/**
 * @license
 * Copyright 2025 Steven Roussey <sroussey@gmail.com>
 * SPDX-License-Identifier: Apache-2.0
 *
 * Server-side SafeFetch implementation.
 *
 * Combines:
 *   1. Static URL classification (shared with the browser impl).
 *   2. DNS pre-resolution of every A/AAAA record for the hostname.
 *   3. Rejection if any resolved address is private/link-local/metadata
 *      (unless `allowPrivate` is set).
 *   4. Connection pinning via an undici Agent whose `connect.lookup` hook
 *      returns the pre-resolved IP — this prevents a second DNS lookup at
 *      connect time and defeats DNS rebinding (TOCTOU).
 *
 * Registered at module load from `packages/tasks/src/node.ts` via
 * `registerSafeFetch`.
 */
import { type SafeFetchFn } from "./SafeFetch";
export declare const serverSafeFetch: SafeFetchFn;