import type { SecretRef, WorkflowManifest } from "@boardwalk-labs/workflow";
export { workflowManifestSchema } from "@boardwalk-labs/workflow";
export type { WorkflowManifest } from "@boardwalk-labs/workflow";
/** The manifest's zod-derived budget shape (matches the platform's `domain/models` alias). */
export type Budget = NonNullable<WorkflowManifest["budget"]>;
/** Pre-rename alias — runtime code (secret resolvers, tool context) imports this name. */
export type SecretRefManifest = SecretRef;
/** The secret name a whole-value `${{ secrets.NAME }}` env value references, or null. */
export declare function parseSecretEnvRef(value: string): string | null;
/**
 * The secret names a run may resolve — mirrors the broker's server-side allowlist
 * (`permissions.secrets` exactly; see the backend's domain/models/manifest.ts).
 */
export declare function effectiveSecretAllowlist(manifest: Pick<WorkflowManifest, "permissions">): {
    name: string;
}[];