/**
 * Default allowlist of command NAMES the `exec` tool may run.
 *
 * Extracted from exec.ts for auditability. Only the command name is gated
 * (per-arg safety is the BLOCKED_ARG_PATTERNS denylist in exec.ts + the
 * per-call `confirm` permission). A prior version mapped each command to an
 * allowed-args array, but those arrays were never enforced (dead code) — a
 * plain Set is the honest shape.
 *
 * Extend/trim at runtime via `configureExecPolicy()` (wired from
 * `config.tools.exec.{allow,deny}` at boot). `allow` is trusted-config-only;
 * see the security note on ExecToolConfig.
 */
export declare const DEFAULT_ALLOWED_COMMANDS: ReadonlySet<string>;
//# sourceMappingURL=exec-allowlist.d.ts.map