/**
 * audit_hono_security — security + type-safety audit of Hono application.
 *
 * Checks:
 *   - missing-secure-headers (global)
 *   - missing-rate-limit (mutation routes, conditional-aware)
 *   - missing-auth (mutation routes, conditional-aware)
 *   - auth-ordering (auth after non-auth in a chain)
 *   - env-regression (plain createMiddleware in 3+ chains, Issue #3587)
 *     — absorbed from the former detect_middleware_env_regression tool.
 *       It is a type-safety check that still walks middleware chains,
 *       so it fits the audit surface.
 *
 * Spec: docs/specs/2026-04-10-hono-framework-intelligence-spec.md (Task 21) +
 *       docs/specs/2026-04-11-hono-phase-2-plan.md (T10 consolidation)
 */
export interface SecurityFinding {
    severity: "CRITICAL" | "HIGH" | "MEDIUM" | "LOW";
    rule: string;
    message: string;
    file?: string;
    line?: number;
}
export interface SecurityAuditResult {
    findings?: SecurityFinding[];
    /** Heuristic disclaimers for rules that rely on regex/lookups rather than a real type checker. */
    notes?: Record<string, string>;
    error?: string;
}
export declare function auditHonoSecurity(repo: string): Promise<SecurityAuditResult>;
//# sourceMappingURL=hono-security.d.ts.map