@cluesmith/codev 3.0.0 → 3.0.2

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@cluesmith/codev",
-  "version": "3.0.0",
+  "version": "3.0.2",
   "description": "Codev CLI - AI-assisted software development framework",
   "type": "module",
   "bin": {
     "codev": "./bin/codev.js",
     "porch": "./bin/porch.js",
+    "afx": "./bin/afx.js",
     "af": "./bin/af.js",
     "consult": "./bin/consult.js",
     "team": "./bin/team.js",
@@ -16,43 +17,28 @@
     "bin",
     "skeleton",
     "templates",
-    "dashboard/dist",
-    "scripts/forge"
+    "dashboard-dist",
+    "scripts/forge",
+    "scripts/postinstall.mjs"
   ],
-  "scripts": {
-    "clean": "rm -rf dist",
-    "build": "npm run clean && tsc && npm run build:dashboard && npm run copy-skeleton",
-    "build:dashboard": "cd dashboard && npm install && npm run build",
-    "dev:dashboard": "cd dashboard && npm run dev",
-    "copy-skeleton": "rm -rf skeleton && cp -r ../../codev-skeleton skeleton",
-    "dev": "tsx src/cli.ts",
-    "start": "node dist/cli.js",
-    "test": "vitest",
-    "test:e2e": "npm run build && vitest run --config vitest.e2e.config.ts",
-    "test:e2e:watch": "vitest --config vitest.e2e.config.ts",
-    "test:e2e:playwright": "npx playwright test",
-    "test:e2e:cli": "npm run build && vitest run --config vitest.cli.config.ts",
-    "postinstall": "node -e \"try{require('fs').chmodSync(require('path').join(require.resolve('node-pty'),'..','..','prebuilds',process.platform+'-'+process.arch,'spawn-helper'),0o755)}catch{}\"",
-    "prepublishOnly": "npm run build"
-  },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.41",
     "@google/genai": "^1.0.0",
     "@openai/codex-sdk": "^0.101.0",
-    "@types/http-proxy": "^1.17.17",
     "better-sqlite3": "^12.5.0",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
     "glob": "^11.0.0",
-    "http-proxy": "^1.18.1",
     "js-yaml": "^4.1.0",
     "node-pty": "^1.1.0",
     "open": "^10.1.0",
     "tree-kill": "^1.2.2",
-    "ws": "^8.18.0"
+    "ws": "^8.18.0",
+    "@cluesmith/codev-core": "0.0.3"
   },
   "devDependencies": {
     "@playwright/test": "^1.58.0",
+    "@xterm/xterm": "^5.5.0",
     "@types/better-sqlite3": "^7.6.13",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.10.1",
@@ -62,7 +48,9 @@
     "playwright": "^1.58.0",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2",
-    "vitest": "^4.0.15"
+    "vitest": "^4.0.15",
+    "@cluesmith/codev-dashboard": "0.0.0",
+    "@cluesmith/codev-types": "0.0.2"
   },
   "engines": {
     "node": ">=20.0.0"
@@ -77,9 +65,24 @@
     "multi-agent"
   ],
   "author": "Cluesmith",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/cluesmith/codev"
+  },
+  "scripts": {
+    "clean": "rm -rf dist",
+    "build": "pnpm clean && tsc && pnpm build:dashboard && pnpm copy-skeleton",
+    "build:dashboard": "cd ../dashboard && pnpm build && rm -rf ../../packages/codev/dashboard-dist && cp -r dist ../../packages/codev/dashboard-dist",
+    "dev:dashboard": "cd ../dashboard && pnpm dev",
+    "copy-skeleton": "rm -rf skeleton && cp -r ../../codev-skeleton skeleton",
+    "dev": "tsx src/cli.ts",
+    "start": "node dist/cli.js",
+    "test": "vitest",
+    "test:e2e": "pnpm build && vitest run --config vitest.e2e.config.ts",
+    "test:e2e:watch": "vitest --config vitest.e2e.config.ts",
+    "test:e2e:playwright": "pnpm exec playwright test",
+    "test:e2e:cli": "pnpm build && vitest run --config vitest.cli.config.ts",
+    "postinstall": "node ./scripts/postinstall.mjs"
   }
-}
+}

package/scripts/forge/gitea/pr-exists.sh

@@ -1,3 +1,6 @@
 #!/bin/sh
 # Forge concept: pr-exists (Gitea via tea CLI)
-tea pulls list --fields index --output json | jq "[.[] | select(.head.ref == \"$CODEV_BRANCH_NAME\")] | length > 0"
+# Returns true for open or merged pulls only. Closed-not-merged pulls are excluded.
+# --state all fetches pulls in all states; without it, only open pulls are returned.
+# Gitea: merged PRs have state="closed" + merged=true; abandoned PRs have state="closed" + merged=false
+tea pulls list --state all --fields index --output json | jq "[.[] | select(.head.ref == \"$CODEV_BRANCH_NAME\" and (.state == \"open\" or (.state == \"closed\" and .merged == true)))] | length > 0"

package/scripts/forge/github/issue-list.sh

@@ -1,4 +1,4 @@
 #!/bin/sh
 # Forge concept: issue-list (GitHub via gh CLI)
-# Output: JSON [{number, title, url, labels, createdAt}]
-exec gh issue list --limit 200 --json number,title,url,labels,createdAt
+# Output: JSON [{number, title, url, labels, createdAt, author, assignees}]
+exec gh issue list --limit 200 --json number,title,url,labels,createdAt,author,assignees

package/scripts/forge/github/pr-exists.sh

@@ -2,4 +2,6 @@
 # Forge concept: pr-exists (GitHub via gh CLI)
 # Input: CODEV_BRANCH_NAME
 # Output: "true" or "false"
-exec gh pr list --state all --head "$CODEV_BRANCH_NAME" --json number --jq "length > 0"
+# Returns true for OPEN or MERGED PRs only. CLOSED-not-merged PRs are excluded.
+# (bugfix #568: --state all is needed to catch merged PRs; #653: filter out CLOSED)
+exec gh pr list --state all --head "$CODEV_BRANCH_NAME" --json number,state --jq '[.[] | select(.state == "OPEN" or .state == "MERGED")] | length > 0'

package/scripts/forge/github/pr-list.sh

@@ -1,4 +1,4 @@
 #!/bin/sh
 # Forge concept: pr-list (GitHub via gh CLI)
-# Output: JSON [{number, title, url, reviewDecision, body, createdAt}]
-exec gh pr list --json number,title,url,reviewDecision,body,createdAt
+# Output: JSON [{number, title, url, reviewDecision, body, createdAt, author}]
+exec gh pr list --json number,title,url,reviewDecision,body,createdAt,author

package/scripts/forge/gitlab/pr-exists.sh

@@ -1,3 +1,5 @@
 #!/bin/sh
 # Forge concept: pr-exists (GitLab via glab CLI)
-glab mr list --source-branch "$CODEV_BRANCH_NAME" --output json | jq "length > 0"
+# Returns true for open or merged MRs only. Closed-not-merged MRs are excluded.
+# --all fetches MRs in all states (open, merged, closed); without it, only open MRs are returned.
+glab mr list --all --source-branch "$CODEV_BRANCH_NAME" --output json | jq '[.[] | select(.state == "opened" or .state == "merged")] | length > 0'

package/scripts/forge/linear/auth-status.sh

@@ -0,0 +1,15 @@
+#!/bin/sh
+# Forge concept: auth-status (Linear via GraphQL API)
+# Output: exit code (0 = authenticated)
+set -e
+
+if [ -z "$LINEAR_API_KEY" ]; then
+  echo "LINEAR_API_KEY is not set" >&2
+  exit 1
+fi
+
+curl -sf -X POST https://api.linear.app/graphql \
+  -H "Content-Type: application/json" \
+  -H "Authorization: $LINEAR_API_KEY" \
+  -d '{"query":"{ viewer { id } }"}' \
+  -o /dev/null

package/scripts/forge/linear/issue-comment.sh

@@ -0,0 +1,38 @@
+#!/bin/sh
+# Forge concept: issue-comment (Linear via GraphQL API)
+# Input: CODEV_ISSUE_ID, CODEV_COMMENT_BODY
+# Output: exit code only
+set -e
+
+if [ -z "$LINEAR_API_KEY" ]; then
+  echo "LINEAR_API_KEY is not set" >&2
+  exit 1
+fi
+
+if [ -z "$CODEV_ISSUE_ID" ]; then
+  echo "CODEV_ISSUE_ID is not set" >&2
+  exit 1
+fi
+
+ISSUE_UUID=$(curl -sf -X POST https://api.linear.app/graphql \
+  -H "Content-Type: application/json" \
+  -H "Authorization: $LINEAR_API_KEY" \
+  -d "$(jq -n --arg id "$CODEV_ISSUE_ID" '{
+    query: "query($id: String!) { issues(filter: { identifier: { eq: $id } }) { nodes { id } } }",
+    variables: { id: $id }
+  }')" \
+  | jq -r '.data.issues.nodes[0].id')
+
+if [ -z "$ISSUE_UUID" ] || [ "$ISSUE_UUID" = "null" ]; then
+  echo "Issue not found: $CODEV_ISSUE_ID" >&2
+  exit 1
+fi
+
+curl -sf -X POST https://api.linear.app/graphql \
+  -H "Content-Type: application/json" \
+  -H "Authorization: $LINEAR_API_KEY" \
+  -d "$(jq -n --arg issueId "$ISSUE_UUID" --arg body "$CODEV_COMMENT_BODY" '{
+    query: "mutation($issueId: String!, $body: String!) { commentCreate(input: { issueId: $issueId, body: $body }) { success } }",
+    variables: { issueId: $issueId, body: $body }
+  }')" \
+  -o /dev/null

package/scripts/forge/linear/issue-list.sh

@@ -0,0 +1,35 @@
+#!/bin/sh
+# Forge concept: issue-list (Linear via GraphQL API)
+# Input: CODEV_LINEAR_TEAM (team key, e.g. "ENG")
+# Output: JSON [{number, title, url, labels, createdAt, author, assignees}]
+set -e
+
+if [ -z "$LINEAR_API_KEY" ]; then
+  echo "LINEAR_API_KEY is not set" >&2
+  exit 1
+fi
+
+FILTER='{ state: { type: { nin: ["completed", "canceled"] } } }'
+if [ -n "$CODEV_LINEAR_TEAM" ]; then
+  FILTER="$(jq -n --arg team "$CODEV_LINEAR_TEAM" '{
+    team: { key: { eq: $team } },
+    state: { type: { nin: ["completed", "canceled"] } }
+  }')"
+fi
+
+curl -sf -X POST https://api.linear.app/graphql \
+  -H "Content-Type: application/json" \
+  -H "Authorization: $LINEAR_API_KEY" \
+  -d "$(jq -n --argjson filter "$FILTER" '{
+    query: "query($filter: IssueFilter) { issues(filter: $filter, first: 200) { nodes { identifier title url labels { nodes { name } } createdAt assignee { displayName } creator { displayName } } } }",
+    variables: { filter: $filter }
+  }')" \
+  | jq '[.data.issues.nodes[] | {
+    number: .identifier,
+    title: .title,
+    url: .url,
+    labels: [.labels.nodes[] | { name: .name }],
+    createdAt: .createdAt,
+    author: (if .creator then { login: .creator.displayName } else null end),
+    assignees: (if .assignee then [{ login: .assignee.displayName }] else [] end)
+  }]'

package/scripts/forge/linear/issue-view.sh

@@ -0,0 +1,37 @@
+#!/bin/sh
+# Forge concept: issue-view (Linear via GraphQL API)
+# Input: CODEV_ISSUE_ID (e.g. "ENG-123")
+# Output: JSON {title, body, state, comments[]}
+set -e
+
+if [ -z "$LINEAR_API_KEY" ]; then
+  echo "LINEAR_API_KEY is not set" >&2
+  exit 1
+fi
+
+if [ -z "$CODEV_ISSUE_ID" ]; then
+  echo "CODEV_ISSUE_ID is not set" >&2
+  exit 1
+fi
+
+curl -sf -X POST https://api.linear.app/graphql \
+  -H "Content-Type: application/json" \
+  -H "Authorization: $LINEAR_API_KEY" \
+  -d "$(jq -n --arg id "$CODEV_ISSUE_ID" '{
+    query: "query($id: String!) { issueVcsByFilter: issues(filter: { identifier: { eq: $id } }) { nodes { title description state { name } comments { nodes { body createdAt user { displayName } } } } } }",
+    variables: { id: $id }
+  }')" \
+  | jq 'if (.data.issueVcsByFilter.nodes | length) == 0 then
+    error("issue not found: \(env.CODEV_ISSUE_ID)")
+  else
+    .data.issueVcsByFilter.nodes[0] | {
+      title: .title,
+      body: (.description // ""),
+      state: .state.name,
+      comments: [.comments.nodes[] | {
+        body: .body,
+        createdAt: .createdAt,
+        author: { login: .user.displayName }
+      }]
+    }
+  end'

package/scripts/forge/linear/recently-closed.sh

@@ -0,0 +1,45 @@
+#!/bin/sh
+# Forge concept: recently-closed (Linear via GraphQL API)
+# Input: CODEV_LINEAR_TEAM, CODEV_SINCE_DATE (optional, ISO date)
+# Output: JSON [{number, title, url, labels, createdAt, closedAt}]
+set -e
+
+if [ -z "$LINEAR_API_KEY" ]; then
+  echo "LINEAR_API_KEY is not set" >&2
+  exit 1
+fi
+
+FILTER='{ state: { type: { in: ["completed", "canceled"] } } }'
+if [ -n "$CODEV_LINEAR_TEAM" ] && [ -n "$CODEV_SINCE_DATE" ]; then
+  FILTER="$(jq -n --arg team "$CODEV_LINEAR_TEAM" --arg since "$CODEV_SINCE_DATE" '{
+    team: { key: { eq: $team } },
+    state: { type: { in: ["completed", "canceled"] } },
+    completedAt: { gte: $since }
+  }')"
+elif [ -n "$CODEV_LINEAR_TEAM" ]; then
+  FILTER="$(jq -n --arg team "$CODEV_LINEAR_TEAM" '{
+    team: { key: { eq: $team } },
+    state: { type: { in: ["completed", "canceled"] } }
+  }')"
+elif [ -n "$CODEV_SINCE_DATE" ]; then
+  FILTER="$(jq -n --arg since "$CODEV_SINCE_DATE" '{
+    state: { type: { in: ["completed", "canceled"] } },
+    completedAt: { gte: $since }
+  }')"
+fi
+
+curl -sf -X POST https://api.linear.app/graphql \
+  -H "Content-Type: application/json" \
+  -H "Authorization: $LINEAR_API_KEY" \
+  -d "$(jq -n --argjson filter "$FILTER" '{
+    query: "query($filter: IssueFilter) { issues(filter: $filter, first: 200, orderBy: updatedAt) { nodes { identifier title url labels { nodes { name } } createdAt completedAt } } }",
+    variables: { filter: $filter }
+  }')" \
+  | jq '[.data.issues.nodes[] | {
+    number: .identifier,
+    title: .title,
+    url: .url,
+    labels: [.labels.nodes[] | { name: .name }],
+    createdAt: .createdAt,
+    closedAt: .completedAt
+  }]'

package/scripts/forge/linear/user-identity.sh

@@ -0,0 +1,15 @@
+#!/bin/sh
+# Forge concept: user-identity (Linear via GraphQL API)
+# Output: plain text display name
+set -e
+
+if [ -z "$LINEAR_API_KEY" ]; then
+  echo "LINEAR_API_KEY is not set" >&2
+  exit 1
+fi
+
+curl -sf -X POST https://api.linear.app/graphql \
+  -H "Content-Type: application/json" \
+  -H "Authorization: $LINEAR_API_KEY" \
+  -d '{"query":"{ viewer { displayName } }"}' \
+  | jq -r '.data.viewer.displayName'

package/scripts/postinstall.mjs

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+
+// Restores executable bits that pnpm pack/publish strips from files outside
+// the `bin` field. See issue #693 — without this, `afx spawn` fails with
+// Permission denied when invoking forge concept scripts.
+
+import { chmodSync, readdirSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const here = dirname(fileURLToPath(import.meta.url));
+const forgeRoot = join(here, 'forge');
+
+function chmodForgeScripts(root) {
+  let providers;
+  try {
+    providers = readdirSync(root, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const provider of providers) {
+    if (!provider.isDirectory()) continue;
+    const providerDir = join(root, provider.name);
+    for (const entry of readdirSync(providerDir, { withFileTypes: true })) {
+      if (!entry.isFile() || !entry.name.endsWith('.sh')) continue;
+      chmodSync(join(providerDir, entry.name), 0o755);
+    }
+  }
+}
+
+function chmodNodePtySpawnHelper() {
+  try {
+    const require = createRequire(import.meta.url);
+    const ptyEntry = require.resolve('node-pty');
+    const helper = join(
+      ptyEntry,
+      '..',
+      '..',
+      'prebuilds',
+      `${process.platform}-${process.arch}`,
+      'spawn-helper'
+    );
+    chmodSync(helper, 0o755);
+  } catch {
+    // node-pty may not ship a prebuild for this platform; harmless.
+  }
+}
+
+chmodForgeScripts(forgeRoot);
+chmodNodePtySpawnHelper();

package/skeleton/.claude/skills/afx/SKILL.md

@@ -0,0 +1,144 @@
+---
+name: afx
+description: Agent Farm CLI — the tool for spawning builders, managing Tower, workspaces, and cron tasks. ALWAYS consult this skill BEFORE running any `afx` command to get the exact syntax. This prevents wasting time guessing flags that don't exist. Use this whenever you need to spawn a builder, check status, send messages, clean up worktrees, manage Tower, or run cron tasks. If you're about to type `afx` followed by anything, check here first.
+---
+
+# Agent Farm CLI
+
+## afx spawn
+
+Spawns a new builder in an isolated git worktree.
+
+```
+afx spawn [number] [options]
+```
+
+**The ONLY flags that exist:**
+
+| Flag | Description |
+|------|-------------|
+| `--protocol <name>` | Protocol: spir, aspir, air, bugfix, maintain, experiment. **Required for numbered spawns.** |
+| `--task <text>` | Ad-hoc task (no issue number needed) |
+| `--shell` | Bare Claude session |
+| `--worktree` | Bare worktree session |
+| `--files <files>` | Context files, comma-separated. **Requires `--task`.** |
+| `--no-comment` | Skip commenting on the GitHub issue |
+| `--force` | Skip dirty-worktree and collision checks |
+| `--soft` | Soft mode (AI follows protocol, you verify) |
+| `--strict` | Strict mode (porch orchestrates) — this is the default |
+| `--resume` | Resume builder in existing worktree |
+| `--no-role` | Skip loading role prompt |
+
+**There is NO `-t`, `--title`, `--name`, or `--branch` flag.** The branch name is auto-generated from the issue title.
+
+**Examples:**
+```bash
+afx spawn 42 --protocol spir           # SPIR builder for issue #42
+afx spawn 42 --protocol aspir          # ASPIR (autonomous, no human gates)
+afx spawn 42 --protocol air            # AIR (small features)
+afx spawn 42 --protocol bugfix         # Bugfix
+afx spawn 42 --protocol spir --soft    # Soft mode
+afx spawn 42 --resume                  # Resume existing builder
+afx spawn --task "fix the flaky test"  # Ad-hoc task (no issue)
+afx spawn 42 --protocol spir --force   # Skip dirty-worktree check
+```
+
+**Pre-spawn checklist:**
+1. `git status` — worktree must be clean (or use `--force`)
+2. Commit specs/plans first — builders branch from HEAD and can't see uncommitted files
+3. `--protocol` is required for numbered spawns
+
+## afx send
+
+Sends a message to a running builder.
+
+```
+afx send [builder] [message]
+```
+
+| Flag | Description |
+|------|-------------|
+| `--all` | Send to all builders |
+| `--file <path>` | Include file content |
+| `--interrupt` | Send Ctrl+C first |
+| `--raw` | Skip structured formatting |
+| `--no-enter` | Don't press Enter after message |
+
+```bash
+afx send 0042 "PR approved, please merge"
+afx send 0585 "check the test output" --file /tmp/test-results.txt
+```
+
+## afx cleanup
+
+Removes a builder's worktree and branch after work is done.
+
+```
+afx cleanup [options]
+```
+
+| Flag | Description |
+|------|-------------|
+| `-p, --project <id>` | Builder project ID (no leading zeros: `585` not `0585`) |
+| `-i, --issue <number>` | Cleanup bugfix builder by issue number |
+| `-t, --task <id>` | Cleanup task builder (e.g., `task-bEPd`) |
+| `-f, --force` | Force cleanup even if branch not merged |
+
+```bash
+afx cleanup -p 585              # Clean up project 585
+afx cleanup -p 585 -f           # Force (unmerged branch)
+```
+
+**Note:** `afx cleanup` uses plain numbers (`585`), not zero-padded (`0585`). But `afx send` uses zero-padded IDs (`0585`).
+
+## afx status
+
+```bash
+afx status                      # Show all builders and workspace status
+```
+
+No flags needed. Shows Tower status, workspace, and all active builders.
+
+## afx tower
+
+```bash
+afx tower start                 # Start Tower on port 4100
+afx tower stop                  # Stop Tower
+afx tower log                   # Tail Tower logs
+afx tower status                # Check daemon and cloud connection status
+afx tower connect               # Connect to Codev Cloud
+afx tower disconnect            # Disconnect from Codev Cloud
+```
+
+There is NO `afx tower restart` — use `afx tower stop && afx tower start`.
+
+## afx workspace
+
+```bash
+afx workspace start             # Start workspace for current project
+afx workspace stop              # Stop workspace processes
+```
+
+`afx dash` is a deprecated alias — use `afx workspace` instead.
+
+## afx cron
+
+```bash
+afx cron list                   # List all cron tasks
+afx cron status <name>          # Check task status
+afx cron run <name>             # Run immediately
+afx cron enable <name>          # Enable
+afx cron disable <name>         # Disable
+```
+
+There is NO `afx cron add` — create YAML files in `.af-cron/` directly.
+
+## Other commands
+
+```bash
+afx open <file>                 # Open file in annotation viewer (NOT system open)
+afx shell                       # Spawn utility shell
+afx attach                      # Attach to running builder terminal
+afx rename <name>               # Rename current shell session
+afx architect                   # Start architect session in current terminal
+```

package/skeleton/.claude/skills/codev/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: codev
-description: Codev project management CLI — init, adopt, update, and doctor commands. Check this skill before running any `codev` command (except `consult`, `porch`, or `af` which have their own skills). Use when setting up new projects, adding codev to existing repos, updating framework files, or diagnosing missing dependencies.
+description: Codev project management CLI — init, adopt, update, and doctor commands. Check this skill before running any `codev` command (except `consult`, `porch`, or `afx` which have their own skills). Use when setting up new projects, adding codev to existing repos, updating framework files, or diagnosing missing dependencies.
 ---
 
 # codev - Project Management CLI
@@ -16,7 +16,7 @@ codev doctor                   Check system dependencies
 
 ## codev init
 
-Creates a **new directory** with the full codev structure: specs/, plans/, reviews/, protocols, CLAUDE.md, AGENTS.md, .claude/skills/, af-config.json, .gitignore.
+Creates a **new directory** with the full codev structure: specs/, plans/, reviews/, protocols, CLAUDE.md, AGENTS.md, .claude/skills/, .codev/config.json, .gitignore.
 
 ```bash
 codev init my-app              # Interactive setup
@@ -53,7 +53,7 @@ codev doctor
 
 ## Common mistakes
 
-- There is NO `codev tower` command — use `af tower start/stop`
+- There is NO `codev tower` command — use `afx tower start/stop`
 - `codev init` creates a new directory — use `codev adopt` for existing projects
 - Always run `codev adopt` and `codev update` from the project root
 - `codev update` only updates framework files — it never touches specs/plans/reviews