import { AxiosInstance } from 'axios';
import { RegisterRequest, UpdateAccountRequest, ChangePasswordRequest, ForgotPasswordRequest, ResetPasswordRequest, SendVerificationRequest, VerifyEmailRequest, AuthenticationAccount, PasswordLoginRequest, EmailTokenSendRequest, EmailTokenVerifyRequest, OTPSendRequest, OTPVerifyRequest, SMSSendRequest, SMSVerifyRequest, GenerateTokenRequest, RedeemTokenRequest, SSOLoginRequest, LoginResponse, RegisterResponse, LogoutResponse, GetMeResponse, UpdateMeResponse, DeleteMeResponse, ChangePasswordResponse, ForgotPasswordResponse, ResetPasswordResponse, VerifyResetTokenResponse, SendVerificationResponse, VerifyEmailResponse, RefreshSessionResponse, GetSessionsResponse, DeleteSessionResponse, DeleteAllSessionsResponse, CleanupSessionsResponse, GetMethodsResponse, GetAuthStatusResponse, SendEmailTokenResponse, VerifyEmailTokenResponse, SendOTPResponse, VerifyOTPResponse, SendSMSResponse, VerifySMSResponse, GenerateLoginTokenResponse, RedeemLoginTokenResponse, LegacySSOLoginResponse, SSOProvider, SSOInitiateRequest, SSOCallbackRequest, SSOLinkRequest, InitiateSSOResponse, CallbackSSOResponse, LinkSSOResponse, UnlinkSSOResponse, GetTenantsResponse, GetTenantResponse, CreateTenantResponse, UpdateTenantResponse, DeleteTenantResponse, GetTenantMembersResponse, AddTenantMemberResponse, UpdateTenantMemberResponse, DeleteTenantMemberResponse, GetTenantRolesResponse, CreateInvitationResponse, GetInvitationResponse, AcceptInvitationResponse, CreateTenantRequest, UpdateTenantRequest, AddMemberRequest, UpdateMemberRequest, CreateInvitationRequest, AcceptInvitationRequest } from './types';
export declare class AuthApi {
    private api;
    private currentTenantId;
    private externalAxiosInstances;
    constructor(baseURL?: string);
    /**
     * Register an external axios instance so that tenant headers
     * are automatically applied to it when setTenantId() is called.
     */
    registerAxios(instance: AxiosInstance): void;
    /**
     * Set the current tenant ID for multi-tenant requests.
     * Also updates the header on any externally registered axios instances.
     */
    setTenantId(tenantId: string | null): void;
    /**
     * Get the current tenant ID
     */
    getTenantId(): string | null;
    private setupInterceptors;
    /**
     * Get authentication status
     */
    getAuthStatus(): Promise<GetAuthStatusResponse>;
    /**
     * Get available authentication methods
     */
    getAuthMethods(): Promise<GetMethodsResponse>;
    /**
     * Register a new account
     */
    register(data: RegisterRequest): Promise<RegisterResponse>;
    /**
     * Login with password
     */
    login(data: PasswordLoginRequest): Promise<LoginResponse>;
    /**
     * Send email token to user
     */
    sendEmailToken(data: EmailTokenSendRequest): Promise<SendEmailTokenResponse>;
    /**
     * Verify email token and login
     */
    verifyEmailToken(data: EmailTokenVerifyRequest): Promise<VerifyEmailTokenResponse>;
    /**
     * Send SMS verification code to phone number
     */
    sendSMS(data: SMSSendRequest): Promise<SendSMSResponse>;
    /**
     * Verify SMS code and login
     */
    verifySMS(data: SMSVerifyRequest): Promise<VerifySMSResponse>;
    /**
     * @deprecated Use sendSMS() instead
     */
    sendOTP(data: OTPSendRequest): Promise<SendOTPResponse>;
    /**
     * @deprecated Use verifySMS() instead
     */
    verifyOTP(data: OTPVerifyRequest): Promise<VerifyOTPResponse>;
    /**
     * Generate a one-time login token.
     * Omit target_identity_id to generate for yourself (e.g. desktop → mobile).
     * Provide target_identity_id to generate for another user (admin only).
     */
    generateLoginToken(data?: GenerateTokenRequest): Promise<GenerateLoginTokenResponse>;
    /**
     * Redeem a one-time login token (no authentication required).
     */
    redeemLoginToken(data: RedeemTokenRequest): Promise<RedeemLoginTokenResponse>;
    /**
     * Check if a login token is still valid (no auth required).
     */
    getLoginTokenStatus(token: string): Promise<any>;
    /**
     * Login with SSO provider (legacy endpoint without PKCE)
     */
    loginWithSSO(provider: SSOProvider, data: SSOLoginRequest): Promise<LegacySSOLoginResponse>;
    /**
     * Logout and clear session
     */
    logout(): Promise<LogoutResponse>;
    /**
     * Refresh current session
     */
    refreshSession(): Promise<RefreshSessionResponse>;
    /**
     * Initiate SSO login flow
     * Returns authorization URL to redirect user to
     */
    initiateSSO(provider: SSOProvider, data: SSOInitiateRequest): Promise<InitiateSSOResponse>;
    /**
     * Complete SSO login after callback from provider
     */
    ssoCallback(provider: SSOProvider, data: SSOCallbackRequest): Promise<CallbackSSOResponse>;
    /**
     * Link an SSO provider to existing account
     */
    linkSSOProvider(provider: SSOProvider, data: SSOLinkRequest): Promise<LinkSSOResponse>;
    /**
     * Unlink an SSO provider from account
     */
    unlinkSSOProvider(provider: SSOProvider): Promise<UnlinkSSOResponse>;
    /**
     * Get current user account info
     */
    getCurrentUser(): Promise<GetMeResponse>;
    /**
     * Update current user profile
     */
    updateCurrentUser(data: UpdateAccountRequest): Promise<UpdateMeResponse>;
    /**
     * Delete current user account
     */
    deleteCurrentUser(): Promise<DeleteMeResponse>;
    /**
     * Change password (requires current password)
     */
    changePassword(data: ChangePasswordRequest): Promise<ChangePasswordResponse>;
    /**
     * Initiate forgot password flow
     */
    forgotPassword(data: ForgotPasswordRequest): Promise<ForgotPasswordResponse>;
    /**
     * Verify password reset token
     */
    verifyResetToken(token: string): Promise<VerifyResetTokenResponse>;
    /**
     * Reset password with token
     */
    resetPassword(data: ResetPasswordRequest): Promise<ResetPasswordResponse>;
    /**
     * Send email verification
     */
    sendVerification(data?: SendVerificationRequest, user?: AuthenticationAccount): Promise<SendVerificationResponse>;
    /**
     * Verify email with token
     */
    verifyEmail(data: VerifyEmailRequest): Promise<VerifyEmailResponse>;
    /**
     * Get active sessions for current identity
     */
    getSessions(): Promise<GetSessionsResponse>;
    /**
     * Revoke a specific session
     */
    revokeSession(sessionToken: string): Promise<DeleteSessionResponse>;
    /**
     * Revoke all sessions for current identity
     */
    revokeAllSessions(): Promise<DeleteAllSessionsResponse>;
    /**
     * Cleanup expired sessions (admin)
     */
    cleanupSessions(): Promise<CleanupSessionsResponse>;
    /**
     * Get list of tenants the authenticated user belongs to
     */
    getTenants(): Promise<GetTenantsResponse>;
    /**
     * Get a single tenant by ID or slug
     */
    getTenant(idOrSlug: string): Promise<GetTenantResponse>;
    /**
     * Create a new tenant (caller is auto-added as admin)
     */
    createTenant(data: CreateTenantRequest): Promise<CreateTenantResponse>;
    /**
     * Update a tenant
     */
    updateTenant(tenantId: string, data: UpdateTenantRequest): Promise<UpdateTenantResponse>;
    /**
     * Delete a tenant
     */
    deleteTenant(tenantId: string): Promise<DeleteTenantResponse>;
    /**
     * List members of a tenant
     */
    getTenantMembers(tenantId: string, status?: string): Promise<GetTenantMembersResponse>;
    /**
     * Add a member to a tenant by identity_id
     */
    addTenantMember(tenantId: string, data: AddMemberRequest): Promise<AddTenantMemberResponse>;
    /**
     * Update a tenant member's roles/status/metadata
     */
    updateTenantMember(tenantId: string, identityId: string, data: UpdateMemberRequest): Promise<UpdateTenantMemberResponse>;
    /**
     * Activate a pending membership
     */
    activateTenantMember(tenantId: string, identityId: string): Promise<AddTenantMemberResponse>;
    /**
     * Remove a member from a tenant
     */
    removeTenantMember(tenantId: string, identityId: string): Promise<DeleteTenantMemberResponse>;
    /**
     * List available roles
     */
    getTenantRoles(): Promise<GetTenantRolesResponse>;
    /**
     * Create an invitation for a new user to join a tenant
     * Requires X-Tenant-ID header (set via setTenantId)
     */
    createInvitation(data: CreateInvitationRequest): Promise<CreateInvitationResponse>;
    /**
     * Get invitation metadata by token (no auth required)
     */
    getInvitation(token: string): Promise<GetInvitationResponse>;
    /**
     * Accept an invitation — creates TenantMembership for the authenticated user
     */
    acceptInvitation(token: string, data?: AcceptInvitationRequest): Promise<AcceptInvitationResponse>;
}