/**
 * Pure text scrubber for dataset export (see Dataset-uploader.md §2.2).
 *
 * Replaces secret-looking patterns with `[REDACTED:<kind>]` markers:
 *   - api_key     — Anthropic / OpenRouter / OpenAI / GitHub / Slack / AWS keys
 *   - jwt         — bare JWTs (eyJ... payload ... signature)
 *   - bearer      — "Bearer <token>" and Authorization header values
 *   - home_path   — /Users/<name>/ → /home/
 *   - secret_value — opaque values passed in by the caller (secret-store
 *                    values, .env values). The scrubber NEVER reads any
 *                    store itself; callers decide what to pass.
 *
 * Pure function — no I/O, no global state. Safe to run per-sample.
 */
export interface ScrubRedaction {
    kind: string;
    count: number;
}
export interface ScrubResult {
    text: string;
    redactions: ScrubRedaction[];
}
/**
 * Scrub `text` for secrets.
 *
 * @param text        Raw text (sample JSON, observation, args, ...)
 * @param extraValues Optional opaque secret values to redact literally
 *                    (e.g. secret-store values, .env values). The scrubber
 *                    never reads any store itself.
 * @returns Redacted text plus per-kind redaction counts (only kinds with
 *          count > 0, in stable order).
 */
export declare function scrub(text: string, extraValues?: string[]): ScrubResult;
//# sourceMappingURL=scrubber.d.ts.map