import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
export declare class AgentActionSurfaceCheck implements SecurityCheck {
    readonly id = "agent-action-surface";
    readonly name = "Agent Action Surface";
    readonly category = "AI & Agents";
    readonly description = "Inventories Agentforce topics and actions (GenAiPlugin / GenAiFunction), flagging write-capable actions (Apex/Flow that create, update, or delete) and agents with an unusually large action surface. Write-capable actions on an exposed agent let a prompt injection take actions, not just read data.";
    readonly dependsOnCache: readonly ['agentInventory', 'agentAccess'];
    run(ctx: AuditContext): Promise<CheckResult>;
    private isWriteCapable;
    private queryWithFallback;
}
//# sourceMappingURL=AgentActionSurfaceCheck.d.ts.map