/**
 * Issuer key loader (no ambient key discovery)
 *
 * Supports `env:VAR_NAME` and `file:/path` schemes.
 * Reads JWK JSON, validates Ed25519, derives public key.
 * NEVER logs key bytes.
 */
export interface LoadedKey {
    privateKey: Uint8Array;
    publicKey: Uint8Array;
    kid: string;
}
export declare function loadIssuerKey(schemeUri: string): Promise<LoadedKey>;
//# sourceMappingURL=key-loader.d.ts.map