/**
 * Returns the domain attribute string for identity cookies.
 * - false → "" (no domain attribute, host-only)
 * - true  → ".example.com" when a valid apex domain is detected,
 *            or "" on localhost / IP / single-label hosts
 *
 * @param crossSubdomain Whether cookies should be shared across subdomains.
 */
export declare function getIdentityCookieDomain(crossSubdomain?: boolean): string;
/**
 * Security attributes for identity/session cookies (user-id,
 * active-wallet, wallet-detected/identified).
 *
 * - `sameSite: "lax"` — first-party analytics identity. Lax keeps the
 *   cookie on top-level navigations (so attribution survives a click-in
 *   from another site) while blocking it on cross-site subrequests.
 *   Strict would silently drop identity on inbound navigation.
 * - `secure` — only on HTTPS. Setting Secure over plain HTTP (local dev)
 *   makes the browser reject the cookie outright, so it must be
 *   conditional.
 */
export declare function getIdentityCookieSecurity(): {
    sameSite: "lax";
    secure: boolean;
};
//# sourceMappingURL=cookiePolicy.d.ts.map