import { SecretValue, SecretValueAuditEvent, SecretValueAuditListener, _resetSecretValueAuditListenersForTesting, onSecretValueAudit } from "./secret-value.js";
import { GraphorinSecretsError, LiteralSecretsForbiddenError, MemoryStoreInProductionError, MissingPeerDependencyError, SecretAccessDeniedError, SecretRefParseError, SecretRefParseErrorKind, SecretRequiredError, SecretResolutionError, StrictSecretsUnavailableError, UnknownSchemeError } from "./errors.js";
import { SecretsAuditAction, SecretsAuditActor, SecretsAuditDecision, SecretsAuditEvent, SecretsAuditListener, _getSecretsAuditListenerCountForTesting, _resetSecretsAuditListenersForTesting, emitSecretsAudit, onSecretsAudit } from "./audit-emitter.js";
import { ToolSecretsContext, WithSecretAuditEvent, WithSecretListener, _resetWithSecretListenersForTesting, computeEffectiveAllowlist, enforceSecretAcl, getActiveToolSecretsContext, onWithSecretAudit, withChildToolSecretsContext, withSecret, withToolSecretsContext } from "./acl.js";
import { EncryptedFileSecretsStore, EncryptedFileSecretsStoreOptions } from "./stores/encrypted-file.js";
import { EnvSecretsStore, EnvSecretsStoreOptions } from "./stores/env.js";
import { KeyringSecretsStore, KeyringSecretsStoreOptions } from "./stores/keyring.js";
import { MemorySecretsStore } from "./stores/memory.js";
import "./stores/index.js";
import { CreateSecretsStoreOptions, SecretsStoreKind, SecretsStoreStatus, _resetSecretsFactoryForTesting, composeChain, createSecretsStore, detectHeadless, getActiveSecretsStore, getSecretsStoreStatus, parseSecretsSourceEnv } from "./factory.js";
import { Argon2idFn, ENCRYPTED_FILE_MAGIC, _setArgon2idForTesting, decryptBundle, deriveAesKey, encryptedFileResolver } from "./resolvers/encrypted-file.js";
import { envResolver } from "./resolvers/env.js";
import { _resetFileResolverWarningsForTesting, fileResolver } from "./resolvers/file.js";
import { KEYRING_DEFAULT_SERVICE, KeyringEntryCtor, _setKeyringEntryCtorForTesting, keyringResolver } from "./resolvers/keyring.js";
import { _resetLiteralResolverForTesting, isLiteralAllowed, literalResolver, setLiteralAllowed } from "./resolvers/literal.js";
import { RefStoreLookup, refResolver, setRefStoreLookup } from "./resolvers/ref.js";
import { AUTHORITY_OPTIONAL_SCHEMES, BUILTIN_SCHEMES, OPAQUE_ONLY_SCHEMES, ParsedSecretRef, SecretRefValidationResult, ValidateSecretRefsOptions, assertNotNakedString, describeParseErrorKind, getQueryParam, getQueryParamAll, getQueryParamRequired, parseAuthority, parseOrAssert, parseSecretRef, validateSecretRefs } from "./secret-ref.js";
import { VaultAdapter, setVaultAdapter, vaultResolver } from "./resolvers/vault.js";
import { RegisterResolverOptions, _resetResolversForTesting, areBuiltinsInstalled, getResolver, listResolverSchemes, registerResolver, resolveSecret, unregisterResolver } from "./resolvers/registry.js";
import { installBuiltinResolvers } from "./resolvers/index.js";
export { AUTHORITY_OPTIONAL_SCHEMES, type Argon2idFn, BUILTIN_SCHEMES, type CreateSecretsStoreOptions, ENCRYPTED_FILE_MAGIC, EncryptedFileSecretsStore, type EncryptedFileSecretsStoreOptions, EnvSecretsStore, type EnvSecretsStoreOptions, GraphorinSecretsError, KEYRING_DEFAULT_SERVICE, type KeyringEntryCtor, KeyringSecretsStore, type KeyringSecretsStoreOptions, LiteralSecretsForbiddenError, MemorySecretsStore, MemoryStoreInProductionError, MissingPeerDependencyError, OPAQUE_ONLY_SCHEMES, type ParsedSecretRef, type RefStoreLookup, type RegisterResolverOptions, SecretAccessDeniedError, SecretRefParseError, type SecretRefParseErrorKind, type SecretRefValidationResult, SecretRequiredError, SecretResolutionError, SecretValue, type SecretValueAuditEvent, type SecretValueAuditListener, type SecretsAuditAction, type SecretsAuditActor, type SecretsAuditDecision, type SecretsAuditEvent, type SecretsAuditListener, type SecretsStoreKind, type SecretsStoreStatus, StrictSecretsUnavailableError, type ToolSecretsContext, UnknownSchemeError, type ValidateSecretRefsOptions, type VaultAdapter, type WithSecretAuditEvent, type WithSecretListener, _getSecretsAuditListenerCountForTesting, _resetFileResolverWarningsForTesting, _resetLiteralResolverForTesting, _resetResolversForTesting, _resetSecretValueAuditListenersForTesting, _resetSecretsAuditListenersForTesting, _resetSecretsFactoryForTesting, _resetWithSecretListenersForTesting, _setArgon2idForTesting, _setKeyringEntryCtorForTesting, areBuiltinsInstalled, assertNotNakedString, composeChain, computeEffectiveAllowlist, createSecretsStore, decryptBundle, deriveAesKey, describeParseErrorKind, detectHeadless, emitSecretsAudit, encryptedFileResolver, enforceSecretAcl, envResolver, fileResolver, getActiveSecretsStore, getActiveToolSecretsContext, getQueryParam, getQueryParamAll, getQueryParamRequired, getResolver, getSecretsStoreStatus, installBuiltinResolvers, isLiteralAllowed, keyringResolver, listResolverSchemes, literalResolver, onSecretValueAudit, onSecretsAudit, onWithSecretAudit, parseAuthority, parseOrAssert, parseSecretRef, parseSecretsSourceEnv, refResolver, registerResolver, resolveSecret, setLiteralAllowed, setRefStoreLookup, setVaultAdapter, unregisterResolver, validateSecretRefs, vaultResolver, withChildToolSecretsContext, withSecret, withToolSecretsContext };