/**
 * Canonical Content-Security-Policy directive names.
 *
 * Kept as a leaf module so both the policy builder and the config validator
 * read the same list. A project that misspells a directive is told at config
 * load rather than discovering it as a silently missing protection in
 * production — an unrecognized directive name is ignored by browsers, so
 * without this check `fontSource: [...]` would look configured and do nothing.
 *
 * @module security/http/csp-directives
 */
/** Every directive a project may name in `security.csp`. */
export declare const CSP_DIRECTIVE_NAMES: readonly string[];
/**
 * A short, representative sample for error messages. Listing all 28 directives
 * buries the fix; these are the ones projects actually reach for.
 */
export declare const EXAMPLE_CSP_DIRECTIVES: readonly string[];
/**
 * Normalize a configured key to its directive name.
 *
 * `fontSrc` and `font-src` address the same directive; projects may write
 * either, and camelCase matches the surrounding config style.
 */
export declare function toCspDirectiveName(key: string): string;
/** True when a configured key names a real CSP directive. */
export declare function isCspDirectiveName(key: string): boolean;
//# sourceMappingURL=csp-directives.d.ts.map