/**
 * Masking secrets before they are written down or shown.
 *
 * A real session: an OpenRouter key was pasted while a prompt was asking for one, the paste went
 * to the composer instead, and the key became the first user message. That message is what a
 * session's title is taken from — so the key was written into the session file on disk and then
 * printed in the resume picker, in full, next to the word "latest".
 *
 * The paste bug is fixed, but a secret reaching a place it should not is never one bug. Anything
 * persisted or displayed goes through here, so the next route to the same outcome is closed too.
 */
/**
 * The text with any secret in it masked.
 *
 * A prefix is kept so somebody can tell which key they pasted — recognising it is the whole
 * reason to show anything, and six characters of an `sk-or-…` is not a credential.
 */
export declare function redactSecrets(text: string): string;
/** Whether masking would change anything — for deciding whether to warn. */
export declare function containsSecret(text: string): boolean;
//# sourceMappingURL=redact.d.ts.map