import { Server } from 'node:http';

/** Node-side hosting for a built SandboxedJs browser application. */

/** These must be sent on the host document, not just the guest's HTTP responses. */
declare const browserIsolationHeaders: Readonly<{
    "Cross-Origin-Opener-Policy": "same-origin";
    "Cross-Origin-Embedder-Policy": "require-corp";
}>;
/**
 * Serve a built host application with the prerequisites for guest workers and
 * threaded WASM. Loopback-only by default; use HTTPS at a reverse proxy for
 * remote access. An arbitrary HTTP origin is not a secure browser context.
 */
declare function serveBrowserApp(options: {
    directory: string;
    port?: number;
    hostname?: string;
    /**
     * The outbound proxy this host serves for the containers it hosts.
     *
     * On by default, because a container in a browser cannot reach an API that
     * sends no CORS headers without one, and a host that serves the page is
     * already the right place to put it -- same origin, nothing else to start,
     * and the container finds it without being configured. `allow` narrows what
     * it will fetch; `false` turns it off for a host that wants none.
     */
    egress?: false | {
        allow?: string[];
    };
}): Promise<{
    server: Server;
    url: string;
    close(): Promise<void>;
}>;

export { browserIsolationHeaders, serveBrowserApp };