/**
 * Secure storage for API keys using native keychain
 * - macOS: Keychain
 * - Linux: Secret Service API (libsecret)
 * - Windows: Credential Vault
 */
export interface SecureStorage {
    getApiKey(providerId: string): Promise<string | null>;
    setApiKey(providerId: string, apiKey: string): Promise<void>;
    deleteApiKey(providerId: string): Promise<void>;
    hasApiKey(providerId: string): Promise<boolean>;
    /** Whether the OS keychain is usable (vs the plaintext-config fallback).
     *  Optional — only SmartStorage (what createSecureStorage returns) implements it. */
    isKeychainAvailable?(): Promise<boolean>;
}
/**
 * Migrate existing plain-text API keys to keychain
 */
export declare function migrateApiKeysToKeychain(config: any): Promise<void>;
export declare function createSecureStorage(config: any): SecureStorage;