/**
 * Security patterns and constants for BashTool command validation.
 *
 * Contains:
 * - BLOCKED_PATTERNS: Regex patterns for always-blocked commands
 * - BLOCKED_CONTROL_CHARS: Control characters that are never allowed
 * - ANSI_ESCAPE_PATTERN: Terminal manipulation sequences
 * - ALLOWED_COMMANDS: Allowlist for strict mode (reserved)
 * - BLOCKED_COMMANDS: Commands blocked even in non-strict mode
 * - SAFE_ENV_VARS: Allowlist of environment variables for child processes
 * - BLOCKED_PATHS: Sensitive paths that should never be accessed
 */
/**
 * Dangerous command patterns that are always blocked
 */
export declare const BLOCKED_PATTERNS: RegExp[];
/**
 * Control characters that are never allowed in commands
 * These could be used to manipulate terminal output or bypass validation
 */
export declare const BLOCKED_CONTROL_CHARS: RegExp;
/**
 * ANSI escape sequences that could manipulate terminal display
 */
export declare const ANSI_ESCAPE_PATTERN: RegExp;
/**
 * Allowlist of safe base commands
 * Only commands starting with these are allowed in strict mode
 * Reserved for future strict mode implementation
 */
export declare const _ALLOWED_COMMANDS: Set<string>;
/**
 * Commands that should be completely blocked even in non-strict mode
 */
export declare const BLOCKED_COMMANDS: Set<string>;
/**
 * Whitelist of safe environment variables to pass to child processes
 * All other env vars (especially secrets) are filtered out
 */
export declare const SAFE_ENV_VARS: Set<string>;
/**
 * Paths that should never be accessed
 */
export declare const BLOCKED_PATHS: string[];
