/**
 * Scrub secret patterns from a free-text string (e.g. shell output).
 * Returns the scrubbed text and how many redactions were applied.
 */
export declare function scrubSecrets(output: string): {
    readonly value: string;
    readonly redactions: number;
};
/**
 * Sanitize a tool's argument map for observability logging.
 * Returns a safe-to-persist record with:
 *   - sensitive keys redacted
 *   - oversized string values truncated
 *   - non-string values preserved as-is (they're JSON-safe)
 */
export declare function sanitizeArgValues(args: Record<string, unknown>): Record<string, unknown>;
//# sourceMappingURL=secret-scrub.d.ts.map