import { z } from 'zod';
export declare const DappSecretBoxSchema: "network.xyo.dapp.secret.box" & {
    readonly __schema: true;
};
export declare const DappSecretBoxAlgorithm: "aes-256-gcm-v1";
/**
 * Portable authenticated-encryption envelope. The key remains behind the
 * capability that produced it; this document contains ciphertext only.
 */
export declare const DappSecretBoxZod: z.ZodObject<{
    schema: z.ZodLiteral<"network.xyo.dapp.secret.box" & {
        readonly __schema: true;
    }>;
    schemaVersion: z.ZodLiteral<1>;
    algorithm: z.ZodLiteral<"aes-256-gcm-v1">;
    keyId: z.ZodString;
    initializationVector: z.ZodString;
    ciphertext: z.ZodString;
    authenticationTag: z.ZodString;
    additionalDataHash: z.ZodString;
}, z.core.$strict>;
export type DappSecretBox = z.infer<typeof DappSecretBoxZod>;
export interface DappSecretBoxCapability {
    readonly algorithm: typeof DappSecretBoxAlgorithm;
    readonly keyId: string;
    readonly kind: 'secret-box';
    commit(value: Uint8Array, additionalData: Uint8Array): Promise<string>;
    open(box: unknown, additionalData: Uint8Array): Promise<Uint8Array>;
    seal(plaintext: Uint8Array, additionalData: Uint8Array): Promise<DappSecretBox>;
}
//# sourceMappingURL=secret.d.ts.map