/**
 * Sensitive Key Detection Utilities
 *
 * Shared patterns for detecting secret/sensitive environment variable keys.
 * Used by migration (secrets separation) and UI (masking).
 */
/**
 * Patterns that match sensitive keys (API keys, tokens, passwords).
 * More specific than substring matching to avoid false positives.
 */
export declare const SENSITIVE_KEY_PATTERNS: RegExp[];
/**
 * Check if a key name contains a secret/sensitive value.
 * Used during migration to separate secrets from config.
 *
 * @param key - Environment variable key name
 * @returns true if the key likely contains sensitive data
 */
export declare function isSensitiveKey(key: string): boolean;
/**
 * Mask a sensitive value for display.
 * Shows first 4 and last 4 characters, replaces middle with asterisks.
 *
 * @param value - The sensitive value to mask
 * @returns Masked value like "sk-a****xyz1"
 */
export declare function maskSensitiveValue(value: string): string;
/**
 * Mask all sensitive keys in an env object.
 *
 * @param env - Environment variables object
 * @returns New object with sensitive values masked
 */
export declare function maskSensitiveEnv(env: Record<string, string>): Record<string, string>;
//# sourceMappingURL=sensitive-keys.d.ts.map