GitHub Showcase Commands or API

GitHub Showcase: Commands Or API

CW exposes the same runtime through CLI commands and MCP tools. Use --json or --format json when scripting a CLI command.

Use cw help for the built-in help text. The CLI does not currently implement a top-level cw --help flag.

Entry Points

npx cool-workflow <command>
cw <command>
node plugins/cool-workflow/scripts/cw.js <command>

First-Run Commands

Command	Purpose
cw demo tamper	Hermetic tamper-evidence proof.
cw quickstart architecture-review --repo PATH --question TEXT --agent-command builtin:claude	Plan, drive, verify, and report a repo review.
cw quickstart architecture-review --repo PATH --question TEXT --preview	Read-only projection of the next action.
cw quickstart architecture-review --repo PATH --question TEXT --resume	Advance one step and print a continue line.

The audit-run token is a CLI-only alias for quickstart.

Remote Sources

Review a project from any directory, or a remote repository by URL. Cloning happens in the capability layer (before plan), so the deterministic core only ever sees a local path; every materialization fails closed (bad URL, blocked scheme, network, or auth → an explicit error, never a fabricated run).

Command	Purpose
cw -q "…" -dir PATH	Review a local folder from any directory (alias for --repo; -d/--dir equivalent).
cw -q "…" --link <git-url>	Clone a remote git repo (GitHub/GitLab/Bitbucket/ssh:///git@host:/file://) and review the checkout. -l/a URL in -dir/--repo are equivalent.
cw -q "…" --link <archive-url>	Download + extract a .tar.gz/.tgz/.tar/.zip (e.g. a GitHub "Download ZIP"), snapshot it into a local repo, and review.
cw -q "…" --link <url> --ref <branch|tag>	Pick a branch/tag to clone.
cw -q "…" --link <url> --refresh	Re-fetch instead of reusing the cached checkout.
cw -q "…" --link <url> --check	Validate the URL + tooling WITHOUT fetching.
cw clones list	List cached remote checkouts (origin URL, kind, commit, age, bytes).
cw clones gc [--older-than-days N]	Reclaim cached checkouts older than N days (default 30).
cw clones gc --all	Reclaim every cached checkout.

The review report records Source: <url>@<commit> and a tamper-evident source.clone/source.download trust-audit event re-provable with cw audit verify. Credentials in a URL are stripped before anything is cached, printed, or recorded. The cache lives under ~/.local/state/cool-workflow/clones/ (honors CW_HOME/XDG_STATE_HOME).

App Commands

Command	Purpose
cw app list	List workflow apps.
cw app show <app-id>	Show app metadata, inputs, phases, and task counts.
cw app validate <app-id>	Validate an app manifest and workflow.
cw plan <app-id> --repo PATH ...	Create a run without driving all workers.

Shipping apps include architecture-review, architecture-review-fast, pr-review-fix-ci, release-cut, research-synthesis, and workflow-app-framework-demo.

See Workflow Apps for when to use each one.

Run Commands

Command	Purpose
cw status <run-id>	Show current run status.
cw graph <run-id>	Inspect run graph.
cw dispatch <run-id> --limit N	Allocate worker scopes.
cw worker manifest <run-id> <worker-id>	Read a worker manifest.
cw worker output <run-id> <worker-id> <result.md>	Accept and verify worker output.
cw commit <run-id> --selection <selection-id>	Create a verifier-gated state commit.
cw report <run-id> --show	Render the saved report.

Registry And Recovery

Command	Purpose
cw registry refresh --scope repo	Rebuild the derived run index.
cw run search --scope home --text TEXT	Search runs across registered repos.
cw run resume <run-id>	Read-only next-action view.
cw run resume <run-id> --drive	Continue pending work through the agent drive loop.
cw run export <run-id> --output PATH	Write a portable run archive.
cw run inspect-archive PATH	Check an archive without importing.
cw run import PATH --target DIR	Restore an archive under another repo.
cw run verify-import <run-id> --cwd DIR --strict	Re-prove restored digests and chains.
cw run <app> --drive --incremental	Re-run a workflow, reusing cached results for every step whose inputs are unchanged.

Portable Bundles

Command	Purpose
cw -q "…" --bundle	Run, then seal the run into one portable report.cwrun.json.
cw report bundle <run-id> --output PATH	Seal an existing run into a self-verifying bundle.
cw report verify-bundle <bundle>	Verify a bundle offline — archive bytes, chains, signatures, and that every signed finding is present and unaltered.
cw report verify-bundle <bundle> --require-signatures	Also refuse a bundle whose findings are not signed.

Verification

Command	Purpose
cw telemetry verify <run-id>	Re-prove telemetry ledger integrity.
cw telemetry verify <run-id> --pubkey <public.pem>	Re-run ed25519 attribution checks.
cw audit verify <run-id>	Re-prove the trust-audit hash chain.

See Trust And Audit for what these checks prove and what they do not prove.

MCP

MCP tools use cw_ names and route through the same runtime entries. Examples:

• cw_app_list
• cw_run_resume
• cw_run_import
• cw_run_verify_import
• cw_report
• cw_report_verify_bundle
• cw_telemetry_verify
• cw_clones_list
• cw_clones_gc

Generated manifests are kept in sync from plugins/cool-workflow/manifest/plugin.manifest.json. The load smoke test boots each generated MCP config and checks a JSON-RPC initialize plus tools/list round trip.

See MCP And Manifests for the generated vendor targets.