import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
/**
 * Finds the profiles / permission sets that grant a bulk data-extraction
 * capability — the mechanisms an attacker (or a departing insider) uses to
 * exfiltrate en masse, which the report/sharing checks do not cover:
 *   - "Weekly Data Export" (PermissionsDataExport): full-org CSV export.
 *   - "API Enabled" combined with View/Modify All Data: unrestricted Bulk/REST pull
 *     of every record.
 * The toxic combination (export or API + ViewAll) is graded highest.
 */
export declare class DataExportAccessCheck implements SecurityCheck {
    readonly id = "data-export-access";
    readonly name = "Mass Data Export Access";
    readonly category = "Data Access Control";
    readonly description = "Flags profiles/permission sets granting Weekly Data Export or API access combined with View/Modify All Data \u2014 the bulk data-exfiltration capability";
    run(ctx: AuditContext): Promise<CheckResult>;
}
//# sourceMappingURL=DataExportAccessCheck.d.ts.map