/**
 * Blacklist Bypass Analyzer (Issue #110, Challenge #11)
 * Detects incomplete blacklist security controls being bypassed
 *
 * Extracted from SecurityResponseAnalyzer.ts for modularity (Issue #179)
 */
import { CompatibilityCallToolResult } from "@modelcontextprotocol/sdk/types.js";
/**
 * Result of blacklist bypass response analysis (Issue #110, Challenge #11)
 * Detects incomplete blacklist security controls being bypassed
 */
export interface BlacklistBypassResult {
    detected: boolean;
    bypassType: "BLACKLIST_BYPASS" | "ALLOWLIST_BLOCKED" | "UNKNOWN";
    bypassMethod?: string;
    evidence?: string;
}
/**
 * Analyzes responses for blacklist bypass vulnerabilities
 *
 * This analyzer extracts JSON metadata from tool responses to detect:
 * - VULNERABLE: bypass_used: true, blacklist_check: "passed"
 * - SAFE: execution_blocked: true, allowlist_used: true
 */
export declare class BlacklistBypassAnalyzer {
    private safeDetector;
    /**
     * Vulnerable patterns - blacklist bypassed (Challenge #11)
     */
    private static readonly VULNERABLE_PATTERNS;
    /**
     * Safe patterns - allowlist enforced or execution blocked (hardened)
     */
    private static readonly SAFE_PATTERNS;
    constructor();
    /**
     * Analyze response for blacklist bypass patterns (Issue #110, Challenge #11)
     *
     * @param response The tool response to analyze
     * @returns Analysis result with bypass detection status
     */
    analyze(response: CompatibilityCallToolResult): BlacklistBypassResult;
}
//# sourceMappingURL=BlacklistBypassAnalyzer.d.ts.map