export declare const MANAGED_BACKGROUND_WORKER_ENV = "MONO_AGENT_MANAGED_WORKER";
/**
 * Non-secret host variables that a managed worker may inherit durably.
 *
 * Provider credentials and MONO_AGENT_* config overrides deliberately do not
 * belong here: secrets come from the selected dotenv file and product config
 * comes from the committed JSON. Keeping this list shared between first-run
 * validation, launchd materialisation, and worker proof prevents the three
 * surfaces from quietly validating different environments.
 */
export declare const BACKGROUND_OPERATIONAL_ENV_NAMES: readonly ["APPDATA", "COLORTERM", "COMSPEC", "ComSpec", "FORCE_COLOR", "HOME", "HOMEDRIVE", "HOMEPATH", "LANG", "LANGUAGE", "LC_ALL", "LC_CTYPE", "LOCALAPPDATA", "LOGNAME", "NO_COLOR", "PATH", "PATHEXT", "PROGRAMDATA", "SHELL", "SYSTEMROOT", "SystemRoot", "TEMP", "TERM", "TMP", "TMPDIR", "USER", "USERNAME", "USERPROFILE"];
export declare function isBackgroundOperationalEnvName(name: string): boolean;
/** Select a deterministic, non-secret environment suitable for a plist. */
export declare function selectBackgroundOperationalEnvironment(env: Readonly<Record<string, string | undefined>>): Readonly<Record<string, string>>;
/** Opaque proof only; no environment value is written to trace metadata. */
export declare function fingerprintBackgroundOperationalEnvironment(env: Readonly<Record<string, string | undefined>>): string;
//# sourceMappingURL=background-environment.d.ts.map