/**
 * HashiCorp Vault Secret Resolver
 *
 * Reads secrets from Vault KV v2 engine.
 * Lazy-imports node-vault — optional peer dependency.
 * Implements TTL-based caching to support rotation without process restart.
 *
 * Required peer dep: node-vault >= 0.10.0
 * Install: pnpm add node-vault
 */
import type { SecretResolver } from './types.js';
export interface VaultResolverOptions {
    addr?: string;
    token?: string;
    secretPath?: string;
    namespace?: string;
    cacheTtlMs?: number;
}
export declare class VaultSecretResolver implements SecretResolver {
    readonly name = "vault";
    private client;
    private readonly addr;
    private readonly token;
    private readonly secretPath;
    private readonly namespace?;
    private readonly cacheTtlMs;
    private cache;
    private cacheTimestamp;
    constructor(options?: VaultResolverOptions);
    /**
     * Lazy-import node-vault and create client.
     * Throws a clear error if the package is not installed.
     */
    private getClient;
    /**
     * Fetch all secrets from Vault and cache them.
     */
    private fetchSecrets;
    resolve(key: string): Promise<string | undefined>;
    resolveAll(keys: string[]): Promise<Record<string, string>>;
    dispose(): Promise<void>;
}
//# sourceMappingURL=vault-resolver.d.ts.map