export type SecurityLogLevel = "info" | "warn" | "error";
export type SecurityLogCategory = "destructive" | "auth" | "ssh" | "mcp" | "config";
export type SecurityLogCaller = "cli" | "mcp";
export type SecurityLogResult = "allow" | "block" | "success" | "failure";
export interface SecurityLogEntry {
    ts: string;
    level: SecurityLogLevel;
    action: string;
    category: SecurityLogCategory;
    server?: string;
    ip?: string;
    result: SecurityLogResult;
    reason?: string;
    caller: SecurityLogCaller;
    duration_ms?: number;
}
export declare function logSecurityEvent(entry: Omit<SecurityLogEntry, "ts" | "caller">, options?: {
    maxBytes?: number;
}): void;
export declare function detectCaller(): SecurityLogCaller;
export declare class SecurityLogger {
    static warn(message: string, context?: Record<string, unknown>): void;
}
//# sourceMappingURL=securityLogger.d.ts.map