import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
export declare class AgentUserPrivilegeCheck implements SecurityCheck {
    readonly id = "agent-user-privilege";
    readonly name = "Agent User Privilege";
    readonly category = "AI & Agents";
    readonly description = "Flags Agentforce run-as / agent users whose effective access is over-broad: Modify/View All Data, write access to many objects, or read access to data classified as sensitive. An injected prompt can exfiltrate or mutate exactly what the agent user can reach.";
    readonly dependsOnCache: readonly ['agentUsers', 'agentAccess'];
    run(ctx: AuditContext): Promise<CheckResult>;
    private evaluateUser;
    private querySensitiveObjects;
}
//# sourceMappingURL=AgentUserPrivilegeCheck.d.ts.map