/**
 * apiblaze/sidecar — the egress sidecar (observe → approve model).
 * Spec: specs/sidecar/apiblaze-sidecar-spec.md §3.
 *
 *   // instrumentation.ts
 *   import { register as apiblaze } from "apiblaze/sidecar";
 *   export function register() { apiblaze(); }
 *
 * At boot it loads the team's APPROVED origins (GET sidecar.abz.run/routes) into
 * an in-memory map. Per request: if the origin is approved it routes through that
 * origin's proxy (carrying the call's own auth); otherwise it goes DIRECT,
 * untouched, and reports the origin once as a candidate. Reads only APIBLAZE_TOKEN.
 * Fail-open: any error → direct. Never breaks the app.
 */
interface SidecarOptions {
    token?: string;
    exclude?: string[];
    include?: string[];
    quiet?: boolean;
    /** Explicit on/off. Overrides the APIBLAZE_SIDECAR env toggle when set. */
    enabled?: boolean;
}
declare function register(opts?: SidecarOptions): void;
declare function withApiblaze<T extends Record<string, unknown>>(nextConfig?: T): T;
declare const _default: {
    register: typeof register;
    withApiblaze: typeof withApiblaze;
};

export { type SidecarOptions, _default as default, register, withApiblaze };