export declare function resolveSkillDir(root: string, plugin: string, skill: string): string;
/**
 * 0769 T-006: registry-aware skill directory resolver with explicit allowlist.
 *
 * - If the registry has an entry for (plugin, skill), validate its `dir`
 *   against `allowedRoots` (after path.resolve normalization, plus a
 *   realpath check to defeat symlink escapes) and return it.
 * - Otherwise fall back to the root-based `resolveSkillDir()`.
 *
 * Allowlist matching is prefix-based: a candidate is accepted iff its
 * resolved path starts with the resolved form of at least one allowed root.
 * Inputs containing '..' or symlinks whose realpath escapes the allowlist
 * are rejected with an informative error.
 */
export declare function resolveAllowedSkillDir(root: string, plugin: string, skill: string, allowedRoots: string[]): string;