/**
 * Fetch tool — outbound HTTP for automations and agent use.
 *
 * NOTE: this is an *agent* tool (LLM function call), not an *extension* (the
 * sandboxed Alpine.js mini-app primitive). It lives in this directory because
 * it shares SSRF-safe URL/proxy helpers with the extension iframe proxy.
 *
 * Supports ${keys.NAME} reference substitution in URL, headers, and body.
 * Values are resolved server-side AFTER the model emits the tool call —
 * the raw secret never enters the model's context.
 */
import type { ActionEntry } from "../agent/production-agent.js";
import type { ResolvedKeyReference } from "../secrets/substitution.js";
export interface FetchToolOptions {
    resolveKeys?: (text: string) => Promise<{
        resolved: string;
        usedKeys: string[];
        secretValues?: string[];
        resolvedKeys?: ResolvedKeyReference[];
    }>;
    validateUrl?: (url: string, usedKeys: string[], resolvedKeys?: ResolvedKeyReference[]) => Promise<boolean>;
}
export declare function createFetchToolEntry(opts?: FetchToolOptions): Record<string, ActionEntry>;