export interface AddCiGateOptions {
    /** Repo root where the .github/ folder should land. */
    cwd: string;
    /** Override the default `npx --yes @lyse-labs/lyse@<v>` pin in the workflow. */
    lyseVersion?: string;
    /**
     * No-op in the diff-first gate (kept for back-compat with older callers /
     * `--threshold` CLI arg). The workflow now gates on `audit --scope new`
     * exiting non-zero, driven by the committed `.lyse/baseline.json` — there
     * is no score-drop threshold to configure. Still validated so pre-existing
     * scripts that pass a bad value fail the same way they used to.
     */
    threshold?: number;
    /** Overwrite existing files instead of refusing. */
    force?: boolean;
    /** Bypass the project-root check (.git/ or package.json). */
    forceNotARepo?: boolean;
}
export interface AddCiGateResult {
    written: string[];
    skipped: {
        path: string;
        reason: string;
    }[];
}
export declare class AddCiGateError extends Error {
}
export declare const CI_GATE_DEFAULTS: {
    readonly lyseVersion: string;
    readonly threshold: 0;
};
export declare function runAddCiGate(opts: AddCiGateOptions): AddCiGateResult;