/**
 * credentialRedactor.ts — Redacts secrets from tool outputs.
 *
 * Applied at the response serialization layer in index.ts so every tool
 * output is automatically sanitized without individual tool changes.
 */
export interface RedactOpts {
    /** Skip specific patterns (by label) */
    skipPatterns?: string[];
}
/**
 * Redact secrets from a string output.
 *
 * @returns The sanitized string with secrets replaced by [REDACTED:label]
 */
export declare function redactSecrets(output: string, opts?: RedactOpts): string;
/**
 * Redact secrets from a structured object (recursively processes string values).
 */
export declare function redactObject(obj: unknown): unknown;
/** Test helper — reset env secrets cache */
export declare function _resetEnvSecretsForTesting(): void;
