/** Strong, container-only validation with baseline comparison. */
import type { ValidationPlanV1, ValidationReportV1 } from "../../core/contracts.ts";
export interface StrongSandboxOptions {
    image: string;
    dockerBinary?: string;
    cpus?: number;
    memory?: string;
    pidsLimit?: number;
    maxOutputBytes?: number;
    /** Environment values are opt-in and should contain no credentials. */
    environment?: Record<string, string>;
}
export interface ValidationComparisonOptions extends StrongSandboxOptions {
    baselineRoot: string;
    candidateRoot: string;
    /** A single retry is used only to identify flaky commands. */
    retryFailedOnce?: boolean;
}
export declare class ValidationError extends Error {
    readonly code: string;
    constructor(code: string, message: string);
}
export declare function strongSandboxAvailable(dockerBinary?: string): Promise<boolean>;
/**
 * Runs the same frozen checks against the untouched project and against the
 * generated candidate, each in its own strong sandbox, then compares them.
 */
export declare function validateBaselineAndCandidate(plan: ValidationPlanV1, options: ValidationComparisonOptions): Promise<ValidationReportV1>;
//# sourceMappingURL=sandbox-validation.d.ts.map