shipwright-cli 2.3.1 → 3.0.0

package/scripts/sw-ux.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.3.1"
+VERSION="3.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
 # ─── Cross-platform compatibility ──────────────────────────────────────────
@@ -26,24 +26,6 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Structured Event Log ──────────────────────────────────────────────────
 EVENTS_FILE="${HOME}/.shipwright/events.jsonl"
 

package/scripts/sw-webhook.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.3.1"
+VERSION="3.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
 # ─── Cross-platform compatibility ──────────────────────────────────────────
@@ -16,6 +16,7 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # Canonical helpers (colors, output, events)
 # shellcheck source=lib/helpers.sh
 [[ -f "$SCRIPT_DIR/lib/helpers.sh" ]] && source "$SCRIPT_DIR/lib/helpers.sh"
+[[ -f "$SCRIPT_DIR/lib/config.sh" ]] && source "$SCRIPT_DIR/lib/config.sh"
 # Fallbacks when helpers not loaded (e.g. test env with overridden SCRIPT_DIR)
 [[ "$(type -t info 2>/dev/null)" == "function" ]]    || info()    { echo -e "\033[38;2;0;212;255m\033[1m▸\033[0m $*"; }
 [[ "$(type -t success 2>/dev/null)" == "function" ]] || success() { echo -e "\033[38;2;74;222;128m\033[1m✓\033[0m $*"; }
@@ -25,29 +26,11 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Constants ──────────────────────────────────────────────────────────────
 SHIPWRIGHT_DIR="$HOME/.shipwright"
 WEBHOOK_SECRET_FILE="$SHIPWRIGHT_DIR/webhook-secret"
 WEBHOOK_EVENTS_FILE="$SHIPWRIGHT_DIR/webhook-events.jsonl"
-WEBHOOK_PORT="${WEBHOOK_PORT:-8765}"
+WEBHOOK_PORT="${WEBHOOK_PORT:-$(_config_get_int "webhook.port" 8765 2>/dev/null || echo 8765)}"
 WEBHOOK_PID_FILE="$SHIPWRIGHT_DIR/webhook.pid"
 WEBHOOK_LOG="$SHIPWRIGHT_DIR/webhook.log"
 
@@ -141,7 +124,7 @@ process_webhook_event() {
 
 # Check if nc (netcat) is available
 check_nc() {
-    if ! command -v nc &>/dev/null; then
+    if ! command -v nc >/dev/null 2>&1; then
         error "netcat (nc) is required but not installed"
         echo -e "  ${DIM}brew install netcat${RESET}  (macOS)"
         echo -e "  ${DIM}sudo apt install netcat-openbsd${RESET}  (Ubuntu/Debian)"
@@ -254,17 +237,20 @@ webhook_server_bash() {
                 local method path protocol
                 read -r method path protocol <<< "$request_line"
 
-                # Read headers until blank line
-                local -A headers
+                # Read headers until blank line (Bash 3.2 compatible — no associative arrays)
                 local header_line content_length=0
+                local hdr_signature="" hdr_event_type=""
                 while read -r -u 3 -t 0.1 header_line; do
                     [[ -z "$header_line" || "$header_line" == $'\r' ]] && break
                     local key="${header_line%%:*}"
                     local value="${header_line#*:}"
                     value="${value#[[:space:]]}"
                     value="${value%$'\r'}"
-                    headers["$key"]="$value"
-                    [[ "${key,,}" == "content-length" ]] && content_length="$value"
+                    local key_lower
+                    key_lower=$(printf '%s' "$key" | tr '[:upper:]' '[:lower:]')
+                    [[ "$key_lower" == "content-length" ]] && content_length="$value"
+                    [[ "$key_lower" == "x-hub-signature-256" ]] && hdr_signature="$value"
+                    [[ "$key_lower" == "x-github-event" ]] && hdr_event_type="$value"
                 done 2>/dev/null || true
 
                 # Read body if content-length > 0
@@ -275,8 +261,8 @@ webhook_server_bash() {
 
                 # Process webhook if method is POST
                 if [[ "$method" == "POST" && "$path" == "/webhook" ]]; then
-                    local signature="${headers[X-Hub-Signature-256]:-}"
-                    local event_type="${headers[X-Github-Event]:-}"
+                    local signature="$hdr_signature"
+                    local event_type="$hdr_event_type"
 
                     if validate_webhook_signature "$body" "$signature"; then
                         if process_webhook_event "$body" "$event_type"; then
@@ -331,7 +317,7 @@ cmd_setup() {
     info "Webhook endpoint: http://localhost:${WEBHOOK_PORT}/webhook"
 
     # Check if gh CLI is available
-    if ! command -v gh &>/dev/null; then
+    if ! command -v gh >/dev/null 2>&1; then
         error "GitHub CLI (gh) is required but not installed"
         return 1
     fi
@@ -345,7 +331,7 @@ cmd_setup() {
         -f "url=http://localhost:${WEBHOOK_PORT}/webhook" \
         -F "events=issues" \
         -f "config[content_type]=json" \
-        -f "config[secret]=${secret}" 2>&1); then
+        -f "config[secret]=${secret}" --timeout 30 2>&1); then
 
         local hook_id
         hook_id=$(echo "$webhook_response" | jq -r '.id // empty' 2>/dev/null || true)
@@ -403,7 +389,7 @@ cmd_test() {
         return 1
     fi
 
-    if ! command -v gh &>/dev/null; then
+    if ! command -v gh >/dev/null 2>&1; then
         error "GitHub CLI (gh) is required"
         return 1
     fi
@@ -440,7 +426,7 @@ cmd_test() {
     if gh api "repos/${org_repo}/hooks/tests" \
         -H "Accept: application/vnd.github+json" \
         -X POST \
-        2>&1 | grep -q "Test hook sent"; then
+        --timeout 30 2>&1 | grep -q "Test hook sent"; then
         success "Test ping sent to GitHub"
     else
         warn "Could not send test via GitHub API, but payload is valid:"
@@ -534,7 +520,7 @@ cmd_secret() {
             echo "$new_secret" > "$WEBHOOK_SECRET_FILE"
             chmod 600 "$WEBHOOK_SECRET_FILE"
             success "Webhook secret regenerated"
-            info "New secret: ${new_secret}"
+            info "Secret: ${new_secret:0:8}... (full value in ${WEBHOOK_SECRET_FILE})"
             ;;
         *)
             error "Unknown secret action: $action"

package/scripts/sw-widgets.sh

@@ -8,7 +8,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.3.1"
+VERSION="3.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -29,24 +29,6 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Configuration ─────────────────────────────────────────────────────────
 CONFIG_DIR="${HOME}/.shipwright"
 CONFIG_FILE="${CONFIG_DIR}/widgets-config.json"
@@ -301,8 +283,8 @@ cmd_slack() {
     )
 
     # Send to webhook
-    if command -v curl &>/dev/null; then
-        response=$(curl -s -X POST "$webhook_url" \
+    if command -v curl >/dev/null 2>&1; then
+        response=$(curl -s --connect-timeout 10 --max-time 30 -X POST "$webhook_url" \
             -H 'Content-Type: application/json' \
             -d "$message_json" 2>&1)
 

package/scripts/sw-worktree.sh

@@ -5,7 +5,7 @@
 # ║  Each agent gets its own worktree so parallel agents don't clobber       ║
 # ║  each other's files. Worktrees live in .worktrees/ relative to root.    ║
 # ╚═══════════════════════════════════════════════════════════════════════════╝
-VERSION="2.3.1"
+VERSION="3.0.0"
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
@@ -23,24 +23,6 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Repo root ─────────────────────────────────────────────────────────────
 REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || {
     error "Not inside a git repository."
@@ -122,7 +104,7 @@ worktree_list() {
 
         printf "  ${CYAN}%-16s${RESET} ${PURPLE}%-22s${RESET} %b  ${DIM}.worktrees/%s/${RESET}\n" \
             "$name" "$branch" "$status_str" "$name"
-        ((found++))
+        found=$((found + 1))
     done
 
     if [[ $found -eq 0 ]]; then
@@ -167,8 +149,8 @@ worktree_sync_all() {
         [[ -d "$dir" ]] || continue
         local name
         name="$(basename "$dir")"
-        worktree_sync "$name" || ((failed++))
-        ((count++))
+        worktree_sync "$name" || failed=$((failed + 1))
+        count=$((count + 1))
     done
 
     echo ""
@@ -185,7 +167,7 @@ worktree_merge() {
     local current_branch
     current_branch="$(git branch --show-current)"
 
-    if ! git rev-parse --verify "$branch" &>/dev/null; then
+    if ! git rev-parse --verify "$branch" >/dev/null 2>&1; then
         error "Branch '$branch' does not exist."
         return 1
     fi
@@ -219,7 +201,7 @@ worktree_merge_all() {
             echo -e "  ${DIM}Resolve the conflict, then re-run: shipwright worktree merge-all${RESET}"
             return 1
         }
-        ((count++))
+        count=$((count + 1))
     done
 
     echo ""
@@ -234,7 +216,9 @@ worktree_remove() {
     if [[ -d "$worktree_path" ]]; then
         git worktree remove "$worktree_path" --force 2>/dev/null || {
             warn "Could not cleanly remove worktree $name, forcing..."
-            rm -rf "$worktree_path"
+            if [[ -n "$worktree_path" && "$worktree_path" == "$WORKTREE_DIR/"* ]]; then
+                rm -rf "$worktree_path"
+            fi
             git worktree prune 2>/dev/null || true
         }
     fi
@@ -257,7 +241,7 @@ worktree_cleanup() {
         local name
         name="$(basename "$dir")"
         worktree_remove "$name"
-        ((count++))
+        count=$((count + 1))
     done
 
     # Prune stale worktree references
@@ -302,7 +286,7 @@ worktree_status() {
 
         printf "  ${CYAN}%-16s${RESET} ${PURPLE}%-22s${RESET} ${GREEN}%s ahead${RESET}, ${YELLOW}%s behind${RESET}%b\n" \
             "$name" "$branch" "$ahead" "$behind" "$dirty"
-        ((found++))
+        found=$((found + 1))
     done
 
     if [[ $found -eq 0 ]]; then

package/scripts/update-homebrew-sha.sh

@@ -0,0 +1,67 @@
+#!/usr/bin/env bash
+# Updates homebrew/shipwright.rb with SHA256 hashes from the release artifacts.
+# Downloads each tarball, computes SHA256, and updates the formula in-place.
+#
+# Usage: scripts/update-homebrew-sha.sh <version-tag>
+#   Example: scripts/update-homebrew-sha.sh v0.4.2
+#
+# Run after release artifacts are uploaded to GitHub Releases.
+set -euo pipefail
+
+VERSION="3.0.0"
+VERSION_NUM="${VERSION#v}"
+REPO="${SHIPWRIGHT_GITHUB_REPO:-sethdford/shipwright}"
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+FORMULA="${REPO_ROOT}/homebrew/shipwright.rb"
+BASE_URL="https://github.com/${REPO}/releases/download/${VERSION}"
+
+TMPDIR="${TMPDIR:-/tmp}/shipwright-sha-$$"
+mkdir -p "$TMPDIR"
+trap 'rm -rf "$TMPDIR"' EXIT
+
+# Download each artifact and compute SHA256
+sha_darwin_arm64=""
+sha_darwin_x86_64=""
+sha_linux_x86_64=""
+
+for platform in darwin-arm64 darwin-x86_64 linux-x86_64; do
+  filename="shipwright-${platform}.tar.gz"
+  url="${BASE_URL}/${filename}"
+  dest="${TMPDIR}/${filename}"
+  echo "Downloading ${url}..."
+  if ! curl -sfL -o "$dest" "$url"; then
+    echo "ERROR: Failed to download $url" >&2
+    exit 1
+  fi
+  if command -v shasum >/dev/null 2>&1; then
+    sha=$(shasum -a 256 "$dest" | awk '{print $1}')
+  else
+    sha=$(sha256sum "$dest" | awk '{print $1}')
+  fi
+  case "$platform" in
+    darwin-arm64)   sha_darwin_arm64="$sha" ;;
+    darwin-x86_64)  sha_darwin_x86_64="$sha" ;;
+    linux-x86_64)   sha_linux_x86_64="$sha" ;;
+  esac
+  echo "  ${platform}: ${sha}"
+done
+
+# Update formula: version and SHA256 values
+# sed -i '' on macOS, sed -i on Linux
+if [[ "$(uname -s)" == "Darwin" ]]; then
+  sed -i '' "s|version \"[^\"]*\"|version \"${VERSION_NUM}\"|g" "$FORMULA"
+  sed -i '' "s|sha256 \"PLACEHOLDER_DARWIN_ARM64_SHA256\"|sha256 \"${sha_darwin_arm64}\"|g" "$FORMULA"
+  sed -i '' "s|sha256 \"PLACEHOLDER_DARWIN_X86_64_SHA256\"|sha256 \"${sha_darwin_x86_64}\"|g" "$FORMULA"
+  sed -i '' "s|sha256 \"PLACEHOLDER_LINUX_X86_64_SHA256\"|sha256 \"${sha_linux_x86_64}\"|g" "$FORMULA"
+else
+  sed -i "s|version \"[^\"]*\"|version \"${VERSION_NUM}\"|g" "$FORMULA"
+  sed -i "s|sha256 \"PLACEHOLDER_DARWIN_ARM64_SHA256\"|sha256 \"${sha_darwin_arm64}\"|g" "$FORMULA"
+  sed -i "s|sha256 \"PLACEHOLDER_DARWIN_X86_64_SHA256\"|sha256 \"${sha_darwin_x86_64}\"|g" "$FORMULA"
+  sed -i "s|sha256 \"PLACEHOLDER_LINUX_X86_64_SHA256\"|sha256 \"${sha_linux_x86_64}\"|g" "$FORMULA"
+fi
+
+echo ""
+echo "Updated $FORMULA for v${VERSION_NUM}:"
+echo "  darwin-arm64:   ${sha_darwin_arm64}"
+echo "  darwin-x86_64:  ${sha_darwin_x86_64}"
+echo "  linux-x86_64:   ${sha_linux_x86_64}"

package/templates/pipelines/tdd.json

@@ -0,0 +1,72 @@
+{
+  "name": "tdd",
+  "description": "Test-first pipeline: plan → design → generate tests → build → test → review → PR",
+  "defaults": { "test_cmd": "npm test", "model": "sonnet", "agents": 1 },
+  "tdd": true,
+  "intelligence": {
+    "adversarial_enabled": true,
+    "architecture_enabled": true,
+    "simulation_enabled": true
+  },
+  "stages": [
+    { "id": "intake", "enabled": true, "gate": "auto", "config": {} },
+    {
+      "id": "plan",
+      "enabled": true,
+      "gate": "approve",
+      "config": { "model": "opus" }
+    },
+    {
+      "id": "design",
+      "enabled": true,
+      "gate": "approve",
+      "config": { "model": "opus" }
+    },
+    {
+      "id": "build",
+      "enabled": true,
+      "gate": "auto",
+      "config": { "max_iterations": 20, "audit": true, "quality_gates": true }
+    },
+    {
+      "id": "test",
+      "enabled": true,
+      "gate": "auto",
+      "config": { "coverage_min": 80 }
+    },
+    { "id": "review", "enabled": true, "gate": "approve", "config": {} },
+    {
+      "id": "compound_quality",
+      "enabled": true,
+      "gate": "auto",
+      "config": {
+        "adversarial": true,
+        "negative": true,
+        "e2e": true,
+        "dod_audit": true,
+        "max_cycles": 3,
+        "audit_intensity": "auto",
+        "compound_quality_blocking": true
+      }
+    },
+    {
+      "id": "pr",
+      "enabled": true,
+      "gate": "approve",
+      "config": { "wait_ci": false }
+    },
+    {
+      "id": "merge",
+      "enabled": true,
+      "gate": "approve",
+      "config": {
+        "merge_method": "squash",
+        "wait_ci_timeout_s": 600,
+        "auto_delete_branch": true,
+        "auto_merge": false,
+        "auto_approve": false
+      }
+    },
+    { "id": "deploy", "enabled": false, "gate": "approve", "config": {} }
+  ]
+}

package/scripts/sw-pipeline.sh.mock

@@ -1,7 +0,0 @@
-#!/usr/bin/env bash
-MOCK_LOG="${MOCK_PIPELINE_LOG:-/tmp/mock-pipeline.log}"
-echo "pipeline $*" >> "$MOCK_LOG"
-# Simulate quick pipeline run
-sleep 0.1
-echo "https://github.com/test/repo/pull/42"
-exit 0