/**
 * Error sanitization layer.
 *
 * Strips sensitive credentials from error messages before they reach
 * the LLM context. All PVE API errors should go through sanitizeMessage()
 * to produce safe error strings.
 */
/**
 * Register a string that should be redacted from all error messages.
 * Called at startup with token ID and secret before any API calls.
 */
export declare function registerSensitivePattern(pattern: string): void;
/**
 * Replace all registered sensitive patterns and common auth header
 * patterns with [REDACTED].
 */
export declare function sanitizeMessage(message: string): string;
/**
 * Custom error class for PVE API errors with optional HTTP status code.
 */
export declare class PveError extends Error {
    readonly statusCode?: number;
    constructor(message: string, statusCode?: number);
}