@akiojin/gwt 2.13.0 → 3.0.0

package/src/codex.ts

@@ -3,10 +3,7 @@ import chalk from "chalk";
 import { platform } from "os";
 import { existsSync } from "fs";
 import { createChildStdio, getTerminalStreams } from "./utils/terminal.js";
-import {
-  findLatestCodexSession,
-  waitForCodexSessionId,
-} from "./utils/session.js";
+import { findLatestCodexSession } from "./utils/session.js";
 
 const CODEX_CLI_PACKAGE = "@openai/codex@latest";
 
@@ -85,11 +82,9 @@ export async function launchCodexCLI(
       options.sessionId && options.sessionId.trim().length > 0
         ? options.sessionId.trim()
         : null;
-
-    // Start polling session files immediately to catch the session created right after launch.
-    const sessionProbe = waitForCodexSessionId({ startedAt, cwd: worktreePath }).catch(
-      () => null,
-    );
+    const usedExplicitSessionId =
+      Boolean(resumeSessionId) &&
+      (options.mode === "continue" || options.mode === "resume");
 
     switch (options.mode) {
       case "continue":
@@ -141,15 +136,23 @@ export async function launchCodexCLI(
 
     const childStdio = createChildStdio();
 
-    const env = { ...process.env, ...(options.envOverrides ?? {}) };
+    const env = Object.fromEntries(
+      Object.entries({
+        ...process.env,
+        ...(options.envOverrides ?? {}),
+      }).filter(
+        (entry): entry is [string, string] => typeof entry[1] === "string",
+      ),
+    );
 
     try {
-      const execChild = async (child: any) => {
+      const execChild = async (child: Promise<unknown>) => {
         try {
           await child;
-        } catch (execError: any) {
+        } catch (execError: unknown) {
           // Treat SIGINT/SIGTERM as normal exit (user pressed Ctrl+C)
-          if (execError.signal === "SIGINT" || execError.signal === "SIGTERM") {
+          const signal = (execError as { signal?: unknown })?.signal;
+          if (signal === "SIGINT" || signal === "SIGTERM") {
             return;
           }
           throw execError;
@@ -163,7 +166,7 @@ export async function launchCodexCLI(
         stdout: childStdio.stdout,
         stderr: childStdio.stderr,
         env,
-      } as any);
+      });
       await execChild(child);
     } finally {
       childStdio.cleanup();
@@ -181,10 +184,13 @@ export async function launchCodexCLI(
         windowMs: 10 * 60 * 1000,
         cwd: worktreePath,
       });
-      // Priority: latest on disk > resumeSessionId
-      capturedSessionId = latest?.id ?? resumeSessionId ?? null;
+      const detectedSessionId = latest?.id ?? null;
+      // When we explicitly resumed a specific session, keep that ID as the source of truth.
+      capturedSessionId = usedExplicitSessionId
+        ? resumeSessionId
+        : detectedSessionId;
     } catch {
-      capturedSessionId = resumeSessionId ?? null;
+      capturedSessionId = usedExplicitSessionId ? resumeSessionId : null;
     }
 
     if (capturedSessionId) {
@@ -201,11 +207,13 @@ export async function launchCodexCLI(
     }
 
     return capturedSessionId ? { sessionId: capturedSessionId } : {};
-  } catch (error: any) {
+  } catch (error: unknown) {
+    const err = error as NodeJS.ErrnoException;
+    const details = error instanceof Error ? error.message : String(error);
     const errorMessage =
-      error.code === "ENOENT"
+      err.code === "ENOENT"
         ? "bunx command not found. Please ensure Bun is installed so Codex CLI can run via bunx."
-        : `Failed to launch Codex CLI: ${error.message || "Unknown error"}`;
+        : `Failed to launch Codex CLI: ${details || "Unknown error"}`;
 
     if (platform() === "win32") {
       console.error(chalk.red("\n💡 Windows troubleshooting tips:"));
@@ -234,8 +242,9 @@ export async function isCodexAvailable(): Promise<boolean> {
   try {
     await execa("bunx", [CODEX_CLI_PACKAGE, "--help"]);
     return true;
-  } catch (error: any) {
-    if (error.code === "ENOENT") {
+  } catch (error: unknown) {
+    const err = error as NodeJS.ErrnoException;
+    if (err.code === "ENOENT") {
       console.error(chalk.yellow("\n⚠️  bunx command not found"));
     }
     return false;

package/src/config/builtin-tools.ts

@@ -5,6 +5,10 @@
  */
 
 import type { CustomAITool } from "../types/tools.js";
+import {
+  CLAUDE_PERMISSION_SKIP_ARGS,
+  CODEX_DEFAULT_ARGS,
+} from "../shared/aiToolConstants.js";
 
 /**
  * Claude Code のビルトイン定義
@@ -19,7 +23,7 @@ export const CLAUDE_CODE_TOOL: CustomAITool = {
     continue: ["-c"],
     resume: ["-r"],
   },
-  permissionSkipArgs: ["--yes"],
+  permissionSkipArgs: Array.from(CLAUDE_PERMISSION_SKIP_ARGS),
 };
 
 /**
@@ -30,7 +34,7 @@ export const CODEX_CLI_TOOL: CustomAITool = {
   displayName: "Codex",
   type: "bunx",
   command: "@openai/codex@latest",
-  defaultArgs: ["--auto-approve", "--verbose"],
+  defaultArgs: Array.from(CODEX_DEFAULT_ARGS),
   modeArgs: {
     normal: [],
     continue: ["resume", "--last"],

package/src/config/shared-env.ts

@@ -0,0 +1,139 @@
+/**
+ * Shared environment variable helpers.
+ *
+ * 管理画面やサーバー側の設定ロジックから共通で利用する
+ * 環境変数スキーマ/バリデーション/マージ処理を集約する。
+ */
+
+const ENV_KEY_PATTERN = /^[A-Z0-9_]+$/;
+const MAX_KEY_LENGTH = 100;
+const MAX_VALUE_LENGTH = 500;
+
+const DEFAULT_BOOTSTRAP_ENV_KEYS = [
+  "ANTHROPIC_API_KEY",
+  "ANTHROPIC_API_KEY_PATH",
+  "ANTHROPIC_API_BASE",
+  "OPENAI_API_KEY",
+  "OPENAI_BASE_URL",
+  "OPENAI_API_BASE",
+  "OPENAI_ORG_ID",
+  "OPENAI_PROJECT",
+  "OPENAI_API_TYPE",
+  "OPENAI_API_VERSION",
+  "GITHUB_TOKEN",
+  "GH_TOKEN",
+  "GITLAB_TOKEN",
+  "AZURE_OPENAI_API_KEY",
+  "AZURE_OPENAI_ENDPOINT",
+] as const;
+
+export type EnvironmentRecord = Record<string, string>;
+
+/**
+ * 環境変数キーが有効かどうかを判定。
+ */
+export function isValidEnvKey(key: string): boolean {
+  if (!key || typeof key !== "string") {
+    return false;
+  }
+  if (key.length === 0 || key.length > MAX_KEY_LENGTH) {
+    return false;
+  }
+  return ENV_KEY_PATTERN.test(key);
+}
+
+/**
+ * 許容されるキー長を取得。
+ */
+export function getEnvConstraints(): {
+  maxKeyLength: number;
+  maxValueLength: number;
+} {
+  return {
+    maxKeyLength: MAX_KEY_LENGTH,
+    maxValueLength: MAX_VALUE_LENGTH,
+  };
+}
+
+/**
+ * 任意のレコードをサニタイズして string -> string のみに整形する。
+ */
+export function sanitizeEnvRecord(
+  record?: Record<string, unknown>,
+): EnvironmentRecord {
+  if (!record || typeof record !== "object") {
+    return {};
+  }
+  const result: EnvironmentRecord = {};
+  for (const [key, value] of Object.entries(record)) {
+    if (value === undefined || value === null) {
+      continue;
+    }
+    result[key] = String(value);
+  }
+  return result;
+}
+
+/**
+ * envレコードを検証し、フォーマットが不正な場合は例外を投げる。
+ */
+export function validateEnvRecord(record: EnvironmentRecord): void {
+  for (const [key, value] of Object.entries(record)) {
+    if (!isValidEnvKey(key)) {
+      throw new Error(
+        `Invalid environment variable key: "${key}". Use 1-${MAX_KEY_LENGTH} characters (A-Z, 0-9, underscore).`,
+      );
+    }
+    if (value.length === 0) {
+      throw new Error(`Environment variable "${key}" must not be empty.`);
+    }
+    if (value.length > MAX_VALUE_LENGTH) {
+      throw new Error(
+        `Environment variable "${key}" exceeds the maximum length (${MAX_VALUE_LENGTH}).`,
+      );
+    }
+  }
+}
+
+/**
+ * 起動時にOSから読み取って取り込みたい環境変数キー一覧を返す。
+ * CLAUDE_WORKTREE_BOOTSTRAP_ENV_KEYS=KEY1,KEY2 で上書き可能。
+ */
+export function getBootstrapEnvKeys(): string[] {
+  const override = process.env.CLAUDE_WORKTREE_BOOTSTRAP_ENV_KEYS;
+  if (!override) {
+    return [...DEFAULT_BOOTSTRAP_ENV_KEYS];
+  }
+  return override
+    .split(",")
+    .map((entry) => entry.trim())
+    .filter(Boolean)
+    .map((entry) => entry.toUpperCase());
+}
+
+/**
+ * 現在のenvレコードへ、指定されたキーのみOS環境変数から補完する。
+ */
+export function mergeWithBootstrapEnv(
+  current: EnvironmentRecord,
+  sourceEnv: NodeJS.ProcessEnv,
+  keys: string[] = getBootstrapEnvKeys(),
+): { merged: EnvironmentRecord; addedKeys: string[] } {
+  const merged: EnvironmentRecord = { ...current };
+  const addedKeys: string[] = [];
+
+  for (const key of keys) {
+    if (merged[key] !== undefined) {
+      continue; // 既に設定済み
+    }
+    const value = sourceEnv[key];
+    if (typeof value === "string" && value.length > 0) {
+      merged[key] = value;
+      addedKeys.push(key);
+    }
+  }
+
+  return { merged, addedKeys };
+}
+
+export { ENV_KEY_PATTERN };

package/src/gemini.ts

@@ -50,6 +50,9 @@ export async function launchGeminiCLI(
       options.sessionId && options.sessionId.trim().length > 0
         ? options.sessionId.trim()
         : null;
+    const usedExplicitSessionId =
+      Boolean(resumeSessionId) &&
+      (options.mode === "continue" || options.mode === "resume");
 
     const buildArgs = (useResumeId: boolean) => {
       const a: string[] = [];
@@ -59,12 +62,6 @@ export async function launchGeminiCLI(
 
       switch (options.mode) {
         case "continue":
-          if (useResumeId && resumeSessionId) {
-            a.push("--resume", resumeSessionId);
-          } else {
-            a.push("--resume");
-          }
-          break;
         case "resume":
           if (useResumeId && resumeSessionId) {
             a.push("--resume", resumeSessionId);
@@ -123,10 +120,14 @@ export async function launchGeminiCLI(
     }
     terminal.exitRawMode();
 
-    const baseEnv = {
-      ...process.env,
-      ...(options.envOverrides ?? {}),
-    };
+    const baseEnv = Object.fromEntries(
+      Object.entries({
+        ...process.env,
+        ...(options.envOverrides ?? {}),
+      }).filter(
+        (entry): entry is [string, string] => typeof entry[1] === "string",
+      ),
+    );
 
     const childStdio = createChildStdio();
 
@@ -156,7 +157,9 @@ export async function launchGeminiCLI(
       }
     };
 
-    const runGemini = async (runArgs: string[]): Promise<string | undefined> => {
+    const runGemini = async (
+      runArgs: string[],
+    ): Promise<string | undefined> => {
       // Capture stdout while passing through to terminal
       // Store chunks to extract session ID after process exits
       const outputChunks: string[] = [];
@@ -169,7 +172,7 @@ export async function launchGeminiCLI(
           stdout: "pipe",
           stderr: childStdio.stderr,
           env: baseEnv,
-        } as any);
+        });
 
         // Pass stdout through to terminal while capturing
         child.stdout?.on("data", (chunk: Buffer) => {
@@ -203,6 +206,7 @@ export async function launchGeminiCLI(
     };
 
     let output: string | undefined;
+    let fellBackToLatest = false;
     try {
       // Try with explicit session ID first (if any), then fallback to --resume (latest) once
       try {
@@ -212,6 +216,7 @@ export async function launchGeminiCLI(
           (options.mode === "resume" || options.mode === "continue") &&
           resumeSessionId;
         if (shouldRetry) {
+          fellBackToLatest = true;
           console.log(
             chalk.yellow(
               `   ⚠️  Failed to resume session ${resumeSessionId}. Retrying with latest session...`,
@@ -229,17 +234,22 @@ export async function launchGeminiCLI(
     // Extract session ID from Gemini's exit summary output
     extractSessionId(output);
 
-    // Fallback to file-based detection if stdout capture failed
+    const explicitResumeSucceeded = usedExplicitSessionId && !fellBackToLatest;
+
+    // If we explicitly resumed a specific session (and did not fall back), keep that ID.
+    if (explicitResumeSucceeded) {
+      capturedSessionId = resumeSessionId;
+    }
+
+    // Fallback to file-based detection if stdout capture failed (and we don't have an explicit-resume ID)
     if (!capturedSessionId) {
       try {
         capturedSessionId =
           (await findLatestGeminiSessionId(worktreePath, {
             cwd: worktreePath,
-          })) ??
-          resumeSessionId ??
-          null;
+          })) ?? null;
       } catch {
-        capturedSessionId = resumeSessionId ?? null;
+        capturedSessionId = null;
       }
     }
 
@@ -257,11 +267,12 @@ export async function launchGeminiCLI(
     }
 
     return capturedSessionId ? { sessionId: capturedSessionId } : {};
-  } catch (error: any) {
+  } catch (error: unknown) {
     const hasLocalGemini = await isGeminiCommandAvailable();
     let errorMessage: string;
+    const err = error as NodeJS.ErrnoException;
 
-    if (error.code === "ENOENT") {
+    if (err.code === "ENOENT") {
       if (hasLocalGemini) {
         errorMessage =
           "gemini command not found. Please ensure Gemini CLI is properly installed.";
@@ -270,7 +281,8 @@ export async function launchGeminiCLI(
           "bunx command not found. Please ensure Bun is installed so Gemini CLI can run via bunx.";
       }
     } else {
-      errorMessage = `Failed to launch Gemini CLI: ${error.message || "Unknown error"}`;
+      const details = error instanceof Error ? error.message : String(error);
+      errorMessage = `Failed to launch Gemini CLI: ${details || "Unknown error"}`;
     }
 
     if (process.platform === "win32") {
@@ -331,8 +343,9 @@ export async function isGeminiCLIAvailable(): Promise<boolean> {
   try {
     await execa("bunx", [GEMINI_CLI_PACKAGE, "--version"], { shell: true });
     return true;
-  } catch (error: any) {
-    if (error.code === "ENOENT") {
+  } catch (error: unknown) {
+    const err = error as NodeJS.ErrnoException;
+    if (err.code === "ENOENT") {
       console.error(chalk.yellow("\n⚠️  bunx command not found"));
       console.error(
         chalk.gray(

package/src/index.ts

@@ -203,7 +203,10 @@ function showHelp(): void {
   console.log(`
 Worktree Manager
 
-Usage: gwt [options]
+Usage: gwt [command] [options]
+
+Commands:
+  serve           Start Web UI server (http://localhost:3000)
 
 Options:
   -h, --help      Show this help message
@@ -211,7 +214,8 @@ Options:
 
 Description:
   Interactive Git worktree manager with AI tool selection (Claude Code / Codex CLI) and graphical branch selection.
-  Launch without additional options to open the interactive menu.
+  Launch without additional options to open the interactive CLI menu.
+  Use 'gwt serve' to start the Web UI server for browser-based management.
 `);
 }
 
@@ -552,12 +556,12 @@ export async function handleAIToolWorkflow(
       { skipHistory: true },
     );
 
-    // Lookup saved session ID for continue/resume
+    // Lookup saved session ID for Continue (auto attach)
     let resumeSessionId: string | null =
       selectedSessionId && selectedSessionId.length > 0
         ? selectedSessionId
         : null;
-    if (mode === "continue" || mode === "resume") {
+    if (mode === "continue") {
       const existingSession = await loadSession(repoRoot);
       const history = existingSession?.history ?? [];
 
@@ -700,14 +704,15 @@ export async function handleAIToolWorkflow(
 
     if (!finalSessionId && tool === "claude-code") {
       try {
-        finalSessionId = (await findLatestClaudeSessionId(worktreePath)) ?? null;
+        finalSessionId =
+          (await findLatestClaudeSessionId(worktreePath)) ?? null;
       } catch {
         finalSessionId = null;
       }
     }
     const finishedAt = Date.now();
 
-    if (tool === "codex-cli") {
+    if (!finalSessionId && tool === "codex-cli") {
       try {
         const latest = await findLatestCodexSession({
           since: launchStartedAt - 60_000,
@@ -722,7 +727,7 @@ export async function handleAIToolWorkflow(
       } catch {
         // ignore fallback failure
       }
-    } else if (tool === "claude-code") {
+    } else if (!finalSessionId && tool === "claude-code") {
       try {
         const latestClaude = await findLatestClaudeSession(worktreePath, {
           since: launchStartedAt - 60_000,
@@ -736,7 +741,7 @@ export async function handleAIToolWorkflow(
       } catch {
         // ignore
       }
-    } else if (tool === "gemini-cli") {
+    } else if (!finalSessionId && tool === "gemini-cli") {
       try {
         const latestGemini = await findLatestGeminiSession(worktreePath, {
           since: launchStartedAt - 60_000,

package/src/logging/logger.ts

@@ -17,7 +17,7 @@ export interface LoggerConfig {
   sync?: boolean;
 }
 
-/** 
+/**
  * Create a pino logger with unified structure and category field.
  * - Writes to a single file stream (no per-component files)
  * - Adds `category` to each log record
@@ -51,7 +51,10 @@ export function createLogger(config: LoggerConfig = {}): Logger {
   };
 
   if (config.sync) {
-    const destinationStream = pino.destination({ dest: destination, sync: true });
+    const destinationStream = pino.destination({
+      dest: destination,
+      sync: true,
+    });
     return pino(options, destinationStream);
   }
 

package/src/qwen.ts

@@ -52,6 +52,9 @@ export async function launchQwenCLI(
       options.sessionId && options.sessionId.trim().length > 0
         ? options.sessionId.trim()
         : null;
+    const usedExplicitSessionId =
+      Boolean(resumeSessionId) &&
+      (options.mode === "continue" || options.mode === "resume");
     switch (options.mode) {
       case "continue":
         console.log(
@@ -94,10 +97,14 @@ export async function launchQwenCLI(
 
     terminal.exitRawMode();
 
-    const baseEnv = {
-      ...process.env,
-      ...(options.envOverrides ?? {}),
-    };
+    const baseEnv = Object.fromEntries(
+      Object.entries({
+        ...process.env,
+        ...(options.envOverrides ?? {}),
+      }).filter(
+        (entry): entry is [string, string] => typeof entry[1] === "string",
+      ),
+    );
 
     const childStdio = createChildStdio();
 
@@ -105,12 +112,13 @@ export async function launchQwenCLI(
     const hasLocalQwen = await isQwenCommandAvailable();
 
     try {
-      const execChild = async (child: any) => {
+      const execChild = async (child: Promise<unknown>) => {
         try {
           await child;
-        } catch (execError: any) {
+        } catch (execError: unknown) {
           // Treat SIGINT/SIGTERM as normal exit (user pressed Ctrl+C)
-          if (execError.signal === "SIGINT" || execError.signal === "SIGTERM") {
+          const signal = (execError as { signal?: unknown })?.signal;
+          if (signal === "SIGINT" || signal === "SIGTERM") {
             return;
           }
           throw execError;
@@ -127,7 +135,7 @@ export async function launchQwenCLI(
           stdout: childStdio.stdout,
           stderr: childStdio.stderr,
           env: baseEnv,
-        } as any);
+        });
         await execChild(child);
       } else {
         // Fallback to bunx
@@ -150,7 +158,7 @@ export async function launchQwenCLI(
           stdout: childStdio.stdout,
           stderr: childStdio.stderr,
           env: baseEnv,
-        } as any);
+        });
         await execChild(child);
       }
     } finally {
@@ -159,12 +167,10 @@ export async function launchQwenCLI(
 
     let capturedSessionId: string | null = null;
     try {
-      capturedSessionId =
-        (await findLatestQwenSessionId(worktreePath)) ??
-        resumeSessionId ??
-        null;
+      const detected = (await findLatestQwenSessionId(worktreePath)) ?? null;
+      capturedSessionId = usedExplicitSessionId ? resumeSessionId : detected;
     } catch {
-      capturedSessionId = resumeSessionId ?? null;
+      capturedSessionId = usedExplicitSessionId ? resumeSessionId : null;
     }
 
     if (capturedSessionId) {
@@ -181,11 +187,12 @@ export async function launchQwenCLI(
     }
 
     return capturedSessionId ? { sessionId: capturedSessionId } : {};
-  } catch (error: any) {
+  } catch (error: unknown) {
     const hasLocalQwen = await isQwenCommandAvailable();
     let errorMessage: string;
+    const err = error as NodeJS.ErrnoException;
 
-    if (error.code === "ENOENT") {
+    if (err.code === "ENOENT") {
       if (hasLocalQwen) {
         errorMessage =
           "qwen command not found. Please ensure Qwen CLI is properly installed.";
@@ -194,7 +201,8 @@ export async function launchQwenCLI(
           "bunx command not found. Please ensure Bun is installed so Qwen CLI can run via bunx.";
       }
     } else {
-      errorMessage = `Failed to launch Qwen CLI: ${error.message || "Unknown error"}`;
+      const details = error instanceof Error ? error.message : String(error);
+      errorMessage = `Failed to launch Qwen CLI: ${details || "Unknown error"}`;
     }
 
     if (process.platform === "win32") {
@@ -250,8 +258,9 @@ export async function isQwenCLIAvailable(): Promise<boolean> {
   try {
     await execa("bunx", [QWEN_CLI_PACKAGE, "--version"], { shell: true });
     return true;
-  } catch (error: any) {
-    if (error.code === "ENOENT") {
+  } catch (error: unknown) {
+    const err = error as NodeJS.ErrnoException;
+    if (err.code === "ENOENT") {
       console.error(chalk.yellow("\n⚠️  bunx command not found"));
       console.error(
         chalk.gray(