/** Per-IP rate limiter for failed auth attempts */
export declare class RateLimiter {
    private attempts;
    private maxAttempts;
    private windowMs;
    constructor(maxAttempts?: number, windowMs?: number);
    isRateLimited(ip: string): boolean;
    recordFailure(ip: string): void;
    cleanup(): void;
}
//# sourceMappingURL=rate-limit.d.ts.map