/**
 * Shared redaction helpers for text that may be exported or logged.
 */
/** Remove terminal control sequences from untrusted text before storage or display. */
export declare function sanitizeForTerminal(text: string): string;
/**
 * Scrub secrets from `text`. Two passes: format-based patterns (above), then a
 * value-aware pass that masks any `knownValues` verbatim — a credential we
 * already hold in hand leaks regardless of its format, so an exact-value match
 * catches tokens the regexes don't recognize.
 */
export declare function redactSecrets(text: string, knownValues?: readonly string[]): string;
/**
 * Secret values already present in the environment (e.g. an injected secrets
 * bundle), selected by secret-shaped var NAME. These are the "known" values fed
 * to {@link redactSecrets} so an exported transcript can't leak a live
 * credential verbatim even when its format matches no pattern.
 */
export declare function knownSecretValuesFromEnv(env?: NodeJS.ProcessEnv): string[];
