export declare const ENV_DENYLIST: Set<string>;
export declare const SENSITIVE_ENV_RE: RegExp;
export declare const MAX_OUTPUT_CHARS = 10000;
export declare const DEFAULT_TIMEOUT_MS = 30000;
export declare function buildSafeEnv(extraEnv?: Record<string, string>): Record<string, string>;
export interface SpawnSafeOpts {
    cmd: string;
    args: string[];
    cwd?: string;
    timeout?: number;
    env?: Record<string, string>;
}
export interface SpawnResult {
    stdout: string;
    stderr: string;
    exit_code: number;
    duration_ms: number;
    truncated: boolean;
}
export declare function truncateOutput(text: string): {
    text: string;
    truncated: boolean;
};
export declare function spawnSafe(opts: SpawnSafeOpts): Promise<SpawnResult>;
/** Check if a command is available on the system */
export declare function detectCommand(cmd: string): Promise<boolean>;
/** Try multiple command candidates, return first that works */
export declare function detectFirstAvailable(candidates: string[]): Promise<string | null>;
//# sourceMappingURL=sandbox.d.ts.map