/**
 * Redacts common credential patterns from arbitrary text before it is rendered,
 * logged, or persisted (e.g. into history.jsonl / jobs.json).
 *
 * Coverage is best-effort: it targets the shapes that provider error bodies,
 * stack traces, and debug headers most commonly leak (Bearer tokens, `sk-...`
 * API keys, Authorization / x-api-key / proxy-authorization / set-cookie
 * headers, `key=value` assignments including URL query parameters, JSON secret
 * fields, and URL `userinfo:password@host`). Short values (<8 chars) are left
 * intact to avoid over-redacting ordinary words.
 */
export declare function redactSensitive(text: string): string;