@brainervirus/workit-opencode 7.6.0 → 8.0.0

package/assets/skills/workit-fanout/SKILL.md

@@ -8,60 +8,60 @@ description: Run independent slices in parallel - one worker per isolated worktr
 Fan out only independent slices: disjoint files, no shared mutable state, each
 verifiable alone. Code-coupled work stays with one owner, who fans out after
 the blocking part lands. A worker whose whole job is re-running one command is
-ceremony; do it yourself.
+ceremony; do it yourself. Workit never spawns agents; you do.
 
 1. **Plan the slices** (call the skill tool with `workit-shape`) in a plan file (`references/brief.md`):
-   per slice an id, branch, TIER, the file-scope manifest (SCOPE globs),
-   `owns` for shared files (lockfile, registry, barrels), `dependsOn` only for
-   a real dependency (independent PRs off trunk are the default), and the
-   brief fields. `workit fanout plan <plan.json>` refuses an empty or
-   placeholder (`<goal>`, `TBD`) brief field (exit 2) and two slices that may
-   write one file (exit 3) with a fix: an owner for a shared file, or a
-   dependency that serializes them. Apply it and re-run: refuse to spawn while
-   a field is empty or the plan is refused. Its `waves` say which slices may
-   run together; keep 4-6 in flight.
-2. **Brief each worker** from its slice with the fixed template: GOAL, SCOPE,
-   CONTEXT (pointers, not pasted text), ACCEPTANCE (Given/When/Then), VERIFY
-   (exact commands), TIER, TIMEBOX, SCRATCH, FORBIDDEN, REPORT, STANDING.
-   STANDING is every standing order and user directive so far, pasted
-   verbatim into each spawn and respawn: directives decay across resumes.
-3. **Spawn all workers in one message**, in the background, each in its own
-   worktree: Claude Code's `implementer` agent (first command `workit git
-   branch <branch> --base <base>`); elsewhere `workit fanout worktree create
-   <slice>`, which prints the SCRATCH dir. Refill from `fanout status`.
-4. **Judge liveness by side effects only:** `workit fanout status` (head age,
-   PR, CI, verdict, landed; STUCK past the TIMEBOX, default 30 min). Stop a
-   stuck worker and observe that it exited (a timeout is not proof). Removing
-   a worktree drops its uncommitted changes: `workit fanout worktree release
-   <slice>` records `git status` in the ledger first and refuses them without
-   `--force` (native worktrees: record `git -C <wt> status --short` first).
-   Respawn in `MODE: resume` (brief, directives, last report), same branch.
-   Never two live workers on one branch. Replace at most twice, then re-slice
-   or report the gap. Never chain resumes.
-5. **Verify each slice independently.** A fresh agent that did not write it
-   (Claude Code: the `verifier` agent) runs VERIFY and verify-<app>, then
-   `workit ledger verdict <result> --branch <b> --how "<evidence>"` under the
-   session you started it with (`WORKIT_SESSION_ID=<lead>-v<n>`, set by you,
-   never chosen by the author; Claude Code: the hook names one).
-   A worker's report is a pointer, never evidence.
-6. **Fan in** with `workit fanout check`: out-of-scope files (any file outside
-   it stops the fan-in), and `git merge-tree` conflicts with trunk and between
-   siblings, charged to the slice that lands later. Fix what it names (an
-   out-of-scope edit becomes a follow-up slice) until it exits 0. A slice
-   whose PR merged reads as landed; its dependents stop waiting. Then
-   `workit ledger check --branch <b>` per slice, land in `fanout status` order
-   and release the worktrees you made. Stacks: `workit stack plan <bottom> …
-   <top>` once, then `stack sync` and `land`. Only you touch topology: workers
-   never rebase, retarget or merge. Then ship (call the skill tool with `workit-ship`).
+   per slice an id, branch, TIER, SCOPE globs, `owns` for shared files,
+   `dependsOn` only for a real dependency, and the brief fields. `workit fanout
+   plan <plan.json>` refuses an empty or placeholder brief field (exit 2) and
+   two slices that may write one file (exit 3) with a fix; apply it and re-run:
+   refuse to spawn while a field is empty or the plan is refused. One PR per
+   slice is the default; `"fanIn": "integration"` only when the user wants one
+   PR (`references/orchestration.md`).
+2. **Record standing orders** (`workit ledger standing add "<order>"`): every
+   user directive all workers share. Directives decay across resumes.
+3. **Brief each worker verbatim** with `workit fanout brief <slice>`: plan
+   fields, standing orders, SCRATCH, session id, fan-in rule. Never hand-edit
+   it; change the plan or the standing orders and render again.
+4. **Spawn in a rolling window**, in the background, each in its own worktree:
+   keep 4-6 in flight and refill from `spawnable` in `workit fanout status` as
+   each one finishes. Pick the model from TIER (`references/orchestration.md`).
+   Claude Code: the `implementer` agent; elsewhere first `workit fanout
+   worktree create <slice>`.
+5. **Judge liveness by side effects only:** `workit fanout status` (head age,
+   PR, CI, verdict, landed; STUCK past the TIMEBOX). Stop a stuck worker and
+   observe that it exited (a timeout is not proof). Removing a worktree drops
+   its uncommitted changes: `workit fanout worktree release <slice>` records
+   `git status` in the ledger first and refuses them without `--force`. Never
+   two live workers on one branch.
+6. **Retry once, then escalate.** A stuck or failed slice gets one retry with
+   a fresh brief (`workit fanout brief <slice> --mode resume`, same branch);
+   if that fails too, re-slice it, take it over, or report the gap. Never
+   chain resumes. A hard slice may race instead: N attempts, keep the best
+   verdict (`references/orchestration.md`).
+7. **Verify by the workspace `verification` setting** (`workit grant show`).
+   A report is a pointer, never evidence. `self`: a verifier that wrote none
+   of the slices, or you if you wrote none. `independent` or high risk: a
+   separate verifier session, never yours (doctrine: the ledger only refuses
+   authors). One verifier may take a batch of slices, one verdict per branch
+   (`workit ledger verdict <result> --branch <b> --how "<evidence>"`), in a
+   session never chosen by the author. A review panel on separate models only at high risk.
+8. **Fan in** with `workit fanout check`: out-of-scope files (any file outside
+   it stops the fan-in) and `git merge-tree` conflicts with trunk and between
+   siblings. Fix what it names until it exits 0; a merged slice reads as
+   landed. Then `workit ledger check --branch <b>` per slice, land in `fanout
+   status` order, release the worktrees you made, and `workit ledger standing
+   clear`. Only you touch topology: workers never rebase, retarget or merge,
+   except the integration-tip merge in integration mode. Then ship
+   (call the skill tool with `workit-ship`).
 
 ## Example
 
 Bad brief: "Do the API part and add tests." (no scope, no acceptance, no
 verify command, so nobody can tell when it is done)
 
-Good brief: `references/brief.md` (GOAL: `GET /v1/usage` returns daily run
-counts; SCOPE: `src/routes/usage.ts`, `test/usage.test.ts`; VERIFY:
-`workit check test`; ...).
+Good brief: the output of `workit fanout brief usage-endpoint`
+(`references/brief.md` shows one).
 
 ## Check
 

package/assets/skills/workit-fanout/references/brief.md

@@ -1,8 +1,11 @@
 # Worker brief template
 
-Every field is required. A brief with an empty field is not spawned. Point to
-files and ledger rows instead of pasting their content. Size the slice so the
-worker finishes it in about 150k tokens of context; split a larger one first.
+`workit fanout brief <slice>` renders this brief from the plan, the standing
+orders in force (`workit ledger standing list`) and the slice's scratch dir;
+pass its output verbatim. The template below is what it fills in. Every field
+is required. A brief with an empty field is not spawned. Point to files and
+ledger rows instead of pasting their content. Size the slice so the worker
+finishes it in about 150k tokens of context; split a larger one first.
 
 ```md
 MODE: <new | resume (a replacement continuing an existing branch)>
@@ -16,11 +19,12 @@ VERIFY: <exact commands, e.g. `workit check test`, the verify-<app> feature to d
 TIER: <mundane | standard | hard: how much model the slice needs>
 TIMEBOX: <wall clock or turn budget; past it without a new commit you will be replaced>
 SCRATCH: <your own temp dir: the one `fanout worktree create` printed, else `mktemp -d`; never a shared path>
-FORBIDDEN: <no edits outside SCOPE; no rebase, retarget, merge or force-push; no new dependencies; ...>
+FORBIDDEN: <no edits outside SCOPE; no new dependencies; ...>
+FAN-IN: <one PR per slice: no rebase, retarget, merge or force-push | integration: merge the integration tip before reporting, nothing else>
 REPORT: branch, head SHA, files changed, each VERIFY command with its exit code,
   each ACCEPTANCE line met / not met, rulings you made (`workit ledger ruling`),
   anything out of scope as a follow-up, not a diff.
-STANDING: <the standing orders, verbatim: user preferences and every directive given so far>
+STANDING: <the standing orders, verbatim: `workit ledger standing add` records each one>
   export WORKIT_SESSION_ID=<lead>-w<n>   (set by the lead; a verifier brief gets <lead>-v<n>)
 ```
 
@@ -40,7 +44,8 @@ VERIFY: `workit check test`; verify-api feature "usage"
 TIER: standard
 TIMEBOX: 45 minutes
 SCRATCH: ../app-wt/usage-endpoint/.workit-scratch
-FORBIDDEN: no edits outside SCOPE; no schema migration; no rebase or force-push; no new packages
+FORBIDDEN: no edits outside SCOPE; no schema migration; no new packages
+FAN-IN: one PR per slice. Never rebase, retarget, merge or force-push: the lead owns topology.
 REPORT: as in the template
 STANDING: conventional commits; no comments that restate code; ask nothing, record rulings instead
 ```
@@ -55,7 +60,9 @@ stack); `worktree` defaults to `../<repo>-wt/<id>`. `owns` claims a shared
 file another slice's glob also matches. Globs that match no file yet are compared
 through a sample path. Use `/` as the separator; a backslash only escapes
 literal brackets: `"app/\\[id\\]/page.tsx"`. A `timebox` such as `45 minutes`
-is the slice's STUCK threshold in `workit fanout status`.
+is the slice's STUCK threshold in `workit fanout status`. `"fanIn":
+"integration"` (with an integration branch as `trunk`) is the one-PR mode in
+`orchestration.md`; the default `"prs"` lands one PR per slice.
 
 ```json
 {
@@ -90,7 +97,7 @@ is the slice's STUCK threshold in `workit fanout status`.
 }
 ```
 
-## Worker rules (paste into the brief when the host has no implementer agent)
+## Worker rules (`workit fanout brief` appends them as RULES)
 
 1. First command. `MODE: new`: `workit git branch <branch> --base <base>` (the
    worktree may start on a name that breaks branch policy). `MODE: resume`:

package/assets/skills/workit-fanout/references/orchestration.md

@@ -0,0 +1,117 @@
+# Running a fanout
+
+How the lead picks models, keeps workers flowing, retries, races, verifies
+and fans in. Workit records and checks; the host's own subagents run the work.
+
+## TIER to model
+
+TIER is a field of each slice and of its brief. Map it where the host lets you
+pick a model per spawn; nothing in the workspace config routes it.
+
+| TIER | Claude Code (`model` on the Agent call) | Hosts without a per-spawn model |
+| --- | --- | --- |
+| scouting (read-only search, not a slice) | `haiku` | host default |
+| mundane | `sonnet` | host default |
+| standard | omit it (inherits yours) | host default |
+| hard | omit it (inherits yours); consider a race | host default |
+
+OpenCode takes a subagent's model from its agent config: pick a configured
+agent whose model fits the TIER, else the default. Codex, Cursor and Pi run
+every worker on the host's model, so TIER only sizes the timebox and decides
+whether to race.
+
+## Rolling window
+
+Keep 4-6 workers in flight on Claude Code; elsewhere as many as the host runs
+in the background, never more than 6. Do not wait for a whole wave: when one
+worker finishes (its notification, or a new head or PR in `workit fanout
+status`), verify it, then spawn the next slice from `spawnable` in the same
+status output. A slice whose dependencies landed, or a stacked child whose
+parent is verified, appears there by itself.
+
+## Retry, then escalate
+
+A slice is retried when it is STUCK, its worker exits without meeting
+ACCEPTANCE, or its verdict fails. Stop the worker and observe that it exited.
+Release its worktree: `workit fanout worktree release <slice>` (native
+worktrees: record `git -C <wt> status --short` first). Then spawn one fresh
+worker with `workit fanout brief <slice> --mode resume`: same branch, and the
+brief points at its head and its ledger rows (last report, verdicts,
+rulings). If the retry fails too, escalate instead of a third worker:
+re-slice it smaller (`workit fanout plan` again), take it over yourself, or
+report the gap to the user.
+
+## Race a hard slice
+
+When a hard slice has an uncertain approach and a cheap VERIFY, run 2-3
+attempts at once instead of retrying in series. `workit fanout brief <slice>
+--attempt <n>` gives each attempt its own branch (`<branch>-try<n>`), session
+and scratch dir. Each attempt needs its own worktree: Claude Code's
+`implementer` isolates natively; on other hosts `fanout worktree create` makes
+only the slice's own worktree, so run the attempts one after another there.
+Verify every attempt, keep the one with the best verdict (accepted first,
+then the fewest changed files, then the earliest), point the slice branch at
+it (`git branch <branch> <winner>`), have the verifier record the verdict on
+`<branch>` (same head), and delete the losing attempt branches.
+
+## Verification
+
+Follow the workspace `verification` setting (`workit grant show`); the
+worker never records a verdict on its own work.
+
+- `self` (the default): a verifier that wrote none of the slices records the
+  verdicts. A lead that authored none of the slices may record them in its
+  own session.
+- `independent`, and any slice at high risk: a separate verifier session
+  records them, never the lead's own; at high risk one verifier per slice,
+  plus a review panel (below). This is doctrine, not enforced: the ledger
+  only tells a branch's authors from everyone else, and a lead that wrote
+  none of it counts as independent.
+
+Which session id a verdict carries, per host:
+
+- Claude Code: subagents inherit your `WORKIT_SESSION_ID`, so the
+  SubagentStart hook names each `verifier` and `reviewer` its own session
+  (`<lead>:<agent id>`), passed as `--session`; that one wins over any
+  `<lead>-v<n>` in a brief. An `implementer` uses the session its brief
+  exports for its workit commands.
+- Other hosts: the session the brief sets wins: `export
+  WORKIT_SESSION_ID=<lead>-w-<slice>` from `workit fanout brief` for a
+  worker, `<lead>-v<n>` (or `--as verifier`) for a verifier you start.
+
+A batch verifier takes several slices on one surface in one session: for
+each branch it checks out the head, runs that slice's VERIFY, and records its
+own `workit ledger verdict <result> --branch <b> --how "<evidence>"`. Every
+verdict is keyed to that branch's head SHA; a slice whose head moves after
+it needs a new one. Batch at most what fits one context, about 4 slices.
+
+## Review panel (high risk only)
+
+At risk=high only, 2-3 fresh reviewers (call the skill tool with `workit-review`), each on a model
+other than the author's (Claude Code: a different `model`), each records
+`workit ledger verdict <result> --kind review --branch <b> --how "<findings>"`.
+Land only when every panel verdict passes. Below high risk a panel costs
+more than it finds.
+
+## Integration-branch fan-in (one PR)
+
+Only when the user wants one PR for the whole fanout:
+
+1. Cut the integration branch (`workit git branch <integration> --base
+   <trunk>`) and plan with `"fanIn": "integration"` and `--trunk
+   <integration>`. Planning refuses integration mode on origin's default
+   branch.
+2. Every brief then tells the worker to merge the integration tip into its
+   branch before reporting (the fast-forward rule). That merge is the only
+   one a worker makes, and only in this mode.
+3. Land each verified slice with `git merge --ff-only <slice-branch>` in the
+   integration checkout. Not a fast-forward (the tip moved since the worker
+   merged)? Resume the worker to merge again; never a merge commit of your own.
+4. `workit fanout check` gates against the integration branch; a slice whose
+   tip is on it reads as landed. When all have landed, ship the integration
+   branch as one PR (call the skill tool with `workit-ship`).
+
+## Stacks
+
+For stacked slices (`dependsOn` one parent): `workit stack plan <bottom> …
+<top>` once, then `workit stack sync` and `workit stack land`.

package/assets/skills/workit-ship/SKILL.md

@@ -51,8 +51,8 @@ the base keeps moving, or after 3 failed fix attempts on the same check.
    flake|infra` per head. Real: reproduce with `workit check`, fix the root
    cause, batch fixes into one push.
 6. **Verified.** After the last push a non-author records a verdict
-   (call the skill tool with `workit-review`). Land only when granted: `workit stack land` (the
-   contiguous verified run from the root) or `workit pr merge`.
+   (call the skill tool with `workit-review`). Land only when granted: `workit stack land` (verified run
+   from the root) or `workit pr merge`; `--unverified --reason` only if user-asked.
 7. **Observe it landed:** `workit verify-delivery pr` or `merge`. After a failed
    verdict or a check red 3+ times, at any endpoint: offer `/wk-retro` in one
    line of the final or stop report; never pause the babysit loop for it.

package/dist/plugin.js

@@ -3,12 +3,12 @@ function define(plugin) {
   return plugin;
 }
 
-// packages/workit-core/src/core.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core.ts
 import { spawnSync as spawnSync12 } from "node:child_process";
 import { existsSync as existsSync7, realpathSync as realpathSync5 } from "node:fs";
 import path19 from "node:path";
 
-// packages/workit-core/src/core/task-contract.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/task-contract.ts
 import { createHash, randomUUID } from "node:crypto";
 
 // node_modules/zod/v4/core/util.js
@@ -7740,7 +7740,7 @@ function refine(fn, _params = {}) {
 function superRefine(fn, params) {
   return _superRefine(fn, params);
 }
-// packages/workit-core/src/core/task-contract.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/task-contract.ts
 var SCHEMA_VERSION = 1;
 var POLICY_VERSION = "1.0.0";
 var OPERATION_FAMILIES = [
@@ -8595,7 +8595,7 @@ function requirementId(input) {
     }
   });
 }
-// packages/workit-core/src/core/operation-input.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/operation-input.ts
 var str = (d, values) => ({
   type: "string",
   ...values ? { enum: values } : {},
@@ -8991,7 +8991,7 @@ function parseAdvertisedOperation(family, input, host) {
     }))
   });
 }
-// packages/workit-core/src/core/task-store.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/task-store.ts
 import { createHash as createHash4, randomUUID as randomUUID3 } from "node:crypto";
 import * as fs7 from "node:fs";
 import path6 from "node:path";
@@ -9597,7 +9597,7 @@ function acquireFileLockSync(targetPath, options) {
     }
   }
 }
-// packages/workit-core/src/core/package-root.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/package-root.ts
 import { existsSync } from "node:fs";
 import path3 from "node:path";
 import { fileURLToPath } from "node:url";
@@ -9616,12 +9616,12 @@ var assetRoot = () => {
   return existsSync(assets) ? assets : root;
 };
 
-// packages/workit-core/src/core/store-lock.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/store-lock.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 import fs5 from "node:fs";
 import { hostname } from "node:os";
 
-// packages/workit-core/src/store/paths.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/store/paths.ts
 import { spawnSync } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
 import fs4 from "node:fs";
@@ -9901,7 +9901,7 @@ var checkoutSlug = (root) => {
   return `${base}-${shortHash(canonical)}`;
 };
 
-// packages/workit-core/src/core/store-lock.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/store-lock.ts
 var metadataLockSchema = object({
   pid: number2().int().nonnegative().safe(),
   processStart: string2().nullable(),
@@ -10032,7 +10032,7 @@ var clearAbandonedReclaimGuard = (lockPath, nowMs = Date.now()) => {
   }
 };
 
-// packages/workit-core/src/store/event-log.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/store/event-log.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import fs6 from "node:fs";
 import path5 from "node:path";
@@ -10192,7 +10192,7 @@ var retryTransient = (run) => {
 };
 var renameWithRetry = (from, to) => retryTransient(() => fs6.renameSync(from, to));
 
-// packages/workit-core/src/store/patch.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/store/patch.ts
 var isPlainObject2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var equal = (left, right) => {
   if (left === right)
@@ -10302,7 +10302,7 @@ var isPatch = (value) => Array.isArray(value) && value.every((op) => {
   return false;
 });
 
-// packages/workit-core/src/store/reduce.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/store/reduce.ts
 import { createHash as createHash3 } from "node:crypto";
 var OPENING_TYPES = new Set([
   "task.opened",
@@ -10433,7 +10433,7 @@ function eventType(before, after) {
   return "task.updated";
 }
 
-// packages/workit-core/src/store/notes.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/store/notes.ts
 var SLOT = Symbol.for("workit.migrationReporter");
 var reportMigration = (report) => {
   try {
@@ -10444,7 +10444,7 @@ var reportMigration = (report) => {
 };
 var migrationReporterInstalled = () => typeof globalThis[SLOT] === "function";
 
-// packages/workit-core/src/core/task-store.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/task-store.ts
 var MIGRATION_PENDING = "workit migration pending";
 var STORE_FORMAT = 3;
 var STORE_MIN_RUNTIME = "3.0.0";
@@ -12080,18 +12080,18 @@ class TaskStore {
     return failure2(recovery ? "recovery_required" : "storage_error", `lock operation failed: ${String(error)}`, { path: lockPath });
   }
 }
-// packages/workit-core/src/core/workers.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/workers.ts
 var UNCERTAIN_WORKER_STATES = ["dispatching", "running", "cancelling", "unknown"];
 var isUncertainWorker = (state) => UNCERTAIN_WORKER_STATES.includes(state);
 var workerBlocksTransition = (transition, state) => transition === "pause" ? false : isUncertainWorker(state);
 
-// packages/workit-core/src/core/task-evaluation.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/task-evaluation.ts
 import { createHash as createHash7 } from "node:crypto";
 import * as fs11 from "node:fs";
 import { spawnSync as spawnSync6 } from "node:child_process";
 import path11 from "node:path";
 
-// packages/workit-core/src/check-config.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/check-config.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
 import fs8 from "node:fs";
 import path7 from "node:path";
@@ -12296,7 +12296,7 @@ function checkCommand(args, version, onPath = workitAvailable()) {
   return onPath ? `workit check ${args}` : `npx -y @brainervirus/workit-cli@${version} check ${args}`;
 }
 
-// packages/workit-core/src/git/rev.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/git/rev.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import fs9 from "node:fs";
@@ -12477,11 +12477,11 @@ function pushRemoteName(cwd, branch) {
   return remotes.length === 1 ? remotes[0] : null;
 }
 
-// packages/workit-core/src/core/policy/derive.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/policy/derive.ts
 import { existsSync as existsSync3 } from "node:fs";
 import path10 from "node:path";
 
-// packages/workit-core/src/ledger.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/ledger.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
 import { createHash as createHash6, randomBytes as randomBytes2 } from "node:crypto";
 import fs10 from "node:fs";
@@ -12832,7 +12832,7 @@ function checkVerdicts(cwd, branch, rows) {
 }
 var OBSERVED_ONLY = new Set(["check", ...PR_ROW_TYPES]);
 
-// packages/workit-core/src/core/policy/derive.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/policy/derive.ts
 var RULES = {
   test: "check:test",
   self: "verdict:self",
@@ -13031,7 +13031,7 @@ function writeBlockers(task, root) {
   });
 }
 
-// packages/workit-core/src/core/task-evaluation.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/task-evaluation.ts
 var digestBytes = (value) => createHash7("sha256").update(value).digest("hex");
 var inside = (root, candidate) => candidate === root || candidate.startsWith(`${root}${path11.sep}`);
 var relative = (root, candidate) => path11.relative(root, candidate).split(path11.sep).join("/") || ".";
@@ -13697,7 +13697,7 @@ function evaluateClosure(requestedOutcome, view) {
   });
 }
 
-// packages/workit-core/src/core/methods.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/methods.ts
 var METHODS = {
   "workit-shape": { dimensions: ["challenge", "decisions", "artifacts", "continuity"] },
   "workit-bdd": { dimensions: ["testing"] },
@@ -13805,7 +13805,7 @@ Skills: load the skill, never act from memory of it (slash aliases /wk-<name>).
 - architecture, deepen modules (user-invoked; offer it): workit-architecture
 `.trim();
 
-// packages/workit-core/src/core/task-context.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/task-context.ts
 function reconcileResume(view, observations = []) {
   if (observations.length > 0)
     return failure2("permission_denied", "worker observations require native host verification");
@@ -13919,10 +13919,10 @@ var exportDigest = (bundle) => sha256({
   sourceWorkspaceId: bundle.sourceWorkspaceId,
   task: bundle.task
 });
-// packages/workit-core/src/core/branch.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/branch.ts
 import { createHash as createHash10 } from "node:crypto";
 
-// packages/workit-core/src/core/git.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/git.ts
 import { execFileSync } from "node:child_process";
 var run = (cwd, args) => {
   try {
@@ -13990,7 +13990,7 @@ var gitContext = (workspaceRoot, paths = []) => {
   };
 };
 
-// packages/workit-core/src/core/config.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/config.ts
 import {
   copyFileSync as copyFileSync2,
   cpSync as cpSync2,
@@ -14003,7 +14003,7 @@ import {
 import os2 from "node:os";
 import path12 from "node:path";
 
-// packages/workit-core/src/core/boundary.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/boundary.ts
 import { statSync as statSync2 } from "node:fs";
 var EVENT = {
   initialization: "initialization",
@@ -14039,7 +14039,7 @@ var changedSourcesSinceLoad = (marker) => {
   return changed;
 };
 
-// packages/workit-core/src/core/config.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/config.ts
 var diagnosticLogger;
 var PRESETS = {
   gitflow: {
@@ -14214,7 +14214,7 @@ var resolveCommitPolicy = (config, workspace) => {
   return config.commitPolicy ?? { preset: "conventional" };
 };
 
-// packages/workit-core/src/core/workspaces.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/workspaces.ts
 import { createHash as createHash8 } from "node:crypto";
 import { readFileSync as readFileSync4, realpathSync as realpathSync3 } from "node:fs";
 import path13 from "node:path";
@@ -14623,12 +14623,12 @@ function workspaceDefaultTarget(cwd, globalDefault) {
   return String(ws?.vcs?.defaultTargetBranch ?? (hasWorkspacePolicy ? policyDefault : globalDefault ?? policyDefault) ?? "develop");
 }
 
-// packages/workit-core/src/core/vcs-config.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/vcs-config.ts
 import fs12 from "node:fs";
 import path14 from "node:path";
 import { spawnSync as spawnSync8 } from "node:child_process";
 
-// packages/workit-core/src/core/release-tracks.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/release-tracks.ts
 import { createHash as createHash9 } from "node:crypto";
 import { spawnSync as spawnSync7 } from "node:child_process";
 class ReleaseTrackError extends Error {
@@ -15026,7 +15026,7 @@ function resolveTrackFor(cwd, options) {
   return resolution;
 }
 
-// packages/workit-core/src/core/vcs-config.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/vcs-config.ts
 var workspacesPath = () => path14.join(configDir(), "workspaces.json");
 var vcsCwd = (cwd) => cwd ?? process.env.WORKFLOW_WORKSPACE_ROOT ?? process.cwd();
 var remoteProvider = (cwd) => {
@@ -15308,7 +15308,7 @@ function mergedPrStyle(limit = 6, cwd) {
   };
 }
 
-// packages/workit-core/src/core/branch.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/branch.ts
 var withReleaseTracks = (workspaceRoot, policy) => {
   const read = workspaceReleaseTracks(workspaceRoot);
   if (read.error)
@@ -15401,7 +15401,7 @@ var validateBranchNameFor = (workspaceRoot, name) => {
   }
 };
 
-// packages/workit-core/src/core/route-intent.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/route-intent.ts
 var shellBranchTarget = (command) => {
   if (!command.trim() || /[\r\n;&|<>`'"$()\\*?{}~!#]/u.test(command) || command.includes("[") || command.includes("]"))
     return null;
@@ -15416,10 +15416,10 @@ var shellBranchPolicyViolation = (root, command) => {
   const target = shellBranchTarget(command);
   return target === null ? null : validateBranchNameFor(root, target);
 };
-// packages/workit-core/src/core/task-engine.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/task-engine.ts
 import { realpathSync as realpathSync4 } from "node:fs";
 
-// packages/workit-core/src/core/policy-resolver.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/policy-resolver.ts
 function resolvePolicy(input) {
   const ids = input.constraints.map((constraint) => constraint.id);
   if (new Set(ids).size !== ids.length)
@@ -15475,7 +15475,7 @@ function diffPolicy(previous, next, reason, now) {
   return parsed.data;
 }
 
-// packages/workit-core/src/core/policy/judgment.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/policy/judgment.ts
 var isObject6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var squash = (key) => key.toLowerCase().replace(/[_-]/g, "");
 var ALIASES = {
@@ -15599,11 +15599,11 @@ function normalizeJudgment(raw, previous) {
   return success(null, null, { judgment: parsed.data, ignored, legacy });
 }
 
-// packages/workit-core/src/autonomy.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/autonomy.ts
 import os3 from "node:os";
 import path15 from "node:path";
 
-// packages/workit-core/src/core/safe-write.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/safe-write.ts
 import {
   closeSync as closeSync2,
   fchmodSync,
@@ -15626,7 +15626,7 @@ function writeFileExclusive(file, content, mode) {
   }
 }
 
-// packages/workit-core/src/autonomy.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/autonomy.ts
 var accountHome = () => {
   try {
     return os3.userInfo().homedir;
@@ -15761,7 +15761,7 @@ function resolveAutonomy(cwd) {
 var suggested = (kind) => kind === "merge" ? "verified" : "true";
 var grantHint = (workspace, kind) => `ask the user to run, in their own terminal: workit grant set ${workspace ?? "<workspace>"} ${kind}=${suggested(kind)}`;
 
-// packages/workit-core/src/core/task-engine.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/task-engine.ts
 var workspaceVerification = (root) => {
   try {
     return resolveAutonomy(root).verification;
@@ -17346,7 +17346,7 @@ class WorkitCore {
     return this.summary(changed.data.task);
   }
 }
-// packages/workit-core/src/core/repo-context.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/repo-context.ts
 import { spawnSync as spawnSync9 } from "node:child_process";
 import { existsSync as existsSync6, readFileSync as readFileSync5, readdirSync as readdirSync4 } from "node:fs";
 import path16 from "node:path";
@@ -17816,20 +17816,20 @@ function releaseNotesContext(root, rangeOrTag) {
   return { stdout, stderr: "", exitCode: 0, cwd };
 }
 
-// packages/workit-core/src/core/tracker-issues.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/tracker-issues.ts
 import { spawnSync as spawnSync11 } from "node:child_process";
 
-// packages/workit-core/src/core/pr-create.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/pr-create.ts
 import fs13 from "node:fs";
 import path17 from "node:path";
 import { spawnSync as spawnSync10 } from "node:child_process";
-// packages/workit-core/src/forge/pr-body.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/forge/pr-body.ts
 function parseGhIssue(value) {
   const m = /issues\/(\d+)/.exec(value);
   return m ? m[1] : String(value).trim().replace(/^#/, "");
 }
 
-// packages/workit-core/src/core/pr-create.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/pr-create.ts
 function whichOnPath(tool) {
   const names = process.platform === "win32" ? [tool, `${tool}.exe`, `${tool}.cmd`] : [tool];
   for (const dir of (process.env.PATH ?? "").split(path17.delimiter)) {
@@ -17857,7 +17857,7 @@ var pushRemote = (cwd) => {
   return urls.length === 1 ? urls[0] : null;
 };
 
-// packages/workit-core/src/core/tracker-issues.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/tracker-issues.ts
 var repoPathFromRemote = (remote) => {
   let rest = (remote || "").trim().replace(/\/+$/, "");
   if (!rest)
@@ -17955,19 +17955,19 @@ var fetchGitLabIssueBody = async (ref, root, deps = {}) => {
   return tryCliTriple(deps.cli ?? defaultCli("glab", hostingCliAvailable("gitlab")), "glab", ["issue", "view", id, "-R", repoArg, "-F", "json"], root, id, ["iid"], ["description"]);
 };
 
-// packages/workit-core/src/core/youtrack.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/youtrack.ts
 import fs14 from "node:fs";
 import path18 from "node:path";
 
-// packages/workit-core/src/core/templates.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/templates.ts
 var repoRoot2 = assetRoot();
 
-// packages/workit-core/src/core/scripts.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/scripts.ts
 var PLUGIN_ROOT = packageRoot();
 var ASSET_ROOT = assetRoot();
 var resolveWorkspaceRoot = (explicit) => explicit || process.cwd();
 
-// packages/workit-core/src/core/youtrack.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/youtrack.ts
 var ISSUE_RE = /^[A-Z]+-\d+$/;
 var TOKEN_PLACEHOLDER = "YOUR_TOKEN_HERE";
 var youTrackConfigPath = () => process.env.WORKFLOW_YOUTRACK_CONFIG ?? path18.join(configDir(), "youtrack.json");
@@ -18294,7 +18294,7 @@ var fetchYouTrackIssueBody = async (issue, creds = youTrackToken, request = youT
   }
 };
 
-// packages/workit-core/src/core/context-read.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/context-read.ts
 var contextReadSchema = object({
   kind: _enum([
     "git",
@@ -18405,7 +18405,7 @@ var readExternalContext = async (root, payload) => {
   }
 };
 
-// packages/workit-core/src/core.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core.ts
 var ok = (data) => ({ ok: true, data, error: null });
 var fail = (error, data = null) => ({
   ok: false,
@@ -18466,7 +18466,7 @@ function run2(root, executable, args, env = {}) {
     cwd
   };
 }
-// packages/workit-core/src/hooks/descriptor.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/descriptor.ts
 var support = (descriptor, axis) => {
   if (axis.startsWith("event:"))
     return descriptor.events[axis.slice("event:".length)].support;
@@ -18490,7 +18490,7 @@ var capabilitiesFor = (descriptor, observed = {}) => descriptor.capabilities.map
     refs: rule.refs.map((handle) => ({ kind: "host", host: descriptor.host, handle }))
   };
 });
-// packages/workit-core/src/hooks/context.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/context.ts
 import path20 from "node:path";
 var MIGRATION_PENDING_NOTE = "workit migration pending — run `workit task status`";
 var migrationPending = (result) => !result.ok && result.code === "needs_input" && (result.error ?? "").startsWith(MIGRATION_PENDING);
@@ -18587,12 +18587,12 @@ function entryCompactContext(store, entry, session, context) {
     cache.delete(cache.keys().next().value);
   return compact.data;
 }
-// packages/workit-core/src/hooks/policy.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/policy.ts
 var shellPolicy = (cwd, command) => {
   const policy = shellBranchPolicyViolation(cwd, command);
   return policy && !policy.ok ? { kind: "deny", reason: `branch_policy_denied: ${policy.error}`, unblock: null } : { kind: "none" };
 };
-// packages/workit-core/src/hooks/write-gate.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/write-gate.ts
 import { realpathSync as realpathSync6 } from "node:fs";
 import path21 from "node:path";
 var NONE2 = { kind: "none" };
@@ -18853,7 +18853,7 @@ function writeGate(cwd, paths) {
     return NONE2;
   }
 }
-// packages/workit-core/src/hooks/hosts/fields.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/hosts/fields.ts
 var SHELLS = new Set(["sh", "bash", "zsh", "dash", "pwsh", "powershell", "cmd"]);
 var WRITE_TOOLS = new Set([
   "write",
@@ -18874,24 +18874,24 @@ var WRITE_TOOLS = new Set([
   "editfile",
   "writefile"
 ]);
-// packages/workit-core/src/hooks/handle.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/handle.ts
 var offered = new Set;
 var CLAUDE_JUDGES = new Set(["workit:verifier", "workit:reviewer"]);
-// packages/workit-core/src/hooks/hosts/claude-code.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/hosts/claude-code.ts
 var SOURCES = new Set(["startup", "resume", "clear", "compact", "fork"]);
 var SHELL_TOOLS = new Set(["Bash", "PowerShell"]);
 var CONTEXT_EVENTS = new Set(["SessionStart", "UserPromptSubmit", "SubagentStart"]);
 
-// packages/workit-core/src/hooks/hosts/codex.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/hosts/codex.ts
 var SHELL_TOOLS2 = new Set(["bash", "unified-exec"]);
 var SOURCES2 = new Set(["startup", "resume", "clear", "compact"]);
 
-// packages/workit-core/src/hooks/hosts/cursor.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/hosts/cursor.ts
 var BLOCKING = new Set(["preToolUse", "beforeShellExecution", "subagentStart"]);
 
-// packages/workit-core/src/hooks/run.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/run.ts
 if (false) {}
-// packages/workit-core/src/hooks/hosts/opencode.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/hooks/hosts/opencode.ts
 var OPENCODE_DESCRIPTOR = {
   host: "opencode",
   label: "OpenCode",
@@ -18960,7 +18960,7 @@ var OPENCODE_DESCRIPTOR = {
 // packages/workit-opencode/src/shared/init-apply.ts
 import path26 from "node:path";
 
-// packages/workit-core/src/core/gitignore.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/gitignore.ts
 import { existsSync as existsSync8, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "node:fs";
 import path22 from "node:path";
 var GITIGNORE_ENTRIES = [
@@ -19008,7 +19008,7 @@ var ensureProjectGitignore = (workspaceRoot, confirmed) => {
   return { ok: true, path: file, added };
 };
 
-// packages/workit-core/src/core/hygiene.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/hygiene.ts
 import { existsSync as existsSync9, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "node:fs";
 import path23 from "node:path";
 var repoRoot3 = assetRoot();
@@ -19072,17 +19072,17 @@ var ensureHygieneFiles = (root, opts) => {
   return { ok: true, created };
 };
 
-// packages/workit-core/src/core/init.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/init.ts
 import fs15 from "node:fs";
 import path25 from "node:path";
 import { spawnSync as spawnSync14 } from "node:child_process";
 
-// packages/workit-core/src/core/workspace-branch-policy.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/workspace-branch-policy.ts
 import { mkdirSync as mkdirSync4, readFileSync as readFileSync8, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync6 } from "node:fs";
 import path24 from "node:path";
 import { isDeepStrictEqual } from "node:util";
 
-// packages/workit-core/src/core/branch-policy.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/branch-policy.ts
 import { spawnSync as spawnSync13 } from "node:child_process";
 var PREFIXES2 = {
   feature: "feature/*",
@@ -19142,7 +19142,7 @@ var detectBranchPolicy = (workspaceRoot) => {
   };
 };
 
-// packages/workit-core/src/core/workspace-branch-policy.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/workspace-branch-policy.ts
 var readFileSafe = (p) => {
   try {
     return readFileSync8(p, "utf8");
@@ -19244,7 +19244,7 @@ function applyWorkspaceBranchPolicy(opts) {
   };
 }
 
-// packages/workit-core/src/core/init.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/init.ts
 var TOKEN_PLACEHOLDER2 = "YOUR_TOKEN_HERE";
 var readJson = (p) => {
   try {
@@ -20173,7 +20173,7 @@ var evaluateShellPermission = (root, event) => {
 import { existsSync as existsSync11, readFileSync as readFileSync9 } from "node:fs";
 import path30 from "node:path";
 
-// packages/workit-core/src/core/skill-manifests.ts
+// packages/workit-opencode/node_modules/@brainervirus/workit-core/src/core/skill-manifests.ts
 var WORKIT_METHOD_SKILLS = [
   "workit-shape",
   "workit-implement",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-opencode",
-  "version": "7.6.0",
+  "version": "8.0.0",
   "private": false,
   "description": "Workit OpenCode plugin — native tools, adaptive policy, and sixteen method skills",
   "keywords": [
@@ -39,7 +39,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@brainervirus/workit-core": "^7.6.0"
+    "@brainervirus/workit-core": "^8.0.0"
   },
   "devDependencies": {
     "@opencode/plugin": "2.0.18"