/**
 * Authentication Assessor
 * Evaluates if OAuth is appropriate for the deployment model (local vs remote).
 *
 * Detection Logic:
 * 1. Check if server uses OAuth (serverInfo/manifest)
 * 2. Analyze if tools access local resources (files, apps, OS features)
 * 3. If OAuth + no local deps = recommend cloud deployment
 * 4. If OAuth + local deps = warn about mixed model
 */
import { BaseAssessor } from "./BaseAssessor.js";
import { AssessmentContext } from "../AssessmentOrchestrator.js";
import type { AuthenticationAssessment } from "../../../lib/assessmentTypes.js";
export declare class AuthenticationAssessor extends BaseAssessor {
    /**
     * Run authentication assessment
     */
    assess(context: AssessmentContext): Promise<AuthenticationAssessment>;
    /**
     * Analyze transport security configuration
     */
    private analyzeTransportSecurity;
    /**
     * Detect authentication method
     */
    private detectAuthMethod;
    /**
     * Detect transport type from context
     */
    private detectTransportType;
    /**
     * Evaluate if authentication setup is appropriate
     */
    private evaluateAppropriateness;
    /**
     * Generate recommendation based on analysis
     */
    private generateRecommendation;
    /**
     * Evaluate overall status based on appropriateness
     */
    private evaluateStatus;
    /**
     * Generate explanation
     */
    private generateExplanation;
    /**
     * Generate recommendations
     */
    private generateRecommendations;
    /**
     * Analyze source code for authentication configuration issues (Issue #62)
     *
     * Detects:
     * - Environment-dependent auth (process.env.SECRET, process.env.AUTH_KEY, etc.)
     * - Fail-open patterns (auth bypassed when env var missing with || or ?? fallback)
     * - Development mode warnings (dev mode bypasses that weaken security)
     * - Hardcoded secrets (credentials that should be in env vars)
     */
    private analyzeAuthConfiguration;
    /**
     * Deduplicate findings by file, line, and type
     */
    private deduplicateFindings;
    /**
     * Build enrichment data for Stage B Claude validation (Issue #195)
     *
     * Provides Claude with:
     * - Tool inventory with auth-related capabilities
     * - OAuth pattern coverage (what patterns were checked)
     * - API key pattern coverage
     * - Transport security summary
     * - Flags for tools with sensitive auth operations
     */
    private buildEnrichmentData;
    /**
     * Build tool inventory with auth-related capabilities
     */
    private buildAuthToolInventory;
    /**
     * Infer auth-related capabilities from tool name and description
     */
    private inferAuthCapabilities;
    /**
     * Build OAuth pattern coverage info
     */
    private buildOAuthPatternCoverage;
    /**
     * Build API key pattern coverage info
     */
    private buildAPIKeyPatternCoverage;
    /**
     * Build transport security summary
     */
    private buildTransportSecuritySummary;
    /**
     * Generate flags for tools with sensitive auth operations
     */
    private generateAuthFlags;
}
//# sourceMappingURL=AuthenticationAssessor.d.ts.map