@webpieces/rules-config 0.4.518 → 0.4.520

package/src/load-template.js

@@ -8,33 +8,60 @@ const tslib_1 = require("tslib");
 const fs = tslib_1.__importStar(require("fs"));
 const path = tslib_1.__importStar(require("path"));
 const inversify_1 = require("inversify");
+const atomic_file_1 = require("./atomic-file");
+const repo_root_1 = require("./repo-root");
+const state_dir_1 = require("./state-dir");
 const TEMPLATES_DIR = path.join(__dirname, '..', 'templates');
-const DEFAULT_INSTRUCT_DIR = '.webpieces/instruct-ai';
+// Sentinel for "use the resolved LOCAL instruct-ai dir". Kept as the parameter default so the handful
+// of callers that pass an explicit relative dir (they join it onto workspaceRoot themselves) are
+// unaffected; anything passing the default gets DotWebpieces.local() resolution.
+const DEFAULT_INSTRUCT_DIR = '';
 /**
  * Writes the AI-facing instruct-ai template docs under `<workspaceRoot>/.webpieces/instruct-ai/`.
  * `@injectable(bindingScopeValues.Singleton)` so it can be injected and appear in the rules-config DI design.
  */
 let TemplateWriter = class TemplateWriter {
+    dotDir;
+    atomicFile;
+    constructor(dotDir = state_dir_1.dotWebpieces, atomicFile = new atomic_file_1.AtomicFile()) {
+        this.dotDir = dotDir;
+        this.atomicFile = atomicFile;
+    }
     loadTemplate(name) {
         return fs.readFileSync(path.join(TEMPLATES_DIR, name), 'utf-8');
     }
     writeTemplateIfMissing(workspaceRoot, name, instructDir = DEFAULT_INSTRUCT_DIR) {
-        const dest = path.join(workspaceRoot, instructDir, name);
+        const dest = this.destination(workspaceRoot, name, instructDir);
         if (fs.existsSync(dest))
             return;
-        fs.mkdirSync(path.dirname(dest), { recursive: true });
-        fs.writeFileSync(dest, this.loadTemplate(name), 'utf-8');
+        this.atomicFile.writeAtomic(dest, this.loadTemplate(name));
     }
+    /**
+     * Rewrite the doc, ATOMICALLY and only when its bytes actually changed.
+     *
+     * Every `wp-*` command regenerates these, and the AI is routinely told to open one by absolute
+     * path. A plain truncating write means a reader can catch it empty; skip-if-unchanged means the
+     * overwhelmingly common case (same package version ⇒ identical content) does not write at all.
+     */
     writeTemplate(workspaceRoot, name, instructDir = DEFAULT_INSTRUCT_DIR) {
-        const dest = path.join(workspaceRoot, instructDir, name);
-        fs.mkdirSync(path.dirname(dest), { recursive: true });
-        fs.writeFileSync(dest, this.loadTemplate(name), 'utf-8');
+        const dest = this.destination(workspaceRoot, name, instructDir);
+        this.atomicFile.writeIfChanged(dest, this.loadTemplate(name));
         return dest;
     }
+    // LOCAL `.webpieces/instruct-ai/<name>` by default; an explicitly-passed relative dir is still
+    // joined onto workspaceRoot exactly as before.
+    destination(workspaceRoot, name, instructDir) {
+        if (instructDir === DEFAULT_INSTRUCT_DIR) {
+            return this.dotDir.localFile(workspaceRoot, repo_root_1.INSTRUCT_AI_LEAF, name);
+        }
+        return path.join(workspaceRoot, instructDir, name);
+    }
 };
 exports.TemplateWriter = TemplateWriter;
 exports.TemplateWriter = TemplateWriter = tslib_1.__decorate([
-    (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton)
+    (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton),
+    tslib_1.__metadata("design:paramtypes", [state_dir_1.DotWebpieces,
+        atomic_file_1.AtomicFile])
 ], TemplateWriter);
 // Temporary migration delegators — consumers migrate to injecting TemplateWriter over follow-up PRs.
 const templateWriterSvc = new TemplateWriter();

package/src/load-template.js.map

@@ -1 +1 @@
-{"version":3,"file":"load-template.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/load-template.ts"],"names":[],"mappings":";;;AAmCA,oCAEC;AAED,wDAMC;AAED,sCAMC;;AArDD,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAC9D,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAEtD;;;GAGG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IACvB,YAAY,CAAC,IAAY;QACrB,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,aAAqB,EAAE,IAAY,EAAE,cAAsB,oBAAoB;QAClG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAChC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,aAAa,CAAC,aAAqB,EAAE,IAAY,EAAE,cAAsB,oBAAoB;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACzD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAlBY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;GAC5B,cAAc,CAkB1B;AAED,qGAAqG;AACrG,MAAM,iBAAiB,GAAG,IAAI,cAAc,EAAE,CAAC;AAE/C,SAAgB,YAAY,CAAC,IAAY;IACrC,OAAO,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAgB,sBAAsB,CAClC,aAAqB,EACrB,IAAY,EACZ,cAAsB,oBAAoB;IAE1C,iBAAiB,CAAC,sBAAsB,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED,SAAgB,aAAa,CACzB,aAAqB,EACrB,IAAY,EACZ,cAAsB,oBAAoB;IAE1C,OAAO,iBAAiB,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nconst TEMPLATES_DIR = path.join(__dirname, '..', 'templates');\nconst DEFAULT_INSTRUCT_DIR = '.webpieces/instruct-ai';\n\n/**\n * Writes the AI-facing instruct-ai template docs under `<workspaceRoot>/.webpieces/instruct-ai/`.\n * `@injectable(bindingScopeValues.Singleton)` so it can be injected and appear in the rules-config DI design.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class TemplateWriter {\n    loadTemplate(name: string): string {\n        return fs.readFileSync(path.join(TEMPLATES_DIR, name), 'utf-8');\n    }\n\n    writeTemplateIfMissing(workspaceRoot: string, name: string, instructDir: string = DEFAULT_INSTRUCT_DIR): void {\n        const dest = path.join(workspaceRoot, instructDir, name);\n        if (fs.existsSync(dest)) return;\n        fs.mkdirSync(path.dirname(dest), { recursive: true });\n        fs.writeFileSync(dest, this.loadTemplate(name), 'utf-8');\n    }\n\n    writeTemplate(workspaceRoot: string, name: string, instructDir: string = DEFAULT_INSTRUCT_DIR): string {\n        const dest = path.join(workspaceRoot, instructDir, name);\n        fs.mkdirSync(path.dirname(dest), { recursive: true });\n        fs.writeFileSync(dest, this.loadTemplate(name), 'utf-8');\n        return dest;\n    }\n}\n\n// Temporary migration delegators — consumers migrate to injecting TemplateWriter over follow-up PRs.\nconst templateWriterSvc = new TemplateWriter();\n\nexport function loadTemplate(name: string): string {\n    return templateWriterSvc.loadTemplate(name);\n}\n\nexport function writeTemplateIfMissing(\n    workspaceRoot: string,\n    name: string,\n    instructDir: string = DEFAULT_INSTRUCT_DIR,\n): void {\n    templateWriterSvc.writeTemplateIfMissing(workspaceRoot, name, instructDir);\n}\n\nexport function writeTemplate(\n    workspaceRoot: string,\n    name: string,\n    instructDir: string = DEFAULT_INSTRUCT_DIR,\n): string {\n    return templateWriterSvc.writeTemplate(workspaceRoot, name, instructDir);\n}\n"]}
+{"version":3,"file":"load-template.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/load-template.ts"],"names":[],"mappings":";;;AA6DA,oCAEC;AAED,wDAMC;AAED,sCAMC;;AA/ED,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,+CAA2C;AAC3C,2CAA+C;AAC/C,2CAAyD;AAEzD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAC9D,sGAAsG;AACtG,iGAAiG;AACjG,iFAAiF;AACjF,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;GAGG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IAEF;IACA;IAFrB,YACqB,SAAuB,wBAAY,EACnC,aAAyB,IAAI,wBAAU,EAAE;QADzC,WAAM,GAAN,MAAM,CAA6B;QACnC,eAAU,GAAV,UAAU,CAA+B;IAC3D,CAAC;IAEJ,YAAY,CAAC,IAAY;QACrB,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,aAAqB,EAAE,IAAY,EAAE,cAAsB,oBAAoB;QAClG,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAChC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,aAAqB,EAAE,IAAY,EAAE,cAAsB,oBAAoB;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,+FAA+F;IAC/F,+CAA+C;IACvC,WAAW,CAAC,aAAqB,EAAE,IAAY,EAAE,WAAmB;QACxE,IAAI,WAAW,KAAK,oBAAoB,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,EAAE,4BAAgB,EAAE,IAAI,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;CACJ,CAAA;AArCY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAGR,wBAAY;QACR,wBAAU;GAHlC,cAAc,CAqC1B;AAED,qGAAqG;AACrG,MAAM,iBAAiB,GAAG,IAAI,cAAc,EAAE,CAAC;AAE/C,SAAgB,YAAY,CAAC,IAAY;IACrC,OAAO,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAgB,sBAAsB,CAClC,aAAqB,EACrB,IAAY,EACZ,cAAsB,oBAAoB;IAE1C,iBAAiB,CAAC,sBAAsB,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED,SAAgB,aAAa,CACzB,aAAqB,EACrB,IAAY,EACZ,cAAsB,oBAAoB;IAE1C,OAAO,iBAAiB,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { AtomicFile } from './atomic-file';\nimport { INSTRUCT_AI_LEAF } from './repo-root';\nimport { DotWebpieces, dotWebpieces } from './state-dir';\n\nconst TEMPLATES_DIR = path.join(__dirname, '..', 'templates');\n// Sentinel for \"use the resolved LOCAL instruct-ai dir\". Kept as the parameter default so the handful\n// of callers that pass an explicit relative dir (they join it onto workspaceRoot themselves) are\n// unaffected; anything passing the default gets DotWebpieces.local() resolution.\nconst DEFAULT_INSTRUCT_DIR = '';\n\n/**\n * Writes the AI-facing instruct-ai template docs under `<workspaceRoot>/.webpieces/instruct-ai/`.\n * `@injectable(bindingScopeValues.Singleton)` so it can be injected and appear in the rules-config DI design.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class TemplateWriter {\n    constructor(\n        private readonly dotDir: DotWebpieces = dotWebpieces,\n        private readonly atomicFile: AtomicFile = new AtomicFile(),\n    ) {}\n\n    loadTemplate(name: string): string {\n        return fs.readFileSync(path.join(TEMPLATES_DIR, name), 'utf-8');\n    }\n\n    writeTemplateIfMissing(workspaceRoot: string, name: string, instructDir: string = DEFAULT_INSTRUCT_DIR): void {\n        const dest = this.destination(workspaceRoot, name, instructDir);\n        if (fs.existsSync(dest)) return;\n        this.atomicFile.writeAtomic(dest, this.loadTemplate(name));\n    }\n\n    /**\n     * Rewrite the doc, ATOMICALLY and only when its bytes actually changed.\n     *\n     * Every `wp-*` command regenerates these, and the AI is routinely told to open one by absolute\n     * path. A plain truncating write means a reader can catch it empty; skip-if-unchanged means the\n     * overwhelmingly common case (same package version ⇒ identical content) does not write at all.\n     */\n    writeTemplate(workspaceRoot: string, name: string, instructDir: string = DEFAULT_INSTRUCT_DIR): string {\n        const dest = this.destination(workspaceRoot, name, instructDir);\n        this.atomicFile.writeIfChanged(dest, this.loadTemplate(name));\n        return dest;\n    }\n\n    // LOCAL `.webpieces/instruct-ai/<name>` by default; an explicitly-passed relative dir is still\n    // joined onto workspaceRoot exactly as before.\n    private destination(workspaceRoot: string, name: string, instructDir: string): string {\n        if (instructDir === DEFAULT_INSTRUCT_DIR) {\n            return this.dotDir.localFile(workspaceRoot, INSTRUCT_AI_LEAF, name);\n        }\n        return path.join(workspaceRoot, instructDir, name);\n    }\n}\n\n// Temporary migration delegators — consumers migrate to injecting TemplateWriter over follow-up PRs.\nconst templateWriterSvc = new TemplateWriter();\n\nexport function loadTemplate(name: string): string {\n    return templateWriterSvc.loadTemplate(name);\n}\n\nexport function writeTemplateIfMissing(\n    workspaceRoot: string,\n    name: string,\n    instructDir: string = DEFAULT_INSTRUCT_DIR,\n): void {\n    templateWriterSvc.writeTemplateIfMissing(workspaceRoot, name, instructDir);\n}\n\nexport function writeTemplate(\n    workspaceRoot: string,\n    name: string,\n    instructDir: string = DEFAULT_INSTRUCT_DIR,\n): string {\n    return templateWriterSvc.writeTemplate(workspaceRoot, name, instructDir);\n}\n"]}

package/src/main-sync-status.d.ts

@@ -1,3 +1,5 @@
+import { AtomicFile } from './atomic-file';
+import { DotWebpieces } from './state-dir';
 export declare const DEFAULT_HANG_TIMEOUT_MINUTES = 5;
 export declare class MainSyncStatus {
     branch: string;
@@ -25,9 +27,48 @@ export declare class MainSyncLock {
  * status. `@injectable(bindingScopeValues.Singleton)` so it's injectable and drawn in the rules-config DI design.
  */
 export declare class MainSyncStatusService {
+    private readonly dotDir;
+    private readonly atomicFile;
+    constructor(dotDir?: DotWebpieces, atomicFile?: AtomicFile);
+    /**
+     * SHARED scope: `<primary>/.webpieces/main-sync-status.json`, one per repo.
+     *
+     * It is the OUTPUT of the single-flight refresher below, so it has to live where the lock lives —
+     * one `.git`, one `origin/main`, one fetch, one answer. A per-worktree copy under single-flight
+     * would only ever be written for whichever worktree won the lock anyway.
+     *
+     * KNOWN CONSEQUENCE, stated plainly rather than discovered later: the file's CONTENT is keyed to
+     * one branch (`branch`, `featureHead`, `conflict`, `conflictFiles`), and every reader fails OPEN
+     * when the cached branch is not the branch being judged (`merged-branch-bash-guard` and
+     * `stale-main-bash-guard` both log `stale-cross-branch-cache (fail-open)`). With several worktrees
+     * on several branches, the losers of the lock therefore see a cross-branch cache and their guards
+     * allow rather than block. That is the fail-SAFE direction and it is inherent to single-flight, not
+     * to the shared path — but making the entries branch-keyed (a map of branch → status, written
+     * atomically) is the obvious follow-up.
+     */
     mainSyncStatusPath(repoRoot: string): string;
+    /**
+     * SHARED scope — the single-flight lock for the whole repo.
+     *
+     * This is the fix for the filed bug "the detached main-sync refresher's `git fetch` races the
+     * agent's foreground `git fetch`/`git pull` and corrupts `.git/FETCH_HEAD`". The lock was already
+     * atomic (O_CREAT|O_EXCL) and already serialised refreshers against each other — but only WITHIN
+     * one worktree, so N worktrees meant N locks and up to N concurrent `git fetch`es against the ONE
+     * shared `.git`, which is exactly how a duplicate `for-merge` line lands in FETCH_HEAD. There is
+     * one `.git`, so there is now one lock: at most one refresher in flight across all worktrees.
+     *
+     * Stale-lock handling is unchanged and still required (a lock nobody can clear is worse than the
+     * race): the holder records pid + start epoch, and `tryAcquireMainSyncLock` reclaims it once
+     * `isRefreshInProgress` proves the holder is finished, hung past hangTimeoutMinutes, or dead.
+     */
     mainSyncLockPath(repoRoot: string): string;
     readMainSyncStatus(repoRoot: string): MainSyncStatus | null;
+    /**
+     * ATOMIC write (temp file + `rename()` in the same directory). The refresher writes this file while
+     * guards on the blocking path read it; a plain `writeFileSync` truncates first, so a reader landing
+     * in that window gets a torn document. Now that the file is repo-wide the reader may be in another
+     * worktree entirely, which widens the window rather than creating it. See AtomicFile.
+     */
     writeMainSyncStatus(repoRoot: string, status: MainSyncStatus): void;
     readMainSyncLock(repoRoot: string): MainSyncLock | null;
     writeMainSyncLock(repoRoot: string, lock: MainSyncLock): void;

package/src/main-sync-status.js

@@ -20,7 +20,8 @@ const child_process_1 = require("child_process");
 const fs = tslib_1.__importStar(require("fs"));
 const path = tslib_1.__importStar(require("path"));
 const inversify_1 = require("inversify");
-const constants_1 = require("./constants");
+const atomic_file_1 = require("./atomic-file");
+const state_dir_1 = require("./state-dir");
 const to_error_1 = require("./to-error");
 // Shared "is my feature branch healthy relative to origin/main?" state. The SLOW signals (git fetch +
 // merge-base + same-file-overlap + a merged-PR lookup) are computed by the ai-hook-rules refresher in a
@@ -83,11 +84,47 @@ exports.MainSyncLock = MainSyncLock;
  * status. `@injectable(bindingScopeValues.Singleton)` so it's injectable and drawn in the rules-config DI design.
  */
 let MainSyncStatusService = class MainSyncStatusService {
+    dotDir;
+    atomicFile;
+    constructor(dotDir = state_dir_1.dotWebpieces, atomicFile = new atomic_file_1.AtomicFile()) {
+        this.dotDir = dotDir;
+        this.atomicFile = atomicFile;
+    }
+    /**
+     * SHARED scope: `<primary>/.webpieces/main-sync-status.json`, one per repo.
+     *
+     * It is the OUTPUT of the single-flight refresher below, so it has to live where the lock lives —
+     * one `.git`, one `origin/main`, one fetch, one answer. A per-worktree copy under single-flight
+     * would only ever be written for whichever worktree won the lock anyway.
+     *
+     * KNOWN CONSEQUENCE, stated plainly rather than discovered later: the file's CONTENT is keyed to
+     * one branch (`branch`, `featureHead`, `conflict`, `conflictFiles`), and every reader fails OPEN
+     * when the cached branch is not the branch being judged (`merged-branch-bash-guard` and
+     * `stale-main-bash-guard` both log `stale-cross-branch-cache (fail-open)`). With several worktrees
+     * on several branches, the losers of the lock therefore see a cross-branch cache and their guards
+     * allow rather than block. That is the fail-SAFE direction and it is inherent to single-flight, not
+     * to the shared path — but making the entries branch-keyed (a map of branch → status, written
+     * atomically) is the obvious follow-up.
+     */
     mainSyncStatusPath(repoRoot) {
-        return path.join(repoRoot, constants_1.WEBPIECES_TMP_DIR, MAIN_SYNC_STATUS_FILE);
+        return this.dotDir.sharedFile(repoRoot, MAIN_SYNC_STATUS_FILE);
     }
+    /**
+     * SHARED scope — the single-flight lock for the whole repo.
+     *
+     * This is the fix for the filed bug "the detached main-sync refresher's `git fetch` races the
+     * agent's foreground `git fetch`/`git pull` and corrupts `.git/FETCH_HEAD`". The lock was already
+     * atomic (O_CREAT|O_EXCL) and already serialised refreshers against each other — but only WITHIN
+     * one worktree, so N worktrees meant N locks and up to N concurrent `git fetch`es against the ONE
+     * shared `.git`, which is exactly how a duplicate `for-merge` line lands in FETCH_HEAD. There is
+     * one `.git`, so there is now one lock: at most one refresher in flight across all worktrees.
+     *
+     * Stale-lock handling is unchanged and still required (a lock nobody can clear is worse than the
+     * race): the holder records pid + start epoch, and `tryAcquireMainSyncLock` reclaims it once
+     * `isRefreshInProgress` proves the holder is finished, hung past hangTimeoutMinutes, or dead.
+     */
     mainSyncLockPath(repoRoot) {
-        return path.join(repoRoot, constants_1.WEBPIECES_TMP_DIR, MAIN_SYNC_LOCK_FILE);
+        return this.dotDir.sharedFile(repoRoot, MAIN_SYNC_LOCK_FILE);
     }
     // Pure read — any error (missing file, malformed JSON) returns null so the guard fails OPEN.
     readMainSyncStatus(repoRoot) {
@@ -108,10 +145,14 @@ let MainSyncStatusService = class MainSyncStatusService {
             return null;
         }
     }
+    /**
+     * ATOMIC write (temp file + `rename()` in the same directory). The refresher writes this file while
+     * guards on the blocking path read it; a plain `writeFileSync` truncates first, so a reader landing
+     * in that window gets a torn document. Now that the file is repo-wide the reader may be in another
+     * worktree entirely, which widens the window rather than creating it. See AtomicFile.
+     */
     writeMainSyncStatus(repoRoot, status) {
-        const statusPath = this.mainSyncStatusPath(repoRoot);
-        this.ensureDir(statusPath);
-        fs.writeFileSync(statusPath, JSON.stringify(status, null, 2) + '\n');
+        this.atomicFile.writeJsonAtomic(this.mainSyncStatusPath(repoRoot), status);
     }
     readMainSyncLock(repoRoot) {
         // eslint-disable-next-line @webpieces/no-unmanaged-exceptions
@@ -391,7 +432,9 @@ let MainSyncStatusService = class MainSyncStatusService {
 };
 exports.MainSyncStatusService = MainSyncStatusService;
 exports.MainSyncStatusService = MainSyncStatusService = tslib_1.__decorate([
-    (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton)
+    (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton),
+    tslib_1.__metadata("design:paramtypes", [state_dir_1.DotWebpieces,
+        atomic_file_1.AtomicFile])
 ], MainSyncStatusService);
 // Temporary migration delegators to MainSyncStatusService — removed once consumers inject it.
 const mainSyncSvc = new MainSyncStatusService();

package/src/main-sync-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"main-sync-status.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/main-sync-status.ts"],"names":[],"mappings":";;;AAidA,gDAAiH;AAEjH,4CAA6G;AAE7G,gDAAgI;AAEhI,kDAA0I;AAE1I,4CAA0H;AAE1H,8CAAgI;AAEhI,kCAAiL;AAEjL,kDAAmM;AAEnM,wDAAqP;AAErP,sCAAgJ;AAEhJ,oCAAyG;AAEzG,sDAA+H;AAE/H,kDAA+H;AAE/H,4DAAoH;;AA3epH,iDAA0C;AAC1C,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,2CAAgD;AAChD,yCAAqC;AAErC,sGAAsG;AACtG,wGAAwG;AACxG,qGAAqG;AACrG,wFAAwF;AAExF,oGAAoG;AACvF,QAAA,4BAA4B,GAAG,CAAC,CAAC;AAE9C,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AACtD,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAElD,MAAM,oBAAoB,GAAG,WAAW,CAAC;AACzC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,+CAA+C;AAC/C,MAAa,cAAc;IACvB,MAAM,CAAS;IACf,mBAAmB,CAAU;IAC7B,QAAQ,CAAS;IACjB,YAAY,CAAU;IACtB,SAAS,CAAgB;IACzB,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,QAAQ,CAAU;IAClB,aAAa,CAAW;IACxB,SAAS,CAAS;IAClB,+FAA+F;IAC/F,iGAAiG;IACjG,MAAM,GAAW,EAAE,CAAC;IACpB,gGAAgG;IAChG,iGAAiG;IACjG,4FAA4F;IAC5F,SAAS,GAAW,EAAE,CAAC;IAEvB,YACI,MAAc,EACd,mBAA4B,EAC5B,QAAgB,EAChB,YAAqB,EACrB,SAAwB,EACxB,UAAkB,EAClB,WAAmB,EACnB,QAAiB,EACjB,aAAuB,EACvB,SAAiB;QAEjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;CACJ;AA1CD,wCA0CC;AAED,sGAAsG;AACtG,sGAAsG;AACtG,MAAa,YAAY;IACrB,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,GAAG,CAAS;IAEZ,YAAY,KAAa,EAAE,OAAe,EAAE,MAAc,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;CACJ;AAVD,oCAUC;AA8BD;;;GAGG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAC9B,kBAAkB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAAiB,EAAE,qBAAqB,CAAC,CAAC;IACzE,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAAiB,EAAE,mBAAmB,CAAC,CAAC;IACvE,CAAC;IAED,6FAA6F;IAC7F,kBAAkB,CAAC,QAAgB;QAC/B,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAc,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,EAChB,GAAG,CAAC,mBAAmB,IAAI,KAAK,EAChC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAClB,GAAG,CAAC,YAAY,IAAI,IAAI,EACxB,GAAG,CAAC,SAAS,IAAI,IAAI,EACrB,GAAG,CAAC,UAAU,IAAI,EAAE,EACpB,GAAG,CAAC,WAAW,IAAI,EAAE,EACrB,GAAG,CAAC,QAAQ,IAAI,KAAK,EACrB,GAAG,CAAC,aAAa,IAAI,EAAE,EACvB,GAAG,CAAC,SAAS,IAAI,EAAE,CACtB,CAAC;YACF,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YACjC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,QAAgB,EAAE,MAAsB;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3B,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAC7B,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;YACrE,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI,mBAAmB,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,QAAgB,EAAE,IAAkB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,kGAAkG;IAClG,WAAW,CAAC,IAAkB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAChF,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/D,CAAC;IAED,wFAAwF;IACxF,mBAAmB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK,KAAK,oBAAoB;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAClE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,sBAAsB,CAClB,QAAgB,EAChB,kBAA0B,EAC1B,MAAc,IAAI,CAAC,GAAG,EAAE,EACxB,MAAc,OAAO,CAAC,GAAG;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAErD,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzD,0EAA0E;QAC1E,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7E,6FAA6F;QAC7F,8DAA8D;QAC9D,IAAI,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC,CAAE,uEAAuE;QACxF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1D,0FAA0F;QAC1F,gDAAgD;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC5E,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,6FAA6F;IACrF,eAAe,CAAC,QAAgB,EAAE,OAAe;QACrD,8DAA8D;QAC9D,IAAI,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,aAAa,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG;QAC7D,OAAO,IAAI,YAAY,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,YAAY,CAAC,OAAe;QACxB,OAAO,IAAI,YAAY,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;;OAGG;IACH,gFAAgF;IAChF,qBAAqB,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEnD,4FAA4F;QAC5F,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,CAAC,mBAAmB,GAAG,QAAQ,KAAK,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,QAAQ,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACpJ,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC5E,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAE1F,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,MAAM,EACN,QAAQ,KAAK,EAAE,EACf,QAAQ,EACR,IAAI,EACJ,SAAS,CAAC,GAAG,EACb,UAAU,CAAC,GAAG,EACd,WAAW,EACX,aAAa,CAAC,MAAM,GAAG,CAAC,EACxB,aAAa,EACb,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAC3B,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,qGAAqG;IACrG,mBAAmB,CAAC,aAAqB;QACrC,OAAO;YACH,wDAAwD;YACxD,oDAAoD,aAAa,iBAAiB;YAClF,uDAAuD,aAAa,EAAE;YACtE,2FAA2F;YAC3F,yFAAyF;YACzF,sFAAsF;YACtF,yFAAyF;YACzF,2FAA2F;YAC3F,sFAAsF;YACtF,+EAA+E,aAAa,GAAG;YAC/F,0FAA0F;SAC7F,CAAC;IACN,CAAC;IAED,mGAAmG;IACnG,wBAAwB,CAAC,QAAgB;QACrC,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;YAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE;gBAAE,OAAO;YAC9C,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAChH,CAAC;YACF,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;QACf,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,eAAe,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;YAChF,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;SACvE,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,CAAE,oDAAoD;QACxG,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,uFAAuF;IAC/E,kBAAkB,CAAC,MAAqB;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACtH,CAAC;IAEO,SAAS,CAAC,QAAgB;QAC9B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,uFAAuF;IAC/E,cAAc,CAAC,GAAW;QAC9B,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1B,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IAED,sFAAsF;IAC9E,OAAO,CAAC,QAAgB,EAAE,GAAW,EAAE,IAAc;QACzD,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,iGAAiG;IACzF,SAAS,CAAC,QAAgB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QACpF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,iGAAiG;IACjG,2FAA2F;IACnF,aAAa,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAEO,YAAY,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAY;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,+FAA+F;IAC/F,wFAAwF;IAChF,mBAAmB,CAAC,QAAgB,EAAE,SAAiB;QAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,MAAM,GAAG,GAAG,CAAC,IAAc,EAAQ,EAAE;YACjC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE;gBAAE,OAAO;YAClC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;QACL,CAAC,CAAC;QACF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAM,iCAAiC;QACvF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAiB,8BAA8B;QACpF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAK,eAAe;QACrE,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAE,4CAA4C;QAClG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,8FAA8F;IACtF,cAAc,CAAC,QAAgB,EAAE,MAAc;QACnD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QAC9I,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,iEAAiE;IACzD,YAAY,CAAC,QAAgB,EAAE,MAAc;QACjD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5I,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,+EAA+E;IACvE,YAAY,CAAC,MAAc,EAAE,WAAmB;QACpD,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnH,CAAC;CACJ,CAAA;AAzVY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;GAC5B,qBAAqB,CAyVjC;AAED,8FAA8F;AAC9F,MAAM,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;AAEhD,4IAA4I;AAC5I,SAAgB,kBAAkB,CAAC,QAAgB,IAAY,OAAO,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjH,4IAA4I;AAC5I,SAAgB,gBAAgB,CAAC,QAAgB,IAAY,OAAO,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7G,4IAA4I;AAC5I,SAAgB,kBAAkB,CAAC,QAAgB,IAA2B,OAAO,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAChI,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,MAAsB,IAAU,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAC1I,4IAA4I;AAC5I,SAAgB,gBAAgB,CAAC,QAAgB,IAAyB,OAAO,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC1H,4IAA4I;AAC5I,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,IAAkB,IAAU,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAChI,4IAA4I;AAC5I,SAAgB,WAAW,CAAC,IAAkB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,IAAa,OAAO,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACjL,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,IAAa,OAAO,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACnM,4IAA4I;AAC5I,SAAgB,sBAAsB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG,IAAyB,OAAO,WAAW,CAAC,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACrP,4IAA4I;AAC5I,SAAgB,aAAa,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG,IAAkB,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAChJ,4IAA4I;AAC5I,SAAgB,YAAY,CAAC,OAAe,IAAkB,OAAO,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzG,4IAA4I;AAC5I,SAAgB,qBAAqB,CAAC,QAAgB,IAAoB,OAAO,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC/H,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,aAAqB,IAAc,OAAO,WAAW,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC/H,4IAA4I;AAC5I,SAAgB,wBAAwB,CAAC,QAAgB,IAAU,WAAW,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { WEBPIECES_TMP_DIR } from './constants';\nimport { toError } from './to-error';\n\n// Shared \"is my feature branch healthy relative to origin/main?\" state. The SLOW signals (git fetch +\n// merge-base + same-file-overlap + a merged-PR lookup) are computed by the ai-hook-rules refresher in a\n// DETACHED background process; the feature-branch-guard only READS this cached file. pr-gate's merge\n// flow also writes it synchronously after a merge. Lives here (the shared dep of both).\n\n// How long an `inprocess` refresher lock may sit before a new refresher assumes the prior run hung.\nexport const DEFAULT_HANG_TIMEOUT_MINUTES = 5;\n\nconst MAIN_SYNC_STATUS_FILE = 'main-sync-status.json';\nconst MAIN_SYNC_LOCK_FILE = 'main-sync.lock.json';\n\nconst LOCK_STATE_INPROCESS = 'inprocess';\nconst LOCK_STATE_FINISHED = 'finished';\n\n// Data-only (per CLAUDE.md, classes for data).\nexport class MainSyncStatus {\n    branch: string;\n    branchAlreadyMerged: boolean;\n    mergedPr: string;\n    hasForkPoint: boolean;\n    forkPoint: string | null;\n    originMain: string;\n    featureHead: string;\n    conflict: boolean;\n    conflictFiles: string[];\n    timestamp: string;\n    // An OPEN (not merged) PR tracking this branch, if any — '' = none or not-yet-known. Advisory.\n    // Kept OUT of the positional constructor (a defaulted field) so existing call sites don't churn.\n    openPr: string = '';\n    // The LOCAL refs/heads/main hash — '' = main does not exist locally (fresh clone / worktree) or\n    // could not be read. Paired with `originMain`, this is what tells the read-stale-guard whether a\n    // checked-out `main` is behind its remote. Defaulted field for the same reason as `openPr`.\n    localMain: string = '';\n\n    constructor(\n        branch: string,\n        branchAlreadyMerged: boolean,\n        mergedPr: string,\n        hasForkPoint: boolean,\n        forkPoint: string | null,\n        originMain: string,\n        featureHead: string,\n        conflict: boolean,\n        conflictFiles: string[],\n        timestamp: string,\n    ) {\n        this.branch = branch;\n        this.branchAlreadyMerged = branchAlreadyMerged;\n        this.mergedPr = mergedPr;\n        this.hasForkPoint = hasForkPoint;\n        this.forkPoint = forkPoint;\n        this.originMain = originMain;\n        this.featureHead = featureHead;\n        this.conflict = conflict;\n        this.conflictFiles = conflictFiles;\n        this.timestamp = timestamp;\n    }\n}\n\n// Concurrency state machine for the detached refresher. `started` is epoch ms. `pid` is the refresher\n// process's pid (0 = unknown) — used so a KILLED refresher doesn't wedge `inprocess` for the timeout.\nexport class MainSyncLock {\n    state: string;\n    started: number;\n    pid: number;\n\n    constructor(state: string, started: number, pid: number = 0) {\n        this.state = state;\n        this.started = started;\n        this.pid = pid;\n    }\n}\n\n// Raw JSON shapes for the cast at the parse boundary.\ninterface RawStatus {\n    branch?: string;\n    branchAlreadyMerged?: boolean;\n    mergedPr?: string;\n    hasForkPoint?: boolean;\n    forkPoint?: string | null;\n    originMain?: string;\n    featureHead?: string;\n    conflict?: boolean;\n    conflictFiles?: string[];\n    timestamp?: string;\n    openPr?: string;\n    localMain?: string;\n}\n\ninterface RawLock {\n    state?: string;\n    started?: number;\n    pid?: number;\n}\n\n// Result of a captured git/gh invocation: ok=false on spawn failure or non-zero exit.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n}\n\n/**\n * Reads/writes the main-sync cache + lock and computes the slow \"is my branch healthy vs origin/main?\"\n * status. `@injectable(bindingScopeValues.Singleton)` so it's injectable and drawn in the rules-config DI design.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class MainSyncStatusService {\n    mainSyncStatusPath(repoRoot: string): string {\n        return path.join(repoRoot, WEBPIECES_TMP_DIR, MAIN_SYNC_STATUS_FILE);\n    }\n\n    mainSyncLockPath(repoRoot: string): string {\n        return path.join(repoRoot, WEBPIECES_TMP_DIR, MAIN_SYNC_LOCK_FILE);\n    }\n\n    // Pure read — any error (missing file, malformed JSON) returns null so the guard fails OPEN.\n    readMainSyncStatus(repoRoot: string): MainSyncStatus | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const statusPath = this.mainSyncStatusPath(repoRoot);\n            if (!fs.existsSync(statusPath)) return null;\n            const raw = JSON.parse(fs.readFileSync(statusPath, 'utf8')) as RawStatus;\n            const status = new MainSyncStatus(\n                raw.branch ?? '',\n                raw.branchAlreadyMerged ?? false,\n                raw.mergedPr ?? '',\n                raw.hasForkPoint ?? true,\n                raw.forkPoint ?? null,\n                raw.originMain ?? '',\n                raw.featureHead ?? '',\n                raw.conflict ?? false,\n                raw.conflictFiles ?? [],\n                raw.timestamp ?? '',\n            );\n            status.openPr = raw.openPr ?? '';\n            status.localMain = raw.localMain ?? '';\n            return status;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    writeMainSyncStatus(repoRoot: string, status: MainSyncStatus): void {\n        const statusPath = this.mainSyncStatusPath(repoRoot);\n        this.ensureDir(statusPath);\n        fs.writeFileSync(statusPath, JSON.stringify(status, null, 2) + '\\n');\n    }\n\n    readMainSyncLock(repoRoot: string): MainSyncLock | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const lockPath = this.mainSyncLockPath(repoRoot);\n            if (!fs.existsSync(lockPath)) return null;\n            const raw = JSON.parse(fs.readFileSync(lockPath, 'utf8')) as RawLock;\n            return new MainSyncLock(raw.state ?? LOCK_STATE_FINISHED, raw.started ?? 0, raw.pid ?? 0);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    writeMainSyncLock(repoRoot: string, lock: MainSyncLock): void {\n        const lockPath = this.mainSyncLockPath(repoRoot);\n        this.ensureDir(lockPath);\n        fs.writeFileSync(lockPath, JSON.stringify(lock, null, 2) + '\\n');\n    }\n\n    // A lock is stale (prior refresher assumed hung) once `inprocess` longer than hangTimeoutMinutes.\n    isLockStale(lock: MainSyncLock, hangTimeoutMinutes: number, now: number = Date.now()): boolean {\n        return now - lock.started > hangTimeoutMinutes * 60 * 1000;\n    }\n\n    // True when another refresher is actively running and we should NOT start a second one.\n    isRefreshInProgress(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now()): boolean {\n        const lock = this.readMainSyncLock(repoRoot);\n        if (!lock) return false;\n        if (lock.state !== LOCK_STATE_INPROCESS) return false;\n        if (this.isLockStale(lock, hangTimeoutMinutes, now)) return false;\n        return this.isProcessAlive(lock.pid);\n    }\n\n    /**\n     * ATOMICALLY take the refresher lock. Returns the held lock, or null when someone else holds it.\n     *\n     * Replaces the check-then-write pair (`isRefreshInProgress` then `writeMainSyncLock`), whose gap\n     * let two detached refreshers both pass the check and then both run `git fetch` at once — the\n     * concurrency this lock exists to prevent. The create uses the `wx` flag (O_CREAT|O_EXCL), so of\n     * N racing refreshers exactly one creates the file.\n     *\n     * A lock file left behind by a FINISHED, hung, or killed refresher is reclaimed: we only unlink\n     * and re-take it once `isRefreshInProgress` says the holder is provably not running, and we\n     * re-read afterwards to confirm the entry we see is ours before claiming the lock.\n     */\n    tryAcquireMainSyncLock(\n        repoRoot: string,\n        hangTimeoutMinutes: number,\n        now: number = Date.now(),\n        pid: number = process.pid,\n    ): MainSyncLock | null {\n        const lockPath = this.mainSyncLockPath(repoRoot);\n        this.ensureDir(lockPath);\n        const lock = this.inProcessLock(now, pid);\n        const payload = JSON.stringify(lock, null, 2) + '\\n';\n\n        if (this.createExclusive(lockPath, payload)) return lock;\n\n        // The file already exists. Leave it alone while a live refresher owns it.\n        if (this.isRefreshInProgress(repoRoot, hangTimeoutMinutes, now)) return null;\n\n        // Reclaim it: remove the dead entry, then re-take it exclusively so only one reclaimer wins.\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            fs.unlinkSync(lockPath);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;  // someone else reclaimed it first — the exclusive create below decides\n        }\n        if (!this.createExclusive(lockPath, payload)) return null;\n\n        // Confirm the lock on disk is OURS (a simultaneous reclaimer could have unlinked ours and\n        // written its own between the two calls above).\n        const held = this.readMainSyncLock(repoRoot);\n        if (!held || held.pid !== pid || held.started !== lock.started) return null;\n        return lock;\n    }\n\n    // O_CREAT|O_EXCL write: true when THIS call created the file, false when it already existed.\n    private createExclusive(lockPath: string, payload: string): boolean {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            fs.writeFileSync(lockPath, payload, { flag: 'wx' });\n            return true;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return false;\n        }\n    }\n\n    inProcessLock(now: number = Date.now(), pid: number = process.pid): MainSyncLock {\n        return new MainSyncLock(LOCK_STATE_INPROCESS, now, pid);\n    }\n\n    finishedLock(started: number): MainSyncLock {\n        return new MainSyncLock(LOCK_STATE_FINISHED, started, 0);\n    }\n\n    /**\n     * The SLOW path, run only inside the detached refresher. Computes every cached signal the\n     * feature-branch-guard needs. Never run on the hook's blocking path.\n     */\n    // webpieces-disable max-lines-new-methods -- one cohesive slow-path computation\n    computeMainSyncStatus(repoRoot: string): MainSyncStatus {\n        const branch = this.gitBranch(repoRoot);\n        const mergedPr = this.detectMergedPr(repoRoot, branch);\n        const openPr = this.detectOpenPr(repoRoot, branch);\n\n        // Best-effort network refresh; offline just means we evaluate against the last-fetched ref.\n        this.fetchOriginMain(repoRoot);\n\n        const head = this.capture(repoRoot, 'git', ['rev-parse', 'HEAD']);\n        const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n        const localMain = this.localMainHash(repoRoot);\n        const featureHead = head.ok ? head.out : '';\n        if (!head.ok || !originMain.ok) {\n            const status = this.benignStatus(branch, featureHead);\n            status.branchAlreadyMerged = mergedPr !== '';\n            status.mergedPr = mergedPr;\n            status.openPr = openPr;\n            status.localMain = localMain;\n            return status;\n        }\n\n        const forkPoint = this.capture(repoRoot, 'git', ['merge-base', 'origin/main', 'HEAD']);\n        if (!forkPoint.ok || forkPoint.out === '') {\n            const noFork = new MainSyncStatus(branch, mergedPr !== '', mergedPr, false, null, originMain.out, featureHead, false, [], new Date().toISOString());\n            noFork.openPr = openPr;\n            noFork.localMain = localMain;\n            return noFork;\n        }\n\n        const featureFiles = new Set(this.featureChangedFiles(repoRoot, forkPoint.out));\n        const mainFiles = this.changedFiles(repoRoot, forkPoint.out, 'origin/main');\n        const conflictFiles = mainFiles.filter((file: string): boolean => featureFiles.has(file));\n\n        const status = new MainSyncStatus(\n            branch,\n            mergedPr !== '',\n            mergedPr,\n            true,\n            forkPoint.out,\n            originMain.out,\n            featureHead,\n            conflictFiles.length > 0,\n            conflictFiles,\n            new Date().toISOString(),\n        );\n        status.openPr = openPr;\n        status.localMain = localMain;\n        return status;\n    }\n\n    // The recovery steps when there is no fork point with origin/main (a bad merge of main into branch).\n    squashRecoverySteps(currentBranch: string): string[] {\n        return [\n            '1. Fetch latest main:            git fetch origin main',\n            `2. New branch off origin/main:   git checkout -b ${currentBranch}-v2 origin/main`,\n            `3. Squash-merge old branch:      git merge --squash ${currentBranch}`,\n            '   ^^ HUMAN-ONLY. `git merge` is blocked for AI (redirect-how-to-merge-main). AI: ask the',\n            '   human to run step 3, and warn them it is a raw merge — only correct here because the',\n            '   branch is already broken. For a normal update from main they should push back and',\n            '   tell you to use the gated 3-point merge instead: `pnpm wp-start-update` (paired with',\n            '   `pnpm wp-finish-update`) when no PR is open, or `pnpm wp-start-upsert-pr` (paired with',\n            '   `pnpm wp-finish-upsert-pr`) when a PR IS open — a PR MUST use the upsert-pr pair.',\n            `4. Commit the squash:            git add -A && git commit -m \"Squashed from ${currentBranch}\"`,\n            '5. If a PR exists:               open a NEW PR for the -v2 branch and close the old one.',\n        ];\n    }\n\n    // Synchronously stamp a clean \"up to date with main\" status — call right after a successful merge.\n    stampCleanMainSyncStatus(repoRoot: string): void {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const branch = this.gitBranch(repoRoot);\n            const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n            const featureHead = this.capture(repoRoot, 'git', ['rev-parse', 'HEAD']);\n            if (!originMain.ok || !featureHead.ok) return;\n            const status = new MainSyncStatus(\n                branch, false, '', true, originMain.out, originMain.out, featureHead.out, false, [], new Date().toISOString(),\n            );\n            status.localMain = this.localMainHash(repoRoot);\n            this.writeMainSyncStatus(repoRoot, status);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n        }\n    }\n\n    /**\n     * Refresh `origin/main` WITHOUT writing `.git/FETCH_HEAD`.\n     *\n     * WHY the flag is not optional: this runs in a DETACHED background process while the agent is\n     * running its own foreground `git fetch` / `git pull` in the very same repo. `.git/FETCH_HEAD` is\n     * a single file that git takes no lock on, so two overlapping fetches interleave their writes and\n     * can leave the SAME `for-merge` line twice. `git pull` then reads two for-merge entries and dies\n     * with `fatal: Cannot fast-forward to multiple branches` — wedging the exact command the\n     * read-stale-guard tells the agent to run. `--no-write-fetch-head` (git >= 2.29) still updates the\n     * remote-tracking ref, which is all anything downstream reads (`origin/main`, merge-base), so\n     * nothing here needs FETCH_HEAD written at all.\n     *\n     * Older git rejects the flag; only then do we retry the plain form, accepting the old behaviour\n     * rather than losing the refresh entirely on a pre-2020 git.\n     */\n    private fetchOriginMain(repoRoot: string): void {\n        const safe = spawnSync('git', ['fetch', '--no-write-fetch-head', 'origin', 'main'], {\n            cwd: repoRoot, encoding: 'utf8', stdio: ['ignore', 'ignore', 'pipe'],\n        });\n        if (safe.status === 0) return;\n        if (!this.isUnknownGitOption(safe.stderr)) return;  // a real failure (offline, auth) — not our business\n        spawnSync('git', ['fetch', 'origin', 'main'], { cwd: repoRoot, stdio: 'ignore' });\n    }\n\n    // Did git reject the flag itself (too old), as opposed to failing the network refresh?\n    private isUnknownGitOption(stderr: string | null): boolean {\n        const text = (stderr ?? '').toLowerCase();\n        return text.includes('unknown option') || text.includes('unknown switch') || text.includes('unrecognized option');\n    }\n\n    private ensureDir(filePath: string): void {\n        fs.mkdirSync(path.dirname(filePath), { recursive: true });\n    }\n\n    // Liveness probe: is `pid` still a running process? pid <= 0 (unknown) → assume alive.\n    private isProcessAlive(pid: number): boolean {\n        if (pid <= 0) return true;\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            process.kill(pid, 0);\n            return true;\n        } catch (err: unknown) {\n            const error = toError(err);\n            return !error.message.includes('ESRCH');\n        }\n    }\n\n    // Run a command capturing trimmed stdout; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, cmd: string, args: string[]): CmdCapture {\n        const result = spawnSync(cmd, args, { cwd: repoRoot, encoding: 'utf8' });\n        if (result.status !== 0 || typeof result.stdout !== 'string') return { ok: false, out: '' };\n        return { ok: true, out: result.stdout.trim() };\n    }\n\n    // The actual checked-out branch in repoRoot — cwd-correct so the cache's `branch` label matches.\n    private gitBranch(repoRoot: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', '--abbrev-ref', 'HEAD']);\n        return result.ok ? result.out : '';\n    }\n\n    // The LOCAL main hash. `refs/heads/main` (not the bare name) so it can never resolve to a remote\n    // ref or a tag. '' when main does not exist locally — which the guard treats as fail-open.\n    private localMainHash(repoRoot: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', 'refs/heads/main']);\n        return result.ok ? result.out : '';\n    }\n\n    private changedFiles(repoRoot: string, base: string, head: string): string[] {\n        const result = this.capture(repoRoot, 'git', ['diff', '--name-only', base, head]);\n        if (!result.ok || result.out === '') return [];\n        return result.out.split('\\n').map((line: string): string => line.trim()).filter((line: string): boolean => line.length > 0);\n    }\n\n    // Every file this feature branch has touched since the fork point — committed AND still in the\n    // working tree (staged / unstaged / untracked), so a conflict is visible WHILE editing.\n    private featureChangedFiles(repoRoot: string, forkPoint: string): string[] {\n        const out = new Set<string>();\n        const add = (args: string[]): void => {\n            const r = this.capture(repoRoot, 'git', args);\n            if (!r.ok || r.out === '') return;\n            for (const line of r.out.split('\\n')) {\n                const f = line.trim();\n                if (f.length > 0) out.add(f);\n            }\n        };\n        add(['diff', '--name-only', forkPoint, 'HEAD']);      // committed since the fork point\n        add(['diff', '--name-only', 'HEAD']);                 // unstaged working-tree edits\n        add(['diff', '--name-only', '--cached', 'HEAD']);     // staged edits\n        add(['ls-files', '--others', '--exclude-standard']);  // untracked new files (respects .gitignore)\n        return [...out];\n    }\n\n    // Has this feature branch already been merged into main? Reliable signal: a MERGED PR exists.\n    private detectMergedPr(repoRoot: string, branch: string): string {\n        if (!branch || branch === 'main') return '';\n        const result = this.capture(repoRoot, 'gh', ['pr', 'list', '--head', branch, '--state', 'merged', '--json', 'number', '--jq', '.[0].number']);\n        return result.ok ? result.out : '';\n    }\n\n    // An OPEN PR tracking this branch, if any. Best-effort/advisory.\n    private detectOpenPr(repoRoot: string, branch: string): string {\n        if (!branch || branch === 'main') return '';\n        const result = this.capture(repoRoot, 'gh', ['pr', 'list', '--head', branch, '--state', 'open', '--json', 'number', '--jq', '.[0].number']);\n        return result.ok ? result.out : '';\n    }\n\n    // A benign status that never blocks — used when origin/main can't be resolved.\n    private benignStatus(branch: string, featureHead: string): MainSyncStatus {\n        return new MainSyncStatus(branch, false, '', true, null, '', featureHead, false, [], new Date().toISOString());\n    }\n}\n\n// Temporary migration delegators to MainSyncStatusService — removed once consumers inject it.\nconst mainSyncSvc = new MainSyncStatusService();\n\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function mainSyncStatusPath(repoRoot: string): string { return mainSyncSvc.mainSyncStatusPath(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function mainSyncLockPath(repoRoot: string): string { return mainSyncSvc.mainSyncLockPath(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncStatus(repoRoot: string): MainSyncStatus | null { return mainSyncSvc.readMainSyncStatus(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncStatus(repoRoot: string, status: MainSyncStatus): void { mainSyncSvc.writeMainSyncStatus(repoRoot, status); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncLock(repoRoot: string): MainSyncLock | null { return mainSyncSvc.readMainSyncLock(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncLock(repoRoot: string, lock: MainSyncLock): void { mainSyncSvc.writeMainSyncLock(repoRoot, lock); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function isLockStale(lock: MainSyncLock, hangTimeoutMinutes: number, now: number = Date.now()): boolean { return mainSyncSvc.isLockStale(lock, hangTimeoutMinutes, now); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function isRefreshInProgress(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now()): boolean { return mainSyncSvc.isRefreshInProgress(repoRoot, hangTimeoutMinutes, now); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function tryAcquireMainSyncLock(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now(), pid: number = process.pid): MainSyncLock | null { return mainSyncSvc.tryAcquireMainSyncLock(repoRoot, hangTimeoutMinutes, now, pid); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function inProcessLock(now: number = Date.now(), pid: number = process.pid): MainSyncLock { return mainSyncSvc.inProcessLock(now, pid); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function finishedLock(started: number): MainSyncLock { return mainSyncSvc.finishedLock(started); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function computeMainSyncStatus(repoRoot: string): MainSyncStatus { return mainSyncSvc.computeMainSyncStatus(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function squashRecoverySteps(currentBranch: string): string[] { return mainSyncSvc.squashRecoverySteps(currentBranch); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function stampCleanMainSyncStatus(repoRoot: string): void { mainSyncSvc.stampCleanMainSyncStatus(repoRoot); }\n"]}
+{"version":3,"file":"main-sync-status.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/main-sync-status.ts"],"names":[],"mappings":";;;AAyfA,gDAAiH;AAEjH,4CAA6G;AAE7G,gDAAgI;AAEhI,kDAA0I;AAE1I,4CAA0H;AAE1H,8CAAgI;AAEhI,kCAAiL;AAEjL,kDAAmM;AAEnM,wDAAqP;AAErP,sCAAgJ;AAEhJ,oCAAyG;AAEzG,sDAA+H;AAE/H,kDAA+H;AAE/H,4DAAoH;;AAnhBpH,iDAA0C;AAC1C,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,+CAA2C;AAC3C,2CAAyD;AACzD,yCAAqC;AAErC,sGAAsG;AACtG,wGAAwG;AACxG,qGAAqG;AACrG,wFAAwF;AAExF,oGAAoG;AACvF,QAAA,4BAA4B,GAAG,CAAC,CAAC;AAE9C,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AACtD,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAElD,MAAM,oBAAoB,GAAG,WAAW,CAAC;AACzC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,+CAA+C;AAC/C,MAAa,cAAc;IACvB,MAAM,CAAS;IACf,mBAAmB,CAAU;IAC7B,QAAQ,CAAS;IACjB,YAAY,CAAU;IACtB,SAAS,CAAgB;IACzB,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,QAAQ,CAAU;IAClB,aAAa,CAAW;IACxB,SAAS,CAAS;IAClB,+FAA+F;IAC/F,iGAAiG;IACjG,MAAM,GAAW,EAAE,CAAC;IACpB,gGAAgG;IAChG,iGAAiG;IACjG,4FAA4F;IAC5F,SAAS,GAAW,EAAE,CAAC;IAEvB,YACI,MAAc,EACd,mBAA4B,EAC5B,QAAgB,EAChB,YAAqB,EACrB,SAAwB,EACxB,UAAkB,EAClB,WAAmB,EACnB,QAAiB,EACjB,aAAuB,EACvB,SAAiB;QAEjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;CACJ;AA1CD,wCA0CC;AAED,sGAAsG;AACtG,sGAAsG;AACtG,MAAa,YAAY;IACrB,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,GAAG,CAAS;IAEZ,YAAY,KAAa,EAAE,OAAe,EAAE,MAAc,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;CACJ;AAVD,oCAUC;AA8BD;;;GAGG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAET;IACA;IAFrB,YACqB,SAAuB,wBAAY,EACnC,aAAyB,IAAI,wBAAU,EAAE;QADzC,WAAM,GAAN,MAAM,CAA6B;QACnC,eAAU,GAAV,UAAU,CAA+B;IAC3D,CAAC;IAEJ;;;;;;;;;;;;;;;OAeG;IACH,kBAAkB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACjE,CAAC;IAED,6FAA6F;IAC7F,kBAAkB,CAAC,QAAgB;QAC/B,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAc,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,EAChB,GAAG,CAAC,mBAAmB,IAAI,KAAK,EAChC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAClB,GAAG,CAAC,YAAY,IAAI,IAAI,EACxB,GAAG,CAAC,SAAS,IAAI,IAAI,EACrB,GAAG,CAAC,UAAU,IAAI,EAAE,EACpB,GAAG,CAAC,WAAW,IAAI,EAAE,EACrB,GAAG,CAAC,QAAQ,IAAI,KAAK,EACrB,GAAG,CAAC,aAAa,IAAI,EAAE,EACvB,GAAG,CAAC,SAAS,IAAI,EAAE,CACtB,CAAC;YACF,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YACjC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,QAAgB,EAAE,MAAsB;QACxD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAC7B,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;YACrE,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI,mBAAmB,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,QAAgB,EAAE,IAAkB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,kGAAkG;IAClG,WAAW,CAAC,IAAkB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAChF,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/D,CAAC;IAED,wFAAwF;IACxF,mBAAmB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK,KAAK,oBAAoB;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAClE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,sBAAsB,CAClB,QAAgB,EAChB,kBAA0B,EAC1B,MAAc,IAAI,CAAC,GAAG,EAAE,EACxB,MAAc,OAAO,CAAC,GAAG;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAErD,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzD,0EAA0E;QAC1E,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7E,6FAA6F;QAC7F,8DAA8D;QAC9D,IAAI,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC,CAAE,uEAAuE;QACxF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1D,0FAA0F;QAC1F,gDAAgD;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC5E,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,6FAA6F;IACrF,eAAe,CAAC,QAAgB,EAAE,OAAe;QACrD,8DAA8D;QAC9D,IAAI,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,aAAa,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG;QAC7D,OAAO,IAAI,YAAY,CAAC,oBAAoB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,YAAY,CAAC,OAAe;QACxB,OAAO,IAAI,YAAY,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;;OAGG;IACH,gFAAgF;IAChF,qBAAqB,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEnD,4FAA4F;QAC5F,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,CAAC,mBAAmB,GAAG,QAAQ,KAAK,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,QAAQ,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACpJ,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC5E,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAE1F,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,MAAM,EACN,QAAQ,KAAK,EAAE,EACf,QAAQ,EACR,IAAI,EACJ,SAAS,CAAC,GAAG,EACb,UAAU,CAAC,GAAG,EACd,WAAW,EACX,aAAa,CAAC,MAAM,GAAG,CAAC,EACxB,aAAa,EACb,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAC3B,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,qGAAqG;IACrG,mBAAmB,CAAC,aAAqB;QACrC,OAAO;YACH,wDAAwD;YACxD,oDAAoD,aAAa,iBAAiB;YAClF,uDAAuD,aAAa,EAAE;YACtE,2FAA2F;YAC3F,yFAAyF;YACzF,sFAAsF;YACtF,yFAAyF;YACzF,2FAA2F;YAC3F,sFAAsF;YACtF,+EAA+E,aAAa,GAAG;YAC/F,0FAA0F;SAC7F,CAAC;IACN,CAAC;IAED,mGAAmG;IACnG,wBAAwB,CAAC,QAAgB;QACrC,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;YAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE;gBAAE,OAAO;YAC9C,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAChH,CAAC;YACF,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;QACf,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,eAAe,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;YAChF,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;SACvE,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,CAAE,oDAAoD;QACxG,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,uFAAuF;IAC/E,kBAAkB,CAAC,MAAqB;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACtH,CAAC;IAEO,SAAS,CAAC,QAAgB;QAC9B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,uFAAuF;IAC/E,cAAc,CAAC,GAAW;QAC9B,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1B,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IAED,sFAAsF;IAC9E,OAAO,CAAC,QAAgB,EAAE,GAAW,EAAE,IAAc;QACzD,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,iGAAiG;IACzF,SAAS,CAAC,QAAgB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QACpF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,iGAAiG;IACjG,2FAA2F;IACnF,aAAa,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAEO,YAAY,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAY;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,+FAA+F;IAC/F,wFAAwF;IAChF,mBAAmB,CAAC,QAAgB,EAAE,SAAiB;QAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,MAAM,GAAG,GAAG,CAAC,IAAc,EAAQ,EAAE;YACjC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE;gBAAE,OAAO;YAClC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;QACL,CAAC,CAAC;QACF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAM,iCAAiC;QACvF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAiB,8BAA8B;QACpF,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAK,eAAe;QACrE,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAE,4CAA4C;QAClG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,8FAA8F;IACtF,cAAc,CAAC,QAAgB,EAAE,MAAc;QACnD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QAC9I,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,iEAAiE;IACzD,YAAY,CAAC,QAAgB,EAAE,MAAc;QACjD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5I,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,+EAA+E;IACvE,YAAY,CAAC,MAAc,EAAE,WAAmB;QACpD,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnH,CAAC;CACJ,CAAA;AAhYY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAGR,wBAAY;QACR,wBAAU;GAHlC,qBAAqB,CAgYjC;AAED,8FAA8F;AAC9F,MAAM,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;AAEhD,4IAA4I;AAC5I,SAAgB,kBAAkB,CAAC,QAAgB,IAAY,OAAO,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjH,4IAA4I;AAC5I,SAAgB,gBAAgB,CAAC,QAAgB,IAAY,OAAO,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7G,4IAA4I;AAC5I,SAAgB,kBAAkB,CAAC,QAAgB,IAA2B,OAAO,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAChI,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,MAAsB,IAAU,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAC1I,4IAA4I;AAC5I,SAAgB,gBAAgB,CAAC,QAAgB,IAAyB,OAAO,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC1H,4IAA4I;AAC5I,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,IAAkB,IAAU,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAChI,4IAA4I;AAC5I,SAAgB,WAAW,CAAC,IAAkB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,IAAa,OAAO,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACjL,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,IAAa,OAAO,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACnM,4IAA4I;AAC5I,SAAgB,sBAAsB,CAAC,QAAgB,EAAE,kBAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG,IAAyB,OAAO,WAAW,CAAC,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACrP,4IAA4I;AAC5I,SAAgB,aAAa,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAAc,OAAO,CAAC,GAAG,IAAkB,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAChJ,4IAA4I;AAC5I,SAAgB,YAAY,CAAC,OAAe,IAAkB,OAAO,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzG,4IAA4I;AAC5I,SAAgB,qBAAqB,CAAC,QAAgB,IAAoB,OAAO,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC/H,4IAA4I;AAC5I,SAAgB,mBAAmB,CAAC,aAAqB,IAAc,OAAO,WAAW,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC/H,4IAA4I;AAC5I,SAAgB,wBAAwB,CAAC,QAAgB,IAAU,WAAW,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { AtomicFile } from './atomic-file';\nimport { DotWebpieces, dotWebpieces } from './state-dir';\nimport { toError } from './to-error';\n\n// Shared \"is my feature branch healthy relative to origin/main?\" state. The SLOW signals (git fetch +\n// merge-base + same-file-overlap + a merged-PR lookup) are computed by the ai-hook-rules refresher in a\n// DETACHED background process; the feature-branch-guard only READS this cached file. pr-gate's merge\n// flow also writes it synchronously after a merge. Lives here (the shared dep of both).\n\n// How long an `inprocess` refresher lock may sit before a new refresher assumes the prior run hung.\nexport const DEFAULT_HANG_TIMEOUT_MINUTES = 5;\n\nconst MAIN_SYNC_STATUS_FILE = 'main-sync-status.json';\nconst MAIN_SYNC_LOCK_FILE = 'main-sync.lock.json';\n\nconst LOCK_STATE_INPROCESS = 'inprocess';\nconst LOCK_STATE_FINISHED = 'finished';\n\n// Data-only (per CLAUDE.md, classes for data).\nexport class MainSyncStatus {\n    branch: string;\n    branchAlreadyMerged: boolean;\n    mergedPr: string;\n    hasForkPoint: boolean;\n    forkPoint: string | null;\n    originMain: string;\n    featureHead: string;\n    conflict: boolean;\n    conflictFiles: string[];\n    timestamp: string;\n    // An OPEN (not merged) PR tracking this branch, if any — '' = none or not-yet-known. Advisory.\n    // Kept OUT of the positional constructor (a defaulted field) so existing call sites don't churn.\n    openPr: string = '';\n    // The LOCAL refs/heads/main hash — '' = main does not exist locally (fresh clone / worktree) or\n    // could not be read. Paired with `originMain`, this is what tells the read-stale-guard whether a\n    // checked-out `main` is behind its remote. Defaulted field for the same reason as `openPr`.\n    localMain: string = '';\n\n    constructor(\n        branch: string,\n        branchAlreadyMerged: boolean,\n        mergedPr: string,\n        hasForkPoint: boolean,\n        forkPoint: string | null,\n        originMain: string,\n        featureHead: string,\n        conflict: boolean,\n        conflictFiles: string[],\n        timestamp: string,\n    ) {\n        this.branch = branch;\n        this.branchAlreadyMerged = branchAlreadyMerged;\n        this.mergedPr = mergedPr;\n        this.hasForkPoint = hasForkPoint;\n        this.forkPoint = forkPoint;\n        this.originMain = originMain;\n        this.featureHead = featureHead;\n        this.conflict = conflict;\n        this.conflictFiles = conflictFiles;\n        this.timestamp = timestamp;\n    }\n}\n\n// Concurrency state machine for the detached refresher. `started` is epoch ms. `pid` is the refresher\n// process's pid (0 = unknown) — used so a KILLED refresher doesn't wedge `inprocess` for the timeout.\nexport class MainSyncLock {\n    state: string;\n    started: number;\n    pid: number;\n\n    constructor(state: string, started: number, pid: number = 0) {\n        this.state = state;\n        this.started = started;\n        this.pid = pid;\n    }\n}\n\n// Raw JSON shapes for the cast at the parse boundary.\ninterface RawStatus {\n    branch?: string;\n    branchAlreadyMerged?: boolean;\n    mergedPr?: string;\n    hasForkPoint?: boolean;\n    forkPoint?: string | null;\n    originMain?: string;\n    featureHead?: string;\n    conflict?: boolean;\n    conflictFiles?: string[];\n    timestamp?: string;\n    openPr?: string;\n    localMain?: string;\n}\n\ninterface RawLock {\n    state?: string;\n    started?: number;\n    pid?: number;\n}\n\n// Result of a captured git/gh invocation: ok=false on spawn failure or non-zero exit.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n}\n\n/**\n * Reads/writes the main-sync cache + lock and computes the slow \"is my branch healthy vs origin/main?\"\n * status. `@injectable(bindingScopeValues.Singleton)` so it's injectable and drawn in the rules-config DI design.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class MainSyncStatusService {\n    constructor(\n        private readonly dotDir: DotWebpieces = dotWebpieces,\n        private readonly atomicFile: AtomicFile = new AtomicFile(),\n    ) {}\n\n    /**\n     * SHARED scope: `<primary>/.webpieces/main-sync-status.json`, one per repo.\n     *\n     * It is the OUTPUT of the single-flight refresher below, so it has to live where the lock lives —\n     * one `.git`, one `origin/main`, one fetch, one answer. A per-worktree copy under single-flight\n     * would only ever be written for whichever worktree won the lock anyway.\n     *\n     * KNOWN CONSEQUENCE, stated plainly rather than discovered later: the file's CONTENT is keyed to\n     * one branch (`branch`, `featureHead`, `conflict`, `conflictFiles`), and every reader fails OPEN\n     * when the cached branch is not the branch being judged (`merged-branch-bash-guard` and\n     * `stale-main-bash-guard` both log `stale-cross-branch-cache (fail-open)`). With several worktrees\n     * on several branches, the losers of the lock therefore see a cross-branch cache and their guards\n     * allow rather than block. That is the fail-SAFE direction and it is inherent to single-flight, not\n     * to the shared path — but making the entries branch-keyed (a map of branch → status, written\n     * atomically) is the obvious follow-up.\n     */\n    mainSyncStatusPath(repoRoot: string): string {\n        return this.dotDir.sharedFile(repoRoot, MAIN_SYNC_STATUS_FILE);\n    }\n\n    /**\n     * SHARED scope — the single-flight lock for the whole repo.\n     *\n     * This is the fix for the filed bug \"the detached main-sync refresher's `git fetch` races the\n     * agent's foreground `git fetch`/`git pull` and corrupts `.git/FETCH_HEAD`\". The lock was already\n     * atomic (O_CREAT|O_EXCL) and already serialised refreshers against each other — but only WITHIN\n     * one worktree, so N worktrees meant N locks and up to N concurrent `git fetch`es against the ONE\n     * shared `.git`, which is exactly how a duplicate `for-merge` line lands in FETCH_HEAD. There is\n     * one `.git`, so there is now one lock: at most one refresher in flight across all worktrees.\n     *\n     * Stale-lock handling is unchanged and still required (a lock nobody can clear is worse than the\n     * race): the holder records pid + start epoch, and `tryAcquireMainSyncLock` reclaims it once\n     * `isRefreshInProgress` proves the holder is finished, hung past hangTimeoutMinutes, or dead.\n     */\n    mainSyncLockPath(repoRoot: string): string {\n        return this.dotDir.sharedFile(repoRoot, MAIN_SYNC_LOCK_FILE);\n    }\n\n    // Pure read — any error (missing file, malformed JSON) returns null so the guard fails OPEN.\n    readMainSyncStatus(repoRoot: string): MainSyncStatus | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const statusPath = this.mainSyncStatusPath(repoRoot);\n            if (!fs.existsSync(statusPath)) return null;\n            const raw = JSON.parse(fs.readFileSync(statusPath, 'utf8')) as RawStatus;\n            const status = new MainSyncStatus(\n                raw.branch ?? '',\n                raw.branchAlreadyMerged ?? false,\n                raw.mergedPr ?? '',\n                raw.hasForkPoint ?? true,\n                raw.forkPoint ?? null,\n                raw.originMain ?? '',\n                raw.featureHead ?? '',\n                raw.conflict ?? false,\n                raw.conflictFiles ?? [],\n                raw.timestamp ?? '',\n            );\n            status.openPr = raw.openPr ?? '';\n            status.localMain = raw.localMain ?? '';\n            return status;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    /**\n     * ATOMIC write (temp file + `rename()` in the same directory). The refresher writes this file while\n     * guards on the blocking path read it; a plain `writeFileSync` truncates first, so a reader landing\n     * in that window gets a torn document. Now that the file is repo-wide the reader may be in another\n     * worktree entirely, which widens the window rather than creating it. See AtomicFile.\n     */\n    writeMainSyncStatus(repoRoot: string, status: MainSyncStatus): void {\n        this.atomicFile.writeJsonAtomic(this.mainSyncStatusPath(repoRoot), status);\n    }\n\n    readMainSyncLock(repoRoot: string): MainSyncLock | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const lockPath = this.mainSyncLockPath(repoRoot);\n            if (!fs.existsSync(lockPath)) return null;\n            const raw = JSON.parse(fs.readFileSync(lockPath, 'utf8')) as RawLock;\n            return new MainSyncLock(raw.state ?? LOCK_STATE_FINISHED, raw.started ?? 0, raw.pid ?? 0);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    writeMainSyncLock(repoRoot: string, lock: MainSyncLock): void {\n        const lockPath = this.mainSyncLockPath(repoRoot);\n        this.ensureDir(lockPath);\n        fs.writeFileSync(lockPath, JSON.stringify(lock, null, 2) + '\\n');\n    }\n\n    // A lock is stale (prior refresher assumed hung) once `inprocess` longer than hangTimeoutMinutes.\n    isLockStale(lock: MainSyncLock, hangTimeoutMinutes: number, now: number = Date.now()): boolean {\n        return now - lock.started > hangTimeoutMinutes * 60 * 1000;\n    }\n\n    // True when another refresher is actively running and we should NOT start a second one.\n    isRefreshInProgress(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now()): boolean {\n        const lock = this.readMainSyncLock(repoRoot);\n        if (!lock) return false;\n        if (lock.state !== LOCK_STATE_INPROCESS) return false;\n        if (this.isLockStale(lock, hangTimeoutMinutes, now)) return false;\n        return this.isProcessAlive(lock.pid);\n    }\n\n    /**\n     * ATOMICALLY take the refresher lock. Returns the held lock, or null when someone else holds it.\n     *\n     * Replaces the check-then-write pair (`isRefreshInProgress` then `writeMainSyncLock`), whose gap\n     * let two detached refreshers both pass the check and then both run `git fetch` at once — the\n     * concurrency this lock exists to prevent. The create uses the `wx` flag (O_CREAT|O_EXCL), so of\n     * N racing refreshers exactly one creates the file.\n     *\n     * A lock file left behind by a FINISHED, hung, or killed refresher is reclaimed: we only unlink\n     * and re-take it once `isRefreshInProgress` says the holder is provably not running, and we\n     * re-read afterwards to confirm the entry we see is ours before claiming the lock.\n     */\n    tryAcquireMainSyncLock(\n        repoRoot: string,\n        hangTimeoutMinutes: number,\n        now: number = Date.now(),\n        pid: number = process.pid,\n    ): MainSyncLock | null {\n        const lockPath = this.mainSyncLockPath(repoRoot);\n        this.ensureDir(lockPath);\n        const lock = this.inProcessLock(now, pid);\n        const payload = JSON.stringify(lock, null, 2) + '\\n';\n\n        if (this.createExclusive(lockPath, payload)) return lock;\n\n        // The file already exists. Leave it alone while a live refresher owns it.\n        if (this.isRefreshInProgress(repoRoot, hangTimeoutMinutes, now)) return null;\n\n        // Reclaim it: remove the dead entry, then re-take it exclusively so only one reclaimer wins.\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            fs.unlinkSync(lockPath);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;  // someone else reclaimed it first — the exclusive create below decides\n        }\n        if (!this.createExclusive(lockPath, payload)) return null;\n\n        // Confirm the lock on disk is OURS (a simultaneous reclaimer could have unlinked ours and\n        // written its own between the two calls above).\n        const held = this.readMainSyncLock(repoRoot);\n        if (!held || held.pid !== pid || held.started !== lock.started) return null;\n        return lock;\n    }\n\n    // O_CREAT|O_EXCL write: true when THIS call created the file, false when it already existed.\n    private createExclusive(lockPath: string, payload: string): boolean {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            fs.writeFileSync(lockPath, payload, { flag: 'wx' });\n            return true;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return false;\n        }\n    }\n\n    inProcessLock(now: number = Date.now(), pid: number = process.pid): MainSyncLock {\n        return new MainSyncLock(LOCK_STATE_INPROCESS, now, pid);\n    }\n\n    finishedLock(started: number): MainSyncLock {\n        return new MainSyncLock(LOCK_STATE_FINISHED, started, 0);\n    }\n\n    /**\n     * The SLOW path, run only inside the detached refresher. Computes every cached signal the\n     * feature-branch-guard needs. Never run on the hook's blocking path.\n     */\n    // webpieces-disable max-lines-new-methods -- one cohesive slow-path computation\n    computeMainSyncStatus(repoRoot: string): MainSyncStatus {\n        const branch = this.gitBranch(repoRoot);\n        const mergedPr = this.detectMergedPr(repoRoot, branch);\n        const openPr = this.detectOpenPr(repoRoot, branch);\n\n        // Best-effort network refresh; offline just means we evaluate against the last-fetched ref.\n        this.fetchOriginMain(repoRoot);\n\n        const head = this.capture(repoRoot, 'git', ['rev-parse', 'HEAD']);\n        const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n        const localMain = this.localMainHash(repoRoot);\n        const featureHead = head.ok ? head.out : '';\n        if (!head.ok || !originMain.ok) {\n            const status = this.benignStatus(branch, featureHead);\n            status.branchAlreadyMerged = mergedPr !== '';\n            status.mergedPr = mergedPr;\n            status.openPr = openPr;\n            status.localMain = localMain;\n            return status;\n        }\n\n        const forkPoint = this.capture(repoRoot, 'git', ['merge-base', 'origin/main', 'HEAD']);\n        if (!forkPoint.ok || forkPoint.out === '') {\n            const noFork = new MainSyncStatus(branch, mergedPr !== '', mergedPr, false, null, originMain.out, featureHead, false, [], new Date().toISOString());\n            noFork.openPr = openPr;\n            noFork.localMain = localMain;\n            return noFork;\n        }\n\n        const featureFiles = new Set(this.featureChangedFiles(repoRoot, forkPoint.out));\n        const mainFiles = this.changedFiles(repoRoot, forkPoint.out, 'origin/main');\n        const conflictFiles = mainFiles.filter((file: string): boolean => featureFiles.has(file));\n\n        const status = new MainSyncStatus(\n            branch,\n            mergedPr !== '',\n            mergedPr,\n            true,\n            forkPoint.out,\n            originMain.out,\n            featureHead,\n            conflictFiles.length > 0,\n            conflictFiles,\n            new Date().toISOString(),\n        );\n        status.openPr = openPr;\n        status.localMain = localMain;\n        return status;\n    }\n\n    // The recovery steps when there is no fork point with origin/main (a bad merge of main into branch).\n    squashRecoverySteps(currentBranch: string): string[] {\n        return [\n            '1. Fetch latest main:            git fetch origin main',\n            `2. New branch off origin/main:   git checkout -b ${currentBranch}-v2 origin/main`,\n            `3. Squash-merge old branch:      git merge --squash ${currentBranch}`,\n            '   ^^ HUMAN-ONLY. `git merge` is blocked for AI (redirect-how-to-merge-main). AI: ask the',\n            '   human to run step 3, and warn them it is a raw merge — only correct here because the',\n            '   branch is already broken. For a normal update from main they should push back and',\n            '   tell you to use the gated 3-point merge instead: `pnpm wp-start-update` (paired with',\n            '   `pnpm wp-finish-update`) when no PR is open, or `pnpm wp-start-upsert-pr` (paired with',\n            '   `pnpm wp-finish-upsert-pr`) when a PR IS open — a PR MUST use the upsert-pr pair.',\n            `4. Commit the squash:            git add -A && git commit -m \"Squashed from ${currentBranch}\"`,\n            '5. If a PR exists:               open a NEW PR for the -v2 branch and close the old one.',\n        ];\n    }\n\n    // Synchronously stamp a clean \"up to date with main\" status — call right after a successful merge.\n    stampCleanMainSyncStatus(repoRoot: string): void {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const branch = this.gitBranch(repoRoot);\n            const originMain = this.capture(repoRoot, 'git', ['rev-parse', 'origin/main']);\n            const featureHead = this.capture(repoRoot, 'git', ['rev-parse', 'HEAD']);\n            if (!originMain.ok || !featureHead.ok) return;\n            const status = new MainSyncStatus(\n                branch, false, '', true, originMain.out, originMain.out, featureHead.out, false, [], new Date().toISOString(),\n            );\n            status.localMain = this.localMainHash(repoRoot);\n            this.writeMainSyncStatus(repoRoot, status);\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n        }\n    }\n\n    /**\n     * Refresh `origin/main` WITHOUT writing `.git/FETCH_HEAD`.\n     *\n     * WHY the flag is not optional: this runs in a DETACHED background process while the agent is\n     * running its own foreground `git fetch` / `git pull` in the very same repo. `.git/FETCH_HEAD` is\n     * a single file that git takes no lock on, so two overlapping fetches interleave their writes and\n     * can leave the SAME `for-merge` line twice. `git pull` then reads two for-merge entries and dies\n     * with `fatal: Cannot fast-forward to multiple branches` — wedging the exact command the\n     * read-stale-guard tells the agent to run. `--no-write-fetch-head` (git >= 2.29) still updates the\n     * remote-tracking ref, which is all anything downstream reads (`origin/main`, merge-base), so\n     * nothing here needs FETCH_HEAD written at all.\n     *\n     * Older git rejects the flag; only then do we retry the plain form, accepting the old behaviour\n     * rather than losing the refresh entirely on a pre-2020 git.\n     */\n    private fetchOriginMain(repoRoot: string): void {\n        const safe = spawnSync('git', ['fetch', '--no-write-fetch-head', 'origin', 'main'], {\n            cwd: repoRoot, encoding: 'utf8', stdio: ['ignore', 'ignore', 'pipe'],\n        });\n        if (safe.status === 0) return;\n        if (!this.isUnknownGitOption(safe.stderr)) return;  // a real failure (offline, auth) — not our business\n        spawnSync('git', ['fetch', 'origin', 'main'], { cwd: repoRoot, stdio: 'ignore' });\n    }\n\n    // Did git reject the flag itself (too old), as opposed to failing the network refresh?\n    private isUnknownGitOption(stderr: string | null): boolean {\n        const text = (stderr ?? '').toLowerCase();\n        return text.includes('unknown option') || text.includes('unknown switch') || text.includes('unrecognized option');\n    }\n\n    private ensureDir(filePath: string): void {\n        fs.mkdirSync(path.dirname(filePath), { recursive: true });\n    }\n\n    // Liveness probe: is `pid` still a running process? pid <= 0 (unknown) → assume alive.\n    private isProcessAlive(pid: number): boolean {\n        if (pid <= 0) return true;\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            process.kill(pid, 0);\n            return true;\n        } catch (err: unknown) {\n            const error = toError(err);\n            return !error.message.includes('ESRCH');\n        }\n    }\n\n    // Run a command capturing trimmed stdout; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, cmd: string, args: string[]): CmdCapture {\n        const result = spawnSync(cmd, args, { cwd: repoRoot, encoding: 'utf8' });\n        if (result.status !== 0 || typeof result.stdout !== 'string') return { ok: false, out: '' };\n        return { ok: true, out: result.stdout.trim() };\n    }\n\n    // The actual checked-out branch in repoRoot — cwd-correct so the cache's `branch` label matches.\n    private gitBranch(repoRoot: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', '--abbrev-ref', 'HEAD']);\n        return result.ok ? result.out : '';\n    }\n\n    // The LOCAL main hash. `refs/heads/main` (not the bare name) so it can never resolve to a remote\n    // ref or a tag. '' when main does not exist locally — which the guard treats as fail-open.\n    private localMainHash(repoRoot: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', 'refs/heads/main']);\n        return result.ok ? result.out : '';\n    }\n\n    private changedFiles(repoRoot: string, base: string, head: string): string[] {\n        const result = this.capture(repoRoot, 'git', ['diff', '--name-only', base, head]);\n        if (!result.ok || result.out === '') return [];\n        return result.out.split('\\n').map((line: string): string => line.trim()).filter((line: string): boolean => line.length > 0);\n    }\n\n    // Every file this feature branch has touched since the fork point — committed AND still in the\n    // working tree (staged / unstaged / untracked), so a conflict is visible WHILE editing.\n    private featureChangedFiles(repoRoot: string, forkPoint: string): string[] {\n        const out = new Set<string>();\n        const add = (args: string[]): void => {\n            const r = this.capture(repoRoot, 'git', args);\n            if (!r.ok || r.out === '') return;\n            for (const line of r.out.split('\\n')) {\n                const f = line.trim();\n                if (f.length > 0) out.add(f);\n            }\n        };\n        add(['diff', '--name-only', forkPoint, 'HEAD']);      // committed since the fork point\n        add(['diff', '--name-only', 'HEAD']);                 // unstaged working-tree edits\n        add(['diff', '--name-only', '--cached', 'HEAD']);     // staged edits\n        add(['ls-files', '--others', '--exclude-standard']);  // untracked new files (respects .gitignore)\n        return [...out];\n    }\n\n    // Has this feature branch already been merged into main? Reliable signal: a MERGED PR exists.\n    private detectMergedPr(repoRoot: string, branch: string): string {\n        if (!branch || branch === 'main') return '';\n        const result = this.capture(repoRoot, 'gh', ['pr', 'list', '--head', branch, '--state', 'merged', '--json', 'number', '--jq', '.[0].number']);\n        return result.ok ? result.out : '';\n    }\n\n    // An OPEN PR tracking this branch, if any. Best-effort/advisory.\n    private detectOpenPr(repoRoot: string, branch: string): string {\n        if (!branch || branch === 'main') return '';\n        const result = this.capture(repoRoot, 'gh', ['pr', 'list', '--head', branch, '--state', 'open', '--json', 'number', '--jq', '.[0].number']);\n        return result.ok ? result.out : '';\n    }\n\n    // A benign status that never blocks — used when origin/main can't be resolved.\n    private benignStatus(branch: string, featureHead: string): MainSyncStatus {\n        return new MainSyncStatus(branch, false, '', true, null, '', featureHead, false, [], new Date().toISOString());\n    }\n}\n\n// Temporary migration delegators to MainSyncStatusService — removed once consumers inject it.\nconst mainSyncSvc = new MainSyncStatusService();\n\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function mainSyncStatusPath(repoRoot: string): string { return mainSyncSvc.mainSyncStatusPath(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function mainSyncLockPath(repoRoot: string): string { return mainSyncSvc.mainSyncLockPath(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncStatus(repoRoot: string): MainSyncStatus | null { return mainSyncSvc.readMainSyncStatus(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncStatus(repoRoot: string, status: MainSyncStatus): void { mainSyncSvc.writeMainSyncStatus(repoRoot, status); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function readMainSyncLock(repoRoot: string): MainSyncLock | null { return mainSyncSvc.readMainSyncLock(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function writeMainSyncLock(repoRoot: string, lock: MainSyncLock): void { mainSyncSvc.writeMainSyncLock(repoRoot, lock); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function isLockStale(lock: MainSyncLock, hangTimeoutMinutes: number, now: number = Date.now()): boolean { return mainSyncSvc.isLockStale(lock, hangTimeoutMinutes, now); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function isRefreshInProgress(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now()): boolean { return mainSyncSvc.isRefreshInProgress(repoRoot, hangTimeoutMinutes, now); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function tryAcquireMainSyncLock(repoRoot: string, hangTimeoutMinutes: number, now: number = Date.now(), pid: number = process.pid): MainSyncLock | null { return mainSyncSvc.tryAcquireMainSyncLock(repoRoot, hangTimeoutMinutes, now, pid); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function inProcessLock(now: number = Date.now(), pid: number = process.pid): MainSyncLock { return mainSyncSvc.inProcessLock(now, pid); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function finishedLock(started: number): MainSyncLock { return mainSyncSvc.finishedLock(started); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function computeMainSyncStatus(repoRoot: string): MainSyncStatus { return mainSyncSvc.computeMainSyncStatus(repoRoot); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function squashRecoverySteps(currentBranch: string): string[] { return mainSyncSvc.squashRecoverySteps(currentBranch); }\n// webpieces-disable no-function-outside-class -- temporary back-compat delegator to MainSyncStatusService; removed once consumers inject it\nexport function stampCleanMainSyncStatus(repoRoot: string): void { mainSyncSvc.stampCleanMainSyncStatus(repoRoot); }\n"]}

package/src/merged-branches.d.ts

@@ -1,9 +1,19 @@
+import { AtomicFile } from './atomic-file';
+import { DotWebpieces } from './state-dir';
 import { WorktreeService } from './worktrees';
 import { CacheFreshness, MergedBranchesCache } from './merged-branch-verdicts';
 export { MergedBranch, DeletableBranch, DeletableWorktree, MergedBranchesCache, CacheFreshness, CACHE_STALE_AFTER_MS, CLASSIFICATION_MERGED_PR, CLASSIFICATION_BACKUP_OF_MERGED, CLASSIFICATION_NO_COMMITS, CLASSIFICATION_SUPERSEDED, CLASSIFICATION_CONTENT_IN_MAIN, CLASSIFICATION_NEVER_PROPOSED, CLASSIFICATION_IN_USE, CLASSIFICATION_PRUNABLE, CLASSIFICATION_LOCKED, CLASSIFICATION_CURRENT, CLASSIFICATION_DETACHED, PROMPTABLE_CLASSIFICATIONS, } from './merged-branch-verdicts';
 export declare class MergedBranchesService {
     private readonly worktrees;
-    constructor(worktrees?: WorktreeService);
+    private readonly dotDir;
+    private readonly atomicFile;
+    constructor(worktrees?: WorktreeService, dotDir?: DotWebpieces, atomicFile?: AtomicFile);
+    /**
+     * SHARED scope — one per repo, in the primary clone, NOT one per worktree. This file's contents
+     * describe every branch AND every worktree in the repo, so a per-worktree copy was a repo-wide fact
+     * stored N times and therefore N times wrong: branch-creation-guard reported "8 parked local
+     * branches" against an actual 1, reading a copy that predated deletions made from another worktree.
+     */
     mergedBranchesPath(repoRoot: string): string;
     readMergedBranches(repoRoot: string): MergedBranchesCache | null;
     /**
@@ -25,6 +35,18 @@ export declare class MergedBranchesService {
      * rather than emptied, since "git failed" must never read as "everything was deleted".
      */
     reconcile(repoRoot: string, cache: MergedBranchesCache): MergedBranchesCache;
+    /**
+     * ATOMIC write. Now that this file is shared by every worktree it has N concurrent writers (one
+     * detached refresher per agent), and its readers are the guards' BLOCKING path. A plain
+     * `writeFileSync` truncates before it writes, so a reader landing in that window gets a torn
+     * document — the reader-side retry added in PR #526 cannot rescue a syntactically valid PREFIX.
+     * Fixed where it belongs: temp file + `rename()`, which POSIX makes atomic. See AtomicFile.
+     *
+     * This buys ATOMIC READS, not lost-update protection: two read-modify-write cycles still end
+     * last-writer-wins. That is acceptable and deliberate — this is a DERIVED cache, recomputed from
+     * `gh` + git by the refresher, and wp-cleanup recomputes rather than trusting it before deleting
+     * anything. Nothing here is transactional and no caller may assume it is.
+     */
     writeMergedBranches(repoRoot: string, cache: MergedBranchesCache): void;
     /**
      * Every local branch except `main`. Uses `git for-each-ref`, NOT `git branch` — the latter is a

package/src/merged-branches.js

@@ -4,9 +4,9 @@ exports.MergedBranchesService = exports.PROMPTABLE_CLASSIFICATIONS = exports.CLA
 const tslib_1 = require("tslib");
 const child_process_1 = require("child_process");
 const fs = tslib_1.__importStar(require("fs"));
-const path = tslib_1.__importStar(require("path"));
 const inversify_1 = require("inversify");
-const constants_1 = require("./constants");
+const atomic_file_1 = require("./atomic-file");
+const state_dir_1 = require("./state-dir");
 const to_error_1 = require("./to-error");
 const worktrees_1 = require("./worktrees");
 const merged_branch_verdicts_1 = require("./merged-branch-verdicts");
@@ -94,13 +94,23 @@ class Verdict {
 }
 let MergedBranchesService = class MergedBranchesService {
     worktrees;
+    dotDir;
+    atomicFile;
     // Defaulted so the non-DI call sites (`new MergedBranchesService()` in the guard and the detached
     // refresher) keep working, while inversify still injects the singleton when resolved from a container.
-    constructor(worktrees = new worktrees_1.WorktreeService()) {
+    constructor(worktrees = new worktrees_1.WorktreeService(), dotDir = state_dir_1.dotWebpieces, atomicFile = new atomic_file_1.AtomicFile()) {
         this.worktrees = worktrees;
+        this.dotDir = dotDir;
+        this.atomicFile = atomicFile;
     }
+    /**
+     * SHARED scope — one per repo, in the primary clone, NOT one per worktree. This file's contents
+     * describe every branch AND every worktree in the repo, so a per-worktree copy was a repo-wide fact
+     * stored N times and therefore N times wrong: branch-creation-guard reported "8 parked local
+     * branches" against an actual 1, reading a copy that predated deletions made from another worktree.
+     */
     mergedBranchesPath(repoRoot) {
-        return path.join(repoRoot, constants_1.WEBPIECES_TMP_DIR, MERGED_BRANCHES_FILE);
+        return this.dotDir.sharedFile(repoRoot, MERGED_BRANCHES_FILE);
     }
     // Pure read — any error (missing file, malformed JSON) returns null so the guard fails OPEN.
     readMergedBranches(repoRoot) {
@@ -151,10 +161,20 @@ let MergedBranchesService = class MergedBranchesService {
         const keepTree = (entry) => trees.length === 0 || livePaths.has(entry.path);
         return new merged_branch_verdicts_1.MergedBranchesCache(cache.timestamp, cache.deletable.filter(keepBranch), cache.keep.filter(keepBranch), cache.worktrees.filter(keepTree));
     }
+    /**
+     * ATOMIC write. Now that this file is shared by every worktree it has N concurrent writers (one
+     * detached refresher per agent), and its readers are the guards' BLOCKING path. A plain
+     * `writeFileSync` truncates before it writes, so a reader landing in that window gets a torn
+     * document — the reader-side retry added in PR #526 cannot rescue a syntactically valid PREFIX.
+     * Fixed where it belongs: temp file + `rename()`, which POSIX makes atomic. See AtomicFile.
+     *
+     * This buys ATOMIC READS, not lost-update protection: two read-modify-write cycles still end
+     * last-writer-wins. That is acceptable and deliberate — this is a DERIVED cache, recomputed from
+     * `gh` + git by the refresher, and wp-cleanup recomputes rather than trusting it before deleting
+     * anything. Nothing here is transactional and no caller may assume it is.
+     */
     writeMergedBranches(repoRoot, cache) {
-        const cachePath = this.mergedBranchesPath(repoRoot);
-        fs.mkdirSync(path.dirname(cachePath), { recursive: true });
-        fs.writeFileSync(cachePath, JSON.stringify(cache, null, 2) + '\n');
+        this.atomicFile.writeJsonAtomic(this.mergedBranchesPath(repoRoot), cache);
     }
     /**
      * Every local branch except `main`. Uses `git for-each-ref`, NOT `git branch` — the latter is a
@@ -441,6 +461,8 @@ let MergedBranchesService = class MergedBranchesService {
 exports.MergedBranchesService = MergedBranchesService;
 exports.MergedBranchesService = MergedBranchesService = tslib_1.__decorate([
     (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton),
-    tslib_1.__metadata("design:paramtypes", [worktrees_1.WorktreeService])
+    tslib_1.__metadata("design:paramtypes", [worktrees_1.WorktreeService,
+        state_dir_1.DotWebpieces,
+        atomic_file_1.AtomicFile])
 ], MergedBranchesService);
 //# sourceMappingURL=merged-branches.js.map