/**
 * Security Hardening Module - v1.0.0
 * Input sanitization, CORS, security headers, API key rotation.
 */
import type { Request, Response, NextFunction } from 'express';
export declare function sanitizeInput(input: string): string;
export declare function detectInjection(input: string): {
    safe: boolean;
    threats: string[];
};
export interface SecurityHeadersConfig {
    contentSecurityPolicy?: string;
    enableHSTS?: boolean;
    frameDeny?: boolean;
    xssProtection?: boolean;
    noSniff?: boolean;
    referrerPolicy?: string;
}
export declare function securityHeaders(config?: SecurityHeadersConfig): (_req: Request, res: Response, next: NextFunction) => void;
export interface CORSConfig {
    origins?: string[];
    methods?: string[];
    allowHeaders?: string[];
    credentials?: boolean;
    maxAge?: number;
}
export declare function corsMiddleware(config?: CORSConfig): (req: Request, res: Response, next: NextFunction) => void;
export interface APIKeyEntry {
    key: string;
    label?: string;
    createdAt: number;
    expiresAt?: number;
    active: boolean;
}
export declare class APIKeyManager {
    private keys;
    addKey(key: string, opts?: {
        label?: string;
        expiresAt?: number;
    }): void;
    revokeKey(key: string): boolean;
    isValid(key: string): boolean;
    rotateKey(oldKey: string, newKey: string): boolean;
    listActive(): APIKeyEntry[];
    cleanup(): number;
}
export declare function inputValidation(): (req: Request, res: Response, next: NextFunction) => void;
//# sourceMappingURL=security.d.ts.map