/**
 * Reads system CA certificates from well-known bundle paths.
 * Returns null on Windows (no universal file path) or if no bundle is found.
 *
 * On Windows, users should set NODE_EXTRA_CA_CERTS pointing to a PEM file.
 */
export declare function getSystemCACerts(): string | null;
/**
 * Returns undici `connect` options with system CA certs, or an empty object
 * if no system CA bundle is found (undici uses Node's compiled-in Mozilla
 * bundle in that case).
 *
 * Usage:
 *   new Agent({ connect: getConnectOptions() })
 *   new ProxyAgent({ uri: proxyUrl, connect: getConnectOptions() })
 */
export declare function getConnectOptions(): {
    ca: string;
} | Record<string, never>;