@brainervirus/workit-codex 8.19.1 → 8.19.2

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "workit",
-  "version": "8.19.1",
+  "version": "8.19.2",
   "description": "Adaptive engineering workflow rails for Codex",
   "author": {
     "name": "BrainerVirus"

package/dist/{workit-hook-rkwtxnyc.js → workit-hook-00hstm40.js}

@@ -7,7 +7,7 @@ import {
   gateCheckNames,
   checkCommand,
   maybeHeavy
-} from "./workit-hook-8yfjygc1.js";
+} from "./workit-hook-kg4dxyfv.js";
 // packages/workit-core/src/hooks/descriptor.ts
 var support = (descriptor, axis) => {
   if (axis.startsWith("event:"))
@@ -21227,7 +21227,7 @@ var canonical2 = (file) => {
   let rest = "";
   for (let dir = path24.resolve(file);; dir = path24.dirname(dir)) {
     try {
-      return path24.join(realpathSync5(dir), rest);
+      return path24.join(realpathSync5.native(dir), rest);
     } catch {
       if (path24.dirname(dir) === dir)
         return path24.resolve(file);
@@ -21447,18 +21447,26 @@ var CD2 = new Set(["cd", "chdir", "set-location", "sl"]);
 var PUSHD2 = new Set(["pushd", "push-location"]);
 var POPD2 = new Set(["popd", "pop-location"]);
 var cdInto = (dir, words) => {
-  const target = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const named = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const target = named === undefined ? undefined : homeExpanded(named);
   if (dir === undefined || target === "-" || target && /^~|[$`*?]/.test(target))
     return;
   return target === undefined ? os9.homedir() : path24.resolve(dir, target);
 };
 var quoteWord2 = (word) => /^[\w@%+=:,./-]+$/.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`;
+var homeExpanded = (file) => {
+  const match = /^(?:~|\$HOME|\$\{HOME\})(?=\/|$)/.exec(file);
+  return match ? (process.env.HOME || os9.homedir()) + file.slice(match[0].length) : file;
+};
 var segmentTargets = (cwd, command, dialect, depth = 0) => {
   const targets = [];
   let dir = cwd;
   let stack = [];
   const groups = [];
-  const at = (file) => path24.isAbsolute(file) ? file : dir === undefined ? null : path24.resolve(dir, file);
+  const at = (file) => {
+    const home = homeExpanded(file);
+    return path24.isAbsolute(home) ? home : dir === undefined ? null : path24.resolve(dir, home);
+  };
   for (const segment of segmentsOf(command, dialect)) {
     if (segment.group === "open") {
       groups.push({ dir, stack: [...stack] });
@@ -21563,7 +21571,39 @@ var claimAll = (owner, targets, deps) => {
     claimLiveSession(target, owner, deps);
 };
 var liveTargets = (cwd, paths) => paths?.length ? paths.map((file) => path24.resolve(cwd, file)) : [path24.join(cwd, DIR_TARGET)];
+var issuedTarget = (cwd, targets) => {
+  const state = resolveStateDir();
+  const found = targets.find((target) => underIssued(state, cwd, homeExpanded(target), process.platform, canonical2));
+  return found ?? null;
+};
+var underIssued = (state, cwd, target, platform = process.platform, real = (file) => file) => {
+  const win = platform === "win32";
+  const p = win ? path24.win32 : path24.posix;
+  const fold = (value) => win || platform === "darwin" ? value.toLowerCase() : value;
+  const named = win ? target.replace(/^\/([a-zA-Z])(?=\/|$)/, "$1:") : target;
+  const relative = p.relative(fold(real(p.resolve(state))), fold(real(p.resolve(cwd, named))));
+  if (relative.startsWith("..") || p.isAbsolute(relative))
+    return false;
+  return relative.split(p.sep)[0].startsWith("issued");
+};
+var unquotedWindowsIssued = (command) => {
+  if (process.platform !== "win32" || !command.includes("\\"))
+    return false;
+  const flat = (value) => value.replaceAll("\\", "/").toLowerCase();
+  return flat(command).includes(`${flat(resolveStateDir())}/issued`) && shellWrites(command).writes;
+};
+var issuedDeny = (file) => {
+  const unblock = "Issued ids and tokens are written only by Workit's SubagentStart hook. Run the verifier or reviewer agent so the host issues its own session; never edit the issued registries by hand.";
+  return {
+    kind: "deny",
+    reason: `workit issued-registry guard: ${file} is under Workit's issued-session state. ${unblock}`,
+    unblock
+  };
+};
 function writeGate(cwd, paths, owner, deps) {
+  const forged = paths?.length ? issuedTarget(cwd, paths) : null;
+  if (forged)
+    return issuedDeny(forged);
   if (!owner)
     return beforeWriteGate(cwd, paths);
   const targets = liveTargets(cwd, paths);
@@ -21576,6 +21616,11 @@ function writeGate(cwd, paths, owner, deps) {
   return decision;
 }
 function shellGate(cwd, command, owner, dialect = "posix", deps) {
+  try {
+    const forged = issuedTarget(cwd, segmentTargets(cwd, command, dialect)) ?? (unquotedWindowsIssued(command) ? "the issued registry" : null);
+    if (forged)
+      return issuedDeny(forged);
+  } catch {}
   const writes = shellWrites(command);
   let targets = [];
   if (owner) {

package/dist/{workit-hook-8yfjygc1.js → workit-hook-kg4dxyfv.js}

@@ -290,4 +290,4 @@ function maybeHeavy(command, cwd, env = process.env) {
   }
 }
 
-export { CHECKS_FILE, repoHeavyCommands, loadCheckConfig, matchesNamedCheck, gateCheckNames, checkCommand, maybeHeavy };
+export { CHECKS_FILE, repoHeavyCommands, loadCheckConfig, matchesNamedCheck, gateCheckNames, checkCommand, stateDir, maybeHeavy };

package/dist/workit-hook.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import {
+  stateDir,
   maybeHeavy
-} from "./workit-hook-8yfjygc1.js";
+} from "./workit-hook-kg4dxyfv.js";
 
 // packages/workit-codex/hooks/launcher.ts
 var payload = "";
@@ -9,6 +10,10 @@ for await (const chunk of process.stdin)
   payload += String(chunk);
 var SHELL_TOOLS = new Set(["bash", "unified-exec"]);
 var WRITE_TOOLS = new Set(["applypatch", "edit", "write"]);
+var mentionsIssued = (text) => {
+  const flat = (value) => value.replaceAll("\\", "/").toLowerCase();
+  return /issued/i.test(text) || flat(text).includes(flat(stateDir(process.env)));
+};
 var quietEvent = () => {
   try {
     const value = JSON.parse(payload);
@@ -29,7 +34,7 @@ var quietEvent = () => {
       return null;
     if (event === "PostToolUse")
       return /\bcommit\b/.test(text) ? null : event;
-    return /\b(?:git|gh|glab)\b/.test(text) || maybeHeavy(text, value.cwd) ? null : event;
+    return /\b(?:git|gh|glab)\b/.test(text) || mentionsIssued(text) || maybeHeavy(text, value.cwd) ? null : event;
   } catch {
     return null;
   }
@@ -39,6 +44,6 @@ if (quiet)
   process.stdout.write(`${JSON.stringify({ hookSpecificOutput: { hookEventName: quiet } })}
 `);
 else {
-  const { runCodexHook } = await import("./workit-hook-rkwtxnyc.js");
+  const { runCodexHook } = await import("./workit-hook-00hstm40.js");
   await runCodexHook([payload]);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-codex",
-  "version": "8.19.1",
+  "version": "8.19.2",
   "private": false,
   "description": "Workit Codex CLI/desktop plugin — shared MCP transport, hooks, method skills, and verifier/reviewer/implementer agents",
   "keywords": [
@@ -39,8 +39,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-core": "^8.19.1",
-    "@brainervirus/workit-mcp": "^8.19.1"
+    "@brainervirus/workit-core": "^8.19.2",
+    "@brainervirus/workit-mcp": "^8.19.2"
   },
   "engines": {
     "node": ">=24"