/**
 * SecretManager — 配置与密钥管理
 *
 * FR-Z04:
 * - AC1: API Key 等敏感配置支持环境变量注入，不硬编码在配置文件中
 * - AC2: 配置文件中的敏感字段支持占位符语法 ${ENV_VAR}
 * - AC3: 启动时校验必要密钥是否已配置，缺失时给出明确提示
 * - AC4: 密钥不出现在日志和错误输出中
 */
export interface SecretCheckResult {
    key: string;
    envVar: string;
    configured: boolean;
    required: boolean;
    masked: string;
}
export interface SecretCheckReport {
    items: SecretCheckResult[];
    allRequired: boolean;
    missingRequired: string[];
}
/**
 * AC1/AC2: 解析配置中的占位符 ${ENV_VAR}
 */
export declare function resolveSecrets(config: Record<string, unknown>): Record<string, unknown>;
/**
 * AC3: 校验必要密钥是否已配置
 */
export declare function checkSecrets(additionalSecrets?: Array<{
    key: string;
    envVar: string;
    required: boolean;
}>): SecretCheckReport;
/**
 * AC4: 密钥脱敏 — 只显示前 4 位和后 4 位
 */
export declare function maskSecret(value: string): string;
/** 格式化密钥检查报告 */
export declare function formatSecretReport(report: SecretCheckReport): string;
//# sourceMappingURL=secret-manager.d.ts.map