/**
 * Golden Path Runner
 *
 * Executes user-defined flows against a running app using Playwright.
 * Flows are defined in YAML files under .vaspera/flows/
 *
 * @module scanners/runtime/golden-path-runner
 */
import { type GoldenPathFlow, type GoldenPathResult } from "./types.js";
/**
 * Load a golden path flow from a YAML file
 */
export declare function loadFlow(flowPath: string): Promise<GoldenPathFlow>;
/**
 * Discover all flows in a project
 */
export declare function discoverFlows(projectPath: string): Promise<Array<{
    path: string;
    flow: GoldenPathFlow;
}>>;
/**
 * Run a golden path flow
 *
 * By default uses lightweight HTTP-based execution.
 * Pass usePlaywright: true to use full browser automation.
 */
export declare function runFlow(flow: GoldenPathFlow, baseUrl: string, options?: {
    usePlaywright?: boolean;
    headless?: boolean;
    slowMo?: number;
    screenshotsDir?: string;
}): Promise<GoldenPathResult>;
/**
 * Run all flows in a project
 */
export declare function runAllFlows(projectPath: string, baseUrl: string, options?: {
    priority?: GoldenPathFlow["priority"];
    tags?: string[];
    usePlaywright?: boolean;
    headless?: boolean;
    slowMo?: number;
    screenshotsDir?: string;
}): Promise<GoldenPathResult[]>;
/**
 * Generate a sample flow file
 */
export declare function generateSampleFlow(projectPath: string, name?: string): Promise<string>;
/**
 * Scaffold the behavioral-proof flows: cross-tenant isolation and auth
 * failure-paths (checklist #2/#3), plus runtime proofs for the deterministic
 * web-safety findings — RLS-off cross-tenant leak, webhook-signature forgery,
 * and CSRF token-replay. Users seed two test accounts and customize the routes;
 * a failing probe emits a critical/high finding that BLOCKS certification.
 */
export declare function generateSecurityProofFlows(projectPath: string): Promise<string[]>;
//# sourceMappingURL=golden-path-runner.d.ts.map