import type { Config } from '../config/schema.js';
import type { GatewayBindMode } from '../config/schema.js';
import type { ResolvedGatewayAuth } from './auth.js';
export type GatewayRuntimeConfig = {
    bindMode: GatewayBindMode;
    bindHost: string;
    customBindHost?: string;
    loopback: boolean;
    auth: ResolvedGatewayAuth;
    corsOrigins: string[];
    dangerouslyAllowHostHeaderOriginFallback: boolean;
    rateLimitEnabled: boolean;
    tlsEnabled: boolean;
};
/**
 * Fail-closed gateway startup guards (OpenClaw-aligned).
 * Throws when bind/auth/origin combinations are unsafe for network exposure.
 */
export declare function assertGatewayRuntimeConfig(params: {
    cfg: Config;
    auth: ResolvedGatewayAuth;
    bindOverride?: GatewayBindMode;
    port: number;
}): GatewayRuntimeConfig;