@brainervirus/workit-codex 2.4.0 → 2.6.0

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "workit",
-  "version": "2.4.0",
+  "version": "2.6.0",
   "description": "Adaptive engineering workflow rails for Codex",
   "author": {
     "name": "BrainerVirus"

package/dist/launch-mcp.js

@@ -22540,6 +22540,7 @@ var SUPPORT_MATRIX = {
   node: { minimum: "24", current: "24.20.0" },
   opencode: { minimum: "1.18.30", current: "1.18.34" },
   codex: { cli: "0.153.4", desktopPackage: "26.901.20858", bundledCodexCli: "0.153.0-alpha.5" },
+  claudeCode: { cli: "2.1.288" },
   os: ["ubuntu-latest", "macos-latest", "windows-latest"]
 };
 
@@ -24984,10 +24985,13 @@ var redactSecrets = (value) => applyPatterns(value);
 import fs9 from "node:fs";
 import path12 from "node:path";
 import { spawnSync as spawnSync5 } from "node:child_process";
+// packages/workit-core/src/forge/pr-body.ts
 function parseGhIssue(value) {
   const m = /issues\/(\d+)/.exec(value);
   return m ? m[1] : String(value).trim().replace(/^#/, "");
 }
+
+// packages/workit-core/src/core/pr-create.ts
 function whichOnPath(tool) {
   const names = process.platform === "win32" ? [tool, `${tool}.exe`, `${tool}.cmd`] : [tool];
   for (const dir of (process.env.PATH ?? "").split(path12.delimiter)) {
@@ -25887,6 +25891,37 @@ var fetchYouTrackIssueBody = async (issue, creds = youTrackToken, request = youT
   }
 };
 
+// packages/workit-core/src/forge/redact.ts
+var KEY = String.raw`[A-Za-z0-9_.-]*?(?:token|secret|password|passwd|pwd|api[_-]?key|access[_-]?key|account[_-]?key|private[_-]?key|client[_-]?secret|credentials?|authorization|cookie|signature)[A-Za-z0-9_.-]*`;
+var ASSIGNMENT = new RegExp(String.raw`(?<![A-Za-z0-9])(["']?${KEY}["']?\s*[:=]\s*["']?)((?:bearer|basic|token|digest)\s+)?([^\s"',;&]+)`, "giu");
+var QUOTED_ASSIGNMENT = new RegExp(String.raw`(?<![A-Za-z0-9])(["']?${KEY}["']?\s*[:=]\s*)(["'])([^"'\n]*[^\s"'][^"'\n]*)\2`, "giu");
+var ANSI = new RegExp(String.raw`\u001b\[[0-9;?]*[ -/]*[@-~]|\u001b\][^\u0007]*\u0007`, "gu");
+
+// packages/workit-core/src/git/rev.ts
+var MAX_BUFFER = 256 * 1024 * 1024;
+var MAX_UNTRACKED_BYTES = 5 * 1024 * 1024;
+
+// packages/workit-core/src/ledger.ts
+var PASSING = new Set(["verified", "tests-verified", "type-check-only"]);
+var FAILING = new Set(["failed", "blocked"]);
+var PR_ROW_TYPES = new Set(["pr.created", "pr.status", "pr.merged"]);
+var NETWORK_FS_TYPES = new Set([
+  26985,
+  20859,
+  4266872130,
+  4283649346,
+  1702057286,
+  1397113167,
+  12805120,
+  16914839,
+  1196443219,
+  198183888
+]);
+var OBSERVED_ONLY = new Set(["check", ...PR_ROW_TYPES]);
+
+// packages/workit-core/src/git/ops.ts
+var COMMIT_TIMEOUT_MS = 10 * 60000;
+
 // packages/workit-core/src/core/external-action-effects.ts
 var readExternalContext = async (root, payload) => {
   if (payload.range !== undefined && !isSafeContextRange(payload.range))

package/dist/workit-hook.js

@@ -15423,6 +15423,8 @@ var shellPolicy = (cwd, command) => {
 var usable2 = (value) => value === "native" || value === "partial";
 var NONE2 = { kind: "none" };
 var offered = new Set;
+var CLAUDE_WORKTREE_IMPLEMENTER = "workit:implementer";
+var subagentStartText = (host, descriptor, event) => host === "claude_code" && event.agentType === CLAUDE_WORKTREE_IMPLEMENTER ? `Workit observed ${descriptor.label} subagent ${event.agentId} (${event.agentType}) working in its own git worktree: it may edit and commit there, within its brief's scope. Before the first commit, switch to a policy-compliant branch (\`git switch -c <type>/<slug>\`, e.g. feature/<slug>); branch policy hooks still deny protected or non-compliant branches. Never push, open a PR, or merge unless the brief asks for it.` : `Workit observed ${descriptor.label} subagent ${event.agentId} (${event.agentType}) as read-only/agent-guided; writer delegation is unavailable.`;
 function handleHook(input, deps) {
   const { descriptor } = deps;
   const event = input.event;
@@ -15448,10 +15450,7 @@ function handleHook(input, deps) {
     case "shell.pre":
       return usable2(descriptor.shellPolicy.deny) ? shellPolicy(input.cwd, event.command) : NONE2;
     case "subagent.start":
-      return {
-        kind: "context",
-        text: `Workit observed ${descriptor.label} subagent ${event.agentId} (${event.agentType}) as read-only/agent-guided; writer delegation is unavailable.`
-      };
+      return { kind: "context", text: subagentStartText(input.host, descriptor, event) };
     case "compact.pre":
       return {
         kind: "notice",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-codex",
-  "version": "2.4.0",
+  "version": "2.6.0",
   "private": false,
   "description": "Workit Codex CLI/desktop plugin — shared MCP transport, hooks, and fourteen method skills",
   "keywords": [
@@ -38,8 +38,8 @@
     "build": "bun scripts/build.ts"
   },
   "dependencies": {
-    "@brainervirus/workit-core": "^2.4.0",
-    "@brainervirus/workit-mcp": "^2.4.0"
+    "@brainervirus/workit-core": "^2.6.0",
+    "@brainervirus/workit-mcp": "^2.6.0"
   },
   "engines": {
     "node": ">=24"