/**
 * Brute-force guard for the login form: after 5 failures for an IP+username, lock for 15 minutes.
 * (Magento also locks the admin account itself after its own failure limit.)
 */
export declare class LoginThrottle {
    private readonly maxFailures;
    private readonly windowMs;
    private readonly failures;
    constructor(maxFailures?: number, windowMs?: number);
    /** Seconds the key must wait, or 0. */
    blockedFor(key: string): number;
    fail(key: string): void;
    succeed(key: string): void;
}
//# sourceMappingURL=throttle.d.ts.map