ports

var (
	ErrAuthenticationFailed         = errors.New("SecondBox credential authentication failed")
	ErrAuthorizationDenied          = errors.New("SecondBox authorization denied")
	ErrManagementUnavailable        = errors.New("SecondBox durable management store is unavailable")
	ErrManagementNotFound           = errors.New("SecondBox management resource not found")
	ErrManagementConflict           = errors.New("SecondBox management resource conflicts with current state")
	ErrInvalidLifecycleTransition   = errors.New("SecondBox management lifecycle transition is invalid")
	ErrResourceExpired              = errors.New("SecondBox management resource is expired")
	ErrTenantSuspended              = errors.New("SecondBox Tenant is suspended")
	ErrTenantEgressContextRequired  = errors.New("SecondBox Profile requires a Tenant egress context")
	ErrEgressContextUnavailable     = errors.New("SecondBox Sandbox egress context is unavailable")
	ErrGrantEscalationDenied        = errors.New("SecondBox management grant exceeds its Tenant ceiling")
	ErrProfilePolicyCeilingExceeded = errors.New("SecondBox lifecycle policy exceeds its Profile ceiling")
	ErrInvalidRequest               = errors.New("SecondBox request is invalid")
	ErrProfileNotFound              = errors.New("SecondBox Profile not found")
	ErrProfileDisabled              = errors.New("SecondBox Profile is disabled")
	ErrRunnerPoolNotFound           = errors.New("SecondBox RunnerPool not found")
	ErrRunnerPoolExists             = errors.New("SecondBox RunnerPool already exists")
	ErrRunnerNotFound               = errors.New("SecondBox Runner not found")
	ErrRunnerPoolUnavailable        = errors.New("SecondBox compatible runner pool unavailable")
	// ErrRunnerPoolBackendInUse refuses a backend unseal while any Runner of the
	// pool is not offline, holds an active connection, or owns a non-terminal
	// Assignment.
	ErrRunnerPoolBackendInUse = errors.New("SecondBox RunnerPool compute backend is in use")
	// ErrStartupModeUnsupported reports that the Profile's RunnerPool does not
	// declare the capability its startup mode requires. It is not retryable:
	// no Runner in that pool is admissible until an operator either declares the
	// capability on the pool or revises the Profile's startup mode.
	ErrStartupModeUnsupported        = errors.New("SecondBox RunnerPool does not support the Profile startup mode")
	ErrSandboxNotFound               = errors.New("SecondBox Sandbox not found")
	ErrWorkspaceFileNotFound         = errors.New("SecondBox Workspace file not found")
	ErrSandboxNameConflict           = errors.New("SecondBox Sandbox name is already in use")
	ErrIdempotencyConflict           = errors.New("SecondBox idempotency key payload conflict")
	ErrCredentialResponseUnavailable = errors.New("SecondBox credential response is unavailable")
	ErrQuotaExceeded                 = errors.New("SecondBox quota exceeded")
	// ErrComputeQuotaExceeded refuses admission on an axis that frees as other
	// work ends: active Instances, vCPU, memory, or concurrent operations,
	// including a Profile's per-Sandbox execution concurrency. It is an
	// ErrQuotaExceeded; the other axes (Sandboxes, Snapshots, port sessions)
	// free only by the caller's own action or an operator.
	ErrComputeQuotaExceeded = fmt.Errorf("%w on a compute axis", ErrQuotaExceeded)
	// ErrImagePreparationTargetsExceeded reports that more eligible Runners than
	// one preparation Operation may carry answered admission. Waiting cannot help:
	// the request must select a Profile that narrows the eligible Runner set.
	ErrImagePreparationTargetsExceeded = errors.New("SecondBox image preparation eligible Runner set exceeds its target limit")
	ErrRevisionConflict                = errors.New("SecondBox resource revision conflict")
	ErrLifecycleUnavailable            = errors.New("SecondBox lifecycle unavailable without a runner assignment")
	ErrHomeRunnerUnavailable           = errors.New("SecondBox Sandbox home runner is unavailable")
	ErrWorkspaceMutation               = errors.New("SecondBox Workspace has a conflicting local mutation")
	ErrSandboxNotStopped               = errors.New("SecondBox Workspace relocation requires a stopped Sandbox")
	ErrRelocationTargetUnavailable     = errors.New("SecondBox Workspace relocation target is unavailable or incompatible")
	ErrRelocationSnapshotsPresent      = errors.New("SecondBox Workspace relocation requires all Snapshots to be deleted")
	ErrProfileSwitchSandboxNotStopped  = errors.New("SecondBox Sandbox Profile switch requires a stopped Sandbox")
	ErrProfileSwitchSnapshotsPresent   = errors.New("SecondBox Sandbox Profile switch requires all Snapshots to be deleted")
	// ErrSerializationContention reports that a transaction lost a serialization
	// race and the caller should try again later. It is an ordinary outcome of
	// serializable isolation under concurrency, not a fault: a caller that treats
	// it as one will fail whenever load rises.
	ErrSerializationContention = errors.New("SecondBox transaction lost a serialization race")
	ErrWorkspaceHomeConflict   = errors.New("SecondBox Workspace home runner differs from assigned authority")
	ErrGenerationFenced        = errors.New("SecondBox Sandbox generation is fenced")
	ErrLeaseNotFound           = errors.New("SecondBox Lease not found")
	ErrLeaseAlreadyActive      = errors.New("SecondBox Sandbox already has an active Lease")
	ErrLeaseInactive           = errors.New("SecondBox Lease is not active")
	ErrActivitySessionNotFound = errors.New("SecondBox activity session not found")
	ErrSnapshotNotFound        = errors.New("SecondBox Snapshot not found")
	ErrSnapshotUnavailable     = errors.New("SecondBox Snapshot requires stopped committed disk state")
	ErrSnapshotNameConflict    = errors.New("SecondBox Snapshot name is held by a ready Snapshot in this Sandbox")
	ErrPortSessionNotFound     = errors.New("SecondBox PortSession not found")
	ErrPortPolicyDenied        = errors.New("SecondBox exposed port is not approved by the pinned Profile")
	ErrPortTokenInvalid        = errors.New("SecondBox port tunnel token is invalid")
	ErrPortTokenConsumed       = errors.New("SecondBox port tunnel token was already consumed")
	ErrWaitExpired             = errors.New("SecondBox Sandbox wait deadline expired")
)

var ErrProfileIncompatible = errors.New("SecondBox target Profile is incompatible with the Sandbox")

var ErrResourcesExceedProfile = errors.New("SecondBox requested resources exceed Profile ceiling")

var ErrResourcesFixedByProfile = errors.New("SecondBox requested resources differ from the fixed Profile size")