export interface VaultEnvelope {
    pii_alg: 'hpke-x25519';
    kid: string;
    enc: string;
    ct: string;
}
export interface SealContext {
    subjectHash: string;
    sealUlid: string;
    bodyHash: string;
    tenantId: string;
}
export declare function sealPii(piiMap: Record<string, string>, ctx: SealContext, orgPubKey: Uint8Array, kid: string): Promise<VaultEnvelope | null>;
export declare function openPii(env: VaultEnvelope, orgPrivKey: Uint8Array, orgPubKey: Uint8Array, ctx: SealContext): Promise<Record<string, unknown>>;