import type { AuditDiff } from "./diff-provider.js";
import type { SecurityFinding } from "../security-audit-types.js";
/**
 * OFFLINE, zero-network supply-chain diff inspector (spec-20260714 sprint 7,
 * G5, ADR-4). Scoped to `diff.changedFiles`; every check operates purely on
 * the hunk text already captured by the diff provider (Pattern B — no
 * `node:fs` reads, no child processes, no network). NEVER throws: any
 * per-file check failure is caught and skips that file only (Pattern A,
 * mirrors `diff-provider.ts`'s `collectGraphNeighborhood`), so one malformed
 * hunk can never drop the rest of the audit's findings.
 *
 * Findings feed the finder as PRIORS (the "ground truth priors" prompt
 * section rendered by `security-auditor-agent.ts`) — this is NOT a new LLM
 * role or sub-auditor (nonGoals[3]).
 */
export interface SupplyChainInspectInput {
    projectRoot: string;
    diff: AuditDiff;
    signal: AbortSignal;
}
/**
 * Runs all six offline supply-chain checks over `diff.changedFiles` and
 * returns the combined findings. Pure fold over hunk text — no fs reads, no
 * child processes, no network. Honours `signal.aborted` between files.
 * NEVER throws: a per-file exception is logged and skipped, never
 * propagated (Pattern A).
 */
export declare function inspectSupplyChain(input: SupplyChainInspectInput): Promise<SecurityFinding[]>;
//# sourceMappingURL=supply-chain-inspector.d.ts.map