opencode-swarm 7.157.0 → 7.158.0

package/dist/cli/pr-review-reentry-authorization-25dep81m.js

@@ -0,0 +1,299 @@
+// @bun
+import {
+  PrReviewRunIdSchema,
+  prWorkflowSessionFileStem,
+  readPrReviewReentryBindingContext
+} from "./index-rac2gkvr.js";
+import"./index-z54qw70y.js";
+import"./index-rc93mm6e.js";
+import"./index-rd324153.js";
+import"./index-bv24pbaj.js";
+import"./index-7s1hmrfh.js";
+import"./index-txdagbh7.js";
+import"./index-134d35c1.js";
+import"./index-nj6rmyeh.js";
+import"./index-y3hdwh66.js";
+import"./index-vwx0by4y.js";
+import"./index-5tchehv7.js";
+import"./index-70ha9e09.js";
+import"./index-c8s9a3zh.js";
+import"./index-9ss2m4rs.js";
+import"./index-x4ftmdha.js";
+import"./index-zsrtt42s.js";
+import"./index-c57cyrwn.js";
+import"./index-3f7hqtgg.js";
+import"./index-8fqb0ynp.js";
+import"./index-dmfbmnp7.js";
+import"./index-pfnj5pvs.js";
+import"./index-rtry5xyf.js";
+import"./index-fwe1wh6r.js";
+import"./index-a1884hh4.js";
+import"./index-yfbp4q09.js";
+import"./index-ddszzne4.js";
+import"./index-nvta6kcv.js";
+import"./index-6xxpwk5x.js";
+import"./index-nwkr6tvv.js";
+import"./index-556ja8an.js";
+import"./index-4fwbbad3.js";
+import"./index-b43rt5ph.js";
+import"./index-q7sjgr1y.js";
+import"./index-x71shq8j.js";
+import"./index-f036tggv.js";
+import"./index-gm10kvne.js";
+import"./index-gprxjmm7.js";
+import"./index-n832052r.js";
+import {
+  validateSwarmPath
+} from "./index-dtn0pne5.js";
+import"./index-z6xqpmqg.js";
+import"./index-r3mvsbtq.js";
+import"./index-663wnh64.js";
+import"./index-f776m4r5.js";
+import"./index-9e6fdz2h.js";
+import"./index-4rhhvd1a.js";
+import"./index-yt75r1er.js";
+import"./index-zjygnfay.js";
+import"./index-ae75rja9.js";
+import"./index-5zgf140g.js";
+import"./index-h52hs4e9.js";
+import"./index-bk5tah7q.js";
+import"./index-zcmwwp1x.js";
+import"./index-xagq35tf.js";
+import"./index-ed5ykebp.js";
+import"./index-h1g8w4v0.js";
+import {
+  require_proper_lockfile
+} from "./index-7g4c7s5r.js";
+import {
+  exports_external,
+  init_zod
+} from "./index-bpmtbmy9.js";
+import"./index-zgwm4ryv.js";
+import {
+  __toESM
+} from "./index-a76rekgs.js";
+
+// src/hooks/pr-review-reentry-authorization.ts
+init_zod();
+var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
+import { randomUUID } from "crypto";
+import * as fsp from "fs/promises";
+import * as path from "path";
+var AUTHORIZATION_TTL_MS = 10 * 60 * 1000;
+var MAX_ACTIVE_AUTHORIZATIONS = 8;
+var MAX_PERSISTED_AUTHORIZATIONS = 32;
+var REENTRY_AUTHORIZATIONS_MAX_BYTES = 64 * 1024;
+var PrReviewReentryAuthorizationRecordSchema = exports_external.object({
+  schemaVersion: exports_external.literal(1),
+  authorizationId: exports_external.string().min(1).max(64),
+  sessionId: exports_external.string().min(1).max(256),
+  workflowInstanceId: exports_external.string().min(1).max(128).optional(),
+  runId: PrReviewRunIdSchema.optional(),
+  prHeadSha: exports_external.string().regex(/^[0-9a-f]{6,64}$/i),
+  revisionDigest: exports_external.string().min(1).max(256),
+  role: exports_external.enum(["reviewer", "test_engineer"]),
+  generation: exports_external.number().int().nonnegative(),
+  createdAt: exports_external.string().datetime(),
+  expiresAt: exports_external.string().datetime(),
+  consumedAt: exports_external.string().datetime().optional(),
+  consumedCallId: exports_external.string().min(1).max(128).optional()
+}).strict();
+var AuthorizationFileSchema = exports_external.object({
+  schemaVersion: exports_external.literal(1),
+  sessionId: exports_external.string().min(1).max(256),
+  authorizations: exports_external.array(PrReviewReentryAuthorizationRecordSchema).max(MAX_PERSISTED_AUTHORIZATIONS)
+}).strict();
+function reentryAuthorizationFilePath(directory, sessionID) {
+  const relative = path.join("pr-review", "reentry-authorizations", `${prWorkflowSessionFileStem(sessionID)}.json`);
+  return validateSwarmPath(directory, relative);
+}
+async function readAuthorizationFile(filePath) {
+  let raw;
+  try {
+    const stat2 = await fsp.stat(filePath);
+    if (!stat2.isFile() || stat2.size > REENTRY_AUTHORIZATIONS_MAX_BYTES) {
+      throw new Error("reentry authorization store is not a bounded regular file");
+    }
+    raw = await fsp.readFile(filePath, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT")
+      return null;
+    throw error;
+  }
+  const decoded = JSON.parse(raw);
+  const parsed = AuthorizationFileSchema.safeParse(decoded);
+  if (!parsed.success) {
+    throw new Error(`reentry authorization store is invalid: ${parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`).join("; ")}`);
+  }
+  return parsed.data;
+}
+var RENAME_RETRY_DELAYS_MS = [10, 25, 50, 100, 200];
+var RETRYABLE_RENAME_CODES = new Set(["EPERM", "EBUSY", "EACCES", "EEXIST"]);
+async function renameWithRetryAsync(tempPath, targetPath) {
+  let lastError;
+  for (let attempt = 0;attempt <= _internals.renameRetryDelaysMs.length; attempt++) {
+    try {
+      await _internals.renameImpl(tempPath, targetPath);
+      return;
+    } catch (err) {
+      lastError = err;
+      const code = err?.code;
+      if (!code || !RETRYABLE_RENAME_CODES.has(code))
+        throw err;
+      if (attempt < _internals.renameRetryDelaysMs.length) {
+        await new Promise((resolve) => setTimeout(resolve, _internals.renameRetryDelaysMs[attempt]));
+      }
+    }
+  }
+  throw lastError;
+}
+async function writeAuthorizationFile(filePath, file) {
+  const serialized = `${JSON.stringify(file, null, 2)}
+`;
+  if (Buffer.byteLength(serialized, "utf8") > REENTRY_AUTHORIZATIONS_MAX_BYTES) {
+    throw new Error("reentry authorization store exceeds its write bound");
+  }
+  await fsp.mkdir(path.dirname(filePath), { recursive: true });
+  const tempPath = path.join(path.dirname(filePath), `.${path.basename(filePath)}.${randomUUID()}.tmp`);
+  try {
+    await fsp.writeFile(tempPath, serialized, { encoding: "utf8", flag: "wx" });
+    await renameWithRetryAsync(tempPath, filePath);
+  } finally {
+    await fsp.rm(tempPath, { force: true }).catch(() => {
+      return;
+    });
+  }
+}
+function pruneAuthorizations(records, nowMs) {
+  const kept = [];
+  for (const record of [...records].sort((left, right) => right.createdAt.localeCompare(left.createdAt)).slice(0, MAX_PERSISTED_AUTHORIZATIONS)) {
+    if (record.consumedAt)
+      continue;
+    if (Date.parse(record.expiresAt) <= nowMs)
+      continue;
+    kept.push(record);
+  }
+  return kept;
+}
+var lf = import_proper_lockfile.default;
+async function withAuthorizationLock(filePath, write) {
+  await fsp.mkdir(path.dirname(filePath), { recursive: true });
+  const release = await lf.lock(path.dirname(filePath), {
+    lockfilePath: `${filePath}.lock`,
+    retries: { retries: 8, minTimeout: 10, maxTimeout: 100 },
+    stale: 1e4,
+    update: 1000,
+    realpath: false
+  });
+  try {
+    return await write();
+  } finally {
+    await release().catch(() => {
+      return;
+    });
+  }
+}
+async function issuePrReviewReentryAuthorization(directory, sessionID, request) {
+  const trimmedSession = sessionID.trim();
+  if (!trimmedSession) {
+    throw new Error("BLOCKED: re-entry authorization requires an active sessionID");
+  }
+  const binding = await readPrReviewReentryBindingContext(directory, trimmedSession);
+  if (!binding || binding.prHeadSha !== request.prHeadSha.toLowerCase()) {
+    throw new Error(`BLOCKED: re-entry authorization requires an active PR_REVIEW workflow bound to the declared head (active: ${binding?.prHeadSha ?? "(none)"})`);
+  }
+  if (request.runId && binding.runId && request.runId !== binding.runId) {
+    throw new Error("BLOCKED: re-entry authorization run does not match the active PR-review run");
+  }
+  const filePath = reentryAuthorizationFilePath(directory, trimmedSession);
+  return withAuthorizationLock(filePath, async () => {
+    const existing = await readAuthorizationFile(filePath);
+    const nowMs = Date.now();
+    const now = new Date(nowMs).toISOString();
+    const records = pruneAuthorizations(existing?.authorizations ?? [], nowMs);
+    const active = records.filter((record2) => !record2.consumedAt && record2.role === request.role && record2.generation === binding.generation);
+    if (active.length > 0) {
+      throw new Error(`BLOCKED: an unconsumed re-entry authorization for role "${request.role}" at generation ${binding.generation} already exists; use it (one immediate Task dispatch) before issuing another`);
+    }
+    if (records.length >= MAX_ACTIVE_AUTHORIZATIONS) {
+      throw new Error(`BLOCKED: re-entry authorization store is at its bound of ${MAX_ACTIVE_AUTHORIZATIONS} active authorizations`);
+    }
+    const record = {
+      schemaVersion: 1,
+      authorizationId: randomUUID(),
+      sessionId: trimmedSession,
+      ...binding.workflowInstanceId ? { workflowInstanceId: binding.workflowInstanceId } : {},
+      ...binding.runId ? { runId: binding.runId } : {},
+      prHeadSha: binding.prHeadSha,
+      revisionDigest: binding.revisionDigest,
+      role: request.role,
+      generation: binding.generation,
+      createdAt: now,
+      expiresAt: new Date(nowMs + AUTHORIZATION_TTL_MS).toISOString()
+    };
+    await writeAuthorizationFile(filePath, {
+      schemaVersion: 1,
+      sessionId: trimmedSession,
+      authorizations: [record, ...records]
+    });
+    return record;
+  });
+}
+async function consumePrReviewReentryAuthorization(directory, sessionID, request) {
+  const trimmedSession = sessionID.trim();
+  if (!trimmedSession)
+    return null;
+  const filePath = reentryAuthorizationFilePath(directory, trimmedSession);
+  try {
+    return await withAuthorizationLock(filePath, async () => {
+      const existing = await readAuthorizationFile(filePath);
+      if (!existing)
+        return null;
+      const nowMs = Date.now();
+      const records = pruneAuthorizations(existing.authorizations, nowMs);
+      const index = records.findIndex((record) => !record.consumedAt && record.role === request.role && record.sessionId === trimmedSession && Date.parse(record.expiresAt) > nowMs);
+      if (index < 0) {
+        if (records.length !== existing.authorizations.length) {
+          await writeAuthorizationFile(filePath, {
+            ...existing,
+            authorizations: records
+          });
+        }
+        return null;
+      }
+      const binding = await readPrReviewReentryBindingContext(directory, trimmedSession);
+      const candidate = records[index];
+      if (!binding || binding.prHeadSha !== candidate.prHeadSha || binding.revisionDigest !== candidate.revisionDigest || binding.generation !== candidate.generation || candidate.workflowInstanceId !== undefined && binding.workflowInstanceId !== candidate.workflowInstanceId || candidate.workflowInstanceId === undefined && binding.workflowInstanceId !== undefined) {
+        return null;
+      }
+      const consumed = {
+        ...candidate,
+        consumedAt: new Date(nowMs).toISOString(),
+        consumedCallId: request.callID
+      };
+      records[index] = consumed;
+      await writeAuthorizationFile(filePath, {
+        ...existing,
+        authorizations: records
+      });
+      return consumed;
+    });
+  } catch {
+    return null;
+  }
+}
+var _internals = {
+  AUTHORIZATION_TTL_MS,
+  MAX_ACTIVE_AUTHORIZATIONS,
+  reentryAuthorizationFilePath,
+  pruneAuthorizations,
+  renameImpl: (from, to) => fsp.rename(from, to),
+  renameRetryDelaysMs: RENAME_RETRY_DELAYS_MS,
+  renameWithRetryAsync,
+  writeAuthorizationFile
+};
+export {
+  issuePrReviewReentryAuthorization,
+  consumePrReviewReentryAuthorization,
+  _internals
+};

package/dist/cli/{pr-subscriptions-76vg2xya.js → pr-subscriptions-cgac3ydd.js}

@@ -14,12 +14,12 @@ import {
   sweepStale,
   unsubscribe,
   updateSnapshot
-} from "./index-91ybfvy2.js";
+} from "./index-x4ftmdha.js";
 import"./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
 import"./index-zjygnfay.js";
-import"./index-6sbx96v6.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";

package/dist/cli/{runner-eagt6gf8.js → runner-sj5sf36c.js}

@@ -3,12 +3,12 @@ import {
   _internals,
   createModelEvaluationExecutor,
   runEvaluation
-} from "./index-t0kxka8n.js";
-import"./index-ngn6jmad.js";
+} from "./index-z54qw70y.js";
+import"./index-7s1hmrfh.js";
 import"./index-txdagbh7.js";
 import"./index-r3mvsbtq.js";
-import"./index-xe6zbfps.js";
-import"./index-6sbx96v6.js";
+import"./index-h52hs4e9.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";

package/dist/cli/{scan-cursor-q3530gc8.js → scan-cursor-8acs9kwe.js}

@@ -4,15 +4,15 @@ import {
   alreadyCuratedThisGeneration,
   claimNextScanBatch,
   getScanStatus
-} from "./index-1dzy1j4v.js";
-import"./index-j3egsxa1.js";
+} from "./index-5tchehv7.js";
+import"./index-x71shq8j.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
 import"./index-ae75rja9.js";
-import"./index-b5xm177r.js";
-import"./index-xe6zbfps.js";
+import"./index-5zgf140g.js";
+import"./index-h52hs4e9.js";
 import"./index-bk5tah7q.js";
-import"./index-6sbx96v6.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";

package/dist/cli/{schema-5zc62306.js → schema-rjhassd0.js}

@@ -101,8 +101,8 @@ import {
   resolveGeneratedAgentRole,
   resolveGuardrailsConfig,
   stripKnownSwarmPrefix
-} from "./index-4w20thrc.js";
-import"./index-9r7gp6cp.js";
+} from "./index-f776m4r5.js";
+import"./index-yt75r1er.js";
 import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
 import"./index-bpmtbmy9.js";

package/dist/cli/{scope-persistence-fzqf115q.js → scope-persistence-jb1a5dzh.js}

@@ -23,18 +23,18 @@ import {
   tombstoneScopeBinding,
   writeScopeBindingToDisk,
   writeScopeToDisk
-} from "./index-n7gv8m7v.js";
-import"./index-79k7p589.js";
+} from "./index-nvta6kcv.js";
+import"./index-6xxpwk5x.js";
 import"./index-nwkr6tvv.js";
 import"./index-556ja8an.js";
-import"./index-2e60kmzg.js";
-import"./index-4w20thrc.js";
-import"./index-9r7gp6cp.js";
-import"./index-zjygnfay.js";
+import"./index-663wnh64.js";
+import"./index-f776m4r5.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
+import"./index-yt75r1er.js";
+import"./index-zjygnfay.js";
 import"./index-bk5tah7q.js";
-import"./index-6sbx96v6.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";

package/dist/cli/{skill-generator-kh1z90tm.js → skill-generator-frgppk1w.js}

@@ -33,30 +33,30 @@ import {
   sanitizeSlug,
   selectCandidateEntries,
   writeEvalStub
-} from "./index-n6ayyadp.js";
-import"./index-tvtvhjh0.js";
-import"./index-gpf3cjre.js";
+} from "./index-y3hdwh66.js";
+import"./index-dmfbmnp7.js";
+import"./index-pfnj5pvs.js";
 import"./index-rtry5xyf.js";
 import"./index-q7sjgr1y.js";
-import"./index-j3egsxa1.js";
-import"./index-3vqdt1sx.js";
-import"./index-q94gt4n9.js";
+import"./index-x71shq8j.js";
+import"./index-f036tggv.js";
+import"./index-gm10kvne.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-2e60kmzg.js";
-import"./index-4w20thrc.js";
-import"./index-9r7gp6cp.js";
-import"./index-zjygnfay.js";
+import"./index-663wnh64.js";
+import"./index-f776m4r5.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
+import"./index-yt75r1er.js";
+import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-b5xm177r.js";
-import"./index-xe6zbfps.js";
+import"./index-5zgf140g.js";
+import"./index-h52hs4e9.js";
 import"./index-bk5tah7q.js";
-import"./index-6sbx96v6.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";

package/dist/cli/{worktree-collision-ownership-2qxjtxt6.js → worktree-collision-ownership-f5sj6ffa.js}

@@ -6,24 +6,24 @@ import {
   WORKTREE_PROVISIONING_OWNER_LEASE_MS,
   removeWorktreeProvisioningOwner,
   scanWorktreeProvisioningOwnersForRecovery
-} from "./index-dwkrdpz2.js";
+} from "./index-8fqb0ynp.js";
 import {
   scanDelegationFallbacksForRecovery,
   scanDelegationsForRecovery
-} from "./index-12e2hztp.js";
+} from "./index-yfbp4q09.js";
 import"./index-ddszzne4.js";
 import"./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
 import {
   bunSpawn
 } from "./index-r3mvsbtq.js";
-import"./index-zjygnfay.js";
 import {
   init_git_executable,
   resolveGitExecutable
 } from "./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
-import"./index-6sbx96v6.js";
+import"./index-zjygnfay.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";

package/dist/cli/{worktree-isolation-40v34p0s.js → worktree-isolation-5b0w6bha.js}

@@ -21,61 +21,61 @@ import {
   sanitizeWorktreeTaskId,
   standardWorktreeByCallID,
   standardWorktreeSerializationSessions
-} from "./index-gk6wpq41.js";
-import"./index-t0kxka8n.js";
-import"./index-4kd1nqd2.js";
-import"./index-nd22bsnt.js";
-import"./index-93ymj3j5.js";
-import"./index-ngn6jmad.js";
+} from "./index-rac2gkvr.js";
+import"./index-z54qw70y.js";
+import"./index-rc93mm6e.js";
+import"./index-rd324153.js";
+import"./index-bv24pbaj.js";
+import"./index-7s1hmrfh.js";
+import"./index-txdagbh7.js";
 import"./index-134d35c1.js";
 import"./index-nj6rmyeh.js";
-import"./index-txdagbh7.js";
-import"./index-g0j2hnse.js";
-import"./index-1dzy1j4v.js";
+import"./index-y3hdwh66.js";
+import"./index-vwx0by4y.js";
+import"./index-5tchehv7.js";
 import"./index-70ha9e09.js";
 import"./index-c8s9a3zh.js";
 import"./index-9ss2m4rs.js";
-import"./index-91ybfvy2.js";
+import"./index-x4ftmdha.js";
 import"./index-zsrtt42s.js";
-import"./index-vbqssmbs.js";
-import"./index-dwkrdpz2.js";
-import"./index-n6ayyadp.js";
-import"./index-tvtvhjh0.js";
-import"./index-gpf3cjre.js";
+import"./index-c57cyrwn.js";
+import"./index-3f7hqtgg.js";
+import"./index-8fqb0ynp.js";
+import"./index-dmfbmnp7.js";
+import"./index-pfnj5pvs.js";
 import"./index-rtry5xyf.js";
-import"./index-61nkp124.js";
-import"./index-p0by16z8.js";
-import"./index-12e2hztp.js";
+import"./index-fwe1wh6r.js";
+import"./index-a1884hh4.js";
+import"./index-yfbp4q09.js";
 import"./index-ddszzne4.js";
-import"./index-3f7hqtgg.js";
-import"./index-n7gv8m7v.js";
-import"./index-79k7p589.js";
+import"./index-nvta6kcv.js";
+import"./index-6xxpwk5x.js";
 import"./index-nwkr6tvv.js";
 import"./index-556ja8an.js";
 import"./index-4fwbbad3.js";
 import"./index-b43rt5ph.js";
 import"./index-q7sjgr1y.js";
-import"./index-j3egsxa1.js";
-import"./index-3vqdt1sx.js";
+import"./index-x71shq8j.js";
+import"./index-f036tggv.js";
 import {
   resolveWorktreeIsolationConfig
-} from "./index-q94gt4n9.js";
+} from "./index-gm10kvne.js";
 import"./index-gprxjmm7.js";
 import"./index-n832052r.js";
 import"./index-dtn0pne5.js";
 import"./index-z6xqpmqg.js";
 import"./index-r3mvsbtq.js";
-import"./index-2e60kmzg.js";
-import"./index-4w20thrc.js";
-import"./index-9r7gp6cp.js";
-import"./index-zjygnfay.js";
+import"./index-663wnh64.js";
+import"./index-f776m4r5.js";
 import"./index-9e6fdz2h.js";
 import"./index-4rhhvd1a.js";
+import"./index-yt75r1er.js";
+import"./index-zjygnfay.js";
 import"./index-ae75rja9.js";
-import"./index-b5xm177r.js";
-import"./index-xe6zbfps.js";
+import"./index-5zgf140g.js";
+import"./index-h52hs4e9.js";
 import"./index-bk5tah7q.js";
-import"./index-6sbx96v6.js";
+import"./index-zcmwwp1x.js";
 import"./index-xagq35tf.js";
 import"./index-ed5ykebp.js";
 import"./index-h1g8w4v0.js";

package/dist/hooks/pr-review-reentry-authorization.d.ts

@@ -0,0 +1,97 @@
+import { z } from 'zod';
+/**
+ * Correlated one-use reviewer re-entry authorization (issue #2383).
+ *
+ * Replaces prompt-text inspection (`MODE: PR_REVIEW`) as the ONLY way a
+ * direct Task dispatch of `reviewer`/`test_engineer` may bypass the generic
+ * Stage-A task-workflow requirement. The PR workflow controller issues an
+ * authorization bound to the exact active session, workflow, run, base/head
+ * SHA, worktree revision digest, role, and gate generation; the Task
+ * delegation gate consumes it atomically, exactly once. Stale, cross-session,
+ * wrong-role, replayed, expired, or revision-drifted requests fail closed to
+ * the normal gating path.
+ *
+ * Persistence: `.swarm/pr-review/reentry-authorizations/<session-stem>.json`,
+ * guarded by a `proper-lockfile` lock (the same dependency the candidate
+ * sidecar store uses). Bounded: at most MAX_ACTIVE_AUTHORIZATIONS unconsumed
+ * authorizations per session; expired/unconsumed records are pruned on write.
+ */
+export type PrReviewReentryRole = 'reviewer' | 'test_engineer';
+export interface PrReviewReentryAuthorizationRecord {
+    schemaVersion: 1;
+    authorizationId: string;
+    sessionId: string;
+    workflowInstanceId?: string;
+    runId?: string;
+    prHeadSha: string;
+    revisionDigest: string;
+    role: PrReviewReentryRole;
+    generation: number;
+    createdAt: string;
+    expiresAt: string;
+    consumedAt?: string;
+    consumedCallId?: string;
+}
+declare const AuthorizationFileSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    sessionId: z.ZodString;
+    authorizations: z.ZodArray<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        authorizationId: z.ZodString;
+        sessionId: z.ZodString;
+        workflowInstanceId: z.ZodOptional<z.ZodString>;
+        runId: z.ZodOptional<z.ZodString>;
+        prHeadSha: z.ZodString;
+        revisionDigest: z.ZodString;
+        role: z.ZodEnum<{
+            reviewer: "reviewer";
+            test_engineer: "test_engineer";
+        }>;
+        generation: z.ZodNumber;
+        createdAt: z.ZodString;
+        expiresAt: z.ZodString;
+        consumedAt: z.ZodOptional<z.ZodString>;
+        consumedCallId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type AuthorizationFile = z.infer<typeof AuthorizationFileSchema>;
+declare function reentryAuthorizationFilePath(directory: string, sessionID: string): string;
+declare function renameWithRetryAsync(tempPath: string, targetPath: string): Promise<void>;
+declare function writeAuthorizationFile(filePath: string, file: AuthorizationFile): Promise<void>;
+/** Drop consumed/expired records past the retention bound; keep newest first. */
+declare function pruneAuthorizations(records: readonly PrReviewReentryAuthorizationRecord[], nowMs: number): PrReviewReentryAuthorizationRecord[];
+/**
+ * Issue a one-use authorization for the CURRENT active PR_REVIEW workflow.
+ * Fails when no active head-bound PR_REVIEW gate exists for the session, or
+ * when an unconsumed authorization for the same role and generation already
+ * exists (no stockpiling: issue, then immediately Task-dispatch the role).
+ */
+export declare function issuePrReviewReentryAuthorization(directory: string, sessionID: string, request: {
+    runId?: string;
+    prHeadSha: string;
+    role: PrReviewReentryRole;
+}): Promise<PrReviewReentryAuthorizationRecord>;
+/**
+ * Atomically consume the one active authorization for this session+role.
+ * Re-verifies the binding against the CURRENT PR_REVIEW gate state — any
+ * drift (mode change, head change, revision digest change, generation bump)
+ * fails closed to null, as does replay, expiry, cross-session use, or wrong
+ * role. Returns the consumed record on success.
+ */
+export declare function consumePrReviewReentryAuthorization(directory: string, sessionID: string, request: {
+    role: PrReviewReentryRole;
+    callID: string;
+}): Promise<PrReviewReentryAuthorizationRecord | null>;
+export declare const _internals: {
+    AUTHORIZATION_TTL_MS: number;
+    MAX_ACTIVE_AUTHORIZATIONS: number;
+    reentryAuthorizationFilePath: typeof reentryAuthorizationFilePath;
+    pruneAuthorizations: typeof pruneAuthorizations;
+    /** DI seam: the rename implementation (tests inject failure modes). */
+    renameImpl: (from: string, to: string) => Promise<void>;
+    /** DI seam: retry backoff schedule (tests shrink to avoid real sleeps). */
+    renameRetryDelaysMs: number[];
+    renameWithRetryAsync: typeof renameWithRetryAsync;
+    writeAuthorizationFile: typeof writeAuthorizationFile;
+};
+export {};