// Public surface of the security module.
//
// All external imports should target `@/lib/security`, not deep paths.
// Internal files under `lib/security/` are not public API.
export {
  buildCspDirectives,
  buildCspHeader,
  buildReportingEndpointsHeader,
  cspHeaderName,
  CSP_HEADER_ENFORCE,
  CSP_HEADER_REPORT_ONLY,
  CSP_REPORT_ENDPOINT,
  CSP_REPORT_GROUP,
  describeStaticPolicy,
  generateNonce,
  getCspMode,
} from './csp'
export type { BuildCspHeaderOptions, BuildCspOptions, CspMode } from './csp'

export { normalizeCspReportBody, isLowSignalReport } from './csp-report'
export type { NormalizedCspReport } from './csp-report'

export { csrfConfig, ensureCsrfCookie, requireCsrf, checkCsrf } from './csrf'