/**
 * Every `x-secret` leaf path in {@link CliConfigSchema}, derived once at module load. A pattern
 * segment is either a literal key or `"*"` for a dynamic `Schema.Record` key (e.g. `db.vault.*`).
 */
export declare const secretPathPatterns: (readonly string[])[];
/** Whether `path` (root-relative segments into {@link CliConfigSchema}) names an `x-secret` leaf. */
export declare function isSecretPath(path: ReadonlyArray<string>): boolean;
//# sourceMappingURL=secret-paths.d.ts.map