/** Remove Course control-plane coordinates before any model/runtime child is created. */
export declare function clearAgentServiceControlEnv(env?: NodeJS.ProcessEnv): void;
/** Copy an environment for a runtime child without leaking Agent Service control values. */
export declare function runtimeChildEnv(env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
/**
 * Validate the short-lived model environment delivered by session.activate.
 * Only model adapter coordinates are accepted; Course/Agent Service control credentials
 * and supervisor settings can never be reintroduced through the wire payload.
 */
export declare function activationRuntimeEnv(value: unknown): Record<string, string>;
/** Run model processes as the Template's untrusted runtime UID when configured. */
export declare function runtimeChildIdentity(env?: NodeJS.ProcessEnv): {
    uid?: number;
    gid?: number;
};
/**
 * Build the fixed control-to-runtime privilege boundary used by managed sandboxes.
 *
 * The legacy image boundary may grant botlearn-control one fixed sudoers command.
 * Platforms that inherit no_new_privs cannot use sudo, so their root supervisor daemon
 * invokes the same immutable launcher directly; the launcher clears supplementary groups
 * and performs the one-way uid/gid drop. BYOA retains direct-spawn behavior.
 */
export declare function runtimeChildLaunch(binary: string, args: string[], env?: NodeJS.ProcessEnv, options?: {
    currentUid?: number;
}): {
    binary: string;
    args: string[];
    identity: {
        uid?: number;
        gid?: number;
    };
};