/**
 * Multi-Factor Authentication (MFA) Detection Patterns
 * Enforces MFA requirements per HIPAA NPRM §164.312(d)
 */
export interface MFAPattern {
    id: string;
    name: string;
    description: string;
    severity: 'critical' | 'high' | 'medium';
    hipaaReference: string;
    patterns: RegExp[];
    negativePatterns?: RegExp[];
    recommendation: string;
    category: string;
}
/**
 * MFA-001: Auth Provider Configuration Without MFA
 * Detects code-local auth provider configuration without MFA enabled.
 *
 * Supabase runtime calls such as `supabase.auth.signUp()` are intentionally
 * excluded. Supabase configuration is handled in the scanner with stronger
 * evidence: a direct client construction that contains a Supabase project URL.
 */
export declare const AUTH_CONFIG_NO_MFA: MFAPattern;
/**
 * MFA-002: Login Flow Without Second Factor
 * Detects signIn/login with only email+password without MFA verification
 */
export declare const LOGIN_NO_SECOND_FACTOR: MFAPattern;
/**
 * MFA-003: MFA Bypass in Code
 * Detects code that explicitly bypasses or disables MFA requirements
 */
export declare const MFA_BYPASS: MFAPattern;
export declare const ALL_MFA_PATTERNS: MFAPattern[];
//# sourceMappingURL=patterns.d.ts.map