@brainervirus/workit-codex 8.0.0 → 8.1.0

package/dist/launch-mcp.js

@@ -6624,12 +6624,12 @@ var require_dist = __commonJS(function(exports, module) {
 import { existsSync as existsSync9, realpathSync as realpathSync7, statSync as statSync3 } from "node:fs";
 import path21 from "node:path";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core.ts
-import { spawnSync as spawnSync12 } from "node:child_process";
+// packages/workit-core/src/core.ts
+import { spawnSync as spawnSync13 } from "node:child_process";
 import { existsSync as existsSync7, realpathSync as realpathSync5 } from "node:fs";
 import path19 from "node:path";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-contract.ts
+// packages/workit-core/src/core/task-contract.ts
 import { createHash, randomUUID } from "node:crypto";
 
 // node_modules/zod/v4/core/util.js
@@ -14203,7 +14203,7 @@ function preprocess(fn, schema) {
 function datetime2(params) {
   return _isoDateTime(ZodISODateTime, params);
 }
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-contract.ts
+// packages/workit-core/src/core/task-contract.ts
 var SCHEMA_VERSION = 1;
 var POLICY_VERSION = "1.0.0";
 var OPERATION_FAMILIES = [
@@ -15058,7 +15058,7 @@ function requirementId(input) {
     }
   });
 }
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/operation-input.ts
+// packages/workit-core/src/core/operation-input.ts
 var str = (d, values) => ({
   type: "string",
   ...values ? { enum: values } : {},
@@ -15454,7 +15454,7 @@ function parseAdvertisedOperation(family, input, host) {
     }))
   });
 }
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-store.ts
+// packages/workit-core/src/core/task-store.ts
 import { createHash as createHash4, randomUUID as randomUUID3 } from "node:crypto";
 import * as fs7 from "node:fs";
 import path6 from "node:path";
@@ -16060,7 +16060,7 @@ function acquireFileLockSync(targetPath, options) {
     }
   }
 }
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/package-root.ts
+// packages/workit-core/src/core/package-root.ts
 import { existsSync } from "node:fs";
 import path3 from "node:path";
 import { fileURLToPath } from "node:url";
@@ -16079,12 +16079,12 @@ var assetRoot = () => {
   return existsSync(assets) ? assets : root;
 };
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/store-lock.ts
+// packages/workit-core/src/core/store-lock.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 import fs5 from "node:fs";
 import { hostname } from "node:os";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/paths.ts
+// packages/workit-core/src/store/paths.ts
 import { spawnSync } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
 import fs4 from "node:fs";
@@ -16364,7 +16364,7 @@ var checkoutSlug = (root) => {
   return `${base}-${shortHash(canonical)}`;
 };
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/store-lock.ts
+// packages/workit-core/src/core/store-lock.ts
 var metadataLockSchema = object({
   pid: number2().int().nonnegative().safe(),
   processStart: string2().nullable(),
@@ -16495,7 +16495,7 @@ var clearAbandonedReclaimGuard = (lockPath, nowMs = Date.now()) => {
   }
 };
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/event-log.ts
+// packages/workit-core/src/store/event-log.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import fs6 from "node:fs";
 import path5 from "node:path";
@@ -16655,7 +16655,7 @@ var retryTransient = (run) => {
 };
 var renameWithRetry = (from, to) => retryTransient(() => fs6.renameSync(from, to));
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/patch.ts
+// packages/workit-core/src/store/patch.ts
 var isPlainObject2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var equal = (left, right) => {
   if (left === right)
@@ -16765,7 +16765,7 @@ var isPatch = (value) => Array.isArray(value) && value.every((op) => {
   return false;
 });
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/reduce.ts
+// packages/workit-core/src/store/reduce.ts
 import { createHash as createHash3 } from "node:crypto";
 var OPENING_TYPES = new Set([
   "task.opened",
@@ -16896,7 +16896,7 @@ function eventType(before, after) {
   return "task.updated";
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/store/notes.ts
+// packages/workit-core/src/store/notes.ts
 var SLOT = Symbol.for("workit.migrationReporter");
 var reportMigration = (report) => {
   try {
@@ -16907,7 +16907,7 @@ var reportMigration = (report) => {
 };
 var migrationReporterInstalled = () => typeof globalThis[SLOT] === "function";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-store.ts
+// packages/workit-core/src/core/task-store.ts
 var MIGRATION_PENDING = "workit migration pending";
 var STORE_FORMAT = 3;
 var STORE_MIN_RUNTIME = "3.0.0";
@@ -18543,18 +18543,18 @@ class TaskStore {
     return failure2(recovery ? "recovery_required" : "storage_error", `lock operation failed: ${String(error)}`, { path: lockPath });
   }
 }
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/workers.ts
+// packages/workit-core/src/core/workers.ts
 var UNCERTAIN_WORKER_STATES = ["dispatching", "running", "cancelling", "unknown"];
 var isUncertainWorker = (state) => UNCERTAIN_WORKER_STATES.includes(state);
 var workerBlocksTransition = (transition, state) => transition === "pause" ? false : isUncertainWorker(state);
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-evaluation.ts
+// packages/workit-core/src/core/task-evaluation.ts
 import { createHash as createHash7 } from "node:crypto";
 import * as fs11 from "node:fs";
 import { spawnSync as spawnSync6 } from "node:child_process";
 import path11 from "node:path";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/check-config.ts
+// packages/workit-core/src/check-config.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
 import fs8 from "node:fs";
 import path7 from "node:path";
@@ -18759,7 +18759,7 @@ function checkCommand(args, version, onPath = workitAvailable()) {
   return onPath ? `workit check ${args}` : `npx -y @brainervirus/workit-cli@${version} check ${args}`;
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/git/rev.ts
+// packages/workit-core/src/git/rev.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import fs9 from "node:fs";
@@ -18940,11 +18940,11 @@ function pushRemoteName(cwd, branch) {
   return remotes.length === 1 ? remotes[0] : null;
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy/derive.ts
+// packages/workit-core/src/core/policy/derive.ts
 import { existsSync as existsSync3 } from "node:fs";
 import path10 from "node:path";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/ledger.ts
+// packages/workit-core/src/ledger.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
 import { createHash as createHash6, randomBytes as randomBytes2 } from "node:crypto";
 import fs10 from "node:fs";
@@ -19186,7 +19186,7 @@ var independenceReasons = (row, authors) => {
     reasons.push("self");
   return reasons;
 };
-function effectiveOf(rows, authors) {
+function effectiveOf(rows, authors, sameCode) {
   let effective = null;
   for (const row of rows) {
     if (!effective) {
@@ -19197,7 +19197,7 @@ function effectiveOf(rows, authors) {
     const effIndependent = independenceReasons(effective, authors).length === 0;
     if (effIndependent && !rowIndependent)
       continue;
-    if (effIndependent && FAILING.has(String(effective.result)) && row.actor.session === effective.actor.session)
+    if (effIndependent && FAILING.has(String(effective.result)) && row.actor.session === effective.actor.session && sameCode(effective, row))
       continue;
     effective = row;
   }
@@ -19228,16 +19228,22 @@ function checkVerdicts(cwd, branch, rows) {
   const head = branchHead(cwd, branch);
   const fallbackBase = defaultBase(cwd);
   const keyCache = new Map;
-  const keyFor = (base) => {
-    if (!base || !head)
+  const keysAt = (base, at) => {
+    if (!base || !at)
       return { patchId: null, diffHash: null };
-    let key = keyCache.get(base);
+    const cacheKey = `${base}\x00${at}`;
+    let key = keyCache.get(cacheKey);
     if (!key) {
-      key = { patchId: patchId(cwd, base, head), diffHash: diffHash(cwd, base, head) };
-      keyCache.set(base, key);
+      key = { patchId: patchId(cwd, base, at), diffHash: diffHash(cwd, base, at) };
+      keyCache.set(cacheKey, key);
     }
     return key;
   };
+  const keyFor = (base) => keysAt(base, head);
+  const sameCode = (failed, row) => verdictBasis(failed, {
+    head: row.head,
+    ...keysAt(failed.base ?? fallbackBase, row.head)
+  }) !== "stale" || restackCarries(rows, branch, failed.head, row.head);
   const authors = authorSessions(cwd, rows, branch, { base: fallbackBase, head });
   const byKind = new Map;
   for (const row of rows)
@@ -19247,7 +19253,7 @@ function checkVerdicts(cwd, branch, rows) {
     }
   const verdicts = [];
   for (const [kind, list] of byKind) {
-    const row = effectiveOf(list, authors);
+    const row = effectiveOf(list, authors, sameCode);
     if (!row)
       continue;
     let basis = verdictBasis(row, { head, ...keyFor(row.base ?? fallbackBase) });
@@ -19273,11 +19279,11 @@ function checkVerdicts(cwd, branch, rows) {
   verdicts.sort((a, b) => a.verdict.seq - b.verdict.seq);
   const newestCurrent = verdicts.findLast((entry) => entry.current) ?? verdicts.at(-1) ?? null;
   const failing = verdicts.find((entry) => entry.current && entry.independent && FAILING.has(String(entry.verdict.result)));
-  const newestAccepted = verdicts.findLast((entry) => entry.accepted) ?? null;
+  const newestAccepted = verdicts.findLast((entry) => entry.accepted && STRONG_RESULTS.has(String(entry.verdict.result))) ?? null;
   const accepted = newestAccepted && !failing ? { accepted: true, verdict: newestAccepted.verdict, reasons: [] } : {
     accepted: false,
     verdict: failing?.verdict ?? null,
-    reasons: failing ? ["failing_verdict"] : newestCurrent?.reasons ?? ["no_verdict"]
+    reasons: failing ? ["failing_verdict"] : !newestCurrent ? ["no_verdict"] : newestCurrent.reasons.length ? newestCurrent.reasons : ["type_check_only"]
   };
   const selfEntry = failing ? undefined : verdicts.findLast((entry) => entry.current && !entry.independent && STRONG_RESULTS.has(String(entry.verdict.result)));
   return {
@@ -19293,9 +19299,9 @@ function checkVerdicts(cwd, branch, rows) {
     authors: [...authors].toSorted()
   };
 }
-var OBSERVED_ONLY = new Set(["check", ...PR_ROW_TYPES]);
+var OBSERVED_ONLY = new Set(["check", "merge.unverified", ...PR_ROW_TYPES]);
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy/derive.ts
+// packages/workit-core/src/core/policy/derive.ts
 var RULES = {
   test: "check:test",
   self: "verdict:self",
@@ -19483,7 +19489,7 @@ function derivedRuleStatus(task, requirement, root, ledger) {
   }
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-evaluation.ts
+// packages/workit-core/src/core/task-evaluation.ts
 var digestBytes = (value) => createHash7("sha256").update(value).digest("hex");
 var inside = (root, candidate) => candidate === root || candidate.startsWith(`${root}${path11.sep}`);
 var relative = (root, candidate) => path11.relative(root, candidate).split(path11.sep).join("/") || ".";
@@ -20149,7 +20155,7 @@ function evaluateClosure(requestedOutcome, view) {
   });
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/methods.ts
+// packages/workit-core/src/core/methods.ts
 var METHODS = {
   "workit-shape": { dimensions: ["challenge", "decisions", "artifacts", "continuity"] },
   "workit-bdd": { dimensions: ["testing"] },
@@ -20195,7 +20201,7 @@ function selectMethods(policy, capabilities) {
   });
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-context.ts
+// packages/workit-core/src/core/task-context.ts
 function reconcileResume(view, observations = []) {
   if (observations.length > 0)
     return failure2("permission_denied", "worker observations require native host verification");
@@ -20309,75 +20315,10 @@ var exportDigest = (bundle) => sha256({
   sourceWorkspaceId: bundle.sourceWorkspaceId,
   task: bundle.task
 });
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/git.ts
-import { execFileSync } from "node:child_process";
-var run = (cwd, args) => {
-  try {
-    const stdout = execFileSync("git", args, {
-      cwd,
-      encoding: "utf8",
-      stdio: ["pipe", "pipe", "pipe"]
-    });
-    return { stdout: stdout.trimEnd(), stderr: "", exitCode: 0 };
-  } catch (error) {
-    const e = error;
-    return {
-      stdout: (e.stdout ?? "").trimEnd(),
-      stderr: (e.stderr ?? "").trimEnd(),
-      exitCode: e.status ?? 1
-    };
-  }
-};
-var gitContext = (workspaceRoot, paths = []) => {
-  const cwd = workspaceRoot;
-  let failure;
-  const runHere = (args) => {
-    const result = run(cwd, args);
-    if (!failure && result.exitCode !== 0) {
-      failure = { stderr: result.stderr, exitCode: result.exitCode };
-    }
-    return result.stdout;
-  };
-  const branch = runHere(["rev-parse", "--abbrev-ref", "HEAD"]) || "unknown";
-  const status_short = runHere(["status", "--porcelain"]);
-  const staged = [];
-  const unstaged = [];
-  const untracked = [];
-  for (const line of status_short.split(`
-`).filter(Boolean)) {
-    const code = line.slice(0, 2);
-    const file = line.slice(3);
-    if (code === "??") {
-      untracked.push(file);
-    } else {
-      if (code[0] !== " " && code[0] !== "?")
-        staged.push(file);
-      if (code[1] !== " " && code[1] !== "?")
-        unstaged.push(file);
-    }
-  }
-  const pathArgs = paths.length ? ["--", ...paths] : [];
-  const diff_stat = runHere(["diff", "--stat", ...pathArgs]);
-  const cached_stat = runHere(["diff", "--cached", "--stat", ...pathArgs]);
-  const stagedSet = new Set(staged);
-  const unstagedSet = new Set(unstaged);
-  const partial_staged = [...stagedSet].filter((f) => unstagedSet.has(f));
-  return {
-    workspace_root: cwd,
-    branch,
-    status_short,
-    staged,
-    unstaged,
-    untracked,
-    diff_stat: [diff_stat, cached_stat].filter(Boolean).join(`
-`),
-    partial_staged: partial_staged.length > 0,
-    partial_staged_files: partial_staged,
-    ...failure ? { stderr: failure.stderr, exitCode: failure.exitCode } : {}
-  };
-};
+// packages/workit-core/src/core/branch-policy.ts
+import { spawnSync as spawnSync7 } from "node:child_process";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/config.ts
+// packages/workit-core/src/core/config.ts
 import {
   copyFileSync as copyFileSync2,
   cpSync as cpSync2,
@@ -20390,7 +20331,7 @@ import {
 import os2 from "node:os";
 import path12 from "node:path";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/boundary.ts
+// packages/workit-core/src/core/boundary.ts
 import { statSync as statSync2 } from "node:fs";
 var EVENT = {
   initialization: "initialization",
@@ -20426,7 +20367,7 @@ var changedSourcesSinceLoad = (marker) => {
   return changed;
 };
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/config.ts
+// packages/workit-core/src/core/config.ts
 var diagnosticLogger;
 var PRESETS = {
   gitflow: {
@@ -20501,6 +20442,7 @@ var DEFAULTS = {
   },
   commitPolicy: { preset: "conventional" }
 };
+var unchosenBranchPolicy = new WeakSet([DEFAULTS]);
 var readSafe = (p) => {
   try {
     return readFileSync3(p, "utf8");
@@ -20525,22 +20467,21 @@ var parseConfigResult = (raw, file) => {
   const locale = LOCALE_RE.test(String(input.locale ?? "")) ? input.locale : DEFAULTS.locale;
   const preset = Object.hasOwn(PRESETS, input.branchPolicy?.preset) ? input.branchPolicy?.preset : "gitflow";
   const commitPreset = COMMIT_PRESETS.includes(String(input.commitPolicy?.preset ?? "")) ? input.commitPolicy?.preset : "conventional";
-  return {
-    status: "valid",
-    path: file,
-    config: {
-      locale,
-      localeOptions: Array.isArray(input.localeOptions) ? input.localeOptions : DEFAULTS.localeOptions,
-      branchPolicy: mergePreset(preset, {
-        allowed: Array.isArray(input.branchPolicy?.allowed) ? input.branchPolicy.allowed : undefined,
-        protectedNames: Array.isArray(input.branchPolicy?.protected) ? input.branchPolicy.protected : undefined
-      }, DEFAULTS),
-      commitPolicy: {
-        preset: commitPreset,
-        ...typeof input.commitPolicy?.pattern === "string" ? { pattern: input.commitPolicy.pattern } : {}
-      }
+  const config = {
+    locale,
+    localeOptions: Array.isArray(input.localeOptions) ? input.localeOptions : DEFAULTS.localeOptions,
+    branchPolicy: mergePreset(preset, {
+      allowed: Array.isArray(input.branchPolicy?.allowed) ? input.branchPolicy.allowed : undefined,
+      protectedNames: Array.isArray(input.branchPolicy?.protected) ? input.branchPolicy.protected : undefined
+    }, DEFAULTS),
+    commitPolicy: {
+      preset: commitPreset,
+      ...typeof input.commitPolicy?.pattern === "string" ? { pattern: input.commitPolicy.pattern } : {}
     }
   };
+  if (!Object.hasOwn(PRESETS, input.branchPolicy?.preset))
+    unchosenBranchPolicy.add(config);
+  return { status: "valid", path: file, config };
 };
 var readConfigTyped = (dir) => {
   const file = path12.join(dir ?? configDir(), "config.json");
@@ -20554,9 +20495,11 @@ var readConfig = () => {
 };
 var vcsConfigPath = () => process.env.WORKFLOW_VCS_CONFIG ?? path12.join(configDir(), "vcs.json");
 var branchGlobPattern = (glob) => new RegExp(`^${glob.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*")}$`, "i");
-var resolveBranchPolicy = (config, workspace) => {
+var resolveBranchPolicy = (config, workspace, repoPreset) => {
   const wp = workspace?.branchPolicy ?? {};
-  const preset = Object.hasOwn(PRESETS, wp.preset) ? wp.preset : config.branchPolicy?.preset ?? "gitflow";
+  const workspacePreset = Object.hasOwn(PRESETS, wp.preset);
+  const detected = !workspacePreset && unchosenBranchPolicy.has(config) ? repoPreset?.() ?? null : null;
+  const preset = workspacePreset ? wp.preset : detected ?? config.branchPolicy?.preset ?? "gitflow";
   const merged = mergePreset(preset, {
     allowed: wp.allowed,
     protectedNames: wp.protected
@@ -20565,9 +20508,10 @@ var resolveBranchPolicy = (config, workspace) => {
   return {
     preset,
     allowed,
-    protected: new Set(merged.protected.map((p) => p.toLowerCase())),
+    protected: new Set([...merged.protected, ...detected ? PRESETS.gitflow.protected : []].map((p) => p.toLowerCase())),
     integration: wp.integration === "merge" ? "merge" : "pr",
-    defaultTargetBranch: preset === "github-flow" ? "main" : preset === "trunk-based" ? "master" : "develop"
+    defaultTargetBranch: preset === "github-flow" ? "main" : preset === "trunk-based" ? "master" : "develop",
+    detected: detected !== null
   };
 };
 var COMMIT_PRESETS = [
@@ -20579,7 +20523,139 @@ var COMMIT_PRESETS = [
   "auto"
 ];
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/workspaces.ts
+// packages/workit-core/src/core/branch-policy.ts
+var PREFIXES = {
+  feature: "feature/*",
+  bugfix: "bugfix/*",
+  release: "release/*",
+  hotfix: "hotfix/*"
+};
+var branchNames = (workspaceRoot) => {
+  const r = spawnSync7("git", ["for-each-ref", "--format=%(refname)", "refs/heads", "refs/remotes/origin"], { cwd: workspaceRoot, encoding: "utf8" });
+  if (r.status !== 0)
+    return new Set;
+  return new Set((r.stdout ?? "").split(`
+`).filter(Boolean).map((ref) => ref.startsWith("refs/heads/") ? ref.slice("refs/heads/".length) : ref.slice("refs/remotes/origin/".length)));
+};
+var detectBranchPolicy = (workspaceRoot) => {
+  const names = branchNames(workspaceRoot);
+  const develop = names.has("develop");
+  const main = names.has("main");
+  const master = names.has("master");
+  const root = main ? "main" : master ? "master" : null;
+  if (develop) {
+    return {
+      preset: "gitflow",
+      developBranch: "develop",
+      integration: "merge",
+      protected: root ? [root, "develop"] : ["develop"],
+      allowed: [...PRESETS.gitflow.allowed],
+      prefixes: PREFIXES
+    };
+  }
+  if (root === "main") {
+    return {
+      preset: "github-flow",
+      developBranch: null,
+      integration: "pr",
+      protected: [root],
+      allowed: ["*"],
+      prefixes: PREFIXES
+    };
+  }
+  if (root === "master") {
+    return {
+      preset: "trunk-based",
+      developBranch: null,
+      integration: "pr",
+      protected: [root],
+      allowed: ["*"],
+      prefixes: PREFIXES
+    };
+  }
+  return {
+    preset: "gitflow",
+    developBranch: null,
+    integration: "merge",
+    protected: [],
+    allowed: [],
+    prefixes: PREFIXES
+  };
+};
+var repoBranchPreset = (workspaceRoot) => {
+  const detected = detectBranchPolicy(workspaceRoot);
+  return detected.developBranch || detected.allowed.length ? detected.preset : null;
+};
+
+// packages/workit-core/src/core/git.ts
+import { execFileSync } from "node:child_process";
+var run = (cwd, args) => {
+  try {
+    const stdout = execFileSync("git", args, {
+      cwd,
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    return { stdout: stdout.trimEnd(), stderr: "", exitCode: 0 };
+  } catch (error) {
+    const e = error;
+    return {
+      stdout: (e.stdout ?? "").trimEnd(),
+      stderr: (e.stderr ?? "").trimEnd(),
+      exitCode: e.status ?? 1
+    };
+  }
+};
+var gitContext = (workspaceRoot, paths = []) => {
+  const cwd = workspaceRoot;
+  let failure;
+  const runHere = (args) => {
+    const result = run(cwd, args);
+    if (!failure && result.exitCode !== 0) {
+      failure = { stderr: result.stderr, exitCode: result.exitCode };
+    }
+    return result.stdout;
+  };
+  const branch = runHere(["rev-parse", "--abbrev-ref", "HEAD"]) || "unknown";
+  const status_short = runHere(["status", "--porcelain"]);
+  const staged = [];
+  const unstaged = [];
+  const untracked = [];
+  for (const line of status_short.split(`
+`).filter(Boolean)) {
+    const code = line.slice(0, 2);
+    const file = line.slice(3);
+    if (code === "??") {
+      untracked.push(file);
+    } else {
+      if (code[0] !== " " && code[0] !== "?")
+        staged.push(file);
+      if (code[1] !== " " && code[1] !== "?")
+        unstaged.push(file);
+    }
+  }
+  const pathArgs = paths.length ? ["--", ...paths] : [];
+  const diff_stat = runHere(["diff", "--stat", ...pathArgs]);
+  const cached_stat = runHere(["diff", "--cached", "--stat", ...pathArgs]);
+  const stagedSet = new Set(staged);
+  const unstagedSet = new Set(unstaged);
+  const partial_staged = [...stagedSet].filter((f) => unstagedSet.has(f));
+  return {
+    workspace_root: cwd,
+    branch,
+    status_short,
+    staged,
+    unstaged,
+    untracked,
+    diff_stat: [diff_stat, cached_stat].filter(Boolean).join(`
+`),
+    partial_staged: partial_staged.length > 0,
+    partial_staged_files: partial_staged,
+    ...failure ? { stderr: failure.stderr, exitCode: failure.exitCode } : {}
+  };
+};
+
+// packages/workit-core/src/core/workspaces.ts
 import { createHash as createHash8 } from "node:crypto";
 import { readFileSync as readFileSync4, realpathSync as realpathSync3 } from "node:fs";
 import path13 from "node:path";
@@ -20984,18 +21060,18 @@ function workspaceDefaultTarget(cwd, globalDefault) {
   const wp = ws?.branchPolicy ?? {};
   const hasWorkspacePolicy = typeof wp.preset === "string" && Object.hasOwn(PRESETS, wp.preset);
   const selected = resolveRuntimeWorkspacePolicy(cwd, "branch", process.env.WORKFLOW_PROFILE?.trim() || undefined);
-  const policyDefault = resolveBranchPolicy(readConfig(), selected.policy ? { branchPolicy: selected.policy } : null).defaultTargetBranch;
+  const policyDefault = resolveBranchPolicy(readConfig(), selected.policy ? { branchPolicy: selected.policy } : null, () => repoBranchPreset(cwd)).defaultTargetBranch;
   return String(ws?.vcs?.defaultTargetBranch ?? (hasWorkspacePolicy ? policyDefault : globalDefault ?? policyDefault) ?? "develop");
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/vcs-config.ts
+// packages/workit-core/src/core/vcs-config.ts
 import fs12 from "node:fs";
 import path14 from "node:path";
-import { spawnSync as spawnSync8 } from "node:child_process";
+import { spawnSync as spawnSync9 } from "node:child_process";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/release-tracks.ts
+// packages/workit-core/src/core/release-tracks.ts
 import { createHash as createHash9 } from "node:crypto";
-import { spawnSync as spawnSync7 } from "node:child_process";
+import { spawnSync as spawnSync8 } from "node:child_process";
 var KNOWN_FIELDS = new Set([
   "strategy",
   "productionBranch",
@@ -21267,7 +21343,7 @@ function resolveReleaseTrack(input) {
   return fallback(`${branch} has the same or unrelated fork points with ${[...new Set(newest.map((fork) => `${fork.ref} (${fork.track.name === IMPLICIT ? "workspace default" : fork.track.name})`))].join(" and ")}`);
 }
 var git4 = (cwd, args) => {
-  const run = spawnSync7("git", args, {
+  const run = spawnSync8("git", args, {
     cwd,
     encoding: "utf8",
     timeout: 20000,
@@ -21378,11 +21454,11 @@ function resolveTrackFor(cwd, options) {
   return resolution;
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/vcs-config.ts
+// packages/workit-core/src/core/vcs-config.ts
 var workspacesPath = () => path14.join(configDir(), "workspaces.json");
 var vcsCwd = (cwd) => cwd ?? process.env.WORKFLOW_WORKSPACE_ROOT ?? process.cwd();
 var remoteProvider = (cwd) => {
-  const r = spawnSync8("git", ["remote", "get-url", "origin"], { cwd, encoding: "utf8" });
+  const r = spawnSync9("git", ["remote", "get-url", "origin"], { cwd, encoding: "utf8" });
   if (r.status !== 0)
     return null;
   const url = (r.stdout ?? "").trim();
@@ -21419,7 +21495,7 @@ var remoteEndpoint = (remote) => {
 var configuredSshEndpoint = (host) => {
   if (host.startsWith("-"))
     return null;
-  const resolved = spawnSync8("ssh", ["-G", host], {
+  const resolved = spawnSync9("ssh", ["-G", host], {
     encoding: "utf8",
     timeout: 5000,
     maxBuffer: 1024 * 1024,
@@ -21592,7 +21668,7 @@ function mergedPrStyle(limit = 6, cwd) {
 `).filter((l) => l.startsWith("## ")).map((l) => l.trim()),
     descriptionPreview: desc.slice(0, 600)
   });
-  const remoteResult = spawnSync8("git", ["remote", "get-url", "--push", "--all", "origin"], {
+  const remoteResult = spawnSync9("git", ["remote", "get-url", "--push", "--all", "origin"], {
     cwd,
     encoding: "utf8"
   });
@@ -21608,7 +21684,7 @@ function mergedPrStyle(limit = 6, cwd) {
   if (!hostingApiHostMatches(remote, host))
     return { ok: false, error: "PR style target does not match the provider host" };
   if (provider === "gitlab") {
-    const run = (args) => spawnSync8("glab", ["api", ...args], {
+    const run = (args) => spawnSync9("glab", ["api", ...args], {
       cwd,
       encoding: "utf8",
       env
@@ -21628,7 +21704,7 @@ function mergedPrStyle(limit = 6, cwd) {
       });
     }
   } else if (provider === "github") {
-    const r = spawnSync8("gh", [
+    const r = spawnSync9("gh", [
       "pr",
       "list",
       "--repo",
@@ -21659,10 +21735,10 @@ function mergedPrStyle(limit = 6, cwd) {
     examples
   };
 }
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-engine.ts
+// packages/workit-core/src/core/task-engine.ts
 import { realpathSync as realpathSync4 } from "node:fs";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy-resolver.ts
+// packages/workit-core/src/core/policy-resolver.ts
 function resolvePolicy(input) {
   const ids = input.constraints.map((constraint) => constraint.id);
   if (new Set(ids).size !== ids.length)
@@ -21718,7 +21794,7 @@ function diffPolicy(previous, next, reason, now) {
   return parsed.data;
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/policy/judgment.ts
+// packages/workit-core/src/core/policy/judgment.ts
 var isObject6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var squash = (key) => key.toLowerCase().replace(/[_-]/g, "");
 var ALIASES = {
@@ -21842,7 +21918,7 @@ function normalizeJudgment(raw, previous) {
   return success(null, null, { judgment: parsed.data, ignored, legacy });
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/autonomy.ts
+// packages/workit-core/src/autonomy.ts
 import os3 from "node:os";
 import path15 from "node:path";
 var accountHome = () => {
@@ -21979,7 +22055,7 @@ function resolveAutonomy(cwd) {
 var suggested = (kind) => kind === "merge" ? "verified" : "true";
 var grantHint = (workspace, kind) => `ask the user to run, in their own terminal: workit grant set ${workspace ?? "<workspace>"} ${kind}=${suggested(kind)}`;
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/task-engine.ts
+// packages/workit-core/src/core/task-engine.ts
 var workspaceVerification = (root) => {
   try {
     return resolveAutonomy(root).verification;
@@ -23564,8 +23640,8 @@ class WorkitCore {
     return this.summary(changed.data.task);
   }
 }
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/repo-context.ts
-import { spawnSync as spawnSync9 } from "node:child_process";
+// packages/workit-core/src/core/repo-context.ts
+import { spawnSync as spawnSync10 } from "node:child_process";
 import { existsSync as existsSync6, readFileSync as readFileSync5, readdirSync as readdirSync4 } from "node:fs";
 import path16 from "node:path";
 var isSafeContextRange = (value) => value.length <= 4096 && (() => {
@@ -23594,7 +23670,7 @@ var invalidRange = (cwd) => ({
   cwd
 });
 var runGit = (cwd, args) => {
-  const result = spawnSync9("git", args, { cwd, encoding: "utf8" });
+  const result = spawnSync10("git", args, { cwd, encoding: "utf8" });
   return {
     stdout: (result.stdout ?? "").trimEnd(),
     stderr: (result.stderr ?? "").trimEnd(),
@@ -24034,20 +24110,20 @@ function releaseNotesContext(root, rangeOrTag) {
   return { stdout, stderr: "", exitCode: 0, cwd };
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/tracker-issues.ts
-import { spawnSync as spawnSync11 } from "node:child_process";
+// packages/workit-core/src/core/tracker-issues.ts
+import { spawnSync as spawnSync12 } from "node:child_process";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/pr-create.ts
+// packages/workit-core/src/core/pr-create.ts
 import fs13 from "node:fs";
 import path17 from "node:path";
-import { spawnSync as spawnSync10 } from "node:child_process";
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/forge/pr-body.ts
+import { spawnSync as spawnSync11 } from "node:child_process";
+// packages/workit-core/src/forge/pr-body.ts
 function parseGhIssue(value) {
   const m = /issues\/(\d+)/.exec(value);
   return m ? m[1] : String(value).trim().replace(/^#/, "");
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/pr-create.ts
+// packages/workit-core/src/core/pr-create.ts
 function whichOnPath(tool) {
   const names = process.platform === "win32" ? [tool, `${tool}.exe`, `${tool}.cmd`] : [tool];
   for (const dir of (process.env.PATH ?? "").split(path17.delimiter)) {
@@ -24065,7 +24141,7 @@ function whichOnPath(tool) {
 }
 var hostingCliAvailable = (provider) => whichOnPath(provider === "gitlab" ? "glab" : "gh") !== null;
 var pushRemote = (cwd) => {
-  const result = spawnSync10("git", ["remote", "get-url", "--push", "--all", "origin"], {
+  const result = spawnSync11("git", ["remote", "get-url", "--push", "--all", "origin"], {
     cwd,
     encoding: "utf8"
   });
@@ -24075,7 +24151,7 @@ var pushRemote = (cwd) => {
   return urls.length === 1 ? urls[0] : null;
 };
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/tracker-issues.ts
+// packages/workit-core/src/core/tracker-issues.ts
 var repoPathFromRemote = (remote) => {
   let rest = (remote || "").trim().replace(/\/+$/, "");
   if (!rest)
@@ -24096,7 +24172,7 @@ var defaultCli = (bin, available) => {
   if (!available)
     return null;
   return (args, root) => {
-    const out = spawnSync11(bin, args, {
+    const out = spawnSync12(bin, args, {
       cwd: root,
       encoding: "utf8",
       env: { ...process.env, PATH: process.env.PATH ?? "" }
@@ -24173,19 +24249,19 @@ var fetchGitLabIssueBody = async (ref, root, deps = {}) => {
   return tryCliTriple(deps.cli ?? defaultCli("glab", hostingCliAvailable("gitlab")), "glab", ["issue", "view", id, "-R", repoArg, "-F", "json"], root, id, ["iid"], ["description"]);
 };
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/youtrack.ts
+// packages/workit-core/src/core/youtrack.ts
 import fs14 from "node:fs";
 import path18 from "node:path";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/templates.ts
+// packages/workit-core/src/core/templates.ts
 var repoRoot2 = assetRoot();
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/scripts.ts
+// packages/workit-core/src/core/scripts.ts
 var PLUGIN_ROOT = packageRoot();
 var ASSET_ROOT = assetRoot();
 var resolveWorkspaceRoot = (explicit) => explicit || process.cwd();
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/youtrack.ts
+// packages/workit-core/src/core/youtrack.ts
 var ISSUE_RE = /^[A-Z]+-\d+$/;
 var TOKEN_PLACEHOLDER = "YOUR_TOKEN_HERE";
 var youTrackConfigPath = () => process.env.WORKFLOW_YOUTRACK_CONFIG ?? path18.join(configDir(), "youtrack.json");
@@ -24476,7 +24552,7 @@ var fetchYouTrackIssueBody = async (issue, creds = youTrackToken, request = youT
   }
 };
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/context-read.ts
+// packages/workit-core/src/core/context-read.ts
 var contextReadSchema = object({
   kind: _enum([
     "git",
@@ -24571,7 +24647,7 @@ var readExternalContext = async (root, payload) => {
     }
   }
 };
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core.ts
+// packages/workit-core/src/core.ts
 var revision2 = /^[A-Za-z0-9@][A-Za-z0-9@._/~^{}-]*$/;
 function gitRevisionParts(value) {
   if (!value || value.startsWith("-") || /[\s\\'"`$;|&<>]/.test(value)) {
@@ -24614,7 +24690,7 @@ function resolveInside(root, candidate) {
 }
 function run2(root, executable, args, env = {}) {
   const cwd = realpathSync5(root);
-  const result = spawnSync12(executable, args, {
+  const result = spawnSync13(executable, args, {
     cwd,
     encoding: "utf8",
     env: { ...process.env, ...env }
@@ -24627,7 +24703,7 @@ function run2(root, executable, args, env = {}) {
   };
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/support-matrix.ts
+// packages/workit-core/src/core/support-matrix.ts
 var SUPPORT_MATRIX = {
   bun: "1.4.1",
   node: { minimum: "24", current: "24.20.0" },
@@ -24637,7 +24713,7 @@ var SUPPORT_MATRIX = {
   os: ["ubuntu-latest", "macos-latest", "windows-latest"]
 };
 
-// packages/workit-codex/node_modules/@brainervirus/workit-mcp/src/server.ts
+// packages/workit-mcp/src/server.ts
 import { existsSync as existsSync8, readFileSync as readFileSync6, realpathSync as realpathSync6 } from "node:fs";
 import path20 from "node:path";
 // node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
@@ -27014,10 +27090,10 @@ class StdioServerTransport {
   }
 }
 
-// packages/workit-codex/node_modules/@brainervirus/workit-mcp/src/server.ts
+// packages/workit-mcp/src/server.ts
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/core/logger.ts
+// packages/workit-core/src/core/logger.ts
 import os4 from "node:os";
 var REDACTED = "[REDACTED]";
 var SECRET_VALUE = /\b(?:Bearer|Basic|Digest|Token)\s+\S+/gi;
@@ -27074,7 +27150,7 @@ var applyPatterns = (value) => {
 };
 var redactSecrets = (value) => applyPatterns(value);
 
-// packages/workit-codex/node_modules/@brainervirus/workit-mcp/src/server.ts
+// packages/workit-mcp/src/server.ts
 class McpCapabilityUnavailableError extends Error {
   capability;
   constructor(capability) {
@@ -27369,7 +27445,7 @@ async function runStdioServer(host, contextProvider = defaultContextProvider(hos
   await server.connect(new StdioServerTransport);
   return server;
 }
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/descriptor.ts
+// packages/workit-core/src/hooks/descriptor.ts
 var support = (descriptor, axis) => {
   if (axis.startsWith("event:"))
     return descriptor.events[axis.slice("event:".length)].support;
@@ -27393,14 +27469,14 @@ var capabilitiesFor = (descriptor, observed = {}) => descriptor.capabilities.map
     refs: rule.refs.map((handle) => ({ kind: "host", host: descriptor.host, handle }))
   };
 });
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/context.ts
+// packages/workit-core/src/hooks/context.ts
 var signals = new Map;
 var cache = new Map;
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/write-gate.ts
+// packages/workit-core/src/hooks/write-gate.ts
 var CASE_INSENSITIVE = process.platform === "darwin" || process.platform === "win32";
-var PREFIXES = new Set(["sudo", "command", "env", "nohup", "time", "exec", "xargs"]);
+var PREFIXES2 = new Set(["sudo", "command", "env", "nohup", "time", "exec", "xargs"]);
 var cache2 = new Map;
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/fields.ts
+// packages/workit-core/src/hooks/hosts/fields.ts
 var SHELLS = new Set(["sh", "bash", "zsh", "dash", "pwsh", "powershell", "cmd"]);
 var WRITE_TOOLS = new Set([
   "write",
@@ -27421,15 +27497,15 @@ var WRITE_TOOLS = new Set([
   "editfile",
   "writefile"
 ]);
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/handle.ts
+// packages/workit-core/src/hooks/handle.ts
 var offered = new Set;
 var CLAUDE_JUDGES = new Set(["workit:verifier", "workit:reviewer"]);
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/claude-code.ts
+// packages/workit-core/src/hooks/hosts/claude-code.ts
 var SOURCES = new Set(["startup", "resume", "clear", "compact", "fork"]);
 var SHELL_TOOLS = new Set(["Bash", "PowerShell"]);
 var CONTEXT_EVENTS = new Set(["SessionStart", "UserPromptSubmit", "SubagentStart"]);
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/codex.ts
+// packages/workit-core/src/hooks/hosts/codex.ts
 function detectCodexSurface(env) {
   return env.CODEX_INTERNAL_ORIGINATOR_OVERRIDE === "Codex Desktop" || Boolean(env.CODEX_ELECTRON_RESOURCES_PATH) ? "codex_desktop" : "codex_cli";
 }
@@ -27534,10 +27610,10 @@ var codexDescriptor = (host) => ({ ...CODEX_DESCRIPTOR, host });
 var SHELL_TOOLS2 = new Set(["bash", "unified-exec"]);
 var SOURCES2 = new Set(["startup", "resume", "clear", "compact"]);
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/hosts/cursor.ts
+// packages/workit-core/src/hooks/hosts/cursor.ts
 var BLOCKING = new Set(["preToolUse", "beforeShellExecution", "subagentStart"]);
 
-// packages/workit-codex/node_modules/@brainervirus/workit-core/src/hooks/run.ts
+// packages/workit-core/src/hooks/run.ts
 if (false) {}
 // packages/workit-codex/hooks/workit-hook.ts
 var codexCapabilities = (host, availability = {}) => capabilitiesFor(codexDescriptor(host), {