import type { RequestServiceContext } from '%requestServiceContextImports';
/**
 * Request a password reset for the given email.
 */
export declare function requestPasswordReset({ email: rawEmail, context, }: {
    email: string;
    context: RequestServiceContext;
}): Promise<{
    success: true;
}>;
/**
 * Validates a password reset token without consuming it.
 * Used by the frontend to verify the token is valid before showing the reset form.
 *
 * @throws BadRequestError with code 'invalid-token' if the token is invalid or expired
 */
export declare function validatePasswordResetToken({ token: rawToken, }: {
    token: string;
}): Promise<{
    success: true;
}>;
/**
 * Completes the password reset process by setting a new password.
 *
 * Security notes (OWASP Forgot Password Cheat Sheet):
 * - Token is single-use (deleted after successful reset)
 * - Does not auto-login the user
 * - Always invalidates all existing sessions for security
 * - All remaining password-reset tokens for this user are deleted
 */
export declare function completePasswordReset({ token: rawToken, newPassword: rawNewPassword, }: {
    token: string;
    newPassword: string;
}): Promise<{
    success: true;
}>;
//# sourceMappingURL=password-reset.service.d.ts.map