/**
 * Bound and redact operator/agent text before it crosses the OMX -> Herdr
 * boundary. OMX lifecycle context can contain prompts, source text, absolute
 * paths, and secrets; none of that should be shipped verbatim to Herdr's
 * display surfaces. Applied to the semantic `message` and to display-only
 * metadata tokens.
 */
export declare const MAX_MESSAGE_LEN = 120;
export declare const MAX_TOKEN_KEY_LEN = 32;
export declare const MAX_TOKEN_VALUE_LEN = 80;
export declare const MAX_TOKENS = 16;
/** Sanitize a semantic message: collapse whitespace, redact paths/secrets, cap length. */
export declare function sanitizeMessage(message: string | undefined, maxLen?: number): string | undefined;
/**
 * Sanitize display-only metadata tokens: cap key/value length and token count,
 * drop secret-like keys/values, redact absolute paths. Returns undefined when
 * nothing survives.
 */
export declare function sanitizeMetadata(metadata: Record<string, string> | undefined): Record<string, string> | undefined;
//# sourceMappingURL=sanitize.d.ts.map