@brainervirus/workit-cursor 8.7.0 → 8.9.0

package/dist/workit-hook.js

@@ -17906,12 +17906,48 @@ function writeGate(cwd, paths) {
     return NONE2;
   }
 }
+// packages/workit-core/src/hooks/stop.ts
+import { spawnSync as spawnSync12 } from "node:child_process";
+
 // packages/workit-core/src/hooks/raw-git.ts
 import { spawnSync as spawnSync11 } from "node:child_process";
+import { createHash as createHash13 } from "node:crypto";
+import fs15 from "node:fs";
+import os4 from "node:os";
+import path19 from "node:path";
+
+// packages/workit-core/src/hooks/session-marker.ts
 import { createHash as createHash12 } from "node:crypto";
 import fs14 from "node:fs";
-import os4 from "node:os";
 import path18 from "node:path";
+var sessionMarkerFile = (input, session, store) => {
+  let dir = store;
+  if (dir === undefined) {
+    const location = resolveStore(input.cwd);
+    if (location instanceof Error || !location.shared)
+      return null;
+    dir = location.dir;
+  }
+  const name = createHash12("sha256").update(`${input.host}\x00${session}`).digest("hex").slice(0, 32);
+  return path18.join(dir, "hooks", `skills-${name}.json`);
+};
+var list2 = (value) => Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
+var readSessionMarker = (file) => {
+  try {
+    const value = JSON.parse(fs14.readFileSync(file, "utf8"));
+    return { nudged: list2(value.nudged), loaded: list2(value.loaded), raw: list2(value.raw) };
+  } catch {
+    return { nudged: [], loaded: [], raw: [] };
+  }
+};
+var writeSessionMarker = (file, marker) => {
+  try {
+    fs14.mkdirSync(path18.dirname(file), { recursive: true });
+    fs14.writeFileSync(file, JSON.stringify(marker));
+  } catch {}
+};
+
+// packages/workit-core/src/hooks/raw-git.ts
 var NONE3 = { kind: "none" };
 var SHELLS = new Set(["sh", "bash", "zsh", "dash", "ksh"]);
 var PREFIXES3 = new Set(["sudo", "command", "env", "nohup", "time", "exec", "nice", "&"]);
@@ -17928,12 +17964,12 @@ var GIT_VALUE_OPTIONS = new Set([
   "--config-env",
   "--super-prefix"
 ]);
-var isAbsolute = (value) => path18.isAbsolute(value) || /^[A-Za-z]:[\\/]/.test(value) || value.startsWith("\\\\");
+var isAbsolute = (value) => path19.isAbsolute(value) || /^[A-Za-z]:[\\/]/.test(value) || value.startsWith("\\\\");
 var joinDir = (base, next) => {
   if (base === undefined || /[$`*?]/.test(next) || next === "-")
     return;
-  const expanded = next === "~" || next.startsWith("~/") ? path18.join(os4.homedir(), next.slice(1)) : next;
-  return base === null || isAbsolute(expanded) ? expanded : path18.join(base, expanded);
+  const expanded = next === "~" || next.startsWith("~/") ? path19.join(os4.homedir(), next.slice(1)) : next;
+  return base === null || isAbsolute(expanded) ? expanded : path19.join(base, expanded);
 };
 var cdTarget = (words) => {
   const args = words.slice(1);
@@ -18029,6 +18065,37 @@ function rawInvocations(command, dialect = "posix", depth = 0) {
   }
   return found;
 }
+var LAUNCHERS = new Set([
+  "npx",
+  "bunx",
+  "pnpx",
+  "-y",
+  "--yes",
+  "pnpm",
+  "dlx",
+  "exec",
+  "env",
+  "sudo",
+  "command"
+]);
+var WORKIT_BIN = /(?:^|[\\/])workit(?:\.exe)?$|^@brainervirus\/workit-cli$/;
+function workitInvocations(command, dialect = "posix", depth = 0) {
+  const found = [];
+  for (const { words } of segmentsOf(command, dialect)) {
+    const at = words.findIndex((word) => !/^\w+=/.test(word) && !LAUNCHERS.has(word));
+    if (at < 0)
+      continue;
+    if (WORKIT_BIN.test(words[at])) {
+      found.push(words.slice(at + 1));
+      continue;
+    }
+    const shell = SHELLS.has(commandName(words[at]));
+    const script = shell && words[at + 1] === "-c" ? words[at + 2] : undefined;
+    if (depth < 3 && script !== undefined)
+      found.push(...workitInvocations(script, "posix", depth + 1));
+  }
+  return found;
+}
 var PUSH_VALUE_OPTIONS = new Set(["-o", "--push-option", "--receive-pack", "--exec", "--repo"]);
 var pushAction = (args) => {
   let force = false;
@@ -18155,7 +18222,7 @@ var repoAt = (dir) => {
   return { location, dir, branch: resolveTaskKey(dir, location).branch };
 };
 var isWorkitWorkspace = (repo) => {
-  if (fs14.existsSync(repo.location.dir))
+  if (fs15.existsSync(repo.location.dir))
     return true;
   try {
     return resolveRuntimeWorkspaceVcs(repo.location.top ?? repo.dir) !== null;
@@ -18186,17 +18253,17 @@ var headSha2 = (repo) => {
   if (!git || git.reftable)
     return null;
   try {
-    const head = fs14.readFileSync(path18.join(git.gitDir, "HEAD"), "utf8").trim();
+    const head = fs15.readFileSync(path19.join(git.gitDir, "HEAD"), "utf8").trim();
     if (/^[0-9a-f]{40,64}$/.test(head))
       return head;
     const ref = /^ref: (refs\/.+)$/.exec(head)?.[1];
     if (!ref)
       return null;
-    const common = path18.dirname(repo.location.dir);
+    const common = path19.dirname(repo.location.dir);
     try {
-      return fs14.readFileSync(path18.join(common, ref), "utf8").trim() || null;
+      return fs15.readFileSync(path19.join(common, ref), "utf8").trim() || null;
     } catch {}
-    const packed = fs14.readFileSync(path18.join(common, "packed-refs"), "utf8");
+    const packed = fs15.readFileSync(path19.join(common, "packed-refs"), "utf8");
     return new RegExp(`^([0-9a-f]{40,64}) ${ref.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}$`, "m").exec(packed)?.[1] ?? null;
   } catch {
     return null;
@@ -18233,7 +18300,7 @@ var actionsIn = (cwd, command, dialect) => {
     const action = rawAction(invocation);
     if (!action)
       continue;
-    const dir = path18.resolve(cwd, invocation.dir ?? ".");
+    const dir = path19.resolve(cwd, invocation.dir ?? ".");
     if (!repos.has(dir)) {
       const repo = repoAt(dir);
       repos.set(dir, repo && isWorkitWorkspace(repo) ? repo : null);
@@ -18251,12 +18318,31 @@ var inWorkitWorkspace = (dir) => {
 var rawDelivery = (cwd, command, dialect) => mentionsRawTool(command) && actionsIn(cwd, command, dialect).some(({ action }) => action.kind !== "commit" && action.kind !== "pr-read");
 var mentionsRawTool = (command) => /\b(?:git|gh|glab)\b/i.test(command);
 var dialectOf = (input) => (input.event.kind === "shell.pre" || input.event.kind === "shell.post" ? input.event.dialect : undefined) ?? "posix";
-function rawGitPre(input, command) {
+var nudgeKind = (action) => action.kind === "commit" && action.amend ? "commit-amend" : action.kind === "push" && action.blindForce ? "push-force" : action.kind;
+var unseenNudges = (input, nudges, store) => {
+  const session = input.session.id;
+  const file = session ? sessionMarkerFile(input, session, store) : null;
+  if (!file)
+    return [...nudges.values()];
+  const marker = readSessionMarker(file);
+  const agent = input.session.agentId ? `${input.session.agentId}:` : "";
+  const fresh = [...nudges.keys()].filter((kind) => !marker.raw.includes(agent + kind));
+  if (fresh.length)
+    writeSessionMarker(file, {
+      ...marker,
+      raw: [...marker.raw, ...fresh.map((kind) => agent + kind)]
+    });
+  return fresh.map((kind) => nudges.get(kind));
+};
+function rawGitPre(input, command, options = {}) {
   try {
     if (!mentionsRawTool(command))
       return NONE3;
-    const nudges = [];
-    for (const { action, repo } of actionsIn(input.cwd, command, dialectOf(input))) {
+    const dialect = dialectOf(input);
+    const nudges = new Map;
+    let store = null;
+    for (const { action, repo } of actionsIn(input.cwd, command, dialect)) {
+      store ??= repo.location.dir;
       if (action.kind === "merge")
         return deny(refusal(action, null));
       if (action.kind === "push")
@@ -18266,10 +18352,15 @@ function rawGitPre(input, command) {
             return deny(refusal(action, branch));
         }
       const nudge = nudgeFor(action, input.host, input.session.id);
-      if (nudge && !nudges.includes(nudge))
-        nudges.push(nudge);
+      if (nudge && !nudges.has(nudgeKind(action)))
+        nudges.set(nudgeKind(action), nudge);
     }
-    return nudges.length ? { kind: "context", text: nudges.join(`
+    if (options.nudge === false || !store || nudges.size === 0)
+      return NONE3;
+    if (workitInvocations(command, dialect).length > 0)
+      return NONE3;
+    const shown = unseenNudges(input, nudges, store);
+    return shown.length ? { kind: "context", text: shown.join(`
 `) } : NONE3;
   } catch {
     return NONE3;
@@ -18278,8 +18369,8 @@ function rawGitPre(input, command) {
 var deny = (reason) => ({ kind: "deny", reason, unblock: null });
 var NEXT_COMMAND = "next";
 var MARKER_TTL_SECONDS = 3600;
-var markerFile = (repo, session, key) => path18.join(repo.location.dir, "hooks", `commit-${createHash12("sha256").update(`${session}\x00${key}`).digest("hex").slice(0, 32)}.json`);
-var callKey = (toolUseId, command) => toolUseId ?? `cmd:${createHash12("sha256").update(command).digest("hex")}`;
+var markerFile = (repo, session, key) => path19.join(repo.location.dir, "hooks", `commit-${createHash13("sha256").update(`${session}\x00${key}`).digest("hex").slice(0, 32)}.json`);
+var callKey = (toolUseId, command) => toolUseId ?? `cmd:${createHash13("sha256").update(command).digest("hex")}`;
 function noteRawCommit(input, command, key) {
   try {
     if (!input.session.id || !/\bcommit\b/.test(command))
@@ -18289,8 +18380,8 @@ function noteRawCommit(input, command, key) {
       if (action.kind !== "commit")
         continue;
       const file = markerFile(repo, input.session.id, key);
-      fs14.mkdirSync(path18.dirname(file), { recursive: true });
-      fs14.writeFileSync(file, `${JSON.stringify({ head: headSha2(repo), at })}
+      fs15.mkdirSync(path19.dirname(file), { recursive: true });
+      fs15.writeFileSync(file, `${JSON.stringify({ head: headSha2(repo), at })}
 `);
     }
   } catch {}
@@ -18313,11 +18404,11 @@ var headCommit = (dir) => {
 var settle2 = (input, repo, file) => {
   let marker;
   try {
-    marker = JSON.parse(fs14.readFileSync(file, "utf8"));
+    marker = JSON.parse(fs15.readFileSync(file, "utf8"));
   } catch {
     return;
   }
-  fs14.rmSync(file, { force: true });
+  fs15.rmSync(file, { force: true });
   const session = input.session.id;
   const now = Date.now() / 1000;
   if (typeof marker.at !== "number" || now - marker.at > MARKER_TTL_SECONDS)
@@ -18366,15 +18457,165 @@ function settlePendingCommit(input) {
     if (!repo)
       return;
     const file = markerFile(repo, input.session.id, NEXT_COMMAND);
-    if (fs14.existsSync(file))
+    if (fs15.existsSync(file))
       settle2(input, repo, file);
   } catch {}
 }
-// packages/workit-core/src/hooks/skill-nudge.ts
-import { createHash as createHash13 } from "node:crypto";
-import fs15 from "node:fs";
-import path19 from "node:path";
 
+// packages/workit-core/src/hooks/stop.ts
+var NONE4 = { kind: "none" };
+var QUESTION = /[?？؟](?=[\s*_`"')\]>]*(?:\s|$))|¿/;
+var OFFER = /\b(?:let me know|want me to|should I|shall I|would you like|do you want|if you(?:'d| would) like|may I|can I go ahead)\b/i;
+var YES_NO = /[[(]\s*y(?:es)?\s*\/\s*n(?:o)?\s*[\])]/i;
+var LIST_ITEM = /^\s*(?:[-*+•]|\d+[.)]|[a-z][.)])\s+/i;
+var asksUser = (message) => {
+  if (!message)
+    return false;
+  const paragraphs = message.replace(/```[\s\S]*?(?:```|$)/g, `
+
+`).split(/\n\s*\n/).map((paragraph) => paragraph.trim()).filter(Boolean);
+  while (paragraphs.length > 1 && paragraphs.at(-1).split(`
+`).every((line) => LIST_ITEM.test(line)))
+    paragraphs.pop();
+  const tail = paragraphs.slice(-2).join(`
+`);
+  return QUESTION.test(tail) || OFFER.test(tail) || YES_NO.test(tail);
+};
+var short = (sha) => (sha ?? "?").slice(0, 12);
+var gitList = (cwd, args) => {
+  const run = spawnSync12("git", args, {
+    cwd,
+    encoding: "utf8",
+    timeout: 3000,
+    windowsHide: true,
+    env: { ...process.env, GIT_TERMINAL_PROMPT: "0", GIT_OPTIONAL_LOCKS: "0", LC_ALL: "C" }
+  });
+  return run.status === 0 ? run.stdout.split(`
+`).filter(Boolean) : null;
+};
+var gitLine = (cwd, args) => gitList(cwd, args)?.[0] ?? null;
+var sessionOf = (row) => (typeof row.session === "string" ? row.session : null) ?? row.actor.session;
+var prState = (row) => typeof row.state === "string" ? row.state : "open";
+var ended = (row) => row.observer === "workit_cli" && (row.type === "pr.merged" || row.type === "pr.status" && prState(row) !== "open");
+var openPr = (rows) => {
+  const seen = rows.findLast((row) => (row.type === "pr.created" || row.type === "pr.status") && row.observer === "workit_cli" && typeof row.pr === "number");
+  if (!seen || ended(seen))
+    return null;
+  const closed = rows.some((row) => ended(row) && row.pr === seen.pr && row.seq > seen.seq);
+  return closed ? null : seen.pr;
+};
+var mergedHeads = (rows) => [
+  ...new Set(rows.filter((row) => row.observer === "workit_cli" && typeof row.head === "string" && (row.type === "pr.merged" || row.type === "pr.status" && prState(row) === "merged")).map((row) => row.head))
+].slice(-3);
+var localCommit = (cwd, sha) => /^[0-9a-f]{7,64}$/.test(sha) && gitList(cwd, ["cat-file", "-e", `${sha}^{commit}`]) !== null;
+var upstreamGone = (cwd, branch) => gitLine(cwd, ["for-each-ref", "--format=%(upstream:track)", `refs/heads/${branch}`]) === "[gone]";
+var landed = (cwd, branch, rows, head, mine) => {
+  if (!head)
+    return false;
+  const merged = mergedHeads(rows);
+  if (merged.length === 0)
+    return upstreamGone(cwd, branch);
+  if (merged.includes(head))
+    return true;
+  if (mine.size === 0)
+    return false;
+  return merged.some((at) => {
+    const after = gitList(cwd, ["rev-list", `--max-count=${UNPUSHED_SCAN}`, "HEAD", "--not", at]);
+    return after !== null && !after.some((sha) => mine.has(sha));
+  });
+};
+var UNPUSHED_SCAN = 500;
+var unpushed = (cwd, branch, endpoint, mine, merged) => {
+  const remote = pushRemoteName(cwd, branch);
+  if (!remote || mine.size === 0)
+    return null;
+  const listed = gitList(cwd, [
+    "rev-list",
+    `--max-count=${UNPUSHED_SCAN}`,
+    "HEAD",
+    "--not",
+    `--remotes=${remote}`,
+    ...merged.filter((sha) => localCommit(cwd, sha))
+  ]);
+  const count = (listed ?? []).filter((sha) => mine.has(sha)).length;
+  if (count === 0)
+    return null;
+  return {
+    kind: "unpushed",
+    reason: `${branch} has ${count} commit(s) of this session not on ${remote}, and this workspace's endpoint is \`${endpoint}\` (\`workit grant show\`): push them with \`workit git push\`${endpoint === "pr" ? ", then open or update the PR (`workit pr create --fill`)" : ""}.`
+  };
+};
+var redChecks = (rows, pr, head, endpoint) => {
+  const status = rows.findLast((row) => row.type === "pr.status" && row.observer === "workit_cli" && row.pr === pr);
+  const state = status && status.head === head && prState(status) === "open" ? status.checks : null;
+  if (state !== "failing" && state !== "pending")
+    return null;
+  return {
+    kind: "checks",
+    reason: `PR #${pr}'s checks were last seen ${state} at ${short(head)}, and this workspace's endpoint is \`${endpoint}\`: run \`workit ci wait --pr ${pr}\`${state === "failing" ? " after fixing the failures `workit pr status` lists (then push)" : ""}.`
+  };
+};
+var unverified = (cwd, branch, all, descriptor) => {
+  const check = checkVerdicts(cwd, branch, all);
+  if (check.accepted.accepted || check.accepted.reasons.includes("failing_verdict"))
+    return null;
+  const has = check.review === "self-reviewed" ? "only a self verdict" : "no current verdict";
+  const verifier = `${descriptor.subagents.agentPrefix}verifier`;
+  return {
+    kind: "verdict",
+    reason: `the head ${short(check.head)} of ${branch}, which this session delivered, has ${has}: if no verifier is already running on it, hand it to a session that did not author it (the ${verifier} agent records \`workit ledger verdict <result> --branch ${branch} --how "<evidence>"\`), or tell the user it is unverified. Never record a verdict on your own work.`
+  };
+};
+function stopObligation(input, descriptor) {
+  try {
+    const session = input.session.id;
+    if (!session || input.session.agentId || !inWorkitWorkspace(input.cwd))
+      return null;
+    const branch = currentBranch(input.cwd);
+    if (!branch || guardedBranch(input.cwd, branch))
+      return null;
+    const ledger = readLedger(input.cwd);
+    if (!ledger.ok)
+      return null;
+    const all = ledger.value.rows;
+    const rows = all.filter((row) => row.branch === branch);
+    const mine = rows.filter((row) => sessionOf(row) === session);
+    const commits = new Set(mine.filter((row) => row.type === "commit.recorded").map((row) => typeof row.sha === "string" ? row.sha : row.head).filter((sha) => typeof sha === "string"));
+    const delivered = mine.some((row) => row.observer === "workit_cli" && (row.type === "pr.created" || row.type === "delivery.verified"));
+    if (commits.size === 0 && !delivered)
+      return null;
+    const head = gitLine(input.cwd, ["rev-parse", "HEAD"]);
+    if (landed(input.cwd, branch, rows, head, commits))
+      return null;
+    const endpoint = resolveAutonomy(input.cwd).effectiveEndpoint;
+    if (endpoint !== "commit") {
+      const left = unpushed(input.cwd, branch, endpoint, commits, mergedHeads(rows));
+      if (left)
+        return left;
+    }
+    const pr = openPr(rows);
+    if ((endpoint === "green" || endpoint === "merged") && pr !== null && head) {
+      const left = redChecks(rows, pr, head, endpoint);
+      if (left)
+        return left;
+    }
+    return delivered ? unverified(input.cwd, branch, all, descriptor) : null;
+  } catch {
+    return null;
+  }
+}
+function stopDecision(input, descriptor) {
+  const event = input.event;
+  if (event.kind !== "stop" || event.stopHookActive)
+    return NONE4;
+  if (!event.lastMessage?.trim() || asksUser(event.lastMessage))
+    return NONE4;
+  const left = stopObligation(input, descriptor);
+  return left ? {
+    kind: "continue",
+    reason: `Workit: before stopping, ${left.reason} If this cannot be done now, say so to the user and stop.`
+  } : NONE4;
+}
 // packages/workit-core/src/core/skill-manifests.ts
 var WORKIT_METHOD_SKILLS = [
   "workit-shape",
@@ -18481,27 +18722,6 @@ var promptTrigger = (prompt) => {
   }
   return null;
 };
-var markerFile2 = (input, session) => {
-  const location = resolveStore(input.cwd);
-  if (location instanceof Error || !location.shared)
-    return null;
-  const name = createHash13("sha256").update(`${input.host}\x00${session}`).digest("hex").slice(0, 32);
-  return path19.join(location.dir, "hooks", `skills-${name}.json`);
-};
-var readMarker = (file) => {
-  try {
-    const value = JSON.parse(fs15.readFileSync(file, "utf8"));
-    return { nudged: value.nudged ?? [], loaded: value.loaded ?? [] };
-  } catch {
-    return { nudged: [], loaded: [] };
-  }
-};
-var writeMarker = (file, marker) => {
-  try {
-    fs15.mkdirSync(path19.dirname(file), { recursive: true });
-    fs15.writeFileSync(file, JSON.stringify(marker));
-  } catch {}
-};
 var loadedSkills = (cwd, session) => {
   const ledger = readLedger(cwd);
   const loaded = new Set;
@@ -18549,13 +18769,13 @@ function recordSkillLoad(input, name, via) {
       return;
     if (!inWorkitWorkspace(input.cwd))
       return;
-    const file = markerFile2(input, session);
+    const file = sessionMarkerFile(input, session);
     if (!file)
       return;
-    const marker = readMarker(file);
+    const marker = readSessionMarker(file);
     if (marker.loaded.includes(skill))
       return;
-    writeMarker(file, { ...marker, loaded: [...marker.loaded, skill] });
+    writeSessionMarker(file, { ...marker, loaded: [...marker.loaded, skill] });
     if (loadedSkills(input.cwd, session).has(skill))
       return;
     appendHookObserved(input.cwd, {
@@ -18567,23 +18787,24 @@ function recordSkillLoad(input, name, via) {
   } catch {}
 }
 var nudgeOnce = (input, session, skill, line) => {
-  const file = markerFile2(input, session);
+  const file = sessionMarkerFile(input, session);
   if (!file)
     return null;
-  const marker = readMarker(file);
+  const marker = readSessionMarker(file);
   if (marker.nudged.includes(skill) || marker.loaded.includes(skill))
     return null;
   if (loadedSkills(input.cwd, session).has(skill))
     return null;
-  writeMarker(file, { ...marker, nudged: [...marker.nudged, skill] });
+  writeSessionMarker(file, { ...marker, nudged: [...marker.nudged, skill] });
   return line;
 };
 var nudgeText = (input, skill, why) => USER_INVOKED.has(skill) ? `Workit: ${why} looks like ${skill} work, which the user starts; offer it (/${skill.replace(/^workit-/, "wk-")}) rather than loading it.` : `Workit: ${why} looks like ${skill} work; if it is, ${skillLoadWording(SKILL_HOST[input.host], skill)} first.`;
 var promptLoads = (prompt) => /^\s*\/(?:skill:)?([\w:-]+)/.exec(prompt)?.[1] ?? /^\s*<skill name="([\w:-]+)"/.exec(prompt)?.[1] ?? /^\s*Load the (workit-[a-z-]+) skill with the skill tool\b/.exec(prompt)?.[1] ?? null;
+var relayedMessage = (prompt) => /^\s*(?:Another Claude session sent a message\b|<agent-message\s+from=|\[SYSTEM NOTIFICATION\b|<task-notification>)/.test(prompt);
 function promptNudge(input, prompt) {
   try {
     const session = input.session.id;
-    if (!prompt || !session || input.session.agentId)
+    if (!prompt || !session || input.session.agentId || relayedMessage(prompt))
       return null;
     const loads = promptLoads(prompt);
     if (loads) {
@@ -18599,32 +18820,7 @@ function promptNudge(input, prompt) {
   }
 }
 var WORKIT_DELIVERY = /^(?:pr (?:create|merge)|ci wait|git push)\b/;
-var SHELLS2 = new Set(["sh", "bash", "zsh", "dash", "ksh"]);
-var LAUNCHERS = new Set([
-  "npx",
-  "bunx",
-  "pnpx",
-  "-y",
-  "--yes",
-  "pnpm",
-  "dlx",
-  "exec",
-  "env",
-  "sudo",
-  "command"
-]);
-var runsWorkitDelivery = (command, dialect, depth = 0) => segmentsOf(command, dialect).some(({ words }) => {
-  const at = words.findIndex((word) => !/^\w+=/.test(word) && !LAUNCHERS.has(word));
-  if (at >= 0 && /(?:^|[\\/])workit(?:\.exe)?$|^@brainervirus\/workit-cli$/.test(words[at])) {
-    const args = words.slice(at + 1);
-    if (args.some((arg) => arg === "--help" || arg === "-h" || arg === "--dry-run"))
-      return false;
-    return WORKIT_DELIVERY.test(args.join(" "));
-  }
-  const shell = SHELLS2.has(words[at]?.split(/[\\/]/).at(-1) ?? "");
-  const script = shell && words[at + 1] === "-c" ? words[at + 2] : undefined;
-  return depth < 3 && script !== undefined && runsWorkitDelivery(script, "posix", depth + 1);
-});
+var runsWorkitDelivery = (command, dialect) => workitInvocations(command, dialect).some((args) => !args.some((arg) => arg === "--help" || arg === "-h" || arg === "--dry-run") && WORKIT_DELIVERY.test(args.join(" ")));
 var isDeliveryCommand = (cwd, command, dialect = "posix") => rawDelivery(cwd, command, dialect) || runsWorkitDelivery(command, dialect) && inWorkitWorkspace(cwd);
 function shipNudge(input, command) {
   try {
@@ -18664,7 +18860,7 @@ var existingDirectory = (value) => {
     return null;
   }
 };
-var SHELLS3 = new Set(["sh", "bash", "zsh", "dash", "pwsh", "powershell", "cmd"]);
+var SHELLS2 = new Set(["sh", "bash", "zsh", "dash", "pwsh", "powershell", "cmd"]);
 var SCRIPT_FLAG2 = /^(?:-\w*c|-command|\/c)$/i;
 var quoteArg = (arg) => /^[\w@%+=:,./-]+$/.test(arg) ? arg : JSON.stringify(arg);
 var commandText = (value) => {
@@ -18676,7 +18872,7 @@ var commandText = (value) => {
   if (!argv.every((arg) => typeof arg === "string"))
     return null;
   const shell = argv[0].split(/[\\/]/).at(-1)?.replace(/\.exe$/i, "").toLowerCase() ?? "";
-  if (SHELLS3.has(shell))
+  if (SHELLS2.has(shell))
     for (let index = 1;index < argv.length - 1; index++) {
       if (SCRIPT_FLAG2.test(argv[index]))
         return nonEmpty2(argv[index + 1]) ? argv[index + 1] : null;
@@ -18724,7 +18920,7 @@ var writeTargets = (input) => {
 };
 // packages/workit-core/src/hooks/handle.ts
 var usable2 = (value) => value === "native" || value === "partial";
-var NONE4 = { kind: "none" };
+var NONE5 = { kind: "none" };
 var resendsOnChange = (descriptor) => descriptor.context.turnResend === "on-change" && usable2(descriptor.context.perTurn);
 var offered = new Set;
 var ROLES = {
@@ -18738,13 +18934,20 @@ var workitRole = (descriptor, agentType) => {
   return Object.hasOwn(ROLES, name) ? ROLES[name] : null;
 };
 var subagentSession = (session, agentId) => [session, agentId].filter((part) => Boolean(part)).join(":").replace(/[^A-Za-z0-9_.:@/+-]/g, "-").slice(0, 128);
-var subagentStartText = (session, descriptor, event) => {
+var CLAUDE_WORKTREE = /[\\/]\.claude[\\/]worktrees[\\/]/;
+var ISOLATED_GIT = 'Run git as plain, separate commands inside your worktree (`git switch -c <branch> <base>`, `git commit --trailer "Workit-Session=<your session>"`, `git push`; `workit doctor --fix` can install a commit-msg hook that adds the trailer), never `workit git …`: Claude Code\'s worktree isolation refuses a command that wraps git and cannot be turned off (https://code.claude.com/docs/en/worktrees#how-claude-code-enforces-isolation). Never dodge that check by renaming or re-wrapping git. Use workit for the non-git verbs (`workit check`, `workit ledger`, `workit pr`).';
+var subagentStartText = (input, descriptor, event) => {
+  const session = input.session.id ?? null;
   const role = workitRole(descriptor, event.agentType);
   const who = `${descriptor.label} subagent ${event.agentId} (${event.agentType})`;
-  if (role === "implementer") {
-    const where = descriptor.subagents.worktreeIsolation === "native" ? "working in its own git worktree: it may edit and commit there" : "as an implementer: it edits and commits only in its own git worktree (the lead makes one with `workit fanout worktree create <slice>`), never in the lead's checkout";
-    return `Workit observed ${who} ${where}, within its brief's scope. Before the first commit, switch to a policy-compliant branch with \`workit git branch <branch> --base <base>\` (e.g. feature/<slug>); branch policy hooks still deny protected or non-compliant branches. Never record a verdict on your own work. Never push, open a PR, or merge unless the brief asks for it.`;
-  }
+  const isolated = descriptor.subagents.worktreeIsolation === "native" && (role === "implementer" || CLAUDE_WORKTREE.test(input.cwd));
+  if (role === "implementer" && isolated)
+    return `Workit observed ${who} working in its own git worktree: it may edit and commit there, within its brief's scope. ${ISOLATED_GIT} Use a policy-compliant branch (e.g. feature/<slug>); branch policy hooks still deny protected or non-compliant branches. Never record a verdict on your own work. Never push, open a PR, or merge unless the brief asks for it.`;
+  if (isolated)
+    return `${ISOLATED_GIT}
+${subagentStartText({ ...input, cwd: "" }, descriptor, event)}`;
+  if (role === "implementer")
+    return `Workit observed ${who} as an implementer: it edits and commits only in its own git worktree (the lead makes one with \`workit fanout worktree create <slice>\`), never in the lead's checkout, within its brief's scope. Before the first commit, switch to a policy-compliant branch with \`workit git branch <branch> --base <base>\` (e.g. feature/<slug>); branch policy hooks still deny protected or non-compliant branches. Never record a verdict on your own work. Never push, open a PR, or merge unless the brief asks for it.`;
   const readOnly = `Workit observed ${who} as read-only/agent-guided.`;
   if (role !== "judge" || !event.agentId)
     return readOnly;
@@ -18757,7 +18960,7 @@ function handleHook(input, deps) {
   switch (event.kind) {
     case "session.start": {
       if (!usable2(descriptor.context.sessionStart))
-        return NONE4;
+        return NONE5;
       const key = input.session.id ? `${input.host}\x00${input.session.id}` : null;
       const offer = event.source === "startup" && (key === null || !offered.has(key));
       if (offer && key !== null)
@@ -18772,42 +18975,44 @@ function handleHook(input, deps) {
     }
     case "context.turn": {
       if (!usable2(descriptor.context.perTurn))
-        return NONE4;
+        return NONE5;
       const current = turnContextText(input, descriptor);
       const text = resendsOnChange(descriptor) ? changedTurnContext(input, current) : current;
-      return withContextLine(text ? { kind: "context", text } : NONE4, promptNudge(input, event.prompt));
+      return withContextLine(text ? { kind: "context", text } : NONE5, promptNudge(input, event.prompt));
     }
     case "shell.pre": {
       const skillRead = skillReadIn(event.command, event.dialect);
       if (skillRead)
         recordSkillLoad(input, skillRead, "read");
       const canDeny = usable2(descriptor.shellPolicy.deny);
-      const policy = canDeny ? shellPolicy(input.cwd, event.command) : NONE4;
+      const policy = canDeny ? shellPolicy(input.cwd, event.command) : NONE5;
       if (policy.kind !== "none")
         return policy;
       const postTool = usable2(descriptor.events["shell.post"].support);
       if (!postTool)
         settlePendingCommit(input);
-      const raw = canDeny ? rawGitPre(input, event.command) : NONE4;
+      const raw = canDeny ? rawGitPre(input, event.command, { nudge: false }) : NONE5;
       if (raw.kind === "deny")
         return raw;
       const writes = usable2(descriptor.events["write.pre"].support) ? shellWrites(event.command) : { writes: false, targets: null };
-      const gate = writes.writes ? writeGate(input.cwd, writes.targets) : NONE4;
+      const gate = writes.writes ? writeGate(input.cwd, writes.targets) : NONE5;
       if (gate.kind === "deny")
         return gate;
       noteRawCommit(input, event.command, postTool ? callKey(event.toolUseId, event.command) : NEXT_COMMAND);
-      return withContextLine(raw, shipNudge(input, event.command));
+      if (descriptor.transport !== "hook-process")
+        return NONE5;
+      return withContextLine(canDeny ? rawGitPre(input, event.command) : NONE5, shipNudge(input, event.command));
     }
     case "shell.post":
       if (usable2(descriptor.events["shell.post"].support))
         rawGitPost(input, event.command, callKey(event.toolUseId, event.command));
-      return NONE4;
+      return NONE5;
     case "write.pre":
-      return usable2(descriptor.events["write.pre"].support) ? writeGate(input.cwd, event.paths) : NONE4;
+      return usable2(descriptor.events["write.pre"].support) ? writeGate(input.cwd, event.paths) : NONE5;
     case "subagent.start":
       return {
         kind: "context",
-        text: subagentStartText(input.session.id ?? null, descriptor, event)
+        text: subagentStartText(input, descriptor, event)
       };
     case "compact.pre":
       return {
@@ -18817,19 +19022,20 @@ function handleHook(input, deps) {
     case "tool.pre":
       if (event.skill)
         recordSkillLoad(input, event.skill, "tool");
-      return NONE4;
+      return NONE5;
+    case "stop":
+      return usable2(descriptor.events.stop.support) ? stopDecision(input, descriptor) : NONE5;
     case "subagent.stop":
     case "prompt.submit":
-    case "stop":
-      return NONE4;
+      return NONE5;
   }
 }
 var failureDecision = (descriptor, event, error) => {
   if (event === "shell.pre" || event === "tool.pre" || event === "write.pre")
-    return descriptor.shellPolicy.failClosed ? { kind: "deny", reason: error, unblock: null } : NONE4;
+    return descriptor.shellPolicy.failClosed ? { kind: "deny", reason: error, unblock: null } : NONE5;
   if (event === "session.start" || event === "subagent.start")
     return { kind: "context", text: `[workit diagnostic: ${error}]` };
-  return NONE4;
+  return NONE5;
 };
 var dispatchHook = (adapter, raw, env = process.env) => {
   const parsed = adapter.parse(raw, env);
@@ -18871,7 +19077,7 @@ var CLAUDE_CODE_DESCRIPTOR = {
     "prompt.submit": { support: "native", native: "UserPromptSubmit" },
     "subagent.stop": { support: "none", native: null },
     "compact.pre": { support: "none", native: null },
-    stop: { support: "none", native: null }
+    stop: { support: "native", native: "Stop" }
   },
   shellPolicy: { deny: "native", channel: "permissionDecision", failClosed: false },
   context: {
@@ -19137,7 +19343,7 @@ var CODEX_DESCRIPTOR = {
     "subagent.stop": { support: "native", native: "SubagentStop" },
     "prompt.submit": { support: "native", native: "UserPromptSubmit" },
     "compact.pre": { support: "none", native: null },
-    stop: { support: "none", native: null }
+    stop: { support: "native", native: "Stop" }
   },
   shellPolicy: { deny: "native", channel: "permissionDecision", failClosed: false },
   context: {
@@ -19157,7 +19363,7 @@ var CODEX_DESCRIPTOR = {
   },
   provenance: { sessionId: "native", agentIdOnTool: "partial", postToolObserve: "native" },
   interaction: { questions: "none", writeBoundary: "partial" },
-  stopControl: "undocumented",
+  stopControl: "native",
   shellAvailable: "native",
   perEventCost: "low",
   capabilities: [
@@ -19224,7 +19430,8 @@ var EVENTS2 = {
   PreToolUse: "shell.pre",
   PostToolUse: "shell.post",
   SubagentStart: "subagent.start",
-  SubagentStop: "subagent.stop"
+  SubagentStop: "subagent.stop",
+  Stop: "stop"
 };
 var SHELL_TOOLS2 = new Set(["bash", "unified-exec"]);
 var isShellTool = (name) => SHELL_TOOLS2.has(String(name).toLowerCase());
@@ -19263,6 +19470,10 @@ var parseCodexHookInput = (value) => {
       ...nonEmpty2(value.tool_use_id) ? { tool_use_id: value.tool_use_id } : {},
       ...nonEmpty2(value.agent_id) ? { agent_id: value.agent_id } : {},
       ...nonEmpty2(value.agent_type) ? { agent_type: value.agent_type } : {},
+      ...event === "Stop" ? {
+        last_assistant_message: optionalText(value.last_assistant_message),
+        stop_hook_active: value.stop_hook_active === true
+      } : {},
       ...event === "SubagentStop" ? {
         agent_transcript_path: optionalText(value.agent_transcript_path),
         last_assistant_message: optionalText(value.last_assistant_message),
@@ -19315,13 +19526,21 @@ var protocolEvent = (input) => {
         lastMessage: input.last_assistant_message ?? null,
         stopHookActive: input.stop_hook_active ?? false
       };
+    case "Stop":
+      return {
+        kind: "stop",
+        lastMessage: input.last_assistant_message ?? null,
+        stopHookActive: input.stop_hook_active ?? false
+      };
   }
 };
 var output = (event, extra = {}) => ({
   hookSpecificOutput: { hookEventName: event, ...extra }
 });
 var render2 = (decision, native) => {
-  if (native === "SubagentStop" || native === null)
+  if (native === "Stop" && decision.kind === "continue")
+    return { json: { decision: "block", reason: decision.reason }, exitCode: 0 };
+  if (native === "SubagentStop" || native === "Stop" || native === null)
     return { json: {}, exitCode: 0 };
   if (decision.kind === "deny")
     return {
@@ -19368,6 +19587,7 @@ var codexAdapter = {
 };
 
 // packages/workit-core/src/hooks/hosts/cursor.ts
+import fs16 from "node:fs";
 import path21 from "node:path";
 var undocumented = { support: "undocumented", native: null };
 var none = { support: "none", native: null };
@@ -19388,7 +19608,7 @@ var CURSOR_DESCRIPTOR = {
     "subagent.stop": { support: "partial", native: "subagentStop" },
     "prompt.submit": undocumented,
     "compact.pre": { support: "partial", native: "preCompact" },
-    stop: none
+    stop: { support: "native", native: "stop" }
   },
   shellPolicy: { deny: "native", channel: "exit2+json", failClosed: true },
   context: {
@@ -19412,7 +19632,7 @@ var CURSOR_DESCRIPTOR = {
     postToolObserve: "undocumented"
   },
   interaction: { questions: "none", writeBoundary: "partial" },
-  stopControl: "undocumented",
+  stopControl: "native",
   shellAvailable: "native",
   perEventCost: "low",
   capabilities: [
@@ -19479,7 +19699,8 @@ var EVENTS3 = {
   beforeShellExecution: "shell.pre",
   subagentStart: "subagent.start",
   subagentStop: "subagent.stop",
-  preCompact: "compact.pre"
+  preCompact: "compact.pre",
+  stop: "stop"
 };
 var parseCursorHookInput = (value) => {
   if (!isRecord4(value) || !Object.hasOwn(EVENTS3, String(value.hook_event_name)))
@@ -19515,7 +19736,12 @@ var parseCursorHookInput = (value) => {
       ...event === "subagentStart" && nonEmpty2(value.subagent_id) ? { subagent_id: value.subagent_id } : {},
       ...event === "subagentStart" && nonEmpty2(value.subagent_type) ? { subagent_type: value.subagent_type } : {},
       ...event === "subagentStart" && nonEmpty2(value.parent_conversation_id) ? { parent_conversation_id: value.parent_conversation_id } : {},
-      ...event === "subagentStart" && nonEmpty2(value.task) ? { task: value.task } : {}
+      ...event === "subagentStart" && nonEmpty2(value.task) ? { task: value.task } : {},
+      ...event === "stop" ? {
+        ...nonEmpty2(value.status) ? { status: value.status } : {},
+        ...typeof value.loop_count === "number" ? { loop_count: value.loop_count } : {},
+        ...nonEmpty2(value.transcript_path) ? { transcript_path: value.transcript_path } : {}
+      } : {}
     }
   };
 };
@@ -19549,6 +19775,51 @@ var protocolEvent2 = (input) => {
       };
     case "preCompact":
       return { kind: "compact.pre", trigger: "auto" };
+    case "stop":
+      return {
+        kind: "stop",
+        lastMessage: (input.status ?? "completed") === "completed" ? lastAssistantText(input.transcript_path) : null,
+        stopHookActive: (input.loop_count ?? 0) > 0
+      };
+  }
+};
+var TRANSCRIPT_TAIL_BYTES = 256 * 1024;
+var lastAssistantText = (file) => {
+  if (!file || !path21.isAbsolute(file))
+    return null;
+  try {
+    const size = fs16.statSync(file).size;
+    const start = Math.max(0, size - TRANSCRIPT_TAIL_BYTES);
+    const buffer = Buffer.alloc(size - start);
+    const fd = fs16.openSync(file, "r");
+    try {
+      fs16.readSync(fd, buffer, 0, buffer.length, start);
+    } finally {
+      fs16.closeSync(fd);
+    }
+    const lines = buffer.toString("utf8").split(`
+`);
+    for (let index = lines.length - 1;index >= 0; index--) {
+      let entry;
+      try {
+        entry = JSON.parse(lines[index]);
+      } catch {
+        continue;
+      }
+      if (!isRecord4(entry) || entry.role !== "assistant")
+        continue;
+      const content = isRecord4(entry.message) ? entry.message.content : entry.content;
+      if (typeof content === "string")
+        return content;
+      if (!Array.isArray(content))
+        return null;
+      const text = content.filter((part) => isRecord4(part) && part.type === "text" && typeof part.text === "string").map((part) => part.text).join(`
+`);
+      return text || null;
+    }
+    return null;
+  } catch {
+    return null;
   }
 };
 var within = (root, dir) => dir === root || dir.startsWith(root.endsWith(path21.sep) ? root : `${root}${path21.sep}`);
@@ -19580,6 +19851,8 @@ var render3 = (decision, native) => {
     return { json: { additional_context: decision.text }, exitCode: 0 };
   if (decision.kind === "notice")
     return { json: { user_message: decision.userMessage }, exitCode: 0 };
+  if (decision.kind === "continue" && native === "stop")
+    return { json: { followup_message: decision.reason }, exitCode: 0 };
   return {
     json: native !== null && BLOCKING2.has(native) ? { permission: "allow" } : {},
     exitCode: 0