export declare const MAX_SAFE_NAME_LENGTH = 255;
/**
 * Asserts that `name` is safe to use as a single path segment or URL path
 * component. Rejects traversal payloads (`.`, `..`, separators), URL-encoded
 * characters, null bytes, whitespace, empty strings, and names longer than
 * {@link MAX_SAFE_NAME_LENGTH}.
 *
 * @param name  The value to validate.
 * @param label Human-readable name of the parameter (for error messages).
 * @throws Error if `name` fails validation.
 */
export declare function assertSafeName(name: string, label: string): void;
/**
 * Asserts that `version` is a valid SemVer-style version string of the shape
 * `MAJOR.MINOR.PATCH` with an optional pre-release suffix
 * (`-[A-Za-z0-9._-]+`). Build metadata (`+...`) is intentionally not
 * supported because compactc releases do not use it.
 *
 * @param version The version string to validate.
 * @param label   Human-readable name of the parameter (for error messages).
 * @throws Error if `version` is not SemVer-shaped.
 */
export declare function assertSemVer(version: string, label: string): void;
/**
 * Emits a `console.warn` when `url` uses an unencrypted scheme (`http:` or `ws:`)
 * targeting a non-loopback host. No-op for encrypted schemes (`https:`, `wss:`),
 * other schemes, and unparseable input.
 *
 * Intended to be called once at provider-factory construction time so
 * misconfigured remote endpoints surface immediately rather than after sensitive
 * payloads are transmitted in clear text. As a diagnostic helper it never throws —
 * an unparseable URL will produce errors through other channels (the protocol
 * checks at every call site already throw `InvalidProtocolSchemeError`), and
 * crashing the factory from a warning helper would be worse than silence.
 *
 * @param url   An absolute URL string to inspect (e.g. `https://indexer.example/graphql`).
 * @param label Human-readable label used in the warning (e.g. "indexer query URL").
 */
export declare function warnIfInsecureRemoteUrl(url: string, label: string): void;
//# sourceMappingURL=security-utils.d.ts.map