import type { Auth } from './auth.js';
/**
 * User API Key management. Keys are stored encrypted on the platform and
 * injected server-side when apps call `fas.proxy.fetch()`. Apps never see
 * the plaintext key.
 *
 * Key management happens on a platform-hosted page, not in the app UI.
 * Apps use `fas.keys.manage()` to redirect users there.
 */
export declare class Keys {
    private readonly appId;
    private readonly apiBase;
    private readonly auth;
    constructor(appId: string, apiBase: string, auth: Auth);
    /**
     * Open the platform's key management page. If a provider is specified,
     * that provider's card will be highlighted on the page.
     *
     * The user manages their keys on the platform page and is redirected
     * back to the app when done.
     *
     * @param provider - Optional provider to highlight (e.g. 'openai')
     */
    manage(provider?: string): void;
    /**
     * Check which providers the current user has keys configured for.
     * Useful for showing "configure your API key" prompts in the app.
     */
    status(): Promise<Array<{
        provider: string;
        label: string | null;
        createdAt: number;
        lastUsedAt: number | null;
    }>>;
    /**
     * Check if the user has a key for a specific provider.
     */
    has(provider: string): Promise<boolean>;
}
//# sourceMappingURL=keys.d.ts.map