/**
 * PCIDSSAuditBot -- Automated PCI DSS v4.0.1 compliance auditing.
 *
 * Requirements 1-12: cardholder data environment controls, encryption,
 * network segmentation, access management, logging, and vulnerability
 * management. Does NOT call external APIs.
 *
 * Narrative writing is delegated to an injectable NarrativeWriter
 * interface so callers can swap in a real LLM implementation. The
 * default stub returns deterministic text suitable for tests.
 *
 * P2A-05
 *
 * @connexum/ai-governance
 */
import { type AuditRunResult, type AuditRunner } from './scheduler';
export interface NarrativeWriter {
    write(controlId: string, context: string): string;
}
export declare class StubNarrativeWriter implements NarrativeWriter {
    write(controlId: string, context: string): string;
}
export interface PCIDSSConfig {
    logDir: string;
    governanceDir: string;
    narrativeWriter?: NarrativeWriter;
}
export interface PCIDSSGap {
    requirement: string;
    title: string;
    detail: string;
}
export declare class PCIDSSAuditBot implements AuditRunner {
    private logDir;
    private governanceDir;
    private narrativeWriter;
    constructor(config: PCIDSSConfig);
    runAudit(): AuditRunResult;
    private checkNetworkSegmentation;
    private checkDefaultPasswords;
    private checkPANDetector;
    private checkEncryption;
    private checkVulnerabilityScans;
    private checkSecureDevelopment;
    private checkAccessControl;
    private checkUserAuthentication;
    private checkPhysicalAccessPolicy;
    private checkAuditLogging;
    private checkLogIntegrity;
    private checkPenetrationTestEvidence;
    private checkASVScanEvidence;
    private checkSecurityPolicy;
    private checkIncidentResponse;
    analyzeGaps(result: AuditRunResult): PCIDSSGap[];
    generateReport(result: AuditRunResult, outputDir: string): string;
}
//# sourceMappingURL=pcidss.d.ts.map