/**
 * Authorized cybersecurity-scan payment profile helpers.
 *
 * Paid security tools need tighter guards than general data APIs. These helpers
 * require target authorization, allowed-domain binding, per-target spend caps,
 * scan-rate policy, human approval, and audit receipt language before x402
 * signing can proceed.
 */
import { z } from 'zod';
export declare const AuthorizedCyberScanProfileSchema: z.ZodObject<{
    schema: z.ZodLiteral<"agentpay-authorized-cybersecurity-scan-profile/v1">;
    generated_at: z.ZodEffects<z.ZodString, string, string>;
    scan: z.ZodObject<{
        tool_id: z.ZodString;
        category: z.ZodEnum<["vulnerability_scan", "compliance_check", "threat_intel_lookup", "security_audit"]>;
        target: z.ZodString;
        target_domain: z.ZodString;
        requested_by_agent: z.ZodString;
    }, "strip", z.ZodTypeAny, {
        target: string;
        tool_id: string;
        category: "vulnerability_scan" | "compliance_check" | "threat_intel_lookup" | "security_audit";
        target_domain: string;
        requested_by_agent: string;
    }, {
        target: string;
        tool_id: string;
        category: "vulnerability_scan" | "compliance_check" | "threat_intel_lookup" | "security_audit";
        target_domain: string;
        requested_by_agent: string;
    }>;
    authorization: z.ZodObject<{
        attestation_id: z.ZodString;
        granted_by: z.ZodString;
        granted_at: z.ZodEffects<z.ZodString, string, string>;
        expires_at: z.ZodEffects<z.ZodString, string, string>;
        allowed_domains: z.ZodArray<z.ZodString, "many">;
        allowed_scan_categories: z.ZodArray<z.ZodEnum<["vulnerability_scan", "compliance_check", "threat_intel_lookup", "security_audit"]>, "many">;
        proof_uri: z.ZodOptional<z.ZodString>;
    }, "strip", z.ZodTypeAny, {
        attestation_id: string;
        granted_by: string;
        granted_at: string;
        expires_at: string;
        allowed_domains: string[];
        allowed_scan_categories: ("vulnerability_scan" | "compliance_check" | "threat_intel_lookup" | "security_audit")[];
        proof_uri?: string | undefined;
    }, {
        attestation_id: string;
        granted_by: string;
        granted_at: string;
        expires_at: string;
        allowed_domains: string[];
        allowed_scan_categories: ("vulnerability_scan" | "compliance_check" | "threat_intel_lookup" | "security_audit")[];
        proof_uri?: string | undefined;
    }>;
    spend_policy: z.ZodObject<{
        currency: z.ZodLiteral<"USD">;
        per_target_cap_usd: z.ZodNumber;
        spent_for_target_usd: z.ZodNumber;
        requested_cost_usd: z.ZodNumber;
        x402_max_amount_required: z.ZodEffects<z.ZodString, string, string>;
    }, "strip", z.ZodTypeAny, {
        currency: "USD";
        per_target_cap_usd: number;
        spent_for_target_usd: number;
        requested_cost_usd: number;
        x402_max_amount_required: string;
    }, {
        currency: "USD";
        per_target_cap_usd: number;
        spent_for_target_usd: number;
        requested_cost_usd: number;
        x402_max_amount_required: string;
    }>;
    rate_limit: z.ZodObject<{
        window_seconds: z.ZodNumber;
        max_scans_per_window: z.ZodNumber;
        scans_used_in_window: z.ZodNumber;
    }, "strip", z.ZodTypeAny, {
        window_seconds: number;
        max_scans_per_window: number;
        scans_used_in_window: number;
    }, {
        window_seconds: number;
        max_scans_per_window: number;
        scans_used_in_window: number;
    }>;
    approval_gate: z.ZodObject<{
        fail_closed: z.ZodLiteral<true>;
        requires_human_approval: z.ZodLiteral<true>;
        approved: z.ZodBoolean;
        prompt: z.ZodString;
    }, "strip", z.ZodTypeAny, {
        approved: boolean;
        fail_closed: true;
        requires_human_approval: true;
        prompt: string;
    }, {
        approved: boolean;
        fail_closed: true;
        requires_human_approval: true;
        prompt: string;
    }>;
    audit_receipt: z.ZodObject<{
        receipt_id: z.ZodString;
        retention_days: z.ZodNumber;
        language: z.ZodString;
    }, "strip", z.ZodTypeAny, {
        receipt_id: string;
        retention_days: number;
        language: string;
    }, {
        receipt_id: string;
        retention_days: number;
        language: string;
    }>;
}, "strip", z.ZodTypeAny, {
    authorization: {
        attestation_id: string;
        granted_by: string;
        granted_at: string;
        expires_at: string;
        allowed_domains: string[];
        allowed_scan_categories: ("vulnerability_scan" | "compliance_check" | "threat_intel_lookup" | "security_audit")[];
        proof_uri?: string | undefined;
    };
    schema: "agentpay-authorized-cybersecurity-scan-profile/v1";
    generated_at: string;
    scan: {
        target: string;
        tool_id: string;
        category: "vulnerability_scan" | "compliance_check" | "threat_intel_lookup" | "security_audit";
        target_domain: string;
        requested_by_agent: string;
    };
    spend_policy: {
        currency: "USD";
        per_target_cap_usd: number;
        spent_for_target_usd: number;
        requested_cost_usd: number;
        x402_max_amount_required: string;
    };
    rate_limit: {
        window_seconds: number;
        max_scans_per_window: number;
        scans_used_in_window: number;
    };
    approval_gate: {
        approved: boolean;
        fail_closed: true;
        requires_human_approval: true;
        prompt: string;
    };
    audit_receipt: {
        receipt_id: string;
        retention_days: number;
        language: string;
    };
}, {
    authorization: {
        attestation_id: string;
        granted_by: string;
        granted_at: string;
        expires_at: string;
        allowed_domains: string[];
        allowed_scan_categories: ("vulnerability_scan" | "compliance_check" | "threat_intel_lookup" | "security_audit")[];
        proof_uri?: string | undefined;
    };
    schema: "agentpay-authorized-cybersecurity-scan-profile/v1";
    generated_at: string;
    scan: {
        target: string;
        tool_id: string;
        category: "vulnerability_scan" | "compliance_check" | "threat_intel_lookup" | "security_audit";
        target_domain: string;
        requested_by_agent: string;
    };
    spend_policy: {
        currency: "USD";
        per_target_cap_usd: number;
        spent_for_target_usd: number;
        requested_cost_usd: number;
        x402_max_amount_required: string;
    };
    rate_limit: {
        window_seconds: number;
        max_scans_per_window: number;
        scans_used_in_window: number;
    };
    approval_gate: {
        approved: boolean;
        fail_closed: true;
        requires_human_approval: true;
        prompt: string;
    };
    audit_receipt: {
        receipt_id: string;
        retention_days: number;
        language: string;
    };
}>;
export type AuthorizedCyberScanProfile = z.infer<typeof AuthorizedCyberScanProfileSchema>;
export type AuthorizedCyberScanPolicy = {
    now?: Date;
    allowedDomains: string[];
    maxRequestedCostUsd: number;
    minReceiptRetentionDays: number;
};
export type AuthorizedCyberScanDecision = {
    ok: boolean;
    failures: string[];
    warnings: string[];
};
export declare function evaluateAuthorizedCyberScanProfile(profileInput: unknown, policy: AuthorizedCyberScanPolicy): AuthorizedCyberScanDecision;
//# sourceMappingURL=authorized-cybersecurity-scan-profile.d.ts.map