/**
 * Next.js middleware coverage analyzer (T8).
 *
 * Cross-references the route map (via `nextjsRouteMap`) with the middleware
 * matcher config (via existing `traceMiddleware`) to compute coverage:
 * which routes are protected and which are unprotected. Flags admin routes
 * without middleware as high-severity warnings.
 */
export interface CoverageMap {
    protected: string[];
    unprotected: string[];
    total_routes: number;
}
export interface SecurityWarning {
    severity: "high" | "medium" | "low";
    route: string;
    reason: string;
}
export interface CoverageEntry {
    url_path: string;
    protected: boolean;
}
export interface NextjsMiddlewareCoverageResult {
    coverage: CoverageMap;
    warnings: SecurityWarning[];
    total: number;
    workspaces_scanned: string[];
    limitations: string[];
}
export interface NextjsMiddlewareCoverageOptions {
    workspace?: string | undefined;
    flag_admin_prefix?: string | string[] | undefined;
}
export declare function calculateCoverage(routes: Array<{
    url_path: string;
}>, repoRoot: string): Promise<CoverageMap>;
export declare function flagSecurityWarnings(coverage: CoverageMap, options?: {
    flag_admin_prefix?: string | string[];
}): SecurityWarning[];
export declare function nextjsMiddlewareCoverage(repo: string, options?: NextjsMiddlewareCoverageOptions): Promise<NextjsMiddlewareCoverageResult>;
//# sourceMappingURL=nextjs-middleware-coverage-tools.d.ts.map