export interface CsmUser {
    id: string;
    name?: string;
    email?: string;
    phone?: string;
    role?: string;
    roles?: string[];
    department?: {
        id?: string;
        name?: string;
        code?: string;
    } | string;
    position?: string;
    status?: string;
}
export interface CsmVerifyResult {
    valid: boolean;
    /** Only meaningful when enforceGrant=true on CSM side. undefined = open mode. */
    access?: boolean;
    reason?: string;
    user?: CsmUser;
    webtool?: {
        roles?: string[];
        permissions?: string[];
    };
}
/**
 * POST /auth/verify.
 *  - HTTP 200 { valid:true, access?, user, webtool? }  -> parsed as-is
 *  - HTTP 401 { valid:false }                          -> { valid:false } (wrong password)
 *  - 5xx / timeout                                     -> throws CsmError (caller shows "CSM unavailable")
 */
export declare function verifyCsmCredentials(email: string, password: string): Promise<CsmVerifyResult>;
//# sourceMappingURL=auth.d.ts.map