/**
 * Match an origin against a pattern. Supports exact match, the bare `*` (match-all), and a single
 * `*` wildcard standing for one prefix/suffix gap (e.g. `https://*.example.com`). Patterns with more
 * than one `*` are NOT glob-expanded — they fall back to exact match (so a multi-wildcard pattern
 * matches nothing unless it equals the origin verbatim). Keep CORS patterns to a single wildcard.
 */
export declare function matchOriginPattern(origin: string, pattern: string): boolean;
/** Check whether a request origin matches any entry in an allowlist. Delegates to {@link matchOriginPattern} per entry. */
export declare function isAllowedOrigin(origin: string | undefined | null, allowedOrigins: string[]): boolean;
/** Return the request origin if it is in the allowlist; otherwise return a safe `fallback` origin. */
export declare function getValidatedOrigin(origin: string | undefined | null, allowedOrigins: string[], fallback: string): string;
//# sourceMappingURL=origin.d.ts.map