import { type Dirent } from 'node:fs';
export interface NativeProtectedFileHooks {
    afterParentChainCaptured?: () => void | Promise<void>;
    afterOpen?: () => void | Promise<void>;
    beforeRead?: () => void | Promise<void>;
    beforeFinalCheck?: () => void | Promise<void>;
    beforeTargetCommit?: () => void | Promise<void>;
}
export interface NativeProtectedFile {
    bytes: Buffer;
    hash: string;
    size: number;
}
export interface NativeProtectedTextFile extends NativeProtectedFile {
    text: string;
}
export declare function readNativeProtectedFile(options: {
    root: string;
    file: string;
    maxBytes: number;
    label: string;
    forbiddenRoots?: readonly string[];
    hooks?: NativeProtectedFileHooks;
}): Promise<NativeProtectedFile>;
export declare function readNativeProtectedTextFile(options: {
    root: string;
    file: string;
    maxBytes: number;
    label: string;
    forbiddenRoots?: readonly string[];
    hooks?: NativeProtectedFileHooks;
}): Promise<NativeProtectedTextFile>;
export declare function readNativeProtectedDirectory(options: {
    root: string;
    directory: string;
    label: string;
    maxEntries?: number;
}): Promise<{
    entries: Dirent[];
    verify: () => Promise<void>;
}>;
export declare function captureNativeProtectedDirectoryGuard(options: {
    root: string;
    directory: string;
    label: string;
}): Promise<{
    verify: () => Promise<void>;
}>;
export declare function quarantineNativeProtectedDirectory(options: {
    root: string;
    directory: string;
    quarantine: string;
    label: string;
    beforeQuarantine?: () => void | Promise<void>;
    afterQuarantine?: (quarantine: string) => void | Promise<void>;
}): Promise<void>;
export declare function removeNativeProtectedDirectory(options: {
    root: string;
    directory: string;
    quarantine: string;
    label: string;
    beforeQuarantine?: () => void | Promise<void>;
    afterQuarantine?: (quarantine: string) => void | Promise<void>;
    beforeRemove?: (quarantine: string) => void | Promise<void>;
}): Promise<void>;
export declare function removeNativeProtectedFile(options: {
    root: string;
    file: string;
    maxBytes: number;
    expectedHash: string;
    expectedSize: number;
    label: string;
    beforeRemove?: () => void | Promise<void>;
}): Promise<void>;
export declare function removeNativeProtectedEmptyDirectory(options: {
    root: string;
    directory: string;
    label: string;
    beforeRemove?: () => void | Promise<void>;
}): Promise<void>;
export declare function removeNativeProtectedQuarantine(options: {
    root: string;
    quarantine: string;
    label: string;
    beforeRemove?: (quarantine: string) => void | Promise<void>;
}): Promise<void>;
export declare function ensureNativeProtectedDirectory(options: {
    root: string;
    directory: string;
    label: string;
}): Promise<void>;
/** Move a real directory inside one managed root while binding the source object identity. */
export declare function moveNativeProtectedDirectory(options: {
    root: string;
    source: string;
    target: string;
    label: string;
    beforeMove?: () => void | Promise<void>;
}): Promise<void>;
export declare function copyNativeProtectedFile(options: {
    sourceRoot: string;
    source: string;
    targetRoot: string;
    target: string;
    maxBytes: number;
    label: string;
    expectedHash?: string;
    expectedTargetHash?: string | null;
    forbiddenRoots?: readonly string[];
    exclusive?: boolean;
    hooks?: NativeProtectedFileHooks;
}): Promise<NativeProtectedFile>;
//# sourceMappingURL=native-protected-file.d.ts.map