import type { FastifyRequest, FastifyReply } from 'fastify';
/**
 * 判断请求是否来自 Cloudflare 隧道
 * cloudflared 代理请求时，Cloudflare 边缘会注入 CF-Connecting-IP / CF-Ray 等头
 */
declare function isTunnelRequest(request: FastifyRequest): boolean;
/**
 * Fastify onRequest 钩子：隧道请求必须携带有效 token
 * 本地直连请求（无 CF 头）自动放行
 */
export declare function tunnelAuthHook(request: FastifyRequest, reply: FastifyReply): Promise<void>;
export { isTunnelRequest };
//# sourceMappingURL=tunnel-auth.d.ts.map