import { type Dirent } from "node:fs";
/** Resolve one directory once while rejecting a final-component symlink or identity race. */
export declare function resolveRegularDirectory(path: string, label: string): Promise<string>;
/**
 * Create and permission a private directory tree below an opened, verified anchor.
 * Without an explicit anchor, the target is secured below its nearest existing,
 * verified ancestor.
 */
export declare function ensurePrivateDirectoryNoFollow(path: string, label: string, trustedRoot?: string): Promise<void>;
/** Read a canonical directory without following a symlink introduced below its trusted root. */
export declare function readRegularDirectoryNoFollow(path: string, label: string): Promise<Dirent[]>;
/** Atomically open and read one unchanged regular file without following symlinks. */
export declare function readRegularFileNoFollow(path: string, label: string, maximumBytes?: number): Promise<Buffer>;
/** Copy one unchanged regular source through no-follow file handles into a new destination. */
export declare function copyRegularFileNoFollow(source: string, destination: string, label: string): Promise<void>;
/** Atomically replace one regular file through an opened parent directory without following symlinks. */
export declare function atomicWriteRegularFileNoFollow(path: string, content: string, label: string): Promise<void>;
/** Durably remove one regular file through an opened parent directory without following symlinks. */
export declare function durableUnlinkRegularFileNoFollow(path: string, label: string): Promise<boolean>;
/** Durably append text through an opened parent directory and an O_NOFOLLOW file handle. */
export declare function appendRegularFileNoFollow(path: string, content: string, label: string): Promise<void>;
//# sourceMappingURL=secure-file.d.ts.map