dorfl 0.11.1 → 0.11.3

package/dist/arbiter-refs.d.ts

@@ -0,0 +1,139 @@
+/**
+ * **The ONE arbiter-ref refresh + authoritative-read seam** (observation
+ * `checkpoint-path-reports-its-own-write-as-absent`).
+ *
+ * Every "did my own write land?" / "is the branch on the arbiter?" question in
+ * the checkpoint + surface paths used to be answered the same wrong way: run a
+ * PLAIN `git fetch <arbiter>`, then `git rev-parse <arbiter>/<branch>` — i.e.
+ * read a REMOTE-TRACKING ref (`refs/remotes/<arbiter>/…`) and trust it. That is
+ * unsound in the configuration dorfl itself creates for `--isolated` runs, and
+ * it produced two field defects where dorfl reported its OWN successful write as
+ * absent:
+ *
+ *  1. A job worktree is `git worktree add`ed from the BARE HUB MIRROR
+ *     (`workspace.ts` `createJob` → `repo-mirror.ts` `ensureMirror`), whose
+ *     `origin` carries the MIRROR-style refspec `+refs/heads/*:refs/heads/*`.
+ *     So a plain fetch there writes `refs/heads/main`, and **never populates**
+ *     `refs/remotes/origin/main` at all. `rev-parse origin/main` then returns
+ *     whatever a PRIOR explicit-refspec fetch happened to leave behind — a value
+ *     that PREDATES the write being verified. A push that genuinely landed reads
+ *     back as "not our commit ⇒ rejected".
+ *  2. Worse, in that same worktree a plain `git fetch origin` **fails outright**
+ *     (`fatal: refusing to fetch into branch 'refs/heads/work/<slug>' checked out
+ *     at …`), because the mirror refspec's destination IS the branch the worktree
+ *     has checked out. So it refreshes NOTHING, and a follow-up
+ *     `rev-parse <arbiter>/work/<slug>` fails against a ref that never existed —
+ *     reported as "no work branch on <arbiter>" while the branch (and an hour of
+ *     agent work) sits on the arbiter.
+ *
+ * Both call sites now route through this module, which fixes the class rather
+ * than the two instances:
+ *
+ *   - {@link refreshArbiterRefs} prune-fetches with an EXPLICIT, per-branch
+ *     refspec into the `refs/remotes/<arbiter>/…` namespace the readers actually
+ *     read, tolerating the checked-out-branch refusal instead of being silently
+ *     defeated by it.
+ *   - {@link resolveArbiterBranch} answers the sha question from the ARBITER
+ *     ITSELF (`git ls-remote`), so no local ref-namespace/refspec accident can
+ *     make a landed write look absent. The local tracking ref is only a FALLBACK,
+ *     used when the arbiter cannot be reached at all.
+ *
+ * The `ls-remote`-is-authoritative stance is not new — it is the same one
+ * `continue-branch.ts` (`branchAheadOfArbiter`), `workspace.ts`, `integrator.ts`
+ * and `reap-branches.ts` already take for continue-detection and branch reaping.
+ * This module makes it the SHARED default for the post-write verification too,
+ * instead of each site re-deciding.
+ */
+/** How a {@link ResolvedArbiterBranch} sha was obtained — the read's PROVENANCE. */
+export type ArbiterRefAuthority = 
+/** Read from the arbiter itself (`git ls-remote`): AUTHORITATIVE. */
+'arbiter'
+/**
+ * The arbiter could not be reached (offline / broken remote), so the local
+ * remote-tracking ref was used. Best-effort: it may be stale, so a caller
+ * deciding "did MY write land?" must NOT treat a mismatch here as proof of
+ * a loss (see {@link ResolvedArbiterBranch.trustworthy}).
+ */
+ | 'local-fallback'
+/** Neither the arbiter nor any local ref has this branch. */
+ | 'absent';
+/** The resolved state of ONE branch on the arbiter (a single, coherent read). */
+export interface ResolvedArbiterBranch {
+    /** The unqualified branch name that was resolved (e.g. `main`, `work/task-x`). */
+    branch: string;
+    /** Its sha, or `undefined` when the branch exists nowhere we could look. */
+    sha?: string;
+    /** Where {@link sha} came from. */
+    authority: ArbiterRefAuthority;
+    /**
+     * True iff the arbiter answered (`authority` is `arbiter` or `absent` off a
+     * REACHABLE arbiter). When false the read is a stale-capable local fallback,
+     * so a mismatch proves nothing and callers must not report a loss from it.
+     */
+    trustworthy: boolean;
+    /** The `ls-remote` stderr when the arbiter could not be reached (diagnostics). */
+    unreachableDetail?: string;
+}
+/**
+ * PRUNE-FETCH the named arbiter branches into `refs/remotes/<arbiter>/<branch>`
+ * — the namespace every reader in this codebase actually reads — using an
+ * EXPLICIT per-branch refspec.
+ *
+ * Three properties matter, and all three are the reason this is not just
+ * `git fetch <arbiter>`:
+ *
+ *  - **Explicit refspec.** A bare-hub-mirror worktree's `origin` maps
+ *    `+refs/heads/*:refs/heads/*`, so a plain fetch never writes
+ *    `refs/remotes/<arbiter>/*`. Naming the destination makes the refresh work
+ *    identically in a normal clone AND in a mirror worktree.
+ *  - **`--prune`.** A branch DELETED on the arbiter (a `requeue --reset`, a
+ *    merge-reap, a cross-machine `gc`) must disappear from our view too;
+ *    otherwise a stale tracking ref answers a liveness question with a ghost.
+ *  - **Per-branch and SOFT.** Fetching branch-at-a-time means the one refspec
+ *    git refuses (the destination that is checked out in THIS worktree — see the
+ *    module doc) cannot abort the refresh of the others, which is exactly how the
+ *    single combined fetch silently refreshed nothing. Every failure is
+ *    tolerated and reported rather than thrown: this is a REFRESH, and the
+ *    authoritative answer comes from {@link resolveArbiterBranch} anyway.
+ *
+ * Returns the branches that could not be refreshed (for diagnostics only — a
+ * caller should not gate on it, because the authoritative read does not depend
+ * on the refresh succeeding).
+ */
+export declare function refreshArbiterRefs(params: {
+    cwd: string;
+    arbiter: string;
+    /** Unqualified branch names to refresh (e.g. `['main', 'work/task-x']`). */
+    branches: readonly string[];
+    env?: NodeJS.ProcessEnv;
+}): Promise<{
+    failed: string[];
+}>;
+/**
+ * Resolve ONE branch's sha on the arbiter, ARBITER-AUTHORITATIVELY.
+ *
+ * `git ls-remote --heads <arbiter> <branch>` asks the arbiter directly, so the
+ * answer cannot be defeated by a local refspec/namespace accident — which is the
+ * whole point: this is the read a post-write verification uses to decide whether
+ * its OWN push landed, and that decision must never be made from a view that
+ * predates the push.
+ *
+ * Decision order:
+ *   - `ls-remote` exits 0 with a sha ⇒ `{sha, authority: 'arbiter'}` (trustworthy).
+ *   - `ls-remote` exits 0 with EMPTY output ⇒ the arbiter genuinely does not have
+ *     the branch ⇒ `{authority: 'absent'}` (trustworthy: a definite "no").
+ *   - `ls-remote` exits non-zero (unreachable / no such remote) ⇒ fall back to the
+ *     local `refs/remotes/<arbiter>/<branch>`, flagged `trustworthy: false` so a
+ *     caller cannot mistake a stale local read for proof of anything.
+ *
+ * Always call {@link refreshArbiterRefs} first when the caller ALSO needs the
+ * objects locally (a CAS base, a `merge-base` / `rev-list` comparison): a sha
+ * from `ls-remote` names a commit this repo may not have yet.
+ */
+export declare function resolveArbiterBranch(params: {
+    cwd: string;
+    arbiter: string;
+    branch: string;
+    env?: NodeJS.ProcessEnv;
+}): Promise<ResolvedArbiterBranch>;
+//# sourceMappingURL=arbiter-refs.d.ts.map

package/dist/arbiter-refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arbiter-refs.d.ts","sourceRoot":"","sources":["../src/arbiter-refs.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,oFAAoF;AACpF,MAAM,MAAM,mBAAmB;AAC9B,qEAAqE;AACnE,SAAS;AACX;;;;;GAKG;GACD,gBAAgB;AAClB,6DAA6D;GAC3D,QAAQ,CAAC;AAEZ,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACrC,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,SAAS,EAAE,mBAAmB,CAAC;IAC/B;;;;OAIG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAOD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAC,CAAC,CAqB9B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAsDjC"}

package/dist/arbiter-refs.js

@@ -0,0 +1,114 @@
+import { runAsync } from './git.js';
+/** The explicit refspec that maps an arbiter branch into the namespace we READ. */
+function trackingRefspec(arbiter, branch) {
+    return `+refs/heads/${branch}:refs/remotes/${arbiter}/${branch}`;
+}
+/**
+ * PRUNE-FETCH the named arbiter branches into `refs/remotes/<arbiter>/<branch>`
+ * — the namespace every reader in this codebase actually reads — using an
+ * EXPLICIT per-branch refspec.
+ *
+ * Three properties matter, and all three are the reason this is not just
+ * `git fetch <arbiter>`:
+ *
+ *  - **Explicit refspec.** A bare-hub-mirror worktree's `origin` maps
+ *    `+refs/heads/*:refs/heads/*`, so a plain fetch never writes
+ *    `refs/remotes/<arbiter>/*`. Naming the destination makes the refresh work
+ *    identically in a normal clone AND in a mirror worktree.
+ *  - **`--prune`.** A branch DELETED on the arbiter (a `requeue --reset`, a
+ *    merge-reap, a cross-machine `gc`) must disappear from our view too;
+ *    otherwise a stale tracking ref answers a liveness question with a ghost.
+ *  - **Per-branch and SOFT.** Fetching branch-at-a-time means the one refspec
+ *    git refuses (the destination that is checked out in THIS worktree — see the
+ *    module doc) cannot abort the refresh of the others, which is exactly how the
+ *    single combined fetch silently refreshed nothing. Every failure is
+ *    tolerated and reported rather than thrown: this is a REFRESH, and the
+ *    authoritative answer comes from {@link resolveArbiterBranch} anyway.
+ *
+ * Returns the branches that could not be refreshed (for diagnostics only — a
+ * caller should not gate on it, because the authoritative read does not depend
+ * on the refresh succeeding).
+ */
+export async function refreshArbiterRefs(params) {
+    const { cwd, arbiter, branches, env } = params;
+    const failed = [];
+    for (const branch of branches) {
+        const fetched = await runAsync('git', [
+            'fetch',
+            '--quiet',
+            '--prune',
+            arbiter,
+            trackingRefspec(arbiter, branch),
+        ], cwd, { env });
+        if (fetched.status !== 0) {
+            failed.push(branch);
+        }
+    }
+    return { failed };
+}
+/**
+ * Resolve ONE branch's sha on the arbiter, ARBITER-AUTHORITATIVELY.
+ *
+ * `git ls-remote --heads <arbiter> <branch>` asks the arbiter directly, so the
+ * answer cannot be defeated by a local refspec/namespace accident — which is the
+ * whole point: this is the read a post-write verification uses to decide whether
+ * its OWN push landed, and that decision must never be made from a view that
+ * predates the push.
+ *
+ * Decision order:
+ *   - `ls-remote` exits 0 with a sha ⇒ `{sha, authority: 'arbiter'}` (trustworthy).
+ *   - `ls-remote` exits 0 with EMPTY output ⇒ the arbiter genuinely does not have
+ *     the branch ⇒ `{authority: 'absent'}` (trustworthy: a definite "no").
+ *   - `ls-remote` exits non-zero (unreachable / no such remote) ⇒ fall back to the
+ *     local `refs/remotes/<arbiter>/<branch>`, flagged `trustworthy: false` so a
+ *     caller cannot mistake a stale local read for proof of anything.
+ *
+ * Always call {@link refreshArbiterRefs} first when the caller ALSO needs the
+ * objects locally (a CAS base, a `merge-base` / `rev-list` comparison): a sha
+ * from `ls-remote` names a commit this repo may not have yet.
+ */
+export async function resolveArbiterBranch(params) {
+    const { cwd, arbiter, branch, env } = params;
+    const ls = await runAsync('git', ['ls-remote', '--heads', arbiter, branch], cwd, { env });
+    if (ls.status === 0) {
+        // `<sha>\t<ref>` lines. `--heads <branch>` can match several refs when the
+        // name is a glob-ish prefix, so take the line whose ref is EXACTLY ours.
+        const sha = ls.stdout
+            .split('\n')
+            .map((line) => line.trim())
+            .filter((line) => line !== '')
+            .map((line) => line.split(/\s+/))
+            .find(([, ref]) => ref === `refs/heads/${branch}`)?.[0];
+        if (sha !== undefined && sha !== '') {
+            return { branch, sha, authority: 'arbiter', trustworthy: true };
+        }
+        // Reachable arbiter that does NOT have the branch: a definite, trustworthy
+        // "absent" (a stale local ref must not be able to resurrect it).
+        return { branch, authority: 'absent', trustworthy: true };
+    }
+    // Unreachable arbiter: best-effort local read, explicitly NOT trustworthy.
+    const local = await runAsync('git', [
+        'rev-parse',
+        '--verify',
+        '--quiet',
+        `refs/remotes/${arbiter}/${branch}^{commit}`,
+    ], cwd, { env });
+    const localSha = local.status === 0 ? local.stdout.trim() : '';
+    const unreachableDetail = ls.stderr.trim() || `git ls-remote exit ${ls.status}`;
+    if (localSha !== '') {
+        return {
+            branch,
+            sha: localSha,
+            authority: 'local-fallback',
+            trustworthy: false,
+            unreachableDetail,
+        };
+    }
+    return {
+        branch,
+        authority: 'absent',
+        trustworthy: false,
+        unreachableDetail,
+    };
+}
+//# sourceMappingURL=arbiter-refs.js.map

package/dist/arbiter-refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arbiter-refs.js","sourceRoot":"","sources":["../src/arbiter-refs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAiFlC,mFAAmF;AACnF,SAAS,eAAe,CAAC,OAAe,EAAE,MAAc;IACvD,OAAO,eAAe,MAAM,iBAAiB,OAAO,IAAI,MAAM,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAMxC;IACA,MAAM,EAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAC,GAAG,MAAM,CAAC;IAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC7B,KAAK,EACL;YACC,OAAO;YACP,SAAS;YACT,SAAS;YACT,OAAO;YACP,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC;SAChC,EACD,GAAG,EACH,EAAC,GAAG,EAAC,CACL,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IACD,OAAO,EAAC,MAAM,EAAC,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAK1C;IACA,MAAM,EAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAC,GAAG,MAAM,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,QAAQ,CACxB,KAAK,EACL,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,EACzC,GAAG,EACH,EAAC,GAAG,EAAC,CACL,CAAC;IACF,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM;aACnB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;aAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aAChC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,cAAc,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACrC,OAAO,EAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAC,CAAC;QAC/D,CAAC;QACD,2EAA2E;QAC3E,iEAAiE;QACjE,OAAO,EAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAC,CAAC;IACzD,CAAC;IACD,2EAA2E;IAC3E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC3B,KAAK,EACL;QACC,WAAW;QACX,UAAU;QACV,SAAS;QACT,gBAAgB,OAAO,IAAI,MAAM,WAAW;KAC5C,EACD,GAAG,EACH,EAAC,GAAG,EAAC,CACL,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,iBAAiB,GACtB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,sBAAsB,EAAE,CAAC,MAAM,EAAE,CAAC;IACvD,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO;YACN,MAAM;YACN,GAAG,EAAE,QAAQ;YACb,SAAS,EAAE,gBAAgB;YAC3B,WAAW,EAAE,KAAK;YAClB,iBAAiB;SACjB,CAAC;IACH,CAAC;IACD,OAAO;QACN,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,KAAK;QAClB,iBAAiB;KACjB,CAAC;AACH,CAAC"}

package/dist/do.d.ts

@@ -1,5 +1,5 @@
 import type { TaskReviewGate } from './tasker-review-loop.js';
-import { type Harness } from './harness.js';
+import { type AgentTreeReap, type Harness } from './harness.js';
 import { type LedgerReadStrategy } from './ledger-read.js';
 import type { ReviewProvider } from './integrator.js';
 import type { IntegrationMode, PromptGuidance } from './config.js';
@@ -49,6 +49,16 @@ export type DoDorfl = (input: {
      * injected path — the real deadline race lives in `PiHarness.launchAsync`.
      */
     timedOut?: boolean;
+    /**
+     * **The simulated process-tree REAP verdict** for a {@link timedOut} stop
+     * (observation `checkpoint-releases-lock-while-predecessor-agent-still-writes`).
+     * Test-only signal, the sibling of `timedOut`, so an injected agent can drive
+     * the "predecessor could not be verified dead" routing — where the checkpoint
+     * must NOT release the item lock, because the next tick would then onboard a
+     * successor into a working tree the predecessor may still be writing to.
+     * Absent ⇒ nothing was left running (the pre-existing behaviour).
+     */
+    reap?: AgentTreeReap;
 };
 export interface DoOptions {
     /** The raw CLI slug argument: bare (= task), `task:<slug>`, or `spec:<slug>`. */

package/dist/do.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"do.d.ts","sourceRoot":"","sources":["../src/do.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,yBAAyB,CAAC;AAQ5D,OAAO,EAAc,KAAK,OAAO,EAAC,MAAM,cAAc,CAAC;AAGvD,OAAO,EAAa,KAAK,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAerE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AAWpD,OAAO,KAAK,EAAC,eAAe,EAAE,cAAc,EAAC,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAGN,KAAK,QAAQ,EACb,MAAM,eAAe,CAAC;AAqNvB,oDAAoD;AACpD,MAAM,MAAM,SAAS,GAClB,WAAW,GACX,MAAM,GACN,WAAW,GACX,iBAAiB,GACjB,iBAAiB,GACjB,cAAc,GACd,iBAAiB,GACjB,cAAc,GACd,cAAc,GACd,eAAe,GACf,yBAAyB,GACzB,mBAAmB,GACnB,SAAS,GACT,aAAa,GACb,QAAQ,GACR,cAAc,GACd,OAAO,CAAC;AAEX,MAAM,WAAW,QAAQ;IACxB,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,EAAE,SAAS,CAAC;IACnB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB,KAAK;IACL,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,WAAW,SAAS;IACzB,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,4GAA4G;IAC5G,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wFAAwF;IACxF,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAClC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC3C;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC1C;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;mFAC+E;IAC/E,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC;IAC3E;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mFAAmF;IACnF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;2CAEuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,UAAU,oBAAoB;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAgB,SAAQ,oBAAoB;IAC5D,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,0HAA0H;IAC1H,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wFAAwF;IACxF,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAClC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC3C;;;OAGG;IACH,mBAAmB,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC1C;mFAC+E;IAC/E,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC;IAC3E;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC,iFAAiF;IACjF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,sHAAsH;IACtH,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gFAAgF;IAChF,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,kFAAkF;IAClF,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAuDD;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CA4sBrE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAS5D;AAyhBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GACrB,MAAM,GAAG,SAAS,CAOpB;AAED,wBAAsB,eAAe,CACpC,OAAO,EAAE,eAAe,GACtB,OAAO,CAAC,QAAQ,CAAC,CAkSnB;AAkiBD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC5C,yGAAyG;IACzG,MAAM,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,aAAa,EAAE,MAAM,CAAC;CACtB,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,CA4C5C"}
+{"version":3,"file":"do.d.ts","sourceRoot":"","sources":["../src/do.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,yBAAyB,CAAC;AAQ5D,OAAO,EAAc,KAAK,aAAa,EAAE,KAAK,OAAO,EAAC,MAAM,cAAc,CAAC;AAI3E,OAAO,EAAa,KAAK,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAerE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AAWpD,OAAO,KAAK,EAAC,eAAe,EAAE,cAAc,EAAC,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAGN,KAAK,QAAQ,EACb,MAAM,eAAe,CAAC;AAsOvB,oDAAoD;AACpD,MAAM,MAAM,SAAS,GAClB,WAAW,GACX,MAAM,GACN,WAAW,GACX,iBAAiB,GACjB,iBAAiB,GACjB,cAAc,GACd,iBAAiB,GACjB,cAAc,GACd,cAAc,GACd,eAAe,GACf,yBAAyB,GACzB,mBAAmB,GACnB,SAAS,GACT,aAAa,GACb,QAAQ,GACR,cAAc,GACd,OAAO,CAAC;AAEX,MAAM,WAAW,QAAQ;IACxB,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,EAAE,SAAS,CAAC;IACnB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB,KAAK;IACL,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,aAAa,CAAC;CACrB,CAAC;AAEF,MAAM,WAAW,SAAS;IACzB,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,4GAA4G;IAC5G,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wFAAwF;IACxF,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAClC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC3C;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC1C;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;mFAC+E;IAC/E,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC;IAC3E;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mFAAmF;IACnF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;2CAEuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,UAAU,oBAAoB;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAgB,SAAQ,oBAAoB;IAC5D,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,0HAA0H;IAC1H,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wFAAwF;IACxF,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAClC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC3C;;;OAGG;IACH,mBAAmB,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC1C;mFAC+E;IAC/E,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC;IAC3E;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC,iFAAiF;IACjF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,sHAAsH;IACtH,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gFAAgF;IAChF,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,kFAAkF;IAClF,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAuDD;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CA8sBrE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAS5D;AAkoBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GACrB,MAAM,GAAG,SAAS,CAOpB;AAED,wBAAsB,eAAe,CACpC,OAAO,EAAE,eAAe,GACtB,OAAO,CAAC,QAAQ,CAAC,CAkSnB;AAoiBD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC5C,yGAAyG;IACzG,MAAM,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,aAAa,EAAE,MAAM,CAAC;CACtB,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,CA4C5C"}

package/dist/do.js

@@ -7,6 +7,7 @@ import { resolveSlug, SlugResolutionError, workBranchRef, } from './slug-namespa
 import { performTask } from './tasking.js';
 import { resolveTask, buildAgentPrompt, resolveContinueContext, resolvePromptGuidanceForItem, PromptError, } from './prompt.js';
 import { NullHarness } from './harness.js';
+import { acquireWorktreeWriterLock } from './worktree-writer-lock.js';
 import { PiHarness } from './pi-harness.js';
 import { launchWithOptionalWatch } from './agent-launch.js';
 import { ledgerRead } from './ledger-read.js';
@@ -98,6 +99,19 @@ function deadlineAutoContinueReason(params) {
         `tick continues from the branch tip.`);
 }
 function deadlineSurfaceReason(params) {
+    if (params.kind === 'unreaped') {
+        // The auto-continue path is BLOCKED, not merely skipped: releasing the lock
+        // would let a successor onboard into a worktree a live predecessor may still
+        // be writing to (observation
+        // `checkpoint-releases-lock-while-predecessor-agent-still-writes`). The work
+        // is saved and pushed; only the hand-off is withheld.
+        return (`deadline checkpoint (agent NOT verifiably stopped): '${params.slug}' hit ` +
+            'the dorfl-internal deadline and its WIP was saved + pushed, but the agent ' +
+            'process tree could not be confirmed dead, so the lock was NOT released and ' +
+            'no successor was dispatched — a second agent in the same working tree can ' +
+            'clobber or silently absorb the first one\u2019s edits. ' +
+            `${params.detail ?? ''}`.trim());
+    }
     if (params.kind === 'no-progress') {
         return (`deadline checkpoint (no progress / ceiling): '${params.slug}' hit ` +
             `the dorfl-internal deadline WITHOUT any work-branch progress this ` +
@@ -680,6 +694,7 @@ export async function performDo(options) {
             cwd: tree.dir,
             arbiter: tree.arbiterRemote,
             maxAutoCheckpoints: options.maxAutoCheckpoints ?? 5,
+            reap: agent.reap,
             env,
             note,
         });
@@ -1236,6 +1251,39 @@ async function runDoAgent(options, cwd, prompt, slug) {
         return options.dorfl({ cwd, prompt, slug, env: options.env });
     }
     const harness = options.harness ?? new NullHarness();
+    // WORKING-TREE SENTINEL (observation
+    // `checkpoint-releases-lock-while-predecessor-agent-still-writes`): the item
+    // lock guards the ITEM; this guards the TREE. A deadline checkpoint releases the
+    // item lock so the next tick can continue the task in the SAME worktree, so the
+    // item lock alone cannot keep a successor out while a predecessor is still
+    // alive. Refuse to launch a second agent into a tree that already has a LIVE
+    // writer, independently of the reap. A dead holder's sentinel is stale and taken
+    // over, so a crashed runner never poisons the worktree.
+    const writer = acquireWorktreeWriterLock({ dir: cwd, slug, env: options.env });
+    if (!writer.acquired) {
+        return { ok: false, detail: writer.reason };
+    }
+    try {
+        return await launchAgentUnderWriterLock({
+            options,
+            cwd,
+            prompt,
+            slug,
+            harness,
+        });
+    }
+    finally {
+        writer.release();
+    }
+}
+/**
+ * The actual harness launch, run while this process holds the worktree writer
+ * sentinel (see {@link runDoAgent}). Split out purely so the sentinel's
+ * acquire/release brackets the launch in a `try/finally` without indenting the
+ * whole body.
+ */
+async function launchAgentUnderWriterLock(params) {
+    const { options, cwd, prompt, slug, harness } = params;
     // Convert the dorfl-internal deadline (minutes) into a wall-clock epoch-ms so
     // the harness (`launchAsync`) can race the child against it (spec
     // `graceful-pre-timeout-wip-checkpoint`). Absent ⇒ no deadline; a run that
@@ -1269,6 +1317,10 @@ async function runDoAgent(options, cwd, prompt, slug) {
         detail: launched.detail,
         output: launched.output,
         timedOut: launched.timedOut,
+        // The harness's PROOF that a deadline-stopped agent's process tree is gone.
+        // Threaded to {@link routeDeadlineCheckpoint}, which refuses to release the
+        // item lock without it.
+        reap: launched.reap,
     };
 }
 /**
@@ -1280,7 +1332,24 @@ async function runDoAgent(options, cwd, prompt, slug) {
  * and remote forms route a deadline stop identically.
  */
 async function routeDeadlineCheckpoint(params) {
-    const { slug, branch, cwd, arbiter, maxAutoCheckpoints, env, note } = params;
+    const { slug, branch, cwd, arbiter, maxAutoCheckpoints, reap, env, note } = params;
+    // 0. THE PREDECESSOR MUST BE DEAD BEFORE THE LOCK CAN MOVE.
+    //
+    // The item lock guards the ITEM; nothing guards the WORKING TREE. So if we
+    // released the lock while the checkpointed agent's tree were still alive, the
+    // next tick would onboard a successor into the very worktree the predecessor is
+    // still writing to — one lock, one working tree, two live writers. That was
+    // observed in the field: a predecessor kept writing for four minutes into its
+    // successor's run, and its last write landed on a file the successor had already
+    // read as clean in its opening `git status`.
+    //
+    // A reap we could not VERIFY is therefore a hard stop for the auto-continue
+    // path. We still SAVE the work below (never lose work) and still surface the
+    // item, but we do not hand the tree to anybody else.
+    const predecessorGone = reap === undefined || reap.reaped;
+    if (reap !== undefined && reap.escalatedToSigkill && reap.reaped) {
+        note(`Deadline checkpoint for '${slug}': ${reap.detail}`);
+    }
     // 1. ALWAYS save the WIP first: commit any residue + push the work branch.
     const savedReason = `deadline checkpoint save for '${slug}'`;
     const saved = await saveDeadlineCheckpoint({
@@ -1305,7 +1374,9 @@ async function routeDeadlineCheckpoint(params) {
         branch,
         env,
     });
-    if (madeProgressThisSession && checkpointCount <= maxAutoCheckpoints) {
+    if (predecessorGone &&
+        madeProgressThisSession &&
+        checkpointCount <= maxAutoCheckpoints) {
         // AUTO-CONTINUE: release the lock via the SAME default keep+continue path
         // `requeue` uses (no --reset, no --reconcile, no sidecar). The branch is
         // KEPT on the arbiter so the next claim continues from its tip.
@@ -1322,9 +1393,25 @@ async function routeDeadlineCheckpoint(params) {
             note,
         });
         if (returned.moved) {
+            // Derive this line from the SINGLE state `returnToBacklog` resolved, never
+            // from an independent assumption. It used to assert "the next tick continues
+            // from <branch>" unconditionally, which contradicted the requeue's own
+            // "'<slug>' has no work branch on <arbiter> — nothing to continue from" line
+            // emitted two lines earlier. Both cannot be true, and acting on the wrong one
+            // re-drives the task from scratch and discards the saved work (observation
+            // `checkpoint-path-reports-its-own-write-as-absent`). One resolved state, one
+            // story: mutually contradictory lines are worse than emitting nothing.
+            const continueFrom = returned.continueBranch;
+            const continuation = continueFrom === undefined || continueFrom.aheadOfMain
+                ? `lock released so the next tick continues from ${continueFrom?.branch ?? branch}`
+                : continueFrom.trustworthy
+                    ? 'lock released; the arbiter has no work to continue from, so the next ' +
+                        'tick starts this item fresh'
+                    : `lock released; the arbiter could not be read to confirm ${continueFrom.branch}, ` +
+                        'so do NOT assume the work is gone — check the branch before re-driving';
             const message = `Auto-continued '${slug}' at the dorfl-internal deadline (checkpoint ` +
                 `${checkpointCount}/${maxAutoCheckpoints}): WIP saved + branch pushed, ` +
-                `lock released so the next tick continues from ${branch}. ${reason}`;
+                `${continuation}. ${reason}`;
             note(message);
             return {
                 exitCode: 0,
@@ -1341,14 +1428,16 @@ async function routeDeadlineCheckpoint(params) {
     // SURFACE: mark the lock stuck via the whole applyNeedsAttentionTransition
     // (save + push + stuck). The WIP was already saved above; a second save is
     // idempotent (empty commit is skipped inside routeToNeedsAttention).
-    const surfaceReason = madeProgressThisSession
-        ? deadlineSurfaceReason({
-            slug,
-            kind: 'ceiling',
-            count: checkpointCount,
-            max: maxAutoCheckpoints,
-        })
-        : deadlineSurfaceReason({ slug, kind: 'no-progress' });
+    const surfaceReason = !predecessorGone
+        ? deadlineSurfaceReason({ slug, kind: 'unreaped', detail: reap?.detail })
+        : madeProgressThisSession
+            ? deadlineSurfaceReason({
+                slug,
+                kind: 'ceiling',
+                count: checkpointCount,
+                max: maxAutoCheckpoints,
+            })
+            : deadlineSurfaceReason({ slug, kind: 'no-progress' });
     const routed = await ledgerWrite.applyNeedsAttentionTransition({
         cwd,
         slug,
@@ -1358,10 +1447,14 @@ async function routeDeadlineCheckpoint(params) {
         note,
     });
     const report = routed.moved ? routeReport(routed, branch) : undefined;
-    const message = routed.moved
-        ? `Surfaced '${slug}' at the deadline checkpoint (${madeProgressThisSession
+    const why = !predecessorGone
+        ? 'the checkpointed agent could not be verified dead'
+        : madeProgressThisSession
             ? `ceiling ${checkpointCount}/${maxAutoCheckpoints}`
-            : 'no progress this session'}); ${report.fragment}. ${surfaceReason}`
+            : 'no progress this session';
+    const message = routed.moved
+        ? `Surfaced '${slug}' at the deadline checkpoint (${why}); ` +
+            `${report.fragment}. ${surfaceReason}`
         : `Could not surface '${slug}' at the deadline checkpoint ` +
             `(${routed.reasonNotMoved ?? 'unknown'}). ${surfaceReason}`;
     note(message);
@@ -1963,6 +2056,7 @@ async function runRemotePipeline(options, tree, slug, note, env) {
             cwd,
             arbiter: arbiterRemote,
             maxAutoCheckpoints: options.maxAutoCheckpoints ?? 5,
+            reap: agent.reap,
             env,
             note,
         });