@webpieces/repo-workflow-core 0.4.909 → 0.4.911

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/repo-workflow-core",
-  "version": "0.4.909",
+  "version": "0.4.911",
   "description": "Shared repository branch, worktree, sync, and identity-stamp mechanics.",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -21,7 +21,7 @@
   "dependencies": {
     "inversify": "7.10.4",
     "reflect-metadata": "0.2.2",
-    "@webpieces/tooling-common": "0.4.909",
+    "@webpieces/tooling-common": "0.4.911",
     "tslib": "2.8.1"
   },
   "publishConfig": {

package/src/branch-mutation-log.d.ts

@@ -50,12 +50,12 @@ export declare class BranchMutationLog {
      *
      * Nothing is lost by keeping it local: under the `worktrees/<name>/` layout the log lives in the
      * PRIMARY clone, so it survives `git worktree remove`, and the whole history is one glob —
-     * `<primary>/.webpieces/worktrees/＊/logs/branch-mutations.log`.
+     * `<primary>/.webpieces-logs/worktrees/＊/logs/branch-mutations.log`.
      */
     branchMutationLogPath(root: string): string;
     /**
      * Append one tab-separated line per branch-mutation event to
-     * `.webpieces/logs/branch-mutations.log`. Swallows all errors — logging must NEVER block or fail
+     * `.webpieces-logs/logs/branch-mutations.log`. Swallows all errors — logging must NEVER block or fail
      * the workflow it is observing.
      */
     logBranchMutation(root: string, event: BranchMutationEvent): void;

package/src/branch-mutation-log.js

@@ -11,8 +11,8 @@ const tooling_common_1 = require("@webpieces/tooling-common");
 const to_error_1 = require("@webpieces/tooling-common/to-error");
 // The BRANCH-MUTATION log — an audit trail for every workflow verb that RENAMES or MOVES branches.
 // Records START / each phase boundary / END-with-outcome so the next agent (or a human) can
-// reconstruct what the tooling did to the branches. Writes to `.webpieces/logs/branch-mutations.log`
-// (in a linked worktree: `.webpieces/worktrees/<name>/logs/`) — see LOGS_STATE_DIR for why every
+// reconstruct what the tooling did to the branches. Writes to `.webpieces-logs/logs/branch-mutations.log`
+// (in a linked worktree: `.webpieces-logs/worktrees/<name>/logs/`) — see LOGS_STATE_DIR for why every
 // webpieces log lives under `logs/` and no longer beside the non-log state in `hooks/`.
 // Lives in repo-workflow-core (shared by guards and pr-gate) so the pr-gate scripts can call it directly.
 const LOG_FILE = 'branch-mutations.log';
@@ -87,14 +87,14 @@ let BranchMutationLog = class BranchMutationLog {
      *
      * Nothing is lost by keeping it local: under the `worktrees/<name>/` layout the log lives in the
      * PRIMARY clone, so it survives `git worktree remove`, and the whole history is one glob —
-     * `<primary>/.webpieces/worktrees/＊/logs/branch-mutations.log`.
+     * `<primary>/.webpieces-logs/worktrees/＊/logs/branch-mutations.log`.
      */
     branchMutationLogPath(root) {
         return this.dotDir.logsFile(root, LOG_FILE);
     }
     /**
      * Append one tab-separated line per branch-mutation event to
-     * `.webpieces/logs/branch-mutations.log`. Swallows all errors — logging must NEVER block or fail
+     * `.webpieces-logs/logs/branch-mutations.log`. Swallows all errors — logging must NEVER block or fail
      * the workflow it is observing.
      */
     logBranchMutation(root, event) {

package/src/branch-mutation-log.js.map

@@ -1 +1 @@
-{"version":3,"file":"branch-mutation-log.js","sourceRoot":"","sources":["../../../../../packages/tooling/repo-workflow-core/src/branch-mutation-log.ts"],"names":[],"mappings":";;;AA4NA,sDAEC;AAGD,8CAEC;;AAnOD,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,8DAAuE;AACvE,iEAA6D;AAE7D,mGAAmG;AACnG,4FAA4F;AAC5F,qGAAqG;AACrG,iGAAiG;AACjG,wFAAwF;AACxF,0GAA0G;AAE1G,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AACxC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAC/C,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,mEAAmE;AACrG,MAAM,cAAc,GAAG,GAAG,CAAC;AAqB3B,0GAA0G;AAC1G,MAAa,mBAAmB;IAC5B,IAAI,CAAe;IACnB,KAAK,CAAgB;IACrB,UAAU,GAAW,EAAE,CAAC;IACxB,QAAQ,GAAW,EAAE,CAAC;IACtB,OAAO,GAAW,EAAE,CAAC;IACrB,OAAO,GAAW,EAAE,CAAC;IACrB,QAAQ,GAAY,KAAK,CAAC;IAC1B,aAAa,GAAa,EAAE,CAAC;IAC7B,OAAO,GAAW,EAAE,CAAC;IACrB,SAAS,GAAa,EAAE,CAAC;IACzB,+FAA+F;IAC/F,gGAAgG;IAChG,8FAA8F;IAC9F,yFAAyF;IACzF,GAAG,GAAW,EAAE,CAAC;IACjB,oGAAoG;IACpG,oGAAoG;IACpG,kGAAkG;IAClG,iGAAiG;IACjG,UAAU,GAAW,EAAE,CAAC;IACxB,wFAAwF;IACxF,oGAAoG;IACpG,8FAA8F;IAC9F,uGAAuG;IACvG,YAAY,GAAW,EAAE,CAAC;IAE1B,YAAY,IAAkB,EAAE,KAAoB;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AA/BD,kDA+BC;AAED,iIAAiI;AAE1H,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACG;IAA7B,YAA6B,SAAuB,6BAAY;QAAnC,WAAM,GAAN,MAAM,CAA6B;IAAG,CAAC;IAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,qBAAqB,CAAC,IAAY;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,IAAY,EAAE,KAA0B;QACtD,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;YAE/D,MAAM,IAAI,GAAG;gBACT,IAAI,SAAS,GAAG;gBAChB,KAAK,CAAC,IAAI;gBACV,KAAK,CAAC,KAAK;gBACX,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;aACzC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACpB,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;QACf,CAAC;IACL,CAAC;IAED,iGAAiG;IACzF,YAAY,CAAC,KAA0B;QAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,4FAA4F;QAC5F,8EAA8E;QAC9E,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,UAAU,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;aAC7G,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;aACtE,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,OAAO,IAAI,GAAG,YAAY,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAChI,IAAI,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,aAAa,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChI,8FAA8F;QAC9F,oFAAoF;QACpF,EAAE;QACF,+FAA+F;QAC/F,4FAA4F;QAC5F,0FAA0F;QAC1F,sFAAsF;QACtF,IAAI,KAAK,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CACN,OAAO,KAAK,CAAC,GAAG,eAAe,KAAK,CAAC,UAAU,GAAG;gBAClD,2BAA2B,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAC3E,CAAC;QACN,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,uBAAuB,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;;OAQG;IACK,cAAc,CAAC,KAA0B;QAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QACnE,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,KAAK,EAAE;YACnC,CAAC,CAAC,uBAAuB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,YAAY,IAAI,GAAG,EAAE;YACxE,CAAC,CAAC,oBAAoB,KAAK,CAAC,YAAY,IAAI,GAAG,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,qFAAqF;IAC7E,OAAO,CAAC,KAAa;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,GAAG,CAAC;IACtF,CAAC;IAEO,aAAa,CAAC,OAAe,EAAE,QAAgB;QACnD,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;gBAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACrC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;QACf,CAAC;IACL,CAAC;CACJ,CAAA;AA5IY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAEA,6BAAY;GADxC,iBAAiB,CA4I7B;AAED,0FAA0F;AAC1F,MAAM,oBAAoB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAErD,wIAAwI;AACxI,SAAgB,qBAAqB,CAAC,IAAY;IAC9C,OAAO,oBAAoB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,wIAAwI;AACxI,SAAgB,iBAAiB,CAAC,IAAY,EAAE,KAA0B;IACtE,oBAAoB,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { DotWebpieces, dotWebpieces } from '@webpieces/tooling-common';\nimport { toError } from '@webpieces/tooling-common/to-error';\n\n// The BRANCH-MUTATION log — an audit trail for every workflow verb that RENAMES or MOVES branches.\n// Records START / each phase boundary / END-with-outcome so the next agent (or a human) can\n// reconstruct what the tooling did to the branches. Writes to `.webpieces/logs/branch-mutations.log`\n// (in a linked worktree: `.webpieces/worktrees/<name>/logs/`) — see LOGS_STATE_DIR for why every\n// webpieces log lives under `logs/` and no longer beside the non-log state in `hooks/`.\n// Lives in repo-workflow-core (shared by guards and pr-gate) so the pr-gate scripts can call it directly.\n\nconst LOG_FILE = 'branch-mutations.log';\nconst LOG_FILE_PREV = 'branch-mutations.1.log';\nconst MAX_LOG_BYTES = 512 * 1024; // 512 KB — rotate when exceeded (mirrors the other webpieces logs)\nconst MAX_DETAIL_LEN = 400;\n\n// The workflow verb whose branch mutation is being logged (the bin the AI/human invoked).\n// `auto-reap` is the odd one out: no human invoked it — it is the detached background refresher\n// (sync-main.ts) deleting dead branches on its own. It gets a verb precisely BECAUSE it is\n// unattended: a deletion nobody watched happen is the one that most needs an audit line.\nexport type MutationVerb =\n    | 'wp-start-update' | 'wp-finish-update' | 'wp-start-upsert-pr' | 'wp-review-upsert-pr'\n    | 'wp-finish-upsert-pr' | 'wp-cleanup' | 'wp-land-pr' | 'auto-reap';\n\n// A boundary within a verb's execution. START/END bracket the whole run; the middle phases mark each\n// irreversible git step so an interrupt leaves a breadcrumb at the last phase reached.\n// REAP is a whole mutation in one line (a branch delete has no phases) — see BranchReaper.\n// REAP_WORKTREE is its worktree twin: archive → `git worktree remove` → `git branch -D`, all three of\n// which succeed or fail as one act. It is a SEPARATE phase, not just a REAP with a path, so that\n// `grep REAP_WORKTREE` answers \"what directories did the tooling delete?\" — a strictly scarier\n// question than \"what refs did it delete?\", since a worktree removal takes real files with it.\nexport type MutationPhase =\n    | 'START' | 'BACKUP' | 'CHECKOUT_MAIN' | 'PULL' | 'SQUASH' | 'RENAME'\n    | 'FINALIZE' | 'CONFLICT' | 'INTERRUPTED' | 'END' | 'REAP' | 'REAP_WORKTREE';\n\n// Data-only record of one branch-mutation event (per CLAUDE.md: classes for data, explicit construction).\nexport class BranchMutationEvent {\n    verb: MutationVerb;\n    phase: MutationPhase;\n    fromBranch: string = '';\n    toBranch: string = '';\n    oldMain: string = '';\n    newMain: string = '';\n    conflict: boolean = false;\n    conflictFiles: string[] = [];\n    outcome: string = '';\n    artifacts: string[] = [];\n    // The commit a DELETED branch pointed at, captured immediately before the delete. This is what\n    // makes a reap auditable AND reversible: the work is already in main, and the pre-delete tip is\n    // still addressable by hash (the reflog holds it ~90 days), so formatDetail renders a literal\n    // `recover=git branch <name> <sha>` next to it. Empty for mutations that delete nothing.\n    sha: string = '';\n    // The `archive/<date>/<branch>` tag written immediately BEFORE a REAP deleted the branch. When set,\n    // formatDetail renders `recover=` against the TAG instead of the sha: a tag is a permanent ref that\n    // survives `gc` and reflog expiry and can be pushed, whereas a bare sha is only recoverable while\n    // this clone's reflog still holds it. Empty when nothing was tagged (retention policy 'delete').\n    archiveTag: string = '';\n    // The directory a REAP_WORKTREE removed. When set, `recover=` becomes the WORKTREE form\n    // (`git worktree add -b <branch> <path> <ref>`) rather than the bare `git branch` form: putting the\n    // ref back does not put the directory back, and a recover line that restores half of what was\n    // destroyed is worse than none — it reads as done. Empty for every mutation that removes no directory.\n    worktreePath: string = '';\n\n    constructor(verb: MutationVerb, phase: MutationPhase) {\n        this.verb = verb;\n        this.phase = phase;\n    }\n}\n\n/** Appends branch-mutation audit lines. `@injectable(bindingScopeValues.Singleton)` so it's injectable + drawn in the design. */\n@injectable(bindingScopeValues.Singleton)\nexport class BranchMutationLog {\n    constructor(private readonly dotDir: DotWebpieces = dotWebpieces) {}\n\n    /**\n     * LOCAL scope, deliberately — one log per worktree, not one per repo.\n     *\n     * A SHARED append-only log would genuinely corrupt. `O_APPEND` makes a write indivisible only up to\n     * PIPE_BUF, which is 512 bytes on macOS, and a REAP_WORKTREE line carrying\n     * `recover=git worktree add -b <branch> <absolute-path> <tag>` exceeds that — concurrent appenders\n     * from seven worktrees would interleave into an unrecoverable audit trail, which is the one thing\n     * this file exists not to be. Per-worktree, THIS log has one writer and cannot tear.\n     *\n     * That last claim is narrower than it looks, so do not generalise it (2026-08-06). It holds here\n     * because the wp-* bins write this file one command at a time. It does NOT hold for the ai-hook\n     * logs in the same directory: Claude Code runs every matching PreToolUse hook IN PARALLEL, and\n     * several agents and sessions can share one tree, so a per-worktree name there had several\n     * concurrent writers. Those names now carry a `<sessionId>-<agentId|coordinator>-<hook>-` prefix\n     * (ai-hook-rules' LogStream), and the rejection DETAIL files sit in a directory of that same name.\n     *\n     * This file keeps a bare name deliberately, for TWO independent reasons, and neither has gone away\n     * (re-checked 2026-08-07). First, LogStream lives in ai-hook-rules, which DEPENDS on rules-config,\n     * so the import direction forbids reusing it here. Second — and this is the one that would still\n     * bite after moving the class down — the `wp-*` bins that write this file have NO session or agent\n     * identity to prefix with: those ids reach a PreToolUse hook on its JSON payload and a plain Bash\n     * tool call never sees them. Routing this through LogStream today would therefore produce\n     * `unknown-coordinator-hook-branch-mutations.log`: one shared file, exactly as now, under a longer\n     * name, plus a rename of a log people already grep. If this log ever gains a second concurrent\n     * writer, it needs a real stream identity FIRST — the prefix is only worth having when it\n     * discriminates.\n     *\n     * Nothing is lost by keeping it local: under the `worktrees/<name>/` layout the log lives in the\n     * PRIMARY clone, so it survives `git worktree remove`, and the whole history is one glob —\n     * `<primary>/.webpieces/worktrees/＊/logs/branch-mutations.log`.\n     */\n    branchMutationLogPath(root: string): string {\n        return this.dotDir.logsFile(root, LOG_FILE);\n    }\n\n    /**\n     * Append one tab-separated line per branch-mutation event to\n     * `.webpieces/logs/branch-mutations.log`. Swallows all errors — logging must NEVER block or fail\n     * the workflow it is observing.\n     */\n    logBranchMutation(root: string, event: BranchMutationEvent): void {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const timestamp = new Date().toISOString();\n            const logsDir = this.dotDir.logs(root);\n            fs.mkdirSync(logsDir, { recursive: true });\n\n            const logPath = path.join(logsDir, LOG_FILE);\n            this.rotateLogFile(logPath, path.join(logsDir, LOG_FILE_PREV));\n\n            const line = [\n                `[${timestamp}]`,\n                event.verb,\n                event.phase,\n                this.oneLine(this.formatDetail(event)),\n            ].join('\\t') + '\\n';\n            fs.appendFileSync(logPath, line);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n        }\n    }\n\n    // Render only the fields this event actually set, as `key=value` tokens — greppable on one line.\n    private formatDetail(event: BranchMutationEvent): string {\n        const parts: string[] = [];\n        // A rename/move has both ends; a REAP has only the branch it destroyed. Printing `to=?` for\n        // the latter reads like a lost destination rather than \"there was never one\".\n        if (event.fromBranch !== '' && event.toBranch !== '') parts.push(`from=${event.fromBranch} to=${event.toBranch}`);\n        else if (event.fromBranch !== '') parts.push(`branch=${event.fromBranch}`);\n        else if (event.toBranch !== '') parts.push(`from=? to=${event.toBranch}`);\n        if (event.oldMain !== '' || event.newMain !== '') parts.push(`oldMain=${event.oldMain || '?'} newMain=${event.newMain || '?'}`);\n        if (event.conflict) parts.push('conflict=true');\n        if (event.conflictFiles.length > 0) parts.push(`conflictFiles=${event.conflictFiles.length}(${event.conflictFiles.join(',')})`);\n        // Emitted as one unit so the hash is never separated from the command that undoes the delete.\n        // Prefer the archive TAG as the recover ref when there is one — it does not expire.\n        //\n        // AHEAD OF `outcome=` DELIBERATELY. The line is capped at MAX_DETAIL_LEN, and the two absolute\n        // worktree paths a REAP_WORKTREE carries already put a real reap within a few characters of\n        // that cap — so whichever token comes last is the one that silently loses its tail. Prose\n        // describing what happened is the affordable loss; the command that undoes it is not.\n        if (event.worktreePath !== '') {\n            parts.push(this.worktreeDetail(event));\n        } else if (event.sha !== '' && event.archiveTag !== '') {\n            parts.push(\n                `sha=${event.sha} archiveTag=${event.archiveTag} ` +\n                `recover=git checkout -b ${event.fromBranch || '?'} ${event.archiveTag}`,\n            );\n        } else if (event.sha !== '') {\n            parts.push(`sha=${event.sha} recover=git branch ${event.fromBranch || '?'} ${event.sha}`);\n        }\n        if (event.outcome !== '') parts.push(`outcome=${event.outcome}`);\n        for (const artifact of event.artifacts) parts.push(`artifact=${artifact}`);\n        return parts.join(' ');\n    }\n\n    /**\n     * The worktree flavour of the sha/recover token: path, tip, archive tag and the ONE command that\n     * puts the directory AND the branch back together.\n     *\n     * `git worktree add -b <branch> <path> <ref>` is verified by hand and in worktree-reaper.spec.ts —\n     * plain `git worktree add <path> <tag>` would restore the files at a DETACHED HEAD, silently losing\n     * the branch name the reap destroyed. Falls back to the sha when nothing was archived (retention\n     * 'delete'), and to a bare `git worktree add <path>` when there was no branch at all (detached).\n     */\n    private worktreeDetail(event: BranchMutationEvent): string {\n        const ref = event.archiveTag !== '' ? event.archiveTag : event.sha;\n        const tokens = [`worktree=${event.worktreePath}`];\n        if (event.sha !== '') tokens.push(`sha=${event.sha}`);\n        if (event.archiveTag !== '') tokens.push(`archiveTag=${event.archiveTag}`);\n        if (ref === '') return tokens.join(' ');\n        const recover = event.fromBranch !== ''\n            ? `git worktree add -b ${event.fromBranch} ${event.worktreePath} ${ref}`\n            : `git worktree add ${event.worktreePath} ${ref}`;\n        tokens.push(`recover=${recover}`);\n        return tokens.join(' ');\n    }\n\n    // Collapse newlines/tabs and cap length so one event is always exactly one log line.\n    private oneLine(value: string): string {\n        const flat = value.replace(/[\\t\\r\\n]+/g, ' ').trim();\n        return flat.length <= MAX_DETAIL_LEN ? flat : flat.slice(0, MAX_DETAIL_LEN) + '…';\n    }\n\n    private rotateLogFile(logPath: string, prevPath: string): void {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const stat = fs.statSync(logPath);\n            if (stat.size > MAX_LOG_BYTES) {\n                if (fs.existsSync(prevPath)) fs.unlinkSync(prevPath);\n                fs.renameSync(logPath, prevPath);\n            }\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n        }\n    }\n}\n\n// Temporary migration delegators to BranchMutationLog — removed once consumers inject it.\nconst branchMutationLogSvc = new BranchMutationLog();\n\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to BranchMutationLog; removed once consumers inject it\nexport function branchMutationLogPath(root: string): string {\n    return branchMutationLogSvc.branchMutationLogPath(root);\n}\n\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to BranchMutationLog; removed once consumers inject it\nexport function logBranchMutation(root: string, event: BranchMutationEvent): void {\n    branchMutationLogSvc.logBranchMutation(root, event);\n}\n"]}
+{"version":3,"file":"branch-mutation-log.js","sourceRoot":"","sources":["../../../../../packages/tooling/repo-workflow-core/src/branch-mutation-log.ts"],"names":[],"mappings":";;;AA4NA,sDAEC;AAGD,8CAEC;;AAnOD,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,8DAAuE;AACvE,iEAA6D;AAE7D,mGAAmG;AACnG,4FAA4F;AAC5F,0GAA0G;AAC1G,sGAAsG;AACtG,wFAAwF;AACxF,0GAA0G;AAE1G,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AACxC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAC/C,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,mEAAmE;AACrG,MAAM,cAAc,GAAG,GAAG,CAAC;AAqB3B,0GAA0G;AAC1G,MAAa,mBAAmB;IAC5B,IAAI,CAAe;IACnB,KAAK,CAAgB;IACrB,UAAU,GAAW,EAAE,CAAC;IACxB,QAAQ,GAAW,EAAE,CAAC;IACtB,OAAO,GAAW,EAAE,CAAC;IACrB,OAAO,GAAW,EAAE,CAAC;IACrB,QAAQ,GAAY,KAAK,CAAC;IAC1B,aAAa,GAAa,EAAE,CAAC;IAC7B,OAAO,GAAW,EAAE,CAAC;IACrB,SAAS,GAAa,EAAE,CAAC;IACzB,+FAA+F;IAC/F,gGAAgG;IAChG,8FAA8F;IAC9F,yFAAyF;IACzF,GAAG,GAAW,EAAE,CAAC;IACjB,oGAAoG;IACpG,oGAAoG;IACpG,kGAAkG;IAClG,iGAAiG;IACjG,UAAU,GAAW,EAAE,CAAC;IACxB,wFAAwF;IACxF,oGAAoG;IACpG,8FAA8F;IAC9F,uGAAuG;IACvG,YAAY,GAAW,EAAE,CAAC;IAE1B,YAAY,IAAkB,EAAE,KAAoB;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AA/BD,kDA+BC;AAED,iIAAiI;AAE1H,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACG;IAA7B,YAA6B,SAAuB,6BAAY;QAAnC,WAAM,GAAN,MAAM,CAA6B;IAAG,CAAC;IAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,qBAAqB,CAAC,IAAY;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,IAAY,EAAE,KAA0B;QACtD,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;YAE/D,MAAM,IAAI,GAAG;gBACT,IAAI,SAAS,GAAG;gBAChB,KAAK,CAAC,IAAI;gBACV,KAAK,CAAC,KAAK;gBACX,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;aACzC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACpB,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;QACf,CAAC;IACL,CAAC;IAED,iGAAiG;IACzF,YAAY,CAAC,KAA0B;QAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,4FAA4F;QAC5F,8EAA8E;QAC9E,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,UAAU,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;aAC7G,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;aACtE,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,OAAO,IAAI,GAAG,YAAY,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAChI,IAAI,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,aAAa,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChI,8FAA8F;QAC9F,oFAAoF;QACpF,EAAE;QACF,+FAA+F;QAC/F,4FAA4F;QAC5F,0FAA0F;QAC1F,sFAAsF;QACtF,IAAI,KAAK,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CACN,OAAO,KAAK,CAAC,GAAG,eAAe,KAAK,CAAC,UAAU,GAAG;gBAClD,2BAA2B,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAC3E,CAAC;QACN,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,uBAAuB,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;;OAQG;IACK,cAAc,CAAC,KAA0B;QAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QACnE,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,KAAK,EAAE;YACnC,CAAC,CAAC,uBAAuB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,YAAY,IAAI,GAAG,EAAE;YACxE,CAAC,CAAC,oBAAoB,KAAK,CAAC,YAAY,IAAI,GAAG,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,qFAAqF;IAC7E,OAAO,CAAC,KAAa;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,GAAG,CAAC;IACtF,CAAC;IAEO,aAAa,CAAC,OAAe,EAAE,QAAgB;QACnD,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;gBAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACrC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;QACf,CAAC;IACL,CAAC;CACJ,CAAA;AA5IY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAEA,6BAAY;GADxC,iBAAiB,CA4I7B;AAED,0FAA0F;AAC1F,MAAM,oBAAoB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAErD,wIAAwI;AACxI,SAAgB,qBAAqB,CAAC,IAAY;IAC9C,OAAO,oBAAoB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,wIAAwI;AACxI,SAAgB,iBAAiB,CAAC,IAAY,EAAE,KAA0B;IACtE,oBAAoB,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { DotWebpieces, dotWebpieces } from '@webpieces/tooling-common';\nimport { toError } from '@webpieces/tooling-common/to-error';\n\n// The BRANCH-MUTATION log — an audit trail for every workflow verb that RENAMES or MOVES branches.\n// Records START / each phase boundary / END-with-outcome so the next agent (or a human) can\n// reconstruct what the tooling did to the branches. Writes to `.webpieces-logs/logs/branch-mutations.log`\n// (in a linked worktree: `.webpieces-logs/worktrees/<name>/logs/`) — see LOGS_STATE_DIR for why every\n// webpieces log lives under `logs/` and no longer beside the non-log state in `hooks/`.\n// Lives in repo-workflow-core (shared by guards and pr-gate) so the pr-gate scripts can call it directly.\n\nconst LOG_FILE = 'branch-mutations.log';\nconst LOG_FILE_PREV = 'branch-mutations.1.log';\nconst MAX_LOG_BYTES = 512 * 1024; // 512 KB — rotate when exceeded (mirrors the other webpieces logs)\nconst MAX_DETAIL_LEN = 400;\n\n// The workflow verb whose branch mutation is being logged (the bin the AI/human invoked).\n// `auto-reap` is the odd one out: no human invoked it — it is the detached background refresher\n// (sync-main.ts) deleting dead branches on its own. It gets a verb precisely BECAUSE it is\n// unattended: a deletion nobody watched happen is the one that most needs an audit line.\nexport type MutationVerb =\n    | 'wp-start-update' | 'wp-finish-update' | 'wp-start-upsert-pr' | 'wp-review-upsert-pr'\n    | 'wp-finish-upsert-pr' | 'wp-cleanup' | 'wp-land-pr' | 'auto-reap';\n\n// A boundary within a verb's execution. START/END bracket the whole run; the middle phases mark each\n// irreversible git step so an interrupt leaves a breadcrumb at the last phase reached.\n// REAP is a whole mutation in one line (a branch delete has no phases) — see BranchReaper.\n// REAP_WORKTREE is its worktree twin: archive → `git worktree remove` → `git branch -D`, all three of\n// which succeed or fail as one act. It is a SEPARATE phase, not just a REAP with a path, so that\n// `grep REAP_WORKTREE` answers \"what directories did the tooling delete?\" — a strictly scarier\n// question than \"what refs did it delete?\", since a worktree removal takes real files with it.\nexport type MutationPhase =\n    | 'START' | 'BACKUP' | 'CHECKOUT_MAIN' | 'PULL' | 'SQUASH' | 'RENAME'\n    | 'FINALIZE' | 'CONFLICT' | 'INTERRUPTED' | 'END' | 'REAP' | 'REAP_WORKTREE';\n\n// Data-only record of one branch-mutation event (per CLAUDE.md: classes for data, explicit construction).\nexport class BranchMutationEvent {\n    verb: MutationVerb;\n    phase: MutationPhase;\n    fromBranch: string = '';\n    toBranch: string = '';\n    oldMain: string = '';\n    newMain: string = '';\n    conflict: boolean = false;\n    conflictFiles: string[] = [];\n    outcome: string = '';\n    artifacts: string[] = [];\n    // The commit a DELETED branch pointed at, captured immediately before the delete. This is what\n    // makes a reap auditable AND reversible: the work is already in main, and the pre-delete tip is\n    // still addressable by hash (the reflog holds it ~90 days), so formatDetail renders a literal\n    // `recover=git branch <name> <sha>` next to it. Empty for mutations that delete nothing.\n    sha: string = '';\n    // The `archive/<date>/<branch>` tag written immediately BEFORE a REAP deleted the branch. When set,\n    // formatDetail renders `recover=` against the TAG instead of the sha: a tag is a permanent ref that\n    // survives `gc` and reflog expiry and can be pushed, whereas a bare sha is only recoverable while\n    // this clone's reflog still holds it. Empty when nothing was tagged (retention policy 'delete').\n    archiveTag: string = '';\n    // The directory a REAP_WORKTREE removed. When set, `recover=` becomes the WORKTREE form\n    // (`git worktree add -b <branch> <path> <ref>`) rather than the bare `git branch` form: putting the\n    // ref back does not put the directory back, and a recover line that restores half of what was\n    // destroyed is worse than none — it reads as done. Empty for every mutation that removes no directory.\n    worktreePath: string = '';\n\n    constructor(verb: MutationVerb, phase: MutationPhase) {\n        this.verb = verb;\n        this.phase = phase;\n    }\n}\n\n/** Appends branch-mutation audit lines. `@injectable(bindingScopeValues.Singleton)` so it's injectable + drawn in the design. */\n@injectable(bindingScopeValues.Singleton)\nexport class BranchMutationLog {\n    constructor(private readonly dotDir: DotWebpieces = dotWebpieces) {}\n\n    /**\n     * LOCAL scope, deliberately — one log per worktree, not one per repo.\n     *\n     * A SHARED append-only log would genuinely corrupt. `O_APPEND` makes a write indivisible only up to\n     * PIPE_BUF, which is 512 bytes on macOS, and a REAP_WORKTREE line carrying\n     * `recover=git worktree add -b <branch> <absolute-path> <tag>` exceeds that — concurrent appenders\n     * from seven worktrees would interleave into an unrecoverable audit trail, which is the one thing\n     * this file exists not to be. Per-worktree, THIS log has one writer and cannot tear.\n     *\n     * That last claim is narrower than it looks, so do not generalise it (2026-08-06). It holds here\n     * because the wp-* bins write this file one command at a time. It does NOT hold for the ai-hook\n     * logs in the same directory: Claude Code runs every matching PreToolUse hook IN PARALLEL, and\n     * several agents and sessions can share one tree, so a per-worktree name there had several\n     * concurrent writers. Those names now carry a `<sessionId>-<agentId|coordinator>-<hook>-` prefix\n     * (ai-hook-rules' LogStream), and the rejection DETAIL files sit in a directory of that same name.\n     *\n     * This file keeps a bare name deliberately, for TWO independent reasons, and neither has gone away\n     * (re-checked 2026-08-07). First, LogStream lives in ai-hook-rules, which DEPENDS on rules-config,\n     * so the import direction forbids reusing it here. Second — and this is the one that would still\n     * bite after moving the class down — the `wp-*` bins that write this file have NO session or agent\n     * identity to prefix with: those ids reach a PreToolUse hook on its JSON payload and a plain Bash\n     * tool call never sees them. Routing this through LogStream today would therefore produce\n     * `unknown-coordinator-hook-branch-mutations.log`: one shared file, exactly as now, under a longer\n     * name, plus a rename of a log people already grep. If this log ever gains a second concurrent\n     * writer, it needs a real stream identity FIRST — the prefix is only worth having when it\n     * discriminates.\n     *\n     * Nothing is lost by keeping it local: under the `worktrees/<name>/` layout the log lives in the\n     * PRIMARY clone, so it survives `git worktree remove`, and the whole history is one glob —\n     * `<primary>/.webpieces-logs/worktrees/＊/logs/branch-mutations.log`.\n     */\n    branchMutationLogPath(root: string): string {\n        return this.dotDir.logsFile(root, LOG_FILE);\n    }\n\n    /**\n     * Append one tab-separated line per branch-mutation event to\n     * `.webpieces-logs/logs/branch-mutations.log`. Swallows all errors — logging must NEVER block or fail\n     * the workflow it is observing.\n     */\n    logBranchMutation(root: string, event: BranchMutationEvent): void {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const timestamp = new Date().toISOString();\n            const logsDir = this.dotDir.logs(root);\n            fs.mkdirSync(logsDir, { recursive: true });\n\n            const logPath = path.join(logsDir, LOG_FILE);\n            this.rotateLogFile(logPath, path.join(logsDir, LOG_FILE_PREV));\n\n            const line = [\n                `[${timestamp}]`,\n                event.verb,\n                event.phase,\n                this.oneLine(this.formatDetail(event)),\n            ].join('\\t') + '\\n';\n            fs.appendFileSync(logPath, line);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n        }\n    }\n\n    // Render only the fields this event actually set, as `key=value` tokens — greppable on one line.\n    private formatDetail(event: BranchMutationEvent): string {\n        const parts: string[] = [];\n        // A rename/move has both ends; a REAP has only the branch it destroyed. Printing `to=?` for\n        // the latter reads like a lost destination rather than \"there was never one\".\n        if (event.fromBranch !== '' && event.toBranch !== '') parts.push(`from=${event.fromBranch} to=${event.toBranch}`);\n        else if (event.fromBranch !== '') parts.push(`branch=${event.fromBranch}`);\n        else if (event.toBranch !== '') parts.push(`from=? to=${event.toBranch}`);\n        if (event.oldMain !== '' || event.newMain !== '') parts.push(`oldMain=${event.oldMain || '?'} newMain=${event.newMain || '?'}`);\n        if (event.conflict) parts.push('conflict=true');\n        if (event.conflictFiles.length > 0) parts.push(`conflictFiles=${event.conflictFiles.length}(${event.conflictFiles.join(',')})`);\n        // Emitted as one unit so the hash is never separated from the command that undoes the delete.\n        // Prefer the archive TAG as the recover ref when there is one — it does not expire.\n        //\n        // AHEAD OF `outcome=` DELIBERATELY. The line is capped at MAX_DETAIL_LEN, and the two absolute\n        // worktree paths a REAP_WORKTREE carries already put a real reap within a few characters of\n        // that cap — so whichever token comes last is the one that silently loses its tail. Prose\n        // describing what happened is the affordable loss; the command that undoes it is not.\n        if (event.worktreePath !== '') {\n            parts.push(this.worktreeDetail(event));\n        } else if (event.sha !== '' && event.archiveTag !== '') {\n            parts.push(\n                `sha=${event.sha} archiveTag=${event.archiveTag} ` +\n                `recover=git checkout -b ${event.fromBranch || '?'} ${event.archiveTag}`,\n            );\n        } else if (event.sha !== '') {\n            parts.push(`sha=${event.sha} recover=git branch ${event.fromBranch || '?'} ${event.sha}`);\n        }\n        if (event.outcome !== '') parts.push(`outcome=${event.outcome}`);\n        for (const artifact of event.artifacts) parts.push(`artifact=${artifact}`);\n        return parts.join(' ');\n    }\n\n    /**\n     * The worktree flavour of the sha/recover token: path, tip, archive tag and the ONE command that\n     * puts the directory AND the branch back together.\n     *\n     * `git worktree add -b <branch> <path> <ref>` is verified by hand and in worktree-reaper.spec.ts —\n     * plain `git worktree add <path> <tag>` would restore the files at a DETACHED HEAD, silently losing\n     * the branch name the reap destroyed. Falls back to the sha when nothing was archived (retention\n     * 'delete'), and to a bare `git worktree add <path>` when there was no branch at all (detached).\n     */\n    private worktreeDetail(event: BranchMutationEvent): string {\n        const ref = event.archiveTag !== '' ? event.archiveTag : event.sha;\n        const tokens = [`worktree=${event.worktreePath}`];\n        if (event.sha !== '') tokens.push(`sha=${event.sha}`);\n        if (event.archiveTag !== '') tokens.push(`archiveTag=${event.archiveTag}`);\n        if (ref === '') return tokens.join(' ');\n        const recover = event.fromBranch !== ''\n            ? `git worktree add -b ${event.fromBranch} ${event.worktreePath} ${ref}`\n            : `git worktree add ${event.worktreePath} ${ref}`;\n        tokens.push(`recover=${recover}`);\n        return tokens.join(' ');\n    }\n\n    // Collapse newlines/tabs and cap length so one event is always exactly one log line.\n    private oneLine(value: string): string {\n        const flat = value.replace(/[\\t\\r\\n]+/g, ' ').trim();\n        return flat.length <= MAX_DETAIL_LEN ? flat : flat.slice(0, MAX_DETAIL_LEN) + '…';\n    }\n\n    private rotateLogFile(logPath: string, prevPath: string): void {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const stat = fs.statSync(logPath);\n            if (stat.size > MAX_LOG_BYTES) {\n                if (fs.existsSync(prevPath)) fs.unlinkSync(prevPath);\n                fs.renameSync(logPath, prevPath);\n            }\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n        }\n    }\n}\n\n// Temporary migration delegators to BranchMutationLog — removed once consumers inject it.\nconst branchMutationLogSvc = new BranchMutationLog();\n\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to BranchMutationLog; removed once consumers inject it\nexport function branchMutationLogPath(root: string): string {\n    return branchMutationLogSvc.branchMutationLogPath(root);\n}\n\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to BranchMutationLog; removed once consumers inject it\nexport function logBranchMutation(root: string, event: BranchMutationEvent): void {\n    branchMutationLogSvc.logBranchMutation(root, event);\n}\n"]}

package/src/main-sync-file.d.ts

@@ -1,6 +1,6 @@
 import { AtomicFile } from '@webpieces/tooling-common';
 /**
- * The ON-DISK SHAPE of `<primary>/.webpieces/main-sync-status.json`, and nothing else.
+ * The ON-DISK SHAPE of `<primary>/.webpieces-logs/main-sync-status.json`, and nothing else.
  *
  * WHY this is its own module rather than more of main-sync-status.ts: that file already owns the lock
  * state machine plus the whole slow git/gh computation, and adding the map shape to it pushed it past

package/src/main-sync-file.js

@@ -7,7 +7,7 @@ const inversify_1 = require("inversify");
 const tooling_common_1 = require("@webpieces/tooling-common");
 const to_error_1 = require("@webpieces/tooling-common/to-error");
 /**
- * The ON-DISK SHAPE of `<primary>/.webpieces/main-sync-status.json`, and nothing else.
+ * The ON-DISK SHAPE of `<primary>/.webpieces-logs/main-sync-status.json`, and nothing else.
  *
  * WHY this is its own module rather than more of main-sync-status.ts: that file already owns the lock
  * state machine plus the whole slow git/gh computation, and adding the map shape to it pushed it past

package/src/main-sync-file.js.map

@@ -1 +1 @@
-{"version":3,"file":"main-sync-file.js","sourceRoot":"","sources":["../../../../../packages/tooling/repo-workflow-core/src/main-sync-file.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,yCAA2D;AAE3D,8DAAuD;AACvD,iEAA6D;AAE7D;;;;;;;;;;;;;;GAcG;AAEH,qGAAqG;AACxF,QAAA,wBAAwB,GAAG,CAAC,CAAC;AAE1C,2FAA2F;AAC3F,MAAa,cAAc;IACvB,MAAM,CAAS;IACf,mBAAmB,CAAU;IAC7B,QAAQ,CAAS;IACjB,YAAY,CAAU;IACtB,SAAS,CAAgB;IACzB,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,QAAQ,CAAU;IAClB,aAAa,CAAW;IACxB,SAAS,CAAS;IAClB,+FAA+F;IAC/F,iGAAiG;IACjG,MAAM,GAAW,EAAE,CAAC;IACpB,gGAAgG;IAChG,iGAAiG;IACjG,4FAA4F;IAC5F,SAAS,GAAW,EAAE,CAAC;IACvB,kGAAkG;IAClG,yFAAyF;IACzF,aAAa,GAAkB,IAAI,CAAC;IACpC;;;;;;;;;;;OAWG;IACH,cAAc,GAAY,IAAI,CAAC;IAE/B,YACI,MAAc,EACd,mBAA4B,EAC5B,QAAgB,EAChB,YAAqB,EACrB,SAAwB,EACxB,UAAkB,EAClB,WAAmB,EACnB,QAAiB,EACjB,aAAuB,EACvB,SAAiB;QAEjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;CACJ;AA1DD,wCA0DC;AAED,+FAA+F;AAC/F,MAAa,kBAAkB;IAC3B,OAAO,CAAS;IAChB,kFAAkF;IAClF,SAAS,CAAS;IAClB,QAAQ,CAAiC;IAEzC,YAAY,OAAe,EAAE,SAAiB,EAAE,QAAwC;QACpF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;CACJ;AAXD,gDAWC;AAED;;;;;;GAMG;AACH,MAAa,gBAAgB;IACzB,8FAA8F;IAC9F,MAAM,CAAyB;IAC/B,IAAI,CAAyB;IAC7B;;;;;;;;;;;OAWG;IACH,cAAc,CAAU;IAExB,YAAY,MAA8B,EAAE,IAA4B,EAAE,cAAuB;QAC7F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACzC,CAAC;IAED,6FAA6F;IAC7F,SAAS,CAAC,MAAc;QACpB,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,CAAC,MAAc;QAClB,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC;CACJ;AAlCD,4CAkCC;AAiCD,qGAAqG;AACrG,sEAAsE;AACtE,oHAAoH;AACpH,SAAS,MAAM,CAAC,MAAc,EAAE,GAAW;IACvC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACG;IAA7B,YAA6B,aAAyB,IAAI,2BAAU,EAAE;QAAzC,eAAU,GAAV,UAAU,CAA+B;IAAG,CAAC;IAE1E;;;OAGG;IACH,QAAQ,CAAC,UAAkB;QACvB,8DAA8D;QAC9D,IAAI,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,0FAA0F;YAC1F,iFAAiF;YACjF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAmB,CAAC;YACjF,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,UAAkB,EAAE,IAAwB;QAClD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,UAAkB,EAAE,MAAsB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAmC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC5F,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,kBAAkB,CAC7C,gCAAwB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,6EAA6E;IAC7E,YAAY,CAAC,IAA+B,EAAE,MAAc;QACxD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,uFAAuF;QACvF,iFAAiF;QACjF,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,IAAY;QAC1B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC3D,uFAAuF;YACvF,+FAA+F;YAC/F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7E,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAClF,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAEO,QAAQ,CAAC,GAAmB,EAAE,MAA8B,EAAE,IAA4B;QAC9F,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO;QAC3C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9C,2FAA2F;QAC3F,IAAI,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;QAC3E,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACzE,CAAC;IAED,8FAA8F;IACtF,KAAK,CAAC,GAAY;QACtB,MAAM,QAAQ,GAAmC,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC;QACjC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACvF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,IAAI,gCAAwB,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1G,CAAC;QACD,yFAAyF;QACzF,4FAA4F;QAC5F,8EAA8E;QAC9E,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnG,OAAO,IAAI,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IAED,6FAA6F;IAC7F,qFAAqF;IAC7E,QAAQ,CAAC,GAAc;QAC3B,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,EAChB,GAAG,CAAC,mBAAmB,IAAI,KAAK,EAChC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAClB,GAAG,CAAC,YAAY,IAAI,IAAI,EACxB,GAAG,CAAC,SAAS,IAAI,IAAI,EACrB,GAAG,CAAC,UAAU,IAAI,EAAE,EACpB,GAAG,CAAC,WAAW,IAAI,EAAE,EACrB,GAAG,CAAC,QAAQ,IAAI,KAAK,EACrB,GAAG,CAAC,aAAa,IAAI,EAAE,EACvB,GAAG,CAAC,SAAS,IAAI,EAAE,CACtB,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;QACvC,MAAM,CAAC,aAAa,GAAG,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ;eACrD,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,aAAa,IAAI,CAAC;YAChE,CAAC,CAAC,GAAG,CAAC,aAAa;YACnB,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC;QACnD,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AAzIY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAEI,2BAAU;GAD1C,iBAAiB,CAyI7B","sourcesContent":["import * as fs from 'fs';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { AtomicFile } from '@webpieces/tooling-common';\nimport { toError } from '@webpieces/tooling-common/to-error';\n\n/**\n * The ON-DISK SHAPE of `<primary>/.webpieces/main-sync-status.json`, and nothing else.\n *\n * WHY this is its own module rather than more of main-sync-status.ts: that file already owns the lock\n * state machine plus the whole slow git/gh computation, and adding the map shape to it pushed it past\n * the 700-line cap. The split is along a real seam — everything here is pure parse/serialise with no\n * process spawning, so it is also the cheap half to test.\n *\n * WHY the file is a MAP of branch -> status (v2) rather than one status (v1): the cache is SHARED by\n * every worktree of the repo (one `.git`, one `origin/main`, one single-flight refresher), but a v1\n * file described exactly ONE branch — whichever tree won the lock. Every guard fails open when the\n * cached branch is not the branch it is judging, so with N worktrees at most one worktree's guards\n * were armed and the rest abstained, thrashing as the lock changed hands. Keeping the payload per\n * branch identical and only changing the LOOKUP means no guard's field access changed.\n */\n\n// Bumped when the shape changes. v1 = one bare status; v2 = branch map; v3 = cached commit distance.\nexport const MAIN_SYNC_STATUS_VERSION = 3;\n\n// Data-only (per CLAUDE.md, classes for data). The per-branch payload — unchanged from v1.\nexport class MainSyncStatus {\n    branch: string;\n    branchAlreadyMerged: boolean;\n    mergedPr: string;\n    hasForkPoint: boolean;\n    forkPoint: string | null;\n    originMain: string;\n    featureHead: string;\n    conflict: boolean;\n    conflictFiles: string[];\n    timestamp: string;\n    // An OPEN (not merged) PR tracking this branch, if any — '' = none or not-yet-known. Advisory.\n    // Kept OUT of the positional constructor (a defaulted field) so existing call sites don't churn.\n    openPr: string = '';\n    // The LOCAL refs/heads/main hash — '' = main does not exist locally (fresh clone / worktree) or\n    // could not be read. Paired with `originMain`, this is what tells the read-stale-guard whether a\n    // checked-out `main` is behind its remote. Defaulted field for the same reason as `openPr`.\n    localMain: string = '';\n    // Computed by the detached refresher as local main..origin/main. Null means an older cache or git\n    // could not establish the distance; stale-main threshold checks fail open in that state.\n    commitsBehind: number | null = null;\n    /**\n     * Did the forge answer when this entry was computed? See PullRequestIndex.forgeReachable.\n     *\n     * `branchAlreadyMerged: false` is produced BOTH by \"this branch has no merged PR\" and by \"we could\n     * not ask\", and the three guards that act on the merged state took the ordinary ALLOW path in both.\n     * Carrying the distinction into the cache is what lets them say ALLOW_FAIL_OPEN / `no-forge`\n     * instead — the typed verdict exists precisely so abstentions are countable.\n     *\n     * Defaults TRUE, matching `openPr`/`localMain` as a non-positional field: an entry written before\n     * this field existed (or hand-edited) is read as \"the forge answered\", which preserves today's\n     * verdicts exactly rather than retro-labelling old caches as abstentions.\n     */\n    forgeReachable: boolean = true;\n\n    constructor(\n        branch: string,\n        branchAlreadyMerged: boolean,\n        mergedPr: string,\n        hasForkPoint: boolean,\n        forkPoint: string | null,\n        originMain: string,\n        featureHead: string,\n        conflict: boolean,\n        conflictFiles: string[],\n        timestamp: string,\n    ) {\n        this.branch = branch;\n        this.branchAlreadyMerged = branchAlreadyMerged;\n        this.mergedPr = mergedPr;\n        this.hasForkPoint = hasForkPoint;\n        this.forkPoint = forkPoint;\n        this.originMain = originMain;\n        this.featureHead = featureHead;\n        this.conflict = conflict;\n        this.conflictFiles = conflictFiles;\n        this.timestamp = timestamp;\n    }\n}\n\n// Data-only. The whole document: every branch the last refresh could see, written as one unit.\nexport class MainSyncStatusFile {\n    version: number;\n    // When the map as a whole was written. Each entry also carries its own timestamp.\n    timestamp: string;\n    branches: Record<string, MainSyncStatus>;\n\n    constructor(version: number, timestamp: string, branches: Record<string, MainSyncStatus>) {\n        this.version = version;\n        this.timestamp = timestamp;\n        this.branches = branches;\n    }\n}\n\n/**\n * The repo's pull requests indexed by head branch — ONE `gh pr list` for the whole refresh.\n *\n * WHY it exists: the per-branch status needs a merged-PR and an open-PR answer, and the old code asked\n * `gh` twice PER BRANCH. Recording N branches per refresh would have meant 2N network round trips and\n * made the refresher scale with worktree count. One repo-wide query indexed locally is 1 call for any N.\n */\nexport class PullRequestIndex {\n    // branch -> PR number, as a string ('' means \"no such PR\"), for MERGED and OPEN respectively.\n    merged: Record<string, string>;\n    open: Record<string, string>;\n    /**\n     * Did the forge actually ANSWER?\n     *\n     * `mergedFor()` returning '' has always meant two completely different things — \"this branch has no\n     * merged PR\" and \"we could not ask\" (`gh` missing, unauthenticated, rate-limited, offline, or the\n     * response unparseable). Both produced the same empty index, so from the decision log you could not\n     * tell whether the merged-branch policy was PROTECTING anything or quietly abstaining. This flag is\n     * the difference, and it is what lets the guards emit ALLOW_FAIL_OPEN instead of a plain ALLOW.\n     *\n     * REQUIRED, not defaulted: an index built on a failure path must say so out loud, and a default of\n     * `true` would make \"we asked and got an answer\" the thing you get by forgetting.\n     */\n    forgeReachable: boolean;\n\n    constructor(merged: Record<string, string>, open: Record<string, string>, forgeReachable: boolean) {\n        this.merged = merged;\n        this.open = open;\n        this.forgeReachable = forgeReachable;\n    }\n\n    // A merged PR for this branch, or '' — the same value the old per-branch `gh` call produced.\n    mergedFor(branch: string): string {\n        if (branch === '' || branch === 'main') return '';\n        return hasOwn(this.merged, branch) ? (this.merged[branch] ?? '') : '';\n    }\n\n    openFor(branch: string): string {\n        if (branch === '' || branch === 'main') return '';\n        return hasOwn(this.open, branch) ? (this.open[branch] ?? '') : '';\n    }\n}\n\n// Raw JSON shapes for the cast at the parse boundary.\ninterface RawStatus {\n    branch?: string;\n    branchAlreadyMerged?: boolean;\n    mergedPr?: string;\n    hasForkPoint?: boolean;\n    forkPoint?: string | null;\n    originMain?: string;\n    featureHead?: string;\n    conflict?: boolean;\n    conflictFiles?: string[];\n    timestamp?: string;\n    openPr?: string;\n    localMain?: string;\n    commitsBehind?: number | null;\n    forgeReachable?: boolean;\n}\n\n// v2 has `branches`; a v1 document instead has the RawStatus fields at the top level.\ninterface RawFile extends RawStatus {\n    version?: number;\n    branches?: Record<string, RawStatus>;\n}\n\n// One row of `gh pr list --json number,headRefName,state`.\ninterface RawPullRequest {\n    number?: number;\n    headRefName?: string;\n    state?: string;\n}\n\n// Own-property lookup only: a branch literally named `constructor` or `toString` must not resolve to\n// something off Object.prototype and be mistaken for a cached status.\n// webpieces-disable no-function-outside-class -- one-line own-property predicate used by the classes in this module\nfunction hasOwn(record: object, key: string): boolean {\n    return Object.prototype.hasOwnProperty.call(record, key);\n}\n\n/**\n * Reads and writes the branch-keyed status document. Every read fails SOFT to null (or to an empty\n * map) — the guards above this treat null as `no-sync-cache (fail-open)`, so a missing, truncated or\n * malformed file must never throw and must never block an edit.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class MainSyncFileStore {\n    constructor(private readonly atomicFile: AtomicFile = new AtomicFile()) {}\n\n    /**\n     * Parse the document at `statusPath`, adapting a v1 file on the way. Returns null when there is\n     * nothing readable there — missing file, unreadable file, or JSON that does not parse.\n     */\n    readFile(statusPath: string): MainSyncStatusFile | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            if (!fs.existsSync(statusPath)) return null;\n            // The cast is the trust boundary: every field of RawFile is optional and every read of it\n            // below is defaulted, so a document of any other shape degrades to an empty map.\n            const parsed = JSON.parse(fs.readFileSync(statusPath, 'utf8')) as RawFile | null;\n            if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) return null;\n            return this.adapt(parsed);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    /**\n     * ATOMIC write (temp file + `rename()` in the same directory). The refresher writes this while\n     * guards on the blocking path read it, from other worktrees; a plain `writeFileSync` truncates\n     * first, so a reader landing in that window gets a torn document. Writing the map WHOLE also means\n     * a reader never sees half of one refresh's branches and half of the previous refresh's.\n     */\n    writeFile(statusPath: string, file: MainSyncStatusFile): void {\n        this.atomicFile.writeJsonAtomic(statusPath, file);\n    }\n\n    /**\n     * READ-MODIFY-WRITE a single branch's entry, leaving every sibling entry untouched.\n     *\n     * This is what any writer that is NOT the single-flight refresher must use. `stampCleanMainSyncStatus`\n     * (pr-gate's post-merge stamp) runs without the lock and knows about exactly one branch; if it wrote\n     * a whole document it would silently erase every other worktree's entry and disarm their guards\n     * until the next refresh.\n     */\n    mergeBranch(statusPath: string, status: MainSyncStatus): void {\n        const existing = this.readFile(statusPath);\n        const branches: Record<string, MainSyncStatus> = existing === null ? {} : existing.branches;\n        branches[status.branch] = status;\n        this.writeFile(statusPath, new MainSyncStatusFile(\n            MAIN_SYNC_STATUS_VERSION, new Date().toISOString(), branches));\n    }\n\n    // The entry for one branch, or null when this refresh never saw that branch.\n    branchStatus(file: MainSyncStatusFile | null, branch: string): MainSyncStatus | null {\n        if (file === null) return null;\n        // Defensive: readFile always produces a map, but this method is public and sits on the\n        // blocking path — a caller handing it a raw document must get null, not a throw.\n        if (file.branches === null || file.branches === undefined) return null;\n        if (!hasOwn(file.branches, branch)) return null;\n        return file.branches[branch] ?? null;\n    }\n\n    /**\n     * Index `gh pr list --state all --json number,headRefName,state` output by head branch.\n     *\n     * Newest-first is gh's order, so the FIRST row for a branch wins — matching the old per-branch\n     * `--jq .[0].number`. Anything unparseable yields an empty index, i.e. \"no PR\", which is the same\n     * answer the old code produced when `gh` was missing or offline: fail-open.\n     */\n    indexPullRequests(json: string): PullRequestIndex {\n        const merged: Record<string, string> = {};\n        const open: Record<string, string> = {};\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const parsed = JSON.parse(json) as RawPullRequest[] | null;\n            // Parsed but not an array: `gh` answered with something we do not understand, which is\n            // not the same as it answering \"no PRs\". Unreachable, so the guards abstain rather than allow.\n            if (!Array.isArray(parsed)) return new PullRequestIndex(merged, open, false);\n            for (const row of parsed) {\n                if (row !== null && typeof row === 'object') this.indexOne(row, merged, open);\n            }\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return new PullRequestIndex(merged, open, false);\n        }\n        return new PullRequestIndex(merged, open, true);\n    }\n\n    private indexOne(row: RawPullRequest, merged: Record<string, string>, open: Record<string, string>): void {\n        const branch = row.headRefName ?? '';\n        const number = typeof row.number === 'number' ? String(row.number) : '';\n        if (branch === '' || number === '') return;\n        const state = (row.state ?? '').toUpperCase();\n        // First row wins per branch+state — gh lists newest first, matching the old `.[0].number`.\n        if (state === 'MERGED' && !hasOwn(merged, branch)) merged[branch] = number;\n        if (state === 'OPEN' && !hasOwn(open, branch)) open[branch] = number;\n    }\n\n    // v2 documents pass through; a v1 document becomes a one-entry map keyed by its own `branch`.\n    private adapt(raw: RawFile): MainSyncStatusFile {\n        const branches: Record<string, MainSyncStatus> = {};\n        const rawBranches = raw.branches;\n        if (rawBranches !== undefined && rawBranches !== null && typeof rawBranches === 'object') {\n            for (const [name, entry] of Object.entries(rawBranches)) {\n                if (entry !== null && typeof entry === 'object') branches[name] = this.toStatus(entry);\n            }\n            return new MainSyncStatusFile(raw.version ?? MAIN_SYNC_STATUS_VERSION, raw.timestamp ?? '', branches);\n        }\n        // v1: one bare status at the top level. Key it by the branch it was computed for, so the\n        // guard for THAT branch stays armed across the upgrade and every other branch simply misses\n        // (null → `no-sync-cache (fail-open)`), which is what it did under v1 anyway.\n        if (typeof raw.branch === 'string' && raw.branch !== '') branches[raw.branch] = this.toStatus(raw);\n        return new MainSyncStatusFile(1, raw.timestamp ?? '', branches);\n    }\n\n    // Every field defaulted: a truncated or hand-edited entry degrades to a benign status rather\n    // than to a throw. `hasForkPoint` defaults TRUE because false is the BLOCKING value.\n    private toStatus(raw: RawStatus): MainSyncStatus {\n        const status = new MainSyncStatus(\n            raw.branch ?? '',\n            raw.branchAlreadyMerged ?? false,\n            raw.mergedPr ?? '',\n            raw.hasForkPoint ?? true,\n            raw.forkPoint ?? null,\n            raw.originMain ?? '',\n            raw.featureHead ?? '',\n            raw.conflict ?? false,\n            raw.conflictFiles ?? [],\n            raw.timestamp ?? '',\n        );\n        status.openPr = raw.openPr ?? '';\n        status.localMain = raw.localMain ?? '';\n        status.commitsBehind = typeof raw.commitsBehind === 'number'\n            && Number.isInteger(raw.commitsBehind) && raw.commitsBehind >= 0\n            ? raw.commitsBehind\n            : null;\n        status.forgeReachable = raw.forgeReachable ?? true;\n        return status;\n    }\n}\n"]}
+{"version":3,"file":"main-sync-file.js","sourceRoot":"","sources":["../../../../../packages/tooling/repo-workflow-core/src/main-sync-file.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,yCAA2D;AAE3D,8DAAuD;AACvD,iEAA6D;AAE7D;;;;;;;;;;;;;;GAcG;AAEH,qGAAqG;AACxF,QAAA,wBAAwB,GAAG,CAAC,CAAC;AAE1C,2FAA2F;AAC3F,MAAa,cAAc;IACvB,MAAM,CAAS;IACf,mBAAmB,CAAU;IAC7B,QAAQ,CAAS;IACjB,YAAY,CAAU;IACtB,SAAS,CAAgB;IACzB,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,QAAQ,CAAU;IAClB,aAAa,CAAW;IACxB,SAAS,CAAS;IAClB,+FAA+F;IAC/F,iGAAiG;IACjG,MAAM,GAAW,EAAE,CAAC;IACpB,gGAAgG;IAChG,iGAAiG;IACjG,4FAA4F;IAC5F,SAAS,GAAW,EAAE,CAAC;IACvB,kGAAkG;IAClG,yFAAyF;IACzF,aAAa,GAAkB,IAAI,CAAC;IACpC;;;;;;;;;;;OAWG;IACH,cAAc,GAAY,IAAI,CAAC;IAE/B,YACI,MAAc,EACd,mBAA4B,EAC5B,QAAgB,EAChB,YAAqB,EACrB,SAAwB,EACxB,UAAkB,EAClB,WAAmB,EACnB,QAAiB,EACjB,aAAuB,EACvB,SAAiB;QAEjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;CACJ;AA1DD,wCA0DC;AAED,+FAA+F;AAC/F,MAAa,kBAAkB;IAC3B,OAAO,CAAS;IAChB,kFAAkF;IAClF,SAAS,CAAS;IAClB,QAAQ,CAAiC;IAEzC,YAAY,OAAe,EAAE,SAAiB,EAAE,QAAwC;QACpF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;CACJ;AAXD,gDAWC;AAED;;;;;;GAMG;AACH,MAAa,gBAAgB;IACzB,8FAA8F;IAC9F,MAAM,CAAyB;IAC/B,IAAI,CAAyB;IAC7B;;;;;;;;;;;OAWG;IACH,cAAc,CAAU;IAExB,YAAY,MAA8B,EAAE,IAA4B,EAAE,cAAuB;QAC7F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACzC,CAAC;IAED,6FAA6F;IAC7F,SAAS,CAAC,MAAc;QACpB,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,CAAC,MAAc;QAClB,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC;CACJ;AAlCD,4CAkCC;AAiCD,qGAAqG;AACrG,sEAAsE;AACtE,oHAAoH;AACpH,SAAS,MAAM,CAAC,MAAc,EAAE,GAAW;IACvC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACG;IAA7B,YAA6B,aAAyB,IAAI,2BAAU,EAAE;QAAzC,eAAU,GAAV,UAAU,CAA+B;IAAG,CAAC;IAE1E;;;OAGG;IACH,QAAQ,CAAC,UAAkB;QACvB,8DAA8D;QAC9D,IAAI,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,0FAA0F;YAC1F,iFAAiF;YACjF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAmB,CAAC;YACjF,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,UAAkB,EAAE,IAAwB;QAClD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,UAAkB,EAAE,MAAsB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAmC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC5F,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,kBAAkB,CAC7C,gCAAwB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,6EAA6E;IAC7E,YAAY,CAAC,IAA+B,EAAE,MAAc;QACxD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,uFAAuF;QACvF,iFAAiF;QACjF,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,IAAY;QAC1B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC3D,uFAAuF;YACvF,+FAA+F;YAC/F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7E,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAClF,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAEO,QAAQ,CAAC,GAAmB,EAAE,MAA8B,EAAE,IAA4B;QAC9F,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO;QAC3C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9C,2FAA2F;QAC3F,IAAI,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;QAC3E,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACzE,CAAC;IAED,8FAA8F;IACtF,KAAK,CAAC,GAAY;QACtB,MAAM,QAAQ,GAAmC,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC;QACjC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACvF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,IAAI,gCAAwB,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1G,CAAC;QACD,yFAAyF;QACzF,4FAA4F;QAC5F,8EAA8E;QAC9E,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnG,OAAO,IAAI,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IAED,6FAA6F;IAC7F,qFAAqF;IAC7E,QAAQ,CAAC,GAAc;QAC3B,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,EAChB,GAAG,CAAC,mBAAmB,IAAI,KAAK,EAChC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAClB,GAAG,CAAC,YAAY,IAAI,IAAI,EACxB,GAAG,CAAC,SAAS,IAAI,IAAI,EACrB,GAAG,CAAC,UAAU,IAAI,EAAE,EACpB,GAAG,CAAC,WAAW,IAAI,EAAE,EACrB,GAAG,CAAC,QAAQ,IAAI,KAAK,EACrB,GAAG,CAAC,aAAa,IAAI,EAAE,EACvB,GAAG,CAAC,SAAS,IAAI,EAAE,CACtB,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;QACvC,MAAM,CAAC,aAAa,GAAG,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ;eACrD,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,aAAa,IAAI,CAAC;YAChE,CAAC,CAAC,GAAG,CAAC,aAAa;YACnB,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC;QACnD,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AAzIY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAEI,2BAAU;GAD1C,iBAAiB,CAyI7B","sourcesContent":["import * as fs from 'fs';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { AtomicFile } from '@webpieces/tooling-common';\nimport { toError } from '@webpieces/tooling-common/to-error';\n\n/**\n * The ON-DISK SHAPE of `<primary>/.webpieces-logs/main-sync-status.json`, and nothing else.\n *\n * WHY this is its own module rather than more of main-sync-status.ts: that file already owns the lock\n * state machine plus the whole slow git/gh computation, and adding the map shape to it pushed it past\n * the 700-line cap. The split is along a real seam — everything here is pure parse/serialise with no\n * process spawning, so it is also the cheap half to test.\n *\n * WHY the file is a MAP of branch -> status (v2) rather than one status (v1): the cache is SHARED by\n * every worktree of the repo (one `.git`, one `origin/main`, one single-flight refresher), but a v1\n * file described exactly ONE branch — whichever tree won the lock. Every guard fails open when the\n * cached branch is not the branch it is judging, so with N worktrees at most one worktree's guards\n * were armed and the rest abstained, thrashing as the lock changed hands. Keeping the payload per\n * branch identical and only changing the LOOKUP means no guard's field access changed.\n */\n\n// Bumped when the shape changes. v1 = one bare status; v2 = branch map; v3 = cached commit distance.\nexport const MAIN_SYNC_STATUS_VERSION = 3;\n\n// Data-only (per CLAUDE.md, classes for data). The per-branch payload — unchanged from v1.\nexport class MainSyncStatus {\n    branch: string;\n    branchAlreadyMerged: boolean;\n    mergedPr: string;\n    hasForkPoint: boolean;\n    forkPoint: string | null;\n    originMain: string;\n    featureHead: string;\n    conflict: boolean;\n    conflictFiles: string[];\n    timestamp: string;\n    // An OPEN (not merged) PR tracking this branch, if any — '' = none or not-yet-known. Advisory.\n    // Kept OUT of the positional constructor (a defaulted field) so existing call sites don't churn.\n    openPr: string = '';\n    // The LOCAL refs/heads/main hash — '' = main does not exist locally (fresh clone / worktree) or\n    // could not be read. Paired with `originMain`, this is what tells the read-stale-guard whether a\n    // checked-out `main` is behind its remote. Defaulted field for the same reason as `openPr`.\n    localMain: string = '';\n    // Computed by the detached refresher as local main..origin/main. Null means an older cache or git\n    // could not establish the distance; stale-main threshold checks fail open in that state.\n    commitsBehind: number | null = null;\n    /**\n     * Did the forge answer when this entry was computed? See PullRequestIndex.forgeReachable.\n     *\n     * `branchAlreadyMerged: false` is produced BOTH by \"this branch has no merged PR\" and by \"we could\n     * not ask\", and the three guards that act on the merged state took the ordinary ALLOW path in both.\n     * Carrying the distinction into the cache is what lets them say ALLOW_FAIL_OPEN / `no-forge`\n     * instead — the typed verdict exists precisely so abstentions are countable.\n     *\n     * Defaults TRUE, matching `openPr`/`localMain` as a non-positional field: an entry written before\n     * this field existed (or hand-edited) is read as \"the forge answered\", which preserves today's\n     * verdicts exactly rather than retro-labelling old caches as abstentions.\n     */\n    forgeReachable: boolean = true;\n\n    constructor(\n        branch: string,\n        branchAlreadyMerged: boolean,\n        mergedPr: string,\n        hasForkPoint: boolean,\n        forkPoint: string | null,\n        originMain: string,\n        featureHead: string,\n        conflict: boolean,\n        conflictFiles: string[],\n        timestamp: string,\n    ) {\n        this.branch = branch;\n        this.branchAlreadyMerged = branchAlreadyMerged;\n        this.mergedPr = mergedPr;\n        this.hasForkPoint = hasForkPoint;\n        this.forkPoint = forkPoint;\n        this.originMain = originMain;\n        this.featureHead = featureHead;\n        this.conflict = conflict;\n        this.conflictFiles = conflictFiles;\n        this.timestamp = timestamp;\n    }\n}\n\n// Data-only. The whole document: every branch the last refresh could see, written as one unit.\nexport class MainSyncStatusFile {\n    version: number;\n    // When the map as a whole was written. Each entry also carries its own timestamp.\n    timestamp: string;\n    branches: Record<string, MainSyncStatus>;\n\n    constructor(version: number, timestamp: string, branches: Record<string, MainSyncStatus>) {\n        this.version = version;\n        this.timestamp = timestamp;\n        this.branches = branches;\n    }\n}\n\n/**\n * The repo's pull requests indexed by head branch — ONE `gh pr list` for the whole refresh.\n *\n * WHY it exists: the per-branch status needs a merged-PR and an open-PR answer, and the old code asked\n * `gh` twice PER BRANCH. Recording N branches per refresh would have meant 2N network round trips and\n * made the refresher scale with worktree count. One repo-wide query indexed locally is 1 call for any N.\n */\nexport class PullRequestIndex {\n    // branch -> PR number, as a string ('' means \"no such PR\"), for MERGED and OPEN respectively.\n    merged: Record<string, string>;\n    open: Record<string, string>;\n    /**\n     * Did the forge actually ANSWER?\n     *\n     * `mergedFor()` returning '' has always meant two completely different things — \"this branch has no\n     * merged PR\" and \"we could not ask\" (`gh` missing, unauthenticated, rate-limited, offline, or the\n     * response unparseable). Both produced the same empty index, so from the decision log you could not\n     * tell whether the merged-branch policy was PROTECTING anything or quietly abstaining. This flag is\n     * the difference, and it is what lets the guards emit ALLOW_FAIL_OPEN instead of a plain ALLOW.\n     *\n     * REQUIRED, not defaulted: an index built on a failure path must say so out loud, and a default of\n     * `true` would make \"we asked and got an answer\" the thing you get by forgetting.\n     */\n    forgeReachable: boolean;\n\n    constructor(merged: Record<string, string>, open: Record<string, string>, forgeReachable: boolean) {\n        this.merged = merged;\n        this.open = open;\n        this.forgeReachable = forgeReachable;\n    }\n\n    // A merged PR for this branch, or '' — the same value the old per-branch `gh` call produced.\n    mergedFor(branch: string): string {\n        if (branch === '' || branch === 'main') return '';\n        return hasOwn(this.merged, branch) ? (this.merged[branch] ?? '') : '';\n    }\n\n    openFor(branch: string): string {\n        if (branch === '' || branch === 'main') return '';\n        return hasOwn(this.open, branch) ? (this.open[branch] ?? '') : '';\n    }\n}\n\n// Raw JSON shapes for the cast at the parse boundary.\ninterface RawStatus {\n    branch?: string;\n    branchAlreadyMerged?: boolean;\n    mergedPr?: string;\n    hasForkPoint?: boolean;\n    forkPoint?: string | null;\n    originMain?: string;\n    featureHead?: string;\n    conflict?: boolean;\n    conflictFiles?: string[];\n    timestamp?: string;\n    openPr?: string;\n    localMain?: string;\n    commitsBehind?: number | null;\n    forgeReachable?: boolean;\n}\n\n// v2 has `branches`; a v1 document instead has the RawStatus fields at the top level.\ninterface RawFile extends RawStatus {\n    version?: number;\n    branches?: Record<string, RawStatus>;\n}\n\n// One row of `gh pr list --json number,headRefName,state`.\ninterface RawPullRequest {\n    number?: number;\n    headRefName?: string;\n    state?: string;\n}\n\n// Own-property lookup only: a branch literally named `constructor` or `toString` must not resolve to\n// something off Object.prototype and be mistaken for a cached status.\n// webpieces-disable no-function-outside-class -- one-line own-property predicate used by the classes in this module\nfunction hasOwn(record: object, key: string): boolean {\n    return Object.prototype.hasOwnProperty.call(record, key);\n}\n\n/**\n * Reads and writes the branch-keyed status document. Every read fails SOFT to null (or to an empty\n * map) — the guards above this treat null as `no-sync-cache (fail-open)`, so a missing, truncated or\n * malformed file must never throw and must never block an edit.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class MainSyncFileStore {\n    constructor(private readonly atomicFile: AtomicFile = new AtomicFile()) {}\n\n    /**\n     * Parse the document at `statusPath`, adapting a v1 file on the way. Returns null when there is\n     * nothing readable there — missing file, unreadable file, or JSON that does not parse.\n     */\n    readFile(statusPath: string): MainSyncStatusFile | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            if (!fs.existsSync(statusPath)) return null;\n            // The cast is the trust boundary: every field of RawFile is optional and every read of it\n            // below is defaulted, so a document of any other shape degrades to an empty map.\n            const parsed = JSON.parse(fs.readFileSync(statusPath, 'utf8')) as RawFile | null;\n            if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) return null;\n            return this.adapt(parsed);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    /**\n     * ATOMIC write (temp file + `rename()` in the same directory). The refresher writes this while\n     * guards on the blocking path read it, from other worktrees; a plain `writeFileSync` truncates\n     * first, so a reader landing in that window gets a torn document. Writing the map WHOLE also means\n     * a reader never sees half of one refresh's branches and half of the previous refresh's.\n     */\n    writeFile(statusPath: string, file: MainSyncStatusFile): void {\n        this.atomicFile.writeJsonAtomic(statusPath, file);\n    }\n\n    /**\n     * READ-MODIFY-WRITE a single branch's entry, leaving every sibling entry untouched.\n     *\n     * This is what any writer that is NOT the single-flight refresher must use. `stampCleanMainSyncStatus`\n     * (pr-gate's post-merge stamp) runs without the lock and knows about exactly one branch; if it wrote\n     * a whole document it would silently erase every other worktree's entry and disarm their guards\n     * until the next refresh.\n     */\n    mergeBranch(statusPath: string, status: MainSyncStatus): void {\n        const existing = this.readFile(statusPath);\n        const branches: Record<string, MainSyncStatus> = existing === null ? {} : existing.branches;\n        branches[status.branch] = status;\n        this.writeFile(statusPath, new MainSyncStatusFile(\n            MAIN_SYNC_STATUS_VERSION, new Date().toISOString(), branches));\n    }\n\n    // The entry for one branch, or null when this refresh never saw that branch.\n    branchStatus(file: MainSyncStatusFile | null, branch: string): MainSyncStatus | null {\n        if (file === null) return null;\n        // Defensive: readFile always produces a map, but this method is public and sits on the\n        // blocking path — a caller handing it a raw document must get null, not a throw.\n        if (file.branches === null || file.branches === undefined) return null;\n        if (!hasOwn(file.branches, branch)) return null;\n        return file.branches[branch] ?? null;\n    }\n\n    /**\n     * Index `gh pr list --state all --json number,headRefName,state` output by head branch.\n     *\n     * Newest-first is gh's order, so the FIRST row for a branch wins — matching the old per-branch\n     * `--jq .[0].number`. Anything unparseable yields an empty index, i.e. \"no PR\", which is the same\n     * answer the old code produced when `gh` was missing or offline: fail-open.\n     */\n    indexPullRequests(json: string): PullRequestIndex {\n        const merged: Record<string, string> = {};\n        const open: Record<string, string> = {};\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const parsed = JSON.parse(json) as RawPullRequest[] | null;\n            // Parsed but not an array: `gh` answered with something we do not understand, which is\n            // not the same as it answering \"no PRs\". Unreachable, so the guards abstain rather than allow.\n            if (!Array.isArray(parsed)) return new PullRequestIndex(merged, open, false);\n            for (const row of parsed) {\n                if (row !== null && typeof row === 'object') this.indexOne(row, merged, open);\n            }\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return new PullRequestIndex(merged, open, false);\n        }\n        return new PullRequestIndex(merged, open, true);\n    }\n\n    private indexOne(row: RawPullRequest, merged: Record<string, string>, open: Record<string, string>): void {\n        const branch = row.headRefName ?? '';\n        const number = typeof row.number === 'number' ? String(row.number) : '';\n        if (branch === '' || number === '') return;\n        const state = (row.state ?? '').toUpperCase();\n        // First row wins per branch+state — gh lists newest first, matching the old `.[0].number`.\n        if (state === 'MERGED' && !hasOwn(merged, branch)) merged[branch] = number;\n        if (state === 'OPEN' && !hasOwn(open, branch)) open[branch] = number;\n    }\n\n    // v2 documents pass through; a v1 document becomes a one-entry map keyed by its own `branch`.\n    private adapt(raw: RawFile): MainSyncStatusFile {\n        const branches: Record<string, MainSyncStatus> = {};\n        const rawBranches = raw.branches;\n        if (rawBranches !== undefined && rawBranches !== null && typeof rawBranches === 'object') {\n            for (const [name, entry] of Object.entries(rawBranches)) {\n                if (entry !== null && typeof entry === 'object') branches[name] = this.toStatus(entry);\n            }\n            return new MainSyncStatusFile(raw.version ?? MAIN_SYNC_STATUS_VERSION, raw.timestamp ?? '', branches);\n        }\n        // v1: one bare status at the top level. Key it by the branch it was computed for, so the\n        // guard for THAT branch stays armed across the upgrade and every other branch simply misses\n        // (null → `no-sync-cache (fail-open)`), which is what it did under v1 anyway.\n        if (typeof raw.branch === 'string' && raw.branch !== '') branches[raw.branch] = this.toStatus(raw);\n        return new MainSyncStatusFile(1, raw.timestamp ?? '', branches);\n    }\n\n    // Every field defaulted: a truncated or hand-edited entry degrades to a benign status rather\n    // than to a throw. `hasForkPoint` defaults TRUE because false is the BLOCKING value.\n    private toStatus(raw: RawStatus): MainSyncStatus {\n        const status = new MainSyncStatus(\n            raw.branch ?? '',\n            raw.branchAlreadyMerged ?? false,\n            raw.mergedPr ?? '',\n            raw.hasForkPoint ?? true,\n            raw.forkPoint ?? null,\n            raw.originMain ?? '',\n            raw.featureHead ?? '',\n            raw.conflict ?? false,\n            raw.conflictFiles ?? [],\n            raw.timestamp ?? '',\n        );\n        status.openPr = raw.openPr ?? '';\n        status.localMain = raw.localMain ?? '';\n        status.commitsBehind = typeof raw.commitsBehind === 'number'\n            && Number.isInteger(raw.commitsBehind) && raw.commitsBehind >= 0\n            ? raw.commitsBehind\n            : null;\n        status.forgeReachable = raw.forgeReachable ?? true;\n        return status;\n    }\n}\n"]}

package/src/main-sync-status.d.ts

@@ -21,7 +21,7 @@ export declare class MainSyncStatusService {
     private readonly worktrees;
     constructor(dotDir?: DotWebpieces, atomicFile?: AtomicFile, store?: MainSyncFileStore, worktrees?: WorktreeService);
     /**
-     * SHARED scope: `<primary>/.webpieces/main-sync-status.json`, one per repo.
+     * SHARED scope: `<primary>/.webpieces-logs/main-sync-status.json`, one per repo.
      *
      * It is the OUTPUT of the single-flight refresher below, so it has to live where the lock lives —
      * one `.git`, one `origin/main`, one fetch, one answer. A per-worktree copy under single-flight

package/src/main-sync-status.js

@@ -71,7 +71,7 @@ let MainSyncStatusService = class MainSyncStatusService {
         this.worktrees = worktrees;
     }
     /**
-     * SHARED scope: `<primary>/.webpieces/main-sync-status.json`, one per repo.
+     * SHARED scope: `<primary>/.webpieces-logs/main-sync-status.json`, one per repo.
      *
      * It is the OUTPUT of the single-flight refresher below, so it has to live where the lock lives —
      * one `.git`, one `origin/main`, one fetch, one answer. A per-worktree copy under single-flight

package/src/main-sync-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"main-sync-status.js","sourceRoot":"","sources":["../../../../../packages/tooling/repo-workflow-core/src/main-sync-status.ts"],"names":[],"mappings":";;;AA0iBA,gDAAiH;AAEjH,4CAA6G;AAE7G,gDAAwJ;AAExJ,wDAA4I;AAE5I,kDAA0I;AAE1I,0DAAkJ;AAElJ,4CAA0H;AAE1H,8CAAgI;AAEhI,kCAAiL;AAEjL,kDAAmM;AAEnM,wDAAqP;AAErP,sCAAgJ;AAEhJ,oCAAyG;AAEzG,sDAA+H;AAE/H,gEAA6I;AAE7I,kDAA+H;AAE/H,4DAAoH;;AA1kBpH,iDAA0C;AAC1C,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,8DAAuD;AACvD,qDAM0B;AAOqC,yGAZ3D,yCAAwB,OAY2D;AAA9E,+FAVL,+BAAc,OAUK;AAAE,mGATrB,mCAAkB,OASqB;AAAE,iGARzC,iCAAgB,OAQyC;AAN7D,8DAAuE;AACvE,iEAA6D;AAC7D,2CAA8C;AAM9C,sGAAsG;AACtG,wGAAwG;AACxG,qGAAqG;AACrG,wFAAwF;AAExF,oGAAoG;AACvF,QAAA,4BAA4B,GAAG,CAAC,CAAC;AAE9C,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AACtD,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAElD,MAAM,oBAAoB,GAAG,WAAW,CAAC;AACzC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,sGAAsG;AACtG,sGAAsG;AACtG,MAAa,YAAY;IACrB,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,GAAG,CAAS;IAEZ,YAAY,KAAa,EAAE,OAAe,EAAE,MAAc,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;CACJ;AAVD,oCAUC;AAeD;;;GAGG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAET;IACA;IACA;IACA;IAJrB,YACqB,SAAuB,6BAAY,EACnC,aAAyB,IAAI,2BAAU,EAAE,EACzC,QAA2B,IAAI,kCAAiB,CAAC,UAAU,CAAC,EAC5D,YAA6B,IAAI,2BAAe,EAAE;QAHlD,WAAM,GAAN,MAAM,CAA6B;QACnC,eAAU,GAAV,UAAU,CAA+B;QACzC,UAAK,GAAL,KAAK,CAAuD;QAC5D,cAAS,GAAT,SAAS,CAAyC;IACpE,CAAC;IAEJ;;;;;;;;;;;;;;OAcG;IACH,kBAAkB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;OAOG;IACH,kBAAkB,CAAC,QAAgB,EAAE,MAAc;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAClF,CAAC;IAED,6FAA6F;IAC7F,sBAAsB,CAAC,QAAgB;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;OAOG;IACH,mBAAmB,CAAC,QAAgB,EAAE,MAAsB;QACxD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;OAMG;IACH,uBAAuB,CAAC,QAAgB,EAAE,IAAwB;QAC9D,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAC7B,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;YACrE,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI,mBAAmB,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,QAAgB,EAAE,IAAkB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,kGAAkG;IAClG,WAAW,CAAC,IAAkB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAChF,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/D,CAAC;IAED,wFAAwF;IACxF,mBAAmB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK,KAAK,oBAAoB;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAClE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,sBAAsB,CAClB,QAAgB,EAChB,kBAA0B,EAC1B,MAAc,IAAI,CAAC,GAAG,EAAE,EACxB,MAAc,OAAO,CAAC,GAAG;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAErD,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzD,0EAA0E;QAC1E,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7E,6FAA6F;QAC7F,8DAA8D;QAC9D,IAAI,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC,CAAE,uEAAuE;QACxF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1D,0FAA0F;QAC1F,gDAAgD;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC5E,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,6FAA6F;IACrF,eAAe,CAAC,QAAgB,EAAE,OAAe;QACrD,8DAA8D;QAC9D,IAAI,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,aAAa,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG;QAC7D,OAAO,IAAI,YAAY,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,YAAY,CAAC,OAAe;QACxB,OAAO,IAAI,YAAY,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACH,qBAAqB,CAAC,QAAgB;QAClC,4FAA4F;QAC5F,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7G,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,0BAA0B,CAAC,QAAgB;QACvC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAmC,EAAE,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,yFAAyF;YACzF,yFAAyF;YACzF,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;QACD,8FAA8F;QAC9F,yFAAyF;QACzF,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACxF,OAAO,IAAI,mCAAkB,CAAC,yCAAwB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChG,CAAC;IAEO,SAAS,CAAC,QAAwC,EAAE,MAAc;QACtE,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;;;OAIG;IACH,gFAAgF;IACxE,mBAAmB,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAuB;QACjF,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1F,CAAC;IAED,mGAAmG;IACnG,8FAA8F;IACtF,UAAU,CAAC,MAAsB,EAAE,KAAuB;QAC9D,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC7C,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,gFAAgF;IACxE,wBAAwB,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAuB;QACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAErC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,CAAC,mBAAmB,GAAG,QAAQ,KAAK,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrG,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,+BAAc,CAAC,MAAM,EAAE,QAAQ,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACpJ,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC5E,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAE1F,MAAM,MAAM,GAAG,IAAI,+BAAc,CAC7B,MAAM,EACN,QAAQ,KAAK,EAAE,EACf,QAAQ,EACR,IAAI,EACJ,SAAS,CAAC,GAAG,EACb,UAAU,CAAC,GAAG,EACd,WAAW,EACX,aAAa,CAAC,MAAM,GAAG,CAAC,EACxB,aAAa,EACb,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAC3B,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,qGAAqG;IACrG,mBAAmB,CAAC,aAAqB;QACrC,OAAO;YACH,wDAAwD;YACxD,oDAAoD,aAAa,iBAAiB;YAClF,uDAAuD,aAAa,EAAE;YACtE,2FAA2F;YAC3F,yFAAyF;YACzF,sFAAsF;YACtF,yFAAyF;YACzF,2FAA2F;YAC3F,sFAAsF;YACtF,+EAA+E,aAAa,GAAG;YAC/F,0FAA0F;SAC7F,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACH,wBAAwB,CAAC,QAAgB;QACrC,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;YAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE;gBAAE,OAAO;YAC9C,MAAM,MAAM,GAAG,IAAI,+BAAc,CAC7B,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAChH,CAAC;YACF,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;QACf,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,eAAe,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;YAChF,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;SACvE,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,CAAE,oDAAoD;QACxG,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,uFAAuF;IAC/E,kBAAkB,CAAC,MAAqB;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACtH,CAAC;IAEO,SAAS,CAAC,QAAgB;QAC9B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,uFAAuF;IAC/E,cAAc,CAAC,GAAW;QAC9B,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1B,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IAED,sFAAsF;IAC9E,OAAO,CAAC,QAAgB,EAAE,GAAW,EAAE,IAAc;QACzD,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,iGAAiG;IACzF,SAAS,CAAC,QAAgB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QACpF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,iGAAiG;IACjG,2FAA2F;IACnF,aAAa,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,gGAAgG;IACxF,cAAc,CAAC,QAAgB,EAAE,SAAiB,EAAE,UAAkB;QAC1E,IAAI,SAAS,KAAK,EAAE,IAAI,UAAU,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,SAAS,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAEO,YAAY,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAY;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,+FAA+F;IAC/F,wFAAwF;IAChF,mBAAmB,CAAC,QAAgB,EAAE,SAAiB;QAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,MAAM,GAAG,GAAG,CAAC,IAAc,EAAQ,EAAE;YACjC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE;gBAAE,OAAO;YAClC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;QACL,CAAC,CAAC;QACF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAM,iCAAiC;QACvF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAiB,8BAA8B;QACpF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAK,eAAe;QACrE,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAE,4CAA4C;QAClG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACK,oBAAoB,CAAC,QAAgB;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACxC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,KAAK;SACzF,CAAC,CAAC;QACH,+FAA+F;QAC/F,iGAAiG;QACjG,gGAAgG;QAChG,kFAAkF;QAClF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,iCAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,IAAI,iCAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,QAAgB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,+BAAc,CAC7B,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAC5D,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACtF,CAAC;QACF,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,+EAA+E;IACvE,YAAY,CAAC,MAAc,EAAE,WAAmB;QACpD,OAAO,IAAI,+BAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnH,CAAC;CACJ,CAAA;AAjeY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAGR,6BAAY;QACR,2BAAU;QACf,kCAAiB;QACb,2BAAe;GALtC,qBAAqB,CAiejC;AAED,8FAA8F;AAC9F,MAAM,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;AAEhD,4IAA4I;AAC5I,SAAgB,kBAAkB,CAAC,QAAgB,IAAY,OAAO,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjH,4IAA4I;AAC5I,SAAgB,gBAAgB,CAAC,QAAgB,IAAY,OAAO,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7G,4IAA4I;AAC5I,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,MAAc,IAA2B,OAAO,WAAW,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AACxJ,4IAA4I;AAC5I,SAAgB,sBAAsB,CAAC,QAAgB,IAA+B,OAAO,WAAW,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC5I,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,MAAsB,IAAU,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAC1I,4IAA4I;AAC5I,SAAgB,uBAAuB,CAAC,QAAgB,EAAE,IAAwB,IAAU,WAAW,CAAC,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAClJ,4IAA4I;AAC5I,SAAgB,gBAAgB,CAAC,QAAgB,IAAyB,OAAO,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC1H,4IAA4I;AAC5I,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,IAAkB,IAAU,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAChI,4IAA4I;AAC5I,SAAgB,WAAW,CAAC,IAAkB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,IAAa,OAAO,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACjL,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,IAAa,OAAO,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACnM,4IAA4I;AAC5I,SAAgB,sBAAsB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG,IAAyB,OAAO,WAAW,CAAC,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACrP,4IAA4I;AAC5I,SAAgB,aAAa,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG,IAAkB,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAChJ,4IAA4I;AAC5I,SAAgB,YAAY,CAAC,OAAe,IAAkB,OAAO,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzG,4IAA4I;AAC5I,SAAgB,qBAAqB,CAAC,QAAgB,IAAoB,OAAO,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC/H,4IAA4I;AAC5I,SAAgB,0BAA0B,CAAC,QAAgB,IAAwB,OAAO,WAAW,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7I,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,aAAqB,IAAc,OAAO,WAAW,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC/H,4IAA4I;AAC5I,SAAgB,wBAAwB,CAAC,QAAgB,IAAU,WAAW,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { AtomicFile } from '@webpieces/tooling-common';\nimport {\n    MAIN_SYNC_STATUS_VERSION,\n    MainSyncFileStore,\n    MainSyncStatus,\n    MainSyncStatusFile,\n    PullRequestIndex,\n} from './main-sync-file';\nimport { DotWebpieces, dotWebpieces } from '@webpieces/tooling-common';\nimport { toError } from '@webpieces/tooling-common/to-error';\nimport { WorktreeService } from './worktrees';\n\n// The on-disk shape lives in main-sync-file.ts; re-exported so every existing importer of\n// `MainSyncStatus` from this module keeps working.\nexport { MainSyncStatus, MainSyncStatusFile, PullRequestIndex, MAIN_SYNC_STATUS_VERSION };\n\n// Shared \"is my feature branch healthy relative to origin/main?\" state. The SLOW signals (git fetch +\n// merge-base + same-file-overlap + a merged-PR lookup) are computed by the ai-hook-rules refresher in a\n// DETACHED background process; the feature-branch-guard only READS this cached file. pr-gate's merge\n// flow also writes it synchronously after a merge. Lives here (the shared dep of both).\n\n// How long an `inprocess` refresher lock may sit before a new refresher assumes the prior run hung.\nexport const DEFAULT_HANG_TIMEOUT_MINUTES = 5;\n\nconst MAIN_SYNC_STATUS_FILE = 'main-sync-status.json';\nconst MAIN_SYNC_LOCK_FILE = 'main-sync.lock.json';\n\nconst LOCK_STATE_INPROCESS = 'inprocess';\nconst LOCK_STATE_FINISHED = 'finished';\n\n// Concurrency state machine for the detached refresher. `started` is epoch ms. `pid` is the refresher\n// process's pid (0 = unknown) — used so a KILLED refresher doesn't wedge `inprocess` for the timeout.\nexport class MainSyncLock {\n    state: string;\n    started: number;\n    pid: number;\n\n    constructor(state: string, started: number, pid: number = 0) {\n        this.state = state;\n        this.started = started;\n        this.pid = pid;\n    }\n}\n\n// Raw JSON shape for the cast at the parse boundary.\ninterface RawLock {\n    state?: string;\n    started?: number;\n    pid?: number;\n}\n\n// Result of a captured git/gh invocation: ok=false on spawn failure or non-zero exit.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n}\n\n/**\n * Reads/writes the main-sync cache + lock and computes the slow \"is my branch healthy vs origin/main?\"\n * status. `@injectable(bindingScopeValues.Singleton)` so it's injectable and drawn in consumers’ DI designs.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class MainSyncStatusService {\n    constructor(\n        private readonly dotDir: DotWebpieces = dotWebpieces,\n        private readonly atomicFile: AtomicFile = new AtomicFile(),\n        private readonly store: MainSyncFileStore = new MainSyncFileStore(atomicFile),\n        private readonly worktrees: WorktreeService = new WorktreeService(),\n    ) {}\n\n    /**\n     * SHARED scope: `<primary>/.webpieces/main-sync-status.json`, one per repo.\n     *\n     * It is the OUTPUT of the single-flight refresher below, so it has to live where the lock lives —\n     * one `.git`, one `origin/main`, one fetch, one answer. A per-worktree copy under single-flight\n     * would only ever be written for whichever worktree won the lock anyway.\n     *\n     * FORMERLY a known defect, now fixed: the file's CONTENT used to be keyed to ONE branch, and every\n     * reader fails OPEN when the cached branch is not the branch being judged (`stale-cross-branch-cache\n     * (fail-open)`). With several worktrees on several branches, only the winner of the lock was ever\n     * described, so every other worktree's guards abstained — and which one was armed thrashed as the\n     * lock changed hands. The file is now a MAP of branch -> status (see MainSyncStatusFile): the single\n     * winning refresher enumerates every worktree and records all of their branches in one atomic write,\n     * so one fetch arms everyone. Single-flight is unchanged; only what the winner writes changed.\n     */\n    mainSyncStatusPath(repoRoot: string): string {\n        return this.dotDir.sharedFile(repoRoot, MAIN_SYNC_STATUS_FILE);\n    }\n\n    /**\n     * SHARED scope — the single-flight lock for the whole repo.\n     *\n     * This is the fix for the filed bug \"the detached main-sync refresher's `git fetch` races the\n     * agent's foreground `git fetch`/`git pull` and corrupts `.git/FETCH_HEAD`\". The lock was already\n     * atomic (O_CREAT|O_EXCL) and already serialised refreshers against each other — but only WITHIN\n     * one worktree, so N worktrees meant N locks and up to N concurrent `git fetch`es against the ONE\n     * shared `.git`, which is exactly how a duplicate `for-merge` line lands in FETCH_HEAD. There is\n     * one `.git`, so there is now one lock: at most one refresher in flight across all worktrees.\n     *\n     * Stale-lock handling is unchanged and still required (a lock nobody can clear is worse than the\n     * race): the holder records pid + start epoch, and `tryAcquireMainSyncLock` reclaims it once\n     * `isRefreshInProgress` proves the holder is finished, hung past hangTimeoutMinutes, or dead.\n     */\n    mainSyncLockPath(repoRoot: string): string {\n        return this.dotDir.sharedFile(repoRoot, MAIN_SYNC_LOCK_FILE);\n    }\n\n    /**\n     * The cached status FOR ONE BRANCH — the only read the four main-sync guards perform.\n     *\n     * `branch` is mandatory and is the branch being judged. A branch the last refresh never saw\n     * returns null, which every guard already treats as `no-sync-cache (fail-open)`, so an unknown\n     * branch degrades exactly as a missing file did. Any error (missing, truncated, malformed JSON)\n     * also returns null — this must never throw on the blocking path.\n     */\n    readMainSyncStatus(repoRoot: string, branch: string): MainSyncStatus | null {\n        return this.store.branchStatus(this.readMainSyncStatusFile(repoRoot), branch);\n    }\n\n    // The whole branch-keyed document, or null. Callers that need more than one branch use this.\n    readMainSyncStatusFile(repoRoot: string): MainSyncStatusFile | null {\n        return this.store.readFile(this.mainSyncStatusPath(repoRoot));\n    }\n\n    /**\n     * Merge ONE branch's entry into the existing map, atomically, leaving siblings untouched.\n     *\n     * Read-modify-write rather than replace: this is the writer used by everyone who is NOT the\n     * single-flight refresher (notably pr-gate's post-merge stamp, which holds no lock and knows about\n     * exactly one branch). Replacing the document from there would erase every other worktree's entry\n     * and silently disarm their guards until the next refresh.\n     */\n    writeMainSyncStatus(repoRoot: string, status: MainSyncStatus): void {\n        this.store.mergeBranch(this.mainSyncStatusPath(repoRoot), status);\n    }\n\n    /**\n     * Replace the WHOLE document — only the winning refresher may do this.\n     *\n     * ATOMIC (temp file + `rename()` in the same directory). The refresher writes this file while\n     * guards on the blocking path read it, possibly from another worktree; a plain `writeFileSync`\n     * truncates first, so a reader landing in that window gets a torn document. See AtomicFile.\n     */\n    writeMainSyncStatusFile(repoRoot: string, file: MainSyncStatusFile): void {\n        this.store.writeFile(this.mainSyncStatusPath(repoRoot), file);\n    }\n\n    readMainSyncLock(repoRoot: string): MainSyncLock | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const lockPath = this.mainSyncLockPath(repoRoot);\n            if (!fs.existsSync(lockPath)) return null;\n            const raw = JSON.parse(fs.readFileSync(lockPath, 'utf8')) as RawLock;\n            return new MainSyncLock(raw.state ?? LOCK_STATE_FINISHED, raw.started ?? 0, raw.pid ?? 0);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    writeMainSyncLock(repoRoot: string, lock: MainSyncLock): void {\n        const lockPath = this.mainSyncLockPath(repoRoot);\n        this.ensureDir(lockPath);\n        fs.writeFileSync(lockPath, JSON.stringify(lock, null, 2) + '\\n');\n    }\n\n    // A lock is stale (prior refresher assumed hung) once `inprocess` longer than hangTimeoutMinutes.\n    isLockStale(lock: MainSyncLock, hangTimeoutMinutes: number, now: number = Date.now()): boolean {\n        return now - lock.started > hangTimeoutMinutes * 60 * 1000;\n    }\n\n    // True when another refresher is actively running and we should NOT start a second one.\n    isRefreshInProgress(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now()): boolean {\n        const lock = this.readMainSyncLock(repoRoot);\n        if (!lock) return false;\n        if (lock.state !== LOCK_STATE_INPROCESS) return false;\n        if (this.isLockStale(lock, hangTimeoutMinutes, now)) return false;\n        return this.isProcessAlive(lock.pid);\n    }\n\n    /**\n     * ATOMICALLY take the refresher lock. Returns the held lock, or null when someone else holds it.\n     *\n     * Replaces the check-then-write pair (`isRefreshInProgress` then `writeMainSyncLock`), whose gap\n     * let two detached refreshers both pass the check and then both run `git fetch` at once — the\n     * concurrency this lock exists to prevent. The create uses the `wx` flag (O_CREAT|O_EXCL), so of\n     * N racing refreshers exactly one creates the file.\n     *\n     * A lock file left behind by a FINISHED, hung, or killed refresher is reclaimed: we only unlink\n     * and re-take it once `isRefreshInProgress` says the holder is provably not running, and we\n     * re-read afterwards to confirm the entry we see is ours before claiming the lock.\n     */\n    tryAcquireMainSyncLock(\n        repoRoot: string,\n        hangTimeoutMinutes: number,\n        now: number = Date.now(),\n        pid: number = process.pid,\n    ): MainSyncLock | null {\n        const lockPath = this.mainSyncLockPath(repoRoot);\n        this.ensureDir(lockPath);\n        const lock = this.inProcessLock(now, pid);\n        const payload = JSON.stringify(lock, null, 2) + '\\n';\n\n        if (this.createExclusive(lockPath, payload)) return lock;\n\n        // The file already exists. Leave it alone while a live refresher owns it.\n        if (this.isRefreshInProgress(repoRoot, hangTimeoutMinutes, now)) return null;\n\n        // Reclaim it: remove the dead entry, then re-take it exclusively so only one reclaimer wins.\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            fs.unlinkSync(lockPath);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;  // someone else reclaimed it first — the exclusive create below decides\n        }\n        if (!this.createExclusive(lockPath, payload)) return null;\n\n        // Confirm the lock on disk is OURS (a simultaneous reclaimer could have unlinked ours and\n        // written its own between the two calls above).\n        const held = this.readMainSyncLock(repoRoot);\n        if (!held || held.pid !== pid || held.started !== lock.started) return null;\n        return lock;\n    }\n\n    // O_CREAT|O_EXCL write: true when THIS call created the file, false when it already existed.\n    private createExclusive(lockPath: string, payload: string): boolean {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            fs.writeFileSync(lockPath, payload, { flag: 'wx' });\n            return true;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return false;\n        }\n    }\n\n    inProcessLock(now: number = Date.now(), pid: number = process.pid): MainSyncLock {\n        return new MainSyncLock(LOCK_STATE_INPROCESS, now, pid);\n    }\n\n    finishedLock(started: number): MainSyncLock {\n        return new MainSyncLock(LOCK_STATE_FINISHED, started, 0);\n    }\n\n    /**\n     * The SLOW path for ONE branch: the branch checked out in `repoRoot`. Runs its own fetch and its\n     * own `gh` query, so it is the right entry point for a single-worktree caller and for tests.\n     * The refresher uses computeAllMainSyncStatuses instead — see there for why.\n     */\n    computeMainSyncStatus(repoRoot: string): MainSyncStatus {\n        // Best-effort network refresh; offline just means we evaluate against the last-fetched ref.\n        this.fetchOriginMain(repoRoot);\n        return this.computeBranchStatus(repoRoot, this.gitBranch(repoRoot), this.loadPullRequestIndex(repoRoot));\n    }\n\n    /**\n     * The SLOW path for EVERY branch this repo has checked out — what the detached refresher runs.\n     *\n     * The cache is shared by all worktrees but was written for one branch, so only one worktree's\n     * guards were ever armed. Enumerating the worktrees here and writing all of their branches in one\n     * atomic map arms every worktree off a single refresh.\n     *\n     * NETWORK COST DOES NOT SCALE WITH BRANCH COUNT, which is the whole reason this is a separate\n     * method: ONE `git fetch` and ONE repo-wide `gh pr list` for all N branches (the old code asked\n     * `gh` twice per branch, so looping it would have cost 2N round trips). Everything after that is\n     * local git in each worktree — merge-base, rev-parse, diff, ls-files.\n     *\n     * The map is rebuilt from the LIVE worktree set every refresh, so a deleted branch or removed\n     * worktree simply stops appearing. No pruning pass, no unbounded growth.\n     */\n    computeAllMainSyncStatuses(repoRoot: string): MainSyncStatusFile {\n        this.fetchOriginMain(repoRoot);\n        const index = this.loadPullRequestIndex(repoRoot);\n        const branches: Record<string, MainSyncStatus> = {};\n        for (const tree of this.worktrees.listWorktrees(repoRoot)) {\n            // Detached HEAD (and a bare worktree) has no branch to key an entry on. Skipping it must\n            // not stop the others being recorded, which is why this is a `continue`, not a bail-out.\n            if (tree.branch === '' || this.hasBranch(branches, tree.branch)) continue;\n            branches[tree.branch] = this.computeBranchStatus(tree.path, tree.branch, index);\n        }\n        // `main` always present, even with no worktree on it: read-stale-guard's state A looks itself\n        // up under 'main', and an absent entry there would silently disarm the stale-main block.\n        if (!this.hasBranch(branches, 'main')) branches['main'] = this.mainOnlyStatus(repoRoot);\n        return new MainSyncStatusFile(MAIN_SYNC_STATUS_VERSION, new Date().toISOString(), branches);\n    }\n\n    private hasBranch(branches: Record<string, MainSyncStatus>, branch: string): boolean {\n        return Object.prototype.hasOwnProperty.call(branches, branch);\n    }\n\n    /**\n     * One branch's status, computed in `worktreePath` (the tree that has it checked out — the\n     * working-tree overlap signals are only correct from there). Does NOT fetch and does NOT call\n     * `gh`: both are done once per refresh by the caller.\n     */\n    // webpieces-disable max-lines-new-methods -- one cohesive slow-path computation\n    private computeBranchStatus(repoRoot: string, branch: string, index: PullRequestIndex): MainSyncStatus {\n        return this.stampForge(this.computeBranchStatusInner(repoRoot, branch, index), index);\n    }\n\n    // Every return path of the computation below has to carry the forge flag, and threading it through\n    // four constructions is how one of them would end up missing it. One wrapper, one assignment.\n    private stampForge(status: MainSyncStatus, index: PullRequestIndex): MainSyncStatus {\n        status.forgeReachable = index.forgeReachable;\n        return status;\n    }\n\n    // webpieces-disable max-lines-new-methods -- one cohesive slow-path computation\n    private computeBranchStatusInner(repoRoot: string, branch: string, index: PullRequestIndex): MainSyncStatus {\n        const mergedPr = index.mergedFor(branch);\n        const openPr = index.openFor(branch);\n\n        const head = this.capture(repoRoot, 'git', ['rev-parse', 'HEAD']);\n        const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n        const localMain = this.localMainHash(repoRoot);\n        const featureHead = head.ok ? head.out : '';\n        if (!head.ok || !originMain.ok) {\n            const status = this.benignStatus(branch, featureHead);\n            status.branchAlreadyMerged = mergedPr !== '';\n            status.mergedPr = mergedPr;\n            status.openPr = openPr;\n            status.localMain = localMain;\n            status.commitsBehind = this.commitDistance(repoRoot, localMain, originMain.ok ? originMain.out : '');\n            return status;\n        }\n\n        const forkPoint = this.capture(repoRoot, 'git', ['merge-base', 'origin/main', 'HEAD']);\n        if (!forkPoint.ok || forkPoint.out === '') {\n            const noFork = new MainSyncStatus(branch, mergedPr !== '', mergedPr, false, null, originMain.out, featureHead, false, [], new Date().toISOString());\n            noFork.openPr = openPr;\n            noFork.localMain = localMain;\n            noFork.commitsBehind = this.commitDistance(repoRoot, localMain, originMain.out);\n            return noFork;\n        }\n\n        const featureFiles = new Set(this.featureChangedFiles(repoRoot, forkPoint.out));\n        const mainFiles = this.changedFiles(repoRoot, forkPoint.out, 'origin/main');\n        const conflictFiles = mainFiles.filter((file: string): boolean => featureFiles.has(file));\n\n        const status = new MainSyncStatus(\n            branch,\n            mergedPr !== '',\n            mergedPr,\n            true,\n            forkPoint.out,\n            originMain.out,\n            featureHead,\n            conflictFiles.length > 0,\n            conflictFiles,\n            new Date().toISOString(),\n        );\n        status.openPr = openPr;\n        status.localMain = localMain;\n        status.commitsBehind = this.commitDistance(repoRoot, localMain, originMain.out);\n        return status;\n    }\n\n    // The recovery steps when there is no fork point with origin/main (a bad merge of main into branch).\n    squashRecoverySteps(currentBranch: string): string[] {\n        return [\n            '1. Fetch latest main:            git fetch origin main',\n            `2. New branch off origin/main:   git checkout -b ${currentBranch}-v2 origin/main`,\n            `3. Squash-merge old branch:      git merge --squash ${currentBranch}`,\n            '   ^^ HUMAN-ONLY. `git merge` is blocked for AI (redirect-how-to-merge-main). AI: ask the',\n            '   human to run step 3, and warn them it is a raw merge — only correct here because the',\n            '   branch is already broken. For a normal update from main they should push back and',\n            '   tell you to use the gated 3-point merge instead: `pnpm wp-start-update` (paired with',\n            '   `pnpm wp-finish-update`) when no PR is open, or `pnpm wp-start-upsert-pr` (paired with',\n            '   `pnpm wp-finish-upsert-pr`) when a PR IS open — a PR MUST use the upsert-pr pair.',\n            `4. Commit the squash:            git add -A && git commit -m \"Squashed from ${currentBranch}\"`,\n            '5. If a PR exists:               open a NEW PR for the -v2 branch and close the old one.',\n        ];\n    }\n\n    /**\n     * Synchronously stamp a clean \"up to date with main\" status — call right after a successful merge.\n     *\n     * This is the one writer that takes NO lock, and it knows about exactly one branch. It therefore\n     * goes through writeMainSyncStatus, which MERGES its entry into the existing map; writing a whole\n     * document from here would wipe every other worktree's entry.\n     */\n    stampCleanMainSyncStatus(repoRoot: string): void {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const branch = this.gitBranch(repoRoot);\n            const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n            const featureHead = this.capture(repoRoot, 'git', ['rev-parse', 'HEAD']);\n            if (!originMain.ok || !featureHead.ok) return;\n            const status = new MainSyncStatus(\n                branch, false, '', true, originMain.out, originMain.out, featureHead.out, false, [], new Date().toISOString(),\n            );\n            status.localMain = this.localMainHash(repoRoot);\n            status.commitsBehind = 0;\n            this.writeMainSyncStatus(repoRoot, status);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n        }\n    }\n\n    /**\n     * Refresh `origin/main` WITHOUT writing `.git/FETCH_HEAD`.\n     *\n     * WHY the flag is not optional: this runs in a DETACHED background process while the agent is\n     * running its own foreground `git fetch` / `git pull` in the very same repo. `.git/FETCH_HEAD` is\n     * a single file that git takes no lock on, so two overlapping fetches interleave their writes and\n     * can leave the SAME `for-merge` line twice. `git pull` then reads two for-merge entries and dies\n     * with `fatal: Cannot fast-forward to multiple branches` — wedging the exact command the\n     * read-stale-guard tells the agent to run. `--no-write-fetch-head` (git >= 2.29) still updates the\n     * remote-tracking ref, which is all anything downstream reads (`origin/main`, merge-base), so\n     * nothing here needs FETCH_HEAD written at all.\n     *\n     * Older git rejects the flag; only then do we retry the plain form, accepting the old behaviour\n     * rather than losing the refresh entirely on a pre-2020 git.\n     */\n    private fetchOriginMain(repoRoot: string): void {\n        const safe = spawnSync('git', ['fetch', '--no-write-fetch-head', 'origin', 'main'], {\n            cwd: repoRoot, encoding: 'utf8', stdio: ['ignore', 'ignore', 'pipe'],\n        });\n        if (safe.status === 0) return;\n        if (!this.isUnknownGitOption(safe.stderr)) return;  // a real failure (offline, auth) — not our business\n        spawnSync('git', ['fetch', 'origin', 'main'], { cwd: repoRoot, stdio: 'ignore' });\n    }\n\n    // Did git reject the flag itself (too old), as opposed to failing the network refresh?\n    private isUnknownGitOption(stderr: string | null): boolean {\n        const text = (stderr ?? '').toLowerCase();\n        return text.includes('unknown option') || text.includes('unknown switch') || text.includes('unrecognized option');\n    }\n\n    private ensureDir(filePath: string): void {\n        fs.mkdirSync(path.dirname(filePath), { recursive: true });\n    }\n\n    // Liveness probe: is `pid` still a running process? pid <= 0 (unknown) → assume alive.\n    private isProcessAlive(pid: number): boolean {\n        if (pid <= 0) return true;\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            process.kill(pid, 0);\n            return true;\n        } catch (err: unknown) {\n            const error = toError(err);\n            return !error.message.includes('ESRCH');\n        }\n    }\n\n    // Run a command capturing trimmed stdout; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, cmd: string, args: string[]): CmdCapture {\n        const result = spawnSync(cmd, args, { cwd: repoRoot, encoding: 'utf8' });\n        if (result.status !== 0 || typeof result.stdout !== 'string') return { ok: false, out: '' };\n        return { ok: true, out: result.stdout.trim() };\n    }\n\n    // The actual checked-out branch in repoRoot — cwd-correct so the cache's `branch` label matches.\n    private gitBranch(repoRoot: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', '--abbrev-ref', 'HEAD']);\n        return result.ok ? result.out : '';\n    }\n\n    // The LOCAL main hash. `refs/heads/main` (not the bare name) so it can never resolve to a remote\n    // ref or a tag. '' when main does not exist locally — which the guard treats as fail-open.\n    private localMainHash(repoRoot: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', 'refs/heads/main']);\n        return result.ok ? result.out : '';\n    }\n\n    // Slow-path only: the detached refresher calls this after fetching. Guards never count commits.\n    private commitDistance(repoRoot: string, localMain: string, originMain: string): number | null {\n        if (localMain === '' || originMain === '') return null;\n        const result = this.capture(repoRoot, 'git', ['rev-list', '--count', `${localMain}..${originMain}`]);\n        if (!result.ok || !/^\\d+$/.test(result.out)) return null;\n        return Number(result.out);\n    }\n\n    private changedFiles(repoRoot: string, base: string, head: string): string[] {\n        const result = this.capture(repoRoot, 'git', ['diff', '--name-only', base, head]);\n        if (!result.ok || result.out === '') return [];\n        return result.out.split('\\n').map((line: string): string => line.trim()).filter((line: string): boolean => line.length > 0);\n    }\n\n    // Every file this feature branch has touched since the fork point — committed AND still in the\n    // working tree (staged / unstaged / untracked), so a conflict is visible WHILE editing.\n    private featureChangedFiles(repoRoot: string, forkPoint: string): string[] {\n        const out = new Set<string>();\n        const add = (args: string[]): void => {\n            const r = this.capture(repoRoot, 'git', args);\n            if (!r.ok || r.out === '') return;\n            for (const line of r.out.split('\\n')) {\n                const f = line.trim();\n                if (f.length > 0) out.add(f);\n            }\n        };\n        add(['diff', '--name-only', forkPoint, 'HEAD']);      // committed since the fork point\n        add(['diff', '--name-only', 'HEAD']);                 // unstaged working-tree edits\n        add(['diff', '--name-only', '--cached', 'HEAD']);     // staged edits\n        add(['ls-files', '--others', '--exclude-standard']);  // untracked new files (respects .gitignore)\n        return [...out];\n    }\n\n    /**\n     * ONE repo-wide `gh pr list` giving every branch's merged/open PR — replaces the two per-branch\n     * `--head <branch>` queries. `--limit 200` bounds it; a branch whose only PR is older than that\n     * falls out of the index and reads as \"no PR\", which is the fail-OPEN direction (no merged PR =\n     * no block), the same way a missing `gh` or an offline machine already degraded.\n     */\n    private loadPullRequestIndex(repoRoot: string): PullRequestIndex {\n        const result = this.capture(repoRoot, 'gh', [\n            'pr', 'list', '--state', 'all', '--json', 'number,headRefName,state', '--limit', '200',\n        ]);\n        // `gh` could not be run, or exited non-zero (missing, unauthenticated, rate-limited, offline).\n        // An EMPTY index is the same fail-open answer as before — but it is now labelled UNREACHABLE, so\n        // the guards can report an abstention rather than an approval. Empty STDOUT on a zero exit is a\n        // real answer (\"this repo has no PRs\"), so only the failure path clears the flag.\n        if (!result.ok) return new PullRequestIndex({}, {}, false);\n        if (result.out === '') return new PullRequestIndex({}, {}, true);\n        return this.store.indexPullRequests(result.out);\n    }\n\n    /**\n     * A `main` entry synthesised WITHOUT a worktree standing on main. Carries only the two hashes\n     * read-stale-guard / stale-main-bash-guard actually compare (originMain vs the live tree's\n     * ancestry) — never merged, never conflicting, so it can only ever produce the stale-main verdict.\n     */\n    private mainOnlyStatus(repoRoot: string): MainSyncStatus {\n        const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n        const localMain = this.localMainHash(repoRoot);\n        const status = new MainSyncStatus(\n            'main', false, '', true, localMain === '' ? null : localMain,\n            originMain.ok ? originMain.out : '', localMain, false, [], new Date().toISOString(),\n        );\n        status.localMain = localMain;\n        status.commitsBehind = this.commitDistance(repoRoot, localMain, originMain.ok ? originMain.out : '');\n        return status;\n    }\n\n    // A benign status that never blocks — used when origin/main can't be resolved.\n    private benignStatus(branch: string, featureHead: string): MainSyncStatus {\n        return new MainSyncStatus(branch, false, '', true, null, '', featureHead, false, [], new Date().toISOString());\n    }\n}\n\n// Temporary migration delegators to MainSyncStatusService — removed once consumers inject it.\nconst mainSyncSvc = new MainSyncStatusService();\n\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function mainSyncStatusPath(repoRoot: string): string { return mainSyncSvc.mainSyncStatusPath(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function mainSyncLockPath(repoRoot: string): string { return mainSyncSvc.mainSyncLockPath(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncStatus(repoRoot: string, branch: string): MainSyncStatus | null { return mainSyncSvc.readMainSyncStatus(repoRoot, branch); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncStatusFile(repoRoot: string): MainSyncStatusFile | null { return mainSyncSvc.readMainSyncStatusFile(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncStatus(repoRoot: string, status: MainSyncStatus): void { mainSyncSvc.writeMainSyncStatus(repoRoot, status); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncStatusFile(repoRoot: string, file: MainSyncStatusFile): void { mainSyncSvc.writeMainSyncStatusFile(repoRoot, file); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncLock(repoRoot: string): MainSyncLock | null { return mainSyncSvc.readMainSyncLock(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncLock(repoRoot: string, lock: MainSyncLock): void { mainSyncSvc.writeMainSyncLock(repoRoot, lock); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function isLockStale(lock: MainSyncLock, hangTimeoutMinutes: number, now: number = Date.now()): boolean { return mainSyncSvc.isLockStale(lock, hangTimeoutMinutes, now); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function isRefreshInProgress(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now()): boolean { return mainSyncSvc.isRefreshInProgress(repoRoot, hangTimeoutMinutes, now); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function tryAcquireMainSyncLock(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now(), pid: number = process.pid): MainSyncLock | null { return mainSyncSvc.tryAcquireMainSyncLock(repoRoot, hangTimeoutMinutes, now, pid); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function inProcessLock(now: number = Date.now(), pid: number = process.pid): MainSyncLock { return mainSyncSvc.inProcessLock(now, pid); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function finishedLock(started: number): MainSyncLock { return mainSyncSvc.finishedLock(started); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function computeMainSyncStatus(repoRoot: string): MainSyncStatus { return mainSyncSvc.computeMainSyncStatus(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function computeAllMainSyncStatuses(repoRoot: string): MainSyncStatusFile { return mainSyncSvc.computeAllMainSyncStatuses(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function squashRecoverySteps(currentBranch: string): string[] { return mainSyncSvc.squashRecoverySteps(currentBranch); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function stampCleanMainSyncStatus(repoRoot: string): void { mainSyncSvc.stampCleanMainSyncStatus(repoRoot); }\n"]}
+{"version":3,"file":"main-sync-status.js","sourceRoot":"","sources":["../../../../../packages/tooling/repo-workflow-core/src/main-sync-status.ts"],"names":[],"mappings":";;;AA0iBA,gDAAiH;AAEjH,4CAA6G;AAE7G,gDAAwJ;AAExJ,wDAA4I;AAE5I,kDAA0I;AAE1I,0DAAkJ;AAElJ,4CAA0H;AAE1H,8CAAgI;AAEhI,kCAAiL;AAEjL,kDAAmM;AAEnM,wDAAqP;AAErP,sCAAgJ;AAEhJ,oCAAyG;AAEzG,sDAA+H;AAE/H,gEAA6I;AAE7I,kDAA+H;AAE/H,4DAAoH;;AA1kBpH,iDAA0C;AAC1C,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,8DAAuD;AACvD,qDAM0B;AAOqC,yGAZ3D,yCAAwB,OAY2D;AAA9E,+FAVL,+BAAc,OAUK;AAAE,mGATrB,mCAAkB,OASqB;AAAE,iGARzC,iCAAgB,OAQyC;AAN7D,8DAAuE;AACvE,iEAA6D;AAC7D,2CAA8C;AAM9C,sGAAsG;AACtG,wGAAwG;AACxG,qGAAqG;AACrG,wFAAwF;AAExF,oGAAoG;AACvF,QAAA,4BAA4B,GAAG,CAAC,CAAC;AAE9C,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AACtD,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAElD,MAAM,oBAAoB,GAAG,WAAW,CAAC;AACzC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,sGAAsG;AACtG,sGAAsG;AACtG,MAAa,YAAY;IACrB,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,GAAG,CAAS;IAEZ,YAAY,KAAa,EAAE,OAAe,EAAE,MAAc,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;CACJ;AAVD,oCAUC;AAeD;;;GAGG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAET;IACA;IACA;IACA;IAJrB,YACqB,SAAuB,6BAAY,EACnC,aAAyB,IAAI,2BAAU,EAAE,EACzC,QAA2B,IAAI,kCAAiB,CAAC,UAAU,CAAC,EAC5D,YAA6B,IAAI,2BAAe,EAAE;QAHlD,WAAM,GAAN,MAAM,CAA6B;QACnC,eAAU,GAAV,UAAU,CAA+B;QACzC,UAAK,GAAL,KAAK,CAAuD;QAC5D,cAAS,GAAT,SAAS,CAAyC;IACpE,CAAC;IAEJ;;;;;;;;;;;;;;OAcG;IACH,kBAAkB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;OAOG;IACH,kBAAkB,CAAC,QAAgB,EAAE,MAAc;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAClF,CAAC;IAED,6FAA6F;IAC7F,sBAAsB,CAAC,QAAgB;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;OAOG;IACH,mBAAmB,CAAC,QAAgB,EAAE,MAAsB;QACxD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;OAMG;IACH,uBAAuB,CAAC,QAAgB,EAAE,IAAwB;QAC9D,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAC7B,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;YACrE,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI,mBAAmB,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,QAAgB,EAAE,IAAkB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,kGAAkG;IAClG,WAAW,CAAC,IAAkB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAChF,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/D,CAAC;IAED,wFAAwF;IACxF,mBAAmB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK,KAAK,oBAAoB;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAClE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,sBAAsB,CAClB,QAAgB,EAChB,kBAA0B,EAC1B,MAAc,IAAI,CAAC,GAAG,EAAE,EACxB,MAAc,OAAO,CAAC,GAAG;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAErD,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzD,0EAA0E;QAC1E,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7E,6FAA6F;QAC7F,8DAA8D;QAC9D,IAAI,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC,CAAE,uEAAuE;QACxF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1D,0FAA0F;QAC1F,gDAAgD;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC5E,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,6FAA6F;IACrF,eAAe,CAAC,QAAgB,EAAE,OAAe;QACrD,8DAA8D;QAC9D,IAAI,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,aAAa,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG;QAC7D,OAAO,IAAI,YAAY,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,YAAY,CAAC,OAAe;QACxB,OAAO,IAAI,YAAY,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACH,qBAAqB,CAAC,QAAgB;QAClC,4FAA4F;QAC5F,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7G,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,0BAA0B,CAAC,QAAgB;QACvC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAmC,EAAE,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,yFAAyF;YACzF,yFAAyF;YACzF,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;QACD,8FAA8F;QAC9F,yFAAyF;QACzF,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACxF,OAAO,IAAI,mCAAkB,CAAC,yCAAwB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChG,CAAC;IAEO,SAAS,CAAC,QAAwC,EAAE,MAAc;QACtE,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;;;OAIG;IACH,gFAAgF;IACxE,mBAAmB,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAuB;QACjF,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1F,CAAC;IAED,mGAAmG;IACnG,8FAA8F;IACtF,UAAU,CAAC,MAAsB,EAAE,KAAuB;QAC9D,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC7C,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,gFAAgF;IACxE,wBAAwB,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAuB;QACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAErC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,CAAC,mBAAmB,GAAG,QAAQ,KAAK,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrG,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,+BAAc,CAAC,MAAM,EAAE,QAAQ,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACpJ,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC5E,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAE1F,MAAM,MAAM,GAAG,IAAI,+BAAc,CAC7B,MAAM,EACN,QAAQ,KAAK,EAAE,EACf,QAAQ,EACR,IAAI,EACJ,SAAS,CAAC,GAAG,EACb,UAAU,CAAC,GAAG,EACd,WAAW,EACX,aAAa,CAAC,MAAM,GAAG,CAAC,EACxB,aAAa,EACb,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAC3B,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,qGAAqG;IACrG,mBAAmB,CAAC,aAAqB;QACrC,OAAO;YACH,wDAAwD;YACxD,oDAAoD,aAAa,iBAAiB;YAClF,uDAAuD,aAAa,EAAE;YACtE,2FAA2F;YAC3F,yFAAyF;YACzF,sFAAsF;YACtF,yFAAyF;YACzF,2FAA2F;YAC3F,sFAAsF;YACtF,+EAA+E,aAAa,GAAG;YAC/F,0FAA0F;SAC7F,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACH,wBAAwB,CAAC,QAAgB;QACrC,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;YAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE;gBAAE,OAAO;YAC9C,MAAM,MAAM,GAAG,IAAI,+BAAc,CAC7B,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAChH,CAAC;YACF,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;QACf,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,eAAe,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;YAChF,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;SACvE,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,CAAE,oDAAoD;QACxG,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,uFAAuF;IAC/E,kBAAkB,CAAC,MAAqB;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACtH,CAAC;IAEO,SAAS,CAAC,QAAgB;QAC9B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,uFAAuF;IAC/E,cAAc,CAAC,GAAW;QAC9B,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1B,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IAED,sFAAsF;IAC9E,OAAO,CAAC,QAAgB,EAAE,GAAW,EAAE,IAAc;QACzD,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,iGAAiG;IACzF,SAAS,CAAC,QAAgB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QACpF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,iGAAiG;IACjG,2FAA2F;IACnF,aAAa,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,gGAAgG;IACxF,cAAc,CAAC,QAAgB,EAAE,SAAiB,EAAE,UAAkB;QAC1E,IAAI,SAAS,KAAK,EAAE,IAAI,UAAU,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,SAAS,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAEO,YAAY,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAY;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,+FAA+F;IAC/F,wFAAwF;IAChF,mBAAmB,CAAC,QAAgB,EAAE,SAAiB;QAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,MAAM,GAAG,GAAG,CAAC,IAAc,EAAQ,EAAE;YACjC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE;gBAAE,OAAO;YAClC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;QACL,CAAC,CAAC;QACF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAM,iCAAiC;QACvF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAiB,8BAA8B;QACpF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAK,eAAe;QACrE,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAE,4CAA4C;QAClG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACK,oBAAoB,CAAC,QAAgB;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACxC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,KAAK;SACzF,CAAC,CAAC;QACH,+FAA+F;QAC/F,iGAAiG;QACjG,gGAAgG;QAChG,kFAAkF;QAClF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,iCAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,IAAI,iCAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,QAAgB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,+BAAc,CAC7B,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAC5D,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACtF,CAAC;QACF,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,+EAA+E;IACvE,YAAY,CAAC,MAAc,EAAE,WAAmB;QACpD,OAAO,IAAI,+BAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnH,CAAC;CACJ,CAAA;AAjeY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAGR,6BAAY;QACR,2BAAU;QACf,kCAAiB;QACb,2BAAe;GALtC,qBAAqB,CAiejC;AAED,8FAA8F;AAC9F,MAAM,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;AAEhD,4IAA4I;AAC5I,SAAgB,kBAAkB,CAAC,QAAgB,IAAY,OAAO,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjH,4IAA4I;AAC5I,SAAgB,gBAAgB,CAAC,QAAgB,IAAY,OAAO,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7G,4IAA4I;AAC5I,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,MAAc,IAA2B,OAAO,WAAW,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AACxJ,4IAA4I;AAC5I,SAAgB,sBAAsB,CAAC,QAAgB,IAA+B,OAAO,WAAW,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC5I,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,MAAsB,IAAU,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAC1I,4IAA4I;AAC5I,SAAgB,uBAAuB,CAAC,QAAgB,EAAE,IAAwB,IAAU,WAAW,CAAC,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAClJ,4IAA4I;AAC5I,SAAgB,gBAAgB,CAAC,QAAgB,IAAyB,OAAO,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC1H,4IAA4I;AAC5I,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,IAAkB,IAAU,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAChI,4IAA4I;AAC5I,SAAgB,WAAW,CAAC,IAAkB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,IAAa,OAAO,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACjL,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,IAAa,OAAO,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACnM,4IAA4I;AAC5I,SAAgB,sBAAsB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG,IAAyB,OAAO,WAAW,CAAC,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACrP,4IAA4I;AAC5I,SAAgB,aAAa,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG,IAAkB,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAChJ,4IAA4I;AAC5I,SAAgB,YAAY,CAAC,OAAe,IAAkB,OAAO,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzG,4IAA4I;AAC5I,SAAgB,qBAAqB,CAAC,QAAgB,IAAoB,OAAO,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC/H,4IAA4I;AAC5I,SAAgB,0BAA0B,CAAC,QAAgB,IAAwB,OAAO,WAAW,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7I,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,aAAqB,IAAc,OAAO,WAAW,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC/H,4IAA4I;AAC5I,SAAgB,wBAAwB,CAAC,QAAgB,IAAU,WAAW,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { AtomicFile } from '@webpieces/tooling-common';\nimport {\n    MAIN_SYNC_STATUS_VERSION,\n    MainSyncFileStore,\n    MainSyncStatus,\n    MainSyncStatusFile,\n    PullRequestIndex,\n} from './main-sync-file';\nimport { DotWebpieces, dotWebpieces } from '@webpieces/tooling-common';\nimport { toError } from '@webpieces/tooling-common/to-error';\nimport { WorktreeService } from './worktrees';\n\n// The on-disk shape lives in main-sync-file.ts; re-exported so every existing importer of\n// `MainSyncStatus` from this module keeps working.\nexport { MainSyncStatus, MainSyncStatusFile, PullRequestIndex, MAIN_SYNC_STATUS_VERSION };\n\n// Shared \"is my feature branch healthy relative to origin/main?\" state. The SLOW signals (git fetch +\n// merge-base + same-file-overlap + a merged-PR lookup) are computed by the ai-hook-rules refresher in a\n// DETACHED background process; the feature-branch-guard only READS this cached file. pr-gate's merge\n// flow also writes it synchronously after a merge. Lives here (the shared dep of both).\n\n// How long an `inprocess` refresher lock may sit before a new refresher assumes the prior run hung.\nexport const DEFAULT_HANG_TIMEOUT_MINUTES = 5;\n\nconst MAIN_SYNC_STATUS_FILE = 'main-sync-status.json';\nconst MAIN_SYNC_LOCK_FILE = 'main-sync.lock.json';\n\nconst LOCK_STATE_INPROCESS = 'inprocess';\nconst LOCK_STATE_FINISHED = 'finished';\n\n// Concurrency state machine for the detached refresher. `started` is epoch ms. `pid` is the refresher\n// process's pid (0 = unknown) — used so a KILLED refresher doesn't wedge `inprocess` for the timeout.\nexport class MainSyncLock {\n    state: string;\n    started: number;\n    pid: number;\n\n    constructor(state: string, started: number, pid: number = 0) {\n        this.state = state;\n        this.started = started;\n        this.pid = pid;\n    }\n}\n\n// Raw JSON shape for the cast at the parse boundary.\ninterface RawLock {\n    state?: string;\n    started?: number;\n    pid?: number;\n}\n\n// Result of a captured git/gh invocation: ok=false on spawn failure or non-zero exit.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n}\n\n/**\n * Reads/writes the main-sync cache + lock and computes the slow \"is my branch healthy vs origin/main?\"\n * status. `@injectable(bindingScopeValues.Singleton)` so it's injectable and drawn in consumers’ DI designs.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class MainSyncStatusService {\n    constructor(\n        private readonly dotDir: DotWebpieces = dotWebpieces,\n        private readonly atomicFile: AtomicFile = new AtomicFile(),\n        private readonly store: MainSyncFileStore = new MainSyncFileStore(atomicFile),\n        private readonly worktrees: WorktreeService = new WorktreeService(),\n    ) {}\n\n    /**\n     * SHARED scope: `<primary>/.webpieces-logs/main-sync-status.json`, one per repo.\n     *\n     * It is the OUTPUT of the single-flight refresher below, so it has to live where the lock lives —\n     * one `.git`, one `origin/main`, one fetch, one answer. A per-worktree copy under single-flight\n     * would only ever be written for whichever worktree won the lock anyway.\n     *\n     * FORMERLY a known defect, now fixed: the file's CONTENT used to be keyed to ONE branch, and every\n     * reader fails OPEN when the cached branch is not the branch being judged (`stale-cross-branch-cache\n     * (fail-open)`). With several worktrees on several branches, only the winner of the lock was ever\n     * described, so every other worktree's guards abstained — and which one was armed thrashed as the\n     * lock changed hands. The file is now a MAP of branch -> status (see MainSyncStatusFile): the single\n     * winning refresher enumerates every worktree and records all of their branches in one atomic write,\n     * so one fetch arms everyone. Single-flight is unchanged; only what the winner writes changed.\n     */\n    mainSyncStatusPath(repoRoot: string): string {\n        return this.dotDir.sharedFile(repoRoot, MAIN_SYNC_STATUS_FILE);\n    }\n\n    /**\n     * SHARED scope — the single-flight lock for the whole repo.\n     *\n     * This is the fix for the filed bug \"the detached main-sync refresher's `git fetch` races the\n     * agent's foreground `git fetch`/`git pull` and corrupts `.git/FETCH_HEAD`\". The lock was already\n     * atomic (O_CREAT|O_EXCL) and already serialised refreshers against each other — but only WITHIN\n     * one worktree, so N worktrees meant N locks and up to N concurrent `git fetch`es against the ONE\n     * shared `.git`, which is exactly how a duplicate `for-merge` line lands in FETCH_HEAD. There is\n     * one `.git`, so there is now one lock: at most one refresher in flight across all worktrees.\n     *\n     * Stale-lock handling is unchanged and still required (a lock nobody can clear is worse than the\n     * race): the holder records pid + start epoch, and `tryAcquireMainSyncLock` reclaims it once\n     * `isRefreshInProgress` proves the holder is finished, hung past hangTimeoutMinutes, or dead.\n     */\n    mainSyncLockPath(repoRoot: string): string {\n        return this.dotDir.sharedFile(repoRoot, MAIN_SYNC_LOCK_FILE);\n    }\n\n    /**\n     * The cached status FOR ONE BRANCH — the only read the four main-sync guards perform.\n     *\n     * `branch` is mandatory and is the branch being judged. A branch the last refresh never saw\n     * returns null, which every guard already treats as `no-sync-cache (fail-open)`, so an unknown\n     * branch degrades exactly as a missing file did. Any error (missing, truncated, malformed JSON)\n     * also returns null — this must never throw on the blocking path.\n     */\n    readMainSyncStatus(repoRoot: string, branch: string): MainSyncStatus | null {\n        return this.store.branchStatus(this.readMainSyncStatusFile(repoRoot), branch);\n    }\n\n    // The whole branch-keyed document, or null. Callers that need more than one branch use this.\n    readMainSyncStatusFile(repoRoot: string): MainSyncStatusFile | null {\n        return this.store.readFile(this.mainSyncStatusPath(repoRoot));\n    }\n\n    /**\n     * Merge ONE branch's entry into the existing map, atomically, leaving siblings untouched.\n     *\n     * Read-modify-write rather than replace: this is the writer used by everyone who is NOT the\n     * single-flight refresher (notably pr-gate's post-merge stamp, which holds no lock and knows about\n     * exactly one branch). Replacing the document from there would erase every other worktree's entry\n     * and silently disarm their guards until the next refresh.\n     */\n    writeMainSyncStatus(repoRoot: string, status: MainSyncStatus): void {\n        this.store.mergeBranch(this.mainSyncStatusPath(repoRoot), status);\n    }\n\n    /**\n     * Replace the WHOLE document — only the winning refresher may do this.\n     *\n     * ATOMIC (temp file + `rename()` in the same directory). The refresher writes this file while\n     * guards on the blocking path read it, possibly from another worktree; a plain `writeFileSync`\n     * truncates first, so a reader landing in that window gets a torn document. See AtomicFile.\n     */\n    writeMainSyncStatusFile(repoRoot: string, file: MainSyncStatusFile): void {\n        this.store.writeFile(this.mainSyncStatusPath(repoRoot), file);\n    }\n\n    readMainSyncLock(repoRoot: string): MainSyncLock | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const lockPath = this.mainSyncLockPath(repoRoot);\n            if (!fs.existsSync(lockPath)) return null;\n            const raw = JSON.parse(fs.readFileSync(lockPath, 'utf8')) as RawLock;\n            return new MainSyncLock(raw.state ?? LOCK_STATE_FINISHED, raw.started ?? 0, raw.pid ?? 0);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    writeMainSyncLock(repoRoot: string, lock: MainSyncLock): void {\n        const lockPath = this.mainSyncLockPath(repoRoot);\n        this.ensureDir(lockPath);\n        fs.writeFileSync(lockPath, JSON.stringify(lock, null, 2) + '\\n');\n    }\n\n    // A lock is stale (prior refresher assumed hung) once `inprocess` longer than hangTimeoutMinutes.\n    isLockStale(lock: MainSyncLock, hangTimeoutMinutes: number, now: number = Date.now()): boolean {\n        return now - lock.started > hangTimeoutMinutes * 60 * 1000;\n    }\n\n    // True when another refresher is actively running and we should NOT start a second one.\n    isRefreshInProgress(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now()): boolean {\n        const lock = this.readMainSyncLock(repoRoot);\n        if (!lock) return false;\n        if (lock.state !== LOCK_STATE_INPROCESS) return false;\n        if (this.isLockStale(lock, hangTimeoutMinutes, now)) return false;\n        return this.isProcessAlive(lock.pid);\n    }\n\n    /**\n     * ATOMICALLY take the refresher lock. Returns the held lock, or null when someone else holds it.\n     *\n     * Replaces the check-then-write pair (`isRefreshInProgress` then `writeMainSyncLock`), whose gap\n     * let two detached refreshers both pass the check and then both run `git fetch` at once — the\n     * concurrency this lock exists to prevent. The create uses the `wx` flag (O_CREAT|O_EXCL), so of\n     * N racing refreshers exactly one creates the file.\n     *\n     * A lock file left behind by a FINISHED, hung, or killed refresher is reclaimed: we only unlink\n     * and re-take it once `isRefreshInProgress` says the holder is provably not running, and we\n     * re-read afterwards to confirm the entry we see is ours before claiming the lock.\n     */\n    tryAcquireMainSyncLock(\n        repoRoot: string,\n        hangTimeoutMinutes: number,\n        now: number = Date.now(),\n        pid: number = process.pid,\n    ): MainSyncLock | null {\n        const lockPath = this.mainSyncLockPath(repoRoot);\n        this.ensureDir(lockPath);\n        const lock = this.inProcessLock(now, pid);\n        const payload = JSON.stringify(lock, null, 2) + '\\n';\n\n        if (this.createExclusive(lockPath, payload)) return lock;\n\n        // The file already exists. Leave it alone while a live refresher owns it.\n        if (this.isRefreshInProgress(repoRoot, hangTimeoutMinutes, now)) return null;\n\n        // Reclaim it: remove the dead entry, then re-take it exclusively so only one reclaimer wins.\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            fs.unlinkSync(lockPath);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;  // someone else reclaimed it first — the exclusive create below decides\n        }\n        if (!this.createExclusive(lockPath, payload)) return null;\n\n        // Confirm the lock on disk is OURS (a simultaneous reclaimer could have unlinked ours and\n        // written its own between the two calls above).\n        const held = this.readMainSyncLock(repoRoot);\n        if (!held || held.pid !== pid || held.started !== lock.started) return null;\n        return lock;\n    }\n\n    // O_CREAT|O_EXCL write: true when THIS call created the file, false when it already existed.\n    private createExclusive(lockPath: string, payload: string): boolean {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            fs.writeFileSync(lockPath, payload, { flag: 'wx' });\n            return true;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return false;\n        }\n    }\n\n    inProcessLock(now: number = Date.now(), pid: number = process.pid): MainSyncLock {\n        return new MainSyncLock(LOCK_STATE_INPROCESS, now, pid);\n    }\n\n    finishedLock(started: number): MainSyncLock {\n        return new MainSyncLock(LOCK_STATE_FINISHED, started, 0);\n    }\n\n    /**\n     * The SLOW path for ONE branch: the branch checked out in `repoRoot`. Runs its own fetch and its\n     * own `gh` query, so it is the right entry point for a single-worktree caller and for tests.\n     * The refresher uses computeAllMainSyncStatuses instead — see there for why.\n     */\n    computeMainSyncStatus(repoRoot: string): MainSyncStatus {\n        // Best-effort network refresh; offline just means we evaluate against the last-fetched ref.\n        this.fetchOriginMain(repoRoot);\n        return this.computeBranchStatus(repoRoot, this.gitBranch(repoRoot), this.loadPullRequestIndex(repoRoot));\n    }\n\n    /**\n     * The SLOW path for EVERY branch this repo has checked out — what the detached refresher runs.\n     *\n     * The cache is shared by all worktrees but was written for one branch, so only one worktree's\n     * guards were ever armed. Enumerating the worktrees here and writing all of their branches in one\n     * atomic map arms every worktree off a single refresh.\n     *\n     * NETWORK COST DOES NOT SCALE WITH BRANCH COUNT, which is the whole reason this is a separate\n     * method: ONE `git fetch` and ONE repo-wide `gh pr list` for all N branches (the old code asked\n     * `gh` twice per branch, so looping it would have cost 2N round trips). Everything after that is\n     * local git in each worktree — merge-base, rev-parse, diff, ls-files.\n     *\n     * The map is rebuilt from the LIVE worktree set every refresh, so a deleted branch or removed\n     * worktree simply stops appearing. No pruning pass, no unbounded growth.\n     */\n    computeAllMainSyncStatuses(repoRoot: string): MainSyncStatusFile {\n        this.fetchOriginMain(repoRoot);\n        const index = this.loadPullRequestIndex(repoRoot);\n        const branches: Record<string, MainSyncStatus> = {};\n        for (const tree of this.worktrees.listWorktrees(repoRoot)) {\n            // Detached HEAD (and a bare worktree) has no branch to key an entry on. Skipping it must\n            // not stop the others being recorded, which is why this is a `continue`, not a bail-out.\n            if (tree.branch === '' || this.hasBranch(branches, tree.branch)) continue;\n            branches[tree.branch] = this.computeBranchStatus(tree.path, tree.branch, index);\n        }\n        // `main` always present, even with no worktree on it: read-stale-guard's state A looks itself\n        // up under 'main', and an absent entry there would silently disarm the stale-main block.\n        if (!this.hasBranch(branches, 'main')) branches['main'] = this.mainOnlyStatus(repoRoot);\n        return new MainSyncStatusFile(MAIN_SYNC_STATUS_VERSION, new Date().toISOString(), branches);\n    }\n\n    private hasBranch(branches: Record<string, MainSyncStatus>, branch: string): boolean {\n        return Object.prototype.hasOwnProperty.call(branches, branch);\n    }\n\n    /**\n     * One branch's status, computed in `worktreePath` (the tree that has it checked out — the\n     * working-tree overlap signals are only correct from there). Does NOT fetch and does NOT call\n     * `gh`: both are done once per refresh by the caller.\n     */\n    // webpieces-disable max-lines-new-methods -- one cohesive slow-path computation\n    private computeBranchStatus(repoRoot: string, branch: string, index: PullRequestIndex): MainSyncStatus {\n        return this.stampForge(this.computeBranchStatusInner(repoRoot, branch, index), index);\n    }\n\n    // Every return path of the computation below has to carry the forge flag, and threading it through\n    // four constructions is how one of them would end up missing it. One wrapper, one assignment.\n    private stampForge(status: MainSyncStatus, index: PullRequestIndex): MainSyncStatus {\n        status.forgeReachable = index.forgeReachable;\n        return status;\n    }\n\n    // webpieces-disable max-lines-new-methods -- one cohesive slow-path computation\n    private computeBranchStatusInner(repoRoot: string, branch: string, index: PullRequestIndex): MainSyncStatus {\n        const mergedPr = index.mergedFor(branch);\n        const openPr = index.openFor(branch);\n\n        const head = this.capture(repoRoot, 'git', ['rev-parse', 'HEAD']);\n        const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n        const localMain = this.localMainHash(repoRoot);\n        const featureHead = head.ok ? head.out : '';\n        if (!head.ok || !originMain.ok) {\n            const status = this.benignStatus(branch, featureHead);\n            status.branchAlreadyMerged = mergedPr !== '';\n            status.mergedPr = mergedPr;\n            status.openPr = openPr;\n            status.localMain = localMain;\n            status.commitsBehind = this.commitDistance(repoRoot, localMain, originMain.ok ? originMain.out : '');\n            return status;\n        }\n\n        const forkPoint = this.capture(repoRoot, 'git', ['merge-base', 'origin/main', 'HEAD']);\n        if (!forkPoint.ok || forkPoint.out === '') {\n            const noFork = new MainSyncStatus(branch, mergedPr !== '', mergedPr, false, null, originMain.out, featureHead, false, [], new Date().toISOString());\n            noFork.openPr = openPr;\n            noFork.localMain = localMain;\n            noFork.commitsBehind = this.commitDistance(repoRoot, localMain, originMain.out);\n            return noFork;\n        }\n\n        const featureFiles = new Set(this.featureChangedFiles(repoRoot, forkPoint.out));\n        const mainFiles = this.changedFiles(repoRoot, forkPoint.out, 'origin/main');\n        const conflictFiles = mainFiles.filter((file: string): boolean => featureFiles.has(file));\n\n        const status = new MainSyncStatus(\n            branch,\n            mergedPr !== '',\n            mergedPr,\n            true,\n            forkPoint.out,\n            originMain.out,\n            featureHead,\n            conflictFiles.length > 0,\n            conflictFiles,\n            new Date().toISOString(),\n        );\n        status.openPr = openPr;\n        status.localMain = localMain;\n        status.commitsBehind = this.commitDistance(repoRoot, localMain, originMain.out);\n        return status;\n    }\n\n    // The recovery steps when there is no fork point with origin/main (a bad merge of main into branch).\n    squashRecoverySteps(currentBranch: string): string[] {\n        return [\n            '1. Fetch latest main:            git fetch origin main',\n            `2. New branch off origin/main:   git checkout -b ${currentBranch}-v2 origin/main`,\n            `3. Squash-merge old branch:      git merge --squash ${currentBranch}`,\n            '   ^^ HUMAN-ONLY. `git merge` is blocked for AI (redirect-how-to-merge-main). AI: ask the',\n            '   human to run step 3, and warn them it is a raw merge — only correct here because the',\n            '   branch is already broken. For a normal update from main they should push back and',\n            '   tell you to use the gated 3-point merge instead: `pnpm wp-start-update` (paired with',\n            '   `pnpm wp-finish-update`) when no PR is open, or `pnpm wp-start-upsert-pr` (paired with',\n            '   `pnpm wp-finish-upsert-pr`) when a PR IS open — a PR MUST use the upsert-pr pair.',\n            `4. Commit the squash:            git add -A && git commit -m \"Squashed from ${currentBranch}\"`,\n            '5. If a PR exists:               open a NEW PR for the -v2 branch and close the old one.',\n        ];\n    }\n\n    /**\n     * Synchronously stamp a clean \"up to date with main\" status — call right after a successful merge.\n     *\n     * This is the one writer that takes NO lock, and it knows about exactly one branch. It therefore\n     * goes through writeMainSyncStatus, which MERGES its entry into the existing map; writing a whole\n     * document from here would wipe every other worktree's entry.\n     */\n    stampCleanMainSyncStatus(repoRoot: string): void {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const branch = this.gitBranch(repoRoot);\n            const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n            const featureHead = this.capture(repoRoot, 'git', ['rev-parse', 'HEAD']);\n            if (!originMain.ok || !featureHead.ok) return;\n            const status = new MainSyncStatus(\n                branch, false, '', true, originMain.out, originMain.out, featureHead.out, false, [], new Date().toISOString(),\n            );\n            status.localMain = this.localMainHash(repoRoot);\n            status.commitsBehind = 0;\n            this.writeMainSyncStatus(repoRoot, status);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n        }\n    }\n\n    /**\n     * Refresh `origin/main` WITHOUT writing `.git/FETCH_HEAD`.\n     *\n     * WHY the flag is not optional: this runs in a DETACHED background process while the agent is\n     * running its own foreground `git fetch` / `git pull` in the very same repo. `.git/FETCH_HEAD` is\n     * a single file that git takes no lock on, so two overlapping fetches interleave their writes and\n     * can leave the SAME `for-merge` line twice. `git pull` then reads two for-merge entries and dies\n     * with `fatal: Cannot fast-forward to multiple branches` — wedging the exact command the\n     * read-stale-guard tells the agent to run. `--no-write-fetch-head` (git >= 2.29) still updates the\n     * remote-tracking ref, which is all anything downstream reads (`origin/main`, merge-base), so\n     * nothing here needs FETCH_HEAD written at all.\n     *\n     * Older git rejects the flag; only then do we retry the plain form, accepting the old behaviour\n     * rather than losing the refresh entirely on a pre-2020 git.\n     */\n    private fetchOriginMain(repoRoot: string): void {\n        const safe = spawnSync('git', ['fetch', '--no-write-fetch-head', 'origin', 'main'], {\n            cwd: repoRoot, encoding: 'utf8', stdio: ['ignore', 'ignore', 'pipe'],\n        });\n        if (safe.status === 0) return;\n        if (!this.isUnknownGitOption(safe.stderr)) return;  // a real failure (offline, auth) — not our business\n        spawnSync('git', ['fetch', 'origin', 'main'], { cwd: repoRoot, stdio: 'ignore' });\n    }\n\n    // Did git reject the flag itself (too old), as opposed to failing the network refresh?\n    private isUnknownGitOption(stderr: string | null): boolean {\n        const text = (stderr ?? '').toLowerCase();\n        return text.includes('unknown option') || text.includes('unknown switch') || text.includes('unrecognized option');\n    }\n\n    private ensureDir(filePath: string): void {\n        fs.mkdirSync(path.dirname(filePath), { recursive: true });\n    }\n\n    // Liveness probe: is `pid` still a running process? pid <= 0 (unknown) → assume alive.\n    private isProcessAlive(pid: number): boolean {\n        if (pid <= 0) return true;\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            process.kill(pid, 0);\n            return true;\n        } catch (err: unknown) {\n            const error = toError(err);\n            return !error.message.includes('ESRCH');\n        }\n    }\n\n    // Run a command capturing trimmed stdout; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, cmd: string, args: string[]): CmdCapture {\n        const result = spawnSync(cmd, args, { cwd: repoRoot, encoding: 'utf8' });\n        if (result.status !== 0 || typeof result.stdout !== 'string') return { ok: false, out: '' };\n        return { ok: true, out: result.stdout.trim() };\n    }\n\n    // The actual checked-out branch in repoRoot — cwd-correct so the cache's `branch` label matches.\n    private gitBranch(repoRoot: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', '--abbrev-ref', 'HEAD']);\n        return result.ok ? result.out : '';\n    }\n\n    // The LOCAL main hash. `refs/heads/main` (not the bare name) so it can never resolve to a remote\n    // ref or a tag. '' when main does not exist locally — which the guard treats as fail-open.\n    private localMainHash(repoRoot: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', 'refs/heads/main']);\n        return result.ok ? result.out : '';\n    }\n\n    // Slow-path only: the detached refresher calls this after fetching. Guards never count commits.\n    private commitDistance(repoRoot: string, localMain: string, originMain: string): number | null {\n        if (localMain === '' || originMain === '') return null;\n        const result = this.capture(repoRoot, 'git', ['rev-list', '--count', `${localMain}..${originMain}`]);\n        if (!result.ok || !/^\\d+$/.test(result.out)) return null;\n        return Number(result.out);\n    }\n\n    private changedFiles(repoRoot: string, base: string, head: string): string[] {\n        const result = this.capture(repoRoot, 'git', ['diff', '--name-only', base, head]);\n        if (!result.ok || result.out === '') return [];\n        return result.out.split('\\n').map((line: string): string => line.trim()).filter((line: string): boolean => line.length > 0);\n    }\n\n    // Every file this feature branch has touched since the fork point — committed AND still in the\n    // working tree (staged / unstaged / untracked), so a conflict is visible WHILE editing.\n    private featureChangedFiles(repoRoot: string, forkPoint: string): string[] {\n        const out = new Set<string>();\n        const add = (args: string[]): void => {\n            const r = this.capture(repoRoot, 'git', args);\n            if (!r.ok || r.out === '') return;\n            for (const line of r.out.split('\\n')) {\n                const f = line.trim();\n                if (f.length > 0) out.add(f);\n            }\n        };\n        add(['diff', '--name-only', forkPoint, 'HEAD']);      // committed since the fork point\n        add(['diff', '--name-only', 'HEAD']);                 // unstaged working-tree edits\n        add(['diff', '--name-only', '--cached', 'HEAD']);     // staged edits\n        add(['ls-files', '--others', '--exclude-standard']);  // untracked new files (respects .gitignore)\n        return [...out];\n    }\n\n    /**\n     * ONE repo-wide `gh pr list` giving every branch's merged/open PR — replaces the two per-branch\n     * `--head <branch>` queries. `--limit 200` bounds it; a branch whose only PR is older than that\n     * falls out of the index and reads as \"no PR\", which is the fail-OPEN direction (no merged PR =\n     * no block), the same way a missing `gh` or an offline machine already degraded.\n     */\n    private loadPullRequestIndex(repoRoot: string): PullRequestIndex {\n        const result = this.capture(repoRoot, 'gh', [\n            'pr', 'list', '--state', 'all', '--json', 'number,headRefName,state', '--limit', '200',\n        ]);\n        // `gh` could not be run, or exited non-zero (missing, unauthenticated, rate-limited, offline).\n        // An EMPTY index is the same fail-open answer as before — but it is now labelled UNREACHABLE, so\n        // the guards can report an abstention rather than an approval. Empty STDOUT on a zero exit is a\n        // real answer (\"this repo has no PRs\"), so only the failure path clears the flag.\n        if (!result.ok) return new PullRequestIndex({}, {}, false);\n        if (result.out === '') return new PullRequestIndex({}, {}, true);\n        return this.store.indexPullRequests(result.out);\n    }\n\n    /**\n     * A `main` entry synthesised WITHOUT a worktree standing on main. Carries only the two hashes\n     * read-stale-guard / stale-main-bash-guard actually compare (originMain vs the live tree's\n     * ancestry) — never merged, never conflicting, so it can only ever produce the stale-main verdict.\n     */\n    private mainOnlyStatus(repoRoot: string): MainSyncStatus {\n        const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n        const localMain = this.localMainHash(repoRoot);\n        const status = new MainSyncStatus(\n            'main', false, '', true, localMain === '' ? null : localMain,\n            originMain.ok ? originMain.out : '', localMain, false, [], new Date().toISOString(),\n        );\n        status.localMain = localMain;\n        status.commitsBehind = this.commitDistance(repoRoot, localMain, originMain.ok ? originMain.out : '');\n        return status;\n    }\n\n    // A benign status that never blocks — used when origin/main can't be resolved.\n    private benignStatus(branch: string, featureHead: string): MainSyncStatus {\n        return new MainSyncStatus(branch, false, '', true, null, '', featureHead, false, [], new Date().toISOString());\n    }\n}\n\n// Temporary migration delegators to MainSyncStatusService — removed once consumers inject it.\nconst mainSyncSvc = new MainSyncStatusService();\n\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function mainSyncStatusPath(repoRoot: string): string { return mainSyncSvc.mainSyncStatusPath(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function mainSyncLockPath(repoRoot: string): string { return mainSyncSvc.mainSyncLockPath(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncStatus(repoRoot: string, branch: string): MainSyncStatus | null { return mainSyncSvc.readMainSyncStatus(repoRoot, branch); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncStatusFile(repoRoot: string): MainSyncStatusFile | null { return mainSyncSvc.readMainSyncStatusFile(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncStatus(repoRoot: string, status: MainSyncStatus): void { mainSyncSvc.writeMainSyncStatus(repoRoot, status); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncStatusFile(repoRoot: string, file: MainSyncStatusFile): void { mainSyncSvc.writeMainSyncStatusFile(repoRoot, file); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncLock(repoRoot: string): MainSyncLock | null { return mainSyncSvc.readMainSyncLock(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncLock(repoRoot: string, lock: MainSyncLock): void { mainSyncSvc.writeMainSyncLock(repoRoot, lock); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function isLockStale(lock: MainSyncLock, hangTimeoutMinutes: number, now: number = Date.now()): boolean { return mainSyncSvc.isLockStale(lock, hangTimeoutMinutes, now); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function isRefreshInProgress(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now()): boolean { return mainSyncSvc.isRefreshInProgress(repoRoot, hangTimeoutMinutes, now); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function tryAcquireMainSyncLock(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now(), pid: number = process.pid): MainSyncLock | null { return mainSyncSvc.tryAcquireMainSyncLock(repoRoot, hangTimeoutMinutes, now, pid); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function inProcessLock(now: number = Date.now(), pid: number = process.pid): MainSyncLock { return mainSyncSvc.inProcessLock(now, pid); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function finishedLock(started: number): MainSyncLock { return mainSyncSvc.finishedLock(started); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function computeMainSyncStatus(repoRoot: string): MainSyncStatus { return mainSyncSvc.computeMainSyncStatus(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function computeAllMainSyncStatuses(repoRoot: string): MainSyncStatusFile { return mainSyncSvc.computeAllMainSyncStatuses(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function squashRecoverySteps(currentBranch: string): string[] { return mainSyncSvc.squashRecoverySteps(currentBranch); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function stampCleanMainSyncStatus(repoRoot: string): void { mainSyncSvc.stampCleanMainSyncStatus(repoRoot); }\n"]}