/**
 * Audit command — P6 M6.3 tamper-evident audit trail.
 *
 * Usage:
 *   buff audit verify                      — Verify the hash chain of the built-in
 *                                            audit stores (quota-events + model-
 *                                            registry-actions) in ~/.buff/memory
 *   buff audit verify --file <path>        — Verify a specific JSONL audit file
 *   buff audit verify --json               — Machine-readable verdict (exit 0/1/2)
 *   buff audit export [--file <path>]      — SIEM-friendly CEF export of a store
 *                                            (defaults to quota-events)
 *   buff audit export --out <path>         — Write export to a file
 *
 * The stores are hash-chained (SHA-256) and secret-scrubbed: every record's
 * `chain.hash = sha256(prevHash ‖ canonical(record))`, and the chain head is
 * persisted in a sidecar `<file>.chain.json`, so tampering — even a single
 * flipped byte — is detected on verify.
 */
import { Command } from 'commander';
import { BaseCommand } from './commands.js';
export declare class AuditCommand extends BaseCommand {
    create(): Command;
    private createVerifyCommand;
    private createExportCommand;
}
//# sourceMappingURL=audit.d.ts.map