//#region src/jwe/types.d.ts
/**
 * Wire-format types for JWE General JSON Serialization (RFC 7516 §7.2).
 */
declare const ALG_ECDH_ES = "ECDH-ES";
declare const ENC_A256GCM = "A256GCM";
/**
 * One recipient entry on the sender side. The registered alg handler
 * for `alg` interprets `publicKey` bytes (raw X25519 for ECDH-ES,
 * concatenated X25519||ML-KEM for pq-hybrid).
 */
interface Recipient {
  kid: string;
  publicKey: Uint8Array;
  alg?: string;
}
/**
 * Output of an alg handler's sender-side step.
 * `encryptedKey` is empty for Direct Key Agreement (ECDH-ES); for
 * key-wrap algs it carries the per-recipient wrapped CEK.
 */
interface KeyAgreementResult {
  cek: Uint8Array;
  encryptedKey: Uint8Array;
  headerExtra: Record<string, unknown>;
}
/** Function signature for an alg handler's sender path. */
type SenderFn = (args: {
  recipientPublicKey: Uint8Array;
  enc: string;
  apu: Uint8Array;
  apv: Uint8Array;
}) => KeyAgreementResult;
/**
 * Function signature for an alg handler's recipient path.
 * `recipientHeader` is the per-recipient header (with `epk` for
 * ECDH-ES, `encryptedKey` injected for key-wrap algs).
 */
type RecipientFn = (args: {
  privateKey: Uint8Array;
  recipientHeader: Record<string, unknown>;
  enc: string;
  apu: Uint8Array;
  apv: Uint8Array;
}) => Uint8Array;
/** JWE General JSON Serialization wire shape. */
interface JweGeneralJson {
  protected: string;
  unprotected?: Record<string, unknown>;
  recipients: Array<{
    header?: Record<string, unknown>;
    encrypted_key?: string;
  }>;
  iv: string;
  ciphertext: string;
  tag: string;
  aad?: string;
}
declare class JweAlgUnsupportedError extends Error {
  constructor(message: string);
}
declare class JweEncryptError extends Error {
  constructor(message: string);
}
declare class JweDecryptError extends Error {
  constructor(message: string);
}
declare class JweInvalidStructure extends Error {
  constructor(message: string);
}
declare class JweRecipientNotFound extends Error {
  constructor(message: string);
}
//#endregion
export { ALG_ECDH_ES, ENC_A256GCM, JweAlgUnsupportedError, JweDecryptError, JweEncryptError, JweGeneralJson, JweInvalidStructure, JweRecipientNotFound, KeyAgreementResult, Recipient, RecipientFn, SenderFn };
//# sourceMappingURL=types.d.mts.map