shipwright-cli 2.0.0 → 2.1.0

package/scripts/sw-loop.sh

@@ -57,7 +57,13 @@ MAX_ITERATIONS_EXPLICIT=false
 MAX_RESTARTS=0
 SESSION_RESTART=false
 RESTART_COUNT=0
-VERSION="2.0.0"
+REPO_OVERRIDE=""
+VERSION="2.1.0"
+
+# ─── Token Tracking ─────────────────────────────────────────────────────────
+LOOP_INPUT_TOKENS=0
+LOOP_OUTPUT_TOKENS=0
+LOOP_COST_MILLICENTS=0
 
 # ─── Flexible Iteration Defaults ────────────────────────────────────────────
 AUTO_EXTEND=true          # Auto-extend iterations when work is incomplete
@@ -86,6 +92,8 @@ show_help() {
     echo -e "  ${CYAN}shipwright loop${RESET} \"<goal>\" [options]"
     echo ""
     echo -e "${BOLD}OPTIONS${RESET}"
+    echo -e "  ${CYAN}--repo <path>${RESET}             Change to directory before running (must be a git repo)"
+    echo -e "  ${CYAN}--local${RESET}                   Disable GitHub operations (local-only mode)"
     echo -e "  ${CYAN}--max-iterations${RESET} N       Max loop iterations (default: 20)"
     echo -e "  ${CYAN}--test-cmd${RESET} \"cmd\"         Test command to run between iterations"
     echo -e "  ${CYAN}--fast-test-cmd${RESET} \"cmd\"      Fast/subset test command (alternates with full)"
@@ -135,6 +143,16 @@ show_help() {
 
 while [[ $# -gt 0 ]]; do
     case "$1" in
+        --repo)
+            REPO_OVERRIDE="${2:-}"
+            [[ -z "$REPO_OVERRIDE" ]] && { error "Missing value for --repo"; exit 1; }
+            shift 2
+            ;;
+        --repo=*) REPO_OVERRIDE="${1#--repo=}"; shift ;;
+        --local)
+            # Skip GitHub operations in loop
+            export NO_GITHUB=true
+            shift ;;
         --max-iterations)
             MAX_ITERATIONS="${2:-}"
             MAX_ITERATIONS_EXPLICIT=true
@@ -244,16 +262,28 @@ if [[ "$AGENTS" -gt 1 ]]; then
     USE_WORKTREE=true
 fi
 
+# Recruit-powered auto-role assignment when multi-agent but no roles specified
+if [[ "$AGENTS" -gt 1 ]] && [[ -z "$AGENT_ROLES" ]] && [[ -x "${SCRIPT_DIR:-}/sw-recruit.sh" ]]; then
+    _recruit_goal="${GOAL:-}"
+    if [[ -n "$_recruit_goal" ]]; then
+        _recruit_team=$(bash "$SCRIPT_DIR/sw-recruit.sh" team --json "$_recruit_goal" 2>/dev/null) || true
+        if [[ -n "$_recruit_team" ]]; then
+            _recruit_roles=$(echo "$_recruit_team" | jq -r '.team | join(",")' 2>/dev/null) || true
+            if [[ -n "$_recruit_roles" && "$_recruit_roles" != "null" ]]; then
+                AGENT_ROLES="$_recruit_roles"
+                info "Recruit assigned roles: ${AGENT_ROLES}"
+            fi
+        fi
+    fi
+fi
+
 # Warn if --roles without --agents
 if [[ -n "$AGENT_ROLES" ]] && [[ "$AGENTS" -le 1 ]]; then
     warn "--roles requires --agents > 1 (roles are ignored in single-agent mode)"
 fi
 
-# Warn if --max-restarts with --agents > 1 (not yet supported)
-if [[ "${MAX_RESTARTS:-0}" -gt 0 ]] && [[ "$AGENTS" -gt 1 ]]; then
-    warn "--max-restarts is ignored in multi-agent mode (restart support is single-agent only)"
-    MAX_RESTARTS=0
-fi
+# max-restarts is supported in both single-agent and multi-agent mode
+# In multi-agent mode, restarts apply per-agent (agent can be respawned up to MAX_RESTARTS)
 
 # Validate numeric flags
 if ! [[ "$FAST_TEST_INTERVAL" =~ ^[1-9][0-9]*$ ]]; then
@@ -275,6 +305,23 @@ if ! $RESUME && [[ -z "$GOAL" ]]; then
     exit 1
 fi
 
+# Handle --repo flag: change to directory before running
+if [[ -n "$REPO_OVERRIDE" ]]; then
+    if [[ ! -d "$REPO_OVERRIDE" ]]; then
+        error "Directory does not exist: $REPO_OVERRIDE"
+        exit 1
+    fi
+    if ! cd "$REPO_OVERRIDE" 2>/dev/null; then
+        error "Cannot cd to: $REPO_OVERRIDE"
+        exit 1
+    fi
+    if ! git rev-parse --show-toplevel >/dev/null 2>&1; then
+        error "Not a git repository: $REPO_OVERRIDE"
+        exit 1
+    fi
+    info "Using repository: $(pwd)"
+fi
+
 if ! command -v claude &>/dev/null; then
     error "Claude Code CLI not found. Install it first:"
     echo -e "  ${DIM}npm install -g @anthropic-ai/claude-code${RESET}"
@@ -373,6 +420,110 @@ select_audit_model() {
     echo "$default_model"
 }
 
+# ─── Token Accumulation ─────────────────────────────────────────────────────
+# Parse token counts from Claude CLI JSON output and accumulate running totals.
+# With --output-format json, the output is a JSON array containing a "result"
+# object with usage.input_tokens, usage.output_tokens, and total_cost_usd.
+accumulate_loop_tokens() {
+    local log_file="$1"
+    [[ ! -f "$log_file" ]] && return 0
+
+    # If jq is available and the file looks like JSON, parse structured output
+    if command -v jq &>/dev/null && head -c1 "$log_file" 2>/dev/null | grep -q '\['; then
+        local input_tok output_tok cache_read cache_create cost_usd
+        # The result object is the last element in the JSON array
+        input_tok=$(jq -r '.[-1].usage.input_tokens // 0' "$log_file" 2>/dev/null || echo "0")
+        output_tok=$(jq -r '.[-1].usage.output_tokens // 0' "$log_file" 2>/dev/null || echo "0")
+        cache_read=$(jq -r '.[-1].usage.cache_read_input_tokens // 0' "$log_file" 2>/dev/null || echo "0")
+        cache_create=$(jq -r '.[-1].usage.cache_creation_input_tokens // 0' "$log_file" 2>/dev/null || echo "0")
+        cost_usd=$(jq -r '.[-1].total_cost_usd // 0' "$log_file" 2>/dev/null || echo "0")
+
+        LOOP_INPUT_TOKENS=$(( LOOP_INPUT_TOKENS + ${input_tok:-0} + ${cache_read:-0} + ${cache_create:-0} ))
+        LOOP_OUTPUT_TOKENS=$(( LOOP_OUTPUT_TOKENS + ${output_tok:-0} ))
+        # Accumulate cost in millicents for integer arithmetic
+        if [[ -n "$cost_usd" && "$cost_usd" != "0" && "$cost_usd" != "null" ]]; then
+            local cost_millicents
+            cost_millicents=$(echo "$cost_usd" | awk '{printf "%.0f", $1 * 100000}' 2>/dev/null || echo "0")
+            LOOP_COST_MILLICENTS=$(( ${LOOP_COST_MILLICENTS:-0} + ${cost_millicents:-0} ))
+        fi
+    else
+        # Fallback: regex-based parsing for non-JSON output
+        local input_tok output_tok
+        input_tok=$(grep -oE 'input[_ ]tokens?[: ]+[0-9,]+' "$log_file" 2>/dev/null | tail -1 | grep -oE '[0-9,]+' | tr -d ',' || echo "0")
+        output_tok=$(grep -oE 'output[_ ]tokens?[: ]+[0-9,]+' "$log_file" 2>/dev/null | tail -1 | grep -oE '[0-9,]+' | tr -d ',' || echo "0")
+
+        LOOP_INPUT_TOKENS=$(( LOOP_INPUT_TOKENS + ${input_tok:-0} ))
+        LOOP_OUTPUT_TOKENS=$(( LOOP_OUTPUT_TOKENS + ${output_tok:-0} ))
+    fi
+}
+
+# ─── JSON→Text Extraction ──────────────────────────────────────────────────
+# Extract plain text from Claude's --output-format json response.
+# Handles: valid JSON arrays, malformed JSON, non-JSON output, empty output.
+_extract_text_from_json() {
+    local json_file="$1" log_file="$2" err_file="${3:-}"
+
+    # Case 1: File doesn't exist or is empty
+    if [[ ! -s "$json_file" ]]; then
+        # Check stderr for error messages
+        if [[ -s "$err_file" ]]; then
+            cp "$err_file" "$log_file"
+        else
+            echo "(no output)" > "$log_file"
+        fi
+        return 0
+    fi
+
+    local first_char
+    first_char=$(head -c1 "$json_file" 2>/dev/null || true)
+
+    # Case 2: Valid JSON array — extract .result from last element
+    if [[ "$first_char" == "[" ]] && command -v jq &>/dev/null; then
+        local extracted
+        extracted=$(jq -r '.[-1].result // empty' "$json_file" 2>/dev/null) || true
+        if [[ -n "$extracted" ]]; then
+            echo "$extracted" > "$log_file"
+            return 0
+        fi
+        # jq succeeded but result was null/empty — try .content or raw text
+        extracted=$(jq -r '.[].content // empty' "$json_file" 2>/dev/null | head -500) || true
+        if [[ -n "$extracted" ]]; then
+            echo "$extracted" > "$log_file"
+            return 0
+        fi
+        # JSON parsed but no text found — write placeholder
+        warn "JSON output has no .result field — check $json_file"
+        echo "(no text result in JSON output)" > "$log_file"
+        return 0
+    fi
+
+    # Case 3: Looks like JSON but no jq — can't parse, use raw
+    if [[ "$first_char" == "[" || "$first_char" == "{" ]]; then
+        warn "JSON output but jq not available — using raw output"
+        cp "$json_file" "$log_file"
+        return 0
+    fi
+
+    # Case 4: Not JSON at all (plain text, error message, etc.) — use as-is
+    cp "$json_file" "$log_file"
+    return 0
+}
+
+# Write accumulated token totals to a JSON file for the pipeline to read.
+write_loop_tokens() {
+    local token_file="$LOG_DIR/loop-tokens.json"
+    local cost_usd="0"
+    if [[ "${LOOP_COST_MILLICENTS:-0}" -gt 0 ]]; then
+        cost_usd=$(awk "BEGIN {printf \"%.6f\", ${LOOP_COST_MILLICENTS} / 100000}" 2>/dev/null || echo "0")
+    fi
+    local tmp_file
+    tmp_file=$(mktemp "${token_file}.XXXXXX" 2>/dev/null || mktemp)
+    cat > "$tmp_file" <<TOKJSON
+{"input_tokens":${LOOP_INPUT_TOKENS},"output_tokens":${LOOP_OUTPUT_TOKENS},"cost_usd":${cost_usd},"iterations":${ITERATION:-0}}
+TOKJSON
+    mv "$tmp_file" "$token_file"
+}
+
 # ─── Adaptive Iteration Budget ──────────────────────────────────────────────
 # Reads tuning config for smarter iteration/circuit-breaker thresholds.
 apply_adaptive_budget() {
@@ -1493,15 +1644,27 @@ compose_worker_prompt() {
 
         if [[ -n "$role" ]]; then
             local role_desc=""
-            case "$role" in
-                builder)   role_desc="Focus on implementation — writing code, fixing bugs, building features. You are the primary builder." ;;
-                reviewer)  role_desc="Focus on code review — look for bugs, security issues, edge cases in recent commits. Make fixes via commits." ;;
-                tester)    role_desc="Focus on test coverage — write new tests, fix failing tests, improve assertions and edge case coverage." ;;
-                optimizer) role_desc="Focus on performance — profile hot paths, reduce complexity, optimize algorithms and data structures." ;;
-                docs)      role_desc="Focus on documentation — update README, add docstrings, write usage guides for new features." ;;
-                security)  role_desc="Focus on security — audit for vulnerabilities, fix injection risks, validate inputs, check auth boundaries." ;;
-                *)         role_desc="Focus on: ${role}. Apply your expertise in this area to advance the goal." ;;
-            esac
+            # Try to pull description from recruit's roles DB first
+            local recruit_roles_db="${HOME}/.shipwright/recruitment/roles.json"
+            if [[ -f "$recruit_roles_db" ]] && command -v jq &>/dev/null; then
+                local recruit_desc
+                recruit_desc=$(jq -r --arg r "$role" '.[$r].description // ""' "$recruit_roles_db" 2>/dev/null) || true
+                if [[ -n "$recruit_desc" && "$recruit_desc" != "null" ]]; then
+                    role_desc="$recruit_desc"
+                fi
+            fi
+            # Fallback to hardcoded descriptions
+            if [[ -z "$role_desc" ]]; then
+                case "$role" in
+                    builder)   role_desc="Focus on implementation — writing code, fixing bugs, building features. You are the primary builder." ;;
+                    reviewer)  role_desc="Focus on code review — look for bugs, security issues, edge cases in recent commits. Make fixes via commits." ;;
+                    tester)    role_desc="Focus on test coverage — write new tests, fix failing tests, improve assertions and edge case coverage." ;;
+                    optimizer) role_desc="Focus on performance — profile hot paths, reduce complexity, optimize algorithms and data structures." ;;
+                    docs)      role_desc="Focus on documentation — update README, add docstrings, write usage guides for new features." ;;
+                    security)  role_desc="Focus on security — audit for vulnerabilities, fix injection risks, validate inputs, check auth boundaries." ;;
+                    *)         role_desc="Focus on: ${role}. Apply your expertise in this area to advance the goal." ;;
+                esac
+            fi
             role_section="## Your Role: ${role}
 ${role_desc}
 Prioritize work in your area of expertise. Coordinate with other agents via git log."
@@ -1525,6 +1688,7 @@ PROMPT
 build_claude_flags() {
     local flags=()
     flags+=("--model" "$MODEL")
+    flags+=("--output-format" "json")
 
     if $SKIP_PERMISSIONS; then
         flags+=("--dangerously-skip-permissions")
@@ -1539,6 +1703,7 @@ build_claude_flags() {
 
 run_claude_iteration() {
     local log_file="$LOG_DIR/iteration-${ITERATION}.log"
+    local json_file="$LOG_DIR/iteration-${ITERATION}.json"
     local prompt
     prompt="$(compose_prompt)"
 
@@ -1551,12 +1716,14 @@ run_claude_iteration() {
     echo -e "\n${CYAN}${BOLD}▸${RESET} ${BOLD}Iteration ${ITERATION}/${MAX_ITERATIONS}${RESET} — Starting..."
 
     # Run Claude headless (with timeout + PID capture for signal handling)
+    # Output goes to .json first, then we extract text into .log for compat
     local exit_code=0
     # shellcheck disable=SC2086
+    local err_file="${json_file%.json}.stderr"
     if [[ -n "$TIMEOUT_CMD" ]]; then
-        $TIMEOUT_CMD "$CLAUDE_TIMEOUT" claude -p "$prompt" $flags > "$log_file" 2>&1 &
+        $TIMEOUT_CMD "$CLAUDE_TIMEOUT" claude -p "$prompt" $flags > "$json_file" 2>"$err_file" &
     else
-        claude -p "$prompt" $flags > "$log_file" 2>&1 &
+        claude -p "$prompt" $flags > "$json_file" 2>"$err_file" &
     fi
     CHILD_PID=$!
     wait "$CHILD_PID" 2>/dev/null || exit_code=$?
@@ -1565,12 +1732,19 @@ run_claude_iteration() {
         warn "Claude CLI timed out after ${CLAUDE_TIMEOUT}s"
     fi
 
+    # Extract text result from JSON into .log for backwards compatibility
+    # With --output-format json, stdout is a JSON array; .[-1].result has the text
+    _extract_text_from_json "$json_file" "$log_file" "$err_file"
+
     local iter_end
     iter_end="$(now_epoch)"
     local iter_duration=$(( iter_end - iter_start ))
 
     echo -e "  ${GREEN}✓${RESET} Claude session completed ($(format_duration "$iter_duration"), exit $exit_code)"
 
+    # Accumulate token usage from this iteration's JSON output
+    accumulate_loop_tokens "$json_file"
+
     # Show verbose output if requested
     if $VERBOSE; then
         echo -e "  ${DIM}─── Claude Output ───${RESET}"
@@ -1666,10 +1840,16 @@ show_summary() {
     echo -e "  ${BOLD}Duration:${RESET}    $(format_duration "$duration")"
     echo -e "  ${BOLD}Commits:${RESET}     $TOTAL_COMMITS"
     echo -e "  ${BOLD}Tests:${RESET}       $test_display"
+    if [[ "$LOOP_INPUT_TOKENS" -gt 0 || "$LOOP_OUTPUT_TOKENS" -gt 0 ]]; then
+        echo -e "  ${BOLD}Tokens:${RESET}      in=${LOOP_INPUT_TOKENS} out=${LOOP_OUTPUT_TOKENS}"
+    fi
     echo ""
     echo -e "  ${DIM}State: $STATE_FILE${RESET}"
     echo -e "  ${DIM}Logs:  $LOG_DIR/${RESET}"
     echo ""
+
+    # Write token totals for pipeline cost tracking
+    write_loop_tokens
 }
 
 # ─── Signal Handling ──────────────────────────────────────────────────────────
@@ -1832,10 +2012,15 @@ Focus on areas they haven't touched yet.
 PROMPT
 )"
 
-    # Run Claude
+    # Run Claude (output is JSON due to --output-format json in CLAUDE_FLAGS)
+    local JSON_FILE="$LOG_DIR/agent-${AGENT_NUM}-iter-${ITERATION}.json"
+    local ERR_FILE="$LOG_DIR/agent-${AGENT_NUM}-iter-${ITERATION}.stderr"
     LOG_FILE="$LOG_DIR/agent-${AGENT_NUM}-iter-${ITERATION}.log"
     # shellcheck disable=SC2086
-    claude -p "$PROMPT" $CLAUDE_FLAGS > "$LOG_FILE" 2>&1 || true
+    claude -p "$PROMPT" $CLAUDE_FLAGS > "$JSON_FILE" 2>"$ERR_FILE" || true
+
+    # Extract text result from JSON into .log for backwards compat
+    _extract_text_from_json "$JSON_FILE" "$LOG_FILE" "$ERR_FILE"
 
     echo -e "  ${GREEN}✓${RESET} Claude session completed"
 

package/scripts/sw-memory.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.0.0"
+VERSION="2.1.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -1077,6 +1077,20 @@ memory_get_dora_baseline() {
     echo "$metrics"
 }
 
+# memory_get_baseline <metric_name>
+# Output baseline value for a metric (bundle_size_kb, test_duration_s, coverage_pct, etc.).
+# Used by pipeline for regression checks. Outputs nothing if not set.
+memory_get_baseline() {
+    local metric_name="${1:-}"
+    [[ -z "$metric_name" ]] && return 1
+    ensure_memory_dir
+    local mem_dir
+    mem_dir="$(repo_memory_dir)"
+    local metrics_file="$mem_dir/metrics.json"
+    [[ ! -f "$metrics_file" ]] && return 0
+    jq -r --arg m "$metric_name" '.baselines[$m] // empty' "$metrics_file" 2>/dev/null || true
+}
+
 # memory_update_metrics <metric_name> <value>
 # Track performance baselines and flag regressions.
 memory_update_metrics() {
@@ -1602,6 +1616,9 @@ case "$SUBCOMMAND" in
     pattern)
         memory_capture_pattern "$@"
         ;;
+    get)
+        memory_get_baseline "$@"
+        ;;
     metric)
         memory_update_metrics "$@"
         ;;

package/scripts/sw-mission-control.sh

@@ -7,7 +7,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.0.0"
+VERSION="2.1.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 

package/scripts/sw-model-router.sh

@@ -7,7 +7,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.0.0"
+VERSION="2.1.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 

package/scripts/sw-otel.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.0.0"
+VERSION="2.1.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 

package/scripts/sw-oversight.sh

@@ -7,7 +7,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.0.0"
+VERSION="2.1.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -331,6 +331,80 @@ _update_verdict() {
     fi
 }
 
+# ─── Pipeline gate: submit review, record vote(s), output verdict ───────────
+# Usage: oversight gate --diff <file> [--description <text>] [--reject-if <reason>]
+# Outputs: approved | rejected | deadlock | pending (for pipeline to block on non-approved)
+cmd_gate() {
+    local diff_file=""
+    local description=""
+    local reject_if=""
+
+    while [[ $# -gt 0 ]]; do
+        case "$1" in
+            --diff)         diff_file="$2"; shift 2 ;;
+            --description)  description="$2"; shift 2 ;;
+            --reject-if)    reject_if="$2"; shift 2 ;;
+            -h|--help)
+                echo "Usage: oversight gate --diff <file> [--description <text>] [--reject-if <reason>]"
+                echo "Outputs verdict: approved | rejected | deadlock | pending"
+                exit 0
+                ;;
+            *)  error "Unknown option: $1"; exit 1 ;;
+        esac
+    done
+
+    if [[ -z "$diff_file" || ! -f "$diff_file" ]]; then
+        error "Provide --diff <file> (must exist)"
+        exit 1
+    fi
+
+    _init_board_config
+    _init_members
+
+    local review_id
+    review_id=$(date +%s)_$(head -c8 /dev/urandom 2>/dev/null | od -A n -t x1 | tr -d ' ' || echo "$$")
+    local review_file="${OVERSIGHT_ROOT}/${review_id}.json"
+
+    # Build review record safely via jq (no JSON injection from description/diff_file)
+    jq -n \
+        --arg id "$review_id" \
+        --arg submitted "$(now_iso)" \
+        --arg diff "$diff_file" \
+        --arg desc "$description" \
+        '{id: $id, submitted_at: $submitted, pr_number: null, commit: null, diff_file: $diff, description: $desc, votes: {}, verdict: null, confidence_score: 0.0, appeals: []}' \
+        > "$review_file"
+
+    # Single pipeline voter: reject if --reject-if given, else approve
+    local decision="approve"
+    local reasoning="Pipeline review passed"
+    if [[ -n "$reject_if" ]]; then
+        decision="reject"
+        reasoning="$reject_if"
+    fi
+
+    local tmp_file="${review_file}.tmp"
+    jq --arg reviewer "pipeline" \
+       --arg decision "$decision" \
+       --arg reasoning "${reasoning//\"/\\\"}" \
+       --arg confidence "0.9" \
+       '.votes[$reviewer] = {
+           "decision": $decision,
+           "reasoning": $reasoning,
+           "confidence": ($confidence | tonumber),
+           "voted_at": "'$(now_iso)'"
+       }' "$review_file" > "$tmp_file"
+    mv "$tmp_file" "$review_file"
+
+    _update_verdict "$review_id"
+
+    local verdict
+    verdict=$(jq -r '.verdict // "pending"' "$review_file")
+    echo "$verdict"
+    if [[ "$verdict" == "rejected" || "$verdict" == "deadlock" ]]; then
+        exit 1
+    fi
+}
+
 # ─── Verdict Display ──────────────────────────────────────────────────────
 
 cmd_verdict() {
@@ -667,6 +741,7 @@ main() {
     case "$cmd" in
         review)   cmd_review "$@" ;;
         vote)     cmd_vote "$@" ;;
+        gate)     cmd_gate "$@" ;;
         verdict)  cmd_verdict "$@" ;;
         history)  cmd_history "$@" ;;
         members)  cmd_members "$@" ;;

package/scripts/sw-pipeline-composer.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.0.0"
+VERSION="2.1.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 

package/scripts/sw-pipeline-vitals.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.0.0"
+VERSION="2.1.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"