/**
 * Re-read a freshly written artifact, run it through the same redactor
 * the model-facing output uses, and write it back atomically. This is a
 * defense-in-depth measure: live capture is unavoidable byte-by-byte, so
 * we redact post-hoc the moment the child closes, before any reader
 * (user, model, or `/output last`) gets a chance to see the raw bytes.
 *
 * Returns whether the artifact was rewritten. Any error is swallowed — a
 * raw artifact is still better than an inaccessible one, and the model
 * never receives the unredacted content (that path runs through
 * redactSecrets() too).
 */
/** Skip full-file redaction above this size (avoids multi‑hundred‑MB heap spikes). */
export declare const MAX_REDACT_IN_MEMORY_BYTES: number;
export declare const NO_MATCH_EXIT_COMMANDS: Set<string>;
export declare function finalPipelineStageName(command: string): string | undefined;