@brainervirus/workit-opencode 8.35.0 → 8.36.0

package/assets/skills/workit-implement/SKILL.md

@@ -23,7 +23,7 @@ description: Build a requested change in small verified steps - follow local pat
    (`workit check test`, plus `lint` and `typecheck` when the repo has them),
    not after every edit. Heavy work runs under one machine-wide lease: an ad-hoc
    suite is `workit check --heavy -- <cmd>`, never a hand-made flock; a busy
-   lease waits and names its holder (`workit lock status`).
+   lease waits and names its holder (`workit lock status`). A tool warning is a finding: fix it in this PR in the right layer, or record the false positive with evidence; pre-existing ones get their own PR.
 5. Prove the feature on its real surface with the project's `verify-<app>`
    skill; none yet? Write one (call the skill tool with `workit-verify-app`). Tests show branch behavior,
    not that the feature works. The report carries what you observed: a UI

package/assets/skills/workit-ship/SKILL.md

@@ -49,7 +49,7 @@ the same check. Fix round and recheck both failed: a decider (call the skill too
 5. **CI.** Local gates mirror CI: push and continue; `workit ci wait` once on
    the final head, in the background where the host allows. Red: read `logTail`, classify. Flake or infra: one
    `workit ci rerun --failed --reason flake|infra` per head. Real: reproduce
-   with `workit check`, fix the root cause, batch every fix in one push.
+   with `workit check`, fix the root cause, batch every fix in one push. A tool warning is a finding: fix it in this PR in the right layer, or record the false positive with evidence; pre-existing ones get their own PR.
 6. **Verified.** The lane in `workit pr status` decides: none, no verdict; self, your `--self` verdict; focused or full (or `verification: self|independent`), one non-author verifier per PR after the last push, never per push (call the skill tool with `workit-review`), on Claude Code with the `model` and `effort` of `workit models show --role verifier`. A docs-only push (or test-only under a unit verdict) keeps the verdict (`carried`); `reverify: focused` re-checks only the new diff, reusing green CI; one verdict at a stack's top covers its unchanged lower PRs. Land only when
    granted: `workit stack land` or `workit pr merge`; `--unverified --reason` if user-asked.
 7. **Observe it landed:** `workit verify-delivery pr` or `merge`. After a failed

package/dist/plugin.js

@@ -8497,7 +8497,11 @@ var releaseTrackSchema = object({
     ["requiredChecks", track.requiredChecks ?? []]
   ]) {
     if (new Set(values).size !== values.length) {
-      context.addIssue({ code: "custom", path: [field], message: "entries must be unique" });
+      context.addIssue({
+        code: "custom",
+        path: [field],
+        message: "entries must be unique"
+      });
     }
   }
   if (track.versionSource?.kind === "package-json" && (path4.posix.isAbsolute(track.versionSource.path.replaceAll("\\", "/")) || /^[A-Za-z]:\//u.test(track.versionSource.path.replaceAll("\\", "/")) || track.versionSource.path.replaceAll("\\", "/").split("/").includes(".."))) {
@@ -8530,7 +8534,10 @@ var workspaceConfigSchema = object({
     kind,
     union([boolean2(), literal("verified")]).optional()
   ]))).passthrough().optional(),
-  youtrack: object({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(),
+  youtrack: object({
+    baseUrl: nonBlank.optional(),
+    link_issues: boolean2().optional()
+  }).passthrough().optional(),
   issues: object({
     provider: _enum(["github", "gitlab", "youtrack"]).optional(),
     link: boolean2().optional(),
@@ -8571,9 +8578,16 @@ var workspacesFileSchema = object({
 var workspacesRevision = (contents) => createHash2("sha256").update(contents ?? "<missing>").digest("hex");
 var validateWorkspacesDocument = (parsed, file) => {
   if (!isConfigObject(parsed)) {
-    return { status: "malformed", path: file, entries: [], error: `${file} is not a JSON object` };
+    return {
+      status: "malformed",
+      path: file,
+      entries: [],
+      error: `${file} is not a JSON object`
+    };
   }
-  const validated = workspacesFileSchema.safeParse(parsed, { reportInput: true });
+  const validated = workspacesFileSchema.safeParse(parsed, {
+    reportInput: true
+  });
   if (!validated.success) {
     const detail = validated.error.issues.map((issue) => {
       const field = String(issue.path[issue.path.length - 1] ?? "");
@@ -8613,7 +8627,12 @@ var readWorkspacesResult = (dir = configDir()) => {
     raw = readFileSync2(file, "utf8");
   } catch (error) {
     if (error.code === "ENOENT")
-      return { status: "missing", path: file, entries: [], revision: workspacesRevision(null) };
+      return {
+        status: "missing",
+        path: file,
+        entries: [],
+        revision: workspacesRevision(null)
+      };
     return {
       status: "malformed",
       path: file,
@@ -8633,7 +8652,10 @@ var readWorkspacesResult = (dir = configDir()) => {
       error: `${file} is not valid JSON`
     };
   }
-  return { ...validateWorkspacesDocument(parsed, file), revision: workspacesRevision(raw) };
+  return {
+    ...validateWorkspacesDocument(parsed, file),
+    revision: workspacesRevision(raw)
+  };
 };
 var globToRegExp = (glob) => {
   let out = "";
@@ -8844,7 +8866,10 @@ var matchRuntimeWorkspace = (cwd, dir = configDir()) => {
 };
 var resolveRuntimeReleaseTracks = (cwd) => {
   const matched = matchRuntimeWorkspace(cwd);
-  return matched ? { workspace: matched.selected.name, releaseTracks: matched.selected.releaseTracks } : null;
+  return matched ? {
+    workspace: matched.selected.name,
+    releaseTracks: matched.selected.releaseTracks
+  } : null;
 };
 var inheritedSetting = (cwd, dir, has) => {
   let matched;
@@ -8857,7 +8882,10 @@ var inheritedSetting = (cwd, dir, has) => {
     return null;
   const { selected, matches } = matched;
   const enclosing = matches.filter((entry) => entry !== selected).toSorted((a, b) => globSpecificity(b.glob) - globSpecificity(a.glob));
-  return { workspace: selected.name, source: [selected, ...enclosing].find(has) ?? null };
+  return {
+    workspace: selected.name,
+    source: [selected, ...enclosing].find(has) ?? null
+  };
 };
 var workspaceLiveSessionGuard = (cwd, dir) => inheritedSetting(cwd, dir, (entry) => typeof entry.liveSessionGuard === "boolean")?.source?.liveSessionGuard !== false;
 var TIER_KEYS = new Set(["mundane", "standard", "hard"]);
@@ -14556,7 +14584,12 @@ function readLedger(cwd, options = {}) {
     });
   return {
     ok: true,
-    value: { path: file.value, rows, skipped, integrity: options.integrity ? integrity : null }
+    value: {
+      path: file.value,
+      rows,
+      skipped,
+      integrity: options.integrity ? integrity : null
+    }
   };
 }
 var TAMPER_REASONS = new Set(["hash_mismatch", "broken_link"]);
@@ -14649,7 +14682,10 @@ var renameAwareBranch = (scopeOf, branch) => {
     return scopeOf(own)({ branch: theirs, at: target.at });
   };
 };
-function authorSessions(cwd, rows, branch, range = { base: null, head: null }, scope = branchScope(cwd, branch)) {
+function authorSessions(cwd, rows, branch, range = {
+  base: null,
+  head: null
+}, scope = branchScope(cwd, branch)) {
   const sessions = new Set;
   for (const row of rows) {
     if (!scope(row) || row.type !== "commit.recorded" && row.type !== "task.opened")
@@ -14760,12 +14796,13 @@ function restackCarries(exactIn, rows, branch, from, to) {
     const cwd = exactIn;
     let known = restackExact.get(row);
     if (known === undefined) {
-      known = typeof row.fromBase === "string" && typeof row.toBase === "string" && sameOwnChange(cwd, {
+      const range = typeof row.fromBase === "string" && typeof row.toBase === "string" ? {
         from: fromHead,
         to: head,
         fromBase: row.fromBase,
         toBase: row.toBase
-      });
+      } : null;
+      known = range !== null && (sameOwnChange(cwd, range) || cleanRebase(cwd, range));
       restackExact.set(row, known);
     }
     return known;
@@ -14800,7 +14837,10 @@ function checkVerdicts(cwd, branch, ledgerRows) {
     const cacheKey = `${base}\x00${at}`;
     let key = keyCache.get(cacheKey);
     if (!key) {
-      key = { patchId: patchId(cwd, base, at), diffHash: diffHash(cwd, base, at) };
+      key = {
+        patchId: patchId(cwd, base, at),
+        diffHash: diffHash(cwd, base, at)
+      };
       keyCache.set(cacheKey, key);
     }
     return key;
@@ -14840,7 +14880,10 @@ function checkVerdicts(cwd, branch, ledgerRows) {
   };
   const exactCarry = (row) => FAILING.has(String(row.result)) || exactMatch(row) !== null;
   const keyBasis = (row) => {
-    const basis = verdictBasis(row, { head, ...keyFor(row.base ?? fallbackBase) });
+    const basis = verdictBasis(row, {
+      head,
+      ...keyFor(row.base ?? fallbackBase)
+    });
     return basis === "carried" && !exactCarry(row) ? "stale" : basis;
   };
   const rebaseNote = (row) => row.head && head && row.head !== head && !FAILING.has(String(row.result)) && keyBasis(row) === "carried" && exactMatch(row) === "rebase" ? { rule: "rebase", since: row.head, files: [] } : null;
@@ -14945,7 +14988,11 @@ function checkVerdicts(cwd, branch, ledgerRows) {
   const newestCurrent = verdicts.findLast((entry) => entry.current) ?? verdicts.at(-1) ?? null;
   const failing = verdicts.find((entry) => entry.current && entry.independent && FAILING.has(String(entry.verdict.result)));
   const newestAccepted = verdicts.findLast((entry) => entry.accepted && STRONG_RESULTS.has(String(entry.verdict.result))) ?? null;
-  const accepted = tampered.length ? { accepted: false, verdict: null, reasons: ["ledger_tampered"] } : newestAccepted && !failing ? { accepted: true, verdict: newestAccepted.verdict, reasons: [] } : {
+  const accepted = tampered.length ? {
+    accepted: false,
+    verdict: null,
+    reasons: ["ledger_tampered"]
+  } : newestAccepted && !failing ? { accepted: true, verdict: newestAccepted.verdict, reasons: [] } : {
     accepted: false,
     verdict: failing?.verdict ?? null,
     reasons: failing ? ["failing_verdict"] : !newestCurrent ? ["no_verdict"] : newestCurrent.reasons.length ? newestCurrent.reasons : ["type_check_only"]
@@ -14963,7 +15010,10 @@ function checkVerdicts(cwd, branch, ledgerRows) {
     selfVerdict: accepted.accepted ? null : selfEntry?.verdict ?? null,
     base: newestCurrent?.verdict.base ?? fallbackBase,
     patchId: keyFor(newestCurrent?.verdict.base ?? fallbackBase).patchId,
-    current: { basis: newestCurrent?.basis ?? "none", verdict: newestCurrent?.verdict ?? null },
+    current: {
+      basis: newestCurrent?.basis ?? "none",
+      verdict: newestCurrent?.verdict ?? null
+    },
     carry: carryEntry?.carry ?? null,
     reverify,
     accepted,
@@ -21679,7 +21729,10 @@ function entryCompactContext(store, entry, session, context) {
   const task = entry ? store.readTask(entry.id) : null;
   if (task && !task.ok)
     return null;
-  const freshness = { mode: "signal", current: () => recentSignal(store.root) };
+  const freshness = {
+    mode: "signal",
+    current: () => recentSignal(store.root)
+  };
   const observed = task?.data.evidence.some(isObservedCheck) ?? false;
   const files = (task?.data.decisions ?? []).flatMap((decision) => decision.data.binding.contentRefs.flatMap((ref) => ref.kind === "file" ? [path27.resolve(store.root, ref.path)] : []));
   const observedFiles = filesKey(files);
@@ -24882,12 +24935,22 @@ function gitRestack(cwd, input) {
   if (!dir) {
     const scratch = scratchDir(cwd);
     if (!scratch)
-      return { ok: false, conflict: false, worktree: cwd, error: "no store root" };
+      return {
+        ok: false,
+        conflict: false,
+        worktree: cwd,
+        error: "no store root"
+      };
     fs25.mkdirSync(scratch, { recursive: true });
     dir = path42.join(scratch, `${input.branch.replace(/[^A-Za-z0-9._-]+/gu, "_").slice(0, 40)}-${randomBytes4(4).toString("hex")}`);
     const added = gitRun3(cwd, ["worktree", "add", "-q", dir, input.branch], GIT_TIMEOUTS.worktree);
     if (!added.ok)
-      return { ok: false, conflict: false, worktree: cwd, error: firstLine(added) };
+      return {
+        ok: false,
+        conflict: false,
+        worktree: cwd,
+        error: firstLine(added)
+      };
   }
   const run = gitRun3(dir, [
     "-c",
@@ -24910,7 +24973,12 @@ function gitRestack(cwd, input) {
         error: `git rebase did not finish within ${stackDeps.rebaseTimeoutMs} ms`
       };
     if (rebaseInProgress(dir))
-      return { ok: false, conflict: true, worktree: dir, error: firstLine(run) };
+      return {
+        ok: false,
+        conflict: true,
+        worktree: dir,
+        error: firstLine(run)
+      };
     if (!owner)
       gitRun3(cwd, ["worktree", "remove", "--force", dir]);
     return { ok: false, conflict: false, worktree: dir, error: firstLine(run) };
@@ -24918,7 +24986,12 @@ function gitRestack(cwd, input) {
   if (!owner)
     gitRun3(cwd, ["worktree", "remove", "--force", dir]);
   const head = branchTip(cwd, input.branch);
-  return head ? { ok: true, head } : { ok: false, conflict: false, worktree: dir, error: `${input.branch} vanished` };
+  return head ? { ok: true, head } : {
+    ok: false,
+    conflict: false,
+    worktree: dir,
+    error: `${input.branch} vanished`
+  };
 }
 var firstLine = (run) => (`${run.stderr}
 ${run.stdout}`.split(`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-opencode",
-  "version": "8.35.0",
+  "version": "8.36.0",
   "private": false,
   "description": "Workit OpenCode plugin — native tools, adaptive policy, and sixteen method skills",
   "keywords": [
@@ -39,7 +39,7 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@brainervirus/workit-core": "^8.35.0",
+    "@brainervirus/workit-core": "^8.36.0",
     "@opencode/plugin": "2.0.18"
   },
   "engines": {