forge-cw 0.1.0

package/cw/lib/harnesses/codex.sh

@@ -0,0 +1,245 @@
+# codex cli driver
+# unverified: no skip-permissions equivalent flag confirmed, so it stays unsupported
+codex_supports() {
+    local cap
+    for cap in continue_last non_interactive_prompt model_flag custom_provider \
+               instructions_file api_key_login headless_login; do
+        [[ "$1" == "$cap" ]] && return 0
+    done
+    return 1
+}
+
+codex_config_env() {
+    printf 'CODEX_HOME=%s\n' "$CW_HARNESS_DIR"
+}
+# unverified: no model_providers table is written for a custom endpoint, only the provider name
+
+# lists the rollout files codex has written for this account
+_codex_rollouts() {
+    [[ -d "$CW_HARNESS_DIR/sessions" ]] || return 0
+    find "$CW_HARNESS_DIR/sessions" -type f -name 'rollout-*.jsonl' 2>/dev/null | sort
+}
+
+# remembers which rollouts existed before a launch, so the new one can be told apart
+_codex_snapshot() {
+    _CW_CODEX_BEFORE="$(_codex_rollouts)"
+}
+
+# unverified rollout layout: prints the id of the one new rollout naming the notes file, else nothing
+codex_session_ref() {
+    local marker="${CW_NOTES_FILE:-}"
+    [[ -n "$marker" && "${CW_PROMPT:-}" == *"$marker"* ]] || return 0
+    CW_CX_BEFORE="${_CW_CODEX_BEFORE:-}" CW_CX_AFTER="$(_codex_rollouts)" CW_CX_MARKER="$marker" \
+    python3 - <<'PY' 2>/dev/null
+import json, os, re
+before = set(filter(None, os.environ["CW_CX_BEFORE"].split("\n")))
+after = [p for p in os.environ["CW_CX_AFTER"].split("\n") if p and p not in before]
+marker = os.environ["CW_CX_MARKER"]
+def mentions(value):
+    if isinstance(value, str):
+        return marker in value
+    if isinstance(value, dict):
+        return any(mentions(v) for v in value.values())
+    if isinstance(value, list):
+        return any(mentions(v) for v in value)
+    return False
+hits = []
+for path in after:
+    try:
+        with open(path) as f:
+            if any(mentions(json.loads(line)) for line in f if line.strip()):
+                hits.append(path)
+    except Exception:
+        continue
+uuid = r"([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$"
+m = re.search(uuid, hits[0]) if len(hits) == 1 else None
+if m:
+    print(m.group(1), end="")
+PY
+    return 0
+}
+
+# sets only the top-level model keys in config.toml, refusing any file it cannot edit safely
+_codex_write_provider() {
+    local provider="$1" model="$2"
+    [[ -n "$provider" && "$provider" != "native" ]] || return 0
+    # said once per command, however many launch attempts ask again
+    [[ -z "${_CW_CODEX_REFUSED:-}" ]] || return 1
+    mkdir -p "$CW_HARNESS_DIR"
+    local why
+    why=$(CW_TOML="$CW_HARNESS_DIR/config.toml" CW_TOML_PROVIDER="$provider" CW_TOML_MODEL="$model" \
+          python3 - <<'PY'
+import os, re, shutil, sys, tempfile
+path = os.environ["CW_TOML"]
+want = [("model_provider", os.environ["CW_TOML_PROVIDER"]), ("model", os.environ["CW_TOML_MODEL"])]
+
+def refuse(msg):
+    print(msg, end="")
+    sys.exit(3)
+
+# a toml basic string; every control character and DEL goes out as a \u escape
+def enc(v):
+    out = []
+    for ch in v:
+        o = ord(ch)
+        if ch == '"':
+            out.append('\\"')
+        elif ch == "\\":
+            out.append("\\\\")
+        elif o < 0x20 or o == 0x7F:
+            out.append("\\u%04x" % o)
+        else:
+            out.append(ch)
+    return '"' + "".join(out) + '"'
+
+# bracket depth left open by these lines, ignoring strings and comments
+def depth(lines):
+    d = 0
+    for line in lines:
+        i = 0
+        while i < len(line):
+            c = line[i]
+            if c == "#":
+                break
+            if c == '"':
+                i += 1
+                while i < len(line) and line[i] != '"':
+                    i += 2 if line[i] == "\\" else 1
+            elif c == "'":
+                i += 1
+                while i < len(line) and line[i] != "'":
+                    i += 1
+            elif c in "[{":
+                d += 1
+            elif c in "]}":
+                d -= 1
+            i += 1
+    return d
+
+try:
+    with open(path) as f:
+        original = f.read()
+except FileNotFoundError:
+    original = None
+except Exception as e:
+    refuse(f"cannot read it ({e})")
+
+lines = [] if original is None else original.splitlines(keepends=True)
+first_table = next((i for i, l in enumerate(lines) if l.lstrip().startswith("[")), len(lines))
+top = lines[:first_table]
+if any(q in l for l in top for q in ('"' * 3, "'" * 3)):
+    refuse("its top level holds a multi-line string")
+if depth(top) != 0:
+    refuse("its top level holds a multi-line array or table")
+
+plain = re.compile(r"""^\s*[^=]+=\s*("(?:[^"\\]|\\.)*"|'[^']*')\s*(#.*)?$""")
+for key, value in want:
+    if not value:
+        continue
+    new_line = f"{key} = {enc(value)}\n"
+    key_re = re.compile(r'^\s*(%s|"%s")\s*=' % (re.escape(key), re.escape(key)))
+    hits = [i for i, l in enumerate(lines[:first_table]) if key_re.match(l)]
+    if len(hits) > 1:
+        refuse(f"it sets {key} more than once")
+    if hits:
+        if not plain.match(lines[hits[0]].rstrip("\r\n")):
+            refuse(f"its {key} is not a plain one-line string")
+        lines[hits[0]] = new_line
+    else:
+        lines.insert(0, new_line)
+        first_table += 1
+
+result = "".join(lines)
+if result == original:
+    sys.exit(0)
+try:
+    import tomllib
+except ImportError:
+    tomllib = None
+if tomllib is not None and original is not None:
+    try:
+        before, after = tomllib.loads(original), tomllib.loads(result)
+    except Exception:
+        refuse("it does not parse as toml")
+    for key, value in want:
+        if value:
+            before[key] = value
+    if before != after:
+        refuse("the edit would change more than the keys cw owns")
+fd, tmp = tempfile.mkstemp(dir=os.path.dirname(path), prefix=".config.toml.")
+with os.fdopen(fd, "w") as f:
+    f.write(result)
+if original is not None:
+    shutil.copymode(path, tmp)
+os.replace(tmp, path)
+PY
+    ) && return 0
+    _CW_CODEX_REFUSED=1
+    _err "Cannot apply provider '$provider' to $CW_HARNESS_DIR/config.toml: ${why:-unknown error}."
+    _err "Set model_provider and model in that file yourself; cw left it untouched."
+    return 1
+}
+
+_codex_base() {
+    _codex_write_provider "${CW_PROVIDER:-}" "${CW_MODEL:-}" || return 1
+    HARNESS_ENV=("CODEX_HOME=$CW_HARNESS_DIR")
+    if [[ -f "$CW_HARNESS_DIR/env" ]]; then
+        local -a extra_env=()
+        mapfile -t extra_env < <(_harness_env_file "$CW_HARNESS_DIR/env")
+        [[ ${#extra_env[@]} -gt 0 ]] && HARNESS_ENV+=("${extra_env[@]}")
+    fi
+    HARNESS_ARGV=(codex)
+    local f
+    # unverified: flag ordering around the resume subcommand (before vs after)
+    for f in $CW_EXTRA_FLAGS; do HARNESS_ARGV+=("$f"); done
+    return 0
+}
+
+# unverified: interactive launch argv beyond the bare binary
+codex_launch() {
+    _codex_base || return 1
+    [[ -n "$CW_MODEL" ]] && HARNESS_ARGV+=(--model "$CW_MODEL")
+    [[ -n "$CW_PROMPT" ]] && HARNESS_ARGV+=("$CW_PROMPT")
+    _codex_snapshot
+    return 0
+}
+
+# unverified --last scope: offers the recorded id, then --last only where cw vouches for the dir
+codex_resume() {
+    local attempt="$1"
+    local -a plan=()
+    [[ -n "$CW_SESSION_REF" ]] && plan+=(id)
+    [[ -n "${CW_CONTINUE_LAST_SAFE:-}" ]] && plan+=(last)
+    local step="${plan[$((attempt - 1))]:-}"
+    [[ -n "$step" ]] || return 1
+    _codex_base || return 1
+    case "$step" in
+        id)   HARNESS_ARGV+=(resume "$CW_SESSION_REF") ;;
+        last) HARNESS_ARGV+=(resume --last) ;;
+        *)    return 1 ;;
+    esac
+    [[ -n "$CW_MODEL" ]] && HARNESS_ARGV+=(--model "$CW_MODEL")
+    [[ -n "$CW_PROMPT" ]] && HARNESS_ARGV+=("$CW_PROMPT")
+    _codex_snapshot
+    return 0
+}
+
+codex_doctor() {
+    local status detail="null"
+    if ! command -v codex >/dev/null 2>&1; then
+        status="not_installed"; detail='"codex not found on PATH"'
+    elif [[ -f "$CW_HARNESS_DIR/auth.json" || -f "$CW_HARNESS_DIR/env" ]]; then
+        status="connected"
+    else
+        status="not_logged_in"
+    fi
+    printf '{"harness":"codex","status":"%s","detail":%s}\n' "$status" "$detail"
+}
+
+codex_login() {
+    HARNESS_ENV=("CODEX_HOME=$CW_HARNESS_DIR")
+    HARNESS_ARGV=(codex login)
+    [[ -n "${CW_LOGIN_NO_BROWSER:-}" ]] && HARNESS_ARGV+=(--device-auth)
+    [[ -n "${CW_LOGIN_API_KEY_STDIN:-}" ]] && HARNESS_ARGV=(codex login --with-api-key)
+    return 0
+}

package/cw/lib/harnesses/opencode.sh

@@ -0,0 +1,120 @@
+# opencode driver
+# continue_last is not claimed: its --continue has no confirmed per-worktree scope
+opencode_supports() {
+    local cap
+    for cap in non_interactive_prompt model_flag custom_provider; do
+        [[ "$1" == "$cap" ]] && return 0
+    done
+    return 1
+}
+
+opencode_config_env() {
+    printf 'OPENCODE_DATA_DIR=%s\n' "$CW_HARNESS_DIR"
+    printf 'OPENCODE_CONFIG=%s\n' "$CW_HARNESS_DIR/opencode.json"
+}
+
+# opencode has no name cw controls; no confirmed way to read one back either
+opencode_session_ref() {
+    printf '%s' ""
+}
+
+_opencode_base() {
+    HARNESS_ENV=("OPENCODE_DATA_DIR=$CW_HARNESS_DIR"
+                 "OPENCODE_CONFIG=$CW_HARNESS_DIR/opencode.json")
+    if [[ -f "$CW_HARNESS_DIR/env" ]]; then
+        local -a extra_env=()
+        mapfile -t extra_env < <(_harness_env_file "$CW_HARNESS_DIR/env")
+        [[ ${#extra_env[@]} -gt 0 ]] && HARNESS_ENV+=("${extra_env[@]}")
+    fi
+    HARNESS_ARGV=(opencode)
+    local f
+    # unverified: flag ordering, and whether these flags exist on opencode at all
+    for f in $CW_EXTRA_FLAGS; do HARNESS_ARGV+=("$f"); done
+    return 0
+}
+
+# prints the provider/model ref opencode expects; a native provider adds no prefix
+_opencode_model_ref() {
+    local provider="${CW_PROVIDER:-native}" model="$CW_MODEL"
+    if [[ -z "$provider" || "$provider" == "native" || "$model" == "$provider/"* ]]; then
+        printf '%s' "$model"
+    else
+        printf '%s/%s' "$provider" "$model"
+    fi
+}
+
+# writes the provider and model into the account's opencode config
+_opencode_write_config() {
+    [[ -n "$CW_PROVIDER" && "$CW_PROVIDER" != "native" ]] || return 0
+    mkdir -p "$CW_HARNESS_DIR"
+    local why
+    why=$(CW_OC_FILE="$CW_HARNESS_DIR/opencode.json" CW_OC_MODEL="$(_opencode_model_ref)" \
+          python3 - <<'PY'
+import json, os, sys
+p = os.environ["CW_OC_FILE"]
+model = os.environ["CW_OC_MODEL"]
+try:
+    with open(p) as f:
+        cfg = json.load(f)
+except FileNotFoundError:
+    cfg = {}
+except Exception:
+    print("it is not plain json cw can edit", end="")
+    sys.exit(3)
+if not isinstance(cfg, dict):
+    print("it is not a json object", end="")
+    sys.exit(3)
+if not model or cfg.get("model") == model:
+    sys.exit(0)
+cfg["model"] = model
+with open(p, "w") as f:
+    json.dump(cfg, f, indent=2)
+PY
+    ) && return 0
+    _err "Cannot apply model '$(_opencode_model_ref)' to $CW_HARNESS_DIR/opencode.json: ${why:-unknown error}."
+    _err "Set \"model\" in that file yourself; cw left it untouched."
+    return 1
+}
+
+# unverified: --model flag ordering, whether the prompt can be passed on argv for a bare launch
+opencode_launch() {
+    _opencode_write_config || return 1
+    _opencode_base
+    if [[ -n "$CW_PROMPT" ]]; then
+        HARNESS_ARGV=(opencode run "$CW_PROMPT")
+        [[ -n "$CW_MODEL" ]] && HARNESS_ARGV+=(--model "$(_opencode_model_ref)")
+    elif [[ -n "$CW_MODEL" ]]; then
+        HARNESS_ARGV+=(--model "$(_opencode_model_ref)")
+    fi
+    return 0
+}
+
+# only a recorded id is attributable; --continue has no confirmed worktree scope, so it is unused
+opencode_resume() {
+    local attempt="$1"
+    [[ "$attempt" == "1" && -n "$CW_SESSION_REF" ]] || return 1
+    _opencode_write_config || return 1
+    _opencode_base
+    HARNESS_ARGV=(opencode run "$CW_PROMPT" --session "$CW_SESSION_REF")
+    [[ -n "$CW_MODEL" ]] && HARNESS_ARGV+=(--model "$(_opencode_model_ref)")
+    return 0
+}
+
+opencode_doctor() {
+    local status detail="null"
+    if ! command -v opencode >/dev/null 2>&1; then
+        status="not_installed"; detail='"opencode not found on PATH"'
+    elif [[ -f "$CW_HARNESS_DIR/auth.json" || -f "$CW_HARNESS_DIR/env" ]]; then
+        status="connected"
+    else
+        status="not_logged_in"
+    fi
+    printf '{"harness":"opencode","status":"%s","detail":%s}\n' "$status" "$detail"
+}
+
+# unverified: no confirmed --no-browser/device-code flag or api-key import path for opencode
+opencode_login() {
+    HARNESS_ENV=("OPENCODE_DATA_DIR=$CW_HARNESS_DIR")
+    HARNESS_ARGV=(opencode auth login)
+    return 0
+}

package/cw/lib/harnesses/pi.sh

@@ -0,0 +1,66 @@
+# pi coding agent driver
+# unverified: entire capability set below is inferred from docs, no binary to check against
+# no custom_provider: this driver does not apply CW_PROVIDER yet
+pi_supports() {
+    local cap
+    for cap in model_flag instructions_file; do
+        [[ "$1" == "$cap" ]] && return 0
+    done
+    return 1
+}
+
+pi_config_env() {
+    printf 'PI_CODING_AGENT_DIR=%s\n' "$CW_HARNESS_DIR"
+}
+
+# pi has no name cw controls; no confirmed way to read one back either
+pi_session_ref() {
+    printf '%s' ""
+}
+
+_pi_base() {
+    HARNESS_ENV=("PI_CODING_AGENT_DIR=$CW_HARNESS_DIR")
+    if [[ -f "$CW_HARNESS_DIR/env" ]]; then
+        local -a extra_env=()
+        mapfile -t extra_env < <(_harness_env_file "$CW_HARNESS_DIR/env")
+        [[ ${#extra_env[@]} -gt 0 ]] && HARNESS_ENV+=("${extra_env[@]}")
+    fi
+    HARNESS_ARGV=(pi)
+    local f
+    # unverified: flag ordering and whether these flags exist on pi at all
+    for f in $CW_EXTRA_FLAGS; do HARNESS_ARGV+=("$f"); done
+    return 0
+}
+
+# unverified: --model flag, and whether a prompt can be passed on argv at all
+pi_launch() {
+    _pi_base
+    [[ -n "$CW_MODEL" ]] && HARNESS_ARGV+=(--model "$CW_MODEL")
+    [[ -n "$CW_PROMPT" ]] && HARNESS_ARGV+=("$CW_PROMPT")
+    return 0
+}
+
+# unverified resume mechanism, so no attempt is offered and cw starts fresh from the notes
+pi_resume() {
+    return 1
+}
+
+pi_doctor() {
+    local status detail="null"
+    if ! command -v pi >/dev/null 2>&1; then
+        status="not_installed"; detail='"pi not found on PATH"'
+    elif [[ -f "$CW_HARNESS_DIR/auth.json" || -f "$CW_HARNESS_DIR/env" ]]; then
+        status="connected"
+    else
+        status="not_logged_in"
+    fi
+    printf '{"harness":"pi","status":"%s","detail":%s}\n' "$status" "$detail"
+}
+
+# unverified: login is documented as an in-session /login command, not a subcommand or flag
+# cw can only drop the user into a bare interactive session to run it themselves
+pi_login() {
+    HARNESS_ENV=("PI_CODING_AGENT_DIR=$CW_HARNESS_DIR")
+    HARNESS_ARGV=(pi)
+    return 0
+}

package/cw/lib/iterm2.sh

@@ -0,0 +1,140 @@
+#!/usr/bin/env bash
+# ============================================================================
+# CW iTerm2 Helpers — AppleScript + escape sequences
+# ============================================================================
+
+# ── Color presets per mode ─────────────────────────────────────────────────
+
+_mode_color() {
+    case "$1" in
+        code)     echo "50 120 220"  ;;
+        review)   echo "180 80 200"  ;;
+        research) echo "40 180 160"  ;;
+        docs)     echo "220 160 40"  ;;
+        planning) echo "60 180 75"   ;;
+        comms)    echo "200 60 80"   ;;
+        full)     echo "100 100 100" ;;
+        shell)    echo "80 80 80"    ;;
+        git)      echo "230 120 50"  ;;
+        feature)  echo "50 150 250"  ;;
+        bug)      echo "230 60 60"   ;;
+        *)        echo "100 100 100" ;;
+    esac
+}
+
+# ── Core AppleScript functions ─────────────────────────────────────────────
+
+# Create a new iTerm2 window, cd to dir
+_iterm_new_window() {
+    local dir="$1"
+    osascript <<EOF
+tell application "iTerm2"
+    set newWindow to (create window with default profile)
+    tell current session of current tab of newWindow
+        write text "cd ${dir}"
+    end tell
+end tell
+EOF
+}
+
+# Create a new tab in current window, cd to dir
+_iterm_new_tab() {
+    local dir="$1"
+    osascript <<EOF
+tell application "iTerm2"
+    tell current window
+        set newTab to (create tab with default profile)
+        tell current session of newTab
+            write text "cd ${dir}"
+        end tell
+    end tell
+end tell
+EOF
+}
+
+# Send a command to current session
+_iterm_send() {
+    local cmd="$1"
+    osascript <<EOF
+tell application "iTerm2"
+    tell current session of current tab of current window
+        write text "${cmd}"
+    end tell
+end tell
+EOF
+}
+
+# Select tab by index (1-based)
+_iterm_select_tab() {
+    local idx="$1"
+    osascript <<EOF
+tell application "iTerm2"
+    tell current window
+        select tab ${idx}
+    end tell
+end tell
+EOF
+}
+
+# Focus iTerm2
+_iterm_focus() {
+    osascript -e 'tell application "iTerm2" to activate'
+}
+
+# ── Tab coloring via escape sequences ──────────────────────────────────────
+
+# Set tab color on current session (must be called AFTER the tab exists)
+_iterm_set_tab_color() {
+    local r="$1" g="$2" b="$3"
+    _iterm_send "printf '\\\\033]6;1;bg;red;brightness;${r}\\\\a\\\\033]6;1;bg;green;brightness;${g}\\\\a\\\\033]6;1;bg;blue;brightness;${b}\\\\a'"
+}
+
+# Set badge on current session
+_iterm_set_badge() {
+    local text="$1"
+    local b64
+    b64=$(printf '%s' "$text" | base64)
+    _iterm_send "printf '\\\\033]1337;SetBadgeFormat=${b64}\\\\a'"
+}
+
+# Set tab title via escape sequence
+_iterm_set_title() {
+    local title="$1"
+    _iterm_send "printf '\\\\033]0;${title}\\\\007'"
+}
+
+# ── Compound: configured window and tabs ──────────────────────────────────
+
+# Create a fully configured window: dir, command, badge, mode
+_iterm_configured_window() {
+    local title="$1" dir="$2" cmd="$3" badge="$4" mode="$5"
+    local r g b
+    read -r r g b <<< "$(_mode_color "$mode")"
+
+    _iterm_new_window "$dir"
+    sleep 0.4
+
+    _iterm_set_title "$title"
+    _iterm_set_tab_color "$r" "$g" "$b"
+    [[ -n "$badge" ]] && _iterm_set_badge "$badge"
+
+    sleep 0.2
+    [[ -n "$cmd" ]] && _iterm_send "$cmd"
+}
+
+# Create a fully configured tab: dir, command, badge, mode
+_iterm_configured_tab() {
+    local title="$1" dir="$2" cmd="$3" badge="$4" mode="$5"
+    local r g b
+    read -r r g b <<< "$(_mode_color "$mode")"
+
+    _iterm_new_tab "$dir"
+    sleep 0.4
+
+    _iterm_set_title "$title"
+    _iterm_set_tab_color "$r" "$g" "$b"
+    [[ -n "$badge" ]] && _iterm_set_badge "$badge"
+
+    sleep 0.2
+    [[ -n "$cmd" ]] && _iterm_send "$cmd"
+}

package/cw/templates/CLAUDE.template.md

@@ -0,0 +1,48 @@
+# [Project Name]
+
+## What is this
+<!-- One line: what this project does -->
+
+## Stack
+<!-- Tech stack as table or short list -->
+
+## Structure
+```
+src/
+├── ...
+```
+
+## Development
+```bash
+# Setup
+# Dev
+# Test
+# Build
+# Deploy
+```
+
+## Conventions
+- Conventional commits: `feat:`, `fix:`, `chore:`
+- Tests required for all new features
+- No direct pushes to main
+- Comments & notes: single line only, no docstring-style or multi-line blocks — in code and in TASK_NOTES.md alike; never reference task IDs, branch names, or GitHub/Linear issue numbers
+<!-- Add project-specific conventions -->
+
+## Working with me (Claude)
+- If you don't know something about the project, ask. Don't make it up.
+- Before major changes, explain your plan first.
+- Run tests after every change.
+- If you see a TASK_NOTES.md or REVIEW_NOTES.md in the working directory, read it first — it has context from previous sessions. The actual file lives in `~/.cw/sessions/` and is symlinked here.
+- Never touch `.env`, credentials, or secrets. Only reference them.
+
+## Do NOT
+- Do not change infrastructure config without confirmation
+- Do not modify existing migrations
+- Do not delete tests
+<!-- Add project-specific restrictions -->
+
+## Integrations
+<!-- MCPs, APIs, external services -->
+
+## Additional context
+<!-- Links to docs, ADRs, important decisions -->