/**
 * CLI argument parsing utilities
 */
export declare function getStringFlag(flags: Record<string, string | true>, key: string): string | null;
export declare function validateFormat(flags: Record<string, string | true>, supported?: string[]): string;
export declare function getOutputPath(flags: Record<string, string | true>): string | null;
export declare function parseArgs(args: string[]): {
    flags: Record<string, string | true>;
    positional: string[];
};
/**
 * Check if scan results should cause a non-zero exit based on --fail-on flag.
 * Default: "critical" — only exit 1 on critical findings.
 */
export declare function shouldFail(result: string, failOn: string): boolean;