/**
 * Credential redaction — shared implementation kept in three adapter subfolders.
 *
 * Files:
 *   src/adapters/claude-code/redaction.ts
 *   src/adapters/codex/redaction.ts
 *   src/adapters/pi/redaction.ts
 *
 * These three files are byte-identical by design. A fix in one MUST be applied to all three.
 * src/adapters/boundary.test.ts asserts byte equality and will fail if they drift.
 *
 * Why not a single shared module: src/adapters/contract.ts is types-only (no behaviour). A
 * platform service would be imported as behaviour, and T-ROO-7 requires adapter-to-platform
 * cross-module imports to go through contract.js — which can only export types, not functions.
 */
/** Stable replacement used for credentials that must not cross an adapter boundary. */
export declare const REDACTED_VALUE = "[REDACTED]";
/**
 * Redact credentials in JSON-like tool inputs without changing the caller's value.
 * Adapter-specific parsing stays in each adapter; this function only handles secret values.
 */
export declare function redactSensitiveStructure(value: unknown): unknown;
/** Redact recognizable credentials from shell commands, headers, and unstructured arguments. */
export declare function redactSensitiveText(text: string): string;
/** Redact a source-recorded argument string, preserving valid JSON when it is JSON. */
export declare function redactSensitiveArgumentsText(text: string): string;