/**
 * Request Body Inspector — scans outbound request bodies for credential-like
 * patterns that may indicate an agent is trying to exfiltrate secrets.
 *
 * This is a defence-in-depth measure. Even though the agent never sees
 * decrypted credentials directly, an agent could attempt to send previously
 * obtained secrets (e.g. from environment variables, config files) through
 * Gate to an attacker-controlled domain. The body inspector catches this.
 *
 * Sensitivity modes:
 *   - "off"   — no scanning (fastest, least secure)
 *   - "warn"  — scan and log matches but allow the request through
 *   - "block" — scan and block requests containing credential patterns (default)
 */
export type BodyInspectionMode = 'off' | 'warn' | 'block';
export interface InspectionResult {
    /** Whether any credential-like patterns were found */
    suspicious: boolean;
    /** Human-readable descriptions of what was found */
    matches: string[];
}
export declare class BodyInspector {
    /**
     * Scan a request body string for credential-like patterns.
     *
     * @param body The raw request body as a string
     * @returns An InspectionResult indicating whether suspicious patterns were found
     */
    inspect(body: string): InspectionResult;
}
//# sourceMappingURL=body-inspector.d.ts.map