/**
 * Seals what a connection keeps at rest — the Account Token (a long-lived refresh token), the DPoP
 * private key and the Session Tokens — with AES-256-GCM under a key derived from the app's secret
 * (its `APP_KEY`). A database dump alone does not hand out anybody's access to another company.
 */
export declare class Sealer {
    #private;
    constructor(secret: string);
    seal(value: unknown): string;
    open<T>(sealed: string): T;
}
//# sourceMappingURL=crypto.d.ts.map