import type { ShellRunner } from '../../lib/shell.js';
export declare class EnvironmentFileError extends Error {
    constructor(message: string);
}
/** Reject keys that could break out of generated shell scripts. */
export declare function assertSafeEnvironmentKeys(values: Record<string, string>): void;
/** Read a dotenv file without exposing its contents in errors or output. */
export declare function readEnvironmentFile(path: string): Promise<Record<string, string>>;
/**
 * Resolve the GitHub token for forwarding into the container.
 * Priority: GH_TOKEN > GITHUB_TOKEN > `gh auth token`
 * @returns The token string, or empty string if none available.
 */
export declare function resolveGhToken(env: Record<string, string | undefined>, runner: ShellRunner, ghAvailable: () => boolean | Promise<boolean>): Promise<string>;