/** * CSRF Protection — Client Module * * Provides helpers for the Double-Submit Cookie pattern. * Auto-discovered by the framework via import.meta.glob. */ /** Lê o token CSRF: cookie primeiro, depois o injetado pelo SSR. */ declare function getToken(): string | undefined; /** Build headers object with the CSRF token (if available). */ declare function getHeaders(): Record; /** Ensure the CSRF cookie exists. Fetches a token if missing (e sem meta). */ declare function ensureToken(): Promise; export { ensureToken, getHeaders, getToken };