/**
 * AgentGuard(TM) Spend: server-runtime OpenRouter managed-key fetcher.
 *
 * This never proxies inference traffic. It fetches a short-lived managed key
 * for Pro tiers, then the customer's server runtime calls OpenRouter directly.
 */
export interface ManagedOpenRouterKey {
    key: string;
    expiresAtMs: number;
    tier?: string;
    inferenceBilling?: 'agentguard_managed' | 'customer_managed';
}
export interface ManagedOpenRouterKeyOptions {
    endpointBaseUrl?: string;
    nowMs?: number;
    home?: string;
    machineFingerprint?: string;
    processId?: string;
    runtime?: 'server' | 'browser';
    getJson?: (url: string, headers: Record<string, string>) => Promise<{
        status: number;
        body: unknown;
    }>;
}
export declare function fetchManagedOpenRouterKey(licenseKey: string | null | undefined, opts?: ManagedOpenRouterKeyOptions): Promise<ManagedOpenRouterKey | null>;
export declare function clearManagedOpenRouterKeyCache(): void;
export declare function isOpenRouterHost(urlOrHost: string | undefined | null, configuredBaseUrl?: string): boolean;
//# sourceMappingURL=key-fetch.d.ts.map