/**
 * Security Headers Middleware
 *
 * Comprehensive security headers implementation for HTTP responses.
 * Integrates with boot orchestrator and API endpoints.
 *
 * @since 2026-01-07
 */
export interface HttpResponse {
    setHeader(name: string, value: string): void;
}
export interface ExpressMiddlewareParams {
    req: unknown;
    res: HttpResponse;
    next: (err?: Error) => void;
}
export interface FastifyMiddlewareParams {
    request: unknown;
    reply: HttpResponse;
    done: (err?: Error) => void;
}
export interface SecurityHeadersConfig {
    enableCSP: boolean;
    enableHSTS: boolean;
    enableFrameOptions: boolean;
    enableXSSProtection: boolean;
    enableContentTypeOptions: boolean;
    enableReferrerPolicy: boolean;
    enablePermissionsPolicy: boolean;
    customCSP?: string;
    hstsMaxAge?: number;
    hstsIncludeSubdomains?: boolean;
    hstsPreload?: boolean;
}
export declare class SecurityHeadersMiddleware {
    private config;
    private headerPairs;
    constructor(config?: Partial<SecurityHeadersConfig>);
    /**
     * Apply security headers to HTTP response
     */
    applySecurityHeaders(response: HttpResponse): void;
    private rebuildHeaders;
    /**
     * Express.js middleware function
     */
    getExpressMiddleware(): (req: unknown, res: HttpResponse, next: (err?: Error) => void) => void;
    /**
     * Fastify middleware function
     */
    getFastifyMiddleware(): (request: unknown, reply: HttpResponse, done: (err?: Error) => void) => void;
    /**
     * Generic middleware for any HTTP framework
     */
    getMiddleware(): (response: HttpResponse) => void;
    /**
     * Update configuration
     */
    updateConfig(newConfig: Partial<SecurityHeadersConfig>): void;
    /**
     * Get current configuration
     */
    getConfig(): SecurityHeadersConfig;
}
export declare const securityHeadersMiddleware: SecurityHeadersMiddleware;