/**
 * Validate workspace root, then reject symlinks at every existing `.oms` segment
 * used by setup/projection (including nested runtime-v2/lock and journal).
 */
export declare function assertSafeWorkspaceOms(workspaceRootInput: string): {
    readonly workspaceRoot: string;
    readonly omsRoot: string;
};
/** Create `.oms` via ensureSafeDirectory after nested symlink probes. */
export declare function ensureSafeOmsDirectory(workspaceRootInput: string): {
    readonly workspaceRoot: string;
    readonly omsRoot: string;
};