/**
 * v2.7.1 [CRITICAL FIX] — secret redaction.
 *
 * Defense-in-depth on top of stripping tokens at every known call site.
 * Even after audit-walking the codebase, the next contributor adding a
 * `log.debug(\`token=${tok}\`)` line will re-introduce the data-leak
 * class. This function scrubs every log line before it hits stderr.
 *
 * Patterns intentionally match the common shapes operators are likely
 * to interpolate into a log message:
 *   - `RELAY_AGENT_TOKEN=<value>` — env-form (the exact shape an external
 *     review surfaced in src/tools/identity.ts:150-153 pre-fix).
 *   - `Authorization: Bearer <value>` and `Authorization: <value>` —
 *     HTTP request/response headers.
 *   - `X-Agent-Token: <value>` — relay's per-agent header.
 *   - JSON-ish `"token": "<value>"` (any of: token, agent_token,
 *     recovery_token, secret, http_secret, webhook_secret,
 *     password) — surfaces config dumps, error contexts, etc.
 *
 * Replacement is `***` (the value only; the key + framing stay so the
 * log line remains diagnostic).
 *
 * Origin: an external security review.
 */
export declare function redactSecrets(line: string): string;
export declare const log: {
    debug: (...args: unknown[]) => void;
    info: (...args: unknown[]) => void;
    warn: (...args: unknown[]) => void;
    error: (...args: unknown[]) => void;
};
//# sourceMappingURL=logger.d.ts.map