P3-A: worktrees multi-repo & cycle de vie (backend)

Enregistrement de repos et gestion de leurs worktrees git, source de vérité
= git (worktrees dérivés + cache court par repo), corrélation worktree ↔
sessions par cwd, mutations sérialisées par repo.

- shared: RepoSummary, PostCreateHook, WorktreeSummary, WorktreeGitStatus ;
  messages WS repo_update/worktree_update/*_removed ; topic sub 'worktrees'
  (+ parseClientMessage) ; DTOs REST repos/worktrees.
- db: migration id:3 (table repos).
- core/git.ts: couche git sûre (execFile, jamais de shell, -- avant chemins,
  GIT_OPTIONAL_LOCKS=0), parseWorktreePorcelain, list/add/remove/prune/status/
  ahead-behind, validation branche + chemin.
- core/claude-trust.ts: pré-trust atomique de ~/.claude.json (spike S3).
- core/worktree-manager.ts: repos CRUD, create (worktree add + pré-trust +
  hooks post-create + startSession optionnel), adopt, delete (garde-fous 409
  dirty / 400 main / 409 session live), prune ; events.
- routes/repos.ts + routes/worktrees.ts, câblage app.ts, gateway topic worktrees.
- tests: git (repos tmp réels), claude-trust, worktree-manager (146 verts).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

packages/shared/src/protocol.ts

@@ -94,6 +94,51 @@ export interface SessionSummary {
   registryStatus: SessionRegistryStatus | null;
 }
 
+// ---- Worktrees & repos (P3) ----
+/** Hook lancé après création d'un worktree (commande shell exécutée dans le nouveau worktree). */
+export interface PostCreateHook {
+  id: string;
+  label: string;
+  run: string;
+  enabled: boolean;
+}
+
+export interface RepoSummary {
+  id: string;
+  /** chemin absolu de la racine du repo (main worktree). */
+  path: string;
+  label: string;
+  defaultBranch: string | null;
+  postCreateHooks: PostCreateHook[];
+  /** pré-écrire hasTrustDialogAccepted dans ~/.claude.json à la création d'un worktree. */
+  preTrust: boolean;
+  createdAt: string;
+  /** false si le chemin n'est plus un repo git accessible. */
+  valid: boolean;
+}
+
+export interface WorktreeGitStatus {
+  ahead: number;
+  behind: number;
+  dirtyCount: number;
+  upstream: string | null;
+}
+
+export interface WorktreeSummary {
+  repoId: string;
+  /** chemin absolu du worktree (clé de corrélation avec le cwd des sessions). */
+  path: string;
+  branch: string | null;
+  head: string;
+  detached: boolean;
+  locked: boolean;
+  prunable: boolean;
+  isMain: boolean;
+  git: WorktreeGitStatus;
+  /** sessions corrélées par cwd (managées + découvertes) ; leur `activity` est remplie en P3-B. */
+  sessions: SessionSummary[];
+}
+
 // ---- Messages client → serveur ----
 export type ClientMessage =
   | { type: 'hello'; protocol: number }
@@ -102,7 +147,7 @@ export type ClientMessage =
   | { type: 'stdin'; channel: number; data: string }
   | { type: 'resize'; channel: number; cols: number; rows: number }
   | { type: 'ack'; channel: number; bytes: number }
-  | { type: 'sub'; topics: Array<'sessions'> }
+  | { type: 'sub'; topics: Array<'sessions' | 'worktrees'> }
   | { type: 'ping' };
 
 // ---- Messages serveur → client ----
@@ -113,6 +158,10 @@ export type ServerMessage =
   | { type: 'control_changed'; channel: number; controlling: boolean }
   | { type: 'session_update'; session: SessionSummary }
   | { type: 'session_exit'; sessionId: string; exitCode: number | null; signal: number | null }
+  | { type: 'repo_update'; repo: RepoSummary }
+  | { type: 'repo_removed'; repoId: string }
+  | { type: 'worktree_update'; repoId: string; worktree: WorktreeSummary }
+  | { type: 'worktree_removed'; repoId: string; path: string }
   | { type: 'error'; code: ErrorCode; message: string; channel?: number }
   | { type: 'pong' };
 
@@ -159,8 +208,8 @@ export function parseClientMessage(raw: string): ClientMessage | null {
         ? { type: 'ack', channel: m.channel, bytes: m.bytes }
         : null;
     case 'sub':
-      return Array.isArray(m.topics) && m.topics.every((t) => t === 'sessions')
-        ? { type: 'sub', topics: m.topics as Array<'sessions'> }
+      return Array.isArray(m.topics) && m.topics.every((t) => t === 'sessions' || t === 'worktrees')
+        ? { type: 'sub', topics: m.topics as Array<'sessions' | 'worktrees'> }
         : null;
     case 'ping':
       return { type: 'ping' };