/**
 * Shared `authorize`-hook runner.
 *
 * Both the method dispatcher (`dispatcher.ts`) and the worker-side aux routes
 * (`server/auxiliary-routes.ts`) let an author deny a call by throwing from an
 * `authorize` hook. They MUST agree on the wire semantics: an already-typed
 * `AuthorizationDeniedError` passes through unchanged (so callers can attach
 * hints), and any other thrown error is wrapped into `AuthorizationDeniedError`
 * (→ `PERMISSION_DENIED` / HTTP 403). Centralised here so the two call sites
 * cannot drift — previously the aux routes awaited `authorize` directly, so a
 * plain `Error` thrown to deny leaked out as a 500 instead of a 403.
 */
export declare function runAuthorize<C>(hook: (ctx: C) => void | Promise<void>, ctx: C): Promise<void>;
//# sourceMappingURL=authorize.d.ts.map