import { GraphorinSecretsError } from "../secrets/errors.js";

//#region src/audit/errors.d.ts

/**
 * Raised by `openAuditDb(...)` when no encrypted-SQLite binding has
 * been registered. The audit log mandates encryption-at-rest; the
 * library refuses to silently downgrade to a plaintext SQLite handle.
 *
 * @stable
 */
declare class AuditDbCipherUnavailableError extends GraphorinSecretsError {
  readonly kind: 'audit-db-cipher-unavailable';
  /** Identifier of the binding that was requested. */
  readonly binding: string;
  /** Verbatim install command that resolves the missing binding. */
  readonly installCommand: string;
  constructor(binding: string, message?: string);
}
/**
 * Raised by `verifyAuditChain(...)` when the chain is found to be
 * broken. The error carries the first divergent sequence number plus
 * the expected and actual hash values for forensic analysis.
 *
 * @stable
 */
declare class AuditChainBrokenError extends GraphorinSecretsError {
  readonly kind: 'audit-chain-broken';
  readonly seq: number;
  readonly expectedHash: string;
  readonly actualHash: string;
  constructor(seq: number, expectedHash: string, actualHash: string);
}
/**
 * Raised when an audit log payload fails canonical-JSON
 * serialization (e.g. cyclic references, BigInt, or other
 * non-serialisable values).
 *
 * @stable
 */
declare class AuditPayloadSerializationError extends GraphorinSecretsError {
  readonly kind: 'audit-payload-serialization';
  constructor(reason: string);
}
//#endregion
export { AuditChainBrokenError, AuditDbCipherUnavailableError, AuditPayloadSerializationError };
//# sourceMappingURL=errors.d.ts.map