/**
 * Environment handed to commands run by run_workspace_command.
 *
 * The child used to inherit the whole of process.env, so `env`, `printenv` or any script the
 * command ran could read every token and API key the MCP host had in its environment (cloud
 * credentials, GITHUB_TOKEN, the Lemma license key…). Output scrubbing masks the common shapes
 * after the fact; this keeps the secrets from reaching the child at all.
 *
 * Deny-by-default: only variables a build/test toolchain needs to find itself, plus whatever the
 * project lists in lemma.config.json under `mcp.commandEnv.allow`. `mcp.commandEnv.mode: "inherit"`
 * restores the old behavior for projects that need it.
 */
export interface CommandEnvPolicy {
    mode: "filtered" | "inherit";
    /** Extra variable names the project allows through. */
    allow: string[];
}
export interface CommandEnvResult {
    env: NodeJS.ProcessEnv;
    /** How many inherited variables were withheld (names are deliberately not reported). */
    withheld: number;
}
/** Reads `mcp.commandEnv` from lemma.config.json in `dir`; any problem falls back to the safe default. */
export declare function loadCommandEnvPolicy(dir?: string): CommandEnvPolicy;
export declare function buildCommandEnv(base?: NodeJS.ProcessEnv, policy?: CommandEnvPolicy): CommandEnvResult;
//# sourceMappingURL=CommandEnv.d.ts.map