/**
 * Paths from the model: relative paths are under `workspaceRoot`; absolute paths are normalized.
 *
 * Security: resolves `..` traversal and normalizes the path. For absolute paths the caller
 * should additionally run sandbox path-policy validation when enforcement is enabled.
 */
export declare function resolvePathUnderWorkspace(userPath: string, workspaceRoot: string): string;
/** True if `userPath` is only a profile-system filename, e.g. `SOUL.md` or `.\SOUL.md` (basename matches). */
export declare function isBareProfileMarkdownFileName(userPath: string): boolean;
/**
 * If `userPath` refers to a profile Markdown file by name, resolve under `profileMarkdownRoot`.
 */
export declare function resolveProfileMarkdownPathIfBareName(userPath: string, profileMarkdownRoot: string): string;