/**
 * V3 CLI Security Command
 * Security scanning, CVE detection, threat modeling, vulnerability management
 *
 * Created with ❤️ by ruv.io
 */
import type { Command } from '../types.js';
/**
 * #4124: `npm audit` can fail without exiting through the vulnerability path.
 * In a pnpm/yarn/bun project there is no package-lock.json, so it prints
 * `{"error":{"code":"ENOLOCK",...}}`. That has no `vulnerabilities` key, and
 * both `scan` and `cve` used to read it as a clean tree. Only a report with a
 * `vulnerabilities` object counts as a scan; anything else is "could not scan".
 */
type NpmAuditVuln = {
    severity: string;
    via: Array<{
        title?: string;
        url?: string;
        source?: number;
        name?: string;
    } | string>;
};
export type NpmAuditResult = {
    ok: true;
    vulnerabilities: Record<string, NpmAuditVuln>;
} | {
    ok: false;
    reason: string;
};
export declare function interpretNpmAudit(raw: string, dir?: string): NpmAuditResult;
export declare const securityCommand: Command;
export default securityCommand;
//# sourceMappingURL=security.d.ts.map