shipwright-cli 2.4.0 → 3.0.0

package/scripts/sw-tracker.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.4.0"
+VERSION="3.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -17,6 +17,7 @@ REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 # Canonical helpers (colors, output, events)
 # shellcheck source=lib/helpers.sh
 [[ -f "$SCRIPT_DIR/lib/helpers.sh" ]] && source "$SCRIPT_DIR/lib/helpers.sh"
+[[ -f "$SCRIPT_DIR/lib/config.sh" ]] && source "$SCRIPT_DIR/lib/config.sh"
 # Fallbacks when helpers not loaded (e.g. test env with overridden SCRIPT_DIR)
 [[ "$(type -t info 2>/dev/null)" == "function" ]]    || info()    { echo -e "\033[38;2;0;212;255m\033[1m▸\033[0m $*"; }
 [[ "$(type -t success 2>/dev/null)" == "function" ]] || success() { echo -e "\033[38;2;74;222;128m\033[1m✓\033[0m $*"; }
@@ -26,24 +27,6 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Configuration ─────────────────────────────────────────────────────────
 CONFIG_DIR="${HOME}/.shipwright"
 TRACKER_CONFIG="${CONFIG_DIR}/tracker-config.json"
@@ -127,7 +110,7 @@ _dispatch_provider() {
     local provider_func="provider_${func}"
 
     # Provider scripts define provider_* functions
-    if type "$provider_func" &>/dev/null; then
+    if type "$provider_func" >/dev/null 2>&1; then
         "$provider_func" "$@"
         return $?
     else
@@ -137,7 +120,7 @@ _dispatch_provider() {
             # Try GitHub provider
             if [[ -f "$SCRIPT_DIR/sw-tracker-github.sh" ]]; then
                 source "$SCRIPT_DIR/sw-tracker-github.sh"
-                if type "$provider_func" &>/dev/null; then
+                if type "$provider_func" >/dev/null 2>&1; then
                     "$provider_func" "$@"
                     return $?
                 fi
@@ -221,7 +204,7 @@ tracker_notify() {
     fi
 
     # Provider scripts define provider_notify()
-    if type provider_notify &>/dev/null; then
+    if type provider_notify >/dev/null 2>&1; then
         provider_notify "$event" "$gh_issue" "$detail"
     else
         warn "Provider '$TRACKER_PROVIDER' loaded but provider_notify() not defined"
@@ -330,7 +313,7 @@ _init_linear() {
     local payload
     payload=$(jq -n --arg q 'query { viewer { id name } }' '{query: $q}')
     local response
-    response=$(curl -sf -X POST "https://api.linear.app/graphql" \
+    response=$(curl -sf --connect-timeout "$(_config_get_int "network.connect_timeout" 10)" --max-time "$(_config_get_int "network.max_time" 30)" -X POST "$(_config_get "urls.linear_api" "https://api.linear.app/graphql")" \
         -H "Authorization: $api_key" \
         -H "Content-Type: application/json" \
         -d "$payload" 2>&1) || {
@@ -405,7 +388,7 @@ _init_jira() {
     local auth
     auth=$(printf '%s:%s' "$email" "$api_token" | base64)
     local response
-    response=$(curl -sf -X GET "${base_url}/rest/api/3/myself" \
+    response=$(curl -sf --connect-timeout "$(_config_get_int "network.connect_timeout" 10)" --max-time "$(_config_get_int "network.max_time" 30)" -X GET "${base_url}/rest/api/3/myself" \
         -H "Authorization: Basic $auth" \
         -H "Content-Type: application/json" 2>&1) || {
         warn "Could not validate connection — check your credentials"

package/scripts/sw-triage.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.4.0"
+VERSION="3.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -16,7 +16,15 @@ REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 # Canonical helpers (colors, output, events)
 # shellcheck source=lib/helpers.sh
 [[ -f "$SCRIPT_DIR/lib/helpers.sh" ]] && source "$SCRIPT_DIR/lib/helpers.sh"
+[[ -f "$SCRIPT_DIR/lib/config.sh" ]] && source "$SCRIPT_DIR/lib/config.sh"
 # Fallbacks when helpers not loaded (e.g. test env with overridden SCRIPT_DIR)
+[[ -z "${CYAN:-}" ]]  && { [[ -z "${NO_COLOR:-}" ]] && CYAN='\033[38;2;0;212;255m'   || CYAN=''; } || true
+[[ -z "${RESET:-}" ]] && { [[ -z "${NO_COLOR:-}" ]] && RESET='\033[0m'               || RESET=''; } || true
+[[ -z "${BOLD:-}" ]]  && { [[ -z "${NO_COLOR:-}" ]] && BOLD='\033[1m'                || BOLD=''; } || true
+[[ -z "${DIM:-}" ]]   && { [[ -z "${NO_COLOR:-}" ]] && DIM='\033[2m'                 || DIM=''; } || true
+[[ -z "${GREEN:-}" ]] && { [[ -z "${NO_COLOR:-}" ]] && GREEN='\033[38;2;74;222;128m' || GREEN=''; } || true
+[[ -z "${RED:-}" ]]   && { [[ -z "${NO_COLOR:-}" ]] && RED='\033[38;2;248;113;113m'  || RED=''; } || true
+[[ -z "${YELLOW:-}" ]] && { [[ -z "${NO_COLOR:-}" ]] && YELLOW='\033[38;2;250;204;21m' || YELLOW=''; } || true
 [[ "$(type -t info 2>/dev/null)" == "function" ]]    || info()    { echo -e "\033[38;2;0;212;255m\033[1m▸\033[0m $*"; }
 [[ "$(type -t success 2>/dev/null)" == "function" ]] || success() { echo -e "\033[38;2;74;222;128m\033[1m✓\033[0m $*"; }
 [[ "$(type -t warn 2>/dev/null)" == "function" ]]    || warn()    { echo -e "\033[38;2;250;204;21m\033[1m⚠\033[0m $*"; }
@@ -25,24 +33,6 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── GitHub API (safe when NO_GITHUB set) ──────────────────────────────────
 
 check_gh() {
@@ -50,7 +40,7 @@ check_gh() {
         error "GitHub access disabled (NO_GITHUB=1)"
         exit 1
     fi
-    if ! command -v gh &>/dev/null; then
+    if ! command -v gh >/dev/null 2>&1; then
         error "gh CLI not found. Install: https://cli.github.com"
         exit 1
     fi
@@ -178,7 +168,7 @@ analyze_with_ai() {
     if [[ ! -f "${SCRIPT_DIR}/sw-intelligence.sh" ]]; then
         return 1
     fi
-    if ! command -v claude &>/dev/null; then
+    if ! command -v claude >/dev/null 2>&1; then
         return 1
     fi
 
@@ -210,7 +200,7 @@ Return JSON with exactly these fields:
     local result
     result=$(_intelligence_call_claude "$prompt" "$cache_key" 2>/dev/null) || true
 
-    if [[ -z "$result" ]] || echo "$result" | jq -e '.' &>/dev/null; then
+    if [[ -z "$result" ]] || echo "$result" | jq -e '.' >/dev/null 2>&1; then
         :  # result is empty or valid JSON
     else
         return 1
@@ -225,7 +215,7 @@ Return JSON with exactly these fields:
     labels_val=$(echo "$result" | jq -r '.labels // []' 2>/dev/null)
 
     # Reject if we got an error object
-    if echo "$result" | jq -e '.error' &>/dev/null; then
+    if echo "$result" | jq -e '.error' >/dev/null 2>&1; then
         return 1
     fi
 
@@ -445,8 +435,8 @@ cmd_label() {
     labels_str=$(echo "$analysis" | jq -r '.suggested_labels | join(" ")')
 
     # Apply labels via gh CLI
-    local label_array
-    mapfile -t label_array <<< "$(echo "$labels_str" | tr ' ' '\n')"
+    local label_array=()
+    while IFS= read -r _l; do [[ -n "$_l" ]] && label_array+=("$_l"); done <<< "$(echo "$labels_str" | tr ' ' '\n')"
 
     for label in "${label_array[@]}"; do
         [[ -z "$label" ]] && continue
@@ -469,7 +459,7 @@ cmd_prioritize() {
 
     # Fetch all open issues
     local issues_json
-    issues_json=$(gh issue list --state open --json number,title,body,labels,createdAt,reactions --limit 100 2>/dev/null || echo "[]")
+    issues_json=$(gh issue list --state open --json number,title,body,labels,createdAt,reactions --limit "$(_config_get_int "limits.triage_issues" 100)" 2>/dev/null || echo "[]")
 
     local issue_count
     issue_count=$(echo "$issues_json" | jq 'length')
@@ -540,13 +530,13 @@ cmd_prioritize() {
     echo -e "${BOLD}Prioritized Backlog${RESET}"
     echo "─────────────────────────────────────────────────────────────────"
     echo ""
-    echo "$output_json" | jq -r '.[] | "\(.number | tostring | @json) \(.score | tostring): \(.title) [type:\(.type) complexity:\(.complexity) risk:\(.risk)]"' | while IFS= read -r line; do
+    echo "$output_json" | jq -r '.[] | "#\(.number) \(.score): \(.title) [type:\(.type) complexity:\(.complexity) risk:\(.risk)]"' | while IFS= read -r line; do
         local number score rest
-        number=$(echo "$line" | jq -r 'split(" ")[0]' <<< "$line")
-        score=$(echo "$line" | cut -d: -f2 | cut -d' ' -f1)
+        number=$(echo "$line" | cut -d' ' -f1)
+        score=$(echo "$line" | cut -d' ' -f2 | tr -d ':')
         rest=$(echo "$line" | cut -d' ' -f3-)
 
-        echo -e "  ${CYAN}#${number}${RESET} ${BOLD}${score}${RESET}  ${rest}"
+        echo -e "  ${CYAN}${number}${RESET} ${BOLD}${score}${RESET}  ${rest}"
     done
 
     echo ""
@@ -565,7 +555,7 @@ cmd_team() {
 
     # Determine if GitHub is available (don't exit — allow offline fallback)
     local gh_available=false
-    if [[ "${NO_GITHUB:-}" != "1" ]] && command -v gh &>/dev/null; then
+    if [[ "${NO_GITHUB:-}" != "1" ]] && command -v gh >/dev/null 2>&1; then
         gh_available=true
     fi
 
@@ -595,7 +585,7 @@ cmd_team() {
 
         local recruit_result
         recruit_result=$(bash "$SCRIPT_DIR/sw-recruit.sh" team --json "$issue_title" 2>/dev/null) || true
-        if [[ -n "$recruit_result" ]] && echo "$recruit_result" | jq -e '.team' &>/dev/null 2>&1; then
+        if [[ -n "$recruit_result" ]] && echo "$recruit_result" | jq -e '.team' >/dev/null 2>&1; then
             model=$(echo "$recruit_result" | jq -r '.model // "sonnet"')
             agents=$(echo "$recruit_result" | jq -r '.agents // 2')
             template=$(echo "$recruit_result" | jq -r '.template // ""')
@@ -675,7 +665,7 @@ cmd_batch() {
 
     # Fetch unlabeled open issues
     local issues_json
-    issues_json=$(gh issue list --state open --search "no:label" --json number --limit 50 2>/dev/null || echo "[]")
+    issues_json=$(gh issue list --state open --search "no:label" --json number --limit "$(_config_get_int "limits.triage_unlabeled" 50)" 2>/dev/null || echo "[]")
 
     local issue_count
     issue_count=$(echo "$issues_json" | jq 'length')
@@ -701,7 +691,7 @@ cmd_report() {
 
     # Fetch labeled issues
     local issues_json
-    issues_json=$(gh issue list --state open --json labels,title,number --limit 100 2>/dev/null || echo "[]")
+    issues_json=$(gh issue list --state open --json labels,title,number --limit "$(_config_get_int "limits.triage_issues" 100)" 2>/dev/null || echo "[]")
 
     local type_counts complexity_counts priority_counts
     type_counts='{}'

package/scripts/sw-upgrade.sh

@@ -2,7 +2,7 @@
 # ╔═══════════════════════════════════════════════════════════════════════════╗
 # ║  sw upgrade — Detect and apply updates from the repo                   ║
 # ╚═══════════════════════════════════════════════════════════════════════════╝
-VERSION="2.4.0"
+VERSION="3.0.0"
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
@@ -25,24 +25,6 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Parse flags ───────────────────────────────────────────────────────────
 APPLY=false
 REPO_OVERRIDE=""
@@ -70,8 +52,8 @@ find_repo() {
     fi
 
     # 2. Environment variable
-    if [[ -n "${CCT_REPO_PATH:-}" ]]; then
-        echo "$CCT_REPO_PATH"
+    if [[ -n "${SHIPWRIGHT_REPO_PATH:-}" ]]; then
+        echo "$SHIPWRIGHT_REPO_PATH"
         return
     fi
 
@@ -102,7 +84,7 @@ REPO_PATH="$(find_repo)" || {
     error "Cannot locate the Shipwright repo."
     echo ""
     echo -e "  Try one of:"
-    echo -e "    ${DIM}export CCT_REPO_PATH=/path/to/shipwright${RESET}"
+    echo -e "    ${DIM}export SHIPWRIGHT_REPO_PATH=/path/to/shipwright${RESET}"
     echo -e "    ${DIM}shipwright upgrade --repo-path /path/to/shipwright${RESET}"
     exit 1
 }
@@ -277,7 +259,7 @@ bootstrap_manifest() {
         IFS='|' read -r key _ dest _ _ <<< "$entry"
         if [[ -f "$dest" ]]; then
             echo -e "  ${GREEN}✓${RESET} ${DIM}$key${RESET}  →  $dest"
-            ((found++))
+            found=$((found + 1))
         fi
     done
 

package/scripts/sw-ux.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.4.0"
+VERSION="3.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
 # ─── Cross-platform compatibility ──────────────────────────────────────────
@@ -26,24 +26,6 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Structured Event Log ──────────────────────────────────────────────────
 EVENTS_FILE="${HOME}/.shipwright/events.jsonl"
 

package/scripts/sw-webhook.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.4.0"
+VERSION="3.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
 # ─── Cross-platform compatibility ──────────────────────────────────────────
@@ -16,6 +16,7 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # Canonical helpers (colors, output, events)
 # shellcheck source=lib/helpers.sh
 [[ -f "$SCRIPT_DIR/lib/helpers.sh" ]] && source "$SCRIPT_DIR/lib/helpers.sh"
+[[ -f "$SCRIPT_DIR/lib/config.sh" ]] && source "$SCRIPT_DIR/lib/config.sh"
 # Fallbacks when helpers not loaded (e.g. test env with overridden SCRIPT_DIR)
 [[ "$(type -t info 2>/dev/null)" == "function" ]]    || info()    { echo -e "\033[38;2;0;212;255m\033[1m▸\033[0m $*"; }
 [[ "$(type -t success 2>/dev/null)" == "function" ]] || success() { echo -e "\033[38;2;74;222;128m\033[1m✓\033[0m $*"; }
@@ -25,29 +26,11 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Constants ──────────────────────────────────────────────────────────────
 SHIPWRIGHT_DIR="$HOME/.shipwright"
 WEBHOOK_SECRET_FILE="$SHIPWRIGHT_DIR/webhook-secret"
 WEBHOOK_EVENTS_FILE="$SHIPWRIGHT_DIR/webhook-events.jsonl"
-WEBHOOK_PORT="${WEBHOOK_PORT:-8765}"
+WEBHOOK_PORT="${WEBHOOK_PORT:-$(_config_get_int "webhook.port" 8765 2>/dev/null || echo 8765)}"
 WEBHOOK_PID_FILE="$SHIPWRIGHT_DIR/webhook.pid"
 WEBHOOK_LOG="$SHIPWRIGHT_DIR/webhook.log"
 
@@ -141,7 +124,7 @@ process_webhook_event() {
 
 # Check if nc (netcat) is available
 check_nc() {
-    if ! command -v nc &>/dev/null; then
+    if ! command -v nc >/dev/null 2>&1; then
         error "netcat (nc) is required but not installed"
         echo -e "  ${DIM}brew install netcat${RESET}  (macOS)"
         echo -e "  ${DIM}sudo apt install netcat-openbsd${RESET}  (Ubuntu/Debian)"
@@ -254,17 +237,20 @@ webhook_server_bash() {
                 local method path protocol
                 read -r method path protocol <<< "$request_line"
 
-                # Read headers until blank line
-                local -A headers
+                # Read headers until blank line (Bash 3.2 compatible — no associative arrays)
                 local header_line content_length=0
+                local hdr_signature="" hdr_event_type=""
                 while read -r -u 3 -t 0.1 header_line; do
                     [[ -z "$header_line" || "$header_line" == $'\r' ]] && break
                     local key="${header_line%%:*}"
                     local value="${header_line#*:}"
                     value="${value#[[:space:]]}"
                     value="${value%$'\r'}"
-                    headers["$key"]="$value"
-                    [[ "${key,,}" == "content-length" ]] && content_length="$value"
+                    local key_lower
+                    key_lower=$(printf '%s' "$key" | tr '[:upper:]' '[:lower:]')
+                    [[ "$key_lower" == "content-length" ]] && content_length="$value"
+                    [[ "$key_lower" == "x-hub-signature-256" ]] && hdr_signature="$value"
+                    [[ "$key_lower" == "x-github-event" ]] && hdr_event_type="$value"
                 done 2>/dev/null || true
 
                 # Read body if content-length > 0
@@ -275,8 +261,8 @@ webhook_server_bash() {
 
                 # Process webhook if method is POST
                 if [[ "$method" == "POST" && "$path" == "/webhook" ]]; then
-                    local signature="${headers[X-Hub-Signature-256]:-}"
-                    local event_type="${headers[X-Github-Event]:-}"
+                    local signature="$hdr_signature"
+                    local event_type="$hdr_event_type"
 
                     if validate_webhook_signature "$body" "$signature"; then
                         if process_webhook_event "$body" "$event_type"; then
@@ -331,7 +317,7 @@ cmd_setup() {
     info "Webhook endpoint: http://localhost:${WEBHOOK_PORT}/webhook"
 
     # Check if gh CLI is available
-    if ! command -v gh &>/dev/null; then
+    if ! command -v gh >/dev/null 2>&1; then
         error "GitHub CLI (gh) is required but not installed"
         return 1
     fi
@@ -345,7 +331,7 @@ cmd_setup() {
         -f "url=http://localhost:${WEBHOOK_PORT}/webhook" \
         -F "events=issues" \
         -f "config[content_type]=json" \
-        -f "config[secret]=${secret}" 2>&1); then
+        -f "config[secret]=${secret}" --timeout 30 2>&1); then
 
         local hook_id
         hook_id=$(echo "$webhook_response" | jq -r '.id // empty' 2>/dev/null || true)
@@ -403,7 +389,7 @@ cmd_test() {
         return 1
     fi
 
-    if ! command -v gh &>/dev/null; then
+    if ! command -v gh >/dev/null 2>&1; then
         error "GitHub CLI (gh) is required"
         return 1
     fi
@@ -440,7 +426,7 @@ cmd_test() {
     if gh api "repos/${org_repo}/hooks/tests" \
         -H "Accept: application/vnd.github+json" \
         -X POST \
-        2>&1 | grep -q "Test hook sent"; then
+        --timeout 30 2>&1 | grep -q "Test hook sent"; then
         success "Test ping sent to GitHub"
     else
         warn "Could not send test via GitHub API, but payload is valid:"
@@ -534,7 +520,7 @@ cmd_secret() {
             echo "$new_secret" > "$WEBHOOK_SECRET_FILE"
             chmod 600 "$WEBHOOK_SECRET_FILE"
             success "Webhook secret regenerated"
-            info "New secret: ${new_secret}"
+            info "Secret: ${new_secret:0:8}... (full value in ${WEBHOOK_SECRET_FILE})"
             ;;
         *)
             error "Unknown secret action: $action"

package/scripts/sw-widgets.sh

@@ -8,7 +8,7 @@
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
-VERSION="2.4.0"
+VERSION="3.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
@@ -29,24 +29,6 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Configuration ─────────────────────────────────────────────────────────
 CONFIG_DIR="${HOME}/.shipwright"
 CONFIG_FILE="${CONFIG_DIR}/widgets-config.json"
@@ -301,8 +283,8 @@ cmd_slack() {
     )
 
     # Send to webhook
-    if command -v curl &>/dev/null; then
-        response=$(curl -s -X POST "$webhook_url" \
+    if command -v curl >/dev/null 2>&1; then
+        response=$(curl -s --connect-timeout 10 --max-time 30 -X POST "$webhook_url" \
             -H 'Content-Type: application/json' \
             -d "$message_json" 2>&1)
 

package/scripts/sw-worktree.sh

@@ -5,7 +5,7 @@
 # ║  Each agent gets its own worktree so parallel agents don't clobber       ║
 # ║  each other's files. Worktrees live in .worktrees/ relative to root.    ║
 # ╚═══════════════════════════════════════════════════════════════════════════╝
-VERSION="2.4.0"
+VERSION="3.0.0"
 set -euo pipefail
 trap 'echo "ERROR: $BASH_SOURCE:$LINENO exited with status $?" >&2' ERR
 
@@ -23,24 +23,6 @@ if [[ "$(type -t now_iso 2>/dev/null)" != "function" ]]; then
   now_iso()   { date -u +"%Y-%m-%dT%H:%M:%SZ"; }
   now_epoch() { date +%s; }
 fi
-if [[ "$(type -t emit_event 2>/dev/null)" != "function" ]]; then
-  emit_event() {
-    local event_type="$1"; shift; mkdir -p "${HOME}/.shipwright"
-    local payload="{\"ts\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"type\":\"$event_type\""
-    while [[ $# -gt 0 ]]; do local key="${1%%=*}" val="${1#*=}"; payload="${payload},\"${key}\":\"${val}\""; shift; done
-    echo "${payload}}" >> "${HOME}/.shipwright/events.jsonl"
-  }
-fi
-CYAN="${CYAN:-\033[38;2;0;212;255m}"
-PURPLE="${PURPLE:-\033[38;2;124;58;237m}"
-BLUE="${BLUE:-\033[38;2;0;102;255m}"
-GREEN="${GREEN:-\033[38;2;74;222;128m}"
-YELLOW="${YELLOW:-\033[38;2;250;204;21m}"
-RED="${RED:-\033[38;2;248;113;113m}"
-DIM="${DIM:-\033[2m}"
-BOLD="${BOLD:-\033[1m}"
-RESET="${RESET:-\033[0m}"
-
 # ─── Repo root ─────────────────────────────────────────────────────────────
 REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || {
     error "Not inside a git repository."
@@ -122,7 +104,7 @@ worktree_list() {
 
         printf "  ${CYAN}%-16s${RESET} ${PURPLE}%-22s${RESET} %b  ${DIM}.worktrees/%s/${RESET}\n" \
             "$name" "$branch" "$status_str" "$name"
-        ((found++))
+        found=$((found + 1))
     done
 
     if [[ $found -eq 0 ]]; then
@@ -167,8 +149,8 @@ worktree_sync_all() {
         [[ -d "$dir" ]] || continue
         local name
         name="$(basename "$dir")"
-        worktree_sync "$name" || ((failed++))
-        ((count++))
+        worktree_sync "$name" || failed=$((failed + 1))
+        count=$((count + 1))
     done
 
     echo ""
@@ -185,7 +167,7 @@ worktree_merge() {
     local current_branch
     current_branch="$(git branch --show-current)"
 
-    if ! git rev-parse --verify "$branch" &>/dev/null; then
+    if ! git rev-parse --verify "$branch" >/dev/null 2>&1; then
         error "Branch '$branch' does not exist."
         return 1
     fi
@@ -219,7 +201,7 @@ worktree_merge_all() {
             echo -e "  ${DIM}Resolve the conflict, then re-run: shipwright worktree merge-all${RESET}"
             return 1
         }
-        ((count++))
+        count=$((count + 1))
     done
 
     echo ""
@@ -234,7 +216,9 @@ worktree_remove() {
     if [[ -d "$worktree_path" ]]; then
         git worktree remove "$worktree_path" --force 2>/dev/null || {
             warn "Could not cleanly remove worktree $name, forcing..."
-            rm -rf "$worktree_path"
+            if [[ -n "$worktree_path" && "$worktree_path" == "$WORKTREE_DIR/"* ]]; then
+                rm -rf "$worktree_path"
+            fi
             git worktree prune 2>/dev/null || true
         }
     fi
@@ -257,7 +241,7 @@ worktree_cleanup() {
         local name
         name="$(basename "$dir")"
         worktree_remove "$name"
-        ((count++))
+        count=$((count + 1))
     done
 
     # Prune stale worktree references
@@ -302,7 +286,7 @@ worktree_status() {
 
         printf "  ${CYAN}%-16s${RESET} ${PURPLE}%-22s${RESET} ${GREEN}%s ahead${RESET}, ${YELLOW}%s behind${RESET}%b\n" \
             "$name" "$branch" "$ahead" "$behind" "$dirty"
-        ((found++))
+        found=$((found + 1))
     done
 
     if [[ $found -eq 0 ]]; then