import { type GjcPluginMcpManifestEntry } from "./types";
export declare function isDeniedIpv4(host: string): boolean;
export declare function isDeniedIpv6(host: string): boolean;
/**
 * Synchronous URL policy (scheme, credentials, host literal ranges). Used for
 * the primary endpoint and any redirect/token/discovery URL.
 */
export declare function assertUrlAllowed(rawUrl: string, label?: string): URL;
/** Reject headers with control characters / CRLF injection. */
export declare function assertHeadersAllowed(headers: Record<string, string> | undefined): void;
/**
 * Runtime DNS check: resolve the host and ensure no resolved address falls in a
 * denied range (covers DNS rebinding when re-run before each connect).
 */
export declare function assertDnsResolvesPublic(hostname: string, label?: string): Promise<void>;
export interface StdioPolicyContext {
    pluginRoot: string;
}
/** stdio launcher/path confinement policy. */
export declare function assertStdioAllowed(entry: GjcPluginMcpManifestEntry, ctx: StdioPolicyContext): void;
/**
 * Install-time MCP policy (no network required). Validates scheme/host literals
 * and stdio confinement. Runtime connect additionally calls
 * assertDnsResolvesPublic and re-validates redirect/token URLs.
 */
export declare function assertMcpInstallPolicy(entry: GjcPluginMcpManifestEntry, ctx: StdioPolicyContext): void;