/**
 * Canonical runtime capability identifiers.
 *
 * Capability ids are part of the shared permission contract and should only be
 * declared once. App-layer modules may map tools into capabilities, but they
 * should not invent or duplicate the ids themselves.
 */
export const RUNTIME_CAPABILITY = {
    FILESYSTEM_READ: 'filesystem.read',
    FILESYSTEM_WRITE: 'filesystem.write',
    SHELL_EXECUTE: 'shell.execute',
    SPREADSHEET_MUTATE: 'spreadsheet.mutate',
    SUBAGENT_SPAWN: 'subagent.spawn'
};
export const RUNTIME_CAPABILITY_IDS = Object.values(RUNTIME_CAPABILITY);
//# sourceMappingURL=permission-capabilities.js.map