export interface ReauthConfig {
    maxAgeSeconds: number;
    requiredForActions: string[];
}
export interface ReauthContext {
    lastAuthAt: Date;
    action: string;
}
/** Check whether a sensitive action requires re-authentication. */
export declare function requiresReauth(context: ReauthContext, config: ReauthConfig): boolean;
/** Verify re-authentication credentials (password or TOTP). */
export declare function verifyReauth(userId: string, credential: string, method: 'password' | 'totp', db?: any): Promise<boolean>;
/** Default configuration for sensitive actions requiring re-auth. */
export declare const DEFAULT_REAUTH_CONFIG: ReauthConfig;
//# sourceMappingURL=reauth.d.ts.map