import { Agent } from "undici";
export declare function getInsecureTlsAgent(): Agent;
/**
 * Pin Fetch to addresses that already passed policy. If policy pre-resolution
 * was unavailable (for example, an injected test transport), the dispatcher's
 * own lookup performs the SSRF classification immediately before connect so
 * there is still no unchecked second DNS resolution.
 */
export declare function createPinnedAgent(addresses: readonly string[], insecureTls: boolean, allowBlockedAddresses: boolean): Agent;
export declare function closeAgents(agents: readonly Agent[]): Promise<void>;