@jspg-ai/coding-bb 0.0.3-beta.32 → 0.0.3-beta.33

package/cbb/worktrees/skills/cbb-local-mode/scripts/install-git-hook.js

@@ -20,7 +20,7 @@ const HOOK_FILE = 'pre-commit';
 const BACKUP_SUFFIX = '.cbb-backup';
 
 // 与 cbb/lib/utils/githook.js 的 buildPreCommitSource() 输出完全一致（构建时注入）
-const PRE_COMMIT_SOURCE = "#!/usr/bin/env node\n// managed-by-cbb v1 —— 分支感知提交防线（ADR 0002）\n// main 上：workspace 仓库只放行控制面白名单，应用仓库全拦；非 main 一律放行。\n// 绕过逃生口仅限用户显式 git commit --no-verify。\nconst { execSync } = require('child_process');\nconst fs = require('fs');\nfunction run(cmd) {\n  try { return execSync(cmd, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }).trim(); }\n  catch (e) { return null; }\n}\nconst branch = run('git branch --show-current') || '';\n// 主干名：优先远端 HEAD 指向；探测失败按本地 main/master 存在性回退\nlet main = null;\nconst remotes = run('git remote');\nif (remotes) {\n  const r = remotes.split(/\\r?\\n/)[0];\n  const sym = run('git symbolic-ref \"refs/remotes/' + r + '/HEAD\"');\n  if (sym) main = sym.replace('refs/remotes/' + r + '/', '');\n}\nif (!main) {\n  if (run('git rev-parse --verify --quiet refs/heads/main')) main = 'main';\n  else if (run('git rev-parse --verify --quiet refs/heads/master')) main = 'master';\n}\n// 非主干（含 detached / 探测失败）→ 放行\nif (!main || branch !== main) process.exit(0);\n\n// 主干上的提交：收集 staged 变更（空提交放行）\nconst staged = run('git diff --cached --name-only') || '';\nconst files = staged.split(/\\r?\\n/).filter(Boolean);\nif (files.length === 0) process.exit(0);\n\n// 仓库类型：workspace 仓库 = 检出含 CBB-WORKSPACE.json（或旧名，改名过渡期识别）\nconst isWorkspace = fs.existsSync('CBB-WORKSPACE.json') || fs.existsSync('workspace-config.json');\n\nfunction deny(bad) {\n  console.error('[cbb-guard] 主干上拦截载荷提交（ADR 0002）：');\n  bad.forEach(f => console.error('  ' + f));\n  console.error('需求载荷须在需求分支上提交：本地模式先 git checkout -b <需求名>；worktree 模式在 .worktrees/ 工作树内提交。');\n  console.error('控制面白名单：CBB-WORKSPACE.json / .gitignore / AGENTS.md / openspec/config.yaml / openspec/schemas/** / .cbb/**');\n  console.error('如确需在主干提交，须由用户显式 git commit --no-verify。');\n  process.exit(1);\n}\n\nif (isWorkspace) {\n  // 旧名仅放行删除条目：更名迁移提交（git mv）会产生旧名删除 + 新名新增两条\n  const EXACT = new Set(['CBB-WORKSPACE.json', 'workspace-config.json', '.gitignore', 'AGENTS.md', 'openspec/config.yaml']);\n  const PREFIXES = ['openspec/schemas/', '.cbb/'];\n  const bad = files.filter(f => !EXACT.has(f) && !PREFIXES.some(p => f.indexOf(p) === 0));\n  if (bad.length) deny(bad);\n} else {\n  deny(files);\n}\nprocess.exit(0);\n";
+const PRE_COMMIT_SOURCE = "#!/usr/bin/env node\n// managed-by-cbb v1 —— 分支感知提交防线（ADR 0002）\n// main 上：workspace 只放行控制面白名单，应用全拦（merge 提交除外）；非 main 一律放行。\n// 绕过逃生口仅限用户显式 git commit --no-verify。\nconst { execSync } = require('child_process');\nconst fs = require('fs');\nfunction run(cmd) {\n  try { return execSync(cmd, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }).trim(); }\n  catch (e) { return null; }\n}\nconst branch = run('git branch --show-current') || '';\n// 主干名：优先远端 HEAD 指向；探测失败按本地 main/master 存在性回退\nlet main = null;\nconst remotes = run('git remote');\nif (remotes) {\n  const r = remotes.split(/\\r?\\n/)[0];\n  const sym = run('git symbolic-ref \"refs/remotes/' + r + '/HEAD\"');\n  if (sym) main = sym.replace('refs/remotes/' + r + '/', '');\n}\nif (!main) {\n  if (run('git rev-parse --verify --quiet refs/heads/main')) main = 'main';\n  else if (run('git rev-parse --verify --quiet refs/heads/master')) main = 'master';\n}\n// 非主干（含 detached / 探测失败）→ 放行\nif (!main || branch !== main) process.exit(0);\n\n// merge 进行中（MERGE_HEAD 存在）→ 显式人工合并提交，放行（ADR 0007 合并门禁）\nif (run('git rev-parse --verify --quiet MERGE_HEAD')) process.exit(0);\n\n// 主干上的提交：收集 staged 变更（空提交放行）\nconst staged = run('git diff --cached --name-only') || '';\nconst files = staged.split(/\\r?\\n/).filter(Boolean);\nif (files.length === 0) process.exit(0);\n\n// 仓库类型：workspace 仓库 = 检出含 CBB-WORKSPACE.json（或旧名，改名过渡期识别）\nconst isWorkspace = fs.existsSync('CBB-WORKSPACE.json') || fs.existsSync('workspace-config.json');\n\nfunction deny(bad) {\n  console.error('[cbb-guard] 主干上拦截载荷提交（ADR 0002）：');\n  bad.forEach(f => console.error('  ' + f));\n  console.error('需求载荷须在需求分支上提交：本地模式先 git checkout -b <需求名>；worktree 模式在 .worktrees/ 工作树内提交。');\n  console.error('控制面白名单：CBB-WORKSPACE.json / .gitignore / AGENTS.md / openspec/config.yaml / openspec/schemas/** / .cbb/**');\n  console.error('如确需在主干提交，须由用户显式 git commit --no-verify。');\n  process.exit(1);\n}\n\nif (isWorkspace) {\n  // 旧名仅放行删除条目：更名迁移提交（git mv）会产生旧名删除 + 新名新增两条\n  const EXACT = new Set(['CBB-WORKSPACE.json', 'workspace-config.json', '.gitignore', 'AGENTS.md', 'openspec/config.yaml']);\n  const PREFIXES = ['openspec/schemas/', '.cbb/'];\n  const bad = files.filter(f => !EXACT.has(f) && !PREFIXES.some(p => f.indexOf(p) === 0));\n  if (bad.length) deny(bad);\n} else {\n  deny(files);\n}\nprocess.exit(0);\n";
 
 function isCbbHookContent(content) {
   return typeof content === 'string' && content.includes(HOOK_MARKER);

package/cbb/worktrees/skills/cbb-local-mode/scripts/merge-branches.js

@@ -0,0 +1,469 @@
+#!/usr/bin/env node
+require('./silence-popup');
+/**
+ * 收尾 / 交付合并门禁 —— 直合并通道 + 合并判定（ADR 0007 / 0008）
+ *
+ * 把需求分支合并进目标分支并推送远端：
+ *   - 供 cbb-worktree-close / cbb-local-mode 的收尾门禁调用（默认目标 = 主干）
+ *   - 供 cbb-worktree-push Step 7 的"直接合并"出口调用（--target 可指定测试分支）
+ * 默认交付走 MR（人工在浏览器合入）；本脚本是用户在门禁处**显式确认**后的
+ * "由 agent 直接完成合并"通道。
+ *
+ * 用法：
+ *   node merge-branches.js <ws_root> <branch> [--apps a,b] [--target <分支>] [--allow-checkout] [--dry-run]
+ *   node merge-branches.js <ws_root> <branch> [--apps a,b] [--target <分支>] --check   # 仅判定，不合并
+ *
+ * 目标分支：
+ *   缺省 / --target 等于该仓库探测主干 → 主干快路径（本地主干检出上 merge --no-ff → push）
+ *   --target 指定非主干分支            → 临时 worktree（基于 origin/<target>，不动用户检出）
+ *
+ * 模式：
+ *   --check      逐仓库判定是否已合并到目标（主干含 release-* 中转 / squash / cherry-pick 兜底，
+ *                算法与 cbb-worktree-close 的 safety-check.js 同源）；不修改任何状态
+ *   默认         两阶段（ADR 0007）：
+ *                  1. 预检：逐仓库校验（目标可解析 / 检出干净 / 分支存在）
+ *                     任一不过 → 退出 2，不执行任何合并
+ *                  2. 执行：merge --no-ff → push；执行中失败 → 停止并报告已完成清单（不回滚；重跑幂等）
+ *   --dry-run    只做预检，不执行
+ *
+ * 退出码：0 全部成功（含 skipped / merged）/ 1 参数错误 / 2 预检或执行失败（含 need-mr / unmerged）
+ * 末行：MERGE_RESULT [...] 或 MERGE_CHECK_RESULT [...]
+ */
+
+const { execSync } = require('child_process');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+
+function run(cmd, cwd) {
+  try {
+    return {
+      ok: true,
+      out: execSync(cmd, {
+        cwd,
+        encoding: 'utf-8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        timeout: 120000,
+        env: { ...process.env, GIT_TERMINAL_PROMPT: '0' },
+      }).trim(),
+    };
+  } catch (e) {
+    return { ok: false, err: (e.stderr || e.message || String(e)).trim() };
+  }
+}
+
+function detectMain(repoPath) {
+  const remote = run('git remote', repoPath);
+  if (!remote.ok || !remote.out) return '';
+  const r = remote.out.split(/\r?\n/)[0];
+  const symbolic = run('git symbolic-ref "refs/remotes/' + r + '/HEAD"', repoPath);
+  if (symbolic.ok && symbolic.out) return symbolic.out.replace('refs/remotes/' + r + '/', '');
+  return '';
+}
+
+// ── 合并判定（与 cbb-worktree-close/scripts/safety-check.js 同源） ──
+// 0=merged, 1=unmerged, 2=to-ref-missing
+function mergedTo(repoPath, from, to) {
+  if (!run('git rev-parse --verify --quiet "' + from + '"', repoPath).ok) return 1;
+  if (!run('git rev-parse --verify --quiet "' + to + '"', repoPath).ok) return 2;
+  if (run('git merge-base --is-ancestor "' + from + '" "' + to + '" && echo Y', repoPath).out === 'Y') return 0;
+  // 跨平台：不用 grep（Windows 无 grep），解析 git cherry 输出（+ 前缀 = 未合并提交）
+  const cherry = run('git cherry "' + to + '" "' + from + '"', repoPath);
+  if (!cherry.ok) return 1;
+  if (cherry.out.split(/\r?\n/).filter(Boolean).some(l => l.indexOf('+') === 0)) return 1;
+  return 0;
+}
+
+function mergedToMain(repoPath, branchName, main) {
+  if (mergedTo(repoPath, branchName, main) === 0) return 'main';
+  if (mergedTo(repoPath, branchName, 'origin/' + main) === 0) return 'origin/' + main;
+  const releaseList = run('git for-each-ref --format="%(refname:short)" "refs/heads/release-*" "refs/remotes/origin/release-*"', repoPath);
+  if (releaseList.ok && releaseList.out) {
+    const releases = releaseList.out.split(/\r?\n/).filter(Boolean).sort();
+    for (const rel of releases) {
+      if (mergedTo(repoPath, branchName, rel) === 0) {
+        if (mergedTo(repoPath, rel, main) === 0) return 'main-via-' + rel;
+        if (mergedTo(repoPath, rel, 'origin/' + main) === 0) return 'origin/' + main + '-via-' + rel;
+      }
+    }
+  }
+  return null;
+}
+
+/** 目标为具体分支时的已合并判定（含 origin 镜像，不做 release 中转） */
+function mergedToTarget(repoPath, branchName, target) {
+  if (mergedTo(repoPath, branchName, target) === 0) return target;
+  if (mergedTo(repoPath, branchName, 'origin/' + target) === 0) return 'origin/' + target;
+  return null;
+}
+
+function classifyPushError(stderr) {
+  const s = (stderr || '').toLowerCase();
+  if (s.includes('protected branch') || s.includes('deny updating')) return 'branch-protected';
+  if (s.includes('non-fast-forward') || s.includes('fetch first') || s.includes('rejected')) return 'non-fast-forward';
+  if (s.includes('permission denied (publickey)')) return 'ssh-auth-failed';
+  if (s.includes('authentication failed')) return 'https-auth-failed';
+  if (s.includes('could not resolve host') || s.includes('connection refused') || s.includes('hung up')) return 'network-unreachable';
+  return 'unknown';
+}
+
+function loadApps(wsRoot) {
+  try {
+    const config = JSON.parse(fs.readFileSync(path.join(wsRoot, 'CBB-WORKSPACE.json'), 'utf-8'));
+    return Array.isArray(config.apps) ? config.apps : [];
+  } catch (e) {
+    return [];
+  }
+}
+
+/** 参与仓库：workspace（根 = 主干检出）+ 各 app（.codespace/<app> = 主干检出） */
+function buildRepos(wsRoot, appFilter) {
+  const repos = [{ name: 'workspace', repo: wsRoot, work: wsRoot }];
+  for (const app of loadApps(wsRoot)) {
+    if (appFilter && !appFilter.has(app.name)) continue;
+    const dir = path.join(wsRoot, '.codespace', app.name);
+    repos.push({ name: app.name, repo: dir, work: dir });
+  }
+  return repos;
+}
+
+function hasRef(repoPath, ref) {
+  return run('git rev-parse --verify --quiet "' + ref + '"', repoPath).ok;
+}
+
+/** 清理临时 worktree（失败仅警告，不阻断） */
+function cleanupTempWorktree(repoPath, tmpDir) {
+  if (!tmpDir) return;
+  const removed = run('git worktree remove --force "' + tmpDir + '"', repoPath);
+  if (!removed.ok && fs.existsSync(tmpDir)) {
+    try { fs.rmSync(tmpDir, { recursive: true, force: true }); } catch (e) { /* Windows 锁：留给用户 */ }
+  }
+  run('git worktree prune', repoPath);
+}
+
+function main() {
+  const args = process.argv.slice(2);
+  const wsRoot = args[0];
+  const branch = args[1];
+
+  if (!wsRoot || !branch || branch.indexOf('--') === 0) {
+    console.error('Usage: node merge-branches.js <ws_root> <branch> [--apps a,b] [--target b] [--allow-checkout] [--dry-run] [--check]');
+    process.exit(1);
+  }
+
+  const appsIdx = args.indexOf('--apps');
+  const appFilter = appsIdx >= 0
+    ? new Set((args[appsIdx + 1] || '').split(',').map(s => s.trim()).filter(Boolean))
+    : null;
+  const targetIdx = args.indexOf('--target');
+  const targetArg = targetIdx >= 0 ? (args[targetIdx + 1] || '').trim() : '';
+  if (targetIdx >= 0 && !targetArg) {
+    console.error('--target 需要提供分支名');
+    process.exit(1);
+  }
+  const allowCheckout = args.includes('--allow-checkout');
+  const dryRun = args.includes('--dry-run');
+  const checkOnly = args.includes('--check');
+
+  const repos = buildRepos(wsRoot, appFilter);
+
+  // ── --check：仅判定每仓库是否已合并到目标 ─────────────────
+  if (checkOnly) {
+    const results = [];
+    for (const rp of repos) {
+      const rec = { name: rp.name, status: 'unmerged', merged: null, main: null, target: null };
+      if (!fs.existsSync(path.join(rp.repo, '.git'))) {
+        rec.status = 'no-repo';
+        results.push(rec);
+        continue;
+      }
+      run('git fetch --quiet origin', rp.repo);
+      const main = detectMain(rp.repo);
+      if (!main) {
+        rec.status = 'failed';
+        results.push(rec);
+        continue;
+      }
+      rec.main = main;
+      const target = targetArg || main;
+      rec.target = target;
+      if (!hasRef(rp.repo, 'refs/heads/' + branch)) {
+        rec.status = 'no-branch';
+        results.push(rec);
+        continue;
+      }
+      const merged = (!targetArg || target === main)
+        ? mergedToMain(rp.repo, branch, main)
+        : mergedToTarget(rp.repo, branch, target);
+      rec.merged = merged;
+      rec.status = merged ? 'merged' : 'unmerged';
+      results.push(rec);
+    }
+    results.forEach(r => console.log(r.status.toUpperCase() + ' ' + r.name + (r.merged ? ' → ' + r.merged : '') + (r.target ? ' [target: ' + r.target + ']' : '')));
+    const ok = results.every(r => r.status !== 'unmerged' && r.status !== 'failed');
+    console.log('---');
+    console.log('MERGE_CHECK_RESULT', JSON.stringify({ branch, target: targetArg || null, results }));
+    process.exit(ok ? 0 : 2);
+  }
+
+  // ── 阶段 1：预检 ──────────────────────────────────────────
+  const prechecks = [];
+  for (const rp of repos) {
+    const rec = { name: rp.name, status: 'ok', main: null, target: null, temp: false, reason: null };
+    if (!fs.existsSync(path.join(rp.repo, '.git'))) {
+      rec.status = 'skipped';
+      rec.reason = 'no-repo';
+      prechecks.push(rec);
+      continue;
+    }
+    const fetch = run('git fetch --quiet origin', rp.repo);
+    if (!fetch.ok) {
+      rec.status = 'failed';
+      rec.reason = 'fetch-failed';
+      prechecks.push(rec);
+      continue;
+    }
+    const main = detectMain(rp.repo);
+    if (!main) {
+      rec.status = 'failed';
+      rec.reason = 'cannot-detect-main';
+      prechecks.push(rec);
+      continue;
+    }
+    rec.main = main;
+    const target = targetArg || main;
+    rec.target = target;
+
+    if (!hasRef(rp.repo, 'refs/heads/' + branch)) {
+      rec.status = 'skipped';
+      rec.reason = 'no-branch';
+      prechecks.push(rec);
+      continue;
+    }
+    const targetLocal = hasRef(rp.repo, 'refs/heads/' + target);
+    const targetRemote = hasRef(rp.repo, 'refs/remotes/origin/' + target);
+    if (!targetLocal && !targetRemote) {
+      rec.status = 'failed';
+      rec.reason = 'target-not-found';
+      prechecks.push(rec);
+      continue;
+    }
+
+    if (target === main) {
+      // 主干路径（快路径，与 ADR 0007 收尾门禁一致）
+      if (mergedToMain(rp.repo, branch, main)) {
+        rec.status = 'skipped';
+        rec.reason = 'already-merged';
+        prechecks.push(rec);
+        continue;
+      }
+      const status = run('git status --porcelain', rp.work);
+      if (!status.ok || status.out) {
+        rec.status = 'failed';
+        rec.reason = 'dirty-worktree';
+        prechecks.push(rec);
+        continue;
+      }
+      const current = run('git branch --show-current', rp.work);
+      if (current.out && current.out !== main && !allowCheckout) {
+        rec.status = 'failed';
+        rec.reason = 'not-on-main';
+        prechecks.push(rec);
+        continue;
+      }
+      const ahead = run('git rev-list --count "origin/' + main + '..' + main + '"', rp.repo);
+      if (ahead.ok && ahead.out && parseInt(ahead.out, 10) > 0) {
+        rec.status = 'failed';
+        rec.reason = 'main-ahead-of-origin';
+        prechecks.push(rec);
+        continue;
+      }
+    } else {
+      // 指定分支路径：已合并则跳过；当前检出即目标且干净 → 就地；否则临时 worktree
+      if (mergedToTarget(rp.repo, branch, target)) {
+        rec.status = 'skipped';
+        rec.reason = 'already-merged';
+        prechecks.push(rec);
+        continue;
+      }
+      const current = run('git branch --show-current', rp.work);
+      if (current.out === target) {
+        const status = run('git status --porcelain', rp.work);
+        if (!status.ok || status.out) {
+          rec.status = 'failed';
+          rec.reason = 'dirty-worktree';
+          prechecks.push(rec);
+          continue;
+        }
+      } else {
+        rec.temp = true; // 执行阶段创建临时 worktree
+      }
+    }
+    prechecks.push(rec);
+  }
+
+  const hasPrecheckFailure = prechecks.some(p => p.status === 'failed');
+  prechecks.forEach(p => {
+    if (p.status === 'failed') console.log('FAIL ' + p.name + ': ' + p.reason);
+    else if (p.status === 'skipped') console.log('SKIP ' + p.name + ': ' + p.reason);
+    else console.log('OK   ' + p.name + ' → 合并至 ' + p.target + (p.temp ? '（临时 worktree）' : ''));
+  });
+
+  if (hasPrecheckFailure) {
+    console.log('---');
+    console.log('MERGE_RESULT', JSON.stringify({ phase: 'precheck', results: prechecks }));
+    process.exit(2);
+  }
+
+  if (dryRun) {
+    console.log('---');
+    console.log('MERGE_RESULT', JSON.stringify({ phase: 'precheck', dry_run: true, results: prechecks }));
+    process.exit(0);
+  }
+
+  // ── 阶段 2：执行（停止式，不回滚） ────────────────────────
+  const results = prechecks.map(p => ({ ...p, status: p.status, detail: null }));
+  let stopped = false;
+
+  for (let i = 0; i < prechecks.length; i += 1) {
+    const p = prechecks[i];
+    const rp = repos[i];
+    if (p.status !== 'ok') continue;
+    if (stopped) {
+      results[i].status = 'not-attempted';
+      continue;
+    }
+
+    const target = p.target;
+    const mergeMsg = "Merge branch '" + branch + "'";
+
+    if (target === p.main) {
+      // ── 主干路径（快路径） ──
+      const current = run('git branch --show-current', rp.work);
+      if (current.out !== target) {
+        const co = run('git checkout --quiet "' + target + '"', rp.work);
+        if (!co.ok) {
+          results[i].status = 'failed';
+          results[i].detail = 'checkout-failed: ' + co.err.split(/\r?\n/)[0];
+          stopped = true;
+          continue;
+        }
+      }
+      const pull = run('git pull --ff-only --quiet origin "' + target + '"', rp.repo);
+      if (!pull.ok) {
+        results[i].status = 'failed';
+        results[i].detail = 'pull-failed: ' + pull.err.split(/\r?\n/)[0];
+        stopped = true;
+        continue;
+      }
+      const merge = run('git merge --no-ff -m "' + mergeMsg + '" "' + branch + '"', rp.repo);
+      if (!merge.ok) {
+        run('git merge --abort', rp.repo);
+        results[i].status = 'failed';
+        results[i].detail = 'merge-failed: ' + merge.err.split(/\r?\n/)[0];
+        stopped = true;
+        continue;
+      }
+      let push = run('git push origin "' + target + '"', rp.repo);
+      if (!push.ok) {
+        const code = classifyPushError(push.err);
+        if (code === 'non-fast-forward') {
+          const retryPull = run('git pull --ff-only --quiet origin "' + target + '"', rp.repo);
+          push = retryPull.ok ? run('git push origin "' + target + '"', rp.repo) : retryPull;
+        }
+        if (!push.ok) {
+          const code2 = classifyPushError(push.err);
+          if (code2 === 'branch-protected') {
+            results[i].status = 'need-mr';
+            results[i].detail = 'branch-protected（目标分支受保护，请改用 MR 出口）';
+          } else {
+            results[i].status = 'failed';
+            results[i].detail = 'push-failed: ' + (push.err || '').split(/\r?\n/)[0];
+          }
+          stopped = true;
+          continue;
+        }
+      }
+      results[i].status = 'merged';
+      results[i].detail = 'merged+pushed origin/' + target;
+      continue;
+    }
+
+    // ── 指定分支路径（当前检出即目标 → 就地；否则临时 worktree） ──
+    let workDir = rp.work;
+    let tmpDir = null;
+    const current = run('git branch --show-current', rp.work);
+    if (current.out !== target) {
+      tmpDir = path.join(os.tmpdir(), 'cbb-merge-' + process.pid + '-' + i);
+      const base = hasRef(rp.repo, 'refs/remotes/origin/' + target) ? 'origin/' + target : target;
+      const add = run('git worktree add --detach "' + tmpDir + '" "' + base + '"', rp.repo);
+      if (!add.ok) {
+        results[i].status = 'failed';
+        results[i].detail = 'worktree-add-failed: ' + add.err.split(/\r?\n/)[0];
+        stopped = true;
+        continue;
+      }
+      workDir = tmpDir;
+    } else {
+      const pull = run('git pull --ff-only --quiet origin "' + target + '"', rp.repo);
+      if (!pull.ok) {
+        results[i].status = 'failed';
+        results[i].detail = 'pull-failed: ' + pull.err.split(/\r?\n/)[0];
+        stopped = true;
+        continue;
+      }
+    }
+
+    const merge = run('git merge --no-ff -m "' + mergeMsg + '" "' + branch + '"', workDir);
+    if (!merge.ok) {
+      run('git merge --abort', workDir);
+      cleanupTempWorktree(rp.repo, tmpDir);
+      results[i].status = 'failed';
+      results[i].detail = 'merge-failed: ' + merge.err.split(/\r?\n/)[0];
+      stopped = true;
+      continue;
+    }
+
+    let push = run('git push origin "HEAD:refs/heads/' + target + '"', workDir);
+    if (!push.ok) {
+      const code = classifyPushError(push.err);
+      if (code === 'non-fast-forward') {
+        // 远端已前进：在合并工作区 ff 同步后重试一次
+        const retry = run('git fetch --quiet origin "' + target + '" && git reset --hard FETCH_HEAD', workDir);
+        if (retry.ok) {
+          const rem = run('git merge --no-ff -m "' + mergeMsg + '" "' + branch + '"', workDir);
+          if (rem.ok) push = run('git push origin "HEAD:refs/heads/' + target + '"', workDir);
+        }
+      }
+      if (!push.ok) {
+        const code2 = classifyPushError(push.err);
+        cleanupTempWorktree(rp.repo, tmpDir);
+        if (code2 === 'branch-protected') {
+          results[i].status = 'need-mr';
+          results[i].detail = 'branch-protected（目标分支受保护，请改用 MR 出口）';
+        } else {
+          results[i].status = 'failed';
+          results[i].detail = 'push-failed: ' + (push.err || '').split(/\r?\n/)[0];
+        }
+        stopped = true;
+        continue;
+      }
+    }
+    cleanupTempWorktree(rp.repo, tmpDir);
+    results[i].status = 'merged';
+    results[i].detail = 'merged+pushed origin/' + target + (tmpDir ? '（临时 worktree）' : '');
+  }
+
+  results.forEach(r => {
+    console.log(r.status.toUpperCase() + ' ' + r.name + (r.detail ? ' — ' + r.detail : ''));
+  });
+
+  const ok = results.every(r => r.status === 'merged' || r.status === 'skipped');
+  console.log('---');
+  console.log('MERGE_RESULT', JSON.stringify({ phase: 'execute', target: targetArg || null, results }));
+  process.exit(ok ? 0 : 2);
+}
+
+if (require.main === module) main();
+
+module.exports = { run, detectMain, mergedTo, mergedToMain, mergedToTarget, classifyPushError, loadApps, buildRepos };