@brainervirus/workit-cursor 8.19.0 → 8.19.2

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "workit",
   "displayName": "Workit",
   "description": "Adaptive Workit workflow with shared MCP tools and native Cursor hooks",
-  "version": "8.19.0",
+  "version": "8.19.2",
   "author": {
     "name": "Cristhofer Pincetti"
   },

package/dist/cursor-session-start.js

@@ -21296,6 +21296,9 @@ import { realpathSync as realpathSync5 } from "node:fs";
 import os10 from "node:os";
 import path26 from "node:path";
 function writeGate(cwd, paths, owner, deps) {
+  const forged = paths?.length ? issuedTarget(cwd, paths) : null;
+  if (forged)
+    return issuedDeny(forged);
   if (!owner)
     return beforeWriteGate(cwd, paths);
   const targets = liveTargets(cwd, paths);
@@ -21308,6 +21311,11 @@ function writeGate(cwd, paths, owner, deps) {
   return decision;
 }
 function shellGate(cwd, command, owner, dialect = "posix", deps) {
+  try {
+    const forged = issuedTarget(cwd, segmentTargets(cwd, command, dialect)) ?? (unquotedWindowsIssued(command) ? "the issued registry" : null);
+    if (forged)
+      return issuedDeny(forged);
+  } catch {}
   const writes = shellWrites(command);
   let targets = [];
   if (owner) {
@@ -21354,7 +21362,7 @@ var NONE3, CASE_INSENSITIVE, canonical2 = (file) => {
   let rest = "";
   for (let dir = path26.resolve(file);; dir = path26.dirname(dir)) {
     try {
-      return path26.join(realpathSync5(dir), rest);
+      return path26.join(realpathSync5.native(dir), rest);
     } catch {
       if (path26.dirname(dir) === dir)
         return path26.resolve(file);
@@ -21535,16 +21543,23 @@ var NONE3, CASE_INSENSITIVE, canonical2 = (file) => {
     return [path26.resolve(cwd, invocation.dir ?? ".")];
   });
 }, CD2, PUSHD2, POPD2, cdInto = (dir, words) => {
-  const target = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const named = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const target = named === undefined ? undefined : homeExpanded(named);
   if (dir === undefined || target === "-" || target && /^~|[$`*?]/.test(target))
     return;
   return target === undefined ? os10.homedir() : path26.resolve(dir, target);
-}, quoteWord2 = (word) => /^[\w@%+=:,./-]+$/.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`, segmentTargets = (cwd, command, dialect, depth = 0) => {
+}, quoteWord2 = (word) => /^[\w@%+=:,./-]+$/.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`, homeExpanded = (file) => {
+  const match = /^(?:~|\$HOME|\$\{HOME\})(?=\/|$)/.exec(file);
+  return match ? (process.env.HOME || os10.homedir()) + file.slice(match[0].length) : file;
+}, segmentTargets = (cwd, command, dialect, depth = 0) => {
   const targets = [];
   let dir = cwd;
   let stack = [];
   const groups = [];
-  const at = (file) => path26.isAbsolute(file) ? file : dir === undefined ? null : path26.resolve(dir, file);
+  const at = (file) => {
+    const home = homeExpanded(file);
+    return path26.isAbsolute(home) ? home : dir === undefined ? null : path26.resolve(dir, home);
+  };
   for (const segment of segmentsOf(command, dialect)) {
     if (segment.group === "open") {
       groups.push({ dir, stack: [...stack] });
@@ -21633,7 +21648,32 @@ var NONE3, CASE_INSENSITIVE, canonical2 = (file) => {
 }, claimAll = (owner, targets, deps) => {
   for (const target of guarded(targets))
     claimLiveSession(target, owner, deps);
-}, liveTargets = (cwd, paths) => paths?.length ? paths.map((file) => path26.resolve(cwd, file)) : [path26.join(cwd, DIR_TARGET)], noteOverride = (cwd, owner, command) => {
+}, liveTargets = (cwd, paths) => paths?.length ? paths.map((file) => path26.resolve(cwd, file)) : [path26.join(cwd, DIR_TARGET)], issuedTarget = (cwd, targets) => {
+  const state = resolveStateDir();
+  const found = targets.find((target) => underIssued(state, cwd, homeExpanded(target), process.platform, canonical2));
+  return found ?? null;
+}, underIssued = (state, cwd, target, platform = process.platform, real = (file) => file) => {
+  const win = platform === "win32";
+  const p = win ? path26.win32 : path26.posix;
+  const fold = (value) => win || platform === "darwin" ? value.toLowerCase() : value;
+  const named = win ? target.replace(/^\/([a-zA-Z])(?=\/|$)/, "$1:") : target;
+  const relative = p.relative(fold(real(p.resolve(state))), fold(real(p.resolve(cwd, named))));
+  if (relative.startsWith("..") || p.isAbsolute(relative))
+    return false;
+  return relative.split(p.sep)[0].startsWith("issued");
+}, unquotedWindowsIssued = (command) => {
+  if (process.platform !== "win32" || !command.includes("\\"))
+    return false;
+  const flat = (value) => value.replaceAll("\\", "/").toLowerCase();
+  return flat(command).includes(`${flat(resolveStateDir())}/issued`) && shellWrites(command).writes;
+}, issuedDeny = (file) => {
+  const unblock = "Issued ids and tokens are written only by Workit's SubagentStart hook. Run the verifier or reviewer agent so the host issues its own session; never edit the issued registries by hand.";
+  return {
+    kind: "deny",
+    reason: `workit issued-registry guard: ${file} is under Workit's issued-session state. ${unblock}`,
+    unblock
+  };
+}, noteOverride = (cwd, owner, command) => {
   try {
     if (!inWorkitWorkspace(cwd))
       return;
@@ -21650,6 +21690,7 @@ var init_write_gate = __esm(() => {
   init_derive();
   init_task_evaluation();
   init_live_session();
+  init_logger();
   init_workspaces();
   init_ledger();
   init_raw_git();

package/dist/workit-hook.js

@@ -21508,7 +21508,7 @@ var canonical2 = (file) => {
   let rest = "";
   for (let dir = path26.resolve(file);; dir = path26.dirname(dir)) {
     try {
-      return path26.join(realpathSync5(dir), rest);
+      return path26.join(realpathSync5.native(dir), rest);
     } catch {
       if (path26.dirname(dir) === dir)
         return path26.resolve(file);
@@ -21728,18 +21728,26 @@ var CD2 = new Set(["cd", "chdir", "set-location", "sl"]);
 var PUSHD2 = new Set(["pushd", "push-location"]);
 var POPD2 = new Set(["popd", "pop-location"]);
 var cdInto = (dir, words) => {
-  const target = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const named = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const target = named === undefined ? undefined : homeExpanded(named);
   if (dir === undefined || target === "-" || target && /^~|[$`*?]/.test(target))
     return;
   return target === undefined ? os10.homedir() : path26.resolve(dir, target);
 };
 var quoteWord2 = (word) => /^[\w@%+=:,./-]+$/.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`;
+var homeExpanded = (file) => {
+  const match = /^(?:~|\$HOME|\$\{HOME\})(?=\/|$)/.exec(file);
+  return match ? (process.env.HOME || os10.homedir()) + file.slice(match[0].length) : file;
+};
 var segmentTargets = (cwd, command, dialect, depth = 0) => {
   const targets = [];
   let dir = cwd;
   let stack = [];
   const groups = [];
-  const at = (file) => path26.isAbsolute(file) ? file : dir === undefined ? null : path26.resolve(dir, file);
+  const at = (file) => {
+    const home = homeExpanded(file);
+    return path26.isAbsolute(home) ? home : dir === undefined ? null : path26.resolve(dir, home);
+  };
   for (const segment of segmentsOf(command, dialect)) {
     if (segment.group === "open") {
       groups.push({ dir, stack: [...stack] });
@@ -21844,7 +21852,39 @@ var claimAll = (owner, targets, deps) => {
     claimLiveSession(target, owner, deps);
 };
 var liveTargets = (cwd, paths) => paths?.length ? paths.map((file) => path26.resolve(cwd, file)) : [path26.join(cwd, DIR_TARGET)];
+var issuedTarget = (cwd, targets) => {
+  const state = resolveStateDir();
+  const found = targets.find((target) => underIssued(state, cwd, homeExpanded(target), process.platform, canonical2));
+  return found ?? null;
+};
+var underIssued = (state, cwd, target, platform = process.platform, real = (file) => file) => {
+  const win = platform === "win32";
+  const p = win ? path26.win32 : path26.posix;
+  const fold = (value) => win || platform === "darwin" ? value.toLowerCase() : value;
+  const named = win ? target.replace(/^\/([a-zA-Z])(?=\/|$)/, "$1:") : target;
+  const relative = p.relative(fold(real(p.resolve(state))), fold(real(p.resolve(cwd, named))));
+  if (relative.startsWith("..") || p.isAbsolute(relative))
+    return false;
+  return relative.split(p.sep)[0].startsWith("issued");
+};
+var unquotedWindowsIssued = (command) => {
+  if (process.platform !== "win32" || !command.includes("\\"))
+    return false;
+  const flat = (value) => value.replaceAll("\\", "/").toLowerCase();
+  return flat(command).includes(`${flat(resolveStateDir())}/issued`) && shellWrites(command).writes;
+};
+var issuedDeny = (file) => {
+  const unblock = "Issued ids and tokens are written only by Workit's SubagentStart hook. Run the verifier or reviewer agent so the host issues its own session; never edit the issued registries by hand.";
+  return {
+    kind: "deny",
+    reason: `workit issued-registry guard: ${file} is under Workit's issued-session state. ${unblock}`,
+    unblock
+  };
+};
 function writeGate(cwd, paths, owner, deps) {
+  const forged = paths?.length ? issuedTarget(cwd, paths) : null;
+  if (forged)
+    return issuedDeny(forged);
   if (!owner)
     return beforeWriteGate(cwd, paths);
   const targets = liveTargets(cwd, paths);
@@ -21857,6 +21897,11 @@ function writeGate(cwd, paths, owner, deps) {
   return decision;
 }
 function shellGate(cwd, command, owner, dialect = "posix", deps) {
+  try {
+    const forged = issuedTarget(cwd, segmentTargets(cwd, command, dialect)) ?? (unquotedWindowsIssued(command) ? "the issued registry" : null);
+    if (forged)
+      return issuedDeny(forged);
+  } catch {}
   const writes = shellWrites(command);
   let targets = [];
   if (owner) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-cursor",
-  "version": "8.19.0",
+  "version": "8.19.2",
   "private": false,
   "description": "Workit Cursor plugin — shared MCP transport, native hooks, and sixteen method skills",
   "keywords": [
@@ -46,8 +46,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-core": "^8.19.0",
-    "@brainervirus/workit-mcp": "^8.19.0"
+    "@brainervirus/workit-core": "^8.19.2",
+    "@brainervirus/workit-mcp": "^8.19.2"
   },
   "engines": {
     "node": ">=24"

package/skills/workit-implement/SKILL.md

@@ -24,7 +24,10 @@ description: Build a requested change in small verified steps - follow local pat
    lease waits and names its holder (`workit lock status`).
 5. Prove the feature on its real surface with the project's `verify-<app>`
    skill; none yet? Write one (read the `workit-verify-app` skill's SKILL.md and follow it). Tests show branch behavior,
-   not that the feature works.
+   not that the feature works. The report carries what you observed: a UI
+   change a screenshot or console/network check (chrome devtools or
+   agent-browser), an API a quoted real response. App not runnable? Say so
+   plainly, never claim success.
 6. Commit: `workit git commit -m "<type>: <what>" -- <paths>` (or `--all`).
    No endpoint named? Stop here and state the next command. Hand delivery to
    ship, which pushes and opens the PR with its body shape (read the `workit-ship` skill's SKILL.md and follow it), only
@@ -55,8 +58,7 @@ flag was never invoked)
 
 Good: "Added `--since`. measured: `workit check test` exit 0;
 `mytool log --since 2d` printed 3 entries against the fixture repo. inferred:
-the GitLab path behaves the same (shared parser, not run). Verification handed
-to the verifier agent."
+the GitLab path behaves the same (not run). Handed to the verifier agent."
 
 ## Check
 

package/skills/workit-verify-app/SKILL.md

@@ -27,7 +27,10 @@ way a user would.
    - **Drive:** how to exercise it: CLI invocations, `curl` against routes, a
      browser tool for UI, with fixture data.
    - **Evidence:** what to capture (exit code, response body, screenshot path)
-     and the command that records it.
+     and the command that records it. A UI is driven with chrome devtools or
+     agent-browser, with a screenshot or console/network observation; an API
+     with a real call, response quoted. The report carries the observation.
+     App not runnable? Say so plainly, never claim success.
    - **Cleanup:** stop processes, remove temp data.
    - **Feature map:** feature, how to drive it, expected observation.
 3. **Prove it end-to-end once:** launch, drive one feature, capture evidence,
@@ -54,7 +57,8 @@ report `clean`, `changed` (what) or `blocked` (why).
 Bad: "Verify by running the tests." (that is not the real surface)
 
 Good: "Launch `bun run dev` (ready: `listening on :5173`, 30 s). Drive:
-`curl -s localhost:5173/api/health` returns `{"ok":true}`. Evidence:
+`curl -s localhost:5173/api/health` returned `{"ok":true}`; screenshot of
+/settings at .workit-scratch/settings.png. Evidence:
 `workit check --name verify-web -- bun scripts/smoke.ts` exit 0."
 
 ## Check

package/skills/workit-verify-app/references/template.md

@@ -30,6 +30,8 @@ description: Launch, drive and observe <app> on its real surface (<cli|web|api>)
 ## Evidence
 `workit check --name verify-<app> -- <driver command>` records exit code and log.
 Screenshots go to `<tmp dir>/verify-<app>/<feature>.png`; cite the path.
+UI: also report a console or network observation. API: quote the real response.
+If the app cannot be run, say so plainly instead of claiming success.
 
 ## Cleanup
 `<command>` (stop servers, remove `<tmp dir>`).