import type { AccessAuditEntry, AuditLogEntry, DynamicFinding, PrivacyControlsConfig, TenantRole } from "./types";
export declare class PrivacyControls {
    private readonly config;
    constructor(config?: PrivacyControlsConfig);
    getRetentionPolicy(): {
        maxEntries: number;
        maxAgeMs: number;
    };
    sanitizeFinding(finding: DynamicFinding): DynamicFinding;
    sanitizeAuditEntry(entry: AuditLogEntry): AuditLogEntry;
    scrubForLog(input: string): string;
    scrubValue<T>(value: T): T;
    enforceRetention(entries: readonly AuditLogEntry[], now?: number): AuditLogEntry[];
    canAccessTenant(requestingTenantId: string, targetTenantId: string): {
        allowed: boolean;
        reason: string;
        requesterRole: TenantRole;
    };
    createAccessAuditEntry(params: {
        requestingTenantId: string;
        targetTenantId: string;
        action: "read-audit-logs" | "delete-audit-logs";
        allowed: boolean;
        reason: string;
    }): AccessAuditEntry;
    private scrubText;
    private resolveTenantRole;
}