/**
 * Checks if a path is allowed under any of the allowedRoots.
 * - Normalizes and resolves symlinks.
 * - Prevents traversal outside allowedRoots.
 */
export declare function isPathAllowed(path: string, allowedRoots: string[]): boolean;