import { TSESTree } from '@typescript-eslint/utils';
/**
 * Whether a name looks like it holds a secret. A name is sensitive when it
 * contains a sensitive pattern (or a caller-supplied `extra` one) and none of
 * the `exclusions`. Exclusions win, so under the default set `tokenUrl` and
 * `secretId` are not sensitive even though they contain `token`/`secret`.
 *
 * - Credential-field masking uses the default exclusions (a field named
 *   `tokenUrl` is a URL, not a secret to mask).
 * - Pass `exclusions: []` to match on the raw patterns alone, e.g. when a
 *   second gate (like a value heuristic) already guards against false positives.
 * - Pass `extra` to add caller-specific patterns without widening the shared set.
 */
export declare function isSensitiveName(name: string, options?: {
    extra?: string[];
    exclusions?: string[];
}): boolean;
/** Whether the credential field element sets `typeOptions: { password: true }`. */
export declare function hasPasswordTypeOption(element: TSESTree.ObjectExpression): boolean;
//# sourceMappingURL=credential-fields.d.ts.map