import type { Connector, ConnectorConfig, SchemaTable, QueryResult, ConnectorCapabilities } from '../types.js';
export declare class OpenApiConnector implements Connector {
    name: string;
    description: string;
    capabilities: ConnectorCapabilities;
    private config;
    private endpoints;
    private openApiDoc;
    private specOrigin?;
    constructor(config: ConnectorConfig);
    connect(): Promise<void>;
    disconnect(): Promise<void>;
    listTables(): Promise<SchemaTable[]>;
    describeTable(table: string): Promise<SchemaTable>;
    query(sql: string, params?: unknown[]): Promise<QueryResult>;
    search(query: string, tables?: string[]): Promise<QueryResult>;
    private normalizeTableName;
    private resolveRef;
    private getSchemaTypeString;
    private getBaseUrl;
    private isHttpUrl;
    private allowedBaseUrls;
    private isAllowedByConfig;
    static readonly MAX_REDIRECTS = 5;
    /** Same ceiling as the query payload cap (`MAX_SEARCH_PAYLOAD_BYTES`). */
    static readonly MAX_BODY_BYTES: number;
    readJsonCapped(res: Response, purpose: string): Promise<unknown>;
    /**
     * HTTPS + allow-list + private-IP check, then fetch with redirect:manual
     * and DNS pinned to the approved address (undici Agent lookup).
     * TLS SNI stays the original hostname.
     */
    safeFetch(url: string, init: RequestInit, purpose: string): Promise<Response>;
    private pinnedDispatcher;
    private doFetch;
    /** Returns resolved public addresses. */
    enforceSafeRemoteUrl(rawUrl: string, purpose: string): Promise<string[]>;
    private resolveHost;
    private isPrivateOrReservedIp;
}
//# sourceMappingURL=openapi.d.ts.map