@brainervirus/workit-claude-code 8.35.2 → 8.37.0

package/dist/workit.js

@@ -9317,7 +9317,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@brainervirus/workit-cli",
-    version: "8.35.2",
+    version: "8.37.0",
     private: false,
     description: "Workit CLI — setup wizard, doctor, and task control for agentic coding workflows",
     keywords: [
@@ -9355,13 +9355,13 @@ var init_package = __esm(() => {
     },
     dependencies: {
       "@babel/parser": "7.29.9",
-      "@brainervirus/workit-cursor": "^8.35.2",
+      "@brainervirus/workit-cursor": "^8.37.0",
       "@inkjs/ui": "2.0.0",
       ink: "7.1.1",
       react: "19.2.8"
     },
     devDependencies: {
-      "@brainervirus/workit-core": "^8.35.2"
+      "@brainervirus/workit-core": "^8.37.0"
     },
     engines: {
       node: ">=24"
@@ -77639,6 +77639,7 @@ var exports_check = {};
 __export(exports_check, {
   OUTPUT_LINES: () => OUTPUT_LINES,
   boundedOutput: () => boundedOutput,
+  countWarnings: () => countWarnings,
   hostToolWaitCapMs: () => hostToolWaitCapMs,
   run: () => run12,
   workspaceResources: () => workspaceResources
@@ -77823,6 +77824,10 @@ function boundedArgv(argv) {
   const truncated = cut.length !== argv.length || cut.some((item, index) => item !== argv[index]);
   return { argv: cut, truncated };
 }
+function countWarnings(log) {
+  return redactLog(log).replace(ANSI_COLOR, "").split(`
+`).filter((line) => WARNING_LINE.test(line) && !NO_WARNINGS.test(line)).length;
+}
 function boundedOutput(log, lines) {
   const all = tailLines(log, Number.MAX_SAFE_INTEGER);
   if (all.length === 0)
@@ -78079,6 +78084,7 @@ async function run12(argv, io) {
   };
   const storeDir = io.env.WORKFLOW_WORKSPACE_ROOT || top;
   const task = await recordInTask(io, storeDir, options.task, observation, unblockFor);
+  const warnings = countWarnings(result.log);
   const data = {
     evidenceId: task.evidenceId,
     ledgerRowId: observation.ledgerRowId,
@@ -78099,6 +78105,7 @@ async function run12(argv, io) {
     logPath,
     logTail: tail,
     outputBytes: result.outputBytes,
+    warnings,
     logTruncated: result.truncated,
     task: task.task,
     lease: heavy?.leaseReport ?? null,
@@ -78113,7 +78120,7 @@ async function run12(argv, io) {
   const code = !passed ? "failed" : recordError ? recordError.code : "ok";
   const error = !passed ? result.timedOut ? `timed out after ${options.timeoutMs} ms` : result.spawnError ? `cannot start ${command[0]}: ${result.spawnError}` : `exited ${result.exitCode}` : recordError?.message;
   const label = name ?? command.join(" ");
-  const summary = `workit check ${label}: ${passed ? "passed, exit 0" : error ?? "failed"} in ${result.durationMs} ms (${configured ? "configured" : "ad-hoc"}${name && !configured && config.checks.some((item) => item.name === name) ? `; not the configured command for "${name}"` : ""}); ${task.evidenceId ? `evidence ${task.evidenceId} on task ${task.task?.id}` : task.note ?? (task.error ? `task: ${task.error.message}` : "ledger only")}; log: ${logPath ?? "not stored"}`;
+  const summary = `workit check ${label}: ${passed ? "passed, exit 0" : error ?? "failed"} in ${result.durationMs} ms (${configured ? "configured" : "ad-hoc"}${warnings ? `; warnings: ${warnings}` : ""}${name && !configured && config.checks.some((item) => item.name === name) ? `; not the configured command for "${name}"` : ""}); ${task.evidenceId ? `evidence ${task.evidenceId} on task ${task.task?.id}` : task.note ?? (task.error ? `task: ${task.error.message}` : "ledger only")}; log: ${logPath ?? "not stored"}`;
   if (io.json)
     io.stdout(`${JSON.stringify({ ok: code === "ok", code, data, ...error ? { error } : {}, ...task.stillUnsatisfied[0] ? { unblock: task.stillUnsatisfied[0].unblock } : {} })}
 `);
@@ -78136,7 +78143,7 @@ async function run12(argv, io) {
     return recordError.code === "busy" ? 4 : recordError.code === "invalid_input" ? 2 : 5;
   return 0;
 }
-var USAGE5 = 'workit check <name> [--full] [--no-lease --reason "<why>"] | workit check [--name <n>] [--shell] [--heavy] [--full] [--wait <s>] [--timeout <s>] [--task <id>] [--json] -- <cmd…>', OUTPUT_LINES = 60, MAX_UNVERIFIED_RUN_MS, RECORD_TAIL_LINES = 20, RECORD_TAIL_CHARS = 200, posix = (value) => value.split(path50.sep).join("/") || ".", ENGINE_CODES2, FINGERPRINT_VARS, HOST_TOOL_WAIT_CAP_MS = 1e5;
+var USAGE5 = 'workit check <name> [--full] [--no-lease --reason "<why>"] | workit check [--name <n>] [--shell] [--heavy] [--full] [--wait <s>] [--timeout <s>] [--task <id>] [--json] -- <cmd…>', OUTPUT_LINES = 60, MAX_UNVERIFIED_RUN_MS, RECORD_TAIL_LINES = 20, RECORD_TAIL_CHARS = 200, posix = (value) => value.split(path50.sep).join("/") || ".", ENGINE_CODES2, FINGERPRINT_VARS, ANSI_COLOR, WARNING_LINE, NO_WARNINGS, HOST_TOOL_WAIT_CAP_MS = 1e5;
 var init_check = __esm(() => {
   init_check_config();
   init_checks3();
@@ -78154,6 +78161,9 @@ var init_check = __esm(() => {
     permission_denied: "blocked"
   };
   FINGERPRINT_VARS = ["CI", "NODE_ENV", "npm_config_script_shell", "NODE_OPTIONS", "SHELL"];
+  ANSI_COLOR = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
+  WARNING_LINE = /^\s*(?:⚠|\[(?:WARN|WARNING|warn|warning)\]|(?:npm\s+)?(?:WARN\s|warn\s)|warn(?:ing)?(?:\[[^\]]*\])?:|\d+:\d+\s+warning\s|\S+\(\d+,\d+\):\s*warning\s|\S+:\d+:\d+:\s*warning\b)/;
+  NO_WARNINGS = /\b(?:no|0|zero|none)\s+warnings?\b/i;
 });
 
 // packages/workit-cli/src/verbs/lock.ts
@@ -87867,7 +87877,7 @@ function renderBrief(cwd, plan, input) {
     ...verifier ? [
       `  verifier: model ${verifier.model}${verifier.effort ? `  effort ${verifier.effort}` : ""}  (${verifier.source})`
     ] : [],
-    `TIMEBOX: ${slice.timebox ?? DEFAULT_TIMEBOX}; past it without a new commit you will be replaced`,
+    `TIMEBOX: ${timeboxText(slice.timebox)}; past it without a new commit you will be replaced`,
     scratchLine,
     `FORBIDDEN: ${slice.forbidden.join("; ")}`,
     ...fanIn,
@@ -87902,7 +87912,10 @@ function renderBrief(cwd, plan, input) {
     }
   };
 }
-var DEFAULT_TIMEBOX = "30 minutes", REPORT, identityOf = (host) => {
+var DEFAULT_TIMEBOX = "30 minutes", DEFAULT_TOOL_CALLS = 120, timeboxText = (timebox) => {
+  const text = timebox ?? DEFAULT_TIMEBOX;
+  return /\b\d+\s+tool calls\b/u.test(text) ? text : `${text}, ${DEFAULT_TOOL_CALLS} tool calls`;
+}, REPORT, identityOf = (host) => {
   const family = host?.replace(/_(?:cli|desktop)$/, "") ?? "";
   if (family === "claude_code")
     return "issued";
@@ -88414,9 +88427,10 @@ var init_fanout_check = __esm(() => {
 
 // packages/workit-core/src/fanout-status.ts
 function timeboxMs(text) {
-  if (!text || /^\s*\d+(?:\.\d+)?\s*$/u.test(text))
+  const time = text?.replace(/[\s,;]*\b\d+\s+tool calls\b[\s,;]*/gu, " ").trim();
+  if (!time || /^\d+(?:\.\d+)?$/u.test(time))
     return null;
-  const ms = parseDuration2(text);
+  const ms = parseDuration2(time);
   return ms && ms > 0 ? ms : null;
 }
 function activity(cwd, plan, slice, rows) {

package/hooks/hooks.json

@@ -1,5 +1,5 @@
 {
-  "description": "Workit host hooks: task context on session start (incl. compaction restore and forks) and when it changes per turn, branch policy and raw git/forge steering (deny gate bypasses, nudge routine commands) on shell commands, the heavy-command gate (a heavy shell command runs under the machine-wide heavy-check lease, a chain with heavy parts is split, a command a permission rule names is left to Claude Code), the before-write gate on file edits and shell writes, recording raw git commits for the session after they run, worktree guidance for subagents, the role's default model and effort on a subagent spawn that names none, one continuation when the agent stops with a provable unmet delivery obligation, a one-line skill nudge on prompts and delivery commands, and recording each Workit skill load. Only events that change Claude's behavior are registered.",
+  "description": "Workit host hooks: task context on session start (incl. compaction restore and forks) and when it changes per turn, branch policy and raw git/forge steering (deny gate bypasses, nudge routine commands) on shell commands, the heavy-command gate (a heavy shell command runs under the machine-wide heavy-check lease, a chain with heavy parts is split, a command a permission rule names is left to Claude Code), the before-write gate on file edits and shell writes, recording raw git commits for the session after they run, worktree guidance for subagents, the role's default model and effort on a subagent spawn that names none, one continuation when the agent stops with a provable unmet delivery obligation, a one-line skill nudge on prompts and delivery commands, and recording each Workit skill load, and counting a budgeted worker's tool calls (Read, Grep and Glob included) so its brief's tool-call budget is told once (its budget files go when it stops). Only events that change Claude's behavior are registered.",
   "hooks": {
     "SessionStart": [
       {
@@ -71,6 +71,17 @@
           }
         ]
       },
+      {
+        "matcher": "Read|Grep|Glob",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node",
+            "args": ["${CLAUDE_PLUGIN_ROOT}/bin/workit-hook.mjs"],
+            "timeout": 15
+          }
+        ]
+      },
       {
         "matcher": "Skill",
         "hooks": [
@@ -119,6 +130,18 @@
           }
         ]
       }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node",
+            "args": ["${CLAUDE_PLUGIN_ROOT}/bin/workit-hook.mjs"],
+            "timeout": 15
+          }
+        ]
+      }
     ]
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-claude-code",
-  "version": "8.35.2",
+  "version": "8.37.0",
   "private": false,
   "description": "Workit Claude Code plugin — session and per-turn task context, branch policy on git shell commands, workit method skills, and verifier/reviewer/implementer agents",
   "keywords": [
@@ -39,8 +39,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-cli": "^8.35.2",
-    "@brainervirus/workit-core": "^8.35.2"
+    "@brainervirus/workit-cli": "^8.37.0",
+    "@brainervirus/workit-core": "^8.37.0"
   },
   "engines": {
     "node": ">=24"

package/skills/implement/SKILL.md

@@ -23,7 +23,7 @@ description: Build a requested change in small verified steps - follow local pat
    (`workit check test`, plus `lint` and `typecheck` when the repo has them),
    not after every edit. Heavy work runs under one machine-wide lease: an ad-hoc
    suite is `workit check --heavy -- <cmd>`, never a hand-made flock; a busy
-   lease waits and names its holder (`workit lock status`).
+   lease waits and names its holder (`workit lock status`). A tool warning is a finding: fix it in this PR in the right layer, or record the false positive with evidence; pre-existing ones get their own PR.
 5. Prove the feature on its real surface with the project's `verify-<app>`
    skill; none yet? Write one (call the Skill tool with `workit:verify-app`). Tests show branch behavior,
    not that the feature works. The report carries what you observed: a UI

package/skills/ship/SKILL.md

@@ -49,7 +49,7 @@ the same check. Fix round and recheck both failed: a decider (call the Skill too
 5. **CI.** Local gates mirror CI: push and continue; `workit ci wait` once on
    the final head, in the background where the host allows. Red: read `logTail`, classify. Flake or infra: one
    `workit ci rerun --failed --reason flake|infra` per head. Real: reproduce
-   with `workit check`, fix the root cause, batch every fix in one push.
+   with `workit check`, fix the root cause, batch every fix in one push. A tool warning is a finding: fix it in this PR in the right layer, or record the false positive with evidence; pre-existing ones get their own PR.
 6. **Verified.** The lane in `workit pr status` decides: none, no verdict; self, your `--self` verdict; focused or full (or `verification: self|independent`), one non-author verifier per PR after the last push, never per push (call the Skill tool with `workit:review`), on Claude Code with the `model` and `effort` of `workit models show --role verifier`. A docs-only push (or test-only under a unit verdict) keeps the verdict (`carried`); `reverify: focused` re-checks only the new diff, reusing green CI; one verdict at a stack's top covers its unchanged lower PRs. Land only when
    granted: `workit stack land` or `workit pr merge`; `--unverified --reason` if user-asked.
 7. **Observe it landed:** `workit verify-delivery pr` or `merge`. After a failed