import type { PluginHostPaths } from "./types.js";
/**
 * A catalog is untrusted input. Keep its relative paths boring so neither
 * lexical traversal nor a symlink can make a plugin source leave its checkout.
 */
export declare function assertSafeRelativePath(value: string, label?: string): string;
export declare function assertSafeName(value: string, label: string): string;
export declare function isPathContained(root: string, candidate: string): boolean;
export declare function resolveContainedPath(root: string, child: string, label?: string): string;
export declare function resolveContainedExistingPath(root: string, child: string, label?: string): Promise<string>;
export declare function assertNoSymlinks(root: string): Promise<void>;
export declare function createPluginHostPaths(agentDir: string): PluginHostPaths;