@brainervirus/workit-core 8.26.0 → 8.27.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-core",
-  "version": "8.26.0",
+  "version": "8.27.0",
   "private": false,
   "description": "Workit shared core — task, policy, evidence, review, decision, worker, and writer state for agentic coding workflows",
   "keywords": [

package/scripts/bundled-deps.json

@@ -14,12 +14,12 @@
     "@alcalzone/ansi-tokenize",
     "@babel/parser",
     "@inkjs/ui",
+    "@inkjs/ui/chalk",
     "@openclaw/fs-safe",
     "ansi-escapes",
     "ansi-regex",
     "ansi-styles",
     "auto-bind",
-    "chalk",
     "cli-boxes",
     "cli-cursor",
     "cli-truncate",
@@ -33,6 +33,7 @@
     "get-east-asian-width",
     "indent-string",
     "ink",
+    "ink/chalk",
     "is-fullwidth-code-point",
     "is-in-ci",
     "is-unicode-supported",
@@ -84,12 +85,12 @@
     "@alcalzone/ansi-tokenize",
     "@babel/parser",
     "@inkjs/ui",
+    "@inkjs/ui/chalk",
     "@openclaw/fs-safe",
     "ansi-escapes",
     "ansi-regex",
     "ansi-styles",
     "auto-bind",
-    "chalk",
     "cli-boxes",
     "cli-cursor",
     "cli-truncate",
@@ -103,6 +104,7 @@
     "get-east-asian-width",
     "indent-string",
     "ink",
+    "ink/chalk",
     "is-fullwidth-code-point",
     "is-in-ci",
     "is-unicode-supported",

package/scripts/install-pi-package.sh

@@ -16,7 +16,7 @@ if [ ! -f "$SOURCE/packages/workit-pi/dist/workit.js" ] && [ -f "$SHARE/packages
   SOURCE="$SHARE"
 fi
 
-# pi 0.85.1 loads extensions from the settings `packages` list, not from
+# pi 1.4.0 loads extensions from the settings `packages` list, not from
 # ~/.pi/config.json below. Register the absolute package dir there (honoring
 # PI_CODING_AGENT_DIR) so `pi list` picks it up; the config.json write stays
 # because uninstall and detection still key pi state off it — migrating

package/src/hooks/delivery-verbs.ts

@@ -75,12 +75,11 @@ export const isAllowedWorkitCall = (
 
 const bypassReason = (flag: string) =>
   `Workit: \`${flag}\` overrides a Workit gate, so the user decides this call (no allow rule covers it).`;
-const EXPANSION_REASON =
-  "Workit: an expansion before `--` could become a bypass flag, so the user decides this call (no allow rule covers it).";
 
 /**
  * The ask reason for a Workit call in `command` that carries a bypass flag
- * before its `--` or a word the shell expands there, or null. Words are read after shell quoting, so `"--unverified"`,
+ * before its `--`, or null. A word the shell expands (`$F`, `${F:---unverified}`) is not read: its text is not what runs, and the
+ * merge grant and `--reason` stay the gate. Words are read after shell quoting, so `"--unverified"`,
  * `--unverif''ied` or a tab-separated flag are found where a host's string
  * rule could miss them. A command the tokenizer cannot analyze is judged on
  * its text with quotes and backslashes removed.
@@ -102,8 +101,6 @@ export const workitBypassFlag = (
     const end = words.indexOf("--");
     const flag = (end < 0 ? words : words.slice(0, end)).find(isBypass);
     if (flag) return bypassReason(flag.split("=")[0] ?? flag);
-    const limit = start + 1 + (end < 0 ? words.length : end);
-    if (segment.expands?.some((index) => index > start && index < limit)) return EXPANSION_REASON;
   }
   return null;
 };

package/src/hooks/hosts/pi.ts

@@ -4,7 +4,7 @@ import type { HostDescriptor } from "../descriptor";
 export const PI_DESCRIPTOR: HostDescriptor = {
   host: "pi",
   label: "Pi",
-  verifiedAgainst: "@earendil-works/pi-coding-agent 0.85.1",
+  verifiedAgainst: "@earendil-works/pi-coding-agent 1.4.0",
   docs: ["https://github.com/earendil-works/pi-coding-agent"],
   transport: "in-process-plugin",
   events: {
@@ -20,7 +20,7 @@ export const PI_DESCRIPTOR: HostDescriptor = {
     "prompt.submit": { support: "undocumented", native: null },
     "compact.pre": { support: "native", native: "session_before_compact" },
     // agent_end carries the run's messages; pi.sendMessage(…, {triggerTurn})
-    // starts one more turn (pi-coding-agent 0.85.1 types.d.ts). The host has
+    // starts one more turn (pi-coding-agent 1.4.0 types.d.ts). The host has
     // no loop guard: the extension continues at most once per run.
     stop: { support: "native", native: "agent_end" },
   },