/**
 * The per-workspace write identity: a deterministic `S-1-4-x-y` SID derived
 * from the canonical workspace path, whose ACEs form that workspace's write
 * allowlist. Every confined execution of the same workspace — across
 * sessions, server restarts, and calls — carries the SAME write SID, so the
 * workspace-root ACE materializes once per workspace per machine (the
 * grant's exact-ACE skip then makes every later provision O(1)) instead of
 * once per session. The SID's power is defined solely by the ACEs that name
 * it (which exist only on the workspace tree and the session's private temp
 * directory), and only tokens minted for that workspace carry it — the SID
 * string itself is not a secret (the previous per-session SID was likewise
 * logged in the plain).
 *
 * The input MUST be the canonical workspace path (`realpathSync.native` on
 * Windows — the sandbox-policy `resolveWorkspaceRoot` already applies it):
 * canonicalization converges case/alias spellings, so two spellings of one
 * workspace derive one SID; an as-spelled fallback path would mint a second
 * identity for the same directory (self-healing, at the cost of one extra
 * tree propagation). Renaming the workspace directory derives a new SID —
 * the old standing ACEs are inert residue, and the next session re-propagates
 * once.
 * @module @deepseek-ai/dsh-sandbox-windows-acl/workspace-sid
 */
/**
 * Derive the workspace's write SID (`S-1-4-x-y`; subauthorities 30-bit,
 * matching the orphan shape the token and ACE layers already carry).
 * @param workspaceRoot - the canonical workspace path.
 * @returns the SDDL string form.
 */
export declare function workspaceWriteSid(workspaceRoot: string): string;
//# sourceMappingURL=workspace-sid.d.ts.map