/**
 * Whether a top-frame navigation belongs to the payment journey and must stay
 * inside the WebView, rather than being handed to the system browser.
 *
 * The rule is an explicit allowlist, not "anything the page asks for": this is
 * a payment surface, so an open redirect out of the embed must not be able to
 * put an arbitrary origin behind the widget's chrome.
 *
 * Three things stay:
 * - the embed's own origin;
 * - any other Swapped host (`*.swapped.com` / `.dev`) except the marketing
 *   site — the flow redirects to a per-partner host such as
 *   `northstake.swapped.com` after login;
 * - the PSP that runs the card charge and hosts the 3DS challenge.
 *
 * The issuer's ACS challenge is deliberately absent: its host is chosen by the
 * cardholder's bank and cannot be enumerated. It does not need to be — the PSP
 * renders it in an iframe, and subframes never reach this gate.
 */
export declare function staysInWebView(target: string, embedOrigin: string | null): boolean;
//# sourceMappingURL=paymentNavigation.d.ts.map