import { HttpException, type Middleware } from '@pondoknusa/http';
export type CsrfFailureCode = 'CSRF_SESSION_TOKEN_MISSING' | 'CSRF_TOKEN_MISMATCH';
export declare class VerifyCsrfTokenException extends HttpException {
    readonly code: CsrfFailureCode;
    constructor(message?: string, code?: CsrfFailureCode);
}
export interface VerifyCsrfTokenOptions {
    except?: string[];
}
export declare function createVerifyCsrfTokenMiddleware(options?: VerifyCsrfTokenOptions): Middleware;
/**
 * Compiles a CSRF except path pattern.
 * `*` matches a single path segment; `**` matches any depth (including `/`).
 * Globstars are substituted before single `*` so `/api/**` does not become `/api/.[^/]*`.
 */
export declare function compilePathPattern(pattern: string): RegExp;
//# sourceMappingURL=verify-csrf-token.d.ts.map