import { type Environment } from './config.js';
export interface AuthResult {
    accessToken: string;
    refreshToken?: string;
    organizationId: string;
    userId: string;
}
/**
 * Authenticate with Formant using service account credentials.
 * Resolves credentials from environment variables first, then stored defaults.
 * Caches tokens per environment for the lifetime of the CLI process.
 */
export declare function login(env: Environment): Promise<AuthResult>;
/**
 * Validate a specific credential pair without reading from env/stored defaults
 * and without mutating the in-memory token cache.
 */
export declare function validateCredentials(env: Environment, user: string, password: string): Promise<AuthResult>;
/**
 * Clear cached tokens (useful if a token expires mid-session).
 */
export declare function clearTokenCache(): void;