/** * Redaction of query values for the log sink. SQL text is left to its * producer: Cube generates it with placeholders, and cubesql attaches a * redacted twin (`redactedQuery`, `redactedError`) beside a client statement, * which the sink swaps in. Literals a data model inlines on purpose (a security * context value, a date range) stay. */ import type { LoggerFn, LoggerFnParams } from './logger'; export declare const REDACTED = "redacted"; /** * A copy of log event params with query values redacted: `values` of a filter * leaf, statement parameters (`values`, `params`, `query_values`) next to a * `query` / `sql` or a `queryKeyMd5`, the params of `[sql, params, ...]` * tuples anywhere, the rows of an inline table, and `query` / `error` replaced * by the redacted twin cubesql attached. The input is never mutated. */ export declare function redactLogParams(params: T): T; /** * Wraps the log sink so every event it writes has its query values redacted. * Wrap the sink itself, not the wrappers around it: the agent collector and * telemetry forward the original event, and must keep doing so. */ export declare function withLogRedaction(logger: LoggerFn): LoggerFn; //# sourceMappingURL=log-redaction.d.ts.map