@webpieces/rules-config 0.4.683 → 0.4.684

package/src/merged-branches.d.ts

@@ -1,13 +1,15 @@
 import { AtomicFile } from './atomic-file';
 import { DotWebpieces } from './state-dir';
 import { WorktreeService } from './worktrees';
+import { WorktreeLockVerdicts } from './worktree-lock-verdicts';
 import { CacheFreshness, MergedBranchesCache } from './merged-branch-verdicts';
 export { MergedBranch, DeletableBranch, DeletableWorktree, MergedBranchesCache, CacheFreshness, CACHE_STALE_AFTER_MS, CLASSIFICATION_MERGED_PR, CLASSIFICATION_BACKUP_OF_MERGED, CLASSIFICATION_BACKUP_OF_LIVE, CLASSIFICATION_NO_COMMITS, CLASSIFICATION_SUPERSEDED, CLASSIFICATION_CONTENT_IN_MAIN, CLASSIFICATION_NEVER_PROPOSED, CLASSIFICATION_IN_USE, CLASSIFICATION_PRUNABLE, CLASSIFICATION_LOCKED, CLASSIFICATION_CURRENT, CLASSIFICATION_DETACHED, PROMPTABLE_CLASSIFICATIONS, } from './merged-branch-verdicts';
 export declare class MergedBranchesService {
     private readonly worktrees;
     private readonly dotDir;
     private readonly atomicFile;
-    constructor(worktrees?: WorktreeService, dotDir?: DotWebpieces, atomicFile?: AtomicFile);
+    private readonly locks;
+    constructor(worktrees?: WorktreeService, dotDir?: DotWebpieces, atomicFile?: AtomicFile, locks?: WorktreeLockVerdicts);
     /**
      * SHARED scope — one per repo, in the primary clone, NOT one per worktree. This file's contents
      * describe every branch AND every worktree in the repo, so a per-worktree copy was a repo-wide fact
@@ -65,10 +67,11 @@ export declare class MergedBranchesService {
      *
      * A worktree is deletable when its directory is already gone (`prunable`), or when its branch is
      * dead by the very same proof the branch cap uses — a MERGED PR, its own or that of the branch it
-     * snapshots. Nothing else. It is spared when it is LOCKED (a human said "do not touch"), when it is
-     * the worktree we are standing in right now (removing your own cwd is not a thing to suggest to an
-     * agent), or when its branch is anything short of provably merged — INCLUDING a branch with no
-     * commits yet, which is what every worktree looks like while an agent is working in it.
+     * snapshots. Nothing else. It is spared when it is LOCKED BY SOMETHING STILL THERE (see
+     * lockVerdict), when it is the worktree we are standing in right now (removing your own cwd is not
+     * a thing to suggest to an agent), or when its branch is anything short of provably merged —
+     * INCLUDING a branch with no commits yet, which is what every worktree looks like while an agent
+     * is working in it.
      */
     private classifyWorktrees;
     /**

package/src/merged-branches.js

@@ -9,6 +9,7 @@ const atomic_file_1 = require("./atomic-file");
 const state_dir_1 = require("./state-dir");
 const to_error_1 = require("./to-error");
 const worktrees_1 = require("./worktrees");
+const worktree_lock_verdicts_1 = require("./worktree-lock-verdicts");
 const merged_branch_verdicts_1 = require("./merged-branch-verdicts");
 var merged_branch_verdicts_2 = require("./merged-branch-verdicts");
 Object.defineProperty(exports, "MergedBranch", { enumerable: true, get: function () { return merged_branch_verdicts_2.MergedBranch; } });
@@ -97,12 +98,14 @@ let MergedBranchesService = class MergedBranchesService {
     worktrees;
     dotDir;
     atomicFile;
+    locks;
     // Defaulted so the non-DI call sites (`new MergedBranchesService()` in the guard and the detached
     // refresher) keep working, while inversify still injects the singleton when resolved from a container.
-    constructor(worktrees = new worktrees_1.WorktreeService(), dotDir = state_dir_1.dotWebpieces, atomicFile = new atomic_file_1.AtomicFile()) {
+    constructor(worktrees = new worktrees_1.WorktreeService(), dotDir = state_dir_1.dotWebpieces, atomicFile = new atomic_file_1.AtomicFile(), locks = new worktree_lock_verdicts_1.WorktreeLockVerdicts()) {
         this.worktrees = worktrees;
         this.dotDir = dotDir;
         this.atomicFile = atomicFile;
+        this.locks = locks;
     }
     /**
      * SHARED scope — one per repo, in the primary clone, NOT one per worktree. This file's contents
@@ -240,10 +243,11 @@ let MergedBranchesService = class MergedBranchesService {
      *
      * A worktree is deletable when its directory is already gone (`prunable`), or when its branch is
      * dead by the very same proof the branch cap uses — a MERGED PR, its own or that of the branch it
-     * snapshots. Nothing else. It is spared when it is LOCKED (a human said "do not touch"), when it is
-     * the worktree we are standing in right now (removing your own cwd is not a thing to suggest to an
-     * agent), or when its branch is anything short of provably merged — INCLUDING a branch with no
-     * commits yet, which is what every worktree looks like while an agent is working in it.
+     * snapshots. Nothing else. It is spared when it is LOCKED BY SOMETHING STILL THERE (see
+     * lockVerdict), when it is the worktree we are standing in right now (removing your own cwd is not
+     * a thing to suggest to an agent), or when its branch is anything short of provably merged —
+     * INCLUDING a branch with no commits yet, which is what every worktree looks like while an agent
+     * is working in it.
      */
     classifyWorktrees(repoRoot, trees, prs) {
         const out = [];
@@ -254,23 +258,26 @@ let MergedBranchesService = class MergedBranchesService {
                 out.push(new merged_branch_verdicts_1.DeletableWorktree(tree.path, tree.branch, 'its directory is gone — `git worktree prune` clears it', 0, true, merged_branch_verdicts_1.CLASSIFICATION_PRUNABLE));
                 continue;
             }
-            if (tree.locked) {
-                out.push(new merged_branch_verdicts_1.DeletableWorktree(tree.path, tree.branch, 'locked by a human — do not touch', 0, false, merged_branch_verdicts_1.CLASSIFICATION_LOCKED));
+            // A dead agent's lock returns null here and the worktree is judged on its branch below,
+            // exactly like an unlocked one — with `unlockBeforeRemove` set so the reap clears the lock.
+            const staleLock = tree.locked ? this.locks.staleAgentLock(tree) : null;
+            if (tree.locked && staleLock === null) {
+                out.push(new merged_branch_verdicts_1.DeletableWorktree(tree.path, tree.branch, this.locks.sparedReason(tree), 0, false, merged_branch_verdicts_1.CLASSIFICATION_LOCKED));
                 continue;
             }
             if (tree.path === repoRoot) {
-                out.push(new merged_branch_verdicts_1.DeletableWorktree(tree.path, tree.branch, 'you are standing in it', 0, false, merged_branch_verdicts_1.CLASSIFICATION_CURRENT));
+                out.push(this.locks.annotate(new merged_branch_verdicts_1.DeletableWorktree(tree.path, tree.branch, 'you are standing in it', 0, false, merged_branch_verdicts_1.CLASSIFICATION_CURRENT), staleLock));
                 continue;
             }
             if (tree.branch === '') {
-                out.push(new merged_branch_verdicts_1.DeletableWorktree(tree.path, '', 'detached HEAD — no branch to check, so a human must decide', 0, false, merged_branch_verdicts_1.CLASSIFICATION_DETACHED));
+                out.push(this.locks.annotate(new merged_branch_verdicts_1.DeletableWorktree(tree.path, '', 'detached HEAD — no branch to check, so a human must decide', 0, false, merged_branch_verdicts_1.CLASSIFICATION_DETACHED), staleLock));
                 continue;
             }
             // The branch's OWN classification token rides along unchanged. That is what lets wp-cleanup
             // group probably-dead worktrees exactly the way it groups probably-dead branches, instead of
             // inventing a second, parallel notion of "how dead is this".
             const verdict = this.classify(repoRoot, tree.branch, prs);
-            out.push(new merged_branch_verdicts_1.DeletableWorktree(tree.path, tree.branch, verdict.entry.reason, verdict.entry.pr, verdict.deletable, verdict.entry.classification));
+            out.push(this.locks.annotate(new merged_branch_verdicts_1.DeletableWorktree(tree.path, tree.branch, verdict.entry.reason, verdict.entry.pr, verdict.deletable, verdict.entry.classification), staleLock));
         }
         return out;
     }
@@ -477,7 +484,11 @@ let MergedBranchesService = class MergedBranchesService {
     reviveWorktrees(raw) {
         if (!raw)
             return [];
-        return raw.map((entry) => new merged_branch_verdicts_1.DeletableWorktree(entry.path ?? '', entry.branch ?? '', entry.reason ?? '', entry.pr ?? 0, entry.deletable ?? false, entry.classification ?? merged_branch_verdicts_1.CLASSIFICATION_NEVER_PROPOSED));
+        return raw.map((entry) => {
+            const verdict = new merged_branch_verdicts_1.DeletableWorktree(entry.path ?? '', entry.branch ?? '', entry.reason ?? '', entry.pr ?? 0, entry.deletable ?? false, entry.classification ?? merged_branch_verdicts_1.CLASSIFICATION_NEVER_PROPOSED);
+            verdict.unlockBeforeRemove = entry.unlockBeforeRemove ?? false;
+            return verdict;
+        });
     }
     // Run a command capturing trimmed stdout; ok=false on spawn failure or non-zero exit.
     capture(repoRoot, cmd, args) {
@@ -492,6 +503,7 @@ exports.MergedBranchesService = MergedBranchesService = tslib_1.__decorate([
     (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton),
     tslib_1.__metadata("design:paramtypes", [worktrees_1.WorktreeService,
         state_dir_1.DotWebpieces,
-        atomic_file_1.AtomicFile])
+        atomic_file_1.AtomicFile,
+        worktree_lock_verdicts_1.WorktreeLockVerdicts])
 ], MergedBranchesService);
 //# sourceMappingURL=merged-branches.js.map

package/src/merged-branches.js.map

@@ -1 +1 @@
-{"version":3,"file":"merged-branches.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/merged-branches.ts"],"names":[],"mappings":";;;;AAAA,iDAA0C;AAC1C,+CAAyB;AACzB,yCAA2D;AAE3D,+CAA2C;AAC3C,2CAAyD;AACzD,yCAAqC;AACrC,2CAAwD;AACxD,qEAmBkC;AAElC,mEAoBkC;AAnB9B,sHAAA,YAAY,OAAA;AACZ,yHAAA,eAAe,OAAA;AACf,2HAAA,iBAAiB,OAAA;AACjB,6HAAA,mBAAmB,OAAA;AACnB,wHAAA,cAAc,OAAA;AACd,8HAAA,oBAAoB,OAAA;AACpB,kIAAA,wBAAwB,OAAA;AACxB,yIAAA,+BAA+B,OAAA;AAC/B,uIAAA,6BAA6B,OAAA;AAC7B,mIAAA,yBAAyB,OAAA;AACzB,mIAAA,yBAAyB,OAAA;AACzB,wIAAA,8BAA8B,OAAA;AAC9B,uIAAA,6BAA6B,OAAA;AAC7B,+HAAA,qBAAqB,OAAA;AACrB,iIAAA,uBAAuB,OAAA;AACvB,+HAAA,qBAAqB,OAAA;AACrB,gIAAA,sBAAsB,OAAA;AACtB,iIAAA,uBAAuB,OAAA;AACvB,oIAAA,0BAA0B,OAAA;AAI9B;;;;;;;;;;;;GAYG;AAEH,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAEpD,6FAA6F;AAC7F,kGAAkG;AAClG,qCAAqC;AACrC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,8FAA8F;AAC9F,sGAAsG;AACtG,kGAAkG;AAClG,MAAM,aAAa,GAAG,+BAA+B,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,KAAK;IACP,MAAM,CAAS;IACf,KAAK,CAAS;IAEd,YAAY,QAAgB,EAAE,KAAa;QACvC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AAED,MAAM,QAAQ;IACV,MAAM,CAAsB;IAC5B,KAAK,CAAqB;IAC1B;;;;OAIG;IACH,cAAc,CAAS;IAEvB,YAAY,MAA2B,EAAE,KAAyB,EAAE,iBAAyB,CAAC;QAC1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACzC,CAAC;CACJ;AAED,sGAAsG;AACtG,6FAA6F;AAC7F,MAAM,OAAO;IACT,SAAS,CAAU;IACnB,KAAK,CAAkB;IAEvB,YAAY,SAAkB,EAAE,KAAsB;QAClD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AAgDM,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAIT;IACA;IACA;IALrB,kGAAkG;IAClG,uGAAuG;IACvG,YACqB,YAA6B,IAAI,2BAAe,EAAE,EAClD,SAAuB,wBAAY,EACnC,aAAyB,IAAI,wBAAU,EAAE;QAFzC,cAAS,GAAT,SAAS,CAAyC;QAClD,WAAM,GAAN,MAAM,CAA6B;QACnC,eAAU,GAAV,UAAU,CAA+B;IAC3D,CAAC;IAEJ;;;;;OAKG;IACH,kBAAkB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAClE,CAAC;IAED,6FAA6F;IAC7F,kBAAkB,CAAC,QAAgB;QAC/B,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAa,CAAC;YACvE,OAAO,IAAI,4CAAmB,CAC1B,GAAG,CAAC,SAAS,IAAI,EAAE,EACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EACzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CACtC,CAAC;QACN,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,KAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,uCAAc,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;QAC7C,OAAO,IAAI,uCAAc,CAAC,KAAK,GAAG,6CAAoB,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,QAAgB,EAAE,KAA0B;QAClD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAc,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE5E,MAAM,UAAU,GAAG,CAAC,KAAsB,EAAW,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClG,MAAM,QAAQ,GAAG,CAAC,KAAwB,EAAW,EAAE,CACnD,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEpD,OAAO,IAAI,4CAAmB,CAC1B,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,EAClC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAC7B,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CACnC,CAAC;IACN,CAAC;IAED;;;;;;;;;;;OAWG;IACH,mBAAmB,CAAC,QAAgB,EAAE,KAA0B;QAC5D,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,QAAgB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,2BAA2B,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,GAAG;aACZ,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED;;;OAGG;IACH,qBAAqB,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,EAAE,GAAG,cAAc;gBAAE,cAAc,GAAG,KAAK,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;QAEjF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAsB,EAAE,CAAC;QAEnC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAErD,4FAA4F;YAC5F,6FAA6F;YAC7F,4FAA4F;YAC5F,6FAA6F;YAC7F,wFAAwF;YACxF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,IAAI,wCAAe,CACzB,MAAM,EACN,4BAA4B,MAAM,qDAAqD,EACvF,OAAO,CAAC,KAAK,CAAC,EAAE,EAChB,OAAO,CAAC,KAAK,CAAC,GAAG,EACjB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,8CAAqB,CACxB,CAAC,CAAC;gBACH,SAAS;YACb,CAAC;YAED,IAAI,OAAO,CAAC,SAAS;gBAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;gBAChD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,IAAI,4CAAmB,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACzF,CAAC;IAED;;;;;;;;;;OAUG;IACK,iBAAiB,CACrB,QAAgB,EAChB,KAAiB,EACjB,GAAa;QAEb,MAAM,GAAG,GAAwB,EAAE,CAAC;QAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,MAAM;gBAAE,SAAS;YAE1B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,IAAI,0CAAiB,CAC1B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,wDAAwD,EAAE,CAAC,EAAE,IAAI,EACzF,gDAAuB,CAAC,CAAC,CAAC;gBAC9B,SAAS;YACb,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,GAAG,CAAC,IAAI,CAAC,IAAI,0CAAiB,CAC1B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,kCAAkC,EAAE,CAAC,EAAE,KAAK,EACpE,8CAAqB,CAAC,CAAC,CAAC;gBAC5B,SAAS;YACb,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC,IAAI,0CAAiB,CAC1B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,EAAE,KAAK,EAAE,+CAAsB,CAAC,CAAC,CAAC;gBACzF,SAAS;YACb,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACrB,GAAG,CAAC,IAAI,CAAC,IAAI,0CAAiB,CAC1B,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,4DAA4D,EAAE,CAAC,EAAE,KAAK,EACrF,gDAAuB,CAAC,CAAC,CAAC;gBAC9B,SAAS;YACb,CAAC;YAED,4FAA4F;YAC5F,6FAA6F;YAC7F,6DAA6D;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,IAAI,0CAAiB,CAC1B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,SAAS,EACjF,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACK,QAAQ,CAAC,QAAgB,EAAE,MAAc,EAAE,GAAa;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAEzC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,wCAAe,CACxC,MAAM,EAAE,OAAO,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,IAAI,QAAQ,EAC3E,iDAAwB,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,wCAAe,CACxC,MAAM,EACN,2BAA2B,IAAI,UAAU,MAAM,CAAC,MAAM,CAAC,4BAA4B,EACnF,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,wDAA+B,CACjE,CAAC,CAAC;YACP,CAAC;YACD,wFAAwF;YACxF,uFAAuF;YACvF,0FAA0F;YAC1F,6EAA6E;YAC7E,EAAE;YACF,0FAA0F;YAC1F,uFAAuF;YACvF,wFAAwF;YACxF,sFAAsF;YACtF,uFAAuF;YACvF,yFAAyF;YACzF,qFAAqF;YACrF,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,WAAW;oBACxB,CAAC,CAAC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE;oBAC1D,CAAC,CAAC,WAAW,CAAC;gBAClB,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,wCAAe,CACxC,MAAM,EACN,0BAA0B,IAAI,MAAM,QAAQ,QAAQ,IAAI,2BAA2B;oBACnF,sDAAsD,EACtD,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAC3D,sDAA6B,CAChC,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,6FAA6F;QAC7F,2FAA2F;QAC3F,4FAA4F;QAC5F,8FAA8F;QAC9F,8DAA8D;QAC9D,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,wCAAe,CACzC,MAAM,EACN,0FAA0F;kBACxF,yFAAyF;kBACzF,yBAAyB,EAC3B,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,kDAAyB,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACjG,CAAC;IAED;;;;;;OAMG;IACH,yDAAyD;IACjD,cAAc,CAClB,QAAgB,EAAE,MAAc,EAAE,GAAa,EAAE,GAAW,EAAE,OAAe,EAAE,OAAe;QAE9F,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpC,+FAA+F;QAC/F,wEAAwE;QACxE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACvF,OAAO,IAAI,wCAAe,CACtB,MAAM,EACN,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,8CAA8C;gBACzE,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,2CAA2C,EACzE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,kDAAyB,CACjE,CAAC;QACN,CAAC;QAED,0FAA0F;QAC1F,8FAA8F;QAC9F,IAAI,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,wCAAe,CACtB,MAAM,EACN,OAAO,MAAM,CAAC,OAAO,CAAC,uDAAuD;gBAC7E,sCAAsC,EACtC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,uDAA8B,CAClF,CAAC;QACN,CAAC;QAED,MAAM,GAAG,GAAG,KAAK;YACb,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,KAAK,uBAAuB;gBACpE,GAAG,MAAM,CAAC,OAAO,CAAC,yCAAyC;YAC7D,CAAC,CAAC,yBAAyB,MAAM,CAAC,OAAO,CAAC,0DAA0D,CAAC;QACzG,OAAO,IAAI,wCAAe,CACtB,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,sDAA6B,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,QAAgB,EAAE,MAAc;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;aAC/B,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,QAAgB,EAAE,MAAc;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,CAAC;IAED,6EAA6E;IACrE,MAAM,CAAC,QAAgB,EAAE,MAAc;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,QAAgB,EAAE,MAAc;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,MAAM,EAAE,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACxC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC;YACzC,QAAQ,EAAE,oBAAoB;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAE/C,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAkB,CAAC;YACpD,MAAM,GAAG,GAAmB,EAAE,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;gBACvC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC7B,IAAI,MAAM,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,qCAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,GAAG,CAAC;QACf,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CAAC,QAAgB;QAClC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAiB,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACxC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC;YACzC,QAAQ,EAAE,0BAA0B;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC;QAEhD,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAkB,CAAC;YACpD,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;gBACvC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC7B,uFAAuF;gBACvF,IAAI,MAAM,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtD,CAAC;YACL,CAAC;YACD,OAAO,GAAG,CAAC;QACf,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,GAAG,CAAC;QACf,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,GAA+B;QAC9C,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAmB,EAAmB,EAAE,CAAC,IAAI,wCAAe,CACxE,KAAK,CAAC,MAAM,IAAI,EAAE,EAClB,KAAK,CAAC,MAAM,IAAI,EAAE,EAClB,KAAK,CAAC,EAAE,IAAI,CAAC,EACb,KAAK,CAAC,GAAG,IAAI,EAAE,EACf,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,EACnB,KAAK,CAAC,OAAO,IAAI,EAAE,EACnB,KAAK,CAAC,cAAc,IAAI,sDAA6B,CACxD,CAAC,CAAC;IACP,CAAC;IAEO,eAAe,CAAC,GAA8B;QAClD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAkB,EAAqB,EAAE,CAAC,IAAI,0CAAiB,CAC3E,KAAK,CAAC,IAAI,IAAI,EAAE,EAChB,KAAK,CAAC,MAAM,IAAI,EAAE,EAClB,KAAK,CAAC,MAAM,IAAI,EAAE,EAClB,KAAK,CAAC,EAAE,IAAI,CAAC,EACb,KAAK,CAAC,SAAS,IAAI,KAAK,EACxB,KAAK,CAAC,cAAc,IAAI,sDAA6B,CACxD,CAAC,CAAC;IACP,CAAC;IAED,sFAAsF;IAC9E,OAAO,CAAC,QAAgB,EAAE,GAAW,EAAE,IAAc;QACzD,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;CACJ,CAAA;AAjeY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAKL,2BAAe;QAClB,wBAAY;QACR,wBAAU;GANlC,qBAAqB,CAiejC","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as fs from 'fs';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { AtomicFile } from './atomic-file';\nimport { DotWebpieces, dotWebpieces } from './state-dir';\nimport { toError } from './to-error';\nimport { Worktree, WorktreeService } from './worktrees';\nimport {\n    CacheFreshness,\n    CACHE_STALE_AFTER_MS,\n    CLASSIFICATION_BACKUP_OF_LIVE,\n    CLASSIFICATION_BACKUP_OF_MERGED,\n    CLASSIFICATION_CONTENT_IN_MAIN,\n    CLASSIFICATION_CURRENT,\n    CLASSIFICATION_DETACHED,\n    CLASSIFICATION_IN_USE,\n    CLASSIFICATION_LOCKED,\n    CLASSIFICATION_MERGED_PR,\n    CLASSIFICATION_NEVER_PROPOSED,\n    CLASSIFICATION_NO_COMMITS,\n    CLASSIFICATION_PRUNABLE,\n    CLASSIFICATION_SUPERSEDED,\n    DeletableBranch,\n    DeletableWorktree,\n    MergedBranch,\n    MergedBranchesCache,\n} from './merged-branch-verdicts';\n\nexport {\n    MergedBranch,\n    DeletableBranch,\n    DeletableWorktree,\n    MergedBranchesCache,\n    CacheFreshness,\n    CACHE_STALE_AFTER_MS,\n    CLASSIFICATION_MERGED_PR,\n    CLASSIFICATION_BACKUP_OF_MERGED,\n    CLASSIFICATION_BACKUP_OF_LIVE,\n    CLASSIFICATION_NO_COMMITS,\n    CLASSIFICATION_SUPERSEDED,\n    CLASSIFICATION_CONTENT_IN_MAIN,\n    CLASSIFICATION_NEVER_PROPOSED,\n    CLASSIFICATION_IN_USE,\n    CLASSIFICATION_PRUNABLE,\n    CLASSIFICATION_LOCKED,\n    CLASSIFICATION_CURRENT,\n    CLASSIFICATION_DETACHED,\n    PROMPTABLE_CLASSIFICATIONS,\n} from './merged-branch-verdicts';\n\n\n/**\n * The \"which local branches are dead?\" cache.\n *\n * WHY a cache, and why a STALE one is correct: cleanup is eventual, never urgent. A branch that\n * merged 30 seconds ago simply survives until the next refresh — nobody cares. So the (slow, network)\n * merged-PR lookup runs in the DETACHED background refresher, and the branch-creation-guard only READS\n * this file on its blocking path. Staleness is the whole point: it is what keeps the guard fast.\n *\n * WHY the GitHub PR API and not git: the repo squash-merges, which destroys BOTH commit ancestry and\n * patch-id. `git branch --merged` and `git cherry` therefore report merged branches as unmerged\n * (observed: deanhiller/config-overhaul, PR #188, merged — yet its patch is absent from main). A MERGED\n * PR is the only trustworthy signal, and ONE bulk `gh pr list --state merged` answers for every branch.\n */\n\nconst MERGED_BRANCHES_FILE = 'merged-branches.json';\n\n// How many merged PRs to pull in the single bulk lookup. Branches older than this window are\n// vanishingly unlikely to still be checked out locally; if one is, it lands in `keep` and a human\n// decides — the fail-safe direction.\nconst MERGED_PR_LOOKUP_LIMIT = 100;\n\n// Suffixes the squash-merge tooling appends to a feature branch when it snapshots it mid-sync\n// (base → baseSquash / basewp2 / basePreMerge3). GitHub has never seen these SHAs, so no PR will ever\n// name them — they can only be reaped by stripping back to the base branch they were cloned from.\nconst BACKUP_SUFFIX = /(?:Squash|PreMerge\\d*|wp\\d+)$/;\n\n/**\n * Internal: the bulk PR lookup, indexed.\n *\n * `merged` drives the DELETE verdicts and comes from the `--state merged` call, unchanged — the\n * reaping logic must not get looser or tighter here. `state` is display-only, from a second\n * `--state all` call, and answers the question a human needs in order to say \"yes, delete it\":\n * was there a PR at all, and did it close without merging? It fails soft to an empty map.\n */\nclass PrRef {\n    number: number;\n    state: string;\n\n    constructor(prNumber: number, state: string) {\n        this.number = prNumber;\n        this.state = state;\n    }\n}\n\nclass PrLookup {\n    merged: Map<string, number>;\n    state: Map<string, PrRef>;\n    /**\n     * Highest merged PR number seen. A branch whose own PR CLOSED UNMERGED below this number means work\n     * kept landing after it was abandoned — the \"superseded by a later PR\" signal, obtained without\n     * having to guess WHICH PR superseded it.\n     */\n    latestMergedPr: number;\n\n    constructor(merged: Map<string, number>, state: Map<string, PrRef>, latestMergedPr: number = 0) {\n        this.merged = merged;\n        this.state = state;\n        this.latestMergedPr = latestMergedPr;\n    }\n}\n\n// Internal: a classification result. `deletable` is the decision; `entry` carries the branch + reason\n// either way (a spared branch still needs its reason recorded, and it has no PR to key off).\nclass Verdict {\n    deletable: boolean;\n    entry: DeletableBranch;\n\n    constructor(deletable: boolean, entry: DeletableBranch) {\n        this.deletable = deletable;\n        this.entry = entry;\n    }\n}\n\n// Raw JSON shapes for the cast at the parse boundary.\ninterface RawDeletable {\n    branch?: string;\n    reason?: string;\n    pr?: number;\n    // Absent in caches written before the \"ask the human which of these to delete\" remedy existed.\n    sha?: string;\n    commits?: number;\n    prState?: string;\n    // Absent before classification existed — revives to the conservative 'never-proposed'.\n    classification?: string;\n}\n\ninterface RawWorktree {\n    path?: string;\n    branch?: string;\n    reason?: string;\n    pr?: number;\n    deletable?: boolean;\n    // Absent before worktree verdicts carried a classification — revives to 'never-proposed'.\n    classification?: string;\n}\n\ninterface RawCache {\n    timestamp?: string;\n    deletable?: RawDeletable[];\n    keep?: RawDeletable[];\n    // Absent in caches written by releases before the worktree cap existed — revives to [], which\n    // makes the worktree cap fail OPEN on a stale file rather than hard-failing the guard.\n    worktrees?: RawWorktree[];\n}\n\ninterface RawMergedPr {\n    number?: number;\n    headRefName?: string;\n    // Only requested by the display-only fetchPrStates call.\n    state?: string;\n}\n\n// Result of a captured git/gh invocation: ok=false on spawn failure or non-zero exit.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n}\n\n@injectable(bindingScopeValues.Singleton)\nexport class MergedBranchesService {\n    // Defaulted so the non-DI call sites (`new MergedBranchesService()` in the guard and the detached\n    // refresher) keep working, while inversify still injects the singleton when resolved from a container.\n    constructor(\n        private readonly worktrees: WorktreeService = new WorktreeService(),\n        private readonly dotDir: DotWebpieces = dotWebpieces,\n        private readonly atomicFile: AtomicFile = new AtomicFile(),\n    ) {}\n\n    /**\n     * SHARED scope — one per repo, in the primary clone, NOT one per worktree. This file's contents\n     * describe every branch AND every worktree in the repo, so a per-worktree copy was a repo-wide fact\n     * stored N times and therefore N times wrong: branch-creation-guard reported \"8 parked local\n     * branches\" against an actual 1, reading a copy that predated deletions made from another worktree.\n     */\n    mergedBranchesPath(repoRoot: string): string {\n        return this.dotDir.sharedFile(repoRoot, MERGED_BRANCHES_FILE);\n    }\n\n    // Pure read — any error (missing file, malformed JSON) returns null so the guard fails OPEN.\n    readMergedBranches(repoRoot: string): MergedBranchesCache | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const cachePath = this.mergedBranchesPath(repoRoot);\n            if (!fs.existsSync(cachePath)) return null;\n            const raw = JSON.parse(fs.readFileSync(cachePath, 'utf8')) as RawCache;\n            return new MergedBranchesCache(\n                raw.timestamp ?? '',\n                this.reviveList(raw.deletable),\n                this.reviveList(raw.keep),\n                this.reviveWorktrees(raw.worktrees),\n            );\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    /**\n     * How old is this cache, and may its numbers be quoted as fact?\n     *\n     * `now` is a parameter purely so the specs can pin it; every caller passes nothing.\n     */\n    freshness(cache: MergedBranchesCache, now: number = Date.now()): CacheFreshness {\n        const written = Date.parse(cache.timestamp);\n        if (Number.isNaN(written)) return new CacheFreshness(true, -1, cache.timestamp);\n        const ageMs = Math.max(0, now - written);\n        const ageMinutes = Math.floor(ageMs / 60000);\n        return new CacheFreshness(ageMs > CACHE_STALE_AFTER_MS, ageMinutes, cache.timestamp);\n    }\n\n    /**\n     * Drop every cached verdict whose subject no longer exists, using only LOCAL, instant git reads.\n     *\n     * The verdicts themselves are NOT re-derived here — that is the detached refresher's job and it\n     * needs the network. This answers a different and much cheaper question: does this branch / this\n     * worktree still exist at all? A cache written before a `git branch -D` or a `git worktree remove`\n     * keeps naming things that are gone, and a reader that counts those entries reports a repo that\n     * does not exist (observed: 8 parked branches asserted against an actual 1) and then blocks on it.\n     *\n     * Fails toward the cache: if git cannot answer (empty branch list), the cache is returned untouched\n     * rather than emptied, since \"git failed\" must never read as \"everything was deleted\".\n     */\n    reconcile(repoRoot: string, cache: MergedBranchesCache): MergedBranchesCache {\n        const live = new Set(this.localBranches(repoRoot));\n        const trees = this.worktrees.listWorktrees(repoRoot);\n        const livePaths = new Set(trees.map((tree: Worktree): string => tree.path));\n\n        const keepBranch = (entry: DeletableBranch): boolean => live.size === 0 || live.has(entry.branch);\n        const keepTree = (entry: DeletableWorktree): boolean =>\n            trees.length === 0 || livePaths.has(entry.path);\n\n        return new MergedBranchesCache(\n            cache.timestamp,\n            cache.deletable.filter(keepBranch),\n            cache.keep.filter(keepBranch),\n            cache.worktrees.filter(keepTree),\n        );\n    }\n\n    /**\n     * ATOMIC write. Now that this file is shared by every worktree it has N concurrent writers (one\n     * detached refresher per agent), and its readers are the guards' BLOCKING path. A plain\n     * `writeFileSync` truncates before it writes, so a reader landing in that window gets a torn\n     * document — the reader-side retry added in PR #526 cannot rescue a syntactically valid PREFIX.\n     * Fixed where it belongs: temp file + `rename()`, which POSIX makes atomic. See AtomicFile.\n     *\n     * This buys ATOMIC READS, not lost-update protection: two read-modify-write cycles still end\n     * last-writer-wins. That is acceptable and deliberate — this is a DERIVED cache, recomputed from\n     * `gh` + git by the refresher, and wp-cleanup recomputes rather than trusting it before deleting\n     * anything. Nothing here is transactional and no caller may assume it is.\n     */\n    writeMergedBranches(repoRoot: string, cache: MergedBranchesCache): void {\n        this.atomicFile.writeJsonAtomic(this.mergedBranchesPath(repoRoot), cache);\n    }\n\n    /**\n     * Every local branch except `main`. Uses `git for-each-ref`, NOT `git branch` — the latter is a\n     * porcelain command whose output the branch-creation-guard's own regex mistakes for a branch\n     * CREATION, so the guard would block the cleanup it just demanded.\n     */\n    localBranches(repoRoot: string): string[] {\n        const result = this.capture(repoRoot, 'git', ['for-each-ref', '--format=%(refname:short)', 'refs/heads/']);\n        if (!result.ok || result.out === '') return [];\n        return result.out\n            .split('\\n')\n            .map((line: string): string => line.trim())\n            .filter((line: string): boolean => line.length > 0 && line !== 'main');\n    }\n\n    /**\n     * The SLOW path, run only inside the detached refresher. ONE bulk `gh` call, then a purely local\n     * classification. Never run on the hook's blocking path.\n     */\n    computeMergedBranches(repoRoot: string): MergedBranchesCache {\n        const merged = this.fetchMergedPrs(repoRoot);\n        const byBranch = new Map<string, number>();\n        for (const entry of merged) byBranch.set(entry.branch, entry.pr);\n        let latestMergedPr = 0;\n        for (const entry of merged) {\n            if (entry.pr > latestMergedPr) latestMergedPr = entry.pr;\n        }\n        const prs = new PrLookup(byBranch, this.fetchPrStates(repoRoot), latestMergedPr);\n\n        const trees = this.worktrees.listWorktrees(repoRoot);\n        const holder = new Map<string, string>();\n        for (const tree of trees) {\n            if (tree.branch !== '') holder.set(tree.branch, tree.path);\n        }\n\n        const deletable: DeletableBranch[] = [];\n        const keep: DeletableBranch[] = [];\n\n        for (const branch of this.localBranches(repoRoot)) {\n            const verdict = this.classify(repoRoot, branch, prs);\n\n            // A branch checked out in ANY worktree (including the branch we are standing on right here)\n            // cannot be deleted — git refuses, and since the reap is ONE `git branch -D a b c`, a single\n            // such branch would fail the entire command and strand the branches that would have deleted\n            // fine. Spare it LOUDLY (into `keep`, with the reason) rather than dropping it silently: the\n            // worktree list below is what actually reaps it, and a human should see the connection.\n            const heldAt = holder.get(branch);\n            if (heldAt !== undefined) {\n                keep.push(new DeletableBranch(\n                    branch,\n                    `checked out in worktree '${heldAt}' — remove that worktree before deleting the branch`,\n                    verdict.entry.pr,\n                    verdict.entry.sha,\n                    verdict.entry.commits,\n                    verdict.entry.prState,\n                    CLASSIFICATION_IN_USE,\n                ));\n                continue;\n            }\n\n            if (verdict.deletable) deletable.push(verdict.entry);\n            else keep.push(verdict.entry);\n        }\n\n        const worktrees = this.classifyWorktrees(repoRoot, trees, prs);\n        return new MergedBranchesCache(new Date().toISOString(), deletable, keep, worktrees);\n    }\n\n    /**\n     * Verdicts for the worktree budget. The main worktree is excluded outright — it is the primary\n     * clone and is not a thing you can remove.\n     *\n     * A worktree is deletable when its directory is already gone (`prunable`), or when its branch is\n     * dead by the very same proof the branch cap uses — a MERGED PR, its own or that of the branch it\n     * snapshots. Nothing else. It is spared when it is LOCKED (a human said \"do not touch\"), when it is\n     * the worktree we are standing in right now (removing your own cwd is not a thing to suggest to an\n     * agent), or when its branch is anything short of provably merged — INCLUDING a branch with no\n     * commits yet, which is what every worktree looks like while an agent is working in it.\n     */\n    private classifyWorktrees(\n        repoRoot: string,\n        trees: Worktree[],\n        prs: PrLookup,\n    ): DeletableWorktree[] {\n        const out: DeletableWorktree[] = [];\n\n        for (const tree of trees) {\n            if (tree.isMain) continue;\n\n            if (tree.prunable) {\n                out.push(new DeletableWorktree(\n                    tree.path, tree.branch, 'its directory is gone — `git worktree prune` clears it', 0, true,\n                    CLASSIFICATION_PRUNABLE));\n                continue;\n            }\n            if (tree.locked) {\n                out.push(new DeletableWorktree(\n                    tree.path, tree.branch, 'locked by a human — do not touch', 0, false,\n                    CLASSIFICATION_LOCKED));\n                continue;\n            }\n            if (tree.path === repoRoot) {\n                out.push(new DeletableWorktree(\n                    tree.path, tree.branch, 'you are standing in it', 0, false, CLASSIFICATION_CURRENT));\n                continue;\n            }\n            if (tree.branch === '') {\n                out.push(new DeletableWorktree(\n                    tree.path, '', 'detached HEAD — no branch to check, so a human must decide', 0, false,\n                    CLASSIFICATION_DETACHED));\n                continue;\n            }\n\n            // The branch's OWN classification token rides along unchanged. That is what lets wp-cleanup\n            // group probably-dead worktrees exactly the way it groups probably-dead branches, instead of\n            // inventing a second, parallel notion of \"how dead is this\".\n            const verdict = this.classify(repoRoot, tree.branch, prs);\n            out.push(new DeletableWorktree(\n                tree.path, tree.branch, verdict.entry.reason, verdict.entry.pr, verdict.deletable,\n                verdict.entry.classification));\n        }\n\n        return out;\n    }\n\n    /**\n     * Verdict for one branch: its own merged PR, else the base it was backed up from, else empty.\n     *\n     * The verdict itself is unchanged. What is new is that EVERY entry now carries its tip SHA, its\n     * unique-commit count and its PR state, so a `keep` can be shown to a human as a delete candidate\n     * rather than just counted. This runs only in the detached refresher, so the two extra local git\n     * calls per branch cost the blocking hook path nothing.\n     */\n    private classify(repoRoot: string, branch: string, prs: PrLookup): Verdict {\n        const sha = this.tipSha(repoRoot, branch);\n        const commits = this.commitsAheadOfMain(repoRoot, branch);\n        const known = prs.state.get(branch);\n        const prState = known ? known.state : '';\n\n        const own = prs.merged.get(branch);\n        if (own !== undefined) {\n            return new Verdict(true, new DeletableBranch(\n                branch, `PR #${String(own)} merged`, own, sha, commits, prState || 'MERGED',\n                CLASSIFICATION_MERGED_PR));\n        }\n\n        const base = branch.replace(BACKUP_SUFFIX, '');\n        if (base !== branch && base.length > 0) {\n            const basePr = prs.merged.get(base);\n            if (basePr !== undefined) {\n                return new Verdict(true, new DeletableBranch(\n                    branch,\n                    `squash-merge backup of '${base}' (PR #${String(basePr)} merged) — its job is done`,\n                    basePr, sha, commits, prState, CLASSIFICATION_BACKUP_OF_MERGED,\n                ));\n            }\n            // The base has not MERGED — but a snapshot is a copy of its base by construction, so as\n            // long as the base still exists this branch is provably not the only copy of anything.\n            // Falling through to classifySpared told the human the opposite (\"may be the only copy in\n            // existence\"), which is unanswerable-by-design and is why these accumulated.\n            //\n            // DELETABLE, not merely promptable. Asking about it was still asking a question with only\n            // one honest answer — the base branch is right there holding the same work — and every\n            // ask lands on a human who is being asked to authorise a delete the tooling can already\n            // PROVE is lossless. That is the pile: `wp-start-upsert-pr` mints another snapshot on\n            // every run, so the branch cap fills with copies nobody can be bothered to adjudicate.\n            // The proof here is as strong as a merged PR (a live sibling ref holds the content), and\n            // the reap archives to an `archive/<date>/<branch>` tag and logs a `recover=` first.\n            if (this.branchExists(repoRoot, base)) {\n                const basePrState = prs.state.get(base);\n                const liveness = basePrState\n                    ? `PR #${String(basePrState.number)} ${basePrState.state}`\n                    : 'no PR yet';\n                return new Verdict(true, new DeletableBranch(\n                    branch,\n                    `pre-merge snapshot of '${base}' (${liveness}) — '${base}' still exists and holds ` +\n                    `this work, so this is a spare copy, not the only one`,\n                    basePrState ? basePrState.number : 0, sha, commits, prState,\n                    CLASSIFICATION_BACKUP_OF_LIVE,\n                ));\n            }\n        }\n\n        // Zero commits of its own. This is SPARED, not deletable — see CLASSIFICATION_NO_COMMITS for\n        // why. It is a real signal (the branch is identical to origin/main), but it is equally the\n        // signature of a worktree an agent created thirty seconds ago and has not committed in yet,\n        // and there is no git-local way to tell those two apart. So it becomes a question for a human\n        // (wp-cleanup prompts on it) instead of an unattended delete.\n        if (commits === 0) {\n            return new Verdict(false, new DeletableBranch(\n                branch,\n                'no commits of its own — identical to origin/main. That is either an abandoned husk OR a '\n                + 'worktree/branch someone is working in right now and has not committed to yet, so it is '\n                + 'never reaped unattended',\n                0, sha, 0, prState, CLASSIFICATION_NO_COMMITS));\n        }\n\n        return new Verdict(false, this.classifySpared(repoRoot, branch, prs, sha, commits, prState));\n    }\n\n    /**\n     * The three genuinely different reasons a branch survives the deletable proofs, ordered by how\n     * confidently a human can say yes to deleting it.\n     *\n     * The safety posture is UNCHANGED: all three are still SPARED, never auto-deleted. The only thing\n     * that changed is that wp-cleanup can now ask a question whose answer is knowable.\n     */\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private classifySpared(\n        repoRoot: string, branch: string, prs: PrLookup, sha: string, commits: number, prState: string,\n    ): DeletableBranch {\n        const known = prs.state.get(branch);\n\n        // A PR that CLOSED without merging, in a repo that has merged later PRs, is near-certainly the\n        // abandoned first attempt at work that landed under a different number.\n        if (known !== undefined && known.state === 'CLOSED' && prs.latestMergedPr > known.number) {\n            return new DeletableBranch(\n                branch,\n                `PR #${String(known.number)} was CLOSED UNMERGED and later PRs (through ` +\n                `#${String(prs.latestMergedPr)}) have merged — near-certainly superseded`,\n                known.number, sha, commits, prState, CLASSIFICATION_SUPERSEDED,\n            );\n        }\n\n        // `git cherry` compares by PATCH-ID, so it survives cherry-picks and rebases. It does NOT\n        // survive a squash — which is exactly why this is a spared verdict and not a deletable proof.\n        if (this.contentAlreadyInMain(repoRoot, branch)) {\n            return new DeletableBranch(\n                branch,\n                `all ${String(commits)} commit(s) already have an equivalent in origin/main ` +\n                `(git cherry) — content is not unique`,\n                known ? known.number : 0, sha, commits, prState, CLASSIFICATION_CONTENT_IN_MAIN,\n            );\n        }\n\n        const why = known\n            ? `PR #${String(known.number)} is ${known.state} (not merged); holds ` +\n              `${String(commits)} unique commit(s) — a human must decide`\n            : `never had a PR; holds ${String(commits)} unique commit(s) that may be the only copy in existence`;\n        return new DeletableBranch(\n            branch, why, 0, sha, commits, prState, CLASSIFICATION_NEVER_PROPOSED);\n    }\n\n    /**\n     * True when EVERY commit on the branch has a patch-equivalent already in origin/main.\n     *\n     * `git cherry origin/main <branch>` prints one line per commit: `+ <sha>` = not upstream,\n     * `- <sha>` = an equivalent change IS upstream. All-minus means the content landed (typically by\n     * cherry-pick or rebase-merge) even though the SHAs differ. Any failure returns false — \"cannot\n     * prove the content is in main\" must never read as \"safe\".\n     */\n    private contentAlreadyInMain(repoRoot: string, branch: string): boolean {\n        const result = this.capture(repoRoot, 'git', ['cherry', 'origin/main', branch]);\n        if (!result.ok || result.out === '') return false;\n        const lines = result.out.split('\\n')\n            .map((line: string): string => line.trim())\n            .filter((line: string): boolean => line !== '');\n        if (lines.length === 0) return false;\n        return lines.every((line: string): boolean => line.startsWith('-'));\n    }\n\n    /**\n     * Does this local branch exist? Used to prove a snapshot is not the last copy of its work — the\n     * base branch being present is that proof. Verifies it is a BRANCH (`refs/heads/`), not just any\n     * resolvable rev, so a tag or a stray SHA sharing the name cannot stand in for the base.\n     */\n    private branchExists(repoRoot: string, branch: string): boolean {\n        return this.capture(repoRoot, 'git', ['show-ref', '--verify', '--quiet', `refs/heads/${branch}`]).ok;\n    }\n\n    // Short tip SHA — the value that makes any delete of this branch reversible.\n    private tipSha(repoRoot: string, branch: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', '--short', branch]);\n        return result.ok ? result.out : '';\n    }\n\n    /**\n     * Commits on `branch` that are not on origin/main. Returns -1 (\"assume it has work\") whenever the\n     * count cannot be established — an unresolvable origin/main must never read as \"empty branch\".\n     */\n    private commitsAheadOfMain(repoRoot: string, branch: string): number {\n        const result = this.capture(repoRoot, 'git', ['rev-list', '--count', `origin/main..${branch}`]);\n        if (!result.ok) return -1;\n        const count = Number(result.out);\n        return Number.isInteger(count) ? count : -1;\n    }\n\n    /**\n     * The ONE bulk network call. Every merged PR's head branch in a single round trip — no per-branch\n     * lookups. Fails SOFT: if `gh` is missing, unauthenticated, or offline we return [], which makes\n     * every branch a `keep`. The guard then deletes nothing rather than guessing.\n     */\n    private fetchMergedPrs(repoRoot: string): MergedBranch[] {\n        const result = this.capture(repoRoot, 'gh', [\n            'pr', 'list',\n            '--state', 'merged',\n            '--limit', String(MERGED_PR_LOOKUP_LIMIT),\n            '--json', 'number,headRefName',\n        ]);\n        if (!result.ok || result.out === '') return [];\n\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const raw = JSON.parse(result.out) as RawMergedPr[];\n            const out: MergedBranch[] = [];\n            for (const entry of raw) {\n                const branch = entry.headRefName ?? '';\n                const pr = entry.number ?? 0;\n                if (branch !== '' && pr > 0) out.push(new MergedBranch(branch, pr));\n            }\n            return out;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return [];\n        }\n    }\n\n    /**\n     * The DISPLAY-only second lookup: every PR (any state) keyed by head branch, so a spared branch can\n     * be shown to a human as \"PR #12 CLOSED (not merged)\" or \"no PR\" instead of an opaque name. Kept\n     * SEPARATE from fetchMergedPrs on purpose — folding both into one `--state all` call would let a\n     * flood of open/closed PRs push older MERGED ones out of the limit and silently stop reaping real\n     * dead branches. Fails soft to an empty map: the verdicts do not depend on it.\n     */\n    private fetchPrStates(repoRoot: string): Map<string, PrRef> {\n        const out = new Map<string, PrRef>();\n        const result = this.capture(repoRoot, 'gh', [\n            'pr', 'list',\n            '--state', 'all',\n            '--limit', String(MERGED_PR_LOOKUP_LIMIT),\n            '--json', 'number,headRefName,state',\n        ]);\n        if (!result.ok || result.out === '') return out;\n\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const raw = JSON.parse(result.out) as RawMergedPr[];\n            for (const entry of raw) {\n                const branch = entry.headRefName ?? '';\n                const pr = entry.number ?? 0;\n                // `gh` lists newest-first, so the FIRST entry for a branch is its latest PR — keep it.\n                if (branch !== '' && pr > 0 && !out.has(branch)) {\n                    out.set(branch, new PrRef(pr, entry.state ?? ''));\n                }\n            }\n            return out;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return out;\n        }\n    }\n\n    private reviveList(raw: RawDeletable[] | undefined): DeletableBranch[] {\n        if (!raw) return [];\n        return raw.map((entry: RawDeletable): DeletableBranch => new DeletableBranch(\n            entry.branch ?? '',\n            entry.reason ?? '',\n            entry.pr ?? 0,\n            entry.sha ?? '',\n            entry.commits ?? -1,\n            entry.prState ?? '',\n            entry.classification ?? CLASSIFICATION_NEVER_PROPOSED,\n        ));\n    }\n\n    private reviveWorktrees(raw: RawWorktree[] | undefined): DeletableWorktree[] {\n        if (!raw) return [];\n        return raw.map((entry: RawWorktree): DeletableWorktree => new DeletableWorktree(\n            entry.path ?? '',\n            entry.branch ?? '',\n            entry.reason ?? '',\n            entry.pr ?? 0,\n            entry.deletable ?? false,\n            entry.classification ?? CLASSIFICATION_NEVER_PROPOSED,\n        ));\n    }\n\n    // Run a command capturing trimmed stdout; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, cmd: string, args: string[]): CmdCapture {\n        const result = spawnSync(cmd, args, { cwd: repoRoot, encoding: 'utf8' });\n        if (result.status !== 0 || typeof result.stdout !== 'string') return { ok: false, out: '' };\n        return { ok: true, out: result.stdout.trim() };\n    }\n}\n"]}
+{"version":3,"file":"merged-branches.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/merged-branches.ts"],"names":[],"mappings":";;;;AAAA,iDAA0C;AAC1C,+CAAyB;AACzB,yCAA2D;AAE3D,+CAA2C;AAC3C,2CAAyD;AACzD,yCAAqC;AACrC,2CAAwD;AACxD,qEAAgE;AAChE,qEAmBkC;AAElC,mEAoBkC;AAnB9B,sHAAA,YAAY,OAAA;AACZ,yHAAA,eAAe,OAAA;AACf,2HAAA,iBAAiB,OAAA;AACjB,6HAAA,mBAAmB,OAAA;AACnB,wHAAA,cAAc,OAAA;AACd,8HAAA,oBAAoB,OAAA;AACpB,kIAAA,wBAAwB,OAAA;AACxB,yIAAA,+BAA+B,OAAA;AAC/B,uIAAA,6BAA6B,OAAA;AAC7B,mIAAA,yBAAyB,OAAA;AACzB,mIAAA,yBAAyB,OAAA;AACzB,wIAAA,8BAA8B,OAAA;AAC9B,uIAAA,6BAA6B,OAAA;AAC7B,+HAAA,qBAAqB,OAAA;AACrB,iIAAA,uBAAuB,OAAA;AACvB,+HAAA,qBAAqB,OAAA;AACrB,gIAAA,sBAAsB,OAAA;AACtB,iIAAA,uBAAuB,OAAA;AACvB,oIAAA,0BAA0B,OAAA;AAI9B;;;;;;;;;;;;GAYG;AAEH,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAEpD,6FAA6F;AAC7F,kGAAkG;AAClG,qCAAqC;AACrC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,8FAA8F;AAC9F,sGAAsG;AACtG,kGAAkG;AAClG,MAAM,aAAa,GAAG,+BAA+B,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,KAAK;IACP,MAAM,CAAS;IACf,KAAK,CAAS;IAEd,YAAY,QAAgB,EAAE,KAAa;QACvC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AAED,MAAM,QAAQ;IACV,MAAM,CAAsB;IAC5B,KAAK,CAAqB;IAC1B;;;;OAIG;IACH,cAAc,CAAS;IAEvB,YAAY,MAA2B,EAAE,KAAyB,EAAE,iBAAyB,CAAC;QAC1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACzC,CAAC;CACJ;AAED,sGAAsG;AACtG,6FAA6F;AAC7F,MAAM,OAAO;IACT,SAAS,CAAU;IACnB,KAAK,CAAkB;IAEvB,YAAY,SAAkB,EAAE,KAAsB;QAClD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AAoDM,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAIT;IACA;IACA;IACA;IANrB,kGAAkG;IAClG,uGAAuG;IACvG,YACqB,YAA6B,IAAI,2BAAe,EAAE,EAClD,SAAuB,wBAAY,EACnC,aAAyB,IAAI,wBAAU,EAAE,EACzC,QAA8B,IAAI,6CAAoB,EAAE;QAHxD,cAAS,GAAT,SAAS,CAAyC;QAClD,WAAM,GAAN,MAAM,CAA6B;QACnC,eAAU,GAAV,UAAU,CAA+B;QACzC,UAAK,GAAL,KAAK,CAAmD;IAC1E,CAAC;IAEJ;;;;;OAKG;IACH,kBAAkB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAClE,CAAC;IAED,6FAA6F;IAC7F,kBAAkB,CAAC,QAAgB;QAC/B,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAa,CAAC;YACvE,OAAO,IAAI,4CAAmB,CAC1B,GAAG,CAAC,SAAS,IAAI,EAAE,EACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EACzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CACtC,CAAC;QACN,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,KAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,uCAAc,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;QAC7C,OAAO,IAAI,uCAAc,CAAC,KAAK,GAAG,6CAAoB,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,QAAgB,EAAE,KAA0B;QAClD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAc,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE5E,MAAM,UAAU,GAAG,CAAC,KAAsB,EAAW,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClG,MAAM,QAAQ,GAAG,CAAC,KAAwB,EAAW,EAAE,CACnD,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEpD,OAAO,IAAI,4CAAmB,CAC1B,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,EAClC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAC7B,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CACnC,CAAC;IACN,CAAC;IAED;;;;;;;;;;;OAWG;IACH,mBAAmB,CAAC,QAAgB,EAAE,KAA0B;QAC5D,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,QAAgB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,2BAA2B,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,GAAG;aACZ,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED;;;OAGG;IACH,qBAAqB,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,EAAE,GAAG,cAAc;gBAAE,cAAc,GAAG,KAAK,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;QAEjF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAsB,EAAE,CAAC;QAEnC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAErD,4FAA4F;YAC5F,6FAA6F;YAC7F,4FAA4F;YAC5F,6FAA6F;YAC7F,wFAAwF;YACxF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,IAAI,wCAAe,CACzB,MAAM,EACN,4BAA4B,MAAM,qDAAqD,EACvF,OAAO,CAAC,KAAK,CAAC,EAAE,EAChB,OAAO,CAAC,KAAK,CAAC,GAAG,EACjB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,8CAAqB,CACxB,CAAC,CAAC;gBACH,SAAS;YACb,CAAC;YAED,IAAI,OAAO,CAAC,SAAS;gBAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;gBAChD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,IAAI,4CAAmB,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;OAWG;IACK,iBAAiB,CACrB,QAAgB,EAChB,KAAiB,EACjB,GAAa;QAEb,MAAM,GAAG,GAAwB,EAAE,CAAC;QAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,MAAM;gBAAE,SAAS;YAE1B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,IAAI,0CAAiB,CAC1B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,wDAAwD,EAAE,CAAC,EAAE,IAAI,EACzF,gDAAuB,CAAC,CAAC,CAAC;gBAC9B,SAAS;YACb,CAAC;YACD,wFAAwF;YACxF,4FAA4F;YAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,IAAI,CAAC,IAAI,0CAAiB,CAC1B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,8CAAqB,CAAC,CAAC,CAAC;gBAC7F,SAAS;YACb,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,0CAAiB,CAC9C,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,EAAE,KAAK,EAAE,+CAAsB,CAAC,EACvF,SAAS,CAAC,CAAC,CAAC;gBACZ,SAAS;YACb,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACrB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,0CAAiB,CAC9C,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,4DAA4D,EAAE,CAAC,EAAE,KAAK,EACrF,gDAAuB,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC1C,SAAS;YACb,CAAC;YAED,4FAA4F;YAC5F,6FAA6F;YAC7F,6DAA6D;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,0CAAiB,CAC9C,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,SAAS,EACjF,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACK,QAAQ,CAAC,QAAgB,EAAE,MAAc,EAAE,GAAa;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAEzC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,wCAAe,CACxC,MAAM,EAAE,OAAO,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,IAAI,QAAQ,EAC3E,iDAAwB,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,wCAAe,CACxC,MAAM,EACN,2BAA2B,IAAI,UAAU,MAAM,CAAC,MAAM,CAAC,4BAA4B,EACnF,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,wDAA+B,CACjE,CAAC,CAAC;YACP,CAAC;YACD,wFAAwF;YACxF,uFAAuF;YACvF,0FAA0F;YAC1F,6EAA6E;YAC7E,EAAE;YACF,0FAA0F;YAC1F,uFAAuF;YACvF,wFAAwF;YACxF,sFAAsF;YACtF,uFAAuF;YACvF,yFAAyF;YACzF,qFAAqF;YACrF,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,WAAW;oBACxB,CAAC,CAAC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,KAAK,EAAE;oBAC1D,CAAC,CAAC,WAAW,CAAC;gBAClB,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,wCAAe,CACxC,MAAM,EACN,0BAA0B,IAAI,MAAM,QAAQ,QAAQ,IAAI,2BAA2B;oBACnF,sDAAsD,EACtD,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAC3D,sDAA6B,CAChC,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,6FAA6F;QAC7F,2FAA2F;QAC3F,4FAA4F;QAC5F,8FAA8F;QAC9F,8DAA8D;QAC9D,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,wCAAe,CACzC,MAAM,EACN,0FAA0F;kBACxF,yFAAyF;kBACzF,yBAAyB,EAC3B,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,kDAAyB,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACjG,CAAC;IAED;;;;;;OAMG;IACH,yDAAyD;IACjD,cAAc,CAClB,QAAgB,EAAE,MAAc,EAAE,GAAa,EAAE,GAAW,EAAE,OAAe,EAAE,OAAe;QAE9F,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpC,+FAA+F;QAC/F,wEAAwE;QACxE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACvF,OAAO,IAAI,wCAAe,CACtB,MAAM,EACN,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,8CAA8C;gBACzE,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,2CAA2C,EACzE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,kDAAyB,CACjE,CAAC;QACN,CAAC;QAED,0FAA0F;QAC1F,8FAA8F;QAC9F,IAAI,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,wCAAe,CACtB,MAAM,EACN,OAAO,MAAM,CAAC,OAAO,CAAC,uDAAuD;gBAC7E,sCAAsC,EACtC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,uDAA8B,CAClF,CAAC;QACN,CAAC;QAED,MAAM,GAAG,GAAG,KAAK;YACb,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,KAAK,uBAAuB;gBACpE,GAAG,MAAM,CAAC,OAAO,CAAC,yCAAyC;YAC7D,CAAC,CAAC,yBAAyB,MAAM,CAAC,OAAO,CAAC,0DAA0D,CAAC;QACzG,OAAO,IAAI,wCAAe,CACtB,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,sDAA6B,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,QAAgB,EAAE,MAAc;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;aAC/B,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,QAAgB,EAAE,MAAc;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,CAAC;IAED,6EAA6E;IACrE,MAAM,CAAC,QAAgB,EAAE,MAAc;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,QAAgB,EAAE,MAAc;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,MAAM,EAAE,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACxC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC;YACzC,QAAQ,EAAE,oBAAoB;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAE/C,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAkB,CAAC;YACpD,MAAM,GAAG,GAAmB,EAAE,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;gBACvC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC7B,IAAI,MAAM,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,qCAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,GAAG,CAAC;QACf,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CAAC,QAAgB;QAClC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAiB,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YACxC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC;YACzC,QAAQ,EAAE,0BAA0B;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC;QAEhD,8DAA8D;QAC9D,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAkB,CAAC;YACpD,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;gBACvC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC7B,uFAAuF;gBACvF,IAAI,MAAM,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtD,CAAC;YACL,CAAC;YACD,OAAO,GAAG,CAAC;QACf,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,GAAG,CAAC;QACf,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,GAA+B;QAC9C,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAmB,EAAmB,EAAE,CAAC,IAAI,wCAAe,CACxE,KAAK,CAAC,MAAM,IAAI,EAAE,EAClB,KAAK,CAAC,MAAM,IAAI,EAAE,EAClB,KAAK,CAAC,EAAE,IAAI,CAAC,EACb,KAAK,CAAC,GAAG,IAAI,EAAE,EACf,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,EACnB,KAAK,CAAC,OAAO,IAAI,EAAE,EACnB,KAAK,CAAC,cAAc,IAAI,sDAA6B,CACxD,CAAC,CAAC;IACP,CAAC;IAEO,eAAe,CAAC,GAA8B;QAClD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAkB,EAAqB,EAAE;YACrD,MAAM,OAAO,GAAG,IAAI,0CAAiB,CACjC,KAAK,CAAC,IAAI,IAAI,EAAE,EAChB,KAAK,CAAC,MAAM,IAAI,EAAE,EAClB,KAAK,CAAC,MAAM,IAAI,EAAE,EAClB,KAAK,CAAC,EAAE,IAAI,CAAC,EACb,KAAK,CAAC,SAAS,IAAI,KAAK,EACxB,KAAK,CAAC,cAAc,IAAI,sDAA6B,CACxD,CAAC;YACF,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC;YAC/D,OAAO,OAAO,CAAC;QACnB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,sFAAsF;IAC9E,OAAO,CAAC,QAAgB,EAAE,GAAW,EAAE,IAAc;QACzD,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;CACJ,CAAA;AA1eY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAKL,2BAAe;QAClB,wBAAY;QACR,wBAAU;QACf,6CAAoB;GAPvC,qBAAqB,CA0ejC","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as fs from 'fs';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { AtomicFile } from './atomic-file';\nimport { DotWebpieces, dotWebpieces } from './state-dir';\nimport { toError } from './to-error';\nimport { Worktree, WorktreeService } from './worktrees';\nimport { WorktreeLockVerdicts } from './worktree-lock-verdicts';\nimport {\n    CacheFreshness,\n    CACHE_STALE_AFTER_MS,\n    CLASSIFICATION_BACKUP_OF_LIVE,\n    CLASSIFICATION_BACKUP_OF_MERGED,\n    CLASSIFICATION_CONTENT_IN_MAIN,\n    CLASSIFICATION_CURRENT,\n    CLASSIFICATION_DETACHED,\n    CLASSIFICATION_IN_USE,\n    CLASSIFICATION_LOCKED,\n    CLASSIFICATION_MERGED_PR,\n    CLASSIFICATION_NEVER_PROPOSED,\n    CLASSIFICATION_NO_COMMITS,\n    CLASSIFICATION_PRUNABLE,\n    CLASSIFICATION_SUPERSEDED,\n    DeletableBranch,\n    DeletableWorktree,\n    MergedBranch,\n    MergedBranchesCache,\n} from './merged-branch-verdicts';\n\nexport {\n    MergedBranch,\n    DeletableBranch,\n    DeletableWorktree,\n    MergedBranchesCache,\n    CacheFreshness,\n    CACHE_STALE_AFTER_MS,\n    CLASSIFICATION_MERGED_PR,\n    CLASSIFICATION_BACKUP_OF_MERGED,\n    CLASSIFICATION_BACKUP_OF_LIVE,\n    CLASSIFICATION_NO_COMMITS,\n    CLASSIFICATION_SUPERSEDED,\n    CLASSIFICATION_CONTENT_IN_MAIN,\n    CLASSIFICATION_NEVER_PROPOSED,\n    CLASSIFICATION_IN_USE,\n    CLASSIFICATION_PRUNABLE,\n    CLASSIFICATION_LOCKED,\n    CLASSIFICATION_CURRENT,\n    CLASSIFICATION_DETACHED,\n    PROMPTABLE_CLASSIFICATIONS,\n} from './merged-branch-verdicts';\n\n\n/**\n * The \"which local branches are dead?\" cache.\n *\n * WHY a cache, and why a STALE one is correct: cleanup is eventual, never urgent. A branch that\n * merged 30 seconds ago simply survives until the next refresh — nobody cares. So the (slow, network)\n * merged-PR lookup runs in the DETACHED background refresher, and the branch-creation-guard only READS\n * this file on its blocking path. Staleness is the whole point: it is what keeps the guard fast.\n *\n * WHY the GitHub PR API and not git: the repo squash-merges, which destroys BOTH commit ancestry and\n * patch-id. `git branch --merged` and `git cherry` therefore report merged branches as unmerged\n * (observed: deanhiller/config-overhaul, PR #188, merged — yet its patch is absent from main). A MERGED\n * PR is the only trustworthy signal, and ONE bulk `gh pr list --state merged` answers for every branch.\n */\n\nconst MERGED_BRANCHES_FILE = 'merged-branches.json';\n\n// How many merged PRs to pull in the single bulk lookup. Branches older than this window are\n// vanishingly unlikely to still be checked out locally; if one is, it lands in `keep` and a human\n// decides — the fail-safe direction.\nconst MERGED_PR_LOOKUP_LIMIT = 100;\n\n// Suffixes the squash-merge tooling appends to a feature branch when it snapshots it mid-sync\n// (base → baseSquash / basewp2 / basePreMerge3). GitHub has never seen these SHAs, so no PR will ever\n// name them — they can only be reaped by stripping back to the base branch they were cloned from.\nconst BACKUP_SUFFIX = /(?:Squash|PreMerge\\d*|wp\\d+)$/;\n\n/**\n * Internal: the bulk PR lookup, indexed.\n *\n * `merged` drives the DELETE verdicts and comes from the `--state merged` call, unchanged — the\n * reaping logic must not get looser or tighter here. `state` is display-only, from a second\n * `--state all` call, and answers the question a human needs in order to say \"yes, delete it\":\n * was there a PR at all, and did it close without merging? It fails soft to an empty map.\n */\nclass PrRef {\n    number: number;\n    state: string;\n\n    constructor(prNumber: number, state: string) {\n        this.number = prNumber;\n        this.state = state;\n    }\n}\n\nclass PrLookup {\n    merged: Map<string, number>;\n    state: Map<string, PrRef>;\n    /**\n     * Highest merged PR number seen. A branch whose own PR CLOSED UNMERGED below this number means work\n     * kept landing after it was abandoned — the \"superseded by a later PR\" signal, obtained without\n     * having to guess WHICH PR superseded it.\n     */\n    latestMergedPr: number;\n\n    constructor(merged: Map<string, number>, state: Map<string, PrRef>, latestMergedPr: number = 0) {\n        this.merged = merged;\n        this.state = state;\n        this.latestMergedPr = latestMergedPr;\n    }\n}\n\n// Internal: a classification result. `deletable` is the decision; `entry` carries the branch + reason\n// either way (a spared branch still needs its reason recorded, and it has no PR to key off).\nclass Verdict {\n    deletable: boolean;\n    entry: DeletableBranch;\n\n    constructor(deletable: boolean, entry: DeletableBranch) {\n        this.deletable = deletable;\n        this.entry = entry;\n    }\n}\n\n// Raw JSON shapes for the cast at the parse boundary.\ninterface RawDeletable {\n    branch?: string;\n    reason?: string;\n    pr?: number;\n    // Absent in caches written before the \"ask the human which of these to delete\" remedy existed.\n    sha?: string;\n    commits?: number;\n    prState?: string;\n    // Absent before classification existed — revives to the conservative 'never-proposed'.\n    classification?: string;\n}\n\ninterface RawWorktree {\n    path?: string;\n    branch?: string;\n    reason?: string;\n    pr?: number;\n    deletable?: boolean;\n    // Absent before worktree verdicts carried a classification — revives to 'never-proposed'.\n    classification?: string;\n    // Absent before stale agent locks were recognised — revives to false, i.e. \"there is no lock to\n    // clear\", which is the fail-safe direction: the removal fails loudly instead of overriding a lock\n    // this release cannot see a reason for.\n    unlockBeforeRemove?: boolean;\n}\n\ninterface RawCache {\n    timestamp?: string;\n    deletable?: RawDeletable[];\n    keep?: RawDeletable[];\n    // Absent in caches written by releases before the worktree cap existed — revives to [], which\n    // makes the worktree cap fail OPEN on a stale file rather than hard-failing the guard.\n    worktrees?: RawWorktree[];\n}\n\ninterface RawMergedPr {\n    number?: number;\n    headRefName?: string;\n    // Only requested by the display-only fetchPrStates call.\n    state?: string;\n}\n\n// Result of a captured git/gh invocation: ok=false on spawn failure or non-zero exit.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n}\n\n@injectable(bindingScopeValues.Singleton)\nexport class MergedBranchesService {\n    // Defaulted so the non-DI call sites (`new MergedBranchesService()` in the guard and the detached\n    // refresher) keep working, while inversify still injects the singleton when resolved from a container.\n    constructor(\n        private readonly worktrees: WorktreeService = new WorktreeService(),\n        private readonly dotDir: DotWebpieces = dotWebpieces,\n        private readonly atomicFile: AtomicFile = new AtomicFile(),\n        private readonly locks: WorktreeLockVerdicts = new WorktreeLockVerdicts(),\n    ) {}\n\n    /**\n     * SHARED scope — one per repo, in the primary clone, NOT one per worktree. This file's contents\n     * describe every branch AND every worktree in the repo, so a per-worktree copy was a repo-wide fact\n     * stored N times and therefore N times wrong: branch-creation-guard reported \"8 parked local\n     * branches\" against an actual 1, reading a copy that predated deletions made from another worktree.\n     */\n    mergedBranchesPath(repoRoot: string): string {\n        return this.dotDir.sharedFile(repoRoot, MERGED_BRANCHES_FILE);\n    }\n\n    // Pure read — any error (missing file, malformed JSON) returns null so the guard fails OPEN.\n    readMergedBranches(repoRoot: string): MergedBranchesCache | null {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const cachePath = this.mergedBranchesPath(repoRoot);\n            if (!fs.existsSync(cachePath)) return null;\n            const raw = JSON.parse(fs.readFileSync(cachePath, 'utf8')) as RawCache;\n            return new MergedBranchesCache(\n                raw.timestamp ?? '',\n                this.reviveList(raw.deletable),\n                this.reviveList(raw.keep),\n                this.reviveWorktrees(raw.worktrees),\n            );\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return null;\n        }\n    }\n\n    /**\n     * How old is this cache, and may its numbers be quoted as fact?\n     *\n     * `now` is a parameter purely so the specs can pin it; every caller passes nothing.\n     */\n    freshness(cache: MergedBranchesCache, now: number = Date.now()): CacheFreshness {\n        const written = Date.parse(cache.timestamp);\n        if (Number.isNaN(written)) return new CacheFreshness(true, -1, cache.timestamp);\n        const ageMs = Math.max(0, now - written);\n        const ageMinutes = Math.floor(ageMs / 60000);\n        return new CacheFreshness(ageMs > CACHE_STALE_AFTER_MS, ageMinutes, cache.timestamp);\n    }\n\n    /**\n     * Drop every cached verdict whose subject no longer exists, using only LOCAL, instant git reads.\n     *\n     * The verdicts themselves are NOT re-derived here — that is the detached refresher's job and it\n     * needs the network. This answers a different and much cheaper question: does this branch / this\n     * worktree still exist at all? A cache written before a `git branch -D` or a `git worktree remove`\n     * keeps naming things that are gone, and a reader that counts those entries reports a repo that\n     * does not exist (observed: 8 parked branches asserted against an actual 1) and then blocks on it.\n     *\n     * Fails toward the cache: if git cannot answer (empty branch list), the cache is returned untouched\n     * rather than emptied, since \"git failed\" must never read as \"everything was deleted\".\n     */\n    reconcile(repoRoot: string, cache: MergedBranchesCache): MergedBranchesCache {\n        const live = new Set(this.localBranches(repoRoot));\n        const trees = this.worktrees.listWorktrees(repoRoot);\n        const livePaths = new Set(trees.map((tree: Worktree): string => tree.path));\n\n        const keepBranch = (entry: DeletableBranch): boolean => live.size === 0 || live.has(entry.branch);\n        const keepTree = (entry: DeletableWorktree): boolean =>\n            trees.length === 0 || livePaths.has(entry.path);\n\n        return new MergedBranchesCache(\n            cache.timestamp,\n            cache.deletable.filter(keepBranch),\n            cache.keep.filter(keepBranch),\n            cache.worktrees.filter(keepTree),\n        );\n    }\n\n    /**\n     * ATOMIC write. Now that this file is shared by every worktree it has N concurrent writers (one\n     * detached refresher per agent), and its readers are the guards' BLOCKING path. A plain\n     * `writeFileSync` truncates before it writes, so a reader landing in that window gets a torn\n     * document — the reader-side retry added in PR #526 cannot rescue a syntactically valid PREFIX.\n     * Fixed where it belongs: temp file + `rename()`, which POSIX makes atomic. See AtomicFile.\n     *\n     * This buys ATOMIC READS, not lost-update protection: two read-modify-write cycles still end\n     * last-writer-wins. That is acceptable and deliberate — this is a DERIVED cache, recomputed from\n     * `gh` + git by the refresher, and wp-cleanup recomputes rather than trusting it before deleting\n     * anything. Nothing here is transactional and no caller may assume it is.\n     */\n    writeMergedBranches(repoRoot: string, cache: MergedBranchesCache): void {\n        this.atomicFile.writeJsonAtomic(this.mergedBranchesPath(repoRoot), cache);\n    }\n\n    /**\n     * Every local branch except `main`. Uses `git for-each-ref`, NOT `git branch` — the latter is a\n     * porcelain command whose output the branch-creation-guard's own regex mistakes for a branch\n     * CREATION, so the guard would block the cleanup it just demanded.\n     */\n    localBranches(repoRoot: string): string[] {\n        const result = this.capture(repoRoot, 'git', ['for-each-ref', '--format=%(refname:short)', 'refs/heads/']);\n        if (!result.ok || result.out === '') return [];\n        return result.out\n            .split('\\n')\n            .map((line: string): string => line.trim())\n            .filter((line: string): boolean => line.length > 0 && line !== 'main');\n    }\n\n    /**\n     * The SLOW path, run only inside the detached refresher. ONE bulk `gh` call, then a purely local\n     * classification. Never run on the hook's blocking path.\n     */\n    computeMergedBranches(repoRoot: string): MergedBranchesCache {\n        const merged = this.fetchMergedPrs(repoRoot);\n        const byBranch = new Map<string, number>();\n        for (const entry of merged) byBranch.set(entry.branch, entry.pr);\n        let latestMergedPr = 0;\n        for (const entry of merged) {\n            if (entry.pr > latestMergedPr) latestMergedPr = entry.pr;\n        }\n        const prs = new PrLookup(byBranch, this.fetchPrStates(repoRoot), latestMergedPr);\n\n        const trees = this.worktrees.listWorktrees(repoRoot);\n        const holder = new Map<string, string>();\n        for (const tree of trees) {\n            if (tree.branch !== '') holder.set(tree.branch, tree.path);\n        }\n\n        const deletable: DeletableBranch[] = [];\n        const keep: DeletableBranch[] = [];\n\n        for (const branch of this.localBranches(repoRoot)) {\n            const verdict = this.classify(repoRoot, branch, prs);\n\n            // A branch checked out in ANY worktree (including the branch we are standing on right here)\n            // cannot be deleted — git refuses, and since the reap is ONE `git branch -D a b c`, a single\n            // such branch would fail the entire command and strand the branches that would have deleted\n            // fine. Spare it LOUDLY (into `keep`, with the reason) rather than dropping it silently: the\n            // worktree list below is what actually reaps it, and a human should see the connection.\n            const heldAt = holder.get(branch);\n            if (heldAt !== undefined) {\n                keep.push(new DeletableBranch(\n                    branch,\n                    `checked out in worktree '${heldAt}' — remove that worktree before deleting the branch`,\n                    verdict.entry.pr,\n                    verdict.entry.sha,\n                    verdict.entry.commits,\n                    verdict.entry.prState,\n                    CLASSIFICATION_IN_USE,\n                ));\n                continue;\n            }\n\n            if (verdict.deletable) deletable.push(verdict.entry);\n            else keep.push(verdict.entry);\n        }\n\n        const worktrees = this.classifyWorktrees(repoRoot, trees, prs);\n        return new MergedBranchesCache(new Date().toISOString(), deletable, keep, worktrees);\n    }\n\n    /**\n     * Verdicts for the worktree budget. The main worktree is excluded outright — it is the primary\n     * clone and is not a thing you can remove.\n     *\n     * A worktree is deletable when its directory is already gone (`prunable`), or when its branch is\n     * dead by the very same proof the branch cap uses — a MERGED PR, its own or that of the branch it\n     * snapshots. Nothing else. It is spared when it is LOCKED BY SOMETHING STILL THERE (see\n     * lockVerdict), when it is the worktree we are standing in right now (removing your own cwd is not\n     * a thing to suggest to an agent), or when its branch is anything short of provably merged —\n     * INCLUDING a branch with no commits yet, which is what every worktree looks like while an agent\n     * is working in it.\n     */\n    private classifyWorktrees(\n        repoRoot: string,\n        trees: Worktree[],\n        prs: PrLookup,\n    ): DeletableWorktree[] {\n        const out: DeletableWorktree[] = [];\n\n        for (const tree of trees) {\n            if (tree.isMain) continue;\n\n            if (tree.prunable) {\n                out.push(new DeletableWorktree(\n                    tree.path, tree.branch, 'its directory is gone — `git worktree prune` clears it', 0, true,\n                    CLASSIFICATION_PRUNABLE));\n                continue;\n            }\n            // A dead agent's lock returns null here and the worktree is judged on its branch below,\n            // exactly like an unlocked one — with `unlockBeforeRemove` set so the reap clears the lock.\n            const staleLock = tree.locked ? this.locks.staleAgentLock(tree) : null;\n            if (tree.locked && staleLock === null) {\n                out.push(new DeletableWorktree(\n                    tree.path, tree.branch, this.locks.sparedReason(tree), 0, false, CLASSIFICATION_LOCKED));\n                continue;\n            }\n            if (tree.path === repoRoot) {\n                out.push(this.locks.annotate(new DeletableWorktree(\n                    tree.path, tree.branch, 'you are standing in it', 0, false, CLASSIFICATION_CURRENT),\n                staleLock));\n                continue;\n            }\n            if (tree.branch === '') {\n                out.push(this.locks.annotate(new DeletableWorktree(\n                    tree.path, '', 'detached HEAD — no branch to check, so a human must decide', 0, false,\n                    CLASSIFICATION_DETACHED), staleLock));\n                continue;\n            }\n\n            // The branch's OWN classification token rides along unchanged. That is what lets wp-cleanup\n            // group probably-dead worktrees exactly the way it groups probably-dead branches, instead of\n            // inventing a second, parallel notion of \"how dead is this\".\n            const verdict = this.classify(repoRoot, tree.branch, prs);\n            out.push(this.locks.annotate(new DeletableWorktree(\n                tree.path, tree.branch, verdict.entry.reason, verdict.entry.pr, verdict.deletable,\n                verdict.entry.classification), staleLock));\n        }\n\n        return out;\n    }\n\n    /**\n     * Verdict for one branch: its own merged PR, else the base it was backed up from, else empty.\n     *\n     * The verdict itself is unchanged. What is new is that EVERY entry now carries its tip SHA, its\n     * unique-commit count and its PR state, so a `keep` can be shown to a human as a delete candidate\n     * rather than just counted. This runs only in the detached refresher, so the two extra local git\n     * calls per branch cost the blocking hook path nothing.\n     */\n    private classify(repoRoot: string, branch: string, prs: PrLookup): Verdict {\n        const sha = this.tipSha(repoRoot, branch);\n        const commits = this.commitsAheadOfMain(repoRoot, branch);\n        const known = prs.state.get(branch);\n        const prState = known ? known.state : '';\n\n        const own = prs.merged.get(branch);\n        if (own !== undefined) {\n            return new Verdict(true, new DeletableBranch(\n                branch, `PR #${String(own)} merged`, own, sha, commits, prState || 'MERGED',\n                CLASSIFICATION_MERGED_PR));\n        }\n\n        const base = branch.replace(BACKUP_SUFFIX, '');\n        if (base !== branch && base.length > 0) {\n            const basePr = prs.merged.get(base);\n            if (basePr !== undefined) {\n                return new Verdict(true, new DeletableBranch(\n                    branch,\n                    `squash-merge backup of '${base}' (PR #${String(basePr)} merged) — its job is done`,\n                    basePr, sha, commits, prState, CLASSIFICATION_BACKUP_OF_MERGED,\n                ));\n            }\n            // The base has not MERGED — but a snapshot is a copy of its base by construction, so as\n            // long as the base still exists this branch is provably not the only copy of anything.\n            // Falling through to classifySpared told the human the opposite (\"may be the only copy in\n            // existence\"), which is unanswerable-by-design and is why these accumulated.\n            //\n            // DELETABLE, not merely promptable. Asking about it was still asking a question with only\n            // one honest answer — the base branch is right there holding the same work — and every\n            // ask lands on a human who is being asked to authorise a delete the tooling can already\n            // PROVE is lossless. That is the pile: `wp-start-upsert-pr` mints another snapshot on\n            // every run, so the branch cap fills with copies nobody can be bothered to adjudicate.\n            // The proof here is as strong as a merged PR (a live sibling ref holds the content), and\n            // the reap archives to an `archive/<date>/<branch>` tag and logs a `recover=` first.\n            if (this.branchExists(repoRoot, base)) {\n                const basePrState = prs.state.get(base);\n                const liveness = basePrState\n                    ? `PR #${String(basePrState.number)} ${basePrState.state}`\n                    : 'no PR yet';\n                return new Verdict(true, new DeletableBranch(\n                    branch,\n                    `pre-merge snapshot of '${base}' (${liveness}) — '${base}' still exists and holds ` +\n                    `this work, so this is a spare copy, not the only one`,\n                    basePrState ? basePrState.number : 0, sha, commits, prState,\n                    CLASSIFICATION_BACKUP_OF_LIVE,\n                ));\n            }\n        }\n\n        // Zero commits of its own. This is SPARED, not deletable — see CLASSIFICATION_NO_COMMITS for\n        // why. It is a real signal (the branch is identical to origin/main), but it is equally the\n        // signature of a worktree an agent created thirty seconds ago and has not committed in yet,\n        // and there is no git-local way to tell those two apart. So it becomes a question for a human\n        // (wp-cleanup prompts on it) instead of an unattended delete.\n        if (commits === 0) {\n            return new Verdict(false, new DeletableBranch(\n                branch,\n                'no commits of its own — identical to origin/main. That is either an abandoned husk OR a '\n                + 'worktree/branch someone is working in right now and has not committed to yet, so it is '\n                + 'never reaped unattended',\n                0, sha, 0, prState, CLASSIFICATION_NO_COMMITS));\n        }\n\n        return new Verdict(false, this.classifySpared(repoRoot, branch, prs, sha, commits, prState));\n    }\n\n    /**\n     * The three genuinely different reasons a branch survives the deletable proofs, ordered by how\n     * confidently a human can say yes to deleting it.\n     *\n     * The safety posture is UNCHANGED: all three are still SPARED, never auto-deleted. The only thing\n     * that changed is that wp-cleanup can now ask a question whose answer is knowable.\n     */\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private classifySpared(\n        repoRoot: string, branch: string, prs: PrLookup, sha: string, commits: number, prState: string,\n    ): DeletableBranch {\n        const known = prs.state.get(branch);\n\n        // A PR that CLOSED without merging, in a repo that has merged later PRs, is near-certainly the\n        // abandoned first attempt at work that landed under a different number.\n        if (known !== undefined && known.state === 'CLOSED' && prs.latestMergedPr > known.number) {\n            return new DeletableBranch(\n                branch,\n                `PR #${String(known.number)} was CLOSED UNMERGED and later PRs (through ` +\n                `#${String(prs.latestMergedPr)}) have merged — near-certainly superseded`,\n                known.number, sha, commits, prState, CLASSIFICATION_SUPERSEDED,\n            );\n        }\n\n        // `git cherry` compares by PATCH-ID, so it survives cherry-picks and rebases. It does NOT\n        // survive a squash — which is exactly why this is a spared verdict and not a deletable proof.\n        if (this.contentAlreadyInMain(repoRoot, branch)) {\n            return new DeletableBranch(\n                branch,\n                `all ${String(commits)} commit(s) already have an equivalent in origin/main ` +\n                `(git cherry) — content is not unique`,\n                known ? known.number : 0, sha, commits, prState, CLASSIFICATION_CONTENT_IN_MAIN,\n            );\n        }\n\n        const why = known\n            ? `PR #${String(known.number)} is ${known.state} (not merged); holds ` +\n              `${String(commits)} unique commit(s) — a human must decide`\n            : `never had a PR; holds ${String(commits)} unique commit(s) that may be the only copy in existence`;\n        return new DeletableBranch(\n            branch, why, 0, sha, commits, prState, CLASSIFICATION_NEVER_PROPOSED);\n    }\n\n    /**\n     * True when EVERY commit on the branch has a patch-equivalent already in origin/main.\n     *\n     * `git cherry origin/main <branch>` prints one line per commit: `+ <sha>` = not upstream,\n     * `- <sha>` = an equivalent change IS upstream. All-minus means the content landed (typically by\n     * cherry-pick or rebase-merge) even though the SHAs differ. Any failure returns false — \"cannot\n     * prove the content is in main\" must never read as \"safe\".\n     */\n    private contentAlreadyInMain(repoRoot: string, branch: string): boolean {\n        const result = this.capture(repoRoot, 'git', ['cherry', 'origin/main', branch]);\n        if (!result.ok || result.out === '') return false;\n        const lines = result.out.split('\\n')\n            .map((line: string): string => line.trim())\n            .filter((line: string): boolean => line !== '');\n        if (lines.length === 0) return false;\n        return lines.every((line: string): boolean => line.startsWith('-'));\n    }\n\n    /**\n     * Does this local branch exist? Used to prove a snapshot is not the last copy of its work — the\n     * base branch being present is that proof. Verifies it is a BRANCH (`refs/heads/`), not just any\n     * resolvable rev, so a tag or a stray SHA sharing the name cannot stand in for the base.\n     */\n    private branchExists(repoRoot: string, branch: string): boolean {\n        return this.capture(repoRoot, 'git', ['show-ref', '--verify', '--quiet', `refs/heads/${branch}`]).ok;\n    }\n\n    // Short tip SHA — the value that makes any delete of this branch reversible.\n    private tipSha(repoRoot: string, branch: string): string {\n        const result = this.capture(repoRoot, 'git', ['rev-parse', '--short', branch]);\n        return result.ok ? result.out : '';\n    }\n\n    /**\n     * Commits on `branch` that are not on origin/main. Returns -1 (\"assume it has work\") whenever the\n     * count cannot be established — an unresolvable origin/main must never read as \"empty branch\".\n     */\n    private commitsAheadOfMain(repoRoot: string, branch: string): number {\n        const result = this.capture(repoRoot, 'git', ['rev-list', '--count', `origin/main..${branch}`]);\n        if (!result.ok) return -1;\n        const count = Number(result.out);\n        return Number.isInteger(count) ? count : -1;\n    }\n\n    /**\n     * The ONE bulk network call. Every merged PR's head branch in a single round trip — no per-branch\n     * lookups. Fails SOFT: if `gh` is missing, unauthenticated, or offline we return [], which makes\n     * every branch a `keep`. The guard then deletes nothing rather than guessing.\n     */\n    private fetchMergedPrs(repoRoot: string): MergedBranch[] {\n        const result = this.capture(repoRoot, 'gh', [\n            'pr', 'list',\n            '--state', 'merged',\n            '--limit', String(MERGED_PR_LOOKUP_LIMIT),\n            '--json', 'number,headRefName',\n        ]);\n        if (!result.ok || result.out === '') return [];\n\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const raw = JSON.parse(result.out) as RawMergedPr[];\n            const out: MergedBranch[] = [];\n            for (const entry of raw) {\n                const branch = entry.headRefName ?? '';\n                const pr = entry.number ?? 0;\n                if (branch !== '' && pr > 0) out.push(new MergedBranch(branch, pr));\n            }\n            return out;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return [];\n        }\n    }\n\n    /**\n     * The DISPLAY-only second lookup: every PR (any state) keyed by head branch, so a spared branch can\n     * be shown to a human as \"PR #12 CLOSED (not merged)\" or \"no PR\" instead of an opaque name. Kept\n     * SEPARATE from fetchMergedPrs on purpose — folding both into one `--state all` call would let a\n     * flood of open/closed PRs push older MERGED ones out of the limit and silently stop reaping real\n     * dead branches. Fails soft to an empty map: the verdicts do not depend on it.\n     */\n    private fetchPrStates(repoRoot: string): Map<string, PrRef> {\n        const out = new Map<string, PrRef>();\n        const result = this.capture(repoRoot, 'gh', [\n            'pr', 'list',\n            '--state', 'all',\n            '--limit', String(MERGED_PR_LOOKUP_LIMIT),\n            '--json', 'number,headRefName,state',\n        ]);\n        if (!result.ok || result.out === '') return out;\n\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            const raw = JSON.parse(result.out) as RawMergedPr[];\n            for (const entry of raw) {\n                const branch = entry.headRefName ?? '';\n                const pr = entry.number ?? 0;\n                // `gh` lists newest-first, so the FIRST entry for a branch is its latest PR — keep it.\n                if (branch !== '' && pr > 0 && !out.has(branch)) {\n                    out.set(branch, new PrRef(pr, entry.state ?? ''));\n                }\n            }\n            return out;\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return out;\n        }\n    }\n\n    private reviveList(raw: RawDeletable[] | undefined): DeletableBranch[] {\n        if (!raw) return [];\n        return raw.map((entry: RawDeletable): DeletableBranch => new DeletableBranch(\n            entry.branch ?? '',\n            entry.reason ?? '',\n            entry.pr ?? 0,\n            entry.sha ?? '',\n            entry.commits ?? -1,\n            entry.prState ?? '',\n            entry.classification ?? CLASSIFICATION_NEVER_PROPOSED,\n        ));\n    }\n\n    private reviveWorktrees(raw: RawWorktree[] | undefined): DeletableWorktree[] {\n        if (!raw) return [];\n        return raw.map((entry: RawWorktree): DeletableWorktree => {\n            const verdict = new DeletableWorktree(\n                entry.path ?? '',\n                entry.branch ?? '',\n                entry.reason ?? '',\n                entry.pr ?? 0,\n                entry.deletable ?? false,\n                entry.classification ?? CLASSIFICATION_NEVER_PROPOSED,\n            );\n            verdict.unlockBeforeRemove = entry.unlockBeforeRemove ?? false;\n            return verdict;\n        });\n    }\n\n    // Run a command capturing trimmed stdout; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, cmd: string, args: string[]): CmdCapture {\n        const result = spawnSync(cmd, args, { cwd: repoRoot, encoding: 'utf8' });\n        if (result.status !== 0 || typeof result.stdout !== 'string') return { ok: false, out: '' };\n        return { ok: true, out: result.stdout.trim() };\n    }\n}\n"]}

package/src/worktree-lock-verdicts.d.ts

@@ -0,0 +1,46 @@
+import { AgentWorktreeLock, AgentWorktreeLockReader } from './agent-worktree-lock';
+import { DeletableWorktree } from './merged-branch-verdicts';
+import { Worktree } from './worktrees';
+/**
+ * What a `git worktree lock` DOES to a worktree's cleanup verdict.
+ *
+ * Separate from agent-worktree-lock.ts, which only reads a lock reason and asks the kernel about a
+ * pid: this is the policy built on top of that evidence — which locks stop a reap, what a spared lock
+ * is allowed to claim about who took it, and what a stale one has to leave behind on the verdict so
+ * the reaper knows a lock is standing in its way.
+ */
+export declare class WorktreeLockVerdicts {
+    private readonly agentLocks;
+    constructor(agentLocks?: AgentWorktreeLockReader);
+    /**
+     * The lock on this worktree was taken by a Claude agent whose process is GONE — or null, meaning
+     * the lock is still standing for something and the worktree must be spared.
+     *
+     * Null covers three genuinely different situations that all end the same way: a live agent, a
+     * reason we do not recognise, and no reason at all. `sparedReason` is what tells them apart for
+     * the reader; here they are one answer, "do not touch".
+     */
+    staleAgentLock(tree: Worktree): AgentWorktreeLock | null;
+    /**
+     * WHY a locked worktree was left alone — reporting what the lock SAYS, never who we imagine wrote
+     * it.
+     *
+     * This used to read `locked by a human — do not touch` for every lock in existence, which was
+     * wrong twice over. It was factually wrong about the agent harness's own locks, which is what let
+     * every `/full-cycle` worktree pile up forever. And it named an actor nothing in the evidence
+     * identifies: the lock reason is the ONLY thing we have, a human may have locked it, so may some
+     * other tool, and asserting either is the same defect whichever way it lands.
+     *
+     * So: name the agent and pid when the reason ASSERTS them, and otherwise quote the reason back
+     * verbatim and say plainly that we cannot tell who locked it.
+     */
+    sparedReason(tree: Worktree): string;
+    /**
+     * Stamp a verdict with the stale lock on its worktree: the lock has to be CLEARED before git will
+     * remove the directory, and the reason has to say why a lock is being overridden at all.
+     *
+     * Applied to every verdict the fall-through can produce, not just the deletable one, because the
+     * spared cases are exactly where a human reads the reason and asks "wasn't that locked?".
+     */
+    annotate(verdict: DeletableWorktree, lock: AgentWorktreeLock | null): DeletableWorktree;
+}

package/src/worktree-lock-verdicts.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorktreeLockVerdicts = void 0;
+const tslib_1 = require("tslib");
+const inversify_1 = require("inversify");
+const agent_worktree_lock_1 = require("./agent-worktree-lock");
+/**
+ * What a `git worktree lock` DOES to a worktree's cleanup verdict.
+ *
+ * Separate from agent-worktree-lock.ts, which only reads a lock reason and asks the kernel about a
+ * pid: this is the policy built on top of that evidence — which locks stop a reap, what a spared lock
+ * is allowed to claim about who took it, and what a stale one has to leave behind on the verdict so
+ * the reaper knows a lock is standing in its way.
+ */
+let WorktreeLockVerdicts = class WorktreeLockVerdicts {
+    agentLocks;
+    constructor(agentLocks = new agent_worktree_lock_1.AgentWorktreeLockReader()) {
+        this.agentLocks = agentLocks;
+    }
+    /**
+     * The lock on this worktree was taken by a Claude agent whose process is GONE — or null, meaning
+     * the lock is still standing for something and the worktree must be spared.
+     *
+     * Null covers three genuinely different situations that all end the same way: a live agent, a
+     * reason we do not recognise, and no reason at all. `sparedReason` is what tells them apart for
+     * the reader; here they are one answer, "do not touch".
+     */
+    staleAgentLock(tree) {
+        const lock = this.agentLocks.parse(tree.lockReason);
+        if (lock === null)
+            return null;
+        return this.agentLocks.isRunning(lock) ? null : lock;
+    }
+    /**
+     * WHY a locked worktree was left alone — reporting what the lock SAYS, never who we imagine wrote
+     * it.
+     *
+     * This used to read `locked by a human — do not touch` for every lock in existence, which was
+     * wrong twice over. It was factually wrong about the agent harness's own locks, which is what let
+     * every `/full-cycle` worktree pile up forever. And it named an actor nothing in the evidence
+     * identifies: the lock reason is the ONLY thing we have, a human may have locked it, so may some
+     * other tool, and asserting either is the same defect whichever way it lands.
+     *
+     * So: name the agent and pid when the reason ASSERTS them, and otherwise quote the reason back
+     * verbatim and say plainly that we cannot tell who locked it.
+     */
+    sparedReason(tree) {
+        const lock = this.agentLocks.parse(tree.lockReason);
+        if (lock !== null) {
+            return `locked by claude agent ${lock.agent}, pid ${String(lock.pid)} still running — `
+                + 'that agent is working in here';
+        }
+        if (tree.lockReason === '') {
+            return 'locked with no reason recorded — nothing says who locked it or why, so it is left alone';
+        }
+        return `locked, reason "${tree.lockReason}" — that is not a claude agent lock, so who locked it `
+            + 'is unknown; left alone';
+    }
+    /**
+     * Stamp a verdict with the stale lock on its worktree: the lock has to be CLEARED before git will
+     * remove the directory, and the reason has to say why a lock is being overridden at all.
+     *
+     * Applied to every verdict the fall-through can produce, not just the deletable one, because the
+     * spared cases are exactly where a human reads the reason and asks "wasn't that locked?".
+     */
+    annotate(verdict, lock) {
+        if (lock === null)
+            return verdict;
+        verdict.unlockBeforeRemove = true;
+        verdict.reason = `${verdict.reason}; stale lock from claude agent ${lock.agent}, `
+            + `pid ${String(lock.pid)} is gone`;
+        return verdict;
+    }
+};
+exports.WorktreeLockVerdicts = WorktreeLockVerdicts;
+exports.WorktreeLockVerdicts = WorktreeLockVerdicts = tslib_1.__decorate([
+    (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton),
+    tslib_1.__metadata("design:paramtypes", [agent_worktree_lock_1.AgentWorktreeLockReader])
+], WorktreeLockVerdicts);
+//# sourceMappingURL=worktree-lock-verdicts.js.map

package/src/worktree-lock-verdicts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-lock-verdicts.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/worktree-lock-verdicts.ts"],"names":[],"mappings":";;;;AAAA,yCAA2D;AAE3D,+DAAmF;AAInF;;;;;;;GAOG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACA;IAA7B,YAA6B,aAAsC,IAAI,6CAAuB,EAAE;QAAnE,eAAU,GAAV,UAAU,CAAyD;IAAG,CAAC;IAEpG;;;;;;;OAOG;IACH,cAAc,CAAC,IAAc;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,IAAc;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO,0BAA0B,IAAI,CAAC,KAAK,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB;kBACjF,+BAA+B,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;YACzB,OAAO,yFAAyF,CAAC;QACrG,CAAC;QACD,OAAO,mBAAmB,IAAI,CAAC,UAAU,wDAAwD;cAC3F,wBAAwB,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,OAA0B,EAAE,IAA8B;QAC/D,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;QAClC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAClC,OAAO,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,kCAAkC,IAAI,CAAC,KAAK,IAAI;cAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACxC,OAAO,OAAO,CAAC;IACnB,CAAC;CACJ,CAAA;AAzDY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAEI,6CAAuB;GADvD,oBAAoB,CAyDhC","sourcesContent":["import { injectable, bindingScopeValues } from 'inversify';\n\nimport { AgentWorktreeLock, AgentWorktreeLockReader } from './agent-worktree-lock';\nimport { DeletableWorktree } from './merged-branch-verdicts';\nimport { Worktree } from './worktrees';\n\n/**\n * What a `git worktree lock` DOES to a worktree's cleanup verdict.\n *\n * Separate from agent-worktree-lock.ts, which only reads a lock reason and asks the kernel about a\n * pid: this is the policy built on top of that evidence — which locks stop a reap, what a spared lock\n * is allowed to claim about who took it, and what a stale one has to leave behind on the verdict so\n * the reaper knows a lock is standing in its way.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class WorktreeLockVerdicts {\n    constructor(private readonly agentLocks: AgentWorktreeLockReader = new AgentWorktreeLockReader()) {}\n\n    /**\n     * The lock on this worktree was taken by a Claude agent whose process is GONE — or null, meaning\n     * the lock is still standing for something and the worktree must be spared.\n     *\n     * Null covers three genuinely different situations that all end the same way: a live agent, a\n     * reason we do not recognise, and no reason at all. `sparedReason` is what tells them apart for\n     * the reader; here they are one answer, \"do not touch\".\n     */\n    staleAgentLock(tree: Worktree): AgentWorktreeLock | null {\n        const lock = this.agentLocks.parse(tree.lockReason);\n        if (lock === null) return null;\n        return this.agentLocks.isRunning(lock) ? null : lock;\n    }\n\n    /**\n     * WHY a locked worktree was left alone — reporting what the lock SAYS, never who we imagine wrote\n     * it.\n     *\n     * This used to read `locked by a human — do not touch` for every lock in existence, which was\n     * wrong twice over. It was factually wrong about the agent harness's own locks, which is what let\n     * every `/full-cycle` worktree pile up forever. And it named an actor nothing in the evidence\n     * identifies: the lock reason is the ONLY thing we have, a human may have locked it, so may some\n     * other tool, and asserting either is the same defect whichever way it lands.\n     *\n     * So: name the agent and pid when the reason ASSERTS them, and otherwise quote the reason back\n     * verbatim and say plainly that we cannot tell who locked it.\n     */\n    sparedReason(tree: Worktree): string {\n        const lock = this.agentLocks.parse(tree.lockReason);\n        if (lock !== null) {\n            return `locked by claude agent ${lock.agent}, pid ${String(lock.pid)} still running — `\n                + 'that agent is working in here';\n        }\n        if (tree.lockReason === '') {\n            return 'locked with no reason recorded — nothing says who locked it or why, so it is left alone';\n        }\n        return `locked, reason \"${tree.lockReason}\" — that is not a claude agent lock, so who locked it `\n            + 'is unknown; left alone';\n    }\n\n    /**\n     * Stamp a verdict with the stale lock on its worktree: the lock has to be CLEARED before git will\n     * remove the directory, and the reason has to say why a lock is being overridden at all.\n     *\n     * Applied to every verdict the fall-through can produce, not just the deletable one, because the\n     * spared cases are exactly where a human reads the reason and asks \"wasn't that locked?\".\n     */\n    annotate(verdict: DeletableWorktree, lock: AgentWorktreeLock | null): DeletableWorktree {\n        if (lock === null) return verdict;\n        verdict.unlockBeforeRemove = true;\n        verdict.reason = `${verdict.reason}; stale lock from claude agent ${lock.agent}, `\n            + `pid ${String(lock.pid)} is gone`;\n        return verdict;\n    }\n}\n"]}

package/src/worktree-reaper.js

@@ -215,6 +215,14 @@ let WorktreeReaper = class WorktreeReaper {
         const archive = this.archiveBranch(repoRoot, target, retention, sha);
         if (!archive.ok)
             return this.archiveFailed(repoRoot, verb, target, sha, archive);
+        // A worktree left LOCKED by an agent that has since died: git refuses `worktree remove` while
+        // the lock stands, so clearing it is part of the removal rather than a separate decision. The
+        // decision was already made upstream — merged-branches.ts sets this ONLY for a lock whose pid
+        // is provably gone, and a lock held by a live agent or by anything unrecognised never gets a
+        // verdict that reaches here. A failed unlock is not reported on its own: the removal that
+        // follows fails with git's own words, which is the message a human can actually act on.
+        const unlockedOk = target.unlockBeforeRemove && target.classification !== merged_branches_1.CLASSIFICATION_PRUNABLE
+            && this.capture(repoRoot, ['worktree', 'unlock', target.path]).ok;
         const removed = target.classification === merged_branches_1.CLASSIFICATION_PRUNABLE
             ? this.capture(repoRoot, ['worktree', 'prune'])
             : this.capture(repoRoot, ['worktree', 'remove', target.path]);
@@ -226,9 +234,14 @@ let WorktreeReaper = class WorktreeReaper {
         const result = new ReapedWorktree(target.path, target.branch, sha, target.reason, target.pr, true, '');
         result.archiveTag = archive.tag;
         result.branchDeleted = branchDeleted;
+        // The audit line records the unlock too: overriding a `git worktree lock` is the one step here
+        // a reader could be surprised by, so it must be in the log next to the SHA and the recover=.
+        // Reads the RESULT rather than asserting the attempt: a log line claiming an unlock that git
+        // refused would be the same species of untrue message this whole change is removing.
+        const unlocked = unlockedOk ? 'unlocked stale agent lock, ' : '';
         this.log(repoRoot, verb, target, sha, archive.tag, branchDeleted
-            ? `removed worktree and deleted branch (${target.reason})`
-            : `removed worktree; branch '${target.branch}' survived (git refused the delete)`);
+            ? `${unlocked}removed worktree and deleted branch (${target.reason})`
+            : `${unlocked}removed worktree; branch '${target.branch}' survived (git refused the delete)`);
         return result;
     }
     // Archiving is skipped for a detached worktree (no branch to tag) and under retention 'delete'.