@brainervirus/workit-opencode 0.8.8 → 0.8.10

package/dist/plugin.js

@@ -14,7 +14,7 @@ var __export = (target, all) => {
 };
 
 // packages/workit-opencode/src/plugin.ts
-import { existsSync as existsSync21, readdirSync as readdirSync11 } from "node:fs";
+import { existsSync as existsSync21, readdirSync as readdirSync12 } from "node:fs";
 import path39 from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
@@ -348,16 +348,16 @@ ${contract}
 ## Presentation and visual companion overrides
 
 - NEVER offer Superpowers visual companion or open a browser tab for layout comparisons.
-- For UI wireframes and layout options use \`workflow_present_ascii\` with a JSON spec; show the tool output in a fenced \`text\` block.
-- For process or architecture flows use \`workflow_present_flow\`; show the tool output in a fenced \`mermaid\` block.
+- For UI wireframes and layout options use \`workit_present_ascii\` with a JSON spec; show the tool output in a fenced \`text\` block.
+- For process or architecture flows use \`workit_present_flow\`; show the tool output in a fenced \`mermaid\` block.
 - NEVER hand-draw ASCII wireframes or mermaid in chat without calling the tool first.
 - For bounded user choices use OpenCode native \`question\`; never A/B/C option lists in chat prose.
 
 ## Post-plan execution choice
 
-After saving a plan, call \`workflow_docs_validate\` on the spec/plan pair. On failure, stop — do not offer execution.
+After saving a plan, call \`workit_docs_validate\` on the spec/plan pair. On failure, stop — do not offer execution.
 
-On success, use native \`question\` with exactly: Subagent-driven, Inline, Handoff (new session only), Review spec first, Review plan first. Never emit Superpowers “Two execution options” prose. No \`--stay\` in this menu.
+On success, use native \`question\` with exactly: Subagent-driven, Inline, Handoff (new session only), Review spec first, Review plan first, Change model first. Change model first is display-only: ends turn without workit_plan_menu, re-presents menu next turn; real choices call workit_plan_menu immediately before any skill/branch/mutation/handoff. Never emit Superpowers “Two execution options” prose. No \`--stay\` in this menu.
 
 ## Library documentation
 
@@ -374,13 +374,15 @@ var SOURCE_MENU_LABELS = [
   "Inline",
   "Handoff",
   "Review spec first",
-  "Review plan first"
+  "Review plan first",
+  "Change model first"
 ];
 var DESTINATION_MENU_LABELS = [
   "Subagent-driven",
   "Inline",
   "Review spec first",
-  "Review plan first"
+  "Review plan first",
+  "Change model first"
 ];
 var HANDOFF_DESTINATION_MARKER = "<workflow-handoff-destination>true</workflow-handoff-destination>";
 
@@ -390,14 +392,14 @@ var REMINDER_TEXT = `<workflow-contract-reminder>
 - Bounded user choices → call the native \`question\` tool (never A/B/C or 1/2/3 lists in prose).
 - After a plan is approved → native \`question\` menu with exactly: ${SOURCE_MENU_LABELS_DISPLAY.join(", ")}.
 - Tools with \`confirmed\` → call them; never fabricate their result.
-- Before the first \`workflow_spec_approve\`/\`workflow_plan_approve\` (self-review) run the superpowers writing-plans Self-Review checklist: spec coverage (every spec requirement maps to a task), placeholder scan, type consistency; fix findings inline.
+- Before the first \`workit_spec_approve\`/\`workit_plan_approve\` (self-review) run the superpowers writing-plans Self-Review checklist: spec coverage (every spec requirement maps to a task), placeholder scan, type consistency; fix findings inline.
 - Delivering docs → clickable markdown link \`[spec.md](docs/<slug>/spec.md)\` + 3-5 bullet summary.
 </workflow-contract-reminder>`;
 var DESTINATION_REMINDER_TEXT = `<workflow-contract-reminder>
 - Bounded user choices → call the native \`question\` tool (never A/B/C or 1/2/3 lists in prose).
 - This session is a handoff destination: present the post-plan menu with exactly: ${DESTINATION_MENU_LABELS.join(", ")}.
 - Tools with \`confirmed\` → call them; never fabricate their result.
-- Before the first \`workflow_spec_approve\`/\`workflow_plan_approve\` (self-review) run the superpowers writing-plans Self-Review checklist: spec coverage (every spec requirement maps to a task), placeholder scan, type consistency; fix findings inline.
+- Before the first \`workit_spec_approve\`/\`workit_plan_approve\` (self-review) run the superpowers writing-plans Self-Review checklist: spec coverage (every spec requirement maps to a task), placeholder scan, type consistency; fix findings inline.
 - Delivering docs → clickable markdown link \`[spec.md](docs/<slug>/spec.md)\` + 3-5 bullet summary.
 ${HANDOFF_DESTINATION_MARKER}
 </workflow-contract-reminder>`;
@@ -412,6 +414,10 @@ You referenced a doc with a backtick-only path. Deliver docs with a clickable ma
 var SDD_REMINDER_TEXT = `<workflow-sdd-reminder>
 An approved plan is subagent-driven — execute it via \`wk-implement\` / \`task\` delegation. Never implement the approved plan inline in the main session.
 </workflow-sdd-reminder>`;
+var SDD_WORKER_REMINDER_TEXT = `<workflow-sdd-worker>
+You are an authorized delegated worker for an active subagent-driven plan.
+Execute only the supplied task brief: follow TDD (failing test first), land exactly one contiguous non-empty commit range for your task, then report status, commits, and test results to the coordinator. Do not manage coordinator bookkeeping or launch another agent harness.
+</workflow-sdd-worker>`;
 var DOC_RENDER_TEXT = `<workflow-doc-render>
 When delivering a spec or plan, by default render the full markdown content of the doc in chat (headings, tables, mermaid fences preserved) — NOT a backtick-wrapped raw block.
 If the doc exceeds the render threshold (more than 150 lines, over 8KB, or more than 3 mermaid diagrams), deliver only the clickable link \`[spec.md](docs/<slug>/spec.md)\` + a 3-5 bullet summary.
@@ -425,7 +431,7 @@ var CONFIG_GUARD_TEXT = `<workflow-config-guard>
 A tool failed with a config-gap error (\`workflow config missing\`). Never configure without asking — ask with the native \`question\` tool, exactly three options: (1) configure only what's missing (guided, via the /wk-init skill flow for those actions), (2) run the full wizard (\`npx workit init\`), (3) skip — report the final error naming the missing items and how to configure them.
 </workflow-config-guard>`;
 var VERIFICATION_TEXT = `<workflow-verification-rail>
-Skill: verification-before-completion. NO completion claims without fresh verification evidence — run the check command (e.g. \`bun run check\` / \`workflow_verify\`) and show its output before claiming done/fixed/passing. If you haven't run the verification command in this message, you cannot claim it passes.
+Skill: verification-before-completion. NO completion claims without fresh verification evidence — run the check command (e.g. \`bun run check\` / \`workit_verify\`) and show its output before claiming done/fixed/passing. If you haven't run the verification command in this message, you cannot claim it passes.
 </workflow-verification-rail>`;
 var TDD_TEXT = `<workflow-tdd-rail>
 Skill: test-driven-development. NO production code without a failing test first — write the test, watch it fail, then write the minimal code to pass.
@@ -445,12 +451,11 @@ var shouldInjectBrainstorm = (currentText) => !currentText.includes(BRAINSTORM_T
 var shouldInjectDebug = (currentText) => !currentText.includes(DEBUG_TEXT);
 var shouldInjectReviewReception = (currentText) => !currentText.includes(REVIEW_RECEPTION_TEXT);
 var shouldInjectDocRender = (currentText) => !currentText.includes(DOC_RENDER_TEXT);
-var shouldInjectSddReminder = (currentText) => !currentText.includes(SDD_REMINDER_TEXT);
 var shouldInjectConfigGuard = (currentText) => !currentText.includes(CONFIG_GUARD_TEXT);
 var shouldInjectIssueRail = (currentText) => !currentText.includes(ISSUE_RAIL_TEXT);
 
 // packages/workit-core/src/core/detector.ts
-import { existsSync as existsSync16, readdirSync as readdirSync6, readFileSync as readFileSync17 } from "node:fs";
+import { existsSync as existsSync16, readdirSync as readdirSync7, readFileSync as readFileSync17 } from "node:fs";
 import path23 from "node:path";
 
 // packages/workit-core/src/core/init.ts
@@ -2432,7 +2437,7 @@ var branchSetup = ({
     if (dirty) {
       if (stash !== "yes") {
         return {
-          error: "dirty working tree — ask with native question, then call workflow_branch_setup with stash=yes"
+          error: "dirty working tree — ask with native question, then call workit_branch_setup with stash=yes"
         };
       }
       try {
@@ -3358,7 +3363,7 @@ async function postUpdate({
         postedComment: true,
         loggedMinutes: 0,
         error: time.error,
-        retry: "workflow_youtrack_log_time"
+        retry: "workit_youtrack_log_time"
       };
     }
     return { ok: true, issueId, postedComment: true, loggedMinutes: minutes };
@@ -3868,6 +3873,7 @@ import {
   fsyncSync,
   mkdirSync as mkdirSync9,
   openSync,
+  readdirSync as readdirSync6,
   readFileSync as readFileSync16,
   renameSync as renameSync2,
   rmSync as rmSync2,
@@ -4497,7 +4503,7 @@ function sddContext({
     task_count,
     flow: { spec: flow.spec, plan: flow.plan, menu: flow.menu },
     todowrite_required: true,
-    todowrite_hint: "REQUIRED: Call OpenCode todowrite with todos from this result so the native task list shows progress. Before each task set status in_progress; after workflow_sdd_append_progress set it completed."
+    todowrite_hint: "REQUIRED: Call OpenCode todowrite with todos from this result so the native task list shows progress. Before each task set status in_progress; after workit_sdd_append_progress set it completed."
   };
 }
 function sddTaskBrief({
@@ -4582,6 +4588,58 @@ function sddAppendProgress({
   const rel = posix2(path19.relative(contained.base, path_));
   return { ok: true, line: trimmed, progress_path: rel };
 }
+function sddAppendAdvisory({
+  advisories_path,
+  task_id,
+  text,
+  workspace_root
+}) {
+  if (typeof task_id !== "number" || !Number.isSafeInteger(task_id) || task_id <= 0) {
+    return { error: "task_id must be a positive safe integer", code: "advisory_task_invalid" };
+  }
+  if (typeof text !== "string") {
+    return {
+      error: "advisory text must be a string of 1-1000 characters after normalization",
+      code: "advisory_text_invalid"
+    };
+  }
+  if (text.includes("\r") || text.includes(`
+`)) {
+    return {
+      error: "advisory text must be a single line (no CR/LF)",
+      code: "advisory_text_invalid"
+    };
+  }
+  const collapsed = text.trim().replace(/[ \t]+/g, " ");
+  if (collapsed.length === 0 || collapsed.length > 1000) {
+    return {
+      error: "advisory text must be 1-1000 characters after trim and horizontal-space collapse",
+      code: "advisory_text_invalid"
+    };
+  }
+  if (!/^docs\/[^/]+\/sdd\/advisories\.md$/.test(advisories_path)) {
+    return {
+      error: `advisories_path must be docs/<slug>/sdd/advisories.md: ${advisories_path}`,
+      code: "advisory_path_invalid"
+    };
+  }
+  const contained = resolveDocsPath({ workspace_root, path: advisories_path });
+  if (!contained.ok)
+    return { error: contained.error, code: "advisory_path_invalid" };
+  const abs = contained.path;
+  if (existsSync12(abs) && statSync5(abs).isDirectory()) {
+    return {
+      error: `advisory target is a directory: ${advisories_path}`,
+      code: "advisory_target_invalid"
+    };
+  }
+  mkdirSync8(path19.dirname(abs), { recursive: true });
+  const line = `- Task ${task_id}: ${collapsed}
+`;
+  appendFileSync(abs, line, "utf8");
+  const rel = posix2(path19.relative(contained.base, abs));
+  return { ok: true, advisory: collapsed, advisories_path: rel };
+}
 
 // packages/workit-core/src/core/verify-project.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
@@ -4880,7 +4938,7 @@ var CHANGELOG_RULES = `- Use an [Unreleased] section.
 - Entries should be human-readable and user-facing.
 - Do not use raw commit messages as changelog bullets.
 - MERGE into existing ### Category under [Unreleased] — never append a second ### Added / ### Fixed block.
-- Apply with the native workflow_changelog_apply tool only (not hand-edits under Unreleased).
+- Apply with the native workit_changelog_apply tool only (not hand-edits under Unreleased).
 - If Unreleased already has duplicate category headings, normalize_only first.`;
 function changelogContext(root2, range) {
   const cwd = path20.resolve(repoRoot3(root2));
@@ -5193,7 +5251,7 @@ root: ${cwd}
 }
 
 // packages/workit-core/src/core/flow-state.ts
-var COORDINATOR_RECOVERY_TEXT = "A subagent-driven plan is active: coordinator product edits are blocked. " + "Delegate product mutations (task briefs, progress, review packages) to an " + "authenticated delegated worker via `task` / `wk-implement` instead of " + "editing in the coordinator session.";
+var COORDINATOR_RECOVERY_TEXT = "A subagent-driven plan is active: coordinator product edits are blocked. " + "Delegate product mutations to an authenticated delegated worker via `task` / `wk-implement` instead of " + "editing in the coordinator session.";
 var CURSOR_SUBAGENT_UNSUPPORTED_TEXT = "Cursor cannot execute subagent-driven plans: the MCP has no child-session " + "support. Choose Inline, Handoff, or a review option in this session, or " + "run the plan in OpenCode with `wk-implement`.";
 var MENU_CHOICES = [
   "subagent-driven",
@@ -5253,7 +5311,8 @@ var normalizeState = (parsed, slug) => {
     execution: {
       status: execution.status ?? "pending",
       mode: execution.mode ?? null,
-      evidence: execution.evidence ?? null
+      evidence: execution.evidence ?? null,
+      coordinator_session_id: execution.coordinator_session_id ?? null
     },
     handoff_destination: p.handoff_destination ?? false,
     updated_at: p.updated_at ?? Date.now()
@@ -5265,7 +5324,7 @@ var emptyState = (slug) => ({
   spec: { path: "", status: "draft", evidence: null, approved_digest: null },
   plan: { path: "", status: "draft", evidence: null, approved_digest: null },
   menu: { presented: false, chosen: "", evidence: null },
-  execution: { status: "pending", mode: null, evidence: null },
+  execution: { status: "pending", mode: null, evidence: null, coordinator_session_id: null },
   handoff_destination: false,
   updated_at: Date.now()
 });
@@ -5381,6 +5440,12 @@ var validateState = (parsed, slug) => {
   if (execRaw?.evidence !== undefined && !validateEvidenceValue(execRaw.evidence, true)) {
     return { ok: false, error: "flow state execution.evidence has an unsupported shape" };
   }
+  if (execRaw?.coordinator_session_id !== undefined && execRaw.coordinator_session_id !== null && typeof execRaw.coordinator_session_id !== "string") {
+    return {
+      ok: false,
+      error: "flow state execution.coordinator_session_id must be a string or null"
+    };
+  }
   return {
     ok: true,
     state: {
@@ -5396,7 +5461,8 @@ var validateState = (parsed, slug) => {
       execution: {
         status: execRaw?.status ?? "pending",
         mode: execRaw?.mode ?? null,
-        evidence: execRaw?.evidence ?? null
+        evidence: execRaw?.evidence ?? null,
+        coordinator_session_id: execRaw?.coordinator_session_id ?? null
       },
       handoff_destination: parsed.handoff_destination ?? false,
       updated_at: parsed.updated_at ?? Date.now()
@@ -5407,7 +5473,7 @@ var readFlowStrict = (root2, slug) => {
   const file = flowPath(root2, slug);
   const rel = path22.posix.join("docs", slug, "sdd", "flow.json");
   if (!existsSync15(file)) {
-    return err2("flow_not_activated", `flow not activated for ${slug} — run workflow_flow_status first`);
+    return err2("flow_not_activated", `flow not activated for ${slug} — run workit_flow_status first`);
   }
   let text;
   try {
@@ -5533,7 +5599,7 @@ var resetForSpecDrift = (state) => ({
   spec: { ...state.spec, status: "draft", evidence: null, approved_digest: null },
   plan: { ...state.plan, status: "draft", evidence: null, approved_digest: null },
   menu: { presented: false, chosen: "", evidence: null },
-  execution: { status: "pending", mode: null, evidence: null },
+  execution: { status: "pending", mode: null, evidence: null, coordinator_session_id: null },
   handoff_destination: false,
   updated_at: Date.now()
 });
@@ -5576,9 +5642,14 @@ var reconcileState = (root2, slug, state) => {
 var deriveLegacyExecution = (root2, slug, state) => {
   const ledger = ledgerCompletion(root2, slug);
   if (state.plan.status === "approved" && state.menu.chosen === "subagent-driven" && ledger.started && !ledger.complete) {
-    return { status: "active", mode: "subagent-driven", evidence: null };
+    return {
+      status: "active",
+      mode: "subagent-driven",
+      evidence: null,
+      coordinator_session_id: null
+    };
   }
-  return { status: "pending", mode: null, evidence: null };
+  return { status: "pending", mode: null, evidence: null, coordinator_session_id: null };
 };
 var normalizeCompatibility = (root2, slug, parsed, state) => {
   if (!isRecord(parsed) || !("execution" in parsed)) {
@@ -5587,6 +5658,11 @@ var normalizeCompatibility = (root2, slug, parsed, state) => {
     if (derived.status !== current.status || derived.mode !== current.mode) {
       return { state: { ...state, execution: derived, updated_at: Date.now() }, changed: true };
     }
+    return { state, changed: false };
+  }
+  const execRaw = isRecord(parsed.execution) ? parsed.execution : undefined;
+  if (execRaw && !("coordinator_session_id" in execRaw)) {
+    return { state: { ...state, updated_at: Date.now() }, changed: true };
   }
   return { state, changed: false };
 };
@@ -5721,15 +5797,6 @@ var assertMutationWorkspace = (root2, ctx) => {
   }
   return { ok: true };
 };
-var assertCoordinatorBoundary = (ctx, state) => {
-  if (ctx?.role === "coordinator" && state.execution.status === "active" && state.execution.mode === "subagent-driven") {
-    return err2("coordinator_blocked", COORDINATOR_RECOVERY_TEXT);
-  }
-  if (ctx?.role === "delegated" && !ctx.taskIdentity) {
-    return err2("delegated_unauthenticated", "delegated mutations require an authenticated task identity (taskIdentity) — re-run inside the delegated worker session");
-  }
-  return { ok: true };
-};
 var MAX_CLOCK_SKEW_MS = 60000;
 var MAX_RECEIPTS_PER_SESSION = 10;
 var RECEIPT_FRESHNESS_MS = 10 * 60 * 1000;
@@ -5758,19 +5825,49 @@ var isNegativeLabel = (label) => {
     return firstWord.replace(/[^a-z]/g, "") === entry;
   });
 };
+var receiptPurposeForLabel = (label) => {
+  const n = normalizeLabel(label);
+  if (n === "approve spec" || n === "approve spec recommended")
+    return "spec-approval";
+  if (n === "approve plan" || n === "approve plan recommended")
+    return "plan-approval";
+  if (n === "approve")
+    return;
+  if (n === "pause plan")
+    return "plan-pause";
+  if (n === "resume plan")
+    return "plan-resume";
+  if (n === "complete plan")
+    return "plan-complete";
+  const exec = new Set([
+    "subagent driven",
+    "inline",
+    "handoff",
+    "review spec",
+    "review plan",
+    "change model"
+  ]);
+  if (exec.has(n))
+    return "execution-menu";
+  return;
+};
 
 class HostReceiptStore {
   #bySession = new Map;
-  record(sessionId, callID, selectedLabel, recordedAt = Date.now(), question) {
-    const label = selectedLabel.trim();
-    if (!label)
+  record(sessionId, callID, selectedLabel, recordedAt = Date.now(), question = "", purpose) {
+    const trimmed = selectedLabel.trim();
+    if (!trimmed)
       return;
     if (recordedAt > Date.now() + MAX_CLOCK_SKEW_MS)
       return;
+    const derived = purpose ?? receiptPurposeForLabel(selectedLabel);
+    if (derived === undefined)
+      return;
+    const q = question ?? "";
     const queue = this.#bySession.get(sessionId) ?? [];
     if (queue.length >= MAX_RECEIPTS_PER_SESSION)
       queue.shift();
-    queue.push({ sessionId, callID, selectedLabel: label, recordedAt, question });
+    queue.push({ sessionId, callID, selectedLabel, recordedAt, question: q, purpose: derived });
     this.#bySession.set(sessionId, queue);
   }
   count(sessionId) {
@@ -5787,10 +5884,40 @@ class HostReceiptStore {
     if (!queue || queue.length === 0) {
       return err2("receipt_missing", "no host-observed native-question receipt for this session — ask the native " + "`question` tool and have the user answer before calling this tool");
     }
-    const index = queue.length - 1;
+    let index = -1;
+    if (opts.purpose !== undefined) {
+      const top = queue[queue.length - 1];
+      if (top && top.purpose === opts.purpose && isNegativeLabel(top.selectedLabel)) {
+        const filtered = queue.filter((r) => r.purpose !== opts.purpose);
+        if (filtered.length === 0)
+          this.#bySession.delete(sessionId);
+        else
+          this.#bySession.set(sessionId, filtered);
+        return err2("receipt_rejected", `the user's most recent answer (${JSON.stringify(top.selectedLabel)}) is a ` + "negative answer — it cannot authorize an approval; ask the native question again");
+      }
+      for (let i = queue.length - 1;i >= 0; i--) {
+        if (queue[i].purpose === opts.purpose) {
+          index = i;
+          break;
+        }
+      }
+      if (index === -1) {
+        return err2("receipt_missing", `no host-observed receipt for purpose ${JSON.stringify(opts.purpose)} — ask the native question for that purpose`);
+      }
+    } else {
+      index = queue.length - 1;
+    }
     const receipt = queue[index];
     if (isNegativeLabel(receipt.selectedLabel)) {
-      this.#bySession.delete(sessionId);
+      if (opts.purpose !== undefined) {
+        const filtered = queue.filter((r) => r.purpose !== opts.purpose);
+        if (filtered.length === 0)
+          this.#bySession.delete(sessionId);
+        else
+          this.#bySession.set(sessionId, filtered);
+      } else {
+        this.#bySession.delete(sessionId);
+      }
       return err2("receipt_rejected", `the user's most recent answer (${JSON.stringify(receipt.selectedLabel)}) is a ` + "negative answer — it cannot authorize an approval; ask the native question again");
     }
     if (opts.label !== undefined && !sameChoiceLabel(receipt.selectedLabel, opts.label)) {
@@ -5924,7 +6051,7 @@ var prepareFlowState = (root2, slug, opts = {}, ctx) => {
         spec: { path: specPath, status: "draft", evidence: null, approved_digest: null },
         plan: { path: planPath, status: "draft", evidence: null, approved_digest: null },
         menu: { presented: false, chosen: "", evidence: null },
-        execution: { status: "pending", mode: null, evidence: null },
+        execution: { status: "pending", mode: null, evidence: null, coordinator_session_id: null },
         handoff_destination: false,
         updated_at: Date.now()
       });
@@ -6070,13 +6197,24 @@ var recordMenuChoice = (root2, slug, planPath, choice, evidence, ctx) => {
       return err2("recursive_handoff", "this flow is already a handoff destination — a second handoff is rejected");
     }
     const executing = choice === "subagent-driven" || choice === "inline";
+    const coordinatorSessionId = choice === "subagent-driven" && recorded.evidence.host === "opencode" ? ctx?.sessionId ?? null : null;
     return {
       ok: true,
       next: {
         ...state,
         plan: { ...state.plan, path: state.plan.path || `docs/${slug}/plan.md` },
         menu: { presented: true, chosen: choice, evidence: recorded.evidence },
-        execution: executing ? { status: "active", mode: choice, evidence: recorded.evidence } : { status: "pending", mode: null, evidence: recorded.evidence },
+        execution: executing ? {
+          status: "active",
+          mode: choice,
+          evidence: recorded.evidence,
+          coordinator_session_id: coordinatorSessionId
+        } : {
+          status: "pending",
+          mode: null,
+          evidence: recorded.evidence,
+          coordinator_session_id: null
+        },
         updated_at: Date.now()
       }
     };
@@ -6170,7 +6308,7 @@ var completeExecution = (root2, slug, deps) => {
     }
     const next = {
       ...reconciled.state,
-      execution: { ...exec, status: "completed" },
+      execution: { ...exec, status: "completed", coordinator_session_id: null },
       handoff_destination: false,
       updated_at: Date.now()
     };
@@ -6234,7 +6372,7 @@ var slugFromSddPath = (p) => {
   const match = p.split(path22.sep).join("/").match(/^docs\/([^/]+)\/sdd(\/|$|['"])/);
   return match?.[1] ?? "";
 };
-var assertFlowGates = (root2, planPath, opts = {}) => {
+var assertHandoffReady = (root2, planPath) => {
   const doc = resolveDoc(root2, "", planPath, "plan");
   if (!doc.ok)
     return err2("path_invalid", doc.error);
@@ -6244,17 +6382,20 @@ var assertFlowGates = (root2, planPath, opts = {}) => {
     return effective;
   const state = effective.state;
   if (state.spec.status !== "approved") {
-    return err2("spec_not_approved", `spec not approved (status: ${state.spec.status}). Run workflow_spec_approve after the user's approval.`);
+    return err2("spec_not_approved", `spec not approved (status: ${state.spec.status}). Run workit_spec_approve after the user's approval.`);
   }
   if (state.plan.status !== "approved") {
-    return err2("plan_not_approved", `plan not approved (status: ${state.plan.status}). Run workflow_plan_approve after the user's approval.`);
+    return err2("plan_not_approved", `plan not approved (status: ${state.plan.status}). Run workit_plan_approve after the user's approval.`);
   }
-  if (opts.requireMenu && !state.menu.presented) {
-    return err2("menu_not_presented", "post-plan menu not presented. Ask the native question menu (Subagent-driven/Inline/Handoff/Review spec/Review plan) and record the answer with workflow_plan_menu.");
+  if (state.handoff_destination) {
+    return err2("recursive_handoff", "this flow is already a handoff destination — a second handoff is rejected");
+  }
+  if (!state.menu.presented || state.menu.chosen !== "handoff") {
+    return err2("handoff_not_chosen", `handoff requires the execution menu choice "handoff" (chosen: ${JSON.stringify(state.menu.chosen)}, presented: ${state.menu.presented})`);
   }
   return { ok: true };
 };
-var assertProductGates = (root2, slug, opts = {}, ctx) => {
+var assertSddControlGates = (root2, slug, opts = {}, ctx) => {
   const bound = assertMutationWorkspace(root2, ctx);
   if (!bound.ok)
     return bound;
@@ -6263,13 +6404,13 @@ var assertProductGates = (root2, slug, opts = {}, ctx) => {
     return effective;
   const state = effective.state;
   if (state.spec.status !== "approved") {
-    return err2("spec_not_approved", `spec not approved (status: ${state.spec.status}). Run workflow_spec_approve after the user's approval.`);
+    return err2("spec_not_approved", `spec not approved (status: ${state.spec.status}). Run workit_spec_approve after the user's approval.`);
   }
   if (state.plan.status !== "approved") {
-    return err2("plan_not_approved", `plan not approved (status: ${state.plan.status}). Run workflow_plan_approve after the user's approval.`);
+    return err2("plan_not_approved", `plan not approved (status: ${state.plan.status}). Run workit_plan_approve after the user's approval.`);
   }
   if (opts.requireMenu && !state.menu.presented) {
-    return err2("menu_not_presented", "post-plan menu not presented. Record the native question answer with workflow_plan_menu.");
+    return err2("menu_not_presented", "post-plan menu not presented. Record the native question answer with workit_plan_menu.");
   }
   if (opts.requireDocs) {
     const validated = docsValidate({
@@ -6280,9 +6421,12 @@ var assertProductGates = (root2, slug, opts = {}, ctx) => {
     if (validated.ok === false)
       return err2("docs_invalid", validated.error);
   }
-  return assertCoordinatorBoundary(ctx, state);
+  if (state.execution.status === "active" && state.execution.mode === "subagent-driven" && roleFromParentage(ctx?.parentSessionId, state.execution.coordinator_session_id) === "delegated") {
+    return err2("sdd_control_denied", "SDD control metadata is coordinator-owned while a subagent-driven plan is active — delegated workers cannot mutate task briefs, review packages, progress, or advisories");
+  }
+  return { ok: true };
 };
-var roleFromParentage = (parentID) => parentID ? "delegated" : "coordinator";
+var roleFromParentage = (parentID, coordinatorSessionId) => typeof parentID === "string" && parentID !== "" && parentID === coordinatorSessionId ? "delegated" : "coordinator";
 var COORDINATOR_WRITE_TOOLS = [
   "write",
   "edit",
@@ -6297,21 +6441,18 @@ var COORDINATOR_WRITE_TOOLS = [
   "touch",
   "chmod",
   "chown",
-  "workflow_commit",
-  "workflow_pr_create",
-  "workflow_rule_edit",
-  "workflow_template_edit",
-  "workflow_changelog_apply",
-  "workflow_branch_setup",
+  "workit_commit",
+  "workit_pr_create",
+  "workit_rule_edit",
+  "workit_template_edit",
+  "workit_changelog_apply",
+  "workit_branch_setup",
   "workit_init_apply",
-  "workflow_docs_promote",
-  "workflow_docs_layout",
-  "workflow_docs_repo_link",
-  "workflow_sdd_task_brief",
-  "workflow_sdd_review_package",
-  "workflow_sdd_append_progress",
-  "workflow_youtrack_post",
-  "workflow_youtrack_log_time"
+  "workit_docs_promote",
+  "workit_docs_layout",
+  "workit_docs_repo_link",
+  "workit_youtrack_post",
+  "workit_youtrack_log_time"
 ];
 var BASH_READ_TOKENS = new Set([
   "cat",
@@ -6614,10 +6755,34 @@ var isCoordinatorBashAllowed = (command) => {
 };
 var COORDINATOR_SHELL_DENIED_TEXT = "Coordinator shell commands are restricted while a subagent-driven plan is " + "active: only bounded read/test/review commands are allowed (the exact " + "allowlist is in flow-state.ts, isCoordinatorBashAllowed). " + COORDINATOR_RECOVERY_TEXT;
 var subagentDrivenInterception = (input) => {
-  if (input.parentID)
+  const ids = Array.from(new Set((input.activeCoordinatorIds ?? []).filter((id) => typeof id === "string" && id !== "")));
+  const parent = typeof input.parentID === "string" && input.parentID !== "" ? input.parentID : null;
+  const legacyActive = input.active === true;
+  if (!legacyActive && ids.length === 0)
     return { ok: true };
-  if (!input.active)
+  if (parent !== null && ids.length === 1 && ids[0] === parent) {
+    if (input.tool === "bash") {
+      const tokens = (input.command ?? "").split(/[\s'"]+/).filter(Boolean);
+      const launchesOpencode = tokens.some((t) => t.split("/").pop() === "opencode");
+      if (launchesOpencode) {
+        return err2("delegation_lineage_denied", "nested opencode launch is denied while a subagent-driven plan is active");
+      }
+    }
+    if ([
+      "workit_sdd_task_brief",
+      "workit_sdd_review_package",
+      "workit_sdd_append_progress",
+      "workit_sdd_append_advisory"
+    ].includes(input.tool)) {
+      return err2("delegation_lineage_denied", "SDD control metadata is coordinator-owned — workers execute briefs, not bookkeeping");
+    }
     return { ok: true };
+  }
+  if (parent !== null) {
+    if (!legacyActive || ids.length > 0) {
+      return err2("delegation_lineage_denied", "delegated writes require an exact direct-parent match to the activating coordinator");
+    }
+  }
   if (COORDINATOR_WRITE_TOOLS.includes(input.tool)) {
     return err2("coordinator_write_denied", COORDINATOR_RECOVERY_TEXT);
   }
@@ -6628,11 +6793,29 @@ var subagentDrivenInterception = (input) => {
   }
   return { ok: true };
 };
+var findActiveSubagentDrivenContexts = (root2) => {
+  let entries = [];
+  try {
+    entries = readdirSync6(path22.join(root2, "docs"), { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const slug of entries) {
+    try {
+      const state = readFlowState(root2, slug);
+      if (state.execution.status === "active" && state.execution.mode === "subagent-driven") {
+        out.push({ slug, coordinator_session_id: state.execution.coordinator_session_id });
+      }
+    } catch {}
+  }
+  return out;
+};
 
 // packages/workit-core/src/core/detector.ts
 var detectConfigGapError = (text) => text.includes(CONFIG_GAP_MARKER);
 var COMPLETION_CLAIMS = /\b(?:done|fixed|passing|green|complete|all set)\b/i;
-var VERIFICATION_EVIDENCE = /\bbun run check\b|\bworkflow_verify\b|\bbun test\b|\bchecks?\s+pass(?:es|ing)?\b|\btests?\s+pass(?:es|ing)?\b/i;
+var VERIFICATION_EVIDENCE = /\bbun run check\b|\bworkit_verify\b|\bbun test\b|\bchecks?\s+pass(?:es|ing)?\b|\btests?\s+pass(?:es|ing)?\b/i;
 var detectVerificationClaim = (text) => COMPLETION_CLAIMS.test(text) && !VERIFICATION_EVIDENCE.test(text);
 var IMPLEMENTATION_SIGNALS = /\b(?:changed|implemented|implementing|added|refactored|commit(?:ted|s)?|edited)\b/i;
 var FAILING_TEST_WORDS = /\b(?:failing test|test failed|watch it fail|red-green|tdd|test first)\b/i;
@@ -6748,7 +6931,7 @@ var scanActiveSubagentDrivenPlans = (root2) => {
     if (exec.status === "active" && exec.mode === "subagent-driven")
       slugs.push(slug);
   };
-  for (const slug of readdirSync6(docsDir)) {
+  for (const slug of readdirSync7(docsDir)) {
     const file = path23.join(docsDir, slug, "sdd", "flow.json");
     if (!existsSync16(file))
       continue;
@@ -19666,37 +19849,37 @@ function createRepoTools(runtime = defaultRuntime) {
       args: {},
       execute: async (_input, context2) => output(scriptResult(await runtime.toolkitStatus(context2.directory), json2))
     }),
-    workflow_git_context: tool({
+    workit_git_context: tool({
       description: "Read Git branch and change context",
       args: { paths: tool.schema.array(tool.schema.string()).optional() },
       execute: async ({ paths }, context2) => output(ok(gitContext(context2.directory, paths ?? [])))
     }),
-    workflow_verify: tool({
+    workit_verify: tool({
       description: "Discover and run repository verification",
       args: { dry_run: tool.schema.boolean().optional() },
       execute: async ({ dry_run }, context2) => output(scriptResult(runtime.verifyProject(context2.directory, Boolean(dry_run)), parseVerifyOutput))
     }),
-    workflow_pr_context: tool({
+    workit_pr_context: tool({
       description: "Gather branch-exclusive PR context",
       args: { range: tool.schema.string().optional() },
       execute: async ({ range }, context2) => contextWithRange(context2.directory, runtime.prContext, range, parsePr)
     }),
-    workflow_changelog_context: tool({
+    workit_changelog_context: tool({
       description: "Gather changelog context",
       args: { range: tool.schema.string().optional() },
       execute: async ({ range }, context2) => contextWithRange(context2.directory, runtime.changelogContext, range, parseChangelog)
     }),
-    workflow_release_notes_context: tool({
+    workit_release_notes_context: tool({
       description: "Gather release notes for an explicit range",
       args: { range_or_tag: tool.schema.string() },
       execute: async ({ range_or_tag }, context2) => !range_or_tag.trim() ? output(fail("release tag or range required")) : contextWithRange(context2.directory, (root2, value) => runtime.releaseContext(root2, value ?? ""), range_or_tag, parseRelease)
     }),
-    workflow_docs_context: tool({
+    workit_docs_context: tool({
       description: "Gather documentation refresh context",
       args: { range: tool.schema.string().optional() },
       execute: async ({ range }, context2) => output(scriptResult(runtime.docsContext(context2.directory, range), parseDocs))
     }),
-    workflow_changelog_apply: tool({
+    workit_changelog_apply: tool({
       description: "Apply confirmed Keep a Changelog entries to Unreleased",
       args: {
         confirmed: tool.schema.boolean(),
@@ -19724,7 +19907,7 @@ function createRepoTools(runtime = defaultRuntime) {
         })));
       }
     }),
-    workflow_branch_setup: tool({
+    workit_branch_setup: tool({
       description: "Apply a confirmed in-place feature or bugfix branch setup",
       args: {
         confirmed: tool.schema.boolean(),
@@ -19758,7 +19941,7 @@ function createRepoTools(runtime = defaultRuntime) {
         }));
       }
     }),
-    workflow_commit: tool({
+    workit_commit: tool({
       description: "Commit the current index on a feature or bugfix branch without staging files",
       args: { confirmed: tool.schema.boolean(), message: tool.schema.string() },
       execute: async ({ confirmed, message }, context2) => {
@@ -19779,7 +19962,7 @@ function createRepoTools(runtime = defaultRuntime) {
         })));
       }
     }),
-    workflow_pr_create: tool({
+    workit_pr_create: tool({
       description: "Create a confirmed pull or merge request",
       args: {
         confirmed: tool.schema.boolean(),
@@ -19963,15 +20146,21 @@ var opencodeMutationContext = async (context2, client) => {
     const session = await client?.session.get({ path: { id: context2.sessionID } });
     parentID = session?.data?.parentID;
   } catch {}
-  const role = roleFromParentage(parentID);
+  const role = roleFromParentage(parentID, undefined);
   return {
     hostWorkspace: context2.directory,
     role,
     sessionId: context2.sessionID,
+    parentSessionId: parentID,
     taskIdentity: role === "delegated" ? context2.sessionID : undefined
   };
 };
 function createFlowTools(receipts, client) {
+  const purposeForLifecycle = {
+    "Pause plan": "plan-pause",
+    "Resume plan": "plan-resume",
+    "Complete plan": "plan-complete"
+  };
   const lifecycleTool = (action, label, description) => tool({
     description,
     args: {
@@ -19982,7 +20171,10 @@ function createFlowTools(receipts, client) {
       if ("error" in slugged)
         return output2(fail(slugged.error));
       const slug = slugged.slug;
-      const consumed = receipts.consume(context2.sessionID, { label });
+      const consumed = receipts.consume(context2.sessionID, {
+        purpose: purposeForLifecycle[label],
+        label
+      });
       if (!consumed.ok)
         return output2(fail(consumed.error, { code: consumed.code }));
       const result = transitionExecution(context2.directory, slug, plan_path, action, createOpenCodeEvidence(consumed.receipt), await opencodeMutationContext(context2, client));
@@ -20004,7 +20196,7 @@ function createFlowTools(receipts, client) {
     }
   });
   return {
-    workflow_flow_status: tool({
+    workit_flow_status: tool({
       description: "Read the spec/plan approval flow state for a workflow; on first read it records flow activation and canonical document paths (FG-01)",
       args: {
         plan_path: tool.schema.string().optional(),
@@ -20042,7 +20234,7 @@ function createFlowTools(receipts, client) {
         }
       }
     }),
-    workflow_spec_approve: tool({
+    workit_spec_approve: tool({
       description: "Advance spec status from a host-observed native-question receipt: draft -> approved in a single call. The self-review validation runs automatically inside the transition; only the final approval asks for your confirmation. The receipt is recorded automatically when the user answers the `question` tool; there is no evidence argument (AR-12).",
       args: {
         spec_path: tool.schema.string()
@@ -20052,7 +20244,7 @@ function createFlowTools(receipts, client) {
         if ("error" in slugged)
           return output2(fail(slugged.error));
         const slug = slugged.slug;
-        const consumed = receipts.consume(context2.sessionID);
+        const consumed = receipts.consume(context2.sessionID, { purpose: "spec-approval" });
         if (!consumed.ok)
           return output2(fail(consumed.error, { code: consumed.code }));
         const result = transitionSpec(context2.directory, slug, spec_path, createOpenCodeEvidence(consumed.receipt), await opencodeMutationContext(context2, client));
@@ -20061,7 +20253,7 @@ function createFlowTools(receipts, client) {
         return output2(result.ok ? ok({ spec: spec_path, status, question: consumed.receipt.question }) : fail(result.error, { code: result.code }));
       }
     }),
-    workflow_plan_approve: tool({
+    workit_plan_approve: tool({
       description: "Advance plan status from a host-observed native-question receipt: draft -> approved in a single call. The self-review validation runs automatically inside the transition; only the final approval asks for your confirmation. Requires approved spec. There is no evidence argument (AR-12).",
       args: {
         plan_path: tool.schema.string()
@@ -20071,7 +20263,7 @@ function createFlowTools(receipts, client) {
         if ("error" in slugged)
           return output2(fail(slugged.error));
         const slug = slugged.slug;
-        const consumed = receipts.consume(context2.sessionID);
+        const consumed = receipts.consume(context2.sessionID, { purpose: "plan-approval" });
         if (!consumed.ok)
           return output2(fail(consumed.error, { code: consumed.code }));
         const result = transitionPlan(context2.directory, slug, plan_path, createOpenCodeEvidence(consumed.receipt), await opencodeMutationContext(context2, client));
@@ -20080,7 +20272,7 @@ function createFlowTools(receipts, client) {
         return output2(result.ok ? ok({ plan: plan_path, status, question: consumed.receipt.question }) : fail(result.error, { code: result.code }));
       }
     }),
-    workflow_plan_menu: tool({
+    workit_plan_menu: tool({
       description: "Record the answered post-plan choice menu (called after the native question). The receipt label must match the choice exactly; there is no evidence argument (AR-12).",
       args: {
         plan_path: tool.schema.string(),
@@ -20097,7 +20289,10 @@ function createFlowTools(receipts, client) {
         if ("error" in slugged)
           return output2(fail(slugged.error));
         const slug = slugged.slug;
-        const consumed = receipts.consume(context2.sessionID, { label: choice });
+        const consumed = receipts.consume(context2.sessionID, {
+          purpose: "execution-menu",
+          label: choice
+        });
         if (!consumed.ok)
           return output2(fail(consumed.error, { code: consumed.code }));
         const result = recordMenuChoice(context2.directory, slug, plan_path, choice, createOpenCodeEvidence(consumed.receipt), await opencodeMutationContext(context2, client));
@@ -20107,20 +20302,20 @@ function createFlowTools(receipts, client) {
         }) : fail(result.error, { code: result.code }));
       }
     }),
-    workflow_plan_pause: lifecycleTool("pause", "Pause plan", "Pause a running plan from a host-observed native-question receipt: active -> paused. The receipt label must be exactly `Pause plan`; there is no evidence argument (AR-12). A failed gate (already-paused) spends the receipt — re-answer the native question to retry."),
-    workflow_plan_resume: lifecycleTool("resume", "Resume plan", "Resume a paused plan from a host-observed native-question receipt: paused -> active. The receipt label must be exactly `Resume plan`; there is no evidence argument (AR-12). A failed gate (flow_not_paused) spends the receipt — re-answer the native question to retry."),
-    workflow_plan_complete: lifecycleTool("complete", "Complete plan", "Complete a running plan from a host-observed native-question receipt: active/paused -> completed, after the SDD ledger is complete and repository verification passes. The receipt label must be exactly `Complete plan`; there is no evidence argument (AR-12). A failed gate (execution_incomplete or verification_failed) spends the receipt — re-answer the native question to retry.")
+    workit_plan_pause: lifecycleTool("pause", "Pause plan", "Pause a running plan from a host-observed native-question receipt: active -> paused. The receipt label must be exactly `Pause plan`; there is no evidence argument (AR-12). A failed gate (already-paused) spends the receipt — re-answer the native question to retry."),
+    workit_plan_resume: lifecycleTool("resume", "Resume plan", "Resume a paused plan from a host-observed native-question receipt: paused -> active. The receipt label must be exactly `Resume plan`; there is no evidence argument (AR-12). A failed gate (flow_not_paused) spends the receipt — re-answer the native question to retry."),
+    workit_plan_complete: lifecycleTool("complete", "Complete plan", "Complete a running plan from a host-observed native-question receipt: active/paused -> completed, after the SDD ledger is complete and repository verification passes. The receipt label must be exactly `Complete plan`; there is no evidence argument (AR-12). A failed gate (execution_incomplete or verification_failed) spends the receipt — re-answer the native question to retry.")
   };
 }
 
 // packages/workit-opencode/src/tools/sdd.ts
 var output3 = (value) => JSON.stringify(value, null, 2);
 var requireConfirmed2 = (confirmed) => confirmed === true ? null : output3(fail("confirmed: true required"));
-var gateProductWrite = async (root2, sddPath, context2, client) => {
+var gateSddControl = async (root2, sddPath, context2, client) => {
   const slug = slugFromSddPath(sddPath);
   if (!slug)
     return output3(fail("could not derive slug — expected docs/<slug>/sdd/..."));
-  const gate = assertProductGates(root2, slug, { requireMenu: true, requireDocs: true }, await opencodeMutationContext(context2, client));
+  const gate = assertSddControlGates(root2, slug, { requireMenu: true, requireDocs: true }, await opencodeMutationContext(context2, client));
   if (!gate.ok)
     return output3(fail(gate.error, { code: gate.code }));
   return null;
@@ -20165,7 +20360,7 @@ function createSddTools(state, client) {
     sdd: String(data.sdd_dir ?? "")
   });
   return {
-    workflow_docs_branch: tool({
+    workit_docs_branch: tool({
       description: "Resolve branch for spec/plan authors: keep current feature|bugfix or create from the configured base",
       args: {
         plan_path: tool.schema.string().optional(),
@@ -20181,7 +20376,7 @@ function createSddTools(state, client) {
         });
       })
     }),
-    workflow_docs_validate: tool({
+    workit_docs_validate: tool({
       description: "Hard-fail validate spec/plan headers, link, branch, task order; returns quality findings (hard/warning)",
       args: {
         spec_path: tool.schema.string(),
@@ -20202,7 +20397,7 @@ function createSddTools(state, client) {
         return result;
       })
     }),
-    workflow_plan_tasks: tool({
+    workit_plan_tasks: tool({
       description: "Parse top-level tasks from a workflow plan",
       args: { plan_path: tool.schema.string(), spec_path: tool.schema.string().optional() },
       execute: async ({ plan_path, spec_path }, context2) => invoke(() => {
@@ -20219,7 +20414,7 @@ function createSddTools(state, client) {
         return data;
       })
     }),
-    workflow_resolve_branch: tool({
+    workit_resolve_branch: tool({
       description: "Resolve a branch from repository spec and plan metadata",
       args: { spec_path: tool.schema.string(), plan_path: tool.schema.string() },
       execute: async ({ spec_path, plan_path }, context2) => invoke(() => {
@@ -20228,7 +20423,7 @@ function createSddTools(state, client) {
         return resolveBranch({ spec_path, plan_path, workspace_root: context2.directory });
       })
     }),
-    workflow_sdd_context: tool({
+    workit_sdd_context: tool({
       description: "Resolve the SDD workspace and progress ledger",
       args: {
         plan_path: tool.schema.string().optional(),
@@ -20255,7 +20450,7 @@ function createSddTools(state, client) {
         return data;
       })
     }),
-    workflow_sdd_task_brief: tool({
+    workit_sdd_task_brief: tool({
       description: "Write a confirmed task brief. Delegated status is host-derived from session parentage (child session = worker; root = coordinator, blocked for subagent-driven product edits).",
       args: {
         confirmed: tool.schema.boolean(),
@@ -20267,7 +20462,7 @@ function createSddTools(state, client) {
         const rejected = requireConfirmed2(confirmed);
         if (rejected)
           return rejected;
-        const gated = await gateProductWrite(context2.directory, sdd_dir, context2, client);
+        const gated = await gateSddControl(context2.directory, sdd_dir, context2, client);
         if (gated)
           return gated;
         return invoke(() => {
@@ -20281,7 +20476,7 @@ function createSddTools(state, client) {
         });
       }
     }),
-    workflow_sdd_review_package: tool({
+    workit_sdd_review_package: tool({
       description: "Write a confirmed task review diff. Delegated status is host-derived from session parentage (child session = worker; root = coordinator, blocked for subagent-driven product edits).",
       args: {
         confirmed: tool.schema.boolean(),
@@ -20300,7 +20495,7 @@ function createSddTools(state, client) {
         } catch (error45) {
           return output3(fail(error45 instanceof Error ? error45.message : "workflow operation failed"));
         }
-        const gated = await gateProductWrite(context2.directory, sdd_dir, context2, client);
+        const gated = await gateSddControl(context2.directory, sdd_dir, context2, client);
         if (gated)
           return gated;
         return invoke(() => sddReviewPackage({
@@ -20311,7 +20506,7 @@ function createSddTools(state, client) {
         }));
       }
     }),
-    workflow_sdd_append_progress: tool({
+    workit_sdd_append_progress: tool({
       description: "Append one confirmed validated SDD progress line. Delegated status is host-derived from session parentage (child session = worker; root = coordinator, blocked for subagent-driven product edits).",
       args: {
         confirmed: tool.schema.boolean(),
@@ -20322,7 +20517,7 @@ function createSddTools(state, client) {
         const rejected = requireConfirmed2(confirmed);
         if (rejected)
           return rejected;
-        const gated = await gateProductWrite(context2.directory, progress_path, context2, client);
+        const gated = await gateSddControl(context2.directory, progress_path, context2, client);
         if (gated)
           return gated;
         return invoke(() => {
@@ -20330,6 +20525,32 @@ function createSddTools(state, client) {
           return sddAppendProgress({ progress_path, line, workspace_root: context2.directory });
         });
       }
+    }),
+    workit_sdd_append_advisory: tool({
+      description: "Append a validated advisory line to docs/<slug>/sdd/advisories.md (coordinator-owned).",
+      args: {
+        confirmed: tool.schema.boolean(),
+        advisories_path: tool.schema.string(),
+        task_id: tool.schema.number(),
+        text: tool.schema.string()
+      },
+      execute: async ({ confirmed, advisories_path, task_id, text }, context2) => {
+        const rejected = requireConfirmed2(confirmed);
+        if (rejected)
+          return rejected;
+        const gated = await gateSddControl(context2.directory, advisories_path, context2, client);
+        if (gated)
+          return gated;
+        return invoke(() => {
+          relativePath(context2.directory, advisories_path);
+          return sddAppendAdvisory({
+            advisories_path,
+            task_id,
+            text,
+            workspace_root: context2.directory
+          });
+        });
+      }
     })
   };
 }
@@ -20341,12 +20562,12 @@ import path32 from "node:path";
 import path31 from "node:path";
 
 // packages/workit-core/src/core/handoff-context.ts
-import { existsSync as existsSync18, readFileSync as readFileSync20, readdirSync as readdirSync7, statSync as statSync8 } from "node:fs";
+import { existsSync as existsSync18, readFileSync as readFileSync20, readdirSync as readdirSync8, statSync as statSync8 } from "node:fs";
 import path30 from "node:path";
 var DOC_RE = /docs\/([A-Za-z0-9][A-Za-z0-9._-]*)\/(spec|plan)\.md/g;
 var listMd = (dir) => {
   try {
-    return readdirSync7(dir).filter((f) => f.endsWith(".md")).sort();
+    return readdirSync8(dir).filter((f) => f.endsWith(".md")).sort();
   } catch {
     return [];
   }
@@ -20372,7 +20593,7 @@ var resolveActivePair = (root2) => {
   let best = null;
   let entries = [];
   try {
-    entries = readdirSync7(docsDir);
+    entries = readdirSync8(docsDir);
   } catch {
     return { error: "no pair" };
   }
@@ -20539,7 +20760,7 @@ var idempotentMarkDestination = (root2, slug, planPath) => {
 };
 function createHandoffTools(client, state) {
   return {
-    workflow_handoff_session: tool({
+    workit_handoff_session: tool({
       description: "Create, seed, and select a continuation session; --stay in the message skips selection",
       args: { message: tool.schema.string() },
       execute: async ({ message: userMessage }, context2) => {
@@ -20549,21 +20770,13 @@ function createHandoffTools(client, state) {
         const active = built;
         const slug = slugFromPath(active.plan);
         try {
-          const gate = assertFlowGates(context2.directory, active.plan);
-          if (!gate.ok)
-            return output4(fail(gate.error));
-          const preflight = readEffectiveFlowState(context2.directory, slug);
-          if (!preflight.ok)
-            return output4(fail(preflight.error, { code: preflight.code }));
-          if (preflight.state.handoff_destination) {
-            return output4(fail("this flow is already a handoff destination — a second handoff is rejected", {
-              code: "recursive_handoff"
-            }));
-          }
+          const ready = assertHandoffReady(context2.directory, active.plan);
+          if (!ready.ok)
+            return output4(fail(ready.error, { code: ready.code }));
           state.set(context2.sessionID, { spec: active.spec, plan: active.plan, sdd: active.sdd });
           return output4(await handoffSession(client, {
             directory: context2.directory,
-            title: `Continue ${path32.basename(path32.dirname(active.plan))}`,
+            title: `Workit: ${path32.basename(path32.dirname(active.plan))}`,
             prompt: active.prompt,
             stay: /(?:^|\s)--stay(?:\s|$)/.test(userMessage),
             afterSeed: () => idempotentMarkDestination(context2.directory, slug, active.plan)
@@ -20647,7 +20860,7 @@ async function postUpdate2(input, operations = defaultOperations) {
         postedComment: false,
         loggedMinutes: 0,
         outcome: "not_applied",
-        retry: "workflow_youtrack_post"
+        retry: "workit_youtrack_post"
       });
     unwrap(comment);
   } catch (error45) {
@@ -20673,7 +20886,7 @@ async function postUpdate2(input, operations = defaultOperations) {
           postedComment: true,
           loggedMinutes: 0,
           outcome: "not_applied",
-          retry: "workflow_youtrack_log_time"
+          retry: "workit_youtrack_log_time"
         });
       unwrap(time3);
     } catch (error45) {
@@ -20700,7 +20913,7 @@ async function logTimeUpdate(input, operation = defaultOperations) {
         issueId: input.issueId,
         loggedMinutes: 0,
         outcome: "not_applied",
-        retry: "workflow_youtrack_log_time"
+        retry: "workit_youtrack_log_time"
       });
     return ok(unwrap(value));
   } catch (error45) {
@@ -20777,13 +20990,13 @@ var rejectedTimeInput = (issueId, minutes) => {
     issueId,
     loggedMinutes: 0,
     outcome: "not_applied",
-    retry: "workflow_youtrack_log_time",
-    instructions: "Correct the invalid input, then retry workflow_youtrack_log_time once."
+    retry: "workit_youtrack_log_time",
+    instructions: "Correct the invalid input, then retry workit_youtrack_log_time once."
   })) : null;
 };
 function createYouTrackTools(operations = defaultOperations) {
   return {
-    workflow_youtrack_verify_token: tool({
+    workit_youtrack_verify_token: tool({
       description: "Verify the configured YouTrack token with a read-only request",
       args: {},
       execute: async () => {
@@ -20799,12 +21012,12 @@ function createYouTrackTools(operations = defaultOperations) {
         return invoke2(() => operations.verifyToken(), token);
       }
     }),
-    workflow_youtrack_parse_issue: tool({
+    workit_youtrack_parse_issue: tool({
       description: "Parse an existing YouTrack issue URL or id",
       args: { issue_ref: tool.schema.string() },
       execute: async ({ issue_ref }) => invoke2(() => parseIssueRef(issue_ref))
     }),
-    workflow_youtrack_context: tool({
+    workit_youtrack_context: tool({
       description: "Load YouTrack context for the configured meeting issue or an existing task issue",
       args: {
         mode: tool.schema.enum(["meetings", "task"]).optional(),
@@ -20837,12 +21050,12 @@ function createYouTrackTools(operations = defaultOperations) {
         return invoke2(async () => normalizeContext(await operations.context({ ...input, workspace_root: context2.directory }), input.mode), token);
       }
     }),
-    workflow_youtrack_parse_duration: tool({
+    workit_youtrack_parse_duration: tool({
       description: "Parse duration text into integer minutes",
       args: { text: tool.schema.string() },
       execute: async ({ text }, context2) => invoke2(() => operations.parseDuration(text, context2.directory))
     }),
-    workflow_youtrack_draft: tool({
+    workit_youtrack_draft: tool({
       description: "Build an es-CL update comment without posting it",
       args: {
         issueId: tool.schema.string(),
@@ -20858,7 +21071,7 @@ function createYouTrackTools(operations = defaultOperations) {
       },
       execute: async (input) => invoke2(() => buildDraft(input))
     }),
-    workflow_youtrack_log_time: tool({
+    workit_youtrack_log_time: tool({
       description: "Log confirmed time on an existing YouTrack issue without posting a comment",
       args: {
         confirmed: tool.schema.boolean(),
@@ -20887,7 +21100,7 @@ function createYouTrackTools(operations = defaultOperations) {
         return output5(result.ok ? result : { ...result, error: redact(result.error, token) });
       }
     }),
-    workflow_youtrack_post: tool({
+    workit_youtrack_post: tool({
       description: "Post a confirmed es-CL comment, then optionally log time",
       args: {
         confirmed: tool.schema.boolean(),
@@ -21017,7 +21230,7 @@ function flowDiagram(spec) {
 var output6 = (value) => JSON.stringify(value, null, 2);
 function createPresentTools() {
   return {
-    workflow_present_ascii: tool({
+    workit_present_ascii: tool({
       description: "Render deterministic ASCII UI wireframe from JSON spec",
       args: {
         title: tool.schema.string().optional(),
@@ -21031,7 +21244,7 @@ function createPresentTools() {
         return output6(ok(result.data));
       }
     }),
-    workflow_present_flow: tool({
+    workit_present_flow: tool({
       description: "Render mermaid flowchart from JSON nodes/edges",
       args: {
         title: tool.schema.string().optional(),
@@ -21058,7 +21271,7 @@ function createPresentTools() {
 }
 
 // packages/workit-core/src/core/docs-repo.ts
-import { existsSync as existsSync19, mkdirSync as mkdirSync10, readFileSync as readFileSync22, writeFileSync as writeFileSync12, readdirSync as readdirSync8 } from "node:fs";
+import { existsSync as existsSync19, mkdirSync as mkdirSync10, readFileSync as readFileSync22, writeFileSync as writeFileSync12, readdirSync as readdirSync9 } from "node:fs";
 import { execFileSync as execFileSync5 } from "node:child_process";
 import path35 from "node:path";
 var configPath2 = () => process.env.WORKFLOW_DOCS_REPO_CONFIG ?? path35.join(configDir(), "docs-repo.json");
@@ -21104,7 +21317,7 @@ var listSpecs = (workspaceRoot) => {
   const specs = [];
   const docsDir = path35.join(workspaceRoot, "docs");
   if (existsSync19(docsDir)) {
-    for (const slug of readdirSync8(docsDir)) {
+    for (const slug of readdirSync9(docsDir)) {
       if (slug.startsWith("."))
         continue;
       const spec = path35.posix.join("docs", slug, "spec.md");
@@ -21115,7 +21328,7 @@ var listSpecs = (workspaceRoot) => {
       if (repoPath) {
         const featuresDir = path35.join(repoPath, "features");
         if (existsSync19(featuresDir)) {
-          const match = readdirSync8(featuresDir).find((d) => new RegExp(`^20\\d{2}-\\d{2}-${slug}$`).test(d));
+          const match = readdirSync9(featuresDir).find((d) => new RegExp(`^20\\d{2}-\\d{2}-${slug}$`).test(d));
           if (match) {
             promoted = true;
             target = path35.join(repoPath, "features", match);
@@ -21159,7 +21372,7 @@ var promoteSpec = (workspaceRoot, slug, opts) => {
   const workspaceRootCanonical = resolved.layout.workspace;
   const repoPath = docsRepoPath();
   if (!repoPath)
-    return { ok: false, error: "docs repo not linked — run workflow_docs_repo_link" };
+    return { ok: false, error: "docs repo not linked — run workit_docs_repo_link" };
   const repoValid = validateDocsRepo(repoPath);
   if (!repoValid.ok)
     return { ok: false, error: repoValid.error };
@@ -21207,7 +21420,7 @@ var promoteSpec = (workspaceRoot, slug, opts) => {
   }
   const prefix = monthPrefix();
   const featuresDir = path35.join(repoPath, "features");
-  const existing = existsSync19(featuresDir) ? readdirSync8(featuresDir).find((d) => new RegExp(`^20\\d{2}-\\d{2}-${slug}$`).test(d)) : undefined;
+  const existing = existsSync19(featuresDir) ? readdirSync9(featuresDir).find((d) => new RegExp(`^20\\d{2}-\\d{2}-${slug}$`).test(d)) : undefined;
   const targetDir = path35.join(featuresDir, existing ?? `${prefix}-${slug}`);
   mkdirSync10(targetDir, { recursive: true });
   const files = ["spec.md"];
@@ -21269,7 +21482,7 @@ import {
   existsSync as existsSync20,
   lstatSync as lstatSync2,
   mkdirSync as mkdirSync11,
-  readdirSync as readdirSync9,
+  readdirSync as readdirSync10,
   readFileSync as readFileSync23,
   realpathSync as realpathSync5,
   renameSync as renameSync3,
@@ -21324,7 +21537,7 @@ var detectLegacyDocs = (workspace_root) => {
   const root2 = legacyRoot(workspace_root);
   const raw = [];
   if (existsSync20(root2)) {
-    for (const entry of readdirSync9(root2, { withFileTypes: true })) {
+    for (const entry of readdirSync10(root2, { withFileTypes: true })) {
       const abs = path36.join(root2, entry.name);
       const rel = posix3(path36.relative(workspace_root, abs));
       if (entry.isDirectory()) {
@@ -21466,7 +21679,7 @@ var planTree = (workspace, legacyAbs, legacyRel, destRelRoot, destAbsRoot, legac
   if (visits.has(real))
     return { ok: true };
   visits.add(real);
-  for (const entry of readdirSync9(real, { withFileTypes: true })) {
+  for (const entry of readdirSync10(real, { withFileTypes: true })) {
     const fromAbs = path36.join(real, entry.name);
     const fromRel = posix3(path36.join(legacyRel, entry.name));
     const toRel = posix3(path36.join(destRelRoot, entry.name));
@@ -21656,7 +21869,7 @@ var migrateLegacyDocs = (input) => {
 var output7 = (value) => JSON.stringify(value, null, 2);
 function createDocsRepoTools() {
   return {
-    workflow_docs_layout: tool({
+    workit_docs_layout: tool({
       description: "Canonical docs layout: prepare creates missing docs/ and docs/<slug>/; migrate detects legacy docs/superpowers/ and copies safe pairs after a native Migrate safely / Not now question",
       args: {
         action: tool.schema.enum(["prepare", "migrate"]).optional(),
@@ -21703,7 +21916,7 @@ function createDocsRepoTools() {
         return output7(result.ok ? ok({ layout: result.layout, created: result.created, legacy: result.legacy }) : fail(result.error));
       }
     }),
-    workflow_docs_repo_link: tool({
+    workit_docs_repo_link: tool({
       description: "Link the component docs repo in the toolkit config (validates git repo + features/)",
       args: {
         path: tool.schema.string(),
@@ -21714,7 +21927,7 @@ function createDocsRepoTools() {
         return output7(result.ok ? ok({ path: result.path }) : fail(result.error));
       }
     }),
-    workflow_docs_list: tool({
+    workit_docs_list: tool({
       description: "List local specs (docs/<slug>/spec.md) with docs-repo promotion status",
       args: {},
       execute: async (_input, context2) => {
@@ -21722,7 +21935,7 @@ function createDocsRepoTools() {
         return output7(ok(result));
       }
     }),
-    workflow_docs_promote: tool({
+    workit_docs_promote: tool({
       description: "Promote a spec (+plan) to the linked docs repo features/YYYY-MM-<slug>/ with quality gate",
       args: {
         slug: tool.schema.string(),
@@ -21747,12 +21960,12 @@ function createDocsRepoTools() {
 var output8 = (value) => JSON.stringify(value, null, 2);
 function createTemplateTools() {
   return {
-    workflow_template_list: tool({
+    workit_template_list: tool({
       description: "List editable templates (issue-update, greeting, headers) with their source",
       args: {},
       execute: async () => output8(ok({ templates: listTemplates() }))
     }),
-    workflow_template_edit: tool({
+    workit_template_edit: tool({
       description: "Write an edited template to the toolkit config dir (agent-assisted)",
       args: {
         name: tool.schema.enum(["issue-update", "greeting", "headers"]),
@@ -21771,12 +21984,12 @@ function createTemplateTools() {
 var output9 = (value) => JSON.stringify(value, null, 2);
 function createRuleTools() {
   return {
-    workflow_rule_list: tool({
+    workit_rule_list: tool({
       description: "List canonical rules (config) with platforms and source",
       args: {},
       execute: async () => output9(ok({ rules: listRules() }))
     }),
-    workflow_rule_edit: tool({
+    workit_rule_edit: tool({
       description: "Write a canonical rule to the toolkit config dir (agent-assisted)",
       args: {
         name: tool.schema.string(),
@@ -21796,7 +22009,7 @@ function createRuleTools() {
 
 // packages/workit-opencode/src/tools/doctor.ts
 var createDoctorTool = () => ({
-  workflow_doctor: tool({
+  workit_doctor: tool({
     description: "Run the offline workit doctor and report installation health",
     args: {},
     execute: async (_input, context2) => JSON.stringify(ok(runDoctor({ host: "opencode", cwd: context2.directory })), null, 2)
@@ -21837,7 +22050,7 @@ SDD: ${value.sdd}` : null;
 }
 
 // packages/workit-core/src/core/logger.ts
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync12, readdirSync as readdirSync10, unlinkSync as unlinkSync3 } from "node:fs";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync12, readdirSync as readdirSync11, unlinkSync as unlinkSync3 } from "node:fs";
 import os4 from "node:os";
 import path37 from "node:path";
 var REDACTED = "[REDACTED]";
@@ -21972,7 +22185,7 @@ var dailyFileName = (date5) => {
 };
 var pruneOldFiles = (dir) => {
   try {
-    const files = readdirSync10(dir).filter((name) => DAY_FILE.test(name)).sort().reverse();
+    const files = readdirSync11(dir).filter((name) => DAY_FILE.test(name)).sort().reverse();
     for (const file2 of files.slice(RETAINED_DAYS)) {
       try {
         unlinkSync3(path37.join(dir, file2));
@@ -22139,7 +22352,7 @@ var hasMarkedDestination = (root3) => {
     return false;
   let slugs;
   try {
-    slugs = readdirSync11(docsDir);
+    slugs = readdirSync12(docsDir);
   } catch {
     return false;
   }
@@ -22171,6 +22384,32 @@ var questionAnswerLabel = (result) => {
   const label = first[0];
   return typeof label === "string" ? label : undefined;
 };
+var classifyQuestion = (input, label) => {
+  const args = input;
+  const qs = args?.questions;
+  if (Array.isArray(qs)) {
+    if (qs.length !== 1)
+      return null;
+    const q = qs[0];
+    if (!q || typeof q !== "object")
+      return null;
+    if (q.multiple === true)
+      return null;
+    const opts = q.options;
+    if (Array.isArray(opts) && opts.length === 0 && q.custom === true)
+      return null;
+    if (!Array.isArray(opts) || opts.length === 0)
+      return null;
+    const purpose2 = receiptPurposeForLabel(label);
+    if (purpose2 === undefined)
+      return null;
+    return { purpose: purpose2, questionText: typeof q.question === "string" ? q.question : undefined };
+  }
+  const purpose = receiptPurposeForLabel(label);
+  if (purpose !== undefined)
+    return { purpose, questionText: undefined };
+  return null;
+};
 var plugin = async ({ client, directory }) => {
   openCodeClient = client;
   installUncaughtHandlers();
@@ -22180,6 +22419,17 @@ var plugin = async ({ client, directory }) => {
   setDiagnosticLogger(logger);
   const state = new WorkflowStateStore;
   const receipts = new HostReceiptStore;
+  const authorizedWorkerFor = async (sessionID) => {
+    const ids = findActiveSubagentDrivenContexts(directory).map((c) => c.coordinator_session_id).filter((id) => typeof id === "string" && id !== "");
+    if (ids.length !== 1)
+      return false;
+    try {
+      const session = await client.session.get({ path: { id: sessionID } });
+      return session?.data?.parentID === ids[0];
+    } catch {
+      return false;
+    }
+  };
   return {
     tool: createTools(adaptPluginHandoffClient(client), state, client, receipts),
     "tool.execute.after": async (input, output10) => {
@@ -22188,9 +22438,11 @@ var plugin = async ({ client, directory }) => {
       const label = questionAnswerLabel(output10);
       if (label === undefined)
         return;
-      const args = input.args;
-      const questionText = args?.question ?? args?.title;
-      receipts.record(input.sessionID, input.callID, label, Date.now(), questionText);
+      const classified = classifyQuestion(input.args, label);
+      if (!classified)
+        return;
+      const questionText = classified.questionText ?? input.args?.question ?? input.args?.title;
+      receipts.record(input.sessionID, input.callID, label, Date.now(), questionText, classified.purpose);
     },
     "tool.execute.before": async (input, output10) => {
       if (input.tool !== "bash" && !COORDINATOR_WRITE_TOOLS.includes(input.tool))
@@ -22202,12 +22454,12 @@ var plugin = async ({ client, directory }) => {
         parentID = session?.data?.parentID;
         sessionDirectory = session?.data?.directory;
       } catch {}
-      const active = findActiveSubagentDrivenPlans(sessionDirectory ?? directory).length > 0;
+      const activeCoordinatorIds = findActiveSubagentDrivenContexts(sessionDirectory ?? directory).map((c) => c.coordinator_session_id).filter((id) => typeof id === "string" && id !== "");
       const decision = subagentDrivenInterception({
         tool: input.tool,
         command: output10.args?.command,
         parentID,
-        active
+        activeCoordinatorIds
       });
       if (!decision.ok)
         throw new Error(decision.error);
@@ -22260,7 +22512,8 @@ var plugin = async ({ client, directory }) => {
           const firstAnchor = firstUser.parts.find((part) => part.type === "text") ?? firstUser.parts[0];
           const firstText = firstUser.parts.filter((part) => part.type === "text").map((part) => part.text ?? "").join(`
 `);
-          const bootstrap = getWorkitBootstrap();
+          const workerAuthorized = await authorizedWorkerFor(firstAnchor.sessionID);
+          const bootstrap = workerAuthorized ? null : getWorkitBootstrap();
           if (bootstrap && !firstText.includes("<workit-contract>")) {
             firstUser.parts.unshift({
               id: firstAnchor.id,
@@ -22269,6 +22522,14 @@ var plugin = async ({ client, directory }) => {
               type: "text",
               text: bootstrap
             });
+          } else if (workerAuthorized && !firstText.includes("workflow-sdd-worker")) {
+            firstUser.parts.unshift({
+              id: firstAnchor.id,
+              sessionID: firstAnchor.sessionID,
+              messageID: firstAnchor.messageID,
+              type: "text",
+              text: SDD_WORKER_REMINDER_TEXT
+            });
           }
         }
         const anchor = currentUser.parts.find((part) => part.type === "text") ?? currentUser.parts[0];
@@ -22303,8 +22564,12 @@ var plugin = async ({ client, directory }) => {
           }
         }
         const activePlans = findActiveSubagentDrivenPlans(directory);
-        if (activePlans.length > 0 && shouldInjectSddReminder(currentText)) {
-          currentUser.parts.unshift(makePart(SDD_REMINDER_TEXT, "sdd"));
+        if (activePlans.length > 0) {
+          const workerAuthorized = await authorizedWorkerFor(anchor.sessionID);
+          const sddText = workerAuthorized ? SDD_WORKER_REMINDER_TEXT : SDD_REMINDER_TEXT;
+          if (!currentText.includes(sddText)) {
+            currentUser.parts.unshift(makePart(sddText, "sdd"));
+          }
         }
         if (detectConfigGapError(assistantText) && shouldInjectConfigGuard(currentText)) {
           currentUser.parts.unshift(makePart(CONFIG_GUARD_TEXT, "cg"));