@brainervirus/workit-core 5.0.0 → 6.0.0

package/src/forge/pr-ops.ts

@@ -15,7 +15,7 @@
 // The merge call carries the head SHA (GitHub `sha=`, GitLab `sha=`), so a
 // head that moves after the gates refuses instead of merging unverified code.
 // --delete-branch deletes with a lease on that same SHA.
-import { requireGrant } from "../autonomy";
+import { requireGrant, type AutonomySource } from "../autonomy";
 import { isProtectedTarget } from "../core/branch";
 import { vcsConfig } from "../core/vcs-config";
 import { deleteRemoteBranch } from "../git/ops";
@@ -257,7 +257,7 @@ export type MergeOutcome = {
   method: MergeMethod;
   mergeSha: string | null;
   verdict: { required: boolean; accepted: boolean; verdictId: string | null };
-  grant: { source: "autonomy" | "host_authority" };
+  grant: { source: AutonomySource };
   deletedBranch: boolean | { error: string };
   recorded: { id: string } | { error: string };
 };

package/src/hooks/handle.ts

@@ -36,7 +36,7 @@ const subagentStartText = (
 ): string => {
   if (host === "claude_code" && event.agentType === CLAUDE_WORKTREE_IMPLEMENTER)
     return `Workit observed ${descriptor.label} subagent ${event.agentId} (${event.agentType}) working in its own git worktree: it may edit and commit there, within its brief's scope. Before the first commit, switch to a policy-compliant branch with \`workit git branch <branch> --base <base>\` (e.g. feature/<slug>); branch policy hooks still deny protected or non-compliant branches. Never record a verdict on your own work. Never push, open a PR, or merge unless the brief asks for it.`;
-  const readOnly = `Workit observed ${descriptor.label} subagent ${event.agentId} (${event.agentType}) as read-only/agent-guided; writer delegation is unavailable.`;
+  const readOnly = `Workit observed ${descriptor.label} subagent ${event.agentId} (${event.agentType}) as read-only/agent-guided.`;
   if (
     host === "claude_code" &&
     event.agentType &&

package/src/hooks/hosts/claude-code.ts

@@ -60,14 +60,6 @@ export const CLAUDE_CODE_DESCRIPTOR: HostDescriptor = {
   shellAvailable: "native",
   perEventCost: "low",
   capabilities: [
-    {
-      name: "interactive_decision",
-      surface: "AskUserQuestion",
-      refs: ["AskUserQuestion"],
-      requires: [],
-      assurance: "agent_guided",
-      reason: "Claude Code hooks expose no native question answer receipt",
-    },
     {
       name: "known_product_writes",
       surface: "PreToolUse",

package/src/hooks/hosts/codex.ts

@@ -77,14 +77,6 @@ export const CODEX_DESCRIPTOR: HostDescriptor = {
   shellAvailable: "native",
   perEventCost: "low",
   capabilities: [
-    {
-      name: "interactive_decision",
-      surface: "Question",
-      refs: ["Question"],
-      requires: [],
-      assurance: "agent_guided",
-      reason: "Codex hooks expose no native arbitrary-question answer receipt",
-    },
     {
       name: "known_product_writes",
       surface: "PreToolUse",
@@ -111,7 +103,7 @@ export const CODEX_DESCRIPTOR: HostDescriptor = {
       requires: ["event:subagent.start", "event:subagent.stop"],
       observed: ["subagent.start", "subagent.stop"],
       assurance: "agent_guided",
-      reason: "Codex reports stable child identities, but cannot block creation or bind a writer",
+      reason: "Codex reports stable child identities, but cannot block creation",
       unavailableReason: "Codex subagent lifecycle hooks are untrusted or incomplete",
     },
     {
@@ -292,7 +284,6 @@ export const codexAdapter: HostAdapter = {
     };
   },
   render,
-  // Without a session id there is no actor to bind a writer to.
   addendum: (input) =>
-    `<workit-codex-mutations>Codex MCP is read-only: unattested callers cannot mutate. Run workit verbs with the workit CLI on the shell (node_modules/.bin/workit, or npx -y @brainervirus/workit-cli): check, git branch|commit|push, pr, ci, stack, ledger, handoff; task-family mutations take --json --confirm${input.session.id ? `; bind the writer to this session with node_modules/.bin/workit writer acquire --task <id> --revision <rev> --actor ${input.session.id} --confirm` : ""}. A verifier or reviewer records workit ledger verdict under a session the lead assigns (WORKIT_SESSION_ID=<lead>-v<n>), never the author's. Merge and release need a workspace grant; a question answer is not host permission.</workit-codex-mutations>`,
+    `<workit-codex-mutations>Codex MCP is read-only: unattested callers cannot mutate. Run workit verbs with the workit CLI on the shell (node_modules/.bin/workit, or npx -y @brainervirus/workit-cli): check, git branch|commit|push, pr, ci, stack, ledger, handoff; task-family mutations take --json${input.session.id ? ` --actor ${input.session.id}` : ""}. A verifier or reviewer records workit ledger verdict under a session the lead assigns (WORKIT_SESSION_ID=<lead>-v<n>), never the author's. Merge and release need a workspace grant (workit grant show); a question answer is not host permission.</workit-codex-mutations>`,
 };

package/src/hooks/hosts/cursor.ts

@@ -78,14 +78,6 @@ export const CURSOR_DESCRIPTOR: HostDescriptor = {
   // Every hook spawns `npx -y --prefer-online …@latest`: a registry round-trip per event.
   perEventCost: "npx-network",
   capabilities: [
-    {
-      name: "interactive_decision",
-      surface: "AskQuestion",
-      refs: ["AskQuestion"],
-      requires: [],
-      assurance: "agent_guided",
-      reason: "Cursor does not expose AskQuestion answers to Workit hooks or MCP",
-    },
     {
       name: "known_product_writes",
       surface: "preToolUse",

package/src/hooks/hosts/opencode.ts

@@ -40,14 +40,6 @@ export const OPENCODE_DESCRIPTOR: HostDescriptor = {
   shellAvailable: "native",
   perEventCost: "low",
   capabilities: [
-    {
-      name: "interactive_decision",
-      surface: "question",
-      refs: ["question"],
-      requires: ["interaction.questions"],
-      assurance: "enforced",
-      reason: "native question answers are observed by tool.execute.after and consumed once",
-    },
     {
       name: "known_product_writes",
       surface: "edit/shell",

package/src/hooks/hosts/pi.ts

@@ -49,16 +49,6 @@ export const PI_DESCRIPTOR: HostDescriptor = {
       reason:
         "Pi exposes a before-tool boundary for known built-in write tools; it enforces project trust while file targets stay host-policy.",
     },
-    {
-      name: "interactive_decision",
-      surface: "ui.confirm",
-      refs: ["ui.confirm"],
-      requires: ["interaction.questions"],
-      observed: ["ui"],
-      assurance: "enforced",
-      reason: "Pi supplies a native confirmation receipt when dialog UI is available.",
-      unavailableReason: "Pi is running without dialog UI, so required decisions need user input.",
-    },
     {
       name: "arbitrary_shell_write",
       surface: "bash",

package/templates/workit-contract.md

@@ -2,9 +2,10 @@
 
 Workit keeps one accountable lead and one shared task state. Inspect current
 task state before acting; use only the shared operations for task, policy,
-evidence, finding, decision, worker, writer, and state changes. Authority is
+evidence, finding, decision, worker, and state changes. Authority is
 bounded by the requested scope, current revision, caller/session provenance, and
-observed capabilities. Never claim host enforcement or evidence that the host
+observed capabilities; delivery is bounded by the workspace autonomy grants
+(`workit grant show`). Never claim host enforcement or evidence that the host
 cannot provide. Preserve unresolved requirements, gaps, and uncertain workers.
 
 Focused methods are loaded only when the resolved policy requires them. A method