import { GraphorinSecretsError } from "../secrets/errors.js";

//#region src/hardening/errors.d.ts

/**
 * Generic base for hardening-specific errors. Carries `kind` for
 * structured error handling and inherits `hint` from the package
 * base.
 *
 * @stable
 */
declare abstract class GraphorinHardeningError extends GraphorinSecretsError {}
/**
 * Raised by `applyProcessHardening(...)` when the active POSIX user
 * is `root` and the operator did not pass `allowRoot: true`.
 *
 * @stable
 */
declare class RefuseToRunAsRootError extends GraphorinHardeningError {
  readonly kind: 'refuse-to-run-as-root';
  constructor();
}
/**
 * Raised by `ensureFileMode(...)` when the post-condition check
 * fails (the underlying filesystem refuses the requested mode).
 *
 * @stable
 */
declare class FileModeMismatchError extends GraphorinHardeningError {
  readonly kind: 'file-mode-mismatch';
  readonly path: string;
  readonly expected: number;
  readonly actual: number;
  constructor(path: string, expected: number, actual: number);
}
//#endregion
export { FileModeMismatchError, GraphorinHardeningError, RefuseToRunAsRootError };
//# sourceMappingURL=errors.d.ts.map