/**
 * Exfiltration Path Graph Scanner
 *
 * Builds a directed graph of MCP tools based on their capabilities,
 * then finds potential data exfiltration paths from secret sources
 * (tools that read sensitive data) to network sinks (tools that can
 * send data externally).
 *
 * Key features:
 * - Tool capability classification (reads_secrets, network_access, etc.)
 * - Path finding from sources to sinks
 * - Minimal cut-set computation (tools to sandbox)
 * - Mermaid diagram generation for visualization
 *
 * @module scanners/agent/exfil-path-graph
 */
import type { AgentScannerResult, MCPManifest, ToolGraph } from "./types.js";
/**
 * Run exfiltration path graph scanner
 */
export declare function runExfilPathScanner(manifest: MCPManifest, _options?: {
    /** Include all edges in diagram (default: only exfil paths) */
    includeAllEdges?: boolean;
    /** Maximum path length to consider */
    maxPathLength?: number;
}): Promise<AgentScannerResult>;
/**
 * Check if exfil path scanner is available (always true - no external deps)
 */
export declare function checkExfilPathAvailable(): Promise<{
    scanner: "exfil-path-graph";
    available: boolean;
    version: string;
}>;
/**
 * Get exfil graph from scanner result
 */
export declare function getExfilGraph(result: AgentScannerResult): ToolGraph | null;
/**
 * Get exfil path summary
 */
export declare function getExfilSummary(result: AgentScannerResult): {
    totalPaths: number;
    criticalPaths: number;
    highPaths: number;
    sources: string[];
    sinks: string[];
    cutSet: string[];
} | null;
//# sourceMappingURL=exfil-path-graph.d.ts.map