/** Trusted desktop-host policy. Request parameters and plugin preferences cannot override it. */
export declare const ARKME_HOST_POLICY_VERSION = 1;
export type HostCapability = 'clientSelfUpdate' | 'runtimeSelfUpdate' | 'executableExtensionInstall';
export interface ArkmeHostPolicy {
    schemaVersion: 1;
    distribution: 'website' | 'mas';
    capabilities: Readonly<Record<HostCapability, boolean>>;
    credentialServicePrefix?: string;
}
export declare function resolveHostPolicy(env?: Readonly<Record<string, string | undefined>>): ArkmeHostPolicy;
export declare function hostAllows(capability: HostCapability): boolean;
export declare function assertHostCapability(capability: HostCapability): void;
//# sourceMappingURL=host-policy.d.ts.map