@brainervirus/workit-pi 8.19.1 → 8.20.0

package/dist/workit.js

@@ -23095,7 +23095,7 @@ var canonical2 = (file) => {
   let rest = "";
   for (let dir = path30.resolve(file);; dir = path30.dirname(dir)) {
     try {
-      return path30.join(realpathSync6(dir), rest);
+      return path30.join(realpathSync6.native(dir), rest);
     } catch {
       if (path30.dirname(dir) === dir)
         return path30.resolve(file);
@@ -23315,18 +23315,26 @@ var CD2 = new Set(["cd", "chdir", "set-location", "sl"]);
 var PUSHD2 = new Set(["pushd", "push-location"]);
 var POPD2 = new Set(["popd", "pop-location"]);
 var cdInto = (dir, words) => {
-  const target = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const named = words.slice(1).find((word) => !word.startsWith("-") || word === "-");
+  const target = named === undefined ? undefined : homeExpanded(named);
   if (dir === undefined || target === "-" || target && /^~|[$`*?]/.test(target))
     return;
   return target === undefined ? os10.homedir() : path30.resolve(dir, target);
 };
 var quoteWord2 = (word) => /^[\w@%+=:,./-]+$/.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`;
+var homeExpanded = (file) => {
+  const match = /^(?:~|\$HOME|\$\{HOME\})(?=\/|$)/.exec(file);
+  return match ? (process.env.HOME || os10.homedir()) + file.slice(match[0].length) : file;
+};
 var segmentTargets = (cwd, command, dialect, depth = 0) => {
   const targets = [];
   let dir = cwd;
   let stack = [];
   const groups = [];
-  const at = (file) => path30.isAbsolute(file) ? file : dir === undefined ? null : path30.resolve(dir, file);
+  const at = (file) => {
+    const home = homeExpanded(file);
+    return path30.isAbsolute(home) ? home : dir === undefined ? null : path30.resolve(dir, home);
+  };
   for (const segment of segmentsOf(command, dialect)) {
     if (segment.group === "open") {
       groups.push({ dir, stack: [...stack] });
@@ -23431,7 +23439,39 @@ var claimAll = (owner, targets, deps) => {
     claimLiveSession(target, owner, deps);
 };
 var liveTargets = (cwd, paths) => paths?.length ? paths.map((file) => path30.resolve(cwd, file)) : [path30.join(cwd, DIR_TARGET)];
+var issuedTarget = (cwd, targets) => {
+  const state = resolveStateDir();
+  const found = targets.find((target) => underIssued(state, cwd, homeExpanded(target), process.platform, canonical2));
+  return found ?? null;
+};
+var underIssued = (state, cwd, target, platform = process.platform, real = (file) => file) => {
+  const win = platform === "win32";
+  const p = win ? path30.win32 : path30.posix;
+  const fold = (value) => win || platform === "darwin" ? value.toLowerCase() : value;
+  const named = win ? target.replace(/^\/([a-zA-Z])(?=\/|$)/, "$1:") : target;
+  const relative = p.relative(fold(real(p.resolve(state))), fold(real(p.resolve(cwd, named))));
+  if (relative.startsWith("..") || p.isAbsolute(relative))
+    return false;
+  return relative.split(p.sep)[0].startsWith("issued");
+};
+var unquotedWindowsIssued = (command) => {
+  if (process.platform !== "win32" || !command.includes("\\"))
+    return false;
+  const flat = (value) => value.replaceAll("\\", "/").toLowerCase();
+  return flat(command).includes(`${flat(resolveStateDir())}/issued`) && shellWrites(command).writes;
+};
+var issuedDeny = (file) => {
+  const unblock = "Issued ids and tokens are written only by Workit's SubagentStart hook. Run the verifier or reviewer agent so the host issues its own session; never edit the issued registries by hand.";
+  return {
+    kind: "deny",
+    reason: `workit issued-registry guard: ${file} is under Workit's issued-session state. ${unblock}`,
+    unblock
+  };
+};
 function writeGate(cwd, paths, owner, deps) {
+  const forged = paths?.length ? issuedTarget(cwd, paths) : null;
+  if (forged)
+    return issuedDeny(forged);
   if (!owner)
     return beforeWriteGate(cwd, paths);
   const targets = liveTargets(cwd, paths);
@@ -23444,6 +23484,11 @@ function writeGate(cwd, paths, owner, deps) {
   return decision;
 }
 function shellGate(cwd, command, owner, dialect = "posix", deps) {
+  try {
+    const forged = issuedTarget(cwd, segmentTargets(cwd, command, dialect)) ?? (unquotedWindowsIssued(command) ? "the issued registry" : null);
+    if (forged)
+      return issuedDeny(forged);
+  } catch {}
   const writes = shellWrites(command);
   let targets = [];
   if (owner) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-pi",
-  "version": "8.19.1",
+  "version": "8.20.0",
   "description": "Workit native extension for Pi — tools, method skills, and session continuity",
   "keywords": [
     "agentic-coding",