/**
 * Reset Password Request DTO
 *
 * Used to request a password reset token via email or phone.
 *
 * Security:
 * - Identifier validated (email or phone)
 * - Input sanitization applied
 *
 * @example
 * ```typescript
 * POST /auth/reset-password/request
 * {
 *   "identifier": "user@example.com"
 * }
 * ```
 */
export declare class ResetPasswordRequestDTO {
    /**
     * User identifier (email or phone)
     *
     * Validation:
     * - Must be a string
     * - Min 1 character
     * - Max 255 characters (matches DB constraint for email)
     *
     * Sanitization:
     * - Trimmed
     * - Lowercased if email format detected
     */
    identifier: string;
}
/**
 * Reset Password DTO
 *
 * Used to reset password with a valid reset token.
 *
 * Security:
 * - Token length validated (matches DB constraint: varchar(255))
 * - Password strength enforced (8-128 chars)
 * - Token format validated in service layer
 *
 * @example
 * ```typescript
 * POST /auth/reset-password
 * {
 *   "token": "reset-token-from-email",
 *   "newPassword": "NewSecurePassword123!"
 * }
 * ```
 */
export declare class ResetPasswordDTO {
    /**
     * Password reset token from email
     *
     * Validation:
     * - Must be a string
     * - Min 1 character (prevents empty strings)
     * - Max 255 characters (matches DB constraint: varchar(255))
     *
     * Sanitization:
     * - Trimmed
     *
     * Note: Token format and validity validated in service layer
     */
    token: string;
    /**
     * New password
     *
     * Validation:
     * - Must be a string
     * - Min 8 characters (security requirement)
     * - Max 128 characters (prevents DoS via Argon2 hashing)
     *
     * Note: NOT trimmed (passwords can have leading/trailing spaces)
     * Additional checks in service layer:
     * - Password strength (if configured)
     * - Password history (prevent reuse)
     */
    newPassword: string;
}
//# sourceMappingURL=reset-password.dto.d.ts.map