import host_env_security_policy_default from "./host-env-security-policy.js";
//#region src/infra/host-env-security.ts
const policy = host_env_security_policy_default;
const blockedKeys = new Set((policy.blockedEverywhereKeys ?? []).map((k) => k.toUpperCase()));
const blockedPrefixes = (policy.blockedPrefixes ?? []).map((p) => p.toUpperCase());
function isDangerousHostEnvVarName(rawKey) {
	const key = rawKey.trim().toUpperCase();
	if (!key) return false;
	if (blockedKeys.has(key)) return true;
	return blockedPrefixes.some((prefix) => key.startsWith(prefix));
}
//#endregion
export { isDangerousHostEnvVarName };

//# sourceMappingURL=host-env-security.js.map