/**
 * AuditLog facade (v3.x)
 *
 * Thin wrapper over HistoryStore that classifies query severity
 * ('read' | 'write' | 'ddl') and supports audit-specific filters.
 */
import type { QueryAnalyzer } from './query-analyzer.js';
import type { QueryHistoryEntry, HistoryFilter } from './query-analyzer-types.js';
export interface AuditMetadata {
    actor: string;
    clientIp?: string;
    severity: 'read' | 'write' | 'ddl';
    metadata?: Record<string, unknown>;
}
/** Heuristic SQL classifier — best-effort, not a full SQL parser. */
export declare function classifySeverity(sql: string): 'read' | 'write' | 'ddl';
export declare class AuditLog {
    /**
     * Record one audit entry. Severity is auto-derived from `sql` if not supplied.
     * Always goes through HistoryStore.record so audit rows are queryable via
     * the standard `get_query_history` tool.
     */
    static record(qa: QueryAnalyzer, sql: string, db: string, kind: string, meta: AuditMetadata): Promise<void>;
    /** Query audit entries with audit-specific filters. */
    static query(qa: QueryAnalyzer, filter: HistoryFilter): Promise<QueryHistoryEntry[]>;
}
//# sourceMappingURL=audit-log.d.ts.map