/**
 * src/models/bundled-key.ts
 *
 * Phase-1 testing-only fallback for users who don't have their own NIM key.
 *
 * ─── Important caveats ─────────────────────────────────────────────────
 * The NVIDIA NIM key below is XOR-obfuscated against a random pad. It is
 * NOT cryptographically protected — anyone with shell access to a customer
 * device can reconstruct it in two lines of JavaScript. Treat this as a
 * convenience for testing/demos, not a real secret.
 *
 * Side effects when this fallback fires:
 *   • Every customer's NIM usage hits the bundled key's quota — rate limits
 *     are global, one bad actor blows everyone's budget.
 *   • A leak (or NVIDIA's bot scanning public dist files) auto-revokes the
 *     key. Every customer device dies until you ship a new version.
 *   • NVIDIA's TOS likely forbids embedding/redistribution of the key.
 *
 * Strategic plan: replace this with the TaseesAI NIM proxy (server-side
 * key, no exposure) once the proxy's Vercel timeout is fixed. See
 * memory/al-moasis.md for the migration plan.
 *
 * To rotate the bundled key:
 *   node -e '
 *     const crypto = require("crypto");
 *     const k = "nvapi-NEW-KEY-HERE";
 *     const pad = crypto.randomBytes(k.length);
 *     const buf = Buffer.from(k);
 *     const out = Buffer.alloc(k.length);
 *     for (let i = 0; i < k.length; i++) out[i] = buf[i] ^ pad[i];
 *     console.log("PAD =", pad.toString("base64"));
 *     console.log("PAY =", out.toString("base64"));
 *   '
 * Paste PAD into BUNDLED_PAD_B64 and PAY into BUNDLED_PAYLOAD_B64 below.
 */
export declare function getBundledNimKey(): string | null;
//# sourceMappingURL=bundled-key.d.ts.map