export type AuthMode = 'pat' | 'entra-id';
export interface PatAuthConfig {
    mode: 'pat';
    pat: string;
}
export interface EntraIdAuthConfig {
    mode: 'entra-id';
    tenantId: string;
    clientId: string;
    clientSecret: string;
}
export type AdoAuthConfig = PatAuthConfig | EntraIdAuthConfig;
export declare class AdoAuthProvider {
    private readonly config;
    private readonly patHeader;
    private credential;
    private tokenCache;
    constructor(config: AdoAuthConfig);
    get mode(): AuthMode;
    /**
     * Get the Authorization header value.
     * PAT mode: returns cached "Basic <base64>" header.
     * Entra ID mode: returns "Bearer <token>" (acquires/caches token).
     */
    getAuthHeader(): Promise<string>;
}
/**
 * Detect auth mode from environment variables and build config.
 * Priority: Entra ID > PAT. If both set, Entra ID wins (PAT ignored with warning).
 */
export declare function resolveAuthConfig(): AdoAuthConfig;
//# sourceMappingURL=ado-auth-provider.d.ts.map