/**
 * System and reserved environment variables that cannot be forwarded to the
 * container. Forwarding these could shadow critical system behavior or conflict
 * with server/sandbox internals.
 */
export declare const RESERVED_ENV_VARS: Set<string>;
/**
 * Validate that none of the requested env vars are in the reserved list.
 * Throws an error with a friendly message if any are found.
 */
export declare function validateNoReservedVars(requestedVars: string[]): void;
/**
 * Read and filter the project's .env file to only include the requested
 * variables. Reads the file directly (via dotenv's `parse`) rather than relying
 * on `process.env`, so values are sourced from the project's .env regardless of
 * the ambient environment.
 *
 * Throws if the .env file doesn't exist or if any requested variable is missing.
 * Returns an object of { varName: value } pairs.
 */
export declare function readAndFilterEnvVars(projectRoot: string, requestedVars: string[]): {
    [key: string]: string;
};
//# sourceMappingURL=env-vars.d.ts.map