/** Stable prefix for port-scoped privileged dashboard session cookies. */
import "../../../_dnt.polyfills.js";
export declare const DASHBOARD_CSRF_COOKIE_NAME = "vf_dashboard_session";
/** Shared request header carrying the shell's session-bound CSRF token. */
export declare const DASHBOARD_CSRF_HEADER_NAME = "x-veryfront-dashboard-csrf";
/** Shared metadata name used to pass the CSRF token into the extension UI. */
export declare const DASHBOARD_CSRF_META_NAME = "veryfront-dashboard-csrf";
/** Asset-independent endpoint used by trusted headless development clients. */
export declare const DASHBOARD_SESSION_PATH = "/_dev/session";
/**
 * Derive the host cookie name for one concrete development-server listener.
 *
 * Cookies are scoped by host and path, but not by port. Including the validated
 * listener port prevents two local servers on the same hostname from
 * overwriting or accepting each other's dashboard session cookie.
 */
export declare function getDashboardSessionCookieName(listenerPort: number): string;
/** A 32-byte token encoded as unpadded base64url. */
export declare const DASHBOARD_CSRF_TOKEN_PATTERN: RegExp;
/** Stable shell identity consumed by the extension-owned shared bundle. */
export declare const DEV_UI_KIND_ATTRIBUTE = "data-veryfront-dev-ui";
export type DevUiKind = "dashboard" | "projects";
//# sourceMappingURL=protocol.d.ts.map