/**
 * Confirm Forgot Password DTO
 *
 * Confirms a password reset request by validating the verification code and
 * setting a new password.
 *
 * Security:
 * - Code format validated (numeric string + fixed length).
 * - Password policy is enforced in the service layer.
 *
 * @example
 * ```typescript
 * await authService.confirmForgotPassword({
 *   identifier: 'user@example.com',
 *   code: '123456',
 *   newPassword: 'NewSecurePassword123!'
 * });
 * ```
 */
export declare class ConfirmForgotPasswordDTO {
    /**
     * User identifier used to locate the account.
     *
     * Sanitization:
     * - Trimmed
     * - Lowercased when email format detected (contains '@')
     */
    identifier: string;
    /**
     * Verification code delivered via email/SMS.
     *
     * Validation:
     * - Numeric string
     * - Exact length 6 (default). If a deployment changes length, the service layer
     *   can also validate against config for backward compatibility.
     */
    code: string;
    /**
     * New password to set on the account.
     *
     * Validation:
     * - 8-128 characters (baseline)
     * - NOT trimmed (passwords may intentionally contain leading/trailing spaces)
     */
    newPassword: string;
}
/**
 * Confirm Forgot Password Response DTO
 *
 * Response for a confirmed password reset.
 *
 * @example
 * ```typescript
 * { success: true, mustChangePassword: false }
 * ```
 */
export declare class ConfirmForgotPasswordResponseDTO {
    /**
     * True when reset was confirmed and password updated.
     */
    success: boolean;
    /**
     * Whether user must change password on next sign-in.
     *
     * For forgot-password flows this should typically be false (password is just set).
     */
    mustChangePassword: boolean;
}
//# sourceMappingURL=confirm-forgot-password.dto.d.ts.map