import { ResolvedSandboxPolicy, SandboxKind } from "./sandbox.js";

//#region src/sandbox/tier-resolver.d.ts

/**
 * Trust level discriminator. The union mirrors the
 * `graphorin-trust-level` frontmatter axis from the skills loader,
 * plus the synthetic `'built-in'` value used by trusted built-in tools.
 *
 * @stable
 */
type SandboxTrustLevel = 'built-in' | 'user-defined' | 'trusted' | 'untrusted';
/**
 * Operator-supplied policy override. Mirrors `Tool.sandboxPolicy` from
 * `@graphorin/core`, plus optional override fields the operator can
 * tune per tool.
 *
 * @stable
 */
interface SandboxPolicyOverride {
  readonly kind?: SandboxKind;
  readonly noNetwork?: boolean;
  readonly noFilesystem?: boolean;
  readonly timeoutMs?: number;
  readonly maxMemoryMb?: number;
}
/**
 * Input to `resolveSandbox(...)`. The fields are intentionally
 * decoupled from `Tool` / `Skill` types so the resolver can be reused
 * by the agent runtime, the skills loader, and the MCP client without
 * a circular dependency.
 *
 * @stable
 */
interface ResolveSandboxInput {
  readonly trustLevel: SandboxTrustLevel;
  readonly toolName?: string;
  readonly skillName?: string;
  readonly override?: SandboxPolicyOverride;
}
/**
 * Resolve the effective sandbox policy. Pure function; side-effect
 * free (the caller is responsible for emitting any WARN / audit
 * entry).
 *
 * @stable
 */
declare function resolveSandbox(input: ResolveSandboxInput): ResolvedSandboxPolicy;
//#endregion
export { ResolveSandboxInput, SandboxPolicyOverride, SandboxTrustLevel, resolveSandbox };
//# sourceMappingURL=tier-resolver.d.ts.map