/**
 * Comprehensive Input Validation and Sanitization System
 * Provides security-focused validation for all MCP tool inputs
 */
import { z } from "zod";
/**
 * True when a string contains an unmistakable XSS vector (script tag, javascript:/data: URL
 * scheme, or an inline event-handler attribute). Intended for general free-text MCP tool
 * parameters (titles, search queries, usernames, etc.) — NOT WordPress content fields, which
 * legitimately contain rich HTML/Gutenberg block markup; use isUnsafeWordPressContent instead.
 */
export declare function isUnsafePlainText(value: string): boolean;
/**
 * True when WordPress post/page/comment content contains an unmistakable XSS vector. Narrower
 * than isUnsafePlainText: does not reject `data:` URLs (legitimate in embedded block content)
 * and carries no length cap of its own — callers apply their own maxLength.
 */
export declare function isUnsafeWordPressContent(value: string): boolean;
/**
 * Security validation schemas
 */
export declare const SecuritySchemas: {
    safeString: z.ZodString;
    htmlContent: z.ZodString;
    url: z.ZodString;
    email: z.ZodString;
    slug: z.ZodString;
    wpContent: z.ZodString;
    siteId: z.ZodString;
    wpId: z.ZodNumber;
    searchQuery: z.ZodString;
    filePath: z.ZodString;
    passwordMask: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
    appPassword: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
};
/**
 * Input sanitization functions
 */
export declare class InputSanitizer {
    /**
     * Sanitize HTML content by removing dangerous elements
     */
    static sanitizeHtml(input: string): string;
    /**
     * Sanitize search queries to prevent SQL injection
     */
    static sanitizeSearchQuery(query: string): string;
    /**
     * Sanitize file paths to prevent directory traversal
     */
    static sanitizeFilePath(path: string): string;
    /**
     * Encode output for safe display
     */
    static encodeOutput(input: string): string;
}
/**
 * Security validation decorator for tool methods
 */
export declare function validateSecurity(schema: z.ZodSchema): (target: unknown, propertyName: string, descriptor: PropertyDescriptor) => PropertyDescriptor;
/**
 * Custom security validation error
 */
export declare class SecurityValidationError extends Error {
    readonly issues: Array<z.ZodIssue | {
        message: string;
    }>;
    constructor(message: string, issues?: Array<z.ZodIssue | {
        message: string;
    }>);
}
/**
 * Tool-specific validation schemas
 */
export declare const ToolSchemas: {
    postData: z.ZodObject<{
        site: z.ZodOptional<z.ZodString>;
        title: z.ZodOptional<z.ZodString>;
        content: z.ZodOptional<z.ZodString>;
        excerpt: z.ZodOptional<z.ZodString>;
        status: z.ZodOptional<z.ZodEnum<{
            publish: "publish";
            draft: "draft";
            pending: "pending";
            private: "private";
        }>>;
        slug: z.ZodOptional<z.ZodString>;
        categories: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
        tags: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
    }, z.core.$strip>;
    userData: z.ZodObject<{
        site: z.ZodOptional<z.ZodString>;
        username: z.ZodString;
        email: z.ZodString;
        password: z.ZodOptional<z.ZodString>;
        roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
        firstName: z.ZodOptional<z.ZodString>;
        lastName: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>;
    searchParams: z.ZodObject<{
        site: z.ZodOptional<z.ZodString>;
        query: z.ZodString;
        type: z.ZodOptional<z.ZodEnum<{
            page: "page";
            post: "post";
            any: "any";
        }>>;
        limit: z.ZodOptional<z.ZodNumber>;
    }, z.core.$strip>;
    mediaUpload: z.ZodObject<{
        site: z.ZodOptional<z.ZodString>;
        filename: z.ZodString;
        title: z.ZodOptional<z.ZodString>;
        caption: z.ZodOptional<z.ZodString>;
        description: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>;
    siteSettings: z.ZodObject<{
        site: z.ZodOptional<z.ZodString>;
        title: z.ZodOptional<z.ZodString>;
        description: z.ZodOptional<z.ZodString>;
        url: z.ZodOptional<z.ZodString>;
        adminEmail: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>;
    listParams: z.ZodObject<{
        site: z.ZodOptional<z.ZodString>;
        page: z.ZodOptional<z.ZodNumber>;
        perPage: z.ZodOptional<z.ZodNumber>;
        search: z.ZodOptional<z.ZodString>;
        orderBy: z.ZodOptional<z.ZodString>;
        order: z.ZodOptional<z.ZodEnum<{
            asc: "asc";
            desc: "desc";
        }>>;
    }, z.core.$strip>;
    idParams: z.ZodObject<{
        site: z.ZodOptional<z.ZodString>;
        id: z.ZodNumber;
    }, z.core.$strip>;
};
/**
 * Rate limiting and DoS protection
 */
export declare class SecurityLimiter {
    private static requestCounts;
    private static readonly RATE_LIMIT;
    private static readonly WINDOW_MS;
    /**
     * Check if request is within rate limits
     */
    static checkRateLimit(identifier: string): boolean;
    /**
     * Clean up expired rate limit entries
     */
    static cleanup(): void;
}
//# sourceMappingURL=InputValidator.d.ts.map