/**
 * Excessive Permissions Analyzer (Issue #144, Challenge #22)
 * Detects when tools exceed their declared annotation scope
 *
 * Extracted from SecurityResponseAnalyzer.ts for modularity (Issue #179)
 */
import { CompatibilityCallToolResult } from "@modelcontextprotocol/sdk/types.js";
/**
 * Result of excessive permissions scope analysis (Issue #144, Challenge #22)
 * Detects when tools exceed their declared annotation scope:
 * - CWE-250: Execution with Unnecessary Privileges (scope violation)
 * - CWE-269: Improper Privilege Management (scope escalation)
 */
export interface ExcessivePermissionsScopeResult {
    detected: boolean;
    violationType: "SCOPE_VIOLATION" | "SCOPE_ESCALATION" | "SAFE" | "UNKNOWN";
    actualScope?: string;
    triggerPayload?: string;
    cweIds: string[];
    evidence?: string;
}
/**
 * Analyzes responses for excessive permissions scope violations
 *
 * Detects when tools exceed their declared annotation scope:
 * - scope_violation: Tool performed privileged action despite restrictive annotations
 * - scope_escalation: Keyword triggered hidden admin/privilege mode
 * - scope_enforced: Tool properly blocked the privileged action (safe)
 *
 * CWE-250: Execution with Unnecessary Privileges
 * CWE-269: Improper Privilege Management
 */
export declare class ExcessivePermissionsAnalyzer {
    private safeDetector;
    constructor();
    /**
     * Analyze response for excessive permissions scope violations (Issue #144, Challenge #22)
     */
    analyze(response: CompatibilityCallToolResult): ExcessivePermissionsScopeResult;
}
//# sourceMappingURL=ExcessivePermissionsAnalyzer.d.ts.map