@brainervirus/workit-claude-code 8.24.0 → 8.25.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "workit",
   "displayName": "Workit",
-  "version": "8.24.0",
+  "version": "8.25.0",
   "description": "Workflow rails for agentic coding: task context on every session, branch policy on shell commands, and the workit method skills",
   "author": {
     "name": "BrainerVirus"

package/agents/implementer.md

@@ -15,12 +15,13 @@ hand back), standing orders, mode (`new` or `resume`) and the worktree path.
 If a field is missing, report which and stop.
 
 1. Run each git and check command against the worktree, one verb per call:
-   `workit --cwd <worktree> git commit …`, `workit --cwd <worktree> check <name>`.
+   `workit git --cwd <worktree> commit …`, `workit check --cwd <worktree> <name>`
+   (verb first, so the host's allow rules match).
    Never `cd <worktree> && …` chains, `$VAR` paths or compound commands. Edit
    files by their path under the worktree. Workit's hooks deny an edit or a
    mutating git command outside it.
 2. The worktree is already on the brief's branch. If it is not: `MODE: new`,
-   `workit --cwd <worktree> git branch <branch> --base <base>`; `MODE: resume`
+   `workit git --cwd <worktree> branch <branch> --base <base>`; `MODE: resume`
    (you replace a stopped worker), `git -C <worktree> switch <branch>` and
    continue from its head. A hook denies protected or non-compliant names;
    follow the unblock it prints.
@@ -31,8 +32,8 @@ If a field is missing, report which and stop.
    Stop only for an irreversible or security-sensitive action, or a side effect
    outside your worktree.
 5. Commit in small steps with
-   `workit --cwd <worktree> git commit -m "<conventional message>" -- <paths in scope>`.
-6. Run every verify command as `workit --cwd <worktree> check …` and keep the
+   `workit git --cwd <worktree> commit -m "<conventional message>" -- <paths in scope>`.
+6. Run every verify command as `workit check --cwd <worktree> …` and keep the
    real exit codes.
 7. Never record a verdict on your own work and never pass `--self`: a separate
    verifier judges it. Never push, open a PR, rebase or merge unless the brief

package/agents/verifier.md

@@ -11,8 +11,8 @@ backward: what must be true, what must exist, what must be wired. The author's
 summary is a claim, not evidence; assume the goal is not met until you observe
 it.
 
-1. Pin the candidate in its own checkout (run workit with `--cwd <worktree>`;
-   never `cd` first): `git -C <worktree> rev-parse HEAD` and `git -C <worktree> status --short`. A dirty tree
+1. Pin the candidate in its own checkout (run workit as
+   `workit <verb> --cwd <worktree> …`, verb first; never `cd` first): `git -C <worktree> rev-parse HEAD` and `git -C <worktree> status --short`. A dirty tree
    or a moving HEAD is itself a finding, and the ledger refuses a verdict on it.
 2. Read the brief: goal, acceptance (Given/When/Then), verify commands.
 3. Run every verify command through the CLI so the result is observed:

package/bin/workit-hook.mjs

@@ -47,6 +47,15 @@ for await (const chunk of process.stdin) payload += String(chunk);
 const RAW_TOOLS = /\b(?:git|gh|glab)\b/;
 const WORKIT_DELIVERY =
   /(?:^|[\s;&|(])(?:\S*[\\/])?workit(?:-cli)?\s+(?:pr (?:create|merge)|ci wait|git push)\b/;
+// The runtime moves the verb first (`cd <dir> && workit …`, `workit --cwd
+// <dir> <verb>`) so Workit's enumerated allow rules match (hooks/cwd-normalize.ts).
+const WORKIT_REORDER = /^\s*(?:cd\s[^;|&]*&&\s*workit\s|workit\s+(?:--json\s+)*--cwd[\s=])/;
+// A Workit call that may carry a bypass flag, however quoted, goes to the
+// runtime, which asks the user (hooks/delivery-verbs.ts workitBypassFlag).
+const mayBypass = (command) =>
+  /\bworkit\b/.test(command) &&
+  (/\$['"]/.test(command) ||
+    /--unverified|--overwrite-unintegrated/.test(command.replace(/['"\\`]/g, "")));
 const MAYBE_GATED =
   /\b(?:git|gh|glab)\b|>|\b(?:tee|touch|mkdir|rm|rmdir|mv|cp|truncate|install|ln|patch|dd|sed|perl|set-content|add-content|out-file|new-item|ni|remove-item|del|copy-item|move-item)\b/i;
 // What an implementer's confinement also judges (hooks/worktree-confine.ts):
@@ -217,7 +226,8 @@ const fastAllow = (() => {
     // without a task store (hooks/worktree-confine.ts).
     const implementer = value.agent_type === "workit:implementer";
     if (SHELLS.has(value.tool_name) && typeof command === "string") {
-      if (WORKIT_DELIVERY.test(command)) return false;
+      if (WORKIT_DELIVERY.test(command) || WORKIT_REORDER.test(command) || mayBypass(command))
+        return false;
       if (maybeHeavy(command, String(value.cwd ?? "."))) return false;
       if (!MAYBE_GATED.test(command) && !(implementer && IMPLEMENTER_GATED.test(command)))
         return true;