import { EnvValueReference, type Environment } from '@openai/agents-core/sandbox';
export declare function registerWorkerEnvVarContext(context: () => readonly string[] | undefined): void;
/**
 * Returns the value of an allowlisted Worker environment variable, the empty
 * string if it is unset or empty, or `undefined` if the allowlist does not cover it.
 *
 * @internal
 */
export declare function readWorkerEnvVar(name: string, resolvable: readonly string[]): string | undefined;
export declare function bindWorkerEnvVarReferences(environment: Record<string, Environment>, names: readonly string[]): void;
/**
 * Returns a Manifest environment value that names a Worker environment variable
 * instead of holding a credential. Only the variable name crosses into the
 * Activity arguments that every sandbox operation records in Workflow history;
 * the Worker reads the value from its own environment when the sandbox backend
 * materializes the environment.
 *
 * The name must be in the plugin's `resolvableWorkerEnvVars` allowlist — a
 * sandbox environment value has no way to say "leave this one out", so any other
 * name fails the Activity non-retryably with a `WorkerEnvValueError`, naming the
 * variable. An allowlisted variable that is unset or empty reads as the empty
 * string.
 *
 * ```ts
 * new Manifest({ environment: { DB_PASSWORD: workerEnvValue('WORKER_DB_PASSWORD') } })
 * ```
 */
export declare function workerEnvValue(name: string): EnvValueReference;