import type { SecretTarget } from './config.js';
export interface SecretDeployResult {
    success: boolean;
    secretId: string;
    name: string;
    message: string;
    version?: number;
    durationMs?: number;
}
/**
 * Decide whether deploySecret can short-circuit. Trusting lastVersion
 * alone is unsafe: tmpfs output paths get wiped on host reboot while
 * lastVersion persists in config.json, so skipping leaves the consumer
 * with no file. Check the output exists too (when there is one).
 */
export declare function shouldSkipDeploy(target: Pick<SecretTarget, 'lastVersion' | 'format' | 'output'>, remoteVersion: number, fileExists?: (path: string) => boolean): boolean;
/**
 * Deploy a single secret target
 */
export declare function deploySecret(target: SecretTarget, force?: boolean): Promise<SecretDeployResult>;
/**
 * Deploy all configured secret targets
 */
export declare function deployAllSecrets(force?: boolean): Promise<SecretDeployResult[]>;
/**
 * Find secret target by ID or alias
 */
export declare function findSecretTarget(secretIdOrAlias: string): SecretTarget | undefined;
//# sourceMappingURL=secret-deployer.d.ts.map