dorfl 0.10.0 → 0.11.0

package/dist/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAC,MAAM,SAAS,CAAC;AACxE,OAAO,EAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAC,MAAM,WAAW,CAAC;AAClD,OAAO,EAAC,GAAG,EAAC,MAAM,UAAU,CAAC;AAC7B,OAAO,EACN,aAAa,EACb,YAAY,GAEZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,oBAAoB,EACpB,6BAA6B,EAC7B,sCAAsC,GACtC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAC,KAAK,EAAC,MAAM,YAAY,CAAC;AACjC,OAAO,EAAC,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AA4DtE;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC9B,aAAqB,EACrB,GAAW,EACX,IAAY;IAEZ,OAAO,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;qCAWqC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC,iBAAiB,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACpD,CAAC;AAED;;sBAEsB;AACtB,SAAS,mBAAmB,CAAC,GAAW;IACvC,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AACvC,CAAC;AAiFD,MAAM,eAAe,GAAkB,EAAC,OAAO,EAAE,MAAM,EAAC,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAyB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,MAAM,GAAG,YAAY,CAAC;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,GAAG;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAErE,8EAA8E;IAC9E,6EAA6E;IAC7E,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,OAAO;IACP,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;QAC7C,GAAG,EAAE,MAAM,CAAC,IAAI;QAChB,aAAa,EAAE,QAAQ;QACvB,MAAM;QACN,SAAS,EAAE,MAAM;QACjB,OAAO,EAAE,MAAM;QACf,GAAG;KACH,CAAC,CAAC;IACH,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,IAAI,mBAAuC,CAAC;IAE5C,IAAI,gBAAgB,EAAE,CAAC;QACtB,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,gFAAgF;QAChF,2BAA2B;QAC3B,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE;YACjE,GAAG;SACH,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,6EAA6E;QAC7E,8DAA8D;QAC9D,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;QAC1D,SAAS,GAAG,IAAI,CAAC;QAEjB,sEAAsE;QACtE,6EAA6E;QAC7E,oEAAoE;QACpE,6EAA6E;QAC7E,kEAAkE;QAClE,oEAAoE;QACpE,MAAM,MAAM,GAAG,6BAA6B,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,sBAAsB,GAAG,IAAI,CAAC;QAC/B,CAAC;aAAM,CAAC;YACP,wEAAwE;YACxE,uEAAuE;YACvE,4EAA4E;YAC5E,4EAA4E;YAC5E,2DAA2D;YAC3D,EAAE;YACF,2EAA2E;YAC3E,0EAA0E;YAC1E,uEAAuE;YACvE,6EAA6E;YAC7E,8DAA8D;YAC9D,4EAA4E;YAC5E,0EAA0E;YAC1E,oCAAoC;YACpC,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,sCAAsC,CAAC;oBACrD,GAAG,EAAE,GAAG;oBACR,MAAM;oBACN,OAAO,EAAE,QAAQ;oBACjB,OAAO,EAAE,MAAM;oBACf,iBAAiB;oBACjB,GAAG;iBACH,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAChC,sBAAsB,GAAG,IAAI,CAAC;gBAC/B,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,mBAAmB,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxE,CAAC;QACF,CAAC;IACF,CAAC;SAAM,CAAC;QACP,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAE1C,uEAAuE;QACvE,4EAA4E;QAC5E,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAc;QACzB,IAAI;QACJ,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;QAClC,MAAM;QACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe;KAC3C,CAAC;IACF,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5B,OAAO;QACN,GAAG;QACH,MAAM;QACN,IAAI;QACJ,aAAa,EAAE,QAAQ;QACvB,UAAU;QACV,MAAM;QACN,MAAM;QACN,SAAS;QACT,sBAAsB;QACtB,mBAAmB;QACnB,OAAO;YACN,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;YAChE,eAAe,CAAC,GAAG,CAAC,CAAC;YACrB,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,MAAiB;IAC5D,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAc,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IAC1C,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC;YACJ,MAAM,CAAC,IAAI,EAAE,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACR,mEAAmE;YACnE,4CAA4C;QAC7C,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC9B,GAAW,EACX,KAAyB;IAEzB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,EAAC,GAAG,OAAO,EAAE,GAAG,KAAK,EAAC,CAAC;IACpC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,SAAS,UAAU,CAClB,UAAkB,EAClB,GAAW,EACX,MAAc,EACd,GAAkC;IAElC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,0EAA0E;QAC1E,IAAI,CAAC;YACJ,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC;IACD,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAC9B,UAAkB,EAClB,GAAW,EACX,GAAkC;IAElC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACJ,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC;IACD,IAAI,CAAC;QACJ,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;AACF,CAAC;AAED,iFAAiF;AACjF,SAAS,kBAAkB,CAC1B,UAAkB,EAClB,MAAc,EACd,GAAkC;IAElC,IAAI,CAAC;QACJ,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;IACD,IAAI,CAAC;QACJ,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACR,uBAAuB;IACxB,CAAC;AACF,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,UAAU,EACV,SAAS,EACT,YAAY,EACZ,MAAM,EACN,aAAa,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAC,MAAM,WAAW,CAAC;AAClD,OAAO,EAAC,GAAG,EAAC,MAAM,UAAU,CAAC;AAC7B,OAAO,EACN,aAAa,EACb,YAAY,GAEZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,oBAAoB,EACpB,6BAA6B,EAC7B,sCAAsC,GACtC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAC,KAAK,EAAC,MAAM,YAAY,CAAC;AACjC,OAAO,EAAC,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AA4DtE;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC9B,aAAqB,EACrB,GAAW,EACX,IAAY;IAEZ,OAAO,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;qCAWqC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC,iBAAiB,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACpD,CAAC;AAED;;sBAEsB;AACtB,SAAS,mBAAmB,CAAC,GAAW;IACvC,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AACvC,CAAC;AAiFD,MAAM,eAAe,GAAkB,EAAC,OAAO,EAAE,MAAM,EAAC,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAyB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,MAAM,GAAG,YAAY,CAAC;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,GAAG;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAErE,8EAA8E;IAC9E,6EAA6E;IAC7E,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,OAAO;IACP,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;QAC7C,GAAG,EAAE,MAAM,CAAC,IAAI;QAChB,aAAa,EAAE,QAAQ;QACvB,MAAM;QACN,SAAS,EAAE,MAAM;QACjB,OAAO,EAAE,MAAM;QACf,GAAG;KACH,CAAC,CAAC;IACH,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,IAAI,mBAAuC,CAAC;IAE5C,IAAI,gBAAgB,EAAE,CAAC;QACtB,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,gFAAgF;QAChF,2BAA2B;QAC3B,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE;YACjE,GAAG;SACH,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,6EAA6E;QAC7E,8DAA8D;QAC9D,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;QAC1D,SAAS,GAAG,IAAI,CAAC;QAEjB,sEAAsE;QACtE,6EAA6E;QAC7E,oEAAoE;QACpE,6EAA6E;QAC7E,kEAAkE;QAClE,oEAAoE;QACpE,MAAM,MAAM,GAAG,6BAA6B,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,sBAAsB,GAAG,IAAI,CAAC;QAC/B,CAAC;aAAM,CAAC;YACP,wEAAwE;YACxE,uEAAuE;YACvE,4EAA4E;YAC5E,4EAA4E;YAC5E,2DAA2D;YAC3D,EAAE;YACF,2EAA2E;YAC3E,0EAA0E;YAC1E,uEAAuE;YACvE,6EAA6E;YAC7E,8DAA8D;YAC9D,4EAA4E;YAC5E,0EAA0E;YAC1E,oCAAoC;YACpC,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,sCAAsC,CAAC;oBACrD,GAAG,EAAE,GAAG;oBACR,MAAM;oBACN,OAAO,EAAE,QAAQ;oBACjB,OAAO,EAAE,MAAM;oBACf,iBAAiB;oBACjB,GAAG;iBACH,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAChC,sBAAsB,GAAG,IAAI,CAAC;gBAC/B,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,mBAAmB,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxE,CAAC;QACF,CAAC;IACF,CAAC;SAAM,CAAC;QACP,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAE1C,uEAAuE;QACvE,4EAA4E;QAC5E,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAc;QACzB,IAAI;QACJ,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;QAClC,MAAM;QACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe;KAC3C,CAAC;IACF,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5B,OAAO;QACN,GAAG;QACH,MAAM;QACN,IAAI;QACJ,aAAa,EAAE,QAAQ;QACvB,UAAU;QACV,MAAM;QACN,MAAM;QACN,SAAS;QACT,sBAAsB;QACtB,mBAAmB;QACnB,OAAO;YACN,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;YAChE,eAAe,CAAC,GAAG,CAAC,CAAC;YACrB,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,MAAiB;IAC5D,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAc,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IAC1C,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC;YACJ,MAAM,CAAC,IAAI,EAAE,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACR,mEAAmE;YACnE,4CAA4C;QAC7C,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC9B,GAAW,EACX,KAAyB;IAEzB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,EAAC,GAAG,OAAO,EAAE,GAAG,KAAK,EAAC,CAAC;IACpC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,sBAAsB,CAC9B,UAAkB,EAClB,GAAW,EACX,GAAkC;IAElC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;IACR,CAAC;IACD,0EAA0E;IAC1E,IAAI,CAAC;QACJ,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACR,8CAA8C;IAC/C,CAAC;IACD,IAAI,CAAC;QACJ,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E,sEAAsE;IACtE,mDAAmD;IACnD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC;YACJ,MAAM,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,mEAAmE;QACpE,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAAW;IAC/B,IAAI,CAAC;QACJ,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,4EAA4E;AAC5E,SAAS,UAAU,CAClB,UAAkB,EAClB,GAAW,EACX,MAAc,EACd,GAAkC;IAElC,sBAAsB,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAC9B,UAAkB,EAClB,GAAW,EACX,GAAkC;IAElC,sBAAsB,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,iFAAiF;AACjF,SAAS,kBAAkB,CAC1B,UAAkB,EAClB,MAAc,EACd,GAAkC;IAElC,IAAI,CAAC;QACJ,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;IACD,IAAI,CAAC;QACJ,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACR,uBAAuB;IACxB,CAAC;AACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dorfl",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/wighawag/dorfl.git",

package/src/cli.ts

@@ -108,7 +108,12 @@ import {harnessTaskReviewGate} from './tasker-review-loop.js';
 import {runVerify} from './verify.js';
 import {renderPrompt} from './prompt.js';
 import {resolvePromptGuidance} from './config.js';
-import {gc, RETAIN_REASON_TEXT} from './gc.js';
+import {
+	gc,
+	resolveArbiterKeyFromCwd,
+	enumerateWorkspaceArbiters,
+	RETAIN_REASON_TEXT,
+} from './gc.js';
 import {
 	runPrdToSpec,
 	type PrdToSpecResult,
@@ -822,6 +827,7 @@ interface GcFlags {
 	ledger?: string;
 	remoteBranches?: boolean;
 	arbiter?: string;
+	allArbiters?: boolean;
 	cwd?: string;
 	dryRun?: boolean;
 	reapStaleLocks?: boolean;
@@ -3391,7 +3397,7 @@ export function buildProgram(): Command {
 		.command('gc')
 		.helpGroup(ADVANCED_GROUP)
 		.description(
-			'Re-apply the provably-safe deletion predicate (ADR \u00a74) across every job worktree under workspacesDir/work/*: reap the provably-safe ones (clean tree AND branch tip reachable on the arbiter \u2014 merged or pushed) via git worktree remove (+ prune, never rm -rf), and report each RETAINED one with a reason. The catch-up for when end-of-job auto-reap did not run (runner crash/kill). --force overrides the predicate (discards un-saved work) \u2014 loud, never default.',
+			'Re-apply the provably-safe deletion predicate (ADR \u00a74) to job worktrees under workspacesDir/work/*: reap the provably-safe ones (clean tree AND branch tip reachable on the arbiter \u2014 merged or pushed) via git worktree remove (+ prune, never rm -rf), and report each RETAINED one with a reason. The catch-up for when end-of-job auto-reap did not run (runner crash/kill). SCOPE: by DEFAULT this is ARBITER-SCOPED \u2014 it acts ONLY on worktrees belonging to the arbiter resolved from the cwd (the same arbiter do --isolated/the mirror uses), so a gc in repo A can never reap repo B\u2019s worktrees. Pass --all-arbiters to sweep across EVERY arbiter (loud + global), or --arbiter <remote-or-url> to target a specific one. --force overrides the predicate (discards un-saved work) and requires --yes \u2014 loud, never default; --all-arbiters --force must be opted into explicitly, never reached by default.',
 		)
 		.option('-c, --config <path>', 'config file path', defaultConfigPath())
 		.option(
@@ -3416,8 +3422,12 @@ export function buildProgram(): Command {
 			'SWEEP the arbiter’s remote work/* BRANCHES instead of job worktrees: delete (via git push --delete, NEVER --force) exactly those PROVABLY MERGED into <arbiter>/main (git merge-base --is-ancestor, the SAME predicate the worktree reaper uses), and RETAIN the rest with a reason. An in-flight/un-merged branch (the recovery point) is NEVER touched. Provider-agnostic plain git — works on a --bare arbiter. The merged-only complement of `requeue --reset`.',
 		)
 		.option(
-			'--arbiter <remote>',
-			'(with --remote-branches) the arbiter git remote whose work/* branches to sweep (default: origin); resolved from --cwd',
+			'--arbiter <remote-or-url>',
+			'SCOPE the worktree sweep to a SPECIFIC arbiter (a remote NAME resolved from --cwd, or a direct arbiter URL) instead of the cwd\u2019s. (With --remote-branches / --ledger it names the arbiter git remote whose work/* branches / locks to sweep; default there: origin.)',
+		)
+		.option(
+			'--all-arbiters',
+			'GLOBAL, LOUD override: sweep worktrees across EVERY arbiter under workspacesDir/work/* (today\u2019s pre-scoping behaviour), not just the cwd\u2019s. Prints a banner naming every arbiter it will act on before doing anything; combining it with --force still requires --yes. This is the destructive cross-repo path \u2014 opt into it explicitly.',
 		)
 		.option(
 			'--cwd <dir>',
@@ -3614,6 +3624,77 @@ export function buildProgram(): Command {
 				return;
 			}
 
+			// SCOPE RESOLUTION (this task): the worktree reaper is ARBITER-SCOPED by
+			// default. `--all-arbiters` restores the GLOBAL (cross-arbiter) sweep behind
+			// a LOUD banner; `--arbiter <remote-or-url>` targets a specific arbiter; the
+			// bare default resolves the arbiter from the cwd (the SAME resolution
+			// `do --isolated` / the mirror uses). With NO resolvable cwd arbiter and
+			// neither flag, we REFUSE (never silently fall back to global) — gc used to
+			// default to global, and a global `gc --force --yes` from repo A could
+			// irreversibly discard repo B's un-pushed work.
+			let arbiterKey: string | undefined;
+			if (flags.allArbiters !== true) {
+				if (flags.arbiter !== undefined && flags.arbiter.trim() !== '') {
+					// An explicit arbiter: a direct URL (contains `://`, a scp-like `:`,
+					// or an absolute path) is keyed directly; otherwise it is a remote NAME
+					// resolved from the cwd (default `origin`).
+					const spec = flags.arbiter.trim();
+					const looksLikeUrl =
+						spec.includes('://') ||
+						spec.startsWith('/') ||
+						/^[^/]+@/.test(spec);
+					// A remote NAME resolves from --cwd if given (consistent with the
+					// other gc sub-modes), else the process cwd.
+					const resolveFrom = flags.cwd ?? process.cwd();
+					arbiterKey = looksLikeUrl
+						? encodeRepoKey(spec)
+						: resolveArbiterKeyFromCwd(resolveFrom, spec, process.env);
+					if (arbiterKey === undefined) {
+						console.error(
+							`refusing: could not resolve arbiter '${spec}' \u2014 not a URL and ` +
+								'no git remote with that name in the cwd. Pass a remote name that ' +
+								'exists here, an arbiter URL, or --all-arbiters.',
+						);
+						process.exit(1);
+					}
+				} else {
+					arbiterKey = resolveArbiterKeyFromCwd(
+						flags.cwd ?? process.cwd(),
+						config.defaultArbiter,
+						process.env,
+					);
+					if (arbiterKey === undefined) {
+						console.error(
+							'refusing: `gc` is now ARBITER-SCOPED and could not resolve an ' +
+								`arbiter from the current directory (no '${config.defaultArbiter}' ` +
+								'git remote, or not inside a repo). It will NOT fall back to a ' +
+								'global cross-arbiter sweep. Run it from a repo with an arbiter ' +
+								'remote, pass --arbiter <remote-or-url>, or --all-arbiters to sweep ' +
+								'every arbiter.',
+						);
+						process.exit(1);
+					}
+				}
+			} else {
+				// GLOBAL sweep: LOUD banner naming EVERY arbiter it will act on before
+				// doing anything (this task's "loud" requirement). Global + --force must be
+				// opted into explicitly (the --yes gate below still applies), never reached
+				// by default.
+				const arbiters = enumerateWorkspaceArbiters(workspacesDir, process.env);
+				console.error(
+					'>> --all-arbiters: operating GLOBALLY across ALL arbiters under ' +
+						`${workspacesDir}/work/* (NOT scoped to the current repo).`,
+				);
+				if (arbiters.length > 0) {
+					console.error('>> arbiters in scope:');
+					for (const a of arbiters) {
+						console.error(`>>   - ${a.url ?? a.key ?? '(malformed mirror)'}`);
+					}
+				} else {
+					console.error('>> (no worktrees found under any arbiter)');
+				}
+			}
+
 			// `--force` discards un-saved work, so it is gated behind an explicit
 			// confirmation (`--yes`) — loud + intentional, NEVER the default (ADR §4).
 			if (flags.force && !flags.yes) {
@@ -3633,6 +3714,7 @@ export function buildProgram(): Command {
 
 			const result = gc({
 				workspacesDir,
+				arbiterKey,
 				force: flags.force === true,
 				note: (message) => console.error(`>> ${message}`),
 			});
@@ -3652,8 +3734,15 @@ export function buildProgram(): Command {
 					`  [retained] ${retained.slug} \u2014 ${RETAIN_REASON_TEXT[retained.reason]}`,
 				);
 			}
+			for (const orphan of result.sweptOrphans) {
+				console.log(`  [swept]    ${orphan.dir} \u2014 ${orphan.kind}`);
+			}
+			const orphanNote =
+				result.sweptOrphans.length > 0
+					? `, ${result.sweptOrphans.length} orphan(s) swept`
+					: '';
 			console.log(
-				`Summary: ${result.reaped.length} reaped, ${result.retained.length} retained.`,
+				`Summary: ${result.reaped.length} reaped, ${result.retained.length} retained${orphanNote}.`,
 			);
 		});
 

package/src/gc.ts

@@ -1,6 +1,7 @@
-import {existsSync, readdirSync, statSync} from 'node:fs';
+import {existsSync, lstatSync, readdirSync, rmSync, statSync} from 'node:fs';
 import {join} from 'node:path';
 import {git, run} from './git.js';
+import {encodeRepoKey, readOriginUrl} from './repo-mirror.js';
 import {
 	JOB_RECORD_FILENAME,
 	jobRecordPath,
@@ -251,6 +252,17 @@ export interface RetainedJob extends GcJob {
 export interface GcOptions {
 	/** The execution working area (config `workspacesDir`, default `~/.dorfl`). */
 	workspacesDir: string;
+	/**
+	 * SCOPE the sweep to a SINGLE arbiter: only worktrees whose hub mirror's
+	 * `origin` encodes to this hub key ({@link encodeRepoKey}) are considered.
+	 * This is the DEFAULT operating mode of the `gc` CLI (the arbiter resolved
+	 * from the cwd) — a `gc` run from repo A must NEVER touch repo B's worktrees.
+	 *
+	 * When UNSET the sweep is GLOBAL (every arbiter under `workspacesDir/work/*`).
+	 * Global is the destructive, cross-repo mode: the CLI only reaches it behind
+	 * the explicit + loud `--all-arbiters` flag, NEVER by defaulting here.
+	 */
+	arbiterKey?: string;
 	/**
 	 * Override the predicate for EVERY job: discard un-saved work. Loud +
 	 * explicit (the CLI guards it behind a confirmation) — NEVER the default.
@@ -261,11 +273,29 @@ export interface GcOptions {
 	env?: NodeJS.ProcessEnv;
 }
 
+/**
+ * An ORPHAN `<workspacesDir>/work/*` entry `gc` swept: a path git never
+ * registered as a worktree and that carries NO job record — a dangling symlink,
+ * or a bare directory left by a run that crashed BEFORE `git worktree add`
+ * registered it (an early `spawn git ENOENT`). It holds no durable work, so it is
+ * always safe to remove; sweeping it self-heals a half-set-up claim instead of
+ * leaving it to wedge the next `worktree add` ("already exists") until a human
+ * `rm`s it. Reported SEPARATELY from reaped jobs (it was never a real job).
+ */
+export interface SweptOrphan {
+	/** Absolute path to the orphan entry that was removed. */
+	dir: string;
+	/** Whether the orphan was a dangling symlink or an un-registered directory. */
+	kind: 'dangling-symlink' | 'orphan-dir';
+}
+
 export interface GcResult {
 	/** The worktrees reaped this sweep (provably safe, or forced). */
 	reaped: ReapedJob[];
 	/** The worktrees retained, each with a clear reason. */
 	retained: RetainedJob[];
+	/** Record-less orphan `work/*` entries swept (dangling symlinks / orphan dirs). */
+	sweptOrphans: SweptOrphan[];
 }
 
 /**
@@ -277,15 +307,42 @@ export interface GcResult {
  * `force: true` overrides the predicate for every job (discard un-saved work) —
  * loud + explicit (the CLI confirms first), NEVER the default. A job whose work
  * is NOT on the arbiter is never auto-removed without `force`.
+ *
+ * SCOPE: when `arbiterKey` is set the sweep considers ONLY worktrees belonging
+ * to that arbiter (the CLI's default, resolved from the cwd) — so a `gc` in repo
+ * A cannot reap repo B's worktrees. An UNSET `arbiterKey` sweeps GLOBALLY across
+ * every arbiter (the CLI reaches that only behind the loud `--all-arbiters`).
  */
 export function gc(options: GcOptions): GcResult {
 	const note = options.note ?? (() => {});
 	const env = options.env;
+	const arbiterKey = options.arbiterKey;
 	const reaped: ReapedJob[] = [];
 	const retained: RetainedJob[] = [];
 
+	// First, self-heal any record-less ORPHAN `work/*` entry (a dangling symlink
+	// or a dir git never registered) so a half-set-up claim does not linger unseen
+	// by the job loop below and wedge the next `worktree add`. Orphans carry NO
+	// durable work and are NOT any repo's real worktree (no record ⇒ no mirror to
+	// attribute to an arbiter), so the arbiter scope does not gate them — they are
+	// bounded, worthless residue either way.
+	const sweptOrphans = sweepOrphans(options.workspacesDir, note);
+
 	for (const job of discoverJobs(options.workspacesDir)) {
 		const mirrorPath = resolveMirrorPath(options.workspacesDir, job);
+
+		// ARBITER SCOPE (the default `gc` mode): when `arbiterKey` is set, consider
+		// ONLY worktrees whose mirror `origin` encodes to that hub key — a `gc` run
+		// from repo A must never reap repo B's worktrees. A job whose mirror origin
+		// is unreadable (a malformed mirror) is SKIPPED under scope (the safe
+		// direction: we cannot prove it belongs to this arbiter, so leave it).
+		if (
+			arbiterKey !== undefined &&
+			jobArbiterKey(mirrorPath, env) !== arbiterKey
+		) {
+			continue;
+		}
+
 		const result = reapJob({
 			dir: job.dir,
 			branch: job.branch,
@@ -310,7 +367,77 @@ export function gc(options: GcOptions): GcResult {
 		note(`Retained ${job.slug}: ${reasonText}.`);
 	}
 
-	return {reaped, retained};
+	return {reaped, retained, sweptOrphans};
+}
+
+/**
+ * Sweep record-less ORPHAN entries under `<workspacesDir>/work/*`: a DANGLING
+ * SYMLINK (its target gone) or a directory with NO job record at either the
+ * sibling or legacy in-tree location. These are the residue of a run that
+ * crashed BETWEEN creating the `work/<id>` path and registering it as a git
+ * worktree (or writing its record) — e.g. an early `spawn git ENOENT`. They hold
+ * no durable work, are invisible to {@link discoverJobs} (which requires a
+ * record), and block the next same-id `worktree add`. Removing them is a bounded
+ * `rmSync` of ONE path each (never a registered worktree — those carry a record
+ * and go through the reap predicate). Best-effort per entry.
+ */
+function sweepOrphans(
+	workspacesDir: string,
+	note: (message: string) => void,
+): SweptOrphan[] {
+	const workDir = join(workspacesDir, 'work');
+	if (!existsSync(workDir)) {
+		return [];
+	}
+	const swept: SweptOrphan[] = [];
+	for (const entry of readdirSync(workDir)) {
+		if (entry.endsWith('.json')) {
+			continue; // a sibling record file, not a work-id entry
+		}
+		const dir = join(workDir, entry);
+		let link;
+		try {
+			link = lstatSync(dir);
+		} catch {
+			continue; // vanished under us
+		}
+		const isSymlink = link.isSymbolicLink();
+		const targetExists = existsSync(dir); // follows the link; false ⇒ dangling
+		const hasRecord =
+			existsSync(jobRecordPath(dir)) ||
+			(targetExists && existsSync(join(dir, JOB_RECORD_FILENAME)));
+		// Orphan iff: a dangling symlink (target gone), OR a record-less entry that
+		// is not a live directory git could own (a stray symlink-to-elsewhere, or a
+		// dir with no record). A record-bearing entry is a real job → leave it to the
+		// reap predicate above.
+		const danglingSymlink = isSymlink && !targetExists;
+		if (hasRecord) {
+			continue;
+		}
+		if (!danglingSymlink) {
+			// A record-less real directory: only sweep it if git does not track it as a
+			// worktree here. `discoverJobs` already skips it (no record), and a
+			// registered worktree always has our record, so a record-less dir is an
+			// orphan. But be conservative: skip a NON-symlink dir that is not empty of
+			// a `.git` pointer only when it looks like a crashed pre-register dir.
+			if (isSymlink && targetExists) {
+				// symlink to a live path but no record → still an orphan link
+			} else if (!link.isDirectory()) {
+				continue; // not a dir, not a dangling link — leave alone
+			} else if (existsSync(join(dir, '.git'))) {
+				continue; // has a git pointer but no record: leave for a human (rare)
+			}
+		}
+		try {
+			rmSync(dir, {recursive: true, force: true});
+			const kind = danglingSymlink ? 'dangling-symlink' : 'orphan-dir';
+			swept.push({dir, kind});
+			note(`Swept orphan work entry ${entry} (${kind}).`);
+		} catch {
+			// best-effort: a permission error surfaces on the next add attempt
+		}
+	}
+	return swept;
 }
 
 /**
@@ -386,6 +513,79 @@ function resolveMirrorPath(workspacesDir: string, job: GcJob): string {
 	return join(workspacesDir, 'repos');
 }
 
+/**
+ * The hub KEY ({@link encodeRepoKey}) of the arbiter a job worktree belongs to,
+ * read from its hub mirror's `origin` URL (the arbiter URL the mirror was cloned
+ * from). This is the SAME identity `do --isolated` / `ensureMirror` key a repo's
+ * arbiter under (`mirrorPath` = `<workspacesDir>/repos/<key>.git`), so a `gc`
+ * scoped to the cwd's arbiter key matches exactly the worktrees cut for that
+ * arbiter. Returns `undefined` when the mirror `origin` cannot be read (a
+ * malformed mirror) — the caller then treats the job as NOT belonging to the
+ * scoped arbiter (the safe direction under a scoped sweep).
+ */
+function jobArbiterKey(
+	mirrorPath: string,
+	env: NodeJS.ProcessEnv | undefined,
+): string | undefined {
+	const originUrl = readOriginUrl(mirrorPath, env);
+	return originUrl === undefined ? undefined : encodeRepoKey(originUrl);
+}
+
+/** One distinct arbiter with worktrees under the work area (for the loud
+ * `--all-arbiters` banner). */
+export interface WorkspaceArbiter {
+	/** The hub key ({@link encodeRepoKey}) — or `undefined` for a malformed mirror. */
+	key?: string;
+	/** The arbiter `origin` URL of the hub mirror, when readable. */
+	url?: string;
+}
+
+/**
+ * Enumerate the DISTINCT arbiters that currently own a worktree under
+ * `<workspacesDir>/work/*` — i.e. the set a GLOBAL (`--all-arbiters`) sweep would
+ * touch. Reads each discovered job's hub mirror `origin` URL and de-duplicates
+ * by hub key. Used ONLY to print the loud banner before a cross-arbiter sweep;
+ * the sweep itself re-derives per-job scope in {@link gc}.
+ */
+export function enumerateWorkspaceArbiters(
+	workspacesDir: string,
+	env: NodeJS.ProcessEnv | undefined,
+): WorkspaceArbiter[] {
+	const seen = new Map<string, WorkspaceArbiter>();
+	for (const job of discoverJobs(workspacesDir)) {
+		const mirrorPath = resolveMirrorPath(workspacesDir, job);
+		const url = readOriginUrl(mirrorPath, env);
+		const key = url === undefined ? undefined : encodeRepoKey(url);
+		const dedupe = key ?? `path:${mirrorPath}`;
+		if (!seen.has(dedupe)) {
+			seen.set(dedupe, {key, url});
+		}
+	}
+	return [...seen.values()];
+}
+
+/**
+ * The hub KEY ({@link encodeRepoKey}) of the arbiter reachable from a working
+ * repo `cwd` via its `<arbiter>` remote (default `origin`), i.e. `encodeRepoKey`
+ * of `git -C <cwd> remote get-url <arbiter>`. This is how the `gc` CLI resolves
+ * the DEFAULT scope from the current directory — the SAME arbiter-resolution the
+ * mirror / `do --isolated` path uses (`ensureMirror`'s `fromRepo` + `arbiter`).
+ * Returns `undefined` when `cwd` is not a git repo or has no such remote (the
+ * CLI then errors rather than silently going global).
+ */
+export function resolveArbiterKeyFromCwd(
+	cwd: string,
+	arbiter: string,
+	env: NodeJS.ProcessEnv | undefined,
+): string | undefined {
+	const res = run('git', ['remote', 'get-url', arbiter], cwd, {env});
+	if (res.status !== 0) {
+		return undefined;
+	}
+	const url = res.stdout.trim();
+	return url === '' ? undefined : encodeRepoKey(url);
+}
+
 /**
  * True iff the working tree has NO uncommitted WORK (tracked, staged, or
  * untracked). The agent's edits and any untracked artefacts count: untracked

package/src/git.ts

@@ -1,6 +1,6 @@
 import {spawnSync, spawn} from 'node:child_process';
-import {mkdirSync} from 'node:fs';
-import {dirname} from 'node:path';
+import {existsSync, mkdirSync, statSync} from 'node:fs';
+import {delimiter, dirname, isAbsolute, join} from 'node:path';
 
 /** Result of running a git (or any) command. */
 export interface RunResult {
@@ -9,6 +9,176 @@ export interface RunResult {
 	stderr: string;
 }
 
+/**
+ * The standard system dirs core tools (`git`, `ssh`, `sh`) live in. Some callers
+ * launch `dorfl` with a CURATED `PATH` (a version-manager / MCP-agent env that
+ * lists only `~/.volta/bin`, `~/.cargo/bin`, `~/.local/bin`, …) that OMITS these.
+ * `dorfl` spawns bare `git` (and git in turn may shell out to `ssh`/`sh` for
+ * hooks and remote transport), so a `PATH` missing `/usr/bin` produces an opaque
+ * mid-run `spawn git ENOENT`. We UNION these onto whatever `PATH` we are given so
+ * core tools resolve even under a curated caller `PATH`, without discarding the
+ * caller's own entries (a project-pinned `git` earlier on `PATH` still wins).
+ */
+const SYSTEM_PATH_DIRS = [
+	'/usr/local/bin',
+	'/usr/bin',
+	'/bin',
+	'/usr/sbin',
+	'/sbin',
+];
+
+/**
+ * `PATH` with {@link SYSTEM_PATH_DIRS} APPENDED (caller entries kept FIRST, so a
+ * pinned tool earlier on `PATH` still wins; missing system dirs are added, not
+ * substituted). Deduplicated, preserving first-seen order.
+ */
+function pathWithSystemDirs(path: string | undefined): string {
+	const seen = new Set<string>();
+	const out: string[] = [];
+	for (const dir of [
+		...(path ? path.split(delimiter) : []),
+		...SYSTEM_PATH_DIRS,
+	]) {
+		if (dir !== '' && !seen.has(dir)) {
+			seen.add(dir);
+			out.push(dir);
+		}
+	}
+	return out.join(delimiter);
+}
+
+/**
+ * Return `env` with `PATH` hardened via {@link pathWithSystemDirs}, so the
+ * spawned tool (and any tool IT shells out to) can find core system binaries
+ * even when the caller's `PATH` omitted `/usr/bin`. Returns a COPY — never
+ * mutates the caller's env object. `PATH` is looked up case-insensitively so a
+ * Windows `Path`/`PATH` split is not silently missed.
+ */
+function envWithSystemPath(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {
+	const key =
+		Object.keys(env).find((k) => k.toUpperCase() === 'PATH') ?? 'PATH';
+	return {...env, [key]: pathWithSystemDirs(env[key])};
+}
+
+/**
+ * Per-effective-PATH cache of the resolved absolute `git` path. Keyed by the
+ * effective PATH (+ any `DORFL_GIT`/`GIT` override) so a DIFFERENT env — e.g. a
+ * test's PATH-prepended `git` shim, or a project that pins its own git — is
+ * resolved AGAINST ITS OWN PATH, never masked by a stale global memo. Bounded in
+ * practice (the process uses a handful of distinct envs) and reset in tests.
+ */
+const gitBinaryCache = new Map<string, string>();
+
+/** Clear the {@link resolveGitBinary} cache (tests only). */
+export function resetResolvedGitBinaryForTest(): void {
+	gitBinaryCache.clear();
+}
+
+/**
+ * Resolve the `git` executable to an ABSOLUTE path for a given `env`, robustly —
+ * so a caller `PATH` that omits `/usr/bin` cannot produce a mid-run `spawn git
+ * ENOENT`, WITHOUT masking a git the caller deliberately put earlier on `PATH`
+ * (a project pin, or a test shim). Order:
+ *
+ *   1. an explicit `DORFL_GIT` / `GIT` env override (an absolute path to a git
+ *      binary), for full operator control;
+ *   2. a probe of the env's OWN `PATH` FIRST (so a shim / pinned git earlier on
+ *      `PATH` wins), then the standard system dirs APPENDED — so `/usr/bin/git`
+ *      is still found when the caller dropped `/usr/bin`, but never AHEAD of the
+ *      caller's own entries.
+ *
+ * Falls back to the bare name `'git'` when nothing resolves (git genuinely
+ * absent) so the spawn still runs and produces the diagnostic path. Cached PER
+ * effective PATH so distinct envs resolve independently.
+ */
+export function resolveGitBinary(env: NodeJS.ProcessEnv = process.env): string {
+	const pathValue = pathWithSystemDirs(env.PATH);
+	const cacheKey = `${env.DORFL_GIT ?? ''}\u0000${env.GIT ?? ''}\u0000${pathValue}`;
+	const cached = gitBinaryCache.get(cacheKey);
+	if (cached !== undefined) {
+		return cached;
+	}
+	const resolved = resolveGitBinaryUncached(env, pathValue);
+	gitBinaryCache.set(cacheKey, resolved);
+	return resolved;
+}
+
+function resolveGitBinaryUncached(
+	env: NodeJS.ProcessEnv,
+	pathValue: string,
+): string {
+	for (const override of [env.DORFL_GIT, env.GIT]) {
+		if (override && isAbsolute(override) && isExecutableFile(override)) {
+			return override;
+		}
+	}
+	const exe = process.platform === 'win32' ? 'git.exe' : 'git';
+	for (const dir of pathValue.split(delimiter)) {
+		const candidate = join(dir, exe);
+		if (isExecutableFile(candidate)) {
+			return candidate;
+		}
+	}
+	return 'git'; // unresolved — let the spawn surface the ENOENT diagnostic
+}
+
+/** True iff `path` is a regular file (a symlink target is followed by statSync). */
+function isExecutableFile(path: string): boolean {
+	try {
+		return existsSync(path) && statSync(path).isFile();
+	} catch {
+		return false;
+	}
+}
+
+/**
+ * Resolve a command + harden its spawn env: bare `'git'` is replaced by the
+ * absolute {@link resolveGitBinary} path, and the spawn env's `PATH` is unioned
+ * with the standard system dirs so git's own child processes (hooks, `ssh`) also
+ * resolve. Any OTHER command is passed through unchanged (only its `PATH` is
+ * hardened). This is the single choke-point both {@link run} and
+ * {@link runAsync} funnel through, so every git spawn in the codebase inherits
+ * the robust resolution for free.
+ */
+function resolveSpawn(
+	command: string,
+	env: NodeJS.ProcessEnv,
+): {command: string; env: NodeJS.ProcessEnv} {
+	const hardenedEnv = envWithSystemPath(env);
+	const resolved = command === 'git' ? resolveGitBinary(hardenedEnv) : command;
+	return {command: resolved, env: hardenedEnv};
+}
+
+/**
+ * Build the spawn-failure message. A plain `spawn git ENOENT` is OPAQUE (it does
+ * not say WHY git was not found); for the `ENOENT` case we surface the effective
+ * `PATH` and point at `DORFL_GIT`, so a curated caller `PATH` that omits the
+ * system dirs is diagnosable at a glance instead of mid-run. Other spawn errors
+ * pass through with the original message.
+ */
+function spawnErrorMessage(
+	command: string,
+	resolved: string,
+	env: NodeJS.ProcessEnv,
+	err: Error & {code?: string},
+): string {
+	if (err.code === 'ENOENT') {
+		const path =
+			env[Object.keys(env).find((k) => k.toUpperCase() === 'PATH') ?? 'PATH'] ??
+			'';
+		const hint =
+			command === 'git'
+				? `Is git installed and on PATH? Set DORFL_GIT to an absolute git path, or add its dir to PATH. `
+				: `Is it installed and on PATH? `;
+		return (
+			`failed to spawn '${command}': not found (tried '${resolved}'). ` +
+			hint +
+			`Effective PATH=${path}`
+		);
+	}
+	return `failed to spawn '${command}': ${err.message}`;
+}
+
 /**
  * Run a command synchronously in `cwd`, capturing output. A non-zero exit is NOT
  * thrown here — callers inspect `status` (claim.sh's exit codes are meaningful).
@@ -19,15 +189,16 @@ export function run(
 	cwd: string,
 	options: {input?: string; env?: NodeJS.ProcessEnv} = {},
 ): RunResult {
-	const result = spawnSync(command, args, {
+	const {command: exe, env} = resolveSpawn(command, options.env ?? process.env);
+	const result = spawnSync(exe, args, {
 		cwd,
 		encoding: 'utf8',
 		input: options.input,
-		env: options.env ?? process.env,
+		env,
 		maxBuffer: 64 * 1024 * 1024,
 	});
 	if (result.error) {
-		throw new Error(`failed to spawn '${command}': ${result.error.message}`);
+		throw new Error(spawnErrorMessage(command, exe, env, result.error));
 	}
 	return {
 		status: result.status ?? -1,
@@ -47,10 +218,11 @@ export function runAsync(
 	cwd: string,
 	options: {input?: string; env?: NodeJS.ProcessEnv} = {},
 ): Promise<RunResult> {
+	const {command: exe, env} = resolveSpawn(command, options.env ?? process.env);
 	return new Promise((resolvePromise, reject) => {
-		const child = spawn(command, args, {
+		const child = spawn(exe, args, {
 			cwd,
-			env: options.env ?? process.env,
+			env,
 		});
 		let stdout = '';
 		let stderr = '';
@@ -61,7 +233,7 @@ export function runAsync(
 			stderr += chunk.toString('utf8');
 		});
 		child.on('error', (err) =>
-			reject(new Error(`failed to spawn '${command}': ${err.message}`)),
+			reject(new Error(spawnErrorMessage(command, exe, env, err))),
 		);
 		child.on('close', (code) => {
 			resolvePromise({status: code ?? -1, stdout, stderr});