declare const TigrisCredentialsMissing_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
    readonly _tag: "Fly.TigrisCredentialsMissing";
} & Readonly<A>;
/**
 * A {@link Bucket}'s Tigris credentials could not be resolved when a
 * bound S3 operation ran.
 *
 * Tigris hands out the access key pair once, at add-on creation. If the
 * Bucket attributes reaching the binding carry no key pair — an adopted
 * bucket, or one whose create-only secrets were never persisted — the
 * operation fails with this instead of signing an anonymous request.
 */
export declare class TigrisCredentialsMissing extends TigrisCredentialsMissing_base<{
    name: string;
}> {
}
declare const FlyKmsError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
    readonly _tag: "Fly.KmsError";
} & Readonly<A>;
/**
 * Failure of a Fly PetSem (KMS) call made from inside a Machine over the
 * `/.fly/api` unix socket.
 *
 * The distilled Machines SDK cannot reach that socket, so
 * {@link Encrypt}, {@link Decrypt}, {@link Sign}, and {@link Verify} post
 * directly when running inside a deployed host. This is the typed error
 * for that path — a non-2xx response, or a socket/transport failure.
 */
export declare class FlyKmsError extends FlyKmsError_base<{
    /** The PetSem operation that failed. */
    readonly op: "encrypt" | "decrypt" | "sign" | "verify";
    /** HTTP status, when Fly answered at all. */
    readonly status?: number;
    /** Response body, or the transport failure message. */
    readonly message: string;
    readonly cause?: unknown;
}> {
}
export {};
//# sourceMappingURL=Errors.d.ts.map