/** Chmod an existing file to the requested mode. Best-effort; log.warn on failure. */
export declare function ensureSecureFile(path: string, mode: number): void;
/**
 * Ensure a directory exists and has the requested mode. Creates recursively
 * if missing. Best-effort chmod — same semantics as ensureSecureFile.
 */
export declare function ensureSecureDir(path: string, mode: number): void;
/**
 * Check an existing file's mode; log.warn if it's more permissive than
 * `maxMode`. Does NOT chmod — some files (e.g. user-owned config.json) are
 * operator-managed and silent auto-chmod would be surprising.
 *
 * Skips silently on Windows (POSIX mode bits are meaningless on NTFS).
 */
export declare function checkAndWarnPermissive(path: string, maxMode: number): void;
//# sourceMappingURL=fs-perms.d.ts.map