import type { RequestHandler } from '@sveltejs/kit';
import type { AuthDeps } from '../deps.js';
/**
 * Publishes the password policy the server enforces, so the sign-up /
 * reset / change-password forms can gate against it instead of against a
 * second, hand-kept copy in component props. Mount it at
 * `/api/auth/password-policy` (the path the client components default to):
 *
 * ```ts
 * // src/routes/api/auth/password-policy/+server.ts
 * export const GET = createPasswordPolicyHandler(authDeps).GET;
 * ```
 *
 * Unauthenticated by design — registration and password reset are both
 * signed-out flows, and the policy is not a secret: one failed submit already
 * spells it out ("Password must be at least 12 characters"). What it does NOT
 * publish is the rest of `config.password`: the response is
 * `resolvePasswordPolicy`'s five-field projection, so the PBKDF2 work factor
 * never reaches the wire.
 */
export declare function createPasswordPolicyHandler<R extends string>(deps: AuthDeps<R>): {
    GET: RequestHandler;
};