import { type AddressResolver } from "../web/insane/url-guard";
import type { MCPHttpServerConfig, MCPSseServerConfig } from "./types";
/** Mark an in-memory plugin-bundle remote MCP config for connection-bound public-network enforcement. */
export declare function bindPluginMcpToPublicNetwork<T extends MCPHttpServerConfig | MCPSseServerConfig>(config: T): T;
/** The marker is an internal symbol, so persisted user MCP configs cannot opt into or forge this path. */
export declare function isPluginMcpPublicNetworkBound(config: MCPHttpServerConfig | MCPSseServerConfig): boolean;
/**
 * Fetch a plugin-bundle MCP request through a DNS-pinned public address. Every
 * redirect is handled manually and revalidated before the next connection.
 */
export declare function fetchPluginMcpRequest(rawUrl: string, init: BunFetchRequestInit, options?: {
    resolver?: AddressResolver;
    maxRedirects?: number;
}): Promise<Response>;