@brainervirus/workit-cli 1.0.3 → 1.0.5

package/dist/index.js

@@ -43028,10 +43028,12 @@ import {
   copyFileSync as copyFileSync2,
   cpSync as cpSync3,
   existsSync as existsSync10,
+  lstatSync as lstatSync2,
   mkdirSync as mkdirSync5,
   mkdtempSync,
   readFileSync as readFileSync10,
   readdirSync as readdirSync4,
+  realpathSync as realpathSync2,
   renameSync,
   rmSync as rmSync2,
   statSync as statSync4,
@@ -43135,6 +43137,7 @@ var readSetupState = (dir = resolveConfigDir()) => ({
 
 // packages/workit-core/src/core/registration.ts
 import path7 from "node:path";
+var OPENCODE_NPM_PIN = "@brainervirus/workit-opencode";
 var isRecord = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
 var named = (s, name) => s === name || s.startsWith(`${name}@`);
 function isWorkitPlugin(value) {
@@ -43257,7 +43260,16 @@ function cursorHooksEntry(_packageDir) {
 
 // packages/workit-core/src/core/doctor.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync9, mkdirSync as mkdirSync4, readFileSync as readFileSync9, statSync as statSync3, unlinkSync, writeFileSync as writeFileSync6 } from "node:fs";
+import {
+  existsSync as existsSync9,
+  lstatSync,
+  mkdirSync as mkdirSync4,
+  readFileSync as readFileSync9,
+  readlinkSync,
+  statSync as statSync3,
+  unlinkSync,
+  writeFileSync as writeFileSync6
+} from "node:fs";
 import os5 from "node:os";
 import path11 from "node:path";
 
@@ -51956,6 +51968,7 @@ var resolve = (options) => {
     cwd,
     dev,
     opencodeConfig: options.opencodeConfig ?? path11.join(home, ".config", "opencode", "opencode.json"),
+    opencodePackageCacheDir: options.opencodePackageCacheDir ?? path11.join(home, ".cache", "opencode", "packages", "@brainervirus", "workit-opencode@latest"),
     cursorSettings: options.cursorSettings ?? path11.join(home, ".cursor", "settings.json"),
     cursorMcp: options.cursorMcp ?? path11.join(home, ".cursor", "mcp.json"),
     cursorPluginDir: options.cursorPluginDir ?? path11.join(home, ".cursor", "plugins", "local", "workit"),
@@ -52358,11 +52371,19 @@ var checkUtility = (res) => {
     detail: "git (and flock where required) on PATH"
   };
 };
+var isFragileCachePin = (entry) => {
+  const n = entry.replaceAll("\\", "/").toLowerCase();
+  if (!n.startsWith("file:"))
+    return false;
+  return n.includes("/caches/pnpm/dlx/") || n.includes("/_npx/") || n.includes("/.pacquet/") || n.includes("/library/caches/pnpm/");
+};
 var staleEntry = (entry) => {
   if (!entry)
     return "stale";
   if (entry.includes("git+file"))
     return "stale";
+  if (isFragileCachePin(entry))
+    return "fragile-cache";
   if (entry.startsWith("file:")) {
     const target = entry.replace(/^file:\/\//, "").replace(/^file:/, "");
     return existsSync9(target) ? "ok" : "missing-file";
@@ -52391,7 +52412,7 @@ var checkStalePin = (res) => {
       id: "stale_pin",
       status: "fail",
       detail: "no workit plugin registered in the opencode config",
-      fix: "Run install-opencode-plugin.sh to pin the workit plugin entry"
+      fix: 'Run `workit init` and select OpenCode — pin "@brainervirus/workit-opencode"'
     };
   }
   const first = staleEntry(entries[0]);
@@ -52400,7 +52421,15 @@ var checkStalePin = (res) => {
       id: "stale_pin",
       status: "fail",
       detail: `stale workit pin: ${entries[0]}`,
-      fix: "Re-run install-opencode-plugin.sh — the pin points at a git+file or non-file source"
+      fix: "Run `workit init` (or install-opencode-plugin.sh for a checkout) — replace git+file pins"
+    };
+  }
+  if (first === "fragile-cache") {
+    return {
+      id: "stale_pin",
+      status: "fail",
+      detail: `workit pin points at a package-manager cache path: ${entries[0]}`,
+      fix: 'Run `workit init` and select OpenCode — pin should be "@brainervirus/workit-opencode"'
     };
   }
   if (first === "missing-file") {
@@ -52408,7 +52437,7 @@ var checkStalePin = (res) => {
       id: "stale_pin",
       status: "fail",
       detail: `workit pin points at a missing file: ${entries[0]}`,
-      fix: "Re-run install-opencode-plugin.sh after restoring the checkout the pin references"
+      fix: "Run `workit init` (or restore the checkout and re-run install-opencode-plugin.sh)"
     };
   }
   return { id: "stale_pin", status: "pass", detail: "opencode pin resolves" };
@@ -52426,7 +52455,11 @@ var pluginMcpSelectors = (res) => {
     return null;
   return args.map(String).filter((a) => a.startsWith("--package="));
 };
-var registryLatestVersion = (res) => {
+var isFloatingOpenCodeNpmPin = (entry) => {
+  const s = entry.trim();
+  return s === OPENCODE_NPM_PIN || s === `${OPENCODE_NPM_PIN}@latest`;
+};
+var registryLatestVersion = (res, pkgName = CURSOR_RUNTIME_PACKAGE) => {
   const seam = res.env.WORKIT_DOCTOR_STALE_REGISTRY_VERSION;
   if (typeof seam === "string" && seam) {
     return /^\d+(?:\.\d+){1,2}$/.test(seam) ? seam : null;
@@ -52435,7 +52468,7 @@ var registryLatestVersion = (res) => {
   if (!cmd)
     return null;
   try {
-    const r = spawnSync2(cmd, ["view", CURSOR_RUNTIME_PACKAGE, "version"], {
+    const r = spawnSync2(cmd, ["view", pkgName, "version"], {
       encoding: "utf8",
       timeout: 20000,
       env: res.env
@@ -52450,12 +52483,100 @@ var installedPluginVersion = (res) => {
   const pkg = readJson(path11.join(res.cursorPluginDir, "package.json"));
   return typeof pkg?.version === "string" && pkg.version ? pkg.version : null;
 };
+var installedOpenCodeCacheVersion = (res) => {
+  const pkg = readJson(path11.join(res.opencodePackageCacheDir, "node_modules", "@brainervirus", "workit-opencode", "package.json"));
+  return typeof pkg?.version === "string" && pkg.version ? pkg.version : null;
+};
+var checkOpenCodePackageCache = (res) => {
+  if (!existsSync9(res.opencodeConfig)) {
+    return {
+      id: "stale_install",
+      status: "pass",
+      detail: "no opencode config — package cache not inspected"
+    };
+  }
+  const entries = pluginEntries(readJson(res.opencodeConfig));
+  if (entries.length === 0) {
+    return {
+      id: "stale_install",
+      status: "pass",
+      detail: "no workit opencode pin — package cache not inspected"
+    };
+  }
+  const pin = entries[0];
+  if (pin.startsWith("file:") || pin.startsWith("git+file:")) {
+    return {
+      id: "stale_install",
+      status: "pass",
+      detail: "opencode checkout pin — package cache not used for npm resolution"
+    };
+  }
+  if (!isFloatingOpenCodeNpmPin(pin)) {
+    return {
+      id: "stale_install",
+      status: "pass",
+      detail: `opencode pin ${pin} is an exact version — not compared to registry latest`
+    };
+  }
+  const installed = installedOpenCodeCacheVersion(res);
+  if (installed === null) {
+    return {
+      id: "stale_install",
+      status: "pass",
+      detail: "opencode @latest package cache empty — OpenCode will resolve on next launch"
+    };
+  }
+  const expected = registryLatestVersion(res, OPENCODE_NPM_PIN);
+  if (expected === null) {
+    return {
+      id: "registry_unreachable",
+      status: "warn",
+      registryProbed: true,
+      detail: "registry_unreachable: cannot compare OpenCode @latest cache against published workit-opencode",
+      fix: `Retry when npm is reachable, or remove ${res.opencodePackageCacheDir} and restart OpenCode to re-resolve`
+    };
+  }
+  if (!semverAtLeast(installed, expected)) {
+    return {
+      id: "stale_install",
+      status: "fail",
+      registryProbed: true,
+      detail: `stale_install: OpenCode @latest cache has workit-opencode ${installed} behind published ${expected}`,
+      fix: `Remove ${res.opencodePackageCacheDir} and restart OpenCode — it re-resolves @latest on the next launch`
+    };
+  }
+  return {
+    id: "stale_install",
+    status: "pass",
+    registryProbed: true,
+    detail: `OpenCode @latest cache workit-opencode ${installed} matches published ${expected}`
+  };
+};
 var checkStaleInstall = (res) => {
+  if (res.host === "opencode") {
+    return checkOpenCodePackageCache(res);
+  }
   if (res.host !== "cursor" && res.host !== "cli") {
     return {
       id: "stale_install",
       status: "pass",
-      detail: "cursor plugin not inspected on the opencode host"
+      detail: "cursor plugin not inspected on this host"
+    };
+  }
+  if (existsSync9(res.cursorPluginDir) && lstatSync(res.cursorPluginDir).isSymbolicLink()) {
+    let target = "";
+    try {
+      target = readlinkSync(res.cursorPluginDir);
+    } catch {
+      target = "(unreadable)";
+    }
+    const n = target.replaceAll("\\", "/").toLowerCase();
+    const fragile = n.includes("/caches/pnpm/dlx/") || n.includes("/_npx/") || n.includes("/.pacquet/") || n.includes("/library/caches/pnpm/");
+    return {
+      id: "stale_install",
+      status: "fail",
+      detail: fragile ? `stale_install: cursor plugin dir is a symlink into a package-manager cache (${target})` : `stale_install: cursor plugin dir is a symlink (${target}) — expected a real directory copy`,
+      fix: "Run `workit init` and select Cursor — install must copy into ~/.cursor/plugins/local/workit"
     };
   }
   const canonicalMcp = cursorMcpServerEntry("").args.find((a) => a.startsWith("--package="));
@@ -52521,18 +52642,30 @@ var checkStaleInstall = (res) => {
         fix: "Re-run install-cursor-plugin.sh — it refreshes the plugin directory with the current build"
       };
     }
-    return {
+    const cursorOk = {
       id: "stale_install",
       status: "pass",
       registryProbed: true,
       detail: `installed local-dist workit-cursor ${installed} matches the published runtime ${expected}`
     };
+    if (res.host === "cli") {
+      const oc = checkOpenCodePackageCache(res);
+      if (oc.status !== "pass")
+        return oc;
+    }
+    return cursorOk;
   }
-  return {
+  const cursorOk = {
     id: "stale_install",
     status: "pass",
     detail: installed === null ? "installed workit-cursor selectors are canonical" : `installed workit-cursor ${installed} is metadata on the canonical @latest install (fresh at launch)`
   };
+  if (res.host === "cli") {
+    const oc = checkOpenCodePackageCache(res);
+    if (oc.status !== "pass")
+      return oc;
+  }
+  return cursorOk;
 };
 var checkDuplicateRegistration = (res) => {
   const problems = [];
@@ -52657,7 +52790,9 @@ var checkCredentialMetadata = (res) => {
     tokenPaths.push(path11.join(res.configDir, "youtrack.token"));
   }
   const vcsJson = readJson(path11.join(res.configDir, "vcs.json"));
-  for (const key of ["gitlab", "github"]) {
+  const active = typeof vcsJson?.provider === "string" ? vcsJson.provider.trim().toLowerCase() : null;
+  const vcsKeys = active === "gitlab" || active === "github" ? [active] : ["gitlab", "github"];
+  for (const key of vcsKeys) {
     const provider = vcsJson?.[key];
     if (provider && typeof provider === "object") {
       const tf = provider.tokenFile;
@@ -53517,7 +53652,15 @@ function adapterRoot(platform, res) {
   }
   return null;
 }
-var opencodePin = (root) => {
+var isDevOpenCodeAdapterRoot = (root, dev) => {
+  if (dev)
+    return true;
+  const norm = root.replaceAll("\\", "/");
+  return /\/packages\/workit-opencode\/?$/.test(norm);
+};
+var resolveOpenCodePin = (root, opts = {}) => {
+  if (!isDevOpenCodeAdapterRoot(root, opts.dev))
+    return OPENCODE_NPM_PIN;
   for (const rel of ["src/plugin.ts", "dist/plugin.js"]) {
     const entry = path12.join(root, rel);
     if (existsSync10(entry))
@@ -53525,8 +53668,9 @@ var opencodePin = (root) => {
   }
   return null;
 };
+var opencodePin = (root, res) => resolveOpenCodePin(root, { dev: res.dev });
 function applyOpenCode(root, res) {
-  const pin = opencodePin(root);
+  const pin = opencodePin(root, res);
   if (!pin) {
     return {
       platform: "opencode",
@@ -53613,30 +53757,35 @@ var preservedCursorRules = (src, dest) => {
   return preserved;
 };
 function copyPluginDir(src, dest) {
+  const realSrc = realpathSync2(src);
   const marker = path12.join(dest, ".workit-root");
-  const synced = readFileSafe(marker)?.trim() === src && samePluginContent(src, dest);
+  const destIsLink = existsSync10(dest) && lstatSync2(dest).isSymbolicLink();
+  const synced = !destIsLink && readFileSafe(marker)?.trim() === realSrc && samePluginContent(realSrc, dest);
   if (synced)
     return "Skipped";
   const hadDir = existsSync10(dest);
-  const rules = preservedCursorRules(src, dest);
+  const rules = preservedCursorRules(realSrc, dest);
   const parent = path12.dirname(dest);
   mkdirSync5(parent, { recursive: true });
   const swap = mkdtempSync(path12.join(parent, `.${path12.basename(dest)}.swap-`));
   const stage = path12.join(swap, "stage");
   const backup = path12.join(swap, "backup");
   try {
-    cpSync3(src, stage, {
+    cpSync3(realSrc, stage, {
       recursive: true,
-      filter: (entry) => !path12.relative(src, entry).split(path12.sep).includes("node_modules")
+      filter: (entry) => !path12.relative(realSrc, entry).split(path12.sep).includes("node_modules")
     });
     for (const [name, content] of rules) {
       mkdirSync5(path12.join(stage, "rules"), { recursive: true });
       writeFileSync7(path12.join(stage, "rules", name), content);
     }
-    writeFileSync7(path12.join(stage, ".workit-root"), src + `
+    writeFileSync7(path12.join(stage, ".workit-root"), realSrc + `
 `, "utf8");
-    if (!samePluginContent(src, stage))
+    if (!samePluginContent(realSrc, stage))
       throw new Error("staged adapter content is incomplete");
+    if (lstatSync2(stage).isSymbolicLink()) {
+      throw new Error("staged adapter resolved to a symlink — refusing fragile cache install");
+    }
     if (hadDir)
       renameSync(dest, backup);
     try {
@@ -54394,7 +54543,7 @@ import os8 from "node:os";
 import path15 from "node:path";
 
 // packages/workit-core/src/core/uninstall.ts
-import { existsSync as existsSync12, readFileSync as readFileSync11, realpathSync as realpathSync2, rmSync as rmSync3, writeFileSync as writeFileSync8 } from "node:fs";
+import { existsSync as existsSync12, readFileSync as readFileSync11, realpathSync as realpathSync3, rmSync as rmSync3, writeFileSync as writeFileSync8 } from "node:fs";
 import os7 from "node:os";
 import path14 from "node:path";
 var resolveUninstallPaths = (options = {}) => {
@@ -54593,7 +54742,7 @@ var canonicalRemoveDirAllowed = (actionPath, res) => {
     return false;
   }
   try {
-    return realpathSync2(actionPath) === realpathSync2(expected);
+    return realpathSync3(actionPath) === realpathSync3(expected);
   } catch {
     return true;
   }
@@ -56430,7 +56579,7 @@ import { createInterface as createInterface2 } from "node:readline/promises";
 
 // packages/workit-core/src/core.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync16, realpathSync as realpathSync7 } from "node:fs";
+import { existsSync as existsSync16, realpathSync as realpathSync8 } from "node:fs";
 import path22 from "node:path";
 
 // packages/workit-core/src/core/task-store.ts
@@ -59144,7 +59293,7 @@ async function runAuthorizedExternalAction(input, effect) {
   };
 }
 // packages/workit-core/src/core/task-engine.ts
-import { realpathSync as realpathSync6 } from "node:fs";
+import { realpathSync as realpathSync7 } from "node:fs";
 
 // packages/workit-core/src/core/policy-resolver.ts
 var resolverInputSchema = object({
@@ -59988,7 +60137,7 @@ class WorkitCore {
   }
   contextRootError() {
     try {
-      if (realpathSync6(this.context.root) !== this.store.root)
+      if (realpathSync7(this.context.root) !== this.store.root)
         return failure("invalid_input", "operation context root does not match the task store root");
     } catch {
       return failure("invalid_input", "operation context root cannot be resolved");
@@ -61217,7 +61366,7 @@ class WorkitCore {
     if (view.task.workspaceId !== view.workspace.id)
       return failure("invalid_input", "task and workspace bindings are invalid");
     try {
-      if (realpathSync6(view.workspace.root) !== this.store.root)
+      if (realpathSync7(view.workspace.root) !== this.store.root)
         return failure("invalid_input", "task view root does not match the task store");
     } catch {
       return failure("invalid_input", "task view root cannot be resolved");
@@ -61486,7 +61635,7 @@ function resolveGitRevision(root, value) {
   }
 }
 function resolveInside(root, candidate) {
-  const base = realpathSync7(root);
+  const base = realpathSync8(root);
   const target = path22.resolve(base, candidate);
   if (target !== base && !target.startsWith(base + path22.sep)) {
     throw new Error("path must stay inside repository root");
@@ -61494,14 +61643,14 @@ function resolveInside(root, candidate) {
   let ancestor = target;
   while (!existsSync16(ancestor))
     ancestor = path22.dirname(ancestor);
-  const canonicalAncestor = realpathSync7(ancestor);
+  const canonicalAncestor = realpathSync8(ancestor);
   if (canonicalAncestor !== base && !canonicalAncestor.startsWith(base + path22.sep)) {
     throw new Error("path must stay inside repository root");
   }
   return target;
 }
 function run(root, executable, args, env = {}) {
-  const cwd = realpathSync7(root);
+  const cwd = realpathSync8(root);
   const result = spawnSync4(executable, args, {
     cwd,
     encoding: "utf8",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-cli",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "private": false,
   "description": "Workit CLI — setup wizard, doctor, and task control for agentic coding workflows",
   "keywords": [
@@ -37,9 +37,9 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@brainervirus/workit-core": "^1.0.3",
-    "@brainervirus/workit-cursor": "^1.0.3",
-    "@brainervirus/workit-opencode": "^1.0.3",
+    "@brainervirus/workit-core": "^1.0.5",
+    "@brainervirus/workit-cursor": "^1.0.5",
+    "@brainervirus/workit-opencode": "^1.0.5",
     "@inkjs/ui": "2.0.0",
     "ink": "7.1.1",
     "react": "19.2.8"