export type HookScope = 'project' | 'global';
/** True iff `childPath` resolves to `parentPath` or any path nested inside it. */
export declare function isInsidePath(childPath: string, parentPath: string): boolean;
/**
 * Reject settings targets that are symlinked or escape the configured root.
 * Used by the hook / statusline / MCP install paths to keep the project root the
 * sole owner of writable settings files.
 */
export declare function assertSafeSettingsFile(scope: HookScope, root: string, dirName: string, settingsFileName: string): {
    settingsPath: string;
};