forge-workflow 0.0.9 → 0.1.0-beta.2

package/lib/commands/worktree.js

@@ -6,12 +6,16 @@ const path = require('node:path');
 
 /**
  * Forge Worktree Command
- * Manage isolated worktrees with Beads integration.
+ * Manage isolated worktrees.
  * Uses execFileSync (not execSync) to prevent command injection (OWASP A03).
  *
+ * The Kernel issue store lives in the git common dir, which every worktree of a
+ * repo shares, so no per-worktree issue-store bootstrap is needed — a new
+ * worktree already sees the same kernel.
+ *
  * Subcommands:
- *   create <slug> — Create worktree at .worktrees/<slug> with branch + beads + install
- *   remove <slug> — Remove worktree via git worktree remove
+ *   create <slug> - Create worktree at .worktrees/<slug> with branch + install
+ *   remove <slug> - Remove worktree via git worktree remove
  *
  * @module commands/worktree
  */
@@ -23,7 +27,10 @@ const path = require('node:path');
  * @returns {string|null} Package manager command or null
  */
 function detectPackageManager(projectRoot, fsApi) {
+  // Bun ships two lockfile formats: the legacy binary `bun.lockb` and the current
+  // text `bun.lock`. Recognize both so a Bun repo isn't mis-detected as npm.
   if (fsApi.existsSync(path.join(projectRoot, 'bun.lockb'))) return 'bun';
+  if (fsApi.existsSync(path.join(projectRoot, 'bun.lock'))) return 'bun';
   if (fsApi.existsSync(path.join(projectRoot, 'pnpm-lock.yaml'))) return 'pnpm';
   if (fsApi.existsSync(path.join(projectRoot, 'yarn.lock'))) return 'yarn';
   if (fsApi.existsSync(path.join(projectRoot, 'package-lock.json'))) return 'npm';
@@ -31,66 +38,6 @@ function detectPackageManager(projectRoot, fsApi) {
   return null;
 }
 
-/**
- * Copy .beads/ directory excluding daemon.lock.
- * @param {string} source - Source .beads path
- * @param {string} dest - Destination .beads path
- * @param {object} fsApi - fs module (for DI)
- */
-function copyBeadsDir(source, dest, fsApi) {
-  fsApi.mkdirSync(dest, { recursive: true });
-  const entries = fsApi.readdirSync(source);
-  for (const entry of entries) {
-    if (entry === 'daemon.lock') continue;
-    fsApi.cpSync(path.join(source, entry), path.join(dest, entry), { recursive: true });
-  }
-}
-
-/**
- * Stop a Dolt server running in a worktree to release file locks.
- * Tries graceful `bd dolt stop` first, then falls back to PID-based kill
- * from lock files. Never kills ALL Dolt processes — only the specific PID.
- *
- * @param {string} worktreePath - Absolute path to the worktree
- * @param {object} [opts] - Options for dependency injection
- * @param {Function} [opts._exec] - Override for execFileSync (testing)
- * @param {object} [opts._fs] - Override for fs module (testing)
- * @param {string} [opts._platform] - Override for process.platform (testing)
- * @returns {{ stopped: boolean, method: string, pid?: number }}
- */
-function stopDolt(worktreePath, opts = {}) {
-  const exec = opts._exec || execFileSync;
-  const _fs = opts._fs || fs;
-  const platform = opts._platform || process.platform;
-
-  // 1. Try graceful: bd dolt stop
-  try {
-    exec('bd', ['dolt', 'stop'], { cwd: worktreePath, timeout: 5000, stdio: 'pipe' });
-    return { stopped: true, method: 'bd-dolt-stop' };
-  } catch (_e) { /* intentional: bd not available, try PID-based kill */ } // NOSONAR S2486
-
-  // 2. Try PID-based kill from lock file
-  const lockPaths = [
-    path.join(worktreePath, '.beads', 'dolt-server.lock'),
-    path.join(worktreePath, '.beads', 'daemon.lock'),
-  ];
-  for (const lockPath of lockPaths) {
-    try {
-      const pid = Number.parseInt(_fs.readFileSync(lockPath, 'utf-8').trim(), 10);
-      if (!Number.isNaN(pid)) {
-        if (platform === 'win32') {
-          exec('taskkill', ['/F', '/PID', String(pid)], { stdio: 'pipe' });
-        } else {
-          process.kill(pid, 'SIGTERM');
-        }
-        return { stopped: true, method: 'pid-kill', pid };
-      }
-    } catch (_e) { /* intentional: try next lock file */ } // NOSONAR S2486
-  }
-
-  return { stopped: false, method: 'none' };
-}
-
 /**
  * Check if a git branch already exists.
  * @param {string} branchName - Branch name to check
@@ -107,58 +54,189 @@ function branchExists(branchName, runFile) {
 }
 
 /**
- * Set up Beads integration for a new worktree (symlink/junction/copy).
+ * True when a link failure is a privilege/support problem (Windows without the
+ * symlink privilege, restricted FS) rather than a real error. In that case we
+ * degrade to a package install instead of hard-failing.
+ * @param {Error} error
+ * @returns {boolean}
+ */
+function isLinkPermissionError(error) {
+  return ['EPERM', 'EACCES', 'ENOSYS', 'UV_EPERM'].includes(error && error.code);
+}
+
+/**
+ * Run package install in the new worktree if a package manager is detected, and
+ * SURFACE failures (spawn error or non-zero exit) instead of swallowing them.
  * @param {string} worktreePath - Absolute path to the new worktree
  * @param {string} projectRoot - Absolute path to the project root
- * @param {string} platform - OS platform string (e.g. 'win32')
+ * @param {Function} spawnFn - spawnSync-compatible function
  * @param {object} fsApi - fs module (for DI)
- * @param {Function} exec - execFileSync-compatible function
- * @returns {string|null} Warning message if beads setup had issues, null otherwise
+ * @returns {{ linked: boolean, installed: boolean }}
+ * @throws {Error} when the install cannot be spawned or exits non-zero.
  */
-function setupBeads(worktreePath, projectRoot, platform, fsApi, exec) {
-  const beadsSource = path.resolve(projectRoot, '.beads');
-  const beadsDest = path.resolve(worktreePath, '.beads');
+function runInstall(worktreePath, projectRoot, spawnFn, fsApi) {
+  const pkgManager = detectPackageManager(projectRoot, fsApi);
+  if (!pkgManager) return { linked: false, installed: false };
+
+  // shell:true on Windows: npm/pnpm/yarn are .cmd shims that cannot be spawned
+  // directly (ENOENT / EINVAL). pkgManager comes from lockfile detection (fixed
+  // set) and args are hardcoded, so no user input reaches the shell.
+  const result = spawnFn(pkgManager, ['install'], {
+    cwd: worktreePath,
+    stdio: 'pipe',
+    shell: process.platform === 'win32',
+  });
+  if (result && result.error) {
+    throw new Error(`Dependency install failed: could not run '${pkgManager} install' in ${worktreePath}: ${result.error.message}`);
+  }
+  if (result && typeof result.status === 'number' && result.status !== 0) {
+    throw new Error(`Dependency install failed: '${pkgManager} install' exited with code ${result.status} in ${worktreePath}`);
+  }
+  return { linked: false, installed: true };
+}
+
+/**
+ * Populate the new worktree's node_modules. Fast path: link to the main repo's
+ * shared install (a junction on Windows, a directory symlink on POSIX) so a fresh
+ * worktree is immediately usable without a full reinstall — this repo's own
+ * worktrees follow that pattern. Fallback: run the detected package manager's
+ * install when there is no shared install to link. Both paths surface failures.
+ * @param {string} worktreePath - Absolute path to the new worktree
+ * @param {string} projectRoot - Absolute path to the project root
+ * @param {object} deps
+ * @param {Function} deps.spawnFn - spawnSync-compatible function
+ * @param {object} deps.fsApi - fs module (for DI)
+ * @param {string} deps.platform - process.platform value
+ * @returns {{ linked: boolean, installed: boolean }}
+ * @throws {Error} when linking fails for a non-privilege reason or install fails.
+ */
+function setupWorktreeDeps(worktreePath, projectRoot, { spawnFn, fsApi, platform }) {
+  const srcModules = path.join(projectRoot, 'node_modules');
+  const destModules = path.join(worktreePath, 'node_modules');
+
+  // Already populated (e.g. git checkout carried it) — nothing to do.
+  if (fsApi.existsSync(destModules)) return { linked: false, installed: false };
 
-  if (!fsApi.existsSync(beadsSource)) {
-    return 'Beads not installed — skipping .beads setup';
+  // Fast path: link to the shared install when the main repo has one.
+  if (fsApi.existsSync(srcModules)) {
+    const linkType = platform === 'win32' ? 'junction' : 'dir';
+    try {
+      fsApi.symlinkSync(srcModules, destModules, linkType);
+      return { linked: true, installed: false };
+    } catch (error) {
+      // Degrade to a real install only when the link was refused for lack of
+      // privilege/support; any other failure is surfaced to the caller.
+      if (!isLinkPermissionError(error)) throw error;
+    }
   }
 
-  // Try symlink first
+  return runInstall(worktreePath, projectRoot, spawnFn, fsApi);
+}
+
+/**
+ * Best-effort: record the issue → worktree → work-folder linkage in the Kernel so
+ * `forge worktree list` and orientation READ it instead of guessing the work-folder by
+ * a filesystem heuristic. Writes a `kernel_worktrees` row keyed by the absolute worktree
+ * path (idempotent upsert) and, when an issue + work-folder are given, drops a
+ * machine-readable `.forge-issue` marker so a folder resolves to its issue deterministically.
+ *
+ * Never throws: a repo without a reachable Kernel (or without the 007 linkage columns)
+ * must still get a usable worktree — orientation falls back to the folder heuristic.
+ *
+ * @param {object} params
+ * @param {string} params.projectRoot
+ * @param {string} params.worktreePath - Absolute worktree path (the row key).
+ * @param {string} params.branch
+ * @param {string|null} params.issueId
+ * @param {string|null} params.workFolder - Repo-relative work-folder path.
+ * @param {object} params.opts - DI options (may inject `_kernelDriver`, `_exec`, `_fs`).
+ * @returns {Promise<{registered: boolean, issueId: string|null, workFolder: string|null, reason?: string}>}
+ */
+async function registerWorktreeLinkage({ projectRoot, worktreePath, branch, issueId, workFolder, opts }) {
+  const runFile = opts._exec || execFileSync;
+  const fsApi = opts._fs || fs;
   try {
-    if (platform === 'win32') {
-      fsApi.symlinkSync(beadsSource, beadsDest, 'junction');
-    } else {
-      fsApi.symlinkSync(beadsSource, beadsDest);
+    // Drop the folder → issue marker first — deterministic even if the DB write fails.
+    if (workFolder && issueId) {
+      const folderAbs = path.resolve(projectRoot, workFolder);
+      fsApi.mkdirSync(folderAbs, { recursive: true });
+      fsApi.writeFileSync(path.join(folderAbs, '.forge-issue'), `${issueId}\n`, 'utf8');
     }
-  } catch (symlinkErr) {
-    if (symlinkErr.code === 'EPERM') {
-      copyBeadsDir(beadsSource, beadsDest, fsApi);
-    } else {
-      throw symlinkErr;
+
+    let driver = opts._kernelDriver;
+    if (!driver) {
+      // No reachable git repo → no shared Kernel; skip quietly (orientation still works
+      // off the folder heuristic). Avoids spawning `git` in a non-repo directory.
+      if (!fsApi.existsSync(path.join(projectRoot, '.git'))) {
+        return { registered: false, issueId: issueId || null, workFolder: workFolder || null, reason: 'no git repository' };
+      }
+      // Lazy require: keep the worktree command light and avoid paying kernel setup
+      // when linkage is not needed. Migrated deps guarantee the 007 columns exist.
+      const { buildMigratedKernelIssueDeps } = require('../kernel/cli-broker-factory');
+      driver = (await buildMigratedKernelIssueDeps({ projectRoot })).kernelDriver;
     }
-  }
 
-  // Verify beads accessible (warn if fails, don't block)
-  try {
-    exec('bd', ['--version'], { cwd: worktreePath, timeout: 5000, stdio: 'pipe' });
-  } catch (_bdErr) { /* intentional: bd may not be on PATH */ // NOSONAR S2486
-    return 'Beads verification failed — .beads linked but bd may not work';
+    const { resolveGitCommonDir } = require('../kernel/broker');
+    const gitCommonDir = resolveGitCommonDir(projectRoot, { execFileSync: runFile });
+
+    driver.registerWorktree({
+      git_common_dir: gitCommonDir,
+      path: worktreePath,
+      branch,
+      actor: process.env.FORGE_ACTOR || null,
+      issue_id: issueId || null,
+      work_folder: workFolder || null,
+      registered_at: new Date().toISOString(),
+      state: 'active',
+    });
+
+    return { registered: true, issueId: issueId || null, workFolder: workFolder || null };
+  } catch (error) {
+    // Non-fatal: keep the worktree usable. Only warn when the caller explicitly asked
+    // for linkage (--issue/--work-folder); a plain `worktree create` stays quiet.
+    if (issueId || workFolder) {
+      process.stderr.write(`forge worktree: kernel linkage not recorded (${error.message})\n`);
+    }
+    return { registered: false, issueId: issueId || null, workFolder: workFolder || null, reason: error.message };
   }
-
-  return null;
 }
 
 /**
- * Run package install in the new worktree if a package manager is detected.
- * @param {string} worktreePath - Absolute path to the new worktree
- * @param {string} projectRoot - Absolute path to the project root
- * @param {Function} spawnFn - spawnSync-compatible function
- * @param {object} fsApi - fs module (for DI)
+ * Auto-file rail: guarantee the new worktree's branch has a backing Kernel issue,
+ * WITHOUT anyone remembering `forge issue create` (kernel issue a4b8f56f). Best-effort
+ * and NON-BLOCKING — the worktree must stay usable even if tracking fails, so any error
+ * degrades to a stderr warning and null. Skipped when `--issue` already links a real
+ * issue. Idempotent via ensureBackingIssue (deduped by branch), so re-creating a
+ * worktree or later `forge push`/pre-push firing never mints a duplicate.
+ *
+ * @param {object} params
+ * @param {string} params.projectRoot
+ * @param {string} params.worktreePath
+ * @param {string} params.branch
+ * @param {string|null} params.issueId - explicit --issue (skip auto-file when set).
+ * @param {object} params.opts - DI (may inject `_ensureBackingIssue`, `_kernelDriver`, `_kernelBroker`, `_fs`).
+ * @returns {Promise<object|null>} the backing-issue descriptor, or null when skipped/unavailable.
  */
-function runInstall(worktreePath, projectRoot, spawnFn, fsApi) {
-  const pkgManager = detectPackageManager(projectRoot, fsApi);
-  if (pkgManager) {
-    spawnFn(pkgManager, ['install'], { cwd: worktreePath, stdio: 'pipe' });
+async function autoFileBackingIssue({ projectRoot, worktreePath, branch, issueId, opts }) {
+  if (issueId) return null; // explicit --issue already links a real issue.
+  const fsApi = opts._fs || fs;
+  try {
+    // Lazy require INSIDE the try: a module-load failure (missing file / broken
+    // sub-dependency) must degrade to null, never crash `forge worktree create`.
+    const ensureFn = opts._ensureBackingIssue || require('../kernel/backing-issue').ensureBackingIssue;
+    let driver = opts._kernelDriver;
+    let broker = opts._kernelBroker;
+    if (!driver || !broker) {
+      if (!fsApi.existsSync(path.join(projectRoot, '.git'))) return null; // no repo → no kernel
+      const { buildMigratedKernelIssueDeps } = require('../kernel/cli-broker-factory');
+      const deps = await buildMigratedKernelIssueDeps({ projectRoot });
+      driver = driver || deps.kernelDriver;
+      broker = broker || deps.kernelBroker;
+    }
+    return await ensureFn({ branch, projectRoot, worktreePath, driver, broker });
+  } catch (error) {
+    process.stderr.write(`forge worktree: backing issue not auto-filed (${error.message})\n`);
+    return null;
   }
 }
 
@@ -174,18 +252,23 @@ async function handleCreate(slug, flags, projectRoot, opts) {
   const runFile = opts._exec || execFileSync;
   const runSpawn = opts._spawn || spawnSync;
   const fsApi = opts._fs || fs;
-  const platform = opts._platform || process.platform;
 
   const branchName = flags['--branch'] || flags.branch || `feat/${slug}`;
+  const issueId = flags['--issue'] || null;
+  const workFolder = flags['--work-folder'] || null;
   const worktreesDir = path.resolve(projectRoot, '.worktrees');
 
-  // Guard: Detect bare repo state — worktrees created from bare repos produce broken branches
+  // Guard: Detect bare repo state - worktrees created from bare repos produce broken branches
   // git rev-parse --show-toplevel throws in a bare repo (no working tree)
   try {
     runFile('git', ['-C', projectRoot, 'rev-parse', '--show-toplevel'], { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
-  } catch (_e) { // NOSONAR S2486
+  } catch (error) {
     /* intentional: show-toplevel fails in bare repos */
-    return { success: false, error: 'Main repo is in bare state (no working tree). Clone fresh instead: git clone <url> /tmp/forge-<slug>' };
+    const errMsg = String(error?.stderr || error?.message || '').trim();
+    if (/must be run in a work tree|this operation must be run in a work tree/i.test(errMsg)) {
+      return { success: false, error: 'bare repo detected' };
+    }
+    return { success: false, error: errMsg || 'git rev-parse --show-toplevel failed' };
   }
 
   // Security: Validate slug doesn't contain path traversal (OWASP A01/A03)
@@ -197,11 +280,23 @@ async function handleCreate(slug, flags, projectRoot, opts) {
 
   // Step 0: Check if worktree already exists
   if (fsApi.existsSync(worktreePath)) {
+    // A pre-existing worktree may be checked out on a different branch than the
+    // requested branchName — read the actual HEAD so the kernel row is accurate.
+    let existingBranch = branchName;
+    try {
+      const head = runFile('git', ['-C', worktreePath, 'rev-parse', '--abbrev-ref', 'HEAD'], { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+      // A detached worktree reports the literal "HEAD" — don't persist that; keep branchName.
+      if (head && head !== 'HEAD') existingBranch = head;
+    } catch (_error) { /* not a resolvable worktree HEAD — fall back to branchName */ }
+    const linkage = await registerWorktreeLinkage({ projectRoot, worktreePath, branch: existingBranch, issueId, workFolder, opts });
+    const backing = await autoFileBackingIssue({ projectRoot, worktreePath, branch: existingBranch, issueId, opts });
     return {
       success: true,
       reused: true,
       message: `Worktree already exists at ${worktreePath}`,
       worktreePath,
+      linkage,
+      backing,
     };
   }
 
@@ -216,21 +311,52 @@ async function handleCreate(slug, flags, projectRoot, opts) {
     runFile('git', ['worktree', 'add', worktreePath, '-b', branchName], { stdio: 'pipe' });
   }
 
-  // Step 3: Beads integration
-  const beadsWarning = setupBeads(worktreePath, projectRoot, platform, fsApi, runFile);
+  // Step 3: Populate node_modules (link to the shared install, else install).
+  // No per-worktree issue-store bootstrap is needed — the Kernel DB lives in the
+  // shared git common dir, so the new worktree already sees the same kernel.
+  let deps;
+  try {
+    deps = setupWorktreeDeps(worktreePath, projectRoot, {
+      spawnFn: runSpawn,
+      fsApi,
+      platform: opts._platform || process.platform,
+    });
+  } catch (error) {
+    // Surface the failure instead of leaving a worktree with no usable deps.
+    return { success: false, error: error.message, worktreePath, branch: branchName };
+  }
 
-  // Step 4: Run package install
-  runInstall(worktreePath, projectRoot, runSpawn, fsApi);
+  const linkage = await registerWorktreeLinkage({ projectRoot, worktreePath, branch: branchName, issueId, workFolder, opts });
+  const backing = await autoFileBackingIssue({ projectRoot, worktreePath, branch: branchName, issueId, opts });
 
-  const result = {
+  return {
     success: true,
     worktreePath,
     branch: branchName,
+    depsLinked: deps.linked,
+    depsInstalled: deps.installed,
+    linkage,
+    backing,
   };
-  if (beadsWarning) {
-    result.beadsWarning = beadsWarning;
+}
+
+/**
+ * Handle the "list" subcommand — read the worktree registry from the Kernel.
+ * @param {string} projectRoot - Project root path
+ * @param {object} opts - DI options (may inject `_kernelDriver`)
+ * @returns {Promise<object>} Result object with a `worktrees` array
+ */
+async function handleList(projectRoot, opts) {
+  try {
+    let driver = opts._kernelDriver;
+    if (!driver) {
+      const { buildMigratedKernelIssueDeps } = require('../kernel/cli-broker-factory');
+      driver = (await buildMigratedKernelIssueDeps({ projectRoot })).kernelDriver;
+    }
+    return { success: true, worktrees: driver.listWorktrees({}) };
+  } catch (error) {
+    return { success: false, error: error.message, worktrees: [] };
   }
-  return result;
 }
 
 /**
@@ -247,29 +373,65 @@ async function handleRemove(slug, projectRoot, opts) {
   }
 
   const runFile = opts._exec || execFileSync;
-  const fsModule = opts._fs || fs;
   const worktreePath = path.resolve(projectRoot, '.worktrees', slug);
 
-  // Stop Dolt server to release file locks
-  const stopResult = stopDolt(worktreePath, { _exec: runFile, _fs: fsModule, _platform: opts._platform });
-  if (stopResult.stopped) {
-    // Brief wait for file locks to release (Windows needs this)
-    await new Promise(r => setTimeout(r, 500));
-  }
-
+  // No issue-store server to stop: the Kernel SQLite DB lives in the shared git
+  // common dir, so removing a worktree directory never touches it.
   runFile('git', ['worktree', 'remove', worktreePath], { stdio: 'pipe' });
 
   return { success: true, removed: worktreePath };
 }
 
+// Long flags that take a value, in both `--flag value` and `--flag=value` forms.
+const WORKTREE_VALUE_FLAGS = ['--branch', '--issue', '--work-folder'];
+const WORKTREE_USAGE_HINT = 'Usage: forge worktree create <slug> [--branch <name>] [--issue <id>] [--work-folder <path>]';
+
+function parseWorktreeArgs(args, flags) {
+  const positional = [];
+  const parsedFlags = { ...flags };
+
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+
+    const spaceFlag = WORKTREE_VALUE_FLAGS.find(flag => arg === flag);
+    if (spaceFlag) {
+      const value = args[i + 1];
+      if (!value || value.startsWith('--')) {
+        return { error: `Missing value for ${spaceFlag}. ${WORKTREE_USAGE_HINT}` };
+      }
+      parsedFlags[spaceFlag] = value;
+      i++;
+      continue;
+    }
+
+    const eqFlag = WORKTREE_VALUE_FLAGS.find(flag => arg.startsWith(`${flag}=`));
+    if (eqFlag) {
+      const value = arg.slice(`${eqFlag}=`.length);
+      if (!value) {
+        return { error: `Missing value for ${eqFlag}. ${WORKTREE_USAGE_HINT}` };
+      }
+      parsedFlags[eqFlag] = value;
+      continue;
+    }
+
+    positional.push(arg);
+  }
+
+  // Back-compat alias consumed by handleCreate (flags['--branch'] || flags.branch).
+  if (parsedFlags['--branch']) parsedFlags.branch = parsedFlags['--branch'];
+
+  return { args: positional, flags: parsedFlags };
+}
+
 module.exports = {
   name: 'worktree',
-  description: 'Manage isolated worktrees with Beads integration',
-  usage: 'forge worktree <create|remove> <slug>',
+  description: 'Manage isolated worktrees',
+  usage: 'forge worktree <create|remove|list> <slug>',
   flags: {
     '--branch': 'Custom branch name (default: feat/<slug>)',
+    '--issue': 'Kernel issue id to link this worktree to (records issue → worktree)',
+    '--work-folder': 'Repo-relative work-folder this issue owns (records worktree → work-folder + drops a .forge-issue marker)',
   },
-  stopDolt,
 
   /**
    * Main handler for the worktree command.
@@ -284,27 +446,45 @@ module.exports = {
    * @returns {Promise<object>}
    */
   handler: async (args, flags, projectRoot, opts = {}) => {
-    const subcommand = args[0];
-    const slug = args[1];
+    const parsed = parseWorktreeArgs(args, flags);
+    if (parsed.error) {
+      return { success: false, error: parsed.error };
+    }
 
-    if (!subcommand || !['create', 'remove'].includes(subcommand)) {
+    const subcommand = parsed.args[0];
+
+    if (!subcommand || !['create', 'remove', 'list'].includes(subcommand)) {
       return {
         success: false,
-        error: 'Missing or invalid subcommand. Usage: forge worktree <create|remove> <slug>',
+        error: 'Missing or invalid subcommand. Usage: forge worktree <create|remove|list> <slug>',
       };
     }
 
+    // `list` reads the Kernel registry and takes no slug.
+    if (subcommand === 'list') {
+      return handleList(projectRoot, opts);
+    }
+
+    const slug = parsed.args[1];
     if (!slug) {
       return {
         success: false,
-        error: 'Missing slug. Usage: forge worktree <create|remove> <slug>',
+        error: 'Missing slug. Usage: forge worktree <create|remove|list> <slug>',
       };
     }
 
     if (subcommand === 'create') {
-      return handleCreate(slug, flags, projectRoot, opts);
+      return handleCreate(slug, parsed.flags, projectRoot, opts);
     }
 
     return handleRemove(slug, projectRoot, opts);
   },
+
+  // Exposed for unit tests; not part of the CLI surface.
+  _internal: {
+    detectPackageManager,
+    setupWorktreeDeps,
+    runInstall,
+    autoFileBackingIssue,
+  },
 };