/**
 * Collects aggregate security-event counts from SecurityMonitor, broken down
 * by severity and event type. Accepts an injectable report function so the
 * collector can be tested without a live SecurityMonitor singleton.
 */
import type { IMetricCollector, MetricEntry } from '../types.js';
interface SecurityReport {
    totalEvents: number;
    eventsBySeverity: Record<string, number>;
    eventsByType: Record<string, number>;
    recentCriticalEvents: unknown[];
}
export declare class SecurityMonitorCollector implements IMetricCollector {
    readonly name = "security-monitor";
    readonly description = "Total security events and per-severity/per-type breakdowns from SecurityMonitor";
    private readonly reportFn;
    constructor(reportFn?: () => SecurityReport);
    collect(): MetricEntry[];
}
export {};
//# sourceMappingURL=SecurityMonitorCollector.d.ts.map