/**
 * State-Based Auth Bypass Analyzer (Issue #92, Challenge #7)
 * Detects privilege escalation via shared mutable state between tools
 *
 * Extracted from SecurityResponseAnalyzer.ts for modularity (Issue #179)
 */
import { CompatibilityCallToolResult } from "@modelcontextprotocol/sdk/types.js";
/**
 * Result of cross-tool state-based auth bypass analysis (Issue #92, Challenge #7)
 * Detects privilege escalation via shared mutable state between tools
 */
export interface StateBasedAuthResult {
    vulnerable: boolean;
    safe: boolean;
    stateDependency: "SHARED_STATE" | "INDEPENDENT" | "UNKNOWN";
    evidence: string;
}
/**
 * Analyzes responses for cross-tool state-based authorization bypass
 *
 * Vulnerable pattern: Tool checks shared state (e.g., config_state["admin_mode"])
 * that can be modified by another tool (e.g., config_modifier)
 *
 * Safe pattern: Tool uses independent per-request authorization,
 * indicated by shared_state_checked: false or independent_auth_required: true
 */
export declare class StateBasedAuthAnalyzer {
    private safeDetector;
    constructor();
    /**
     * Analyze response for cross-tool state-based authorization bypass (Issue #92)
     * Detects Challenge #7: Privilege escalation via shared mutable state
     */
    analyze(response: CompatibilityCallToolResult): StateBasedAuthResult;
}
//# sourceMappingURL=StateBasedAuthAnalyzer.d.ts.map