/**
 * Synchronous checks that mirror CredentialResolver.resolveApiKey sources
 * used by isProviderConfiguredSync (fallback candidate filtering).
 */
import type { Config } from '../config/schema.js';
/**
 * Synchronous API key / OAuth access for {@link Agent} `getApiKey` (pi-agent requires sync).
 * Order: default agent auth-profiles → global auth-profiles → OAuth token file.
 * Does not read standard env vars or models.json registry — callers chain `getApiKeySync` after this.
 */
export declare function resolveProviderApiKeySync(provider: string): string | undefined;
/** Resolve one agent's private credential, then the shared credential and OAuth token. */
export declare function resolveProviderApiKeyForAgentSync(provider: string, agentId?: string, config?: Config): string | undefined;
/**
 * True if credentials exist in auth profiles (global or agent) or OAuth store,
 * matching async CredentialResolver resolution (excluding env — callers check env separately).
 */
export declare function hasProviderAuthOnDiskSync(provider: string): boolean;