/**
 * Resolve a caller-provided path against a trusted root without allowing escapes.
 *
 * @param root - Trusted filesystem root for the boundary.
 * @param candidate - Relative or absolute candidate path to validate.
 * @returns The normalized absolute path when it stays inside `root`.
 *
 * @example
 * ```typescript
 * const path = resolveScopedPath('/repo', '.hivemind/state/session.json')
 * // path === '/repo/.hivemind/state/session.json'
 * ```
 */
export declare function resolveScopedPath(root: string, candidate: string): string;
/**
 * Resolve and assert a path remains inside the trusted boundary root.
 *
 * @param root - Trusted filesystem root for the boundary.
 * @param candidate - Relative or absolute candidate path to validate.
 * @param boundaryName - Human-readable boundary name included in denial errors.
 * @returns The normalized absolute path when allowed.
 * @throws {Error} When the candidate traverses or resolves outside `root`.
 *
 * @example
 * ```typescript
 * const stateFile = assertPathWithinRoot('/repo/.hivemind/state', 'delegations.json', 'continuity')
 * ```
 */
export declare function assertPathWithinRoot(root: string, candidate: string, boundaryName: string): string;
//# sourceMappingURL=path-scope.d.ts.map