import type { CompletionRequest } from '../types/messages.js';
import type { SecurityConfig, SecurityFinding, SecurityLevel, SecurityResult } from '../types/security.js';
import type { NexusResponse } from '../types/response.js';
/**
 * Raised when guardrails block a request or a response. Finding values are redacted from the
 * message.
 */
export declare class NexusSecurityError extends Error {
    /** What was found, with sensitive values redacted. */
    readonly findings: SecurityFinding[];
    constructor(findings: SecurityFinding[], target?: 'request' | 'output');
}
/**
 * Runs the input and output guardrails: schema validation, injection and PII detection, and output
 * checks, at a security level or with a full configuration.
 */
export declare class SecurityPipeline {
    private config;
    private schemaValidator;
    private injectionDetector;
    private piiDetector;
    private outputGuard;
    private inputGuard;
    private semanticInjectionClassifier?;
    constructor(config?: SecurityLevel | SecurityConfig);
    /** Checks and sanitizes a request before it is sent. */
    protectInput(request: CompletionRequest): SecurityResult<CompletionRequest>;
    /**
     * Throws `NexusSecurityError` with the high and critical findings when a request check failed.
     */
    assertSafe(result: SecurityResult<CompletionRequest>): void;
    /**
     * Throws `NexusSecurityError` with the high and critical findings when a response check failed.
     */
    assertOutputSafe(result: SecurityResult<NexusResponse>): void;
    /** Checks and sanitizes a response before it is returned. */
    protectOutput(response: NexusResponse): SecurityResult<NexusResponse>;
    private normalizeConfig;
    private applyPreset;
    private shouldRunInjectionDetection;
    private shouldRunPII;
    private getBlockingFindings;
}
export { SchemaValidator } from './schema-validator.js';
export { InjectionDetector } from './injection-detector.js';
export { PIIDetector } from './pii-detector.js';
export { OutputGuard } from './output-guard.js';
export { InputGuard } from './input-guard.js';
export { SemanticInjectionClassifier } from './semantic-injection-classifier.js';