/**
 * build-external-worker-child-env — explicit allow-list for the ADR-0054
 * external-tool dispatch worker fork (spec 01 / DD8).
 *
 * Replaces `{ ...process.env }` on the external fork so admitted tools do not
 * inherit arbitrary parent secrets. Bundled live-run forks (subprocess-transport)
 * are out of scope — they are TCB and still spread the parent env.
 */
/** Env var listing extra parent vars to forward (comma/whitespace-separated). */
export declare const TOOL_ENV_PASSTHROUGH_ENV = "OPENSIP_CLI_TOOL_ENV_PASSTHROUGH";
/** Default pass-through set for external-tool worker children (OQ2). */
export declare const EXTERNAL_WORKER_CHILD_ENV_ALLOWLIST: readonly string[];
/**
 * Build the child env for an external-tool dispatch worker fork.
 *
 * Forwards only the documented allow-list plus `OPENSIP_CLI_TOOL_ENV_PASSTHROUGH`
 * keys from the parent. Host-set worker markers (`IN_TOOL_WORKER_ENV`,
 * `OPENSIP_RUN_ID`, `TRACEPARENT`) are never read from the parent.
 */
export declare function buildExternalWorkerChildEnv(args?: {
    readonly parentEnv?: NodeJS.ProcessEnv;
    readonly runId?: string;
    readonly traceparent?: string;
    readonly extraAllowlist?: readonly string[];
    readonly includePassthrough?: boolean;
}): NodeJS.ProcessEnv;
//# sourceMappingURL=build-external-worker-child-env.d.ts.map