/**
 * Minimal dotenv parser — the secrets-file boundary.
 *
 * `secrets: '.env.<env>'` in an adapter's params points a gitignored file whose
 * entire contents are secrets. `loadDotenvFile` reads it into a flat
 * `Record<string,string>` the CLI hands the adapter (injected into the local
 * runtime in dev, pushed to a secret store in prod). No `process.env` mutation,
 * no interpolation magic beyond `${VAR}` against earlier keys in the same file.
 */
export declare function parseDotenv(contents: string): Record<string, string>;
/** Read + parse a dotenv file. Returns `{}` if the file is absent (CI-safe). */
export declare function loadDotenvFile(path: string): Record<string, string>;
/**
 * Read + parse a dotenv file the preset explicitly DECLARED (`secrets:`).
 * Declared-but-absent is a wiring error (the gitignored file was never created
 * on this machine), so it throws instead of loading `{}` — silently forwarding
 * nothing surfaces much later as an empty credential at the provider. A file
 * that exists but holds no keys is legitimate (a domain with no secrets yet).
 */
export declare function loadDeclaredSecrets(path: string, declaration: string): Record<string, string>;
//# sourceMappingURL=dotenv.d.ts.map