/**
 * Portable paths for `files:` and `test-run:` evidence atoms (T12476).
 *
 * A project is identified by its `project_id` (ADR-094); its path is only a
 * per-device hint. Evidence that stores an absolute path therefore breaks the
 * moment the checkout moves (another device, another OS, a rename): the
 * re-validation at `cleo complete` looks for `/mnt/projects/x/src/a.ts` and
 * reports "File removed since verify" for a file that is present, unchanged,
 * under the new root.
 *
 * Atoms therefore record, next to the path as supplied, the ABSOLUTE file
 * that was hashed (`resolvedPath`). Re-validation reads that file whatever
 * directory `cleo complete` runs from; a relative form would be re-resolved
 * against the completing process's tree and could hash a different copy. A
 * move is handled only at re-validation, when that absolute path is gone:
 * {@link rebaseLegacyEvidencePath} maps it through a vanished, recorded
 * checkout root of this project onto the live root.
 *
 * Rebasing never decides validity. It only chooses WHICH bytes to hash;
 * the caller still compares them against the sha256 captured at verify time,
 * so a rebased path pointing at different content fails exactly as a modified
 * file does.
 *
 * @task T12476
 * @epic T12468
 * @adr ADR-094
 */
import type { EvidenceAtom, Task } from '@cleocode/contracts';
/**
 * Every evidence atom recorded on a task, across all gates — what worktree
 * disposal must not destroy (T13696).
 *
 * @param task - The task whose verification evidence to flatten.
 * @returns The atoms, empty when nothing was recorded.
 *
 * @task T13696
 */
export declare function taskEvidenceAtoms(task: Pick<Task, 'verification'>): EvidenceAtom[];
/**
 * Map a legacy absolute evidence path onto the live project root.
 *
 * Rebasing happens ONLY through a recorded former checkout root of THIS
 * project that no longer exists. There is no tail-matching heuristic: a file
 * that moved or vanished inside a project that did NOT move is reported
 * removed, never re-pointed at some other file that happens to share a name
 * or a suffix.
 *
 * Returns `null` unless all of these hold:
 *
 * - the path is absolute, does not exist, and has no `.` / `..` segments;
 * - a recorded root that is gone, and neither is nor nests with a live root,
 *   contains the path;
 * - the same relative position exists under a live root, and its realpath
 *   stays inside that live root.
 *
 * The result is a candidate, not a verdict: the caller must still compare
 * the bytes it reads against the recorded sha256.
 *
 * @param path - Path as stored in the atom.
 * @param liveRoots - Live project roots (execution root first, store root second).
 * @param recordedRoots - Checkout roots recorded for this project in the registry.
 * @returns The absolute rebased path under a live root, or `null`.
 * @example
 * ```ts
 * // Project moved from /mnt/projects/app to /home/me/app:
 * rebaseLegacyEvidencePath('/mnt/projects/app/src/a.ts', ['/home/me/app'], ['/mnt/projects/app']);
 * // → '/home/me/app/src/a.ts'
 * ```
 * @task T12476
 */
export declare function rebaseLegacyEvidencePath(path: string, liveRoots: readonly string[], recordedRoots: readonly string[]): string | null;
/**
 * Former checkout roots recorded for the project at `storeRoot`.
 *
 * Read from the device-local path map (`nexus_project_paths`) by the
 * project's portable id. Best-effort: a project without a valid
 * `.cleo/project-id`, or a registry that cannot be opened, yields `[]`, and
 * no rebase happens (there is no tail-matching fallback).
 *
 * @param storeRoot - The CLEO project root.
 * @returns Absolute checkout roots of this project other than `storeRoot`.
 * @example
 * ```ts
 * const oldRoots = await loadRecordedProjectRoots(projectRoot);
 * ```
 * @task T12476
 */
export declare function loadRecordedProjectRoots(storeRoot: string): Promise<string[]>;
//# sourceMappingURL=evidence-paths.d.ts.map