import { type EpAttributedReply } from "@cotal-ai/core";
import { CommandFailure, type RefusalCode } from "@cotal-ai/workspace";
/** Native boundary codes only. A code without a not-executed outcome is not proof of refusal. */
export declare function nativeEndpointRefusal(code: string | undefined): RefusalCode | undefined;
export declare class NativeReplyError extends Error {
    readonly response: EpAttributedReply;
    readonly phase: "invocation" | "target-inspection";
    constructor(response: EpAttributedReply, phase: "invocation" | "target-inspection");
}
export declare function endpointFailure(error: unknown, target: Record<string, unknown>, mayHaveInvoked: boolean): CommandFailure;
/** `value` as one POSIX shell word, quoted when a shell would split or expand it. */
export declare const shellWord: (value: string) => string;
/** The operator instrument holds request rows for the manager endpoint only, so the broker refuses
 *  its call to any other endpoint before execution. A paired caller file for that endpoint can make
 *  the call, and the refusal names how to issue one. The issuance names the space the call resolved
 *  and any `--server` it was given, so `auth mint` resolves the same registered root and signer
 *  rather than the current selection. */
export declare function withPairedCallerRemedy(failure: CommandFailure, endpoint: string, target: {
    space: string;
    server?: string;
}): CommandFailure;
//# sourceMappingURL=endpoint-errors.d.ts.map