import type { Environment, InternalEnvironment } from '../types';
/**
 * Resolved env used internally to pick the CDN origin and forward to
 * `@zerohash-sdk/*-react` components. Combines the public {@link Environment}
 * surface (`'cert' | 'prod'`) with internal-only QA targets
 * ({@link InternalEnvironment} — `'local' | 'dev'`).
 */
export type NewSdkEnv = Environment | InternalEnvironment;
type GatingEnv = 'gating';
type AnyEnv = NewSdkEnv | GatingEnv;
/** CDN origin for env; `??` is a JS runtime guard, dead code from TS's perspective. */
export declare function getNewSdkCdnOrigin(env: AnyEnv): string;
/**
 * Origins the new `@zerohash-sdk/*` iframes may post from; `messageRouter`
 * trusts any of these. Drop the connect.xyz entries once the migration is done.
 */
export declare const TRUSTED_NEW_SDK_ORIGINS: ReadonlySet<string>;
/**
 * Derive the environment from the host app's `zeroHashAppsURL`. Returns
 * `'prod'` for any hostname not in the known lists, which is the safest
 * default for a production-hardcoded CDN. When the fallback path is taken
 * we log a one-time `console.warn` so integrators on a host outside the
 * allowlist can spot the misconfiguration instead of silently being
 * pointed at the production CDN.
 */
export declare function getNewSdkEnv(url: string): AnyEnv;
/**
 * Test-only: clear the warn-once cache so suites can assert the warning
 * fires per URL without leaking state across tests.
 */
export declare function _resetWarnedFallbackUrls(): void;
/**
 * Auth-component env literal. `@connect-xyz/auth-react` only accepts
 * `'sandbox' | 'production'` (no `dev` or `local`), so non-prod SDK envs
 * collapse to `sandbox` — Auth's sandbox API serves cert/dev/local data.
 */
export type AuthEnv = 'sandbox' | 'production';
export declare function toAuthEnv(env: AnyEnv): AuthEnv;
export {};