/**
 * Higher-level auth resolution that returns the *full* profile context, not
 * just the API key. Vendors that support multiple auth modes (e.g. OpenAI
 * api-key + Codex OAuth + Azure api-key) call this to pick the right
 * branch.
 *
 * Resolution order matches `resolveApiKeyForProvider`:
 *   1. AuthProfileStore (per-agent profile — may be OAuth)
 *   2. Environment variables
 *
 * Returns:
 *   - `mode: 'oauth' | 'azure-key' | 'api-key'`
 *   - `apiKey` (or OAuth access token) if found
 *   - `profileId` when the credential came from the store
 */
import type { ProviderAuthMode, ResolveApiKeyOptions } from './types.js';
export interface ProviderAuthResolution {
    apiKey?: string;
    mode: ProviderAuthMode;
    profileId?: string;
    /** Source bucket. */
    source: 'store' | 'env' | 'none';
    /** Vendor metadata copied from the matched profile (azure resource etc.). */
    meta?: Record<string, unknown>;
}
export declare function resolveAuthProfileForProvider(options: ResolveApiKeyOptions): ProviderAuthResolution;