/** Domain separator for the artifact digest. Distinct from every signature
 *  domain in the SDK, so a digest preimage can never be mistaken for a
 *  signing preimage and vice versa. */
export declare const REVOCATION_ARTIFACT_DOMAIN = "APS-REVOCATION-ARTIFACT-V0";
/** Digest of a revocation artifact, as "sha256:" + 64 lowercase hex.
 *
 *  Invariants:
 *  - preimage is UTF8(REVOCATION_ARTIFACT_DOMAIN) || 0x00 || UTF8(JCS(artifact)),
 *    assembled as bytes, never as a JavaScript string carrying a NUL;
 *  - canonicalization is canonicalizeJCSForWrite, so an integer outside the
 *    interoperable IEEE 754 range is refused rather than hashed;
 *  - the argument is the FULL artifact including its signature, so re-signing
 *    the same facts yields a different digest;
 *  - it commits to nothing about publication. Inclusion is answered by
 *    verifyPublicationCommitment, discovery by nothing in this module.
 *
 *  Throws whatever canonicalizeJCSForWrite throws for a value with no canonical
 *  form; it never returns a digest for input it could not canonicalize. */
export declare function revocationArtifactDigest(artifact: unknown): string;
//# sourceMappingURL=digest.d.ts.map