/**
 * A policy returned something a hook may not return. Raised loudly at
 * the seam (never silently dropped): an illegal Action kind for the
 * hook, or a value that is not an Action at all, is a programming
 * error in the policy, not a refusal.
 */
export declare class PolicyError extends Error {
    constructor(message: string);
}
/**
 * An op refused by an admission policy at the op door. Shaped like the
 * FsError stamps (`code` EACCES plus the virtual path) so every fs
 * chokepoint renders GNU's "Permission denied" and the FUSE bridge
 * classifies it to -EACCES; the distinct class lets handlers that
 * special-case mount-mode refusals (the read-only wording) tell a
 * policy deny apart.
 *
 * It carries no accounting: a postOps refusal suppresses the result,
 * not the effect, and the door reports the completed op through the
 * caller's `OpReport`, which covers this error and any foreign one the
 * same way.
 */
export declare class PolicyDenied extends Error {
    readonly code = "EACCES";
    readonly virtualPath: string;
    constructor(message: string, virtualPath: string);
}
//# sourceMappingURL=errors.d.ts.map