/** SeoEgressGuard — five independently opt-in live-data egress axes, all default false (spec-20260715-ultimate-seo-suite, Sprint 1; widened spec-20260717-seo-improver-builder, Sprint 1; widened again in-house-ai-visibility, Sprint 3; mirrors medical/egress.ts:17-59, ADR-6). */
import type { BoberConfig } from "../config/schema.js";
/**
 * The five independent live-data egress axes. All default FALSE
 * (code-enforced zero-egress). `ai-visibility-scrape` (Sprint 3) is
 * axis-only this sprint — no scrape provider composes it yet (Sprint 10).
 */
export type SeoEgressAxis = "search-console" | "serp-provider" | "ai-visibility" | "site-crawl" | "ai-visibility-scrape";
/**
 * Guards outbound egress for the SEO pipeline's live-data adapters (Google
 * Search Console, DataForSEO, AI-visibility provider, damcrawler site-crawl,
 * AI-visibility UI-scrape arm).
 *
 * The five axes operate INDEPENDENTLY — opting in one does NOT opt in any
 * other. All default false when absent from config. `assertAllowed` throws
 * if the axis is not opted in, providing a hard code-enforced barrier that
 * every network-opening adapter method must call first (ADR-5).
 *
 * bober: plain decision object; no network import here; swap for a shared
 *        policy engine if per-scope granularity is ever needed.
 */
export declare class SeoEgressGuard {
    private readonly searchConsole;
    private readonly serpProvider;
    private readonly aiVisibility;
    private readonly siteCrawl;
    private readonly aiVisibilityScrape;
    constructor(searchConsole: boolean, serpProvider: boolean, aiVisibility?: boolean, siteCrawl?: boolean, aiVisibilityScrape?: boolean);
    /** Build from BoberConfig seo section; all five axes default false when absent. */
    static fromConfig(config: BoberConfig): SeoEgressGuard;
    /** Returns true only when the axis has been explicitly opted in via config. */
    isAllowed(axis: SeoEgressAxis): boolean;
    /**
     * Throws an Error when the axis is not enabled.
     * Returns void (not throws) when the axis is allowed.
     */
    assertAllowed(axis: SeoEgressAxis): void;
}
//# sourceMappingURL=egress.d.ts.map