/**
 * Shared security utilities for the Axon SDK.
 *
 * SSRF prevention: validates URLs before any outbound HTTP request to a
 * user-supplied address, blocking private/loopback/link-local ranges including
 * the AWS EC2 IMDS (169.254.169.254), Azure IMDS (169.254.169.254), and
 * GCP metadata server (metadata.google.internal / 169.254.169.254).
 */
/**
 * Assert that a URL is safe to contact.
 *
 * Enforces:
 * 1. HTTPS only — rejects http://.
 * 2. No private/loopback/link-local address in the URL itself.
 * 3. DNS rebinding defence — resolves the hostname and re-validates the IP
 *    (best-effort; DNS failures never block legitimate requests).
 *
 * @param url      The URL string to validate.
 * @param provider Human-readable provider name for error messages.
 * @param label    Human-readable label for the URL (e.g. "IPFS endpoint").
 * @throws {AxonError} if the URL fails any safety check.
 */
export declare function assertSafeUrl(url: string, provider: string, label?: string): Promise<void>;
/**
 * Synchronous SSRF check for use in contexts where async is not available.
 * Only validates the URL string itself — does not perform DNS resolution.
 */
export declare function assertSafeUrlSync(url: string, provider: string, label?: string): void;
//# sourceMappingURL=security.d.ts.map