import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
export declare class ConnectedAppScopeCheck implements SecurityCheck {
    readonly id = "connected-app-scope";
    readonly name = "Connected App OAuth Scopes & Token Policy";
    readonly category = "App Security";
    readonly description = "Flags connected apps granting Full OAuth scope or using infinite refresh token policies: both expand the blast radius of a compromised token";
    run(ctx: AuditContext): Promise<CheckResult>;
}
//# sourceMappingURL=ConnectedAppScopeCheck.d.ts.map