export declare function safeExternalUrl(value: unknown, extraTrustedHosts?: string[]): string | undefined;
export declare function isTrustedExternalHost(host: string, extraTrustedHosts?: string[]): boolean;
/**
 * Normalize a single managed trusted host. Accepts a bare host or a pasted URL.
 * Returns the cleaned host (lowercase, trailing dot stripped) or undefined when invalid.
 * Rejects values that still contain a path, whitespace, credentials, or a port.
 */
export declare function normalizeTrustedHost(value: unknown): string | undefined;
/**
 * Normalize a managed trusted-host list. Accepts a string[] (preferences shape)
 * or a comma-separated string. Drops invalid/empty entries and dedupes preserving
 * first-seen order. This is the single normalizer used on save and on read.
 */
export declare function normalizeTrustedHosts(value: unknown): string[];
//# sourceMappingURL=url-safety.d.ts.map