/**
 * Loopback / browser-origin classification helpers used by rate-limit policy
 * and other security middleware. Pure functions, no I/O.
 */
export declare function isLoopbackClientIp(clientIp: string | undefined): boolean;
/** Browser Origin header points at the local gateway console. */
export declare function isLoopbackBrowserOrigin(origin: string | undefined): boolean;
/** Same-machine browser hitting the local gateway (Electron / local dev). */
export declare function isLoopbackEmbeddedBrowserClient(origin: string | undefined, clientIp: string): boolean;
/** Read X-Forwarded-For / X-Real-IP / CF-Connecting-IP. */
export declare function getClientIpFromHeaders(headers: {
    get(name: string): string | undefined;
}): string;