/**
 * PCI DSS v4.0.1 Compliance Pack
 *
 * Payment Card Industry Data Security Standard v4.0.1 (current
 * mandatory version) for AI systems that store, process, or transmit
 * cardholder data.
 *
 * Key dates:
 *   - 31 March 2024: PCI DSS v3.2.1 retired
 *   - 31 March 2025: All v4.0 "future-dated" best-practice requirements
 *     became mandatory
 *   - June 2024: v4.0.1 published with corrections to v4.0
 *   - PCI DSS v4.0.1 is the ONLY current valid version in 2026
 *
 * Current state (2026):
 *   - 12 core requirements + 250+ sub-requirements now all mandatory.
 *   - Targeted risk analysis required for customised approach.
 *   - Annual penetration testing + quarterly ASV scanning.
 *   - Enhanced MFA: required for ALL access into cardholder data
 *     environment (CDE), not just admin.
 *   - AI/ML scope: any system materially involved in processing
 *     cardholder data is in scope; model outputs touching CDE require
 *     corresponding controls.
 *   - Service provider responsibilities clarified (Req 12.8, 12.9).
 *
 * P1C-04 (2026-04-24): Added payment-specific category classifiers:
 *   PAN (Luhn-valid, BIN-prefixed), CVV, CARD_EXPIRY, TRACK_DATA,
 *   CARDHOLDER_NAME. subjectKeyedCategories: PAN, CVV, TRACK_DATA.
 *   TransactionContext pass-through for PCI Req-10 audit fields.
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
export declare const PCIDSS_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export interface TransactionContext {
    /** Stable identifier for this transaction (e.g. payment processor reference). */
    transactionId: string;
    /** Merchant identifier (DBA / MID from the acquiring bank). */
    merchantId: string;
    /** Transaction amount in smallest currency unit (e.g. cents). */
    transactionAmount?: number;
    /** ISO 4217 currency code (e.g. "USD", "EUR"). */
    currency?: string;
    /** Operation type as defined by PCI DSS Req 10.2.1. */
    transactionType: 'authorization' | 'capture' | 'refund' | 'void' | 'query';
    /** Card-present / card-not-present / e-commerce environment indicator. */
    paymentMethod?: 'card-present' | 'card-not-present' | 'ecommerce';
}
/**
 * PCI DSS Req 10 event type codes for fast audit-trail queries.
 *
 *   DENIED   -- action was BLOCK (Req 10.2.1.7 -- access attempts rejected)
 *   AUTH     -- authorization transaction logged (Req 10.2.1.1)
 *   CAPTURE  -- capture transaction logged
 *   REFUND   -- refund / credit transaction logged
 *   VOID     -- void transaction logged
 *   QUERY    -- read-only account query (Req 10.2.1.3 -- access to cardholder data)
 */
export type PciEventType = 'AUTH' | 'CAPTURE' | 'REFUND' | 'VOID' | 'QUERY' | 'DENIED';
/**
 * Derive the PCI Req-10 event type from transaction type and governance action.
 *
 * When action is BLOCK the event is DENIED regardless of transaction type
 * (Req 10.2.1.7 -- "all invalid logical access attempts").
 */
export declare function derivePciEventType(transactionType: TransactionContext['transactionType'], action: string): PciEventType;
export declare const PCIDSS_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
    subjectKeyedCategories: string[];
};
//# sourceMappingURL=pcidss.d.ts.map