/**
 * `clustly secrets set|unset|list` — command glue (GUIDELINES §2): strict args → the shared
 * post-deploy target ladder → the hosting/secrets domain. The VALUE never transits argv
 * (GUIDELINES §3): a TTY prompts hidden; piped stdin reads a line (CI:
 * `echo "$VAL" | clustly secrets set KEY`).
 */
declare const ACTIONS: readonly ["set", "unset", "list"];
type Action = (typeof ACTIONS)[number];
export type SecretsArgs = {
    ok: true;
    action: Action;
    name?: string;
    explicitPath?: string;
} | {
    ok: false;
    error: string;
};
/**
 * `clustly secrets set|unset|list NAME [path]`. Strict: an unknown flag is an error, and a
 * second positional is accepted ONLY when it is a directory — `clustly secrets set KEY value`
 * used to take the value as a workspace path, store nothing, and leave the value in shell
 * history (audit 2026-09-16). The value comes on stdin, never argv (GUIDELINES §3).
 */
export declare function parseSecretsArgs(argv: readonly string[], isDirectory: (p: string) => boolean): SecretsArgs;
export declare function secretsCommand(usage: string): Promise<void>;
export {};