import { PluginOption } from 'vite';

/**
 * Configuration options for the SRI plugin.
 * Defines all available settings for customizing SRI generation behavior.
 */
interface SriPluginOptions {
    /** The hashing algorithm to use for generating SRI hashes. */
    algorithm?: "sha256" | "sha384" | "sha512";
    /** The CORS setting to use for fetched scripts and styles. */
    crossorigin?: "anonymous" | "use-credentials";
    /** Enable in-memory caching for remote fetches. Default: true */
    fetchCache?: boolean;
    /** Abort remote fetches after the given milliseconds. Default: 5000 (0 disables). */
    fetchTimeoutMs?: number;
    /** Add rel="modulepreload" with integrity for discovered dynamic chunks. Default: true */
    preloadDynamicChunks?: boolean;
    /** Inject a tiny runtime that sets integrity on dynamically inserted <script>/<link>. Default: true */
    runtimePatchDynamicLinks?: boolean;
    /** Skip SRI generation for resources matching these patterns. Supports exact matches and simple glob patterns with '*'. */
    skipResources?: string[];
    /** Enable verbose build logging. When false (default), only warnings, errors, and a completion summary are shown. */
    verboseLogging?: boolean;
}
/**
 * Rewrites every dynamic `import(...)` call expression in a chunk to
 * `__sriImport(import.meta.url, ...)` so the runtime-injected JS-level
 * verifier can enforce integrity before executing the module. The original
 * `import(` syntax inside the runtime itself is preserved because the runtime
 * is concatenated AFTER this rewrite step.
 *
 * `import.meta.url` is threaded through as the first argument because native
 * `import()` resolves relative specifiers against the IMPORTING MODULE's URL,
 * not the document URL. Rollup emits inter-chunk dynamic imports as
 * module-relative specifiers (e.g. `import('./asset.js')` from a chunk in
 * `assets/js/`), so without the importer's URL the runtime would resolve the
 * specifier against `location.href` and look up the wrong pathname
 * (issue #32). The injected `import.meta.url` text is never re-matched by the
 * rewrite regex: `import` there is followed by `.`, not `(`.
 */
declare function rewriteDynamicImports(code: string): string;
/**
 * Builds the self-contained runtime statement that is prepended to entry
 * chunks. The runtime is shipped by serializing `installSriRuntime` with
 * `.toString()` and embedding the source into the consumer's bundle.
 *
 * The plugin itself is bundled with esbuild (via tsup), whose `keepNames`
 * transform can wrap named function expressions in a module-scoped
 * `__name(fn, "name")` helper. That helper lives at the top of the plugin's
 * own output — NOT inside the serialized function — so the injected copy
 * references an `__name` that is undefined in the consumer bundle. Because the
 * runtime guards its setup in a best-effort `try/catch`, the resulting
 * `ReferenceError: __name is not defined` is swallowed and
 * `globalThis.__sriImport` is never installed; every rewritten dynamic import
 * then fails with "`__sriImport` is not defined" (issue #30).
 *
 * To keep the injected runtime correct regardless of how the plugin is
 * bundled, the serialized function is evaluated inside a wrapper that defines a
 * local `__name` shim in its lexical scope. `__name` only needs to return its
 * first argument; the function-name assignment it performs is cosmetic.
 *
 * `opts.base` is the resolved Vite `base` (defaults to "/"). It is forwarded
 * to the runtime so integrity lookups can strip the base prefix from URLs
 * observed at runtime — the integrity map keys are '/'-rooted bundle file
 * names that never include the base.
 */
declare function buildSriRuntimeCode(runtime: (sriByPathname: Record<string, string>, opts?: Record<string, unknown>) => void, sriByPathname: Record<string, string>, opts: {
    crossorigin: "anonymous" | "use-credentials" | undefined;
    skipResources: string[];
    enforceDynamicImports: boolean;
    base?: string;
}): string;
/**
 * Vite plugin to add Subresource Integrity (SRI) attributes to external assets in index.html
 * ESM-only, requires Node 18+ (uses global fetch)
 *
 * @param options - Configuration options for the plugin
 * @returns Vite plugin with SRI processing capabilities
 */
declare function sri(options?: SriPluginOptions): PluginOption;

export { type SriPluginOptions, buildSriRuntimeCode, sri as default, rewriteDynamicImports };