/**
* Check if a resolved absolute path points to a Windows system/protected location.
*/
export declare function isSystemFilePath(resolvedPath: string): boolean;
/**
* Validate that a path is safe for write/delete operations.
* Blocks writes to Windows system directories while allowing all other paths.
*/
export declare function validateWritePath(filePath: string): {
valid: boolean;
sanitized?: string;
error?: string;
};
export declare function expandPath(p: string): string;
export declare function sanitizeFilePath(filePath: string): {
valid: boolean;
sanitized?: string;
error?: string;
};
export declare function sanitizeCommand(command: string): {
valid: boolean;
sanitized?: string;
error?: string;
};
export interface ExecutionParams {
timeoutMs?: number;
maxOutputBytes?: number;
cwd?: string;
env?: Record<string, string>;
stdin?: string;
args?: string[];
}
export declare function validateExecutionParams(params: ExecutionParams): {
valid: boolean;
validated?: ExecutionParams;
error?: string;
};
//# sourceMappingURL=securityEnhanced.d.ts.map