export interface StrictKdfParams {
    algorithm: 'PBKDF2';
    iterations: number;
    hash: 'SHA-256';
    salt_b64: string;
}
export interface FileMapEntry {
    name: string;
    mime: string;
    size: number;
    field_id?: string;
}
export type FileMap = Record<string, FileMapEntry>;
export interface FieldEntry {
    field_id: string;
    label: string;
    value: unknown;
}
export interface PackagePayload {
    fields: FieldEntry[];
    file_map: FileMap;
}
export interface PackageEnvelope {
    v: number;
    type: 'submission' | 'folder' | 'vault';
    cek_wrapped: string;
    payload: string;
}
export interface RecoveryCodeEntry {
    hash: string;
    blob: string;
    kdf_params: StrictKdfParams;
    used: boolean;
}
/** Client-only, in-memory type. Must never be persisted or transmitted — codes are shown once and discarded. */
export interface RecoveryCodeSet {
    codes: string[];
    entries: RecoveryCodeEntry[];
}
export interface SmRecoveryKeyPackage {
    v: number;
    type: 'sm_recovery_key';
    algorithm: 'RSA-OAEP';
    private_key_pem: string;
    org_id: string;
    exported_at: string;
    instructions: string;
}
export interface RecoveryKeyBlob {
    blob: string;
    kdf_params: StrictKdfParams;
}
//# sourceMappingURL=secure-package.models.d.ts.map