import { type TargetUrlPolicy } from "../../core/target-url.js";
/**
 * Scheme + address check on a REST target URL, with DNS resolution so a public
 * name pointing at a private address is caught too. Returns null when allowed,
 * otherwise the reason to return to the caller.
 */
export declare function rejectUnsafeTargetUrl(url: string, policy: TargetUrlPolicy): Promise<string | null>;
//# sourceMappingURL=target-guard.d.ts.map