/**
 * Network / blockhash sanity check.
 *
 * The Surfpool localnet implementation embeds a recognizable prefix into
 * every blockhash it returns. We use this to catch the common footgun
 * where a client signs a transaction against a Surfpool RPC and submits
 * it to a server configured for a real cluster (mainnet/devnet).
 *
 * The check is asymmetric:
 *
 *   - If the blockhash starts with the Surfpool prefix, the transaction
 *     was DEFINITELY signed against a Surfpool localnet. The only network
 *     slug for which that's valid is `localnet` — any other slug must
 *     reject the credential up-front.
 *
 *   - If the blockhash does NOT start with the Surfpool prefix, we can't
 *     tell what cluster it came from (real localnet doesn't add a prefix
 *     either), so we accept it.
 */
/**
 * Base58 prefix embedded in every blockhash returned by the Surfpool
 * localnet implementation.
 */
export declare const SURFPOOL_BLOCKHASH_PREFIX = "SURFNETxSAFEHASH";
/**
 * Network slug for Solana's local validator. The only network for which
 * a Surfpool-prefixed blockhash is valid.
 */
export declare const LOCALNET_NETWORK = "localnet";
/**
 * Error thrown when a Surfpool-signed blockhash is submitted to a server
 * configured for any network other than `localnet`.
 */
export declare class WrongNetworkError extends Error {
    readonly blockhash: string;
    readonly code: "wrong-network";
    readonly expected: string;
    readonly received: "localnet";
    constructor(opts: {
        blockhash: string;
        expected: string;
        message: string;
    });
}
/**
 * Pure check: throws if a Surfpool-prefixed blockhash is submitted to a
 * server configured for any network other than `localnet`.
 *
 * Returns silently in every other case — a non-prefixed blockhash is
 * undetectable as wrong-cluster from the slug alone, so we let the
 * downstream broadcast handle it.
 */
export declare function checkNetworkBlockhash(network: string, blockhashB58: string): void;
//# sourceMappingURL=network-check.d.ts.map