import type { ISmtpScramVerifier } from '@push.rocks/smartmta';
/**
 * Derive an RFC 5802 SCRAM-SHA-256 verifier from a plaintext password using
 * smartmta's canonical exported derivation (fresh random salt, OWASP-aligned
 * default iteration count) — the exact algorithm the server verifies at AUTH
 * time. Only the verifier is ever persisted; the plaintext is shown once at
 * create/rotate time and then discarded.
 */
export declare function deriveSmtpScramVerifier(password: string, iterations?: number): ISmtpScramVerifier;
/**
 * Machine-generated SMTP account password (~192 bits of entropy). Shown once.
 */
export declare function generateSmtpAccountPassword(): string;