/**
 * Reject raw URL text that WHATWG parsing would silently strip or reinterpret.
 *
 * Canonical percent-encoding remains allowed; raw controls and backslashes do
 * not, because accepting them makes validation depend on parser normalization.
 */
export declare function isSafeOAuthUrlText(value: unknown): value is string;
/** Provider endpoints carry credentials/tokens and therefore require TLS. */
export declare function isSecureOAuthEndpointUrl(value: unknown): value is string;
/** OAuth redirect URIs require TLS, except for the standard loopback case. */
export declare function isOAuthRedirectUrl(value: unknown): value is string;
export declare function isLoopbackHttpUrl(url: URL): boolean;
//# sourceMappingURL=url-validation.d.ts.map