shipwright-cli 2.2.1 → 2.3.0

package/scripts/sw-intelligence.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="${REPO_DIR:-$(cd "$SCRIPT_DIR/.." && pwd)}"
 
@@ -75,6 +75,7 @@ _intelligence_track_cache_access() {
 
     local tmp_file
     tmp_file=$(mktemp "${TMPDIR:-/tmp}/sw-cache-stats.XXXXXX")
+    trap "rm -f '$tmp_file'" RETURN
     if [[ "$hit_or_miss" == "hit" ]]; then
         jq '.hits += 1 | .total += 1' "$CACHE_STATS_FILE" > "$tmp_file" && mv "$tmp_file" "$CACHE_STATS_FILE" || rm -f "$tmp_file"
     else
@@ -118,6 +119,7 @@ _intelligence_adjust_cache_ttl() {
     if [[ "$new_ttl" != "$current_ttl" ]]; then
         local tmp_file
         tmp_file=$(mktemp "${TMPDIR:-/tmp}/sw-cache-ttl.XXXXXX")
+        trap "rm -f '$tmp_file'" RETURN
         jq -n \
             --argjson ttl "$new_ttl" \
             --argjson miss_rate "$miss_rate" \
@@ -134,6 +136,7 @@ _intelligence_adjust_cache_ttl() {
     # Reset stats for next window
     local tmp_reset
     tmp_reset=$(mktemp "${TMPDIR:-/tmp}/sw-cache-reset.XXXXXX")
+    trap "rm -f '$tmp_reset'" RETURN
     echo '{"hits":0,"misses":0,"total":0}' > "$tmp_reset" && mv "$tmp_reset" "$CACHE_STATS_FILE" || rm -f "$tmp_reset"
 }
 
@@ -212,6 +215,7 @@ _intelligence_cache_set() {
 
     local tmp_file
     tmp_file=$(mktemp "${TMPDIR:-/tmp}/sw-intel-cache.XXXXXX")
+    trap "rm -f '$tmp_file'" RETURN
     jq --arg h "$hash" \
        --argjson result "$result" \
        --argjson ts "$now" \

package/scripts/sw-jira.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 

package/scripts/sw-launchd.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 

package/scripts/sw-linear.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -48,12 +48,14 @@ RESET="${RESET:-\033[0m}"
 CONFIG_DIR="${HOME}/.shipwright"
 LINEAR_CONFIG="${CONFIG_DIR}/linear-config.json"
 
-# Linear Status IDs (Sethdford team)
-STATUS_BACKLOG="147eb91d-0428-457b-bdcb-0875b847b061"
-STATUS_TODO="f89d423b-9cad-4e60-aec9-422b64b78a4b"
-STATUS_IN_PROGRESS="7ed39c42-434d-4239-86f3-ffa24dbf1275"
-STATUS_IN_REVIEW="ea38a4f2-f0ee-4e0b-ae45-7e5aad45ef53"
-STATUS_DONE="dc2430cf-0713-40c9-a8c6-889413b626e7"
+# Linear Status IDs — loaded from config, with env var overrides
+# Configure via: shipwright tracker init --provider linear
+# Or set env vars: LINEAR_STATUS_BACKLOG, LINEAR_STATUS_TODO, etc.
+STATUS_BACKLOG="${LINEAR_STATUS_BACKLOG:-}"
+STATUS_TODO="${LINEAR_STATUS_TODO:-}"
+STATUS_IN_PROGRESS="${LINEAR_STATUS_IN_PROGRESS:-}"
+STATUS_IN_REVIEW="${LINEAR_STATUS_IN_REVIEW:-}"
+STATUS_DONE="${LINEAR_STATUS_DONE:-}"
 
 LINEAR_API="https://api.linear.app/graphql"
 
@@ -65,8 +67,17 @@ load_config() {
     fi
 
     LINEAR_API_KEY="${LINEAR_API_KEY:-}"
-    LINEAR_TEAM_ID="${LINEAR_TEAM_ID:-83deb533-69d2-43ef-bc58-eadb6e72a8f2}"
-    LINEAR_PROJECT_ID="${LINEAR_PROJECT_ID:-b262d625-5bbe-47bd-9f89-df27c45eba8b}"
+    LINEAR_TEAM_ID="${LINEAR_TEAM_ID:-$(jq -r '.team_id // empty' "$LINEAR_CONFIG" 2>/dev/null || true)}"
+    LINEAR_PROJECT_ID="${LINEAR_PROJECT_ID:-$(jq -r '.project_id // empty' "$LINEAR_CONFIG" 2>/dev/null || true)}"
+
+    # Load status IDs from config if not set via env
+    if [[ -f "$LINEAR_CONFIG" ]]; then
+        STATUS_BACKLOG="${STATUS_BACKLOG:-$(jq -r '.status_ids.backlog // empty' "$LINEAR_CONFIG" 2>/dev/null || true)}"
+        STATUS_TODO="${STATUS_TODO:-$(jq -r '.status_ids.todo // empty' "$LINEAR_CONFIG" 2>/dev/null || true)}"
+        STATUS_IN_PROGRESS="${STATUS_IN_PROGRESS:-$(jq -r '.status_ids.in_progress // empty' "$LINEAR_CONFIG" 2>/dev/null || true)}"
+        STATUS_IN_REVIEW="${STATUS_IN_REVIEW:-$(jq -r '.status_ids.in_review // empty' "$LINEAR_CONFIG" 2>/dev/null || true)}"
+        STATUS_DONE="${STATUS_DONE:-$(jq -r '.status_ids.done // empty' "$LINEAR_CONFIG" 2>/dev/null || true)}"
+    fi
 }
 
 check_api_key() {

package/scripts/sw-logs.sh

@@ -4,7 +4,7 @@
 # ║                                                                          ║
 # ║  Captures tmux pane scrollback and provides log browsing/search.        ║
 # ╚═══════════════════════════════════════════════════════════════════════════╝
-VERSION="2.2.1"
+VERSION="2.3.0"
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 

package/scripts/sw-loop.sh

@@ -71,7 +71,7 @@ MAX_RESTARTS=0
 SESSION_RESTART=false
 RESTART_COUNT=0
 REPO_OVERRIDE=""
-VERSION="2.2.1"
+VERSION="2.3.0"
 
 # ─── Token Tracking ─────────────────────────────────────────────────────────
 LOOP_INPUT_TOKENS=0
@@ -531,6 +531,7 @@ write_loop_tokens() {
     fi
     local tmp_file
     tmp_file=$(mktemp "${token_file}.XXXXXX" 2>/dev/null || mktemp)
+    trap "rm -f '$tmp_file'" RETURN
     cat > "$tmp_file" <<TOKJSON
 {"input_tokens":${LOOP_INPUT_TOKENS},"output_tokens":${LOOP_OUTPUT_TOKENS},"cost_usd":${cost_usd},"iterations":${ITERATION:-0}}
 TOKJSON

package/scripts/sw-memory.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="${REPO_DIR:-$(cd "$SCRIPT_DIR/.." && pwd)}"
 
@@ -150,6 +150,7 @@ memory_capture_pipeline() {
             # Record review patterns to global memory for cross-repo learning
             local tmp_global
             tmp_global=$(mktemp)
+            trap "rm -f '$tmp_global'" RETURN
             jq --arg repo "$repo" \
                --arg ts "$captured_at" \
                --argjson bugs "${bug_count:-0}" \
@@ -211,6 +212,7 @@ memory_capture_failure() {
         fi
         local tmp_file
         tmp_file=$(mktemp "${failures_file}.tmp.XXXXXX")
+        trap "rm -f '$tmp_file'" EXIT
 
         if [[ "$existing_idx" != "-1" && "$existing_idx" != "null" ]]; then
             # Update existing entry
@@ -277,6 +279,7 @@ memory_record_fix_outcome() {
         fi
         local tmp_file
         tmp_file=$(mktemp "${failures_file}.tmp.XXXXXX")
+        trap "rm -f '$tmp_file'" EXIT
 
         jq --argjson idx "$match_idx" \
            --argjson app "$applied_inc" \
@@ -442,6 +445,7 @@ _memory_aggregate_global() {
         # Add to global, cap at 100 entries
         local tmp_global
         tmp_global=$(mktemp "${global_file}.tmp.XXXXXX")
+        trap "rm -f '$tmp_global'" RETURN
         jq --arg p "$pattern" \
            --arg ts "$(now_iso)" \
            --arg cat "general" \
@@ -593,6 +597,7 @@ Return JSON only, no markdown fences, no explanation."
     # Update the most recent failure entry with root_cause, fix, category
     local tmp_file
     tmp_file=$(mktemp)
+    trap "rm -f '$tmp_file'" RETURN
     jq --arg rc "$root_cause" \
        --arg fix "$fix" \
        --arg cat "$category" \
@@ -622,6 +627,7 @@ memory_capture_pattern() {
 
     local tmp_file
     tmp_file=$(mktemp)
+    trap "rm -f '$tmp_file'" RETURN
 
     case "$pattern_type" in
         project)
@@ -1112,6 +1118,7 @@ memory_update_metrics() {
     # Update baseline using atomic write
     local tmp_file
     tmp_file=$(mktemp)
+    trap "rm -f '$tmp_file'" RETURN
     jq --arg m "$metric_name" \
        --argjson v "$value" \
        --arg ts "$(now_iso)" \
@@ -1135,6 +1142,7 @@ memory_capture_decision() {
 
     local tmp_file
     tmp_file=$(mktemp)
+    trap "rm -f '$tmp_file'" RETURN
     jq --arg type "$dec_type" \
        --arg summary "$summary" \
        --arg detail "$detail" \
@@ -1454,6 +1462,7 @@ memory_import() {
     # Extract and write each section
     local tmp_file
     tmp_file=$(mktemp)
+    trap "rm -f '$tmp_file'" RETURN
 
     jq '.patterns // {}' "$import_file" > "$tmp_file" && mv "$tmp_file" "$mem_dir/patterns.json"
     jq '.failures // {"failures":[]}' "$import_file" > "$tmp_file" && mv "$tmp_file" "$mem_dir/failures.json"

package/scripts/sw-mission-control.sh

@@ -7,7 +7,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 

package/scripts/sw-model-router.sh

@@ -7,7 +7,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -204,6 +204,7 @@ set_config() {
     # Use jq to safely update the config
     local tmp_config
     tmp_config=$(mktemp)
+    trap "rm -f '$tmp_config'" RETURN
 
     if [[ "$value" == "true" ]] || [[ "$value" == "false" ]]; then
         jq ".${key} = ${value}" "$MODEL_ROUTING_CONFIG" > "$tmp_config"
@@ -336,6 +337,7 @@ configure_ab_test() {
 
     local tmp_config
     tmp_config=$(mktemp)
+    trap "rm -f '$tmp_config'" RETURN
 
     jq ".a_b_test = {\"enabled\": true, \"percentage\": $percentage, \"variant\": \"$variant\"}" \
         "$MODEL_ROUTING_CONFIG" > "$tmp_config"
@@ -521,6 +523,7 @@ main() {
                 if command -v jq &>/dev/null; then
                     local tmp_config
                     tmp_config=$(mktemp)
+                    trap "rm -f '$tmp_config'" RETURN
                     jq ".a_b_test.enabled = false" "$MODEL_ROUTING_CONFIG" > "$tmp_config"
                     mv "$tmp_config" "$MODEL_ROUTING_CONFIG"
                     success "Disabled A/B testing"

package/scripts/sw-otel.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -94,16 +94,16 @@ cmd_metrics() {
             event_type=$(echo "$line" | jq -r '.type // empty' 2>/dev/null || true)
 
             case "$event_type" in
-                pipeline_start)
+                pipeline_start|pipeline.started)
                     ((total_pipelines++))
                     ((active_pipelines++))
                     ;;
-                pipeline_complete)
+                pipeline_complete|pipeline.completed)
                     ((active_pipelines--))
                     ((succeeded_pipelines++))
                     ((status_success++))
                     ;;
-                pipeline_failed)
+                pipeline_failed|pipeline.failed)
                     ((active_pipelines--))
                     ((failed_pipelines++))
                     ((status_failed++))

package/scripts/sw-oversight.sh

@@ -7,7 +7,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 

package/scripts/sw-pipeline-composer.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -124,6 +124,7 @@ composer_create_pipeline() {
                 # Atomic write
                 local tmp_file
                 tmp_file=$(mktemp "${output_file}.XXXXXX")
+                trap "rm -f '$tmp_file'" RETURN
                 echo "$composed" | jq '.' > "$tmp_file"
                 mv "$tmp_file" "$output_file"
 
@@ -152,6 +153,7 @@ composer_create_pipeline() {
         info "Using fallback template: standard" >&2
         local tmp_file
         tmp_file=$(mktemp "${output_file}.XXXXXX")
+        trap "rm -f '$tmp_file'" RETURN
         cp "$fallback_template" "$tmp_file"
         mv "$tmp_file" "$output_file"
 

package/scripts/sw-pipeline-vitals.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -316,13 +316,11 @@ _compute_error_maturity() {
 # ─── File Locking Helpers ──────────────────────────────────────────────────
 _vitals_acquire_lock() {
     local lockfile="$1.lock"
-    local fd=200
-    eval "exec $fd>\"$lockfile\""
-    flock -w 5 "$fd" || { warn "Vitals lock timeout"; return 1; }
+    exec 200>"$lockfile"
+    flock -w 5 200 || { warn "Vitals lock timeout"; return 1; }
 }
 _vitals_release_lock() {
-    local fd=200
-    flock -u "$fd" 2>/dev/null || true
+    flock -u 200 2>/dev/null || true
 }
 
 # ═══════════════════════════════════════════════════════════════════════════

package/scripts/sw-pipeline.sh

@@ -11,7 +11,7 @@ unset CLAUDECODE 2>/dev/null || true
 # Ignore SIGHUP so tmux attach/detach doesn't kill long-running plan/design/review stages
 trap '' HUP
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -49,6 +49,18 @@ BOLD="${BOLD:-\033[1m}"
 RESET="${RESET:-\033[0m}"
 # Policy + pipeline quality thresholds (config/policy.json via lib/pipeline-quality.sh)
 [[ -f "$SCRIPT_DIR/lib/pipeline-quality.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-quality.sh"
+# shellcheck source=lib/pipeline-state.sh
+[[ -f "$SCRIPT_DIR/lib/pipeline-state.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-state.sh"
+# shellcheck source=lib/pipeline-github.sh
+[[ -f "$SCRIPT_DIR/lib/pipeline-github.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-github.sh"
+# shellcheck source=lib/pipeline-detection.sh
+[[ -f "$SCRIPT_DIR/lib/pipeline-detection.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-detection.sh"
+# shellcheck source=lib/pipeline-quality-checks.sh
+[[ -f "$SCRIPT_DIR/lib/pipeline-quality-checks.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-quality-checks.sh"
+# shellcheck source=lib/pipeline-intelligence.sh
+[[ -f "$SCRIPT_DIR/lib/pipeline-intelligence.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-intelligence.sh"
+# shellcheck source=lib/pipeline-stages.sh
+[[ -f "$SCRIPT_DIR/lib/pipeline-stages.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-stages.sh"
 PIPELINE_COVERAGE_THRESHOLD="${PIPELINE_COVERAGE_THRESHOLD:-60}"
 PIPELINE_QUALITY_GATE_THRESHOLD="${PIPELINE_QUALITY_GATE_THRESHOLD:-70}"
 
@@ -760,55 +772,7 @@ notify() {
     fi
 }
 
-# ─── GitHub Integration Helpers ─────────────────────────────────────────────
-
-
-# ─── Pipeline libs (extracted for decomposition) ─────────────────────────
-# shellcheck source=lib/pipeline-github.sh
-[[ -f "$SCRIPT_DIR/lib/pipeline-github.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-github.sh"
-# shellcheck source=lib/pipeline-detection.sh
-[[ -f "$SCRIPT_DIR/lib/pipeline-detection.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-detection.sh"
-
-PIPELINE_STATUS="pending"
-CURRENT_STAGE=""
-STARTED_AT=""
-UPDATED_AT=""
-STAGE_STATUSES=""
-LOG_ENTRIES=""
-
-# shellcheck source=lib/pipeline-state.sh
-[[ -f "$SCRIPT_DIR/lib/pipeline-state.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-state.sh"
-
-show_stage_preview() {
-    local stage_id="$1"
-    echo ""
-    echo -e "${PURPLE}${BOLD}━━━ Stage: ${stage_id} ━━━${RESET}"
-    case "$stage_id" in
-        intake)   echo -e "  Fetch issue, detect task type, create branch, self-assign" ;;
-        plan)     echo -e "  Generate plan via Claude, post task checklist to issue" ;;
-        design)   echo -e "  Generate Architecture Decision Record (ADR), evaluate alternatives" ;;
-        build)    echo -e "  Delegate to ${CYAN}shipwright loop${RESET} for autonomous building" ;;
-        test)     echo -e "  Run test suite and check coverage" ;;
-        review)   echo -e "  AI code review on the diff, post findings" ;;
-        pr)       echo -e "  Create GitHub PR with labels, reviewers, milestone" ;;
-        merge)    echo -e "  Wait for CI checks, merge PR, optionally delete branch" ;;
-        deploy)   echo -e "  Deploy to staging/production with rollback" ;;
-        validate) echo -e "  Smoke tests, health checks, close issue" ;;
-        monitor)  echo -e "  Post-deploy monitoring, health checks, auto-rollback" ;;
-    esac
-    echo ""
-}
-
-# ─── Stage Functions ────────────────────────────────────────────────────────
-
-
-# shellcheck source=lib/pipeline-stages.sh
-[[ -f "$SCRIPT_DIR/lib/pipeline-stages.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-stages.sh"
-# shellcheck source=lib/pipeline-quality-checks.sh
-[[ -f "$SCRIPT_DIR/lib/pipeline-quality-checks.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-quality-checks.sh"
-# shellcheck source=lib/pipeline-intelligence.sh
-[[ -f "$SCRIPT_DIR/lib/pipeline-intelligence.sh" ]] && source "$SCRIPT_DIR/lib/pipeline-intelligence.sh"
-
+# ─── Error Classification ──────────────────────────────────────────────────
 # Classifies errors to determine whether retrying makes sense.
 # Returns: "infrastructure", "logic", "configuration", or "unknown"
 
@@ -886,6 +850,7 @@ Reply with ONLY the classification word, nothing else." --model haiku < /dev/nul
         mkdir -p "$class_dir" 2>/dev/null || true
         local tmp_class
         tmp_class="$(mktemp)"
+        trap "rm -f '$tmp_class'" RETURN
         if [[ -f "$class_history" ]]; then
             jq --arg sig "$error_sig" --arg cls "$classification" --arg canon "$canonical_category" --arg stage "$stage_id" \
                 '.[$sig] = {"classification": $cls, "canonical": $canon, "stage": $stage, "recorded_at": now}' \
@@ -1305,6 +1270,7 @@ run_pipeline() {
                 # Remove this stage from the skip file
                 local tmp_skip
                 tmp_skip="$(mktemp)"
+                trap "rm -f '$tmp_skip'" RETURN
                 grep -vx "$id" "$ARTIFACTS_DIR/skip-stage.txt" > "$tmp_skip" 2>/dev/null || true
                 mv "$tmp_skip" "$ARTIFACTS_DIR/skip-stage.txt"
                 continue
@@ -1636,12 +1602,9 @@ pipeline_post_completion_cleanup() {
         # Reset status to idle (preserves the file for reference but unblocks new runs)
         local tmp_state
         tmp_state=$(mktemp)
-        if sed 's/^status: .*/status: idle/' "$STATE_FILE" > "$tmp_state" 2>/dev/null && [[ -s "$tmp_state" ]]; then
-            mv "$tmp_state" "$STATE_FILE"
-        else
-            rm -f "$tmp_state"
-            warn "Failed to reset state file status to idle" 2>/dev/null || true
-        fi
+        trap "rm -f '$tmp_state'" RETURN
+        sed 's/^status: .*/status: idle/' "$STATE_FILE" > "$tmp_state" 2>/dev/null || true
+        mv "$tmp_state" "$STATE_FILE"
     fi
 
     if [[ "$cleaned" -gt 0 ]]; then

package/scripts/sw-pipeline.sh.mock

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+MOCK_LOG="${MOCK_PIPELINE_LOG:-/tmp/mock-pipeline.log}"
+echo "pipeline $*" >> "$MOCK_LOG"
+# Simulate quick pipeline run
+sleep 0.1
+echo "https://github.com/test/repo/pull/42"
+exit 0

package/scripts/sw-pm.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
 # ─── Cross-platform compatibility ──────────────────────────────────────────
@@ -77,7 +77,7 @@ show_help() {
     echo -e "  ${DIM}shipwright pm history${RESET}                     # Show past decisions"
     echo -e "  ${DIM}shipwright pm history --pattern${RESET}           # Show success patterns"
     echo ""
-    echo -e "${DIM}Docs: https://sethdford.github.io/shipwright  |  GitHub: https://github.com/sethdford/shipwright${RESET}"
+    echo -e "${DIM}Docs: $(_sw_docs_url)  |  GitHub: $(_sw_github_url)${RESET}"
 }
 
 # ─── analyze_issue <issue_num> ───────────────────────────────────────────────
@@ -522,6 +522,7 @@ cmd_recommend() {
         ensure_pm_history
         local tmp_hist
         tmp_hist=$(mktemp)
+        trap "rm -f '$tmp_hist'" RETURN
         jq --argjson rec "$recommendation" '.decisions += [$rec]' "$PM_HISTORY" > "$tmp_hist" && mv "$tmp_hist" "$PM_HISTORY"
         emit_event "pm.recommend" "issue=${issue_num}"
         return 0
@@ -549,6 +550,7 @@ cmd_recommend() {
     ensure_pm_history
     local tmp_hist
     tmp_hist=$(mktemp)
+    trap "rm -f '$tmp_hist'" RETURN
     jq --argjson rec "$recommendation" '.decisions += [$rec]' "$PM_HISTORY" > "$tmp_hist" && mv "$tmp_hist" "$PM_HISTORY"
 
     success "Recommendation saved to history"
@@ -612,6 +614,7 @@ cmd_learn() {
     # Save to history
     local tmp_hist
     tmp_hist=$(mktemp)
+    trap "rm -f '$tmp_hist'" RETURN
     jq --argjson outcome "$outcome_record" '.outcomes += [$outcome]' "$PM_HISTORY" > "$tmp_hist" && mv "$tmp_hist" "$PM_HISTORY"
 
     success "Recorded ${outcome} outcome for issue #${issue_num}"

package/scripts/sw-pr-lifecycle.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 

package/scripts/sw-predictive.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -188,6 +188,7 @@ predictive_confirm_anomaly() {
     # Find the most recent unconfirmed anomaly for this stage+metric
     local tmp_file
     tmp_file=$(mktemp "${TMPDIR:-/tmp}/sw-anomaly-confirm.XXXXXX")
+    trap "rm -f '$tmp_file'" RETURN
     local found=false
 
     # Process file in reverse to find most recent unconfirmed
@@ -283,6 +284,7 @@ _predictive_update_alarm_rates() {
     # Atomic write
     local tmp_file
     tmp_file=$(mktemp "${TMPDIR:-/tmp}/sw-anomaly-thresh.XXXXXX")
+    trap "rm -f '$tmp_file'" RETURN
     jq --arg m "$metric_name" \
        --argjson crit "$new_critical" \
        --argjson warn "$new_warning" \
@@ -755,6 +757,7 @@ predict_update_baseline() {
     # Atomic write
     local tmp_file
     tmp_file=$(mktemp)
+    trap "rm -f '$tmp_file'" RETURN
     jq --arg key "$key" \
        --argjson val "$new_value" \
        --argjson cnt "$new_count" \

package/scripts/sw-prep.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
 # ─── Handle subcommands ───────────────────────────────────────────────────────
@@ -129,7 +129,7 @@ show_help() {
     echo -e "  ${DIM}.claude/hooks/*.sh${RESET}                   Pre/post action hooks"
     echo -e "  ${DIM}.github/ISSUE_TEMPLATE/agent-task.md${RESET} Agent task template"
     echo ""
-    echo -e "${DIM}Docs: https://sethdford.github.io/shipwright  |  GitHub: https://github.com/sethdford/shipwright${RESET}"
+    echo -e "${DIM}Docs: $(_sw_docs_url)  |  GitHub: $(_sw_github_url)${RESET}"
 }
 
 # ─── CLI Argument Parsing ───────────────────────────────────────────────────
@@ -828,6 +828,7 @@ prep_learn_patterns() {
     # Write patterns file atomically
     local tmp_patterns
     tmp_patterns=$(mktemp)
+    trap "rm -f '$tmp_patterns'" RETURN
     jq -n \
         --arg ts "$(date -u +"%Y-%m-%dT%H:%M:%SZ")" \
         --arg lang "${LANG_DETECTED:-}" \

package/scripts/sw-ps.sh

@@ -5,7 +5,7 @@
 # ║  Displays a table of agents running in claude-* tmux windows with       ║
 # ║  PID, status, idle time, and pane references.                           ║
 # ╚═══════════════════════════════════════════════════════════════════════════╝
-VERSION="2.2.1"
+VERSION="2.3.0"
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 

package/scripts/sw-public-dashboard.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.2.1"
+VERSION="2.3.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -323,7 +323,7 @@ generate_html() {
         </div>
 
         <div class="footer">
-            <p>Generated by <a href="https://github.com/sethdford/shipwright">Shipwright</a> v1.13.0</p>
+            <p>Generated by <a href="GITHUB_URL_PLACEHOLDER">Shipwright</a> v1.13.0</p>
             <p style="margin-top: 8px; color: #555;">Dashboard auto-refreshes every 30s when served from dashboard server</p>
             <p style="margin-top: 8px;" id="footer-timestamp">Generated: —</p>
         </div>
@@ -384,7 +384,12 @@ generate_html() {
                         const newDoc = parser.parseFromString(html, 'text/html');
                         const newScript = newDoc.querySelector('script');
                         if (newScript) {
-                            eval(newScript.textContent);
+                            // Use DOM script insertion instead of eval: script comes from same-origin
+                            // fetch of this page; DOM insertion executes in global scope without eval
+                            const s = document.createElement('script');
+                            s.textContent = newScript.textContent;
+                            document.body.appendChild(s);
+                            s.remove();
                             renderDashboard();
                         }
                     })
@@ -417,6 +422,7 @@ cmd_export() {
     html="${html//TITLE_PLACEHOLDER/$title}"
     html="${html//PRIVACY_PLACEHOLDER/$privacy}"
     html="${html//\{DATA_PLACEHOLDER\}/$state_data}"
+    html="${html//GITHUB_URL_PLACEHOLDER/$(_sw_github_url)}"
 
     # Atomic write
     local tmp_file
@@ -736,7 +742,7 @@ ${BOLD}SHARE LINKS${RESET}
   Share links require a running dashboard server to serve the public endpoint.
   By default, requires dashboard to serve at: https://your-domain.com/public-dashboard/<token>
 
-${DIM}Docs: https://sethdford.github.io/shipwright${RESET}
+${DIM}Docs: $(_sw_docs_url)${RESET}
 EOF
 }