@brainervirus/workit-cursor 8.21.2 → 8.22.0

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "workit",
   "displayName": "Workit",
   "description": "Adaptive Workit workflow with shared MCP tools and native Cursor hooks",
-  "version": "8.21.2",
+  "version": "8.22.0",
   "author": {
     "name": "Cristhofer Pincetti"
   },

package/dist/cursor-session-start.js

@@ -16319,6 +16319,9 @@ Autonomy contract:
 CLI first: if a step has one right answer, use the \`workit\` verb instead of
 hand-running git, gh or glab (\`workit git|pr|ci|check|help\`;
 else \`npx -y @brainervirus/workit-cli\`).
+Other checkout: \`workit --cwd <dir> <verb>\` (Codex: \`<verb> --cwd <dir>\`); one workit
+verb per shell call, never \`cd <dir> && workit\`. zsh-safe: no \`echo =====\`
+(\`printf '%s\\n' ---\`), quote globs and URLs, no variable named \`status\` or \`path\`.
 Add Co-Authored-By via \`workit git commit --trailer "K: v" -- <paths>\`, never
 an amend.
 The task families (task, policy, evidence, finding, decision, worker, state)
@@ -22351,6 +22354,42 @@ var init_standing = __esm(() => {
   sinceStart = new Map;
 });
 
+// packages/workit-core/src/hooks/cwd-normalize.ts
+var COMPOUND, FILTERS, stdinOnly = (words) => {
+  const [name, ...args] = words;
+  const operands = args.filter((w) => !w.startsWith("-"));
+  if (name === "grep")
+    return operands.length <= 1 && !args.some((w) => /^-[^-]*[rRf]|^--(recursive|file)/u.test(w));
+  return operands.every((w) => /^\d+$/u.test(w)) && !args.some((w) => w.startsWith("--output"));
+}, cwdRewrite = (command) => {
+  const match = COMPOUND.exec(command);
+  const dir = match?.[1];
+  const rest = match?.[2];
+  if (!dir || !rest || dir.startsWith("-"))
+    return null;
+  if (/[&;<>`\n]/u.test(rest.replaceAll("2>&1", "")))
+    return null;
+  const segments = segmentsOf(rest);
+  const [head, ...filters] = segments;
+  if (!head || head.words[0] !== "workit")
+    return null;
+  if (head.words.some((w) => w === "--cwd" || w.startsWith("--cwd=")))
+    return null;
+  const clean = (s) => !s.unanalyzable && !s.group && !s.subs?.length && !s.stdin?.length && !s.redirects.length;
+  if (!segments.every(clean))
+    return null;
+  if (!segments.slice(0, -1).every((s) => s.pipe))
+    return null;
+  if (!filters.every((s) => FILTERS.has(s.words[0] ?? "") && stdinOnly(s.words)))
+    return null;
+  return `workit --cwd ${dir} ${rest.slice("workit".length).trimStart()}`.trimEnd();
+};
+var init_cwd_normalize = __esm(() => {
+  init_shell_words();
+  COMPOUND = /^\s*cd\s+([A-Za-z0-9_./@%+:,=-]+|'[^'$`\\\n]*'|"[^"$`\\!\n]*")\s*&&\s*(workit(?:\s[\s\S]*)?)$/u;
+  FILTERS = new Set(["tail", "head", "grep"]);
+});
+
 // packages/workit-core/src/hooks/handle.ts
 function handleHook(input, deps) {
   const decision = decide(input, deps);
@@ -22416,19 +22455,21 @@ function decide(input, deps) {
       if (plan.kind === "rewrite" && !rewrites && canDeny)
         return heavyDenial(event.command, plan);
       const lease = plan.kind === "rewrite" && rewrites ? plan : null;
+      const cwdCommand = !lease && rewrites && input.host === "claude_code" ? cwdRewrite(event.command) : null;
       const aside = plan.kind === "passthrough" ? plan.note : null;
       noteRawCommit(input, event.command, postTool ? callKey(event.toolUseId, event.command) : NEXT_COMMAND);
-      const rewritten = (text) => lease ? {
+      const rewrittenTo = lease?.command ?? cwdCommand;
+      const rewritten = (text) => rewrittenTo ? {
         kind: "rewrite",
-        command: lease.command,
-        input: event.toolInput ? { ...event.toolInput, command: lease.command } : null,
+        command: rewrittenTo,
+        input: event.toolInput ? { ...event.toolInput, command: rewrittenTo } : null,
         text
       } : NONE5;
       if (descriptor.transport !== "hook-process")
         return rewritten(null);
       const nudged = withContextLine(withContextLine(canDeny ? rawGitPre(input, event.command) : NONE5, aside), shipNudge(input, event.command));
       if (!lease)
-        return nudged;
+        return cwdCommand && nudged.kind !== "deny" ? rewritten(nudged.kind === "context" ? nudged.text : null) : nudged;
       return rewritten([rewriteNote(lease), nudged.kind === "context" ? nudged.text : null].filter(Boolean).join(`
 `));
     }
@@ -22522,6 +22563,7 @@ var init_handle = __esm(() => {
   init_branch();
   init_workspaces();
   init_host_session();
+  init_cwd_normalize();
   init_heavy_gate();
   init_policy();
   init_raw_git();

package/dist/mcp-server.js

@@ -28839,6 +28839,9 @@ var WRITE_TOOLS = new Set([
 ]);
 // packages/workit-core/src/hooks/standing.ts
 var sinceStart = new Map;
+// packages/workit-core/src/hooks/cwd-normalize.ts
+var FILTERS = new Set(["tail", "head", "grep"]);
+
 // packages/workit-core/src/hooks/handle.ts
 var offered = new Set;
 var PRE_TOOL = new Set(["shell.pre", "write.pre", "tool.pre"]);

package/dist/workit-hook.js

@@ -16399,6 +16399,9 @@ Autonomy contract:
 CLI first: if a step has one right answer, use the \`workit\` verb instead of
 hand-running git, gh or glab (\`workit git|pr|ci|check|help\`;
 else \`npx -y @brainervirus/workit-cli\`).
+Other checkout: \`workit --cwd <dir> <verb>\` (Codex: \`<verb> --cwd <dir>\`); one workit
+verb per shell call, never \`cd <dir> && workit\`. zsh-safe: no \`echo =====\`
+(\`printf '%s\\n' ---\`), quote globs and URLs, no variable named \`status\` or \`path\`.
 Add Co-Authored-By via \`workit git commit --trailer "K: v" -- <paths>\`, never
 an amend.
 The task families (task, policy, evidence, finding, decision, worker, state)
@@ -22593,6 +22596,40 @@ var standingDelta = (input) => {
   }
 };
 var sinceStart = new Map;
+// packages/workit-core/src/hooks/cwd-normalize.ts
+var COMPOUND = /^\s*cd\s+([A-Za-z0-9_./@%+:,=-]+|'[^'$`\\\n]*'|"[^"$`\\!\n]*")\s*&&\s*(workit(?:\s[\s\S]*)?)$/u;
+var FILTERS = new Set(["tail", "head", "grep"]);
+var stdinOnly = (words) => {
+  const [name, ...args] = words;
+  const operands = args.filter((w) => !w.startsWith("-"));
+  if (name === "grep")
+    return operands.length <= 1 && !args.some((w) => /^-[^-]*[rRf]|^--(recursive|file)/u.test(w));
+  return operands.every((w) => /^\d+$/u.test(w)) && !args.some((w) => w.startsWith("--output"));
+};
+var cwdRewrite = (command) => {
+  const match = COMPOUND.exec(command);
+  const dir = match?.[1];
+  const rest = match?.[2];
+  if (!dir || !rest || dir.startsWith("-"))
+    return null;
+  if (/[&;<>`\n]/u.test(rest.replaceAll("2>&1", "")))
+    return null;
+  const segments = segmentsOf(rest);
+  const [head, ...filters] = segments;
+  if (!head || head.words[0] !== "workit")
+    return null;
+  if (head.words.some((w) => w === "--cwd" || w.startsWith("--cwd=")))
+    return null;
+  const clean = (s) => !s.unanalyzable && !s.group && !s.subs?.length && !s.stdin?.length && !s.redirects.length;
+  if (!segments.every(clean))
+    return null;
+  if (!segments.slice(0, -1).every((s) => s.pipe))
+    return null;
+  if (!filters.every((s) => FILTERS.has(s.words[0] ?? "") && stdinOnly(s.words)))
+    return null;
+  return `workit --cwd ${dir} ${rest.slice("workit".length).trimStart()}`.trimEnd();
+};
+
 // packages/workit-core/src/hooks/handle.ts
 var usable2 = (value) => value === "native" || value === "partial";
 var NONE5 = { kind: "none" };
@@ -22702,19 +22739,21 @@ function decide(input, deps) {
       if (plan.kind === "rewrite" && !rewrites && canDeny)
         return heavyDenial(event.command, plan);
       const lease = plan.kind === "rewrite" && rewrites ? plan : null;
+      const cwdCommand = !lease && rewrites && input.host === "claude_code" ? cwdRewrite(event.command) : null;
       const aside = plan.kind === "passthrough" ? plan.note : null;
       noteRawCommit(input, event.command, postTool ? callKey(event.toolUseId, event.command) : NEXT_COMMAND);
-      const rewritten = (text) => lease ? {
+      const rewrittenTo = lease?.command ?? cwdCommand;
+      const rewritten = (text) => rewrittenTo ? {
         kind: "rewrite",
-        command: lease.command,
-        input: event.toolInput ? { ...event.toolInput, command: lease.command } : null,
+        command: rewrittenTo,
+        input: event.toolInput ? { ...event.toolInput, command: rewrittenTo } : null,
         text
       } : NONE5;
       if (descriptor.transport !== "hook-process")
         return rewritten(null);
       const nudged = withContextLine(withContextLine(canDeny ? rawGitPre(input, event.command) : NONE5, aside), shipNudge(input, event.command));
       if (!lease)
-        return nudged;
+        return cwdCommand && nudged.kind !== "deny" ? rewritten(nudged.kind === "context" ? nudged.text : null) : nudged;
       return rewritten([rewriteNote(lease), nudged.kind === "context" ? nudged.text : null].filter(Boolean).join(`
 `));
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-cursor",
-  "version": "8.21.2",
+  "version": "8.22.0",
   "private": false,
   "description": "Workit Cursor plugin — shared MCP transport, native hooks, and sixteen method skills",
   "keywords": [
@@ -46,8 +46,8 @@
     "build": "bun scripts/build.ts"
   },
   "devDependencies": {
-    "@brainervirus/workit-core": "^8.21.2",
-    "@brainervirus/workit-mcp": "^8.21.2"
+    "@brainervirus/workit-core": "^8.22.0",
+    "@brainervirus/workit-mcp": "^8.22.0"
   },
   "engines": {
     "node": ">=24"