/**
 * Client-side helpers for server-proxied authentication
 * Use these when your server handles Turnkey API keys
 *
 * @example
 * ```typescript
 * import { sendOtp, verifyOtp } from '@originals/auth/client';
 *
 * // Send OTP to user's email via your server
 * const { sessionId } = await sendOtp('user@example.com');
 *
 * // Verify the code they enter
 * const { verified, email, subOrgId } = await verifyOtp(sessionId, '123456');
 * ```
 */
import type { InitiateAuthResult, VerifyAuthResult } from '../types.js';
/**
 * Options for server-proxied auth functions
 */
export interface ServerAuthOptions {
    /** Custom fetch function (for testing) */
    fetch?: typeof fetch;
}
/**
 * Options for {@link verifyOtp}
 */
export interface VerifyOtpClientOptions extends ServerAuthOptions {
    /**
     * Compressed P-256 public key (hex) generated in the browser (e.g. with
     * `generateP256KeyPair` from `@turnkey/crypto`). The server binds the
     * Turnkey verification token to this key, so the matching private key
     * never leaves the browser and the verify response carries no private
     * key material. Strongly recommended — without it, the server generates
     * the keypair and must return the private key over HTTP.
     */
    publicKey?: string;
}
/**
 * Send OTP via your server endpoint
 * Server should call initiateEmailAuth() from @originals/auth/server
 *
 * @param email - User's email address
 * @param endpoint - Server endpoint URL (default: '/api/auth/send-otp')
 * @param options - Optional configuration
 * @returns Promise with sessionId and message
 *
 * @example
 * ```typescript
 * const { sessionId, message } = await sendOtp('user@example.com');
 * // sessionId is used for verification step
 * // message is user-friendly text to display
 * ```
 */
export declare function sendOtp(email: string, endpoint?: string, options?: ServerAuthOptions): Promise<InitiateAuthResult>;
/**
 * Verify OTP via your server endpoint
 * Server should call verifyEmailAuth() from @originals/auth/server
 *
 * @param sessionId - Session ID from sendOtp result
 * @param code - OTP code entered by user
 * @param endpoint - Server endpoint URL (default: '/api/auth/verify-otp')
 * @param options - Optional configuration; pass `publicKey` (generated in
 *   the browser) so the verification-token private key never leaves the
 *   client. The server endpoint should forward it to `verifyEmailAuth`.
 * @returns Promise with verification result
 *
 * @example
 * ```typescript
 * import { generateP256KeyPair } from '@turnkey/crypto';
 *
 * const keyPair = generateP256KeyPair(); // private key stays in the browser
 * const { verified, email, subOrgId } = await verifyOtp(
 *   sessionId,
 *   '123456',
 *   undefined,
 *   { publicKey: keyPair.publicKey }
 * );
 * if (verified) {
 *   // User is authenticated
 * }
 * ```
 */
export declare function verifyOtp(sessionId: string, code: string, endpoint?: string, options?: VerifyOtpClientOptions): Promise<VerifyAuthResult>;
//# sourceMappingURL=server-auth.d.ts.map