/**
 * Resolve `<dir>/<sessionId><suffix>` for per-session sidecar files
 * (annotations, audit chain, replay log, the session JSONL itself).
 *
 * Modern session ids are date-sharded ("2026-06-11/sess_<ULID>"),
 * so a forward slash is a legitimate shard separator — NOT traversal.
 * Escape attempts are blocked two ways: an explicit ban on `..` and
 * backslashes, plus a resolved-path containment check that rejects any
 * id whose resolved target leaves `dir`. Character bans alone are how
 * several stores ended up throwing on every modern session id.
 */
export declare function sessionScopedPath(dir: string, sessionId: string, suffix: string): string;
//# sourceMappingURL=session-scoped-path.d.ts.map