@brainervirus/workit-pi 8.7.0 → 8.8.0

package/dist/workit.js

@@ -19487,12 +19487,48 @@ function writeGate(cwd, paths) {
     return NONE2;
   }
 }
+// packages/workit-core/src/hooks/stop.ts
+import { spawnSync as spawnSync16 } from "node:child_process";
+
 // packages/workit-core/src/hooks/raw-git.ts
 import { spawnSync as spawnSync15 } from "node:child_process";
+import { createHash as createHash13 } from "node:crypto";
+import fs17 from "node:fs";
+import os4 from "node:os";
+import path23 from "node:path";
+
+// packages/workit-core/src/hooks/session-marker.ts
 import { createHash as createHash12 } from "node:crypto";
 import fs16 from "node:fs";
-import os4 from "node:os";
 import path22 from "node:path";
+var sessionMarkerFile = (input, session, store) => {
+  let dir = store;
+  if (dir === undefined) {
+    const location = resolveStore(input.cwd);
+    if (location instanceof Error || !location.shared)
+      return null;
+    dir = location.dir;
+  }
+  const name = createHash12("sha256").update(`${input.host}\x00${session}`).digest("hex").slice(0, 32);
+  return path22.join(dir, "hooks", `skills-${name}.json`);
+};
+var list2 = (value) => Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
+var readSessionMarker = (file) => {
+  try {
+    const value = JSON.parse(fs16.readFileSync(file, "utf8"));
+    return { nudged: list2(value.nudged), loaded: list2(value.loaded), raw: list2(value.raw) };
+  } catch {
+    return { nudged: [], loaded: [], raw: [] };
+  }
+};
+var writeSessionMarker = (file, marker) => {
+  try {
+    fs16.mkdirSync(path22.dirname(file), { recursive: true });
+    fs16.writeFileSync(file, JSON.stringify(marker));
+  } catch {}
+};
+
+// packages/workit-core/src/hooks/raw-git.ts
 var NONE3 = { kind: "none" };
 var SHELLS = new Set(["sh", "bash", "zsh", "dash", "ksh"]);
 var PREFIXES3 = new Set(["sudo", "command", "env", "nohup", "time", "exec", "nice", "&"]);
@@ -19509,12 +19545,12 @@ var GIT_VALUE_OPTIONS = new Set([
   "--config-env",
   "--super-prefix"
 ]);
-var isAbsolute = (value) => path22.isAbsolute(value) || /^[A-Za-z]:[\\/]/.test(value) || value.startsWith("\\\\");
+var isAbsolute = (value) => path23.isAbsolute(value) || /^[A-Za-z]:[\\/]/.test(value) || value.startsWith("\\\\");
 var joinDir = (base, next) => {
   if (base === undefined || /[$`*?]/.test(next) || next === "-")
     return;
-  const expanded = next === "~" || next.startsWith("~/") ? path22.join(os4.homedir(), next.slice(1)) : next;
-  return base === null || isAbsolute(expanded) ? expanded : path22.join(base, expanded);
+  const expanded = next === "~" || next.startsWith("~/") ? path23.join(os4.homedir(), next.slice(1)) : next;
+  return base === null || isAbsolute(expanded) ? expanded : path23.join(base, expanded);
 };
 var cdTarget = (words) => {
   const args = words.slice(1);
@@ -19610,6 +19646,37 @@ function rawInvocations(command, dialect = "posix", depth = 0) {
   }
   return found;
 }
+var LAUNCHERS = new Set([
+  "npx",
+  "bunx",
+  "pnpx",
+  "-y",
+  "--yes",
+  "pnpm",
+  "dlx",
+  "exec",
+  "env",
+  "sudo",
+  "command"
+]);
+var WORKIT_BIN = /(?:^|[\\/])workit(?:\.exe)?$|^@brainervirus\/workit-cli$/;
+function workitInvocations(command, dialect = "posix", depth = 0) {
+  const found = [];
+  for (const { words } of segmentsOf(command, dialect)) {
+    const at = words.findIndex((word) => !/^\w+=/.test(word) && !LAUNCHERS.has(word));
+    if (at < 0)
+      continue;
+    if (WORKIT_BIN.test(words[at])) {
+      found.push(words.slice(at + 1));
+      continue;
+    }
+    const shell = SHELLS.has(commandName(words[at]));
+    const script = shell && words[at + 1] === "-c" ? words[at + 2] : undefined;
+    if (depth < 3 && script !== undefined)
+      found.push(...workitInvocations(script, "posix", depth + 1));
+  }
+  return found;
+}
 var PUSH_VALUE_OPTIONS = new Set(["-o", "--push-option", "--receive-pack", "--exec", "--repo"]);
 var pushAction = (args) => {
   let force = false;
@@ -19736,7 +19803,7 @@ var repoAt = (dir) => {
   return { location, dir, branch: resolveTaskKey(dir, location).branch };
 };
 var isWorkitWorkspace = (repo) => {
-  if (fs16.existsSync(repo.location.dir))
+  if (fs17.existsSync(repo.location.dir))
     return true;
   try {
     return resolveRuntimeWorkspaceVcs(repo.location.top ?? repo.dir) !== null;
@@ -19767,17 +19834,17 @@ var headSha2 = (repo) => {
   if (!git || git.reftable)
     return null;
   try {
-    const head = fs16.readFileSync(path22.join(git.gitDir, "HEAD"), "utf8").trim();
+    const head = fs17.readFileSync(path23.join(git.gitDir, "HEAD"), "utf8").trim();
     if (/^[0-9a-f]{40,64}$/.test(head))
       return head;
     const ref = /^ref: (refs\/.+)$/.exec(head)?.[1];
     if (!ref)
       return null;
-    const common = path22.dirname(repo.location.dir);
+    const common = path23.dirname(repo.location.dir);
     try {
-      return fs16.readFileSync(path22.join(common, ref), "utf8").trim() || null;
+      return fs17.readFileSync(path23.join(common, ref), "utf8").trim() || null;
     } catch {}
-    const packed = fs16.readFileSync(path22.join(common, "packed-refs"), "utf8");
+    const packed = fs17.readFileSync(path23.join(common, "packed-refs"), "utf8");
     return new RegExp(`^([0-9a-f]{40,64}) ${ref.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}$`, "m").exec(packed)?.[1] ?? null;
   } catch {
     return null;
@@ -19814,7 +19881,7 @@ var actionsIn = (cwd, command, dialect) => {
     const action = rawAction(invocation);
     if (!action)
       continue;
-    const dir = path22.resolve(cwd, invocation.dir ?? ".");
+    const dir = path23.resolve(cwd, invocation.dir ?? ".");
     if (!repos.has(dir)) {
       const repo = repoAt(dir);
       repos.set(dir, repo && isWorkitWorkspace(repo) ? repo : null);
@@ -19832,12 +19899,31 @@ var inWorkitWorkspace = (dir) => {
 var rawDelivery = (cwd, command, dialect) => mentionsRawTool(command) && actionsIn(cwd, command, dialect).some(({ action }) => action.kind !== "commit" && action.kind !== "pr-read");
 var mentionsRawTool = (command) => /\b(?:git|gh|glab)\b/i.test(command);
 var dialectOf = (input) => (input.event.kind === "shell.pre" || input.event.kind === "shell.post" ? input.event.dialect : undefined) ?? "posix";
-function rawGitPre(input, command) {
+var nudgeKind = (action) => action.kind === "commit" && action.amend ? "commit-amend" : action.kind === "push" && action.blindForce ? "push-force" : action.kind;
+var unseenNudges = (input, nudges, store) => {
+  const session = input.session.id;
+  const file = session ? sessionMarkerFile(input, session, store) : null;
+  if (!file)
+    return [...nudges.values()];
+  const marker = readSessionMarker(file);
+  const agent = input.session.agentId ? `${input.session.agentId}:` : "";
+  const fresh = [...nudges.keys()].filter((kind) => !marker.raw.includes(agent + kind));
+  if (fresh.length)
+    writeSessionMarker(file, {
+      ...marker,
+      raw: [...marker.raw, ...fresh.map((kind) => agent + kind)]
+    });
+  return fresh.map((kind) => nudges.get(kind));
+};
+function rawGitPre(input, command, options = {}) {
   try {
     if (!mentionsRawTool(command))
       return NONE3;
-    const nudges = [];
-    for (const { action, repo } of actionsIn(input.cwd, command, dialectOf(input))) {
+    const dialect = dialectOf(input);
+    const nudges = new Map;
+    let store = null;
+    for (const { action, repo } of actionsIn(input.cwd, command, dialect)) {
+      store ??= repo.location.dir;
       if (action.kind === "merge")
         return deny(refusal(action, null));
       if (action.kind === "push")
@@ -19847,10 +19933,15 @@ function rawGitPre(input, command) {
             return deny(refusal(action, branch));
         }
       const nudge = nudgeFor(action, input.host, input.session.id);
-      if (nudge && !nudges.includes(nudge))
-        nudges.push(nudge);
+      if (nudge && !nudges.has(nudgeKind(action)))
+        nudges.set(nudgeKind(action), nudge);
     }
-    return nudges.length ? { kind: "context", text: nudges.join(`
+    if (options.nudge === false || !store || nudges.size === 0)
+      return NONE3;
+    if (workitInvocations(command, dialect).length > 0)
+      return NONE3;
+    const shown = unseenNudges(input, nudges, store);
+    return shown.length ? { kind: "context", text: shown.join(`
 `) } : NONE3;
   } catch {
     return NONE3;
@@ -19859,8 +19950,8 @@ function rawGitPre(input, command) {
 var deny = (reason) => ({ kind: "deny", reason, unblock: null });
 var NEXT_COMMAND = "next";
 var MARKER_TTL_SECONDS = 3600;
-var markerFile = (repo, session, key) => path22.join(repo.location.dir, "hooks", `commit-${createHash12("sha256").update(`${session}\x00${key}`).digest("hex").slice(0, 32)}.json`);
-var callKey = (toolUseId, command) => toolUseId ?? `cmd:${createHash12("sha256").update(command).digest("hex")}`;
+var markerFile = (repo, session, key) => path23.join(repo.location.dir, "hooks", `commit-${createHash13("sha256").update(`${session}\x00${key}`).digest("hex").slice(0, 32)}.json`);
+var callKey = (toolUseId, command) => toolUseId ?? `cmd:${createHash13("sha256").update(command).digest("hex")}`;
 function noteRawCommit(input, command, key) {
   try {
     if (!input.session.id || !/\bcommit\b/.test(command))
@@ -19870,8 +19961,8 @@ function noteRawCommit(input, command, key) {
       if (action.kind !== "commit")
         continue;
       const file = markerFile(repo, input.session.id, key);
-      fs16.mkdirSync(path22.dirname(file), { recursive: true });
-      fs16.writeFileSync(file, `${JSON.stringify({ head: headSha2(repo), at })}
+      fs17.mkdirSync(path23.dirname(file), { recursive: true });
+      fs17.writeFileSync(file, `${JSON.stringify({ head: headSha2(repo), at })}
 `);
     }
   } catch {}
@@ -19894,11 +19985,11 @@ var headCommit = (dir) => {
 var settle2 = (input, repo, file) => {
   let marker;
   try {
-    marker = JSON.parse(fs16.readFileSync(file, "utf8"));
+    marker = JSON.parse(fs17.readFileSync(file, "utf8"));
   } catch {
     return;
   }
-  fs16.rmSync(file, { force: true });
+  fs17.rmSync(file, { force: true });
   const session = input.session.id;
   const now = Date.now() / 1000;
   if (typeof marker.at !== "number" || now - marker.at > MARKER_TTL_SECONDS)
@@ -19947,15 +20038,165 @@ function settlePendingCommit(input) {
     if (!repo)
       return;
     const file = markerFile(repo, input.session.id, NEXT_COMMAND);
-    if (fs16.existsSync(file))
+    if (fs17.existsSync(file))
       settle2(input, repo, file);
   } catch {}
 }
-// packages/workit-core/src/hooks/skill-nudge.ts
-import { createHash as createHash13 } from "node:crypto";
-import fs17 from "node:fs";
-import path23 from "node:path";
 
+// packages/workit-core/src/hooks/stop.ts
+var NONE4 = { kind: "none" };
+var QUESTION = /[?？؟](?=[\s*_`"')\]>]*(?:\s|$))|¿/;
+var OFFER = /\b(?:let me know|want me to|should I|shall I|would you like|do you want|if you(?:'d| would) like|may I|can I go ahead)\b/i;
+var YES_NO = /[[(]\s*y(?:es)?\s*\/\s*n(?:o)?\s*[\])]/i;
+var LIST_ITEM = /^\s*(?:[-*+•]|\d+[.)]|[a-z][.)])\s+/i;
+var asksUser = (message) => {
+  if (!message)
+    return false;
+  const paragraphs = message.replace(/```[\s\S]*?(?:```|$)/g, `
+
+`).split(/\n\s*\n/).map((paragraph) => paragraph.trim()).filter(Boolean);
+  while (paragraphs.length > 1 && paragraphs.at(-1).split(`
+`).every((line) => LIST_ITEM.test(line)))
+    paragraphs.pop();
+  const tail = paragraphs.slice(-2).join(`
+`);
+  return QUESTION.test(tail) || OFFER.test(tail) || YES_NO.test(tail);
+};
+var short = (sha) => (sha ?? "?").slice(0, 12);
+var gitList = (cwd, args) => {
+  const run = spawnSync16("git", args, {
+    cwd,
+    encoding: "utf8",
+    timeout: 3000,
+    windowsHide: true,
+    env: { ...process.env, GIT_TERMINAL_PROMPT: "0", GIT_OPTIONAL_LOCKS: "0", LC_ALL: "C" }
+  });
+  return run.status === 0 ? run.stdout.split(`
+`).filter(Boolean) : null;
+};
+var gitLine = (cwd, args) => gitList(cwd, args)?.[0] ?? null;
+var sessionOf = (row) => (typeof row.session === "string" ? row.session : null) ?? row.actor.session;
+var prState = (row) => typeof row.state === "string" ? row.state : "open";
+var ended = (row) => row.observer === "workit_cli" && (row.type === "pr.merged" || row.type === "pr.status" && prState(row) !== "open");
+var openPr = (rows) => {
+  const seen = rows.findLast((row) => (row.type === "pr.created" || row.type === "pr.status") && row.observer === "workit_cli" && typeof row.pr === "number");
+  if (!seen || ended(seen))
+    return null;
+  const closed = rows.some((row) => ended(row) && row.pr === seen.pr && row.seq > seen.seq);
+  return closed ? null : seen.pr;
+};
+var mergedHeads = (rows) => [
+  ...new Set(rows.filter((row) => row.observer === "workit_cli" && typeof row.head === "string" && (row.type === "pr.merged" || row.type === "pr.status" && prState(row) === "merged")).map((row) => row.head))
+].slice(-3);
+var localCommit = (cwd, sha) => /^[0-9a-f]{7,64}$/.test(sha) && gitList(cwd, ["cat-file", "-e", `${sha}^{commit}`]) !== null;
+var upstreamGone = (cwd, branch) => gitLine(cwd, ["for-each-ref", "--format=%(upstream:track)", `refs/heads/${branch}`]) === "[gone]";
+var landed = (cwd, branch, rows, head, mine) => {
+  if (!head)
+    return false;
+  const merged = mergedHeads(rows);
+  if (merged.length === 0)
+    return upstreamGone(cwd, branch);
+  if (merged.includes(head))
+    return true;
+  if (mine.size === 0)
+    return false;
+  return merged.some((at) => {
+    const after = gitList(cwd, ["rev-list", `--max-count=${UNPUSHED_SCAN}`, "HEAD", "--not", at]);
+    return after !== null && !after.some((sha) => mine.has(sha));
+  });
+};
+var UNPUSHED_SCAN = 500;
+var unpushed = (cwd, branch, endpoint, mine, merged) => {
+  const remote = pushRemoteName(cwd, branch);
+  if (!remote || mine.size === 0)
+    return null;
+  const listed = gitList(cwd, [
+    "rev-list",
+    `--max-count=${UNPUSHED_SCAN}`,
+    "HEAD",
+    "--not",
+    `--remotes=${remote}`,
+    ...merged.filter((sha) => localCommit(cwd, sha))
+  ]);
+  const count = (listed ?? []).filter((sha) => mine.has(sha)).length;
+  if (count === 0)
+    return null;
+  return {
+    kind: "unpushed",
+    reason: `${branch} has ${count} commit(s) of this session not on ${remote}, and this workspace's endpoint is \`${endpoint}\` (\`workit grant show\`): push them with \`workit git push\`${endpoint === "pr" ? ", then open or update the PR (`workit pr create --fill`)" : ""}.`
+  };
+};
+var redChecks = (rows, pr, head, endpoint) => {
+  const status = rows.findLast((row) => row.type === "pr.status" && row.observer === "workit_cli" && row.pr === pr);
+  const state = status && status.head === head && prState(status) === "open" ? status.checks : null;
+  if (state !== "failing" && state !== "pending")
+    return null;
+  return {
+    kind: "checks",
+    reason: `PR #${pr}'s checks were last seen ${state} at ${short(head)}, and this workspace's endpoint is \`${endpoint}\`: run \`workit ci wait --pr ${pr}\`${state === "failing" ? " after fixing the failures `workit pr status` lists (then push)" : ""}.`
+  };
+};
+var unverified = (cwd, branch, all, descriptor) => {
+  const check = checkVerdicts(cwd, branch, all);
+  if (check.accepted.accepted || check.accepted.reasons.includes("failing_verdict"))
+    return null;
+  const has = check.review === "self-reviewed" ? "only a self verdict" : "no current verdict";
+  const verifier = `${descriptor.subagents.agentPrefix}verifier`;
+  return {
+    kind: "verdict",
+    reason: `the head ${short(check.head)} of ${branch}, which this session delivered, has ${has}: if no verifier is already running on it, hand it to a session that did not author it (the ${verifier} agent records \`workit ledger verdict <result> --branch ${branch} --how "<evidence>"\`), or tell the user it is unverified. Never record a verdict on your own work.`
+  };
+};
+function stopObligation(input, descriptor) {
+  try {
+    const session = input.session.id;
+    if (!session || input.session.agentId || !inWorkitWorkspace(input.cwd))
+      return null;
+    const branch = currentBranch(input.cwd);
+    if (!branch || guardedBranch(input.cwd, branch))
+      return null;
+    const ledger = readLedger(input.cwd);
+    if (!ledger.ok)
+      return null;
+    const all = ledger.value.rows;
+    const rows = all.filter((row) => row.branch === branch);
+    const mine = rows.filter((row) => sessionOf(row) === session);
+    const commits = new Set(mine.filter((row) => row.type === "commit.recorded").map((row) => typeof row.sha === "string" ? row.sha : row.head).filter((sha) => typeof sha === "string"));
+    const delivered = mine.some((row) => row.observer === "workit_cli" && (row.type === "pr.created" || row.type === "delivery.verified"));
+    if (commits.size === 0 && !delivered)
+      return null;
+    const head = gitLine(input.cwd, ["rev-parse", "HEAD"]);
+    if (landed(input.cwd, branch, rows, head, commits))
+      return null;
+    const endpoint = resolveAutonomy(input.cwd).effectiveEndpoint;
+    if (endpoint !== "commit") {
+      const left = unpushed(input.cwd, branch, endpoint, commits, mergedHeads(rows));
+      if (left)
+        return left;
+    }
+    const pr = openPr(rows);
+    if ((endpoint === "green" || endpoint === "merged") && pr !== null && head) {
+      const left = redChecks(rows, pr, head, endpoint);
+      if (left)
+        return left;
+    }
+    return delivered ? unverified(input.cwd, branch, all, descriptor) : null;
+  } catch {
+    return null;
+  }
+}
+function stopDecision(input, descriptor) {
+  const event = input.event;
+  if (event.kind !== "stop" || event.stopHookActive)
+    return NONE4;
+  if (!event.lastMessage?.trim() || asksUser(event.lastMessage))
+    return NONE4;
+  const left = stopObligation(input, descriptor);
+  return left ? {
+    kind: "continue",
+    reason: `Workit: before stopping, ${left.reason} If this cannot be done now, say so to the user and stop.`
+  } : NONE4;
+}
 // packages/workit-core/src/core/skill-manifests.ts
 var WORKIT_METHOD_SKILLS = [
   "workit-shape",
@@ -20062,27 +20303,6 @@ var promptTrigger = (prompt) => {
   }
   return null;
 };
-var markerFile2 = (input, session) => {
-  const location = resolveStore(input.cwd);
-  if (location instanceof Error || !location.shared)
-    return null;
-  const name = createHash13("sha256").update(`${input.host}\x00${session}`).digest("hex").slice(0, 32);
-  return path23.join(location.dir, "hooks", `skills-${name}.json`);
-};
-var readMarker = (file) => {
-  try {
-    const value = JSON.parse(fs17.readFileSync(file, "utf8"));
-    return { nudged: value.nudged ?? [], loaded: value.loaded ?? [] };
-  } catch {
-    return { nudged: [], loaded: [] };
-  }
-};
-var writeMarker = (file, marker) => {
-  try {
-    fs17.mkdirSync(path23.dirname(file), { recursive: true });
-    fs17.writeFileSync(file, JSON.stringify(marker));
-  } catch {}
-};
 var loadedSkills = (cwd, session) => {
   const ledger = readLedger(cwd);
   const loaded = new Set;
@@ -20130,13 +20350,13 @@ function recordSkillLoad(input, name, via) {
       return;
     if (!inWorkitWorkspace(input.cwd))
       return;
-    const file = markerFile2(input, session);
+    const file = sessionMarkerFile(input, session);
     if (!file)
       return;
-    const marker = readMarker(file);
+    const marker = readSessionMarker(file);
     if (marker.loaded.includes(skill))
       return;
-    writeMarker(file, { ...marker, loaded: [...marker.loaded, skill] });
+    writeSessionMarker(file, { ...marker, loaded: [...marker.loaded, skill] });
     if (loadedSkills(input.cwd, session).has(skill))
       return;
     appendHookObserved(input.cwd, {
@@ -20148,23 +20368,24 @@ function recordSkillLoad(input, name, via) {
   } catch {}
 }
 var nudgeOnce = (input, session, skill, line) => {
-  const file = markerFile2(input, session);
+  const file = sessionMarkerFile(input, session);
   if (!file)
     return null;
-  const marker = readMarker(file);
+  const marker = readSessionMarker(file);
   if (marker.nudged.includes(skill) || marker.loaded.includes(skill))
     return null;
   if (loadedSkills(input.cwd, session).has(skill))
     return null;
-  writeMarker(file, { ...marker, nudged: [...marker.nudged, skill] });
+  writeSessionMarker(file, { ...marker, nudged: [...marker.nudged, skill] });
   return line;
 };
 var nudgeText = (input, skill, why) => USER_INVOKED.has(skill) ? `Workit: ${why} looks like ${skill} work, which the user starts; offer it (/${skill.replace(/^workit-/, "wk-")}) rather than loading it.` : `Workit: ${why} looks like ${skill} work; if it is, ${skillLoadWording(SKILL_HOST[input.host], skill)} first.`;
 var promptLoads = (prompt) => /^\s*\/(?:skill:)?([\w:-]+)/.exec(prompt)?.[1] ?? /^\s*<skill name="([\w:-]+)"/.exec(prompt)?.[1] ?? /^\s*Load the (workit-[a-z-]+) skill with the skill tool\b/.exec(prompt)?.[1] ?? null;
+var relayedMessage = (prompt) => /^\s*(?:Another Claude session sent a message\b|<agent-message\s+from=|\[SYSTEM NOTIFICATION\b|<task-notification>)/.test(prompt);
 function promptNudge(input, prompt) {
   try {
     const session = input.session.id;
-    if (!prompt || !session || input.session.agentId)
+    if (!prompt || !session || input.session.agentId || relayedMessage(prompt))
       return null;
     const loads = promptLoads(prompt);
     if (loads) {
@@ -20180,32 +20401,7 @@ function promptNudge(input, prompt) {
   }
 }
 var WORKIT_DELIVERY = /^(?:pr (?:create|merge)|ci wait|git push)\b/;
-var SHELLS2 = new Set(["sh", "bash", "zsh", "dash", "ksh"]);
-var LAUNCHERS = new Set([
-  "npx",
-  "bunx",
-  "pnpx",
-  "-y",
-  "--yes",
-  "pnpm",
-  "dlx",
-  "exec",
-  "env",
-  "sudo",
-  "command"
-]);
-var runsWorkitDelivery = (command, dialect, depth = 0) => segmentsOf(command, dialect).some(({ words }) => {
-  const at = words.findIndex((word) => !/^\w+=/.test(word) && !LAUNCHERS.has(word));
-  if (at >= 0 && /(?:^|[\\/])workit(?:\.exe)?$|^@brainervirus\/workit-cli$/.test(words[at])) {
-    const args = words.slice(at + 1);
-    if (args.some((arg) => arg === "--help" || arg === "-h" || arg === "--dry-run"))
-      return false;
-    return WORKIT_DELIVERY.test(args.join(" "));
-  }
-  const shell = SHELLS2.has(words[at]?.split(/[\\/]/).at(-1) ?? "");
-  const script = shell && words[at + 1] === "-c" ? words[at + 2] : undefined;
-  return depth < 3 && script !== undefined && runsWorkitDelivery(script, "posix", depth + 1);
-});
+var runsWorkitDelivery = (command, dialect) => workitInvocations(command, dialect).some((args) => !args.some((arg) => arg === "--help" || arg === "-h" || arg === "--dry-run") && WORKIT_DELIVERY.test(args.join(" ")));
 var isDeliveryCommand = (cwd, command, dialect = "posix") => rawDelivery(cwd, command, dialect) || runsWorkitDelivery(command, dialect) && inWorkitWorkspace(cwd);
 function shipNudge(input, command) {
   try {
@@ -20234,7 +20430,7 @@ var shellNudge = (input, command) => withContextLine(rawGitPre(input, command),
 // packages/workit-core/src/hooks/hosts/fields.ts
 var isRecord4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var nonEmpty2 = (value) => typeof value === "string" && value.trim() !== "";
-var SHELLS3 = new Set(["sh", "bash", "zsh", "dash", "pwsh", "powershell", "cmd"]);
+var SHELLS2 = new Set(["sh", "bash", "zsh", "dash", "pwsh", "powershell", "cmd"]);
 var WRITE_TOOLS = new Set([
   "write",
   "edit",
@@ -20268,7 +20464,7 @@ var writePaths = (input) => {
 };
 // packages/workit-core/src/hooks/handle.ts
 var usable2 = (value) => value === "native" || value === "partial";
-var NONE4 = { kind: "none" };
+var NONE5 = { kind: "none" };
 var resendsOnChange = (descriptor) => descriptor.context.turnResend === "on-change" && usable2(descriptor.context.perTurn);
 var offered = new Set;
 var ROLES = {
@@ -20282,13 +20478,20 @@ var workitRole = (descriptor, agentType) => {
   return Object.hasOwn(ROLES, name) ? ROLES[name] : null;
 };
 var subagentSession = (session, agentId) => [session, agentId].filter((part) => Boolean(part)).join(":").replace(/[^A-Za-z0-9_.:@/+-]/g, "-").slice(0, 128);
-var subagentStartText = (session, descriptor, event) => {
+var CLAUDE_WORKTREE = /[\\/]\.claude[\\/]worktrees[\\/]/;
+var ISOLATED_GIT = 'Run git as plain, separate commands inside your worktree (`git switch -c <branch> <base>`, `git commit --trailer "Workit-Session=<your session>"`, `git push`; `workit doctor --fix` can install a commit-msg hook that adds the trailer), never `workit git …`: Claude Code\'s worktree isolation refuses a command that wraps git and cannot be turned off (https://code.claude.com/docs/en/worktrees#how-claude-code-enforces-isolation). Never dodge that check by renaming or re-wrapping git. Use workit for the non-git verbs (`workit check`, `workit ledger`, `workit pr`).';
+var subagentStartText = (input, descriptor, event) => {
+  const session = input.session.id ?? null;
   const role = workitRole(descriptor, event.agentType);
   const who = `${descriptor.label} subagent ${event.agentId} (${event.agentType})`;
-  if (role === "implementer") {
-    const where = descriptor.subagents.worktreeIsolation === "native" ? "working in its own git worktree: it may edit and commit there" : "as an implementer: it edits and commits only in its own git worktree (the lead makes one with `workit fanout worktree create <slice>`), never in the lead's checkout";
-    return `Workit observed ${who} ${where}, within its brief's scope. Before the first commit, switch to a policy-compliant branch with \`workit git branch <branch> --base <base>\` (e.g. feature/<slug>); branch policy hooks still deny protected or non-compliant branches. Never record a verdict on your own work. Never push, open a PR, or merge unless the brief asks for it.`;
-  }
+  const isolated = descriptor.subagents.worktreeIsolation === "native" && (role === "implementer" || CLAUDE_WORKTREE.test(input.cwd));
+  if (role === "implementer" && isolated)
+    return `Workit observed ${who} working in its own git worktree: it may edit and commit there, within its brief's scope. ${ISOLATED_GIT} Use a policy-compliant branch (e.g. feature/<slug>); branch policy hooks still deny protected or non-compliant branches. Never record a verdict on your own work. Never push, open a PR, or merge unless the brief asks for it.`;
+  if (isolated)
+    return `${ISOLATED_GIT}
+${subagentStartText({ ...input, cwd: "" }, descriptor, event)}`;
+  if (role === "implementer")
+    return `Workit observed ${who} as an implementer: it edits and commits only in its own git worktree (the lead makes one with \`workit fanout worktree create <slice>\`), never in the lead's checkout, within its brief's scope. Before the first commit, switch to a policy-compliant branch with \`workit git branch <branch> --base <base>\` (e.g. feature/<slug>); branch policy hooks still deny protected or non-compliant branches. Never record a verdict on your own work. Never push, open a PR, or merge unless the brief asks for it.`;
   const readOnly = `Workit observed ${who} as read-only/agent-guided.`;
   if (role !== "judge" || !event.agentId)
     return readOnly;
@@ -20301,7 +20504,7 @@ function handleHook(input, deps) {
   switch (event.kind) {
     case "session.start": {
       if (!usable2(descriptor.context.sessionStart))
-        return NONE4;
+        return NONE5;
       const key = input.session.id ? `${input.host}\x00${input.session.id}` : null;
       const offer = event.source === "startup" && (key === null || !offered.has(key));
       if (offer && key !== null)
@@ -20316,42 +20519,44 @@ function handleHook(input, deps) {
     }
     case "context.turn": {
       if (!usable2(descriptor.context.perTurn))
-        return NONE4;
+        return NONE5;
       const current = turnContextText(input, descriptor);
       const text = resendsOnChange(descriptor) ? changedTurnContext(input, current) : current;
-      return withContextLine(text ? { kind: "context", text } : NONE4, promptNudge(input, event.prompt));
+      return withContextLine(text ? { kind: "context", text } : NONE5, promptNudge(input, event.prompt));
     }
     case "shell.pre": {
       const skillRead = skillReadIn(event.command, event.dialect);
       if (skillRead)
         recordSkillLoad(input, skillRead, "read");
       const canDeny = usable2(descriptor.shellPolicy.deny);
-      const policy = canDeny ? shellPolicy(input.cwd, event.command) : NONE4;
+      const policy = canDeny ? shellPolicy(input.cwd, event.command) : NONE5;
       if (policy.kind !== "none")
         return policy;
       const postTool = usable2(descriptor.events["shell.post"].support);
       if (!postTool)
         settlePendingCommit(input);
-      const raw = canDeny ? rawGitPre(input, event.command) : NONE4;
+      const raw = canDeny ? rawGitPre(input, event.command, { nudge: false }) : NONE5;
       if (raw.kind === "deny")
         return raw;
       const writes = usable2(descriptor.events["write.pre"].support) ? shellWrites(event.command) : { writes: false, targets: null };
-      const gate = writes.writes ? writeGate(input.cwd, writes.targets) : NONE4;
+      const gate = writes.writes ? writeGate(input.cwd, writes.targets) : NONE5;
       if (gate.kind === "deny")
         return gate;
       noteRawCommit(input, event.command, postTool ? callKey(event.toolUseId, event.command) : NEXT_COMMAND);
-      return withContextLine(raw, shipNudge(input, event.command));
+      if (descriptor.transport !== "hook-process")
+        return NONE5;
+      return withContextLine(canDeny ? rawGitPre(input, event.command) : NONE5, shipNudge(input, event.command));
     }
     case "shell.post":
       if (usable2(descriptor.events["shell.post"].support))
         rawGitPost(input, event.command, callKey(event.toolUseId, event.command));
-      return NONE4;
+      return NONE5;
     case "write.pre":
-      return usable2(descriptor.events["write.pre"].support) ? writeGate(input.cwd, event.paths) : NONE4;
+      return usable2(descriptor.events["write.pre"].support) ? writeGate(input.cwd, event.paths) : NONE5;
     case "subagent.start":
       return {
         kind: "context",
-        text: subagentStartText(input.session.id ?? null, descriptor, event)
+        text: subagentStartText(input, descriptor, event)
       };
     case "compact.pre":
       return {
@@ -20361,11 +20566,12 @@ function handleHook(input, deps) {
     case "tool.pre":
       if (event.skill)
         recordSkillLoad(input, event.skill, "tool");
-      return NONE4;
+      return NONE5;
+    case "stop":
+      return usable2(descriptor.events.stop.support) ? stopDecision(input, descriptor) : NONE5;
     case "subagent.stop":
     case "prompt.submit":
-    case "stop":
-      return NONE4;
+      return NONE5;
   }
 }
 // packages/workit-core/src/hooks/hosts/claude-code.ts
@@ -20384,6 +20590,7 @@ var SHELL_TOOLS2 = new Set(["bash", "unified-exec"]);
 var SOURCES2 = new Set(["startup", "resume", "clear", "compact", "fork"]);
 
 // packages/workit-core/src/hooks/hosts/cursor.ts
+var TRANSCRIPT_TAIL_BYTES = 256 * 1024;
 var BLOCKING2 = new Set(["preToolUse", "beforeShellExecution", "subagentStart"]);
 
 // packages/workit-core/src/hooks/run.ts
@@ -20406,7 +20613,7 @@ var PI_DESCRIPTOR = {
     "subagent.stop": { support: "none", native: null },
     "prompt.submit": { support: "undocumented", native: null },
     "compact.pre": { support: "native", native: "session_before_compact" },
-    stop: { support: "none", native: null }
+    stop: { support: "native", native: "agent_end" }
   },
   shellPolicy: { deny: "native", channel: "block", failClosed: false },
   context: {
@@ -20426,7 +20633,7 @@ var PI_DESCRIPTOR = {
   },
   provenance: { sessionId: "native", agentIdOnTool: "none", postToolObserve: "native" },
   interaction: { questions: "native", writeBoundary: "native" },
-  stopControl: "none",
+  stopControl: "native",
   shellAvailable: "native",
   perEventCost: "low",
   capabilities: [
@@ -21244,9 +21451,29 @@ var persistUncertainCancel = (store, ctx, taskId, workerId, handle, exit) => {
   };
   return observeWorkerExit(lostBinding, handle, exit).ok;
 };
+var lastAssistantText = (messages) => {
+  for (const message of (messages ?? []).toReversed()) {
+    if (typeof message !== "object" || message === null)
+      continue;
+    const { role, content, stopReason } = message;
+    if (role !== "assistant")
+      continue;
+    if (stopReason === "aborted" || stopReason === "error")
+      return null;
+    if (typeof content === "string")
+      return content;
+    if (!Array.isArray(content))
+      return null;
+    const text = content.filter((part) => typeof part === "object" && part !== null && part.type === "text" && typeof part.text === "string").map((part) => part.text).join(`
+`);
+    return text || null;
+  }
+  return null;
+};
 function extension(pi) {
   const sessions = new Set;
   const historyOfferSessions = new Set;
+  const continuedRuns = new Set;
   const workers = new Map;
   const bindings = new Map;
   const childWorker = process.env.WORKIT_PI_WORKER_ID;
@@ -21551,6 +21778,28 @@ ${offer}` : ""}`;
 ${nudge}` : content) };
     return nudge ? { message: { customType: "workit-skill", content: nudge, display: false } } : undefined;
   });
+  pi.on("agent_end", (event, ctx) => {
+    try {
+      const id = ctx.sessionManager.getSessionId();
+      if (continuedRuns.delete(id) || childWorker || !ctx.isProjectTrusted())
+        return;
+      const send = pi.sendMessage;
+      if (typeof send !== "function")
+        return;
+      const decision = stopDecision({
+        ...turnInput(ctx),
+        event: {
+          kind: "stop",
+          lastMessage: lastAssistantText(event.messages),
+          stopHookActive: false
+        }
+      }, PI_DESCRIPTOR);
+      if (decision.kind !== "continue")
+        return;
+      continuedRuns.add(id);
+      send.call(pi, { customType: "workit-stop", content: decision.reason, display: true }, { triggerTurn: true, deliverAs: "followUp" });
+    } catch {}
+  });
   pi.on("session_before_compact", () => {
     return;
   });
@@ -21590,5 +21839,6 @@ ${nudge}` : content) };
 }
 export {
   extension as default,
+  lastAssistantText,
   persistUncertainCancel
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-pi",
-  "version": "8.7.0",
+  "version": "8.8.0",
   "description": "Workit native extension for Pi — tools, method skills, and session continuity",
   "keywords": [
     "agentic-coding",