import type { CredentialResolution, ResolvedConfig } from "./types.js";
export declare function maskSecret(value: string): string;
export declare function credentialEnvName(env?: NodeJS.ProcessEnv, preferredName?: string): string | undefined;
export declare function resolveCredential(env?: NodeJS.ProcessEnv): CredentialResolution;
interface ConfigFile {
    profile?: string;
    tailnet?: string;
    hostname?: string;
    tags?: string[];
    ssh?: boolean;
    keyExpiry?: string;
    preauthorized?: boolean;
    reusable?: boolean;
    ephemeral?: boolean;
    acceptDns?: boolean;
    acceptRoutes?: boolean;
    cleanupAfter?: number;
    credentialEnv?: string;
    clientSecret?: string;
    tagOwner?: string[];
}
export declare function loadConfigFile(configPath?: string): {
    config: ConfigFile;
    source: string;
} | undefined;
export declare function resolveConfig(env?: NodeJS.ProcessEnv): ResolvedConfig;
export declare const runtime: Readonly<{
    node: string;
    platform: NodeJS.Platform;
    arch: NodeJS.Architecture;
    cwd: string;
}>;
export type ResolvedAuth = {
    kind: "node-auth-key";
    source: string;
    masked: string;
} | {
    kind: "oauth-trust";
    source: string;
    masked: string;
} | {
    kind: "oauth-pair";
    source: string;
    clientId: string;
} | {
    kind: "bearer";
    source: string;
    masked: string;
} | {
    kind: "api-key";
    source: string;
    masked: string;
};
export interface AuthResolution {
    found: boolean;
    auth?: ResolvedAuth;
    candidates: string[];
    error?: string;
}
export declare function resolveAuth(env?: NodeJS.ProcessEnv): AuthResolution;
export {};
//# sourceMappingURL=core.d.ts.map