import type { Sandbox } from "@daytonaio/sdk";
import type { PluginEnvironmentSyncResult, PluginSyncOperation } from "@paperclipai/plugin-sdk";
/**
 * Host-side complete-mediation guard applied as defense-in-depth below the
 * orchestrator's own confinement. Every sandbox-side path (the sync target for
 * inbound, the sync source for outbound) MUST canonicalize inside the workspace
 * remote dir; absolute escapes and `..` traversal are rejected fail-closed before
 * any bytes move. Sandbox paths on the server are POSIX.
 */
export declare function assertConfinedSandboxPath(remoteDir: string, candidate: string, label: string): void;
export declare function performSyncIn(input: {
    sandbox: Sandbox;
    operations: PluginSyncOperation[];
    remoteDir: string;
    timeoutSeconds: number;
}): Promise<PluginEnvironmentSyncResult>;
export declare function performSyncOut(input: {
    sandbox: Sandbox;
    operations: PluginSyncOperation[];
    remoteDir: string;
    timeoutSeconds: number;
}): Promise<PluginEnvironmentSyncResult>;
//# sourceMappingURL=file-sync.d.ts.map