/**
 * One-way secret redaction for Brain persistence (scrub-on-store).
 *
 * The PrivacyFirewall's SemanticScrubber was built for outbound traffic (mask, send,
 * unmask on the way back). Storage has no way back: a secret written into entries.ndjson
 * sits in plaintext under ~/.lemma-cache forever, so the tokenMap is deliberately
 * discarded here — masking for storage is redaction, not reversible masking.
 *
 * Re-scrubbing already-scrubbed text is a no-op: mask() leaves `[NAME_n]` spans alone,
 * so bundles imported from another scrubbed Brain don't accumulate nested tokens.
 */
export declare function scrubSecretsForStorage(text: string): {
    text: string;
    redactions: number;
};
//# sourceMappingURL=scrubForStorage.d.ts.map