forge-workflow 0.0.10 → 0.1.0-beta.2

package/lib/commands/validate.js

@@ -11,6 +11,7 @@
 const { execFileSync } = require('node:child_process');
 const fs = require('node:fs');
 const path = require('node:path');
+const { secureExecFileSync } = require('../shell-utils');
 
 // Constants
 const CHECK_TYPES = {
@@ -31,15 +32,11 @@ const CONFLICT_MARKER_IGNORE_DIRS = new Set([
 ]);
 const CONFLICT_MARKER_ALLOWED_DOT_DIRS = new Set([
 	'.claude',
-	'.cline',
 	'.codex',
 	'.cursor',
 	'.forge',
 	'.github',
 	'.husky',
-	'.kilocode',
-	'.opencode',
-	'.roo',
 	'.sonarlint',
 ]);
 const CONFLICT_START_PATTERN = /^<<<<<<<(?: .*)?$/;
@@ -466,7 +463,7 @@ async function runSecurityScan() { // NOSONAR S3776
 		try {
 			let npmRawOutput = null;
 			try {
-				npmRawOutput = execFileSync('npm', ['audit', '--json', '--production'], getExecOptions());  // NOSONAR S4036 - hardcoded CLI command, no user input, developer tool context
+				npmRawOutput = secureExecFileSync('npm', ['audit', '--json', '--production'], getExecOptions());  // NOSONAR S4036 - hardcoded CLI command, no user input, developer tool context
 			} catch (npmExitError) {
 				if (npmExitError.killed && npmExitError.signal === 'SIGTERM') {
 					return {
@@ -566,23 +563,46 @@ async function runSecurityScan() { // NOSONAR S3776
  * const result = await runAllTests();
  * console.log(`${result.passed}/${result.total} tests passed`);
  */
-async function runAllTests() {
+function parseTestCounts(output) {
+	const text = String(output || '');
+	const passed = parseNumber(/(\d+) pass/.exec(text));  // NOSONAR S5852 - bounded \d+ pattern
+	const failed = parseNumber(/(\d+) fail/.exec(text));  // NOSONAR S5852 - bounded \d+ pattern
+	const skipped = parseNumber(/(\d+) skip/.exec(text));  // NOSONAR S5852 - bounded \d+ pattern
+	const ranMatch = /Ran (\d+) tests/.exec(text);  // NOSONAR S5852 - bounded \d+ pattern
+	const total = ranMatch ? parseNumber(ranMatch, 1) : passed + failed + skipped;
+	return { passed, failed, skipped, total, testsFound: total > 0 };
+}
+
+async function runAllTests(exec = execFileSync) {
 	const startTime = Date.now();
 
 	try {
-		const result = execFileSync('bun', ['test', '--timeout', '30000'], getExecOptions());  // NOSONAR S4036 - hardcoded CLI command, no user input, developer tool context
+		const result = exec('bun', ['test', '--timeout', '30000'], getExecOptions());  // NOSONAR S4036 - hardcoded CLI command, no user input, developer tool context
+
+		const { passed, failed, skipped, total, testsFound } = parseTestCounts(result);
 
-		// Parse bun test output
-		const passed = parseNumber(/(\d+) pass/.exec(result));  // NOSONAR S5852 - bounded \d+ pattern
-		const failed = parseNumber(/(\d+) fail/.exec(result));  // NOSONAR S5852 - bounded \d+ pattern
-		const skipped = parseNumber(/(\d+) skip/.exec(result));  // NOSONAR S5852 - bounded \d+ pattern
-		const total = parseNumber(/Ran (\d+) tests/.exec(result), 1, passed + failed + skipped);
+		// B2 (N1): a bun run that executes 0 tests must NEVER report PASS — that
+		// manufactures false confidence. Surface it as an explicit SKIP instead.
+		if (!testsFound) {
+			return {
+				success: true,
+				skipped: true,
+				testsFound: false,
+				duration: Date.now() - startTime,
+				passed,
+				failed,
+				total,
+				message: 'No tests found — 0 tests executed (SKIP, not a pass). Add tests or check the runner config.',
+			};
+		}
 
 		return {
 			success: failed === 0,
+			testsFound: true,
 			duration: Date.now() - startTime,
 			passed,
 			failed,
+			skipped,
 			total,
 			message: failed === 0
 				? `All ${total} tests passed`
@@ -601,28 +621,32 @@ async function runAllTests() {
 			};
 		}
 
-		// Test execution failed
+		// Test runner absent — say so explicitly (do NOT silently pass).
 		if (isCommandNotFound(error)) {
 			return {
 				success: true,
 				skipped: true,
+				testsFound: false,
 				duration: Date.now() - startTime,
 				passed: 0,
 				failed: 0,
 				total: 0,
-				message: 'Tests skipped: bun not found.',
+				message: 'Tests skipped: bun test runner not found. Install bun to run tests.',
 			};
 		}
 
 		// Parse test failures from output
 		const output = error.stdout || error.message;
-		const passed = parseNumber(/(\d+) pass/.exec(output));  // NOSONAR S5852 - bounded \d+ pattern
-		const failed = parseNumber(/(\d+) fail/.exec(output), 1, 1);  // NOSONAR S5852 - bounded \d+ pattern
-		const skipped = parseNumber(/(\d+) skip/.exec(output));  // NOSONAR S5852 - bounded \d+ pattern
-		const total = passed + failed + skipped;
+		const counts = parseTestCounts(output);
+		const passed = counts.passed;
+		// bun exited non-zero: if the output shows no explicit failure count, treat
+		// it as at least one failure rather than swallowing the non-zero exit.
+		const failed = counts.failed > 0 ? counts.failed : Math.max(1, counts.failed);
+		const total = counts.total > 0 ? counts.total : passed + failed + counts.skipped;
 
 		return {
 			success: false,
+			testsFound: counts.testsFound,
 			duration: Date.now() - startTime,
 			passed,
 			failed,
@@ -832,6 +856,7 @@ module.exports = {
 	runLint,
 	runSecurityScan,
 	runAllTests,
+	parseTestCounts,
 	scanForConflictMarkers,
 	executeValidate,
 	executeDebugMode,

package/lib/commands/worktree.js

@@ -3,15 +3,18 @@
 const { execFileSync, spawnSync } = require('node:child_process');
 const fs = require('node:fs');
 const path = require('node:path');
-const { bootstrapBeads } = require('../beads-bootstrap');
 
 /**
  * Forge Worktree Command
- * Manage isolated worktrees with Beads integration.
+ * Manage isolated worktrees.
  * Uses execFileSync (not execSync) to prevent command injection (OWASP A03).
  *
+ * The Kernel issue store lives in the git common dir, which every worktree of a
+ * repo shares, so no per-worktree issue-store bootstrap is needed — a new
+ * worktree already sees the same kernel.
+ *
  * Subcommands:
- *   create <slug> - Create worktree at .worktrees/<slug> with branch + beads + install
+ *   create <slug> - Create worktree at .worktrees/<slug> with branch + install
  *   remove <slug> - Remove worktree via git worktree remove
  *
  * @module commands/worktree
@@ -24,7 +27,10 @@ const { bootstrapBeads } = require('../beads-bootstrap');
  * @returns {string|null} Package manager command or null
  */
 function detectPackageManager(projectRoot, fsApi) {
+  // Bun ships two lockfile formats: the legacy binary `bun.lockb` and the current
+  // text `bun.lock`. Recognize both so a Bun repo isn't mis-detected as npm.
   if (fsApi.existsSync(path.join(projectRoot, 'bun.lockb'))) return 'bun';
+  if (fsApi.existsSync(path.join(projectRoot, 'bun.lock'))) return 'bun';
   if (fsApi.existsSync(path.join(projectRoot, 'pnpm-lock.yaml'))) return 'pnpm';
   if (fsApi.existsSync(path.join(projectRoot, 'yarn.lock'))) return 'yarn';
   if (fsApi.existsSync(path.join(projectRoot, 'package-lock.json'))) return 'npm';
@@ -32,51 +38,6 @@ function detectPackageManager(projectRoot, fsApi) {
   return null;
 }
 
-/**
- * Stop a Dolt server running in a worktree to release file locks.
- * Tries graceful `bd dolt stop` first, then falls back to PID-based kill
- * from lock files. Never kills ALL Dolt processes - only the specific PID.
- *
- * @param {string} worktreePath - Absolute path to the worktree
- * @param {object} [opts] - Options for dependency injection
- * @param {Function} [opts._exec] - Override for execFileSync (testing)
- * @param {object} [opts._fs] - Override for fs module (testing)
- * @param {string} [opts._platform] - Override for process.platform (testing)
- * @returns {{ stopped: boolean, method: string, pid?: number }}
- */
-function stopDolt(worktreePath, opts = {}) {
-  const exec = opts._exec || execFileSync;
-  const _fs = opts._fs || fs;
-  const platform = opts._platform || process.platform;
-
-  // 1. Try graceful: bd dolt stop
-  try {
-    exec('bd', ['dolt', 'stop'], { cwd: worktreePath, timeout: 5000, stdio: 'pipe' });
-    return { stopped: true, method: 'bd-dolt-stop' };
-  } catch (_e) { /* intentional: bd not available, try PID-based kill */ } // NOSONAR S2486
-
-  // 2. Try PID-based kill from lock file
-  const lockPaths = [
-    path.join(worktreePath, '.beads', 'dolt-server.lock'),
-    path.join(worktreePath, '.beads', 'daemon.lock'),
-  ];
-  for (const lockPath of lockPaths) {
-    try {
-      const pid = Number.parseInt(_fs.readFileSync(lockPath, 'utf-8').trim(), 10);
-      if (!Number.isNaN(pid)) {
-        if (platform === 'win32') {
-          exec('taskkill', ['/F', '/PID', String(pid)], { stdio: 'pipe' });
-        } else {
-          process.kill(pid, 'SIGTERM');
-        }
-        return { stopped: true, method: 'pid-kill', pid };
-      }
-    } catch (_e) { /* intentional: try next lock file */ } // NOSONAR S2486
-  }
-
-  return { stopped: false, method: 'none' };
-}
-
 /**
  * Check if a git branch already exists.
  * @param {string} branchName - Branch name to check
@@ -92,42 +53,190 @@ function branchExists(branchName, runFile) {
   }
 }
 
-function setupBeadsWithBootstrap(worktreePath, projectRoot, platform, fsApi, exec, options = {}) {
-  if (!fsApi.existsSync(path.resolve(projectRoot, '.beads'))) {
-    return 'Beads not installed - skipping .beads setup';
-  }
-
-  const bootstrapResult = bootstrapBeads(worktreePath, {
-    _exec: exec,
-    _fs: fsApi,
-    _platform: platform,
-    mainProjectRoot: projectRoot,
-    _safeBeadsInit: options._safeBeadsInit,
-  });
-
-  try {
-    exec('bd', ['--version'], { cwd: worktreePath, timeout: 5000, stdio: 'pipe' });
-  } catch (_bdErr) { /* intentional: bd may not be on PATH */ // NOSONAR S2486
-    if (bootstrapResult.success === false && bootstrapResult.warning) {
-      return bootstrapResult.warning;
-    }
-    return 'Beads verification failed - .beads linked but bd may not work';
-  }
-
-  return bootstrapResult.warning;
+/**
+ * True when a link failure is a privilege/support problem (Windows without the
+ * symlink privilege, restricted FS) rather than a real error. In that case we
+ * degrade to a package install instead of hard-failing.
+ * @param {Error} error
+ * @returns {boolean}
+ */
+function isLinkPermissionError(error) {
+  return ['EPERM', 'EACCES', 'ENOSYS', 'UV_EPERM'].includes(error && error.code);
 }
 
 /**
- * Run package install in the new worktree if a package manager is detected.
+ * Run package install in the new worktree if a package manager is detected, and
+ * SURFACE failures (spawn error or non-zero exit) instead of swallowing them.
  * @param {string} worktreePath - Absolute path to the new worktree
  * @param {string} projectRoot - Absolute path to the project root
  * @param {Function} spawnFn - spawnSync-compatible function
  * @param {object} fsApi - fs module (for DI)
+ * @returns {{ linked: boolean, installed: boolean }}
+ * @throws {Error} when the install cannot be spawned or exits non-zero.
  */
 function runInstall(worktreePath, projectRoot, spawnFn, fsApi) {
   const pkgManager = detectPackageManager(projectRoot, fsApi);
-  if (pkgManager) {
-    spawnFn(pkgManager, ['install'], { cwd: worktreePath, stdio: 'pipe' });
+  if (!pkgManager) return { linked: false, installed: false };
+
+  // shell:true on Windows: npm/pnpm/yarn are .cmd shims that cannot be spawned
+  // directly (ENOENT / EINVAL). pkgManager comes from lockfile detection (fixed
+  // set) and args are hardcoded, so no user input reaches the shell.
+  const result = spawnFn(pkgManager, ['install'], {
+    cwd: worktreePath,
+    stdio: 'pipe',
+    shell: process.platform === 'win32',
+  });
+  if (result && result.error) {
+    throw new Error(`Dependency install failed: could not run '${pkgManager} install' in ${worktreePath}: ${result.error.message}`);
+  }
+  if (result && typeof result.status === 'number' && result.status !== 0) {
+    throw new Error(`Dependency install failed: '${pkgManager} install' exited with code ${result.status} in ${worktreePath}`);
+  }
+  return { linked: false, installed: true };
+}
+
+/**
+ * Populate the new worktree's node_modules. Fast path: link to the main repo's
+ * shared install (a junction on Windows, a directory symlink on POSIX) so a fresh
+ * worktree is immediately usable without a full reinstall — this repo's own
+ * worktrees follow that pattern. Fallback: run the detected package manager's
+ * install when there is no shared install to link. Both paths surface failures.
+ * @param {string} worktreePath - Absolute path to the new worktree
+ * @param {string} projectRoot - Absolute path to the project root
+ * @param {object} deps
+ * @param {Function} deps.spawnFn - spawnSync-compatible function
+ * @param {object} deps.fsApi - fs module (for DI)
+ * @param {string} deps.platform - process.platform value
+ * @returns {{ linked: boolean, installed: boolean }}
+ * @throws {Error} when linking fails for a non-privilege reason or install fails.
+ */
+function setupWorktreeDeps(worktreePath, projectRoot, { spawnFn, fsApi, platform }) {
+  const srcModules = path.join(projectRoot, 'node_modules');
+  const destModules = path.join(worktreePath, 'node_modules');
+
+  // Already populated (e.g. git checkout carried it) — nothing to do.
+  if (fsApi.existsSync(destModules)) return { linked: false, installed: false };
+
+  // Fast path: link to the shared install when the main repo has one.
+  if (fsApi.existsSync(srcModules)) {
+    const linkType = platform === 'win32' ? 'junction' : 'dir';
+    try {
+      fsApi.symlinkSync(srcModules, destModules, linkType);
+      return { linked: true, installed: false };
+    } catch (error) {
+      // Degrade to a real install only when the link was refused for lack of
+      // privilege/support; any other failure is surfaced to the caller.
+      if (!isLinkPermissionError(error)) throw error;
+    }
+  }
+
+  return runInstall(worktreePath, projectRoot, spawnFn, fsApi);
+}
+
+/**
+ * Best-effort: record the issue → worktree → work-folder linkage in the Kernel so
+ * `forge worktree list` and orientation READ it instead of guessing the work-folder by
+ * a filesystem heuristic. Writes a `kernel_worktrees` row keyed by the absolute worktree
+ * path (idempotent upsert) and, when an issue + work-folder are given, drops a
+ * machine-readable `.forge-issue` marker so a folder resolves to its issue deterministically.
+ *
+ * Never throws: a repo without a reachable Kernel (or without the 007 linkage columns)
+ * must still get a usable worktree — orientation falls back to the folder heuristic.
+ *
+ * @param {object} params
+ * @param {string} params.projectRoot
+ * @param {string} params.worktreePath - Absolute worktree path (the row key).
+ * @param {string} params.branch
+ * @param {string|null} params.issueId
+ * @param {string|null} params.workFolder - Repo-relative work-folder path.
+ * @param {object} params.opts - DI options (may inject `_kernelDriver`, `_exec`, `_fs`).
+ * @returns {Promise<{registered: boolean, issueId: string|null, workFolder: string|null, reason?: string}>}
+ */
+async function registerWorktreeLinkage({ projectRoot, worktreePath, branch, issueId, workFolder, opts }) {
+  const runFile = opts._exec || execFileSync;
+  const fsApi = opts._fs || fs;
+  try {
+    // Drop the folder → issue marker first — deterministic even if the DB write fails.
+    if (workFolder && issueId) {
+      const folderAbs = path.resolve(projectRoot, workFolder);
+      fsApi.mkdirSync(folderAbs, { recursive: true });
+      fsApi.writeFileSync(path.join(folderAbs, '.forge-issue'), `${issueId}\n`, 'utf8');
+    }
+
+    let driver = opts._kernelDriver;
+    if (!driver) {
+      // No reachable git repo → no shared Kernel; skip quietly (orientation still works
+      // off the folder heuristic). Avoids spawning `git` in a non-repo directory.
+      if (!fsApi.existsSync(path.join(projectRoot, '.git'))) {
+        return { registered: false, issueId: issueId || null, workFolder: workFolder || null, reason: 'no git repository' };
+      }
+      // Lazy require: keep the worktree command light and avoid paying kernel setup
+      // when linkage is not needed. Migrated deps guarantee the 007 columns exist.
+      const { buildMigratedKernelIssueDeps } = require('../kernel/cli-broker-factory');
+      driver = (await buildMigratedKernelIssueDeps({ projectRoot })).kernelDriver;
+    }
+
+    const { resolveGitCommonDir } = require('../kernel/broker');
+    const gitCommonDir = resolveGitCommonDir(projectRoot, { execFileSync: runFile });
+
+    driver.registerWorktree({
+      git_common_dir: gitCommonDir,
+      path: worktreePath,
+      branch,
+      actor: process.env.FORGE_ACTOR || null,
+      issue_id: issueId || null,
+      work_folder: workFolder || null,
+      registered_at: new Date().toISOString(),
+      state: 'active',
+    });
+
+    return { registered: true, issueId: issueId || null, workFolder: workFolder || null };
+  } catch (error) {
+    // Non-fatal: keep the worktree usable. Only warn when the caller explicitly asked
+    // for linkage (--issue/--work-folder); a plain `worktree create` stays quiet.
+    if (issueId || workFolder) {
+      process.stderr.write(`forge worktree: kernel linkage not recorded (${error.message})\n`);
+    }
+    return { registered: false, issueId: issueId || null, workFolder: workFolder || null, reason: error.message };
+  }
+}
+
+/**
+ * Auto-file rail: guarantee the new worktree's branch has a backing Kernel issue,
+ * WITHOUT anyone remembering `forge issue create` (kernel issue a4b8f56f). Best-effort
+ * and NON-BLOCKING — the worktree must stay usable even if tracking fails, so any error
+ * degrades to a stderr warning and null. Skipped when `--issue` already links a real
+ * issue. Idempotent via ensureBackingIssue (deduped by branch), so re-creating a
+ * worktree or later `forge push`/pre-push firing never mints a duplicate.
+ *
+ * @param {object} params
+ * @param {string} params.projectRoot
+ * @param {string} params.worktreePath
+ * @param {string} params.branch
+ * @param {string|null} params.issueId - explicit --issue (skip auto-file when set).
+ * @param {object} params.opts - DI (may inject `_ensureBackingIssue`, `_kernelDriver`, `_kernelBroker`, `_fs`).
+ * @returns {Promise<object|null>} the backing-issue descriptor, or null when skipped/unavailable.
+ */
+async function autoFileBackingIssue({ projectRoot, worktreePath, branch, issueId, opts }) {
+  if (issueId) return null; // explicit --issue already links a real issue.
+  const fsApi = opts._fs || fs;
+  try {
+    // Lazy require INSIDE the try: a module-load failure (missing file / broken
+    // sub-dependency) must degrade to null, never crash `forge worktree create`.
+    const ensureFn = opts._ensureBackingIssue || require('../kernel/backing-issue').ensureBackingIssue;
+    let driver = opts._kernelDriver;
+    let broker = opts._kernelBroker;
+    if (!driver || !broker) {
+      if (!fsApi.existsSync(path.join(projectRoot, '.git'))) return null; // no repo → no kernel
+      const { buildMigratedKernelIssueDeps } = require('../kernel/cli-broker-factory');
+      const deps = await buildMigratedKernelIssueDeps({ projectRoot });
+      driver = driver || deps.kernelDriver;
+      broker = broker || deps.kernelBroker;
+    }
+    return await ensureFn({ branch, projectRoot, worktreePath, driver, broker });
+  } catch (error) {
+    process.stderr.write(`forge worktree: backing issue not auto-filed (${error.message})\n`);
+    return null;
   }
 }
 
@@ -143,9 +252,10 @@ async function handleCreate(slug, flags, projectRoot, opts) {
   const runFile = opts._exec || execFileSync;
   const runSpawn = opts._spawn || spawnSync;
   const fsApi = opts._fs || fs;
-  const platform = opts._platform || process.platform;
 
   const branchName = flags['--branch'] || flags.branch || `feat/${slug}`;
+  const issueId = flags['--issue'] || null;
+  const workFolder = flags['--work-folder'] || null;
   const worktreesDir = path.resolve(projectRoot, '.worktrees');
 
   // Guard: Detect bare repo state - worktrees created from bare repos produce broken branches
@@ -170,11 +280,23 @@ async function handleCreate(slug, flags, projectRoot, opts) {
 
   // Step 0: Check if worktree already exists
   if (fsApi.existsSync(worktreePath)) {
+    // A pre-existing worktree may be checked out on a different branch than the
+    // requested branchName — read the actual HEAD so the kernel row is accurate.
+    let existingBranch = branchName;
+    try {
+      const head = runFile('git', ['-C', worktreePath, 'rev-parse', '--abbrev-ref', 'HEAD'], { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+      // A detached worktree reports the literal "HEAD" — don't persist that; keep branchName.
+      if (head && head !== 'HEAD') existingBranch = head;
+    } catch (_error) { /* not a resolvable worktree HEAD — fall back to branchName */ }
+    const linkage = await registerWorktreeLinkage({ projectRoot, worktreePath, branch: existingBranch, issueId, workFolder, opts });
+    const backing = await autoFileBackingIssue({ projectRoot, worktreePath, branch: existingBranch, issueId, opts });
     return {
       success: true,
       reused: true,
       message: `Worktree already exists at ${worktreePath}`,
       worktreePath,
+      linkage,
+      backing,
     };
   }
 
@@ -189,21 +311,52 @@ async function handleCreate(slug, flags, projectRoot, opts) {
     runFile('git', ['worktree', 'add', worktreePath, '-b', branchName], { stdio: 'pipe' });
   }
 
-  // Step 3: Beads integration
-  const beadsWarning = setupBeadsWithBootstrap(worktreePath, projectRoot, platform, fsApi, runFile, opts);
+  // Step 3: Populate node_modules (link to the shared install, else install).
+  // No per-worktree issue-store bootstrap is needed — the Kernel DB lives in the
+  // shared git common dir, so the new worktree already sees the same kernel.
+  let deps;
+  try {
+    deps = setupWorktreeDeps(worktreePath, projectRoot, {
+      spawnFn: runSpawn,
+      fsApi,
+      platform: opts._platform || process.platform,
+    });
+  } catch (error) {
+    // Surface the failure instead of leaving a worktree with no usable deps.
+    return { success: false, error: error.message, worktreePath, branch: branchName };
+  }
 
-  // Step 4: Run package install
-  runInstall(worktreePath, projectRoot, runSpawn, fsApi);
+  const linkage = await registerWorktreeLinkage({ projectRoot, worktreePath, branch: branchName, issueId, workFolder, opts });
+  const backing = await autoFileBackingIssue({ projectRoot, worktreePath, branch: branchName, issueId, opts });
 
-  const result = {
+  return {
     success: true,
     worktreePath,
     branch: branchName,
+    depsLinked: deps.linked,
+    depsInstalled: deps.installed,
+    linkage,
+    backing,
   };
-  if (beadsWarning) {
-    result.beadsWarning = beadsWarning;
+}
+
+/**
+ * Handle the "list" subcommand — read the worktree registry from the Kernel.
+ * @param {string} projectRoot - Project root path
+ * @param {object} opts - DI options (may inject `_kernelDriver`)
+ * @returns {Promise<object>} Result object with a `worktrees` array
+ */
+async function handleList(projectRoot, opts) {
+  try {
+    let driver = opts._kernelDriver;
+    if (!driver) {
+      const { buildMigratedKernelIssueDeps } = require('../kernel/cli-broker-factory');
+      driver = (await buildMigratedKernelIssueDeps({ projectRoot })).kernelDriver;
+    }
+    return { success: true, worktrees: driver.listWorktrees({}) };
+  } catch (error) {
+    return { success: false, error: error.message, worktrees: [] };
   }
-  return result;
 }
 
 /**
@@ -220,29 +373,65 @@ async function handleRemove(slug, projectRoot, opts) {
   }
 
   const runFile = opts._exec || execFileSync;
-  const fsModule = opts._fs || fs;
   const worktreePath = path.resolve(projectRoot, '.worktrees', slug);
 
-  // Stop Dolt server to release file locks
-  const stopResult = stopDolt(worktreePath, { _exec: runFile, _fs: fsModule, _platform: opts._platform });
-  if (stopResult.stopped) {
-    // Brief wait for file locks to release (Windows needs this)
-    await new Promise(r => setTimeout(r, 500));
-  }
-
+  // No issue-store server to stop: the Kernel SQLite DB lives in the shared git
+  // common dir, so removing a worktree directory never touches it.
   runFile('git', ['worktree', 'remove', worktreePath], { stdio: 'pipe' });
 
   return { success: true, removed: worktreePath };
 }
 
+// Long flags that take a value, in both `--flag value` and `--flag=value` forms.
+const WORKTREE_VALUE_FLAGS = ['--branch', '--issue', '--work-folder'];
+const WORKTREE_USAGE_HINT = 'Usage: forge worktree create <slug> [--branch <name>] [--issue <id>] [--work-folder <path>]';
+
+function parseWorktreeArgs(args, flags) {
+  const positional = [];
+  const parsedFlags = { ...flags };
+
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+
+    const spaceFlag = WORKTREE_VALUE_FLAGS.find(flag => arg === flag);
+    if (spaceFlag) {
+      const value = args[i + 1];
+      if (!value || value.startsWith('--')) {
+        return { error: `Missing value for ${spaceFlag}. ${WORKTREE_USAGE_HINT}` };
+      }
+      parsedFlags[spaceFlag] = value;
+      i++;
+      continue;
+    }
+
+    const eqFlag = WORKTREE_VALUE_FLAGS.find(flag => arg.startsWith(`${flag}=`));
+    if (eqFlag) {
+      const value = arg.slice(`${eqFlag}=`.length);
+      if (!value) {
+        return { error: `Missing value for ${eqFlag}. ${WORKTREE_USAGE_HINT}` };
+      }
+      parsedFlags[eqFlag] = value;
+      continue;
+    }
+
+    positional.push(arg);
+  }
+
+  // Back-compat alias consumed by handleCreate (flags['--branch'] || flags.branch).
+  if (parsedFlags['--branch']) parsedFlags.branch = parsedFlags['--branch'];
+
+  return { args: positional, flags: parsedFlags };
+}
+
 module.exports = {
   name: 'worktree',
-  description: 'Manage isolated worktrees with Beads integration',
-  usage: 'forge worktree <create|remove> <slug>',
+  description: 'Manage isolated worktrees',
+  usage: 'forge worktree <create|remove|list> <slug>',
   flags: {
     '--branch': 'Custom branch name (default: feat/<slug>)',
+    '--issue': 'Kernel issue id to link this worktree to (records issue → worktree)',
+    '--work-folder': 'Repo-relative work-folder this issue owns (records worktree → work-folder + drops a .forge-issue marker)',
   },
-  stopDolt,
 
   /**
    * Main handler for the worktree command.
@@ -257,27 +446,45 @@ module.exports = {
    * @returns {Promise<object>}
    */
   handler: async (args, flags, projectRoot, opts = {}) => {
-    const subcommand = args[0];
-    const slug = args[1];
+    const parsed = parseWorktreeArgs(args, flags);
+    if (parsed.error) {
+      return { success: false, error: parsed.error };
+    }
+
+    const subcommand = parsed.args[0];
 
-    if (!subcommand || !['create', 'remove'].includes(subcommand)) {
+    if (!subcommand || !['create', 'remove', 'list'].includes(subcommand)) {
       return {
         success: false,
-        error: 'Missing or invalid subcommand. Usage: forge worktree <create|remove> <slug>',
+        error: 'Missing or invalid subcommand. Usage: forge worktree <create|remove|list> <slug>',
       };
     }
 
+    // `list` reads the Kernel registry and takes no slug.
+    if (subcommand === 'list') {
+      return handleList(projectRoot, opts);
+    }
+
+    const slug = parsed.args[1];
     if (!slug) {
       return {
         success: false,
-        error: 'Missing slug. Usage: forge worktree <create|remove> <slug>',
+        error: 'Missing slug. Usage: forge worktree <create|remove|list> <slug>',
       };
     }
 
     if (subcommand === 'create') {
-      return handleCreate(slug, flags, projectRoot, opts);
+      return handleCreate(slug, parsed.flags, projectRoot, opts);
     }
 
     return handleRemove(slug, projectRoot, opts);
   },
+
+  // Exposed for unit tests; not part of the CLI surface.
+  _internal: {
+    detectPackageManager,
+    setupWorktreeDeps,
+    runInstall,
+    autoFileBackingIssue,
+  },
 };