersected with the global config before tool dispatch — but within
 * that ceiling each agent has its own independently-revocable surface.
 */
export {};
//# sourceMappingURL=types.js.map