/**
 * Turn raw OS-sandbox denials into guidance the model can act on.
 *
 * A blocked command otherwise surfaces as inscrutable tool noise ("CONNECT
 * tunnel failed, response 403", "Operation not permitted"), which the model
 * tends to retry verbatim. Naming the boundary and the one-step fix is what
 * turns a dead end into a recoverable turn.
 */
export interface SandboxDenialNote {
    kind: "network" | "filesystem";
    note: string;
}
/**
 * Inspect finished command output for a sandbox denial.
 *
 * @param output   Combined stdout/stderr as returned to the model.
 * @param sandboxed Whether this command actually ran isolated.
 */
export declare function describeSandboxDenial(output: string, sandboxed: boolean): SandboxDenialNote | null;
/** Append the denial note to command output when one applies. */
export declare function annotateSandboxDenial(output: string, sandboxed: boolean): string;
//# sourceMappingURL=sandbox-feedback.d.ts.map