/** Native file tools whose pathname arguments the repair runtime constrains. */
export declare const repairFileTools: readonly ["read", "write", "edit", "read_image"];
/** Return the native file path only when the pinned tool's path-bearing input is well-formed. */
export declare function repairFilePath(name: string, arguments_: unknown): string;
/**
 * Reject a native filesystem-tool path unless it names an existing or new file
 * below the repair workspace without traversing a symlink.  This runs in the
 * asynchronous dispatch wrapper because ToolRuntime guards are synchronous.
 *
 * The check closes ordinary traversal and pre-dispatch symlink escapes.  The
 * native ToolRuntime API delegates by pathname, not by an already-opened
 * directory/file descriptor, so a same-UID attacker can still replace a path
 * after this check and before the native tool opens it.  That race needs a
 * descriptor-relative native filesystem API to close completely.
 */
export declare function assertRepairWorkspacePath(workspace: string, value: unknown): Promise<void>;
//# sourceMappingURL=repair-workspace-path.d.ts.map