@brainervirus/workit-cursor 8.19.1 → 8.19.2

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "workit",
   "displayName": "Workit",
   "description": "Adaptive Workit workflow with shared MCP tools and native Cursor hooks",
-  "version": "8.19.1",
+  "version": "8.19.2",
   "author": {
     "name": "Cristhofer Pincetti"
   },

package/dist/cursor-session-start.js

@@ -21296,6 +21296,9 @@ import { realpathSync as realpathSync5 } from "node:fs";
 import os10 from "node:os";
 import path26 from "node:path";
 function writeGate(cwd, paths, owner, deps) {
+  const forged = paths?.length ? issuedTarget(cwd, paths) : null;
+  if (forged)
+    return issuedDeny(forged);
   if (!owner)
     return beforeWriteGate(cwd, paths);
   const targets = liveTargets(cwd, paths);
@@ -21308,6 +21311,11 @@ function writeGate(cwd, paths, owner, deps) {
   return decision;
 }
 function shellGate(cwd, command, owner, dialect = "posix", deps) {
+  try {
+    const forged = issuedTarget(cwd, segmentTargets(cwd, command, dialect)) ?? (unquotedWindowsIssued(command) ? "the issued registry" : null);
+    if (forged)
+      return issuedDeny(forged);
+  } catch {}
   const writes = shellWrites(command);
   let targets = [];
   if (owner) {
@@ -21354,7 +21362,7 @@ var NONE3, CASE_INSENSITIVE, canonical2 = (file) => {
   let rest = "";
   for (let dir = path26.resolve(file);; dir = path26.dirname(dir)) {
     try {
-      return path26.join(realpathSync5(dir), rest);
+      return path26.join(realpathSync5.native(dir), rest);
     } catch {
       if (path26.dirname(dir) === dir)
         return path26.resolve(file);
@@ -21535,16 +21543,23 @@ var NONE3, CASE_INSENSITIVE, canonical2 = (file) => {
     return [path26.resolve(cwd, invocation.dir ?? ".")];
   });
 }, CD2, PUSHD2, POPD2, cdInto = (dir, words) => {
-  const target = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const named = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const target = named === undefined ? undefined : homeExpanded(named);
   if (dir === undefined || target === "-" || target && /^~|[$`*?]/.test(target))
     return;
   return target === undefined ? os10.homedir() : path26.resolve(dir, target);
-}, quoteWord2 = (word) => /^[\w@%+=:,./-]+$/.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`, segmentTargets = (cwd, command, dialect, depth = 0) => {
+}, quoteWord2 = (word) => /^[\w@%+=:,./-]+$/.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`, homeExpanded = (file) => {
+  const match = /^(?:~|\$HOME|\$\{HOME\})(?=\/|$)/.exec(file);
+  return match ? (process.env.HOME || os10.homedir()) + file.slice(match[0].length) : file;
+}, segmentTargets = (cwd, command, dialect, depth = 0) => {
   const targets = [];
   let dir = cwd;
   let stack = [];
   const groups = [];
-  const at = (file) => path26.isAbsolute(file) ? file : dir === undefined ? null : path26.resolve(dir, file);
+  const at = (file) => {
+    const home = homeExpanded(file);
+    return path26.isAbsolute(home) ? home : dir === undefined ? null : path26.resolve(dir, home);
+  };
   for (const segment of segmentsOf(command, dialect)) {
     if (segment.group === "open") {
       groups.push({ dir, stack: [...stack] });
@@ -21633,7 +21648,32 @@ var NONE3, CASE_INSENSITIVE, canonical2 = (file) => {
 }, claimAll = (owner, targets, deps) => {
   for (const target of guarded(targets))
     claimLiveSession(target, owner, deps);
-}, liveTargets = (cwd, paths) => paths?.length ? paths.map((file) => path26.resolve(cwd, file)) : [path26.join(cwd, DIR_TARGET)], noteOverride = (cwd, owner, command) => {
+}, liveTargets = (cwd, paths) => paths?.length ? paths.map((file) => path26.resolve(cwd, file)) : [path26.join(cwd, DIR_TARGET)], issuedTarget = (cwd, targets) => {
+  const state = resolveStateDir();
+  const found = targets.find((target) => underIssued(state, cwd, homeExpanded(target), process.platform, canonical2));
+  return found ?? null;
+}, underIssued = (state, cwd, target, platform = process.platform, real = (file) => file) => {
+  const win = platform === "win32";
+  const p = win ? path26.win32 : path26.posix;
+  const fold = (value) => win || platform === "darwin" ? value.toLowerCase() : value;
+  const named = win ? target.replace(/^\/([a-zA-Z])(?=\/|$)/, "$1:") : target;
+  const relative = p.relative(fold(real(p.resolve(state))), fold(real(p.resolve(cwd, named))));
+  if (relative.startsWith("..") || p.isAbsolute(relative))
+    return false;
+  return relative.split(p.sep)[0].startsWith("issued");
+}, unquotedWindowsIssued = (command) => {
+  if (process.platform !== "win32" || !command.includes("\\"))
+    return false;
+  const flat = (value) => value.replaceAll("\\", "/").toLowerCase();
+  return flat(command).includes(`${flat(resolveStateDir())}/issued`) && shellWrites(command).writes;
+}, issuedDeny = (file) => {
+  const unblock = "Issued ids and tokens are written only by Workit's SubagentStart hook. Run the verifier or reviewer agent so the host issues its own session; never edit the issued registries by hand.";
+  return {
+    kind: "deny",
+    reason: `workit issued-registry guard: ${file} is under Workit's issued-session state. ${unblock}`,
+    unblock
+  };
+}, noteOverride = (cwd, owner, command) => {
   try {
     if (!inWorkitWorkspace(cwd))
       return;
@@ -21650,6 +21690,7 @@ var init_write_gate = __esm(() => {
   init_derive();
   init_task_evaluation();
   init_live_session();
+  init_logger();
   init_workspaces();
   init_ledger();
   init_raw_git();

package/dist/workit-hook.js

@@ -21508,7 +21508,7 @@ var canonical2 = (file) => {
   let rest = "";
   for (let dir = path26.resolve(file);; dir = path26.dirname(dir)) {
     try {
-      return path26.join(realpathSync5(dir), rest);
+      return path26.join(realpathSync5.native(dir), rest);
     } catch {
       if (path26.dirname(dir) === dir)
         return path26.resolve(file);
@@ -21728,18 +21728,26 @@ var CD2 = new Set(["cd", "chdir", "set-location", "sl"]);
 var PUSHD2 = new Set(["pushd", "push-location"]);
 var POPD2 = new Set(["popd", "pop-location"]);
 var cdInto = (dir, words) => {
-  const target = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const named = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const target = named === undefined ? undefined : homeExpanded(named);
   if (dir === undefined || target === "-" || target && /^~|[$`*?]/.test(target))
     return;
   return target === undefined ? os10.homedir() : path26.resolve(dir, target);
 };
 var quoteWord2 = (word) => /^[\w@%+=:,./-]+$/.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`;
+var homeExpanded = (file) => {
+  const match = /^(?:~|\$HOME|\$\{HOME\})(?=\/|$)/.exec(file);
+  return match ? (process.env.HOME || os10.homedir()) + file.slice(match[0].length) : file;
+};
 var segmentTargets = (cwd, command, dialect, depth = 0) => {
   const targets = [];
   let dir = cwd;
   let stack = [];
   const groups = [];
-  const at = (file) => path26.isAbsolute(file) ? file : dir === undefined ? null : path26.resolve(dir, file);
+  const at = (file) => {
+    const home = homeExpanded(file);
+    return path26.isAbsolute(home) ? home : dir === undefined ? null : path26.resolve(dir, home);
+  };
   for (const segment of segmentsOf(command, dialect)) {
     if (segment.group === "open") {
       groups.push({ dir, stack: [...stack] });
@@ -21844,7 +21852,39 @@ var claimAll = (owner, targets, deps) => {
     claimLiveSession(target, owner, deps);
 };
 var liveTargets = (cwd, paths) => paths?.length ? paths.map((file) => path26.resolve(cwd, file)) : [path26.join(cwd, DIR_TARGET)];
+var issuedTarget = (cwd, targets) => {
+  const state = resolveStateDir();
+  const found = targets.find((target) => underIssued(state, cwd, homeExpanded(target), process.platform, canonical2));
+  return found ?? null;
+};
+var underIssued = (state, cwd, target, platform = process.platform, real = (file) => file) => {
+  const win = platform === "win32";
+  const p = win ? path26.win32 : path26.posix;
+  const fold = (value) => win || platform === "darwin" ? value.toLowerCase() : value;
+  const named = win ? target.replace(/^\/([a-zA-Z])(?=\/|$)/, "$1:") : target;
+  const relative = p.relative(fold(real(p.resolve(state))), fold(real(p.resolve(cwd, named))));
+  if (relative.startsWith("..") || p.isAbsolute(relative))
+    return false;
+  return relative.split(p.sep)[0].startsWith("issued");
+};
+var unquotedWindowsIssued = (command) => {
+  if (process.platform !== "win32" || !command.includes("\\"))
+    return false;
+  const flat = (value) => value.replaceAll("\\", "/").toLowerCase();
+  return flat(command).includes(`${flat(resolveStateDir())}/issued`) && shellWrites(command).writes;
+};
+var issuedDeny = (file) => {
+  const unblock = "Issued ids and tokens are written only by Workit's SubagentStart hook. Run the verifier or reviewer agent so the host issues its own session; never edit the issued registries by hand.";
+  return {
+    kind: "deny",
+    reason: `workit issued-registry guard: ${file} is under Workit's issued-session state. ${unblock}`,
+    unblock
+  };
+};
 function writeGate(cwd, paths, owner, deps) {
+  const forged = paths?.length ? issuedTarget(cwd, paths) : null;
+  if (forged)
+    return issuedDeny(forged);
   if (!owner)
     return beforeWriteGate(cwd, paths);
   const targets = liveTargets(cwd, paths);
@@ -21857,6 +21897,11 @@ function writeGate(cwd, paths, owner, deps) {
   return decision;
 }
 function shellGate(cwd, command, owner, dialect = "posix", deps) {
+  try {
+    const forged = issuedTarget(cwd, segmentTargets(cwd, command, dialect)) ?? (unquotedWindowsIssued(command) ? "the issued registry" : null);
+    if (forged)
+      return issuedDeny(forged);
+  } catch {}
   const writes = shellWrites(command);
   let targets = [];
   if (owner) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-cursor",
-  "version": "8.19.1",
+  "version": "8.19.2",
   "private": false,
   "description": "Workit Cursor plugin — shared MCP transport, native hooks, and sixteen method skills",
   "keywords": [
@@ -46,8 +46,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-core": "^8.19.1",
-    "@brainervirus/workit-mcp": "^8.19.1"
+    "@brainervirus/workit-core": "^8.19.2",
+    "@brainervirus/workit-mcp": "^8.19.2"
   },
   "engines": {
     "node": ">=24"