import type { NextRequest } from "next/server";

/** Best-effort client IP from proxy headers — trust depends on the host correctly setting x-forwarded-for. */
export function getClientIp(request: NextRequest): string {
  const forwarded = request.headers.get("x-forwarded-for");
  if (forwarded) return forwarded.split(",")[0]!.trim();
  return request.headers.get("x-real-ip") ?? "unknown";
}