@brainervirus/workit-cursor 5.0.0 → 6.0.0

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "workit",
   "displayName": "Workit",
   "description": "Adaptive Workit workflow with shared MCP tools and native Cursor hooks",
-  "version": "5.0.0",
+  "version": "6.0.0",
   "author": {
     "name": "Cristhofer Pincetti"
   },

package/README.md

@@ -45,13 +45,13 @@ npx @brainervirus/workit-cli init
 
 ## What it provides
 
-- MCP server exposing exactly the eight shared operation families: `workit_task`, `workit_policy`, `workit_evidence`, `workit_finding`, `workit_decision`, `workit_worker`, `workit_writer`, and `workit_state`.
+- MCP server exposing the seven shared operation families: `workit_task`, `workit_policy`, `workit_evidence`, `workit_finding`, `workit_decision`, `workit_worker`, and `workit_state` (read-only for unattested callers; mutations run through `node_modules/.bin/workit <family> <action> --json [--actor <session-id>]`).
 - One bounded native hook executable for session context, recognized product-write and shell interception, and native subagent lifecycle observations.
 - Eleven canonical `workit-*` method skills and the `workit-contract` rule.
 
 ## Host limitations
 
-Cursor maps shared Workit operations through the shared MCP transport. AskQuestion remains policy-only (`agent_guided`), session start and compaction are non-blocking, and arbitrary shell writes, Tab edits, and exact subagent stop identity are unavailable. Known Write/Edit/Delete targets are enforced only when the documented Cursor hook inputs prove them. Native subagent delegation is read-only for reviewer/investigator assignments; implementer delegation is unavailable because Cursor exposes no attested writer identity or stable child-stop identity.
+Cursor maps shared Workit operations through the shared MCP transport. AskQuestion remains policy-only (`agent_guided`), session start and compaction are non-blocking, and arbitrary shell writes, Tab edits, and exact subagent stop identity are unavailable. Known Write/Edit/Delete targets are enforced only when the documented Cursor hook inputs prove them. Native subagent delegation is read-only for reviewer/investigator assignments; implementer delegation is unavailable because Cursor exposes no stable child-stop identity.
 
 ## Configuration
 
@@ -73,8 +73,8 @@ The runtime runs from `@latest` with `--prefer-online` and `--min-release-age=0`
 
 ## Capability boundaries
 
-- Authority-sensitive MCP mutations require an attested caller. A standalone or ordinary Cursor launch stays usable for read-only inspection and reports `capability_unavailable` for authority mutations.
-- Native hook enforcement is limited to documented inputs and blocking behavior. The plugin does not claim a `beforeMCPExecution` hook, cross-process receipts, delegation tokens, or automatic compaction restoration.
+- MCP is read-only for unattested callers: a standalone or ordinary Cursor launch stays usable for inspection and reports `capability_unavailable` for mutations, which run through the CLI instead.
+- Native hook enforcement is limited to documented inputs and blocking behavior. The plugin does not claim a `beforeMCPExecution` hook, delegation tokens, or automatic compaction restoration.
 
 ## Plugin layout
 

package/assets/templates/workit-contract.md

@@ -2,9 +2,10 @@
 
 Workit keeps one accountable lead and one shared task state. Inspect current
 task state before acting; use only the shared operations for task, policy,
-evidence, finding, decision, worker, writer, and state changes. Authority is
+evidence, finding, decision, worker, and state changes. Authority is
 bounded by the requested scope, current revision, caller/session provenance, and
-observed capabilities. Never claim host enforcement or evidence that the host
+observed capabilities; delivery is bounded by the workspace autonomy grants
+(`workit grant show`). Never claim host enforcement or evidence that the host
 cannot provide. Preserve unresolved requirements, gaps, and uncertain workers.
 
 Focused methods are loaded only when the resolved policy requires them. A method