/** True only for literal loopback hosts, never lookalike DNS names such as 127.example.com. */
export declare function isLoopbackHostname(hostname: string): boolean;
/**
 * True when the page is local: an ordinary loopback document, or a desktop webview.
 *
 * This is what gates the SDK on the page side. The gate's purpose is to stop a REMOTE WEBSITE from
 * driving a developer's local bridge — a desktop app's own webview is not that, and treating it as
 * remote is what made Reticle refuse to start inside a packaged Electron or Tauri app.
 */
export declare function isLocalPage(protocol: string, hostname: string): boolean;
/**
 * What `URL.origin` yields for a scheme that has no tuple origin — and what a browser puts in the
 * `Origin` header for the same. Desktop webviews are the common case: `tauri://localhost` on
 * macOS/Linux, `app://.` or `file://` in a packaged Electron renderer.
 */
export declare const OPAQUE_ORIGIN = "null";
/**
 * True when an Origin carries no attributable host — a desktop webview or a `file://` document.
 * Such an origin cannot be checked against `isLoopbackHostname`; callers must fall back to the
 * pairing token, exactly as they do for a request that omits `Origin` entirely.
 */
export declare function isOpaqueOrigin(origin: string): boolean;
/**
 * Best-effort classifier for labels and tool names that can trigger irreversible effects.
 *
 * `role` is the resolved ARIA role of the control. An `option` is a value picker: its text names
 * the value, not an action, so "Payment" as a select choice is not a payment. Callers that have no
 * role (a tool name, a click with no role on the descriptor) omit it and the text decides.
 */
export declare function isDangerousActionText(text: string, role?: string): boolean;