/**
 * Incident Manager
 *
 * Tracks and manages security incidents.
 * Implements incident lifecycle management for SOC2 compliance.
 *
 * Added by Pantheon Security for enterprise compliance support.
 */
import type { SecurityIncident, IncidentType, IncidentStatus, IncidentSeverity } from "./types.js";
/**
 * Incident Manager class
 */
export declare class IncidentManager {
    private static instance;
    private incidentsFile;
    private incidents;
    private loaded;
    private constructor();
    /**
     * Get singleton instance
     */
    static getInstance(): IncidentManager;
    /**
     * Load incidents from storage
     */
    private load;
    /**
     * Save incidents to storage
     */
    private save;
    /**
     * Create a new incident
     */
    createIncident(type: IncidentType, severity: IncidentSeverity, title: string, description: string, options?: {
        affected_data?: string[];
        affected_systems?: string[];
        related_events?: string[];
        notification_required?: boolean;
    }): Promise<SecurityIncident>;
    /**
     * Determine if notification is required based on severity and type
     */
    private isNotificationRequired;
    /**
     * Update incident status
     */
    updateStatus(incidentId: string, status: IncidentStatus, notes?: string, performedBy?: string): Promise<SecurityIncident | null>;
    /**
     * Add action to incident
     */
    addAction(incidentId: string, action: string, performedBy?: string, notes?: string): Promise<SecurityIncident | null>;
    /**
     * Set root cause analysis
     */
    setRootCause(incidentId: string, rootCause: string, remediation: string): Promise<SecurityIncident | null>;
    /**
     * Mark notification as sent
     */
    markNotificationSent(incidentId: string): Promise<SecurityIncident | null>;
    /**
     * Get incident by ID
     */
    getIncident(incidentId: string): Promise<SecurityIncident | null>;
    /**
     * Get all incidents
     */
    getAllIncidents(): Promise<SecurityIncident[]>;
    /**
     * Get open incidents
     */
    getOpenIncidents(): Promise<SecurityIncident[]>;
    /**
     * Get incidents requiring notification
     */
    getIncidentsRequiringNotification(): Promise<SecurityIncident[]>;
    /**
     * Get incidents approaching notification deadline
     */
    getIncidentsNearDeadline(hoursRemaining?: number): Promise<SecurityIncident[]>;
    /**
     * Get incidents by type
     */
    getIncidentsByType(type: IncidentType): Promise<SecurityIncident[]>;
    /**
     * Get incidents by severity
     */
    getIncidentsBySeverity(severity: IncidentSeverity): Promise<SecurityIncident[]>;
    /**
     * Get incident statistics
     */
    getStatistics(): Promise<{
        total_incidents: number;
        open_incidents: number;
        closed_incidents: number;
        by_type: Record<IncidentType, number>;
        by_severity: Record<IncidentSeverity, number>;
        by_status: Record<IncidentStatus, number>;
        pending_notifications: number;
        average_resolution_hours?: number;
    }>;
    /**
     * Export incidents for reporting
     */
    exportIncidents(from?: Date, to?: Date): Promise<SecurityIncident[]>;
}
/**
 * Get the incident manager instance
 */
export declare function getIncidentManager(): IncidentManager;
/**
 * Create a new incident
 */
export declare function createIncident(type: IncidentType, severity: IncidentSeverity, title: string, description: string, options?: {
    affected_data?: string[];
    affected_systems?: string[];
    related_events?: string[];
    notification_required?: boolean;
}): Promise<SecurityIncident>;
/**
 * Get all open incidents
 */
export declare function getOpenIncidents(): Promise<SecurityIncident[]>;
/**
 * Update incident status
 */
export declare function updateIncidentStatus(incidentId: string, status: IncidentStatus, notes?: string): Promise<SecurityIncident | null>;
/**
 * Get incident statistics
 */
export declare function getIncidentStatistics(): Promise<ReturnType<IncidentManager["getStatistics"]>>;