/**
 * Strip dangerous environment variables from a process.env-like object.
 * Returns a new object with the dangerous vars removed.
 * Never mutates the input.
 */
export declare function sanitizeEnv(env: Record<string, string | undefined>): Record<string, string>;
/**
 * Returns true if the env contains any dangerous vars.
 * Used for detection/logging.
 */
export declare function hasDangerousEnvVars(env: Record<string, string | undefined>): boolean;
//# sourceMappingURL=env-sanitizer.d.ts.map