@brainervirus/workit-pi 7.3.0 → 7.4.0

package/dist/workit.js

@@ -13743,7 +13743,7 @@ function selectMethods(policy, capabilities) {
 }
 var invariantBootstrap = () => `
 Workit is optional coordination and proof tooling around the host: you decide
-what and whether, the \`workit\` CLI does how and records what it observed.
+what and whether, the CLI does how and records what it observed.
 Native host allow/ask/deny, sandbox and org rules stay authoritative. Never
 switch paths to evade a denial, never claim enforcement a host cannot provide,
 and never fabricate an approval or verdict. A question answer is not
@@ -13764,8 +13764,8 @@ Autonomy contract:
   never edit workspaces.json or route around a grant_required.
 - Ask only for a product or preference choice, or for authority you lack, with
   your recommended answer. Facts are yours: read, run or prototype.
-- Label claims measured (you ran it this session and saw the result),
-  inferred, or guess. Prose is a note: only a configured check the CLI ran
+- Label claims measured (you ran it this session and saw it), inferred, or
+  guess. Prose is a note: only a configured check the CLI ran
   (\`workit check <name>\`) satisfies a gate; an ad-hoc
   \`workit check -- <cmd>\` never does.
 - Author is not verifier: your own verdict is \`--self\` (after an observed
@@ -13777,23 +13777,21 @@ Autonomy contract:
   reconcile every requested item and observe it (\`workit verify-delivery\`).
 
 CLI first: if a step has one right answer, use the \`workit\` verb instead of
-hand-running git, gh or glab: check, git, pr, ci, stack, verify-delivery,
-ledger, handoff, test-audit (\`workit help <verb>\`; without \`workit\` on
-PATH, \`npx -y @brainervirus/workit-cli\`). \`busy\` is retryable
-(\`workit doctor --fix-lock\` clears a dead lock); \`blocked\` names its unblock.
+hand-running git, gh or glab (\`workit git|pr|ci|check\`; \`workit help\` lists
+the rest; without \`workit\` on PATH, \`npx -y @brainervirus/workit-cli\`).
+\`busy\` is retryable (\`workit doctor --fix-lock\` clears a dead lock).
 The task families (task, policy, evidence, finding, decision, worker, state)
 are optional continuity for tracked work; each branch has one implicit task
 that the first recording creates, and a solo edit needs no task. A decision
 records a user choice; it never authorizes an effect. Judge work once with
 \`workit policy assess --judge risk= behavior= product-choice= plan=\`; an
 open choice or missing plan blocks edits until recorded.
-Omit revisions; a revision_conflict means one you passed is stale, so re-read.
+Omit revisions; on a revision_conflict, re-read.
 Across repositories, bind each item to its checkout, branch and endpoint,
 resolve competing targets before a mutation, and reconcile an uncertain
 external effect before retrying it.
 
-Mid-task input: answer a quick question in place, fold an adjustment in, and
-never silently drop or resume an objective (workit-continue).
+Mid-task: never silently drop or resume an objective (workit-continue).
 
 Skills: load the skill, never act from memory of it (slash aliases /wk-<name>).
 - brainstorm, plan, spec, grill, should we: workit-shape
@@ -13807,6 +13805,7 @@ Skills: load the skill, never act from memory of it (slash aliases /wk-<name>).
 - deslop, slop, dead code: workit-deslop
 - fan out, parallelize, parallel agents, swarm: workit-fanout
 - verify the app, smoke test, prove it works: workit-verify-app
+- retro (user-invoked; offer it): workit-retro
 `.trim();
 
 // packages/workit-core/src/core/task-context.ts
@@ -19049,7 +19048,8 @@ var WORKIT_SKILL_ALIASES = {
   "wk-test-audit": "workit-test-audit",
   "wk-deslop": "workit-deslop",
   "wk-fanout": "workit-fanout",
-  "wk-verify-app": "workit-verify-app"
+  "wk-verify-app": "workit-verify-app",
+  "wk-retro": "workit-retro"
 };
 if (false) {}
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-pi",
-  "version": "7.3.0",
+  "version": "7.4.0",
   "description": "Workit native extension for Pi — tools, method skills, and session continuity",
   "keywords": [
     "agentic-coding",

package/skills/workit-retro/SKILL.md

@@ -0,0 +1,72 @@
+---
+name: workit-retro
+description: Find repeated friction in recent sessions; propose cited fixes ranked by enforcer strength, never applied. Use for retro.
+disable-model-invocation: true
+---
+
+# Retro: turn repeated friction into enforcers
+
+User-invoked: offer it, never start it yourself. Run it after a session, PR,
+stack or fan-in, including ones that went well; a smooth session still shows
+where agents searched too long, worked around a tool or re-ran a check. Retro
+proposes and stops. Nothing changes until the user approves.
+
+1. **Scope.** Default: this repository's work since the last retro (its
+   `retro:` row in `workit ledger list --type decision`), else the last ~10
+   sessions. State the window in one line.
+2. **Read through workit, cheapest first.** Every finding cites these:
+   - `workit ledger list --last 200`: rulings (ambiguities the agent had to
+     settle), failed or self verdicts, handoffs, check runs, CI reruns.
+   - `workit pr status --pr <n>` for each recent PR: threads, failing checks.
+   - `git log --oneline -50`, plus reverts and fixups after review.
+   - `workit knowledge lint`: today's AGENTS.md and need-based files.
+   - Session transcripts **only if the user opts in**, and only this
+     workspace's (`references/sources.md`). Never read other projects.
+
+   Cite by location (ledger row, PR, commit, session file and line). Never
+   copy secrets, tokens or personal data from any source into the report.
+3. **Group into classes.** Navigation cost (many searches before the right
+   file, a stale doc followed), repeated mistakes, workarounds (a hand-run
+   command where a verb exists, a skipped step), unstable checks (the same
+   `workit check <name>` red then green with no change). A class needs **2 or
+   more cited occurrences**; a one-off is not a learning.
+4. **Name the strongest enforcer that works**, strongest first: architecture
+   or types (the mistake cannot be written) > lint rule > configured check
+   (`workit.checks.json`, `workit check <name>`) or CI job > test >
+   `CODING_STANDARDS.md` (judgment the reviewer reads) > AGENTS.md pointer
+   (navigation only). A mechanical rule gets a check, not prose: a check can
+   fail, a sentence cannot. From types to test, the proof is that the new
+   enforcer fails on the cited past mistake. A rule whose mistake can no
+   longer happen is deleted.
+5. **Upstream.** When a workit skill, verb or hook caused the friction,
+   propose an issue or PR on BrainerVirus/workit. Never fork a local copy.
+   The issue shows the workit behavior in a minimal synthetic reproduction:
+   no private repo name, path, code, ledger text, PR or thread quote, or
+   transcript. Show the exact draft body; file it only after the user approves.
+6. **Bloat guards.** AGENTS.md stays within 8 KB: each addition names what it
+   removes. Create `CODING_STANDARDS.md` or `GLOSSARY.md` only in the same
+   edit as its first real entry, never as a scaffold. Edit steering text by
+   `references/steering.md`; `workit knowledge lint` passes after the slice.
+7. **Report one ranked list, then stop:** Accepted (proposed), Backlog,
+   Dropped, each with its citations, enforcer and reason. Each approved item
+   becomes a normal slice (workit-implement, then workit-ship), a tracker
+   issue, or `.out-of-scope/<concept>.md` when rejected and likely to return.
+   Record the user's answer so the next retro starts there:
+   `workit ledger decision "retro: <accepted ids>" --why "<window>"`.
+
+## Example
+
+Bad: "Agents seem lost in the build. Added 'read the build docs carefully' to
+AGENTS.md." One vague occurrence, no citation, a no-op line, auto-applied.
+
+Good: "Navigation, 3 occurrences (rulings 12, 19; PR #88 thread): agents sought
+check names in package.json, missing `workit.checks.json`. Enforcer: AGENTS.md
+pointer, +74 bytes, minus the stale Commands paragraph (-210). Unstable check,
+2 occurrences (ledger rows 31, 44: `e2e` red then green on one SHA): a debug
+slice to fix the check. Approve?"
+
+## Check
+
+```sh
+workit knowledge lint   # exit 0 before and after each approved slice
+```

package/skills/workit-retro/agents/openai.yaml

@@ -0,0 +1,3 @@
+# Codex: user-invoked only (the counterpart of disable-model-invocation).
+policy:
+  allow_implicit_invocation: false

package/skills/workit-retro/references/sources.md

@@ -0,0 +1,35 @@
+# Session transcripts (opt-in, this workspace only)
+
+Transcripts are the most expensive source and can hold private material. Read
+them only after the user says yes to a question such as "Also read the last 10
+session transcripts for this workspace? (local files, read-only)". The default
+is no: the ledger, `pr status` and git are enough for most retros.
+
+## Where they live
+
+Typical locations; confirm each exists. Resolve the path from this workspace's
+absolute path, never with a wildcard across projects. If a host's layout
+differs from the one below, say so and skip it rather than search wider.
+
+| Host | Location |
+| --- | --- |
+| Claude Code | `~/.claude/projects/<folder>/*.jsonl`, one folder per path from `git worktree list`: the absolute path with every `/` and `.` replaced by `-`. Compute each folder name; never glob for it |
+| Codex | `~/.codex/sessions/YYYY/MM/DD/rollout-*.jsonl`. To filter, parse only line 1 (`session_meta`) and read only its `cwd` field; skip files whose `cwd` is not this workspace without reading or reporting anything else from them |
+| Cursor | `~/.cursor/projects/<workspace slug>/agent-transcripts/` |
+| Pi | `~/.pi/agent/sessions/--<workspace path, / replaced by ->--/*.jsonl` |
+| OpenCode | this project's sessions from `opencode session list`, read with `opencode export <id>` |
+
+Linked worktrees of the same repository count as this workspace; other
+repositories never do.
+
+## How to read them
+
+- Newest first, at most the agreed number of sessions.
+- On a host with subagents, one read-only analyst per lens, each returning
+  only cited occurrences (session file plus line or message index):
+  - navigation: searches and reads before the right file was found, stale docs
+    followed;
+  - tool economy: hand-run commands where a `workit` verb exists, repeated
+    reads of the same file, long outputs nobody used;
+  - repeated work: the same fix or check redone, a step undone later;
+  - request conflicts: instructions the agent had to reconcile or ask about.

package/skills/workit-retro/references/steering.md

@@ -0,0 +1,39 @@
+# Editing steering text (AGENTS.md, CODING_STANDARDS.md, skills)
+
+Steering text is paid for on every session that reads it. Each line must
+change what an agent does; everything else is cost.
+
+## Write
+
+- **Point, do not copy.** Link the file or name the command; never paste its
+  content. A pointer says when to follow it: "Read before editing a hook:
+  `docs/agents/hosts.md`".
+- **Say what done looks like.** "Run `bun run check`; it must exit 0" beats
+  "make sure everything works".
+- **Concrete over adjectives.** A command, a path, a number. Prefer the action
+  to take over a list of things to avoid.
+- **One rule, one home.** A rule with an enforcer (type, lint, check, test)
+  appears in steering text at most as a pointer to that enforcer. The same
+  sentence in AGENTS.md and CODING_STANDARDS.md is a defect
+  (`duplicate-rule`).
+- **Judgment goes to CODING_STANDARDS.md**, which the reviewer reads; only
+  navigation goes to AGENTS.md.
+
+## Cut
+
+- **No-ops.** Delete lines that would not change any behavior if removed:
+  "be thorough", "write clean code", "keep it concise", "follow best
+  practices".
+- **Session residue.** No notes about one session, no implementation detail
+  the code already shows, no `path:line` references (they go stale).
+- **Dead rules.** A rule whose mistake can no longer happen (a type or check
+  now prevents it) is deleted, not kept "for context".
+
+## Budget
+
+- AGENTS.md stays within 8 KB (`workit knowledge lint`, rule
+  `agents-budget`). A proposal that adds text names what it removes, or shows
+  the byte count still holds.
+- A need-based file (`CODING_STANDARDS.md`, `GLOSSARY.md`) is created in the
+  same edit as its first real entry. Headers-only or "TBD" files fail the lint
+  (`scaffold-file`).

package/skills/workit-review/SKILL.md

@@ -18,8 +18,9 @@ independent; `type-check-only` never proves a behavior change.
 3. Judge two axes separately, never merged or re-ranked:
    - **Spec:** does the diff do what the acceptance says? Missing, creep or
      wrong; quote the line.
-   - **Standards:** repo rules first, then a smell baseline (unclear name, long
-     function, duplicated logic, leaky abstraction). Judgment only; lint owns nits.
+   - **Standards:** repo rules first (`CODING_STANDARDS.md` when present),
+     then a smell baseline (unclear name, long function, duplicated logic,
+     leaky abstraction). Judgment only; lint owns nits.
 4. **Tests:** `workit test-audit --diff`. Would each new test fail if the
    behavior broke? Triage with workit-test-audit.
 5. **Blast radius:** for each touched contract, caller, config or migration,

package/skills/workit-shape/references/knowledge.md

@@ -10,11 +10,14 @@ user asks for one, say which trigger fired, and let the user decline.
 | Plan | more than one slice with dependencies, or work that will be resumed by someone else | `docs/<topic>/plan.md`, next to the spec |
 | ADR | the choice is hard to reverse **and** surprising **and** a real trade-off (all three) | `docs/adr/NNNN-<slug>.md` |
 | Glossary entry | a project term was ambiguous and you resolved it | `GLOSSARY.md` (create lazily) |
+| Coding standard | a judgment-call rule a reviewer must check, recurring twice (workit-retro); a mechanical rule gets a check instead | `CODING_STANDARDS.md` (create lazily) |
 | Out of scope | a request was rejected and is likely to come back | `.out-of-scope/<concept>.md` |
 
 Never: a spec for a one-file mechanical fix, a plan that restates the spec,
 file paths or line numbers in a spec (they go stale), a glossary entry for a
 general programming term.
+Create a lazy file only in the same edit as its first real entry, never as a
+headers-only or TBD scaffold (`workit knowledge lint` flags one).
 
 ## Spec (scaled to the work)
 

package/skills/workit-ship/SKILL.md

@@ -53,7 +53,8 @@ the base keeps moving, or after 3 failed fix attempts on the same check.
 6. **Verified.** After the last push a non-author records a verdict
    (workit-review); `pr status` showing self-reviewed is not verified. Land only when granted: `workit stack land` (the
    contiguous verified run from the root) or `workit pr merge`.
-7. **Observe it landed:** `workit verify-delivery pr` or `merge`.
+7. **Observe it landed:** `workit verify-delivery pr` or `merge`. At any endpoint
+   (stack land, fan-in too), after a failed verdict or a check red 3+ times: offer `/wk-retro`.
 
 ## Example