@hiveku-apps/sync 0.5.0 → 0.5.1

package/README.md

@@ -15,9 +15,12 @@ Local sync CLI for a Hiveku account. Pairs with the Hiveku MCP server at
    current" below).
 
 The goal: open one folder per Hiveku tenant in VS Code with Claude Code,
-and the local `.md` files become the source-of-truth Claude reads. Tools
-are dispatched against the right tenant automatically via the API key
-in `.env`.
+with the account's memory mirrored as local `.md` files Claude can read
+quickly. Hiveku Memory stays the source of truth: the files are a mirror of
+the last `pull`, memory wins where they disagree, and `CLAUDE.md` tells
+Claude to re-read an entry live before acting on its file. Tools are
+dispatched against the right tenant automatically via the API key in
+`.env`.
 
 ## Install
 
@@ -340,6 +343,10 @@ the old layout and the old `memory_update` call:
 - you edited those sections: the marked part is added at the end, your text is
   left as it is, and the marked part says it wins where the two disagree.
 
+The kept-current part also states that Hiveku Memory is the source of truth,
+in the Hiveku MCP server's own words, and that the local files are a mirror
+memory wins over. `AGENTS.md` says the same.
+
 A `CLAUDE.md` that is read-only, a link to another file, or whose markers are not
 there once each and in order is left alone (`pull` says so). `pull` never creates
 a missing one.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hiveku-apps/sync",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Sync a Hiveku account's memory/rules/skills + coder projects into a local folder, and ship projects (push/deploy/pull-env) from the terminal. Pairs with the Hiveku MCP at core.hiveku.com/mcp so Claude Code can drive Hiveku tools per-folder.",
   "type": "module",
   "license": "MIT",

package/src/claude-md.mjs

@@ -1,6 +1,8 @@
 /**
  * The part of an account folder's CLAUDE.md that hiveku-sync keeps current:
- * the folder layout and the memory-write rules, between two markers.
+ * the folder layout and the memory-write rules, between two markers. Since
+ * 2026-10-03 it also states that Hiveku Memory is the source of truth (the MCP
+ * server's words) and that the local files are a mirror memory wins over.
  *
  * `init` writes CLAUDE.md once. Everything outside the markers is the user's
  * from then on, but the layout and the memory rules change with releases
@@ -24,6 +26,20 @@ import { join } from 'node:path';
 import { writeFileAtomic } from './util.mjs';
 
 export const CLAUDE_MD_BEGIN = '<!-- hiveku:memory:begin -->';
+
+/**
+ * The source-of-truth rule, in the same words as the MCP server's own
+ * instructions (hiveku-mcp-api-server src/services/mcp-instructions.service.ts,
+ * MCP #100; Abe, 2026-10-03: "This memory needs to be the source of truth and
+ * the agents know it and obey it"). CLAUDE.md's kept-current part and AGENTS.md
+ * both carry it.
+ */
+export const SOURCE_OF_TRUTH_LINE =
+  'Hiveku Memory is the source of truth for this business: read it before you act, and follow it ' +
+  'over your own assumptions, local files or earlier conversation. When something disagrees with ' +
+  'memory, trust memory and say so. When `memory_log_add` is listed, record your work: a Doing line ' +
+  'when you start a task for the person and a Done line when it ends. Save what you learned with the ' +
+  'memory_* tools.';
 export const CLAUDE_MD_END = '<!-- hiveku:memory:end -->';
 
 /** The kept-current part: the markers and the two sections between them. */
@@ -34,6 +50,8 @@ export function claudeMdMemoryRegion() {
 \`hiveku-sync pull\` keeps this section and "Memory writes" below current. Where
 anything else in this file disagrees with them, follow these two sections.
 
+${SOURCE_OF_TRUTH_LINE}
+
 \`hiveku-sync pull\` files every entry under the agent that owns it, the way the
 Memory page does: \`<type>/<agent>/<name>.md\`, and \`<type>/shared/<name>.md\` for
 what is shared with every agent. The agent is a key such as \`sales\`, \`helpdesk\`
@@ -70,10 +88,12 @@ topic such as \`seo\` or \`ppc\`. Each file's front matter says its \`owner\`.
 - \`.hiveku/set-aside/\` — earlier copies a pull moved out of the way (never deleted)
 - \`.hiveku/projects.json\` — project ID ↔ folder mapping
 
-When asked about this account, read the local files first — they are the
-authoritative copy of what was in Olympus the last time \`hiveku-sync pull\`
-ran, except the \`moved/\` and \`not-followed/\` folders above. To pick up edits
-made elsewhere, run \`hiveku-sync pull\`.
+The local files are a mirror of what memory said the last time
+\`hiveku-sync pull\` ran, and memory wins. They are quick context (never the
+\`moved/\` and \`not-followed/\` folders above), but before you act on one, or
+change an entry starting from one, re-read the entry live with
+\`memory_get({ memory_id })\` (the \`id\` in its front matter) and follow what
+that read says. To refresh the copies, run \`hiveku-sync pull\`.
 
 ## Memory writes
 
@@ -97,6 +117,8 @@ Others edit it too: if you read the entry earlier in the session, check
 409 \`version_conflict\` means it changed again, so merge into the \`content\` it
 returns and send again. The log is a record, not instructions.
 
+A write refused with \`memory_write_refused\` is not a failure: show the person its message and link, follow its hint, and never retry it unchanged or report it.
+
 The account memory is the exception: no tool sets it. Read it with
 \`account_memory_get\`, suggest one line with \`account_memory_append\` (an owner
 keeps or removes it), and tell the user that owners and admins edit it on the

package/src/codex-prompt-tools.json

@@ -1,5 +1,5 @@
 {
-  "source": "locus2012/hiveku-codex-plugin 0.1.16 (5b4e580), plugins/hiveku/.mcp.json: every hiveku.tools entry (all approval_mode \"prompt\"); plus project_vcs_rollback (Versions Wave 2, hiveku-codex-plugin feature/versions-wave2)",
+  "source": "locus2012/hiveku-codex-plugin #28 (b7ff5fd, 2026-10-03), plugins/hiveku/.mcp.json: every hiveku.tools entry with approval_mode \"prompt\" (project_vcs_rollback included)",
   "why": "hiveku-sync writes its own [mcp_servers.hiveku] into a Codex folder. Codex then uses that entry, not the plugin's, for the server's connection and for every tool's approval mode, so these prompts must be written here too. Refresh this list whenever the Codex plugin's prompt list changes.",
   "tools": [
     "deploy_site",
@@ -13,8 +13,8 @@
     "project_vcs_stash",
     "project_vcs_prune",
     "project_vcs_branch_preview_teardown",
-    "project_vcs_rollback",
     "project_vcs_revert",
+    "project_vcs_rollback",
     "hiveku_batch",
     "project_checkpoint_restore",
     "checkpoint_restore",
@@ -25,6 +25,7 @@
     "site_firewall_remove",
     "project_indexing_set",
     "account_memory_append",
+    "memory_create",
     "memory_update",
     "memory_delete",
     "memory_restore_version",
@@ -47,6 +48,15 @@
     "ppc_bidding_strategy_update",
     "ppc_platform_bidding_strategy_update",
     "ppc_campaign_create",
+    "ppc_enable_resource",
+    "ppc_platform_enable_resource",
+    "ppc_bulk_edit",
+    "ppc_linkedin_creatives",
+    "ppc_tiktok_split_tests",
+    "ppc_recommendation_apply",
+    "ppc_meta_campaign_update",
+    "ppc_linkedin_campaign_update",
+    "ppc_linkedin_campaign_group_update",
     "ppc_google_auto_apply_set",
     "ppc_google_campaign_settings_set",
     "ppc_google_ad_schedule_set",
@@ -56,6 +66,7 @@
     "ppc_bing_campaign_ai_settings_set",
     "ppc_google_ad_text_update",
     "ppc_google_ads_text_replace",
+    "ppc_bing_rsa_text_update",
     "ppc_negatives_remove",
     "ppc_bing_url_tracking_set",
     "ppc_bing_ad_extension_update",
@@ -168,6 +179,7 @@
     "seo_page_schema_delete",
     "workflow_run",
     "workflow_enable",
+    "workflow_resume",
     "workflow_trigger_update",
     "workflow_delete",
     "workflow_delete_schedule",

package/src/codex.mjs

@@ -45,6 +45,7 @@ import { formatKey, readTomlDeclarations } from './toml.mjs';
 import { loadDotenv, safeSlug } from './util.mjs';
 import { ownerFolder } from './knowledge-files.mjs';
 import { SHARED_OWNER, ownerLabel, ownerOrder } from './memory-owner.mjs';
+import { SOURCE_OF_TRUTH_LINE } from './claude-md.mjs';
 
 /**
  * The FIXED list of high-risk Hiveku tools that Codex asks about before
@@ -145,6 +146,9 @@ named \`hiveku-<agent>-<name>\` for the agent that owns them, invoked by name) a
 
 Non-negotiables (also in CLAUDE.md, restated because they are load-bearing):
 - **Verify identity before ANY write:** \`get_account_info\` must return THIS account.
+- **Hiveku Memory is the source of truth.** ${SOURCE_OF_TRUTH_LINE}
+  The memory files in this folder are a mirror of the last \`hiveku-sync pull\`, and memory wins: before you act
+  on one, or change an entry starting from one, re-read the entry live (\`memory_get({ memory_id })\`).
 - **Context and memory.** Call \`account_context_get({ domain })\` first, before any copy, plan or analysis.
   The account memory is read-only to you: owners edit it on the Hiveku dashboard, the local copy is
   \`hiveku-data/account/ACCOUNT_MEMORY.md\` (never edit or upload it); suggest one line with \`account_memory_append\`.
@@ -176,6 +180,7 @@ ${digest}
   can skim: benefit first, no alarm vocabulary, accurate.
 - **Hiveku itself in your way?** A Hiveku tool still failing after one sensible retry → \`hiveku_report_issue\`;
   a capability no tool offers (search \`hiveku_docs_search\` first) → \`hiveku_request_feature\`. No secrets or personal data.
+  A memory write refused with \`memory_write_refused\` is not a failure: show the person its message and link, follow its hint, and never retry it unchanged or report it.
 - **Tell the user only if it changes what they get:** one or two calm sentences — flagged to the Hiveku team (give the
   ref), the team is quick to fix these, you'll let them know when it's sorted. No error codes, blame or promised times.
 - Video generation is paid + capped — \`marketing_generate_video\` with \`dry_run: true\` first.