/**
 * Checks if a given resolved path is within the list of allowed path prefixes.
 */
export declare function isPathAllowed(resolvedPath: string, allowedPaths: string[]): boolean;
/**
 * Resolves a given file path, including tilde (~) expansion and symbolic link resolution,
 * and optionally checks if it exists and is within allowed paths.
 *
 * @param originalPath The initial path string from user input.
 * @param options Options for validation:
 *   - isExistenceRequired: If true, throws ERR_FS_NOT_FOUND if path doesn't exist.
 *   - checkAllowed: If true (default), checks if the final real path is within conduitConfig.resolvedAllowedPaths.
 *   - forCreation: If true (default false), validates parent directory for creation operations.
 * @returns The fully resolved, absolute path.
 * @throws ConduitError for access denied, path not found, or too many symlinks.
 */
export declare function validateAndResolvePath(originalPath: string, options?: {
    isExistenceRequired?: boolean;
    checkAllowed?: boolean;
    forCreation?: boolean;
}): Promise<string>;
//# sourceMappingURL=securityHandler.d.ts.map