@brainervirus/workit-core 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cristhofer Pincetti
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,180 @@
+# Workit
+
+Multi-platform Superpowers workflow plugin for **Cursor** and **OpenCode**: verify, PR, changelog, commits, SDD implementation, session handoff, YouTrack, and deterministic UI presentation.
+
+| Platform | Path | Version |
+| --- | --- | --- |
+| **OpenCode** | `packages/workit-opencode/src/plugin.ts` | 0.4.0 |
+| **Cursor** | `packages/workit-cursor/` (MCP + hooks + rules + skills) | 0.4.0 |
+| **Shared core** | `packages/workit-core/` (src, skills, commands, scripts, templates) | 0.4.0 |
+| **CLI** | `packages/workit-cli/` (Ink wizard, bin `workit`) | 0.4.0 |
+
+Config directory (both platforms): `~/.config/workflow-toolkit/` (kept as-is for install stability).
+
+[![npm version](https://img.shields.io/npm/v/@brainervirus/workit-opencode)](https://www.npmjs.com/package/@brainervirus/workit-opencode)
+[![CI](https://img.shields.io/github/actions/workflow/status/BrainerVirus/workit/ci.yml?branch=main&label=CI)](https://github.com/BrainerVirus/workit/actions)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+
+## Install
+
+**Quick start (wizard)** — the interactive wizard picks OpenCode and/or Cursor and configures tokens and project files:
+
+Requires bun (`curl -fsSL https://bun.sh/install | bash`).
+
+```bash
+npm i @brainervirus/workit-core    # shared core (skills, commands, scripts)
+npm i @brainervirus/workit-opencode # OpenCode plugin (thin over the core)
+npm i @brainervirus/workit-cursor   # Cursor plugin (MCP + hooks + rules)
+npm i @brainervirus/workit-cli      # interactive wizard
+npx workit init
+```
+
+**Local development** — use the repo path instead; no package cache, disk is the source of truth:
+
+```bash
+bun i
+```
+
+**Manual setup (skip the wizard)** — configure each tool by hand; see [Usage](#usage) for the OpenCode plugin entry and Cursor MCP server.
+
+## Usage
+
+Manual setup for those who skipped the wizard (`npx workit init`):
+
+**OpenCode** — reference the plugin entry in `opencode.json` / `opencode.jsonc` (`~/.config/opencode/opencode.json`):
+
+```json
+{
+  "$schema": "https://opencode.ai/config.json",
+  "plugin": ["@brainervirus/workit-opencode"]
+}
+```
+
+Local dev variant (absolute path to this repo):
+
+```json
+{
+  "$schema": "https://opencode.ai/config.json",
+  "plugin": ["file:///path/to/workit/packages/workit-opencode/src/plugin.ts"]
+}
+```
+
+**Cursor** — the MCP server runs from the package's `cursor/` directory. Add to `.cursor/mcp.json`:
+
+```json
+{
+  "mcpServers": {
+    "workit": {
+      "command": "bun",
+      "args": ["run", "node_modules/@brainervirus/workit-cursor/mcp/server.ts"]
+    }
+  }
+}
+```
+
+Local dev variant: point `WORKFLOW_TOOLKIT_ROOT` at this repo's `packages/workit-core` (the MCP launcher `packages/workit-core/scripts/run-cursor-mcp.sh` resolves it), or run the install script from the repo.
+
+## Requirements
+
+- **Bun ≥ 1.0** — runtime for the shared `src/core` logic, the OpenCode plugin, and the Cursor MCP server (`bun server.ts`). Install once:
+
+```bash
+curl -fsSL https://bun.sh/install | bash
+```
+
+Then add to your shell profile (or rely on the MCP launcher's `~/.bun/bin/bun` fallback):
+
+```bash
+export PATH="$HOME/.bun/bin:$PATH"
+```
+
+- **Git** — branch resolution, SDD review diffs, and verify gates.
+
+## Repo layout
+
+```
+workit/
+├── packages/
+│   ├── workit-core/        # @brainervirus/workit-core — shared core
+│   │   ├── src/            # core TS (src/core, src/tools, src/state)
+│   │   ├── skills/         # OpenCode-native skills (wk-*)
+│   │   ├── commands/       # OpenCode commands (wk-*)
+│   │   ├── scripts/        # shared shell + installers (all logic in src/, TS via bun)
+│   │   ├── templates/      # execution + superpowers contracts
+│   │   └── vendor/         # vendored superpowers skills
+│   ├── workit-opencode/    # @brainervirus/workit-opencode — OpenCode plugin (src/plugin.ts)
+│   ├── workit-cursor/      # @brainervirus/workit-cursor — Cursor plugin (MCP, hooks, rules, skills)
+│   └── workit-cli/         # @brainervirus/workit-cli — Ink setup wizard (bin: workit)
+├── .github/workflows/      # CI + release
+└── test/                   # bun tests (OpenCode plugin)
+```
+
+## CI / local checks
+
+```bash
+bun run check    # bun test + tsc + cursor MCP regressions
+```
+
+GitHub Actions:
+
+- **CI** — on push/PR to `main`: matrix of 3 OS (ubuntu, macos, windows) running `actions/checkout@v7` + `oven-sh/setup-bun@v2`, then `bun install --frozen-lockfile` + `bun run check`
+- **Release** — on push to `main`: [semantic-release](https://github.com/semantic-release/semantic-release) computes the next version from Conventional Commits, publishes the four workspaces to npm in dependency order — `workit-core`, `workit-opencode`, `workit-cursor`, `workit-cli` (with provenance), and creates the git tag + GitHub Release
+- **Code review** — on every PR: the [OpenCode GitHub integration](https://opencode.ai/docs/github/) reviews the diff (see [Code review](#code-review))
+
+No manual tags — semantic-release owns the version/tag flow:
+
+```bash
+git push origin main
+```
+
+## Code review
+
+Every pull request is automatically reviewed by [OpenCode](https://opencode.ai/docs/github/) via `.github/workflows/opencode-review.yml` — it checks code quality, potential bugs, and this repo's own standards (the spec/plan contract, Conventional Commits, the CONTRIBUTING.md review flow). Model: `opencode-go/deepseek-v4-flash`.
+
+Checks fall into two categories:
+
+- **BLOCKING — the `pull_request` review** (`review` job): runs on every PR (opened/synchronized/reopened/ready_for_review) and is registered as a required check in branch protection — the PR cannot merge while it's red.
+- **ADVISORY — on-demand and triage flows** (never block merge): mention `/oc` or `/opencode` in a comment — issue, PR thread, or a specific line in the Files tab — to have OpenCode fix, explain, or update the PR (`oc` job); new issues are triaged with guidance and doc links (`triage` job).
+
+To activate the review on a fork or fresh clone:
+
+1. Install the [OpenCode GitHub app](https://github.com/apps/opencode-agent) on the repository.
+2. Add the `OPENCODE_API_KEY` secret under Settings → Secrets and variables → Actions.
+3. PRs trigger the review on opened/synchronized/reopened events automatically.
+
+[Cursor Bugbot](https://cursor.com/dashboard/bugbot) is an optional alternative to the OpenCode review.
+
+## Architecture
+
+| Concern | OpenCode | Cursor |
+| --- | --- | --- |
+| Tools | native plugin | MCP server |
+| Session contract | `messages.transform` | `sessionStart` hook |
+| Handoff | spawns OpenCode session | handoff prompt |
+| Shared logic | `scripts/` | `scripts/` via `WORKFLOW_TOOLKIT_ROOT` |
+| Install root | GitHub plugin pin | `~/.local/share/workflow-toolkit` + local plugin copy |
+
+## Future: Codex CLI
+
+Add `codex/` adapter; reuse `scripts/` and `templates/`.
+
+## Workflow docs layout
+
+Features live in `docs/<slug>/`:
+
+- `docs/<slug>/spec.md` and `docs/<slug>/plan.md` are **committed** (they travel with the branch).
+- `docs/<slug>/sdd/` (progress ledger, `flow.json` approval state, briefs, review diffs) is **gitignored** — working state for the current cycle.
+
+Consequences:
+
+- A fresh clone starts every workflow at `draft` — the flow gates (`workflow_spec_approve` / `workflow_plan_approve` / `workflow_plan_menu`) must be re-run after checkout.
+- The SDD state does not travel with the branch; spec/plan do.
+
+## Contributing
+
+Contributions welcome — see [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
+
+## Kudos
+
+- **Superpowers** — the vendored `vendor/superpowers/skills/` (brainstorming, writing-plans, executing-plans, TDD, …) is by [Adam Wiggins](https://github.com/obra), vendored with attribution.
+- **Ponytail mode** — the lazy-engineer skill (ponytail, ponytail-review, ponytail-audit, …) by [Dietrich Gebert](https://github.com/dietrichgebert), active in this project's OpenCode config and installed as a shared skill.

package/commands/wk-changelog.md

@@ -0,0 +1,2 @@
+Load the wk-changelog skill and follow it.
+$ARGUMENTS

package/commands/wk-commit.md

@@ -0,0 +1,2 @@
+Load the wk-commit skill and follow it.
+$ARGUMENTS

package/commands/wk-docs-refresh.md

@@ -0,0 +1,2 @@
+Load the wk-docs-refresh skill and follow it.
+$ARGUMENTS

package/commands/wk-handoff.md

@@ -0,0 +1,2 @@
+Load the wk-handoff skill and follow it.
+$ARGUMENTS

package/commands/wk-implement.md

@@ -0,0 +1,2 @@
+Load the wk-implement skill and follow it.
+$ARGUMENTS

package/commands/wk-init.md

@@ -0,0 +1,2 @@
+Load the wk-init skill and follow it.
+$ARGUMENTS

package/commands/wk-issue-update.md

@@ -0,0 +1,2 @@
+Load the wk-issue-update skill and follow it.
+$ARGUMENTS

package/commands/wk-meetings.md

@@ -0,0 +1,2 @@
+Load the wk-meetings skill and follow it.
+$ARGUMENTS

package/commands/wk-pr.md

@@ -0,0 +1,2 @@
+Load the wk-pr skill and follow it.
+$ARGUMENTS

package/commands/wk-release-notes.md

@@ -0,0 +1,2 @@
+Load the wk-release-notes skill and follow it.
+$ARGUMENTS

package/commands/wk-status.md

@@ -0,0 +1,2 @@
+Load the wk-status skill and follow it.
+$ARGUMENTS

package/commands/wk-verify.md

@@ -0,0 +1,2 @@
+Load the wk-verify skill and follow it.
+$ARGUMENTS

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@brainervirus/workit-core",
+  "version": "0.4.0",
+  "private": false,
+  "description": "Workit — workflow rails for agentic coding: specs, plans, YouTrack, CI-gated commits (shared core)",
+  "license": "MIT",
+  "keywords": ["opencode", "cursor", "workflow", "mcp", "youTrack", "agent"],
+  "bugs": {
+    "url": "https://github.com/BrainerVirus/workflow-toolkit/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/BrainerVirus/workflow-toolkit.git"
+  },
+  "files": [
+    "src/",
+    "scripts/",
+    "skills/",
+    "commands/",
+    "vendor/superpowers/skills/",
+    "templates/",
+    "README.md",
+    "LICENSE"
+  ],
+  "type": "module",
+  "main": "./src/core.ts",
+  "exports": {
+    "./src/tools": "./src/tools/index.ts",
+    "./src/*.ts": "./src/*.ts",
+    "./src/*": "./src/*.ts",
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "zod": "^3.24.0"
+  }
+}

package/scripts/_shared/common.sh

@@ -0,0 +1,158 @@
+#!/bin/sh
+
+set -u
+
+repo_root() {
+  git rev-parse --show-toplevel 2>/dev/null || pwd
+}
+
+current_branch() {
+  git rev-parse --abbrev-ref HEAD 2>/dev/null || printf 'unknown'
+}
+
+default_base() {
+  for ref in origin/main main origin/master master origin/develop develop; do
+    if git rev-parse --verify "$ref" >/dev/null 2>&1; then
+      printf '%s\n' "$ref"
+      return 0
+    fi
+  done
+  printf 'HEAD~1\n'
+}
+
+range_arg_or_default() {
+  if [ "${1:-}" != "" ]; then
+    printf '%s\n' "$1"
+  else
+    base=$(default_base)
+    printf '%s...HEAD\n' "$base"
+  fi
+}
+
+pr_range_arg_or_default() {
+  if [ "${1:-}" != "" ]; then
+    printf '%s\n' "$1"
+    return 0
+  fi
+  resolve_pr_range
+}
+
+is_protected_branch() {
+  branch=$1
+  case "$branch" in
+    main|master|develop|prod|production) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+is_pr_branch() {
+  branch=$1
+  case "$branch" in
+    feature/*|bugfix/*) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+# ponytail: develop-only base — main is release-only in this workflow; never compare PRs to main
+resolve_pr_branch_context() {
+  branch=$(current_branch)
+
+  if is_protected_branch "$branch"; then
+    printf 'ERROR: cannot build PR context on protected branch %s — PRs are for feature/* or bugfix/* only\n' "$branch" >&2
+    return 1
+  fi
+
+  if ! is_pr_branch "$branch"; then
+    if [ "$branch" = "unknown" ]; then
+      printf 'ERROR: not in a git repository at %s — open the target repository as the OpenCode session directory\n' "$(pwd)" >&2
+    else
+      printf 'ERROR: branch %s is not feature/* or bugfix/* — checkout a feature branch or pass an explicit git range\n' "$branch" >&2
+    fi
+    return 1
+  fi
+
+  best_ref=""
+  best_mb=""
+
+  for ref in origin/develop develop; do
+    git rev-parse --verify "$ref" >/dev/null 2>&1 || continue
+    mb=$(git merge-base "$ref" HEAD 2>/dev/null) || continue
+    best_ref=$ref
+    best_mb=$mb
+    break
+  done
+
+  if [ "$best_ref" = "" ] || [ "$best_mb" = "" ]; then
+    printf 'ERROR: develop branch not found — PRs target develop (not main). Fetch/checkout develop or pass an explicit git range\n' >&2
+    return 1
+  fi
+
+  PR_BASE_REF=$best_ref
+  PR_MERGE_BASE=$best_mb
+  PR_RANGE="${best_ref}..HEAD"
+  PR_DIFF_RANGE="${best_mb}..HEAD"
+  export PR_BASE_REF PR_MERGE_BASE PR_RANGE PR_DIFF_RANGE
+  return 0
+}
+
+resolve_pr_range() {
+  if ! resolve_pr_branch_context; then
+    return 1
+  fi
+  printf '%s\n' "$PR_RANGE"
+}
+
+print_section() {
+  printf '\n## %s\n\n' "$1"
+}
+
+run_or_note() {
+  label=$1
+  shift
+  print_section "$label"
+  "$@" 2>&1 || printf '[command failed: %s]\n' "$*"
+}
+
+find_pr_template() {
+  for path in \
+    .gitlab/merge_request_templates/Default.md \
+    .gitlab/merge_request_templates/default.md \
+    .gitlab/merge_request_templates/merge_request_template.md \
+    .github/PULL_REQUEST_TEMPLATE.md \
+    .github/pull_request_template.md \
+    .github/PULL_REQUEST_TEMPLATE/pull_request_template.md \
+    docs/PULL_REQUEST_TEMPLATE.md \
+    PULL_REQUEST_TEMPLATE.md
+  do
+    if [ -f "$path" ]; then
+      printf '%s\n' "$path"
+      return 0
+    fi
+  done
+  return 1
+}
+
+fallback_pr_template() {
+  cat <<'TEMPLATE'
+## Summary
+-
+
+## Validation
+- [ ] Not run
+TEMPLATE
+}
+
+changed_files_for_range() {
+  range=$1
+  git diff --name-only "$range" -- 2>/dev/null || git diff --name-only -- 2>/dev/null || true
+}
+
+commit_log_for_range() {
+  range=$1
+  git log --oneline --decorate --no-merges "$range" -- 2>/dev/null || git log --oneline --decorate -10 -- 2>/dev/null || true
+}
+
+diff_stat_for_range() {
+  range=$1
+  git diff --stat "$range" -- 2>/dev/null || git diff --stat -- 2>/dev/null || true
+}

package/scripts/changelog-context.sh

@@ -0,0 +1,42 @@
+#!/bin/sh
+
+set -u
+
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+. "$SCRIPT_DIR/_shared/common.sh"
+
+cd "$(repo_root)" || exit 1
+
+range=$(range_arg_or_default "${1:-}")
+
+print_section "Repository"
+printf 'root: %s\n' "$(pwd)"
+printf 'branch: %s\n' "$(current_branch)"
+printf 'range: %s\n' "$range"
+
+print_section "Keep a Changelog Rules"
+cat <<'RULES'
+- Use an [Unreleased] section.
+- Use Added, Changed, Deprecated, Removed, Fixed, Security.
+- Entries should be human-readable and user-facing.
+- Do not use raw commit messages as changelog bullets.
+- MERGE into existing ### Category under [Unreleased] — never append a second ### Added / ### Fixed block.
+- Apply with the native workflow_changelog_apply tool only (not hand-edits under Unreleased).
+- If Unreleased already has duplicate category headings, normalize_only first.
+RULES
+
+print_section "Existing CHANGELOG.md"
+if [ -f CHANGELOG.md ]; then
+  sed -n '1,260p' CHANGELOG.md
+else
+  printf 'CHANGELOG.md not found.\n'
+fi
+
+print_section "Commits"
+commit_log_for_range "$range"
+
+print_section "Diff Stat"
+diff_stat_for_range "$range"
+
+print_section "Changed Files"
+changed_files_for_range "$range"

package/scripts/docs-refresh-context.sh

@@ -0,0 +1,40 @@
+#!/bin/sh
+
+set -u
+
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+. "$SCRIPT_DIR/_shared/common.sh"
+
+cd "$(repo_root)" || exit 1
+
+range=$(range_arg_or_default "${1:-}")
+
+print_section "Repository"
+printf 'root: %s\n' "$(pwd)"
+printf 'branch: %s\n' "$(current_branch)"
+printf 'range: %s\n' "$range"
+
+print_section "Changed Files"
+changed_files_for_range "$range"
+
+print_section "Documentation Files"
+find . -maxdepth 3 \( -name 'README.md' -o -name '*.md' \) \
+  -not -path './.git/*' \
+  -not -path './node_modules/*' \
+  -not -path './target/*' \
+  -not -path './dist/*' \
+  | sort | sed -n '1,200p'
+
+print_section "README Preview"
+if [ -f README.md ]; then
+  sed -n '1,220p' README.md
+else
+  printf 'README.md not found.\n'
+fi
+
+print_section "Package Scripts"
+if [ -f package.json ]; then
+  node -e "const p=require('./package.json'); console.log(JSON.stringify({name:p.name,version:p.version,scripts:p.scripts}, null, 2))" 2>/dev/null || true
+else
+  printf 'package.json not found.\n'
+fi

package/scripts/fixtures/sample-plan.md

@@ -0,0 +1,15 @@
+# Sample Plan
+
+## File Map
+
+Not a task.
+
+### Task 1: First task
+
+- [ ] Step 1: Do alpha
+- [ ] Step 2: Do beta
+- [ ] Step 3: Do gamma
+
+### Task 2: Second task
+
+- [ ] Step 1: Finish

package/scripts/fixtures/sample-sdd/progress.md

@@ -0,0 +1,2 @@
+Task 1: complete (commits abc1234..def5678, review clean)
+Task 2: complete (commits def5678..111aaaa, review skipped — trivial doc)

package/scripts/init/apply.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+# Ported to TS — CLI contract kept: execs bun <core>/ports/init-apply.ts
+set -euo pipefail
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+exec bun "$SCRIPT_DIR/../../src/core/ports/init-apply.ts" "$@"

package/scripts/init/status.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+# Ported to TS — CLI contract kept: execs bun <core>/ports/init-status.ts
+set -euo pipefail
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+exec bun "$SCRIPT_DIR/../../src/core/ports/init-status.ts" "$@"

package/scripts/init/toolkit-status.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+# Ported to TS — CLI contract kept: execs bun <core>/ports/init-toolkit-status.ts
+set -euo pipefail
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+exec bun "$SCRIPT_DIR/../../src/core/ports/init-toolkit-status.ts" "$@"

package/scripts/install-cursor-plugin.sh

@@ -0,0 +1,83 @@
+#!/usr/bin/env bash
+# Install / refresh Cursor plugin (+ OpenCode live loader via sync-runtime).
+set -euo pipefail
+
+REPO_SLUG="${WORKFLOW_TOOLKIT_REPO:-BrainerVirus/workit}"
+SHARE="${HOME}/.local/share/workflow-toolkit"
+SKILLS_DIR="${HOME}/.cursor/skills"
+
+FROM_GITHUB=0
+LOCAL_ROOT=""
+if [ -n "${BASH_SOURCE[0]:-}" ] && [ -f "${BASH_SOURCE[0]}" ]; then
+  SCRIPT_DIR="$(CDPATH= cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+  LOCAL_ROOT="$(CDPATH= cd -- "$SCRIPT_DIR/.." && pwd)"
+else
+  FROM_GITHUB=1
+fi
+
+for arg in "$@"; do
+  case "$arg" in
+    --github|--from-github) FROM_GITHUB=1 ;;
+  esac
+done
+
+if [ "$FROM_GITHUB" -eq 0 ] && [ ! -d "${LOCAL_ROOT}/packages/workit-cursor/.cursor-plugin" ]; then
+  FROM_GITHUB=1
+fi
+
+if [ "$FROM_GITHUB" -eq 1 ]; then
+  mkdir -p "$(dirname "$SHARE")"
+  if [ -d "$SHARE/.git" ]; then
+    git -C "$SHARE" fetch --tags --force origin
+    git -C "$SHARE" checkout main
+    git -C "$SHARE" pull --ff-only origin main
+  else
+    rm -rf "$SHARE"
+    git clone --depth 1 "git@github.com:${REPO_SLUG}.git" "$SHARE"
+  fi
+  ROOT="$SHARE"
+else
+  ROOT="$LOCAL_ROOT"
+fi
+
+chmod +x "$ROOT/packages/workit-core/scripts/sync-runtime.sh" "$ROOT/packages/workit-core/scripts/"*.sh
+# Prefer syncing from this ROOT (dev or freshly cloned share)
+WORKFLOW_TOOLKIT_DEV="$ROOT" "$ROOT/packages/workit-core/scripts/sync-runtime.sh"
+
+# Drop stale CLI skill symlinks (duplicate /wf-* and /wk-* entries)
+if [ -d "$SKILLS_DIR" ]; then
+  rm -f "$SKILLS_DIR"/wf-* "$SKILLS_DIR"/wk-*
+fi
+
+CURSOR_SETTINGS="$HOME/.cursor/settings.json" bun -e '
+import fs from "node:fs";
+import os from "node:os";
+const path = process.env.CURSOR_SETTINGS!;
+let data = {};
+if (fs.existsSync(path)) data = JSON.parse(fs.readFileSync(path, "utf8"));
+const prev = data.enabled_plugins && typeof data.enabled_plugins === "object" ? data.enabled_plugins : {};
+const plugin = `${os.homedir()}/.cursor/plugins/local/workflow-toolkit`;
+data.enabled_plugins = { ...prev, "workflow-toolkit": true, "local/workflow-toolkit": true };
+data.plugin_dirs = [plugin];
+fs.writeFileSync(path, JSON.stringify(data, null, 2) + "\n");
+'
+
+CURSOR_MCP="$HOME/.cursor/mcp.json" bun -e '
+import fs from "node:fs";
+const path = process.env.CURSOR_MCP!;
+const data = fs.existsSync(path) ? JSON.parse(fs.readFileSync(path, "utf8")) : { mcpServers: {} };
+data.mcpServers = data.mcpServers ?? {};
+data.mcpServers["workflow-toolkit"] = {
+  command: "bash",
+  args: [
+    "-lc",
+    "exec \"$HOME/.local/share/workflow-toolkit/packages/workit-core/scripts/run-cursor-mcp.sh\" \"$0\"",
+    "${workspaceFolder}",
+  ],
+};
+fs.writeFileSync(path, JSON.stringify(data, null, 2) + "\n");
+'
+
+echo "Cursor plugin installed + auto-sync enabled (sessionStart)."
+echo "Share: $SHARE"
+ls "$HOME/.cursor/plugins/local/workflow-toolkit/skills" | grep '^wk-' || true