/**
 * Admin API routes for the access log (access_log table).
 *
 * Operator-facing read access to read + orchestrator-admin mutation attempts
 * captured with ActorPrincipal attribution. Mirrors the dashboard's
 * dashboard.access-log.list WS handler but exposed over HTTP + Bearer auth
 * so operators can dogfood from the CLI without going through the dashboard.
 *
 *   GET /api/v1/admin/access-log
 *     Filters: orgId, actorType, actorId, action, source, outcome,
 *              targetType, targetId, from, to, limit, cursor
 *     Requires: access_log.read
 *
 *   GET /api/v1/admin/access-log/:id
 *     Requires: access_log.read
 */
import { Hono } from 'hono';
import type { AccessLogWriter } from '../audit/access-log.js';
import type { TokenManager } from '../secrets/token-manager.js';
import type { RbacEnforcer, Role } from '../secrets/rbac.js';
export interface AdminAccessLogRoutesDeps {
    accessLog: AccessLogWriter;
    tokenManager: TokenManager;
    rbac: RbacEnforcer;
}
type AdminEnv = {
    Variables: {
        role: Role;
        userId: string;
        routingKey: string | null;
    };
};
export declare function createAdminAccessLogRoutes(deps: AdminAccessLogRoutesDeps): Hono<AdminEnv>;
export {};
//# sourceMappingURL=admin-access-log.d.ts.map