import type { IncomingMessage } from "node:http";
import { InvalidCapabilityTokenError } from "./errors.js";
export declare function assertMutationSecurity(request: IncomingMessage, serverOrigin: string, capabilityToken: string): void;
export declare function isInvalidCapabilityTokenError(error: unknown): error is InvalidCapabilityTokenError;
//# sourceMappingURL=csrf.d.ts.map