/**
 * Compliance Report Exporter
 * Generates CSV and JSON compliance reports from DynamoDB audit logs.
 *
 * This is the foundation of the 'visus_report' MCP tool.
 *
 * Regulatory purpose:
 * - EU AI Act Art. 9: Evidence of risk management system operation
 * - EU AI Act Art. 13: Transparency artifact for regulators
 * - GDPR Art. 30: Records of Processing Activities export
 * - GDPR Art. 32: Evidence of security measures for DPA audits
 */
import type { AuditLogRecord } from './schema.js';
export interface QueryOptions {
    startDate: Date;
    endDate: Date;
    toolName?: string;
    maxRecords?: number;
}
export interface ComplianceSummary {
    report_metadata: {
        generated_at: string;
        period_start: string;
        period_end: string;
        generator: string;
        regulatory_basis: string[];
    };
    statistics: {
        total_requests: number;
        injection_attempts_detected: number;
        injection_detection_rate_pct: number;
        total_redactions_applied: number;
        avg_redactions_per_request: number;
        requests_by_tool: Record<string, number>;
        redactions_by_category: Record<string, number>;
    };
    compliance_attestation: {
        data_retained_beyond_request: boolean;
        raw_content_in_audit_log: boolean;
        audit_log_ttl_days: number;
        all_requests_audited: boolean;
        sanitization_mandatory: boolean;
        lawful_bases_documented: boolean;
    };
}
export interface GDPR_Art30_Record {
    article_30_record: {
        version: string;
        last_updated: string;
        controller: {
            name: string;
            address: string;
            dpo_contact: string;
        };
        processing_activity: string;
        purposes: string[];
        legal_basis: string;
        categories_of_data_subjects: string[];
        categories_of_personal_data: string[];
        recipients: string[];
        transfers_to_third_countries: Record<string, string>;
        retention_period: string;
        security_measures: string[];
    };
}
/**
 * Queries DynamoDB audit logs and produces structured compliance reports.
 */
export declare class ComplianceReportExporter {
    private tableName;
    private region;
    private docClient;
    constructor();
    /**
     * Retrieve a single audit record by request_id.
     * Uses ScanCommand with FilterExpression on request_id.
     */
    getByRequestId(requestId: string): Promise<AuditLogRecord | null>;
    /**
     * Retrieve audit records within a date range.
     * Uses ScanCommand with FilterExpression on created_at (full scan — GSI recommended for production scale).
     */
    queryByDateRange(options: QueryOptions): Promise<AuditLogRecord[]>;
    /**
     * Generate CSV compliance report. Safe for DPA submission.
     * No raw content — only metadata, hashes, and regulatory mappings.
     */
    generateCSV(options: QueryOptions): Promise<string>;
    /**
     * Aggregated summary for regulatory submission.
     * Suitable as Annex IV technical documentation artifact.
     */
    generateSummaryJSON(options: QueryOptions): Promise<ComplianceSummary>;
    /**
     * GDPR Art. 30(1) Record of Processing Activities.
     * Suitable for submission to a Data Protection Authority.
     * Template — deployer must customise controller/DPO fields.
     */
    generateGDPRArt30Record(): Promise<GDPR_Art30_Record>;
}
//# sourceMappingURL=report.d.ts.map