/**
 * CredentialManager — Async GitHub token resolution.
 *
 * Resolution chain: tokenOverride → GITHUB_TOKEN → GH_TOKEN → gh CLI
 * Instance-based (not static like CLI). No interactive OAuth. No execSync.
 */
import type { ILogger } from '../../../shared/logger.js';
import type { ICredentialManager } from './types.js';
export type TokenType = 'classic' | 'fine-grained' | 'oauth' | 'unknown';
export declare class CredentialManager implements ICredentialManager {
    private readonly logger;
    private readonly tokenOverride?;
    private cachedToken;
    constructor(logger: ILogger, tokenOverride?: string | undefined);
    /**
     * Resolve a GitHub token through the chain.
     * Caches after first successful resolution.
     */
    getToken(): Promise<string>;
    /**
     * Validate a token's format and identify its type.
     */
    static identifyTokenType(token: string): TokenType;
    /**
     * Sanitize a token for safe logging (show first 4 chars + type).
     */
    static sanitizeForLogging(token: string): string;
    private resolveToken;
    private getGitHubCliToken;
}
//# sourceMappingURL=credential-manager.d.ts.map