@brainervirus/workit-codex 8.27.0 → 8.28.1

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "workit",
-  "version": "8.27.0",
+  "version": "8.28.1",
   "description": "Adaptive engineering workflow rails for Codex",
   "author": {
     "name": "BrainerVirus"

package/dist/launch-mcp.js

@@ -13570,8 +13570,9 @@ function flatOperationJsonSchema(family, options = {}) {
   };
   const properties = { action: { type: "string", enum: actions } };
   const readField = (name) => name === "taskId" || (family === "task" ? READ_TASK_FIELDS.has(name) : family === "policy");
+  const taken = (name) => family === "policy" || actions.some((action) => actionKeys(family, action)?.accepted.has(name));
   for (const [name, field] of Object.entries({ ...COMMON, ...spec.fields }))
-    if (options.readOnly ? readField(name) : !(family === "state" && name === "expectedRevision"))
+    if (options.readOnly ? readField(name) : taken(name))
       properties[name] = property(field);
   return {
     $schema: "https://json-schema.org/draft/2020-12/schema",
@@ -13813,6 +13814,98 @@ function normalizeOperationInput(family, input, host) {
       request[key] = strings(request[key]);
   return request;
 }
+var defOf = (node) => node._zod.def;
+var unwrap = (node) => {
+  let inner = node;
+  while (["optional", "nullable"].includes(defOf(inner).type) && defOf(inner).innerType)
+    inner = defOf(inner).innerType;
+  return inner;
+};
+var FLAT_NAME = {
+  authorityRefs: "refs",
+  contentRefs: "refs",
+  statedChoice: "choice",
+  reviewContext: "reviewSession"
+};
+var NOT_FLAT = new Set(["schemaVersion", "action", "workspaceId"]);
+function actionKeys(family, action) {
+  const options = advertisedOperationSchemas[family].options;
+  const option = options.find((item) => {
+    const literal = defOf(item).shape?.action;
+    return literal._zod.def.values.includes(action);
+  });
+  if (!option)
+    return null;
+  const out = { accepted: new Set, required: [] };
+  const walk = (shape, nested) => {
+    for (const [key, node] of Object.entries(shape)) {
+      if (NOT_FLAT.has(key) || nested && key === "taskId")
+        continue;
+      const inner = unwrap(node);
+      const type = defOf(inner).type;
+      const needed = !["optional", "nullable"].includes(defOf(node).type);
+      if (key === "scope")
+        for (const name of ["scope", "paths", "exclusions"])
+          out.accepted.add(name);
+      else if (type === "object" && key !== "bundle" && !(key in FLAT_NAME)) {
+        out.accepted.add(key);
+        walk(defOf(inner).shape, true);
+      } else {
+        const name = FLAT_NAME[key] ?? key;
+        out.accepted.add(name);
+        if (needed && type !== "array" && type !== "record" && !out.required.includes(name))
+          out.required.push(name);
+      }
+    }
+  };
+  walk(defOf(option).shape, false);
+  return out;
+}
+function exampleOperation(family, action) {
+  const keys = actionKeys(family, action);
+  const example = { action };
+  for (const name of keys?.required ?? [])
+    example[name] = FLAT[family].fields[name]?.enum?.[0] ?? `<${name}>`;
+  if (family === "policy" && !keys?.required.length && action !== "explain")
+    example.riskTier = "normal";
+  return example;
+}
+var oneOf = (values) => values.join(" | ");
+function invalidOperation(family, input, error) {
+  const request = isObject2(input) ? input : {};
+  const action = typeof request.action === "string" ? request.action : "";
+  const actions = OPERATION_ACTIONS[family];
+  if (!actions.includes(action))
+    return failure2("invalid_input", `${family}: action must be one of ${oneOf(actions)}`, {
+      fields: [{ path: "action", reason: `got ${JSON.stringify(request.action ?? null)}` }]
+    });
+  const own = actionKeys(family, action);
+  const fields = [];
+  const sentence = [];
+  for (const issue of error.issues) {
+    if (issue.code === "unrecognized_keys") {
+      for (const key of issue.keys) {
+        const home = actions.find((other) => other !== action && actionKeys(family, other).accepted.has(key));
+        const reason = home ? `${key} belongs to action: ${home}` : `${key} is not a field of ${family} ${action}; it takes ${[...own.accepted].join(", ")}`;
+        fields.push({ path: key, reason });
+        sentence.push(reason);
+      }
+      continue;
+    }
+    const last = String(issue.path.at(-1) ?? "");
+    const name = Object.entries(FLAT_NAME).find(([contract]) => contract === last)?.[1] ?? last;
+    const missing = issue.code === "invalid_type" && /received undefined/.test(issue.message);
+    const absent = own.required.filter((key) => !(key in request));
+    const needs = missing && issue.path.length === 1 && absent.length ? absent.join(", ") : name;
+    const reason = missing ? `${family} ${action} requires ${needs}` : `${name}: ${issue.message}`;
+    fields.push({ path: issue.path.join("."), reason });
+    sentence.push(reason);
+  }
+  const example = JSON.stringify(exampleOperation(family, action));
+  return failure2("invalid_input", `${[...new Set(sentence)].join("; ")}. Example: ${example}`, {
+    fields
+  });
+}
 function parseAdvertisedOperation(family, input, host) {
   const request = normalizeOperationInput(family, input, host);
   if (isObject2(request) && request.schemaVersion !== SCHEMA_VERSION)
@@ -13820,12 +13913,7 @@ function parseAdvertisedOperation(family, input, host) {
   const parsed = advertisedOperationSchemas[family].safeParse(request);
   if (parsed.success)
     return success(null, null, request);
-  return failure2("invalid_input", "operation input is invalid", {
-    fields: parsed.error.issues.map((issue) => ({
-      path: issue.code === "unrecognized_keys" ? issue.keys.join(".") : issue.path.join("."),
-      reason: issue.message
-    }))
-  });
+  return invalidOperation(family, request, parsed.error);
 }
 // packages/workit-core/src/core/task-store.ts
 import { createHash as createHash8, randomUUID as randomUUID3 } from "node:crypto";
@@ -28202,6 +28290,96 @@ var WRITE_TOOLS = new Set([
 ]);
 // packages/workit-core/src/hooks/standing.ts
 var sinceStart = new Map;
+// packages/workit-core/src/core/role-models.ts
+var MODEL_ROLES = [
+  "decider",
+  "implementer",
+  "verifier",
+  "reviewer",
+  "explore",
+  "babysit"
+];
+var MODEL_TIERS = ["mundane", "standard", "hard"];
+var HOST_KEYS = new Set([
+  "claude_code",
+  "opencode",
+  "codex",
+  "codex_cli",
+  "codex_desktop",
+  "cursor",
+  "pi",
+  "default"
+]);
+var BUILT_IN_CLAUDE_CODE = {
+  decider: { model: "fable", effort: "high" },
+  "implementer.hard": { model: "opus" },
+  "implementer.standard": { model: "sonnet" },
+  "implementer.mundane": { model: "haiku" },
+  verifier: { model: "sonnet" },
+  reviewer: { model: "opus" },
+  explore: { model: "haiku" },
+  babysit: { model: "haiku" }
+};
+var isObject7 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+var name = (value) => typeof value === "string" && value.trim() ? value.trim() : null;
+var leaf = (value) => {
+  const text = name(value);
+  if (text)
+    return { model: text, effort: null };
+  if (!isObject7(value))
+    return null;
+  const model = name(value.model);
+  return model ? { model, effort: name(value.effort) } : null;
+};
+var isFlat = (value) => typeof value === "string" || isObject7(value) && Object.hasOwn(value, "model");
+var forHost = (value, host) => {
+  if (isFlat(value))
+    return leaf(value);
+  if (!isObject7(value))
+    return null;
+  const family = host ? hostFamily(host) : null;
+  for (const key of [family, host, "default"])
+    if (key && Object.hasOwn(value, key)) {
+      const found = leaf(value[key]);
+      if (found)
+        return found;
+    }
+  return null;
+};
+var rolesOf = (models) => isObject7(models) && isObject7(models.roles) ? models.roles : null;
+var resolveRoleModel = (cwd, selector, host, dir) => {
+  const { role, tier } = selector;
+  for (const source of modelSources(cwd, dir)) {
+    const where = source.global ? "the global default" : `workspace ${source.name}`;
+    const roles = rolesOf(source.models);
+    const configured = roles && Object.hasOwn(roles, role) ? roles[role] : undefined;
+    const fromRoles = role === "implementer" ? tier && isObject7(configured) && Object.hasOwn(configured, tier) ? forHost(configured[tier], host) : null : forHost(configured, host);
+    if (fromRoles)
+      return { ...fromRoles, source: `models.roles in ${where}` };
+    if (role === "implementer" && tier && isObject7(source.tierModels)) {
+      const fromTiers = Object.hasOwn(source.tierModels, tier) ? forHost(source.tierModels[tier], host) : null;
+      if (fromTiers)
+        return { model: fromTiers.model, effort: null, source: `fanout.tierModels in ${where}` };
+    }
+  }
+  if (host && hostFamily(host) === "claude_code") {
+    const builtIn = BUILT_IN_CLAUDE_CODE[tier ? `${role}.${tier}` : role];
+    if (builtIn)
+      return { model: builtIn.model, effort: builtIn.effort ?? null, source: "built-in" };
+  }
+  return null;
+};
+var uniformImplementerModel = (cwd, host, dir) => {
+  const tiers = MODEL_TIERS.map((tier) => resolveRoleModel(cwd, { role: "implementer", tier }, host, dir));
+  const [first] = tiers;
+  return first && tiers.every((t) => t?.model === first.model && t.effort === first.effort) ? first : null;
+};
+var ROLE_SELECTORS = MODEL_ROLES.flatMap((role) => role === "implementer" ? MODEL_TIERS.map((tier) => ({ role, tier })) : [{ role }]);
+
+// packages/workit-core/src/hooks/agent-model.ts
+var MODELS = new Set(["sonnet", "opus", "haiku", "fable"]);
+var EFFORTS = new Set(["low", "medium", "high", "xhigh", "max"]);
+
 // packages/workit-core/src/hooks/cwd-normalize.ts
 var DIR = String.raw`[A-Za-z0-9_./@%+:,=-]+|'[^'$${"`"}\\\n]*'|"[^"$${"`"}\\!\n]*"`;
 var COMPOUND = new RegExp(String.raw`^\s*cd\s+(${DIR})\s*&&\s*(workit(?:\s[\s\S]*)?)$`, "u");
@@ -28375,92 +28553,6 @@ var codexCapabilities = (host, availability = {}) => capabilitiesFor(codexDescri
 if (false)
   ;
 
-// packages/workit-core/src/core/role-models.ts
-var MODEL_ROLES = [
-  "decider",
-  "implementer",
-  "verifier",
-  "reviewer",
-  "explore",
-  "babysit"
-];
-var MODEL_TIERS = ["mundane", "standard", "hard"];
-var HOST_KEYS = new Set([
-  "claude_code",
-  "opencode",
-  "codex",
-  "codex_cli",
-  "codex_desktop",
-  "cursor",
-  "pi",
-  "default"
-]);
-var BUILT_IN_CLAUDE_CODE = {
-  decider: { model: "fable", effort: "high" },
-  "implementer.hard": { model: "opus" },
-  "implementer.standard": { model: "sonnet" },
-  "implementer.mundane": { model: "haiku" },
-  verifier: { model: "sonnet" },
-  reviewer: { model: "opus" },
-  explore: { model: "haiku" },
-  babysit: { model: "haiku" }
-};
-var isObject7 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
-var name = (value) => typeof value === "string" && value.trim() ? value.trim() : null;
-var leaf = (value) => {
-  const text = name(value);
-  if (text)
-    return { model: text, effort: null };
-  if (!isObject7(value))
-    return null;
-  const model = name(value.model);
-  return model ? { model, effort: name(value.effort) } : null;
-};
-var isFlat = (value) => typeof value === "string" || isObject7(value) && Object.hasOwn(value, "model");
-var forHost = (value, host) => {
-  if (isFlat(value))
-    return leaf(value);
-  if (!isObject7(value))
-    return null;
-  const family = host ? hostFamily(host) : null;
-  for (const key of [family, host, "default"])
-    if (key && Object.hasOwn(value, key)) {
-      const found = leaf(value[key]);
-      if (found)
-        return found;
-    }
-  return null;
-};
-var rolesOf = (models) => isObject7(models) && isObject7(models.roles) ? models.roles : null;
-var resolveRoleModel = (cwd, selector, host, dir) => {
-  const { role, tier } = selector;
-  for (const source of modelSources(cwd, dir)) {
-    const where = source.global ? "the global default" : `workspace ${source.name}`;
-    const roles = rolesOf(source.models);
-    const configured = roles && Object.hasOwn(roles, role) ? roles[role] : undefined;
-    const fromRoles = role === "implementer" ? tier && isObject7(configured) && Object.hasOwn(configured, tier) ? forHost(configured[tier], host) : null : forHost(configured, host);
-    if (fromRoles)
-      return { ...fromRoles, source: `models.roles in ${where}` };
-    if (role === "implementer" && tier && isObject7(source.tierModels)) {
-      const fromTiers = Object.hasOwn(source.tierModels, tier) ? forHost(source.tierModels[tier], host) : null;
-      if (fromTiers)
-        return { model: fromTiers.model, effort: null, source: `fanout.tierModels in ${where}` };
-    }
-  }
-  if (host && hostFamily(host) === "claude_code") {
-    const builtIn = BUILT_IN_CLAUDE_CODE[tier ? `${role}.${tier}` : role];
-    if (builtIn)
-      return { model: builtIn.model, effort: builtIn.effort ?? null, source: "built-in" };
-  }
-  return null;
-};
-var uniformImplementerModel = (cwd, host, dir) => {
-  const tiers = MODEL_TIERS.map((tier) => resolveRoleModel(cwd, { role: "implementer", tier }, host, dir));
-  const [first] = tiers;
-  return first && tiers.every((t) => t?.model === first.model && t.effort === first.effort) ? first : null;
-};
-var ROLE_SELECTORS = MODEL_ROLES.flatMap((role) => role === "implementer" ? MODEL_TIERS.map((tier) => ({ role, tier })) : [{ role }]);
-
 // packages/workit-codex/scripts/agents.ts
 import {
   existsSync as existsSync10,

package/dist/{workit-hook-sza2zvq6.js → workit-hook-0vzd6e1j.js}

@@ -1,4 +1,11 @@
 #!/usr/bin/env node
+import {
+  gitStoreDir2,
+  standingSeenFile2,
+  readStandingRev2,
+  readStandingSeen2,
+  writeStandingSeen2
+} from "./workit-hook-jy7y0gdx.js";
 import {
   CHECKS_FILE,
   repoHeavyCommands,
@@ -6,13 +13,8 @@ import {
   matchesNamedCheck,
   gateCheckNames,
   checkCommand,
-  maybeHeavy,
-  gitStoreDir,
-  standingSeenFile,
-  readStandingRev,
-  readStandingSeen,
-  writeStandingSeen
-} from "./workit-hook-vhz9yrcw.js";
+  maybeHeavy2
+} from "./workit-hook-2m8a4m5j.js";
 // packages/workit-core/src/hooks/descriptor.ts
 var support = (descriptor, axis) => {
   if (axis.startsWith("event:"))
@@ -8814,6 +8816,34 @@ var workspaceTrailers = (cwd, dir) => {
   };
 };
 var workspaceLiveSessionGuard = (cwd, dir) => inheritedSetting(cwd, dir, (entry) => typeof entry.liveSessionGuard === "boolean")?.source?.liveSessionGuard !== false;
+var modelSources = (cwd, dir) => {
+  const out = [];
+  try {
+    const matched = matchRuntimeWorkspace(cwd, dir);
+    if (matched) {
+      const enclosing = matched.matches.filter((entry) => entry !== matched.selected).toSorted((a, b) => globSpecificity(b.glob) - globSpecificity(a.glob));
+      for (const entry of [matched.selected, ...enclosing])
+        out.push({
+          name: entry.name,
+          global: false,
+          models: entry.models,
+          tierModels: entry.fanout?.tierModels
+        });
+    }
+  } catch {}
+  try {
+    const document = JSON.parse(readFileSync2(path6.join(dir ?? configDir(), "workspaces.json"), "utf8"));
+    if (document && typeof document === "object" && !Array.isArray(document))
+      out.push({
+        name: "global",
+        global: true,
+        models: document.models,
+        tierModels: undefined
+      });
+  } catch {}
+  return out;
+};
+var hostFamily = (host) => host.replace(/_(?:cli|desktop)$/u, "");
 var TIER_KEYS = new Set(["mundane", "standard", "hard"]);
 var TIER_HOSTS = new Set([
   "claude_code",
@@ -9571,11 +9601,16 @@ var branchPolicySnapshotFor = (workspaceRoot) => {
     fingerprint
   };
 };
+var rethrowRuntimeBug = (error) => {
+  if (error instanceof TypeError || error instanceof ReferenceError)
+    throw error;
+};
 var validateBranchNameFor = (workspaceRoot, name) => {
   try {
     const resolved = branchPolicySnapshotFor(workspaceRoot);
     return validateBranchNamePolicy(name, resolved.namePolicy, resolved.source);
   } catch (error) {
+    rethrowRuntimeBug(error);
     const correction = "repair or select a valid workspace policy before creating a branch";
     return {
       ok: false,
@@ -15196,6 +15231,7 @@ function normalizeOperationInput(family, input, host) {
       request[key] = strings(request[key]);
   return request;
 }
+var NOT_FLAT = new Set(["schemaVersion", "action", "workspaceId"]);
 
 // packages/workit-core/src/core/policy/judgment.ts
 var isObject6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
@@ -20492,7 +20528,7 @@ var rulesFor = (host, cwd, env) => {
 function heavyGate(cwd, command, options) {
   const env = options.env ?? process.env;
   try {
-    if (env.WORKIT_HEAVY_GATE === "0" || !maybeHeavy(command, cwd, env) || !workitOnPath(env))
+    if (env.WORKIT_HEAVY_GATE === "0" || !maybeHeavy2(command, cwd, env) || !workitOnPath(env))
       return { kind: "none" };
     return heavyPlan(command, {
       cwd,
@@ -21871,11 +21907,11 @@ var standingFor = (input, store, rev) => {
   return { rev, orders, rows };
 };
 var located = (input) => {
-  const store = input.session.id ? gitStoreDir(input.cwd) : null;
-  const rev = store ? readStandingRev(store) : null;
+  const store = input.session.id ? gitStoreDir2(input.cwd) : null;
+  const rev = store ? readStandingRev2(store) : null;
   if (!store || rev === null)
     return null;
-  return { store, rev, file: standingSeenFile(store, input.session.id, input.session.agentId) };
+  return { store, rev, file: standingSeenFile2(store, input.session.id, input.session.agentId) };
 };
 var seedStanding = (input) => {
   try {
@@ -21883,7 +21919,7 @@ var seedStanding = (input) => {
     if (!where)
       return;
     const now = standingFor(input, where.store, where.rev);
-    writeStandingSeen(where.file, { rev: where.rev, ids: [...now.orders.keys()] });
+    writeStandingSeen2(where.file, { rev: where.rev, ids: [...now.orders.keys()] });
   } catch {}
 };
 var fanoutOf = (row) => typeof row.fanout === "string" ? row.fanout : "?";
@@ -21910,17 +21946,144 @@ var standingDelta = (input) => {
     const where = located(input);
     if (!where)
       return null;
-    const seen = readStandingSeen(where.file);
+    const seen = readStandingSeen2(where.file);
     if (seen.rev === where.rev)
       return null;
     const now = standingFor(input, where.store, where.rev);
-    writeStandingSeen(where.file, { rev: where.rev, ids: [...now.orders.keys()] });
+    writeStandingSeen2(where.file, { rev: where.rev, ids: [...now.orders.keys()] });
     return changedSince(now, seen.ids);
   } catch {
     return null;
   }
 };
 var sinceStart = new Map;
+// packages/workit-core/src/core/role-models.ts
+var MODEL_ROLES = [
+  "decider",
+  "implementer",
+  "verifier",
+  "reviewer",
+  "explore",
+  "babysit"
+];
+var MODEL_TIERS = ["mundane", "standard", "hard"];
+var HOST_KEYS = new Set([
+  "claude_code",
+  "opencode",
+  "codex",
+  "codex_cli",
+  "codex_desktop",
+  "cursor",
+  "pi",
+  "default"
+]);
+var BUILT_IN_CLAUDE_CODE = {
+  decider: { model: "fable", effort: "high" },
+  "implementer.hard": { model: "opus" },
+  "implementer.standard": { model: "sonnet" },
+  "implementer.mundane": { model: "haiku" },
+  verifier: { model: "sonnet" },
+  reviewer: { model: "opus" },
+  explore: { model: "haiku" },
+  babysit: { model: "haiku" }
+};
+var isObject7 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+var name = (value) => typeof value === "string" && value.trim() ? value.trim() : null;
+var leaf = (value) => {
+  const text = name(value);
+  if (text)
+    return { model: text, effort: null };
+  if (!isObject7(value))
+    return null;
+  const model = name(value.model);
+  return model ? { model, effort: name(value.effort) } : null;
+};
+var isFlat = (value) => typeof value === "string" || isObject7(value) && Object.hasOwn(value, "model");
+var forHost = (value, host) => {
+  if (isFlat(value))
+    return leaf(value);
+  if (!isObject7(value))
+    return null;
+  const family = host ? hostFamily(host) : null;
+  for (const key of [family, host, "default"])
+    if (key && Object.hasOwn(value, key)) {
+      const found = leaf(value[key]);
+      if (found)
+        return found;
+    }
+  return null;
+};
+var rolesOf = (models) => isObject7(models) && isObject7(models.roles) ? models.roles : null;
+var resolveRoleModel = (cwd, selector, host, dir) => {
+  const { role, tier } = selector;
+  for (const source of modelSources(cwd, dir)) {
+    const where = source.global ? "the global default" : `workspace ${source.name}`;
+    const roles = rolesOf(source.models);
+    const configured = roles && Object.hasOwn(roles, role) ? roles[role] : undefined;
+    const fromRoles = role === "implementer" ? tier && isObject7(configured) && Object.hasOwn(configured, tier) ? forHost(configured[tier], host) : null : forHost(configured, host);
+    if (fromRoles)
+      return { ...fromRoles, source: `models.roles in ${where}` };
+    if (role === "implementer" && tier && isObject7(source.tierModels)) {
+      const fromTiers = Object.hasOwn(source.tierModels, tier) ? forHost(source.tierModels[tier], host) : null;
+      if (fromTiers)
+        return { model: fromTiers.model, effort: null, source: `fanout.tierModels in ${where}` };
+    }
+  }
+  if (host && hostFamily(host) === "claude_code") {
+    const builtIn = BUILT_IN_CLAUDE_CODE[tier ? `${role}.${tier}` : role];
+    if (builtIn)
+      return { model: builtIn.model, effort: builtIn.effort ?? null, source: "built-in" };
+  }
+  return null;
+};
+var ROLE_SELECTORS = MODEL_ROLES.flatMap((role) => role === "implementer" ? MODEL_TIERS.map((tier) => ({ role, tier })) : [{ role }]);
+var roleForAgentType = (agentType, prompt) => {
+  switch (agentType) {
+    case "workit:implementer": {
+      const tier = typeof prompt === "string" ? /^[ \t]*TIER:[ \t]*(mundane|standard|hard)\b/im.exec(prompt)?.[1] : undefined;
+      return { role: "implementer", tier: tier?.toLowerCase() ?? "standard" };
+    }
+    case "workit:verifier":
+      return { role: "verifier" };
+    case "workit:reviewer":
+      return { role: "reviewer" };
+    case "Explore":
+      return { role: "explore" };
+    default:
+      return null;
+  }
+};
+
+// packages/workit-core/src/hooks/agent-model.ts
+var MODELS = new Set(["sonnet", "opus", "haiku", "fable"]);
+var EFFORTS = new Set(["low", "medium", "high", "xhigh", "max"]);
+var given = (value) => typeof value === "string" && value.trim() !== "";
+var agentModelDecision = (cwd, tool, env = process.env) => {
+  if (given(tool.model) || env.CLAUDE_CODE_SUBAGENT_MODEL_FORCE)
+    return { kind: "none" };
+  const selector = roleForAgentType(tool.subagent_type, tool.prompt);
+  if (!selector)
+    return { kind: "none" };
+  const resolved = resolveRoleModel(cwd, selector, "claude_code");
+  if (!resolved)
+    return { kind: "none" };
+  const model = resolved.model.toLowerCase();
+  const effort = resolved.effort?.toLowerCase() ?? null;
+  const input = { ...tool };
+  if (MODELS.has(model))
+    input.model = model;
+  if (effort && EFFORTS.has(effort) && !given(tool.effort))
+    input.effort = effort;
+  if (input.model === undefined && input.effort === tool.effort)
+    return { kind: "none" };
+  const label = selector.tier ? `${selector.role} ${selector.tier}` : selector.role;
+  return {
+    kind: "update-input",
+    input,
+    text: `Workit set ${String(input.model ?? "no model")}${input.effort !== tool.effort ? ` (effort ${String(input.effort)})` : ""} on this ${String(tool.subagent_type)} spawn: role ${label}, ${resolved.source}. Name a model to choose another.`
+  };
+};
+
 // packages/workit-core/src/hooks/cwd-normalize.ts
 var DIR = String.raw`[A-Za-z0-9_./@%+:,=-]+|'[^'$${"`"}\\\n]*'|"[^"$${"`"}\\!\n]*"`;
 var COMPOUND = new RegExp(String.raw`^\s*cd\s+(${DIR})\s*&&\s*(workit(?:\s[\s\S]*)?)$`, "u");
@@ -22284,7 +22447,7 @@ function handleHook(input, deps) {
   const delta = standingDelta(input);
   if (!delta)
     return decision;
-  return decision.kind === "rewrite" ? { ...decision, text: [decision.text, delta].filter(Boolean).join(`
+  return decision.kind === "rewrite" || decision.kind === "update-input" ? { ...decision, text: [decision.text, delta].filter(Boolean).join(`
 `) } : withContextLine(decision, delta);
 }
 function decide(input, deps) {
@@ -22397,6 +22560,8 @@ function decide(input, deps) {
     case "tool.pre":
       if (event.skill)
         recordSkillLoad(input, event.skill, "tool");
+      if (event.agentInput && input.host === "claude_code")
+        return agentModelDecision(input.cwd, event.agentInput);
       return NONE6;
     case "stop":
       return usable2(descriptor.events.stop.support) ? stopDecision(input, descriptor) : NONE6;
@@ -22680,6 +22845,16 @@ var eventOf = (name, value) => {
             skill: isRecord5(value.tool_input) ? optionalText(value.tool_input.skill) : null
           }
         };
+      if (value.tool_name === "Agent" || value.tool_name === "Task")
+        return {
+          ok: true,
+          event: {
+            kind: "tool.pre",
+            tool: value.tool_name,
+            toolUseId,
+            ...isRecord5(value.tool_input) ? { agentInput: value.tool_input } : {}
+          }
+        };
       if (!SHELL_TOOLS.has(value.tool_name))
         return { ok: true, event: { kind: "tool.pre", tool: value.tool_name, toolUseId } };
       const command = toolCommand(value);
@@ -22756,7 +22931,7 @@ var CONTEXT_EVENTS = new Set([
   "PostToolUse"
 ]);
 var render = (decision, native) => {
-  if (decision.kind === "rewrite" && native === "PreToolUse" && decision.input)
+  if ((decision.kind === "rewrite" || decision.kind === "update-input") && native === "PreToolUse" && decision.input)
     return {
       json: {
         hookSpecificOutput: {

package/dist/workit-hook-27bwpc4a.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import {
+  stateDir2,
+  maybeHeavy2
+} from "./workit-hook-2m8a4m5j.js";
+export {
+  maybeHeavy2 as maybeHeavy,
+  stateDir2 as stateDir
+};

package/dist/{workit-hook-vhz9yrcw.js → workit-hook-2m8a4m5j.js}

@@ -235,7 +235,7 @@ function checkCommand(args, version, onPath = workitAvailable()) {
 // packages/workit-core/src/core/heavy-words.ts
 var HEAVY_WORDS = new Set(("npm npx pnpm pnpx yarn bun bunx deno corepack make gmake docker podman nerdctl " + "python python3 py uv poetry pdm pipenv hatch rye bundle rake nx " + "jest vitest mocha ava tap karma jasmine nyc c8 tsc vue-tsc svelte-check eslint stylelint " + "tslint webpack webpack-cli rollup parcel tsup vite next nuxt nuxi astro ng react-scripts " + "playwright cypress wdio testcafe turbo lerna sonar-scanner sonarless sonarless-mcp go " + "golangci-lint gotestsum staticcheck cargo mvn mvnw gradle gradlew ant sbt bazel bazelisk " + "buck2 dotnet msbuild pytest py.test tox nox mypy pyright pylint coverage maturin pip pip3 " + "rspec rails phpunit pest phpstan psalm composer mix swift xcodebuild flutter dart pod cmake " + "ninja meson ctest scons docker-compose buildah earthly").split(" "));
 var wordsOf = (command) => command.split(/[\s;&|()<>`'"]+/u).map((word) => (word.split(/[\\/]/u).at(-1) ?? "").toLowerCase().replace(/\.(?:exe|cmd|bat)$/u, "")).filter(Boolean);
-var stateDir = (env) => {
+var stateDir2 = (env) => {
   if (env.WORKFLOW_TOOLKIT_STATE)
     return env.WORKFLOW_TOOLKIT_STATE;
   if (env.XDG_STATE_HOME)
@@ -256,7 +256,7 @@ var readJson = (file) => {
 };
 var patternWords = (cwd, env) => {
   const patterns = [];
-  const machine = readJson(path2.join(stateDir(env), "heavy-commands.json"));
+  const machine = readJson(path2.join(stateDir2(env), "heavy-commands.json"));
   if (Array.isArray(machine?.patterns))
     patterns.push(...machine.patterns);
   for (let dir = path2.resolve(cwd);; dir = path2.dirname(dir)) {
@@ -278,7 +278,7 @@ var patternWords = (cwd, env) => {
   }
   return words;
 };
-function maybeHeavy(command, cwd, env = process.env) {
+function maybeHeavy2(command, cwd, env = process.env) {
   try {
     const words = wordsOf(command);
     if (words.some((word) => HEAVY_WORDS.has(word) || /^python[\d.]*$/u.test(word)))
@@ -290,64 +290,4 @@ function maybeHeavy(command, cwd, env = process.env) {
   }
 }
 
-// packages/workit-core/src/hooks/standing-signal.ts
-import { createHash } from "node:crypto";
-import fs3 from "node:fs";
-import path3 from "node:path";
-var gitStoreDir = (cwd) => {
-  try {
-    for (let dir = path3.resolve(cwd);; dir = path3.dirname(dir)) {
-      const dotGit = path3.join(dir, ".git");
-      if (fs3.existsSync(dotGit)) {
-        let gitDir = dotGit;
-        if (fs3.statSync(dotGit).isFile()) {
-          const target = /^gitdir:\s*(.+)$/mu.exec(fs3.readFileSync(dotGit, "utf8"))?.[1]?.trim();
-          if (!target)
-            return null;
-          gitDir = path3.resolve(dir, target);
-          const common = path3.join(gitDir, "commondir");
-          if (fs3.existsSync(common))
-            gitDir = path3.resolve(gitDir, fs3.readFileSync(common, "utf8").trim());
-        }
-        return path3.join(gitDir, "workit");
-      }
-      if (path3.dirname(dir) === dir)
-        return null;
-    }
-  } catch {
-    return null;
-  }
-};
-var standingRevFile = (store) => path3.join(store, "standing", "rev");
-var standingSeenFile = (store, session, agentId) => path3.join(store, "standing", "seen", `${createHash("sha256").update(`${session}\x00${agentId ?? ""}`).digest("hex").slice(0, 32)}.json`);
-var readStandingRev = (store) => {
-  try {
-    return fs3.readFileSync(standingRevFile(store), "utf8").trim() || null;
-  } catch {
-    return null;
-  }
-};
-var readStandingSeen = (file) => {
-  try {
-    const value = JSON.parse(fs3.readFileSync(file, "utf8"));
-    return {
-      rev: typeof value.rev === "string" ? value.rev : null,
-      ids: Array.isArray(value.ids) ? value.ids.filter((id) => typeof id === "string") : []
-    };
-  } catch {
-    return { rev: null, ids: [] };
-  }
-};
-var writeStandingSeen = (file, seen) => {
-  try {
-    fs3.mkdirSync(path3.dirname(file), { recursive: true });
-    fs3.writeFileSync(file, JSON.stringify(seen));
-  } catch {}
-};
-var standingPending = (cwd, session, agentId) => {
-  const store = gitStoreDir(cwd);
-  const rev = store ? readStandingRev(store) : null;
-  return rev !== null && readStandingSeen(standingSeenFile(store, session, agentId)).rev !== rev;
-};
-
-export { CHECKS_FILE, repoHeavyCommands, loadCheckConfig, matchesNamedCheck, gateCheckNames, checkCommand, stateDir, maybeHeavy, gitStoreDir, standingSeenFile, readStandingRev, readStandingSeen, writeStandingSeen, standingPending };
+export { CHECKS_FILE, repoHeavyCommands, loadCheckConfig, matchesNamedCheck, gateCheckNames, checkCommand, stateDir2, maybeHeavy2 };

package/dist/workit-hook-jy7y0gdx.js

@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+
+// packages/workit-core/src/hooks/standing-signal.ts
+import { createHash } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+var gitStoreDir2 = (cwd) => {
+  try {
+    for (let dir = path.resolve(cwd);; dir = path.dirname(dir)) {
+      const dotGit = path.join(dir, ".git");
+      if (fs.existsSync(dotGit)) {
+        let gitDir = dotGit;
+        if (fs.statSync(dotGit).isFile()) {
+          const target = /^gitdir:\s*(.+)$/mu.exec(fs.readFileSync(dotGit, "utf8"))?.[1]?.trim();
+          if (!target)
+            return null;
+          gitDir = path.resolve(dir, target);
+          const common = path.join(gitDir, "commondir");
+          if (fs.existsSync(common))
+            gitDir = path.resolve(gitDir, fs.readFileSync(common, "utf8").trim());
+        }
+        return path.join(gitDir, "workit");
+      }
+      if (path.dirname(dir) === dir)
+        return null;
+    }
+  } catch {
+    return null;
+  }
+};
+var standingRevFile = (store) => path.join(store, "standing", "rev");
+var standingSeenFile2 = (store, session, agentId) => path.join(store, "standing", "seen", `${createHash("sha256").update(`${session}\x00${agentId ?? ""}`).digest("hex").slice(0, 32)}.json`);
+var readStandingRev2 = (store) => {
+  try {
+    return fs.readFileSync(standingRevFile(store), "utf8").trim() || null;
+  } catch {
+    return null;
+  }
+};
+var readStandingSeen2 = (file) => {
+  try {
+    const value = JSON.parse(fs.readFileSync(file, "utf8"));
+    return {
+      rev: typeof value.rev === "string" ? value.rev : null,
+      ids: Array.isArray(value.ids) ? value.ids.filter((id) => typeof id === "string") : []
+    };
+  } catch {
+    return { rev: null, ids: [] };
+  }
+};
+var writeStandingSeen2 = (file, seen) => {
+  try {
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, JSON.stringify(seen));
+  } catch {}
+};
+var bumpStandingRev2 = (store, rev) => {
+  try {
+    fs.mkdirSync(path.join(store, "standing"), { recursive: true });
+    fs.writeFileSync(standingRevFile(store), `${rev}
+`);
+  } catch {}
+};
+var standingPending2 = (cwd, session, agentId) => {
+  const store = gitStoreDir2(cwd);
+  const rev = store ? readStandingRev2(store) : null;
+  return rev !== null && readStandingSeen2(standingSeenFile2(store, session, agentId)).rev !== rev;
+};
+
+export { gitStoreDir2, standingSeenFile2, readStandingRev2, readStandingSeen2, writeStandingSeen2, bumpStandingRev2, standingPending2 };

package/dist/workit-hook-mk64s4fk.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import {
+  gitStoreDir2,
+  standingSeenFile2,
+  readStandingRev2,
+  readStandingSeen2,
+  writeStandingSeen2,
+  bumpStandingRev2,
+  standingPending2
+} from "./workit-hook-jy7y0gdx.js";
+export {
+  bumpStandingRev2 as bumpStandingRev,
+  gitStoreDir2 as gitStoreDir,
+  readStandingRev2 as readStandingRev,
+  readStandingSeen2 as readStandingSeen,
+  standingPending2 as standingPending,
+  standingSeenFile2 as standingSeenFile,
+  writeStandingSeen2 as writeStandingSeen
+};

package/dist/workit-hook.js

@@ -1,11 +1,41 @@
 #!/usr/bin/env node
-import {
-  stateDir,
-  maybeHeavy,
-  standingPending
-} from "./workit-hook-vhz9yrcw.js";
 
 // packages/workit-codex/hooks/launcher.ts
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+var nodeFloorMessage = () => {
+  try {
+    const found = process.env.WORKIT_HOOK_NODE_VERSION || process.versions.node;
+    const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+    const range = JSON.parse(readFileSync(path.join(root, "package.json"), "utf8")).engines?.node;
+    const min = /^>=\s*(\d+)(?:\.(\d+))?(?:\.(\d+))?/.exec(String(range ?? ""));
+    if (!min)
+      return null;
+    const need = [min[1], min[2] ?? 0, min[3] ?? 0].map(Number);
+    const have = String(found).replace(/^v/, "").split(".").map(Number);
+    for (let i = 0;i < 3; i++) {
+      const a = have[i] ?? 0;
+      if (Number.isNaN(a))
+        return null;
+      if (a !== need[i])
+        return a < need[i] ? `needs Node ${range}, found ${found}` : null;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+};
+var tooOld = nodeFloorMessage();
+if (tooOld) {
+  process.stderr.write(`[workit] Codex hook unavailable: ${tooOld}
+`);
+  process.stdout.write(`{}
+`);
+  process.exit(0);
+}
+var { maybeHeavy, stateDir } = await import("./workit-hook-27bwpc4a.js");
+var { standingPending } = await import("./workit-hook-mk64s4fk.js");
 var payload = "";
 for await (const chunk of process.stdin)
   payload += String(chunk);
@@ -49,6 +79,6 @@ if (quiet)
   process.stdout.write(`${JSON.stringify({ hookSpecificOutput: { hookEventName: quiet } })}
 `);
 else {
-  const { runCodexHook } = await import("./workit-hook-sza2zvq6.js");
+  const { runCodexHook } = await import("./workit-hook-0vzd6e1j.js");
   await runCodexHook([payload]);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-codex",
-  "version": "8.27.0",
+  "version": "8.28.1",
   "private": false,
   "description": "Workit Codex CLI/desktop plugin — shared MCP transport, hooks, method skills, and verifier/reviewer/implementer agents",
   "keywords": [
@@ -39,8 +39,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-core": "^8.27.0",
-    "@brainervirus/workit-mcp": "^8.27.0"
+    "@brainervirus/workit-core": "^8.28.1",
+    "@brainervirus/workit-mcp": "^8.28.1"
   },
   "engines": {
     "node": ">=24"