import type { SigningProvider, SignatureBlob, PublicKeyBlob } from '../../core/signing-provider.js';
import type { IKmsClient } from './aws-kms-client.js';
export interface AwsKmsProviderConfig {
    keyId: string;
}
/**
 * AWS KMS implementation of SigningProvider.
 * Key is bound at construction time (no keyId per call).
 */
export declare class AwsKmsProvider implements SigningProvider {
    private readonly keyId;
    private readonly kmsClient;
    constructor(kmsClient: IKmsClient, config: AwsKmsProviderConfig);
    signDigest(digest: Uint8Array): Promise<SignatureBlob>;
    getPublicKey(): Promise<PublicKeyBlob>;
    healthCheck(): Promise<void>;
}