/**
 * Lowers the public `WorkspaceCredentialsOptions` onto the control-plane's workspace-create payload
 * shape. Pure and side-effect free so it is unit-testable on its own; `buildCreateWorkspaceRequest`
 * calls it and folds the result into the request it builds.
 *
 * SECURITY: this only ever moves account **references** (booleans/names/ids) — never token values or
 * other secret material. `true` resolves to the literal account name `"default"`; a string passes
 * through as the named account; `profile` becomes `profileId`.
 */
import type { WorkspaceCredentialsOptions } from "../types.js";
/** The control-plane's workspace-create payload shape for connected-account credentials. */
export interface WorkspaceCredentialsPayload {
    readonly profileId?: string;
    readonly claude?: string;
    readonly codex?: string;
    readonly github?: string;
}
/** `true` → the account named `default`; a string passes through; `false`/absent → none. */
export declare const mapAccountRef: (value: string | boolean | undefined) => string | undefined;
/**
 * Maps `WorkspaceCredentialsOptions` to the API payload shape, or `undefined` when no credentials were
 * requested (omitted entirely, rather than serialized as an empty object).
 */
export declare const mapWorkspaceCredentials: (options: WorkspaceCredentialsOptions | undefined) => WorkspaceCredentialsPayload | undefined;