/**
 * Verifies a `PHPImportExtractor.extractStaticRequireTargets` result actually
 * names a real file before `ast/symbols.ts`'s `appendStaticRequireTargets`
 * trusts it as a genuine dependency edge (#1009).
 *
 * A `require`/`require_once`/`include`/`include_once` target is inferred from
 * a string-literal / `__DIR__`-concatenation HEURISTIC, not a language-level
 * guarantee the way a `use` statement's namespace is — PHP resolves the
 * overwhelming majority of `require`/`include` call sites (a variable, a bare
 * constant, a function call) at runtime, which is genuinely unresolvable
 * statically and already skipped upstream in `PHPImportExtractor`. For the
 * minority that DOES look statically resolvable, this is the one remaining
 * guard against a plausible-looking guess: unlike `resolvePsr4Import`'s
 * single-candidate shortcut (which trusts the PSR-4 map without checking
 * disk, because a `use` statement's namespace mapping is a project-level
 * declaration, not a per-call-site inference), a `require`/`include` target
 * is only trusted once the resolved path is confirmed to exist. This is the
 * same #928/#1008/#1056 discipline — never emit an edge for a specifier that
 * merely LOOKS resolvable — applied to PHP's own file-inclusion mechanism.
 *
 * @param specifier - The already relative-resolved (workspace-relative)
 *   candidate path, as produced by `resolveImportSpecifier`. `resolveRelativeImport`
 *   permits a `../`-heavy specifier to climb above `workspaceRoot` (accepted,
 *   tested behavior shared with JS/TS/Python's own relative-import
 *   resolution — see `path-matching.test.ts`'s `'../../../../outside/thing'`
 *   case), but unlike those languages' resolution, THIS function is the only
 *   place in that whole pipeline that touches the real filesystem for the
 *   resolved result. A CodeRabbit finding (#1009) correctly flagged that
 *   without a boundary check, a crafted `require __DIR__ . '/../../../../etc/passwd'`
 *   could `statSync` a real file outside the project entirely. Rejected
 *   below via a relative-path escape check before the existence check ever
 *   runs, rather than trusting `path.join`'s result as-is.
 * @param workspaceRoot - Absolute project root. Returns `false` when absent
 *   (nothing to check against) — callers with no workspace root in scope
 *   (most unit tests, and any indexing run that never provided one)
 *   correctly see zero require/include edges rather than an unverified guess.
 */
export declare function requireTargetExists(specifier: string, workspaceRoot: string | undefined): boolean;
//# sourceMappingURL=php-require.d.ts.map