/**
 * Configuration for Azure authentication.
 */
export interface AzureAuthConfig {
    tenantId: string;
    clientId: string;
    clientSecret: string;
}
/**
 * Provides authentication tokens for Azure APIs.
 * Supports both ARM (management.azure.com) and Key Vault data plane.
 */
export declare class AzureAuthProvider {
    private credential;
    private armTokenCache;
    private keyVaultTokenCache;
    private static readonly TOKEN_REFRESH_BUFFER_MS;
    private static readonly ARM_SCOPE;
    private static readonly KEY_VAULT_SCOPE;
    constructor(config: AzureAuthConfig);
    /**
     * Get an access token for the Azure Resource Manager API.
     */
    getArmToken(): Promise<string>;
    /**
     * Get an access token for a Key Vault's data plane.
     * Key Vault tokens are vault-specific due to different scopes.
     */
    getKeyVaultToken(vaultUri?: string): Promise<string>;
    /**
     * Clear all cached tokens.
     */
    clearCache(): void;
}
//# sourceMappingURL=AzureAuthProvider.d.ts.map