carson 3.9.0 → 3.10.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ffbada076dd17e9f8ae9a85e9abce9abbc84e23b71324c8cde1ffec1db537071
-  data.tar.gz: 4654c5d248f856818ffa83600b4db21838c0f665bb6a16f2d45d566643312ec6
+  metadata.gz: 5e11a0b3de1e579e809455fca256a40882a226ae914e296cf0a670f0268c6ee3
+  data.tar.gz: 2b6bfb9124d69bec88912fae936d7394d1bb77a5e37fed2653e026fff14a531b
 SHA512:
-  metadata.gz: b4e517ccc14a75a2389bf5743fdd095b2796605c5c7fbeb4d12af4b0f237f370a275e2ff244436da4439b10e44b38a7aceae44c26b858d2224a8b0a25b1d193f
-  data.tar.gz: a1de0764868ee6fda99d4f74f5ec10dfc2071a84e65102ab77749e83a8307aee37aa661d98b3670e1d62aeda28f1be1a05093283ac697de3a39ad542256e6da9
+  metadata.gz: b2126c426ece435a94905532f7e7776cc873debb62aa57ba5267ec830a5995da330db79ebe28c5939835c1e15084132d60f0084abd7bee6e1d7780ec35fc288d
+  data.tar.gz: 5d4d9442043aa1abb923714ceabacae0edadba4b55b870a85cf2d0697364d92951299e86d85641202671ec0ceddd30407e52d8d2db8a65bd55782214ab45aa8f

data/RELEASE.md

@@ -5,6 +5,28 @@ Release-note scope rule:
 - `RELEASE.md` records only version deltas, breaking changes, and migration actions.
 - Operational usage guides live in `MANUAL.md` and `API.md`.
 
+## 3.10.1
+
+### What changed
+
+- **CWD guard recovery points to main worktree** — the recovery command in the CWD safety block now uses `git rev-parse --git-common-dir` to find the main repository root, not the current worktree's root. Previously, when invoked from inside a worktree, the recovery command would `cd` back to the worktree itself instead of the main repo.
+
+## 3.10.0 — CWD Safety Guard
+
+### What changed
+
+- **CWD-inside-worktree guard** — `carson worktree remove` now detects when the caller's working directory is inside the worktree being removed, and blocks with `EXIT_BLOCK` instead of proceeding. This eliminates the #1 agent session crash scenario: removing a worktree directory while the shell is inside it kills the shell permanently.
+- **Recovery command** — the block message includes the exact recovery: `cd <repo_root> && carson worktree remove <name>`.
+
+### UX
+
+- No change when the caller's CWD is outside the worktree — removal proceeds normally.
+- When blocked, the error is clear and the recovery is one command.
+
+### Migration
+
+- No breaking changes. New safety guard — previously dangerous operations now fail safely.
+
 ## 3.9.0 — Agent Coordination Signals
 
 ### What changed

data/VERSION

@@ -1 +1 @@
-3.9.0
+3.10.1

data/lib/carson/runtime/local/worktree.rb

@@ -133,6 +133,18 @@ module Carson
 					)
 				end
 
+				# Safety: refuse if the caller's shell CWD is inside the worktree.
+				# Removing a directory while a shell is inside it kills the shell permanently.
+				if cwd_inside_worktree?( worktree_path: resolved_path )
+					safe_root = main_worktree_root
+					return worktree_finish(
+						result: { command: "worktree remove", status: "block", name: File.basename( resolved_path ),
+							error: "current working directory is inside this worktree",
+							recovery: "cd #{safe_root} && carson worktree remove #{File.basename( resolved_path )}" },
+						exit_code: EXIT_BLOCK, json_output: json_output
+					)
+				end
+
 				branch = worktree_branch( path: resolved_path )
 				puts_verbose "worktree_remove: path=#{resolved_path} branch=#{branch} force=#{force}"
 
@@ -235,6 +247,27 @@ module Carson
 				end
 			end
 
+			# Returns true when the process CWD is inside the given worktree path.
+			# This detects the most common session-crash scenario: removing a worktree
+			# while the caller's shell is inside it.
+			def cwd_inside_worktree?( worktree_path: )
+				cwd = Dir.pwd
+				normalised_wt = File.join( worktree_path, "" )
+				cwd == worktree_path || cwd.start_with?( normalised_wt )
+			rescue StandardError
+				false
+			end
+
+			# Returns the main (non-worktree) repository root.
+			# Uses git-common-dir to find the shared .git directory, then takes its parent.
+			# Falls back to repo_root if detection fails.
+			def main_worktree_root
+				common_dir, _, success, = git_run( "rev-parse", "--path-format=absolute", "--git-common-dir" )
+				return File.dirname( common_dir.strip ) if success && !common_dir.strip.empty?
+
+				repo_root
+			end
+
 			# Resolves a worktree path: if it's a bare name, look under .claude/worktrees/.
 			def resolve_worktree_path( worktree_path: )
 				return File.expand_path( worktree_path ) if worktree_path.include?( "/" )

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: carson
 version: !ruby/object:Gem::Version
-  version: 3.9.0
+  version: 3.10.1
 platform: ruby
 authors:
 - Hailei Wang