dsh-git-worktree 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 wloops
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,37 @@
+# dsh-git-worktree
+
+Domi-grade git worktree isolation and delivery for DeepSeek Harness: permanent worktrees, a ready-for-review / apply / finish / discard lifecycle, conflict handling, and safe cleanup.
+
+> Ported from [Domi](https://github.com/wloops/domi)'s production worktree system (Session Target / Isolated Checkout), with the Local-preview surface removed to match the DSH sandbox model.
+
+## What you get
+
+| Capability | Description |
+| --- | --- |
+| `worktree_create` / `worktree_list` / `worktree_remove` | Permanent detached worktrees under `<repo>/.dsh-worktrees/`, recorded in a per-repo manifest and registered as DSH workspaces |
+| `worktree_ready_for_review` | Agent submits review facts (summary, validation tests, suggested commit message) |
+| `worktree_apply` | Deterministically merge the worktree's changes into your Local checkout — conflict-aware, fingerprint-CAS, never touches Local until the plan is verified |
+| `worktree_finish` | Commit the task delta onto your Local branch while preserving your own staged/working state |
+| `worktree_discard` | Drop the worktree (dirty confirmation required) |
+| `/worktree` | Human-facing command surface |
+| Safe cleanup | Retained worktrees expire, residue is quarantined, dirty worktrees are never silently deleted, no global `git worktree prune` |
+
+## Why worktrees live inside the repo
+
+DSH's `workspace-write` sandbox grants exactly the session workspace root. Worktrees therefore live at `<repo>/.dsh-worktrees/<name>` (same pattern as Codex's `.codex/worktrees`), so agent file tools and git operations stay inside the sandbox.
+
+## Install
+
+```sh
+dsh plugin --profile web add dsh-git-worktree
+# or from GitHub
+dsh plugin --profile web add github:wloops/dsh-git-worktree#<tag>
+```
+
+## Status
+
+Pre-release (`0.1.0`). The state machine and apply engine are ported from Domi's production code (journal-based crash recovery, fingerprint CAS, Windows cleanup retries); the DSH tool surface is new and being hardened. Requires DSH `0.1.0-rc.6` line (`@deepseek-ai/dsh-tools` / `dsh-subprocess` / `dsh-commands`).
+
+## License
+
+MIT

package/README.zh.md

@@ -0,0 +1,37 @@
+# dsh-git-worktree
+
+为 DeepSeek Harness 打造的 Domi 级 git worktree 隔离与交付插件：永久 worktree、ready-for-review / apply / finish / discard 完整生命周期、冲突处理与安全清理。
+
+> 移植自 [Domi](https://github.com/wloops/domi) 的生产 worktree 系统（Session Target / Isolated Checkout），为适配 DSH 沙箱模型移除了 Local Preview 面。
+
+## 能力
+
+| 能力 | 说明 |
+| --- | --- |
+| `worktree_create` / `worktree_list` / `worktree_remove` | 仓库内 `.dsh-worktrees/` 下的永久 detached worktree，manifest 记录 + 注册为 DSH 工作区 |
+| `worktree_ready_for_review` | Agent 提交验收信息（摘要、验证项、建议提交信息） |
+| `worktree_apply` | 确定性合并 worktree 改动回 Local checkout——冲突感知、指纹 CAS、plan 验证前绝不触碰 Local |
+| `worktree_finish` | 把任务增量提交到 Local 分支，同时保留你自己的 staged/working 状态 |
+| `worktree_discard` | 丢弃 worktree（dirty 需要显式确认） |
+| `/worktree` | 人类可用的命令入口 |
+| 安全清理 | 保留期到期自动清理、残余 quarantine、dirty 永不静默删除、不执行全局 `git worktree prune` |
+
+## 为什么 worktree 放在仓库内
+
+DSH 的 `workspace-write` 沙箱只授予会话工作区根。因此 worktree 位于 `<repo>/.dsh-worktrees/<name>`（与 Codex 的 `.codex/worktrees` 同模式），agent 的文件工具和 git 操作都留在沙箱内。
+
+## 安装
+
+```sh
+dsh plugin --profile web add dsh-git-worktree
+# 或从 GitHub
+dsh plugin --profile web add github:wloops/dsh-git-worktree#<tag>
+```
+
+## 状态
+
+预发布（`0.1.0`）。状态机与 apply 引擎移植自 Domi 生产代码（journal 崩溃恢复、指纹 CAS、Windows 清理重试）；DSH 工具面为新增并正在加固。要求 DSH `0.1.0-rc.6` 线（`@deepseek-ai/dsh-tools` / `dsh-subprocess` / `dsh-commands`）。
+
+## 许可证
+
+MIT

package/lib/adapters/files.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Node fs adapter for the session-checkout files port: directory identity
+ * (device/inode/birthtime) for quarantine CAS, empty-tree residue collection,
+ * symlink-guarded recursive removal, and byte measurement. Ported from Domi's
+ * production-adapters unchanged.
+ * @module dsh-git-worktree/adapters/files
+ */
+import type { SessionCheckoutFilesPort } from '../ports.js';
+/** Build the node-fs-backed files port. */
+export declare function createNodeFilesPort(): SessionCheckoutFilesPort;

package/lib/adapters/files.js

@@ -0,0 +1,101 @@
+/**
+ * Node fs adapter for the session-checkout files port: directory identity
+ * (device/inode/birthtime) for quarantine CAS, empty-tree residue collection,
+ * symlink-guarded recursive removal, and byte measurement. Ported from Domi's
+ * production-adapters unchanged.
+ * @module dsh-git-worktree/adapters/files
+ */
+import { existsSync, lstatSync, mkdirSync, readdirSync, rmdirSync } from 'node:fs';
+import { lstat, readdir, realpath, rename, rm } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { SessionCheckoutError } from '../index.js';
+async function measureDirectoryBytes(path) {
+    if (!existsSync(path))
+        return 0;
+    const stat = await lstat(path);
+    if (stat.isSymbolicLink())
+        return 0;
+    if (!stat.isDirectory())
+        return stat.size;
+    let total = 0;
+    for (const entry of await readdir(path))
+        total += await measureDirectoryBytes(join(path, entry));
+    return total;
+}
+function removeEmptyDirectoryTree(path) {
+    if (!existsSync(path))
+        return true;
+    const stat = lstatSync(path);
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+        return false;
+    for (const entry of readdirSync(path)) {
+        if (!removeEmptyDirectoryTree(join(path, entry)))
+            return false;
+    }
+    rmdirSync(path);
+    return true;
+}
+async function inspectDirectoryIdentity(path) {
+    if (!existsSync(path))
+        return null;
+    const stat = await lstat(path, { bigint: true });
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+        return null;
+    return {
+        device: stat.dev.toString(),
+        inode: stat.ino.toString(),
+        birthtimeNs: stat.birthtimeNs.toString(),
+    };
+}
+function directoryIdentitiesEqual(left, right) {
+    return left.device === right.device && left.inode === right.inode && left.birthtimeNs === right.birthtimeNs;
+}
+async function quarantineDirectoryTree(path, expectedIdentity, quarantinePath) {
+    const sourceParent = resolve(dirname(path));
+    const quarantineParent = resolve(dirname(quarantinePath));
+    const sameParent = process.platform === 'win32'
+        ? sourceParent.toLowerCase() === quarantineParent.toLowerCase()
+        : sourceParent === quarantineParent;
+    if (!sameParent || existsSync(quarantinePath)) {
+        throw new SessionCheckoutError('checkout_mismatch', 'Worktree quarantine 路径无效或已被占用');
+    }
+    await rename(path, quarantinePath);
+    const actualIdentity = await inspectDirectoryIdentity(quarantinePath);
+    if (actualIdentity && directoryIdentitiesEqual(actualIdentity, expectedIdentity))
+        return;
+    if (!existsSync(path)) {
+        try {
+            await rename(quarantinePath, path);
+        }
+        catch { /* Keep the quarantine; never delete an identity-mismatched object. */ }
+    }
+    throw new SessionCheckoutError('checkout_mismatch', 'Worktree 目录对象已被替换，未执行递归清理');
+}
+async function removeDirectoryTree(path) {
+    if (!existsSync(path))
+        return;
+    const stat = await lstat(path);
+    if (!stat.isDirectory() || stat.isSymbolicLink()) {
+        throw new SessionCheckoutError('checkout_mismatch', '拒绝删除非目录或符号链接形式的 Worktree 残余');
+    }
+    await rm(path, {
+        recursive: true,
+        force: true,
+        maxRetries: process.platform === 'win32' ? 6 : 2,
+        retryDelay: 150,
+    });
+}
+/** Build the node-fs-backed files port. */
+export function createNodeFilesPort() {
+    return {
+        exists: existsSync,
+        canonicalize: async (path) => realpath(resolve(path)),
+        inspectDirectoryIdentity,
+        ensureDirectory: (path) => mkdirSync(path, { recursive: true }),
+        removeEmptyDirectoryTree,
+        quarantineDirectoryTree,
+        removeDirectoryTree,
+        measureDirectoryBytes,
+    };
+}
+//# sourceMappingURL=files.js.map

package/lib/adapters/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/adapters/files.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAClF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACvE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAElD,KAAK,UAAU,qBAAqB,CAAC,IAAY;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,CAAA;IACzC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC;QAAE,KAAK,IAAI,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAChG,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,KAAK,CAAA;IAC9D,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;IAChE,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,CAAA;IACf,OAAO,IAAI,CAAA;AACb,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAAY;IAClD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAChD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,IAAI,CAAA;IAC7D,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC1B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;KACzC,CAAA;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAuB,EAAE,KAAwB;IACjF,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAA;AAC7G,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,IAAY,EACZ,gBAAmC,EACnC,cAAsB;IAEtB,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3C,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAA;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC7C,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,WAAW,EAAE;QAC/D,CAAC,CAAC,YAAY,KAAK,gBAAgB,CAAA;IACrC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,+BAA+B,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAClC,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC,cAAc,CAAC,CAAA;IACrE,IAAI,cAAc,IAAI,wBAAwB,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAAE,OAAM;IACxF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,sEAAsE,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAA;AAClF,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAM;IAC7B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,6BAA6B,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,UAAU,EAAE,GAAG;KAChB,CAAC,CAAA;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,wBAAwB;QACxB,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC/D,wBAAwB;QACxB,uBAAuB;QACvB,mBAAmB;QACnB,qBAAqB;KACtB,CAAA;AACH,CAAC"}

package/lib/adapters/git.d.ts

@@ -0,0 +1,18 @@
+/**
+ * DSH adapter for the session-checkout git port: runs git through
+ * `ctx.subprocess` (tree-scoped termination, bounded collected output,
+ * scrubbed ambient environment) with Domi's hardening preserved — disabled
+ * git hooks, no optional locks, no terminal prompts, C locale, and a 5-minute
+ * hard cap for worktree removal on Windows. Internal refs use the
+ * `refs/dsh-worktree/session-checkouts/<key>` namespace so plugin artifacts
+ * never collide with user refs.
+ * @module dsh-git-worktree/adapters/git
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { SessionCheckoutGitPort } from '../ports.js';
+export interface GitPortOptions {
+    /** Directory holding the empty `core.hooksPath` target; created by the caller. */
+    hooksPath: string;
+}
+/** Build the `ctx.subprocess`-backed git port. */
+export declare function createDshGitPort(ctx: Context, options: GitPortOptions): SessionCheckoutGitPort;

package/lib/adapters/git.js

@@ -0,0 +1,172 @@
+/**
+ * DSH adapter for the session-checkout git port: runs git through
+ * `ctx.subprocess` (tree-scoped termination, bounded collected output,
+ * scrubbed ambient environment) with Domi's hardening preserved — disabled
+ * git hooks, no optional locks, no terminal prompts, C locale, and a 5-minute
+ * hard cap for worktree removal on Windows. Internal refs use the
+ * `refs/dsh-worktree/session-checkouts/<key>` namespace so plugin artifacts
+ * never collide with user refs.
+ * @module dsh-git-worktree/adapters/git
+ */
+import { createHash } from 'node:crypto';
+import { realpath } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { SessionCheckoutError } from '../index.js';
+/** Ordinary git commands keep a 10s cap; worktree removal gets 5 minutes on Windows. */
+const GIT_COMMAND_TIMEOUT_MS = 30_000;
+const WORKTREE_REMOVE_TIMEOUT_MS = 5 * 60_000;
+/** Collected-output cap per stream; git output is small but removals can warn. */
+const GIT_COLLECT_BYTES = 1 << 20;
+function gitTimeoutMs(args) {
+    return args[0] === 'worktree' && args[1] === 'remove'
+        ? WORKTREE_REMOVE_TIMEOUT_MS
+        : GIT_COMMAND_TIMEOUT_MS;
+}
+/**
+ * Run one git command through `ctx.subprocess`. Returns an outcome object —
+ * the caller decides whether a non-zero exit is an error. Never
+ * shell-interpreted; argv passes verbatim.
+ */
+async function runGit(ctx, cwd, args, options) {
+    const graceMs = gitTimeoutMs(args);
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), graceMs);
+    timeout.unref?.();
+    try {
+        const handle = ctx.subprocess.spawn({
+            argv: [
+                'git',
+                '--no-pager',
+                '--no-optional-locks',
+                '-c', 'core.quotePath=false',
+                '-c', 'core.fsmonitor=false',
+                '-c', `core.hooksPath=${options.hooksPath}`,
+                ...args,
+            ],
+            cwd,
+            stdio: {
+                stdin: 'ignore',
+                stdout: { maxBytes: GIT_COLLECT_BYTES },
+                stderr: { maxBytes: GIT_COLLECT_BYTES },
+            },
+            graceMs: GIT_COMMAND_TIMEOUT_MS,
+            signal: controller.signal,
+            env: {
+                GIT_OPTIONAL_LOCKS: '0',
+                GIT_TERMINAL_PROMPT: '0',
+                LC_ALL: 'C',
+                LANG: 'C',
+            },
+        });
+        const outcome = await handle.done;
+        const stdout = handle.collected.stdout?.readFrom(0).text ?? '';
+        const stderr = handle.collected.stderr?.readFrom(0).text ?? '';
+        if (outcome.signal === 'SIGTERM' || outcome.signal === 'SIGKILL' || controller.signal.aborted) {
+            return { code: -1, stdout, stderr: `git ${args.join(' ')} 超时（${graceMs}ms），已终止` };
+        }
+        return { code: outcome.exitCode ?? -1, stdout: stdout.trim(), stderr: stderr.trim() };
+    }
+    catch (error) {
+        // Synchronous spawn failure (git missing from PATH): report as a failed command.
+        return { code: -1, stdout: '', stderr: error instanceof Error ? error.message : String(error) };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+async function runGitChecked(ctx, cwd, args, options) {
+    const result = await runGit(ctx, cwd, args, options);
+    if (result.code !== 0) {
+        throw new SessionCheckoutError('git_operation_failed', `Git 操作失败: git ${args.join(' ')}${result.stderr ? `: ${result.stderr}` : ''}`);
+    }
+    return result.stdout;
+}
+function checkoutRefRoot(checkoutId) {
+    const key = createHash('sha256').update(checkoutId).digest('hex').slice(0, 24);
+    return `refs/dsh-worktree/session-checkouts/${key}`;
+}
+function assertArtifactName(artifactName) {
+    const segments = artifactName.split('/');
+    if (segments.length === 0
+        || segments.some((segment) => !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(segment))) {
+        throw new SessionCheckoutError('invalid_input', '内部 Git artifact 名称无效');
+    }
+}
+function internalArtifactRef(checkoutId, artifactName) {
+    assertArtifactName(artifactName);
+    return `${checkoutRefRoot(checkoutId)}/${artifactName}`;
+}
+function applyBaseRef(checkoutId) {
+    return internalArtifactRef(checkoutId, 'apply-base');
+}
+/** Build the `ctx.subprocess`-backed git port. */
+export function createDshGitPort(ctx, options) {
+    const runSessionGit = (cwd, args) => runGit(ctx, cwd, args, options);
+    const runSessionGitChecked = (cwd, args) => runGitChecked(ctx, cwd, args, options);
+    return {
+        inspect: async (root) => {
+            const topLevel = await runSessionGit(root, ['rev-parse', '--show-toplevel']);
+            if (topLevel.code !== 0 || !topLevel.stdout)
+                return null;
+            const commonDir = await runSessionGitChecked(root, ['rev-parse', '--path-format=absolute', '--git-common-dir']);
+            const gitDir = await runSessionGitChecked(root, ['rev-parse', '--path-format=absolute', '--absolute-git-dir']);
+            const headOid = await runSessionGitChecked(root, ['rev-parse', 'HEAD']);
+            const symbolic = await runSessionGit(root, ['symbolic-ref', '--quiet', 'HEAD']);
+            const headRef = symbolic.code === 0 && symbolic.stdout ? symbolic.stdout : 'HEAD';
+            const branch = headRef.startsWith('refs/heads/') ? headRef.slice('refs/heads/'.length) : null;
+            return {
+                root: await realpath(resolve(topLevel.stdout)),
+                commonDir: await realpath(resolve(commonDir)),
+                gitDir: await realpath(resolve(gitDir)),
+                branch,
+                headOid,
+                headRef,
+            };
+        },
+        findContainingWorktreeRoot: async (root) => {
+            const topLevel = await runSessionGit(root, ['rev-parse', '--show-toplevel']);
+            if (topLevel.code !== 0 || !topLevel.stdout)
+                return null;
+            return realpath(resolve(topLevel.stdout));
+        },
+        status: async (root) => {
+            const output = await runSessionGitChecked(root, ['status', '--porcelain=v1', '-z', '--untracked-files=all']);
+            return { dirty: output.length > 0 };
+        },
+        createDetachedWorktree: async (localRoot, managedRoot, baseOid) => {
+            await runSessionGitChecked(localRoot, ['worktree', 'add', '--detach', managedRoot, baseOid]);
+        },
+        removeWorktree: async (localRoot, managedRoot) => {
+            // Git treats a reviewed-but-uncommitted final snapshot as modified/untracked;
+            // the caller has already verified checkout identity and the full fingerprint.
+            await runSessionGitChecked(localRoot, ['worktree', 'remove', '--force', managedRoot]);
+        },
+        retainApplyBase: async (localRoot, checkoutId, oid) => {
+            await runSessionGitChecked(localRoot, ['update-ref', applyBaseRef(checkoutId), oid]);
+        },
+        releaseApplyBase: async (localRoot, checkoutId) => {
+            await runSessionGitChecked(localRoot, ['update-ref', '-d', applyBaseRef(checkoutId)]);
+        },
+        retainInternalArtifact: async (localRoot, checkoutId, artifactName, oid) => {
+            await runSessionGitChecked(localRoot, ['update-ref', internalArtifactRef(checkoutId, artifactName), oid]);
+        },
+        releaseInternalArtifacts: async (localRoot, checkoutId, artifactPrefix) => {
+            const prefix = artifactPrefix
+                ? internalArtifactRef(checkoutId, artifactPrefix)
+                : `${checkoutRefRoot(checkoutId)}/`;
+            const output = await runSessionGitChecked(localRoot, ['for-each-ref', '--format=%(refname)', prefix]);
+            const refs = output.split(/\r?\n/).map((ref) => ref.trim()).filter(Boolean);
+            for (const ref of refs)
+                await runSessionGitChecked(localRoot, ['update-ref', '-d', ref]);
+        },
+        isAncestor: async (root, ancestorOid, descendantOid) => {
+            const result = await runSessionGit(root, ['merge-base', '--is-ancestor', ancestorOid, descendantOid]);
+            if (result.code === 0)
+                return true;
+            if (result.code === 1)
+                return false;
+            throw new Error(result.stderr || '无法证明 Git commit ancestry');
+        },
+    };
+}
+//# sourceMappingURL=git.js.map

package/lib/adapters/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/adapters/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAInC,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAElD,wFAAwF;AACxF,MAAM,sBAAsB,GAAG,MAAM,CAAA;AACrC,MAAM,0BAA0B,GAAG,CAAC,GAAG,MAAM,CAAA;AAC7C,kFAAkF;AAClF,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,CAAA;AAEjC,SAAS,YAAY,CAAC,IAAuB;IAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;QACnD,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,sBAAsB,CAAA;AAC5B,CAAC;AAaD;;;;GAIG;AACH,KAAK,UAAU,MAAM,CAAC,GAAY,EAAE,GAAW,EAAE,IAAc,EAAE,OAAuB;IACtF,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;IAC7D,OAAO,CAAC,KAAK,EAAE,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAqB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;YACpD,IAAI,EAAE;gBACJ,KAAK;gBACL,YAAY;gBACZ,qBAAqB;gBACrB,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,kBAAkB,OAAO,CAAC,SAAS,EAAE;gBAC3C,GAAG,IAAI;aACR;YACD,GAAG;YACH,KAAK,EAAE;gBACL,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE;gBACvC,MAAM,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE;aACxC;YACD,OAAO,EAAE,sBAAsB;YAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,GAAG,EAAE;gBACH,kBAAkB,EAAE,GAAG;gBACvB,mBAAmB,EAAE,GAAG;gBACxB,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,GAAG;aACV;SACF,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAA;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;QAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9F,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,OAAO,SAAS,EAAE,CAAA;QACnF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAA;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iFAAiF;QACjF,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACjG,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAA;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,GAAW,EAAE,IAAc,EAAE,OAAuB;IAC7F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,EACtB,iBAAiB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAA;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9E,OAAO,uCAAuC,GAAG,EAAE,CAAA;AACrD,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxC,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;WAClB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAA;IACzE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB,EAAE,YAAoB;IACnE,kBAAkB,CAAC,YAAY,CAAC,CAAA;IAChC,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,YAAY,EAAE,CAAA;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB;IACtC,OAAO,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;AACtD,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,gBAAgB,CAAC,GAAY,EAAE,OAAuB;IACpE,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACtF,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAEpG,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,IAAI,EAAuC,EAAE;YAC3D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAA;YAC5E,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,CAAC,CAAA;YAC/G,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,oBAAoB,CAAC,CAAC,CAAA;YAC9G,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;YACvE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YAC/E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;YACjF,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC7F,OAAO;gBACL,IAAI,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9C,SAAS,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC7C,MAAM,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM;gBACN,OAAO;gBACP,OAAO;aACR,CAAA;QACH,CAAC;QACD,0BAA0B,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACzC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAA;YAC5E,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxD,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3C,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAA;YAC5G,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAA;QACrC,CAAC;QACD,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;YAChE,MAAM,oBAAoB,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9F,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;YAC/C,8EAA8E;YAC9E,8EAA8E;YAC9E,MAAM,oBAAoB,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;QACvF,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,oBAAoB,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QACtF,CAAC;QACD,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;YAChD,MAAM,oBAAoB,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACvF,CAAC;QACD,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE;YACzE,MAAM,oBAAoB,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QAC3G,CAAC;QACD,wBAAwB,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE;YACxE,MAAM,MAAM,GAAG,cAAc;gBAC3B,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,cAAc,CAAC;gBACjD,CAAC,CAAC,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,CAAA;YACrC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAA;YACrG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAC3E,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,MAAM,oBAAoB,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;QAC1F,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE;YACrD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAA;YACrG,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YAClC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAA;YACnC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,0BAA0B,CAAC,CAAA;QAC9D,CAAC;KACF,CAAA;AACH,CAAC"}

package/lib/adapters/lookup.d.ts

@@ -0,0 +1,28 @@
+/**
+ * DSH lookup adapter: maps sessions and projects onto the harness's
+ * `workspaceRegistry` service (retrieved dynamically, like the ecosystem's
+ * plugins, because the published package version lags the rc.6 runtime). A
+ * session's project is found by scanning workspace session accounts; a
+ * project record maps to a workspace's `id`/`title`/`path`. Missing service or
+ * records degrade to `undefined`, which the state machine treats as
+ * recovery/orphan facts rather than failures.
+ * @module dsh-git-worktree/adapters/lookup
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { SessionCheckoutLookupPort } from '../ports.js';
+/** Minimal structural view of the harness workspace registry (see `@deepseek-ai/dsh-workspace`). */
+export interface WorkspaceLike {
+    readonly id: string;
+    readonly path: string;
+    readonly title: string;
+    readonly sessionIds: readonly string[];
+}
+export interface WorkspaceRegistryLike {
+    list(): WorkspaceLike[];
+    get(id: string): WorkspaceLike | undefined;
+    resolveByPath(path: string): Promise<WorkspaceLike | undefined>;
+    create(path: string, title?: string): Promise<WorkspaceLike>;
+    delete(id: string): Promise<boolean>;
+}
+/** Build the lookup port over the harness workspace registry (absent → all lookups miss). */
+export declare function createDshLookupPort(ctx: Context): SessionCheckoutLookupPort;

package/lib/adapters/lookup.js

@@ -0,0 +1,41 @@
+/**
+ * DSH lookup adapter: maps sessions and projects onto the harness's
+ * `workspaceRegistry` service (retrieved dynamically, like the ecosystem's
+ * plugins, because the published package version lags the rc.6 runtime). A
+ * session's project is found by scanning workspace session accounts; a
+ * project record maps to a workspace's `id`/`title`/`path`. Missing service or
+ * records degrade to `undefined`, which the state machine treats as
+ * recovery/orphan facts rather than failures.
+ * @module dsh-git-worktree/adapters/lookup
+ */
+function isWorkspaceRegistryLike(value) {
+    return Boolean(value)
+        && typeof value === 'object'
+        && typeof value.list === 'function'
+        && typeof value.get === 'function';
+}
+/** Build the lookup port over the harness workspace registry (absent → all lookups miss). */
+export function createDshLookupPort(ctx) {
+    const registry = () => {
+        const candidate = ctx.get('workspaceRegistry');
+        return isWorkspaceRegistryLike(candidate) ? candidate : undefined;
+    };
+    return {
+        getSession: (sessionId) => {
+            const workspaces = registry()?.list() ?? [];
+            for (const workspace of workspaces) {
+                if (workspace.sessionIds.includes(sessionId)) {
+                    return { id: sessionId, projectId: workspace.id };
+                }
+            }
+            return undefined;
+        },
+        getProject: (projectId) => {
+            const workspace = registry()?.get(projectId);
+            return workspace
+                ? { id: workspace.id, name: workspace.title, root: workspace.path }
+                : undefined;
+        },
+    };
+}
+//# sourceMappingURL=lookup.js.map

package/lib/adapters/lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.js","sourceRoot":"","sources":["../../src/adapters/lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAqBH,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,OAAO,CAAC,KAAK,CAAC;WAChB,OAAO,KAAK,KAAK,QAAQ;WACzB,OAAQ,KAA+B,CAAC,IAAI,KAAK,UAAU;WAC3D,OAAQ,KAA+B,CAAC,GAAG,KAAK,UAAU,CAAA;AACjE,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,MAAM,QAAQ,GAAG,GAAsC,EAAE;QACvD,MAAM,SAAS,GAAY,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QACvD,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IACnE,CAAC,CAAA;IAED,OAAO;QACL,UAAU,EAAE,CAAC,SAAS,EAA4C,EAAE;YAClE,MAAM,UAAU,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAC3C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7C,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAA;gBACnD,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,UAAU,EAAE,CAAC,SAAS,EAA4C,EAAE;YAClE,MAAM,SAAS,GAAG,QAAQ,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;YAC5C,OAAO,SAAS;gBACd,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;gBACnE,CAAC,CAAC,SAAS,CAAA;QACf,CAAC;KACF,CAAA;AACH,CAAC"}

package/lib/adapters/registry.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Durable registry adapter: the session-checkout registry (version 2) as one
+ * atomic JSON file under the plugin's state directory. Validation gates every
+ * read — a corrupt file fails loud instead of being silently overwritten;
+ * v1 records migrate conservatively to `recovery_required` like Domi.
+ * @module dsh-git-worktree/adapters/registry
+ */
+import type { ManagedCheckoutsRegistry, SessionCheckoutRegistryPort } from '../ports.js';
+/** Atomic JSON registry file with `.tmp`/`.bak` crash recovery (see safe-file). */
+export declare class AtomicJsonCheckoutRegistry implements SessionCheckoutRegistryPort {
+    private readonly path;
+    constructor(path: string);
+    read(): ManagedCheckoutsRegistry;
+    write(registry: ManagedCheckoutsRegistry): void;
+}