opencode-swarm 7.162.0 → 7.163.0

package/dist/hooks/pr-workflow-gate.d.ts

@@ -2,13 +2,19 @@ import * as fsp from 'node:fs/promises';
 import { z } from 'zod';
 import { type CandidateSeverity, type FindingsSeverity, type RowFormatFamily } from '../background/candidate-contract.js';
 import { type LaneOutputArtifact } from '../background/lane-output-store.js';
-import { type BackgroundDelegationRecord, type BackgroundDelegationResult, type BackgroundDelegationWorkflowLaneFailureClass, type BackgroundDelegationWorkflowLaneRecovery, findByBatchId, sweepStaleDelegations } from '../background/pending-delegations.js';
+import { type BackgroundDelegationRecord, type BackgroundDelegationResult, type BackgroundDelegationWorkflowLaneRecovery, findByBatchId, sweepStaleDelegations } from '../background/pending-delegations.js';
 import { PR_REVIEW_BASE_DIMENSION_IDS, type PrReviewLaneResultEnvelope, type PrReviewRiskImpact, type PrReviewRiskTag } from '../background/pr-review-contract.js';
 import { type PrReviewInlineTriggerRow } from '../background/pr-review-trigger-contract.js';
 import { type RevisionDigestResult, resolveCommitCountSince, resolveCommitCountSinceAsync, resolveCurrentGitHead, resolveCurrentGitHeadAsync, resolveCurrentLocalHeadRefAsync, resolveCurrentUpstreamPushTarget, resolveCurrentUpstreamPushTargetAsync, resolveCurrentUpstreamRemoteRef, resolveExactRemoteBranchHead, resolveExactRemoteBranchHeadAsync, resolveIsExactSingleChildCommit, resolveIsExactSingleChildCommitAsync, resolveIsWorkingTreeClean, resolveIsWorkingTreeCleanAsync, resolvePrReviewDiffStats, resolvePrReviewDiffStatsAsync, resolvePrWorkflowRevisionDigest, resolvePrWorkflowRevisionDigestDetailed, resolveRemoteRefsContainingHead, resolveRemoteRefsContainingHeadAsync, resolveRemoteUrlIdentity, resolveRemoteUrlIdentityAsync } from '../background/workspace-snapshot.js';
 import { type PrReviewResilienceConfig } from '../config/schema.js';
 import { classifyPrWorkflowGitState, type PrWorkflowGitState } from '../git/pr-workflow-state.js';
-import { classifyPrReviewCircuitSignal, type PrReviewCircuitLegacyRecord, type PrReviewCircuitRecordV2 } from './pr-review-resilience-circuit.js';
+import { classifyPrReviewCircuitSignal, type PrReviewCircuitLegacyRecord, type PrReviewCircuitRecordV2, type PrReviewResiliencePolicyRecord, resolvePrReviewResiliencePolicy } from '../pr-review/circuit.js';
+import { type PrReviewDimensionCancellationRecord, type PrReviewPartialBaseCoverageRecord, type PrReviewReportVerdict, type PrReviewTerminalCoverageSettlement } from '../pr-review/completion.js';
+import { type PrReviewComposablePhase, type PrReviewPhaseComposition, parseCriticVerdict } from '../pr-review/legacy-transcript-adapter.js';
+import { withPrWorkflowCheckoutMutationLock, workflowCheckoutMutationLockRelativePath, workflowGateStateLockRelativePath, workflowGateStateRelativePath } from '../pr-review/persistence.js';
+export type { PrReviewDimensionCancellationRecord, PrReviewDimensionTerminalState, PrReviewPartialBaseCoverageRecord, PrReviewPartialBaseCoverageRecordV1, PrReviewPartialBaseCoverageRecordV2, PrReviewReportVerdict, PrReviewTerminalCoverageKind, PrReviewTerminalCoverageSettlement, PrReviewUnresolvedDimensionRecord, } from '../pr-review/completion.js';
+export { allowedPrReviewReportVerdicts, normalizePrReviewPartialBaseCoverageRecord, PR_REVIEW_REPORT_VERDICTS, readPrReviewTerminalCoverageForReport, rollbackPrReviewPartialBaseCoverageAdmission, } from '../pr-review/completion.js';
+export { ensurePrWorkflowSafeParentDirectory, PrWorkflowCheckoutMutationTimeoutError, prWorkflowSessionFileStem, withPrWorkflowCheckoutMutationLock, writePrWorkflowAtomicJson, } from '../pr-review/persistence.js';
 /**
  * Re-exported for compatibility: the canonical six-dimension list is owned by
  * the PR-review contract module (issue #2383 single-source rule; a
@@ -180,15 +186,6 @@ interface PrReviewBaseDispatchRecord {
     }>;
     validatedAt: string;
 }
-interface PrReviewResiliencePolicyRecord {
-    enabled: boolean;
-    canaryProbeMs: number;
-    statusProbeTimeoutMs: number;
-    correlatedFailureThreshold: number;
-    maxRetryAttemptsAfterInitial: number;
-    /** Issue #2382. Optional: policies persisted before the field existed parse unchanged. */
-    circuitOpenDurationMs?: number;
-}
 interface PrReviewResilienceAttemptRecord {
     attempt: 0 | 1 | 2;
     targetDimensions: PrReviewBaseDimensionId[];
@@ -563,78 +560,6 @@ export interface PrWorkflowGateState {
     prFeedbackRebindCount?: number;
     prFeedbackScopes?: PrFeedbackScopeDeclarationRecord[];
 }
-/**
- * Normalized terminal state of one canonical base dimension (issue #2383).
- * Every dimension ends in exactly one of these; completion requires every
- * LAUNCHED lane to be terminal (COVERED/FAILED) or explicitly cancelled, with
- * no in-flight lane and no late result creditable to the active generation.
- */
-export type PrReviewDimensionTerminalState = 'COVERED' | 'FAILED' | 'CANCELLED' | 'NOT_LAUNCHED';
-/** Gate-derived per-dimension terminal evidence for an unresolved dimension. */
-export interface PrReviewUnresolvedDimensionRecord {
-    dimension: PrReviewBaseDimensionId;
-    terminalState: 'FAILED' | 'CANCELLED' | 'NOT_LAUNCHED';
-    reasonKind: 'lane_failure' | 'cancelled' | 'not_launched';
-    failureClass?: BackgroundDelegationWorkflowLaneFailureClass;
-    terminalEventId?: string;
-    /** Contributing lane/batch identity, when available. */
-    batchId?: string;
-    laneId?: string;
-    /**
-     * Bounded safe detail derived from the failure-class vocabulary — never
-     * lane output, prompts, or secrets.
-     */
-    safeDetail?: string;
-}
-/** v2 terminal-settlement disclosure (issue #2383). The ONLY shape new writers emit. */
-export interface PrReviewPartialBaseCoverageRecordV2 {
-    schemaVersion: 2;
-    runId: string;
-    prHeadSha: string;
-    revisionDigest: string;
-    unresolvedDimensions: PrReviewUnresolvedDimensionRecord[];
-    admittedAt: string;
-}
-/**
- * Legacy v1 disclosure (pre-#2383): singular `missingDimension` with a typed
- * terminal failure. Read-only — normalized to the v2 in-memory view at the
- * single read boundary; never rewritten on disk.
- */
-export interface PrReviewPartialBaseCoverageRecordV1 {
-    runId: string;
-    prHeadSha: string;
-    revisionDigest: string;
-    missingDimension: PrReviewBaseDimensionId;
-    failureClass: BackgroundDelegationWorkflowLaneFailureClass;
-    terminalEventId: string;
-    admittedAt: string;
-}
-export type PrReviewPartialBaseCoverageRecord = PrReviewPartialBaseCoverageRecordV2 | PrReviewPartialBaseCoverageRecordV1;
-/** Terminal report kind of an N-of-6 settlement (issue #2383). */
-export type PrReviewTerminalCoverageKind = 'COMPLETE' | 'PARTIAL' | 'NO_COVERAGE';
-/** Controller-declared terminal verdict for a PR_REVIEW completion (issue #2383). */
-export declare const PR_REVIEW_REPORT_VERDICTS: readonly ["APPROVE", "REQUEST_CHANGES", "INCOMPLETE"];
-export type PrReviewReportVerdict = (typeof PR_REVIEW_REPORT_VERDICTS)[number];
-/**
- * Verdicts a terminal report may carry by coverage kind (issue #2383):
- * PARTIAL may only request changes or declare itself incomplete; NO_COVERAGE
- * is a forced INCOMPLETE operational report. Neither may ever APPROVE or
- * claim a full review.
- */
-export declare function allowedPrReviewReportVerdicts(kind: PrReviewTerminalCoverageKind): readonly PrReviewReportVerdict[];
-export interface PrReviewTerminalCoverageSettlement {
-    kind: PrReviewTerminalCoverageKind;
-    coveredDimensions: PrReviewBaseDimensionId[];
-    unresolvedDimensions: PrReviewUnresolvedDimensionRecord[];
-    /** False while any dimension still has a live (in-flight) lane. */
-    allLaunchedTerminal: boolean;
-}
-/** Per-dimension explicit cancellation, written by armed recovery (issue #2383). */
-export interface PrReviewDimensionCancellationRecord {
-    reason: string;
-    cancelledAt: string;
-    source: 'armed_recovery';
-}
 /**
  * Bound on the PR_FEEDBACK inventory-amendment audit ledger (issue #2242 R3).
  *
@@ -646,12 +571,6 @@ export interface PrReviewDimensionCancellationRecord {
  * instead.
  */
 export declare const MAX_PR_FEEDBACK_INVENTORY_AMENDMENTS = 128;
-/**
- * Normalize any disclosure record to the v2 in-memory view. A legacy v1
- * record maps to exactly one FAILED entry; the durable file is never
- * rewritten (its digest stays bound to the original bytes).
- */
-export declare function normalizePrReviewPartialBaseCoverageRecord(record: PrReviewPartialBaseCoverageRecord): PrReviewPartialBaseCoverageRecordV2;
 /**
  * One appended PR_FEEDBACK inventory entry (issue #2242 R3). `batch` groups the
  * entries appended by a single `declarePrFeedbackInventory` call so an auditor
@@ -1057,7 +976,6 @@ export declare class PrReviewResilienceRetryExhaustedError extends Error {
     readonly code: "PR_REVIEW_RESILIENCE_RETRY_EXHAUSTED";
     constructor(message: string);
 }
-declare function snapshotPrReviewResiliencePolicy(policy?: PrReviewResilienceConfig): PrReviewResiliencePolicyRecord;
 declare function effectivePrReviewResiliencePolicy(state: PrWorkflowGateState, requestedPolicy?: PrReviewResilienceConfig): PrReviewResiliencePolicyRecord;
 interface EnforcePrReviewBaseDimensionsOptions {
     batchId: string;
@@ -1071,29 +989,16 @@ interface EnforcePrReviewBaseDimensionsOptions {
 export declare function enforcePrReviewBaseDimensions(directory: string, sessionID: string, lanes: readonly PrWorkflowLaneSpec[], options: EnforcePrReviewBaseDimensionsOptions): Promise<PrWorkflowGateState>;
 export declare function rollbackPrReviewBaseAdmissionIfUnlaunched(directory: string, sessionID: string, batchId: string, contractRetry?: boolean): Promise<boolean>;
 declare function minimumConsolidatedLaneCover(sets: ReadonlyArray<readonly string[]>): number;
-export declare function admitPrReviewPartialBaseCoverage(directory: string, sessionID: string, runId: string, unresolvedDimensions: readonly PrReviewBaseDimensionId[]): Promise<PrWorkflowGateState>;
-/**
- * Undo a newly admitted partial-base disclosure when the findings checkpoint
- * cannot be completed. The compare-and-clear checks keep a stale writer from
- * deleting a disclosure that another writer has already committed.
- */
-export declare function rollbackPrReviewPartialBaseCoverageAdmission(directory: string, sessionID: string, options: {
-    runId: string;
-    boundary: 'post_explorer' | 'post_reviewer' | 'post_critic';
-    relativePath: string;
-    digest: string;
-}): Promise<boolean>;
 /**
- * Validate durable terminal N-of-6 coverage evidence (issue #2383).
- *
- * Returns the settlement: COMPLETE when all six dimensions are covered, or
- * PARTIAL / NO_COVERAGE when an admitted, still-accurate disclosure exactly
- * matches the currently derived terminal settlement. Throws while any
- * unresolved dimension still has a live lane, or when the disclosure has been
- * invalidated by later evidence (e.g. a late success landing on the same
- * revision) — the disclosure is immutable, so such a run must re-settle or
- * restart rather than silently re-crediting.
+ * Issue #2385: the coverage-disclosure admission/settlement state machine now
+ * lives in `src/pr-review/completion.ts`, which the gate feeds through the
+ * bound completion-helper seam (bound at module init below). The gate
+ * re-exposes the two state-returning entry points with their original
+ * full-state signatures: every state object the boundary returns was read and
+ * written through this gate's own bound readers and codec, so the widening
+ * cast is representation-preserving.
  */
+export declare function admitPrReviewPartialBaseCoverage(directory: string, sessionID: string, runId: string, unresolvedDimensions: readonly PrReviewBaseDimensionId[]): Promise<PrWorkflowGateState>;
 export declare function assertPrReviewBaseCoverageSettled(directory: string, sessionID: string, gateContext?: PrReviewGateContext): Promise<{
     state: PrWorkflowGateState;
     settlement: PrReviewTerminalCoverageSettlement & {
@@ -1357,24 +1262,6 @@ export declare function validatePrFeedbackScopeBinding(directory: string, bindin
 }): Promise<boolean>;
 export declare function enforcePrWorkflowToolBefore(directory: string, sessionID: string, toolName: string, args: Record<string, unknown> | undefined, generatedAgentNames?: readonly string[], callID?: string): Promise<void>;
 /** Validate the terminal PR workflow contract before removing its durable gate. */
-/**
- * Read-only terminal-coverage projection for the completion report surface
- * (issue #2383). Pure derivation over the CURRENT state; returns null when no
- * active PR_REVIEW gate exists. The completion tool reads this BEFORE the
- * terminal clear so the response carries the truthful settlement summary.
- */
-export declare function readPrReviewTerminalCoverageForReport(directory: string, sessionID: string): Promise<{
-    kind: PrReviewTerminalCoverageKind;
-    coveredDimensions: PrReviewBaseDimensionId[];
-    unresolvedDimensions: Array<{
-        dimension: PrReviewBaseDimensionId;
-        terminal_state: PrReviewUnresolvedDimensionRecord['terminalState'];
-        reason_kind: PrReviewUnresolvedDimensionRecord['reasonKind'];
-        failure_class?: BackgroundDelegationWorkflowLaneFailureClass;
-    }>;
-    liveDimensions: PrReviewBaseDimensionId[];
-    allowedVerdicts: readonly PrReviewReportVerdict[];
-} | null>;
 /**
  * Read-only identity binding for reviewer re-entry authorization (issue
  * #2383). Returns the exact active-session PR_REVIEW identity a one-use
@@ -1401,10 +1288,7 @@ export declare const _test_exports: {
     extractCandidateIds: typeof extractCandidateIds;
     parseCanonicalCandidateRows: typeof parseCanonicalCandidateRows;
     resolvePrReviewRowFamily: typeof resolvePrReviewRowFamily;
-    pipeFieldsCapped: typeof pipeFieldsCapped;
     boundPublicationDiagnostic: typeof boundPublicationDiagnostic;
-    indexVerdictRows: typeof indexVerdictRows;
-    reviewerVerdictRowDigest: typeof reviewerVerdictRowDigest;
     workflowGateStateRelativePath: typeof workflowGateStateRelativePath;
     workflowGateStateLockRelativePath: typeof workflowGateStateLockRelativePath;
     workflowCheckoutMutationLockRelativePath: typeof workflowCheckoutMutationLockRelativePath;
@@ -1427,8 +1311,8 @@ export declare const _test_exports: {
     beforeSafeDirectoryCreate: ((parentPath: string, nextPath: string) => Promise<void>) | undefined;
     beforeAtomicTempWrite: (() => Promise<void>) | undefined;
     beforeAtomicRename: (() => Promise<void>) | undefined;
-    openCheckoutLock: typeof openCheckoutLockFile;
-    removeCheckoutLock: typeof removeCheckoutLockFile;
+    openCheckoutLock: (lockPath: string) => ReturnType<typeof fsp.open>;
+    removeCheckoutLock: (lockPath: string) => Promise<void>;
     checkoutMutationActionTimeoutMs: number;
     classifyPrWorkflowGitStateAsync: typeof classifyPrWorkflowGitState;
     /**
@@ -1472,7 +1356,7 @@ export declare const _test_exports: {
      * so `_test_exports` is the right seam (no `mock.module` needed).
      */
     effectivePrReviewResiliencePolicy: typeof effectivePrReviewResiliencePolicy;
-    snapshotPrReviewResiliencePolicy: typeof snapshotPrReviewResiliencePolicy;
+    snapshotPrReviewResiliencePolicy: typeof resolvePrReviewResiliencePolicy;
     resolveCurrentGitHead: typeof resolveCurrentGitHead;
     resolveCurrentGitHeadAsync: typeof resolveCurrentGitHeadAsync;
     resolveCurrentUpstreamPushTarget: typeof resolveCurrentUpstreamPushTarget;
@@ -1531,12 +1415,6 @@ export declare const _test_exports: {
     resolveRemoteRefsContainingHead: typeof resolveRemoteRefsContainingHead;
     resolveRemoteRefsContainingHeadAsync: typeof resolveRemoteRefsContainingHeadAsync;
     parseCriticVerdict: typeof parseCriticVerdict;
-    /**
-     * Exact production verdict-row analysis and item composition parsers. Exposed
-     * so the assignment-boundary regression can prove both paths remain linear.
-     */
-    analyzePrReviewVerdictRowContract: typeof analyzePrReviewVerdictRowContract;
-    parseLaneItemVerdicts: typeof parseLaneItemVerdicts;
     /**
      * Read-only view of the item-keyed composition for one session, including
      * the diagnostics that settlement only logs (abandoned declared lanes,
@@ -1571,7 +1449,7 @@ export declare const _test_exports: {
      * micro-sweep and trigger-ledger prerequisites those entry points require.
      */
     derivePrReviewCandidateInventory: (directory: string, sessionID: string) => Promise<string[]>;
-    isProcessAlive: typeof isProcessAlive;
+    isProcessAlive: (pid: number) => boolean;
     isSafeStandaloneGitCommit: typeof isSafeStandaloneGitCommit;
     rename: typeof fsp.rename;
     nowMs: () => number;
@@ -1686,35 +1564,6 @@ interface CandidateArtifactParseResult {
 declare function resolvePrReviewRowFamily(workflowLane: string | undefined, mode?: string): RowFormatFamily;
 declare function parseCanonicalCandidateRows(text: string, fallbackFamily: RowFormatFamily): CandidateArtifactParseResult;
 declare function extractCandidateIds(text: string, fallbackFamily: RowFormatFamily, scopeToLanes?: readonly string[]): string[];
-type PrReviewComposablePhase = 'reviewer' | 'critic';
-/** One item's admitted verdict plus the lane provenance that admitted it. */
-interface PrReviewItemClaim {
-    batchId: string;
-    laneId: string;
-    workflowLane: string;
-    /** Reviewer classification, or critic status. */
-    classification: string;
-    severity: string;
-    /**
-     * Typed risk metadata from the reviewer row (issue #2383). Reviewer claims
-     * only; absent on critic claims, which never re-assess routing risk.
-     */
-    riskImpact?: PrReviewRiskImpact;
-    riskTags?: PrReviewRiskTag[];
-    /**
-     * sha256 of the full canonical `[REVIEWED]` row this claim was parsed from.
-     * Reviewer claims only — this is what a critic batch binds to per item.
-     */
-    rowDigest?: string;
-}
-interface PrReviewPhaseComposition {
-    /** Item id -> winning claim. Most recent successful lane per item wins. */
-    claims: Map<string, PrReviewItemClaim>;
-    requiredInventory: string[];
-    unclaimed: string[];
-    contributingBatchIds: string[];
-    diagnostics: string[];
-}
 /**
  * **B1 invariant — the accounting defect class's most dangerous recurrence.**
  *
@@ -1793,70 +1642,6 @@ export declare function validatePrReviewDiscoveryLaneCompletion(input: PrReviewD
 export declare function validatePrWorkflowTransportRecovery(input: PrWorkflowTransportRecoveryValidationInput): Promise<PrWorkflowTransportRecoveryValidationResult>;
 /** Require at least one semantically valid discovery row or CLEAN attestation. */
 export declare function prReviewDiscoveryArtifactCoversLane(text: string, expectedWorkflowLane: string, ownedWorkflowLanes?: readonly string[], mode?: string): boolean;
-interface IndexedVerdictRows {
-    markerRows: string[][];
-    rowsByItemId: Map<string, string[][]>;
-    recoveries: Array<{
-        marker: '[REVIEWED]' | '[CRITIC]';
-        itemId: string;
-        recovery: 'legacy-fidelity-safe' | 'legacy-lossy';
-    }>;
-}
-declare function indexVerdictRows(text: string, marker: '[REVIEWED]' | '[CRITIC]'): IndexedVerdictRows;
-/**
- * Digest of the FULL canonical reviewer row, not the classification/severity
- * pair a reviewer verdict projects to. Only 2 of the 12 required fields survive
- * that projection, so a tuple binding would still match a row whose evidence,
- * file:line and root cause all changed. Fields are joined on NUL, which
- * `pipeFields` can never produce, so no field boundary is forgeable.
- */
-declare function reviewerVerdictRowDigest(fields: readonly string[]): string;
-/**
- * Per-item verdicts an artifact actually carries, as a map rather than a
- * boolean. This is the granularity the composition needs: one unparseable item
- * must not discard its healthy siblings in the same lane.
- */
-declare function parseLaneItemVerdicts(text: string, itemIds: readonly string[], phase: PrReviewComposablePhase, reviewerClaims?: ReadonlyMap<string, PrReviewItemClaim>): Map<string, {
-    classification: string;
-    severity: string;
-    riskImpact?: PrReviewRiskImpact;
-    riskTags?: PrReviewRiskTag[];
-    rowDigest?: string;
-}>;
-/** Exact assigned-row contract used by both normal and recovered collection. */
-declare function analyzePrReviewVerdictRowContract(text: string, itemIds: readonly string[], phase: PrReviewComposablePhase, reviewerClaims?: ReadonlyMap<string, PrReviewItemClaim>): {
-    ok: boolean;
-    expected: string;
-    actual: string;
-    recoveries: IndexedVerdictRows['recoveries'];
-};
-declare function parseCriticVerdict(text: string, itemId: string, reviewerSeverity?: string): {
-    status: string;
-    severity: string;
-} | null;
-/**
- * `pipeFields` capped at the row's canonical field count: separators beyond the
- * expected count merge back into the trailing (free-text) field. Verdict rows
- * ([REVIEWED], [CRITIC], [FEEDBACK-VERIFIED]) carry prose evidence in their
- * last field, and prose containing literal pipes (regex text, `,;|`, shell
- * snippets) otherwise splits the row past its strict field-count check and the
- * whole verdict becomes unparseable. Deterministic: the enumerated leading
- * fields are never merged.
- */
-declare function pipeFieldsCapped(line: string, expectedFieldCount: number): string[];
-declare function workflowCheckoutMutationLockRelativePath(): string;
-declare function openCheckoutLockFile(lockPath: string): Promise<fsp.FileHandle>;
-declare function removeCheckoutLockFile(lockPath: string): Promise<void>;
-/** A bounded checkout-mutation refusal that never permits unsafe late overlap. */
-export declare class PrWorkflowCheckoutMutationTimeoutError extends Error {
-    readonly phase: 'queue' | 'action';
-    readonly code: "PR_WORKFLOW_CHECKOUT_MUTATION_TIMEOUT";
-    readonly retryable: false;
-    constructor(phase: 'queue' | 'action');
-}
-/** Serialize project-wide checkout mutations before any session state lock. */
-export declare function withPrWorkflowCheckoutMutationLock<T>(directory: string, action: () => Promise<T>): Promise<T>;
-declare function isProcessAlive(pid: number): boolean;
 /**
  * Upper bound on the length of ONE quoted schema issue.
  *
@@ -1916,13 +1701,3 @@ export interface PrWorkflowGateRecoveryRead {
  * A salvaged view is never written to the tracked-state cache.
  */
 export declare function readPrWorkflowGateStateForRecovery(directory: string, sessionID: string): Promise<PrWorkflowGateRecoveryRead | null>;
-declare function workflowGateStateLockRelativePath(sessionID: string): string;
-declare function workflowGateStateRelativePath(sessionID: string): string;
-export declare function prWorkflowSessionFileStem(sessionID: string): string;
-export declare function ensurePrWorkflowSafeParentDirectory(directory: string, filePath: string): Promise<string>;
-/**
- * Write a PR-workflow artifact with the gate's Windows-safe atomic persistence
- * contract. Checkout-preparation receipts must survive the same transient
- * rename contention as canonical gate state.
- */
-export declare function writePrWorkflowAtomicJson(directory: string, filePath: string, value: unknown): Promise<void>;