export { type SanityPlugin, type SanityPluginContext, type SanityFinding, type SanitySeverity, type SanitySummary, } from './types.js';
export { largeFilePlugin, type LargeFileOptions } from './large-file.js';
export { envFilePlugin, isEnvFile, type EnvFileOptions } from './env-file.js';
export { privateKeyFilePlugin } from './private-key-file.js';
export { secretScanPlugin, BUILT_IN_PATTERNS, type SecretPattern, type SecretScanOptions, } from './secret-scan.js';
export { standardEnvAuditPlugin, type StandardEnvAuditOptions, } from './standard-env-audit.js';
export { envxAuditPlugin, type EnvxAuditOptions } from './envx-audit.js';
export { secretsPlugin, type SecretsPluginOptions, type SecretsSubCheck, } from './secrets.js';
import type { SanityPlugin } from './types.js';
/**
 * The plugin set czar runs when `sanity: true` (or any `sanity:` block
 * that doesn't override `plugins`). Two plugins:
 *
 *   - `largeFilePlugin`  — file-size warnings + errors.
 *   - `secretsPlugin`    — consolidated leak gate covering env files
 *                          (encryption-aware), private-key filenames,
 *                          credential pattern scan, and the env-file
 *                          plaintext heuristic. Replaces the four
 *                          individual plugins (envFile, privateKey,
 *                          secretScan, standardEnvAudit) that used to
 *                          live here separately.
 *
 * The legacy `DefaultPluginsOptions` flags map onto `secretsPlugin`'s
 * options so existing configs keep working without changes.
 */
export interface DefaultPluginsOptions {
    readonly maxFileSizeWarn?: number;
    readonly maxFileSizeError?: number;
    readonly blockEnvFiles?: boolean;
    readonly envFileAllowlist?: ReadonlyArray<string>;
    readonly detectSecrets?: boolean;
    readonly blockPrivateKeys?: boolean;
}
export declare function defaultPlugins(opts?: DefaultPluginsOptions): SanityPlugin[];
//# sourceMappingURL=index.d.ts.map