DEFAULT_INHERITED_ENVIRONMENT

Shared event names and public type aliases. See the guide.

zett_agent.sandbox.policy.DEFAULT_INHERITED_ENVIRONMENT: tuple[str, ...] = ('PATH', 'HOME', 'USER', 'LOGNAME', 'SHELL', 'LANG', 'LC_ALL', 'LC_CTYPE', 'LC_MESSAGES', 'TERM', 'TZ', 'TMPDIR', 'COLORTERM', 'NO_COLOR', 'SYSTEMROOT', 'SYSTEMDRIVE', 'WINDIR', 'COMSPEC', 'PATHEXT', 'TEMP', 'TMP', 'USERPROFILE', 'APPDATA', 'LOCALAPPDATA', 'PROGRAMFILES', 'PROGRAMDATA')

Environment variables a sandboxed process receives from the host when the policy does not say otherwise. Everything else, which is where API keys and tokens usually live, is withheld; a caller adds what a command needs through the env argument of a run. The Windows names are matched without regard to case.