carson 3.9.0 → 3.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ffbada076dd17e9f8ae9a85e9abce9abbc84e23b71324c8cde1ffec1db537071
-  data.tar.gz: 4654c5d248f856818ffa83600b4db21838c0f665bb6a16f2d45d566643312ec6
+  metadata.gz: b0a28061ca9078e4ba0cf70626b209da67a9b85b6af31414d2a98e7f7e7abd36
+  data.tar.gz: de84e7e100d34a35ca9d844e34235eaf2e5b9dcf5071d2b651f28ee4bf83d3e6
 SHA512:
-  metadata.gz: b4e517ccc14a75a2389bf5743fdd095b2796605c5c7fbeb4d12af4b0f237f370a275e2ff244436da4439b10e44b38a7aceae44c26b858d2224a8b0a25b1d193f
-  data.tar.gz: a1de0764868ee6fda99d4f74f5ec10dfc2071a84e65102ab77749e83a8307aee37aa661d98b3670e1d62aeda28f1be1a05093283ac697de3a39ad542256e6da9
+  metadata.gz: 42ac93cfe9c110636f1327e2cf0a1cbd1fc4ad1cb258d745e3c487984153f95e3ec5ebe70016214d8f8a63de3ee13c8a248afedd6a6710277019011f5cf995d2
+  data.tar.gz: a64696f982dbe5947a333cf0fd2c94744a739b26dde0a60593f322a368ea9a6b371e6901007c762c012a810fbcb2702fcfc23d8b9543c51ffa966d4a83b97b6f

data/RELEASE.md

@@ -5,6 +5,22 @@ Release-note scope rule:
 - `RELEASE.md` records only version deltas, breaking changes, and migration actions.
 - Operational usage guides live in `MANUAL.md` and `API.md`.
 
+## 3.10.0 — CWD Safety Guard
+
+### What changed
+
+- **CWD-inside-worktree guard** — `carson worktree remove` now detects when the caller's working directory is inside the worktree being removed, and blocks with `EXIT_BLOCK` instead of proceeding. This eliminates the #1 agent session crash scenario: removing a worktree directory while the shell is inside it kills the shell permanently.
+- **Recovery command** — the block message includes the exact recovery: `cd <repo_root> && carson worktree remove <name>`.
+
+### UX
+
+- No change when the caller's CWD is outside the worktree — removal proceeds normally.
+- When blocked, the error is clear and the recovery is one command.
+
+### Migration
+
+- No breaking changes. New safety guard — previously dangerous operations now fail safely.
+
 ## 3.9.0 — Agent Coordination Signals
 
 ### What changed

data/VERSION

@@ -1 +1 @@
-3.9.0
+3.10.0

data/lib/carson/runtime/local/worktree.rb

@@ -133,6 +133,17 @@ module Carson
 					)
 				end
 
+				# Safety: refuse if the caller's shell CWD is inside the worktree.
+				# Removing a directory while a shell is inside it kills the shell permanently.
+				if cwd_inside_worktree?( worktree_path: resolved_path )
+					return worktree_finish(
+						result: { command: "worktree remove", status: "block", name: File.basename( resolved_path ),
+							error: "current working directory is inside this worktree",
+							recovery: "cd #{repo_root} && carson worktree remove #{File.basename( resolved_path )}" },
+						exit_code: EXIT_BLOCK, json_output: json_output
+					)
+				end
+
 				branch = worktree_branch( path: resolved_path )
 				puts_verbose "worktree_remove: path=#{resolved_path} branch=#{branch} force=#{force}"
 
@@ -235,6 +246,17 @@ module Carson
 				end
 			end
 
+			# Returns true when the process CWD is inside the given worktree path.
+			# This detects the most common session-crash scenario: removing a worktree
+			# while the caller's shell is inside it.
+			def cwd_inside_worktree?( worktree_path: )
+				cwd = Dir.pwd
+				normalised_wt = File.join( worktree_path, "" )
+				cwd == worktree_path || cwd.start_with?( normalised_wt )
+			rescue StandardError
+				false
+			end
+
 			# Resolves a worktree path: if it's a bare name, look under .claude/worktrees/.
 			def resolve_worktree_path( worktree_path: )
 				return File.expand_path( worktree_path ) if worktree_path.include?( "/" )

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: carson
 version: !ruby/object:Gem::Version
-  version: 3.9.0
+  version: 3.10.0
 platform: ruby
 authors:
 - Hailei Wang