/**
 * Key Management Service (KMS) — JSON-RPC 2.0 client.
 *
 * Mirrors the CTRNGService construction shape (config + token factory).
 */
import type { OrbitportConfig, RequestOptions, ServiceResult, CreateKeyRequest, CreateKeyResponse, EncryptRequest, EncryptResponse, DecryptRequest, DecryptResponseUtf8, DecryptResponseBytes, SignRequest, SignResponse, GenerateDataKeyRequest, GenerateDataKeyResponse, RotateKeyRequest, RotateKeyResponse, GetCapabilitiesResponse } from '../types';
export declare class KMSService {
    private config;
    private getToken;
    private debug;
    constructor(config: OrbitportConfig, getToken: () => Promise<string | null>, debug?: boolean);
    setDebug(debug: boolean): void;
    createKey(req: CreateKeyRequest, options?: RequestOptions): Promise<ServiceResult<CreateKeyResponse>>;
    encrypt(req: EncryptRequest, options?: RequestOptions): Promise<ServiceResult<EncryptResponse>>;
    decrypt(req: DecryptRequest & {
        encoding: 'bytes';
    }, options?: RequestOptions): Promise<ServiceResult<DecryptResponseBytes>>;
    decrypt(req: DecryptRequest & {
        encoding?: 'utf8';
    }, options?: RequestOptions): Promise<ServiceResult<DecryptResponseUtf8>>;
    sign(req: SignRequest, options?: RequestOptions): Promise<ServiceResult<SignResponse>>;
    generateDataKey(req: GenerateDataKeyRequest, options?: RequestOptions): Promise<ServiceResult<GenerateDataKeyResponse>>;
    rotateKey(req: RotateKeyRequest, options?: RequestOptions): Promise<ServiceResult<RotateKeyResponse>>;
    getCapabilities(options?: RequestOptions): Promise<ServiceResult<GetCapabilitiesResponse>>;
    /**
     * Wraps a JSON-RPC call into the SDK's ServiceResult envelope.
     */
    private _call;
    private _callRaw;
}
//# sourceMappingURL=kms.d.ts.map