@brainervirus/workit-claude-code 8.45.1 → 8.45.2

package/dist/workit.js

@@ -7145,30 +7145,58 @@ var FORGE_SCHEMES, SSH_SCHEMES, SSH_443, WINDOWS_DRIVE, SCP_LIKE, accountHome =
 }, caseless, canonical = (real) => {
   const slashed = real.replaceAll("\\", "/").replace(/\/+$/u, "").replace(/\/\.git$/u, "");
   return `file:${caseless ? slashed.toLowerCase() : slashed}`;
-}, gitDirAt = (at) => {
+}, isRepoDir = (dir) => ["HEAD", "objects", "refs"].every((name) => {
+  try {
+    lstatSync(`${dir}/${name}`);
+    return true;
+  } catch {
+    return false;
+  }
+}), gitDirAt = (at, depth = 0) => {
   let real;
   try {
     real = realpathSync.native(at);
   } catch {
     return null;
   }
+  if (depth > 8)
+    return null;
   try {
     if (statSync(real).isFile()) {
       const pointer = /^gitdir:\s*(.+?)\s*$/mu.exec(readFileSync2(real, "utf8"))?.[1];
       if (!pointer)
         return null;
       const target = path3.isAbsolute(pointer) ? pointer : `${path3.dirname(real)}/${pointer}`;
-      return gitDirAt(target);
+      return gitDirAt(target, depth + 1);
     }
-    const isRepo = ["HEAD", "objects", "refs"].every((name) => {
+    let common;
+    try {
+      common = readFileSync2(`${real}/commondir`, "utf8").trim();
+    } catch {}
+    if (common !== undefined) {
+      lstatSync(`${real}/HEAD`);
+      return gitDirAt(path3.isAbsolute(common) ? common : `${real}/${common}`, depth + 1);
+    }
+    if (!isRepoDir(real))
+      return null;
+    let lender = null;
+    for (const name of ["refs", "objects", "config", "packed-refs"]) {
+      const item = `${real}/${name}`;
       try {
-        lstatSync(`${real}/${name}`);
-        return true;
+        lstatSync(item);
       } catch {
-        return false;
+        continue;
       }
-    });
-    return isRepo ? real : null;
+      const resolved = realpathSync.native(item);
+      const rel = path3.relative(real, resolved);
+      if (rel && !rel.startsWith("..") && !path3.isAbsolute(rel))
+        continue;
+      const owner = path3.basename(resolved) === name ? gitDirAt(path3.dirname(resolved), depth + 1) : null;
+      if (owner === null || lender !== null && lender !== owner)
+        return null;
+      lender = owner;
+    }
+    return lender ?? real;
   } catch {
     return null;
   }
@@ -7218,7 +7246,7 @@ var FORGE_SCHEMES, SSH_SCHEMES, SSH_443, WINDOWS_DRIVE, SCP_LIKE, accountHome =
       return null;
     }
   }
-  if (path3.isAbsolute(value) || WINDOWS_DRIVE.test(value))
+  if (path3.isAbsolute(value) || WINDOWS_DRIVE.test(value) || process.platform === "win32" && /^[A-Za-z]:/u.test(value))
     return fileKey(value, strict);
   const scp = SCP_LIKE.exec(value);
   if (scp)
@@ -7289,14 +7317,17 @@ var FORGE_SCHEMES, SSH_SCHEMES, SSH_443, WINDOWS_DRIVE, SCP_LIKE, accountHome =
   const file = realOrSelf(origin.slice("file:".length));
   const home = userGitSeam.home();
   return [path3.join(home, ".gitconfig"), path3.join(home, ".config", "git", "config")].map(realOrSelf).includes(file);
-}, escapeRegex2 = (value) => value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&"), transportOverride = (git, remote) => {
-  const env = TRANSPORT_ENV.find((name) => process.env[name]);
+}, escapeRegex2 = (value) => value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&"), transportOverride = (git, remote, vars) => {
+  const env = TRANSPORT_ENV.find((name) => vars[name]);
   if (env)
     return env;
-  const execPath = process.env.GIT_EXEC_PATH;
+  const execPath = vars.GIT_EXEC_PATH;
   if (execPath) {
-    const { GIT_EXEC_PATH: _set, ...rest } = process.env;
-    const own = spawnSync3("git", ["--exec-path"], { env: rest, encoding: "utf8" });
+    const { GIT_EXEC_PATH: _set, ...rest } = vars;
+    const own = spawnSync3("git", ["--exec-path"], {
+      env: rest,
+      encoding: "utf8"
+    });
     if (own.status !== 0 || realOrSelf(own.stdout.trim()) !== realOrSelf(execPath))
       return "GIT_EXEC_PATH";
   }
@@ -7322,18 +7353,24 @@ var FORGE_SCHEMES, SSH_SCHEMES, SSH_443, WINDOWS_DRIVE, SCP_LIKE, accountHome =
     return `${key} (${scope} ${origin})`;
   }
   return null;
-}, pushTarget = (cwd, remote) => {
-  const env = { ...process.env };
+}, pushTarget = (cwd, remote, replay = {}) => {
+  const env = { ...process.env, ...replay.env };
   for (const name of ["GIT_DIR", "GIT_WORK_TREE", "GIT_COMMON_DIR", "GIT_INDEX_FILE"])
     delete env[name];
   if (!remote || remote.startsWith("-"))
     return Error(`push remote ${JSON.stringify(remote)} cannot be resolved`);
-  const git = (args) => spawnSync3("git", args, { cwd, env, encoding: "utf8", timeout: 5000, windowsHide: true });
-  const override = transportOverride(git, remote);
+  const git = (args) => spawnSync3("git", [...replay.config ?? [], ...args], {
+    cwd,
+    env,
+    encoding: "utf8",
+    timeout: 5000,
+    windowsHide: true
+  });
+  const override = transportOverride(git, remote, env);
   if (override)
     return Error(`${override} decides what the push to ${remote} reaches, not its URL, so its target is unknown`);
   const run = git(["remote", "get-url", "--push", "--all", remote]);
-  const urls = run.status === 0 ? run.stdout.split(/\r?\n/u).map((url) => url.trim()) : [];
+  const urls = run.status === 0 ? run.stdout.split(/\r?\n/u).map((url) => url.trim()) : run.status === 2 ? [remote] : [];
   if (!urls.some(Boolean))
     return Error(`git could not resolve the push URLs of remote ${remote} in ${cwd}`);
   let top;
@@ -7367,7 +7404,9 @@ var init_remotes = __esm(() => {
   };
   WINDOWS_DRIVE = /^[A-Za-z]:[\\/]/u;
   SCP_LIKE = /^(?:[^@/\\]+@)?([^/\\:]+):(.+)$/u;
-  sshSeam = { read: () => readSshConfig(accountHome()) };
+  sshSeam = {
+    read: () => readSshConfig(accountHome())
+  };
   caseless = process.platform === "win32" || process.platform === "darwin";
   TRANSPORT_ENV = ["GIT_SSH", "GIT_SSH_COMMAND", "GIT_PROXY_COMMAND"];
   userGitSeam = { home: accountHome };
@@ -9695,7 +9734,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@brainervirus/workit-cli",
-    version: "8.45.1",
+    version: "8.45.2",
     private: false,
     description: "Workit CLI — setup wizard, doctor, and task control for agentic coding workflows",
     keywords: [
@@ -9733,13 +9772,13 @@ var init_package = __esm(() => {
     },
     dependencies: {
       "@babel/parser": "7.29.9",
-      "@brainervirus/workit-cursor": "^8.45.1",
+      "@brainervirus/workit-cursor": "^8.45.2",
       "@inkjs/ui": "2.0.0",
       ink: "7.1.1",
       react: "19.2.8"
     },
     devDependencies: {
-      "@brainervirus/workit-core": "^8.45.1"
+      "@brainervirus/workit-core": "^8.45.2"
     },
     engines: {
       node: ">=24"
@@ -10260,18 +10299,6 @@ function targetClaims(target, dir = grantsDir()) {
     return pattern ? [{ url: remote.url, workspace: entry.name, pattern }] : [];
   }));
 }
-function remoteClaims(cwd, dir = grantsDir()) {
-  const claiming = loadWorkspacesFrom(dir).filter((entry) => entry.remotes?.length);
-  if (claiming.length === 0)
-    return [];
-  const remotes = checkoutRemotes(cwd);
-  if (remotes instanceof Error)
-    return remotes;
-  return remotes.flatMap((remote) => claiming.flatMap((entry) => {
-    const pattern = entry.remotes.find((item) => remoteMatches(item, remote.key));
-    return pattern ? [{ remote: remote.name, url: remote.url, workspace: entry.name, pattern }] : [];
-  }));
-}
 function remoteFindings(cwd, dir = grantsDir()) {
   let own = null;
   try {
@@ -10279,15 +10306,20 @@ function remoteFindings(cwd, dir = grantsDir()) {
   } catch {
     return { warnings: [], notes: [] };
   }
-  const claims = remoteClaims(cwd, dir);
-  if (claims instanceof Error)
-    return { warnings: [`${claims.message}: grants here are capped at nothing`], notes: [] };
-  const warnings = claims.filter((claim) => claim.workspace !== own?.name).map((claim) => `remote ${claim.remote} ${claim.url} is claimed by workspace ${claim.workspace} (${claim.pattern}): an action that targets it never exceeds ${claim.workspace}'s grants`);
+  const unclaimed = own !== null && !own.remotes?.length;
+  if (!unclaimed && !remotesClaimed(dir))
+    return { warnings: [], notes: [] };
+  const remotes = checkoutRemotes(cwd);
+  if (remotes instanceof Error && remotesClaimed(dir))
+    return { warnings: [`${remotes.message}: grants here are capped at nothing`], notes: [] };
+  const listed = remotes instanceof Error ? [] : remotes;
+  const others = claimsOf(listed, dir).filter((claim) => claim.workspace !== own?.name);
+  const warnings = others.map((claim) => `remote ${claim.remote} ${claim.url} is claimed by workspace ${claim.workspace} (${claim.pattern}): an action that targets it never exceeds ${claim.workspace}'s grants`);
   const notes = [];
-  if (own && !own.remotes?.length) {
-    const remotes = checkoutRemotes(cwd);
-    const origin = remotes instanceof Error ? undefined : remotes.find((r) => r.name === "origin");
-    notes.push(`workspace ${own.name} claims no remotes, so a folder outside it whose origin is ${origin ? origin.url : "one of its remotes"} keeps that folder's grants; to claim it, the user runs in their own terminal: workit workspace set ${own.name} remotes=${origin ? origin.url : "<url>"}`);
+  if (own && unclaimed) {
+    const free = listed.filter((remote) => !others.some((claim) => claim.url === remote.url));
+    const suggest = free.find((remote) => remote.name === "origin") ?? free[0];
+    notes.push(`workspace ${own.name} claims no remotes, so a folder outside it whose origin is ${suggest ? suggest.url : "one of its remotes"} keeps that folder's grants; to claim it, the user runs in their own terminal: workit workspace set ${own.name} remotes=${suggest ? suggest.url : "<url>"}`);
   }
   return { warnings, notes };
 }
@@ -10477,7 +10509,13 @@ var accountHome2 = () => {
     else if (item === "merge")
       grants.merge = "verified";
   return Object.keys(grants).length > 0 ? grants : null;
-}, remotesClaimed = (dir = grantsDir()) => loadWorkspacesFrom(dir).some((entry) => entry.remotes?.length), accountOf = (entry) => entry?.vcs?.account, suggested = (kind) => kind === "merge" ? "verified" : "true", accountHint = (workspace) => `set vcs.account for workspace "${workspace ?? "?"}" in ~/.config/workit/workspaces.json`, grantHint = (workspace, kind) => `ask the user to run, in their own terminal: workit grant set ${workspace ?? "<workspace>"} ${kind}=${suggested(kind)}`, raises = (kind, current, next) => {
+}, remotesClaimed = (dir = grantsDir()) => loadWorkspacesFrom(dir).some((entry) => entry.remotes?.length), claimsOf = (remotes, dir) => {
+  const claiming = loadWorkspacesFrom(dir).filter((entry) => entry.remotes?.length);
+  return remotes.flatMap((remote) => claiming.flatMap((entry) => {
+    const pattern = entry.remotes.find((item) => remoteMatches(item, remote.key));
+    return pattern ? [{ remote: remote.name, url: remote.url, workspace: entry.name, pattern }] : [];
+  }));
+}, accountOf = (entry) => entry?.vcs?.account, suggested = (kind) => kind === "merge" ? "verified" : "true", accountHint = (workspace) => `set vcs.account for workspace "${workspace ?? "?"}" in ~/.config/workit/workspaces.json`, grantHint = (workspace, kind) => `ask the user to run, in their own terminal: workit grant set ${workspace ?? "<workspace>"} ${kind}=${suggested(kind)}`, raises = (kind, current, next) => {
   const rank = (value) => value === true ? 2 : value === "verified" ? 1 : 0;
   return rank(normalized(kind, next)) > rank(normalized(kind, current));
 };
@@ -18728,9 +18766,9 @@ var init_shell_words = __esm(() => {
 // packages/workit-core/src/hooks/raw-git.ts
 import os6 from "node:os";
 import path24 from "node:path";
-function rawInvocations(command, dialect = "posix", depth = 0) {
+function rawInvocations(command, dialect = "posix", depth = 0, inherited = {}) {
   if (depth > 0)
-    return walk2(command, dialect, depth);
+    return walk2(command, dialect, depth, undefined, inherited);
   const key = `${dialect}\x00${command}`;
   const cached = RECENT.get(key);
   if (cached)
@@ -18755,18 +18793,20 @@ function commandLines(command, dialect = "posix") {
   }
   return lines;
 }
-function walk2(command, dialect, depth, seen) {
+function walk2(command, dialect, depth, seen, inherited = {}) {
   const found = [];
   let dir = null;
   const groups = [];
   let stack = [];
   const vars = new Map;
-  const exported = {};
+  const exported = { ...inherited };
+  let prefix = {};
   const sessionConfig = [];
   const nested = (script, inner) => {
     if (!script || depth >= MAX_DEPTH)
       return;
-    const inside = seen ? walk2(script, inner, depth + 1, seen) : rawInvocations(script, inner, depth + 1);
+    const env = { ...exported, ...prefix };
+    const inside = seen ? walk2(script, inner, depth + 1, seen, env) : rawInvocations(script, inner, depth + 1, env);
     for (const invocation of inside)
       found.push({ ...invocation, dir: rebase(dir, invocation.dir) });
   };
@@ -18776,6 +18816,7 @@ function walk2(command, dialect, depth, seen) {
     if (split !== null)
       return nested(split, "posix");
     const { words, env } = stripPrefixes(line);
+    prefix = env;
     const name = commandName(words[0]);
     if (!name)
       return;
@@ -18836,6 +18877,7 @@ function walk2(command, dialect, depth, seen) {
         tool: name,
         dir,
         args: words.slice(1),
+        ...Object.keys({ ...exported, ...env }).length ? { env: { ...exported, ...env } } : {},
         ...stdin === undefined ? {} : { stdin }
       });
     else if (name === "git") {
@@ -19250,7 +19292,9 @@ var SHELLS, POWERSHELLS, EVALS, WRAPPERS, WRAPPER_VALUES, KEYWORDS, DECLARATIONS
 }, RECENT, LAUNCHERS, WORKIT_PACKAGE, PACKAGE_RUNNERS, OUTPUT_FILTERS, WORKIT_GLOBAL, PUSH_VALUE_OPTIONS, VALUE_OPTIONS, API_VALUES, API_FIELDS, GIT_COMMANDS;
 var init_raw_git = __esm(() => {
   init_branch();
+  init_autonomy();
   init_branch_policy();
+  init_remotes();
   init_workspaces();
   init_ledger();
   init_paths();
@@ -19260,7 +19304,9 @@ var init_raw_git = __esm(() => {
   POWERSHELLS = new Set(["pwsh", "powershell"]);
   EVALS = new Set(["eval", "iex", "invoke-expression"]);
   WRAPPERS = {
-    sudo: { values: "-u -g -h -p -C -D -R -T -r -t -U --user --group --host --prompt --chdir" },
+    sudo: {
+      values: "-u -g -h -p -C -D -R -T -r -t -U --user --group --host --prompt --chdir"
+    },
     doas: { values: "-u -C" },
     command: { values: "" },
     builtin: { values: "" },
@@ -19299,7 +19345,7 @@ var init_raw_git = __esm(() => {
     "--super-prefix"
   ]);
   GIT_CONFIG_OPTIONS = new Set(["-c", "--config-env", "--git-dir"]);
-  GIT_CONFIG_ENV = /^GIT_(?:CONFIG\w*|DIR|COMMON_DIR|WORK_TREE)$/;
+  GIT_CONFIG_ENV = /^(?:GIT_(?:CONFIG\w*|DIR|COMMON_DIR|WORK_TREE|SSH|SSH_COMMAND|PROXY_COMMAND|EXEC_PATH)|GH_HOST|GH_REPO|GITLAB_HOST|GL_HOST)$/;
   ASSIGNMENT = /^([A-Za-z_]\w*)=([\s\S]*)$/;
   HERE = /^(?:\$PWD|\$\{PWD\}|\$\(\s*pwd\s*\)|`pwd`|\$\(\s*git\s+rev-parse\s+--show-toplevel\s*\))(?=$|[\\/])/;
   VARIABLE = /\$(?:\{(\w+)\}|(\w+))/g;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-claude-code",
-  "version": "8.45.1",
+  "version": "8.45.2",
   "private": false,
   "description": "Workit Claude Code plugin — session and per-turn task context, branch policy on git shell commands, workit method skills, and verifier/reviewer/implementer agents",
   "keywords": [
@@ -39,8 +39,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-cli": "^8.45.1",
-    "@brainervirus/workit-core": "^8.45.1"
+    "@brainervirus/workit-cli": "^8.45.2",
+    "@brainervirus/workit-core": "^8.45.2"
   },
   "engines": {
     "node": ">=24"