Module promote 

Workspace promotion with platform-specific hardening.

Unix checks and acts through a held directory descriptor, walking relative paths with O_NOFOLLOW | O_DIRECTORY; an ancestor swap cannot redirect a write. Native Windows supports the explicitly reduced-isolation release path with reparse-point checks and write-through replacement, but does not claim the same descriptor-relative race guarantee (Gate L).

Structs

TargetDir

The parent directory of a promotion target, held open, plus the final file name. All reads and writes for the target go through this pair.

WorkspaceRoot

A workspace root held open as a directory descriptor.