/**
 * String-based nginx config validator for fuz_app deploy configs.
 *
 * Checks consumer `NGINX_CONFIG` template strings for required security
 * properties. This is pattern matching on template strings, not a real
 * nginx parser — it catches common security omissions but won't catch
 * all possible misconfigurations.
 *
 * @module
 */
/**
 * Result of validating an nginx config template string.
 */
export interface NginxValidationResult {
    /** True when no errors were detected. Warnings do not affect this flag. */
    ok: boolean;
    /** Non-fatal issues — missing optional headers, weakened defaults, etc. */
    warnings: Array<string>;
    /** Fatal issues — missing `/api` block, missing required security headers, etc. */
    errors: Array<string>;
}
/**
 * Validate an nginx config template string for security properties.
 *
 * Checks for required security headers, Authorization stripping in `/api`
 * blocks, and the nginx `add_header` inheritance gotcha. Designed for
 * fuz_app consumer deploy configs (zap.ts `NGINX_CONFIG` constants).
 *
 * Limitations: string pattern matching, not a real nginx parser. Catches
 * common omissions in fuz_app deploy configs but won't catch all possible
 * misconfigurations.
 */
export declare const validate_nginx_config: (config: string) => NginxValidationResult;
//# sourceMappingURL=validate_nginx.d.ts.map