/**
 * strategies/localChoice — the `local-password` strategy, built from config.
 *
 * Development, tests and a demo box only: it is REFUSED in production (Q3). A
 * password list in an environment variable is not a production identity
 * store, and a company that has a directory should sign people in through it.
 *
 * What it builds: the password list (`localPasswords` — hashed entries only),
 * a bounded in-memory sign-in store, and the sign-in door around them. The
 * door's guard is built from the host's own lists (`boot.crossSite`), and the
 * public URL must pass them — one source for allowed hosts and origins.
 */
import { type IdentityConfig } from './config.js';
import type { IdentityBootOptions, IdentityChoice } from './choose.js';
/** Build the `local-password` choice, or refuse to boot naming the key. */
export declare function localPasswordChoice(config: IdentityConfig, boot: IdentityBootOptions, production: boolean): IdentityChoice;
//# sourceMappingURL=localChoice.d.ts.map