/**
 * Masks a server error that may echo the failing statement. Every
 * single-quoted literal is redacted first because an echoed
 * `IDENTIFIED WITH sha256_password BY '<password>'` matches no credential
 * regex; masking runs on the full string and truncation LAST (a truncated
 * credential loses the anchors the mask needs).
 */
export declare function maskSqlError(err: unknown): string;