import type { TestCaseResult } from '../types/testCaseResult.js';
export declare function readOutputFiles(cwd: string, outputFilePaths: readonly string[]): Promise<NonNullable<TestCaseResult['outputFiles']>>;
/**
 * Whether the harness may read the given submission-created path. When submissions run as the
 * sandbox user while the harness is trusted, a submission could plant a symlink (or a symlinked
 * parent directory) escaping its working directory — e.g. to the 0700 problem directory — and the
 * privileged read would exfiltrate protected bytes, so only paths that resolve inside the working
 * directory are allowed. Without user separation the submission can read those targets itself, so
 * the check is skipped to keep authoring behavior unchanged.
 */
export declare function isSafeSubmissionOutputPath(cwd: string, filePath: string): Promise<boolean>;