/**
 * Shared environment-resolution helper. Replaces the three near-duplicate
 * implementations that grew up across `recipe/tasks/shared.ts:resolveTenant`,
 * `deploy/tasks/shared.ts:getDeployContext`, and the hand-copied
 * `resolveAuthoringEnvironment` blocks in `deploy/tasks/site.ts` and
 * `deploy/tasks/site-bind.ts` — all doing the same
 * readRoot → defaultEnvProfile → environment-or-throw dance with slightly
 * different error messages and return shapes.
 *
 * Domain-specific wrappers (recipe `resolveTenant`, deploy
 * `getDeployContext`) compose this and add their own decoration
 * (auth client, deploy token lookup, etc.).
 */
import type { EnvironmentConfiguration, RootConfiguration } from "../config/types.js";
export interface ResolvedEnvironment {
    envName: string;
    environment: EnvironmentConfiguration;
    root: RootConfiguration;
    /** Tenant API client timeout in ms, derived from
     *  `settings.apiClientTimeoutInMinutes`. `undefined` when unset/invalid. */
    timeoutMs: number | undefined;
}
export interface ResolveEnvironmentOptions {
    config?: string;
    environmentName?: string;
    /**
     * Skip the workspace-policy gate (`enforceEnvironmentPolicy`). Used by
     * the paths that run *before* an environment is enrolled — `scai mcp
     * serve` startup (which enrolls the bound env immediately after) and
     * the `setup` / `policy` commands. Everything that touches tenant data
     * leaves this unset, so the gate is on by default.
     */
    skipPolicy?: boolean;
}
export declare const resolveEnvironment: (options: ResolveEnvironmentOptions) => ResolvedEnvironment;