import type { CommandResult, GlobalOptions } from './types.js';
/** Placeholder printed in place of a redacted secret value. */
export declare const REDACTED = "********";
/** Whether a config key name looks like a secret (so its scalar value should be redacted). */
export declare function isSecretKey(key: string): boolean;
/**
 * Masks the password in a `scheme://user:pass@host` URL, leaving the rest of the
 * value verbatim. A credential embedded in an endpoint URL (e.g. `rpcUrl`) is not
 * caught by key-name matching, so it is scrubbed here regardless of the key.
 */
export declare function scrubUrlUserinfo(value: string | undefined): string | undefined;
/**
 * Returns a deep copy of `value` with secret scalar values replaced by
 * {@link REDACTED}, so routine introspection (`config get`/`list`/`effective`)
 * does not print RPC passwords or other secrets into terminal scrollback and CI
 * logs. A secret-named key redacts only a scalar value (an object under such a
 * key, e.g. a profile named `access-token`, is still traversed, not wholesale
 * masked). Passwords embedded in URL values are scrubbed regardless of key name.
 * When `keyName` is a secret name, a directly-passed scalar value is redacted
 * (used when a single leaf value is printed). Display-only: the stored config and
 * the value used to connect are untouched.
 */
export declare function redactSecrets(value: unknown, keyName?: string): unknown;
/**
 * Formats a CommandResult for console output.
 * In 'json' mode, the full result is serialized.
 * In 'text' mode, only the relevant payload is printed.
 * @param {CommandResult} result - The result to format.
 * @param {GlobalOptions} options - The global options to determine output format.
 * @returns {string} - The formatted output string.
 */
export declare function formatResult(result: CommandResult, options: GlobalOptions): string;
//# sourceMappingURL=output.d.ts.map