export declare class BoundaryViolationError extends Error { constructor(filepath: string, foundationRoot: string); } /** * Assert that a filepath is within the Foundation root directory. * Resolves both paths to absolute form before comparing. * Throws BoundaryViolationError if the path escapes the Foundation. */ export declare function assertWithinFoundation(filepath: string): Promise; /** * Assert that a filepath is within a known root directory. * Resolves symlinks (macOS: /var → /private/var) to avoid false violations. */ export declare function assertWithinRoot(filepath: string, foundationRoot: string): Promise; //# sourceMappingURL=boundary-guard.d.ts.map