claude-code-station 0.2.1

package/bin/ccs

@@ -0,0 +1,376 @@
+#!/usr/bin/env bash
+# ccs - Claude Code Station: fzf-powered launcher (NEW repos + RESUME sessions)
+# https://github.com/indigo-gr/claude-code-station
+
+set -euo pipefail
+
+VERSION="0.2.0"
+
+# Resolve $0 through symlinks before taking dirname: `npm install -g
+# github:indigo-gr/claude-code-station` links this script into the global
+# bin dir, and the SYMLINK's dirname has none of the sibling .ts modules.
+SOURCE="$0"
+while [[ -L "$SOURCE" ]]; do
+  DIR="$(cd -P "$(dirname "$SOURCE")" && pwd)"
+  SOURCE="$(readlink "$SOURCE")"
+  if [[ "$SOURCE" != /* ]]; then SOURCE="${DIR}/${SOURCE}"; fi
+done
+SCRIPT_DIR="$(cd -P "$(dirname "$SOURCE")" && pwd)"
+
+# Prefer a package-local tsx over the PATH one: the npm install brings tsx
+# as a dependency (../node_modules from the package's bin/), and the copy
+# install (install.sh) symlinks node_modules next to the scripts. Fall back
+# to a globally installed tsx for the bare-checkout workflow.
+if [[ -x "${SCRIPT_DIR}/../node_modules/.bin/tsx" ]]; then
+  TSX="${SCRIPT_DIR}/../node_modules/.bin/tsx"
+elif [[ -x "${SCRIPT_DIR}/node_modules/.bin/tsx" ]]; then
+  TSX="${SCRIPT_DIR}/node_modules/.bin/tsx"
+else
+  TSX="tsx"
+fi
+
+CCS_LIST="${SCRIPT_DIR}/ccs-list.ts"
+CCS_SCAN="${SCRIPT_DIR}/ccs-scan.ts"
+CCS_PREVIEW="${SCRIPT_DIR}/ccs-preview.ts"
+CCS_DELETE="${SCRIPT_DIR}/ccs-delete.sh"
+CCS_INIT="${SCRIPT_DIR}/ccs-init.ts"
+
+# ── CCR_CMD -> CCS_CMD migration shim ────────────────────────────────────────
+if [[ -n "${CCR_CMD:-}" && -z "${CCS_CMD:-}" ]]; then
+  echo "[ccs] CCR_CMD is deprecated, please rename to CCS_CMD (using CCR_CMD value for now)" >&2
+  export CCS_CMD="${CCR_CMD}"
+fi
+
+# ── Clipboard helper (cross-platform) ────────────────────────────────────────
+clipboard_cmd() {
+  if command -v pbcopy &>/dev/null; then
+    echo "pbcopy"
+  elif command -v xclip &>/dev/null; then
+    echo "xclip -selection clipboard"
+  elif command -v xsel &>/dev/null; then
+    echo "xsel --clipboard --input"
+  elif command -v wl-copy &>/dev/null; then
+    echo "wl-copy"
+  else
+    echo ""
+  fi
+}
+CLIP_CMD=$(clipboard_cmd)
+
+# ── Dependency check ─────────────────────────────────────────────────────────
+check_deps() {
+  local missing=()
+  command -v fzf &>/dev/null   || missing+=("fzf")
+  # tsx: a resolved package-local binary counts; only require a PATH tsx
+  # when no local one was found.
+  if [[ "$TSX" == "tsx" ]]; then
+    command -v tsx &>/dev/null || missing+=("tsx (npm install -g tsx)")
+  fi
+  command -v node &>/dev/null  || missing+=("node")
+  command -v claude &>/dev/null || missing+=("claude (Claude Code CLI)")
+  command -v tput &>/dev/null  || missing+=("tput")
+
+  if [[ ${#missing[@]} -gt 0 ]]; then
+    echo "❌ Missing dependencies:" >&2
+    for dep in "${missing[@]}"; do
+      echo "   - $dep" >&2
+    done
+    echo "" >&2
+    echo "Install with:" >&2
+    echo "  brew install fzf       # or: apt install fzf" >&2
+    echo "  npm install -g tsx" >&2
+    exit 1
+  fi
+}
+
+# ── Help / version ───────────────────────────────────────────────────────────
+print_help() {
+  cat <<HELP
+ccs v${VERSION} - Claude Code Station (fzf-powered launcher)
+
+Usage:
+  ccs                 Mixed list: NEW repos + RESUME sessions
+  ccs .               Sessions whose cwd is (under) current dir
+  ccs --new           Only NEW repo entries
+  ccs --resume        Only past sessions
+  ccs --refresh       Force pre-scan before showing list
+  ccs --no-scan       Skip implicit pre-scan (use stale DB)
+  ccs init            Create ~/.config/ccs/repos.yml from the template
+  ccs init --auto-discover [--depth N]
+                      Scan \$HOME for git repos (default depth 5) and pick
+                      which to add to repos.yml via fzf multi-select
+  ccs [options]       Unknown options pass through to launched command
+
+Controls:
+  Enter               Launch (or resume) selected entry
+  Ctrl-Y              Copy the effective shell command to clipboard
+  Ctrl-I              Copy session UUID (resume) or repo path (new)
+  Ctrl-R              Refresh DB and reload list
+  Ctrl-D              Delete session (resume rows only)
+  Esc / Ctrl-C        Cancel
+
+Environment:
+  CCS_CMD             Fallback launch command for repos with no explicit
+                      command. Per-repo command in repos.yml always wins.
+                      Example: export CCS_CMD="opr claude"
+  CCR_CMD             Deprecated — still honored with a warning if CCS_CMD unset
+
+Examples:
+  ccs                                     # Full launcher
+  ccs .                                   # Resume current-dir session
+  ccs --new                               # Pick a repo to launch fresh
+  ccs --refresh                           # Force DB rebuild
+  ccs --dangerously-skip-permissions      # Pass-through flag to claude
+
+Config: ~/.config/ccs/repos.yml
+Cache:  ~/.cache/ccs/state.db
+HELP
+}
+
+# ── init subcommand ──────────────────────────────────────────────────────────
+# `ccs init` scaffolds the config; `ccs init --auto-discover [--depth N]`
+# scans $HOME for git repos and appends fzf-selected ones to repos.yml.
+# Handled before the launcher arg loop — init never opens the main list.
+if [[ "${1:-}" == "init" ]]; then
+  shift
+  AUTO=0
+  INIT_ARGS=()
+  for a in "$@"; do
+    case "$a" in
+      --auto-discover) AUTO=1 ;;
+      *) INIT_ARGS+=("$a") ;;
+    esac
+  done
+
+  if [[ "$TSX" == "tsx" ]] && ! command -v tsx &>/dev/null; then
+    echo "❌ tsx not found (npm install -g tsx)" >&2
+    exit 1
+  fi
+
+  if (( ! AUTO )); then
+    "${TSX}" "${CCS_INIT}" scaffold
+    exit $?
+  fi
+
+  check_deps
+  echo "🔍 Scanning \$HOME for git repositories..." >&2
+  CANDIDATES="$("${TSX}" "${CCS_INIT}" discover ${INIT_ARGS[@]+"${INIT_ARGS[@]}"})" || exit 1
+  if [[ -z "$CANDIDATES" ]]; then
+    echo "No new git repositories found (everything within depth is already registered)." >&2
+    exit 0
+  fi
+  SELECTED=$(printf '%s\n' "$CANDIDATES" | fzf \
+    --multi \
+    --delimiter=$'\t' \
+    --header=$'TAB: toggle | Enter: add selected to repos.yml | Esc: cancel' \
+    --prompt='ccs init> ' \
+    --height='80%' \
+    --layout=reverse \
+    --border \
+    --tabstop=4 \
+  ) || exit 0
+  [[ -z "$SELECTED" ]] && exit 0
+  printf '%s\n' "$SELECTED" | "${TSX}" "${CCS_INIT}" append || exit 1
+  # Index the new repos right away so the next `ccs` shows them with stats.
+  "${TSX}" "${CCS_SCAN}" --force --quiet || {
+    echo "[ccs] scan failed — run \`ccs --refresh\` to index the new repos" >&2
+  }
+  exit 0
+fi
+
+# ── Argument parsing ─────────────────────────────────────────────────────────
+LIST_FLAGS=()
+PASS_ARGS=()
+DO_REFRESH=0
+NO_SCAN=0
+
+for arg in "$@"; do
+  case "$arg" in
+    .)            LIST_FLAGS+=("--current-only") ;;
+    --new)        LIST_FLAGS+=("--repos-only") ;;
+    --resume)     LIST_FLAGS+=("--sessions-only") ;;
+    --refresh)    DO_REFRESH=1 ;;
+    --no-scan)    NO_SCAN=1 ;;
+    --help|-h)    print_help; exit 0 ;;
+    --version|-v) echo "ccs v${VERSION}"; exit 0 ;;
+    *)            PASS_ARGS+=("$arg") ;;
+  esac
+done
+
+check_deps
+
+# ── Pre-scan ─────────────────────────────────────────────────────────────────
+if (( DO_REFRESH )); then
+  "${TSX}" "${CCS_SCAN}" --force --quiet || {
+    echo "[ccs] refresh failed, continuing with stale DB" >&2
+  }
+elif (( ! NO_SCAN )); then
+  "${TSX}" "${CCS_SCAN}" --quiet || {
+    echo "[ccs] scan failed, continuing with stale DB" >&2
+  }
+fi
+
+# ── fzf bindings ─────────────────────────────────────────────────────────────
+# Row layout (tab-separated columns):
+#   1: LABEL  2: DESCRIPTION  3: BADGES  4: KIND:KEY  5: CWD  6: COMMAND
+
+LIST_ARGS_STR=""
+for f in "${LIST_FLAGS[@]+"${LIST_FLAGS[@]}"}"; do
+  LIST_ARGS_STR+=" ${f}"
+done
+
+CLIP_BINDS=()
+if [[ -n "$CLIP_CMD" ]]; then
+  # ctrl-y: build "cd CWD && COMMAND [--resume UUID]" depending on kind ({4})
+  # Keep fzf open (no +abort) and briefly flash a header confirming the copy.
+  # cwd/uuid are %q-quoted: the clipboard line gets pasted into a live shell,
+  # so a tainted cwd must arrive as an inert literal, never as syntax (audit
+  # H-1 defense-in-depth — intake sanitization in ccs-scan is the first gate).
+  CLIP_BINDS+=(--bind "ctrl-y:execute-silent(
+    kk={4}; cwd={5}; cmd={6};
+    case \"\$kk\" in
+      resume:*) uuid=\${kk#resume:}; printf 'cd %q && %s --resume %q' \"\$cwd\" \"\$cmd\" \"\$uuid\" | ${CLIP_CMD} ;;
+      new:*)    printf 'cd %q && %s' \"\$cwd\" \"\$cmd\" | ${CLIP_CMD} ;;
+    esac
+  )+change-header(📋 Copied command to clipboard — ⏎: launch | ^Y: copy again)")
+  # ctrl-i: copy UUID (resume) or repo path (new)
+  CLIP_BINDS+=(--bind "ctrl-i:execute-silent(
+    kk={4};
+    case \"\$kk\" in
+      resume:*) printf '%s' \"\${kk#resume:}\" | ${CLIP_CMD} ;;
+      new:*)    printf '%s' {5} | ${CLIP_CMD} ;;
+    esac
+  )+change-header(📋 Copied ID/path to clipboard — ⏎: launch | ^I: copy again)")
+fi
+
+# ctrl-d: delete session (resume only). Repo (new) rows cannot be deleted
+# from ccs — repos.yml is the source of truth; edit it directly to remove.
+DELETE_BIND=(--bind "ctrl-d:execute(
+  kk={4};
+  case \"\$kk\" in
+    resume:*) bash '${CCS_DELETE}' \"\${kk#resume:}\" ;;
+    new:*)    echo '[ccs] Repos can only be removed by editing ~/.config/ccs/repos.yml (press any key)'; read -r -n1 _ ;;
+  esac
+)+reload('${TSX}' '${CCS_LIST}'${LIST_ARGS_STR})")
+
+# ctrl-r: force refresh
+REFRESH_BIND=(--bind "ctrl-r:execute('${TSX}' '${CCS_SCAN}' --force --quiet)+reload('${TSX}' '${CCS_LIST}'${LIST_ARGS_STR})")
+
+# ── Header (adaptive to terminal width) ──────────────────────────────────────
+# Note: ^D deletes SESSIONS only; repos are managed via ~/.config/ccs/repos.yml
+COLS=$(tput cols 2>/dev/null || echo 80)
+if (( COLS >= 80 )); then
+  HEADER=$'Enter: launch | ^Y: copy cmd | ^I: copy ID/path | ^R: refresh\n^D: del session (edit repos.yml to remove a repo) | Esc: cancel'
+else
+  HEADER=$'⏎launch ^Y:cmd ^I:ID ^R:refresh\n^D:del[resume] Esc:quit'
+fi
+
+# ── Launch fzf ───────────────────────────────────────────────────────────────
+SELECTED=$("${TSX}" "${CCS_LIST}" "${LIST_FLAGS[@]+"${LIST_FLAGS[@]}"}" | fzf \
+  --ansi \
+  --delimiter=$'\t' \
+  --with-nth=1..3 \
+  --header="${HEADER}" \
+  --preview="'${TSX}' '${CCS_PREVIEW}' {4} {5}" \
+  --preview-window='right:55%:wrap' \
+  "${CLIP_BINDS[@]+"${CLIP_BINDS[@]}"}" \
+  "${DELETE_BIND[@]}" \
+  "${REFRESH_BIND[@]}" \
+  --height='80%' \
+  --layout=reverse \
+  --border \
+  --prompt='ccs> ' \
+  --tabstop=4 \
+) || exit 0
+
+[[ -z "$SELECTED" ]] && exit 0
+
+# ── Parse selected row ───────────────────────────────────────────────────────
+# 6-col TSV from ccs-list.ts: LABEL, DESCRIPTION, BADGES, KIND:KEY, CWD, COMMAND.
+# Use IFS-based read so values are never resplit by shell word-splitting
+# (H6 fix). The three `_` placeholders skip columns 1-3.
+IFS=$'\t' read -r _ _ _ KIND_KEY ROW_CWD ROW_CMD <<< "$SELECTED"
+
+if [[ -z "$KIND_KEY" ]]; then
+  echo "❌ Could not parse selection" >&2
+  exit 1
+fi
+
+KIND="${KIND_KEY%%:*}"
+KEY="${KIND_KEY#*:}"
+
+# Separator row is a non-actionable divider (empty ROW_CWD/ROW_CMD by design).
+# Short-circuit here so the downstream ROW_CMD empty-check doesn't misfire.
+[[ "$KIND" == "separator" ]] && exit 0
+
+if [[ -z "$ROW_CMD" ]]; then
+  echo "❌ Could not parse selection" >&2
+  exit 1
+fi
+
+# ── Per-row command is authoritative ─────────────────────────────────────────
+# CCS_CMD env is resolved by ccs-config.ts as a fallback for repos without
+# explicit `command:` (priority: repos[].command > defaults.command > CCS_CMD > "claude").
+# Do NOT override here — that would break special-command repos like Strapi.
+
+# ── Validation ───────────────────────────────────────────────────────────────
+case "$KIND" in
+  resume)
+    if [[ ! "$KEY" =~ ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ ]]; then
+      echo "❌ Invalid session ID format: ${KEY}" >&2
+      exit 1
+    fi
+    ;;
+  new)
+    # Reject shell metacharacters, quotes/backslash AND control chars
+    # (incl. ESC — audit NEW-2). Mirrors the SHELL_METACHARS policy that
+    # ccs-config.ts enforces on repo names at load time; this is the
+    # defense-in-depth copy for rows coming back out of fzf.
+    if [[ "$KEY" =~ [\;\&\|\<\>\$\`\"\'\\] || "$KEY" =~ [[:cntrl:]] ]]; then
+      echo "❌ Invalid repo name (shell metacharacters/control chars): ${KEY}" >&2
+      exit 1
+    fi
+    ;;
+  separator)
+    # Defensive: separator should already be short-circuited above. Kept as
+    # a safety net in case row-parse order ever changes.
+    exit 0
+    ;;
+  *)
+    echo "❌ Unknown row kind: ${KIND}" >&2
+    exit 1
+    ;;
+esac
+
+# Path validation (traversal prevention). Must be $HOME itself or a child
+# path ("$HOME"/*): a bare prefix match would also accept sibling dirs like
+# /Users/daiskeEVIL (audit L-1).
+if [[ "$ROW_CWD" != "$HOME" && "$ROW_CWD" != "$HOME"/* ]]; then
+  echo "⚠️  cwd is outside \$HOME: ${ROW_CWD}" >&2
+  echo "Launching in current directory instead." >&2
+  ROW_CWD="."
+fi
+
+# Note: shell metachars in ROW_CMD are hard-rejected at config-load time by
+# bin/ccs-config.ts (SHELL_METACHARS regex covers `;&|<>$`"'\` + control chars).
+# The informational rm/sudo/; warning that used to live here was removed in
+# Phase 6 because the metachar rejection is now the authoritative guard.
+
+# ── cd ───────────────────────────────────────────────────────────────────────
+if ! cd "$ROW_CWD" 2>/dev/null; then
+  echo "⚠️  Directory ${ROW_CWD} not found. Launching in $(pwd) instead." >&2
+fi
+
+# ── Execute ──────────────────────────────────────────────────────────────────
+# Direct invocation (NOT exec) so shell functions / aliases like `opr` work.
+# shellcheck disable=SC2086
+case "$KIND" in
+  resume)
+    echo "🔄 Resuming session ${KEY} in $(pwd)..."
+    ${ROW_CMD} --resume "${KEY}" "${PASS_ARGS[@]+"${PASS_ARGS[@]}"}"
+    ;;
+  new)
+    echo "🚀 Launching ${KEY} in $(pwd)..."
+    ${ROW_CMD} "${PASS_ARGS[@]+"${PASS_ARGS[@]}"}"
+    ;;
+esac