import type { WebSocketServer } from 'ws';
/**
 * Applies the security-relevant options to a `ws` `WebSocketServer` instance.
 *
 * Single source of truth for the orchestrator's agent-WS server config. Lives
 * here so it is unit-testable independently of the heavy `createApp` dependency
 * graph.
 *
 * The (`permessage-deflate` compression bombs) invariant lives here: any
 * field added to defend against compression-bomb DoS — `maxPayload`,
 * `serverNoContextTakeover`, etc. — MUST be set inside this helper so the
 * neighbouring test file can assert it.
 */
export declare function configureSecureWsServer(wss: WebSocketServer): void;
//# sourceMappingURL=server-options.d.ts.map