/**
 * Address derivation for the static-site contact form.
 *
 * The generator validates `forms.from` against these rules and the CDK
 * construct derives the defaults from them, so they are a coupled pair: a
 * change to the default sender that landed on one side only would deploy an
 * endpoint whose IAM `ses:FromAddress` condition denies its own send.
 */
/** Local part of the default envelope sender: `noreply@<domain>`. */
export declare const DEFAULT_FORMS_FROM_LOCAL_PART = "noreply";
/**
 * The envelope sender used when `forms.from` is absent. Sits at the site's
 * domain because SES sends only from a verified identity.
 */
export declare function defaultFormsFromAddress(domain: string): string;
/** The origin allowed to POST the form when `forms.corsOrigin` is absent. */
export declare function defaultFormsCorsOrigin(domain: string): string;
/**
 * Whether `address` sits at exactly `domain`. Subdomains are rejected: the
 * pattern grants `ses:SendEmail` under a `ses:FromAddress` condition pinned to
 * the address, so an address SES would accept but the policy would not is a
 * deploy-green/runtime-500 trap.
 */
export declare function isAddressAtDomain(address: string, domain: string): boolean;