shipwright-cli 2.1.2 → 2.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shipwright-cli",
-  "version": "2.1.2",
+  "version": "2.2.1",
   "description": "Orchestrate autonomous Claude Code agent teams in tmux",
   "bin": {
     "shipwright": "./scripts/sw",
@@ -8,6 +8,7 @@
     "cct": "./scripts/sw"
   },
   "files": [
+    "config/",
     "scripts/",
     "!scripts/*-test.sh",
     "!scripts/build-release.sh",
@@ -29,7 +30,7 @@
   ],
   "scripts": {
     "postinstall": "node scripts/postinstall.mjs",
-    "test": "bash scripts/sw-activity-test.sh && bash scripts/sw-adaptive-test.sh && bash scripts/sw-adversarial-test.sh && bash scripts/sw-architecture-enforcer-test.sh && bash scripts/sw-auth-test.sh && bash scripts/sw-autonomous-test.sh && bash scripts/sw-changelog-test.sh && bash scripts/sw-checkpoint-test.sh && bash scripts/sw-ci-test.sh && bash scripts/sw-cleanup-test.sh && bash scripts/sw-code-review-test.sh && bash scripts/sw-connect-test.sh && bash scripts/sw-context-test.sh && bash scripts/sw-cost-test.sh && bash scripts/sw-daemon-test.sh && bash scripts/sw-dashboard-test.sh && bash scripts/sw-db-test.sh && bash scripts/sw-decompose-test.sh && bash scripts/sw-deps-test.sh && bash scripts/sw-developer-simulation-test.sh && bash scripts/sw-discovery-test.sh && bash scripts/sw-docs-agent-test.sh && bash scripts/sw-docs-test.sh && bash scripts/sw-doctor-test.sh && bash scripts/sw-dora-test.sh && bash scripts/sw-durable-test.sh && bash scripts/sw-e2e-orchestrator-test.sh && bash scripts/sw-eventbus-test.sh && bash scripts/sw-feedback-test.sh && bash scripts/sw-fix-test.sh && bash scripts/sw-fleet-discover-test.sh && bash scripts/sw-fleet-test.sh && bash scripts/sw-fleet-viz-test.sh && bash scripts/sw-frontier-test.sh && bash scripts/sw-github-app-test.sh && bash scripts/sw-github-checks-test.sh && bash scripts/sw-github-deploy-test.sh && bash scripts/sw-github-graphql-test.sh && bash scripts/sw-guild-test.sh && bash scripts/sw-heartbeat-test.sh && bash scripts/sw-hygiene-test.sh && bash scripts/sw-incident-test.sh && bash scripts/sw-init-test.sh && bash scripts/sw-instrument-test.sh && bash scripts/sw-intelligence-test.sh && bash scripts/sw-jira-test.sh && bash scripts/sw-launchd-test.sh && bash scripts/sw-linear-test.sh && bash scripts/sw-logs-test.sh && bash scripts/sw-loop-test.sh && bash scripts/sw-memory-test.sh && bash scripts/sw-mission-control-test.sh && bash scripts/sw-model-router-test.sh && bash scripts/sw-otel-test.sh && bash scripts/sw-oversight-test.sh && bash scripts/sw-patrol-meta-test.sh && bash scripts/sw-pipeline-composer-test.sh && bash scripts/sw-pipeline-test.sh && bash scripts/sw-pipeline-vitals-test.sh && bash scripts/sw-pm-test.sh && bash scripts/sw-pr-lifecycle-test.sh && bash scripts/sw-predictive-test.sh && bash scripts/sw-prep-test.sh && bash scripts/sw-ps-test.sh && bash scripts/sw-public-dashboard-test.sh && bash scripts/sw-quality-test.sh && bash scripts/sw-reaper-test.sh && bash scripts/sw-recruit-test.sh && bash scripts/sw-regression-test.sh && bash scripts/sw-release-manager-test.sh && bash scripts/sw-release-test.sh && bash scripts/sw-remote-test.sh && bash scripts/sw-replay-test.sh && bash scripts/sw-retro-test.sh && bash scripts/sw-scale-test.sh && bash scripts/sw-security-audit-test.sh && bash scripts/sw-self-optimize-test.sh && bash scripts/sw-session-test.sh && bash scripts/sw-setup-test.sh && bash scripts/sw-standup-test.sh && bash scripts/sw-status-test.sh && bash scripts/sw-strategic-test.sh && bash scripts/sw-stream-test.sh && bash scripts/sw-swarm-test.sh && bash scripts/sw-team-stages-test.sh && bash scripts/sw-templates-test.sh && bash scripts/sw-testgen-test.sh && bash scripts/sw-tmux-pipeline-test.sh && bash scripts/sw-tmux-test.sh && bash scripts/sw-trace-test.sh && bash scripts/sw-tracker-test.sh && bash scripts/sw-triage-test.sh && bash scripts/sw-upgrade-test.sh && bash scripts/sw-ux-test.sh && bash scripts/sw-webhook-test.sh && bash scripts/sw-widgets-test.sh && bash scripts/sw-worktree-test.sh && bash scripts/sw-e2e-smoke-test.sh",
+    "test": "bash scripts/sw-agi-roadmap-test.sh && bash scripts/sw-activity-test.sh && bash scripts/sw-adaptive-test.sh && bash scripts/sw-adversarial-test.sh && bash scripts/sw-architecture-enforcer-test.sh && bash scripts/sw-auth-test.sh && bash scripts/sw-autonomous-test.sh && bash scripts/sw-changelog-test.sh && bash scripts/sw-checkpoint-test.sh && bash scripts/sw-ci-test.sh && bash scripts/sw-cleanup-test.sh && bash scripts/sw-code-review-test.sh && bash scripts/sw-connect-test.sh && bash scripts/sw-context-test.sh && bash scripts/sw-cost-test.sh && bash scripts/sw-daemon-test.sh && bash scripts/sw-dashboard-test.sh && bash scripts/sw-db-test.sh && bash scripts/sw-decompose-test.sh && bash scripts/sw-deps-test.sh && bash scripts/sw-developer-simulation-test.sh && bash scripts/sw-discovery-test.sh && bash scripts/sw-doc-fleet-test.sh && bash scripts/sw-docs-agent-test.sh && bash scripts/sw-docs-test.sh && bash scripts/sw-doctor-test.sh && bash scripts/sw-dora-test.sh && bash scripts/sw-durable-test.sh && bash scripts/sw-e2e-orchestrator-test.sh && bash scripts/sw-eventbus-test.sh && bash scripts/sw-feedback-test.sh && bash scripts/sw-fix-test.sh && bash scripts/sw-fleet-discover-test.sh && bash scripts/sw-fleet-test.sh && bash scripts/sw-fleet-viz-test.sh && bash scripts/sw-frontier-test.sh && bash scripts/sw-github-app-test.sh && bash scripts/sw-github-checks-test.sh && bash scripts/sw-github-deploy-test.sh && bash scripts/sw-github-graphql-test.sh && bash scripts/sw-guild-test.sh && bash scripts/sw-heartbeat-test.sh && bash scripts/sw-hygiene-test.sh && bash scripts/sw-incident-test.sh && bash scripts/sw-init-test.sh && bash scripts/sw-instrument-test.sh && bash scripts/sw-intelligence-test.sh && bash scripts/sw-jira-test.sh && bash scripts/sw-launchd-test.sh && bash scripts/sw-linear-test.sh && bash scripts/sw-logs-test.sh && bash scripts/sw-loop-test.sh && bash scripts/sw-memory-test.sh && bash scripts/sw-mission-control-test.sh && bash scripts/sw-model-router-test.sh && bash scripts/sw-otel-test.sh && bash scripts/sw-oversight-test.sh && bash scripts/sw-patrol-meta-test.sh && bash scripts/sw-pipeline-composer-test.sh && bash scripts/sw-pipeline-test.sh && bash scripts/sw-pipeline-vitals-test.sh && bash scripts/sw-pm-test.sh && bash scripts/sw-pr-lifecycle-test.sh && bash scripts/sw-predictive-test.sh && bash scripts/sw-prep-test.sh && bash scripts/sw-ps-test.sh && bash scripts/sw-public-dashboard-test.sh && bash scripts/sw-quality-test.sh && bash scripts/sw-reaper-test.sh && bash scripts/sw-recruit-test.sh && bash scripts/sw-regression-test.sh && bash scripts/sw-release-manager-test.sh && bash scripts/sw-release-test.sh && bash scripts/sw-remote-test.sh && bash scripts/sw-replay-test.sh && bash scripts/sw-retro-test.sh && bash scripts/sw-scale-test.sh && bash scripts/sw-security-audit-test.sh && bash scripts/sw-self-optimize-test.sh && bash scripts/sw-session-test.sh && bash scripts/sw-setup-test.sh && bash scripts/sw-standup-test.sh && bash scripts/sw-status-test.sh && bash scripts/sw-strategic-test.sh && bash scripts/sw-stream-test.sh && bash scripts/sw-swarm-test.sh && bash scripts/sw-team-stages-test.sh && bash scripts/sw-templates-test.sh && bash scripts/sw-testgen-test.sh && bash scripts/sw-tmux-pipeline-test.sh && bash scripts/sw-tmux-test.sh && bash scripts/sw-trace-test.sh && bash scripts/sw-tracker-test.sh && bash scripts/sw-triage-test.sh && bash scripts/sw-upgrade-test.sh && bash scripts/sw-ux-test.sh && bash scripts/sw-webhook-test.sh && bash scripts/sw-widgets-test.sh && bash scripts/sw-worktree-test.sh && bash scripts/sw-policy-e2e-test.sh && bash scripts/sw-e2e-smoke-test.sh",
     "test:smoke": "bash scripts/sw-e2e-smoke-test.sh",
     "test:integration": "bash scripts/sw-e2e-integration-test.sh"
   },

package/scripts/lib/daemon-health.sh

@@ -0,0 +1,32 @@
+# daemon-health.sh — Daemon health timeouts from policy (for sw-daemon.sh)
+# Source from sw-daemon.sh. Requires SCRIPT_DIR, REPO_DIR, and policy.sh.
+[[ -n "${_DAEMON_HEALTH_LOADED:-}" ]] && return 0
+_DAEMON_HEALTH_LOADED=1
+
+# Policy overrides when config/policy.json exists
+[[ -f "${SCRIPT_DIR:-}/lib/policy.sh" ]] && source "${SCRIPT_DIR:-}/lib/policy.sh"
+
+# Per-stage heartbeat timeout: policy .daemon.stage_timeouts.<stage> or .daemon.health_heartbeat_timeout
+# Usage: daemon_health_timeout_for_stage <stage> [fallback]
+daemon_health_timeout_for_stage() {
+    local stage="${1:-unknown}"
+    local fallback="${2:-120}"
+    if type policy_get &>/dev/null 2>&1; then
+        local policy_val
+        policy_val=$(policy_get ".daemon.stage_timeouts.$stage" "")
+        if [[ -n "$policy_val" && "$policy_val" =~ ^[0-9]+$ ]]; then
+            echo "$policy_val"
+            return 0
+        fi
+        policy_val=$(policy_get ".daemon.health_heartbeat_timeout" "$fallback")
+        [[ -n "$policy_val" && "$policy_val" =~ ^[0-9]+$ ]] && echo "$policy_val" || echo "$fallback"
+    else
+        case "$stage" in
+            build)  echo "300" ;;
+            test)   echo "180" ;;
+            review|compound_quality) echo "180" ;;
+            lint|format|intake|plan|design) echo "60" ;;
+            *)      echo "$fallback" ;;
+        esac
+    fi
+}

package/scripts/lib/helpers.sh

@@ -4,6 +4,12 @@
 #   Source this from any script: source "$SCRIPT_DIR/lib/helpers.sh"
 # ═══════════════════════════════════════════════════════════════════
 #
+# Exit code convention:
+#   0 — success / nothing to do
+#   1 — error (invalid args, missing deps, runtime failure)
+#   2 — check condition failed (regressions found, quality below threshold, etc.)
+#         Callers should distinguish: exit 1 = broken, exit 2 = check negative
+#
 # This is the canonical reference for common boilerplate that was
 # previously duplicated across 18+ scripts. Existing scripts are NOT
 # being modified to source this (too risky for a sweep), but all NEW
@@ -75,5 +81,28 @@ emit_event() {
         fi
     done
     mkdir -p "${HOME}/.shipwright"
-    echo "{\"ts\":\"$(now_iso)\",\"ts_epoch\":$(now_epoch),\"type\":\"${event_type}\"${json_fields}}" >> "$EVENTS_FILE"
+    local _event_line="{\"ts\":\"$(now_iso)\",\"ts_epoch\":$(now_epoch),\"type\":\"${event_type}\"${json_fields}}"
+    # Use flock to prevent concurrent write corruption
+    local _lock_file="${EVENTS_FILE}.lock"
+    (
+        if command -v flock &>/dev/null; then
+            flock -w 2 200 2>/dev/null || true
+        fi
+        echo "$_event_line" >> "$EVENTS_FILE"
+    ) 200>"$_lock_file"
+}
+
+# Rotate a JSONL file to keep it within max_lines.
+# Usage: rotate_jsonl <file> <max_lines>
+rotate_jsonl() {
+    local file="$1"
+    local max_lines="${2:-10000}"
+    [[ ! -f "$file" ]] && return 0
+    local current_lines
+    current_lines=$(wc -l < "$file" 2>/dev/null | tr -d ' ')
+    if [[ "$current_lines" -gt "$max_lines" ]]; then
+        local tmp_rotate
+        tmp_rotate=$(mktemp)
+        tail -n "$max_lines" "$file" > "$tmp_rotate" && mv "$tmp_rotate" "$file" || rm -f "$tmp_rotate"
+    fi
 }

package/scripts/lib/pipeline-detection.sh

@@ -0,0 +1,278 @@
+# pipeline-detection.sh — Auto-detection (test cmd, lang, reviewers, task type) for sw-pipeline.sh
+# Source from sw-pipeline.sh. Requires SCRIPT_DIR, REPO_DIR.
+[[ -n "${_PIPELINE_DETECTION_LOADED:-}" ]] && return 0
+_PIPELINE_DETECTION_LOADED=1
+
+detect_test_cmd() {
+    local root="$PROJECT_ROOT"
+
+    # Node.js: check package.json scripts
+    if [[ -f "$root/package.json" ]]; then
+        local has_test
+        has_test=$(jq -r '.scripts.test // ""' "$root/package.json" 2>/dev/null)
+        if [[ -n "$has_test" && "$has_test" != "null" && "$has_test" != *"no test specified"* ]]; then
+            # Detect package manager
+            if [[ -f "$root/pnpm-lock.yaml" ]]; then
+                echo "pnpm test"; return
+            elif [[ -f "$root/yarn.lock" ]]; then
+                echo "yarn test"; return
+            elif [[ -f "$root/bun.lockb" ]]; then
+                echo "bun test"; return
+            else
+                echo "npm test"; return
+            fi
+        fi
+    fi
+
+    # Python: check for pytest, unittest
+    if [[ -f "$root/pytest.ini" || -f "$root/pyproject.toml" || -f "$root/setup.py" ]]; then
+        if [[ -f "$root/pyproject.toml" ]] && grep -q "pytest" "$root/pyproject.toml" 2>/dev/null; then
+            echo "pytest"; return
+        elif [[ -d "$root/tests" ]]; then
+            echo "pytest"; return
+        fi
+    fi
+
+    # Rust
+    if [[ -f "$root/Cargo.toml" ]]; then
+        echo "cargo test"; return
+    fi
+
+    # Go
+    if [[ -f "$root/go.mod" ]]; then
+        echo "go test ./..."; return
+    fi
+
+    # Ruby
+    if [[ -f "$root/Gemfile" ]]; then
+        if grep -q "rspec" "$root/Gemfile" 2>/dev/null; then
+            echo "bundle exec rspec"; return
+        fi
+        echo "bundle exec rake test"; return
+    fi
+
+    # Java/Kotlin (Maven)
+    if [[ -f "$root/pom.xml" ]]; then
+        echo "mvn test"; return
+    fi
+
+    # Java/Kotlin (Gradle)
+    if [[ -f "$root/build.gradle" || -f "$root/build.gradle.kts" ]]; then
+        echo "./gradlew test"; return
+    fi
+
+    # Makefile
+    if [[ -f "$root/Makefile" ]] && grep -q "^test:" "$root/Makefile" 2>/dev/null; then
+        echo "make test"; return
+    fi
+
+    # Fallback
+    echo ""
+}
+
+# Detect project language/framework
+detect_project_lang() {
+    local root="$PROJECT_ROOT"
+    local detected=""
+
+    # Fast heuristic detection (grep-based)
+    if [[ -f "$root/package.json" ]]; then
+        if grep -q "typescript" "$root/package.json" 2>/dev/null; then
+            detected="typescript"
+        elif grep -q "\"next\"" "$root/package.json" 2>/dev/null; then
+            detected="nextjs"
+        elif grep -q "\"react\"" "$root/package.json" 2>/dev/null; then
+            detected="react"
+        else
+            detected="nodejs"
+        fi
+    elif [[ -f "$root/Cargo.toml" ]]; then
+        detected="rust"
+    elif [[ -f "$root/go.mod" ]]; then
+        detected="go"
+    elif [[ -f "$root/pyproject.toml" || -f "$root/setup.py" || -f "$root/requirements.txt" ]]; then
+        detected="python"
+    elif [[ -f "$root/Gemfile" ]]; then
+        detected="ruby"
+    elif [[ -f "$root/pom.xml" || -f "$root/build.gradle" ]]; then
+        detected="java"
+    else
+        detected="unknown"
+    fi
+
+    # Intelligence: holistic analysis for polyglot/monorepo detection
+    if [[ "$detected" == "unknown" ]] && type intelligence_search_memory &>/dev/null 2>&1 && command -v claude &>/dev/null; then
+        local config_files
+        config_files=$(ls "$root" 2>/dev/null | grep -E '\.(json|toml|yaml|yml|xml|gradle|lock|mod)$' | head -15)
+        if [[ -n "$config_files" ]]; then
+            local ai_lang
+            ai_lang=$(claude --print --output-format text -p "Based on these config files in a project root, what is the primary language/framework? Reply with ONE word (e.g., typescript, python, rust, go, java, ruby, nodejs):
+
+Files: ${config_files}" --model haiku < /dev/null 2>/dev/null || true)
+            ai_lang=$(echo "$ai_lang" | tr -d '[:space:]' | tr '[:upper:]' '[:lower:]')
+            case "$ai_lang" in
+                typescript|python|rust|go|java|ruby|nodejs|react|nextjs|kotlin|swift|elixir|scala)
+                    detected="$ai_lang" ;;
+            esac
+        fi
+    fi
+
+    echo "$detected"
+}
+
+# Detect likely reviewers from CODEOWNERS or git log
+detect_reviewers() {
+    local root="$PROJECT_ROOT"
+
+    # Check CODEOWNERS — common paths first, then broader search
+    local codeowners=""
+    for f in "$root/.github/CODEOWNERS" "$root/CODEOWNERS" "$root/docs/CODEOWNERS"; do
+        if [[ -f "$f" ]]; then
+            codeowners="$f"
+            break
+        fi
+    done
+    # Broader search if not found at common locations
+    if [[ -z "$codeowners" ]]; then
+        codeowners=$(find "$root" -maxdepth 3 -name "CODEOWNERS" -type f 2>/dev/null | head -1 || true)
+    fi
+
+    if [[ -n "$codeowners" ]]; then
+        # Extract GitHub usernames from CODEOWNERS (lines like: * @user1 @user2)
+        local owners
+        owners=$(grep -oE '@[a-zA-Z0-9_-]+' "$codeowners" 2>/dev/null | sed 's/@//' | sort -u | head -3 | tr '\n' ',')
+        owners="${owners%,}"  # trim trailing comma
+        if [[ -n "$owners" ]]; then
+            echo "$owners"
+            return
+        fi
+    fi
+
+    # Fallback: try to extract GitHub usernames from recent commit emails
+    # Format: user@users.noreply.github.com → user, or noreply+user@... → user
+    local current_user
+    current_user=$(gh api user --jq '.login' 2>/dev/null || true)
+    local contributors
+    contributors=$(git log --format='%aE' -100 2>/dev/null | \
+        grep -oE '[a-zA-Z0-9_-]+@users\.noreply\.github\.com' | \
+        sed 's/@users\.noreply\.github\.com//' | sed 's/^[0-9]*+//' | \
+        sort | uniq -c | sort -rn | \
+        awk '{print $NF}' | \
+        grep -v "^${current_user:-___}$" 2>/dev/null | \
+        head -2 | tr '\n' ',')
+    contributors="${contributors%,}"
+    echo "$contributors"
+}
+
+# Get branch prefix from task type — checks git history for conventions first
+branch_prefix_for_type() {
+    local task_type="$1"
+
+    # Analyze recent branches for naming conventions
+    local branch_prefixes
+    branch_prefixes=$(git branch -r 2>/dev/null | sed 's#origin/##' | grep -oE '^[a-z]+/' | sort | uniq -c | sort -rn | head -5 || true)
+    if [[ -n "$branch_prefixes" ]]; then
+        local total_branches dominant_prefix dominant_count
+        total_branches=$(echo "$branch_prefixes" | awk '{s+=$1} END {print s}' || echo "0")
+        dominant_prefix=$(echo "$branch_prefixes" | head -1 | awk '{print $2}' | tr -d '/' || true)
+        dominant_count=$(echo "$branch_prefixes" | head -1 | awk '{print $1}' || echo "0")
+        # If >80% of branches use a pattern, adopt it for the matching type
+        if [[ "$total_branches" -gt 5 ]] && [[ "$dominant_count" -gt 0 ]]; then
+            local pct=$(( (dominant_count * 100) / total_branches ))
+            if [[ "$pct" -gt 80 && -n "$dominant_prefix" ]]; then
+                # Map task type to the repo's convention
+                local mapped=""
+                case "$task_type" in
+                    bug)      mapped=$(echo "$branch_prefixes" | awk '{print $2}' | tr -d '/' | grep -E '^(fix|bug|hotfix)$' | head -1 || true) ;;
+                    feature)  mapped=$(echo "$branch_prefixes" | awk '{print $2}' | tr -d '/' | grep -E '^(feat|feature)$' | head -1 || true) ;;
+                esac
+                if [[ -n "$mapped" ]]; then
+                    echo "$mapped"
+                    return
+                fi
+            fi
+        fi
+    fi
+
+    # Fallback: hardcoded mapping
+    case "$task_type" in
+        bug)          echo "fix" ;;
+        refactor)     echo "refactor" ;;
+        testing)      echo "test" ;;
+        security)     echo "security" ;;
+        docs)         echo "docs" ;;
+        devops)       echo "ci" ;;
+        migration)    echo "migrate" ;;
+        architecture) echo "arch" ;;
+        *)            echo "feat" ;;
+    esac
+}
+
+# ─── State Management ──────────────────────────────────────────────────────
+
+PIPELINE_STATUS="pending"
+CURRENT_STAGE=""
+STARTED_AT=""
+UPDATED_AT=""
+STAGE_STATUSES=""
+LOG_ENTRIES=""
+
+detect_task_type() {
+    local goal="$1"
+
+    # Intelligence: Claude classification with confidence score
+    if type intelligence_search_memory &>/dev/null 2>&1 && command -v claude &>/dev/null; then
+        local ai_result
+        ai_result=$(claude --print --output-format text -p "Classify this task into exactly ONE category. Reply in format: CATEGORY|CONFIDENCE (0-100)
+
+Categories: bug, refactor, testing, security, docs, devops, migration, architecture, feature
+
+Task: ${goal}" --model haiku < /dev/null 2>/dev/null || true)
+        if [[ -n "$ai_result" ]]; then
+            local ai_type ai_conf
+            ai_type=$(echo "$ai_result" | head -1 | cut -d'|' -f1 | tr -d '[:space:]' | tr '[:upper:]' '[:lower:]')
+            ai_conf=$(echo "$ai_result" | head -1 | cut -d'|' -f2 | grep -oE '[0-9]+' | head -1 || echo "0")
+            # Use AI classification if confidence >= 70
+            case "$ai_type" in
+                bug|refactor|testing|security|docs|devops|migration|architecture|feature)
+                    if [[ "${ai_conf:-0}" -ge 70 ]] 2>/dev/null; then
+                        echo "$ai_type"
+                        return
+                    fi
+                    ;;
+            esac
+        fi
+    fi
+
+    # Fallback: keyword matching
+    local lower
+    lower=$(echo "$goal" | tr '[:upper:]' '[:lower:]')
+    case "$lower" in
+        *fix*|*bug*|*broken*|*error*|*crash*)     echo "bug" ;;
+        *refactor*|*clean*|*reorganize*|*extract*) echo "refactor" ;;
+        *test*|*coverage*|*spec*)                  echo "testing" ;;
+        *security*|*audit*|*vuln*|*cve*)           echo "security" ;;
+        *doc*|*readme*|*guide*)                    echo "docs" ;;
+        *deploy*|*ci*|*pipeline*|*docker*|*infra*) echo "devops" ;;
+        *migrate*|*migration*|*schema*)            echo "migration" ;;
+        *architect*|*design*|*rfc*|*adr*)          echo "architecture" ;;
+        *)                                          echo "feature" ;;
+    esac
+}
+
+template_for_type() {
+    case "$1" in
+        bug)          echo "bug-fix" ;;
+        refactor)     echo "refactor" ;;
+        testing)      echo "testing" ;;
+        security)     echo "security-audit" ;;
+        docs)         echo "documentation" ;;
+        devops)       echo "devops" ;;
+        migration)    echo "migration" ;;
+        architecture) echo "architecture" ;;
+        *)            echo "feature-dev" ;;
+    esac
+}
+
+# ─── Stage Preview ──────────────────────────────────────────────────────────
+

package/scripts/lib/pipeline-github.sh

@@ -0,0 +1,196 @@
+# pipeline-github.sh — GitHub API helpers for pipeline (for sw-pipeline.sh)
+# Source from sw-pipeline.sh. Requires get_stage_status, get_stage_timing, get_stage_description, format_duration, now_iso from state/helpers.
+[[ -n "${_PIPELINE_GITHUB_LOADED:-}" ]] && return 0
+_PIPELINE_GITHUB_LOADED=1
+
+gh_init() {
+    if [[ "$NO_GITHUB" == "true" ]]; then
+        GH_AVAILABLE=false
+        return
+    fi
+
+    if ! command -v gh &>/dev/null; then
+        GH_AVAILABLE=false
+        warn "gh CLI not found — GitHub integration disabled"
+        return
+    fi
+
+    # Check if authenticated
+    if ! gh auth status &>/dev/null 2>&1; then
+        GH_AVAILABLE=false
+        warn "gh not authenticated — GitHub integration disabled"
+        return
+    fi
+
+    # Detect repo owner/name from git remote
+    local remote_url
+    remote_url=$(git remote get-url origin 2>/dev/null || true)
+    if [[ -n "$remote_url" ]]; then
+        # Handle SSH: git@github.com:owner/repo.git
+        # Handle HTTPS: https://github.com/owner/repo.git
+        REPO_OWNER=$(echo "$remote_url" | sed -E 's#(.*github\.com[:/])([^/]+)/.*#\2#')
+        REPO_NAME=$(echo "$remote_url" | sed -E 's#.*/([^/]+)(\.git)?$#\1#' | sed 's/\.git$//')
+    fi
+
+    if [[ -n "$REPO_OWNER" && -n "$REPO_NAME" ]]; then
+        GH_AVAILABLE=true
+        info "GitHub: ${DIM}${REPO_OWNER}/${REPO_NAME}${RESET}"
+    else
+        GH_AVAILABLE=false
+        warn "Could not detect GitHub repo — GitHub integration disabled"
+    fi
+}
+
+# Post or update a comment on a GitHub issue
+# Usage: gh_comment_issue <issue_number> <body>
+gh_comment_issue() {
+    [[ "$GH_AVAILABLE" != "true" ]] && return 0
+    local issue_num="$1" body="$2"
+    gh issue comment "$issue_num" --body "$body" 2>/dev/null || true
+}
+
+# Post a progress-tracking comment and save its ID for later updates
+# Usage: gh_post_progress <issue_number> <body>
+gh_post_progress() {
+    [[ "$GH_AVAILABLE" != "true" ]] && return 0
+    local issue_num="$1" body="$2"
+    local result
+    result=$(gh api "repos/${REPO_OWNER}/${REPO_NAME}/issues/${issue_num}/comments" \
+        -f body="$body" --jq '.id' 2>/dev/null) || true
+    if [[ -n "$result" && "$result" != "null" ]]; then
+        PROGRESS_COMMENT_ID="$result"
+    fi
+}
+
+# Update an existing progress comment by ID
+# Usage: gh_update_progress <body>
+gh_update_progress() {
+    [[ "$GH_AVAILABLE" != "true" || -z "$PROGRESS_COMMENT_ID" ]] && return 0
+    local body="$1"
+    gh api "repos/${REPO_OWNER}/${REPO_NAME}/issues/comments/${PROGRESS_COMMENT_ID}" \
+        -X PATCH -f body="$body" 2>/dev/null || true
+}
+
+# Add labels to an issue or PR
+# Usage: gh_add_labels <issue_number> <label1,label2,...>
+gh_add_labels() {
+    [[ "$GH_AVAILABLE" != "true" ]] && return 0
+    local issue_num="$1" labels="$2"
+    [[ -z "$labels" ]] && return 0
+    gh issue edit "$issue_num" --add-label "$labels" 2>/dev/null || true
+}
+
+# Remove a label from an issue
+# Usage: gh_remove_label <issue_number> <label>
+gh_remove_label() {
+    [[ "$GH_AVAILABLE" != "true" ]] && return 0
+    local issue_num="$1" label="$2"
+    gh issue edit "$issue_num" --remove-label "$label" 2>/dev/null || true
+}
+
+# Self-assign an issue
+# Usage: gh_assign_self <issue_number>
+gh_assign_self() {
+    [[ "$GH_AVAILABLE" != "true" ]] && return 0
+    local issue_num="$1"
+    gh issue edit "$issue_num" --add-assignee "@me" 2>/dev/null || true
+}
+
+# Get full issue metadata as JSON
+# Usage: gh_get_issue_meta <issue_number>
+gh_get_issue_meta() {
+    [[ "$GH_AVAILABLE" != "true" ]] && return 0
+    local issue_num="$1"
+    gh issue view "$issue_num" --json title,body,labels,milestone,assignees,comments,number,state 2>/dev/null || true
+}
+
+# Build a progress table for GitHub comment
+# Usage: gh_build_progress_body
+gh_build_progress_body() {
+    local body="## 🤖 Pipeline Progress — \`${PIPELINE_NAME}\`
+
+**Delivering:** ${GOAL}
+
+| Stage | Status | Duration | |
+|-------|--------|----------|-|"
+
+    local stages
+    stages=$(jq -c '.stages[]' "$PIPELINE_CONFIG" 2>/dev/null)
+    while IFS= read -r -u 3 stage; do
+        local id enabled
+        id=$(echo "$stage" | jq -r '.id')
+        enabled=$(echo "$stage" | jq -r '.enabled')
+
+        if [[ "$enabled" != "true" ]]; then
+            body="${body}
+| ${id} | ⏭️ skipped | — | |"
+            continue
+        fi
+
+        local sstatus
+        sstatus=$(get_stage_status "$id")
+        local duration
+        duration=$(get_stage_timing "$id")
+
+        local icon detail_col
+        case "$sstatus" in
+            complete)  icon="✅"; detail_col="" ;;
+            running)   icon="🔄"; detail_col=$(get_stage_description "$id") ;;
+            failed)    icon="❌"; detail_col="" ;;
+            *)         icon="⬜"; detail_col=$(get_stage_description "$id") ;;
+        esac
+
+        body="${body}
+| ${id} | ${icon} ${sstatus:-pending} | ${duration:-—} | ${detail_col} |"
+    done 3<<< "$stages"
+
+    body="${body}
+
+**Branch:** \`${GIT_BRANCH}\`"
+
+    [[ -n "${GITHUB_ISSUE:-}" ]] && body="${body}
+**Issue:** ${GITHUB_ISSUE}"
+
+    local total_dur=""
+    if [[ -n "$PIPELINE_START_EPOCH" ]]; then
+        total_dur=$(format_duration $(( $(now_epoch) - PIPELINE_START_EPOCH )))
+        body="${body}
+**Elapsed:** ${total_dur}"
+    fi
+
+    # Artifacts section
+    local artifacts=""
+    [[ -f "$ARTIFACTS_DIR/plan.md" ]] && artifacts="${artifacts}[Plan](.claude/pipeline-artifacts/plan.md)"
+    [[ -f "$ARTIFACTS_DIR/design.md" ]] && { [[ -n "$artifacts" ]] && artifacts="${artifacts} · "; artifacts="${artifacts}[Design](.claude/pipeline-artifacts/design.md)"; }
+    [[ -n "${PR_NUMBER:-}" ]] && { [[ -n "$artifacts" ]] && artifacts="${artifacts} · "; artifacts="${artifacts}PR #${PR_NUMBER}"; }
+    [[ -n "$artifacts" ]] && body="${body}
+
+📎 **Artifacts:** ${artifacts}"
+
+    body="${body}
+
+---
+_Updated: $(now_iso) · shipwright pipeline_"
+    echo "$body"
+}
+
+# Push a page to the GitHub wiki
+# Usage: gh_wiki_page <title> <content>
+gh_wiki_page() {
+    local title="$1" content="$2"
+    $GH_AVAILABLE || return 0
+    $NO_GITHUB && return 0
+    local wiki_dir="$ARTIFACTS_DIR/wiki"
+    if [[ ! -d "$wiki_dir" ]]; then
+        git clone "https://github.com/${REPO_OWNER}/${REPO_NAME}.wiki.git" "$wiki_dir" 2>/dev/null || {
+            info "Wiki not initialized — skipping wiki update"
+            return 0
+        }
+    fi
+    echo "$content" > "$wiki_dir/${title}.md"
+    ( cd "$wiki_dir" && git add -A && git commit -m "Pipeline: update $title" && git push ) 2>/dev/null || true
+}
+
+# ─── Auto-Detection ─────────────────────────────────────────────────────────
+
+# Detect the test command from project files