/**
 * Zod schema for validating mcp-session-id header format.
 * Uses Zod's built-in validators to prevent ReDoS attacks and ensure safe validation.
 *
 * - Max length: 2048 characters (encrypted session IDs can be 460-700+ characters
 *   due to AES-256-GCM encryption producing base64url format: iv.tag.ciphertext)
 * - Only allows printable ASCII characters (0x20-0x7E)
 * - Rejects control characters and null bytes
 */
export declare const mcpSessionHeaderSchema: import("@frontmcp/lazy-zod").ZodString;
/**
 * Validate mcp-session-id header using Zod schema.
 * Returns undefined for invalid or missing values.
 */
export declare function validateMcpSessionHeader(value: string | undefined): string | undefined;
//# sourceMappingURL=session-header.schema.d.ts.map