export declare class SecurityScanner {
    private readonly sensitivePatterns;
    private customPatterns;
    private customRulesLoaded;
    /**
     * Load custom security rules from .gcomet-security.json in CWD.
     */
    loadCustomRules(cwd?: string): void;
    private getAllPatterns;
    scanForSensitiveData(diff: string): {
        match: string;
        label: string;
    }[];
    hasSensitiveData(diff: string): boolean;
    /**
     * Sanitize a diff by replacing detected secrets with redacted placeholders.
     * This ensures sensitive data is never sent to the AI API.
     */
    sanitizeDiff(diff: string): string;
}
export declare const securityScanner: SecurityScanner;
//# sourceMappingURL=index.d.ts.map