import { type LocalProcess, type ServicePreset } from "@cotal-ai/workspace";
export declare const brokerPreset: ServicePreset;
/** The address rules the broker service applies before any launch: one nats:// or tls:// URL
 *  without credentials, path, query or fragment, one concrete TCP port and one concrete IP literal.
 *  `cotal up` runs them before it writes anything, so an address the service would refuse never
 *  becomes a stack's recorded address. The host is returned URL-shaped. */
export declare function brokerListenAddress(server: string): {
    protocol: string;
    host: string;
    port: number;
};
/**
 * Set the broker's ports report to `0600`. nats-server writes it under the umask it inherited, so a
 * group-writable umask leaves it `0664`. The change goes through a descriptor that follows no
 * symlink and only to a regular file this user owns, as other private files are tightened.
 */
export declare function narrowPortsReport(path: string): void;
export declare const brokerService: LocalProcess;
//# sourceMappingURL=broker-service.d.ts.map