/**
 * Utilities for masking sensitive data across outputs
 */
/**
 * Returns true when global masking is enabled via environment variable.
 * Supported flags: MCP_HIDE_SENSITIVE, HIDE_SENSITIVE_DATA, MASK_SENSITIVE_DATA
 */
export declare function isSensitiveMaskEnabled(): boolean;
/**
 * Returns the mask string to use. Can be overridden via SENSITIVE_MASK env var.
 */
export declare function getMaskString(): string;
/**
 * Key patterns that imply the value is sensitive and should be fully masked.
 */
export declare const sensitiveKeyRegexes: RegExp[];
/**
 * Value patterns for secret-like strings (used for plain text masking where keys are unknown)
 */
export declare const sensitiveValueRegexes: RegExp[];
/**
 * Mask sensitive values in a plain text blob (YAML/JSON or free text)
 * - Masks RHS of key-value pairs for common sensitive keys
 * - Replaces secret-like tokens with mask
 */
export declare function maskTextForSensitiveValues(text: string): string;
/**
 * Recursively mask values in an object based on key names and string values.
 */
export declare function maskObjectDeep<T = any>(input: T): T;
//# sourceMappingURL=SensitiveData.d.ts.map