/** Fallback mask when the real secret length is unknown (e.g. env-sourced keys). */
export declare const GENERIC_MASKED_SECRET = "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
/** Length-preserving mask for secrets returned to the web console. */
export declare function maskSecretLength(secret: string): string;
/** True when a PATCH body carries a masked sentinel instead of a new secret. */
export declare function isMaskedSecretPatchValue(value: string): boolean;