/**
 * crew#720: the Azure DevOps half of the deliver script — a small node program the script writes
 * into its temp dir and runs with the node that runs crew. It does the three things bash cannot do
 * safely: mint the auth header (an Entra client-credentials token for a service principal, or
 * `Basic base64(":"+PAT)`), compare origin's URLs with the consented repository, and open (or
 * adopt) the pull request through the REST API with a JSON body.
 *
 * Rules it keeps:
 *  - credentials are read from the environment only (`CREW_ADO_*` / `AZURE_DEVOPS_EXT_PAT`), and
 *    the minted header is written to stdout for the script to capture into an UNEXPORTED shell
 *    variable — never to a file, argv or the log;
 *  - the `pr` call reads the header from `WICKED_ADO_AUTH`, set one-shot on that one child;
 *  - every request uses `redirect: 'manual'`, so the header never follows a redirect to another
 *    host, and a 3xx is a failure;
 *  - every message is redacted (each secret, its base64 Basic forms, JWTs, Authorization values,
 *    URL userinfo) before it is printed.
 *
 * (crew#933) It also links Azure Boards work items (`AB#<id>` in the intent) on the pull request it
 * opens (`workItemRefs`), updates the title and description of the one it adopts on a re-deliver,
 * and serves the revision mode: `view` (launch: the PR's head branch and state, minting its own
 * header), `state` and `comment` (the deliver phase: a thread carrying the run record).
 *
 * Plain JavaScript in a string on purpose: the script must not depend on where crew's dist lives
 * (a run waits at its gate across a crew upgrade), and the same text is what the tests run.
 */
export declare const ADO_HELPER_JS: string;
//# sourceMappingURL=ado-deliver-helper.d.ts.map