Git-native CLI for the Wazoo multi-repo workspace.

works is a small, git-native CLI that manages a multi-repo Wazoo workspace without Git submodules. It keeps the working rules in one place and makes them enforceable from the terminal.

Design principles:

• Thin over custom. Prefer plain git porcelain/plumbing and well-known directory conventions over bespoke state files. The workspace layout is encoded in a single workspace.json manifest.
• Conservative mutation. Commands that write or move state (update, worktree, env) refuse to touch dirty repositories, feature branches, missing repos, or unmanaged checkouts. update only fetches and fast-forwards clean default branches; it never resets, rebases, stashes, or rewrites history.
• Machine-readable output. check --json emits structured results for tools; plain output is for humans.
• Exit code contract. works check exits 0 when the workspace is clean and 1 when any repository is dirty, diverged, missing, or otherwise not in sync.

• works check — read-only baseline check. Reports CLEAN, DIRTY, FEATURE_CLEAN, DIVERGED, UNKNOWN, MISSING, and UNMANAGED states.
• works init [--host <host>] [--owner <owner>] [<repo...>] — one-time scaffold for an empty directory: writes a fresh workspace.json (schema v4) with optional host/owner and seeded shorthand entries, and creates the standard repos/, worktrees/, and secrets/ directories. Fails closed if any manifest already exists.
• works install [<repo...>] — clone missing repositories from the manifest (or only a specified subset of repos). Prints a warning that fresh clones lack gitignored files and repo-specific setup.
• works add [<name>] [--url <url>] [--name <n>] [--create] [--visibility <public|private>] — append an entry to the manifest: a bare or owner/name shorthand string, or an object entry via --url (name defaults to the URL basename, overridable with --name or a positional name). Edits are surgical: comments in .jsonc manifests survive. GitHub shorthand entries are probed with gh; pass --create to create a missing repository first (default private). Nothing is cloned; run works install <name> afterwards.
• works remove <repo> — delete the entry whose effective name matches. Surgical edit; local checkouts are never deleted.
• works update — fetch remotes and fast-forward only clean default branches.
• works worktree add <repo> <feature> [<commit-ish>] — create a git worktree under worktrees/<repo>/<feature>/, branching from the repo's default-branch baseline (origin/<default>) or an explicit <commit-ish>. Attaches an existing branch of the same name with a warning.
• works worktree list [--stale] [--json] — list worktrees across all repositories. --stale filters to linked worktrees whose branch is fully merged into the default branch (or missing), i.e. safe removal candidates.
• works worktree remove <repo> <feature> — remove a worktree, then prune and tidy the now-empty worktrees/<repo>/ directory.
• works env sync — copy local environment files from a gitignored secrets/ directory into checkouts and worktrees.
• works validate — validate the manifest without touching any repository.
• works workspaces [--json] — list discovered sub-workspaces with repo counts. check, install, update, and worktree list accept --workspace <name> to scope the command to one sub-workspace.

The manifest is workspace.json (or .jsonc) in .json or .jsonc format (JSONC allows comments and trailing commas). Discovery is name-first, then extension.

Schema v4 keeps one repositories array with exactly two entry forms:

1. Shorthand — "repo", "owner/repo", or { "name": "...", "owner": "..." } expands against the manifest's host (default github.com) to https://<host>/<owner>/<name>.git.
2. Object — { "name": "...", "url": "..." } is a plain repository for any Git host.

{
  "schemaVersion": 4,
  "host": "github.com",
  "owner": "acme",
  "repositories": [
    "shared-reference",
    "other-owner/forked-repo",
    { "name": "elsewhere", "url": "https://gitlab.com/other/repo.git" }
  ]
}

Shorthand rules: owner/name overrides the top-level owner per entry; exactly one slash is allowed; url and owner are mutually exclusive on object entries.

A repository's local checkout directory is always <repositoriesDirectory>/<name>, where name is the post-expansion label: ownership and hosts live in URLs, never in paths. Names therefore cannot contain slashes, backslashes, or path traversal, and two entries resolving to the same label are rejected — including a shorthand colliding with another entry's expanded name.

To check out a repository under a different label than its shorthand name, write the explicit form with your chosen label as name:

{
  "name": "wazootech__memsdk",
  "url": "https://github.com/wazootech/memsdk.git"
}

The aliased copy is an ordinary explicit-url entry.

works install converges in one invocation: each pass clones what is missing, re-resolves the tree (newly cloned containers may reveal detected sub-workspaces), and repeats until nothing new appears. Every other command resolves once against whatever is currently on disk.

Each child manifest is a standard manifest: its repositories resolve against its own root (defaulting to repos/ under the directory containing the child manifest), and it may compose further sub-workspaces through its own bare strings. Resolution errors on circular references and duplicate repository claims across workspaces; a detected manifest that was already visited (for example a repository hosting its own root manifest) degrades silently to a plain repository row. Child manifests are self-contained: their own host and owner apply, and nothing is inherited from the parent.

Schema v4 migration notes: the separate workspaces array was removed — child workspaces now compose automatically through detection. Entry fields path, groups, localFiles, and manifest were removed; entries are bare strings or { "name", "url" }. vaultDirectory was renamed to secretsDirectory. All removals produce pointed errors instead of silent misbehavior.

Manifest discovery has been simplified to workspace.json / .jsonc only. The wspace.json and repos.json filename fallbacks and .yaml / .yml format support have been removed. Migrate by renaming your manifest file to workspace.json (or workspace.jsonc) and converting any YAML manifests to JSON. Pass --manifest <path> to point at a manifest elsewhere.

The works agent skill packages the same workspace discipline into a loadable skill for coding agents (Claude Code, Cursor, OpenCode, Gemini, and others). It is not a thin wrapper around the CLI — it encodes a set of opinionated software engineering practices that apply to any multi-repo workspace:

• Worktree isolation as default. The skill makes "never edit the canonical checkout" the only path, not an opt-in. Eliminates an entire class of "oops I was on main" incidents across any multi-repo setup.
• Single-round-trip discovery. works check --json replaces per-repo ls and git status probing. Fewer tool calls means faster time to the first useful action and less context consumed per session.
• Pipeline with verifiable exit conditions. Each step ends on a checkable artifact — a clean worktree, green CI, a merged PR — not agent reasoning about whether things look right.
• Goal loop with hard boundaries. The FRAME-SCAN-CLAIM-EXECUTE-REFLECT loop, with deploy, publish, and human-in-the-loop hard stops, is a reusable autonomy pattern for driving any multi-repo backlog to completion.
• Token and context economy. Batch commands into single shell calls, hand off plan artifacts between phases (not full conversations), and leave per-repo command syntax in reference files loaded on demand.

npx skills add wazootech/workspace-cli@works

The skill reads the workspace manifest and CLI the same way a human would — but it never needs to be taught the conventions twice.

All workspace commands run from the workspace root (the directory containing workspace.json). When creating worktrees for parallel feature development, always follow this standard lifecycle:

1. Check workspace status:

   works check

2. Refresh clean default branches:

   works update

3. Create a feature worktree:

   git -C repos/<repo> worktree add "$PWD/worktrees/<repo>/<feature>" -b <feature>

   (Or using works: works worktree add <repo> <feature>
4. Develop inside the worktree:

   cd worktrees/<repo>/<feature>
   # make edits, run tests, commit changes

5. Sync local secrets when needed:

   works env sync --dry-run   # preview changes
   works env sync             # copy secrets with mode 0600 permissions

6. Push and open a PR:

   git push -u origin <feature>
   gh pr create

7. Find stale worktrees after PR merge:

   works worktree list --stale

8. Clean up merged worktree:

   works worktree remove <repo> <feature>

• Workspace Root Anchor: All repository and worktree paths in workspace.json resolve relative to the directory containing the manifest file, regardless of the caller's current working directory.
• Why $PWD is required with git -C: git -C repos/<repo> changes Git's working directory to repos/<repo> before executing. If you pass a relative path like worktrees/<repo>/<feature>, Git creates the worktree nested inside repos/<repo>/worktrees/... instead of at the workspace root. Using "$PWD/worktrees/<repo>/<feature>" resolves $PWD from the workspace root before Git runs.
• Default Worktree Baseline: works worktree add branches from origin/<default> (resolved via origin/HEAD), ensuring feature branches start from the remote baseline rather than a local dirty state or arbitrary HEAD.

Each Git worktree maintains an independent working directory, while modern package managers optimize dependency caching across worktrees:

• pnpm: Uses a central content-addressable store (~/.local/share/pnpm/store). Running pnpm install in a new worktree hard-links dependencies from the central store without duplicating files or re-downloading packages.
• Deno: Uses the global DENO_DIR module cache (~/.cache/deno or %LOCALAPPDATA%\deno), sharing cached dependencies across all worktrees zero-copy.
• npm / yarn: Running npm install or yarn install inside a worktree installs dependencies for that worktree, fetching packages from the shared user HTTP cache.

• PATH_BLOCKED or INVALID during install: An existing directory or file occupies the expected repository path but is not a valid Git repository. works install fails closed without touching or overwriting the path. Remove or relocate the blocking path manually.
• SKIP_FEATURE / FEATURE_CLEAN: Indicates that repos/<repo> is checked out on a feature branch instead of the default branch. works update skips updating feature branches to protect user work.
• Symlink rejection in env sync: For security, works env sync will refuse to overwrite any destination path that is a symbolic link.
• Dirty linked worktrees: works check inspects both primary checkouts and linked feature worktrees. If any linked worktree has uncommitted changes, works check returns a non-zero exit code (1).

Install from JSR as the works binary:

deno install -g --name works jsr:@wazoo/workspace

Or build a local binary:

deno task build

Requires a Deno runtime (v2+). The works binary has no runtime dependencies.

deno task ci

Runs deno fmt --check, deno lint, deno check, and deno test (includes integration tests against real local git repositories).

• ADR-0001: Git-native worktrees
• ADR-0002: Conservative update policy
• ADR-0003: Explicit worktree baseline and merged-branch staleness
• ADR-0004: The works command name