/**
 * Cloudflare Turnstile — shared auth request fields and public config contract.
 */
export declare const TURNSTILE_PUBLIC_CONFIG_PATH = "/api/public/turnstile-config";
export interface TurnstileConfigData {
    enabled: boolean;
    siteKey: string | null;
}
export interface TurnstileAuthBodyFields {
    turnstileToken?: string;
}
export interface AdminLoginRequest extends TurnstileAuthBodyFields {
    username: string;
    password: string;
}
export interface ExchangeSuperAdminInviteSessionRequest extends TurnstileAuthBodyFields {
    token: string;
}
export interface CompleteSuperAdminInviteRequest extends TurnstileAuthBodyFields {
    token?: string;
    username: string;
    password: string;
}
export interface PickupStaffLoginRequest extends TurnstileAuthBodyFields {
    salesPointId: number;
    pin: string;
}
export interface CustomerAuthTurnstileBody extends TurnstileAuthBodyFields {
    [key: string]: unknown;
}
export declare class TurnstileConfigFetchError extends Error {
    constructor(message: string, options?: {
        cause?: unknown;
    });
}
/**
 * Fetches public Turnstile config. Throws {@link TurnstileConfigFetchError} on
 * network/HTTP failure so clients can fail closed (do not assume disabled).
 */
export declare function fetchTurnstileConfig(apiBaseUrl?: string): Promise<TurnstileConfigData>;
export declare function appendTurnstileToken<T extends Record<string, unknown>>(body: T, turnstileToken: string | null | undefined): T & TurnstileAuthBodyFields;
//# sourceMappingURL=turnstileTypes.d.ts.map