/**
 * postgres-mcp - Security Tool Schemas
 *
 * Input validation and output schemas for security tools.
 * 9 tools: audit, firewall status/rules, mask data, user privileges,
 * sensitive tables, SSL status, encryption status, password validate.
 */
import { z } from "zod";
/**
 * pg_security_audit — comprehensive security posture check
 */
export declare const SecurityAuditSchemaBase: z.ZodObject<{
    limit: z.ZodOptional<z.ZodNumber>;
    includeHba: z.ZodOptional<z.ZodBoolean>;
}, z.core.$strip>;
export declare const SecurityAuditSchema: z.ZodPreprocess<z.ZodObject<{
    limit: z.ZodOptional<z.ZodNumber>;
    includeHba: z.ZodOptional<z.ZodBoolean>;
}, z.core.$strip>>;
/**
 * pg_security_firewall_status — pg_hba.conf summary
 */
export declare const FirewallStatusSchemaBase: z.ZodObject<{}, z.core.$strict>;
export declare const FirewallStatusSchema: z.ZodPreprocess<z.ZodObject<{}, z.core.$strict>>;
/**
 * pg_security_firewall_rules — detailed pg_hba.conf listing
 */
export declare const FirewallRulesSchemaBase: z.ZodObject<{
    user: z.ZodOptional<z.ZodString>;
    type: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
export declare const FirewallRulesSchema: z.ZodPreprocess<z.ZodObject<{
    user: z.ZodOptional<z.ZodString>;
    type: z.ZodOptional<z.ZodString>;
}, z.core.$strip>>;
/**
 * pg_security_mask_data — data masking (pure JS, no DB)
 */
export declare const MaskDataSchemaBase: z.ZodObject<{
    value: z.ZodOptional<z.ZodString>;
    type: z.ZodOptional<z.ZodString>;
    keepFirst: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
    keepLast: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
    maskChar: z.ZodOptional<z.ZodDefault<z.ZodString>>;
}, z.core.$strip>;
export declare const MaskDataSchema: z.ZodPreprocess<z.ZodObject<{
    value: z.ZodString;
    type: z.ZodString;
    keepFirst: z.ZodDefault<z.ZodNumber>;
    keepLast: z.ZodDefault<z.ZodNumber>;
    maskChar: z.ZodDefault<z.ZodString>;
}, z.core.$strip>>;
/**
 * pg_security_user_privileges — role/privilege report
 */
export declare const UserPrivilegesSchemaBase: z.ZodObject<{
    user: z.ZodOptional<z.ZodString>;
    includeRoles: z.ZodDefault<z.ZodBoolean>;
    summary: z.ZodDefault<z.ZodBoolean>;
    includeGrants: z.ZodDefault<z.ZodBoolean>;
    limit: z.ZodOptional<z.ZodNumber>;
}, z.core.$strip>;
export declare const UserPrivilegesSchema: z.ZodPreprocess<z.ZodObject<{
    user: z.ZodOptional<z.ZodString>;
    includeRoles: z.ZodDefault<z.ZodBoolean>;
    summary: z.ZodDefault<z.ZodBoolean>;
    includeGrants: z.ZodDefault<z.ZodBoolean>;
    limit: z.ZodOptional<z.ZodNumber>;
}, z.core.$strip>>;
/**
 * pg_security_sensitive_tables — detect columns with sensitive data
 */
export declare const SensitiveTablesSchemaBase: z.ZodObject<{
    schema: z.ZodOptional<z.ZodString>;
    patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
    limit: z.ZodOptional<z.ZodNumber>;
}, z.core.$strip>;
export declare const SensitiveTablesSchema: z.ZodPreprocess<z.ZodPipe<z.ZodObject<{
    schema: z.ZodOptional<z.ZodString>;
    patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
    limit: z.ZodOptional<z.ZodNumber>;
}, z.core.$strip>, z.ZodTransform<{
    schema: string | undefined;
    patterns: string[];
    limit: number;
}, {
    schema?: string | undefined;
    patterns?: string[] | undefined;
    limit?: number | undefined;
}>>>;
/**
 * pg_security_ssl_status — SSL/TLS connection status
 */
export declare const SSLStatusSchemaBase: z.ZodObject<{}, z.core.$strict>;
export declare const SSLStatusSchema: z.ZodPreprocess<z.ZodObject<{}, z.core.$strict>>;
/**
 * pg_security_encryption_status — encryption configuration
 */
export declare const EncryptionStatusSchemaBase: z.ZodObject<{}, z.core.$strict>;
export declare const EncryptionStatusSchema: z.ZodPreprocess<z.ZodObject<{}, z.core.$strict>>;
/**
 * pg_security_password_validate — password strength check (pure JS)
 */
export declare const PasswordValidateSchemaBase: z.ZodObject<{
    password: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
export declare const PasswordValidateSchema: z.ZodPreprocess<z.ZodObject<{
    password: z.ZodString;
}, z.core.$strip>>;
/**
 * pg_security_audit output
 */
export declare const SecurityAuditOutputSchema: z.ZodObject<{
    findings: z.ZodOptional<z.ZodArray<z.ZodObject<{
        check: z.ZodString;
        severity: z.ZodString;
        status: z.ZodString;
        message: z.ZodString;
        recommendation: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>>;
    summary: z.ZodOptional<z.ZodObject<{
        total: z.ZodNumber;
        passed: z.ZodNumber;
        warnings: z.ZodNumber;
        critical: z.ZodNumber;
    }, z.core.$strip>>;
    success: z.ZodOptional<z.ZodBoolean>;
    error: z.ZodOptional<z.ZodString>;
    code: z.ZodOptional<z.ZodString>;
    category: z.ZodOptional<z.ZodString>;
    recoverable: z.ZodOptional<z.ZodBoolean>;
    suggestion: z.ZodOptional<z.ZodString>;
    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
/**
 * pg_security_firewall_status output
 */
export declare const FirewallStatusOutputSchema: z.ZodObject<{
    available: z.ZodOptional<z.ZodBoolean>;
    totalRules: z.ZodOptional<z.ZodNumber>;
    rulesByType: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
    authMethods: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
    hostsslEnforced: z.ZodOptional<z.ZodBoolean>;
    message: z.ZodOptional<z.ZodString>;
    success: z.ZodOptional<z.ZodBoolean>;
    error: z.ZodOptional<z.ZodString>;
    code: z.ZodOptional<z.ZodString>;
    category: z.ZodOptional<z.ZodString>;
    recoverable: z.ZodOptional<z.ZodBoolean>;
    suggestion: z.ZodOptional<z.ZodString>;
    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
/**
 * pg_security_firewall_rules output
 */
export declare const FirewallRulesOutputSchema: z.ZodObject<{
    rules: z.ZodOptional<z.ZodArray<z.ZodObject<{
        line_number: z.ZodOptional<z.ZodNumber>;
        type: z.ZodOptional<z.ZodString>;
        database: z.ZodOptional<z.ZodUnknown>;
        user_name: z.ZodOptional<z.ZodUnknown>;
        address: z.ZodOptional<z.ZodNullable<z.ZodString>>;
        netmask: z.ZodOptional<z.ZodNullable<z.ZodString>>;
        auth_method: z.ZodOptional<z.ZodString>;
        options: z.ZodOptional<z.ZodUnknown>;
    }, z.core.$strip>>>;
    count: z.ZodOptional<z.ZodNumber>;
    success: z.ZodOptional<z.ZodBoolean>;
    error: z.ZodOptional<z.ZodString>;
    code: z.ZodOptional<z.ZodString>;
    category: z.ZodOptional<z.ZodString>;
    recoverable: z.ZodOptional<z.ZodBoolean>;
    suggestion: z.ZodOptional<z.ZodString>;
    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
/**
 * pg_security_mask_data output
 */
export declare const MaskDataOutputSchema: z.ZodObject<{
    original: z.ZodOptional<z.ZodString>;
    masked: z.ZodOptional<z.ZodString>;
    type: z.ZodOptional<z.ZodString>;
    warning: z.ZodOptional<z.ZodString>;
    success: z.ZodOptional<z.ZodBoolean>;
    error: z.ZodOptional<z.ZodString>;
    code: z.ZodOptional<z.ZodString>;
    category: z.ZodOptional<z.ZodString>;
    recoverable: z.ZodOptional<z.ZodBoolean>;
    suggestion: z.ZodOptional<z.ZodString>;
    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
/**
 * pg_security_user_privileges output
 */
export declare const UserPrivilegesOutputSchema: z.ZodObject<{
    users: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
    count: z.ZodOptional<z.ZodNumber>;
    limited: z.ZodOptional<z.ZodBoolean>;
    summary: z.ZodOptional<z.ZodBoolean>;
    success: z.ZodOptional<z.ZodBoolean>;
    error: z.ZodOptional<z.ZodString>;
    code: z.ZodOptional<z.ZodString>;
    category: z.ZodOptional<z.ZodString>;
    recoverable: z.ZodOptional<z.ZodBoolean>;
    suggestion: z.ZodOptional<z.ZodString>;
    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
/**
 * pg_security_sensitive_tables output
 */
export declare const SensitiveTablesOutputSchema: z.ZodObject<{
    sensitiveTables: z.ZodOptional<z.ZodArray<z.ZodObject<{
        table: z.ZodString;
        sensitiveColumns: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
        columnCount: z.ZodNumber;
    }, z.core.$strip>>>;
    tableCount: z.ZodOptional<z.ZodNumber>;
    totalSensitiveColumns: z.ZodOptional<z.ZodNumber>;
    patternsUsed: z.ZodOptional<z.ZodArray<z.ZodString>>;
    limited: z.ZodOptional<z.ZodBoolean>;
    totalAvailable: z.ZodOptional<z.ZodNumber>;
    success: z.ZodOptional<z.ZodBoolean>;
    error: z.ZodOptional<z.ZodString>;
    code: z.ZodOptional<z.ZodString>;
    category: z.ZodOptional<z.ZodString>;
    recoverable: z.ZodOptional<z.ZodBoolean>;
    suggestion: z.ZodOptional<z.ZodString>;
    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
/**
 * pg_security_ssl_status output
 */
export declare const SSLStatusOutputSchema: z.ZodObject<{
    sslEnabled: z.ZodOptional<z.ZodBoolean>;
    sslConnections: z.ZodOptional<z.ZodArray<z.ZodObject<{
        pid: z.ZodOptional<z.ZodNumber>;
        ssl: z.ZodOptional<z.ZodBoolean>;
        version: z.ZodOptional<z.ZodNullable<z.ZodString>>;
        cipher: z.ZodOptional<z.ZodNullable<z.ZodString>>;
        client_dn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
    }, z.core.$strip>>>;
    configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    totalConnections: z.ZodOptional<z.ZodNumber>;
    sslConnectionCount: z.ZodOptional<z.ZodNumber>;
    success: z.ZodOptional<z.ZodBoolean>;
    error: z.ZodOptional<z.ZodString>;
    code: z.ZodOptional<z.ZodString>;
    category: z.ZodOptional<z.ZodString>;
    recoverable: z.ZodOptional<z.ZodBoolean>;
    suggestion: z.ZodOptional<z.ZodString>;
    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
/**
 * pg_security_encryption_status output
 */
export declare const EncryptionStatusOutputSchema: z.ZodObject<{
    sslEnabled: z.ZodOptional<z.ZodBoolean>;
    passwordEncryption: z.ZodOptional<z.ZodString>;
    pgcryptoAvailable: z.ZodOptional<z.ZodBoolean>;
    encryptionSettings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    certificates: z.ZodOptional<z.ZodObject<{
        ssl_ca_file: z.ZodOptional<z.ZodString>;
        ssl_cert_file: z.ZodOptional<z.ZodString>;
        ssl_key_file: z.ZodOptional<z.ZodString>;
        ssl_crl_file: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>;
    success: z.ZodOptional<z.ZodBoolean>;
    error: z.ZodOptional<z.ZodString>;
    code: z.ZodOptional<z.ZodString>;
    category: z.ZodOptional<z.ZodString>;
    recoverable: z.ZodOptional<z.ZodBoolean>;
    suggestion: z.ZodOptional<z.ZodString>;
    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
/**
 * pg_security_password_validate output
 */
export declare const PasswordValidateOutputSchema: z.ZodObject<{
    strength: z.ZodOptional<z.ZodNumber>;
    interpretation: z.ZodOptional<z.ZodString>;
    meetsPolicy: z.ZodOptional<z.ZodBoolean>;
    policy: z.ZodOptional<z.ZodObject<{
        minLength: z.ZodNumber;
        requireUppercase: z.ZodBoolean;
        requireLowercase: z.ZodBoolean;
        requireDigit: z.ZodBoolean;
        requireSpecial: z.ZodBoolean;
    }, z.core.$strip>>;
    checks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
    success: z.ZodOptional<z.ZodBoolean>;
    error: z.ZodOptional<z.ZodString>;
    code: z.ZodOptional<z.ZodString>;
    category: z.ZodOptional<z.ZodString>;
    recoverable: z.ZodOptional<z.ZodBoolean>;
    suggestion: z.ZodOptional<z.ZodString>;
    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
//# sourceMappingURL=security.d.ts.map