/**
 * Sanitizes an input path to prevent directory traversal attacks.
 *
 * - Normalizes and resolves the path to an absolute form
 * - Rejects paths that still contain ".." after resolution
 * - Rejects paths outside allowed directories (home, /tmp, cwd)
 *
 * @param inputPath - The untrusted path from an MCP client
 * @returns The resolved, validated absolute path
 * @throws Error if the path is unsafe or outside allowed directories
 */
export declare function sanitizePath(inputPath: string): string;
//# sourceMappingURL=sanitize-path.d.ts.map