/**
 * Unified scan handler for ATR CLI.
 * Auto-detects input type: JSON → MCP scan, .md → SKILL.md scan.
 *
 * @module agent-threat-rules/cli/scan-handler
 */
import type { ScanType } from '../types.js';
export interface ScanOptions {
    readonly rules?: string;
    readonly json?: boolean;
    readonly sarif?: boolean;
    readonly severity?: string;
    readonly forceType?: ScanType;
    readonly failOn?: string;
    readonly reportToCloud?: boolean;
    readonly tcUrl?: string;
    readonly semantic?: boolean;
    readonly semanticApiKey?: string;
    readonly semanticBaseUrl?: string;
    readonly semanticModel?: string;
    readonly semanticTimeout?: string;
    readonly semanticNoJsonMode?: boolean;
}
/** Detect whether the target is an MCP event JSON or SKILL.md file/directory. */
export declare function detectInputType(targetPath: string): ScanType;
/** Unified scan command: auto-detects MCP vs SKILL.md and runs the appropriate scan path. */
export declare function cmdScanUnified(target: string, rulesDir: string, options: ScanOptions): Promise<void>;
//# sourceMappingURL=scan-handler.d.ts.map