/**
 * Redaction for `debug: true` session logging.
 *
 * The debug dump is routinely pasted into issues and chat threads, so it must
 * never carry a usable credential. The generated fetcher redacts headers, query
 * params, and URLs, but nothing redacts the request body — which is where
 * vendor API keys and RTC tokens live.
 *
 * Uses the same `[REDACTED]` marker as `core/fetcher/Fetcher.ts` for
 * consistency, but is deliberately independent of it: that file is generated by
 * Fern and its helpers are module-local.
 */
/** Marker substituted for a redacted value. Matches the generated fetcher. */
export declare const REDACTED = "[REDACTED]";
/**
 * Deep-copies `value`, replacing credential fields with {@link REDACTED}.
 *
 * Empty strings are left visible on purpose: `""` is the signature of an unset
 * environment variable, and hiding it behind `[REDACTED]` would disguise the
 * exact misconfiguration the debug output exists to surface.
 *
 * Never mutates the input — the request that goes on the wire is untouched.
 */
export declare function redactSecrets(value: unknown): unknown;
/**
 * Redacts request headers for debug logging.
 *
 * Non-authorization headers are kept. The authorization credential is removed,
 * while its scheme name stays visible so the active auth mode can be diagnosed.
 */
export declare function redactHeadersForDebug(headers: Record<string, string>): Record<string, string>;