/**
 * Conservative secret-shaped pattern detection for phase journal free text.
 * When no dedicated redaction pipeline is configured, we **reject** writes that
 * look like pasted credentials (stable **`phase-note-secret-rejected`**).
 */
export declare const PHASE_NOTE_SECRET_REJECTION_CODE: "phase-note-secret-rejected";
export type PhaseNoteSecretGuardResult = {
    ok: true;
} | {
    ok: false;
    code: typeof PHASE_NOTE_SECRET_REJECTION_CODE;
    message: string;
};
/**
 * Reject when `text` matches high-confidence secret-shaped patterns.
 * @param fieldLabel Human-facing field name for errors (e.g. `summary`, `ref value`).
 */
export declare function rejectIfPhaseNoteTextContainsSecret(text: string, fieldLabel: string): PhaseNoteSecretGuardResult;
export declare function guardPhaseNoteOptionalText(value: string | null | undefined, fieldLabel: string): PhaseNoteSecretGuardResult;
/**
 * Validate user-supplied strings on `convert-phase-note-to-task` before task creation.
 */
export declare function guardPhaseNoteConvertTaskPayload(args: Record<string, unknown>, resolved: {
    title: string;
    summary: string;
    description: string | undefined;
}): PhaseNoteSecretGuardResult;
