import { CanActivate, ExecutionContext } from '@nestjs/common';
import { Reflector } from '@nestjs/core';
import { AuthenticationModuleOptions } from '../authentication-module-options.interface';
/** Header key used for internal Kubernetes service authentication */
export declare const SERVICE_AUTH_HEADER_KEY = "X-itlab-k8s-auth";
/**
 * Guard validating service-to-service requests using a shared token.
 */
export declare class ServiceAuthGuard implements CanActivate {
    private readonly authenticationOptions;
    private readonly reflector;
    constructor(authenticationOptions: AuthenticationModuleOptions, reflector: Reflector);
    canActivate(context: ExecutionContext): boolean;
}
/**
 * Decorator for routes/controllers accessible only by internal services.
 */
export declare function RequireServiceAuth(): MethodDecorator & ClassDecorator;