import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
/**
 * Flags two Experience Cloud Network settings that widen the unauthenticated
 * guest surface and are not covered by the self-registration / guest-user checks:
 *   - OptionsGuestFileAccessEnabled: guests can access public files (ContentVersion/
 *     Attachment), enabling file enumeration and download.
 *   - OptionsGuestMemberVisibility: guests can see other site members (User records),
 *     leaking member identities to unauthenticated visitors.
 */
export declare class GuestSiteOptionsCheck implements SecurityCheck {
    readonly id = "guest-site-options";
    readonly name = "Experience Cloud Guest Site Options";
    readonly category = "Access Control";
    readonly description = "Checks Experience Cloud sites for guest file access and guest member visibility, which expose files and member identities to unauthenticated visitors";
    run(ctx: AuditContext): Promise<CheckResult>;
}
//# sourceMappingURL=GuestSiteOptionsCheck.d.ts.map