export type SubcommandResult = {
    code: number;
    lines: string[];
};
export interface GcloudRunner {
    run(args: string[], opts?: {
        input?: string;
    }): Promise<{
        code: number;
        stdout: string;
        stderr: string;
    }>;
}
/** Default runner — wraps gcloud subprocess. */
export declare const defaultRunner: GcloudRunner;
/** Validate full GCP setup for publish-time secret fetch. */
export declare function check(args: string[], runner?: GcloudRunner): Promise<SubcommandResult>;
/** Fetch a secret's latest value and print to stdout. */
export declare function fetch(args: string[], runner?: GcloudRunner): Promise<SubcommandResult>;
/**
 * Fetch NPM_TOKEN and run `npm whoami --registry=https://registry.npmjs.org/`.
 * No publish — just confirms the token is valid + non-revoked.
 */
export declare function validateToken(args: string[], runner?: GcloudRunner): Promise<SubcommandResult>;
/** Top-level dispatcher for `harness secrets <subsub> ...`. */
export declare function secretsDispatch(args: string[], runner?: GcloudRunner): Promise<SubcommandResult>;
//# sourceMappingURL=secrets.d.ts.map