import { RequestHandler } from "express";
import { ElnoraConfig } from "../types.js";
/**
 * CORS middleware restricting origins to the Elnora platform domain.
 * CoSAI MCP-T7: Prevent cross-origin data leaks and CORS policy bypass.
 *
 * MCP clients communicate via direct HTTP (not browser), so CORS is primarily
 * defense-in-depth against browser-based attacks targeting the MCP endpoint.
 */
export declare function corsMiddleware(config: ElnoraConfig): RequestHandler;
//# sourceMappingURL=cors.d.ts.map