@goodandready/dsh-github-ops 0.2.6 → 0.2.7

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 Notable changes to `@goodandready/dsh-github-ops`.
 
+## 0.2.7
+
+### Added
+- **Git Worktrees Support** (#47): porcelain worktrees inventory parsing (`parseWorktrees`), `worktreeAdd` and `worktreeRemove` actions with confirm protection, and UI worktree switching bar in Source Control tab.
+- **Automated Release Preflight** (#65): `gh_release_preflight` tool validating package version, cordis.patch.yml alignment, changelog release sections, 3-language READMEs (EN, RU, ZH), package bundle size limits (<=256 KiB), and git index hygiene.
+
 ## 0.2.6
 
 ### Fixed

package/lib/client.js

@@ -104,6 +104,7 @@ window.__ModuleLoader__.load({
       scmNoChanges: 'Nothing staged or changed',
       scmBehindHint: 'Behind the upstream: sync pulls with rebase, then pushes',
       scmPushBranch: 'Push branch',
+      scmWorktrees: 'Worktrees',
       scmRepoPath: 'Repository path (optional)',
       scmRepoPathHint: 'Absolute path; empty means the session workspace',
       prBarBranch: 'to',
@@ -205,6 +206,7 @@ window.__ModuleLoader__.load({
       scmNoChanges: '没有已暂存或已修改的内容',
       scmBehindHint: '落后于上游：同步会先 rebase 拉取，再推送',
       scmPushBranch: '推送分支',
+      scmWorktrees: '工作树',
       scmRepoPath: '仓库路径（可选）',
       scmRepoPathHint: '绝对路径；留空则使用会话工作区',
       prBarBranch: '→',
@@ -428,6 +430,21 @@ window.__ModuleLoader__.load({
         )),
       )
 
+      const worktreeBar = (payload.worktrees && payload.worktrees.length > 0)
+        ? React.createElement('div', { className: 'gho-scm-bar' },
+          React.createElement('span', { className: 'gho-scm-counts' }, t('scmWorktrees')),
+          payload.worktrees.map((wt) => {
+            const label = wt.branch ? `${wt.branch} (${wt.path.split('/').pop()})` : (wt.path.split('/').pop() || wt.path)
+            const isCurrent = wt.path === payload.cwd
+            return button(
+              isCurrent ? `● ${label}` : label,
+              () => { if (!isCurrent) rememberPath(wt.path) },
+              { disabled: isCurrent || Boolean(busy) },
+            )
+          }),
+        )
+        : null
+
       const stashBar = React.createElement('div', { className: 'gho-scm-bar' },
         React.createElement('input', {
           type: 'text',
@@ -479,6 +496,7 @@ window.__ModuleLoader__.load({
           : null,
         branchBar,
         stashBar,
+        worktreeBar,
         React.createElement('div', { className: 'gho-scm-meta' },
           React.createElement('span', null, `${t('scmTags')}: ${(payload.tags || []).join(', ') || '—'}`),
         ),

package/lib/routes.js

@@ -10,7 +10,7 @@ import { join as joinPath } from 'node:path'
 
 import { statusPayload, isTrustedRequest, sendJson } from './status.js'
 import { buildAction, validateCwd } from './scm-write.js'
-import { parseStatus, parseBranches, parseStashes, parseCount, scmPayload, mergeStateFrom } from './scm.js'
+import { parseStatus, parseBranches, parseStashes, parseWorktrees, parseCount, scmPayload, mergeStateFrom } from './scm.js'
 import { listIssues } from './tools/issues.js'
 import { listRuns } from './tools/actions.js'
 import { listNotifications, repoTreeView } from './tools/panel-data.js'
@@ -179,11 +179,12 @@ export function registerRoutes(ctx, deps = {}) {
             ahead = aheadAnswer.code === 0 ? parseCount(aheadAnswer.stdout) : null
             behind = behindAnswer.code === 0 ? parseCount(behindAnswer.stdout) : null
           }
-          const [statusAnswer, branchesAnswer, tagsAnswer, stashesAnswer] = await Promise.all([
+          const [statusAnswer, branchesAnswer, tagsAnswer, stashesAnswer, worktreesAnswer] = await Promise.all([
             git(['status', '--porcelain=v1'], { cwd }),
             git(['branch', '--format=%(refname:short)\t%(HEAD)'], { cwd }),
             git(['tag', '--list'], { cwd }),
             git(['stash', 'list', '--format=%gd\t%gs'], { cwd }),
+            git(['worktree', 'list', '--porcelain'], { cwd }),
           ])
           const gitDirAnswer = await git(['rev-parse', '--absolute-git-dir'], { cwd })
           const gitDir = gitDirAnswer.code === 0 ? gitDirAnswer.stdout.trim() : joinPath(cwd, '.git')
@@ -203,6 +204,7 @@ export function registerRoutes(ctx, deps = {}) {
             branches: parseBranches(branchesAnswer.code === 0 ? branchesAnswer.stdout : ''),
             tags: tagsAnswer.code === 0 ? tagsAnswer.stdout.split('\n').map((t) => t.trim()).filter(Boolean).slice(0, 50) : [],
             stashes: parseStashes(stashesAnswer.code === 0 ? stashesAnswer.stdout : ''),
+            worktrees: parseWorktrees(worktreesAnswer.code === 0 ? worktreesAnswer.stdout : ''),
             merge,
           }))
         },

package/lib/scm.js

@@ -76,6 +76,42 @@ export function parseStashes(text) {
   })
 }
 
+/** Parse output of `git worktree list --porcelain`. */
+export function parseWorktrees(text) {
+  const chunks = String(text || '').trim().split(/\n\s*\n/)
+  const worktrees = []
+  for (const chunk of chunks) {
+    if (!chunk.trim()) continue
+    const lines = chunk.split('\n')
+    let path = ''
+    let head = ''
+    let branch = ''
+    let bare = false
+    let detached = false
+    let locked = false
+    let lockReason = ''
+    let prunable = false
+
+    for (const line of lines) {
+      if (line.startsWith('worktree ')) path = line.slice(9).trim()
+      else if (line.startsWith('HEAD ')) head = line.slice(5).trim()
+      else if (line.startsWith('branch ')) branch = line.slice(7).trim().replace(/^refs\/heads\//, '')
+      else if (line === 'bare') bare = true
+      else if (line === 'detached') detached = true
+      else if (line.startsWith('locked')) {
+        locked = true
+        lockReason = line.slice(6).trim()
+      } else if (line.startsWith('prunable')) {
+        prunable = true
+      }
+    }
+    if (path) {
+      worktrees.push({ path, head, branch, bare, detached, locked, lockReason: lockReason || undefined, prunable })
+    }
+  }
+  return worktrees
+}
+
 /** Counts from `git rev-list --count <range>`. */
 export function parseCount(text) {
   const value = Number.parseInt(String(text || '').trim(), 10)
@@ -87,7 +123,7 @@ export function parseCount(text) {
  * ahead/behind, and that is reported as such rather than as an error.
  */
 export function scmPayload({
-  cwd, branch, upstream, ahead, behind, status, branches, tags, stashes, merge, error,
+  cwd, branch, upstream, ahead, behind, status, branches, tags, stashes, worktrees, merge, error,
 } = {}) {
   return {
     cwd: cwd || '',
@@ -100,6 +136,7 @@ export function scmPayload({
     branches: Array.isArray(branches) ? branches : [],
     tags: Array.isArray(tags) ? tags : [],
     stashes: Array.isArray(stashes) ? stashes : [],
+    worktrees: Array.isArray(worktrees) ? worktrees : [],
     mergeState: merge || { inProgress: false, kind: '' },
     error: error ? String(error).slice(0, 300) : '',
   }

package/lib/tools/register-core.js

@@ -1,3 +1,4 @@
+import { runReleasePreflight } from './release-preflight.js'
 // Core tool registrations: repository and file reads, releases, tags, the guarded
 // generic API pass-through, and repository creation/edits.
 //
@@ -332,4 +333,21 @@ export function registerCoreTools({ tool, asRepo, client, liveConfig }) {
       }
     },
   )
+
+  tool(
+    'gh_release_preflight',
+    'Run automated pre-release audit on the plugin package: checks package.json version, cordis.patch.yml, CHANGELOG.md release notes, three READMEs (EN/RU/ZH), npm pack file sizes (<256 KiB), and git index hygiene.',
+    {
+      cwd: { type: 'string', description: 'Directory to audit (defaults to workspace or process.cwd()).' },
+      runTests: { type: 'boolean', description: 'Whether to run npm test as part of the audit (default false).' },
+      maxFileSize: { type: 'number', description: 'Max allowed size in bytes per packaged file (default 262144).' },
+    },
+    async (args) => {
+      return runReleasePreflight({
+        cwd: args.cwd,
+        runTests: args.runTests,
+        maxFileSize: args.maxFileSize,
+      })
+    },
+  )
 }

package/lib/tools/release-preflight.js

@@ -0,0 +1,202 @@
+// lib/tools/release-preflight.js
+// Automated release preflight audit for DSH plugins according to
+// dhs-plugin-release-workflow and dsh-documentation-standard.
+
+import { readFileSync, existsSync } from 'node:fs'
+import { join as joinPath } from 'node:path'
+import { execFile as defaultExecFile } from 'node:child_process'
+import { promisify } from 'node:util'
+
+const pExecFile = promisify(defaultExecFile)
+
+const MAX_FILE_SIZE_DEFAULT = 262144 // 256 KiB per file
+const FORBIDDEN_PACK_PREFIXES = ['docs/', 'test/', 'tests/', '.planning/', '.worktrees/']
+const FORBIDDEN_PACK_EXACT = ['AGENTS.md', '.env', '.env.local', 'deploy.sh']
+
+/**
+ * Runs preflight release audit checks on a plugin directory.
+ *
+ * @param {object} options
+ * @param {string} [options.cwd] Directory to check (default: process.cwd())
+ * @param {boolean} [options.runTests] Whether to execute npm test (default: false)
+ * @param {number} [options.maxFileSize] Max allowed size for any single packaged file (default: 256 KiB)
+ * @param {object} [deps] Injectable dependencies for unit testing
+ */
+export async function runReleasePreflight(options = {}, deps = {}) {
+  const cwd = options.cwd || process.cwd()
+  const runTests = options.runTests === true
+  const maxFileSize = typeof options.maxFileSize === 'number' ? options.maxFileSize : MAX_FILE_SIZE_DEFAULT
+  const exec = deps.execFile || pExecFile
+  const fsRead = deps.readFileSync || readFileSync
+  const fsExists = deps.existsSync || existsSync
+
+  const checks = []
+  const findings = []
+
+  // Helper to record result
+  const record = (name, ok, details, isWarn = false) => {
+    checks.push({ name, ok, details, severity: ok ? 'info' : (isWarn ? 'warn' : 'fail') })
+    if (!ok && !isWarn) {
+      findings.push(`[FAIL] ${name}: ${details}`)
+    } else if (!ok && isWarn) {
+      findings.push(`[WARN] ${name}: ${details}`)
+    }
+  }
+
+  // 1. Check package.json
+  let pkg = null
+  const pkgPath = joinPath(cwd, 'package.json')
+  if (!fsExists(pkgPath)) {
+    record('package.json', false, 'package.json not found in repository root')
+    return { ok: false, verdict: 'FAIL', checks, findings, version: '' }
+  }
+
+  try {
+    pkg = JSON.parse(fsRead(pkgPath, 'utf8'))
+    const hasName = typeof pkg.name === 'string' && pkg.name.trim().length > 0
+    const hasVersion = typeof pkg.version === 'string' && /^\d+\.\d+\.\d+/.test(pkg.version)
+    record('package.json', hasName && hasVersion, `name="${pkg.name}", version="${pkg.version}"`)
+  } catch (err) {
+    record('package.json', false, `invalid JSON: ${err.message}`)
+    return { ok: false, verdict: 'FAIL', checks, findings, version: '' }
+  }
+
+  const version = pkg.version || ''
+  const pkgName = pkg.name || ''
+
+  // 2. Check cordis.patch.yml matching package.json
+  const patchPath = joinPath(cwd, 'cordis.patch.yml')
+  if (fsExists(patchPath)) {
+    try {
+      const patchText = fsRead(patchPath, 'utf8')
+      const matchesName = patchText.includes(pkgName)
+      record('cordis.patch.yml', matchesName, matchesName ? `matches package name "${pkgName}"` : `does not contain package name "${pkgName}"`)
+    } catch (err) {
+      record('cordis.patch.yml', false, `read error: ${err.message}`)
+    }
+  } else {
+    record('cordis.patch.yml', false, 'cordis.patch.yml not found', true)
+  }
+
+  // 3. Check CHANGELOG.md contains release notes for version
+  const changelogPath = joinPath(cwd, 'CHANGELOG.md')
+  if (fsExists(changelogPath)) {
+    try {
+      const clText = fsRead(changelogPath, 'utf8')
+      const versionRe = new RegExp(`(^|\\n)##+\\s+(\\[?v?${version.replace(/\./g, '\\.')}\\]?)`, 'i')
+      const hasNotes = versionRe.test(clText) || clText.includes(version)
+      record('CHANGELOG.md', hasNotes, hasNotes ? `found release section for ${version}` : `missing release entry for ${version}`)
+    } catch (err) {
+      record('CHANGELOG.md', false, `read error: ${err.message}`)
+    }
+  } else {
+    record('CHANGELOG.md', false, 'CHANGELOG.md not found')
+  }
+
+  // 4. Check tri-lingual READMEs
+  const readmes = [
+    { file: 'README.md', lang: 'EN' },
+    { file: 'README.ru.md', lang: 'RU' },
+    { file: 'README.zh.md', lang: 'ZH' },
+  ]
+  for (const item of readmes) {
+    const fPath = joinPath(cwd, item.file)
+    if (fsExists(fPath)) {
+      try {
+        const content = fsRead(fPath, 'utf8')
+        const okLen = content.trim().length >= 20 || Buffer.byteLength(content) >= 50
+        record(`README (${item.lang})`, okLen, okLen ? `${item.file} present (${content.length} bytes)` : `${item.file} is suspiciously short`)
+      } catch (err) {
+        record(`README (${item.lang})`, false, `read error: ${err.message}`)
+      }
+    } else {
+      record(`README (${item.lang})`, false, `${item.file} missing`)
+    }
+  }
+
+  // 5. Check npm pack --dry-run --json composition and sizes
+  let packFiles = []
+  let packedBytes = 0
+  let unpackedBytes = 0
+  try {
+    const { stdout } = await exec('npm', ['pack', '--dry-run', '--json'], { cwd, maxBuffer: 10 * 1024 * 1024 })
+    const jsonStart = stdout.search(/[{\[]/)
+    if (jsonStart !== -1) {
+      const raw = JSON.parse(stdout.slice(jsonStart))
+      const packData = Array.isArray(raw) ? raw[0] : (Object.values(raw)[0] || raw)
+      packFiles = Array.isArray(packData.files) ? packData.files : []
+      packedBytes = packData.size || 0
+      unpackedBytes = packData.unpackedSize || 0
+    }
+  } catch (err) {
+    record('npm pack', false, `npm pack --dry-run failed: ${err.message}`)
+  }
+
+  if (packFiles.length > 0) {
+    const oversized = packFiles.filter((f) => (f.size || 0) > maxFileSize)
+    record(
+      'npm pack file sizes',
+      oversized.length === 0,
+      oversized.length === 0
+        ? `all ${packFiles.length} files <= ${maxFileSize} bytes`
+        : `oversized files: ${oversized.map((f) => `${f.path} (${f.size}B)`).join(', ')}`
+    )
+
+    const leakedFiles = packFiles.filter((f) => {
+      const p = f.path || ''
+      if (FORBIDDEN_PACK_EXACT.includes(p)) return true
+      return FORBIDDEN_PACK_PREFIXES.some((prefix) => p.startsWith(prefix))
+    })
+    record(
+      'npm pack hygiene',
+      leakedFiles.length === 0,
+      leakedFiles.length === 0
+        ? 'no internal/forbidden docs or test files in package'
+        : `forbidden files in npm package: ${leakedFiles.map((f) => f.path).join(', ')}`
+    )
+  }
+
+  // 6. Check git tracking hygiene if in git repo
+  try {
+    const { stdout } = await exec('git', ['ls-files'], { cwd })
+    const tracked = stdout.split('\n').map((l) => l.trim()).filter(Boolean)
+    const trackedForbidden = tracked.filter((p) => {
+      return p === 'AGENTS.md' || p.startsWith('.planning') || p.startsWith('.worktrees') || p.startsWith('openwiki')
+    })
+    record(
+      'git tracked hygiene',
+      trackedForbidden.length === 0,
+      trackedForbidden.length === 0
+        ? 'clean git index (no AGENTS.md, .planning, .worktrees)'
+        : `forbidden files tracked in git: ${trackedForbidden.join(', ')}`,
+      true // warn
+    )
+  } catch {
+    // not a git repo or git not found
+  }
+
+  // 7. Optional tests execution
+  if (runTests) {
+    try {
+      await exec('npm', ['test'], { cwd, timeout: 60000 })
+      record('npm test', true, 'test suite passed successfully')
+    } catch (err) {
+      record('npm test', false, `test suite failed: ${err.message}`)
+    }
+  }
+
+  const failures = checks.filter((c) => c.severity === 'fail')
+  const ok = failures.length === 0
+
+  return {
+    ok,
+    verdict: ok ? 'PASS' : 'FAIL',
+    version,
+    packageName: pkgName,
+    packedBytes,
+    unpackedBytes,
+    unpackedSizeKiB: Math.round(unpackedBytes / 1024 * 10) / 10,
+    checks,
+    findings,
+  }
+}

package/lib/tools/releases.js

@@ -198,3 +198,4 @@ export async function generateReleaseNotes(client, { owner, repo, tag, target, p
     previousTag: previousTag || '',
   }
 }
+export { runReleasePreflight } from './release-preflight.js'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-github-ops",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "description": "GitHub operations for DeepSeek Harness: releases, tags, a guarded generic API pass-through, workflow runs, secrets and sanitized mirror publication.",
   "license": "MIT",
   "type": "module",