/** Thrown instead of degrading to an empty (fail-open) ledger. */
export declare class MojoQuarantineUnavailableError extends Error {
    readonly cause?: unknown | undefined;
    constructor(message: string, cause?: unknown | undefined);
}
/**
 * Fold unprovable launcher-env key names into this session's durable record.
 *
 * Monotonic union — callers pass whatever the session was handed, and a later
 * clean payload never retracts an earlier dangerous one.
 *
 * THROWS on any read/write failure: the caller must not proceed believing the
 * risk was recorded.
 */
export declare function recordQuarantinedLauncherEnvKeys(sessionId: string, keys: readonly string[], dataDir?: string): void;
/**
 * Durable key names for one session (empty only when nothing was ever recorded).
 *
 * THROWS when the ledger cannot be read — callers on the isolation path must
 * fail closed rather than interpret the error as "clean".
 */
export declare function quarantinedLauncherEnvKeys(sessionId: string, dataDir?: string): string[];
/**
 * Session ids with a durable record, INCLUDING sessions whose row is gone.
 *
 * The closed/residual path needs this: an explicit `/close` deletes the row, so
 * the inventory would otherwise lose every trace of an unproven hooked child.
 */
export declare function quarantinedSessionIds(dataDir?: string): string[];
//# sourceMappingURL=mojo-launcher-env-quarantine.d.ts.map