/**
 * CIBA SDK - Passwordless Authentication for Voice Clients
 * Mirrors Python CIBAClient class
 *
 * Supports both Admin and End-User authentication flows:
 * - Admin flow: email only (original flow)
 * - End-user flow: email + client_id (workspace /auth/workspace/* route surface)
 */
export declare class CIBAClient {
    private baseUrl;
    private clientId;
    private activePolls;
    private retryCounts;
    /**
     * @param options.baseUrl Priority: explicit param → .authsec.json → hardcoded default
     */
    constructor(options?: {
        clientId?: string;
        baseUrl?: string;
    });
    /**
     * Triggers a CIBA push notification and cancels any existing poll for this user.
     *
     * - If clientId is set: uses end-user endpoint (/workspace/ciba/initiate)
     * - If clientId is null: uses admin endpoint (/ciba/initiate)
     */
    initiateAppApproval(email: string): Promise<Record<string, any>>;
    /**
     * Verifies a TOTP code for authentication.
     *
     * - If clientId is set: uses end-user endpoint (/workspace/totp/login)
     * - If clientId is null: uses admin endpoint (/totp/login)
     */
    verifyTotp(email: string, code: string): Promise<Record<string, any>>;
    /**
     * Polls for CIBA approval status.
     *
     * - If clientId is set: uses end-user endpoint (/workspace/ciba/token)
     * - If clientId is null: uses admin endpoint (/ciba/token)
     */
    pollForApproval(email: string, authReqId: string, options?: {
        interval?: number;
        timeout?: number;
    }): Promise<Record<string, any>>;
    /**
     * Cancels any ongoing poll and resets retry logic for the user.
     */
    cancelApproval(email: string): Record<string, any>;
}
//# sourceMappingURL=ciba.d.ts.map