// Public barrel for @oscharko-dev/keiko-security. Re-exports every shared primitive so callers
// can `import { redact, GatewayError, assertValidRunId, sha256Hex } from "@oscharko-dev/keiko-security"`
// without knowing which sub-module owns the symbol. Subpath imports (`./errors/gateway`, etc.) are
// available for callers who want to pull in a narrower surface — both flat and subpath imports
// resolve to the same module instance.
export { KEIKO_SECURITY_VERSION } from "./version.js";
export { redact, createAuditRedactor, deepRedactStrings } from "./redaction.js";
export { assertValidRunId } from "./runid.js";
export { isKeikoApiKeyEnvName, keikoApiKeySecretValues } from "./secrets.js";
export { canonicalise, sha256Hex, sha256Base64 } from "./hashing.js";
export { sealString, openString, sealBytes, openBytes, isSealed } from "./secretbox.js";
export * from "./errors/index.js";
