//#region ../ai/src/security/private-ip.d.ts
/**
 * True when `ip` is a private, loopback, link-local, unique-local,
 * carrier-grade-NAT, unspecified, or otherwise non-public address — the
 * set an SSRF guard must refuse. Accepts IPv4 and IPv6 literals (including
 * IPv4-mapped IPv6 like `::ffff:169.254.169.254`). A non-IP string returns
 * `false` (the caller resolves hostnames via DNS first).
 *
 * The cloud-metadata endpoint `169.254.169.254` is covered by the IPv4
 * link-local range `169.254.0.0/16`.
 */
declare function isPrivateOrReservedIp(ip: string): boolean;
//#endregion
export { isPrivateOrReservedIp };
//# sourceMappingURL=private-ip.d.mts.map