import { z } from 'zod';
export declare const CustomSecretSchema: z.ZodObject<{
    type: z.ZodEnum<["pattern", "literal"]>;
    value: z.ZodString;
}, "strip", z.ZodTypeAny, {
    value: string;
    type: "pattern" | "literal";
}, {
    value: string;
    type: "pattern" | "literal";
}>;
export type CustomSecret = z.infer<typeof CustomSecretSchema>;
export declare const SecretsFileSchema: z.ZodObject<{
    secrets: z.ZodDefault<z.ZodArray<z.ZodObject<{
        type: z.ZodEnum<["pattern", "literal"]>;
        value: z.ZodString;
    }, "strip", z.ZodTypeAny, {
        value: string;
        type: "pattern" | "literal";
    }, {
        value: string;
        type: "pattern" | "literal";
    }>, "many">>;
}, "strip", z.ZodTypeAny, {
    secrets: {
        value: string;
        type: "pattern" | "literal";
    }[];
}, {
    secrets?: {
        value: string;
        type: "pattern" | "literal";
    }[] | undefined;
}>;
export type SecretsFile = z.infer<typeof SecretsFileSchema>;
/**
 * Load user-defined custom secrets from both shared config (YAML) and
 * local secrets file (`.totem/secrets.json`, gitignored).
 *
 * 1. Reads the `secrets` array from the first matching YAML config in cwd.
 * 2. Reads `.totem/secrets.json` if it exists.
 * 3. Merges both arrays (shared first, then local).
 * 4. Validates each entry; skips invalid entries with a warning.
 */
export declare function loadCustomSecrets(cwd: string, totemDir?: string, onWarn?: (message: string) => void): CustomSecret[];
//# sourceMappingURL=secrets.d.ts.map