@webpieces/rules-config 0.4.683 → 0.4.685

package/src/worktree-reaper.js.map

@@ -1 +1 @@
-{"version":3,"file":"worktree-reaper.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/worktree-reaper.ts"],"names":[],"mappings":";;;;AAAA,iDAA0C;AAC1C,mDAA6B;AAC7B,yCAA2D;AAE3D,uDAK2B;AAC3B,+DAA6F;AAC7F,uDAA+E;AAC/E,2CAAwD;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,qFAAqF;AACrF,MAAa,cAAc;IACvB,IAAI,CAAS;IACb,yDAAyD;IACzD,MAAM,CAAS;IACf,kGAAkG;IAClG,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,EAAE,CAAS;IACX,EAAE,CAAU;IACZ,kGAAkG;IAClG,KAAK,CAAS;IACd,sGAAsG;IACtG,UAAU,GAAW,EAAE,CAAC;IACxB;;;;OAIG;IACH,aAAa,GAAY,KAAK,CAAC;IAE/B,yDAAyD;IACzD,YAAY,QAAgB,EAAE,MAAc,EAAE,GAAW,EAAE,MAAc,EAAE,EAAU,EAAE,EAAW,EAAE,KAAa;QAC7G,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AA9BD,wCA8BC;AAED;;;;GAIG;AACH,MAAa,kBAAkB;IAC3B,MAAM,CAAmB;IACzB,MAAM,CAAmB;IACzB,MAAM,CAAsB;IAE5B,YAAY,MAAwB,EAAE,MAAwB,EAAE,MAA2B;QACvF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ;AAVD,gDAUC;AAED,oGAAoG;AACpG,oGAAoG;AACpG,MAAM,cAAc;IAChB,OAAO,CAAc;IACrB,OAAO,CAAc;IAErB,YAAY,OAAoB,EAAE,OAAoB;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;CACJ;AAUM,IAAM,cAAc,GAApB,MAAM,cAAc;IAIF;IACA;IACA;IALrB,iFAAiF;IACjF,wFAAwF;IACxF,YACqB,YAA6B,IAAI,2BAAe,EAAE,EAClD,cAAiC,IAAI,uCAAiB,EAAE,EACxD,WAA2B,IAAI,gCAAc,EAAE;QAF/C,cAAS,GAAT,SAAS,CAAyC;QAClD,gBAAW,GAAX,WAAW,CAA6C;QACxD,aAAQ,GAAR,QAAQ,CAAuC;IACjE,CAAC;IAEJ;;;;;;;;;;OAUG;IACH,yDAAyD;IACzD,aAAa,CACT,QAAgB,EAChB,GAAW,EACX,IAAkB,EAClB,OAA4B,EAC5B,YAAoB,8CAA4B;QAEhD,+FAA+F;QAC/F,iGAAiG;QACjG,IAAI,SAAS,KAAK,uCAAqB;YAAE,OAAO,IAAI,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAExF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAwB,EAAE,CAAC;QAEvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAC1D,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,mCAAiB,CAC7B,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;gBACnF,SAAS;YACb,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;gBAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,IAAI,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;;;OAUG;IACK,cAAc,CAAC,QAAgB,EAAE,GAAW;QAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,2FAA2F;QAC3F,+FAA+F;QAC/F,qDAAqD;QACrD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,gGAAgG;IAChG,+EAA+E;IACvE,WAAW,CAAC,QAAgB,EAAE,GAAW;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,GAAoB,IAAI,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjE,sFAAsF;YACtF,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;gBAAE,IAAI,GAAG,IAAI,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,mGAAmG;IACnG,4FAA4F;IAC5F,4EAA4E;IACpE,YAAY,CAAC,MAAyB,EAAE,cAA8B;QAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE;YAAE,OAAO,6DAA6D,CAAC;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,2EAA2E,CAAC;QACvF,CAAC;QACD,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,8FAA8F,CAAC;QAC1G,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACK,SAAS,CACb,QAAgB,EAChB,IAAkB,EAClB,MAAyB,EACzB,SAAiB;QAEjB,6FAA6F;QAC7F,mEAAmE;QACnE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE/E,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAEjF,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,KAAK,yCAAuB;YAC7D,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAE9F,2EAA2E;QAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,KAAK,EAAE;eACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAElE,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;QAChC,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC;QAErC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,aAAa;YAC5D,CAAC,CAAC,wCAAwC,MAAM,CAAC,MAAM,GAAG;YAC1D,CAAC,CAAC,6BAA6B,MAAM,CAAC,MAAM,qCAAqC,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,gGAAgG;IAChG,8FAA8F;IACtF,aAAa,CACjB,QAAgB,EAAE,MAAyB,EAAE,SAAiB,EAAE,GAAW;QAE3E,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,KAAK,8CAA4B,EAAE,CAAC;YACrE,OAAO,IAAI,+BAAa,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,iGAAiG;IACjG,4FAA4F;IAC5F,yDAAyD;IACjD,aAAa,CACjB,QAAgB,EAAE,IAAkB,EAAE,MAAyB,EAAE,GAAW,EAAE,OAAsB;QAEpG,MAAM,KAAK,GAAG,qDAAqD,OAAO,CAAC,KAAK,EAAE,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,YAAY,KAAK,GAAG,CAAC,CAAC;QAChE,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACvG,CAAC;IAED;;;;;OAKG;IACH,yDAAyD;IACjD,aAAa,CACjB,QAAgB,EAAE,IAAkB,EAAE,MAAyB,EAAE,GAAW,EAC5E,OAAsB,EAAE,GAAW;QAEnC,MAAM,KAAK,GAAG,6BAA6B,GAAG,iDAAiD;cACzF,iEAAiE,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,GAAG,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7E,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;QAChC,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,yDAAyD;IACjD,GAAG,CACP,QAAgB,EAAE,IAAkB,EAAE,MAAyB,EAC/D,GAAW,EAAE,UAAkB,EAAE,OAAe;QAEhD,MAAM,KAAK,GAAG,IAAI,yCAAmB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC7D,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QACjC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC;QAChB,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;QAC9B,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC;QACjC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,4EAA4E;IAC5E,cAAc,CAAC,MAAsB;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACtE,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,oBAAoB,MAAM,CAAC,IAAI,QAAQ,CAAC;QAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,oBAAoB,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAC1E,OAAO,uBAAuB,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IACxE,CAAC;IAEO,QAAQ,CAAC,QAAgB,EAAE,GAAW;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,iGAAiG;IACzF,OAAO,CAAC,QAAgB,EAAE,IAAc;QAC5C,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC;IACxD,CAAC;CACJ,CAAA;AArOY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAKL,2BAAe;QACb,uCAAiB;QACpB,gCAAc;GANpC,cAAc,CAqO1B","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport {\n    ArchiveResult,\n    BranchArchiver,\n    BRANCH_RETENTION_ARCHIVE_TAG,\n    BRANCH_RETENTION_KEEP,\n} from './branch-archiver';\nimport { BranchMutationEvent, BranchMutationLog, MutationVerb } from './branch-mutation-log';\nimport { CLASSIFICATION_PRUNABLE, DeletableWorktree } from './merged-branches';\nimport { Worktree, WorktreeService } from './worktrees';\n\n/**\n * The EXECUTOR for the dead-WORKTREE verdicts that merged-branches.ts has been computing all along.\n *\n * WHY this exists: `DeletableWorktree` was designed for reaping — it carries `path` (what\n * `git worktree remove` takes) AND `branch` (what `git branch -D` takes afterwards) precisely because\n * a reap is always those two steps in that order. The reaping was then never wired up. The verdicts\n * had exactly one consumer, branch-creation-guard, which used them only to BLOCK: at the worktree cap\n * it printed the reap commands and refused to create the next worktree. Nothing ever ran them.\n *\n * That composes into a deadlock, not merely a missing feature. A merged worktree HOLDS its branch, so\n * the branch lands in `keep` with \"checked out in worktree '<path>' — remove that worktree before\n * deleting the branch\". Nothing removes the worktree. Both accumulate forever, and the guard's only\n * remaining advice is to loosen its own cap — which is the failure the cap exists to prevent. Observed\n * twice in one day: a `wp-cleanup` run that spared three worktree-held branches with that exact line,\n * and another that spared seven.\n *\n * THE ORDER IS FIXED AND LOAD-BEARING: archive the branch as a tag → `git worktree remove <path>` →\n * `git branch -D <branch>`.\n *  - Archive FIRST, and if it fails nothing is deleted. Same rule BranchArchiver already enforces for\n *    branches: a branch we could not tag is a branch whose only copy would be the reflog.\n *  - Remove the worktree BEFORE the branch, because git flatly refuses to delete a branch that is\n *    still checked out somewhere.\n *\n * AND NEVER `--force`. Git refuses to remove a worktree with uncommitted changes or untracked files,\n * and that refusal is the entire safety property here: a worktree removal deletes real FILES, not just\n * a ref, and an untracked file is by definition something no archive tag captured. A failed removal is\n * reported and moved past, exactly as a failed branch delete already is.\n */\n\n// Data-only (per CLAUDE.md, classes for data). One worktree and what happened to it.\nexport class ReapedWorktree {\n    path: string;\n    // The branch the worktree held, '' when it was detached.\n    branch: string;\n    // The branch's tip BEFORE anything was destroyed. '' when it could not be resolved (or detached).\n    sha: string;\n    reason: string;\n    pr: number;\n    ok: boolean;\n    // git's own stderr when ok=false. Kept verbatim — a refused removal is a thing a human must read.\n    error: string;\n    // The `archive/<date>/<branch>` tag written before the removal, or '' (policy 'delete', or detached).\n    archiveTag: string = '';\n    /**\n     * Did the BRANCH delete also succeed? A worktree removal that succeeds while the branch delete\n     * fails is a real, reportable half-state — the directory is gone, the branch is still there — and\n     * collapsing it into `ok` would hide it. `ok` means the DIRECTORY is gone; this means the pair is.\n     */\n    branchDeleted: boolean = false;\n\n    // eslint-disable-next-line @typescript-eslint/max-params\n    constructor(treePath: string, branch: string, sha: string, reason: string, pr: number, ok: boolean, error: string) {\n        this.path = treePath;\n        this.branch = branch;\n        this.sha = sha;\n        this.reason = reason;\n        this.pr = pr;\n        this.ok = ok;\n        this.error = error;\n    }\n}\n\n/**\n * The outcome of one worktree reap. `spared` carries the worktrees we refused to touch, each with its\n * reason, for the same reason ReapResult does: a cleanup silent about what it did NOT remove reads as\n * \"there was nothing else\", when those are exactly the ones only a human can rule on.\n */\nexport class WorktreeReapResult {\n    reaped: ReapedWorktree[];\n    failed: ReapedWorktree[];\n    spared: DeletableWorktree[];\n\n    constructor(reaped: ReapedWorktree[], failed: ReapedWorktree[], spared: DeletableWorktree[]) {\n        this.reaped = reaped;\n        this.failed = failed;\n        this.spared = spared;\n    }\n}\n\n// The two never-removable sets, kept apart so each refusal can name its own reason (data-only class\n// per CLAUDE.md — `primary` is the clone that owns .git, `current` is the tree wp-cleanup runs in).\nclass ProtectedPaths {\n    primary: Set<string>;\n    current: Set<string>;\n\n    constructor(primary: Set<string>, current: Set<string>) {\n        this.primary = primary;\n        this.current = current;\n    }\n}\n\n// Result of a captured git invocation. `err` carries stderr so a refused removal can be reported.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n    err: string;\n}\n\n@injectable(bindingScopeValues.Singleton)\nexport class WorktreeReaper {\n    // Defaulted like BranchReaper's collaborators, so the non-DI call sites can just\n    // `new WorktreeReaper()` while inversify still injects the singletons from a container.\n    constructor(\n        private readonly worktrees: WorktreeService = new WorktreeService(),\n        private readonly mutationLog: BranchMutationLog = new BranchMutationLog(),\n        private readonly archiver: BranchArchiver = new BranchArchiver(),\n    ) {}\n\n    /**\n     * Reap every worktree in `targets`, skipping any the safety rails refuse.\n     *\n     * `cwd` is passed in rather than read from `process.cwd()` here so the \"never remove the tree I am\n     * standing in\" rule is testable and so a caller running from a subdirectory still gets the right\n     * answer — the containing WORKTREE is what matters, not the exact directory.\n     *\n     * `targets` is caller-chosen on purpose. wp-cleanup passes the provably-dead ones unattended, and\n     * passes human-approved probably-dead ones on a second call. The safety rails below apply to both:\n     * no answer at a prompt can authorise removing your own cwd or the primary clone.\n     */\n    // eslint-disable-next-line @typescript-eslint/max-params\n    reapWorktrees(\n        repoRoot: string,\n        cwd: string,\n        verb: MutationVerb,\n        targets: DeletableWorktree[],\n        retention: string = BRANCH_RETENTION_ARCHIVE_TAG,\n    ): WorktreeReapResult {\n        // 'keep' means \"delete nothing, ever\" — the reap degrades to a pure report, exactly as it does\n        // for branches, so a repo that opted out of destructive cleanup still SEES what would have gone.\n        if (retention === BRANCH_RETENTION_KEEP) return new WorktreeReapResult([], [], targets);\n\n        const protectedPaths = this.protectedPaths(repoRoot, cwd);\n        const reaped: ReapedWorktree[] = [];\n        const failed: ReapedWorktree[] = [];\n        const spared: DeletableWorktree[] = [];\n\n        for (const target of targets) {\n            const refusal = this.refuseReason(target, protectedPaths);\n            if (refusal !== '') {\n                spared.push(new DeletableWorktree(\n                    target.path, target.branch, refusal, target.pr, false, target.classification));\n                continue;\n            }\n            const outcome = this.removeOne(repoRoot, verb, target, retention);\n            if (outcome.ok) reaped.push(outcome);\n            else failed.push(outcome);\n        }\n\n        return new WorktreeReapResult(reaped, failed, spared);\n    }\n\n    /**\n     * The two directories that must never be removed, resolved to absolute paths so a relative\n     * `../foo` in a verdict can still be compared against them.\n     *\n     *  - THE PRIMARY CLONE. It owns `.git`; `git worktree remove` cannot take it, and a caller who\n     *    somehow got it into a target list has a bug we must not execute.\n     *  - THE TREE WE ARE STANDING IN. Removing your own cwd mid-command deletes the files underneath\n     *    the running process — including, when the tooling is invoked by an agent, the checkout the\n     *    agent's next tool call will try to read. merged-branches.ts already declines to mark it\n     *    deletable; this is the second, independent line, because the caller supplies the list.\n     */\n    private protectedPaths(repoRoot: string, cwd: string): ProtectedPaths {\n        const primary = new Set<string>();\n        for (const tree of this.worktrees.listWorktrees(repoRoot)) {\n            if (tree.isMain) primary.add(path.resolve(tree.path));\n        }\n\n        const here = new Set<string>();\n        const current = this.currentTree(repoRoot, cwd);\n        if (current !== null) here.add(path.resolve(current.path));\n        // Fail SAFE when git could not name the current worktree: protect the raw paths anyway. An\n        // over-protected path costs one worktree that survives to the next cleanup; an under-protected\n        // one costs the directory the command is running in.\n        here.add(path.resolve(repoRoot));\n        here.add(path.resolve(cwd));\n        return new ProtectedPaths(primary, here);\n    }\n\n    // The worktree record CONTAINING cwd — not merely the one whose path equals it, so `wp-cleanup`\n    // run from `packages/whatever` inside a worktree still protects that worktree.\n    private currentTree(repoRoot: string, cwd: string): Worktree | null {\n        const here = path.resolve(cwd);\n        let best: Worktree | null = null;\n        for (const tree of this.worktrees.listWorktrees(repoRoot)) {\n            const root = path.resolve(tree.path);\n            if (here !== root && !here.startsWith(root + path.sep)) continue;\n            // Longest match wins: worktrees can nest, and the innermost one is the one we are in.\n            if (best === null || root.length > path.resolve(best.path).length) best = tree;\n        }\n        return best;\n    }\n\n    // '' when the target may be reaped; otherwise the human-readable reason it was spared instead. The\n    // two rails report SEPARATELY: \"you are standing in it\" and \"that is the primary clone\" are\n    // different mistakes, and a message covering both tells the reader neither.\n    private refuseReason(target: DeletableWorktree, protectedPaths: ProtectedPaths): string {\n        if (target.path === '') return 'no path recorded for this worktree — nothing safe to remove';\n        const resolved = path.resolve(target.path);\n        if (protectedPaths.primary.has(resolved)) {\n            return 'refused — that is the primary clone, which owns .git and is not removable';\n        }\n        if (protectedPaths.current.has(resolved)) {\n            return 'refused — this command is running in that worktree; removing your own cwd is a self-destruct';\n        }\n        return '';\n    }\n\n    /**\n     * One worktree: ARCHIVE the branch, REMOVE the directory, then DELETE the branch — and stop at the\n     * first step that fails.\n     *\n     * The prunable case is genuinely different and is why the classification token rides along on the\n     * verdict: the directory is ALREADY gone, so `git worktree remove` fails on it and the reap is\n     * `git worktree prune`. There is also nothing to archive from a directory that no longer exists —\n     * the branch itself is still archived, since it may well still hold the only copy of some work.\n     */\n    private removeOne(\n        repoRoot: string,\n        verb: MutationVerb,\n        target: DeletableWorktree,\n        retention: string,\n    ): ReapedWorktree {\n        // Tip first: after the branch is gone there is nothing left to resolve, and the audit line's\n        // whole job is to record what was destroyed while it still exists.\n        const sha = target.branch !== '' ? this.revParse(repoRoot, target.branch) : '';\n\n        const archive = this.archiveBranch(repoRoot, target, retention, sha);\n        if (!archive.ok) return this.archiveFailed(repoRoot, verb, target, sha, archive);\n\n        const removed = target.classification === CLASSIFICATION_PRUNABLE\n            ? this.capture(repoRoot, ['worktree', 'prune'])\n            : this.capture(repoRoot, ['worktree', 'remove', target.path]);\n        if (!removed.ok) return this.removalFailed(repoRoot, verb, target, sha, archive, removed.err);\n\n        // Only NOW may the branch go: git refuses while a worktree still holds it.\n        const branchDeleted = target.branch === ''\n            || this.capture(repoRoot, ['branch', '-D', target.branch]).ok;\n\n        const result = new ReapedWorktree(\n            target.path, target.branch, sha, target.reason, target.pr, true, '');\n        result.archiveTag = archive.tag;\n        result.branchDeleted = branchDeleted;\n\n        this.log(repoRoot, verb, target, sha, archive.tag, branchDeleted\n            ? `removed worktree and deleted branch (${target.reason})`\n            : `removed worktree; branch '${target.branch}' survived (git refused the delete)`);\n        return result;\n    }\n\n    // Archiving is skipped for a detached worktree (no branch to tag) and under retention 'delete'.\n    // Both report ok=true with an empty tag: there is nothing to archive, which is not a failure.\n    private archiveBranch(\n        repoRoot: string, target: DeletableWorktree, retention: string, sha: string,\n    ): ArchiveResult {\n        if (target.branch === '' || retention !== BRANCH_RETENTION_ARCHIVE_TAG) {\n            return new ArchiveResult('', sha, true, '');\n        }\n        return this.archiver.archive(repoRoot, target.branch);\n    }\n\n    // Archive refused ⇒ NOTHING is removed. The directory survives to the next cleanup, which is the\n    // fail-safe direction: the alternative is deleting files whose branch has no permanent ref.\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private archiveFailed(\n        repoRoot: string, verb: MutationVerb, target: DeletableWorktree, sha: string, archive: ArchiveResult,\n    ): ReapedWorktree {\n        const error = `not removed — could not archive its branch first: ${archive.error}`;\n        this.log(repoRoot, verb, target, sha, '', `SKIPPED (${error})`);\n        return new ReapedWorktree(target.path, target.branch, sha, target.reason, target.pr, false, error);\n    }\n\n    /**\n     * git refused to remove the directory — nearly always because it holds uncommitted changes or\n     * untracked files. Reported with git's own words and moved past. We do NOT retry with `--force`:\n     * an untracked file is work no archive tag captured, and `--force` is how a cleanup command turns\n     * into a data-loss command. The branch is left alone too, since it is still checked out here.\n     */\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private removalFailed(\n        repoRoot: string, verb: MutationVerb, target: DeletableWorktree, sha: string,\n        archive: ArchiveResult, err: string,\n    ): ReapedWorktree {\n        const error = `git refused to remove it: ${err} (not forced — untracked or modified files are `\n            + 'work nothing has archived; remove them or the worktree by hand)';\n        this.log(repoRoot, verb, target, sha, archive.tag, `FAILED (${err})`);\n        const result = new ReapedWorktree(\n            target.path, target.branch, sha, target.reason, target.pr, false, error);\n        result.archiveTag = archive.tag;\n        return result;\n    }\n\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private log(\n        repoRoot: string, verb: MutationVerb, target: DeletableWorktree,\n        sha: string, archiveTag: string, outcome: string,\n    ): void {\n        const event = new BranchMutationEvent(verb, 'REAP_WORKTREE');\n        event.fromBranch = target.branch;\n        event.sha = sha;\n        event.archiveTag = archiveTag;\n        event.worktreePath = target.path;\n        event.outcome = outcome;\n        this.mutationLog.logBranchMutation(repoRoot, event);\n    }\n\n    /** The literal command that puts BOTH the directory and the branch back. */\n    restoreCommand(target: ReapedWorktree): string {\n        const ref = target.archiveTag !== '' ? target.archiveTag : target.sha;\n        if (ref === '') return `git worktree add ${target.path} <ref>`;\n        if (target.branch === '') return `git worktree add ${target.path} ${ref}`;\n        return `git worktree add -b ${target.branch} ${target.path} ${ref}`;\n    }\n\n    private revParse(repoRoot: string, ref: string): string {\n        const result = this.capture(repoRoot, ['rev-parse', ref]);\n        return result.ok ? result.out : '';\n    }\n\n    // Run a git command capturing trimmed stdout/stderr; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, args: string[]): CmdCapture {\n        const result = spawnSync('git', args, { cwd: repoRoot, encoding: 'utf8' });\n        const err = typeof result.stderr === 'string' ? result.stderr.trim() : '';\n        if (result.status !== 0 || typeof result.stdout !== 'string') {\n            return { ok: false, out: '', err: err !== '' ? err : 'git command failed' };\n        }\n        return { ok: true, out: result.stdout.trim(), err };\n    }\n}\n"]}
+{"version":3,"file":"worktree-reaper.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/worktree-reaper.ts"],"names":[],"mappings":";;;;AAAA,iDAA0C;AAC1C,mDAA6B;AAC7B,yCAA2D;AAE3D,uDAK2B;AAC3B,+DAA6F;AAC7F,uDAA+E;AAC/E,2CAAwD;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,qFAAqF;AACrF,MAAa,cAAc;IACvB,IAAI,CAAS;IACb,yDAAyD;IACzD,MAAM,CAAS;IACf,kGAAkG;IAClG,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,EAAE,CAAS;IACX,EAAE,CAAU;IACZ,kGAAkG;IAClG,KAAK,CAAS;IACd,sGAAsG;IACtG,UAAU,GAAW,EAAE,CAAC;IACxB;;;;OAIG;IACH,aAAa,GAAY,KAAK,CAAC;IAE/B,yDAAyD;IACzD,YAAY,QAAgB,EAAE,MAAc,EAAE,GAAW,EAAE,MAAc,EAAE,EAAU,EAAE,EAAW,EAAE,KAAa;QAC7G,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AA9BD,wCA8BC;AAED;;;;GAIG;AACH,MAAa,kBAAkB;IAC3B,MAAM,CAAmB;IACzB,MAAM,CAAmB;IACzB,MAAM,CAAsB;IAE5B,YAAY,MAAwB,EAAE,MAAwB,EAAE,MAA2B;QACvF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ;AAVD,gDAUC;AAED,oGAAoG;AACpG,oGAAoG;AACpG,MAAM,cAAc;IAChB,OAAO,CAAc;IACrB,OAAO,CAAc;IAErB,YAAY,OAAoB,EAAE,OAAoB;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;CACJ;AAUM,IAAM,cAAc,GAApB,MAAM,cAAc;IAIF;IACA;IACA;IALrB,iFAAiF;IACjF,wFAAwF;IACxF,YACqB,YAA6B,IAAI,2BAAe,EAAE,EAClD,cAAiC,IAAI,uCAAiB,EAAE,EACxD,WAA2B,IAAI,gCAAc,EAAE;QAF/C,cAAS,GAAT,SAAS,CAAyC;QAClD,gBAAW,GAAX,WAAW,CAA6C;QACxD,aAAQ,GAAR,QAAQ,CAAuC;IACjE,CAAC;IAEJ;;;;;;;;;;OAUG;IACH,yDAAyD;IACzD,aAAa,CACT,QAAgB,EAChB,GAAW,EACX,IAAkB,EAClB,OAA4B,EAC5B,YAAoB,8CAA4B;QAEhD,+FAA+F;QAC/F,iGAAiG;QACjG,IAAI,SAAS,KAAK,uCAAqB;YAAE,OAAO,IAAI,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAExF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAwB,EAAE,CAAC;QAEvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAC1D,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,mCAAiB,CAC7B,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;gBACnF,SAAS;YACb,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;gBAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,IAAI,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;;;OAUG;IACK,cAAc,CAAC,QAAgB,EAAE,GAAW;QAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,2FAA2F;QAC3F,+FAA+F;QAC/F,qDAAqD;QACrD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,gGAAgG;IAChG,+EAA+E;IACvE,WAAW,CAAC,QAAgB,EAAE,GAAW;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,GAAoB,IAAI,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjE,sFAAsF;YACtF,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;gBAAE,IAAI,GAAG,IAAI,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,mGAAmG;IACnG,4FAA4F;IAC5F,4EAA4E;IACpE,YAAY,CAAC,MAAyB,EAAE,cAA8B;QAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE;YAAE,OAAO,6DAA6D,CAAC;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,2EAA2E,CAAC;QACvF,CAAC;QACD,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,8FAA8F,CAAC;QAC1G,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACK,SAAS,CACb,QAAgB,EAChB,IAAkB,EAClB,MAAyB,EACzB,SAAiB;QAEjB,6FAA6F;QAC7F,mEAAmE;QACnE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE/E,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAEjF,8FAA8F;QAC9F,8FAA8F;QAC9F,8FAA8F;QAC9F,6FAA6F;QAC7F,0FAA0F;QAC1F,wFAAwF;QACxF,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,cAAc,KAAK,yCAAuB;eAC1F,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAEtE,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,KAAK,yCAAuB;YAC7D,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAE9F,2EAA2E;QAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,KAAK,EAAE;eACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAElE,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;QAChC,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC;QAErC,+FAA+F;QAC/F,6FAA6F;QAC7F,6FAA6F;QAC7F,qFAAqF;QACrF,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,aAAa;YAC5D,CAAC,CAAC,GAAG,QAAQ,wCAAwC,MAAM,CAAC,MAAM,GAAG;YACrE,CAAC,CAAC,GAAG,QAAQ,6BAA6B,MAAM,CAAC,MAAM,qCAAqC,CAAC,CAAC;QAClG,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,gGAAgG;IAChG,8FAA8F;IACtF,aAAa,CACjB,QAAgB,EAAE,MAAyB,EAAE,SAAiB,EAAE,GAAW;QAE3E,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,KAAK,8CAA4B,EAAE,CAAC;YACrE,OAAO,IAAI,+BAAa,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,iGAAiG;IACjG,4FAA4F;IAC5F,yDAAyD;IACjD,aAAa,CACjB,QAAgB,EAAE,IAAkB,EAAE,MAAyB,EAAE,GAAW,EAAE,OAAsB;QAEpG,MAAM,KAAK,GAAG,qDAAqD,OAAO,CAAC,KAAK,EAAE,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,YAAY,KAAK,GAAG,CAAC,CAAC;QAChE,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACvG,CAAC;IAED;;;;;OAKG;IACH,yDAAyD;IACjD,aAAa,CACjB,QAAgB,EAAE,IAAkB,EAAE,MAAyB,EAAE,GAAW,EAC5E,OAAsB,EAAE,GAAW;QAEnC,MAAM,KAAK,GAAG,6BAA6B,GAAG,iDAAiD;cACzF,iEAAiE,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,GAAG,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,cAAc,CAC7B,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7E,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;QAChC,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,yDAAyD;IACjD,GAAG,CACP,QAAgB,EAAE,IAAkB,EAAE,MAAyB,EAC/D,GAAW,EAAE,UAAkB,EAAE,OAAe;QAEhD,MAAM,KAAK,GAAG,IAAI,yCAAmB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC7D,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QACjC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC;QAChB,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;QAC9B,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC;QACjC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,4EAA4E;IAC5E,cAAc,CAAC,MAAsB;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACtE,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,oBAAoB,MAAM,CAAC,IAAI,QAAQ,CAAC;QAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,oBAAoB,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAC1E,OAAO,uBAAuB,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IACxE,CAAC;IAEO,QAAQ,CAAC,QAAgB,EAAE,GAAW;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,iGAAiG;IACzF,OAAO,CAAC,QAAgB,EAAE,IAAc;QAC5C,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC;IACxD,CAAC;CACJ,CAAA;AAnPY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAKL,2BAAe;QACb,uCAAiB;QACpB,gCAAc;GANpC,cAAc,CAmP1B","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport {\n    ArchiveResult,\n    BranchArchiver,\n    BRANCH_RETENTION_ARCHIVE_TAG,\n    BRANCH_RETENTION_KEEP,\n} from './branch-archiver';\nimport { BranchMutationEvent, BranchMutationLog, MutationVerb } from './branch-mutation-log';\nimport { CLASSIFICATION_PRUNABLE, DeletableWorktree } from './merged-branches';\nimport { Worktree, WorktreeService } from './worktrees';\n\n/**\n * The EXECUTOR for the dead-WORKTREE verdicts that merged-branches.ts has been computing all along.\n *\n * WHY this exists: `DeletableWorktree` was designed for reaping — it carries `path` (what\n * `git worktree remove` takes) AND `branch` (what `git branch -D` takes afterwards) precisely because\n * a reap is always those two steps in that order. The reaping was then never wired up. The verdicts\n * had exactly one consumer, branch-creation-guard, which used them only to BLOCK: at the worktree cap\n * it printed the reap commands and refused to create the next worktree. Nothing ever ran them.\n *\n * That composes into a deadlock, not merely a missing feature. A merged worktree HOLDS its branch, so\n * the branch lands in `keep` with \"checked out in worktree '<path>' — remove that worktree before\n * deleting the branch\". Nothing removes the worktree. Both accumulate forever, and the guard's only\n * remaining advice is to loosen its own cap — which is the failure the cap exists to prevent. Observed\n * twice in one day: a `wp-cleanup` run that spared three worktree-held branches with that exact line,\n * and another that spared seven.\n *\n * THE ORDER IS FIXED AND LOAD-BEARING: archive the branch as a tag → `git worktree remove <path>` →\n * `git branch -D <branch>`.\n *  - Archive FIRST, and if it fails nothing is deleted. Same rule BranchArchiver already enforces for\n *    branches: a branch we could not tag is a branch whose only copy would be the reflog.\n *  - Remove the worktree BEFORE the branch, because git flatly refuses to delete a branch that is\n *    still checked out somewhere.\n *\n * AND NEVER `--force`. Git refuses to remove a worktree with uncommitted changes or untracked files,\n * and that refusal is the entire safety property here: a worktree removal deletes real FILES, not just\n * a ref, and an untracked file is by definition something no archive tag captured. A failed removal is\n * reported and moved past, exactly as a failed branch delete already is.\n */\n\n// Data-only (per CLAUDE.md, classes for data). One worktree and what happened to it.\nexport class ReapedWorktree {\n    path: string;\n    // The branch the worktree held, '' when it was detached.\n    branch: string;\n    // The branch's tip BEFORE anything was destroyed. '' when it could not be resolved (or detached).\n    sha: string;\n    reason: string;\n    pr: number;\n    ok: boolean;\n    // git's own stderr when ok=false. Kept verbatim — a refused removal is a thing a human must read.\n    error: string;\n    // The `archive/<date>/<branch>` tag written before the removal, or '' (policy 'delete', or detached).\n    archiveTag: string = '';\n    /**\n     * Did the BRANCH delete also succeed? A worktree removal that succeeds while the branch delete\n     * fails is a real, reportable half-state — the directory is gone, the branch is still there — and\n     * collapsing it into `ok` would hide it. `ok` means the DIRECTORY is gone; this means the pair is.\n     */\n    branchDeleted: boolean = false;\n\n    // eslint-disable-next-line @typescript-eslint/max-params\n    constructor(treePath: string, branch: string, sha: string, reason: string, pr: number, ok: boolean, error: string) {\n        this.path = treePath;\n        this.branch = branch;\n        this.sha = sha;\n        this.reason = reason;\n        this.pr = pr;\n        this.ok = ok;\n        this.error = error;\n    }\n}\n\n/**\n * The outcome of one worktree reap. `spared` carries the worktrees we refused to touch, each with its\n * reason, for the same reason ReapResult does: a cleanup silent about what it did NOT remove reads as\n * \"there was nothing else\", when those are exactly the ones only a human can rule on.\n */\nexport class WorktreeReapResult {\n    reaped: ReapedWorktree[];\n    failed: ReapedWorktree[];\n    spared: DeletableWorktree[];\n\n    constructor(reaped: ReapedWorktree[], failed: ReapedWorktree[], spared: DeletableWorktree[]) {\n        this.reaped = reaped;\n        this.failed = failed;\n        this.spared = spared;\n    }\n}\n\n// The two never-removable sets, kept apart so each refusal can name its own reason (data-only class\n// per CLAUDE.md — `primary` is the clone that owns .git, `current` is the tree wp-cleanup runs in).\nclass ProtectedPaths {\n    primary: Set<string>;\n    current: Set<string>;\n\n    constructor(primary: Set<string>, current: Set<string>) {\n        this.primary = primary;\n        this.current = current;\n    }\n}\n\n// Result of a captured git invocation. `err` carries stderr so a refused removal can be reported.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n    err: string;\n}\n\n@injectable(bindingScopeValues.Singleton)\nexport class WorktreeReaper {\n    // Defaulted like BranchReaper's collaborators, so the non-DI call sites can just\n    // `new WorktreeReaper()` while inversify still injects the singletons from a container.\n    constructor(\n        private readonly worktrees: WorktreeService = new WorktreeService(),\n        private readonly mutationLog: BranchMutationLog = new BranchMutationLog(),\n        private readonly archiver: BranchArchiver = new BranchArchiver(),\n    ) {}\n\n    /**\n     * Reap every worktree in `targets`, skipping any the safety rails refuse.\n     *\n     * `cwd` is passed in rather than read from `process.cwd()` here so the \"never remove the tree I am\n     * standing in\" rule is testable and so a caller running from a subdirectory still gets the right\n     * answer — the containing WORKTREE is what matters, not the exact directory.\n     *\n     * `targets` is caller-chosen on purpose. wp-cleanup passes the provably-dead ones unattended, and\n     * passes human-approved probably-dead ones on a second call. The safety rails below apply to both:\n     * no answer at a prompt can authorise removing your own cwd or the primary clone.\n     */\n    // eslint-disable-next-line @typescript-eslint/max-params\n    reapWorktrees(\n        repoRoot: string,\n        cwd: string,\n        verb: MutationVerb,\n        targets: DeletableWorktree[],\n        retention: string = BRANCH_RETENTION_ARCHIVE_TAG,\n    ): WorktreeReapResult {\n        // 'keep' means \"delete nothing, ever\" — the reap degrades to a pure report, exactly as it does\n        // for branches, so a repo that opted out of destructive cleanup still SEES what would have gone.\n        if (retention === BRANCH_RETENTION_KEEP) return new WorktreeReapResult([], [], targets);\n\n        const protectedPaths = this.protectedPaths(repoRoot, cwd);\n        const reaped: ReapedWorktree[] = [];\n        const failed: ReapedWorktree[] = [];\n        const spared: DeletableWorktree[] = [];\n\n        for (const target of targets) {\n            const refusal = this.refuseReason(target, protectedPaths);\n            if (refusal !== '') {\n                spared.push(new DeletableWorktree(\n                    target.path, target.branch, refusal, target.pr, false, target.classification));\n                continue;\n            }\n            const outcome = this.removeOne(repoRoot, verb, target, retention);\n            if (outcome.ok) reaped.push(outcome);\n            else failed.push(outcome);\n        }\n\n        return new WorktreeReapResult(reaped, failed, spared);\n    }\n\n    /**\n     * The two directories that must never be removed, resolved to absolute paths so a relative\n     * `../foo` in a verdict can still be compared against them.\n     *\n     *  - THE PRIMARY CLONE. It owns `.git`; `git worktree remove` cannot take it, and a caller who\n     *    somehow got it into a target list has a bug we must not execute.\n     *  - THE TREE WE ARE STANDING IN. Removing your own cwd mid-command deletes the files underneath\n     *    the running process — including, when the tooling is invoked by an agent, the checkout the\n     *    agent's next tool call will try to read. merged-branches.ts already declines to mark it\n     *    deletable; this is the second, independent line, because the caller supplies the list.\n     */\n    private protectedPaths(repoRoot: string, cwd: string): ProtectedPaths {\n        const primary = new Set<string>();\n        for (const tree of this.worktrees.listWorktrees(repoRoot)) {\n            if (tree.isMain) primary.add(path.resolve(tree.path));\n        }\n\n        const here = new Set<string>();\n        const current = this.currentTree(repoRoot, cwd);\n        if (current !== null) here.add(path.resolve(current.path));\n        // Fail SAFE when git could not name the current worktree: protect the raw paths anyway. An\n        // over-protected path costs one worktree that survives to the next cleanup; an under-protected\n        // one costs the directory the command is running in.\n        here.add(path.resolve(repoRoot));\n        here.add(path.resolve(cwd));\n        return new ProtectedPaths(primary, here);\n    }\n\n    // The worktree record CONTAINING cwd — not merely the one whose path equals it, so `wp-cleanup`\n    // run from `packages/whatever` inside a worktree still protects that worktree.\n    private currentTree(repoRoot: string, cwd: string): Worktree | null {\n        const here = path.resolve(cwd);\n        let best: Worktree | null = null;\n        for (const tree of this.worktrees.listWorktrees(repoRoot)) {\n            const root = path.resolve(tree.path);\n            if (here !== root && !here.startsWith(root + path.sep)) continue;\n            // Longest match wins: worktrees can nest, and the innermost one is the one we are in.\n            if (best === null || root.length > path.resolve(best.path).length) best = tree;\n        }\n        return best;\n    }\n\n    // '' when the target may be reaped; otherwise the human-readable reason it was spared instead. The\n    // two rails report SEPARATELY: \"you are standing in it\" and \"that is the primary clone\" are\n    // different mistakes, and a message covering both tells the reader neither.\n    private refuseReason(target: DeletableWorktree, protectedPaths: ProtectedPaths): string {\n        if (target.path === '') return 'no path recorded for this worktree — nothing safe to remove';\n        const resolved = path.resolve(target.path);\n        if (protectedPaths.primary.has(resolved)) {\n            return 'refused — that is the primary clone, which owns .git and is not removable';\n        }\n        if (protectedPaths.current.has(resolved)) {\n            return 'refused — this command is running in that worktree; removing your own cwd is a self-destruct';\n        }\n        return '';\n    }\n\n    /**\n     * One worktree: ARCHIVE the branch, REMOVE the directory, then DELETE the branch — and stop at the\n     * first step that fails.\n     *\n     * The prunable case is genuinely different and is why the classification token rides along on the\n     * verdict: the directory is ALREADY gone, so `git worktree remove` fails on it and the reap is\n     * `git worktree prune`. There is also nothing to archive from a directory that no longer exists —\n     * the branch itself is still archived, since it may well still hold the only copy of some work.\n     */\n    private removeOne(\n        repoRoot: string,\n        verb: MutationVerb,\n        target: DeletableWorktree,\n        retention: string,\n    ): ReapedWorktree {\n        // Tip first: after the branch is gone there is nothing left to resolve, and the audit line's\n        // whole job is to record what was destroyed while it still exists.\n        const sha = target.branch !== '' ? this.revParse(repoRoot, target.branch) : '';\n\n        const archive = this.archiveBranch(repoRoot, target, retention, sha);\n        if (!archive.ok) return this.archiveFailed(repoRoot, verb, target, sha, archive);\n\n        // A worktree left LOCKED by an agent that has since died: git refuses `worktree remove` while\n        // the lock stands, so clearing it is part of the removal rather than a separate decision. The\n        // decision was already made upstream — merged-branches.ts sets this ONLY for a lock whose pid\n        // is provably gone, and a lock held by a live agent or by anything unrecognised never gets a\n        // verdict that reaches here. A failed unlock is not reported on its own: the removal that\n        // follows fails with git's own words, which is the message a human can actually act on.\n        const unlockedOk = target.unlockBeforeRemove && target.classification !== CLASSIFICATION_PRUNABLE\n            && this.capture(repoRoot, ['worktree', 'unlock', target.path]).ok;\n\n        const removed = target.classification === CLASSIFICATION_PRUNABLE\n            ? this.capture(repoRoot, ['worktree', 'prune'])\n            : this.capture(repoRoot, ['worktree', 'remove', target.path]);\n        if (!removed.ok) return this.removalFailed(repoRoot, verb, target, sha, archive, removed.err);\n\n        // Only NOW may the branch go: git refuses while a worktree still holds it.\n        const branchDeleted = target.branch === ''\n            || this.capture(repoRoot, ['branch', '-D', target.branch]).ok;\n\n        const result = new ReapedWorktree(\n            target.path, target.branch, sha, target.reason, target.pr, true, '');\n        result.archiveTag = archive.tag;\n        result.branchDeleted = branchDeleted;\n\n        // The audit line records the unlock too: overriding a `git worktree lock` is the one step here\n        // a reader could be surprised by, so it must be in the log next to the SHA and the recover=.\n        // Reads the RESULT rather than asserting the attempt: a log line claiming an unlock that git\n        // refused would be the same species of untrue message this whole change is removing.\n        const unlocked = unlockedOk ? 'unlocked stale agent lock, ' : '';\n        this.log(repoRoot, verb, target, sha, archive.tag, branchDeleted\n            ? `${unlocked}removed worktree and deleted branch (${target.reason})`\n            : `${unlocked}removed worktree; branch '${target.branch}' survived (git refused the delete)`);\n        return result;\n    }\n\n    // Archiving is skipped for a detached worktree (no branch to tag) and under retention 'delete'.\n    // Both report ok=true with an empty tag: there is nothing to archive, which is not a failure.\n    private archiveBranch(\n        repoRoot: string, target: DeletableWorktree, retention: string, sha: string,\n    ): ArchiveResult {\n        if (target.branch === '' || retention !== BRANCH_RETENTION_ARCHIVE_TAG) {\n            return new ArchiveResult('', sha, true, '');\n        }\n        return this.archiver.archive(repoRoot, target.branch);\n    }\n\n    // Archive refused ⇒ NOTHING is removed. The directory survives to the next cleanup, which is the\n    // fail-safe direction: the alternative is deleting files whose branch has no permanent ref.\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private archiveFailed(\n        repoRoot: string, verb: MutationVerb, target: DeletableWorktree, sha: string, archive: ArchiveResult,\n    ): ReapedWorktree {\n        const error = `not removed — could not archive its branch first: ${archive.error}`;\n        this.log(repoRoot, verb, target, sha, '', `SKIPPED (${error})`);\n        return new ReapedWorktree(target.path, target.branch, sha, target.reason, target.pr, false, error);\n    }\n\n    /**\n     * git refused to remove the directory — nearly always because it holds uncommitted changes or\n     * untracked files. Reported with git's own words and moved past. We do NOT retry with `--force`:\n     * an untracked file is work no archive tag captured, and `--force` is how a cleanup command turns\n     * into a data-loss command. The branch is left alone too, since it is still checked out here.\n     */\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private removalFailed(\n        repoRoot: string, verb: MutationVerb, target: DeletableWorktree, sha: string,\n        archive: ArchiveResult, err: string,\n    ): ReapedWorktree {\n        const error = `git refused to remove it: ${err} (not forced — untracked or modified files are `\n            + 'work nothing has archived; remove them or the worktree by hand)';\n        this.log(repoRoot, verb, target, sha, archive.tag, `FAILED (${err})`);\n        const result = new ReapedWorktree(\n            target.path, target.branch, sha, target.reason, target.pr, false, error);\n        result.archiveTag = archive.tag;\n        return result;\n    }\n\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private log(\n        repoRoot: string, verb: MutationVerb, target: DeletableWorktree,\n        sha: string, archiveTag: string, outcome: string,\n    ): void {\n        const event = new BranchMutationEvent(verb, 'REAP_WORKTREE');\n        event.fromBranch = target.branch;\n        event.sha = sha;\n        event.archiveTag = archiveTag;\n        event.worktreePath = target.path;\n        event.outcome = outcome;\n        this.mutationLog.logBranchMutation(repoRoot, event);\n    }\n\n    /** The literal command that puts BOTH the directory and the branch back. */\n    restoreCommand(target: ReapedWorktree): string {\n        const ref = target.archiveTag !== '' ? target.archiveTag : target.sha;\n        if (ref === '') return `git worktree add ${target.path} <ref>`;\n        if (target.branch === '') return `git worktree add ${target.path} ${ref}`;\n        return `git worktree add -b ${target.branch} ${target.path} ${ref}`;\n    }\n\n    private revParse(repoRoot: string, ref: string): string {\n        const result = this.capture(repoRoot, ['rev-parse', ref]);\n        return result.ok ? result.out : '';\n    }\n\n    // Run a git command capturing trimmed stdout/stderr; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, args: string[]): CmdCapture {\n        const result = spawnSync('git', args, { cwd: repoRoot, encoding: 'utf8' });\n        const err = typeof result.stderr === 'string' ? result.stderr.trim() : '';\n        if (result.status !== 0 || typeof result.stdout !== 'string') {\n            return { ok: false, out: '', err: err !== '' ? err : 'git command failed' };\n        }\n        return { ok: true, out: result.stdout.trim(), err };\n    }\n}\n"]}

package/src/worktrees.d.ts

@@ -4,7 +4,16 @@ export declare class Worktree {
     isMain: boolean;
     prunable: boolean;
     locked: boolean;
-    constructor(path: string, branch: string, isMain: boolean, prunable: boolean, locked: boolean);
+    /**
+     * The `--reason` text verbatim, '' when the lock carried none.
+     *
+     * Load-bearing, not decoration: the Claude Code agent harness locks every worktree it opens for a
+     * subagent and writes a machine-readable reason naming the agent and its pid. Without this field
+     * `locked` collapsed a live agent, a dead agent and a human into one verdict, and wp-cleanup
+     * reported all three as "locked by a human". See agent-worktree-lock.ts.
+     */
+    lockReason: string;
+    constructor(path: string, branch: string, isMain: boolean, prunable: boolean, locked: boolean, lockReason: string);
 }
 export declare class WorktreeService {
     /**

package/src/worktrees.js

@@ -23,6 +23,7 @@ const to_error_1 = require("./to-error");
 // main worktree. Keys are space-separated; `detached`, `bare` and `locked` may appear bare (no value).
 const WORKTREE_KEY = 'worktree ';
 const BRANCH_KEY = 'branch ';
+const LOCKED_KEY = 'locked ';
 const REFS_HEADS = 'refs/heads/';
 // Data-only (per CLAUDE.md, classes for data).
 class Worktree {
@@ -33,14 +34,29 @@ class Worktree {
     isMain;
     // git already knows this worktree's directory is gone; `git worktree prune` will clear it.
     prunable;
-    // A human ran `git worktree lock`. Explicitly "do not touch".
+    // Somebody ran `git worktree lock`. WHO is a question only `lockReason` can answer.
     locked;
-    constructor(path, branch, isMain, prunable, locked) {
+    /**
+     * The `--reason` text verbatim, '' when the lock carried none.
+     *
+     * Load-bearing, not decoration: the Claude Code agent harness locks every worktree it opens for a
+     * subagent and writes a machine-readable reason naming the agent and its pid. Without this field
+     * `locked` collapsed a live agent, a dead agent and a human into one verdict, and wp-cleanup
+     * reported all three as "locked by a human". See agent-worktree-lock.ts.
+     */
+    lockReason;
+    // eslint-disable-next-line @typescript-eslint/max-params
+    constructor(path, branch, isMain, prunable, locked, 
+    // REQUIRED, with no default. A 5-arg construction would silently mean "no reason recorded",
+    // which routes straight back to the bug this exists to fix — every agent lock unreadable and
+    // its worktree spared forever. A missing argument must be a compile error, not a quiet ''.
+    lockReason) {
         this.path = path;
         this.branch = branch;
         this.isMain = isMain;
         this.prunable = prunable;
         this.locked = locked;
+        this.lockReason = lockReason;
     }
 }
 exports.Worktree = Worktree;
@@ -135,14 +151,16 @@ let WorktreeService = class WorktreeService {
         let branch = '';
         let prunable = false;
         let locked = false;
+        let lockReason = '';
         const flush = () => {
             if (path === '')
                 return;
-            trees.push(new Worktree(path, branch, trees.length === 0, prunable, locked));
+            trees.push(new Worktree(path, branch, trees.length === 0, prunable, locked, lockReason));
             path = '';
             branch = '';
             prunable = false;
             locked = false;
+            lockReason = '';
         };
         for (const raw of out.split('\n')) {
             const line = raw.trim();
@@ -161,8 +179,10 @@ let WorktreeService = class WorktreeService {
             else if (line === 'prunable' || line.startsWith('prunable ')) {
                 prunable = true;
             }
-            else if (line === 'locked' || line.startsWith('locked ')) {
+            else if (line === LOCKED_KEY.trim() || line.startsWith(LOCKED_KEY)) {
                 locked = true;
+                // `locked` alone is a lock with no --reason; `locked <text>` carries the reason verbatim.
+                lockReason = line.slice(LOCKED_KEY.length).trim();
             }
         }
         flush();

package/src/worktrees.js.map

@@ -1 +1 @@
-{"version":3,"file":"worktrees.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/worktrees.ts"],"names":[],"mappings":";;;;AAAA,iDAA0C;AAC1C,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,yCAAqC;AAErC;;;;;;;;;;;GAWG;AAEH,qGAAqG;AACrG,uGAAuG;AACvG,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,UAAU,GAAG,aAAa,CAAC;AAEjC,+CAA+C;AAC/C,MAAa,QAAQ;IACjB,IAAI,CAAS;IACb,yFAAyF;IACzF,MAAM,CAAS;IACf,8FAA8F;IAC9F,MAAM,CAAU;IAChB,2FAA2F;IAC3F,QAAQ,CAAU;IAClB,8DAA8D;IAC9D,MAAM,CAAU;IAEhB,YAAY,IAAY,EAAE,MAAc,EAAE,MAAe,EAAE,QAAiB,EAAE,MAAe;QACzF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ;AAlBD,4BAkBC;AASM,IAAM,eAAe,GAArB,MAAM,eAAe;IACxB;;;;OAIG;IACH,aAAa,CAAC,QAAgB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,2FAA2F;IAC3F,eAAe,CAAC,QAAgB;QAC5B,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAc,EAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,QAAgB;QACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,gBAAgB,CAAC,IAAY;QACzB,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,IAAY;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,GAAW;QAC9B,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,MAAM,KAAK,GAAG,GAAS,EAAE;YACrB,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO;YACxB,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7E,IAAI,GAAG,EAAE,CAAC;YACV,MAAM,GAAG,EAAE,CAAC;YACZ,QAAQ,GAAG,KAAK,CAAC;YACjB,MAAM,GAAG,KAAK,CAAC;QACnB,CAAC,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBACd,KAAK,EAAE,CAAC;YACZ,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvC,mFAAmF;gBACnF,KAAK,EAAE,CAAC;gBACR,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC7E,CAAC;iBAAM,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7D,QAAQ,GAAG,IAAI,CAAC;YACpB,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzD,MAAM,GAAG,IAAI,CAAC;YAClB,CAAC;QACL,CAAC;QACD,KAAK,EAAE,CAAC;QAER,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,0FAA0F;IAClF,OAAO,CAAC,QAAgB,EAAE,IAAc;QAC5C,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;CACJ,CAAA;AAlIY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;GAC5B,eAAe,CAkI3B","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { toError } from './to-error';\n\n/**\n * Reading the git worktree list.\n *\n * WHY this exists separately from merged-branches: a worktree is a SECOND budget. Every worktree holds\n * a branch, so if worktree-held branches also counted against the local-branch cap, five worktrees\n * would consume the entire branch budget and no branch could ever be created again. The two are\n * therefore counted apart — held branches against the worktree cap, parked branches against the branch\n * cap — and this service is what tells the two apart.\n *\n * Unlike the merged-PR lookup, everything here is LOCAL and cheap (one `git worktree list`), so it is\n * safe to call on the guard's blocking path.\n */\n\n// `git worktree list --porcelain` emits blank-line-separated records. The first record is always the\n// main worktree. Keys are space-separated; `detached`, `bare` and `locked` may appear bare (no value).\nconst WORKTREE_KEY = 'worktree ';\nconst BRANCH_KEY = 'branch ';\nconst REFS_HEADS = 'refs/heads/';\n\n// Data-only (per CLAUDE.md, classes for data).\nexport class Worktree {\n    path: string;\n    // Short branch name (refs/heads/ stripped). Empty when the worktree is detached or bare.\n    branch: string;\n    // The primary clone — the one that owns .git. Never counted against the cap, never removable.\n    isMain: boolean;\n    // git already knows this worktree's directory is gone; `git worktree prune` will clear it.\n    prunable: boolean;\n    // A human ran `git worktree lock`. Explicitly \"do not touch\".\n    locked: boolean;\n\n    constructor(path: string, branch: string, isMain: boolean, prunable: boolean, locked: boolean) {\n        this.path = path;\n        this.branch = branch;\n        this.isMain = isMain;\n        this.prunable = prunable;\n        this.locked = locked;\n    }\n}\n\n// Result of a captured git invocation: ok=false on spawn failure or non-zero exit.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n}\n\n@injectable(bindingScopeValues.Singleton)\nexport class WorktreeService {\n    /**\n     * Every worktree, main one first. Fails SOFT to [] — a repo with no worktree support, or a git\n     * that errors, must read as \"no worktrees\" so the cap fails OPEN rather than blocking on data we\n     * do not have.\n     */\n    listWorktrees(repoRoot: string): Worktree[] {\n        const result = this.capture(repoRoot, ['worktree', 'list', '--porcelain']);\n        if (!result.ok || result.out === '') return [];\n        return this.parsePorcelain(result.out);\n    }\n\n    // The linked worktrees — everything except the primary clone. This is what the cap counts.\n    linkedWorktrees(repoRoot: string): Worktree[] {\n        return this.listWorktrees(repoRoot).filter((tree: Worktree): boolean => !tree.isMain);\n    }\n\n    /**\n     * Branch names checked out in ANY worktree, including the primary clone's own HEAD.\n     *\n     * Two callers, one reason: git flatly refuses to delete a branch that is checked out somewhere.\n     * A held branch must never be proposed for `git branch -D` (the delete would fail and take the\n     * whole reap command down with it), and it must not be counted as a parked branch either.\n     */\n    heldBranches(repoRoot: string): Set<string> {\n        const held = new Set<string>();\n        for (const tree of this.listWorktrees(repoRoot)) {\n            if (tree.branch !== '') held.add(tree.branch);\n        }\n        return held;\n    }\n\n    /**\n     * Am I standing in a LINKED worktree (as opposed to the primary clone)?\n     *\n     * This is the question every recovery message needs, because the two trees take different\n     * commands: `git checkout main` fatals inside a linked worktree (\"main is already checked out\n     * at <primary>\"), and a dead linked worktree is reaped with `git worktree remove`, not\n     * `git branch -d`. A guard that cannot tell them apart must print BOTH forms and let the AI\n     * guess — which is exactly how an AI ends up running the fatal one.\n     *\n     * The test is a single `statSync`, no process spawn: git gives a linked worktree a `.git` FILE\n     * (a `gitdir:` pointer) where the primary clone has a `.git` DIRECTORY. This runs on the read\n     * path, where reads vastly outnumber every other tool call, so the cost matters.\n     *\n     * It is a CHEAP FAST PATH over the authoritative answer, not a second authority. The authority is\n     * `DotWebpieces.gitDirs` — `gitDir !== commonDir`, git's own canonical test, which also handles the\n     * layouts a `.git` stat cannot see (`--separate-git-dir`, submodules). This is NOT calling it,\n     * deliberately: that costs a `rev-parse` spawn per read. `worktree-identity.spec.ts` asserts the two\n     * agree for the primary clone, an in-repo `.claude/worktrees/**` worktree and a sibling worktree\n     * outside the repo — so if git ever changes the `.git` layout this fails there, not in the field.\n     * Anything that needs to be RIGHT rather than cheap (tree identity, state paths) asks `gitDirs`.\n     *\n     * Returns FALSE on anything uncertain (no `.git` at all, unreadable, a submodule's `.git` file\n     * in a non-worktree checkout). False is the fail-open direction here: callers then print both\n     * forms rather than confidently printing the wrong one.\n     */\n    isLinkedWorktree(root: string): boolean {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            return !fs.statSync(path.join(root, '.git')).isDirectory();\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return false;\n        }\n    }\n\n    /**\n     * The worktree record for the tree rooted at `root`, or null when it is not one of git's\n     * worktrees (or git could not answer). Callers use it to name the exact directory a\n     * `git worktree remove` has to take — a reap instruction with the wrong path is worse than none.\n     */\n    currentWorktree(root: string): Worktree | null {\n        const resolved = path.resolve(root);\n        for (const tree of this.listWorktrees(root)) {\n            if (path.resolve(tree.path) === resolved) return tree;\n        }\n        return null;\n    }\n\n    /**\n     * Parse the porcelain records. A record starts at a `worktree <path>` line and runs to the blank\n     * line; the FIRST record is the main worktree (git guarantees the ordering). A `prunable` worktree\n     * still appears in the list, which is exactly why it can be reaped.\n     */\n    private parsePorcelain(out: string): Worktree[] {\n        const trees: Worktree[] = [];\n        let path = '';\n        let branch = '';\n        let prunable = false;\n        let locked = false;\n\n        const flush = (): void => {\n            if (path === '') return;\n            trees.push(new Worktree(path, branch, trees.length === 0, prunable, locked));\n            path = '';\n            branch = '';\n            prunable = false;\n            locked = false;\n        };\n\n        for (const raw of out.split('\\n')) {\n            const line = raw.trim();\n            if (line === '') {\n                flush();\n            } else if (line.startsWith(WORKTREE_KEY)) {\n                // A new record begins — flush the previous one in case the blank line was missing.\n                flush();\n                path = line.slice(WORKTREE_KEY.length).trim();\n            } else if (line.startsWith(BRANCH_KEY)) {\n                const ref = line.slice(BRANCH_KEY.length).trim();\n                branch = ref.startsWith(REFS_HEADS) ? ref.slice(REFS_HEADS.length) : ref;\n            } else if (line === 'prunable' || line.startsWith('prunable ')) {\n                prunable = true;\n            } else if (line === 'locked' || line.startsWith('locked ')) {\n                locked = true;\n            }\n        }\n        flush();\n\n        return trees;\n    }\n\n    // Run a git command capturing trimmed stdout; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, args: string[]): CmdCapture {\n        const result = spawnSync('git', args, { cwd: repoRoot, encoding: 'utf8' });\n        if (result.status !== 0 || typeof result.stdout !== 'string') return { ok: false, out: '' };\n        return { ok: true, out: result.stdout.trim() };\n    }\n}\n"]}
+{"version":3,"file":"worktrees.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/worktrees.ts"],"names":[],"mappings":";;;;AAAA,iDAA0C;AAC1C,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,yCAAqC;AAErC;;;;;;;;;;;GAWG;AAEH,qGAAqG;AACrG,uGAAuG;AACvG,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,UAAU,GAAG,aAAa,CAAC;AAEjC,+CAA+C;AAC/C,MAAa,QAAQ;IACjB,IAAI,CAAS;IACb,yFAAyF;IACzF,MAAM,CAAS;IACf,8FAA8F;IAC9F,MAAM,CAAU;IAChB,2FAA2F;IAC3F,QAAQ,CAAU;IAClB,oFAAoF;IACpF,MAAM,CAAU;IAChB;;;;;;;OAOG;IACH,UAAU,CAAS;IAEnB,yDAAyD;IACzD,YACI,IAAY,EACZ,MAAc,EACd,MAAe,EACf,QAAiB,EACjB,MAAe;IACf,4FAA4F;IAC5F,6FAA6F;IAC7F,2FAA2F;IAC3F,UAAkB;QAElB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;CACJ;AAvCD,4BAuCC;AASM,IAAM,eAAe,GAArB,MAAM,eAAe;IACxB;;;;OAIG;IACH,aAAa,CAAC,QAAgB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,2FAA2F;IAC3F,eAAe,CAAC,QAAgB;QAC5B,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAc,EAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,QAAgB;QACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,gBAAgB,CAAC,IAAY;QACzB,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,KAAK,CAAC;YACX,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,IAAY;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,GAAW;QAC9B,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,UAAU,GAAG,EAAE,CAAC;QAEpB,MAAM,KAAK,GAAG,GAAS,EAAE;YACrB,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO;YACxB,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;YACzF,IAAI,GAAG,EAAE,CAAC;YACV,MAAM,GAAG,EAAE,CAAC;YACZ,QAAQ,GAAG,KAAK,CAAC;YACjB,MAAM,GAAG,KAAK,CAAC;YACf,UAAU,GAAG,EAAE,CAAC;QACpB,CAAC,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBACd,KAAK,EAAE,CAAC;YACZ,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvC,mFAAmF;gBACnF,KAAK,EAAE,CAAC;gBACR,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC7E,CAAC;iBAAM,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7D,QAAQ,GAAG,IAAI,CAAC;YACpB,CAAC;iBAAM,IAAI,IAAI,KAAK,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnE,MAAM,GAAG,IAAI,CAAC;gBACd,0FAA0F;gBAC1F,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,CAAC;QACL,CAAC;QACD,KAAK,EAAE,CAAC;QAER,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,0FAA0F;IAClF,OAAO,CAAC,QAAgB,EAAE,IAAc;QAC5C,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;CACJ,CAAA;AAtIY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;GAC5B,eAAe,CAsI3B","sourcesContent":["import { spawnSync } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { toError } from './to-error';\n\n/**\n * Reading the git worktree list.\n *\n * WHY this exists separately from merged-branches: a worktree is a SECOND budget. Every worktree holds\n * a branch, so if worktree-held branches also counted against the local-branch cap, five worktrees\n * would consume the entire branch budget and no branch could ever be created again. The two are\n * therefore counted apart — held branches against the worktree cap, parked branches against the branch\n * cap — and this service is what tells the two apart.\n *\n * Unlike the merged-PR lookup, everything here is LOCAL and cheap (one `git worktree list`), so it is\n * safe to call on the guard's blocking path.\n */\n\n// `git worktree list --porcelain` emits blank-line-separated records. The first record is always the\n// main worktree. Keys are space-separated; `detached`, `bare` and `locked` may appear bare (no value).\nconst WORKTREE_KEY = 'worktree ';\nconst BRANCH_KEY = 'branch ';\nconst LOCKED_KEY = 'locked ';\nconst REFS_HEADS = 'refs/heads/';\n\n// Data-only (per CLAUDE.md, classes for data).\nexport class Worktree {\n    path: string;\n    // Short branch name (refs/heads/ stripped). Empty when the worktree is detached or bare.\n    branch: string;\n    // The primary clone — the one that owns .git. Never counted against the cap, never removable.\n    isMain: boolean;\n    // git already knows this worktree's directory is gone; `git worktree prune` will clear it.\n    prunable: boolean;\n    // Somebody ran `git worktree lock`. WHO is a question only `lockReason` can answer.\n    locked: boolean;\n    /**\n     * The `--reason` text verbatim, '' when the lock carried none.\n     *\n     * Load-bearing, not decoration: the Claude Code agent harness locks every worktree it opens for a\n     * subagent and writes a machine-readable reason naming the agent and its pid. Without this field\n     * `locked` collapsed a live agent, a dead agent and a human into one verdict, and wp-cleanup\n     * reported all three as \"locked by a human\". See agent-worktree-lock.ts.\n     */\n    lockReason: string;\n\n    // eslint-disable-next-line @typescript-eslint/max-params\n    constructor(\n        path: string,\n        branch: string,\n        isMain: boolean,\n        prunable: boolean,\n        locked: boolean,\n        // REQUIRED, with no default. A 5-arg construction would silently mean \"no reason recorded\",\n        // which routes straight back to the bug this exists to fix — every agent lock unreadable and\n        // its worktree spared forever. A missing argument must be a compile error, not a quiet ''.\n        lockReason: string,\n    ) {\n        this.path = path;\n        this.branch = branch;\n        this.isMain = isMain;\n        this.prunable = prunable;\n        this.locked = locked;\n        this.lockReason = lockReason;\n    }\n}\n\n// Result of a captured git invocation: ok=false on spawn failure or non-zero exit.\ninterface CmdCapture {\n    ok: boolean;\n    out: string;\n}\n\n@injectable(bindingScopeValues.Singleton)\nexport class WorktreeService {\n    /**\n     * Every worktree, main one first. Fails SOFT to [] — a repo with no worktree support, or a git\n     * that errors, must read as \"no worktrees\" so the cap fails OPEN rather than blocking on data we\n     * do not have.\n     */\n    listWorktrees(repoRoot: string): Worktree[] {\n        const result = this.capture(repoRoot, ['worktree', 'list', '--porcelain']);\n        if (!result.ok || result.out === '') return [];\n        return this.parsePorcelain(result.out);\n    }\n\n    // The linked worktrees — everything except the primary clone. This is what the cap counts.\n    linkedWorktrees(repoRoot: string): Worktree[] {\n        return this.listWorktrees(repoRoot).filter((tree: Worktree): boolean => !tree.isMain);\n    }\n\n    /**\n     * Branch names checked out in ANY worktree, including the primary clone's own HEAD.\n     *\n     * Two callers, one reason: git flatly refuses to delete a branch that is checked out somewhere.\n     * A held branch must never be proposed for `git branch -D` (the delete would fail and take the\n     * whole reap command down with it), and it must not be counted as a parked branch either.\n     */\n    heldBranches(repoRoot: string): Set<string> {\n        const held = new Set<string>();\n        for (const tree of this.listWorktrees(repoRoot)) {\n            if (tree.branch !== '') held.add(tree.branch);\n        }\n        return held;\n    }\n\n    /**\n     * Am I standing in a LINKED worktree (as opposed to the primary clone)?\n     *\n     * This is the question every recovery message needs, because the two trees take different\n     * commands: `git checkout main` fatals inside a linked worktree (\"main is already checked out\n     * at <primary>\"), and a dead linked worktree is reaped with `git worktree remove`, not\n     * `git branch -d`. A guard that cannot tell them apart must print BOTH forms and let the AI\n     * guess — which is exactly how an AI ends up running the fatal one.\n     *\n     * The test is a single `statSync`, no process spawn: git gives a linked worktree a `.git` FILE\n     * (a `gitdir:` pointer) where the primary clone has a `.git` DIRECTORY. This runs on the read\n     * path, where reads vastly outnumber every other tool call, so the cost matters.\n     *\n     * It is a CHEAP FAST PATH over the authoritative answer, not a second authority. The authority is\n     * `DotWebpieces.gitDirs` — `gitDir !== commonDir`, git's own canonical test, which also handles the\n     * layouts a `.git` stat cannot see (`--separate-git-dir`, submodules). This is NOT calling it,\n     * deliberately: that costs a `rev-parse` spawn per read. `worktree-identity.spec.ts` asserts the two\n     * agree for the primary clone, an in-repo `.claude/worktrees/**` worktree and a sibling worktree\n     * outside the repo — so if git ever changes the `.git` layout this fails there, not in the field.\n     * Anything that needs to be RIGHT rather than cheap (tree identity, state paths) asks `gitDirs`.\n     *\n     * Returns FALSE on anything uncertain (no `.git` at all, unreadable, a submodule's `.git` file\n     * in a non-worktree checkout). False is the fail-open direction here: callers then print both\n     * forms rather than confidently printing the wrong one.\n     */\n    isLinkedWorktree(root: string): boolean {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            return !fs.statSync(path.join(root, '.git')).isDirectory();\n        } catch (err: unknown) {\n            const error = toError(err);\n            void error;\n            return false;\n        }\n    }\n\n    /**\n     * The worktree record for the tree rooted at `root`, or null when it is not one of git's\n     * worktrees (or git could not answer). Callers use it to name the exact directory a\n     * `git worktree remove` has to take — a reap instruction with the wrong path is worse than none.\n     */\n    currentWorktree(root: string): Worktree | null {\n        const resolved = path.resolve(root);\n        for (const tree of this.listWorktrees(root)) {\n            if (path.resolve(tree.path) === resolved) return tree;\n        }\n        return null;\n    }\n\n    /**\n     * Parse the porcelain records. A record starts at a `worktree <path>` line and runs to the blank\n     * line; the FIRST record is the main worktree (git guarantees the ordering). A `prunable` worktree\n     * still appears in the list, which is exactly why it can be reaped.\n     */\n    private parsePorcelain(out: string): Worktree[] {\n        const trees: Worktree[] = [];\n        let path = '';\n        let branch = '';\n        let prunable = false;\n        let locked = false;\n        let lockReason = '';\n\n        const flush = (): void => {\n            if (path === '') return;\n            trees.push(new Worktree(path, branch, trees.length === 0, prunable, locked, lockReason));\n            path = '';\n            branch = '';\n            prunable = false;\n            locked = false;\n            lockReason = '';\n        };\n\n        for (const raw of out.split('\\n')) {\n            const line = raw.trim();\n            if (line === '') {\n                flush();\n            } else if (line.startsWith(WORKTREE_KEY)) {\n                // A new record begins — flush the previous one in case the blank line was missing.\n                flush();\n                path = line.slice(WORKTREE_KEY.length).trim();\n            } else if (line.startsWith(BRANCH_KEY)) {\n                const ref = line.slice(BRANCH_KEY.length).trim();\n                branch = ref.startsWith(REFS_HEADS) ? ref.slice(REFS_HEADS.length) : ref;\n            } else if (line === 'prunable' || line.startsWith('prunable ')) {\n                prunable = true;\n            } else if (line === LOCKED_KEY.trim() || line.startsWith(LOCKED_KEY)) {\n                locked = true;\n                // `locked` alone is a lock with no --reason; `locked <text>` carries the reason verbatim.\n                lockReason = line.slice(LOCKED_KEY.length).trim();\n            }\n        }\n        flush();\n\n        return trees;\n    }\n\n    // Run a git command capturing trimmed stdout; ok=false on spawn failure or non-zero exit.\n    private capture(repoRoot: string, args: string[]): CmdCapture {\n        const result = spawnSync('git', args, { cwd: repoRoot, encoding: 'utf8' });\n        if (result.status !== 0 || typeof result.stdout !== 'string') return { ok: false, out: '' };\n        return { ok: true, out: result.stdout.trim() };\n    }\n}\n"]}

package/templates/webpieces.branch-state-matrix.md

@@ -27,13 +27,16 @@ The split is TOOL WIRING, not policy. A Read names exactly one file; a Bash comm
 Write is neither.
 
 **The two Bash guards used to differ in polarity, and no longer do.** merged-branch was
-default-DENY + allowlist; stale-main was default-ALLOW + blocklist, so `pnpm build` was denied by
-one and allowed by the other for the same reason — "you should not be working in this tree". That
-asymmetry was a consequence of stale-main asking about FRESHNESS, where a blocklist of content
-readers is the right shape. Once it asks about the BRANCH instead (row 5), the right shape is the
-one merged-branch already had, and they now share it: `RecoveryAllowlist`, the row 4 skip list, as
-a single implementation. Two skip lists drift, and the half that drifts is the half that wedges a
-session on its own cure.
+default-DENY + allowlist; stale-main was default-ALLOW + blocklist of content readers, so
+`pnpm build` was denied by one and allowed by the other for the same reason — "you should not be
+working in this tree". A blocklist of readers structurally cannot catch an installer, a formatter
+or a codegen step, so both states now use default-DENY plus one shared `RecoveryAllowlist` (the
+row 4 skip list). Two skip lists drift, and the half that drifts is the half that wedges a session
+on its own cure.
+
+**What is gated is WHEN that polarity applies, not the polarity.** stale-main asks the cache
+whether local `main` is BEHIND (rows 6/7) and default-denies only then; a current `main` — which is
+exactly where `pnpm wp-checkout-clean-main` leaves you — is not this guard's business at all.
 
 They remain separate CLASSES because the states they detect are different — one reads the branch
 name, the other the cached merged flag — and because each carries its own message.
@@ -69,10 +72,10 @@ guards, meant at most one of the four values could ever reach a spawn.
 | 2 | `B` | bare `git checkout main`, with no `git pull` chained into the same command | 4 block | `pnpm wp-checkout-clean-main` |
 | 3 | `B R E` | **merge in progress** — L4 owns this state | 2 exempt | finish the merge: `pnpm wp-finish-upsert-pr` |
 | 4 | `B` | on the **skip list** — it gets you OUT, or tells you where you are | 1 allow | — |
-| 5 | `B E` | on `main` | 4 block | `git checkout -b <new> origin/main` |
+| 5 | `E` | on `main` | 4 block | `git checkout -b <new> origin/main` |
 | 11 | `B R E` | **the state could not be established** — branch undeterminable, no cache yet, the cache holds another branch, `origin/main` unknown, or the forge unreachable | 1 allow (fail-open) | — (nothing to fix; the refresher populates the cache for the next call) |
-| 6 | `R` | on `main`, behind `origin/main` | 4 block | `git pull origin main`, or `git checkout -b <new> origin/main` |
-| 7 | `R` | on `main`, current | 1 allow | — |
+| 6 | `B R` | on `main`, behind `origin/main` | 4 block | `git pull origin main`, or `git checkout -b <new> origin/main` |
+| 7 | `B R` | on `main`, current | 1 allow | — |
 | 8 | `B R E` | on a branch whose PR is **already merged** | 4 block | `git fetch origin main && git checkout -b <new> origin/main` |
 | 9 | `B R E` | no fork point with `origin/main`, or `origin/main` moved and collided with your files | 4 block | `pnpm wp-start-update`, or `pnpm wp-start-upsert-pr` when a PR is open |
 | 10 | `B R E` | healthy feature branch | 1 allow | — |
@@ -88,11 +91,17 @@ would silently re-point every reference. L1 does the same with its row 8.
 
 ### The one rule that explains the tool column
 
-**`B` tracks `E` everywhere. `R` is judged separately in exactly one place — rows 6/7, on `main`.**
+**`B` tracks `E` everywhere except on `main`, where `B` tracks `R` instead — rows 5, 6 and 7.**
+
+The hazards differ. A WRITE on `main` lands work somewhere unreviewable and unrevertable at ANY
+freshness, so row 5 is `E` only and is judged from the branch alone, above the cache divider. A
+READ or a BUILD on a CURRENT `main` harms nothing, and blocking it strands the agent immediately
+after `pnpm wp-checkout-clean-main` — the command this repo prescribes — put it there. So `B` joins
+`R` on the freshness-gated pair: row 6 (behind) blocks, row 7 (current) allows, and "cannot tell"
+fails open at row 11 by construction.
 
-A Read names exactly one file, so the guard can evaluate it precisely. A Bash command is opaque, so
-it gets the conservative answer. Reading a CURRENT `main` is fine; the problem is that `main` is
-almost always behind.
+Inside row 6 they still differ in SHAPE: a Read names exactly one file and is evaluated precisely;
+a Bash command is opaque and gets the conservative answer, default-deny plus the row 4 skip list.
 
 ### Why the order of row 5 is the most load-bearing thing here
 
@@ -100,9 +109,11 @@ L2 is armed **from the second tool call onward**, because the refresher populate
 NEXT call. That is deliberate — it keeps the blocking path free of network git — and it is fine in
 practice, because the agent discovers the problem within a command or two.
 
-Row 5 is the exception that must not be relaxed. Put "on `main`" BELOW row 11 and writes on `main`
+Row 5 is the exception that must not be relaxed. Put "on `main`" BELOW row 11 and WRITES on `main`
 are permitted for the whole first call of every session — and permanently in a multi-worktree repo,
-where another tree can hold the refresh lock indefinitely.
+where another tree can hold the refresh lock indefinitely. That is why row 5 is `E` only: the Bash
+half asks a question the cache CAN answer late without harm ("is `main` behind?"), so it belongs
+below the divider, where not knowing means allowing.
 
 ### Why row 9 can block reads without trapping you
 
@@ -148,18 +159,20 @@ under. So a case whose row is wrong fails the build rather than misinforming a r
 | 5 | Reading and editing conflicted files during a 3-point merge, on a branch row 9 would block | merge markers on disk — `pnpm wp-start-update` has run and not finished | EXEMPT: everything is permitted, which is exactly what lets row 9 be strict | Resolve the conflicts, then `pnpm wp-finish-upsert-pr` |
 | 6 | `git status` / `gh pr view` while blocked, to work out where you are | any state — orientation is never "working here" | ALLOW: metadata tells you where you are without putting stale file CONTENT in context | None needed |
 | 7 | `git stash` when `git checkout -b <new> origin/main` refuses because `origin/main` touched the same files you edited | on a stale `main` or a merged branch, dirty tree, with an overlapping upstream change | ALLOW: the cure for the row that blocked you must itself never be blocked — and this is the residual step that makes rows 6 and 8 safe to block on a dirty tree | None needed — then re-run the checkout and `git stash pop` |
+| 28 | `gh pr close 123`, `gh pr comment`, `gh api …` or a `curl` while parked on a stale `main` or a merged branch | blocked state, running something that touches GitHub or a URL and nothing in this tree | ALLOW: the skip list asks one question — does this read or write repo CONTENT? `gh` talks to GitHub and `curl`/`wget` talk to a network, so the branch state has nothing to say about them. The forms that write a local file (`gh repo clone`, `gh pr checkout`, `curl -o`, any `> file`) are excluded, and `gh pr create`/`merge` remain governed by their own guards | None needed |
 | 8 | `pnpm wp-start-upsert-pr` on a branch whose fork point is broken | row 9 state, running the tool row 9 prescribes | ALLOW: every `wp-*` bin is on the skip list, so no row can block its own remedy | None needed |
 | 9 | An Edit or Write to any tracked file while `git rev-parse --abbrev-ref HEAD` says `main` | on `main`, any freshness | BLOCK: decided by one `git rev-parse`, with NO cache read, so it fires on the first tool call of the session | `git checkout -b <new> origin/main` — uncommitted work comes with you |
-| 10 | A Bash command that WRITES tracked files as a side effect — `npx expo install`, a formatter, codegen, `sed -i`, a `>` redirect | on `main`, and the write is incidental to a command whose stated purpose is something else | BLOCK: default-DENY on `main` plus row 4's skip list, so a command nobody thought to enumerate is caught by not being on the list — which is the only shape that could have caught this one | `git checkout -b <new> origin/main` BEFORE running anything that may write |
-| 24 | A build or a test run on a `main` that is perfectly up to date | on `main`, current — no staleness anywhere | BLOCK: freshness is not the question for the BLOCK. Reading `main` to plan stays open; what is closed is WORKING here, because the feature branch is the unit of work — and when `main` is behind instead, the reads are out of date too. The cure is a new branch off `origin/main`, which fetches, so it is right in both states | `git checkout -b <new> origin/main` |
-| 16 | Read is blocked, so the session reaches for `cat`, `grep` and `ls` instead — and describes a CI workflow set missing a whole workflow that existed upstream | the SIDE DOOR: same tree, different tool | BLOCK. This case used to be judged by row 6 (a stale-content blocklist on the Bash side); row 5 now subsumes it, because being on `main` is already the finding and no enumeration of readers is needed. The log used to read "read-stale-guard handled", which is worse than no guard — it looks covered | `git checkout -b <new> origin/main` |
-| 25 | The FIRST command of a session, on `main`, before any cache exists | on `main`, cache absent — row 11 would fail open | BLOCK anyway: row 5 is ABOVE the cache divider and reads only `git rev-parse`, so it is armed on call #1. This is the case the cache-gated version could never catch | `git checkout -b <new> origin/main` |
+| 25 | The FIRST edit of a session, on `main`, before any cache exists | on `main`, cache absent — row 11 would fail open | BLOCK anyway: row 5 is ABOVE the cache divider and reads only `git rev-parse`, so it is armed on call #1. This is why the row is `E` only and must never be gated on the cache | `git checkout -b <new> origin/main` |
 | 11 | The very first tool call of a session is allowed even on a badly stale `main` | no cache — the refresher is fire-and-forget and populates it for the NEXT call | ALLOW (fail-open), logged as `ALLOW_FAIL_OPEN` so abstentions stay countable | None — the second call is judged normally |
 | 12 | Guards quietly stand down on a plane, or when `gh` is unauthenticated or rate-limited | the forge could not be asked whether the PR is merged | ALLOW (fail-open) logged as `no-forge` — distinct from "asked, and it is not merged", which used to look identical in the trail | None — restore network/`gh auth` to re-arm the merged-branch policy |
+| 27 | A build, a `cat` or a `curl` on `main`, on the first Bash call of a session | on `main`, cache absent — so whether `main` is behind is UNKNOWN | ALLOW (fail-open), logged `ALLOW_FAIL_OPEN`. `B` on `main` is judged by rows 6/7 and therefore lands here when the cache cannot answer; the WRITE half is not, which is why row 5 sits above this divider | None — the second call is judged normally |
 | 14 | Mid-rebase, every guard abstains | detached HEAD — there is no branch name to judge | ALLOW (fail-open), logged LOUDLY when the branch is unresolvable rather than merely detached | None — finish or abort the rebase |
 | 13 | The Read tool refuses a file on a stale `main` while you have UNCOMMITTED edits | on `main`, behind `origin/main`, dirty tree | BLOCK. This used to fail open, on the argument that the prescribed `git pull` is not a clean fast-forward when the tree is dirty. That was true of the MESSAGE, not the row: the cure cell always offered a second form, and it works dirty | `git checkout -b <new> origin/main` — uncommitted changes come with you onto the new branch. If git refuses because `origin/main` touched the same files, `git stash` first (never blocked), then retry, then `git stash pop` |
 | 15 | The Read tool refuses a file that exists, on a `main` 18 commits behind | on `main`, behind `origin/main`, clean tree | BLOCK: judged by live ancestry (`git merge-base --is-ancestor`), not hash equality, so a pull takes effect instantly | `git pull origin main`, or `git checkout -b <new> origin/main` |
-| 17 | Reading files on a `main` you just pulled | on `main`, and `origin/main` is an ancestor of HEAD | ALLOW: this is the ONE place a Read is judged differently from a Bash command, because a Read names exactly one file and can be evaluated precisely | None needed |
+| 16 | Read is blocked, so the session reaches for `cat`, `grep` and `ls` instead — and describes a CI workflow set missing a whole workflow that existed upstream | the SIDE DOOR: same tree, same staleness, different tool | BLOCK: `B` is judged here beside `R`, so closing the Read tool no longer opens a shell-shaped hole. The log used to read "read-stale-guard handled", which is worse than no guard — it looks covered | `git checkout -b <new> origin/main` |
+| 10 | A Bash command that WRITES tracked files as a side effect — `npx expo install`, a formatter, codegen, `sed -i`, a `>` redirect | on a `main` known to be BEHIND, and the write is incidental to a command whose stated purpose is something else | BLOCK: inside this row `B` is default-DENY plus row 4's skip list, never a blocklist of readers — a command nobody thought to enumerate is caught by not being on the list, which is the only shape that could have caught this one | `git checkout -b <new> origin/main` BEFORE running anything that may write |
+| 17 | Reading files on a `main` you just pulled | on `main`, and `origin/main` is an ancestor of HEAD | ALLOW: ancestry, not hash equality, so the allow arrives the instant the pull lands rather than when the detached refresher next runs | None needed |
+| 24 | `curl`, `gh pr close` or a test run, immediately after `pnpm wp-checkout-clean-main` landed you on a perfectly current `main` | on `main`, current — no staleness anywhere | ALLOW. This used to BLOCK, from the branch alone: the tool the repo prescribes put the agent here, and the guard whose name says STALE then refused everything off a narrow allowlist for a reason that had nothing to do with staleness. WRITES here are still blocked, by row 5 — that hazard is real at any freshness | None needed |
 | 18 | You keep working on the branch after its PR merged, and the next PR reopens code review already landed | branch whose PR is merged — `merged` is monotonic, so the cached flag is trusted with no TTL | BLOCK across all three tools | `git fetch origin main && git checkout -b <new> origin/main` |
 | 26 | You have uncommitted edits on a branch whose PR just merged | merged branch, dirty tree | BLOCK. This used to fail open too, and that valve never had an argument behind it — row 8's cure carries uncommitted work onto the fresh branch, so nothing was ever trapped. It was drift from the documented design, which `read-stale-guard`'s own class comment still described correctly | `git fetch origin main && git checkout -b <new> origin/main` — your edits come with you |
 | 19 | A shell-only session sails through on a merged branch | merged branch, Bash only — both FILE guards are file-scoped, so Bash reached neither | BLOCK: `merged-branch-bash-guard` exists because `branchAlreadyMerged` was being computed and logged on that very path, then thrown away | `git fetch origin main && git checkout -b <new> origin/main` |
@@ -168,11 +181,11 @@ under. So a case whose row is wrong fails the build rather than misinforming a r
 | 22 | Ordinary work on a branch cut from a current `origin/main` | healthy feature branch | ALLOW — the state every other row exists to push you back into | None needed |
 | 23 | `stale-main-bash-guard` sees a feature branch and hands off | not on `main` — state B belongs to `merged-branch-bash-guard` | ALLOW: the same verdict about the same tree, logged by the guard that is not responsible for it | None needed |
 
-The write-on-main case under row 5 is the one to read beside "Not done": it is a real incident from
-another repo on this toolchain, where `npx expo install` on `main` modified two tracked files and no
-guard fired. It is filed under row 5 because row 5 is the row that SHOULD judge it — the table states
-the policy, and "Not done" states how far the code has got. That is the arrangement that keeps a gap
-visible instead of letting the doc quietly narrow itself to whatever the code happens to do.
+The incidental-write case under row 6 is the one to read first: `npx expo install` on `main`, in
+another repo on this toolchain, modified two tracked files and no guard fired. It is filed under row
+6 rather than row 5 because that is the row that judges Bash on `main` today — a command's stated
+purpose never says whether it also writes, which is why the shape there is default-deny plus the row
+4 skip list rather than a blocklist of readers anybody could have enumerated.
 
 ## How a log line joins to a row
 
@@ -195,7 +208,8 @@ Principle: **these get you OUT or tell you where you are.** They are not "workin
 |---|---|
 | get out | `git checkout -b <new> origin/main` · `git switch -c <new> origin/main` · `git switch <other>` · `git worktree add … -b <new> origin/main` |
 | make `main` current | `pnpm wp-checkout-clean-main` *(the prescribed form — also reaps dead branches/worktrees and sweeps orphan directories)* · `git pull` · `git fetch` · `git checkout main && git pull origin main` *(paired only; still allowed, and still the L0 recovery cure, where no `pnpm` bin can be trusted)* |
-| orient | `git status\|log\|diff\|branch` · `gh pr view\|list\|status\|checks` |
+| orient | `git status\|log\|diff\|branch` · `gh` generally (`pr view`, `pr close`, `pr comment`, `api`, `run watch` — it talks to GitHub, not to this tree) |
+| talk to the network | `curl` · `wget` — a URL is not this repo. NOT the forms that write a local file: `curl -o`, `wget -O`, `gh repo clone`, `gh pr checkout`, `gh run download`, or any `> file` redirect |
 | park work | `git stash` |
 | repair / tooling | `pnpm wp-start-update` · `pnpm wp-start-upsert-pr` · the `wp-*` bins |
 
@@ -231,7 +245,8 @@ standing down.
 That has not always been true, and the section stays here for when it stops being true again:
 a row the code cannot yet honour is listed here rather than rendered as if it were live, the
 same way L1 lists its unreachable `o` row. The three entries this section used to carry were
-row 5's Bash half (now judged from the branch alone, above the cache divider) and the DIRTY-TREE
+row 5's Bash half (shipped, then moved: Bash on `main` is judged on FRESHNESS at rows 6/7, while
+row 5 keeps the unconditional WRITE block) and the DIRTY-TREE
 valves on rows 6 and 8 — both closed, because each of those rows cures with
 `git checkout -b <new> origin/main`, which carries uncommitted changes onto the new branch. A
 dirty tree never trapped anyone; the row 6 message just printed the one cure that could not run
@@ -268,7 +283,8 @@ and the doc follows — it cannot rot into a list of things that were fixed year
 | the rows + the reason→row join | `ai-hook-rules/src/core/l2-rows.ts` | `L2_ROWS`, `l2RowForReason`, `NOT_DONE` |
 | write policy | `ai-hook-rules/src/core/rules/feature-branch-guard.ts` | `check` |
 | read policy | `ai-hook-rules/src/core/rules/read-stale-guard.ts` | `checkStaleMain`, `checkMergedBranch` |
-| stale-main Bash | `ai-hook-rules/src/core/rules/stale-main-bash-guard.ts` | `staleContentRead`, `bareCheckoutOfMain` |
+| stale-main Bash | `ai-hook-rules/src/core/rules/stale-main-bash-guard.ts` | `checkFreshness`, `bareCheckoutOfMain` |
+| the shared freshness predicate | `ai-hook-rules/src/core/rules/main-freshness.ts` | `containsOriginMain`, `summarize` |
 | merged-branch Bash | `ai-hook-rules/src/core/rules/merged-branch-bash-guard.ts` | `isFullyRecovery`, `ALLOWED_GIT_SUBCOMMANDS` |
 | the cache | `rules-config/src/main-sync-status.ts`, `main-sync-file.ts` | `readMainSyncStatus`, `MainSyncStatusFile`, `forgeReachable` |
 | the refresher | `ai-hook-rules/src/core/sync-main.ts` | `refreshMainSync` |