import type { SecretService, SecretValues } from '@pikku/core/services';
import type { SecretValue } from '@pikku/core/classification';
import { Redis, type RedisOptions } from 'ioredis';
export interface RedisSecretServiceConfig {
    key: string;
    keyVersion?: number;
    previousKey?: string;
    keyPrefix?: string;
}
export declare class RedisSecretService implements SecretService {
    private redis;
    private ownsConnection;
    private key;
    private keyVersion;
    private previousKey?;
    private keyPrefix;
    private kekSalts;
    private keks;
    constructor(connectionOrConfig: Redis | RedisOptions | string, config: RedisSecretServiceConfig);
    private secretKey;
    private saltKey;
    private getKEKSalt;
    private getKEK;
    getSecret<T = string>(key: string): Promise<SecretValue<T>>;
    hasSecret(key: string): Promise<boolean>;
    setSecret(key: string, value: unknown): Promise<void>;
    deleteSecret(key: string): Promise<void>;
    getSecrets<T extends Record<string, unknown> = Record<string, unknown>>(keys: (keyof T & string)[]): Promise<Partial<SecretValues<T>>>;
    rotateKEK(): Promise<number>;
    close(): Promise<void>;
}