/**
 * The convention every QA harness account follows, including the beta E2E
 * account (`BETA_E2E_EMAIL` must contain `+autoz`). Harnesses assert it so a
 * run can never sign in as a real person; exclusion uses
 * `isTestIdentityEmail`, which includes this marker.
 */
export declare function isAutozQaEmail(value: unknown): boolean;
/**
 * The one rule for "this email belongs to a test identity": reserved test
 * domains, QA harness markers, and any deployment-configured extras (exact
 * addresses or `@domain` entries). Test identities keep working everywhere;
 * they are excluded from metrics and non-auth email. Server code calls
 * `isTestIdentity` from `@agent-native/core/server`, which supplies the
 * configured extras. Browser code never sees the extras; it pairs this with
 * the session response's server-resolved `testIdentity` flag.
 */
export declare function isTestIdentityEmail(value: unknown, extraEmails?: readonly string[]): boolean;
/** @deprecated Use `isTestIdentityEmail` (or `isTestIdentity` on the server). */
export declare function isQaTestEmail(value: unknown): boolean;
/**
 * `isTestIdentityEmail` as one boolean SQL expression over `column`, using
 * only functions PostgreSQL and BigQuery share. `column` is trusted SQL from
 * the caller; every literal is checked.
 */
export declare function testIdentityEmailSql(column: string, extraEmails?: readonly string[]): string;