/**
 * Standalone HTTP response helper for custom server handlers.
 */
import type { SerializedHead } from "./head";
export interface HttpResponseOptions {
    status?: number;
    headers?: HeadersInit;
    /**
     * CSP nonce for inline scripts. When set (and `contentSecurityPolicy` is
     * not), a conservative default CSP is emitted with `'nonce-${nonce}'` for
     * `script-src` — pass the same nonce to head `<script nonce=…>` tags.
     */
    cspNonce?: string;
    /** Full `Content-Security-Policy` string; overrides the nonce-derived default. */
    contentSecurityPolicy?: string;
}
/**
 * Build an HTTP `Response` for SSR output with sensible security headers:
 * `Content-Type: text/html`, `X-Content-Type-Options: nosniff`,
 * `Referrer-Policy`, `Cache-Control: no-store`, and an optional CSP. This is
 * a low-level helper — prefer {@link RouterBuilder.respond} for the full
 * render+head+headers pipeline.
 */
export declare const httpResponse: (body: string | null, options?: HttpResponseOptions) => Response;
export declare const EMPTY_HEAD: SerializedHead;
/**
 * Options for {@link RouterBuilder.respond}.
 */