/**
 * Proof Builder
 *
 * Constructs complete SanitizationProofRecord from sanitization
 * pipeline outputs. Handles signing key lifecycle and chain management.
 */
import { SanitizationProofRecord } from "./primitives.js";
export declare function getChainTip(): string;
export declare function setChainTip(proofHash: string): void;
export interface BuildProofParams {
    /** MCP request ID — must be set before sanitization begins */
    requestId: string;
    /** ISO 8601 UTC timestamp — set at start of sanitization, not after */
    timestampUtc: string;
    /** Raw content before any processing */
    rawContent: string;
    /** Content after sanitization pipeline completed */
    sanitizedContent: string;
    /** Pattern IDs that fired (strings like "PI-001", not pattern text) */
    triggeredPatternIds: string[];
    /** Total number of patterns evaluated */
    patternsEvaluated: number;
    /** Whether sanitization was applied (may differ from injection detected) */
    sanitizationApplied: boolean;
    /** Sanitization library version */
    pipelineVersion: string;
    /** Processing duration */
    processingDurationMs: number;
    /** Number of distinct redactions applied */
    redactionCount: number;
    /** PII categories detected during processing */
    piiDetected?: string[];
    /** Number of threats neutralized (triggered patterns + redactions) */
    threatsNeutralized?: number;
}
export declare function buildProof(params: BuildProofParams): SanitizationProofRecord;
/**
 * Returns the public-safe proof header to include in every MCP tool response.
 * The proof_signature is intentionally excluded from public responses —
 * it requires the HMAC key to verify and is only for auditors.
 */
export declare function proofToResponseHeader(proof: SanitizationProofRecord): Record<string, unknown>;
/**
 * Export generateRequestId from primitives for convenience
 */
export { generateRequestId } from "./primitives.js";
//# sourceMappingURL=proof-builder.d.ts.map