/**
 * Validate that a user-supplied name is safe for use as a filename.
 * Rejects path traversal, path separators, and OS-reserved characters.
 */
export declare function validateFilename(name: string): void;
/**
 * Validate that a name is a valid Enforce Script identifier.
 * Must start with a letter or underscore, followed by letters, digits, or underscores.
 */
export declare function validateEnforceIdentifier(name: string): void;
/**
 * Validate that a resolved path stays within the base directory.
 * Combines validateFilename + traversal check.
 */
export declare function safePath(basePath: string, ...segments: string[]): string;
/**
 * Validate a relative sub-path (which may contain slashes) stays within the base directory.
 * Used by project_read / project_write / project_browse for user-supplied relative paths.
 */
export declare function validateProjectPath(basePath: string, subPath: string): string;
//# sourceMappingURL=safe-path.d.ts.map