/**
 * Agentic QE v3 - Security Compliance MCP Tool
 *
 * qe/security/scan - Security scanning (SAST/DAST) and compliance validation
 *
 * This tool wraps the security-compliance domain service.
 */
import { MCPToolBase, MCPToolConfig, MCPToolContext } from '../base';
import { ToolResult } from '../../types';
export interface SecurityScanParams {
    target?: string;
    scanType?: ('sast' | 'dast' | 'dependency' | 'secret')[];
    compliance?: ('owasp' | 'gdpr' | 'hipaa' | 'pci-dss' | 'soc2')[];
    dastUrl?: string;
    depth?: 'quick' | 'standard' | 'deep';
    failOnSeverity?: 'critical' | 'high' | 'medium' | 'low';
    [key: string]: unknown;
}
export interface SecurityScanResult {
    scanId: string;
    summary: ScanSummary;
    vulnerabilities: Vulnerability[];
    complianceResults?: ComplianceResult[];
    recommendations: string[];
    passed: boolean;
}
export interface ScanSummary {
    critical: number;
    high: number;
    medium: number;
    low: number;
    informational: number;
    totalFiles: number;
    scanDurationMs: number;
}
export interface Vulnerability {
    id: string;
    title: string;
    severity: 'critical' | 'high' | 'medium' | 'low' | 'informational';
    category: string;
    location: VulnerabilityLocation;
    description: string;
    remediation: string;
    cveId?: string;
    cweId?: string;
    references: string[];
}
export interface VulnerabilityLocation {
    file: string;
    line?: number;
    column?: number;
    snippet?: string;
    dependency?: {
        name: string;
        version: string;
    };
}
export interface ComplianceResult {
    standard: string;
    passed: boolean;
    score: number;
    violations: ComplianceViolation[];
}
export interface ComplianceViolation {
    ruleId: string;
    ruleName: string;
    location: VulnerabilityLocation;
    details: string;
    remediation: string;
}
export declare class SecurityScanTool extends MCPToolBase<SecurityScanParams, SecurityScanResult> {
    readonly config: MCPToolConfig;
    execute(params: SecurityScanParams, context: MCPToolContext): Promise<ToolResult<SecurityScanResult>>;
}
//# sourceMappingURL=scan.d.ts.map