import { ProposeConstraints, ProposeLimits, ProposeMessage, ProposeMessageOptions } from "./messages/ProposeMessage.mjs";
import { OfferMessage, OfferMessageOptions } from "./messages/OfferMessage.mjs";
import { Capability, CapabilityDict, CapabilityProof, InvocationContext, KeyMaterial } from "./zcap/model.mjs";
import { Caveat, CaveatViolation, Expires, MaxBytes, NonDelegable, PathPrefix, ValidWhileTrue, caveatFromDict, isNonDelegable, parseIso8601 } from "./zcap/caveats.mjs";
import { JcsCanonError, ProofVerificationError, canonicalizeJcs, multibaseBase58btc, multibaseBase58btcDecode, signCapability, verifyProof } from "./zcap/proofs.mjs";
import { InvalidDelegationError, delegate, mintRoot } from "./zcap/issuer.mjs";
import { ChainVerificationError, verify } from "./zcap/verifier.mjs";
import { GrantAccessMessage, GrantAccessMessageOptions } from "./messages/GrantAccessMessage.mjs";
import { SealMessage, SealMessageOptions } from "./messages/SealMessage.mjs";
import { TombstoneMessage, TombstoneMessageOptions } from "./messages/TombstoneMessage.mjs";
import { VaultErrorCodes, VaultProblemReportMessage, VaultProblemReportMessageOptions } from "./messages/VaultProblemReportMessage.mjs";
import "./messages/index.mjs";
import { VaultsApi } from "./VaultsApi.mjs";
import { VaultsModule, VaultsModuleConfig } from "./VaultsModule.mjs";
import { BackupKeyLabels, BackupKeys, deriveBackupKeysFromSeed } from "./seed-keys.mjs";
import { AeadAlgorithm, Argon2Params, GateExtension, PolicyMode, RecipientWrap, SignatureData, SuiteId, ThresholdShare, VaultHeader, VaultHeaderMetadata, WrapAll, isAllOfVault, isAnyOfVault, isPassphraseVault, isThresholdVault } from "./models/VaultHeader.mjs";
import { VaultDocument, VaultDocumentJson, vaultDocumentFromJson, vaultDocumentToJson } from "./models/VaultDocument.mjs";
import { EncryptWithPassphraseRnOptions, decryptWithPassphraseRn, encryptWithPassphraseRn } from "./rn-helpers.mjs";
import { concatKdf } from "./jwe/concatKdf.mjs";
import { ALG_ECDH_ES, ENC_A256GCM, JweAlgUnsupportedError, JweDecryptError, JweEncryptError, JweGeneralJson, JweInvalidStructure, JweRecipientNotFound, KeyAgreementResult, Recipient, RecipientFn, SenderFn } from "./jwe/types.mjs";
import { encrypt } from "./jwe/encrypt.mjs";
import { decrypt } from "./jwe/decrypt.mjs";
import { cekLengthForEnc, register, resolveAlg } from "./jwe/algs.mjs";
import { b64uDecode, b64uEncode } from "./jwe/b64url.mjs";
import { EdvClientError, EncryptedDocument, QueryRequest, QueryResponse, VaultDescriptor } from "./edv/types.mjs";
import { EdvClient, EdvClientOptions, encodeChainHeader } from "./edv/EdvClient.mjs";
import { IndexComputer, IndexEntry, IndexedAttribute, matchesQuery } from "./edv/indexes.mjs";
import { PeerKeyLookupFailed, PeerPubLookup, RecipientNotInWallet, WalletPrivLookup, findDecryptionKey, resolveRecipientForConnection } from "./recipient/index.mjs";
import { AccessGrantedEvent, OfferReceivedEvent, ProblemReportReceivedEvent, ProposeReceivedEvent, RetiredEvent, SealedEvent, VaultEvent, VaultEventTypes } from "./VaultsEvents.mjs";
import { ParticipantInfo, VaultPolicyDescriptor, validatePolicy } from "./models/VaultPolicy.mjs";
import { ThresholdSession, hasMetThreshold, isSessionExpired } from "./models/ThresholdSession.mjs";
import { VaultError, VaultErrorCode } from "./errors/VaultError.mjs";
import { BadSuiteError } from "./errors/BadSuiteError.mjs";
import { DecryptKemError } from "./errors/DecryptKemError.mjs";
import { DecryptAeadError } from "./errors/DecryptAeadError.mjs";
import { PolicyError } from "./errors/PolicyError.mjs";
import { DecryptedShare, EncryptP1Options, EncryptS3Options, RecipientKey, VaultEncryptionService } from "./services/VaultEncryptionService.mjs";
import { CustomKemKeypairTags, DefaultKemKeypairTags, KemKeypairRecord, KemKeypairRecordProps, KemKeypairTags } from "./repository/KemKeypairRecord.mjs";
import { KemKeypairRepository } from "./repository/KemKeypairRepository.mjs";
import { KEM_KEY_METADATA_KEY, KemKeyExchangeService, KemKeyMetadata, KemKeypairWithKid, KemPublicKeyInfo, SealedKemKeyArtifact } from "./services/KemKeyExchangeService.mjs";
import { CustomVaultTags, DefaultVaultTags, VaultRecord, VaultRecordProps, VaultTags } from "./repository/VaultRecord.mjs";
import { VaultRepository } from "./repository/VaultRepository.mjs";
import { CollectedShare, ThresholdSessionRecord, ThresholdSessionRecordProps, ThresholdSessionStatus, ThresholdSessionTags } from "./repository/ThresholdSessionRecord.mjs";
import { ThresholdSessionRepository } from "./repository/ThresholdSessionRepository.mjs";
import { AeadResult, KemEncapResult, KemKeypair, SecretShareLike } from "./crypto/provider.mjs";
import { SecretShare, aesGcmDecrypt, aesGcmEncrypt, blake2s256, buildContext, canonicalAad, computeSummary, constantTimeEq, deriveCek, deriveKid, deriveSymmetricKid, fromBase64Url, fromHex, generateCek, generateNonceAesGcm, generateNonceXchacha, generateUuid, hkdfExpand, hkdfJoin, kemDecapsulate, kemEncapsulate, kemGenerateKeypair, kemUnwrapCek, kemWrapCek, keyCommitment, randomBytes, sha256, shamirReconstruct, shamirSplit, shamirSplitAndWrap, shamirUnwrapAndReconstruct, toBase64Url, toHex, verifyKeyCommitment, xchachaDecrypt, xchachaEncrypt } from "./crypto/index.mjs";
import { initVaultCrypto } from "./crypto/wasm/VaultCrypto.mjs";
export { ALG_ECDH_ES, type AccessGrantedEvent, AeadAlgorithm, type AeadResult, Argon2Params, BackupKeyLabels, type BackupKeys, BadSuiteError, Capability, CapabilityDict, CapabilityProof, Caveat, CaveatViolation, ChainVerificationError, type CollectedShare, type CustomKemKeypairTags, type CustomVaultTags, DecryptAeadError, DecryptKemError, type DecryptedShare, type DefaultKemKeypairTags, type DefaultVaultTags, ENC_A256GCM, EdvClient, EdvClientError, EdvClientOptions, type EncryptP1Options, type EncryptS3Options, type EncryptWithPassphraseRnOptions, EncryptedDocument, Expires, GateExtension, GrantAccessMessage, GrantAccessMessageOptions, IndexComputer, IndexEntry, IndexedAttribute, InvalidDelegationError, InvocationContext, JcsCanonError, JweAlgUnsupportedError, JweDecryptError, JweEncryptError, JweGeneralJson, JweInvalidStructure, JweRecipientNotFound, KEM_KEY_METADATA_KEY, type KemEncapResult, KemKeyExchangeService, type KemKeyMetadata, type KemKeypair, KemKeypairRecord, type KemKeypairRecordProps, KemKeypairRepository, type KemKeypairTags, type KemKeypairWithKid, type KemPublicKeyInfo, KeyAgreementResult, KeyMaterial, MaxBytes, NonDelegable, OfferMessage, OfferMessageOptions, type OfferReceivedEvent, ParticipantInfo, PathPrefix, PeerKeyLookupFailed, PeerPubLookup, PolicyError, PolicyMode, type ProblemReportReceivedEvent, ProofVerificationError, ProposeConstraints, ProposeLimits, ProposeMessage, ProposeMessageOptions, type ProposeReceivedEvent, QueryRequest, QueryResponse, Recipient, RecipientFn, type RecipientKey, RecipientNotInWallet, RecipientWrap, type RetiredEvent, SealMessage, SealMessageOptions, type SealedEvent, type SealedKemKeyArtifact, SecretShare, type SecretShareLike as SecretShareType, SenderFn, SignatureData, SuiteId, ThresholdSession, ThresholdSessionRecord, type ThresholdSessionRecordProps, ThresholdSessionRepository, type ThresholdSessionStatus, type ThresholdSessionTags, ThresholdShare, TombstoneMessage, TombstoneMessageOptions, ValidWhileTrue, VaultDescriptor, VaultDocument, VaultDocumentJson, VaultEncryptionService, VaultError, VaultErrorCode, VaultErrorCodes, type VaultEvent, VaultEventTypes, VaultHeader, VaultHeaderMetadata, VaultPolicyDescriptor, VaultProblemReportMessage, VaultProblemReportMessageOptions, VaultRecord, type VaultRecordProps, VaultRepository, type VaultTags, VaultsApi, VaultsModule, type VaultsModuleConfig, WalletPrivLookup, WrapAll, aesGcmDecrypt, aesGcmEncrypt, b64uDecode, b64uEncode, blake2s256, buildContext, canonicalAad, canonicalizeJcs, caveatFromDict, cekLengthForEnc, computeSummary, concatKdf, constantTimeEq, decrypt, decryptWithPassphraseRn, delegate, deriveBackupKeysFromSeed, deriveCek, deriveKid, deriveSymmetricKid, encodeChainHeader, encrypt, encryptWithPassphraseRn, findDecryptionKey, fromBase64Url, fromHex, generateCek, generateNonceAesGcm, generateNonceXchacha, generateUuid, hasMetThreshold, hkdfExpand, hkdfJoin, initVaultCrypto, isAllOfVault, isAnyOfVault, isNonDelegable, isPassphraseVault, isSessionExpired, isThresholdVault, kemDecapsulate, kemEncapsulate, kemGenerateKeypair, kemUnwrapCek, kemWrapCek, keyCommitment, matchesQuery, mintRoot, multibaseBase58btc, multibaseBase58btcDecode, parseIso8601, randomBytes, register, resolveAlg, resolveRecipientForConnection, sha256, shamirReconstruct, shamirSplit, shamirSplitAndWrap, shamirUnwrapAndReconstruct, signCapability, toBase64Url, toHex, validatePolicy, vaultDocumentFromJson, vaultDocumentToJson, verify, verifyKeyCommitment, verifyProof, xchachaDecrypt, xchachaEncrypt };