export interface SecurityViolation {
    type: 'HARDCODED_SECRET' | 'WEAK_PERMISSIONS' | 'INSECURE_CONFIG' | 'INJECTION_RISK' | 'EXPOSURE_RISK';
    severity: 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';
    message: string;
    file?: string;
    line?: number;
    recommendation: string;
}
export interface SecurityAuditResult {
    violations: SecurityViolation[];
    passed: boolean;
    summary: {
        critical: number;
        high: number;
        medium: number;
        low: number;
    };
}
export declare class ConfigSecurityValidator {
    private logger;
    private readonly HARDCODED_SECRET_PATTERNS;
    private readonly SENSITIVE_KEYWORDS;
    private readonly DANGEROUS_PATTERNS;
    auditConfigurationSecurity(projectPath: string): Promise<SecurityAuditResult>;
    private checkFilePermissions;
    private scanForHardcodedSecrets;
    private checkConfigurationFiles;
    private checkEnvironmentVariableUsage;
    private findSourceFiles;
    private getLineNumber;
    private generateSummary;
    validateApiKeyFormat(apiKey: string, provider: 'openai' | 'openrouter' | 'anthropic'): boolean;
    generateSecurityRecommendations(auditResult: SecurityAuditResult): string[];
}
export declare const configSecurityValidator: ConfigSecurityValidator;
//# sourceMappingURL=config-security-validator.d.ts.map