/**
 * Secret-pattern filter for memory writes (plan v6 S1-T7).
 *
 * The one real leak path a chat-reachable tool has is memory: a secret saved
 * as a "decision" resurfaces later through mama_search/recall. This filter
 * refuses the write at the choke point. Minimal gitleaks-style set - shapes,
 * not entropy heuristics - so false positives stay near zero.
 */
export interface SecretScanResult {
    clean: boolean;
    matches: string[];
}
/** Scan text for secret-shaped material. */
export declare function scanForSecrets(text: string): SecretScanResult;
/**
 * Scan every string reachable in a memory-write input (nested objects and
 * arrays included, depth-capped): open_files arrays, scope ids, and source
 * objects are persisted too and must not smuggle secrets past a top-level
 * scan (review m1).
 */
export declare function scanMemoryWriteInput(input: Record<string, unknown>): SecretScanResult;
//# sourceMappingURL=secret-filter.d.ts.map