@workit-dev/core 0.0.1 → 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cristhofer Pincetti
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,45 +1,24 @@
 # @workit-dev/core
 
-## ⚠️ IMPORTANT NOTICE ⚠️
-
-**This package is created solely for the purpose of setting up OIDC (OpenID Connect) trusted publishing with npm.**
-
-This is **NOT** a functional package and contains **NO** code or functionality beyond the OIDC setup configuration.
-
-## Purpose
-
-This package exists to:
-1. Configure OIDC trusted publishing for the package name `@workit-dev/core`
-2. Enable secure, token-less publishing from CI/CD workflows
-3. Establish provenance for packages published under this name
-
-## What is OIDC Trusted Publishing?
-
-OIDC trusted publishing allows package maintainers to publish packages directly from their CI/CD workflows without needing to manage npm access tokens. Instead, it uses OpenID Connect to establish trust between the CI/CD provider (like GitHub Actions) and npm.
-
-## Setup Instructions
-
-To properly configure OIDC trusted publishing for this package:
-
-1. Go to [npmjs.com](https://www.npmjs.com/) and navigate to your package settings
-2. Configure the trusted publisher (e.g., GitHub Actions)
-3. Specify the repository and workflow that should be allowed to publish
-4. Use the configured workflow to publish your actual package
-
-## DO NOT USE THIS PACKAGE
-
-This package is a placeholder for OIDC configuration only. It:
-- Contains no executable code
-- Provides no functionality
-- Should not be installed as a dependency
-- Exists only for administrative purposes
-
-## More Information
-
-For more details about npm's trusted publishing feature, see:
-- [npm Trusted Publishing Documentation](https://docs.npmjs.com/generating-provenance-statements)
-- [GitHub Actions OIDC Documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
-
----
-
-**Maintained for OIDC setup purposes only**
+[![CI](https://github.com/BrainerVirus/workit/actions/workflows/ci.yml/badge.svg)](https://github.com/BrainerVirus/workit/actions/workflows/ci.yml)
+[![npm](https://img.shields.io/npm/v/@workit-dev/core.svg)](https://www.npmjs.com/package/@workit-dev/core)
+[![license: MIT](https://img.shields.io/badge/license-MIT-green.svg)](https://github.com/BrainerVirus/workit/blob/main/LICENSE)
+
+The shared core of [Workit](https://github.com/BrainerVirus/workit): task event store, run ledger,
+policy, checks, forge and stack logic, host-hook protocol, and the single
+source of the thirteen method skills. Every host adapter and the CLI bundle it.
+
+End users do not install this package; install the CLI or a host plugin (see
+the [root README](https://github.com/BrainerVirus/workit#quickstart)). Use it directly only to build a
+new host adapter.
+
+| Path | Contents |
+| --- | --- |
+| `src/` | Store, ledger, checks, forge, stack, grants, hooks (`src/hooks/`), task/policy engine (`src/core/`) |
+| `skills/` | The `workit-*` method skills; adapters ship generated copies |
+| `scripts/` | Installers, launchers and release helpers |
+| `templates/` | Contract and issue-update templates |
+
+Exports: `./src/core.ts` and `./src/*.ts` subpaths. Setup, doctor, upgrade and
+uninstall live in `@workit-dev/cli`. There is no build step; adapters
+bundle core. Development: [AGENTS.md](https://github.com/BrainerVirus/workit/blob/main/AGENTS.md).

package/package.json

@@ -1,10 +1,60 @@
 {
   "name": "@workit-dev/core",
-  "version": "0.0.1",
-  "description": "OIDC trusted publishing setup package for @workit-dev/core",
+  "version": "1.0.0",
+  "private": false,
+  "description": "Workit shared core — task, policy, evidence, review, decision, worker, and writer state for agentic coding workflows",
   "keywords": [
-    "oidc",
-    "trusted-publishing",
-    "setup"
-  ]
+    "agentic-coding",
+    "ai-agents",
+    "codex",
+    "cursor",
+    "mcp",
+    "opencode",
+    "pi",
+    "policy-engine",
+    "task-management",
+    "typescript",
+    "workflow"
+  ],
+  "homepage": "https://github.com/BrainerVirus/workit#readme",
+  "bugs": {
+    "url": "https://github.com/BrainerVirus/workit/issues"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/BrainerVirus/workit.git",
+    "directory": "packages/workit-core"
+  },
+  "files": [
+    "src/",
+    "schemas/",
+    "scripts/",
+    "skills/",
+    "templates/",
+    "README.md",
+    "LICENSE"
+  ],
+  "type": "module",
+  "main": "./src/core.ts",
+  "exports": {
+    "./hooks": "./src/hooks/index.ts",
+    "./src/*.ts": "./src/*.ts",
+    "./src/*.mjs": "./src/*.mjs",
+    "./src/*": "./src/*.ts",
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@openclaw/fs-safe": "0.8.1",
+    "zod": "4.6.5"
+  },
+  "engines": {
+    "node": ">=24"
+  }
 }

package/schemas/config.json

@@ -0,0 +1,74 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://unpkg.com/@workit-dev/core/schemas/config.json",
+  "title": "Workit config (config.json in the Workit config dir)",
+  "type": "object",
+  "properties": {
+    "$schema": {
+      "type": "string",
+      "description": "The JSON Schema this file follows; Workit writes it and keeps your value."
+    },
+    "locale": {
+      "description": "The language of Workit's prompts and drafts, e.g. en or es-419.",
+      "type": "string",
+      "pattern": "^[a-z]{2,3}(-(?:[A-Z]{2}|[0-9]{3}))?$"
+    },
+    "localeOptions": {
+      "description": "The locales the setup wizard offers.",
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "branchPolicy": {
+      "description": "The global branch policy; a workspace's `branchPolicy` overrides it.",
+      "type": "object",
+      "properties": {
+        "preset": {
+          "type": "string",
+          "enum": ["gitflow", "github-flow", "trunk-based", "custom"],
+          "description": "The branch model: gitflow, github-flow, trunk-based or custom."
+        },
+        "allowed": {
+          "description": "Branch name globs a new branch must match.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "protected": {
+          "description": "Branches nobody commits to directly.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      },
+      "required": ["preset"],
+      "additionalProperties": false
+    },
+    "commitPolicy": {
+      "description": "The global commit policy; a workspace's `commitPolicy` overrides it.",
+      "type": "object",
+      "properties": {
+        "preset": {
+          "type": "string",
+          "enum": ["conventional", "gitmoji", "ticket-prefix", "freeform", "custom", "auto"],
+          "description": "The commit message flavor, e.g. conventional."
+        },
+        "pattern": {
+          "description": "A regular expression every commit subject must match.",
+          "type": "string"
+        }
+      },
+      "required": ["preset"],
+      "additionalProperties": false
+    },
+    "updates": {
+      "description": "How an interactive launch handles a newer release: prompt (default), auto or off. Set with `workit upgrade --set-updates`.",
+      "type": "string",
+      "enum": ["prompt", "auto", "off"]
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/vcs.json

@@ -0,0 +1,79 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://unpkg.com/@workit-dev/core/schemas/vcs.json",
+  "title": "Workit forge settings (vcs.json in the Workit config dir)",
+  "type": "object",
+  "properties": {
+    "$schema": {
+      "type": "string",
+      "description": "The JSON Schema this file follows; Workit writes it and keeps your value."
+    },
+    "provider": {
+      "description": "The forge when no workspace or remote names one.",
+      "type": "string",
+      "enum": ["github", "gitlab"]
+    },
+    "defaultTargetBranch": {
+      "description": "The branch PRs target when neither the workspace nor its branch preset names one.",
+      "type": "string"
+    },
+    "github": {
+      "description": "GitHub settings.",
+      "type": "object",
+      "properties": {
+        "host": {
+          "description": "The GitHub host, for a self-hosted server.",
+          "type": "string"
+        },
+        "apiUrl": {
+          "description": "The GitHub API URL.",
+          "type": "string"
+        },
+        "tokenFile": {
+          "description": "A file holding the GitHub token.",
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "gitlab": {
+      "description": "GitLab settings.",
+      "type": "object",
+      "properties": {
+        "host": {
+          "description": "The GitLab host, for a self-hosted server.",
+          "type": "string"
+        },
+        "apiUrl": {
+          "description": "The GitLab API URL.",
+          "type": "string"
+        },
+        "tokenFile": {
+          "description": "A file holding the GitLab token.",
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "pr": {
+      "description": "PR style defaults.",
+      "type": "object",
+      "properties": {
+        "squashOnMerge": {
+          "type": "boolean"
+        },
+        "removeSourceBranch": {
+          "type": "boolean"
+        },
+        "pushBranch": {
+          "type": "boolean"
+        },
+        "confirmSkip": {
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": {}
+    }
+  },
+  "additionalProperties": {}
+}