/**
 * PII sanitizer — removes sensitive data from training content.
 *
 * Strips or replaces:
 * - API keys and tokens (Bearer, sk-*, ghp_*, etc.)
 * - Email addresses
 * - Absolute file paths containing usernames
 * - IP addresses (v4)
 * - URLs with auth tokens
 * - Environment variable values that look like secrets
 *
 * Zero external dependencies.
 */
export interface SanitizeResult {
    text: string;
    replacements: number;
    types: string[];
}
export interface SanitizeOptions {
    /** Replace paths containing home dir (default: true) */
    sanitizePaths?: boolean;
    /** Replace email addresses (default: true) */
    sanitizeEmails?: boolean;
    /** Replace API keys/tokens (default: true) */
    sanitizeKeys?: boolean;
    /** Replace IP addresses (default: true) */
    sanitizeIPs?: boolean;
}
export declare function sanitizeText(text: string, options?: SanitizeOptions): SanitizeResult;
/**
 * Sanitize a full JSONL messages array in place.
 */
export declare function sanitizeMessages(messages: Array<{
    role: string;
    content: unknown;
}>): {
    messages: typeof messages;
    totalReplacements: number;
};
