@brainervirus/workit-codex 7.7.0 → 8.0.0

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "workit",
-  "version": "7.7.0",
+  "version": "8.0.0",
   "description": "Adaptive engineering workflow rails for Codex",
   "author": {
     "name": "BrainerVirus"

package/dist/launch-mcp.js

@@ -6624,12 +6624,12 @@ var require_dist = __commonJS(function(exports, module) {
 import { existsSync as existsSync9, realpathSync as realpathSync7, statSync as statSync3 } from "node:fs";
 import path21 from "node:path";
 
-// packages/workit-core/src/core.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core.ts
 import { spawnSync as spawnSync12 } from "node:child_process";
 import { existsSync as existsSync7, realpathSync as realpathSync5 } from "node:fs";
 import path19 from "node:path";
 
-// packages/workit-core/src/core/task-contract.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-contract.ts
 import { createHash, randomUUID } from "node:crypto";
 
 // node_modules/zod/v4/core/util.js
@@ -14203,7 +14203,7 @@ function preprocess(fn, schema) {
 function datetime2(params) {
   return _isoDateTime(ZodISODateTime, params);
 }
-// packages/workit-core/src/core/task-contract.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-contract.ts
 var SCHEMA_VERSION = 1;
 var POLICY_VERSION = "1.0.0";
 var OPERATION_FAMILIES = [
@@ -15058,7 +15058,7 @@ function requirementId(input) {
     }
   });
 }
-// packages/workit-core/src/core/operation-input.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/operation-input.ts
 var str = (d, values) => ({
   type: "string",
   ...values ? { enum: values } : {},
@@ -15454,7 +15454,7 @@ function parseAdvertisedOperation(family, input, host) {
     }))
   });
 }
-// packages/workit-core/src/core/task-store.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-store.ts
 import { createHash as createHash4, randomUUID as randomUUID3 } from "node:crypto";
 import * as fs7 from "node:fs";
 import path6 from "node:path";
@@ -16060,7 +16060,7 @@ function acquireFileLockSync(targetPath, options) {
     }
   }
 }
-// packages/workit-core/src/core/package-root.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/package-root.ts
 import { existsSync } from "node:fs";
 import path3 from "node:path";
 import { fileURLToPath } from "node:url";
@@ -16079,12 +16079,12 @@ var assetRoot = () => {
   return existsSync(assets) ? assets : root;
 };
 
-// packages/workit-core/src/core/store-lock.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/store-lock.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 import fs5 from "node:fs";
 import { hostname } from "node:os";
 
-// packages/workit-core/src/store/paths.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/paths.ts
 import { spawnSync } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
 import fs4 from "node:fs";
@@ -16364,7 +16364,7 @@ var checkoutSlug = (root) => {
   return `${base}-${shortHash(canonical)}`;
 };
 
-// packages/workit-core/src/core/store-lock.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/store-lock.ts
 var metadataLockSchema = object({
   pid: number2().int().nonnegative().safe(),
   processStart: string2().nullable(),
@@ -16495,7 +16495,7 @@ var clearAbandonedReclaimGuard = (lockPath, nowMs = Date.now()) => {
   }
 };
 
-// packages/workit-core/src/store/event-log.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/event-log.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import fs6 from "node:fs";
 import path5 from "node:path";
@@ -16655,7 +16655,7 @@ var retryTransient = (run) => {
 };
 var renameWithRetry = (from, to) => retryTransient(() => fs6.renameSync(from, to));
 
-// packages/workit-core/src/store/patch.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/patch.ts
 var isPlainObject2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var equal = (left, right) => {
   if (left === right)
@@ -16765,7 +16765,7 @@ var isPatch = (value) => Array.isArray(value) && value.every((op) => {
   return false;
 });
 
-// packages/workit-core/src/store/reduce.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/reduce.ts
 import { createHash as createHash3 } from "node:crypto";
 var OPENING_TYPES = new Set([
   "task.opened",
@@ -16896,7 +16896,7 @@ function eventType(before, after) {
   return "task.updated";
 }
 
-// packages/workit-core/src/store/notes.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/notes.ts
 var SLOT = Symbol.for("workit.migrationReporter");
 var reportMigration = (report) => {
   try {
@@ -16907,7 +16907,7 @@ var reportMigration = (report) => {
 };
 var migrationReporterInstalled = () => typeof globalThis[SLOT] === "function";
 
-// packages/workit-core/src/core/task-store.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-store.ts
 var MIGRATION_PENDING = "workit migration pending";
 var STORE_FORMAT = 3;
 var STORE_MIN_RUNTIME = "3.0.0";
@@ -18543,18 +18543,18 @@ class TaskStore {
     return failure2(recovery ? "recovery_required" : "storage_error", `lock operation failed: ${String(error)}`, { path: lockPath });
   }
 }
-// packages/workit-core/src/core/workers.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/workers.ts
 var UNCERTAIN_WORKER_STATES = ["dispatching", "running", "cancelling", "unknown"];
 var isUncertainWorker = (state) => UNCERTAIN_WORKER_STATES.includes(state);
 var workerBlocksTransition = (transition, state) => transition === "pause" ? false : isUncertainWorker(state);
 
-// packages/workit-core/src/core/task-evaluation.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-evaluation.ts
 import { createHash as createHash7 } from "node:crypto";
 import * as fs11 from "node:fs";
 import { spawnSync as spawnSync6 } from "node:child_process";
 import path11 from "node:path";
 
-// packages/workit-core/src/check-config.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/check-config.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
 import fs8 from "node:fs";
 import path7 from "node:path";
@@ -18759,7 +18759,7 @@ function checkCommand(args, version, onPath = workitAvailable()) {
   return onPath ? `workit check ${args}` : `npx -y @brainervirus/workit-cli@${version} check ${args}`;
 }
 
-// packages/workit-core/src/git/rev.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/git/rev.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import fs9 from "node:fs";
@@ -18940,11 +18940,11 @@ function pushRemoteName(cwd, branch) {
   return remotes.length === 1 ? remotes[0] : null;
 }
 
-// packages/workit-core/src/core/policy/derive.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy/derive.ts
 import { existsSync as existsSync3 } from "node:fs";
 import path10 from "node:path";
 
-// packages/workit-core/src/ledger.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/ledger.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
 import { createHash as createHash6, randomBytes as randomBytes2 } from "node:crypto";
 import fs10 from "node:fs";
@@ -19295,7 +19295,7 @@ function checkVerdicts(cwd, branch, rows) {
 }
 var OBSERVED_ONLY = new Set(["check", ...PR_ROW_TYPES]);
 
-// packages/workit-core/src/core/policy/derive.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy/derive.ts
 var RULES = {
   test: "check:test",
   self: "verdict:self",
@@ -19483,7 +19483,7 @@ function derivedRuleStatus(task, requirement, root, ledger) {
   }
 }
 
-// packages/workit-core/src/core/task-evaluation.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-evaluation.ts
 var digestBytes = (value) => createHash7("sha256").update(value).digest("hex");
 var inside = (root, candidate) => candidate === root || candidate.startsWith(`${root}${path11.sep}`);
 var relative = (root, candidate) => path11.relative(root, candidate).split(path11.sep).join("/") || ".";
@@ -20149,7 +20149,7 @@ function evaluateClosure(requestedOutcome, view) {
   });
 }
 
-// packages/workit-core/src/core/methods.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/methods.ts
 var METHODS = {
   "workit-shape": { dimensions: ["challenge", "decisions", "artifacts", "continuity"] },
   "workit-bdd": { dimensions: ["testing"] },
@@ -20195,7 +20195,7 @@ function selectMethods(policy, capabilities) {
   });
 }
 
-// packages/workit-core/src/core/task-context.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-context.ts
 function reconcileResume(view, observations = []) {
   if (observations.length > 0)
     return failure2("permission_denied", "worker observations require native host verification");
@@ -20309,7 +20309,7 @@ var exportDigest = (bundle) => sha256({
   sourceWorkspaceId: bundle.sourceWorkspaceId,
   task: bundle.task
 });
-// packages/workit-core/src/core/git.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/git.ts
 import { execFileSync } from "node:child_process";
 var run = (cwd, args) => {
   try {
@@ -20377,7 +20377,7 @@ var gitContext = (workspaceRoot, paths = []) => {
   };
 };
 
-// packages/workit-core/src/core/config.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/config.ts
 import {
   copyFileSync as copyFileSync2,
   cpSync as cpSync2,
@@ -20390,7 +20390,7 @@ import {
 import os2 from "node:os";
 import path12 from "node:path";
 
-// packages/workit-core/src/core/boundary.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/boundary.ts
 import { statSync as statSync2 } from "node:fs";
 var EVENT = {
   initialization: "initialization",
@@ -20426,7 +20426,7 @@ var changedSourcesSinceLoad = (marker) => {
   return changed;
 };
 
-// packages/workit-core/src/core/config.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/config.ts
 var diagnosticLogger;
 var PRESETS = {
   gitflow: {
@@ -20579,7 +20579,7 @@ var COMMIT_PRESETS = [
   "auto"
 ];
 
-// packages/workit-core/src/core/workspaces.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/workspaces.ts
 import { createHash as createHash8 } from "node:crypto";
 import { readFileSync as readFileSync4, realpathSync as realpathSync3 } from "node:fs";
 import path13 from "node:path";
@@ -20988,12 +20988,12 @@ function workspaceDefaultTarget(cwd, globalDefault) {
   return String(ws?.vcs?.defaultTargetBranch ?? (hasWorkspacePolicy ? policyDefault : globalDefault ?? policyDefault) ?? "develop");
 }
 
-// packages/workit-core/src/core/vcs-config.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/vcs-config.ts
 import fs12 from "node:fs";
 import path14 from "node:path";
 import { spawnSync as spawnSync8 } from "node:child_process";
 
-// packages/workit-core/src/core/release-tracks.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/release-tracks.ts
 import { createHash as createHash9 } from "node:crypto";
 import { spawnSync as spawnSync7 } from "node:child_process";
 var KNOWN_FIELDS = new Set([
@@ -21378,7 +21378,7 @@ function resolveTrackFor(cwd, options) {
   return resolution;
 }
 
-// packages/workit-core/src/core/vcs-config.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/vcs-config.ts
 var workspacesPath = () => path14.join(configDir(), "workspaces.json");
 var vcsCwd = (cwd) => cwd ?? process.env.WORKFLOW_WORKSPACE_ROOT ?? process.cwd();
 var remoteProvider = (cwd) => {
@@ -21659,10 +21659,10 @@ function mergedPrStyle(limit = 6, cwd) {
     examples
   };
 }
-// packages/workit-core/src/core/task-engine.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-engine.ts
 import { realpathSync as realpathSync4 } from "node:fs";
 
-// packages/workit-core/src/core/policy-resolver.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy-resolver.ts
 function resolvePolicy(input) {
   const ids = input.constraints.map((constraint) => constraint.id);
   if (new Set(ids).size !== ids.length)
@@ -21718,7 +21718,7 @@ function diffPolicy(previous, next, reason, now) {
   return parsed.data;
 }
 
-// packages/workit-core/src/core/policy/judgment.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy/judgment.ts
 var isObject6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var squash = (key) => key.toLowerCase().replace(/[_-]/g, "");
 var ALIASES = {
@@ -21842,7 +21842,7 @@ function normalizeJudgment(raw, previous) {
   return success(null, null, { judgment: parsed.data, ignored, legacy });
 }
 
-// packages/workit-core/src/autonomy.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/autonomy.ts
 import os3 from "node:os";
 import path15 from "node:path";
 var accountHome = () => {
@@ -21979,7 +21979,7 @@ function resolveAutonomy(cwd) {
 var suggested = (kind) => kind === "merge" ? "verified" : "true";
 var grantHint = (workspace, kind) => `ask the user to run, in their own terminal: workit grant set ${workspace ?? "<workspace>"} ${kind}=${suggested(kind)}`;
 
-// packages/workit-core/src/core/task-engine.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-engine.ts
 var workspaceVerification = (root) => {
   try {
     return resolveAutonomy(root).verification;
@@ -23564,7 +23564,7 @@ class WorkitCore {
     return this.summary(changed.data.task);
   }
 }
-// packages/workit-core/src/core/repo-context.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/repo-context.ts
 import { spawnSync as spawnSync9 } from "node:child_process";
 import { existsSync as existsSync6, readFileSync as readFileSync5, readdirSync as readdirSync4 } from "node:fs";
 import path16 from "node:path";
@@ -24034,20 +24034,20 @@ function releaseNotesContext(root, rangeOrTag) {
   return { stdout, stderr: "", exitCode: 0, cwd };
 }
 
-// packages/workit-core/src/core/tracker-issues.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/tracker-issues.ts
 import { spawnSync as spawnSync11 } from "node:child_process";
 
-// packages/workit-core/src/core/pr-create.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/pr-create.ts
 import fs13 from "node:fs";
 import path17 from "node:path";
 import { spawnSync as spawnSync10 } from "node:child_process";
-// packages/workit-core/src/forge/pr-body.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/forge/pr-body.ts
 function parseGhIssue(value) {
   const m = /issues\/(\d+)/.exec(value);
   return m ? m[1] : String(value).trim().replace(/^#/, "");
 }
 
-// packages/workit-core/src/core/pr-create.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/pr-create.ts
 function whichOnPath(tool) {
   const names = process.platform === "win32" ? [tool, `${tool}.exe`, `${tool}.cmd`] : [tool];
   for (const dir of (process.env.PATH ?? "").split(path17.delimiter)) {
@@ -24075,7 +24075,7 @@ var pushRemote = (cwd) => {
   return urls.length === 1 ? urls[0] : null;
 };
 
-// packages/workit-core/src/core/tracker-issues.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/tracker-issues.ts
 var repoPathFromRemote = (remote) => {
   let rest = (remote || "").trim().replace(/\/+$/, "");
   if (!rest)
@@ -24173,19 +24173,19 @@ var fetchGitLabIssueBody = async (ref, root, deps = {}) => {
   return tryCliTriple(deps.cli ?? defaultCli("glab", hostingCliAvailable("gitlab")), "glab", ["issue", "view", id, "-R", repoArg, "-F", "json"], root, id, ["iid"], ["description"]);
 };
 
-// packages/workit-core/src/core/youtrack.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/youtrack.ts
 import fs14 from "node:fs";
 import path18 from "node:path";
 
-// packages/workit-core/src/core/templates.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/templates.ts
 var repoRoot2 = assetRoot();
 
-// packages/workit-core/src/core/scripts.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/scripts.ts
 var PLUGIN_ROOT = packageRoot();
 var ASSET_ROOT = assetRoot();
 var resolveWorkspaceRoot = (explicit) => explicit || process.cwd();
 
-// packages/workit-core/src/core/youtrack.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/youtrack.ts
 var ISSUE_RE = /^[A-Z]+-\d+$/;
 var TOKEN_PLACEHOLDER = "YOUR_TOKEN_HERE";
 var youTrackConfigPath = () => process.env.WORKFLOW_YOUTRACK_CONFIG ?? path18.join(configDir(), "youtrack.json");
@@ -24476,7 +24476,7 @@ var fetchYouTrackIssueBody = async (issue, creds = youTrackToken, request = youT
   }
 };
 
-// packages/workit-core/src/core/context-read.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/context-read.ts
 var contextReadSchema = object({
   kind: _enum([
     "git",
@@ -24571,7 +24571,7 @@ var readExternalContext = async (root, payload) => {
     }
   }
 };
-// packages/workit-core/src/core.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core.ts
 var revision2 = /^[A-Za-z0-9@][A-Za-z0-9@._/~^{}-]*$/;
 function gitRevisionParts(value) {
   if (!value || value.startsWith("-") || /[\s\\'"`$;|&<>]/.test(value)) {
@@ -24627,7 +24627,7 @@ function run2(root, executable, args, env = {}) {
   };
 }
 
-// packages/workit-core/src/core/support-matrix.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/support-matrix.ts
 var SUPPORT_MATRIX = {
   bun: "1.4.1",
   node: { minimum: "24", current: "24.20.0" },
@@ -24637,7 +24637,7 @@ var SUPPORT_MATRIX = {
   os: ["ubuntu-latest", "macos-latest", "windows-latest"]
 };
 
-// packages/workit-mcp/src/server.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-mcp/src/server.ts
 import { existsSync as existsSync8, readFileSync as readFileSync6, realpathSync as realpathSync6 } from "node:fs";
 import path20 from "node:path";
 // node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
@@ -27014,10 +27014,10 @@ class StdioServerTransport {
   }
 }
 
-// packages/workit-mcp/src/server.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-mcp/src/server.ts
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
-// packages/workit-core/src/core/logger.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/logger.ts
 import os4 from "node:os";
 var REDACTED = "[REDACTED]";
 var SECRET_VALUE = /\b(?:Bearer|Basic|Digest|Token)\s+\S+/gi;
@@ -27074,7 +27074,7 @@ var applyPatterns = (value) => {
 };
 var redactSecrets = (value) => applyPatterns(value);
 
-// packages/workit-mcp/src/server.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-mcp/src/server.ts
 class McpCapabilityUnavailableError extends Error {
   capability;
   constructor(capability) {
@@ -27369,7 +27369,7 @@ async function runStdioServer(host, contextProvider = defaultContextProvider(hos
   await server.connect(new StdioServerTransport);
   return server;
 }
-// packages/workit-core/src/hooks/descriptor.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/descriptor.ts
 var support = (descriptor, axis) => {
   if (axis.startsWith("event:"))
     return descriptor.events[axis.slice("event:".length)].support;
@@ -27393,14 +27393,14 @@ var capabilitiesFor = (descriptor, observed = {}) => descriptor.capabilities.map
     refs: rule.refs.map((handle) => ({ kind: "host", host: descriptor.host, handle }))
   };
 });
-// packages/workit-core/src/hooks/context.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/context.ts
 var signals = new Map;
 var cache = new Map;
-// packages/workit-core/src/hooks/write-gate.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/write-gate.ts
 var CASE_INSENSITIVE = process.platform === "darwin" || process.platform === "win32";
 var PREFIXES = new Set(["sudo", "command", "env", "nohup", "time", "exec", "xargs"]);
 var cache2 = new Map;
-// packages/workit-core/src/hooks/hosts/fields.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/fields.ts
 var SHELLS = new Set(["sh", "bash", "zsh", "dash", "pwsh", "powershell", "cmd"]);
 var WRITE_TOOLS = new Set([
   "write",
@@ -27421,15 +27421,15 @@ var WRITE_TOOLS = new Set([
   "editfile",
   "writefile"
 ]);
-// packages/workit-core/src/hooks/handle.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/handle.ts
 var offered = new Set;
 var CLAUDE_JUDGES = new Set(["workit:verifier", "workit:reviewer"]);
-// packages/workit-core/src/hooks/hosts/claude-code.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/claude-code.ts
 var SOURCES = new Set(["startup", "resume", "clear", "compact", "fork"]);
 var SHELL_TOOLS = new Set(["Bash", "PowerShell"]);
 var CONTEXT_EVENTS = new Set(["SessionStart", "UserPromptSubmit", "SubagentStart"]);
 
-// packages/workit-core/src/hooks/hosts/codex.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/codex.ts
 function detectCodexSurface(env) {
   return env.CODEX_INTERNAL_ORIGINATOR_OVERRIDE === "Codex Desktop" || Boolean(env.CODEX_ELECTRON_RESOURCES_PATH) ? "codex_desktop" : "codex_cli";
 }
@@ -27534,10 +27534,10 @@ var codexDescriptor = (host) => ({ ...CODEX_DESCRIPTOR, host });
 var SHELL_TOOLS2 = new Set(["bash", "unified-exec"]);
 var SOURCES2 = new Set(["startup", "resume", "clear", "compact"]);
 
-// packages/workit-core/src/hooks/hosts/cursor.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/cursor.ts
 var BLOCKING = new Set(["preToolUse", "beforeShellExecution", "subagentStart"]);
 
-// packages/workit-core/src/hooks/run.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/run.ts
 if (false) {}
 // packages/workit-codex/hooks/workit-hook.ts
 var codexCapabilities = (host, availability = {}) => capabilitiesFor(codexDescriptor(host), {

package/dist/workit-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from "node:module";
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
-// packages/workit-core/src/hooks/descriptor.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/descriptor.ts
 var support = (descriptor, axis) => {
   if (axis.startsWith("event:"))
     return descriptor.events[axis.slice("event:".length)].support;
@@ -25,10 +25,10 @@ var capabilitiesFor = (descriptor, observed = {}) => descriptor.capabilities.map
     refs: rule.refs.map((handle) => ({ kind: "host", host: descriptor.host, handle }))
   };
 });
-// packages/workit-core/src/hooks/context.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/context.ts
 import path15 from "node:path";
 
-// packages/workit-core/src/core/methods.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/methods.ts
 var METHODS = {
   "workit-shape": { dimensions: ["challenge", "decisions", "artifacts", "continuity"] },
   "workit-bdd": { dimensions: ["testing"] },
@@ -136,7 +136,7 @@ Skills: load the skill, never act from memory of it (slash aliases /wk-<name>).
 - architecture, deepen modules (user-invoked; offer it): workit-architecture
 `.trim();
 
-// packages/workit-core/src/core/task-contract.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-contract.ts
 import { createHash, randomUUID } from "node:crypto";
 
 // node_modules/zod/v4/core/util.js
@@ -7650,7 +7650,7 @@ function refine(fn, _params = {}) {
 function superRefine(fn, params) {
   return _superRefine(fn, params);
 }
-// packages/workit-core/src/core/task-contract.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-contract.ts
 var SCHEMA_VERSION = 1;
 var POLICY_VERSION = "1.0.0";
 var OPERATION_FAMILIES = [
@@ -8506,13 +8506,13 @@ function requirementId(input) {
   });
 }
 
-// packages/workit-core/src/core/task-evaluation.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-evaluation.ts
 import { createHash as createHash7 } from "node:crypto";
 import * as fs11 from "node:fs";
 import { spawnSync as spawnSync6 } from "node:child_process";
 import path11 from "node:path";
 
-// packages/workit-core/src/check-config.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/check-config.ts
 import { spawnSync } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
@@ -8717,7 +8717,7 @@ function checkCommand(args, version, onPath = workitAvailable()) {
   return onPath ? `workit check ${args}` : `npx -y @brainervirus/workit-cli@${version} check ${args}`;
 }
 
-// packages/workit-core/src/git/rev.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/git/rev.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
 import fs2 from "node:fs";
@@ -8869,7 +8869,7 @@ function currentBranch(cwd) {
   return line(git2(cwd, ["symbolic-ref", "--short", "-q", "HEAD"]));
 }
 
-// packages/workit-core/src/core/task-store.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-store.ts
 import { createHash as createHash5, randomUUID as randomUUID3 } from "node:crypto";
 import * as fs9 from "node:fs";
 import path8 from "node:path";
@@ -9475,7 +9475,7 @@ function acquireFileLockSync(targetPath, options) {
     }
   }
 }
-// packages/workit-core/src/core/package-root.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/package-root.ts
 import { existsSync } from "node:fs";
 import path5 from "node:path";
 import { fileURLToPath } from "node:url";
@@ -9489,12 +9489,12 @@ var packageRoot = () => {
   }
 };
 
-// packages/workit-core/src/core/store-lock.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/store-lock.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 import fs7 from "node:fs";
 import { hostname } from "node:os";
 
-// packages/workit-core/src/store/paths.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/paths.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash3 } from "node:crypto";
 import fs6 from "node:fs";
@@ -9774,7 +9774,7 @@ var checkoutSlug = (root) => {
   return `${base}-${shortHash(canonical)}`;
 };
 
-// packages/workit-core/src/core/store-lock.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/store-lock.ts
 var metadataLockSchema = object({
   pid: number2().int().nonnegative().safe(),
   processStart: string2().nullable(),
@@ -9905,7 +9905,7 @@ var clearAbandonedReclaimGuard = (lockPath, nowMs = Date.now()) => {
   }
 };
 
-// packages/workit-core/src/store/event-log.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/event-log.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import fs8 from "node:fs";
 import path7 from "node:path";
@@ -10065,7 +10065,7 @@ var retryTransient = (run) => {
 };
 var renameWithRetry = (from, to) => retryTransient(() => fs8.renameSync(from, to));
 
-// packages/workit-core/src/store/patch.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/patch.ts
 var isPlainObject2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var equal = (left, right) => {
   if (left === right)
@@ -10175,7 +10175,7 @@ var isPatch = (value) => Array.isArray(value) && value.every((op) => {
   return false;
 });
 
-// packages/workit-core/src/store/reduce.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/reduce.ts
 import { createHash as createHash4 } from "node:crypto";
 var OPENING_TYPES = new Set([
   "task.opened",
@@ -10306,7 +10306,7 @@ function eventType(before, after) {
   return "task.updated";
 }
 
-// packages/workit-core/src/store/notes.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/notes.ts
 var SLOT = Symbol.for("workit.migrationReporter");
 var reportMigration = (report) => {
   try {
@@ -10317,7 +10317,7 @@ var reportMigration = (report) => {
 };
 var migrationReporterInstalled = () => typeof globalThis[SLOT] === "function";
 
-// packages/workit-core/src/core/task-store.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-store.ts
 var MIGRATION_PENDING = "workit migration pending";
 var STORE_FORMAT = 3;
 var STORE_MIN_RUNTIME = "3.0.0";
@@ -11954,11 +11954,11 @@ class TaskStore {
   }
 }
 
-// packages/workit-core/src/core/policy/derive.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy/derive.ts
 import { existsSync as existsSync3 } from "node:fs";
 import path10 from "node:path";
 
-// packages/workit-core/src/ledger.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/ledger.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
 import { createHash as createHash6, randomBytes as randomBytes2 } from "node:crypto";
 import fs10 from "node:fs";
@@ -12309,7 +12309,7 @@ function checkVerdicts(cwd, branch, rows) {
 }
 var OBSERVED_ONLY = new Set(["check", ...PR_ROW_TYPES]);
 
-// packages/workit-core/src/core/policy/derive.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy/derive.ts
 var RULES = {
   test: "check:test",
   self: "verdict:self",
@@ -12508,7 +12508,7 @@ function writeBlockers(task, root) {
   });
 }
 
-// packages/workit-core/src/core/task-evaluation.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-evaluation.ts
 var digestBytes = (value) => createHash7("sha256").update(value).digest("hex");
 var inside = (root, candidate) => candidate === root || candidate.startsWith(`${root}${path11.sep}`);
 var relative = (root, candidate) => path11.relative(root, candidate).split(path11.sep).join("/") || ".";
@@ -13174,10 +13174,10 @@ function evaluateClosure(requestedOutcome, view) {
   });
 }
 
-// packages/workit-core/src/core/task-engine.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-engine.ts
 import { realpathSync as realpathSync4 } from "node:fs";
 
-// packages/workit-core/src/core/policy-resolver.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy-resolver.ts
 function resolvePolicy(input) {
   const ids = input.constraints.map((constraint) => constraint.id);
   if (new Set(ids).size !== ids.length)
@@ -13233,7 +13233,7 @@ function diffPolicy(previous, next, reason, now) {
   return parsed.data;
 }
 
-// packages/workit-core/src/core/operation-input.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/operation-input.ts
 var str2 = (d, values) => ({
   type: "string",
   ...values ? { enum: values } : {},
@@ -13579,7 +13579,7 @@ function normalizeOperationInput(family, input, host) {
   return request;
 }
 
-// packages/workit-core/src/core/policy/judgment.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy/judgment.ts
 var isObject6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var squash = (key) => key.toLowerCase().replace(/[_-]/g, "");
 var ALIASES = {
@@ -13703,11 +13703,11 @@ function normalizeJudgment(raw, previous) {
   return success(null, null, { judgment: parsed.data, ignored, legacy });
 }
 
-// packages/workit-core/src/autonomy.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/autonomy.ts
 import os3 from "node:os";
 import path14 from "node:path";
 
-// packages/workit-core/src/core/config.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/config.ts
 import {
   copyFileSync as copyFileSync2,
   cpSync as cpSync2,
@@ -13720,7 +13720,7 @@ import {
 import os2 from "node:os";
 import path12 from "node:path";
 
-// packages/workit-core/src/core/boundary.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/boundary.ts
 var EVENT = {
   initialization: "initialization",
   provenance: "provenance",
@@ -13741,7 +13741,7 @@ var errorDetail = (err) => {
   return { error_name: "unknown", error: String(err) };
 };
 
-// packages/workit-core/src/core/config.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/config.ts
 var diagnosticLogger;
 var PRESETS = {
   gitflow: {
@@ -13903,7 +13903,7 @@ var resolveCommitPolicy = (config, workspace) => {
   return config.commitPolicy ?? { preset: "conventional" };
 };
 
-// packages/workit-core/src/core/workspaces.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/workspaces.ts
 import { createHash as createHash8 } from "node:crypto";
 import { readFileSync as readFileSync4, realpathSync as realpathSync3 } from "node:fs";
 import path13 from "node:path";
@@ -14303,7 +14303,7 @@ var resolveRuntimeWorkspacePolicy = (cwd, kind, requestedProfile) => {
   };
 };
 
-// packages/workit-core/src/autonomy.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/autonomy.ts
 var accountHome = () => {
   try {
     return os3.userInfo().homedir;
@@ -14438,12 +14438,12 @@ function resolveAutonomy(cwd) {
 var suggested = (kind) => kind === "merge" ? "verified" : "true";
 var grantHint = (workspace, kind) => `ask the user to run, in their own terminal: workit grant set ${workspace ?? "<workspace>"} ${kind}=${suggested(kind)}`;
 
-// packages/workit-core/src/core/workers.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/workers.ts
 var UNCERTAIN_WORKER_STATES = ["dispatching", "running", "cancelling", "unknown"];
 var isUncertainWorker = (state) => UNCERTAIN_WORKER_STATES.includes(state);
 var workerBlocksTransition = (transition, state) => transition === "pause" ? false : isUncertainWorker(state);
 
-// packages/workit-core/src/core/task-context.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-context.ts
 function reconcileResume(view, observations = []) {
   if (observations.length > 0)
     return failure2("permission_denied", "worker observations require native host verification");
@@ -14558,7 +14558,7 @@ var exportDigest = (bundle) => sha256({
   task: bundle.task
 });
 
-// packages/workit-core/src/core/task-engine.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-engine.ts
 var workspaceVerification = (root) => {
   try {
     return resolveAutonomy(root).verification;
@@ -16144,7 +16144,7 @@ class WorkitCore {
   }
 }
 
-// packages/workit-core/src/hooks/context.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/context.ts
 var MIGRATION_PENDING_NOTE = "workit migration pending — run `workit task status`";
 var migrationPending = (result) => !result.ok && result.code === "needs_input" && (result.error ?? "").startsWith(MIGRATION_PENDING);
 var boundTo = (entry, session) => entry.sessions.some((item) => item.host === session.host && item.handle === session.handle);
@@ -16291,10 +16291,10 @@ var turnContextText = (input, descriptor) => {
     return null;
   }
 };
-// packages/workit-core/src/core/branch.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/branch.ts
 import { createHash as createHash9 } from "node:crypto";
 
-// packages/workit-core/src/core/release-tracks.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/release-tracks.ts
 class ReleaseTrackError extends Error {
 }
 var KNOWN_FIELDS = new Set([
@@ -16433,7 +16433,7 @@ function workspaceReleaseTracks(cwd) {
 }
 var memo3 = new Map;
 
-// packages/workit-core/src/core/branch.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/branch.ts
 var withReleaseTracks = (workspaceRoot, policy) => {
   const read = workspaceReleaseTracks(workspaceRoot);
   if (read.error)
@@ -16526,7 +16526,7 @@ var validateBranchNameFor = (workspaceRoot, name) => {
   }
 };
 
-// packages/workit-core/src/core/route-intent.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/route-intent.ts
 var shellBranchTarget = (command) => {
   if (!command.trim() || /[\r\n;&|<>`'"$()\\*?{}~!#]/u.test(command) || command.includes("[") || command.includes("]"))
     return null;
@@ -16542,12 +16542,12 @@ var shellBranchPolicyViolation = (root, command) => {
   return target === null ? null : validateBranchNameFor(root, target);
 };
 
-// packages/workit-core/src/hooks/policy.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/policy.ts
 var shellPolicy = (cwd, command) => {
   const policy = shellBranchPolicyViolation(cwd, command);
   return policy && !policy.ok ? { kind: "deny", reason: `branch_policy_denied: ${policy.error}`, unblock: null } : { kind: "none" };
 };
-// packages/workit-core/src/hooks/write-gate.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/write-gate.ts
 import { realpathSync as realpathSync5 } from "node:fs";
 import path16 from "node:path";
 var NONE2 = { kind: "none" };
@@ -16808,7 +16808,7 @@ function writeGate(cwd, paths) {
     return NONE2;
   }
 }
-// packages/workit-core/src/hooks/hosts/fields.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/fields.ts
 import { existsSync as existsSync6, realpathSync as realpathSync6, statSync as statSync2 } from "node:fs";
 import path17 from "node:path";
 var isRecord4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
@@ -16876,7 +16876,7 @@ var writePaths = (input) => {
         paths.push(match[1].trim());
   return [...new Set(paths)];
 };
-// packages/workit-core/src/hooks/handle.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/handle.ts
 var usable2 = (value) => value === "native" || value === "partial";
 var NONE3 = { kind: "none" };
 var offered = new Set;
@@ -16972,7 +16972,7 @@ var dispatchHook = (adapter, raw, env = process.env) => {
     };
   }
 };
-// packages/workit-core/src/hooks/hosts/claude-code.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/claude-code.ts
 var CLAUDE_CODE_DESCRIPTOR = {
   host: "claude_code",
   label: "Claude Code",
@@ -17215,7 +17215,7 @@ var claudeCodeAdapter = {
   render
 };
 
-// packages/workit-core/src/hooks/hosts/codex.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/codex.ts
 function detectCodexSurface(env) {
   return env.CODEX_INTERNAL_ORIGINATOR_OVERRIDE === "Codex Desktop" || Boolean(env.CODEX_ELECTRON_RESOURCES_PATH) ? "codex_desktop" : "codex_cli";
 }
@@ -17444,7 +17444,7 @@ var codexAdapter = {
   addendum: (input) => `<workit-codex-mutations>Codex MCP is read-only: unattested callers cannot mutate. Run workit verbs with the workit CLI on the shell (node_modules/.bin/workit, or npx -y @brainervirus/workit-cli): check, git branch|commit|push, pr, ci, stack, ledger, handoff; task-family mutations take --json${input.session.id ? ` --actor ${input.session.id}` : ""}. A verifier or reviewer records workit ledger verdict under a session the lead assigns (WORKIT_SESSION_ID=<lead>-v<n>), never the author's. Merge and release need a workspace grant (workit grant show); a question answer is not host permission.</workit-codex-mutations>`
 };
 
-// packages/workit-core/src/hooks/hosts/cursor.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/cursor.ts
 import path18 from "node:path";
 var undocumented2 = { support: "undocumented", native: null };
 var none = { support: "none", native: null };
@@ -17688,7 +17688,7 @@ var cursorAdapter = {
   render: render3
 };
 
-// packages/workit-core/src/hooks/run.ts
+// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/run.ts
 var HOOK_ADAPTERS = {
   claude_code: claudeCodeAdapter,
   codex_cli: codexAdapter,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-codex",
-  "version": "7.7.0",
+  "version": "8.0.0",
   "private": false,
   "description": "Workit Codex CLI/desktop plugin — shared MCP transport, hooks, and sixteen method skills",
   "keywords": [
@@ -38,8 +38,8 @@
     "build": "bun scripts/build.ts"
   },
   "dependencies": {
-    "@brainervirus/workit-core": "^7.7.0",
-    "@brainervirus/workit-mcp": "^7.7.0"
+    "@brainervirus/workit-core": "^8.0.0",
+    "@brainervirus/workit-mcp": "^8.0.0"
   },
   "engines": {
     "node": ">=24"

package/skills/workit-ship/SKILL.md

@@ -51,8 +51,8 @@ the base keeps moving, or after 3 failed fix attempts on the same check.
    flake|infra` per head. Real: reproduce with `workit check`, fix the root
    cause, batch fixes into one push.
 6. **Verified.** After the last push a non-author records a verdict
-   (read the `workit-review` skill's SKILL.md and follow it). Land only when granted: `workit stack land` (the
-   contiguous verified run from the root) or `workit pr merge`.
+   (read the `workit-review` skill's SKILL.md and follow it). Land only when granted: `workit stack land` (verified run
+   from the root) or `workit pr merge`; `--unverified --reason` only if user-asked.
 7. **Observe it landed:** `workit verify-delivery pr` or `merge`. After a failed
    verdict or a check red 3+ times, at any endpoint: offer `/wk-retro` in one
    line of the final or stop report; never pause the babysit loop for it.