/**
 * Platform-owned origins the renderer itself emits references to.
 *
 * These are not third-party allowances. The renderer writes these URLs into
 * every document it serves -- React from the ESM CDN, optimized images from
 * the platform image service -- so a policy that omits them forbids the same
 * response's own assets. Keeping them in one list means the policy and the
 * emitters cannot drift apart silently.
 *
 * Project-owned external origins (analytics, a customer CDN) are deliberately
 * absent: those belong to the project, which declares them through
 * `security.csp`. Widening the default for them would grant every hosted site
 * an origin it never asked for.
 *
 * Google Fonts is the one external family that is platform-emitted rather than
 * project-owned, because `veryfront/fonts` (`GoogleFonts` in
 * `src/react/fonts/index.ts`) writes the `fonts.googleapis.com` stylesheet and
 * the `fonts.gstatic.com` preconnect into the document itself. It sits in the
 * droppable baseline rather than the required floor: the renderer only emits
 * those URLs for projects that call the component, so a project that does not
 * use it may drop them with `security.csp: { styleSrc: null, fontSrc: null }`.
 *
 * @module security/http/platform-asset-origins
 */
/** Origin serving the platform's optimized image variants. */
export declare const PLATFORM_IMAGE_ORIGIN = "https://images.veryfront.com";
/** Origin serving platform-hosted static assets that image URLs wrap. */
export declare const PLATFORM_CDN_ORIGIN = "https://cdn.veryfront.com";
/** Script origins the renderer emits tags for. */
export declare const PLATFORM_SCRIPT_ORIGINS: readonly ["https://esm.sh"];
/** Image origins the renderer emits URLs for. */
export declare const PLATFORM_IMAGE_ORIGINS: readonly ["https://images.veryfront.com", "https://cdn.veryfront.com"];
/** Origin serving the stylesheet `veryfront/fonts` links. */
export declare const GOOGLE_FONTS_STYLESHEET_ORIGIN = "https://fonts.googleapis.com";
/** Origin serving the font files that stylesheet references. */
export declare const GOOGLE_FONTS_FILE_ORIGIN = "https://fonts.gstatic.com";
/** Style origins `veryfront/fonts` emits `<link rel="stylesheet">` tags for. */
export declare const PLATFORM_FONT_STYLE_ORIGINS: readonly ["https://fonts.googleapis.com"];
/** Font-file origins the stylesheet those tags load then fetches from. */
export declare const PLATFORM_FONT_FILE_ORIGINS: readonly ["https://fonts.gstatic.com"];
/** Every platform-owned origin permitted by the default policy. */
export declare const PLATFORM_ASSET_ORIGINS: readonly ["https://esm.sh", "https://images.veryfront.com", "https://cdn.veryfront.com", "https://fonts.googleapis.com", "https://fonts.gstatic.com"];
//# sourceMappingURL=platform-asset-origins.d.ts.map