/** Loose "does this look like a hostname" check (a dot, host chars, optional trailing dot). */
export declare function isDomainShaped(value: string): boolean;
export declare function isPrivateAddress(ip: string): boolean;
/**
 * Reject IP literals, localhost/internal names, non-domain-shaped input, and
 * public names that resolve to private/loopback/link-local addresses.
 * Throws an Error (with a caller-safe message) when the target is not allowed.
 */
export declare function assertPublicDomain(domain: string): Promise<void>;
//# sourceMappingURL=target-guard.d.ts.map