/**
 * The variables that name WHICH Jinn instance a process belongs to: its home, its
 * binding, and the credentials of the gateway session that launched it. A process
 * pointed at a different instance must inherit none of them — read against another
 * home they route the work straight back to the instance they came from.
 */
export declare const JINN_INSTANCE_IDENTITY_ENV_KEYS: readonly ["JINN_HOME", "JINN_HOME_IDENTITY", "JINN_INSTANCE", "JINN_HOST", "JINN_PORT", "JINN_GATEWAY_URL", "JINN_GATEWAY_TOKEN", "JINN_SESSION_ID", "JINN_SESSION_CAPABILITY", "JINN_TAKE_PORT"];
/** Ports a live gateway owns: the default instance, and the demo instance beside it. */
export declare const PRODUCTION_GATEWAY_PORTS: readonly number[];
export interface JinnInstanceTarget {
    home: string;
    instance?: string;
    host?: string;
    port?: number;
    gatewayUrl?: string;
    token?: string;
}
/**
 * The environment for a child that belongs to `target`. Everything unrelated is
 * inherited; every instance-identity variable is dropped and then re-set from the
 * target alone, so nothing the parent instance owns reaches the child.
 */
export declare function buildSandboxChildEnv(target: JinnInstanceTarget, baseEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
/**
 * Point this process at `target` in place, before any module resolves paths from the
 * environment. Identity inherited from a DIFFERENT instance is dropped: a leaked
 * JINN_PORT from the enclosing gateway session otherwise outranks the target home's
 * own config.yaml, which is how a sandbox `jinn pair` reached the live gateway.
 *
 * A target that is already this process's own instance keeps its binding, so the
 * JINN_HOST/JINN_PORT a container publishes still describe the home they name.
 */
export declare function retargetInstanceEnv(target: Pick<JinnInstanceTarget, "home" | "instance">, env?: NodeJS.ProcessEnv): void;
/**
 * Refuse a target that would drive a live gateway. Sandboxes exist so that a wrong
 * guess costs a temp directory rather than the operator's instance, and the two
 * values that decide which one is being driven are the home and the port.
 */
export declare function assertNotProductionGateway(target: {
    home?: string;
    port?: number;
}): void;
//# sourceMappingURL=sandbox-env.d.ts.map