import type { GatewayTrustedProxyConfig } from '../config/schema.js';
export type TrustedProxyAuthResult = {
    ok: true;
    user: string;
} | {
    ok: false;
    reason: string;
};
/**
 * Validate that a request came from a trusted reverse proxy and extract user identity.
 */
export declare function authorizeTrustedProxy(params: {
    remoteAddress?: string;
    getHeader: (name: string) => string | undefined;
    trustedProxies?: string[];
    trustedProxyConfig: GatewayTrustedProxyConfig;
}): TrustedProxyAuthResult;