/** * Command validation for subprocess spawning. * * Validates that a command string from user config (oni.jsonc, ~/.oni/config.jsonc) * is safe to pass to child_process.spawn(). Prevents command injection via * malicious config files committed to shared repositories. * * BUG-0156, BUG-0160: Config-sourced commands are untrusted input. */ /** * Validate a command string before passing it to spawn(). * * Throws if the command is suspicious or dangerous. This is intentionally * strict — a blocked legitimate command can be allowlisted, but a passed * malicious command is a security breach. */ export declare function validateSpawnCommand(command: string, context: string): void; //# sourceMappingURL=validate-command.d.ts.map