/**
 * Credential-key derivation for the manager E2E password lookup (GLU-1451 / GLU-1452).
 *
 * An `auth.json` fixture identifies its account by `username` only — the password
 * is resolved at runtime by a stable key derived from the name: from a CircleCI
 * env variable in CI and from Vault locally.
 *
 * The `E2E_PW_<SLUG>` convention MUST stay in sync with the publish side in
 * `devtools/e2e-okta-rotation/slug.ts` (which writes the CircleCI/Vault values).
 */
/**
 * Uppercase slug of an account name: non-alphanumeric runs collapse to a single
 * `_`, with leading/trailing separators trimmed. Keeps account names with spaces
 * and dashes valid as env-var/Vault-field keys.
 *
 * `Team Helios - E2E Test` -> `TEAM_HELIOS_E2E_TEST`
 */
export declare const slugifyUsername: (username: string) => string;
/** The environment-variable key for an account's password: `E2E_PW_<SLUG>`. */
export declare const deriveEnvKey: (username: string) => string;
/**
 * The Vault field key for an account's password. This is the **same** key as the
 * env variable (`E2E_PW_<SLUG>`): the publish side writes each account's password
 * to a Vault field named by `devtools/e2e-okta-rotation/slug.ts`'s `envKey()`
 * (`E2E_PW_<SLUG>`), so the resolver must read it back under that exact key. A
 * lowercased-slug field would never be found once Vault is seeded.
 */
export declare const deriveVaultField: (username: string) => string;