/**
 * Audit-log helpers for successful admin writes.
 *
 * The package has no session store and no first-party AuditLog table — same
 * bring-your-own philosophy as `authCheck` / `logout`. This module builds a
 * redacted `AuditEvent` and emits it to the consumer's callback. Sensitive
 * names (`isSensitiveFieldName`) and config `hidden` fields are stripped from
 * every snapshot so the audit sink cannot become a second oracle for secrets.
 */
import type { Model } from './types/schema.js';
export type AuditAction = 'create' | 'update' | 'delete';
export type AuditEvent = {
    event: any;
    at: Date;
    action: 'create';
    model: string;
    id: string | number;
    values: Record<string, unknown>;
    after: Record<string, unknown>;
    m2m?: Record<string, Array<string | number>>;
} | {
    event: any;
    at: Date;
    action: 'update';
    model: string;
    id: string | number;
    values: Record<string, unknown>;
    before: Record<string, unknown> | null;
    after: Record<string, unknown>;
    changes: Record<string, {
        from: unknown;
        to: unknown;
    }>;
    m2m?: Record<string, Array<string | number>>;
} | {
    event: any;
    at: Date;
    action: 'delete';
    model: string;
    id: string | number;
    before: Record<string, unknown> | null;
};
export declare function redactForAudit(record: Record<string, unknown>, model: Model, hidden: ReadonlySet<string>): Record<string, unknown>;
export declare function diffRecords(before: Record<string, unknown>, after: Record<string, unknown>): Record<string, {
    from: unknown;
    to: unknown;
}>;
export interface BuildAuditEventInput {
    event: any;
    at?: Date;
    action: AuditAction;
    model: Model;
    id: string | number;
    hidden: ReadonlySet<string>;
    values?: Record<string, unknown>;
    m2m?: Record<string, {
        targetPkField: string;
        ids: Array<string | number>;
    }>;
    before?: Record<string, unknown> | null;
    after?: Record<string, unknown>;
}
export declare function buildAuditEvent(input: BuildAuditEventInput): AuditEvent;
export declare function readAuditSnapshot(getRecord: (model: Model, id: string | number) => Promise<Record<string, unknown> | null>, model: Model, id: string | number): Promise<Record<string, unknown> | null>;
export declare function emitAudit(audit: ((entry: AuditEvent) => void | Promise<void>) | undefined, entry: AuditEvent): Promise<void>;