import type { PathScope, PathScopeDecision } from "./contracts.ts";
/**
 * Resolves the real path of a target. If the target does not exist, it recursively
 * resolves the deepest existing parent directory and then appends the non-existent
 * remainder, ensuring that any symlinks in the existing path prefix are expanded.
 */
export declare function safeRealpathSync(targetPath: string): string;
/**
 * Stable lexical scope identity for durable planners. Windows drive and UNC paths are normalized
 * case-insensitively even when a WSL process is only comparing them and cannot realpath them.
 */
export declare function canonicalPathScopeIdentity(value: string): string;
/**
 * Boundary-safe lexical containment for already-resolved paths and portable scope planning.
 * Windows drive and UNC paths compare case-insensitively; native POSIX paths remain case-sensitive.
 * This deliberately does not resolve symlinks — callers that authorize filesystem access must first
 * use {@link safeRealpathSync}.
 */
export declare function isPathWithinScope(targetPath: string, scopeRoot: string): boolean;
/** True when either scope contains the other, including an exact match. */
export declare function pathScopesOverlap(firstScope: string, secondScope: string): boolean;
export declare function checkPathScope(scope: PathScope, targetPath: string): PathScopeDecision;
//# sourceMappingURL=path-scope.d.ts.map