/**
 * Agent Identity Tools — MCP surface for ADR-185 Parts 1+2.
 *
 * Five session-auth-only tools (Part 1 shipped 1-3, Part 2 adds 4-5):
 *   - pica_create_agent_identity
 *   - pica_issue_agent_grant
 *   - pica_list_my_agent_grants
 *   - pica_revoke_agent_grant       (Part 2)
 *   - pica_get_agent_activity       (Part 2)
 *
 * All five route through the PICA HTTP API. The backing routes refuse
 * `pica_grant_` callers with 403 `session_auth_required` per AC 12, so
 * the session-auth-only guarantee is enforced once at the API layer and
 * honoured by both stdio and HTTP MCP transports automatically. The
 * HTTP dispatcher in app/api/mcp/route.ts also rejects at the tool layer
 * via the SESSION_AUTH_ONLY_TOOLS set (belt-and-braces).
 *
 * Subject (user_id) is derived from the auth context — never from tool
 * arguments (ADR-184 rule 1 / ADR-185 rule 1).
 */
import { PicaClient } from "@withpica/mcp-sdk";
import { ToolDefinition, ToolExecutor } from "./index.js";
export declare class AgentIdentityTools {
    private pica;
    constructor(pica: PicaClient);
    getTools(): Array<{
        definition: ToolDefinition;
        executor: ToolExecutor;
    }>;
    private createIdentity;
    private issueGrant;
    private listMyGrants;
    private revokeGrant;
    private getActivity;
}
//# sourceMappingURL=agent-identity.d.ts.map