export interface WriteWizardEnvFileOptions {
    /** Path to .agency directory containing credentials.yaml */
    agencyDir: string;
    /** Output path for the env file (default: /var/lib/generacy/wizard-credentials.env) */
    envFilePath?: string;
}
export interface WriteWizardEnvFileResult {
    /** Credential IDs successfully written to env file */
    written: string[];
    /** Credential IDs that failed to unseal */
    failed: string[];
    /**
     * True when a usable `GH_TOKEN` was emitted to the env file. Callers gate the
     * early post-activation clone on this — without a GitHub token the deferred
     * clone of a private repo can't authenticate, so firing the (one-shot)
     * post-activation sentinel before the token is sealed clones nothing.
     */
    hasGitHubToken: boolean;
}
interface EnvEntry {
    key: string;
    value: string;
}
export declare function idToEnvName(id: string): string;
export declare function mapCredentialToEnvEntries(id: string, type: string, value: string): EnvEntry[];
export declare function formatEnvFile(entries: EnvEntry[]): string;
export declare function writeWizardEnvFile(options: WriteWizardEnvFileOptions): Promise<WriteWizardEnvFileResult>;
export {};
//# sourceMappingURL=wizard-env-writer.d.ts.map