import type { Dispatcher } from "undici";
export declare const USER_AGENT: string;
export declare const RAW_HTML_MAX_BYTES: number;
export interface TierResult {
    title: string;
    url: string;
    text: string;
    html?: string;
}
/**
 * String-level SSRF guard: reject non-http(s) URLs and any hostname that is a
 * private/reserved IP literal or a known-internal name. This is the first line
 * of defence; the connect-time DNS guard (safeFetch / ssrfGuardedDispatcher)
 * catches public hostnames that resolve to private addresses.
 */
export declare function assertPublicUrl(url: string): void;
export interface FetchTuning {
    targetSelector?: string;
    waitForSelector?: string;
}
type SafeFetchOptions = Parameters<typeof fetch>[1] & {
    dispatcher?: Dispatcher;
};
/**
 * fetch() wrapper for outbound requests to caller-influenced or discovered
 * URLs. Applies the string-level guard, then routes through the DNS-validating
 * dispatcher (which also re-validates every redirect hop) unless the caller
 * supplied its own dispatcher (e.g. the adblock proxy, which resolves at the
 * proxy — the string guard still applies there).
 */
export declare function safeFetch(url: string, options?: SafeFetchOptions): Promise<Response>;
export declare function isPdfUrl(url: string): boolean;
export declare function readBoundedText(res: Response): Promise<string>;
export {};