import type { Config } from "./config.js";
/** Every configured environment variable that may hold a relay-owned provider credential. */
export declare function laneCredentialEnvNames(config: Config): string[];
/**
 * Build a lane's child environment.
 *
 * A spawned agent receives the ordinary launcher environment EXCEPT relay-owned provider
 * credentials. An operator may deliberately reintroduce one by naming that variable in the rung's
 * own env block with a non-null value. That exception is explicit configuration, not inheritance.
 *
 * Windows environment names are case-insensitive, so the scrub and explicit-override checks are
 * case-insensitive there too.
 */
export declare function buildLaneEnv(base: NodeJS.ProcessEnv, deltas: Record<string, string | null> | undefined, config: Config, platform?: NodeJS.Platform): NodeJS.ProcessEnv;