@brainervirus/workit-claude-code 8.22.3 → 8.23.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "workit",
   "displayName": "Workit",
-  "version": "8.22.3",
+  "version": "8.23.0",
   "description": "Workflow rails for agentic coding: task context on every session, branch policy on shell commands, and the workit method skills",
   "author": {
     "name": "BrainerVirus"

package/README.md

@@ -40,7 +40,7 @@ export CLAUDE_CODE_PLUGIN_DIRS="$HOME/path/to/workit/packages/workit-claude-code
 | `hooks/hooks.json` | SessionStart (startup/resume/clear/compact/fork), UserPromptSubmit, PreToolUse (Bash, PowerShell, Edit/Write/MultiEdit/NotebookEdit), SubagentStart |
 | `bin/workit-hook.mjs` | Hook launcher: source with Bun in a checkout, `dist/workit-hook.js` when installed; answers plain shell commands and edits in task-less checkouts with `{}` before loading the runtime; fails open (`{}` + one stderr line) when neither can run |
 | `bin/workit` | `workit` on the Bash tool's PATH (same source/dist switch) |
-| `agents/` | `verifier`, `reviewer` (read-only), `implementer` (`isolation: worktree`) |
+| `agents/` | `verifier`, `reviewer` (read-only), `implementer` (works in the lead's `workit fanout worktree create` worktree; no `isolation`) |
 | `skills/` | Generated by `scripts/build.ts` from `packages/workit-core/skills` (not committed) |
 | `evals/` | Opt-in `claude plugin eval` suite (nightly / `eval` label, not a PR gate) |
 

package/agents/implementer.md

@@ -1,36 +1,43 @@
 ---
 name: implementer
-description: Implements one scoped workit brief in an isolated git worktree and reports what changed and how it was checked. Use to delegate a well-defined slice (goal, scope, acceptance, verify, forbidden, report) so it can run in parallel with other work.
-isolation: worktree
+description: Implements one scoped workit brief in the git worktree its lead made with `workit fanout worktree create`, and reports what changed and how it was checked. Use to delegate a well-defined slice (goal, scope, acceptance, verify, forbidden, report, worktree) so it can run in parallel with other work.
 ---
 
-You are a workit implementer working in your own git worktree.
+You are a workit implementer. You work only in the git worktree your brief
+names (its WORKTREE line), which the lead made with
+`workit fanout worktree create <slice>` before spawning you; never in the
+lead's checkout.
 
 Refuse to start without a complete brief. It must state: goal, scope (files
 or areas you may touch), acceptance (observable outcomes), verify (exact
 commands), timebox, forbidden (what you must not touch or do), report (what to
-hand back), standing orders and mode (`new` or `resume`). If a field is
-missing, report which and stop.
+hand back), standing orders, mode (`new` or `resume`) and the worktree path.
+If a field is missing, report which and stop.
 
-1. Your worktree starts on a branch name chosen by Claude Code, which may break
-   the repository's branch policy. First command, `MODE: new`:
-   `workit git branch <branch> --base <base>` with the brief's branch and base.
-   `MODE: resume` (you replace a stopped worker): `git switch <branch>` and
-   continue from its head; never `workit git branch`, the branch exists. A hook denies
-   protected or non-compliant names; follow the unblock it prints.
-2. Stay inside the scope. Anything outside it is a follow-up in the report,
+1. Run each git and check command against the worktree, one verb per call:
+   `workit --cwd <worktree> git commit …`, `workit --cwd <worktree> check <name>`.
+   Never `cd <worktree> && …` chains, `$VAR` paths or compound commands. Edit
+   files by their path under the worktree. Workit's hooks deny an edit or a
+   mutating git command outside it.
+2. The worktree is already on the brief's branch. If it is not: `MODE: new`,
+   `workit --cwd <worktree> git branch <branch> --base <base>`; `MODE: resume`
+   (you replace a stopped worker), `git -C <worktree> switch <branch>` and
+   continue from its head. A hook denies protected or non-compliant names;
+   follow the unblock it prints.
+3. Stay inside the scope. Anything outside it is a follow-up in the report,
    not a diff. Follow the workit-implement skill (`/workit:implement`).
-3. Decide ambiguities yourself and record them:
+4. Decide ambiguities yourself and record them:
    `workit ledger ruling "<what>" --why "<why>" --cost-if-wrong "<cost>"`.
    Stop only for an irreversible or security-sensitive action, or a side effect
    outside your worktree.
-4. Commit in small steps with
-   `workit git commit -m "<conventional message>" -- <paths in scope>`.
-5. Run every verify command as `workit check …` and keep the real exit codes.
-6. Never record a verdict on your own work and never pass `--self`: a separate
+5. Commit in small steps with
+   `workit --cwd <worktree> git commit -m "<conventional message>" -- <paths in scope>`.
+6. Run every verify command as `workit --cwd <worktree> check …` and keep the
+   real exit codes.
+7. Never record a verdict on your own work and never pass `--self`: a separate
    verifier judges it. Never push, open a PR, rebase or merge unless the brief
    says so.
 
-Report: branch and head SHA, files changed, each verify command with its exit
-code, each acceptance item met or not, rulings recorded, and any deviation from
-the brief.
+Report: worktree, branch and head SHA, files changed, each verify command with
+its exit code, each acceptance item met or not, rulings recorded, and any
+deviation from the brief.

package/bin/workit-hook.mjs

@@ -49,6 +49,11 @@ const WORKIT_DELIVERY =
   /(?:^|[\s;&|(])(?:\S*[\\/])?workit(?:-cli)?\s+(?:pr (?:create|merge)|ci wait|git push)\b/;
 const MAYBE_GATED =
   /\b(?:git|gh|glab)\b|>|\b(?:tee|touch|mkdir|rm|rmdir|mv|cp|truncate|install|ln|patch|dd|sed|perl|set-content|add-content|out-file|new-item|ni|remove-item|del|copy-item|move-item)\b/i;
+// What an implementer's confinement also judges (hooks/worktree-confine.ts):
+// writers the edit analysis cannot see, `-c` scripts, `$(…)` and Workit's
+// lead-owned fanout verbs.
+const IMPLEMENTER_GATED =
+  /\b(?:unlink|chmod|chown|chgrp|shred|chattr|setfacl|rsync|find|xargs|g?awk|python[\d.]*|node|bun|deno|ruby|php|sh|bash|zsh|dash|ksh|workit)\b|\$\(|`/i;
 const SHELLS = new Set(["Bash", "PowerShell"]);
 const HEAVY_WORDS = new Set(
   (
@@ -208,13 +213,17 @@ const fastAllow = (() => {
     if (value?.hook_event_name !== "PreToolUse") return false;
     if (mentionsIssued(JSON.stringify(value.tool_input ?? {}))) return false;
     if (standingPending(String(value.cwd ?? "."), value.session_id, value.agent_id)) return false;
+    // An implementer's writes are confined to its Workit worktree with or
+    // without a task store (hooks/worktree-confine.ts).
+    const implementer = value.agent_type === "workit:implementer";
     if (SHELLS.has(value.tool_name) && typeof command === "string") {
       if (WORKIT_DELIVERY.test(command)) return false;
       if (maybeHeavy(command, String(value.cwd ?? "."))) return false;
-      if (!MAYBE_GATED.test(command)) return true;
-      return !RAW_TOOLS.test(command) && !hasTaskStore(String(value.cwd ?? "."));
+      if (!MAYBE_GATED.test(command) && !(implementer && IMPLEMENTER_GATED.test(command)))
+        return true;
+      return !implementer && !RAW_TOOLS.test(command) && !hasTaskStore(String(value.cwd ?? "."));
     }
-    return EDITS.has(value.tool_name) && !hasTaskStore(String(value.cwd ?? "."));
+    return EDITS.has(value.tool_name) && !implementer && !hasTaskStore(String(value.cwd ?? "."));
   } catch {
     return false;
   }