/**
 * Validates that a path is workspace-relative and, once resolved against `basePath`, remains
 * contained within `basePath`. Rejects absolute paths (POSIX or Windows style, independent of
 * host OS) and directory traversal (`..`) segments, then resolves symlinks on both the base and
 * target paths to verify the final location has not escaped the workspace root.
 *
 * Shared by both the `build-schema` and `codegen` executors so path-safety guarantees stay
 * identical across the package instead of drifting between two ad hoc implementations.
 *
 * @param basePath - The workspace root path.
 * @param targetPath - The path to validate (resolved relative to basePath).
 * @returns The resolved, validated path within the workspace.
 * @throws {ExecutorError} If the path is absolute, contains `..`, or escapes the workspace root.
 * @example
 * ```typescript
 * const resolved = validatePath('/workspace', 'src/graphql/resolvers');
 * // '/workspace/src/graphql/resolvers'
 * ```
 */
export declare function validatePath(basePath: string, targetPath: string): string;
//# sourceMappingURL=validate-path.d.ts.map