/**
 * Audit API routes — Phase 7 of the secrets refactor.
 *
 *   GET /api/audit  — paginated, filterable by key/actor
 *
 * Owner-only. Append-only — no DELETE / PUT exposed (master-key
 * rotation in Phase 12 will add a tooling-only path; web users only
 * read).
 *
 * Schema matches `audit_log` in SqliteEncryptedStore.initSchema() —
 * each row carries actor_type + actor_user_id|actor_system_id plus
 * ts/action/key/success/ip/user_agent/detail_json. The route returns
 * rows newest-first with simple offset pagination; the volume is
 * bounded by audit retention (default 90d). Pagination uses
 * LIMIT/OFFSET; the audit table is small enough for this to be fine
 * in v1.
 *
 * After the scope-collapse refactor, audit rows no longer carry a
 * scope dimension. Legacy `scope` / `scope_id` query params are
 * silently ignored for forward-compat with older clients.
 */
import type { FastifyInstance } from 'fastify';
import { type AuthService } from '../../services/auth-service.js';
export declare function registerAuditApiRoutes(fastify: FastifyInstance, authService: AuthService): Promise<void>;
