/**
 * Validate a file path for write operations.
 *
 * - Resolves the path to an absolute, normalized form
 * - Blocks writes to sensitive system directories
 * - Blocks writes to sensitive home subdirectories (~/.ssh, ~/.gnupg)
 *
 * @returns The resolved absolute path
 * @throws CloakError with code IO_ERROR if the path is blocked
 */
export declare function validateWritePath(rawPath: string): string;
/**
 * Validate a file path for read operations (used by eval_file).
 *
 * - Resolves the path to an absolute, normalized form
 * - Blocks reading from sensitive system directories to prevent data exfiltration
 *
 * @returns The resolved absolute path
 * @throws CloakError with code IO_ERROR if the path is blocked
 */
export declare function validateReadPath(rawPath: string): string;
//# sourceMappingURL=safepath.d.ts.map