export type McpServerLayer = 'project' | 'user-global' | 'plugin' | 'cli';
export declare function isSecretPattern(varName: string): boolean;
export declare function isDangerousInherited(varName: string): boolean;
export interface SecretCheckResult {
    allowed: boolean;
    warning?: string;
}
export declare function checkSecretExpansion(varName: string, layer: McpServerLayer, serverName: string, allowSecretEnv?: readonly string[]): SecretCheckResult;
export declare function scrubDangerousEnv(base: Record<string, string>): string[];