#!/usr/bin/env node
/**
 * Reject plaintext http:// server URLs except when talking to a local
 * daemon on the same machine (localhost/127.0.0.1/[::1]) — e.g. during
 * development against a locally-run server. Everything else must be https://
 * since the scanner pushes full file content (see O2/O8b,
 * codebase-indexing-audit-2026-07-02.md §5) and a plaintext channel would
 * expose that content (and the API key) to network eavesdropping.
 * Extracted as a pure function so the guard is unit-testable without
 * spinning up the CLI.
 */
export declare function validateServerUrl(url: string): {
    valid: boolean;
    error?: string;
};