type EnvRecord = Record<string, string | undefined>;
declare function trustForwardedFor(env?: EnvRecord): boolean;
declare function isPrivateAddress(address: string): boolean;
/** Forwarded headers only when trusted; otherwise the socket address the server recorded. */
declare function readClientIp(request: Request, env?: EnvRecord): string | undefined;
export { isPrivateAddress, readClientIp, trustForwardedFor };