@brainervirus/workit-cursor 8.14.0 → 8.15.0

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "workit",
   "displayName": "Workit",
   "description": "Adaptive Workit workflow with shared MCP tools and native Cursor hooks",
-  "version": "8.14.0",
+  "version": "8.15.0",
   "author": {
     "name": "Cristhofer Pincetti"
   },

package/dist/cursor-session-start.js

@@ -7624,6 +7624,16 @@ var init_zod = __esm(() => {
 
 // packages/workit-core/src/core/task-contract.ts
 import { createHash, randomUUID } from "node:crypto";
+function resolveIdRef(kind, ref, ids) {
+  if (ids.includes(ref))
+    return success(null, null, ref);
+  const matches = ids.filter((candidate) => candidate.startsWith(ref));
+  if (matches.length === 1)
+    return success(null, null, matches[0]);
+  if (matches.length === 0)
+    return failure2("not_found", `${kind} not found`);
+  return failure2("invalid_input", `${kind} prefix ${ref} is ambiguous; candidates: ${matches.join(", ")}`);
+}
 function parseOperation(family, input) {
   if (typeof input === "object" && input !== null && "schemaVersion" in input && input.schemaVersion !== SCHEMA_VERSION)
     return failure2("unsupported_version", "unsupported schema version", { operation: family });
@@ -7726,7 +7736,7 @@ var SCHEMA_VERSION = 1, POLICY_VERSION = "1.0.0", OPERATION_FAMILIES, uuidPatter
       return true;
   }
   return false;
-}, text, id, digest, revision, validUtc = (value) => {
+}, text, id, idRefPattern, idRef, digest, revision, validUtc = (value) => {
   const match = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,9}))?Z$/.exec(value);
   if (!match)
     return false;
@@ -7909,6 +7919,8 @@ var init_task_contract = __esm(() => {
       ctx.issues.push({ code: "custom", input: ctx.value, message: "invalid Unicode", path: [] });
   });
   id = text.regex(uuidPattern, "expected lowercase UUID");
+  idRefPattern = /^[0-9a-f][0-9a-f-]{7,35}$/;
+  idRef = text.regex(idRefPattern, "expected a UUID or an id prefix of 8+ characters");
   digest = text.regex(digestPattern, "expected lowercase SHA-256 digest");
   revision = text.regex(uuidPattern, "expected UUID revision");
   utcSchema = text.check((ctx) => {
@@ -8177,7 +8189,7 @@ var init_task_contract = __esm(() => {
     outcome: _enum(["completed", "failed", "cancelled"]),
     summary: text,
     evidenceIds: array(id),
-    findingIds: array(id)
+    findingIds: array(idRef)
   }).strict();
   workerSchema = object({
     assignment: assignmentSchema,
@@ -8369,7 +8381,7 @@ var init_task_contract = __esm(() => {
       action: literal("resolve"),
       ...taskId,
       expectedRevision: revision.optional(),
-      findingId: id,
+      findingId: idRef,
       disposition: _enum(["open", "fixed", "dismissed", "deferred"]),
       reason: text,
       evidenceIds: array(id),
@@ -8410,7 +8422,7 @@ var init_task_contract = __esm(() => {
       ...taskId,
       expectedRevision: revision.optional(),
       expectedWorkspaceRevision: revision.optional(),
-      workerId: id,
+      workerId: idRef,
       report: workerReportSchema
     }),
     cancel: operation({
@@ -8418,7 +8430,7 @@ var init_task_contract = __esm(() => {
       ...taskId,
       ...revisions,
       expectedWorkspaceRevision: revision.optional(),
-      workerId: id,
+      workerId: idRef,
       reason: text
     })
   };
@@ -9707,20 +9719,19 @@ var init_workspaces = __esm(() => {
       union([boolean2(), literal("verified")]).optional()
     ]))).passthrough().optional(),
     youtrack: object({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(),
-    issues: object({ provider: literal("github").optional(), link_on_pr: boolean2().optional() }).passthrough().optional(),
+    issues: object({
+      provider: _enum(["github", "gitlab", "youtrack"]).optional(),
+      link: boolean2().optional(),
+      relation: unknown().optional(),
+      backlink: boolean2().optional(),
+      link_on_pr: boolean2().optional()
+    }).passthrough().optional(),
     branchPolicy: workspaceBranchPolicySchema.optional(),
     commitPolicy: workspaceCommitPolicySchema.optional(),
     defaultProfile: nonBlank.optional(),
     profiles: record(nonBlank, workspaceProfileSchema).optional(),
     releaseTracks: record(nonBlank, releaseTrackSchema).optional()
   }).passthrough().superRefine((workspace, context) => {
-    if (workspace.issues && workspace.vcs?.provider !== "github") {
-      context.addIssue({
-        code: "custom",
-        path: ["issues"],
-        message: `GitHub issue linking requires the github provider, got ${workspace.vcs?.provider ?? "unset"}`
-      });
-    }
     if (workspace.defaultProfile !== undefined && !Object.hasOwn(workspace.profiles ?? {}, workspace.defaultProfile)) {
       context.addIssue({
         code: "custom",
@@ -10157,6 +10168,40 @@ var init_release_tracks = __esm(() => {
 import fs4 from "node:fs";
 import path5 from "node:path";
 import { spawnSync as spawnSync7 } from "node:child_process";
+function issueTrackerOf(issues, youtrack) {
+  const iss = asRecord(issues);
+  const yt = asRecord(youtrack);
+  const warnings = [];
+  const named = typeof iss.provider === "string" && TRACKERS.has(iss.provider.toLowerCase()) ? iss.provider.toLowerCase() : null;
+  if (iss.relation !== undefined && iss.relation !== "closes" && iss.relation !== "refs")
+    warnings.push(`issues.relation ${JSON.stringify(iss.relation)} is not closes or refs; read as closes`);
+  for (const key of ["repo", "host"])
+    if (iss[key] !== undefined && text2(iss[key]) === null)
+      warnings.push(`issues.${key} is not a non-empty string; ignored`);
+  const common = {
+    relation: iss.relation === "refs" ? "refs" : "closes",
+    backlink: iss.backlink === true,
+    baseUrl: text2(yt.baseUrl),
+    repo: text2(iss.repo)?.replace(/^\/+|\/+$/gu, "") ?? null,
+    host: text2(iss.host)?.toLowerCase() ?? null,
+    warnings
+  };
+  const legacyGithub = named === "github" && flag(iss.link) === null;
+  if (flag(yt.link_issues) === true && (named === null || legacyGithub))
+    return { provider: "youtrack", link: true, ...common, source: "youtrack.link_issues" };
+  if (named) {
+    const link = flag(iss.link) ?? flag(iss.link_on_pr) ?? (named === "youtrack" ? flag(yt.link_issues) : null) ?? false;
+    return {
+      provider: named,
+      link,
+      ...common,
+      source: flag(iss.link) === null && flag(iss.link_on_pr) !== null ? "issues.link_on_pr" : "issues"
+    };
+  }
+  if (common.baseUrl)
+    return { provider: "youtrack", link: false, ...common, source: "youtrack.baseUrl" };
+  return null;
+}
 function vcsConfig(mode, cwd, options = {}) {
   const ws = resolveRuntimeWorkspaceVcs(vcsCwd(cwd));
   const wsVcs = ws?.vcs ?? {};
@@ -10168,6 +10213,7 @@ function vcsConfig(mode, cwd, options = {}) {
   const rawProvider = wsVcs.provider ?? (determinateRoot ? remoteProvider(root) : null) ?? cfg.provider ?? null;
   const provider = rawProvider === null || rawProvider === undefined ? null : String(rawProvider).toLowerCase() || null;
   const workspaceDefault = workspaceDefaultTarget(root, cfg.defaultTargetBranch);
+  const issueTracker = issueTrackerOf(wsIssues, wsYt);
   const linkIssues = typeof wsYt.link_issues === "boolean" ? wsYt.link_issues : null;
   const youtrackBaseUrl = typeof wsYt.baseUrl === "string" ? wsYt.baseUrl : null;
   let issuesProvider = null;
@@ -10200,7 +10246,8 @@ function vcsConfig(mode, cwd, options = {}) {
       link_issues: linkIssues,
       youtrack_base_url: youtrackBaseUrl,
       issues_provider: issuesProvider,
-      link_on_pr: linkOnPr
+      link_on_pr: linkOnPr,
+      issue_tracker: issueTracker
     };
   }
   if (cfgStatus === "malformed") {
@@ -10226,7 +10273,8 @@ function vcsConfig(mode, cwd, options = {}) {
     link_issues: linkIssues,
     youtrack_base_url: youtrackBaseUrl,
     issues_provider: issuesProvider,
-    link_on_pr: linkOnPr
+    link_on_pr: linkOnPr,
+    issue_tracker: issueTracker
   };
   if (provider === "gitlab") {
     out.gitlab = {
@@ -10266,7 +10314,7 @@ var workspacesPath = () => path5.join(configDir(), "workspaces.json"), vcsCwd =
     return { status: "valid", path: file, config: parsed };
   }
   return { status: "malformed", path: file, config: {}, error: `${file} is not a JSON object` };
-}, trackSummary = (resolution) => resolution.status === "resolved" ? {
+}, TRACKERS, asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {}, flag = (value) => typeof value === "boolean" ? value : null, text2 = (value) => typeof value === "string" && value.trim() ? value.trim() : null, trackSummary = (resolution) => resolution.status === "resolved" ? {
   name: resolution.track?.name ?? null,
   source: resolution.source,
   detail: resolution.detail,
@@ -10279,6 +10327,7 @@ var init_vcs_config = __esm(() => {
   init_config();
   init_workspaces();
   init_release_tracks();
+  TRACKERS = new Set(["github", "gitlab", "youtrack"]);
 });
 
 // packages/workit-core/src/core/logger.ts
@@ -10399,7 +10448,7 @@ function migrateRepoIssued(cwd) {
   removeIfEmpty(old);
 }
 function recordIssuedSession(cwd, lead, issued) {
-  const token = randomBytes(18).toString("base64url");
+  const token = randomBytes(18).toString("hex");
   try {
     migrateRepoIssued(cwd);
     const own = hash(issued);
@@ -11233,7 +11282,12 @@ var init_ledger = __esm(() => {
   PASSING = new Set(["verified", "tests-verified", "type-check-only"]);
   FAILING = new Set(["failed", "blocked"]);
   STRONG_RESULTS = new Set(["verified", "tests-verified"]);
-  PR_ROW_TYPES = new Set(["pr.created", "pr.status", "pr.merged"]);
+  PR_ROW_TYPES = new Set([
+    "pr.created",
+    "pr.status",
+    "pr.merged",
+    "pr.linked"
+  ]);
   NETWORK_FS_TYPES = new Set([
     26985,
     20859,
@@ -11948,12 +12002,12 @@ function normalizeJudgment(raw, previous) {
       const items = Array.isArray(value) ? value : [value];
       judgment.refs.push(...items.filter((item) => item !== null && item !== "").map(refOf));
     } else {
-      if (name === "needsPlan" && typeof value === "string" && !flag(value, false).ok && value.trim()) {
+      if (name === "needsPlan" && typeof value === "string" && !flag2(value, false).ok && value.trim()) {
         judgment.needsPlan = true;
         judgment.refs.push(refOf(value.trim()));
         continue;
       }
-      const parsed = flag(value, name === "behaviorChange");
+      const parsed = flag2(value, name === "behaviorChange");
       if (parsed.ok)
         judgment[name] = parsed.value;
       else
@@ -11977,7 +12031,7 @@ function normalizeJudgment(raw, previous) {
     });
   return success(null, null, { judgment: parsed.data, ignored, legacy });
 }
-var isObject3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), squash = (key) => key.toLowerCase().replace(/[_-]/g, ""), ALIASES, LEGACY_KEYS, RISK, YES, NO, flag = (value, unknownAs) => {
+var isObject3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), squash = (key) => key.toLowerCase().replace(/[_-]/g, ""), ALIASES, LEGACY_KEYS, RISK, YES, NO, flag2 = (value, unknownAs) => {
   if (typeof value === "boolean")
     return { ok: true, value };
   if (typeof value === "number" && (value === 0 || value === 1))
@@ -13462,20 +13516,26 @@ class TaskStore {
     return success(null, null, { key: key.data, bound: bound.data });
   }
   taskForWorker(workerId) {
-    if (typeof workerId !== "string" || !validId(workerId))
+    if (typeof workerId !== "string" || !idRefPattern.test(workerId))
       return failure2("invalid_input", "needs a worker id: `workit worker cancel|report <workerId>`");
     const listed = this.listTaskIndex();
     if (!listed.ok)
       return listed;
+    const owners = new Map;
     for (const entry of listed.data) {
       if (entry.status === "closed")
         continue;
       const loaded = this.load(entry.id);
       if (!loaded.ok)
         return loaded;
-      if (loaded.data?.record.workers.some((worker) => worker.id === workerId))
-        return success(null, null, entry.id);
+      for (const worker of loaded.data?.record.workers ?? [])
+        owners.set(worker.id, entry.id);
     }
+    const resolved = resolveIdRef("worker", workerId, [...owners.keys()]);
+    if (resolved.ok)
+      return success(null, null, owners.get(resolved.data) ?? null);
+    if (resolved.code !== "not_found")
+      return resolved;
     return success(null, null, null);
   }
   originTaskEntry() {
@@ -16734,6 +16794,10 @@ class WorkitCore {
     }
     if (helper?.ok)
       return failure2("permission_denied", "helpers cannot resolve findings");
+    const findingRef = resolveIdRef("finding", input.findingId, task.data.findings.map((entry) => entry.id));
+    if (!findingRef.ok)
+      return findingRef;
+    input.findingId = findingRef.data;
     const finding = task.data.findings.find((entry) => entry.id === input.findingId);
     if (!finding)
       return failure2("not_found", "finding not found");
@@ -16885,15 +16949,31 @@ class WorkitCore {
         return changed;
       return success(changed.data.task.revision, changed.data.workspace.revision, changed.data.task.workers.at(-1));
     }
+    const workerRef = resolveIdRef("worker", input.workerId, helperId === null ? task.data.workers.map((candidate) => candidate.id) : [helperId]);
+    if (!workerRef.ok)
+      return helperId === null ? workerRef : failure2("permission_denied", input.action === "report" ? ONLY_OWN_REPORT : NO_HELPER_CONTROL);
+    input.workerId = workerRef.data;
     const entry = task.data.workers.find((candidate) => candidate.id === input.workerId);
     if (!entry)
       return failure2("not_found", "worker not found");
     if (input.action === "report") {
       if (helperId === null || helperId !== input.workerId)
-        return failure2("permission_denied", "workers can submit only their own report");
+        return failure2("permission_denied", ONLY_OWN_REPORT);
       const helper = this.helperEntry(task.data, true, true);
       if (!helper.ok)
         return helper;
+      const ownFindings = task.data.findings.filter((candidate) => candidate.provenance.workerId === helperId).map((candidate) => candidate.id);
+      const reported = [];
+      for (const findingRef of input.report.findingIds) {
+        const found = resolveIdRef("finding", findingRef, ownFindings);
+        if (found.ok)
+          reported.push(found.data);
+        else if (found.code === "not_found")
+          reported.push(findingRef);
+        else
+          return found;
+      }
+      input.report.findingIds = reported;
       const evidence = task.data.evidence.filter((candidate) => input.report.evidenceIds.includes(candidate.id));
       const findings = task.data.findings.filter((candidate) => input.report.findingIds.includes(candidate.id));
       if (evidence.length !== input.report.evidenceIds.length || findings.length !== input.report.findingIds.length)
@@ -16921,7 +17001,7 @@ class WorkitCore {
       return updated ? success(changed.data.task.revision, changed.data.workspace.revision, updated) : failure2("recovery_required", "worker disappeared during report");
     }
     if (helperId !== null)
-      return failure2("permission_denied", "helpers cannot cancel or control workers");
+      return failure2("permission_denied", NO_HELPER_CONTROL);
     if (task.data.status === "closed")
       return failure2("invalid_transition", "closed task cannot cancel workers");
     if (entry.data.state === "stopped") {
@@ -17450,7 +17530,7 @@ var MAX_JUDGED_REFS = 5, workspaceVerification = (root) => {
     return changed;
   const updated = changed.data.task.workers.find((candidate) => candidate.id === input.workerId);
   return updated ? success(changed.data.task.revision, changed.data.workspace.revision, updated) : failure2("recovery_required", "worker disappeared during lifecycle observation");
-}, refsWithinScope = (refs, scope) => refs.every((ref) => ref.kind !== "file" || scopeCovers(scope, { description: "", paths: [ref.path], exclusions: [] })), TASK_SCOPED_ACTIONS, WORKER_ADDRESSED_ACTIONS, workerCommand = (taskId, request) => {
+}, refsWithinScope = (refs, scope) => refs.every((ref) => ref.kind !== "file" || scopeCovers(scope, { description: "", paths: [ref.path], exclusions: [] })), TASK_SCOPED_ACTIONS, ONLY_OWN_REPORT = "workers can submit only their own report", NO_HELPER_CONTROL = "helpers cannot cancel or control workers", WORKER_ADDRESSED_ACTIONS, workerCommand = (taskId, request) => {
   const { action, workerId, reason, report } = request;
   const rest = JSON.stringify({ reason, report });
   const payload = rest === "{}" ? "" : ` --payload '${rest.replace(/'/gu, "'\\''")}'`;

package/dist/mcp-server.js

@@ -16617,6 +16617,8 @@ var text = string2().check((ctx) => {
     ctx.issues.push({ code: "custom", input: ctx.value, message: "invalid Unicode", path: [] });
 });
 var id = text.regex(uuidPattern, "expected lowercase UUID");
+var idRefPattern = /^[0-9a-f][0-9a-f-]{7,35}$/;
+var idRef = text.regex(idRefPattern, "expected a UUID or an id prefix of 8+ characters");
 var digest = text.regex(digestPattern, "expected lowercase SHA-256 digest");
 var revision = text.regex(uuidPattern, "expected UUID revision");
 var validUtc = (value) => {
@@ -16994,7 +16996,7 @@ var workerReportSchema = object2({
   outcome: _enum(["completed", "failed", "cancelled"]),
   summary: text,
   evidenceIds: array(id),
-  findingIds: array(id)
+  findingIds: array(idRef)
 }).strict();
 var workerSchema = object2({
   assignment: assignmentSchema,
@@ -17240,7 +17242,7 @@ var findingOperations = {
     action: literal("resolve"),
     ...taskId,
     expectedRevision: revision.optional(),
-    findingId: id,
+    findingId: idRef,
     disposition: _enum(["open", "fixed", "dismissed", "deferred"]),
     reason: text,
     evidenceIds: array(id),
@@ -17281,7 +17283,7 @@ var workerOperations = {
     ...taskId,
     expectedRevision: revision.optional(),
     expectedWorkspaceRevision: revision.optional(),
-    workerId: id,
+    workerId: idRef,
     report: workerReportSchema
   }),
   cancel: operation({
@@ -17289,7 +17291,7 @@ var workerOperations = {
     ...taskId,
     ...revisions,
     expectedWorkspaceRevision: revision.optional(),
-    workerId: id,
+    workerId: idRef,
     reason: text
   })
 };
@@ -17339,6 +17341,16 @@ var success = (revisionValue, workspaceRevisionValue, data) => ({
   data
 });
 var failure2 = (code, error, details = {}) => ({ ok: false, schemaVersion: 1, code, error, details });
+function resolveIdRef(kind, ref, ids) {
+  if (ids.includes(ref))
+    return success(null, null, ref);
+  const matches = ids.filter((candidate) => candidate.startsWith(ref));
+  if (matches.length === 1)
+    return success(null, null, matches[0]);
+  if (matches.length === 0)
+    return failure2("not_found", `${kind} not found`);
+  return failure2("invalid_input", `${kind} prefix ${ref} is ambiguous; candidates: ${matches.join(", ")}`);
+}
 function parseOperation(family, input) {
   if (typeof input === "object" && input !== null && "schemaVersion" in input && input.schemaVersion !== SCHEMA_VERSION)
     return failure2("unsupported_version", "unsupported schema version", { operation: family });
@@ -19857,20 +19869,26 @@ class TaskStore {
     return success(null, null, { key: key.data, bound: bound.data });
   }
   taskForWorker(workerId) {
-    if (typeof workerId !== "string" || !validId(workerId))
+    if (typeof workerId !== "string" || !idRefPattern.test(workerId))
       return failure2("invalid_input", "needs a worker id: `workit worker cancel|report <workerId>`");
     const listed = this.listTaskIndex();
     if (!listed.ok)
       return listed;
+    const owners = new Map;
     for (const entry of listed.data) {
       if (entry.status === "closed")
         continue;
       const loaded = this.load(entry.id);
       if (!loaded.ok)
         return loaded;
-      if (loaded.data?.record.workers.some((worker) => worker.id === workerId))
-        return success(null, null, entry.id);
+      for (const worker of loaded.data?.record.workers ?? [])
+        owners.set(worker.id, entry.id);
     }
+    const resolved = resolveIdRef("worker", workerId, [...owners.keys()]);
+    if (resolved.ok)
+      return success(null, null, owners.get(resolved.data) ?? null);
+    if (resolved.code !== "not_found")
+      return resolved;
     return success(null, null, null);
   }
   originTaskEntry() {
@@ -21990,20 +22008,19 @@ var workspaceConfigSchema = object2({
     union([boolean2(), literal("verified")]).optional()
   ]))).passthrough().optional(),
   youtrack: object2({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(),
-  issues: object2({ provider: literal("github").optional(), link_on_pr: boolean2().optional() }).passthrough().optional(),
+  issues: object2({
+    provider: _enum(["github", "gitlab", "youtrack"]).optional(),
+    link: boolean2().optional(),
+    relation: unknown().optional(),
+    backlink: boolean2().optional(),
+    link_on_pr: boolean2().optional()
+  }).passthrough().optional(),
   branchPolicy: workspaceBranchPolicySchema.optional(),
   commitPolicy: workspaceCommitPolicySchema.optional(),
   defaultProfile: nonBlank.optional(),
   profiles: record(nonBlank, workspaceProfileSchema).optional(),
   releaseTracks: record(nonBlank, releaseTrackSchema).optional()
 }).passthrough().superRefine((workspace, context) => {
-  if (workspace.issues && workspace.vcs?.provider !== "github") {
-    context.addIssue({
-      code: "custom",
-      path: ["issues"],
-      message: `GitHub issue linking requires the github provider, got ${workspace.vcs?.provider ?? "unset"}`
-    });
-  }
   if (workspace.defaultProfile !== undefined && !Object.hasOwn(workspace.profiles ?? {}, workspace.defaultProfile)) {
     context.addIssue({
       code: "custom",
@@ -22843,6 +22860,44 @@ var readVcsConfig = () => {
   }
   return { status: "malformed", path: file, config: {}, error: `${file} is not a JSON object` };
 };
+var TRACKERS = new Set(["github", "gitlab", "youtrack"]);
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+var flag = (value) => typeof value === "boolean" ? value : null;
+var text2 = (value) => typeof value === "string" && value.trim() ? value.trim() : null;
+function issueTrackerOf(issues, youtrack) {
+  const iss = asRecord(issues);
+  const yt = asRecord(youtrack);
+  const warnings = [];
+  const named = typeof iss.provider === "string" && TRACKERS.has(iss.provider.toLowerCase()) ? iss.provider.toLowerCase() : null;
+  if (iss.relation !== undefined && iss.relation !== "closes" && iss.relation !== "refs")
+    warnings.push(`issues.relation ${JSON.stringify(iss.relation)} is not closes or refs; read as closes`);
+  for (const key of ["repo", "host"])
+    if (iss[key] !== undefined && text2(iss[key]) === null)
+      warnings.push(`issues.${key} is not a non-empty string; ignored`);
+  const common = {
+    relation: iss.relation === "refs" ? "refs" : "closes",
+    backlink: iss.backlink === true,
+    baseUrl: text2(yt.baseUrl),
+    repo: text2(iss.repo)?.replace(/^\/+|\/+$/gu, "") ?? null,
+    host: text2(iss.host)?.toLowerCase() ?? null,
+    warnings
+  };
+  const legacyGithub = named === "github" && flag(iss.link) === null;
+  if (flag(yt.link_issues) === true && (named === null || legacyGithub))
+    return { provider: "youtrack", link: true, ...common, source: "youtrack.link_issues" };
+  if (named) {
+    const link = flag(iss.link) ?? flag(iss.link_on_pr) ?? (named === "youtrack" ? flag(yt.link_issues) : null) ?? false;
+    return {
+      provider: named,
+      link,
+      ...common,
+      source: flag(iss.link) === null && flag(iss.link_on_pr) !== null ? "issues.link_on_pr" : "issues"
+    };
+  }
+  if (common.baseUrl)
+    return { provider: "youtrack", link: false, ...common, source: "youtrack.baseUrl" };
+  return null;
+}
 var trackSummary = (resolution) => resolution.status === "resolved" ? {
   name: resolution.track?.name ?? null,
   source: resolution.source,
@@ -22863,6 +22918,7 @@ function vcsConfig(mode, cwd, options = {}) {
   const rawProvider = wsVcs.provider ?? (determinateRoot ? remoteProvider(root) : null) ?? cfg.provider ?? null;
   const provider = rawProvider === null || rawProvider === undefined ? null : String(rawProvider).toLowerCase() || null;
   const workspaceDefault = workspaceDefaultTarget(root, cfg.defaultTargetBranch);
+  const issueTracker = issueTrackerOf(wsIssues, wsYt);
   const linkIssues = typeof wsYt.link_issues === "boolean" ? wsYt.link_issues : null;
   const youtrackBaseUrl = typeof wsYt.baseUrl === "string" ? wsYt.baseUrl : null;
   let issuesProvider = null;
@@ -22895,7 +22951,8 @@ function vcsConfig(mode, cwd, options = {}) {
       link_issues: linkIssues,
       youtrack_base_url: youtrackBaseUrl,
       issues_provider: issuesProvider,
-      link_on_pr: linkOnPr
+      link_on_pr: linkOnPr,
+      issue_tracker: issueTracker
     };
   }
   if (cfgStatus === "malformed") {
@@ -22921,7 +22978,8 @@ function vcsConfig(mode, cwd, options = {}) {
     link_issues: linkIssues,
     youtrack_base_url: youtrackBaseUrl,
     issues_provider: issuesProvider,
-    link_on_pr: linkOnPr
+    link_on_pr: linkOnPr,
+    issue_tracker: issueTracker
   };
   if (provider === "gitlab") {
     out.gitlab = {
@@ -23025,7 +23083,12 @@ var MAX_LINE_BYTES = 4096;
 var PASSING = new Set(["verified", "tests-verified", "type-check-only"]);
 var FAILING = new Set(["failed", "blocked"]);
 var STRONG_RESULTS = new Set(["verified", "tests-verified"]);
-var PR_ROW_TYPES = new Set(["pr.created", "pr.status", "pr.merged"]);
+var PR_ROW_TYPES = new Set([
+  "pr.created",
+  "pr.status",
+  "pr.merged",
+  "pr.linked"
+]);
 var err = (code, error, unblock) => ({
   ok: false,
   code,
@@ -25162,7 +25225,7 @@ var RISK = {
 };
 var YES = new Set(["true", "yes", "y", "1", "on"]);
 var NO = new Set(["false", "no", "n", "0", "off", "none"]);
-var flag = (value, unknownAs) => {
+var flag2 = (value, unknownAs) => {
   if (typeof value === "boolean")
     return { ok: true, value };
   if (typeof value === "number" && (value === 0 || value === 1))
@@ -25228,12 +25291,12 @@ function normalizeJudgment(raw, previous) {
       const items = Array.isArray(value) ? value : [value];
       judgment.refs.push(...items.filter((item) => item !== null && item !== "").map(refOf));
     } else {
-      if (name === "needsPlan" && typeof value === "string" && !flag(value, false).ok && value.trim()) {
+      if (name === "needsPlan" && typeof value === "string" && !flag2(value, false).ok && value.trim()) {
         judgment.needsPlan = true;
         judgment.refs.push(refOf(value.trim()));
         continue;
       }
-      const parsed = flag(value, name === "behaviorChange");
+      const parsed = flag2(value, name === "behaviorChange");
       if (parsed.ok)
         judgment[name] = parsed.value;
       else
@@ -25588,6 +25651,8 @@ var TASK_SCOPED_ACTIONS = new Set([
   "worker.cancel",
   "state.export"
 ]);
+var ONLY_OWN_REPORT = "workers can submit only their own report";
+var NO_HELPER_CONTROL = "helpers cannot cancel or control workers";
 var WORKER_ADDRESSED_ACTIONS = new Set(["worker.cancel", "worker.report"]);
 var workerCommand = (taskId, request) => {
   const { action, workerId, reason, report } = request;
@@ -26485,6 +26550,10 @@ class WorkitCore {
     }
     if (helper?.ok)
       return failure2("permission_denied", "helpers cannot resolve findings");
+    const findingRef = resolveIdRef("finding", input.findingId, task.data.findings.map((entry) => entry.id));
+    if (!findingRef.ok)
+      return findingRef;
+    input.findingId = findingRef.data;
     const finding = task.data.findings.find((entry) => entry.id === input.findingId);
     if (!finding)
       return failure2("not_found", "finding not found");
@@ -26636,15 +26705,31 @@ class WorkitCore {
         return changed;
       return success(changed.data.task.revision, changed.data.workspace.revision, changed.data.task.workers.at(-1));
     }
+    const workerRef = resolveIdRef("worker", input.workerId, helperId === null ? task.data.workers.map((candidate) => candidate.id) : [helperId]);
+    if (!workerRef.ok)
+      return helperId === null ? workerRef : failure2("permission_denied", input.action === "report" ? ONLY_OWN_REPORT : NO_HELPER_CONTROL);
+    input.workerId = workerRef.data;
     const entry = task.data.workers.find((candidate) => candidate.id === input.workerId);
     if (!entry)
       return failure2("not_found", "worker not found");
     if (input.action === "report") {
       if (helperId === null || helperId !== input.workerId)
-        return failure2("permission_denied", "workers can submit only their own report");
+        return failure2("permission_denied", ONLY_OWN_REPORT);
       const helper = this.helperEntry(task.data, true, true);
       if (!helper.ok)
         return helper;
+      const ownFindings = task.data.findings.filter((candidate) => candidate.provenance.workerId === helperId).map((candidate) => candidate.id);
+      const reported = [];
+      for (const findingRef of input.report.findingIds) {
+        const found = resolveIdRef("finding", findingRef, ownFindings);
+        if (found.ok)
+          reported.push(found.data);
+        else if (found.code === "not_found")
+          reported.push(findingRef);
+        else
+          return found;
+      }
+      input.report.findingIds = reported;
       const evidence = task.data.evidence.filter((candidate) => input.report.evidenceIds.includes(candidate.id));
       const findings = task.data.findings.filter((candidate) => input.report.findingIds.includes(candidate.id));
       if (evidence.length !== input.report.evidenceIds.length || findings.length !== input.report.findingIds.length)
@@ -26672,7 +26757,7 @@ class WorkitCore {
       return updated ? success(changed.data.task.revision, changed.data.workspace.revision, updated) : failure2("recovery_required", "worker disappeared during report");
     }
     if (helperId !== null)
-      return failure2("permission_denied", "helpers cannot cancel or control workers");
+      return failure2("permission_denied", NO_HELPER_CONTROL);
     if (task.data.status === "closed")
       return failure2("invalid_transition", "closed task cannot cancel workers");
     if (entry.data.state === "stopped") {

package/dist/workit-hook.js

@@ -7548,6 +7548,8 @@ var text = string2().check((ctx) => {
     ctx.issues.push({ code: "custom", input: ctx.value, message: "invalid Unicode", path: [] });
 });
 var id = text.regex(uuidPattern, "expected lowercase UUID");
+var idRefPattern = /^[0-9a-f][0-9a-f-]{7,35}$/;
+var idRef = text.regex(idRefPattern, "expected a UUID or an id prefix of 8+ characters");
 var digest = text.regex(digestPattern, "expected lowercase SHA-256 digest");
 var revision = text.regex(uuidPattern, "expected UUID revision");
 var validUtc = (value) => {
@@ -7925,7 +7927,7 @@ var workerReportSchema = object({
   outcome: _enum(["completed", "failed", "cancelled"]),
   summary: text,
   evidenceIds: array(id),
-  findingIds: array(id)
+  findingIds: array(idRef)
 }).strict();
 var workerSchema = object({
   assignment: assignmentSchema,
@@ -8171,7 +8173,7 @@ var findingOperations = {
     action: literal("resolve"),
     ...taskId,
     expectedRevision: revision.optional(),
-    findingId: id,
+    findingId: idRef,
     disposition: _enum(["open", "fixed", "dismissed", "deferred"]),
     reason: text,
     evidenceIds: array(id),
@@ -8212,7 +8214,7 @@ var workerOperations = {
     ...taskId,
     expectedRevision: revision.optional(),
     expectedWorkspaceRevision: revision.optional(),
-    workerId: id,
+    workerId: idRef,
     report: workerReportSchema
   }),
   cancel: operation({
@@ -8220,7 +8222,7 @@ var workerOperations = {
     ...taskId,
     ...revisions,
     expectedWorkspaceRevision: revision.optional(),
-    workerId: id,
+    workerId: idRef,
     reason: text
   })
 };
@@ -8270,6 +8272,16 @@ var success = (revisionValue, workspaceRevisionValue, data) => ({
   data
 });
 var failure2 = (code, error, details = {}) => ({ ok: false, schemaVersion: 1, code, error, details });
+function resolveIdRef(kind, ref, ids) {
+  if (ids.includes(ref))
+    return success(null, null, ref);
+  const matches = ids.filter((candidate) => candidate.startsWith(ref));
+  if (matches.length === 1)
+    return success(null, null, matches[0]);
+  if (matches.length === 0)
+    return failure2("not_found", `${kind} not found`);
+  return failure2("invalid_input", `${kind} prefix ${ref} is ambiguous; candidates: ${matches.join(", ")}`);
+}
 function parseOperation(family, input) {
   if (typeof input === "object" && input !== null && "schemaVersion" in input && input.schemaVersion !== SCHEMA_VERSION)
     return failure2("unsupported_version", "unsupported schema version", { operation: family });
@@ -9362,20 +9374,19 @@ var workspaceConfigSchema = object({
     union([boolean2(), literal("verified")]).optional()
   ]))).passthrough().optional(),
   youtrack: object({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(),
-  issues: object({ provider: literal("github").optional(), link_on_pr: boolean2().optional() }).passthrough().optional(),
+  issues: object({
+    provider: _enum(["github", "gitlab", "youtrack"]).optional(),
+    link: boolean2().optional(),
+    relation: unknown().optional(),
+    backlink: boolean2().optional(),
+    link_on_pr: boolean2().optional()
+  }).passthrough().optional(),
   branchPolicy: workspaceBranchPolicySchema.optional(),
   commitPolicy: workspaceCommitPolicySchema.optional(),
   defaultProfile: nonBlank.optional(),
   profiles: record(nonBlank, workspaceProfileSchema).optional(),
   releaseTracks: record(nonBlank, releaseTrackSchema).optional()
 }).passthrough().superRefine((workspace, context) => {
-  if (workspace.issues && workspace.vcs?.provider !== "github") {
-    context.addIssue({
-      code: "custom",
-      path: ["issues"],
-      message: `GitHub issue linking requires the github provider, got ${workspace.vcs?.provider ?? "unset"}`
-    });
-  }
   if (workspace.defaultProfile !== undefined && !Object.hasOwn(workspace.profiles ?? {}, workspace.defaultProfile)) {
     context.addIssue({
       code: "custom",
@@ -10177,6 +10188,44 @@ var readVcsConfig = () => {
   }
   return { status: "malformed", path: file, config: {}, error: `${file} is not a JSON object` };
 };
+var TRACKERS = new Set(["github", "gitlab", "youtrack"]);
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+var flag = (value) => typeof value === "boolean" ? value : null;
+var text2 = (value) => typeof value === "string" && value.trim() ? value.trim() : null;
+function issueTrackerOf(issues, youtrack) {
+  const iss = asRecord(issues);
+  const yt = asRecord(youtrack);
+  const warnings = [];
+  const named = typeof iss.provider === "string" && TRACKERS.has(iss.provider.toLowerCase()) ? iss.provider.toLowerCase() : null;
+  if (iss.relation !== undefined && iss.relation !== "closes" && iss.relation !== "refs")
+    warnings.push(`issues.relation ${JSON.stringify(iss.relation)} is not closes or refs; read as closes`);
+  for (const key of ["repo", "host"])
+    if (iss[key] !== undefined && text2(iss[key]) === null)
+      warnings.push(`issues.${key} is not a non-empty string; ignored`);
+  const common = {
+    relation: iss.relation === "refs" ? "refs" : "closes",
+    backlink: iss.backlink === true,
+    baseUrl: text2(yt.baseUrl),
+    repo: text2(iss.repo)?.replace(/^\/+|\/+$/gu, "") ?? null,
+    host: text2(iss.host)?.toLowerCase() ?? null,
+    warnings
+  };
+  const legacyGithub = named === "github" && flag(iss.link) === null;
+  if (flag(yt.link_issues) === true && (named === null || legacyGithub))
+    return { provider: "youtrack", link: true, ...common, source: "youtrack.link_issues" };
+  if (named) {
+    const link = flag(iss.link) ?? flag(iss.link_on_pr) ?? (named === "youtrack" ? flag(yt.link_issues) : null) ?? false;
+    return {
+      provider: named,
+      link,
+      ...common,
+      source: flag(iss.link) === null && flag(iss.link_on_pr) !== null ? "issues.link_on_pr" : "issues"
+    };
+  }
+  if (common.baseUrl)
+    return { provider: "youtrack", link: false, ...common, source: "youtrack.baseUrl" };
+  return null;
+}
 var trackSummary = (resolution) => resolution.status === "resolved" ? {
   name: resolution.track?.name ?? null,
   source: resolution.source,
@@ -10197,6 +10246,7 @@ function vcsConfig(mode, cwd, options = {}) {
   const rawProvider = wsVcs.provider ?? (determinateRoot ? remoteProvider(root) : null) ?? cfg.provider ?? null;
   const provider = rawProvider === null || rawProvider === undefined ? null : String(rawProvider).toLowerCase() || null;
   const workspaceDefault = workspaceDefaultTarget(root, cfg.defaultTargetBranch);
+  const issueTracker = issueTrackerOf(wsIssues, wsYt);
   const linkIssues = typeof wsYt.link_issues === "boolean" ? wsYt.link_issues : null;
   const youtrackBaseUrl = typeof wsYt.baseUrl === "string" ? wsYt.baseUrl : null;
   let issuesProvider = null;
@@ -10229,7 +10279,8 @@ function vcsConfig(mode, cwd, options = {}) {
       link_issues: linkIssues,
       youtrack_base_url: youtrackBaseUrl,
       issues_provider: issuesProvider,
-      link_on_pr: linkOnPr
+      link_on_pr: linkOnPr,
+      issue_tracker: issueTracker
     };
   }
   if (cfgStatus === "malformed") {
@@ -10255,7 +10306,8 @@ function vcsConfig(mode, cwd, options = {}) {
     link_issues: linkIssues,
     youtrack_base_url: youtrackBaseUrl,
     issues_provider: issuesProvider,
-    link_on_pr: linkOnPr
+    link_on_pr: linkOnPr,
+    issue_tracker: issueTracker
   };
   if (provider === "gitlab") {
     out.gitlab = {
@@ -10414,7 +10466,7 @@ var removeIfEmpty = (dir) => {
 };
 var tokenHash = (token) => createHash6("sha256").update(token).digest("hex");
 function recordIssuedSession(cwd, lead, issued) {
-  const token = randomBytes(18).toString("base64url");
+  const token = randomBytes(18).toString("hex");
   try {
     migrateRepoIssued(cwd);
     const own = hash(issued);
@@ -10485,7 +10537,12 @@ var MAX_LINE_BYTES = 4096;
 var PASSING = new Set(["verified", "tests-verified", "type-check-only"]);
 var FAILING = new Set(["failed", "blocked"]);
 var STRONG_RESULTS = new Set(["verified", "tests-verified"]);
-var PR_ROW_TYPES = new Set(["pr.created", "pr.status", "pr.merged"]);
+var PR_ROW_TYPES = new Set([
+  "pr.created",
+  "pr.status",
+  "pr.merged",
+  "pr.linked"
+]);
 var err = (code, error, unblock) => ({
   ok: false,
   code,
@@ -11966,7 +12023,7 @@ var RISK = {
 };
 var YES = new Set(["true", "yes", "y", "1", "on"]);
 var NO = new Set(["false", "no", "n", "0", "off", "none"]);
-var flag = (value, unknownAs) => {
+var flag2 = (value, unknownAs) => {
   if (typeof value === "boolean")
     return { ok: true, value };
   if (typeof value === "number" && (value === 0 || value === 1))
@@ -12032,12 +12089,12 @@ function normalizeJudgment(raw, previous) {
       const items = Array.isArray(value) ? value : [value];
       judgment.refs.push(...items.filter((item) => item !== null && item !== "").map(refOf));
     } else {
-      if (name === "needsPlan" && typeof value === "string" && !flag(value, false).ok && value.trim()) {
+      if (name === "needsPlan" && typeof value === "string" && !flag2(value, false).ok && value.trim()) {
         judgment.needsPlan = true;
         judgment.refs.push(refOf(value.trim()));
         continue;
       }
-      const parsed = flag(value, name === "behaviorChange");
+      const parsed = flag2(value, name === "behaviorChange");
       if (parsed.ok)
         judgment[name] = parsed.value;
       else
@@ -13631,20 +13688,26 @@ class TaskStore {
     return success(null, null, { key: key.data, bound: bound.data });
   }
   taskForWorker(workerId) {
-    if (typeof workerId !== "string" || !validId(workerId))
+    if (typeof workerId !== "string" || !idRefPattern.test(workerId))
       return failure2("invalid_input", "needs a worker id: `workit worker cancel|report <workerId>`");
     const listed = this.listTaskIndex();
     if (!listed.ok)
       return listed;
+    const owners = new Map;
     for (const entry of listed.data) {
       if (entry.status === "closed")
         continue;
       const loaded = this.load(entry.id);
       if (!loaded.ok)
         return loaded;
-      if (loaded.data?.record.workers.some((worker) => worker.id === workerId))
-        return success(null, null, entry.id);
+      for (const worker of loaded.data?.record.workers ?? [])
+        owners.set(worker.id, entry.id);
     }
+    const resolved = resolveIdRef("worker", workerId, [...owners.keys()]);
+    if (resolved.ok)
+      return success(null, null, owners.get(resolved.data) ?? null);
+    if (resolved.code !== "not_found")
+      return resolved;
     return success(null, null, null);
   }
   originTaskEntry() {
@@ -16270,6 +16333,8 @@ var TASK_SCOPED_ACTIONS = new Set([
   "worker.cancel",
   "state.export"
 ]);
+var ONLY_OWN_REPORT = "workers can submit only their own report";
+var NO_HELPER_CONTROL = "helpers cannot cancel or control workers";
 var WORKER_ADDRESSED_ACTIONS = new Set(["worker.cancel", "worker.report"]);
 var workerCommand = (taskId, request) => {
   const { action, workerId, reason, report } = request;
@@ -17167,6 +17232,10 @@ class WorkitCore {
     }
     if (helper?.ok)
       return failure2("permission_denied", "helpers cannot resolve findings");
+    const findingRef = resolveIdRef("finding", input.findingId, task.data.findings.map((entry) => entry.id));
+    if (!findingRef.ok)
+      return findingRef;
+    input.findingId = findingRef.data;
     const finding = task.data.findings.find((entry) => entry.id === input.findingId);
     if (!finding)
       return failure2("not_found", "finding not found");
@@ -17318,15 +17387,31 @@ class WorkitCore {
         return changed;
       return success(changed.data.task.revision, changed.data.workspace.revision, changed.data.task.workers.at(-1));
     }
+    const workerRef = resolveIdRef("worker", input.workerId, helperId === null ? task.data.workers.map((candidate) => candidate.id) : [helperId]);
+    if (!workerRef.ok)
+      return helperId === null ? workerRef : failure2("permission_denied", input.action === "report" ? ONLY_OWN_REPORT : NO_HELPER_CONTROL);
+    input.workerId = workerRef.data;
     const entry = task.data.workers.find((candidate) => candidate.id === input.workerId);
     if (!entry)
       return failure2("not_found", "worker not found");
     if (input.action === "report") {
       if (helperId === null || helperId !== input.workerId)
-        return failure2("permission_denied", "workers can submit only their own report");
+        return failure2("permission_denied", ONLY_OWN_REPORT);
       const helper = this.helperEntry(task.data, true, true);
       if (!helper.ok)
         return helper;
+      const ownFindings = task.data.findings.filter((candidate) => candidate.provenance.workerId === helperId).map((candidate) => candidate.id);
+      const reported = [];
+      for (const findingRef of input.report.findingIds) {
+        const found = resolveIdRef("finding", findingRef, ownFindings);
+        if (found.ok)
+          reported.push(found.data);
+        else if (found.code === "not_found")
+          reported.push(findingRef);
+        else
+          return found;
+      }
+      input.report.findingIds = reported;
       const evidence = task.data.evidence.filter((candidate) => input.report.evidenceIds.includes(candidate.id));
       const findings = task.data.findings.filter((candidate) => input.report.findingIds.includes(candidate.id));
       if (evidence.length !== input.report.evidenceIds.length || findings.length !== input.report.findingIds.length)
@@ -17354,7 +17439,7 @@ class WorkitCore {
       return updated ? success(changed.data.task.revision, changed.data.workspace.revision, updated) : failure2("recovery_required", "worker disappeared during report");
     }
     if (helperId !== null)
-      return failure2("permission_denied", "helpers cannot cancel or control workers");
+      return failure2("permission_denied", NO_HELPER_CONTROL);
     if (task.data.status === "closed")
       return failure2("invalid_transition", "closed task cannot cancel workers");
     if (entry.data.state === "stopped") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-cursor",
-  "version": "8.14.0",
+  "version": "8.15.0",
   "private": false,
   "description": "Workit Cursor plugin — shared MCP transport, native hooks, and sixteen method skills",
   "keywords": [
@@ -46,8 +46,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-core": "^8.14.0",
-    "@brainervirus/workit-mcp": "^8.14.0"
+    "@brainervirus/workit-core": "^8.15.0",
+    "@brainervirus/workit-mcp": "^8.15.0"
   },
   "engines": {
     "node": ">=24"

package/skills/workit-ship/SKILL.md

@@ -33,8 +33,8 @@ that repeats because the base keeps moving, or after 3 failed fix attempts on
 the same check.
 
 1. **Open.** `workit git push`, then `workit pr create --title "<title>"
-   --body-file <f|->` (idempotent; body: `references/pr-body.md`; edits:
-   `workit pr edit`). A stack: `workit stack plan <bottom> ... <top>`, one
+   --body-file <f|->` plus `--issue <#n|ID>` per issue (`--refs`: no close; idempotent;
+   body: `references/pr-body.md`; edits: `workit pr edit`). A stack: `workit stack plan <bottom> ... <top>`, one
    `workit pr create --base <parent> --fill` per branch, then
    `workit stack sync`. Finish the whole stack before babysitting any PR.
 2. **Read state** with `workit pr status --json`. `REVIEW` alone is a pending