/**
 * Service-to-Service Authentication Module
 *
 * Provides comprehensive service-to-service authentication for Vorion.
 * Supports HMAC signature-based authentication and JWT token issuance.
 *
 * Features:
 * - Service account management (create, revoke, rotate secrets)
 * - HMAC-SHA256 request signing and verification
 * - Short-lived JWT tokens for authenticated services
 * - IP whitelist validation
 * - Permission-based access control
 *
 * @packageDocumentation
 * @module security/service-auth
 */
export { ServiceAccountStatus, type ServiceAccount, serviceAccountSchema, type CreateServiceAccountInput, createServiceAccountInputSchema, type ServiceAccountCreationResult, type SecretRotationResult, type UpdateServiceAccountInput, updateServiceAccountInputSchema, ServiceAccountError, ServiceAccountNotFoundError, ServiceAccountRevokedError, ServiceAccountSuspendedError, SERVICE_CLIENT_ID_PREFIX, generateClientSecret, generateClientId, hashClientSecret, verifyClientSecret, type IServiceAccountStore, InMemoryServiceAccountStore, ServiceAccountManager, type ServiceAccountManagerConfig, getServiceAccountStore, setServiceAccountStore, getServiceAccountManager, createServiceAccountManager, resetServiceAccountSingletons, } from './service-account.js';
export { type ServiceTokenPayload, serviceTokenPayloadSchema, type ServiceSignature, serviceSignatureSchema, type TokenVerificationResult, tokenVerificationResultSchema, type SignatureVerificationResult, ServiceTokenError, TokenExpiredError, InvalidSignatureError, SignatureTimestampError, DEFAULT_TOKEN_TTL_SECONDS, MAX_CLOCK_SKEW_SECONDS, MIN_TOKEN_TTL_SECONDS, MAX_TOKEN_TTL_SECONDS, SERVICE_TOKEN_ISSUER, SERVICE_AUTH_HEADERS, ServiceTokenService, type ServiceTokenServiceConfig, serviceTokenServiceConfigSchema, initializeServiceTokenService, getServiceTokenService, createServiceTokenService, resetServiceTokenService, createServiceAuthHeaders, extractServiceIdFromBearer, } from './service-token.js';
export { type ServiceAuthContext, type ServiceAuthenticatedRequest, type ServiceAuthMiddlewareOptions, ServiceAuthError, MissingAuthHeadersError, InvalidServiceSignatureError, IpNotAllowedError, InsufficientPermissionsError, createServiceAuthMiddleware, requireServicePermissions, requireAnyServicePermission, requireServiceTenant, getServiceAuth, requireServiceAuth, hasServiceAuth, getServiceClientId, getServiceTenantId, getServicePermissions, serviceHasPermission, serviceAuthPlugin, type ServiceAuthPluginOptions, } from './service-auth-middleware.js';
//# sourceMappingURL=index.d.ts.map