import { Page } from 'playwright';
export interface SecurityAnalysis {
    environmentVariables: {
        exposed: string[];
        properlyPrefixed: string[];
        warnings: string[];
    };
    headers: {
        csp: boolean;
        xFrameOptions: string;
        permissionsPolicy: boolean;
        cors: string;
        hsts?: boolean;
        missingHeaders: string[];
    };
}
export interface MiddlewareAnalysis {
    middlewareFiles: Array<{
        path: string;
        size: number;
        exports: string[];
    }>;
    executionPath: string[];
    rewriteRules: Array<{
        source: string;
        destination: string;
        condition?: string;
    }>;
    redirects: Array<{
        source: string;
        destination: string;
        permanent: boolean;
    }>;
    performance: {
        averageExecutionTime: number;
        slowestMiddleware: string;
        totalTime: number;
    };
}
export interface SecurityAuditResult {
    score: number;
    issues: string[];
    recommendations: string[];
    criticalFindings: string[];
    environmentAnalysis: SecurityAnalysis['environmentVariables'];
    headerAnalysis: SecurityAnalysis['headers'];
}
export interface SecurityReport {
    summary: string;
    analysis: SecurityAnalysis;
    middleware: MiddlewareAnalysis | null;
    audit: SecurityAuditResult;
    suggestions: string[];
}
/**
 * NextJSSecurityAnalyzer - Analyzes Next.js security configuration and vulnerabilities
 *
 * This module handles:
 * - Security header analysis and validation
 * - Environment variable exposure detection
 * - Middleware security analysis
 * - CORS and CSP configuration validation
 * - Security audit reporting
 */
export declare class NextJSSecurityAnalyzer {
    /**
     * Analyze the security configuration of a Next.js application
     */
    analyzeSecurityConfiguration(page: Page): Promise<SecurityAnalysis>;
    /**
     * Analyze middleware security configuration and performance
     */
    analyzeMiddlewareSecurity(page: Page): Promise<MiddlewareAnalysis | null>;
    /**
     * Perform comprehensive security audit
     */
    auditSecurityConfiguration(securityAnalysis: SecurityAnalysis, middlewareAnalysis: MiddlewareAnalysis | null): SecurityAuditResult;
    /**
     * Get specific security improvement suggestions
     */
    getSecuritySuggestions(securityAnalysis: SecurityAnalysis): string[];
    /**
     * Generate comprehensive security analysis report
     */
    generateSecurityReport(page: Page): Promise<SecurityReport>;
    /**
     * Validate CORS configuration security
     */
    validateCORSConfiguration(corsHeader: string): {
        isSecure: boolean;
        issues: string[];
        recommendations: string[];
    };
}
//# sourceMappingURL=nextjs-security-analyzer.d.ts.map