@brainervirus/workit-claude-code 6.0.0 → 7.0.0

package/hooks/hooks.json

@@ -1,5 +1,5 @@
 {
-  "description": "Workit host hooks: task context on session start (incl. compaction restore and forks) and when it changes per turn, branch policy on git shell commands, and worktree guidance for subagents. Only events that change Claude's behavior are registered.",
+  "description": "Workit host hooks: task context on session start (incl. compaction restore and forks) and when it changes per turn, branch policy on git shell commands, the before-write gate on file edits and shell writes, and worktree guidance for subagents. Only events that change Claude's behavior are registered.",
   "hooks": {
     "SessionStart": [
       {
@@ -32,7 +32,6 @@
         "hooks": [
           {
             "type": "command",
-            "if": "Bash(git *)",
             "command": "node",
             "args": ["${CLAUDE_PLUGIN_ROOT}/bin/workit-hook.mjs"],
             "timeout": 5
@@ -44,7 +43,17 @@
         "hooks": [
           {
             "type": "command",
-            "if": "PowerShell(git *)",
+            "command": "node",
+            "args": ["${CLAUDE_PLUGIN_ROOT}/bin/workit-hook.mjs"],
+            "timeout": 5
+          }
+        ]
+      },
+      {
+        "matcher": "Edit|Write|MultiEdit|NotebookEdit",
+        "hooks": [
+          {
+            "type": "command",
             "command": "node",
             "args": ["${CLAUDE_PLUGIN_ROOT}/bin/workit-hook.mjs"],
             "timeout": 5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-claude-code",
-  "version": "6.0.0",
+  "version": "7.0.0",
   "private": false,
   "description": "Workit Claude Code plugin — session and per-turn task context, branch policy on git shell commands, workit method skills, and verifier/reviewer/implementer agents",
   "keywords": [
@@ -39,8 +39,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-cli": "^6.0.0",
-    "@brainervirus/workit-core": "^6.0.0"
+    "@brainervirus/workit-cli": "^7.0.0",
+    "@brainervirus/workit-core": "^7.0.0"
   },
   "engines": {
     "node": ">=24"

package/skills/deslop/SKILL.md

@@ -22,7 +22,7 @@ behavior. A change that wants new behavior is its own change.
    validator that changes behavior is not deslop.
 5. **Re-run the checks** and report lines removed, not lines written. Nothing
    to clean is a valid result: say what you checked ("0 removals; ran knip and
-   read the diff"). When a tracked task lists a `pre-pr-cleanup` requirement,
+   read the diff"). When a tracked task lists a `pre-pr-cleanup` requirement (≤6.x tasks),
    record this result as its evidence.
 
 ## Example

package/skills/implement/SKILL.md

@@ -11,6 +11,9 @@ description: Build a requested change in small verified steps - follow local pat
    neighbour that already does something similar. Copy its patterns, names and
    error handling. Repo rules (AGENTS.md, CLAUDE.md, lint config) win.
 2. On the default branch? Branch first: `workit git branch --kind feature --slug <s>`.
+   Tracking it? Judge once: `workit policy assess --judge risk=normal
+   behavior=yes product-choice=no plan=no` (trivial and no for a mechanical
+   fix); Workit derives what close needs.
 3. Small steps that each leave the tree green. Behavior change: write the
    acceptance as Given/When/Then and see a test fail first (workit-bdd).
    Mechanical change: the existing checks are enough.
@@ -24,10 +27,12 @@ description: Build a requested change in small verified steps - follow local pat
    PR (`workit git push`, `workit pr create --fill`, then workit-ship) only when
    that was requested, or the request implies delivery and `workit grant show`
    reports `defaultEndpoint` `pr`; otherwise the endpoint is `commit`.
-7. Hand off verification. Never record a passing verdict on your own work.
-   Start a fresh verifier with its own session (`WORKIT_SESSION_ID=<yours>-v1`;
-   Claude Code: the `verifier` agent, which the hook gives one); it runs
-   verify-<app> and `workit ledger verdict`. Before saying done, reconcile
+7. Verify. Normal risk: after `workit check test` passes, record your own
+   `workit ledger verdict tests-verified --self --how "<what you ran>"`; it
+   reads self-reviewed, never verified. High risk, a workspace with
+   `verification: independent` (`workit grant show`) or a verified merge needs
+   a fresh verifier with its own session (`WORKIT_SESSION_ID=<yours>-v1`;
+   Claude Code: the `verifier` agent). Before saying done, reconcile
    every named deliverable against the target checkout and observe it (for a push:
    `workit verify-delivery push`).
 

package/skills/review/SKILL.md

@@ -8,6 +8,8 @@ description: Independent review of a diff, branch or PR - intent fidelity and st
 Review the candidate, never the author's summary of it. A session that wrote a
 commit on the branch cannot record a passing verdict: if that is you, hand the
 review to a fresh agent (Claude Code: the `reviewer` or `verifier` agent).
+An author's `--self` verdict reads self-reviewed and never counts as
+independent; `type-check-only` never proves a behavior change.
 
 1. Pin the candidate: `git rev-parse HEAD`, the base, `git diff <base>...HEAD`;
    for a PR, `workit pr status --json` (checks, unresolved threads).

package/skills/shape/SKILL.md

@@ -43,7 +43,7 @@ a choice that is hard to reverse, surprising and a real trade-off; a glossary
 entry for a term you had to resolve; `.out-of-scope/<concept>.md` for a rejected
 request that will come back. A one-file mechanical fix gets none. Formats and
 triggers: `references/knowledge.md`. Record each settled choice once:
-`workit ledger decision "<what>" --why "<why>"`.
+`workit ledger decision "<what>" --why "<why>"`; cite a plan: `workit policy assess --ref <path>`.
 
 ## 5. Slice as tracer bullets
 

package/skills/ship/SKILL.md

@@ -33,7 +33,7 @@ merge: Stop at PR-ready unless the user set merge as the endpoint.
    `workit ci rerun --failed --reason flake` (once per head). Real: reproduce
    with `workit check`, fix the root cause, batch fixes into one push.
 6. **Verified.** After the last push a non-author records a verdict
-   (workit-review). Land only when granted: `workit stack land` (the
+   (workit-review); `pr status` showing self-reviewed is not verified. Land only when granted: `workit stack land` (the
    contiguous verified run from the root) or `workit pr merge`.
 7. **Observe it landed:** `workit verify-delivery pr` or `merge`.