/**
 * Domain allowlist filtering — shared by HTTP and SOCKS5 proxies.
 *
 * Pure functions: no I/O, no state. The caller owns the allowlist Set.
 */
/** Normalize a domain for comparison: lowercase, strip trailing dots. */
export declare function normalizeDomain(domain: string): string;
/** Check if a domain matches the allowlist (exact or wildcard). */
export declare function isDomainAllowed(domain: string, allowed: Set<string>): boolean;
//# sourceMappingURL=domain-filter.d.ts.map