/**
 * Path arithmetic in the SANDBOX's coordinate system.
 *
 * A sandbox is a POSIX filesystem whatever the host runs, so resolving its
 * paths with the host's path module rewrites them whenever the two
 * disagree: on a Windows host, `resolve('/workspace')` becomes
 * `C:\workspace` and a container path stops being a container path. The
 * tool then hands the model a string its own sandbox cannot open — which
 * is the same class of failure as reporting host-relative paths from a
 * sandboxed search, just one layer lower.
 *
 * These are deliberately small: join, relativise, and refuse an escape.
 * Nothing here touches the host filesystem.
 */
/** Join, normalising `.` and `..`. Absolute in, absolute out. */
export declare function joinPosix(base: string, ...parts: string[]): string;
/** `to` expressed relative to `from`, or `to` itself when unrelated. */
export declare function relativePosix(from: string, to: string): string;
/**
 * Resolve `candidate` against `root`, refusing anything that lands
 * outside. The sandbox-side twin of the host containment check.
 */
export declare function resolveWithinPosix(root: string, candidate: string | undefined): string;
//# sourceMappingURL=posix-path.d.ts.map