@brainervirus/workit-claude-code 7.6.0 → 8.0.0

package/dist/workit.js

@@ -65,7 +65,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@brainervirus/workit-cli",
-    version: "7.6.0",
+    version: "8.0.0",
     private: false,
     description: "Workit CLI — setup wizard, doctor, and task control for agentic coding workflows",
     keywords: [
@@ -103,9 +103,9 @@ var init_package = __esm(() => {
     },
     dependencies: {
       "@babel/parser": "7.29.9",
-      "@brainervirus/workit-core": "^7.6.0",
-      "@brainervirus/workit-cursor": "^7.6.0",
-      "@brainervirus/workit-opencode": "^7.6.0",
+      "@brainervirus/workit-core": "^8.0.0",
+      "@brainervirus/workit-cursor": "^8.0.0",
+      "@brainervirus/workit-opencode": "^8.0.0",
       "@inkjs/ui": "2.0.0",
       ink: "7.1.1",
       react: "19.2.8"
@@ -165,7 +165,7 @@ var init_output = __esm(() => {
   };
 });
 
-// packages/workit-core/src/check-config.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/check-config.ts
 import { spawnSync } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
@@ -7974,7 +7974,7 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// packages/workit-core/src/core/task-contract.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/task-contract.ts
 import { createHash, randomUUID } from "node:crypto";
 function parseOperation(family, input) {
   if (typeof input === "object" && input !== null && "schemaVersion" in input && input.schemaVersion !== SCHEMA_VERSION)
@@ -8812,7 +8812,7 @@ var init_task_contract = __esm(() => {
   compiledOperationSchemas = Object.fromEntries(OPERATION_FAMILIES.map((family) => [family, compile(operationSchemas[family])]));
 });
 
-// packages/workit-core/src/core/operation-input.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/operation-input.ts
 function normalizeOperationInput(family, input, host) {
   if (!isObject2(input))
     return input;
@@ -9149,7 +9149,7 @@ var init_operation_input = __esm(() => {
   ]);
 });
 
-// packages/workit-core/src/core/policy/judgment.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/policy/judgment.ts
 function normalizeJudgment(raw, previous) {
   const input = isObject3(raw) ? raw : {};
   const legacy = Object.keys(input).some((key) => LEGACY_KEYS.has(key));
@@ -9914,7 +9914,7 @@ var init_file_lock = __esm(() => {
   init_file_lock_sync();
 });
 
-// packages/workit-core/src/core/package-root.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/package-root.ts
 import { existsSync } from "node:fs";
 import path4 from "node:path";
 import { fileURLToPath } from "node:url";
@@ -9933,7 +9933,7 @@ var packageRoot = () => {
 };
 var init_package_root = () => {};
 
-// packages/workit-core/src/store/paths.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/store/paths.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
 import fs5 from "node:fs";
@@ -10209,7 +10209,7 @@ var init_paths = __esm(() => {
   ];
 });
 
-// packages/workit-core/src/core/store-lock.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/store-lock.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
 import fs6 from "node:fs";
 import { hostname } from "node:os";
@@ -10401,7 +10401,7 @@ var init_store_lock = __esm(() => {
   FOREIGN_LOCK_TTL_MS = 10 * 60000;
 });
 
-// packages/workit-core/src/store/event-log.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/store/event-log.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import fs7 from "node:fs";
 import path7 from "node:path";
@@ -10556,7 +10556,7 @@ var init_event_log = __esm(() => {
   TRANSIENT_WINDOWS_CODES = new Set(["EPERM", "EACCES", "EBUSY"]);
 });
 
-// packages/workit-core/src/store/patch.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/store/patch.ts
 function diff(before, after, path = []) {
   if (equal(before, after))
     return [];
@@ -10662,7 +10662,7 @@ var isPlainObject2 = (value) => typeof value === "object" && value !== null && !
   return false;
 });
 
-// packages/workit-core/src/store/reduce.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/store/reduce.ts
 import { createHash as createHash3 } from "node:crypto";
 function reduce(state, event, blobs) {
   const data = event.data;
@@ -10788,7 +10788,7 @@ var init_reduce = __esm(() => {
   ]);
 });
 
-// packages/workit-core/src/store/notes.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/store/notes.ts
 var SLOT, reportMigration = (report) => {
   try {
     const reporter = globalThis[SLOT];
@@ -10800,7 +10800,7 @@ var init_notes = __esm(() => {
   SLOT = Symbol.for("workit.migrationReporter");
 });
 
-// packages/workit-core/src/core/task-store.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/task-store.ts
 import { createHash as createHash4, randomUUID as randomUUID3 } from "node:crypto";
 import * as fs8 from "node:fs";
 import path8 from "node:path";
@@ -12427,13 +12427,13 @@ var init_task_store = __esm(() => {
   heldInProcess = new Map;
 });
 
-// packages/workit-core/src/core/workers.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/workers.ts
 var UNCERTAIN_WORKER_STATES, isUncertainWorker = (state) => UNCERTAIN_WORKER_STATES.includes(state), workerBlocksTransition = (transition, state) => transition === "pause" ? false : isUncertainWorker(state);
 var init_workers = __esm(() => {
   UNCERTAIN_WORKER_STATES = ["dispatching", "running", "cancelling", "unknown"];
 });
 
-// packages/workit-core/src/git/rev.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/git/rev.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import fs9 from "node:fs";
@@ -12964,7 +12964,7 @@ var init_rev = __esm(() => {
   };
 });
 
-// packages/workit-core/src/ledger.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/ledger.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
 import { createHash as createHash6, randomBytes as randomBytes2 } from "node:crypto";
 import fs10 from "node:fs";
@@ -13426,6 +13426,70 @@ function recordRuling(context, input) {
     refs: input.refs ?? []
   }, { now: context.now });
 }
+function activeStanding(rows, fanout, leads = null) {
+  const active = [];
+  for (const row of rows) {
+    if (row.fanout !== fanout || !fromLead(row, leads))
+      continue;
+    if (row.type === "standing" && typeof row.what === "string" && row.what.trim()) {
+      if (!row.superseded)
+        active.push(row);
+    } else if (row.type === "standing.cleared") {
+      const target = str2(row.target);
+      if (target === null)
+        active.length = 0;
+      else {
+        const index = active.findIndex((order) => order.id === target);
+        if (index >= 0)
+          active.splice(index, 1);
+      }
+    }
+  }
+  return active;
+}
+function leadOnly(context, lead) {
+  const session = context.actor.session;
+  if (lead !== null ? session === lead : !isDelegateSession(session))
+    return { ok: true, value: undefined };
+  return err("blocked", lead !== null ? `session ${session ?? "(none)"} is not the fanout's lead (${lead}): standing orders come from the lead` : `session ${session} is a worker or verifier: standing orders come from the lead`, lead !== null ? `the lead in a new session? workit fanout plan <plan.json> --take-lead from this session; a worker or verifier reports the order to the lead instead` : "a worker or verifier reports the order to the lead instead");
+}
+function recordStanding(context, input) {
+  const what = required2(input.what, "<order>");
+  if (!what.ok)
+    return what;
+  if (/\p{Cc}/u.test(what.value))
+    return err("invalid_input", "a standing order is one line: no newlines or control characters", 'add each order separately: workit ledger standing add "<order>"');
+  const lead = leadOnly(context, input.lead);
+  if (!lead.ok)
+    return lead;
+  const link = checkSupersede(context, "standing");
+  if (!link.ok)
+    return link;
+  return appendRow(context.cwd, {
+    ...common(context, noteKey(context)),
+    type: "standing",
+    fanout: input.fanout,
+    what: what.value
+  }, { now: context.now });
+}
+function clearStanding(context, input) {
+  const lead = leadOnly(context, input.lead);
+  if (!lead.ok)
+    return lead;
+  if (input.target !== null) {
+    const ledger = readLedger(context.cwd);
+    if (!ledger.ok)
+      return ledger;
+    if (!activeStanding(ledger.value.rows, input.fanout, input.leads ?? null).some((row) => row.id === input.target))
+      return err("not_found", `no standing order ${input.target} in force for fanout ${input.fanout}`, `workit ledger standing list --fanout ${input.fanout}`);
+  }
+  return appendRow(context.cwd, {
+    ...common(context, noteKey(context)),
+    type: "standing.cleared",
+    fanout: input.fanout,
+    target: input.target
+  }, { now: context.now });
+}
 function recordVerdict(context, input) {
   if (!VERDICT_RESULTS.includes(input.result))
     return err("invalid_input", `unknown verdict "${input.result}"; expected ${VERDICT_RESULTS.join("|")}`);
@@ -13504,6 +13568,12 @@ function summarizeRow(row) {
     case "handoff":
       summary = `next: ${text("next")}${text("note") ? ` (note: ${text("note")})` : ""}`;
       break;
+    case "standing":
+      summary = `${text("what")} (fanout ${text("fanout")})`;
+      break;
+    case "standing.cleared":
+      summary = `cleared ${text("target") || "every standing order"} (fanout ${text("fanout")})`;
+      break;
     case "commit.recorded":
       summary = `${(row.head ?? "?").slice(0, 12)} ${text("subject")}${row.actor.session ? "" : " (no session)"}`;
       break;
@@ -13730,7 +13800,7 @@ var LEDGER_VERSION = 1, MAX_LINE_BYTES = 4096, VERDICT_RESULTS, PASSING, FAILING
 }, required2 = (value, flag) => {
   const text = value?.trim();
   return text ? { ok: true, value: text } : err("invalid_input", `${flag} is required`);
-}, OBSERVED_ONLY, MAX_DIRTY_PATHS = 10, dirtyState = (cwd) => {
+}, fromLead = (row, leads) => leads === null || row.actor.session !== null && leads.includes(row.actor.session), isDelegateSession = (session) => session !== null && (/-w-[a-z0-9._-]+(?:\+try\d)?$/u.test(session) || /-v\d+$/u.test(session) || session.includes(":")), OBSERVED_ONLY, MAX_DIRTY_PATHS = 10, dirtyState = (cwd) => {
   const run = gitRun2(cwd, ["status", "--porcelain=v1", "-z", "--untracked-files=normal"], GIT_TIMEOUTS.worktree);
   if (!run.ok)
     return { dirty: false, files: 0, paths: [] };
@@ -13844,7 +13914,7 @@ var init_ledger = __esm(() => {
   OBSERVED_ONLY = new Set(["check", ...PR_ROW_TYPES]);
 });
 
-// packages/workit-core/src/core/policy/derive.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/policy/derive.ts
 import { existsSync as existsSync3 } from "node:fs";
 import path11 from "node:path";
 function deriveRequirements(judgment, scope, constraints, verification = "self") {
@@ -14032,7 +14102,7 @@ var init_derive = __esm(() => {
   };
 });
 
-// packages/workit-core/src/core/task-evaluation.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/task-evaluation.ts
 import { createHash as createHash7 } from "node:crypto";
 import * as fs11 from "node:fs";
 import { spawnSync as spawnSync6 } from "node:child_process";
@@ -14680,7 +14750,7 @@ var init_task_evaluation = __esm(() => {
   scopeCovers2 = scopeCovers;
 });
 
-// packages/workit-core/src/core/methods.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/methods.ts
 function selectMethods(policy, capabilities) {
   return Object.entries(METHODS).flatMap(([id, definition]) => {
     const requirements = policy.requirements.filter((requirement) => methodMatches(definition, requirement));
@@ -14727,7 +14797,7 @@ var init_methods = __esm(() => {
   };
 });
 
-// packages/workit-core/src/core/task-context.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/task-context.ts
 function reconcileResume(view, observations = []) {
   if (observations.length > 0)
     return failure2("permission_denied", "worker observations require native host verification");
@@ -14840,7 +14910,7 @@ var init_task_context = __esm(() => {
   privateKey = /-----BEGIN [^-]*PRIVATE KEY-----[\s\S]*?-----END [^-]*PRIVATE KEY-----/gi;
 });
 
-// packages/workit-core/src/core/commit-flavors.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/commit-flavors.ts
 var CONVENTIONAL_RE, TICKET_RE, GITMOJI_RE, matchCommitFlavor = (message, flavor, pattern) => {
   const subject = message.split(`
 `, 1)[0] ?? "";
@@ -14891,10 +14961,10 @@ var init_commit_flavors = __esm(() => {
   DETECTABLE = ["conventional", "gitmoji", "ticket-prefix"];
 });
 
-// packages/workit-core/src/core/git.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/git.ts
 var init_git = () => {};
 
-// packages/workit-core/src/core/boundary.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/boundary.ts
 var EVENT, errorDetail = (err) => {
   if (err instanceof Error) {
     return { error_name: err.name, error: err.message };
@@ -14917,7 +14987,7 @@ var init_boundary = __esm(() => {
   };
 });
 
-// packages/workit-core/src/core/config.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/config.ts
 import {
   copyFileSync as copyFileSync2,
   cpSync as cpSync2,
@@ -15086,7 +15156,7 @@ var init_config = __esm(() => {
   ];
 });
 
-// packages/workit-core/src/core/workspaces.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/workspaces.ts
 import { createHash as createHash8 } from "node:crypto";
 import { readFileSync as readFileSync4, realpathSync as realpathSync3 } from "node:fs";
 import path14 from "node:path";
@@ -15522,7 +15592,7 @@ var init_workspaces = __esm(() => {
   }).passthrough();
 });
 
-// packages/workit-core/src/core/release-tracks.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/release-tracks.ts
 import { createHash as createHash9 } from "node:crypto";
 import { spawnSync as spawnSync7 } from "node:child_process";
 import { readFileSync as readFileSync5 } from "node:fs";
@@ -15984,7 +16054,7 @@ var init_release_tracks = __esm(() => {
   memo3 = new Map;
 });
 
-// packages/workit-core/src/core/vcs-config.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/vcs-config.ts
 import fs12 from "node:fs";
 import path15 from "node:path";
 import { spawnSync as spawnSync8 } from "node:child_process";
@@ -16112,7 +16182,7 @@ var init_vcs_config = __esm(() => {
   init_release_tracks();
 });
 
-// packages/workit-core/src/core/branch.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/branch.ts
 import { execFileSync } from "node:child_process";
 import { createHash as createHash10 } from "node:crypto";
 import path16 from "node:path";
@@ -16285,12 +16355,12 @@ var init_branch = __esm(() => {
   init_release_tracks();
 });
 
-// packages/workit-core/src/core/route-intent.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/route-intent.ts
 var init_route_intent = __esm(() => {
   init_branch();
 });
 
-// packages/workit-core/src/core/runtime-identity.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/runtime-identity.ts
 import { createHash as createHash11 } from "node:crypto";
 import { readFileSync as readFileSync6 } from "node:fs";
 var sha256Hex = (bytes) => createHash11("sha256").update(bytes).digest("hex"), bundleHashOfFile = (file) => {
@@ -16315,7 +16385,7 @@ var init_runtime_identity = __esm(() => {
   ];
 });
 
-// packages/workit-core/src/core/policy-resolver.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/policy-resolver.ts
 function resolvePolicy(input) {
   const ids = input.constraints.map((constraint) => constraint.id);
   if (new Set(ids).size !== ids.length)
@@ -16375,7 +16445,7 @@ var init_policy_resolver = __esm(() => {
   init_derive();
 });
 
-// packages/workit-core/src/core/safe-write.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/safe-write.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import {
   closeSync as closeSync2,
@@ -16453,7 +16523,7 @@ function writeFileAtomic(file, content, mode) {
 }
 var init_safe_write = () => {};
 
-// packages/workit-core/src/autonomy.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/autonomy.ts
 import { copyFileSync as copyFileSync3, existsSync as existsSync6 } from "node:fs";
 import os3 from "node:os";
 import path18 from "node:path";
@@ -16734,7 +16804,7 @@ var init_autonomy = __esm(() => {
   DEFAULT_ENDPOINTS = ["commit", "pr", "green", "merged"];
 });
 
-// packages/workit-core/src/core/task-engine.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/task-engine.ts
 import { realpathSync as realpathSync4 } from "node:fs";
 
 class WorkitCore {
@@ -18316,13 +18386,13 @@ var init_task_engine = __esm(() => {
   retryPause = new Int32Array(new SharedArrayBuffer(4));
 });
 
-// packages/workit-core/src/core/repo-context.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/repo-context.ts
 var init_repo_context = __esm(() => {
   init_vcs_config();
   init_core3();
 });
 
-// packages/workit-core/src/forge/pr-body.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/pr-body.ts
 function parseGhIssue(value) {
   const m = /issues\/(\d+)/.exec(value);
   return m ? m[1] : String(value).trim().replace(/^#/, "");
@@ -18383,7 +18453,7 @@ var init_pr_body = __esm(() => {
   init_vcs_config();
 });
 
-// packages/workit-core/src/core/pr-create.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/pr-create.ts
 import path19 from "node:path";
 import { spawnSync as spawnSync9 } from "node:child_process";
 import { pathToFileURL } from "node:url";
@@ -18426,13 +18496,13 @@ var init_pr_create = __esm(() => {
   init_pr_body();
 });
 
-// packages/workit-core/src/core/tracker-issues.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/tracker-issues.ts
 var init_tracker_issues = __esm(() => {
   init_pr_create();
   init_vcs_config();
 });
 
-// packages/workit-core/src/core/templates.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/templates.ts
 var repoRoot;
 var init_templates = __esm(() => {
   init_config();
@@ -18440,7 +18510,7 @@ var init_templates = __esm(() => {
   repoRoot = assetRoot();
 });
 
-// packages/workit-core/src/core/scripts.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/scripts.ts
 var PLUGIN_ROOT, ASSET_ROOT, resolveWorkspaceRoot = (explicit) => explicit || process.cwd();
 var init_scripts = __esm(() => {
   init_package_root();
@@ -18448,7 +18518,7 @@ var init_scripts = __esm(() => {
   ASSET_ROOT = assetRoot();
 });
 
-// packages/workit-core/src/core/youtrack.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/youtrack.ts
 import fs13 from "node:fs";
 import path20 from "node:path";
 function readYouTrackConfig(required) {
@@ -18920,7 +18990,7 @@ var init_youtrack = __esm(() => {
   };
 });
 
-// packages/workit-core/src/core/context-read.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/context-read.ts
 var contextReadSchema;
 var init_context_read = __esm(() => {
   init_zod();
@@ -18951,7 +19021,7 @@ var init_context_read = __esm(() => {
   }).strict();
 });
 
-// packages/workit-core/src/core.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core.ts
 import { existsSync as existsSync7, realpathSync as realpathSync5 } from "node:fs";
 import path21 from "node:path";
 function resolveInside(root, candidate) {
@@ -62107,7 +62177,7 @@ var init_build3 = __esm(async () => {
   init_types();
 });
 
-// packages/workit-core/src/core/gitignore.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/gitignore.ts
 var GITIGNORE_ENTRIES;
 var init_gitignore = __esm(() => {
   GITIGNORE_ENTRIES = [
@@ -62128,7 +62198,7 @@ var init_gitignore = __esm(() => {
   ];
 });
 
-// packages/workit-core/src/core/changelog.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/changelog.ts
 import fs16 from "node:fs";
 import path23 from "node:path";
 import { createHash as createHash12 } from "node:crypto";
@@ -62457,7 +62527,7 @@ var init_changelog = __esm(() => {
   HEADING_RE = /^###\s+/;
 });
 
-// packages/workit-core/src/core/hygiene.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/hygiene.ts
 import { existsSync as existsSync9, readFileSync as readFileSync9, writeFileSync as writeFileSync4 } from "node:fs";
 import path24 from "node:path";
 var repoRoot2, templatesDir = () => path24.join(repoRoot2, "templates", "hygiene"), packageJson = (root) => {
@@ -62662,7 +62732,7 @@ var init_registration = __esm(() => {
   CURSOR_HOOK_RUN_COMMAND = `npx -y --prefer-online --min-release-age=0 --package=${CURSOR_RUNTIME_PACKAGE} workit-cursor-hook`;
 });
 
-// packages/workit-core/src/core/support-matrix.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/support-matrix.ts
 var SUPPORT_MATRIX;
 var init_support_matrix = __esm(() => {
   SUPPORT_MATRIX = {
@@ -63106,7 +63176,7 @@ var init_host_install = __esm(() => {
   CLAUDE_SCOPES = new Set(["user", "project", "local"]);
 });
 
-// packages/workit-core/src/core/skill-manifests.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/skill-manifests.ts
 import { cpSync as cpSync3, existsSync as existsSync12, readFileSync as readFileSync12, readdirSync as readdirSync5, statSync as statSync3, writeFileSync as writeFileSync5 } from "node:fs";
 import path28 from "node:path";
 var WORKIT_METHOD_SKILLS, skillManifestNames = (root) => existsSync12(root) ? readdirSync5(root).filter((name) => existsSync12(path28.join(root, name, "SKILL.md"))).toSorted() : [], validateSkillManifests = (root, expected, label) => {
@@ -65369,7 +65439,7 @@ var init_setup = __esm(() => {
   SETUP_OVERRIDES = [...YT_OVERRIDES, ...VCS_OVERRIDES];
 });
 
-// packages/workit-core/src/core/branch-policy.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/branch-policy.ts
 import { spawnSync as spawnSync12 } from "node:child_process";
 var PREFIXES, detectBranchPolicy = (workspaceRoot) => {
   const branchExists = (name) => {
@@ -65432,7 +65502,7 @@ var init_branch_policy = __esm(() => {
   };
 });
 
-// packages/workit-core/src/core/workspace-branch-policy.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/workspace-branch-policy.ts
 import { mkdirSync as mkdirSync6, readFileSync as readFileSync15, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "node:fs";
 import path31 from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual3 } from "node:util";
@@ -68910,7 +68980,7 @@ var init_steps = __esm(async () => {
   ];
 });
 
-// packages/workit-core/src/core/logger.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/logger.ts
 import { appendFileSync, mkdirSync as mkdirSync7, readdirSync as readdirSync7, unlinkSync as unlinkSync3 } from "node:fs";
 import os11 from "node:os";
 import path34 from "node:path";
@@ -69918,7 +69988,7 @@ var init_launch = __esm(() => {
   init_upgrade();
 });
 
-// packages/workit-core/src/knowledge.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/knowledge.ts
 import { spawnSync as spawnSync14 } from "node:child_process";
 import fs17 from "node:fs";
 import path36 from "node:path";
@@ -70315,7 +70385,7 @@ var init_doctor2 = __esm(() => {
   init_task();
 });
 
-// packages/workit-core/src/forge/redact.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/redact.ts
 function redactText(value) {
   let out = stripAnsi2(value).replace(PRIVATE_KEY, "[REDACTED PRIVATE KEY]");
   out = out.replace(WEBHOOK, `$1/${R}`);
@@ -70418,7 +70488,7 @@ var init_redact = __esm(() => {
   NOT_FIRST_ERROR = /^\s*(?:\(pass\)|\(skip\)|\(todo\)|✓|✔|ok\b|PASS\b)|^\s*\d+ fail\b|##\[error\]Process completed|^\s*0 (?:errors?|fail)/u;
 });
 
-// packages/workit-core/src/checks.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/checks.ts
 import { spawn, spawnSync as spawnSync15 } from "node:child_process";
 import { createHash as createHash14 } from "node:crypto";
 import fs18 from "node:fs";
@@ -71320,10 +71390,10 @@ var init_check = __esm(() => {
   FINGERPRINT_VARS = ["CI", "NODE_ENV", "npm_config_script_shell", "NODE_OPTIONS", "SHELL"];
 });
 
-// packages/workit-core/src/forge/types.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/types.ts
 var success2 = (data) => ({ ok: true, data }), failure3 = (code, error, unblock) => ({ ok: false, code, error, ...unblock ? { unblock } : {} });
 
-// packages/workit-core/src/git/ops.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/git/ops.ts
 import { spawnSync as spawnSync16 } from "node:child_process";
 function dirtEntries(cwd) {
   const run = git5(cwd, ["status", "--porcelain=v1", "-z", "--untracked-files=all"]);
@@ -71703,7 +71773,7 @@ var init_ops = __esm(() => {
   SHA = /^[0-9a-f]{40,64}$/u;
 });
 
-// packages/workit-core/src/forge/reruns.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/reruns.ts
 import fs19 from "node:fs";
 import path39 from "node:path";
 function rerunLogPath(cwd) {
@@ -71794,7 +71864,7 @@ var init_reruns = __esm(() => {
   init_rev();
 });
 
-// packages/workit-core/src/forge/report.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/report.ts
 function gatingChecks(status) {
   const required = status.checks.filter((check) => check.required === true);
   const protectionNamesChecks = (status.requiredContexts?.length ?? 0) > 0;
@@ -72148,7 +72218,7 @@ var init_report = __esm(() => {
   GITHUB_MERGEABLE = new Set(["clean", "unstable", "has_hooks"]);
 });
 
-// packages/workit-core/src/forge/pr-ops.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/pr-ops.ts
 import { spawnSync as spawnSync17 } from "node:child_process";
 function fillFromCommits(cwd, resolved, base) {
   const tracking = `refs/remotes/${resolved.baseRemote}/${base}`;
@@ -72431,7 +72501,7 @@ var init_pr_ops = __esm(() => {
   };
 });
 
-// packages/workit-core/src/forge/exec.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/exec.ts
 import { spawnSync as spawnSync18 } from "node:child_process";
 import fs20 from "node:fs";
 import path40 from "node:path";
@@ -72549,7 +72619,7 @@ var init_exec = __esm(() => {
   MAX_BUFFER2 = 64 * 1024 * 1024;
 });
 
-// packages/workit-core/src/forge/github.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/github.ts
 function checkFromContext(node) {
   const required = node.isRequired ?? null;
   if (node.__typename === "StatusContext") {
@@ -72848,7 +72918,7 @@ var init_github = __esm(() => {
   ]);
 });
 
-// packages/workit-core/src/forge/gitlab.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/gitlab.ts
 function checkFromBridge(bridge, pipelineId, scope) {
   const status = bridge.downstream_pipeline?.status ?? bridge.status;
   const allow = bridge.allow_failure === true;
@@ -73136,7 +73206,7 @@ var init_gitlab = __esm(() => {
   UNSETTLED = new Set(["checking", "unchecked", "preparing", "approvals_syncing"]);
 });
 
-// packages/workit-core/src/forge/resolve.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/resolve.ts
 import fs21 from "node:fs";
 function resolveForge(cwd, options = {}) {
   let workspace;
@@ -73256,7 +73326,7 @@ var init_resolve = __esm(() => {
   init_gitlab();
 });
 
-// packages/workit-core/src/duration.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/duration.ts
 function parseDuration2(value) {
   const text = value.trim().toLowerCase();
   if (/^\d+(?:\.\d+)?$/u.test(text))
@@ -73315,6 +73385,14 @@ function parseFlags(argv, spec) {
   }
   return parsed;
 }
+function unverifiedFlag(flags) {
+  const reason = flags.values.reason?.trim();
+  if (!flags.booleans.has("unverified"))
+    return reason === undefined ? null : "--reason is only used with --unverified";
+  if (!reason)
+    return "--unverified needs --reason <why the user asked for it>";
+  return reason.length > MAX_REASON ? `--reason is capped at ${MAX_REASON} characters` : { reason };
+}
 function positiveInt(value, flag) {
   if (value === undefined)
     return null;
@@ -73398,7 +73476,7 @@ function renderStatus(doc) {
   lines.push(`next: ${doc.next}`);
   return lines;
 }
-var forgeDeps, usage3 = (io, message, line) => emit(io, fail("invalid_input", message, { unblock: line })), forgeFail = (io, result, data) => emit(io, fail(result.code, result.error, { data, unblock: result.unblock })), short = (sha) => sha ? sha.slice(0, 7) : "?";
+var forgeDeps, MAX_REASON = 500, usage3 = (io, message, line) => emit(io, fail("invalid_input", message, { unblock: line })), forgeFail = (io, result, data) => emit(io, fail(result.code, result.error, { data, unblock: result.unblock })), short = (sha) => sha ? sha.slice(0, 7) : "?";
 var init_forge_common = __esm(() => {
   init_resolve();
   init_vcs_config();
@@ -73544,13 +73622,23 @@ async function create4(argv, io) {
     ...data.releaseTrack?.name ? [`release track: ${data.releaseTrack.name} (${data.releaseTrack.detail})`] : [],
     ...(data.releaseTrack?.warnings ?? []).map((warning) => `note: ${warning}`),
     `head ${data.head.slice(0, 12)} verified on the forge`,
-    ..."error" in data.recorded ? [`ledger: not recorded (${data.recorded.error})`] : []
+    ..."error" in data.recorded ? [`ledger: not recorded (${data.recorded.error})`] : [],
+    `next: ${data.next}`
   ]);
 }
 async function merge3(argv, io) {
-  const flags = parseFlags(argv, { pr: "value", method: "value", "delete-branch": "boolean" });
+  const flags = parseFlags(argv, {
+    pr: "value",
+    method: "value",
+    "delete-branch": "boolean",
+    unverified: "boolean",
+    reason: "value"
+  });
   if (typeof flags === "string")
     return usage3(io, flags, MERGE_USAGE);
+  const unverified = unverifiedFlag(flags);
+  if (typeof unverified === "string")
+    return usage3(io, unverified, MERGE_USAGE);
   if (flags.positionals.length)
     return usage3(io, `unexpected argument ${flags.positionals[0]}`, MERGE_USAGE);
   const pr = positiveInt(flags.values.pr, "--pr");
@@ -73562,7 +73650,13 @@ async function merge3(argv, io) {
   const connected = connect(io);
   if (!connected.ok)
     return forgeFail(io, connected);
-  const result = await mergePullRequest(io.cwd, connected.data, { pr, method, deleteBranch: flags.booleans.has("delete-branch"), actor: actorFromEnv(io.env) }, forgeDeps.sleep);
+  const result = await mergePullRequest(io.cwd, connected.data, {
+    pr,
+    method,
+    deleteBranch: flags.booleans.has("delete-branch"),
+    actor: actorFromEnv(io.env),
+    ...unverified ? { unverified } : {}
+  }, forgeDeps.sleep);
   if (!result.ok)
     return emit(io, fail(result.code, result.error, {
       unblock: result.unblock,
@@ -73570,7 +73664,7 @@ async function merge3(argv, io) {
     }));
   return emit(io, ok(result.data), (data) => [
     `merged ${connected.data.forge.kind === "github" ? "PR #" : "MR !"}${data.number} (${data.method}) at head ${data.head.slice(0, 12)}${data.mergeSha ? ` -> ${data.mergeSha.slice(0, 12)}` : ""}`,
-    data.verdict.required ? `verdict ${data.verdict.verdictId ?? "?"} accepted for that head` : "no verdict required (workspace grants merge: true)",
+    data.unverified ? `UNVERIFIED: merged without a verdict (--unverified: ${data.unverified.reason}); ledger ${data.unverified.recorded}` : `verdict ${data.verdict.verdictId ?? "?"} accepted for that head`,
     ...data.mergeBack.length ? [
       `merge back: ${data.base} is the ${data.mergeBackTrack} production branch; bring it into ${data.mergeBack.join(", ")}`
     ] : [],
@@ -73588,7 +73682,7 @@ async function run10(argv, io) {
     return merge3(rest, io);
   return usage3(io, sub && !sub.startsWith("-") ? `unknown pr subcommand "${sub}"` : "missing pr subcommand", USAGE4);
 }
-var STATUS_USAGE = "workit pr status [--pr <n> | --branch <b>] [--log-lines 60] [--json]", CREATE_USAGE = "workit pr create [--base <b> | --track <t>] (--title <t> [--body <text> | --body-file <f>] | --fill) [--draft] [--json]", MERGE_USAGE = "workit pr merge [--pr <n>] [--method squash|merge|rebase] [--delete-branch] [--json]", USAGE4 = "workit pr status|create|merge ... (workit help pr)", METHODS2;
+var STATUS_USAGE = "workit pr status [--pr <n> | --branch <b>] [--log-lines 60] [--json]", CREATE_USAGE = "workit pr create [--base <b> | --track <t>] (--title <t> [--body <text> | --body-file <f>] | --fill) [--draft] [--json]", MERGE_USAGE = "workit pr merge [--pr <n>] [--method squash|merge|rebase] [--delete-branch] [--unverified --reason <why>] [--json]", USAGE4 = "workit pr status|create|merge ... (workit help pr)", METHODS2;
 var init_pr = __esm(() => {
   init_pr_body();
   init_pr_ops();
@@ -73980,7 +74074,7 @@ var init_git2 = __esm(() => {
   init_forge_common();
 });
 
-// packages/workit-core/src/forge/verify.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/forge/verify.ts
 import { spawnSync as spawnSync19 } from "node:child_process";
 function finish(cwd, report, actor) {
   const delivered = report.observations.length > 0 && report.observations.every((entry) => entry.ok);
@@ -74300,7 +74394,7 @@ var init_verify_delivery = __esm(() => {
   };
 });
 
-// packages/workit-core/src/stack.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/stack.ts
 import { spawnSync as spawnSync20 } from "node:child_process";
 import { createHash as createHash15, randomBytes as randomBytes3 } from "node:crypto";
 import fs22 from "node:fs";
@@ -75631,10 +75725,15 @@ async function land(argv, io) {
     max: "value",
     method: "value",
     timeout: "value",
-    interval: "value"
+    interval: "value",
+    unverified: "boolean",
+    reason: "value"
   });
   if (typeof flags === "string")
     return usage3(io, flags, LAND_USAGE);
+  const unverified = unverifiedFlag(flags);
+  if (typeof unverified === "string")
+    return usage3(io, unverified, LAND_USAGE);
   if (flags.positionals.length)
     return usage3(io, `unexpected argument ${flags.positionals[0]}`, LAND_USAGE);
   const max = positiveInt(flags.values.max, "--max");
@@ -75665,7 +75764,7 @@ async function land(argv, io) {
       resolved: connected.data,
       actor: actorFromEnv(io.env),
       sleep: forgeDeps.sleep
-    }, fresh.data ?? selected.data, { dryRun: flags.booleans.has("dry-run"), max, method, timeoutMs, intervalMs });
+    }, fresh.data ?? selected.data, { dryRun: flags.booleans.has("dry-run"), max, method, timeoutMs, intervalMs, unverified });
   });
   if (!result.ok)
     return stackFailed(io, result);
@@ -75674,7 +75773,7 @@ async function land(argv, io) {
     ...data.dryRun ? [
       data.wouldLand.length ? `would land: ${data.wouldLand.map((item) => `${label(kind, item.pr)} (${item.branch})`).join(", ")}` : "would land nothing"
     ] : [
-      data.landed.length ? `landed: ${data.landed.map((item) => `${label(kind, item.pr)} (${item.branch}) -> ${short4(item.mergeSha)}`).join(", ")}` : "landed nothing"
+      data.landed.length ? `landed: ${data.landed.map((item) => `${label(kind, item.pr)} (${item.branch}) -> ${short4(item.mergeSha)}${item.unverified ? ` UNVERIFIED (ledger ${item.unverified})` : ""}`).join(", ")}` : "landed nothing"
     ],
     ...data.retargeted.length ? [`retargeted: ${data.retargeted.map((pr) => label(kind, pr)).join(", ")}`] : [],
     ...data.restacked.length ? [`restacked: ${data.restacked.join(", ")}`] : [],
@@ -75694,7 +75793,7 @@ async function run14(argv, io) {
     return land(rest, io);
   return usage3(io, sub && !sub.startsWith("-") ? `unknown stack subcommand "${sub}"` : "missing stack subcommand", USAGE7);
 }
-var PLAN_USAGE = "workit stack plan [--name <n>] [--trunk <b> | --track <t>] [<bottom> … <top>] [--json]", STATUS_USAGE2 = "workit stack status [--name <n>] [--json]", SYNC_USAGE = "workit stack sync [--name <n>] [--local] [--dry-run] [--force <branch>]… [--json]", LAND_USAGE = "workit stack land [--name <n>] [--dry-run] [--max <n>] [--method squash|merge|rebase] [--timeout 20m] [--interval 30s] [--json]", USAGE7 = "workit stack plan|status|sync|land ... (workit help stack)", short4 = (sha) => sha ? sha.slice(0, 12) : "?", stackFailed = (io, result) => emit(io, fail(result.code, result.error, { unblock: result.unblock, data: result.data ?? {} })), label = (forge, pr) => pr === null ? "no PR" : `${forge === "gitlab" ? "MR !" : "PR #"}${pr}`, renderSync = (data) => [
+var PLAN_USAGE = "workit stack plan [--name <n>] [--trunk <b> | --track <t>] [<bottom> … <top>] [--json]", STATUS_USAGE2 = "workit stack status [--name <n>] [--json]", SYNC_USAGE = "workit stack sync [--name <n>] [--local] [--dry-run] [--force <branch>]… [--json]", LAND_USAGE = "workit stack land [--name <n>] [--dry-run] [--max <n>] [--method squash|merge|rebase] [--unverified --reason <why>] [--timeout 20m] [--interval 30s] [--json]", USAGE7 = "workit stack plan|status|sync|land ... (workit help stack)", short4 = (sha) => sha ? sha.slice(0, 12) : "?", stackFailed = (io, result) => emit(io, fail(result.code, result.error, { unblock: result.unblock, data: result.data ?? {} })), label = (forge, pr) => pr === null ? "no PR" : `${forge === "gitlab" ? "MR !" : "PR #"}${pr}`, renderSync = (data) => [
   `${data.dryRun ? "would sync" : "synced"} stack ${data.name}${data.merged.length ? `; merged: ${data.merged.map((item) => item.branch).join(", ")}` : ""}`,
   ...data.steps.map((step) => [
     `  ${step.branch} on ${step.parent}:`,
@@ -75711,8 +75810,9 @@ var init_stack2 = __esm(() => {
   METHODS3 = new Set(["squash", "merge", "rebase"]);
 });
 
-// packages/workit-core/src/fanout.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/fanout.ts
 import { spawnSync as spawnSync21 } from "node:child_process";
+import { createHash as createHash16 } from "node:crypto";
 import fs23 from "node:fs";
 import path43 from "node:path";
 function expandBraces(pattern, limit = 64) {
@@ -75874,6 +75974,9 @@ function parsePlan(raw, defaults, name) {
     else
       shared.push(normalized.pattern);
   }
+  const fanIn = raw.fanIn ?? "prs";
+  if (!FAN_IN_MODES.includes(fanIn))
+    problems.push(`fanIn must be one of ${FAN_IN_MODES.join(", ")}`);
   if (!Array.isArray(raw.slices) || raw.slices.length === 0)
     return { ok: false, problems: [...problems, "slices: list at least one slice"] };
   const slices = [];
@@ -75955,7 +76058,9 @@ function parsePlan(raw, defaults, name) {
       verify,
       forbidden,
       context: optional("context"),
-      timebox: optional("timebox")
+      timebox: optional("timebox"),
+      hash: "",
+      hashSince: ""
     });
   });
   const byId = new Map(slices.map((slice) => [slice.id, slice]));
@@ -75988,8 +76093,11 @@ function parsePlan(raw, defaults, name) {
       v: FANOUT_VERSION,
       name: planName,
       trunk,
+      fanIn,
       shared,
       slices,
+      leadSession: null,
+      formerLeads: [],
       createdAt: "",
       updatedAt: ""
     }
@@ -76175,6 +76283,18 @@ function worktreeRoot(cwd) {
   const main = mainCheckout(cwd);
   return path43.join(path43.dirname(main), `${path43.basename(main)}-wt`);
 }
+function sliceHash(slice) {
+  const {
+    worktree: _worktree,
+    hash: _hash,
+    hashSince: _since,
+    tier: _tier,
+    timebox: _timebox,
+    context: _context,
+    ...definition
+  } = slice;
+  return createHash16("sha256").update(JSON.stringify(definition)).digest("hex").slice(0, 16);
+}
 function fanoutsDir(cwd) {
   const root = storeRoot(cwd);
   if (!root.ok)
@@ -76215,20 +76335,29 @@ function parseStored(raw) {
       verify: list(item.verify),
       forbidden: list(item.forbidden),
       context: typeof item.context === "string" ? item.context : null,
-      timebox: typeof item.timebox === "string" ? item.timebox : null
+      timebox: typeof item.timebox === "string" ? item.timebox : null,
+      hash: text(item.hash),
+      hashSince: text(item.hashSince) || text(raw.createdAt)
     });
   }
+  for (const slice of slices)
+    slice.hash ||= sliceHash(slice);
   const shared = globs(raw.shared);
   const ids = new Set(slices.map((slice) => slice.id));
   if (!globsValid || ids.size !== slices.length || slices.some((slice) => slice.dependsOn.some((dep) => dep === slice.id || !ids.has(dep))) || findCycle(slices))
     return null;
+  const fanIn = raw.fanIn === "integration" ? "integration" : "prs";
+  const createdAt = text(raw.createdAt);
   return {
     v: typeof raw.v === "number" ? raw.v : FANOUT_VERSION,
     name: raw.name,
     trunk: raw.trunk,
+    fanIn,
     shared,
     slices,
-    createdAt: text(raw.createdAt),
+    leadSession: typeof raw.leadSession === "string" && raw.leadSession ? raw.leadSession : null,
+    formerLeads: list(raw.formerLeads),
+    createdAt,
     updatedAt: text(raw.updatedAt)
   };
 }
@@ -76308,6 +76437,11 @@ function planFanout(cwd, input, now = new Date) {
   const dir = fanoutsDir(cwd);
   if (!dir.ok)
     return dir;
+  const session = input.actor.session;
+  if (input.takeLead && !session)
+    return fanoutFail("blocked", "--take-lead needs a session: WORKIT_SESSION_ID is not set", "export WORKIT_SESSION_ID=<your session id>, then plan again with --take-lead");
+  if (input.takeLead && isDelegateSession(session))
+    return fanoutFail("blocked", `session ${session} is a worker or verifier id; only a lead takes the lead`, "run --take-lead from the lead's own session");
   const parsed = parsePlan(input.trunk && isRecord8(input.raw) ? { ...input.raw, trunk: input.trunk } : input.raw, {
     trunk: input.trunk ?? defaultTrunk(cwd),
     root: mainCheckout(cwd),
@@ -76316,6 +76450,8 @@ function planFanout(cwd, input, now = new Date) {
   if (!parsed.ok)
     return fanoutFail("invalid_input", `the plan is incomplete: ${parsed.problems[0]}${parsed.problems.length > 1 ? ` (+${parsed.problems.length - 1} more)` : ""}`, "fill every listed field, then run workit fanout plan again", { problems: parsed.problems });
   const plan = parsed.plan;
+  if (plan.fanIn === "integration" && plan.trunk === defaultTrunk(cwd))
+    return fanoutFail("invalid_input", `fanIn "integration" needs an integration branch as the trunk, not ${plan.trunk}`, `workit git branch <integration-branch> --base ${plan.trunk}, then plan with --trunk <integration-branch>`);
   const badBranches = plan.slices.filter((slice) => !gitRun4(cwd, ["check-ref-format", "--branch", slice.branch]).ok).map((slice) => `slice ${slice.id}: ${slice.branch} is not a valid branch name`);
   if (badBranches.length)
     return fanoutFail("invalid_input", badBranches[0], "rename the branch in the plan", {
@@ -76344,20 +76480,50 @@ function planFanout(cwd, input, now = new Date) {
   const existing = readFanout(cwd, plan.name);
   const previous = existing.ok ? existing.data : null;
   plan.createdAt = previous?.createdAt || now.toISOString();
+  plan.leadSession = input.takeLead ? session : previous ? previous.leadSession : session;
+  plan.formerLeads = [
+    ...new Set([
+      ...previous?.formerLeads ?? [],
+      ...previous?.leadSession && previous.leadSession !== plan.leadSession ? [previous.leadSession] : []
+    ])
+  ].filter((former) => former !== plan.leadSession);
   plan.updatedAt = now.toISOString();
+  for (const slice of plan.slices) {
+    slice.hash = sliceHash(slice);
+    const before = previous?.slices.find((old) => old.id === slice.id);
+    slice.hashSince = before && before.hash === slice.hash ? before.hashSince || plan.updatedAt : plan.updatedAt;
+  }
   const written = writeFanout(cwd, plan);
   if (!written.ok)
     return written;
+  if (previous && plan.leadSession !== previous.leadSession)
+    appendObserved(cwd, {
+      type: "fanout.lead.changed",
+      actor: input.actor,
+      fanout: plan.name,
+      from: previous.leadSession,
+      to: plan.leadSession
+    });
   appendObserved(cwd, {
     type: "fanout.planned",
     actor: input.actor,
     fanout: plan.name,
     trunk: plan.trunk,
+    fanIn: plan.fanIn,
     slices: plan.slices.length,
     ids: plan.slices.slice(0, 20).map((slice) => slice.id)
   });
   const grouped = waves(plan.slices);
   const notes = [];
+  const warnings = [];
+  if (!input.takeLead && previous?.leadSession && session && session !== previous.leadSession)
+    notes.push(`the lead stays ${previous.leadSession}; this session is ${session}. Leading from this session now? workit fanout plan <plan.json> --take-lead`);
+  if (previous === null) {
+    const ledger = readLedger(cwd);
+    const inForce = ledger.ok ? activeStanding(ledger.value.rows, plan.name, planLeads(plan)) : [];
+    if (inForce.length)
+      warnings.push(`${inForce.length} standing order${inForce.length === 1 ? " is" : "s are"} already in force for fanout ${plan.name}, and every brief will carry ${inForce.length === 1 ? "it" : "them"}: ${inForce.map((row) => `"${String(row.what)}"`).join("; ")}. From an earlier run? workit ledger standing clear --fanout ${plan.name}`);
+  }
   if (!ref)
     notes.push(`trunk ${plan.trunk} does not resolve here; only sample paths of each glob were compared`);
   grouped.forEach((wave, index) => {
@@ -76372,6 +76538,7 @@ function planFanout(cwd, input, now = new Date) {
     data: {
       name: plan.name,
       trunk: plan.trunk,
+      fanIn: plan.fanIn,
       file: written.data,
       created: previous === null,
       slices: plan.slices.map(({ id, branch, base, worktree, tier, dependsOn, scope, owns }) => ({
@@ -76387,11 +76554,12 @@ function planFanout(cwd, input, now = new Date) {
       overlaps,
       waves: grouped,
       landingOrder: landingOrder(plan.slices),
-      notes
+      notes,
+      warnings
     }
   };
 }
-var FANOUT_VERSION = 1, TIERS, fanoutFail = (code, error, unblock, data) => ({
+var FANOUT_VERSION = 1, TIERS, FAN_IN_MODES, fanoutFail = (code, error, unblock, data) => ({
   ok: false,
   code,
   error,
@@ -76431,12 +76599,13 @@ var FANOUT_VERSION = 1, TIERS, fanoutFail = (code, error, unblock, data) => ({
     stdout: run.stdout ?? "",
     stderr: run.error ? String(run.error.message) : run.stderr ?? ""
   };
-}, nulList2 = (text) => text.split("\x00").filter(Boolean), IN_FLIGHT_CAP = 6;
+}, nulList2 = (text) => text.split("\x00").filter(Boolean), planLeads = (plan) => plan.leadSession ? [plan.leadSession, ...plan.formerLeads] : null, IN_FLIGHT_CAP = 6;
 var init_fanout = __esm(() => {
   init_rev();
   init_ledger();
   init_stack();
   TIERS = ["mundane", "standard", "hard"];
+  FAN_IN_MODES = ["prs", "integration"];
   DEFAULT_SHARED = [
     "**/package.json",
     "**/{package-lock.json,npm-shrinkwrap.json,bun.lock,bun.lockb,pnpm-lock.yaml,pnpm-workspace.yaml,yarn.lock}",
@@ -76452,7 +76621,489 @@ var init_fanout = __esm(() => {
   ID = /^[a-z0-9][a-z0-9._-]{0,63}$/u;
 });
 
-// packages/workit-core/src/fanout-landed.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/fanout-worktree.ts
+import { randomBytes as randomBytes4 } from "node:crypto";
+import fs24 from "node:fs";
+import path44 from "node:path";
+function rowSample(lines) {
+  const out = [];
+  let bytes = 0;
+  for (const line of lines) {
+    const entry = line.slice(0, 200);
+    bytes += Buffer.byteLength(entry) + 3;
+    if (bytes > DIRTY_ROW_BYTES)
+      break;
+    out.push(entry);
+  }
+  return out;
+}
+function listWorktrees(cwd) {
+  const out = [];
+  let current = null;
+  for (const field of gitRun4(cwd, ["worktree", "list", "--porcelain", "-z"]).stdout.split("\x00")) {
+    if (field.startsWith("worktree ")) {
+      current = { path: field.slice(9), head: null, branch: null, locked: false };
+      out.push(current);
+    } else if (!current)
+      continue;
+    else if (field.startsWith("HEAD "))
+      current.head = field.slice(5);
+    else if (field.startsWith("branch "))
+      current.branch = field.slice(7);
+    else if (field === "locked" || field.startsWith("locked "))
+      current.locked = true;
+  }
+  return out;
+}
+function createdRow(cwd, plan, slice, target) {
+  const ledger = readLedger(cwd);
+  if (!ledger.ok)
+    return null;
+  const atPath = (row) => row.fanout === plan.name && row.slice === slice.id && typeof row.path === "string" && samePath(row.path, target);
+  const rows = ledger.value.rows;
+  const row = rows.findLast((candidate) => candidate.type === "fanout.worktree.created" && atPath(candidate));
+  if (!row)
+    return null;
+  const removedSince = rows.some((candidate) => candidate.seq > row.seq && candidate.type === "fanout.worktree.released" && candidate.outcome === "removed" && atPath(candidate));
+  if (removedSince)
+    return null;
+  const admin = adminDir(target);
+  if (!admin)
+    return null;
+  if (typeof row.adminToken === "string")
+    return row.adminToken === admin.token && row.adminId === admin.id && row.adminIno === admin.ino ? { row, exact: true } : null;
+  const made = admin.birthMs ?? admin.mtimeMs;
+  if (made + CLOCK_SLACK_MS < Date.parse(row.at))
+    return null;
+  return { row, exact: false };
+}
+function adminDir(worktree) {
+  const dir = gitRun4(worktree, ["rev-parse", "--absolute-git-dir"]);
+  if (!dir.ok)
+    return null;
+  const file = dir.stdout.trim();
+  let token = null;
+  try {
+    token = fs24.readFileSync(path44.join(file, TOKEN_FILE), "utf8").trim() || null;
+  } catch {
+    token = null;
+  }
+  try {
+    const stat = worktreeDeps.stat(file);
+    return {
+      path: file,
+      id: path44.basename(file),
+      ino: stat.ino.toString(),
+      token,
+      birthMs: stat.birthtimeNs > 0n ? Number(stat.birthtimeMs) : null,
+      mtimeMs: Number(stat.mtimeMs)
+    };
+  } catch {
+    return null;
+  }
+}
+function markAdminDir(worktree) {
+  const admin = adminDir(worktree);
+  if (!admin)
+    return null;
+  const token = randomBytes4(16).toString("hex");
+  try {
+    fs24.writeFileSync(path44.join(admin.path, TOKEN_FILE), `${token}
+`);
+  } catch {
+    return null;
+  }
+  return { ...admin, token };
+}
+function findSlice(plan, id) {
+  const slice = plan.slices.find((candidate) => candidate.id === id);
+  return slice ? { ok: true, data: slice } : fanoutFail("invalid_input", `${id}: not a slice of fanout ${plan.name}`, `slices: ${plan.slices.map((candidate) => candidate.id).join(", ")}`);
+}
+function excludeScratch(cwd) {
+  const common = gitCommonDir(cwd);
+  if (!common)
+    return;
+  const file = path44.join(common, "info", "exclude");
+  let text = "";
+  try {
+    text = fs24.readFileSync(file, "utf8");
+  } catch {
+    text = "";
+  }
+  if (text.split(/\r?\n/u).includes(EXCLUDE_LINE))
+    return;
+  fs24.mkdirSync(path44.dirname(file), { recursive: true });
+  fs24.appendFileSync(file, `${text && !text.endsWith(`
+`) ? `
+` : ""}# workit fanout: per-worker scratch dirs
+${EXCLUDE_LINE}
+`);
+}
+function ensureScratch(worktree) {
+  const scratch = path44.join(worktree, SCRATCH_DIR);
+  fs24.mkdirSync(scratch, { recursive: true });
+  return scratch;
+}
+function createSliceWorktree(cwd, plan, input) {
+  const found = findSlice(plan, input.slice);
+  if (!found.ok)
+    return found;
+  const slice = found.data;
+  if (!slice.worktree)
+    return fanoutFail("invalid_input", `slice ${slice.id} has no worktree path`, "re-plan it with workit fanout plan");
+  const target = slicePath(cwd, slice);
+  const worktrees = listWorktrees(cwd);
+  const localRef = `refs/heads/${slice.branch}`;
+  const existing = worktrees.find((entry) => samePath(entry.path, target));
+  const base = {
+    fanout: plan.name,
+    slice: slice.id,
+    branch: slice.branch,
+    base: slice.base,
+    path: target
+  };
+  if (existing) {
+    if (existing.branch !== null && existing.branch !== localRef)
+      return fanoutFail("blocked", `${target} is a worktree on ${existing.branch.replace(/^refs\/heads\//u, "")}, not ${slice.branch}`, `release it first, or set slice ${slice.id}'s worktree to another path`);
+    if (!createdRow(cwd, plan, slice, target))
+      return fanoutFail("blocked", `${target} is a worktree that workit fanout worktree create did not make for slice ${slice.id}`, `remove it yourself (git worktree remove ${target}) once you know what it holds`);
+    excludeScratch(cwd);
+    return {
+      ok: true,
+      data: {
+        ...base,
+        scratch: ensureScratch(target),
+        head: existing.head ?? "",
+        mode: resolveRef(cwd, localRef) ? "resume" : "new",
+        created: false,
+        notes: ["the worktree already exists; nothing was changed"]
+      }
+    };
+  }
+  const elsewhere = worktrees.find((entry) => entry.branch === localRef);
+  if (elsewhere)
+    return fanoutFail("blocked", `${slice.branch} is checked out at ${elsewhere.path}: never two live workers on one branch`, `stop that worker, then workit fanout worktree release ${slice.id} (or git worktree remove ${elsewhere.path})`);
+  let dirExisted = false;
+  try {
+    const stat = fs24.statSync(target);
+    if (!stat.isDirectory() || fs24.readdirSync(target).length > 0)
+      return fanoutFail("blocked", `${target} exists and is ${stat.isDirectory() ? "not empty" : "not a directory"} (not a worktree of this repository)`, `move it away, or set slice ${slice.id}'s worktree to another path`);
+    dirExisted = true;
+  } catch (error) {
+    if (error.code !== "ENOENT")
+      return fanoutFail("failed", `cannot read ${target}: ${error.message}`);
+  }
+  const notes = [];
+  let mode = "resume";
+  if (resolveRef(cwd, localRef)) {
+    const added = gitRun4(cwd, ["worktree", "add", target, slice.branch], SLOW);
+    if (!added.ok)
+      return worktreeFailed(added.stderr);
+  } else {
+    const remote = pushRemoteName(cwd) ?? "origin";
+    const remoteRef = `refs/remotes/${remote}/${slice.branch}`;
+    if (resolveRef(cwd, remoteRef)) {
+      const added = gitRun4(cwd, ["worktree", "add", "-b", slice.branch, target, remoteRef], SLOW);
+      if (!added.ok)
+        return worktreeFailed(added.stderr);
+      notes.push(`resumed ${slice.branch} from ${remote}/${slice.branch}`);
+    } else {
+      mode = "new";
+      const parent = plan.slices.find((other) => other.branch === slice.base);
+      const from = slice.base === plan.trunk ? trunkRef(cwd, plan.trunk) : parent ? branchRef(cwd, parent.branch) : branchRef(cwd, slice.base);
+      if (!from)
+        return fanoutFail("not_found", `base ${slice.base} of slice ${slice.id} does not resolve here`, parent ? `start slice ${parent.id} first (its branch ${parent.branch} is the base)` : `git fetch origin ${slice.base}`);
+      const added = gitRun4(cwd, ["worktree", "add", "--detach", target, from], SLOW);
+      if (!added.ok)
+        return worktreeFailed(added.stderr);
+      const branched = gitBranch(target, { name: slice.branch, base: slice.base });
+      if (!branched.ok) {
+        gitRun4(cwd, ["worktree", "remove", target], SLOW);
+        return fanoutFail(branched.code, `workit git branch ${slice.branch} refused: ${branched.error}`, branched.unblock ?? `fix the branch name in the plan, then workit fanout worktree create ${slice.id}`);
+      }
+      notes.push(...branched.data.notes);
+    }
+  }
+  excludeScratch(cwd);
+  const scratch = ensureScratch(target);
+  const head = gitRun4(target, ["rev-parse", "HEAD"]).stdout.trim();
+  const baseSha = mode === "new" ? head : null;
+  const admin = markAdminDir(target);
+  appendObserved(cwd, {
+    type: "fanout.worktree.created",
+    actor: input.actor,
+    fanout: plan.name,
+    slice: slice.id,
+    branch: slice.branch,
+    path: target,
+    scratch,
+    mode,
+    head,
+    dirExisted,
+    planCreatedAt: plan.createdAt,
+    sliceHash: slice.hash,
+    ...admin ? { adminId: admin.id, adminIno: admin.ino, adminToken: admin.token } : {},
+    ...baseSha ? { baseSha } : {}
+  });
+  return { ok: true, data: { ...base, scratch, head, mode, created: true, notes } };
+}
+function releaseSliceWorktree(cwd, plan, input) {
+  const found = findSlice(plan, input.slice);
+  if (!found.ok)
+    return found;
+  const slice = found.data;
+  const target = slicePath(cwd, slice);
+  const worktrees = listWorktrees(cwd);
+  const index = worktrees.findIndex((entry) => samePath(entry.path, target));
+  const out = {
+    fanout: plan.name,
+    slice: slice.id,
+    branch: slice.branch,
+    path: target,
+    head: null,
+    dirty: [],
+    forced: input.force,
+    removed: false,
+    unpushed: null,
+    notes: []
+  };
+  if (index < 0) {
+    if (fs24.existsSync(target))
+      return fanoutFail("blocked", `${target} is not a worktree of this repository; nothing was removed`, "remove it yourself once you know what it holds");
+    out.notes.push(`no worktree at ${target}; nothing to release`);
+    return { ok: true, data: out };
+  }
+  const entry = worktrees[index];
+  if (index === 0)
+    return fanoutFail("blocked", `${target} is the main checkout; it is never released`);
+  if (inside2(cwd, entry.path))
+    return fanoutFail("blocked", `this command runs inside ${entry.path}`, `run it from the main checkout: workit --cwd <main checkout> fanout worktree release ${slice.id}`);
+  if (entry.branch !== null && entry.branch !== `refs/heads/${slice.branch}`)
+    return fanoutFail("blocked", `${entry.path} is on ${entry.branch.replace(/^refs\/heads\//u, "")}, not slice ${slice.id}'s ${slice.branch}; nothing was removed`);
+  const owned = createdRow(cwd, plan, slice, entry.path);
+  if (!owned)
+    return fanoutFail("blocked", `${entry.path} was not made by workit fanout worktree create for slice ${slice.id} (no ledger row); nothing was removed`, `remove it yourself (git worktree remove ${entry.path}) once you know what it holds`);
+  if (input.force && !owned.exact)
+    return fanoutFail("blocked", `${entry.path} was created before workit recorded worktree identity, so it cannot be told from a worktree someone re-added there; --force is refused and nothing was removed`, `release it without --force, or remove it yourself (git worktree remove ${entry.path}) once you know what it holds`);
+  const made = owned.row;
+  out.head = entry.head;
+  const status = gitRun4(entry.path, [
+    "status",
+    "--porcelain=v1",
+    "-z",
+    "--untracked-files=all",
+    "--ignore-submodules=none"
+  ]);
+  if (!status.ok)
+    return fanoutFail("failed", `git status in ${entry.path} failed: ${status.stderr.trim().split(`
+`)[0]}`, "nothing was removed; inspect the worktree by hand");
+  const entries = porcelainEntries(status.stdout);
+  const inScratch = (line) => line.slice(3).startsWith(`${SCRATCH_DIR}/`);
+  out.dirty = entries.filter((line) => !inScratch(line));
+  out.unpushed = unpushedCount(cwd, slice.branch);
+  const refused = out.dirty.length > 0 && !input.force;
+  const recorded = appendObserved(cwd, {
+    type: "fanout.worktree.released",
+    actor: input.actor,
+    fanout: plan.name,
+    slice: slice.id,
+    branch: slice.branch,
+    path: entry.path,
+    head: entry.head,
+    uncommittedCount: out.dirty.length,
+    uncommitted: rowSample(out.dirty),
+    forced: input.force,
+    outcome: refused ? "refused" : "removed"
+  });
+  if (!recorded.ok)
+    return fanoutFail("unavailable", `cannot record the worktree state in the ledger (${recorded.error}); nothing was removed`);
+  if (refused)
+    return fanoutFail("blocked", `${entry.path} has ${out.dirty.length} uncommitted change${out.dirty.length === 1 ? "" : "s"} (${out.dirty.slice(0, 3).join(", ")}${out.dirty.length > 3 ? ", …" : ""}); recorded in the ledger, nothing removed`, `commit them on ${slice.branch} (workit git commit), or pass --force to drop them`, { ...out });
+  const args = ["worktree", "remove", ...input.force ? ["--force"] : [], entry.path];
+  let removed = gitRun4(cwd, args, SLOW);
+  if (!removed.ok && entries.some(inScratch)) {
+    removeScratch(entry.path);
+    removed = gitRun4(cwd, args, SLOW);
+  }
+  if (!removed.ok)
+    return fanoutFail("failed", `git worktree remove failed: ${removed.stderr.trim().split(`
+`)[0]}`, entry.locked ? `git worktree unlock ${entry.path}, then release again` : undefined, { ...out });
+  out.removed = true;
+  if (made.dirExisted === true)
+    fs24.mkdirSync(entry.path, { recursive: true });
+  if (out.unpushed)
+    out.notes.push(`${slice.branch} is kept with ${out.unpushed} commit(s) not on the remote`);
+  return { ok: true, data: out };
+}
+function porcelainEntries(stdout) {
+  const fields = nulList2(stdout);
+  const out = [];
+  for (let index = 0;index < fields.length; index += 1) {
+    const entry = fields[index];
+    out.push(entry);
+    if (entry[0] === "R" || entry[0] === "C")
+      index += 1;
+  }
+  return out;
+}
+function unpushedCount(cwd, branch) {
+  const remote = pushRemoteName(cwd) ?? "origin";
+  const local = resolveRef(cwd, `refs/heads/${branch}`);
+  if (!local)
+    return null;
+  const tracking = resolveRef(cwd, `refs/remotes/${remote}/${branch}`);
+  if (!tracking)
+    return null;
+  const count = gitRun4(cwd, ["rev-list", "--count", `${tracking}..${local}`]);
+  return count.ok ? Number(count.stdout.trim()) : null;
+}
+function removeScratch(worktree) {
+  const scratch = path44.join(worktree, SCRATCH_DIR);
+  let stat;
+  try {
+    stat = fs24.lstatSync(scratch);
+  } catch {
+    return;
+  }
+  if (stat.isSymbolicLink() || !stat.isDirectory())
+    fs24.unlinkSync(scratch);
+  else
+    fs24.rmSync(scratch, { recursive: true, force: true, maxRetries: 2 });
+}
+var SLOW, SCRATCH_DIR = ".workit-scratch", EXCLUDE_LINE, DIRTY_ROW_BYTES = 2000, canonical2 = (target) => {
+  try {
+    return fs24.realpathSync.native(target);
+  } catch {
+    return path44.resolve(target);
+  }
+}, samePath = (a, b) => {
+  const left = canonical2(a);
+  const right = canonical2(b);
+  return process.platform === "win32" || process.platform === "darwin" ? left.toLowerCase() === right.toLowerCase() : left === right;
+}, inside2 = (child, parent) => {
+  const relative = path44.relative(canonical2(parent), canonical2(child));
+  return relative === "" || !relative.startsWith("..") && !path44.isAbsolute(relative);
+}, slicePath = (cwd, slice) => path44.isAbsolute(slice.worktree) ? slice.worktree : path44.resolve(mainCheckout(cwd), slice.worktree), CLOCK_SLACK_MS = 2000, TOKEN_FILE = "workit-fanout-token", worktreeDeps, worktreeFailed = (stderr) => fanoutFail("failed", `git worktree add failed: ${stderr.trim().split(`
+`)[0] || "unknown error"}`);
+var init_fanout_worktree = __esm(() => {
+  init_ops();
+  init_rev();
+  init_ledger();
+  init_fanout();
+  SLOW = GIT_TIMEOUTS.worktree;
+  EXCLUDE_LINE = `/${SCRATCH_DIR}/`;
+  worktreeDeps = {
+    stat: (file) => fs24.statSync(file, { bigint: true })
+  };
+});
+
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/fanout-brief.ts
+import { createHash as createHash17 } from "node:crypto";
+function workerSession(lead, slice, attempt) {
+  const tail = attempt === null ? "" : `+try${attempt}`;
+  const full = `${lead}-w-${slice}${tail}`;
+  if (full.length <= SESSION_MAX)
+    return full;
+  const digest = createHash17("sha256").update(slice).digest("hex").slice(0, 12);
+  return `${lead.slice(0, SESSION_MAX - 3 - digest.length - tail.length)}-w-${digest}${tail}`;
+}
+function renderBrief(cwd, plan, input) {
+  const found = findSlice(plan, input.slice);
+  if (!found.ok)
+    return found;
+  const slice = found.data;
+  const ledger = readLedger(cwd);
+  if (!ledger.ok)
+    return fanoutFail(ledger.code, ledger.error, ledger.unblock);
+  if (!input.actor.session)
+    return fanoutFail("blocked", "WORKIT_SESSION_ID is not set: worker session ids derive from the lead's", "export WORKIT_SESSION_ID=<your session id>, then render the brief again");
+  const branch = input.attempt === null ? slice.branch : `${slice.branch}-try${input.attempt}`;
+  const taken = plan.slices.find((other) => other.id !== slice.id && other.branch === branch);
+  if (taken)
+    return fanoutFail("invalid_input", `attempt branch ${branch} is slice ${taken.id}'s branch`, "pick another --attempt number, or rename one of the branches in the plan");
+  const head = branchRef(cwd, branch);
+  const mode = input.mode ?? (head ? "resume" : "new");
+  if (mode === "resume" && !head)
+    return fanoutFail("not_found", `MODE resume needs the branch ${branch}, which does not exist here`, `workit fanout brief ${slice.id} --mode new`);
+  const planned = `${slicePath(cwd, slice)}${input.attempt === null ? "" : `+try${input.attempt}`}`;
+  const exists = listWorktrees(cwd).some((entry) => samePath(entry.path, planned));
+  excludeScratch(cwd);
+  const scratch = exists ? `${planned}/${SCRATCH_DIR}` : SCRATCH_DIR;
+  const scratchLine = exists ? `SCRATCH: ${scratch}  (yours alone; temp files go here, never a shared path)` : `SCRATCH: ${SCRATCH_DIR}/ at your worktree root (mkdir -p it; git ignores it; never a shared path)`;
+  const standing = activeStanding(ledger.value.rows, plan.name, planLeads(plan)).map((row) => ({
+    id: row.id,
+    what: String(row.what)
+  }));
+  const session = workerSession(sessionSafe(input.actor.session), slice.id, input.attempt);
+  const fanIn = plan.fanIn === "integration" ? [
+    `FAN-IN: integration branch ${plan.trunk}. Before you report, merge its tip into your branch`,
+    `  (\`git merge --no-edit ${plan.trunk}\`), resolve conflicts inside SCOPE and re-run VERIFY, so the`,
+    "  lead's merge is a fast-forward. No other merge, and no rebase, retarget or force-push."
+  ] : [
+    "FAN-IN: one PR per slice. Never rebase, retarget, merge or force-push: the lead owns topology."
+  ];
+  const lines = [
+    `MODE: ${mode}${input.attempt === null ? "" : `  (race attempt ${input.attempt}: the lead keeps the attempt with the best verdict)`}`,
+    `GOAL: ${slice.goal}`,
+    `SCOPE: ${slice.scope.join(", ")}`,
+    ...slice.owns.length ? [`  owns: ${slice.owns.join(", ")}`] : [],
+    `  branch: ${branch}   base: ${slice.base}`,
+    `CONTEXT: ${slice.context ?? "none given: read the files in SCOPE and the neighbours they import"}`,
+    ...mode === "resume" && head ? [
+      `  resume: continue ${branch} from ${head.slice(0, 12)}; read \`git log ${slice.base}..${branch}\` and \`workit ledger list --branch ${branch}\` (the last report, verdicts, rulings)`
+    ] : [],
+    "ACCEPTANCE:",
+    ...slice.acceptance.map((line) => `  - ${line}`),
+    `VERIFY: ${slice.verify.join("; ")}`,
+    `TIER: ${slice.tier}`,
+    `TIMEBOX: ${slice.timebox ?? DEFAULT_TIMEBOX}; past it without a new commit you will be replaced`,
+    scratchLine,
+    `FORBIDDEN: ${slice.forbidden.join("; ")}`,
+    ...fanIn,
+    ...REPORT,
+    "STANDING:",
+    ...standing.length ? standing.map((order) => `  - ${order.what}`) : ["  - none recorded beyond this brief"],
+    `  export WORKIT_SESSION_ID=${session}`,
+    ...rules(mode, branch, slice.base)
+  ];
+  return {
+    ok: true,
+    data: {
+      fanout: plan.name,
+      slice: slice.id,
+      mode,
+      attempt: input.attempt,
+      branch,
+      base: slice.base,
+      tier: slice.tier,
+      scratch,
+      session,
+      standing,
+      text: `${lines.join(`
+`)}
+`
+    }
+  };
+}
+var DEFAULT_TIMEBOX = "30 minutes", REPORT, rules = (mode, branch, base) => [
+  "RULES:",
+  mode === "new" ? `  1. First command: \`workit git branch ${branch} --base ${base}\` (your worktree may start on another name).` : `  1. First command: \`git switch ${branch}\`, then continue from its head.`,
+  '  2. Decide ambiguities yourself: `workit ledger ruling "<what>" --why "<why>" --cost-if-wrong "<cost>"`; stop only for an irreversible, security-sensitive or out-of-worktree action.',
+  "  3. Commit with `workit git commit -m <msg> -- <paths in SCOPE>`; push only if this brief says so.",
+  "  4. Never record a verdict on your own work."
+], sessionSafe = (text) => text.replace(/[^A-Za-z0-9_.:@/+-]/gu, "-"), SESSION_MAX = 128;
+var init_fanout_brief = __esm(() => {
+  init_ledger();
+  init_fanout();
+  init_fanout_worktree();
+  REPORT = [
+    "REPORT: branch, head SHA, files changed, each VERIFY command with its exit code,",
+    "  each ACCEPTANCE line met / not met, rulings you made (`workit ledger ruling`),",
+    "  anything out of scope as a follow-up, not a diff."
+  ];
+});
+
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/fanout-landed.ts
 import { spawnSync as spawnSync22 } from "node:child_process";
 function forgeBreaker(resolved) {
   if (!resolved)
@@ -76562,9 +77213,20 @@ function trunkPatchIds(ctx, fork) {
   cache.set(fork, ids);
   return ids;
 }
+function inSliceRun(row, slice) {
+  if (row.type === "fanout.worktree.created" && typeof row.sliceHash === "string" && slice.hash)
+    return row.sliceHash === slice.hash;
+  const since = Date.parse(slice.hashSince);
+  return Number.isNaN(since) || Date.parse(String(row.at)) >= since;
+}
 function linked(rows, input, slice, head) {
   const since = input.since ? Date.parse(input.since) : Number.NaN;
-  return rows.some((row) => (Number.isNaN(since) || Date.parse(String(row.at)) >= since) && (row.type === "fanout.worktree.created" && row.fanout === input.fanout && row.slice === slice.id || head !== null && row.branch === slice.branch && row.head === head));
+  const recent = (row) => Number.isNaN(since) || Date.parse(String(row.at)) >= since;
+  return rows.some((row) => {
+    if (row.type === "fanout.worktree.created" && row.fanout === input.fanout && row.slice === slice.id)
+      return typeof row.sliceHash === "string" && input.sliceHash ? row.sliceHash === input.sliceHash : recent(row);
+    return recent(row) && head !== null && row.branch === slice.branch && row.head === head;
+  });
 }
 function detectLanding(ctx, slice, input) {
   const out = {
@@ -76637,7 +77299,7 @@ function sliceStart(cwd, rows, fanout, slice) {
   const reflog = branchCreatedAt(cwd, slice.branch);
   if (reflog)
     return reflog;
-  const row = rows.findLast((candidate) => candidate.type === "fanout.worktree.created" && candidate.fanout === fanout && candidate.slice === slice.id && typeof candidate.baseSha === "string");
+  const row = rows.findLast((candidate) => candidate.type === "fanout.worktree.created" && candidate.fanout === fanout && candidate.slice === slice.id && typeof candidate.baseSha === "string" && inSliceRun(candidate, slice));
   return row?.baseSha ?? null;
 }
 var isAncestor2 = (cwd, a, b) => gitRun4(cwd, ["merge-base", "--is-ancestor", a, b]).ok, TRUNK_SCAN = 500;
@@ -76646,7 +77308,7 @@ var init_fanout_landed = __esm(() => {
   init_fanout();
 });
 
-// packages/workit-core/src/fanout-check.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/fanout-check.ts
 function mergeConflicts(cwd, a, b) {
   const run = gitRun4(cwd, [
     "merge-tree",
@@ -76786,7 +77448,8 @@ function sliceLandings(cwd, plan, trunk, tips, rows, forge) {
       createdFrom: sliceStart(cwd, rows, plan.name, slice),
       parentHead,
       fanout: plan.name,
-      since: plan.createdAt || null,
+      since: slice.hashSince || plan.createdAt || null,
+      sliceHash: slice.hash || null,
       rows
     }));
   }
@@ -76903,7 +77566,7 @@ var init_fanout_check = __esm(() => {
   init_fanout_landed();
 });
 
-// packages/workit-core/src/fanout-status.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/fanout-status.ts
 function timeboxMs(text) {
   if (!text || /^\s*\d+(?:\.\d+)?\s*$/u.test(text))
     return null;
@@ -76928,7 +77591,7 @@ function activity(cwd, plan, slice, rows) {
     head,
     commit,
     last: newest(commit, reflog, ...ledger),
-    worktreeCreated: rows.some((row) => row.type === "fanout.worktree.created" && row.fanout === plan.name && row.slice === slice.id)
+    worktreeCreated: rows.some((row) => row.type === "fanout.worktree.created" && row.fanout === plan.name && row.slice === slice.id && inSliceRun(row, slice))
   };
 }
 function fanoutStatus(cwd, plan, options) {
@@ -77038,7 +77701,7 @@ function fanoutStatus(cwd, plan, options) {
     else if (row.branchExists)
       row.state = "active";
     else if (row.waitsFor.length === 0 || parent && row.waitsFor.length === 1 && row.waitsFor[0] === parent.id && out.get(parent.id)?.verdict.accepted) {
-      const created = rows.some((candidate) => candidate.type === "fanout.worktree.created" && candidate.fanout === plan.name && candidate.slice === id);
+      const created = rows.some((candidate) => candidate.type === "fanout.worktree.created" && candidate.fanout === plan.name && candidate.slice === id && inSliceRun(candidate, byId.get(id)));
       row.state = created ? "active" : "not_started";
       if (!created)
         spawnable.push(id);
@@ -77090,340 +77753,6 @@ var init_fanout_status = __esm(() => {
   DEFAULT_STUCK_MS = 30 * 60000;
 });
 
-// packages/workit-core/src/fanout-worktree.ts
-import fs24 from "node:fs";
-import path44 from "node:path";
-function rowSample(lines) {
-  const out = [];
-  let bytes = 0;
-  for (const line of lines) {
-    const entry = line.slice(0, 200);
-    bytes += Buffer.byteLength(entry) + 3;
-    if (bytes > DIRTY_ROW_BYTES)
-      break;
-    out.push(entry);
-  }
-  return out;
-}
-function listWorktrees(cwd) {
-  const out = [];
-  let current = null;
-  for (const field of gitRun4(cwd, ["worktree", "list", "--porcelain", "-z"]).stdout.split("\x00")) {
-    if (field.startsWith("worktree ")) {
-      current = { path: field.slice(9), head: null, branch: null, locked: false };
-      out.push(current);
-    } else if (!current)
-      continue;
-    else if (field.startsWith("HEAD "))
-      current.head = field.slice(5);
-    else if (field.startsWith("branch "))
-      current.branch = field.slice(7);
-    else if (field === "locked" || field.startsWith("locked "))
-      current.locked = true;
-  }
-  return out;
-}
-function createdRow(cwd, plan, slice, target) {
-  const ledger = readLedger(cwd);
-  if (!ledger.ok)
-    return null;
-  const atPath = (row) => row.fanout === plan.name && row.slice === slice.id && typeof row.path === "string" && samePath(row.path, target);
-  const rows = ledger.value.rows;
-  const row = rows.findLast((candidate) => candidate.type === "fanout.worktree.created" && atPath(candidate));
-  if (!row)
-    return null;
-  const removedSince = rows.some((candidate) => candidate.seq > row.seq && candidate.type === "fanout.worktree.released" && candidate.outcome === "removed" && atPath(candidate));
-  if (removedSince)
-    return null;
-  const made = adminDirTime(target);
-  if (made === null || made + CLOCK_SLACK_MS < Date.parse(row.at))
-    return null;
-  return row;
-}
-function adminDirTime(worktree) {
-  const dir = gitRun4(worktree, ["rev-parse", "--absolute-git-dir"]);
-  if (!dir.ok)
-    return null;
-  try {
-    const stat = fs24.statSync(dir.stdout.trim());
-    return stat.birthtimeMs > 0 ? stat.birthtimeMs : stat.mtimeMs;
-  } catch {
-    return null;
-  }
-}
-function findSlice(plan, id) {
-  const slice = plan.slices.find((candidate) => candidate.id === id);
-  return slice ? { ok: true, data: slice } : fanoutFail("invalid_input", `${id}: not a slice of fanout ${plan.name}`, `slices: ${plan.slices.map((candidate) => candidate.id).join(", ")}`);
-}
-function excludeScratch(cwd) {
-  const common = gitCommonDir(cwd);
-  if (!common)
-    return;
-  const file = path44.join(common, "info", "exclude");
-  let text = "";
-  try {
-    text = fs24.readFileSync(file, "utf8");
-  } catch {
-    text = "";
-  }
-  if (text.split(/\r?\n/u).includes(EXCLUDE_LINE))
-    return;
-  fs24.mkdirSync(path44.dirname(file), { recursive: true });
-  fs24.appendFileSync(file, `${text && !text.endsWith(`
-`) ? `
-` : ""}# workit fanout: per-worker scratch dirs
-${EXCLUDE_LINE}
-`);
-}
-function ensureScratch(worktree) {
-  const scratch = path44.join(worktree, SCRATCH_DIR);
-  fs24.mkdirSync(scratch, { recursive: true });
-  return scratch;
-}
-function createSliceWorktree(cwd, plan, input) {
-  const found = findSlice(plan, input.slice);
-  if (!found.ok)
-    return found;
-  const slice = found.data;
-  if (!slice.worktree)
-    return fanoutFail("invalid_input", `slice ${slice.id} has no worktree path`, "re-plan it with workit fanout plan");
-  const target = slicePath(cwd, slice);
-  const worktrees = listWorktrees(cwd);
-  const localRef = `refs/heads/${slice.branch}`;
-  const existing = worktrees.find((entry) => samePath(entry.path, target));
-  const base = {
-    fanout: plan.name,
-    slice: slice.id,
-    branch: slice.branch,
-    base: slice.base,
-    path: target
-  };
-  if (existing) {
-    if (existing.branch !== null && existing.branch !== localRef)
-      return fanoutFail("blocked", `${target} is a worktree on ${existing.branch.replace(/^refs\/heads\//u, "")}, not ${slice.branch}`, `release it first, or set slice ${slice.id}'s worktree to another path`);
-    if (!createdRow(cwd, plan, slice, target))
-      return fanoutFail("blocked", `${target} is a worktree that workit fanout worktree create did not make for slice ${slice.id}`, `remove it yourself (git worktree remove ${target}) once you know what it holds`);
-    excludeScratch(cwd);
-    return {
-      ok: true,
-      data: {
-        ...base,
-        scratch: ensureScratch(target),
-        head: existing.head ?? "",
-        mode: resolveRef(cwd, localRef) ? "resume" : "new",
-        created: false,
-        notes: ["the worktree already exists; nothing was changed"]
-      }
-    };
-  }
-  const elsewhere = worktrees.find((entry) => entry.branch === localRef);
-  if (elsewhere)
-    return fanoutFail("blocked", `${slice.branch} is checked out at ${elsewhere.path}: never two live workers on one branch`, `stop that worker, then workit fanout worktree release ${slice.id} (or git worktree remove ${elsewhere.path})`);
-  let dirExisted = false;
-  try {
-    const stat = fs24.statSync(target);
-    if (!stat.isDirectory() || fs24.readdirSync(target).length > 0)
-      return fanoutFail("blocked", `${target} exists and is ${stat.isDirectory() ? "not empty" : "not a directory"} (not a worktree of this repository)`, `move it away, or set slice ${slice.id}'s worktree to another path`);
-    dirExisted = true;
-  } catch (error) {
-    if (error.code !== "ENOENT")
-      return fanoutFail("failed", `cannot read ${target}: ${error.message}`);
-  }
-  const notes = [];
-  let mode = "resume";
-  if (resolveRef(cwd, localRef)) {
-    const added = gitRun4(cwd, ["worktree", "add", target, slice.branch], SLOW);
-    if (!added.ok)
-      return worktreeFailed(added.stderr);
-  } else {
-    const remote = pushRemoteName(cwd) ?? "origin";
-    const remoteRef = `refs/remotes/${remote}/${slice.branch}`;
-    if (resolveRef(cwd, remoteRef)) {
-      const added = gitRun4(cwd, ["worktree", "add", "-b", slice.branch, target, remoteRef], SLOW);
-      if (!added.ok)
-        return worktreeFailed(added.stderr);
-      notes.push(`resumed ${slice.branch} from ${remote}/${slice.branch}`);
-    } else {
-      mode = "new";
-      const parent = plan.slices.find((other) => other.branch === slice.base);
-      const from = slice.base === plan.trunk ? trunkRef(cwd, plan.trunk) : parent ? branchRef(cwd, parent.branch) : branchRef(cwd, slice.base);
-      if (!from)
-        return fanoutFail("not_found", `base ${slice.base} of slice ${slice.id} does not resolve here`, parent ? `start slice ${parent.id} first (its branch ${parent.branch} is the base)` : `git fetch origin ${slice.base}`);
-      const added = gitRun4(cwd, ["worktree", "add", "--detach", target, from], SLOW);
-      if (!added.ok)
-        return worktreeFailed(added.stderr);
-      const branched = gitBranch(target, { name: slice.branch, base: slice.base });
-      if (!branched.ok) {
-        gitRun4(cwd, ["worktree", "remove", target], SLOW);
-        return fanoutFail(branched.code, `workit git branch ${slice.branch} refused: ${branched.error}`, branched.unblock ?? `fix the branch name in the plan, then workit fanout worktree create ${slice.id}`);
-      }
-      notes.push(...branched.data.notes);
-    }
-  }
-  excludeScratch(cwd);
-  const scratch = ensureScratch(target);
-  const head = gitRun4(target, ["rev-parse", "HEAD"]).stdout.trim();
-  const baseSha = mode === "new" ? head : null;
-  appendObserved(cwd, {
-    type: "fanout.worktree.created",
-    actor: input.actor,
-    fanout: plan.name,
-    slice: slice.id,
-    branch: slice.branch,
-    path: target,
-    scratch,
-    mode,
-    head,
-    dirExisted,
-    planCreatedAt: plan.createdAt,
-    ...baseSha ? { baseSha } : {}
-  });
-  return { ok: true, data: { ...base, scratch, head, mode, created: true, notes } };
-}
-function releaseSliceWorktree(cwd, plan, input) {
-  const found = findSlice(plan, input.slice);
-  if (!found.ok)
-    return found;
-  const slice = found.data;
-  const target = slicePath(cwd, slice);
-  const worktrees = listWorktrees(cwd);
-  const index = worktrees.findIndex((entry) => samePath(entry.path, target));
-  const out = {
-    fanout: plan.name,
-    slice: slice.id,
-    branch: slice.branch,
-    path: target,
-    head: null,
-    dirty: [],
-    forced: input.force,
-    removed: false,
-    unpushed: null,
-    notes: []
-  };
-  if (index < 0) {
-    if (fs24.existsSync(target))
-      return fanoutFail("blocked", `${target} is not a worktree of this repository; nothing was removed`, "remove it yourself once you know what it holds");
-    out.notes.push(`no worktree at ${target}; nothing to release`);
-    return { ok: true, data: out };
-  }
-  const entry = worktrees[index];
-  if (index === 0)
-    return fanoutFail("blocked", `${target} is the main checkout; it is never released`);
-  if (inside2(cwd, entry.path))
-    return fanoutFail("blocked", `this command runs inside ${entry.path}`, `run it from the main checkout: workit --cwd <main checkout> fanout worktree release ${slice.id}`);
-  if (entry.branch !== null && entry.branch !== `refs/heads/${slice.branch}`)
-    return fanoutFail("blocked", `${entry.path} is on ${entry.branch.replace(/^refs\/heads\//u, "")}, not slice ${slice.id}'s ${slice.branch}; nothing was removed`);
-  const made = createdRow(cwd, plan, slice, entry.path);
-  if (!made)
-    return fanoutFail("blocked", `${entry.path} was not made by workit fanout worktree create for slice ${slice.id} (no ledger row); nothing was removed`, `remove it yourself (git worktree remove ${entry.path}) once you know what it holds`);
-  out.head = entry.head;
-  const status = gitRun4(entry.path, [
-    "status",
-    "--porcelain=v1",
-    "-z",
-    "--untracked-files=all",
-    "--ignore-submodules=none"
-  ]);
-  if (!status.ok)
-    return fanoutFail("failed", `git status in ${entry.path} failed: ${status.stderr.trim().split(`
-`)[0]}`, "nothing was removed; inspect the worktree by hand");
-  const entries = porcelainEntries(status.stdout);
-  const inScratch = (line) => line.slice(3).startsWith(`${SCRATCH_DIR}/`);
-  out.dirty = entries.filter((line) => !inScratch(line));
-  out.unpushed = unpushedCount(cwd, slice.branch);
-  const refused = out.dirty.length > 0 && !input.force;
-  const recorded = appendObserved(cwd, {
-    type: "fanout.worktree.released",
-    actor: input.actor,
-    fanout: plan.name,
-    slice: slice.id,
-    branch: slice.branch,
-    path: entry.path,
-    head: entry.head,
-    uncommittedCount: out.dirty.length,
-    uncommitted: rowSample(out.dirty),
-    forced: input.force,
-    outcome: refused ? "refused" : "removed"
-  });
-  if (!recorded.ok)
-    return fanoutFail("unavailable", `cannot record the worktree state in the ledger (${recorded.error}); nothing was removed`);
-  if (refused)
-    return fanoutFail("blocked", `${entry.path} has ${out.dirty.length} uncommitted change${out.dirty.length === 1 ? "" : "s"} (${out.dirty.slice(0, 3).join(", ")}${out.dirty.length > 3 ? ", …" : ""}); recorded in the ledger, nothing removed`, `commit them on ${slice.branch} (workit git commit), or pass --force to drop them`, { ...out });
-  const args = ["worktree", "remove", ...input.force ? ["--force"] : [], entry.path];
-  let removed = gitRun4(cwd, args, SLOW);
-  if (!removed.ok && entries.some(inScratch)) {
-    removeScratch(entry.path);
-    removed = gitRun4(cwd, args, SLOW);
-  }
-  if (!removed.ok)
-    return fanoutFail("failed", `git worktree remove failed: ${removed.stderr.trim().split(`
-`)[0]}`, entry.locked ? `git worktree unlock ${entry.path}, then release again` : undefined, { ...out });
-  out.removed = true;
-  if (made.dirExisted === true)
-    fs24.mkdirSync(entry.path, { recursive: true });
-  if (out.unpushed)
-    out.notes.push(`${slice.branch} is kept with ${out.unpushed} commit(s) not on the remote`);
-  return { ok: true, data: out };
-}
-function porcelainEntries(stdout) {
-  const fields = nulList2(stdout);
-  const out = [];
-  for (let index = 0;index < fields.length; index += 1) {
-    const entry = fields[index];
-    out.push(entry);
-    if (entry[0] === "R" || entry[0] === "C")
-      index += 1;
-  }
-  return out;
-}
-function unpushedCount(cwd, branch) {
-  const remote = pushRemoteName(cwd) ?? "origin";
-  const local = resolveRef(cwd, `refs/heads/${branch}`);
-  if (!local)
-    return null;
-  const tracking = resolveRef(cwd, `refs/remotes/${remote}/${branch}`);
-  if (!tracking)
-    return null;
-  const count = gitRun4(cwd, ["rev-list", "--count", `${tracking}..${local}`]);
-  return count.ok ? Number(count.stdout.trim()) : null;
-}
-function removeScratch(worktree) {
-  const scratch = path44.join(worktree, SCRATCH_DIR);
-  let stat;
-  try {
-    stat = fs24.lstatSync(scratch);
-  } catch {
-    return;
-  }
-  if (stat.isSymbolicLink() || !stat.isDirectory())
-    fs24.unlinkSync(scratch);
-  else
-    fs24.rmSync(scratch, { recursive: true, force: true, maxRetries: 2 });
-}
-var SLOW, SCRATCH_DIR = ".workit-scratch", EXCLUDE_LINE, DIRTY_ROW_BYTES = 2000, canonical2 = (target) => {
-  try {
-    return fs24.realpathSync.native(target);
-  } catch {
-    return path44.resolve(target);
-  }
-}, samePath = (a, b) => {
-  const left = canonical2(a);
-  const right = canonical2(b);
-  return process.platform === "win32" || process.platform === "darwin" ? left.toLowerCase() === right.toLowerCase() : left === right;
-}, inside2 = (child, parent) => {
-  const relative = path44.relative(canonical2(parent), canonical2(child));
-  return relative === "" || !relative.startsWith("..") && !path44.isAbsolute(relative);
-}, slicePath = (cwd, slice) => path44.isAbsolute(slice.worktree) ? slice.worktree : path44.resolve(mainCheckout(cwd), slice.worktree), CLOCK_SLACK_MS = 2000, worktreeFailed = (stderr) => fanoutFail("failed", `git worktree add failed: ${stderr.trim().split(`
-`)[0] || "unknown error"}`);
-var init_fanout_worktree = __esm(() => {
-  init_ops();
-  init_rev();
-  init_ledger();
-  init_fanout();
-  SLOW = GIT_TIMEOUTS.worktree;
-  EXCLUDE_LINE = `/${SCRATCH_DIR}/`;
-});
-
 // packages/workit-cli/src/verbs/fanout.ts
 var exports_fanout = {};
 __export(exports_fanout, {
@@ -77478,7 +77807,12 @@ function resolveTrunk(io, raw, flag, track) {
   return { trunk: derived.tracked || track !== null ? derived.trunk : null };
 }
 function plan2(argv, io) {
-  const flags = parseFlags(argv, { name: "value", trunk: "value", track: "value" });
+  const flags = parseFlags(argv, {
+    name: "value",
+    trunk: "value",
+    track: "value",
+    "take-lead": "boolean"
+  });
   if (typeof flags === "string")
     return usage3(io, flags, PLAN_USAGE2);
   const track = flags.values.track ?? null;
@@ -77500,7 +77834,8 @@ function plan2(argv, io) {
     raw,
     name: flags.values.name ?? null,
     trunk: trunk.trunk,
-    actor: actorFromEnv(io.env)
+    actor: actorFromEnv(io.env),
+    takeLead: flags.booleans.has("take-lead")
   });
   if (!result.ok) {
     const code = failed(io, result);
@@ -77508,15 +77843,42 @@ function plan2(argv, io) {
     return code;
   }
   return emit(io, ok(result.data), (data) => [
-    `${data.created ? "planned" : "re-planned"} fanout ${data.name} on ${data.trunk}: ${data.slices.length} slice${data.slices.length === 1 ? "" : "s"}`,
+    `${data.created ? "planned" : "re-planned"} fanout ${data.name} on ${data.trunk}${data.fanIn === "integration" ? " (integration branch: one PR)" : ""}: ${data.slices.length} slice${data.slices.length === 1 ? "" : "s"}`,
     ...data.slices.map((slice) => `  ${slice.id} [${slice.tier}] ${slice.branch} <- ${slice.base}${slice.dependsOn.length ? `  after ${slice.dependsOn.join(", ")}` : ""}
       worktree ${slice.worktree}`),
     ...data.overlaps.map((overlap) => `  shared ${overlap.path}: ${overlap.resolution === "owner" ? `owned by ${overlap.owner}` : `serialized (${overlap.slices.join(" -> ")})`}`),
     `waves: ${data.waves.map((wave) => wave.join(", ")).join("  |  ")}`,
     `landing order: ${data.landingOrder.join(", ")}`,
-    ...data.notes.map((note) => `note: ${note}`)
+    ...data.notes.map((note) => `note: ${note}`),
+    ...data.warnings.map((warning) => `warning: ${warning}`)
   ]);
 }
+function brief(argv, io) {
+  const flags = parseFlags(argv, { name: "value", mode: "value", attempt: "value" });
+  if (typeof flags === "string")
+    return usage3(io, flags, BRIEF_USAGE);
+  if (flags.positionals.length !== 1)
+    return usage3(io, flags.positionals.length ? `unexpected argument ${flags.positionals[1]}` : "missing <slice>", BRIEF_USAGE);
+  const mode = flags.values.mode ?? null;
+  if (mode !== null && mode !== "new" && mode !== "resume")
+    return usage3(io, "--mode takes new or resume", BRIEF_USAGE);
+  const rawAttempt = flags.values.attempt;
+  const attempt = rawAttempt === undefined ? null : Number(rawAttempt);
+  if (attempt !== null && !(Number.isInteger(attempt) && attempt >= 1 && attempt <= 9))
+    return usage3(io, "--attempt takes a number from 1 to 9", BRIEF_USAGE);
+  const selected = selectFanout(io.cwd, flags.values.name ?? null, currentBranch(io.cwd));
+  if (!selected.ok)
+    return failed(io, selected);
+  const result = renderBrief(io.cwd, selected.data, {
+    slice: flags.positionals[0],
+    mode,
+    attempt,
+    actor: actorFromEnv(io.env)
+  });
+  if (!result.ok)
+    return failed(io, result);
+  return emit(io, ok(result.data), (data) => data.text.trimEnd());
+}
 function check2(argv, io) {
   const flags = parseFlags(argv, { name: "value", base: "value", offline: "boolean" });
   if (typeof flags === "string")
@@ -77618,6 +77980,8 @@ async function run15(argv, io) {
   const [sub, ...rest] = argv.filter((arg) => arg !== "--json");
   if (sub === "plan")
     return plan2(rest, io);
+  if (sub === "brief")
+    return brief(rest, io);
   if (sub === "check")
     return check2(rest, io);
   if (sub === "status")
@@ -77626,7 +77990,7 @@ async function run15(argv, io) {
     return worktree(rest, io);
   return usage3(io, sub && !sub.startsWith("-") ? `unknown fanout subcommand "${sub}"` : "missing fanout subcommand", USAGE8);
 }
-var PLAN_USAGE2 = "workit fanout plan <plan.json> [--name <n>] [--trunk <b> | --track <t>] [--json]", CHECK_USAGE = "workit fanout check [<slice>…] [--name <n>] [--base <ref>] [--offline] [--json]", STATUS_USAGE3 = "workit fanout status [--name <n>] [--stuck-after 30m] [--offline] [--json]", WORKTREE_USAGE = "workit fanout worktree create <slice> [--name <n>] | worktree release <slice> [--name <n>] [--force] [--json]", USAGE8 = "workit fanout plan|check|status|worktree ... (workit help fanout)", failed = (io, result) => emit(io, fail(result.code, result.error, { unblock: result.unblock, data: result.data ?? {} })), renderCheck = (data) => [
+var PLAN_USAGE2 = "workit fanout plan <plan.json> [--name <n>] [--trunk <b> | --track <t>] [--take-lead] [--json]", BRIEF_USAGE = "workit fanout brief <slice> [--name <n>] [--mode new|resume] [--attempt <n>] [--json]", CHECK_USAGE = "workit fanout check [<slice>…] [--name <n>] [--base <ref>] [--offline] [--json]", STATUS_USAGE3 = "workit fanout status [--name <n>] [--stuck-after 30m] [--offline] [--json]", WORKTREE_USAGE = "workit fanout worktree create <slice> [--name <n>] | worktree release <slice> [--name <n>] [--force] [--json]", USAGE8 = "workit fanout plan|brief|check|status|worktree ... (workit help fanout)", failed = (io, result) => emit(io, fail(result.code, result.error, { unblock: result.unblock, data: result.data ?? {} })), renderCheck = (data) => [
   `fanout ${data.name} against ${data.trunkRef}: ${data.ready ? "ready to land" : "blocked"}`,
   ...data.slices.map((slice) => slice.status === "landed" ? `  -- ${slice.id} (${slice.branch}) landed (${slice.landed?.how}${slice.landed?.pr ? ` #${slice.landed.pr}` : ""})` : `  ${slice.status === "ready" ? "ok " : "x  "}${slice.id} (${slice.branch}) ${slice.changed} file${slice.changed === 1 ? "" : "s"} · verdict ${slice.verdict.accepted ? "accepted" : slice.verdict.basis}${slice.reasons.length ? `
       ${slice.reasons.join(`
@@ -77664,6 +78028,7 @@ var PLAN_USAGE2 = "workit fanout plan <plan.json> [--name <n>] [--trunk <b> | --
   ];
 };
 var init_fanout2 = __esm(() => {
+  init_fanout_brief();
   init_fanout_check();
   init_fanout_status();
   init_fanout_worktree();
@@ -77679,7 +78044,7 @@ var exports_ledger = {};
 __export(exports_ledger, {
   run: () => run16
 });
-import { randomBytes as randomBytes4 } from "node:crypto";
+import { randomBytes as randomBytes5 } from "node:crypto";
 import { parseArgs } from "node:util";
 function targetBranch(io, rows, branch, pr) {
   if (pr !== undefined) {
@@ -77725,8 +78090,10 @@ async function run16(argv, io) {
   const text = rest.join(" ");
   if (sub === undefined)
     return usage4(io, "missing subcommand");
-  if (!["decision", "ruling", "verdict", "list", "show", "check"].includes(sub))
+  if (!["decision", "ruling", "verdict", "standing", "list", "show", "check"].includes(sub))
     return usage4(io, `unknown ledger subcommand "${sub}"`);
+  if (sub === "standing")
+    return standing(io, values, rest);
   const ledger = readLedger(io.cwd);
   if (!ledger.ok)
     return failed2(io, ledger);
@@ -77804,7 +78171,62 @@ async function run16(argv, io) {
 `);
   return fromResult(io, verdict, (row) => `recorded verdict ${row.id}: ${row.result} [${row.kind}] for ${row.branch} @ ${(row.head ?? "").slice(0, 12)} as ${actor.session ?? "no session"}${row.self ? ` (self${row.selfReason === "no_session" ? ": WORKIT_SESSION_ID unset" : ""}; never accepted)` : ""}`);
 }
-var USAGE9 = "workit ledger decision|ruling|verdict|list|check ... (workit help ledger for the grammar)", OPTIONS, SESSION_SAFE2, ROLE_SAFE, actorFor = (io, values) => {
+function standingFanout(io, values) {
+  if (values.fanout !== undefined) {
+    const name = values.fanout.trim();
+    if (!name)
+      return new Error("--fanout needs a plan name");
+    const read = readFanout(io.cwd, name);
+    return { name, plan: read.ok ? read.data : null };
+  }
+  const selected = selectFanout(io.cwd, null, currentBranch(io.cwd));
+  return selected.ok ? { name: selected.data.name, plan: selected.data } : new Error(`${selected.error}; pass --fanout <name>`);
+}
+async function standing(io, values, args) {
+  const [action, ...rest] = args;
+  if (action !== "add" && action !== "list" && action !== "clear")
+    return emit(io, fail("invalid_input", action ? `unknown standing action "${action}"` : "missing add, list or clear", { unblock: STANDING_USAGE }));
+  const target = standingFanout(io, values);
+  if (target instanceof Error)
+    return emit(io, fail("invalid_input", target.message, { unblock: STANDING_USAGE }));
+  const fanout = target.name;
+  const lead = target.plan?.leadSession ?? null;
+  const leads = target.plan ? planLeads(target.plan) : null;
+  if (action === "list") {
+    if (rest.length)
+      return usage4(io, `unexpected argument: ${rest[0]}`);
+    const ledger = readLedger(io.cwd);
+    if (!ledger.ok)
+      return failed2(io, ledger);
+    const orders = activeStanding(ledger.value.rows, fanout, leads).map((row) => ({
+      id: row.id,
+      at: row.at,
+      what: row.what
+    }));
+    return emit(io, ok({ fanout, orders }), (data) => data.orders.length ? [
+      `standing orders for fanout ${fanout}:`,
+      ...data.orders.map((o) => `  ${o.id}  ${o.what}`)
+    ] : `no standing orders for fanout ${fanout}`);
+  }
+  const acting = actorFor(io, values);
+  if (acting instanceof Error)
+    return usage4(io, acting.message);
+  const context = {
+    cwd: io.cwd,
+    actor: acting.actor,
+    ...values.supersedes ? { supersedes: values.supersedes } : {}
+  };
+  if (action === "add" && target.plan === null)
+    return emit(io, fail("not_found", `no fanout plan named ${fanout}`, {
+      unblock: "workit fanout plan <plan.json> first, or name an existing plan with --fanout"
+    }));
+  if (action === "add")
+    return fromResult(io, recordStanding(context, { fanout, lead, what: rest.join(" ") }), (row) => `recorded standing order ${row.id} for fanout ${fanout}`);
+  if (rest.length > 1)
+    return usage4(io, `unexpected argument: ${rest[1]}`);
+  return fromResult(io, clearStanding(context, { fanout, lead, leads, target: rest[0] ?? null }), (row) => row.target ? `cleared standing order ${row.target} for fanout ${fanout}` : `cleared every standing order for fanout ${fanout}`);
+}
+var USAGE9 = "workit ledger decision|ruling|verdict|standing|list|check ... (workit help ledger for the grammar)", STANDING_USAGE = 'workit ledger standing add "<order>" | list | clear [<id>]  [--fanout <name>] [--json]', OPTIONS, SESSION_SAFE2, ROLE_SAFE, actorFor = (io, values) => {
   const actor = actorFromEnv(io.env);
   if (values.session !== undefined && values.as !== undefined)
     return new Error("pass --session or --as, not both");
@@ -77818,7 +78240,7 @@ var USAGE9 = "workit ledger decision|ruling|verdict|list|check ... (workit help
       return new Error("--as takes a lowercase role, e.g. verifier");
     const prefix = (actor.session ?? actor.host).slice(0, 96);
     return {
-      actor: { ...actor, session: `${prefix}:${values.as}:${randomBytes4(4).toString("hex")}` },
+      actor: { ...actor, session: `${prefix}:${values.as}:${randomBytes5(4).toString("hex")}` },
       derivedFrom: actor.session
     };
   }
@@ -77841,6 +78263,7 @@ var USAGE9 = "workit ledger decision|ruling|verdict|list|check ... (workit help
 };
 var init_ledger2 = __esm(() => {
   init_ledger();
+  init_fanout();
   init_rev();
   init_implicit_task();
   init_output();
@@ -77861,6 +78284,7 @@ var init_ledger2 = __esm(() => {
     supersedes: { type: "string" },
     session: { type: "string" },
     as: { type: "string" },
+    fanout: { type: "string" },
     json: { type: "boolean" }
   };
   SESSION_SAFE2 = /^[A-Za-z0-9_.:@/+-]{1,128}$/;
@@ -94561,7 +94985,7 @@ var init_knowledge2 = __esm(() => {
   init_output();
 });
 
-// packages/workit-core/src/core/youtrack-tools.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/youtrack-tools.ts
 async function logTimeUpdate(input, operation = defaultOperations) {
   try {
     const value = await operation.logTime(input);
@@ -94610,7 +95034,7 @@ var init_youtrack_tools = __esm(() => {
   };
 });
 
-// packages/workit-core/src/core/youtrack-writes.ts
+// packages/workit-cli/node_modules/@brainervirus/workit-core/src/core/youtrack-writes.ts
 async function markerPresent(issueId, marker, where) {
   const creds = youTrackToken();
   if ("error" in creds)
@@ -95009,7 +95433,7 @@ var VERBS = [
   {
     name: "pr",
     group: "delivery",
-    usage: "workit pr status [--pr <n>] | pr create [--base <b> | --track <t>] (--title <t> | --fill) [--draft] | pr merge [--pr <n>] [--method squash|merge|rebase] [--delete-branch]",
+    usage: "workit pr status [--pr <n>] | pr create [--base <b> | --track <t>] (--title <t> | --fill) [--draft] | pr merge [--pr <n>] [--method squash|merge|rebase] [--delete-branch] [--unverified --reason <why>]",
     summary: "PR/MR state with failing log tails and next action; open a SHA-verified PR; merge only when READY, verified and granted",
     load: () => Promise.resolve().then(() => (init_pr(), exports_pr))
   },
@@ -95037,22 +95461,22 @@ var VERBS = [
   {
     name: "stack",
     group: "delivery",
-    usage: "workit stack plan [<bottom> … <top>] | status | sync [--local] | land [--dry-run] [--max <n>] [--json]",
+    usage: "workit stack plan [<bottom> … <top>] | status | sync [--local] | land [--dry-run] [--max <n>] [--unverified --reason <why>] [--json]",
     summary: "Plan, restack (lease push + retarget) and land a base-branch stack of PRs, root first",
     load: () => Promise.resolve().then(() => (init_stack2(), exports_stack))
   },
   {
     name: "fanout",
     group: "delivery",
-    usage: "workit fanout plan <plan.json> [--name <n>] [--trunk <b> | --track <t>] | fanout check [<slice>…] [--name <n>] [--base <ref>] [--offline] | fanout status [--name <n>] [--stuck-after 30m] [--offline] | fanout worktree create|release <slice> [--force] [--json]",
-    summary: "Register parallel slices (complete briefs, disjoint scopes, shared-file owners), watch them (STUCK, PR, CI, verdict, landed, landing order), make and release slice worktrees, and gate fan-in: out-of-scope edits, trunk and sibling merge conflicts",
+    usage: "workit fanout plan <plan.json> [--name <n>] [--trunk <b> | --track <t>] [--take-lead] | fanout brief <slice> [--mode new|resume] [--attempt <n>] | fanout check [<slice>…] [--name <n>] [--base <ref>] [--offline] | fanout status [--name <n>] [--stuck-after 30m] [--offline] | fanout worktree create|release <slice> [--force] [--json]",
+    summary: "Register parallel slices (complete briefs, disjoint scopes, shared-file owners), render each worker's brief with the standing orders, watch them (STUCK, PR, CI, verdict, landed, landing order), make and release slice worktrees, and gate fan-in: out-of-scope edits, trunk and sibling merge conflicts",
     load: () => Promise.resolve().then(() => (init_fanout2(), exports_fanout))
   },
   {
     name: "ledger",
     group: "delivery",
-    usage: "workit ledger decision|ruling|verdict|list|check ...",
-    summary: "Record and query decisions, rulings and SHA-keyed verdicts (patch-id carry-over across rebases)",
+    usage: "workit ledger decision|ruling|verdict|standing|list|check ...",
+    summary: "Record and query decisions, rulings, SHA-keyed verdicts (patch-id carry-over across rebases) and a fanout's standing orders",
     load: () => Promise.resolve().then(() => (init_ledger2(), exports_ledger))
   },
   {