import type { OpenAPIServer } from '@redocly/api-docs';
/**
 * Build case-insensitive host matchers from an API's server URL templates. A server URL host
 * may contain server-variable placeholders (e.g. a tenant `{subdomain}`); each placeholder
 * expands to its `enum` values, or - when free-form - to one DNS label plus any fixed parent
 * domain carried by the variable's `default`. So `{subdomain}.dealpos.com` matches
 * `acme.dealpos.com`, and a whole-host `{subdomain}` defaulting to `acme.dealpos.net` matches
 * `<tenant>.dealpos.net`, but neither matches `a.b.dealpos.com`, the bare parent domain, or an
 * unrelated host.
 */
export declare function buildAllowedHostMatchers(servers?: readonly OpenAPIServer[]): RegExp[];
export declare function isHostAllowed(host: string, matchers: readonly RegExp[]): boolean;
//# sourceMappingURL=allowed-hosts.d.ts.map