import { Fr } from '@aztec/foundation/curves/bn254';
import { GrumpkinScalar } from '@aztec/foundation/curves/grumpkin';
import { type Bufferable } from '@aztec/foundation/serialize';
import type { AztecAsyncKVStore } from '@aztec/kv-store';
import { AztecAddress } from '@aztec/stdlib/aztec-address';
import { CompleteAddress, type PartialAddress } from '@aztec/stdlib/contract';
import { KeyValidationRequest } from '@aztec/stdlib/kernel';
import { type KeyPrefix, type PublicKey } from '@aztec/stdlib/keys';
import type { AccountPrivacyKeys, AccountPrivacySecretKeys } from './account_privacy_keys.js';
/**
 * Used for managing keys. Can hold keys of multiple accounts.
 */
export declare class KeyStore {
    #private;
    static readonly SCHEMA_VERSION = 1;
    constructor(database: AztecAsyncKVStore);
    /**
     * Adds an account to the key store.
     *
     * The key store holds the four privacy secret keys (nullifier-hiding, incoming-viewing, outgoing-viewing, tagging),
     * but only the *public* message-signing and fallback keys: their secret keys are withheld, since the key store (and
     * PXE, which embeds it) is not trusted to hold them. The public keys are still needed to reconstruct the account's
     * address, which commits to all six master public keys.
     *
     * @param keys - The account's privacy keys: four secret keys plus the message-signing and fallback public keys.
     * @param partialAddress - The partial address of the account.
     * @returns The account's complete address.
     * @throws If any of the account's six master public keys would be the point at infinity.
     */
    addAccount(keys: AccountPrivacyKeys, partialAddress: PartialAddress): Promise<CompleteAddress>;
    /**
     * Retrieves addresses of accounts stored in the key store.
     * @returns A Promise that resolves to an array of account addresses.
     */
    getAccounts(): Promise<AztecAddress[]>;
    /** Checks whether an account is registered in the key store. */
    hasAccount(account: AztecAddress): Promise<boolean>;
    /**
     * Gets the key validation request for a given master public key hash and contract address.
     * @throws If the account corresponding to the master public key hash does not exist in the key store.
     * @param pkMHash - The master public key hash.
     * @param contractAddress - The contract address to silo the secret key in the key validation request with.
     * @returns The key validation request.
     */
    getKeyValidationRequest(pkMHash: Fr, contractAddress: AztecAddress): Promise<KeyValidationRequest>;
    /**
     * Gets the master nullifier public key for a given account.
     * @throws If the account does not exist in the key store.
     */
    getMasterNullifierHidingPublicKey(account: AztecAddress): Promise<PublicKey>;
    /**
     * Gets the master incoming viewing public key for a given account.
     * @throws If the account does not exist in the key store.
     */
    getMasterIncomingViewingPublicKey(account: AztecAddress): Promise<PublicKey>;
    /**
     * Retrieves the master outgoing viewing public key.
     * @throws If the account does not exist in the key store.
     */
    getMasterOutgoingViewingPublicKey(account: AztecAddress): Promise<PublicKey>;
    /**
     * Retrieves the master tagging public key.
     * @throws If the account does not exist in the key store.
     */
    getMasterTaggingPublicKey(account: AztecAddress): Promise<PublicKey>;
    /**
     * Retrieves master incoming viewing secret key.
     * @throws If the account does not exist in the key store.
     */
    getMasterIncomingViewingSecretKey(account: AztecAddress): Promise<GrumpkinScalar>;
    /**
     * Retrieves the four privacy secret keys the key store holds for an account. Paired with {@link addAccount}, this
     * allows exporting an account's privacy secret keys, e.g. to re-register it on another PXE. The message-signing and
     * fallback secret keys are not held by the key store and so are not returned.
     *
     * @throws If the account does not exist in the key store.
     */
    getAccountSecretKeys(account: AztecAddress): Promise<AccountPrivacySecretKeys>;
    /**
     * Retrieves application outgoing viewing secret key.
     * @throws If the account does not exist in the key store.
     * @param account - The account to retrieve the application outgoing viewing secret key for.
     * @param app - The application address to retrieve the outgoing viewing secret key for.
     * @returns A Promise that resolves to the application outgoing viewing secret key.
     */
    getAppOutgoingViewingSecretKey(account: AztecAddress, app: AztecAddress): Promise<Fr>;
    /**
     * Retrieves the sk_m corresponding to the given pk_m hash.
     * @throws If the provided hash is not associated with any of the registered accounts.
     * @param pkMHash - The master public key hash to get secret key for.
     * @returns A Promise that resolves to sk_m.
     * @dev Used when feeding the sk_m to the kernel circuit for keys verification.
     */
    getMasterSecretKey(pkMHash: Fr): Promise<GrumpkinScalar>;
    /**
     * Checks whether a given account has a key matching the provided master public key hash.
     * @param account - The account address to check.
     * @param pkMHash - The master public key hash to look for.
     * @returns True if the account has a key with the given hash.
     */
    accountHasKey(account: AztecAddress, pkMHash: Fr): Promise<boolean>;
    /**
     * Gets the key prefix and account address for a given value.
     * @returns A tuple containing the key prefix and account address.
     * @dev Note that this is quite inefficient but it should not matter because there should never be too many keys
     * in the key store.
     */
    getKeyPrefixAndAccount(value: Bufferable): Promise<[KeyPrefix, AztecAddress]>;
}
//# sourceMappingURL=data:application/json;base64,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