@jspg-ai/coding-bb 0.0.3-beta.8 → 0.0.4

package/cbb/worktrees/_shared/scripts/junction-ai-config.js

@@ -0,0 +1,192 @@
+#!/usr/bin/env node
+/**
+ * worktree 模式 AI 配置 junction（ADR 0002，防线 B）。
+ *
+ * 用法：node junction-ai-config.js <ws_root> <wt_path> [--remove]
+ *
+ * 目的：让开发会话能开进 worktree（工作树内加载 AI 配置），同时保持
+ * 「单层安装」实质——配置唯一物理副本在空间根，cbb update 一处生效。
+ *
+ * 策略（规避 ADR 0001 否决时的状态污染）：
+ *   - 只 junction **只读内容子目录**（rules / skills / commands）：
+ *     工具向配置根写状态（如 settings.local.json）落在 worktree 自建的
+ *     物理（空壳）配置目录里，按项目隔离，不互相覆盖；
+ *   - 配置根目录本身在 worktree 侧是物理目录（不是链接）；
+ *   - .opencode/opencode.json 为文件（junction 不支持文件）：直接复制
+ *     （cbb update 后需重跑本脚本同步；worktree 为瞬态，影响可控）。
+ *
+ * 幂等：linkPath 已指向同一 target → skip；指向不同 → 重建；
+ *       存在同名**物理目录**（非链接）→ warn 跳过（不覆盖用户内容）。
+ *
+ * --remove（cbb-worktree-close 调用）：
+ *   - 拆除 worktree 内已建 junction 与复制件，**源文件零接触**：
+ *     只解除链接本身（fs.rmSync 对 reparse point 仅删链接、不穿透目标，
+ *     已由 Windows 实测验证），复制件为普通文件直接删除；
+ *   - 拆除前校验链接目标位于空间根内——目标在空间根外 / readlink 失败
+ *     → 跳过并警告（防误删外部目录）；同名物理目录/文件 → 跳过不碰。
+ *
+ * 退出码：0 成功（含全部 skip）；1 参数错误；2 执行失败。
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+const wsRoot = process.argv[2];
+const wtPath = process.argv[3];
+const removeMode = process.argv[4] === '--remove';
+
+if (!wsRoot || !wtPath) {
+  console.error('Usage: node junction-ai-config.js <ws_root> <wt_path> [--remove]');
+  process.exit(1);
+}
+
+// 各工具的项目级配置根（存在才处理）与本包部署的内容子目录
+const CONFIG_ROOTS = ['.claude', '.qoder', '.opencode', '.workbuddy', '.trae', '.minimax'];
+const CONTENT_SUBDIRS = ['rules', 'skills', 'commands'];
+// 文件级内容（复制而非 junction）：opencode 的 instructions 登记
+const CONTENT_FILES = { '.opencode': ['opencode.json'] };
+
+const linked = [];
+const copied = [];
+const skipped = [];
+const warned = [];
+let hasFailure = false;
+
+/** 归一化 junction 目标路径（Windows readlink 返回 \\?\ 前缀） */
+function normLinkTarget(p) {
+  return path.resolve(String(p).replace(/^\\\\\?\\/, ''));
+}
+
+/** 目标是否位于空间根内（防误删空间根外目录的守卫） */
+function isWithin(p, root) {
+  const r = path.resolve(root) + path.sep;
+  return path.resolve(p).startsWith(r);
+}
+
+// ── remove 模式：显式拆除 junction 与复制件（源文件零接触）──
+if (removeMode) {
+  const removed = [];
+  const guarded = [];
+
+  for (const root of CONFIG_ROOTS) {
+    for (const sub of CONTENT_SUBDIRS) {
+      const linkPath = path.join(wtPath, root, sub);
+      const label = root + '/' + sub;
+      let st;
+      try { st = fs.lstatSync(linkPath); } catch (e) { continue; } // 不存在 → 跳过（dangling 链接 lstat 仍成功，可拆）
+      if (!st.isSymbolicLink()) continue; // 物理目录/文件（工具状态空壳或用户内容）→ 不碰
+
+      const target = normLinkTarget(fs.readlinkSync(linkPath));
+      if (!isWithin(target, wsRoot)) {
+        guarded.push(label + ' → ' + target + '（目标不在空间根内，跳过）');
+        continue;
+      }
+
+      try {
+        // 只解除链接：Node 对 reparse point 仅删除链接本身，不递归、不触达目标内容
+        fs.rmSync(linkPath, { recursive: true, force: true });
+        removed.push(label);
+      } catch (e) {
+        console.error('❌ 拆除失败 ' + label + ' — ' + e.message);
+        hasFailure = true;
+      }
+    }
+
+    for (const file of (CONTENT_FILES[root] || [])) {
+      const linkPath = path.join(wtPath, root, file);
+      if (!fs.existsSync(linkPath)) continue;
+      try {
+        fs.unlinkSync(linkPath); // 复制件为普通文件，删除不影响源
+        removed.push(root + '/' + file);
+      } catch (e) {
+        console.error('❌ 删除失败 ' + root + '/' + file + ' — ' + e.message);
+        hasFailure = true;
+      }
+    }
+  }
+
+  if (removed.length) console.log('✅ 已拆除 junction/复制件：' + removed.join(', '));
+  if (guarded.length) console.log('⚠️  ' + guarded.join('；'));
+  if (removed.length === 0 && guarded.length === 0) console.log('ℹ️  无待拆除项（幂等）');
+
+  console.log('---');
+  console.log('JUNCTION_REMOVE_RESULT', JSON.stringify({ removed, guarded, wt: wtPath }));
+  process.exit(hasFailure ? 2 : 0);
+}
+
+function linkDir(target, linkPath, label) {
+  if (fs.existsSync(linkPath)) {
+    const st = fs.lstatSync(linkPath);
+    if (st.isSymbolicLink()) {
+      const existing = normLinkTarget(fs.readlinkSync(linkPath));
+      if (existing === path.resolve(target)) {
+        skipped.push(label);
+        return;
+      }
+      fs.unlinkSync(linkPath); // 指向不同 → 重建
+    } else if (st.isDirectory()) {
+      warned.push(label + '（存在同名物理目录，未覆盖）');
+      return;
+    } else {
+      fs.unlinkSync(linkPath); // 同名文件，罕见，重建
+    }
+  }
+  fs.mkdirSync(path.dirname(linkPath), { recursive: true });
+  try {
+    if (process.platform === 'win32') {
+      fs.symlinkSync(path.resolve(target), linkPath, 'junction');
+    } else {
+      fs.symlinkSync(path.resolve(target), linkPath, 'dir');
+    }
+    linked.push(label);
+  } catch (e) {
+    console.error('❌ junction 失败 ' + label + ' — ' + e.message);
+    hasFailure = true;
+  }
+}
+
+function copyFile(target, dest, label) {
+  if (fs.existsSync(dest) && fs.existsSync(target) &&
+      fs.readFileSync(dest, 'utf-8') === fs.readFileSync(target, 'utf-8')) {
+    skipped.push(label);
+    return;
+  }
+  try {
+    fs.mkdirSync(path.dirname(dest), { recursive: true });
+    fs.copyFileSync(target, dest);
+    copied.push(label);
+  } catch (e) {
+    console.error('❌ 复制失败 ' + label + ' — ' + e.message);
+    hasFailure = true;
+  }
+}
+
+for (const root of CONFIG_ROOTS) {
+  const srcRoot = path.join(wsRoot, root);
+  if (!fs.existsSync(srcRoot) || !fs.statSync(srcRoot).isDirectory()) continue;
+
+  for (const sub of CONTENT_SUBDIRS) {
+    const src = path.join(srcRoot, sub);
+    if (!fs.existsSync(src) || !fs.statSync(src).isDirectory()) continue;
+    linkDir(src, path.join(wtPath, root, sub), root + '/' + sub);
+  }
+
+  for (const file of (CONTENT_FILES[root] || [])) {
+    const src = path.join(srcRoot, file);
+    if (!fs.existsSync(src) || !fs.statSync(src).isFile()) continue;
+    copyFile(src, path.join(wtPath, root, file), root + '/' + file);
+  }
+}
+
+if (linked.length === 0 && copied.length === 0 && skipped.length === 0 && warned.length === 0) {
+  console.log('ℹ️  空间根无 AI 配置目录，跳过（cbb setup 选择工具后再装）');
+} else {
+  if (linked.length) console.log('✅ junction：' + linked.join(', '));
+  if (copied.length) console.log('✅ 复制：' + copied.join(', '));
+  if (skipped.length) console.log('⏭️  已就绪：' + skipped.join(', '));
+  if (warned.length) console.log('⚠️  ' + warned.join('；'));
+}
+
+console.log('---');
+console.log('JUNCTION_RESULT', JSON.stringify({ linked, copied, skipped, warned, wt: wtPath }));
+process.exit(hasFailure ? 2 : 0);

package/cbb/worktrees/_shared/scripts/merge-branches.js

@@ -0,0 +1,469 @@
+#!/usr/bin/env node
+require('./silence-popup');
+/**
+ * 收尾 / 交付合并门禁 —— 直合并通道 + 合并判定（ADR 0007 / 0008）
+ *
+ * 把需求分支合并进目标分支并推送远端：
+ *   - 供 cbb-worktree-close / cbb-local-mode 的收尾门禁调用（默认目标 = 主干）
+ *   - 供 cbb-worktree-push Step 7 的"直接合并"出口调用（--target 可指定测试分支）
+ * 默认交付走 MR（人工在浏览器合入）；本脚本是用户在门禁处**显式确认**后的
+ * "由 agent 直接完成合并"通道。
+ *
+ * 用法：
+ *   node merge-branches.js <ws_root> <branch> [--apps a,b] [--target <分支>] [--allow-checkout] [--dry-run]
+ *   node merge-branches.js <ws_root> <branch> [--apps a,b] [--target <分支>] --check   # 仅判定，不合并
+ *
+ * 目标分支：
+ *   缺省 / --target 等于该仓库探测主干 → 主干快路径（本地主干检出上 merge --no-ff → push）
+ *   --target 指定非主干分支            → 临时 worktree（基于 origin/<target>，不动用户检出）
+ *
+ * 模式：
+ *   --check      逐仓库判定是否已合并到目标（主干含 release-* 中转 / squash / cherry-pick 兜底，
+ *                算法与 cbb-worktree-close 的 safety-check.js 同源）；不修改任何状态
+ *   默认         两阶段（ADR 0007）：
+ *                  1. 预检：逐仓库校验（目标可解析 / 检出干净 / 分支存在）
+ *                     任一不过 → 退出 2，不执行任何合并
+ *                  2. 执行：merge --no-ff → push；执行中失败 → 停止并报告已完成清单（不回滚；重跑幂等）
+ *   --dry-run    只做预检，不执行
+ *
+ * 退出码：0 全部成功（含 skipped / merged）/ 1 参数错误 / 2 预检或执行失败（含 need-mr / unmerged）
+ * 末行：MERGE_RESULT [...] 或 MERGE_CHECK_RESULT [...]
+ */
+
+const { execSync } = require('child_process');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+
+function run(cmd, cwd) {
+  try {
+    return {
+      ok: true,
+      out: execSync(cmd, {
+        cwd,
+        encoding: 'utf-8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        timeout: 120000,
+        env: { ...process.env, GIT_TERMINAL_PROMPT: '0' },
+      }).trim(),
+    };
+  } catch (e) {
+    return { ok: false, err: (e.stderr || e.message || String(e)).trim() };
+  }
+}
+
+function detectMain(repoPath) {
+  const remote = run('git remote', repoPath);
+  if (!remote.ok || !remote.out) return '';
+  const r = remote.out.split(/\r?\n/)[0];
+  const symbolic = run('git symbolic-ref "refs/remotes/' + r + '/HEAD"', repoPath);
+  if (symbolic.ok && symbolic.out) return symbolic.out.replace('refs/remotes/' + r + '/', '');
+  return '';
+}
+
+// ── 合并判定（与 cbb-worktree-close/scripts/safety-check.js 同源） ──
+// 0=merged, 1=unmerged, 2=to-ref-missing
+function mergedTo(repoPath, from, to) {
+  if (!run('git rev-parse --verify --quiet "' + from + '"', repoPath).ok) return 1;
+  if (!run('git rev-parse --verify --quiet "' + to + '"', repoPath).ok) return 2;
+  if (run('git merge-base --is-ancestor "' + from + '" "' + to + '" && echo Y', repoPath).out === 'Y') return 0;
+  // 跨平台：不用 grep（Windows 无 grep），解析 git cherry 输出（+ 前缀 = 未合并提交）
+  const cherry = run('git cherry "' + to + '" "' + from + '"', repoPath);
+  if (!cherry.ok) return 1;
+  if (cherry.out.split(/\r?\n/).filter(Boolean).some(l => l.indexOf('+') === 0)) return 1;
+  return 0;
+}
+
+function mergedToMain(repoPath, branchName, main) {
+  if (mergedTo(repoPath, branchName, main) === 0) return 'main';
+  if (mergedTo(repoPath, branchName, 'origin/' + main) === 0) return 'origin/' + main;
+  const releaseList = run('git for-each-ref --format="%(refname:short)" "refs/heads/release-*" "refs/remotes/origin/release-*"', repoPath);
+  if (releaseList.ok && releaseList.out) {
+    const releases = releaseList.out.split(/\r?\n/).filter(Boolean).sort();
+    for (const rel of releases) {
+      if (mergedTo(repoPath, branchName, rel) === 0) {
+        if (mergedTo(repoPath, rel, main) === 0) return 'main-via-' + rel;
+        if (mergedTo(repoPath, rel, 'origin/' + main) === 0) return 'origin/' + main + '-via-' + rel;
+      }
+    }
+  }
+  return null;
+}
+
+/** 目标为具体分支时的已合并判定（含 origin 镜像，不做 release 中转） */
+function mergedToTarget(repoPath, branchName, target) {
+  if (mergedTo(repoPath, branchName, target) === 0) return target;
+  if (mergedTo(repoPath, branchName, 'origin/' + target) === 0) return 'origin/' + target;
+  return null;
+}
+
+function classifyPushError(stderr) {
+  const s = (stderr || '').toLowerCase();
+  if (s.includes('protected branch') || s.includes('deny updating')) return 'branch-protected';
+  if (s.includes('non-fast-forward') || s.includes('fetch first') || s.includes('rejected')) return 'non-fast-forward';
+  if (s.includes('permission denied (publickey)')) return 'ssh-auth-failed';
+  if (s.includes('authentication failed')) return 'https-auth-failed';
+  if (s.includes('could not resolve host') || s.includes('connection refused') || s.includes('hung up')) return 'network-unreachable';
+  return 'unknown';
+}
+
+function loadApps(wsRoot) {
+  try {
+    const config = JSON.parse(fs.readFileSync(path.join(wsRoot, 'CBB-WORKSPACE.json'), 'utf-8'));
+    return Array.isArray(config.apps) ? config.apps : [];
+  } catch (e) {
+    return [];
+  }
+}
+
+/** 参与仓库：workspace（根 = 主干检出）+ 各 app（.codespace/<app> = 主干检出） */
+function buildRepos(wsRoot, appFilter) {
+  const repos = [{ name: 'workspace', repo: wsRoot, work: wsRoot }];
+  for (const app of loadApps(wsRoot)) {
+    if (appFilter && !appFilter.has(app.name)) continue;
+    const dir = path.join(wsRoot, '.codespace', app.name);
+    repos.push({ name: app.name, repo: dir, work: dir });
+  }
+  return repos;
+}
+
+function hasRef(repoPath, ref) {
+  return run('git rev-parse --verify --quiet "' + ref + '"', repoPath).ok;
+}
+
+/** 清理临时 worktree（失败仅警告，不阻断） */
+function cleanupTempWorktree(repoPath, tmpDir) {
+  if (!tmpDir) return;
+  const removed = run('git worktree remove --force "' + tmpDir + '"', repoPath);
+  if (!removed.ok && fs.existsSync(tmpDir)) {
+    try { fs.rmSync(tmpDir, { recursive: true, force: true }); } catch (e) { /* Windows 锁：留给用户 */ }
+  }
+  run('git worktree prune', repoPath);
+}
+
+function main() {
+  const args = process.argv.slice(2);
+  const wsRoot = args[0];
+  const branch = args[1];
+
+  if (!wsRoot || !branch || branch.indexOf('--') === 0) {
+    console.error('Usage: node merge-branches.js <ws_root> <branch> [--apps a,b] [--target b] [--allow-checkout] [--dry-run] [--check]');
+    process.exit(1);
+  }
+
+  const appsIdx = args.indexOf('--apps');
+  const appFilter = appsIdx >= 0
+    ? new Set((args[appsIdx + 1] || '').split(',').map(s => s.trim()).filter(Boolean))
+    : null;
+  const targetIdx = args.indexOf('--target');
+  const targetArg = targetIdx >= 0 ? (args[targetIdx + 1] || '').trim() : '';
+  if (targetIdx >= 0 && !targetArg) {
+    console.error('--target 需要提供分支名');
+    process.exit(1);
+  }
+  const allowCheckout = args.includes('--allow-checkout');
+  const dryRun = args.includes('--dry-run');
+  const checkOnly = args.includes('--check');
+
+  const repos = buildRepos(wsRoot, appFilter);
+
+  // ── --check：仅判定每仓库是否已合并到目标 ─────────────────
+  if (checkOnly) {
+    const results = [];
+    for (const rp of repos) {
+      const rec = { name: rp.name, status: 'unmerged', merged: null, main: null, target: null };
+      if (!fs.existsSync(path.join(rp.repo, '.git'))) {
+        rec.status = 'no-repo';
+        results.push(rec);
+        continue;
+      }
+      run('git fetch --quiet origin', rp.repo);
+      const main = detectMain(rp.repo);
+      if (!main) {
+        rec.status = 'failed';
+        results.push(rec);
+        continue;
+      }
+      rec.main = main;
+      const target = targetArg || main;
+      rec.target = target;
+      if (!hasRef(rp.repo, 'refs/heads/' + branch)) {
+        rec.status = 'no-branch';
+        results.push(rec);
+        continue;
+      }
+      const merged = (!targetArg || target === main)
+        ? mergedToMain(rp.repo, branch, main)
+        : mergedToTarget(rp.repo, branch, target);
+      rec.merged = merged;
+      rec.status = merged ? 'merged' : 'unmerged';
+      results.push(rec);
+    }
+    results.forEach(r => console.log(r.status.toUpperCase() + ' ' + r.name + (r.merged ? ' → ' + r.merged : '') + (r.target ? ' [target: ' + r.target + ']' : '')));
+    const ok = results.every(r => r.status !== 'unmerged' && r.status !== 'failed');
+    console.log('---');
+    console.log('MERGE_CHECK_RESULT', JSON.stringify({ branch, target: targetArg || null, results }));
+    process.exit(ok ? 0 : 2);
+  }
+
+  // ── 阶段 1：预检 ──────────────────────────────────────────
+  const prechecks = [];
+  for (const rp of repos) {
+    const rec = { name: rp.name, status: 'ok', main: null, target: null, temp: false, reason: null };
+    if (!fs.existsSync(path.join(rp.repo, '.git'))) {
+      rec.status = 'skipped';
+      rec.reason = 'no-repo';
+      prechecks.push(rec);
+      continue;
+    }
+    const fetch = run('git fetch --quiet origin', rp.repo);
+    if (!fetch.ok) {
+      rec.status = 'failed';
+      rec.reason = 'fetch-failed';
+      prechecks.push(rec);
+      continue;
+    }
+    const main = detectMain(rp.repo);
+    if (!main) {
+      rec.status = 'failed';
+      rec.reason = 'cannot-detect-main';
+      prechecks.push(rec);
+      continue;
+    }
+    rec.main = main;
+    const target = targetArg || main;
+    rec.target = target;
+
+    if (!hasRef(rp.repo, 'refs/heads/' + branch)) {
+      rec.status = 'skipped';
+      rec.reason = 'no-branch';
+      prechecks.push(rec);
+      continue;
+    }
+    const targetLocal = hasRef(rp.repo, 'refs/heads/' + target);
+    const targetRemote = hasRef(rp.repo, 'refs/remotes/origin/' + target);
+    if (!targetLocal && !targetRemote) {
+      rec.status = 'failed';
+      rec.reason = 'target-not-found';
+      prechecks.push(rec);
+      continue;
+    }
+
+    if (target === main) {
+      // 主干路径（快路径，与 ADR 0007 收尾门禁一致）
+      if (mergedToMain(rp.repo, branch, main)) {
+        rec.status = 'skipped';
+        rec.reason = 'already-merged';
+        prechecks.push(rec);
+        continue;
+      }
+      const status = run('git status --porcelain', rp.work);
+      if (!status.ok || status.out) {
+        rec.status = 'failed';
+        rec.reason = 'dirty-worktree';
+        prechecks.push(rec);
+        continue;
+      }
+      const current = run('git branch --show-current', rp.work);
+      if (current.out && current.out !== main && !allowCheckout) {
+        rec.status = 'failed';
+        rec.reason = 'not-on-main';
+        prechecks.push(rec);
+        continue;
+      }
+      const ahead = run('git rev-list --count "origin/' + main + '..' + main + '"', rp.repo);
+      if (ahead.ok && ahead.out && parseInt(ahead.out, 10) > 0) {
+        rec.status = 'failed';
+        rec.reason = 'main-ahead-of-origin';
+        prechecks.push(rec);
+        continue;
+      }
+    } else {
+      // 指定分支路径：已合并则跳过；当前检出即目标且干净 → 就地；否则临时 worktree
+      if (mergedToTarget(rp.repo, branch, target)) {
+        rec.status = 'skipped';
+        rec.reason = 'already-merged';
+        prechecks.push(rec);
+        continue;
+      }
+      const current = run('git branch --show-current', rp.work);
+      if (current.out === target) {
+        const status = run('git status --porcelain', rp.work);
+        if (!status.ok || status.out) {
+          rec.status = 'failed';
+          rec.reason = 'dirty-worktree';
+          prechecks.push(rec);
+          continue;
+        }
+      } else {
+        rec.temp = true; // 执行阶段创建临时 worktree
+      }
+    }
+    prechecks.push(rec);
+  }
+
+  const hasPrecheckFailure = prechecks.some(p => p.status === 'failed');
+  prechecks.forEach(p => {
+    if (p.status === 'failed') console.log('FAIL ' + p.name + ': ' + p.reason);
+    else if (p.status === 'skipped') console.log('SKIP ' + p.name + ': ' + p.reason);
+    else console.log('OK   ' + p.name + ' → 合并至 ' + p.target + (p.temp ? '（临时 worktree）' : ''));
+  });
+
+  if (hasPrecheckFailure) {
+    console.log('---');
+    console.log('MERGE_RESULT', JSON.stringify({ phase: 'precheck', results: prechecks }));
+    process.exit(2);
+  }
+
+  if (dryRun) {
+    console.log('---');
+    console.log('MERGE_RESULT', JSON.stringify({ phase: 'precheck', dry_run: true, results: prechecks }));
+    process.exit(0);
+  }
+
+  // ── 阶段 2：执行（停止式，不回滚） ────────────────────────
+  const results = prechecks.map(p => ({ ...p, status: p.status, detail: null }));
+  let stopped = false;
+
+  for (let i = 0; i < prechecks.length; i += 1) {
+    const p = prechecks[i];
+    const rp = repos[i];
+    if (p.status !== 'ok') continue;
+    if (stopped) {
+      results[i].status = 'not-attempted';
+      continue;
+    }
+
+    const target = p.target;
+    const mergeMsg = "Merge branch '" + branch + "'";
+
+    if (target === p.main) {
+      // ── 主干路径（快路径） ──
+      const current = run('git branch --show-current', rp.work);
+      if (current.out !== target) {
+        const co = run('git checkout --quiet "' + target + '"', rp.work);
+        if (!co.ok) {
+          results[i].status = 'failed';
+          results[i].detail = 'checkout-failed: ' + co.err.split(/\r?\n/)[0];
+          stopped = true;
+          continue;
+        }
+      }
+      const pull = run('git pull --ff-only --quiet origin "' + target + '"', rp.repo);
+      if (!pull.ok) {
+        results[i].status = 'failed';
+        results[i].detail = 'pull-failed: ' + pull.err.split(/\r?\n/)[0];
+        stopped = true;
+        continue;
+      }
+      const merge = run('git merge --no-ff -m "' + mergeMsg + '" "' + branch + '"', rp.repo);
+      if (!merge.ok) {
+        run('git merge --abort', rp.repo);
+        results[i].status = 'failed';
+        results[i].detail = 'merge-failed: ' + merge.err.split(/\r?\n/)[0];
+        stopped = true;
+        continue;
+      }
+      let push = run('git push origin "' + target + '"', rp.repo);
+      if (!push.ok) {
+        const code = classifyPushError(push.err);
+        if (code === 'non-fast-forward') {
+          const retryPull = run('git pull --ff-only --quiet origin "' + target + '"', rp.repo);
+          push = retryPull.ok ? run('git push origin "' + target + '"', rp.repo) : retryPull;
+        }
+        if (!push.ok) {
+          const code2 = classifyPushError(push.err);
+          if (code2 === 'branch-protected') {
+            results[i].status = 'need-mr';
+            results[i].detail = 'branch-protected（目标分支受保护，请改用 MR 出口）';
+          } else {
+            results[i].status = 'failed';
+            results[i].detail = 'push-failed: ' + (push.err || '').split(/\r?\n/)[0];
+          }
+          stopped = true;
+          continue;
+        }
+      }
+      results[i].status = 'merged';
+      results[i].detail = 'merged+pushed origin/' + target;
+      continue;
+    }
+
+    // ── 指定分支路径（当前检出即目标 → 就地；否则临时 worktree） ──
+    let workDir = rp.work;
+    let tmpDir = null;
+    const current = run('git branch --show-current', rp.work);
+    if (current.out !== target) {
+      tmpDir = path.join(os.tmpdir(), 'cbb-merge-' + process.pid + '-' + i);
+      const base = hasRef(rp.repo, 'refs/remotes/origin/' + target) ? 'origin/' + target : target;
+      const add = run('git worktree add --detach "' + tmpDir + '" "' + base + '"', rp.repo);
+      if (!add.ok) {
+        results[i].status = 'failed';
+        results[i].detail = 'worktree-add-failed: ' + add.err.split(/\r?\n/)[0];
+        stopped = true;
+        continue;
+      }
+      workDir = tmpDir;
+    } else {
+      const pull = run('git pull --ff-only --quiet origin "' + target + '"', rp.repo);
+      if (!pull.ok) {
+        results[i].status = 'failed';
+        results[i].detail = 'pull-failed: ' + pull.err.split(/\r?\n/)[0];
+        stopped = true;
+        continue;
+      }
+    }
+
+    const merge = run('git merge --no-ff -m "' + mergeMsg + '" "' + branch + '"', workDir);
+    if (!merge.ok) {
+      run('git merge --abort', workDir);
+      cleanupTempWorktree(rp.repo, tmpDir);
+      results[i].status = 'failed';
+      results[i].detail = 'merge-failed: ' + merge.err.split(/\r?\n/)[0];
+      stopped = true;
+      continue;
+    }
+
+    let push = run('git push origin "HEAD:refs/heads/' + target + '"', workDir);
+    if (!push.ok) {
+      const code = classifyPushError(push.err);
+      if (code === 'non-fast-forward') {
+        // 远端已前进：在合并工作区 ff 同步后重试一次
+        const retry = run('git fetch --quiet origin "' + target + '" && git reset --hard FETCH_HEAD', workDir);
+        if (retry.ok) {
+          const rem = run('git merge --no-ff -m "' + mergeMsg + '" "' + branch + '"', workDir);
+          if (rem.ok) push = run('git push origin "HEAD:refs/heads/' + target + '"', workDir);
+        }
+      }
+      if (!push.ok) {
+        const code2 = classifyPushError(push.err);
+        cleanupTempWorktree(rp.repo, tmpDir);
+        if (code2 === 'branch-protected') {
+          results[i].status = 'need-mr';
+          results[i].detail = 'branch-protected（目标分支受保护，请改用 MR 出口）';
+        } else {
+          results[i].status = 'failed';
+          results[i].detail = 'push-failed: ' + (push.err || '').split(/\r?\n/)[0];
+        }
+        stopped = true;
+        continue;
+      }
+    }
+    cleanupTempWorktree(rp.repo, tmpDir);
+    results[i].status = 'merged';
+    results[i].detail = 'merged+pushed origin/' + target + (tmpDir ? '（临时 worktree）' : '');
+  }
+
+  results.forEach(r => {
+    console.log(r.status.toUpperCase() + ' ' + r.name + (r.detail ? ' — ' + r.detail : ''));
+  });
+
+  const ok = results.every(r => r.status === 'merged' || r.status === 'skipped');
+  console.log('---');
+  console.log('MERGE_RESULT', JSON.stringify({ phase: 'execute', target: targetArg || null, results }));
+  process.exit(ok ? 0 : 2);
+}
+
+if (require.main === module) main();
+
+module.exports = { run, detectMain, mergedTo, mergedToMain, mergedToTarget, classifyPushError, loadApps, buildRepos };

package/cbb/worktrees/_shared/scripts/push-core.js

@@ -3,7 +3,7 @@ require('./silence-popup');
  * openspec-shared 推送核心模块
  *
  * 唯一真源：cbb/worktrees/_shared/scripts/push-core.js
- * 由 scripts/sync-shared.js 展开到各 skill 的 scripts/ 下（init-worktree / extend-worktree / push-worktrees）。
+ * 由 scripts/sync-shared.js 展开到各 skill 的 scripts/ 下（init / push）。
  *
  * 公开 API：
  *   - tryExec(cmd, cwd, execImpl)             包装 execSync，统一返回 {ok, out|err}

package/cbb/worktrees/_shared/scripts/silence-popup.js

@@ -4,7 +4,7 @@
 // koffi is resolved from cbb global install (no local node_modules needed).
 //
 // 唯一真源：cbb/worktrees/_shared/scripts/silence-popup.js
-// 由 scripts/sync-shared.js 展开到各 skill 的 scripts/ 下（init / extend / close / push）。
+// 由 scripts/sync-shared.js 展开到各 skill 的 scripts/ 下（init / close / push / local-mode）。
 // skill 内同目录引用：脚本第一行 `require('./silence-popup')`。
 if (process.platform === 'win32') {
   try {