/**
 * @module validate
 * @description Input validation layer for CLI commands.
 * Guards against path traversal, control characters, and invalid resource IDs.
 */
/**
 * Validate and resolve an output path.
 * Prevents path traversal attacks (e.g., --output ../../etc/passwd).
 * Absolute paths are allowed (explicit user intent), but relative paths
 * containing ".." that escape the working directory are blocked.
 */
export declare function validateOutputPath(path: string, cwd?: string): string;
/**
 * Validate a resource ID (source-*, clip-*, track-*, effect-*).
 * Only allows alphanumeric characters, hyphens, and underscores.
 */
export declare function validateResourceId(id: string): string;
/**
 * Reject strings containing control characters (U+0000–U+001F, U+007F–U+009F).
 * Prevents terminal injection and other control-char exploits.
 */
export declare function rejectControlChars(input: string): string;
/**
 * Validate a media file path and check its extension against an allowlist.
 */
export declare function validateMediaFile(path: string, allowedExts: string[]): string;
/** Common media file extensions */
export declare const MEDIA_EXTS: {
    video: string[];
    audio: string[];
    image: string[];
    subtitle: string[];
};
