export declare function parseForwardedHost(raw: string | null): string | undefined;
/**
 * Resolve the effective request host.
 *
 * `x-forwarded-host` is client-controlled and only trustworthy behind a trusted
 * upstream proxy. It is honoured ONLY when `trustProxy` is true; otherwise a
 * direct-access attacker could spoof the origin host (e.g. to unlock preview
 * mode or localhost short-circuits). When untrusted, fall back to the Host
 * header (which the edge proxy also sets) and finally the URL host.
 *
 * Defaults to untrusted so callers fail closed unless they explicitly establish
 * proxy trust (see {@link isProxyTrusted}).
 */
export declare function getEffectiveRequestHost(req: Request, url?: URL, trustProxy?: boolean): string;
/**
 * Resolve the browser-visible HTTP(S) origin at the trusted request boundary.
 * Forwarded values are used only after the caller establishes proxy trust.
 * Invalid trusted values return null so redirect policy checks fail closed.
 */
export declare function getEffectiveRequestOrigin(req: Request, url?: URL, trustProxy?: boolean): string | null;
//# sourceMappingURL=request-host.d.ts.map