/**
 * Layer 2: AI Endpoint Protection Detection
 * Detects AI/LLM endpoints without proper authentication or rate limiting
 *
 * Covers:
 * - M5.2: AI endpoints without auth/rate limiting
 * - Cost-bearing AI endpoints exposed publicly
 * - Missing rate limiting on AI routes
 */
import type { Vulnerability } from '../types';
import type { ParsedFile } from '../utils/parsed-file';
import type { MiddlewareAuthConfig } from '../utils/middleware-detector';
/**
 * Check if file is a route/API handler
 */
declare function isRouteFile(filePath: string): boolean;
/**
 * Check if content contains AI/LLM API calls
 */
declare function hasAIApiCalls(content: string): boolean;
/**
 * Check if there's authentication in the route
 */
declare function hasAuthentication(content: string): boolean;
/**
 * Check if there's rate limiting
 */
declare function hasRateLimiting(content: string): boolean;
export interface EndpointProtectionOptions {
    middlewareConfig?: MiddlewareAuthConfig;
    parsed?: ParsedFile;
}
/**
 * Main detection function for AI endpoint protection issues
 */
export declare function detectAIEndpointProtection(content: string, filePath: string, options?: EndpointProtectionOptions): Vulnerability[];
export { isRouteFile, hasAIApiCalls, hasAuthentication, hasRateLimiting };
//# sourceMappingURL=ai-endpoint-protection.d.ts.map