import { LogMetadata, PiiRedactionOptions } from '../interfaces/logger.interface';
export declare class PiiRedactor {
    private options;
    /**
     * Whether a metadata key names a credential.
     *
     * @param key - The metadata key
     * @returns True when the value must be replaced wholesale
     * @private
     */
    private isSensitiveKey;
    /**
     * Constructor
     *
     * @param options - PII redaction configuration
     */
    constructor(options?: PiiRedactionOptions);
    /**
     * Redact PII from a log message
     *
     * @param message - Log message that may contain PII
     * @returns Redacted message
     */
    redactMessage(message: string): string;
    /**
     * Redact PII from log metadata
     *
     * @param metadata - Log metadata that may contain PII
     * @returns Redacted metadata
     */
    redactMetadata(metadata?: LogMetadata): LogMetadata | undefined;
    /**
     * Redact email addresses
     * @private
     */
    private redactEmails;
    /**
     * Redact IP addresses (keep first 3 octets)
     * @private
     */
    private redactIpAddresses;
    /**
     * Redact a single IP address
     * @private
     */
    private redactIpAddress;
    /**
     * Redact JWT tokens and bearer tokens
     * @private
     */
    private redactTokens;
    /**
     * Redact phone numbers
     * @private
     */
    private redactPhoneNumbers;
    /**
     * Redact names (firstName, lastName)
     * @private
     */
    private redactNames;
    /**
     * Redact passwords and password-related fields
     * @private
     */
    private redactPasswords;
    /**
     * Recursively redact an object
     * @private
     */
    private redactObject;
}
//# sourceMappingURL=pii-redactor.d.ts.map