@brainervirus/workit-cli 1.0.3 → 1.0.4

package/dist/index.js

@@ -43028,10 +43028,12 @@ import {
   copyFileSync as copyFileSync2,
   cpSync as cpSync3,
   existsSync as existsSync10,
+  lstatSync as lstatSync2,
   mkdirSync as mkdirSync5,
   mkdtempSync,
   readFileSync as readFileSync10,
   readdirSync as readdirSync4,
+  realpathSync as realpathSync2,
   renameSync,
   rmSync as rmSync2,
   statSync as statSync4,
@@ -43135,6 +43137,7 @@ var readSetupState = (dir = resolveConfigDir()) => ({
 
 // packages/workit-core/src/core/registration.ts
 import path7 from "node:path";
+var OPENCODE_NPM_PIN = "@brainervirus/workit-opencode";
 var isRecord = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
 var named = (s, name) => s === name || s.startsWith(`${name}@`);
 function isWorkitPlugin(value) {
@@ -43257,7 +43260,16 @@ function cursorHooksEntry(_packageDir) {
 
 // packages/workit-core/src/core/doctor.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync9, mkdirSync as mkdirSync4, readFileSync as readFileSync9, statSync as statSync3, unlinkSync, writeFileSync as writeFileSync6 } from "node:fs";
+import {
+  existsSync as existsSync9,
+  lstatSync,
+  mkdirSync as mkdirSync4,
+  readFileSync as readFileSync9,
+  readlinkSync,
+  statSync as statSync3,
+  unlinkSync,
+  writeFileSync as writeFileSync6
+} from "node:fs";
 import os5 from "node:os";
 import path11 from "node:path";
 
@@ -52358,11 +52370,19 @@ var checkUtility = (res) => {
     detail: "git (and flock where required) on PATH"
   };
 };
+var isFragileCachePin = (entry) => {
+  const n = entry.replaceAll("\\", "/").toLowerCase();
+  if (!n.startsWith("file:"))
+    return false;
+  return n.includes("/caches/pnpm/dlx/") || n.includes("/_npx/") || n.includes("/.pacquet/") || n.includes("/library/caches/pnpm/");
+};
 var staleEntry = (entry) => {
   if (!entry)
     return "stale";
   if (entry.includes("git+file"))
     return "stale";
+  if (isFragileCachePin(entry))
+    return "fragile-cache";
   if (entry.startsWith("file:")) {
     const target = entry.replace(/^file:\/\//, "").replace(/^file:/, "");
     return existsSync9(target) ? "ok" : "missing-file";
@@ -52391,7 +52411,7 @@ var checkStalePin = (res) => {
       id: "stale_pin",
       status: "fail",
       detail: "no workit plugin registered in the opencode config",
-      fix: "Run install-opencode-plugin.sh to pin the workit plugin entry"
+      fix: 'Run `workit init` and select OpenCode — pin "@brainervirus/workit-opencode"'
     };
   }
   const first = staleEntry(entries[0]);
@@ -52400,7 +52420,15 @@ var checkStalePin = (res) => {
       id: "stale_pin",
       status: "fail",
       detail: `stale workit pin: ${entries[0]}`,
-      fix: "Re-run install-opencode-plugin.sh — the pin points at a git+file or non-file source"
+      fix: "Run `workit init` (or install-opencode-plugin.sh for a checkout) — replace git+file pins"
+    };
+  }
+  if (first === "fragile-cache") {
+    return {
+      id: "stale_pin",
+      status: "fail",
+      detail: `workit pin points at a package-manager cache path: ${entries[0]}`,
+      fix: 'Run `workit init` and select OpenCode — pin should be "@brainervirus/workit-opencode"'
     };
   }
   if (first === "missing-file") {
@@ -52408,7 +52436,7 @@ var checkStalePin = (res) => {
       id: "stale_pin",
       status: "fail",
       detail: `workit pin points at a missing file: ${entries[0]}`,
-      fix: "Re-run install-opencode-plugin.sh after restoring the checkout the pin references"
+      fix: "Run `workit init` (or restore the checkout and re-run install-opencode-plugin.sh)"
     };
   }
   return { id: "stale_pin", status: "pass", detail: "opencode pin resolves" };
@@ -52458,6 +52486,22 @@ var checkStaleInstall = (res) => {
       detail: "cursor plugin not inspected on the opencode host"
     };
   }
+  if (existsSync9(res.cursorPluginDir) && lstatSync(res.cursorPluginDir).isSymbolicLink()) {
+    let target = "";
+    try {
+      target = readlinkSync(res.cursorPluginDir);
+    } catch {
+      target = "(unreadable)";
+    }
+    const n = target.replaceAll("\\", "/").toLowerCase();
+    const fragile = n.includes("/caches/pnpm/dlx/") || n.includes("/_npx/") || n.includes("/.pacquet/") || n.includes("/library/caches/pnpm/");
+    return {
+      id: "stale_install",
+      status: "fail",
+      detail: fragile ? `stale_install: cursor plugin dir is a symlink into a package-manager cache (${target})` : `stale_install: cursor plugin dir is a symlink (${target}) — expected a real directory copy`,
+      fix: "Run `workit init` and select Cursor — install must copy into ~/.cursor/plugins/local/workit"
+    };
+  }
   const canonicalMcp = cursorMcpServerEntry("").args.find((a) => a.startsWith("--package="));
   const mcpSelectors = pluginMcpSelectors(res);
   const legacyPin = (mcpSelectors ?? []).find((s) => s !== canonicalMcp && s.includes("@brainervirus/workit-cursor@"));
@@ -52657,7 +52701,9 @@ var checkCredentialMetadata = (res) => {
     tokenPaths.push(path11.join(res.configDir, "youtrack.token"));
   }
   const vcsJson = readJson(path11.join(res.configDir, "vcs.json"));
-  for (const key of ["gitlab", "github"]) {
+  const active = typeof vcsJson?.provider === "string" ? vcsJson.provider.trim().toLowerCase() : null;
+  const vcsKeys = active === "gitlab" || active === "github" ? [active] : ["gitlab", "github"];
+  for (const key of vcsKeys) {
     const provider = vcsJson?.[key];
     if (provider && typeof provider === "object") {
       const tf = provider.tokenFile;
@@ -53517,7 +53563,15 @@ function adapterRoot(platform, res) {
   }
   return null;
 }
-var opencodePin = (root) => {
+var isDevOpenCodeAdapterRoot = (root, dev) => {
+  if (dev)
+    return true;
+  const norm = root.replaceAll("\\", "/");
+  return /\/packages\/workit-opencode\/?$/.test(norm);
+};
+var resolveOpenCodePin = (root, opts = {}) => {
+  if (!isDevOpenCodeAdapterRoot(root, opts.dev))
+    return OPENCODE_NPM_PIN;
   for (const rel of ["src/plugin.ts", "dist/plugin.js"]) {
     const entry = path12.join(root, rel);
     if (existsSync10(entry))
@@ -53525,8 +53579,9 @@ var opencodePin = (root) => {
   }
   return null;
 };
+var opencodePin = (root, res) => resolveOpenCodePin(root, { dev: res.dev });
 function applyOpenCode(root, res) {
-  const pin = opencodePin(root);
+  const pin = opencodePin(root, res);
   if (!pin) {
     return {
       platform: "opencode",
@@ -53613,30 +53668,35 @@ var preservedCursorRules = (src, dest) => {
   return preserved;
 };
 function copyPluginDir(src, dest) {
+  const realSrc = realpathSync2(src);
   const marker = path12.join(dest, ".workit-root");
-  const synced = readFileSafe(marker)?.trim() === src && samePluginContent(src, dest);
+  const destIsLink = existsSync10(dest) && lstatSync2(dest).isSymbolicLink();
+  const synced = !destIsLink && readFileSafe(marker)?.trim() === realSrc && samePluginContent(realSrc, dest);
   if (synced)
     return "Skipped";
   const hadDir = existsSync10(dest);
-  const rules = preservedCursorRules(src, dest);
+  const rules = preservedCursorRules(realSrc, dest);
   const parent = path12.dirname(dest);
   mkdirSync5(parent, { recursive: true });
   const swap = mkdtempSync(path12.join(parent, `.${path12.basename(dest)}.swap-`));
   const stage = path12.join(swap, "stage");
   const backup = path12.join(swap, "backup");
   try {
-    cpSync3(src, stage, {
+    cpSync3(realSrc, stage, {
       recursive: true,
-      filter: (entry) => !path12.relative(src, entry).split(path12.sep).includes("node_modules")
+      filter: (entry) => !path12.relative(realSrc, entry).split(path12.sep).includes("node_modules")
     });
     for (const [name, content] of rules) {
       mkdirSync5(path12.join(stage, "rules"), { recursive: true });
       writeFileSync7(path12.join(stage, "rules", name), content);
     }
-    writeFileSync7(path12.join(stage, ".workit-root"), src + `
+    writeFileSync7(path12.join(stage, ".workit-root"), realSrc + `
 `, "utf8");
-    if (!samePluginContent(src, stage))
+    if (!samePluginContent(realSrc, stage))
       throw new Error("staged adapter content is incomplete");
+    if (lstatSync2(stage).isSymbolicLink()) {
+      throw new Error("staged adapter resolved to a symlink — refusing fragile cache install");
+    }
     if (hadDir)
       renameSync(dest, backup);
     try {
@@ -54394,7 +54454,7 @@ import os8 from "node:os";
 import path15 from "node:path";
 
 // packages/workit-core/src/core/uninstall.ts
-import { existsSync as existsSync12, readFileSync as readFileSync11, realpathSync as realpathSync2, rmSync as rmSync3, writeFileSync as writeFileSync8 } from "node:fs";
+import { existsSync as existsSync12, readFileSync as readFileSync11, realpathSync as realpathSync3, rmSync as rmSync3, writeFileSync as writeFileSync8 } from "node:fs";
 import os7 from "node:os";
 import path14 from "node:path";
 var resolveUninstallPaths = (options = {}) => {
@@ -54593,7 +54653,7 @@ var canonicalRemoveDirAllowed = (actionPath, res) => {
     return false;
   }
   try {
-    return realpathSync2(actionPath) === realpathSync2(expected);
+    return realpathSync3(actionPath) === realpathSync3(expected);
   } catch {
     return true;
   }
@@ -56430,7 +56490,7 @@ import { createInterface as createInterface2 } from "node:readline/promises";
 
 // packages/workit-core/src/core.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync16, realpathSync as realpathSync7 } from "node:fs";
+import { existsSync as existsSync16, realpathSync as realpathSync8 } from "node:fs";
 import path22 from "node:path";
 
 // packages/workit-core/src/core/task-store.ts
@@ -59144,7 +59204,7 @@ async function runAuthorizedExternalAction(input, effect) {
   };
 }
 // packages/workit-core/src/core/task-engine.ts
-import { realpathSync as realpathSync6 } from "node:fs";
+import { realpathSync as realpathSync7 } from "node:fs";
 
 // packages/workit-core/src/core/policy-resolver.ts
 var resolverInputSchema = object({
@@ -59988,7 +60048,7 @@ class WorkitCore {
   }
   contextRootError() {
     try {
-      if (realpathSync6(this.context.root) !== this.store.root)
+      if (realpathSync7(this.context.root) !== this.store.root)
         return failure("invalid_input", "operation context root does not match the task store root");
     } catch {
       return failure("invalid_input", "operation context root cannot be resolved");
@@ -61217,7 +61277,7 @@ class WorkitCore {
     if (view.task.workspaceId !== view.workspace.id)
       return failure("invalid_input", "task and workspace bindings are invalid");
     try {
-      if (realpathSync6(view.workspace.root) !== this.store.root)
+      if (realpathSync7(view.workspace.root) !== this.store.root)
         return failure("invalid_input", "task view root does not match the task store");
     } catch {
       return failure("invalid_input", "task view root cannot be resolved");
@@ -61486,7 +61546,7 @@ function resolveGitRevision(root, value) {
   }
 }
 function resolveInside(root, candidate) {
-  const base = realpathSync7(root);
+  const base = realpathSync8(root);
   const target = path22.resolve(base, candidate);
   if (target !== base && !target.startsWith(base + path22.sep)) {
     throw new Error("path must stay inside repository root");
@@ -61494,14 +61554,14 @@ function resolveInside(root, candidate) {
   let ancestor = target;
   while (!existsSync16(ancestor))
     ancestor = path22.dirname(ancestor);
-  const canonicalAncestor = realpathSync7(ancestor);
+  const canonicalAncestor = realpathSync8(ancestor);
   if (canonicalAncestor !== base && !canonicalAncestor.startsWith(base + path22.sep)) {
     throw new Error("path must stay inside repository root");
   }
   return target;
 }
 function run(root, executable, args, env = {}) {
-  const cwd = realpathSync7(root);
+  const cwd = realpathSync8(root);
   const result = spawnSync4(executable, args, {
     cwd,
     encoding: "utf8",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-cli",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "private": false,
   "description": "Workit CLI — setup wizard, doctor, and task control for agentic coding workflows",
   "keywords": [
@@ -37,9 +37,9 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@brainervirus/workit-core": "^1.0.3",
-    "@brainervirus/workit-cursor": "^1.0.3",
-    "@brainervirus/workit-opencode": "^1.0.3",
+    "@brainervirus/workit-core": "^1.0.4",
+    "@brainervirus/workit-cursor": "^1.0.4",
+    "@brainervirus/workit-opencode": "^1.0.4",
     "@inkjs/ui": "2.0.0",
     "ink": "7.1.1",
     "react": "19.2.8"