import { GraphorinSecretsError } from "../secrets/errors.js";

//#region src/sandbox/errors.d.ts

/**
 * Generic base for sandbox-specific errors. Carries `kind` for
 * structured error handling.
 *
 * @stable
 */
declare abstract class GraphorinSandboxError extends GraphorinSecretsError {}
/**
 * Raised when the sandbox dispatcher receives a `SandboxKind` it
 * cannot satisfy and the resolver is configured to fail fast.
 *
 * @stable
 */
declare class UnsupportedSandboxKindError extends GraphorinSandboxError {
  readonly kind: 'unsupported-sandbox-kind';
  /** The kind the dispatcher could not satisfy. */
  readonly requested: string;
  /** The kinds the dispatcher knows about. */
  readonly available: ReadonlyArray<string>;
  constructor(requested: string, available: ReadonlyArray<string>);
}
/**
 * Raised when the optional native peer dependency required by an
 * adapter (e.g. `isolated-vm`, `dockerode`) is not installed.
 *
 * @stable
 */
declare class SandboxPeerUnavailableError extends GraphorinSandboxError {
  readonly kind: 'sandbox-peer-unavailable';
  /** Adapter that requested the peer. */
  readonly adapter: string;
  /** npm package name that was missing. */
  readonly peer: string;
  /** Verbatim install command shown to operators. */
  readonly installCommand: string;
  constructor(adapter: string, peer: string, installCommand: string, options?: {
    cause?: unknown;
  });
}
/**
 * Raised by `resolveSandbox(...)` consumers that opt into strict
 * enforcement when the operator supplies a custom policy that
 * violates a mandatory tier (e.g. trying to set `sandboxPolicy:
 * 'none'` on an untrusted skill tool).
 *
 * @stable
 */
declare class MandatorySandboxOverrideError extends GraphorinSandboxError {
  readonly kind: 'mandatory-sandbox-override';
  readonly tier: string;
  readonly attempted: string;
  readonly mandated: string;
  constructor(tier: string, attempted: string, mandated: string);
}
/**
 * Raised when a sandboxed run is rejected because the resolved
 * filesystem policy is `noFilesystem: true` and the executed code
 * tried to access the filesystem.
 *
 * @stable
 */
declare class SandboxFsAccessDeniedError extends GraphorinSandboxError {
  readonly kind: 'sandbox-fs-access-denied';
  readonly attemptedPath?: string;
  constructor(attemptedPath?: string);
}
/**
 * Raised when a sandboxed run is rejected because the resolved
 * network policy is `noNetwork: true` and the executed code tried to
 * make an outbound request.
 *
 * @stable
 */
declare class SandboxNetworkAccessDeniedError extends GraphorinSandboxError {
  readonly kind: 'sandbox-network-access-denied';
  readonly attemptedHost?: string;
  constructor(attemptedHost?: string);
}
//#endregion
export { GraphorinSandboxError, MandatorySandboxOverrideError, SandboxFsAccessDeniedError, SandboxNetworkAccessDeniedError, SandboxPeerUnavailableError, UnsupportedSandboxKindError };
//# sourceMappingURL=errors.d.ts.map