/**
 * Security emitters, typed wrappers for SecurityEvent domain.
 */
import type { RuntimeEventBus } from '../events/index.js';
import type { EmitterContext } from './index.js';
export declare function emitTokenScopeViolation(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    tokenId: string;
    label: string;
    policyId: string;
    excessScopes: string[];
}): void;
export declare function emitTokenRotationWarning(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    tokenId: string;
    label: string;
    msUntilDue: number;
    dueAt: number;
    ageMs: number;
}): void;
export declare function emitTokenRotationExpired(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    tokenId: string;
    label: string;
    ageMs: number;
    cadenceMs: number;
    dueAt: number;
}): void;
export declare function emitTokenBlocked(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    tokenId: string;
    label: string;
    reason: 'scope_violation' | 'rotation_overdue' | 'scope_violation_and_rotation_overdue';
}): void;
/** Emit AUTH_SUCCEEDED when a user authenticates successfully. Never include credential values. */
export declare function emitAuthSucceeded(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    username: string;
    sessionId: string;
    clientIp: string;
    method: 'password' | 'cookie' | 'token';
}): void;
/** Emit AUTH_FAILED when an authentication attempt fails. Never include credential values. */
export declare function emitAuthFailed(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    usernameAttempted: string;
    clientIp: string;
    reason: 'invalid_credentials' | 'rate_limited' | 'session_expired' | 'origin_denied' | 'unknown';
}): void;
/** Emit COMPANION_PAIR_REQUESTED when a pairing request is initiated. */
export declare function emitCompanionPairRequested(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    clientIp: string;
}): void;
/** Emit COMPANION_PAIR_VERIFIED when a companion pairing is verified. */
export declare function emitCompanionPairVerified(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    tokenId: string;
    clientIp: string;
}): void;
/** Emit COMPANION_TOKEN_ROTATED when a companion token is rotated. */
export declare function emitCompanionTokenRotated(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    newTokenId: string;
    clientIp: string;
}): void;
/** Emit COMPANION_TOKEN_REVOKED when a companion token is revoked. */
export declare function emitCompanionTokenRevoked(bus: RuntimeEventBus, ctx: EmitterContext, data: {
    clientIp: string;
    reason?: string;
}): void;
//# sourceMappingURL=security.d.ts.map