@lightupai/polaris 0.0.77 → 0.0.79

package/hooks/capture-prompt.ts

@@ -0,0 +1,60 @@
+#!/usr/bin/env bun
+// hooks/capture-prompt.ts — Forward UserPromptSubmit hook events to the daemon
+// and deliver any queued advisor injects to the agent via additionalContext.
+//
+// The daemon queues inject events arriving over its cloud WebSocket (see
+// injectQueues in src/daemon/daemon.ts); the /events response for a
+// UserPromptSubmit hook drains that queue as pendingInjects, which we surface
+// to Claude Code as hookSpecificOutput. Always exits 0; never blocks.
+
+const POLARIS_PORT = process.env.POLARIS_PORT ?? "4322";
+const POLARIS_URL = `http://127.0.0.1:${POLARIS_PORT}/events`;
+
+// Daemon auth: include the shared local secret when provided (wired into the
+// hook command env by `polaris install`)
+const headers: Record<string, string> = { "Content-Type": "application/json" };
+if (process.env.POLARIS_DAEMON_SECRET) {
+  headers["x-polaris-daemon-secret"] = process.env.POLARIS_DAEMON_SECRET;
+}
+
+try {
+  const input = JSON.parse(await Bun.stdin.text());
+
+  const res = await fetch(POLARIS_URL, {
+    method: "POST",
+    headers,
+    body: JSON.stringify(input),
+  }).catch(() => null);
+
+  if (res && res.ok) {
+    const body = (await res.json().catch(() => null)) as {
+      pendingInjects?: Array<{ from: string; content: string; timestamp: string }>;
+    } | null;
+    const items = body?.pendingInjects;
+    if (Array.isArray(items) && items.length > 0) {
+      // Present injects with honest provenance and let the model apply its own
+      // judgment. NOTE (verified live): the model treats content arriving via
+      // this channel as not-from-the-developer and will surface/consider it but
+      // will NOT obey imperative instructions through it — no hook wording
+      // reliably changes that, nor should it. Use injects to SHARE CONTEXT with
+      // the agent, not to remote-control its actions. (For trusted imperative
+      // steering, the claude/channel path is the right mechanism — deferred.)
+      const formatted =
+        "Context shared by teammates collaborating in this session via Polaris " +
+        "(for your awareness; it did not come directly from the developer):\n" +
+        items.map((i) => `- ${i.from}: ${i.content}`).join("\n");
+      process.stdout.write(
+        JSON.stringify({
+          hookSpecificOutput: {
+            hookEventName: "UserPromptSubmit",
+            additionalContext: formatted,
+          },
+        })
+      );
+    }
+  }
+} catch {
+  // Always exit 0 to avoid blocking the coding agent
+}
+
+process.exit(0);

package/hooks/capture-stop.ts

@@ -9,6 +9,13 @@
 const POLARIS_PORT = process.env.POLARIS_PORT ?? "4322";
 const POLARIS_URL = `http://127.0.0.1:${POLARIS_PORT}/events`;
 
+// Daemon auth: include the shared local secret when provided (wired into the
+// hook command env by `polaris install`)
+const headers: Record<string, string> = { "Content-Type": "application/json" };
+if (process.env.POLARIS_DAEMON_SECRET) {
+  headers["x-polaris-daemon-secret"] = process.env.POLARIS_DAEMON_SECRET;
+}
+
 try {
   const input = JSON.parse(await Bun.stdin.text());
 
@@ -16,7 +23,7 @@ try {
     // Not a Stop event — forward as-is
     await fetch(POLARIS_URL, {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
+      headers,
       body: JSON.stringify(input),
     }).catch(() => {});
     process.exit(0);
@@ -102,7 +109,7 @@ try {
 
   const res = await fetch(POLARIS_URL, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers,
     body: JSON.stringify(payload),
   }).catch(() => null);
 
@@ -111,7 +118,7 @@ try {
     delete (payload as Record<string, unknown>).raw_turn;
     await fetch(POLARIS_URL, {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
+      headers,
       body: JSON.stringify(payload),
     }).catch(() => {});
   }

package/hooks/capture.sh

@@ -2,6 +2,11 @@
 # hooks/capture.sh - Forward Claude Code hook events to polaris local client
 # Reads hook JSON from stdin, POSTs to the local polaris client.
 # Always exits 0 to avoid blocking the coding agent.
+#
+# The raw hook payload is forwarded verbatim — no fields are stripped — so any
+# tool approval/rejection or permission decision fields Claude Code includes
+# (e.g. permission_mode, permission decisions on PreToolUse/PostToolUse) pass
+# through to the daemon untouched.
 
 POLARIS_PORT="${POLARIS_PORT:-4322}"
 POLARIS_URL="http://127.0.0.1:${POLARIS_PORT}/events"
@@ -9,9 +14,16 @@ POLARIS_URL="http://127.0.0.1:${POLARIS_PORT}/events"
 # Read all of stdin
 INPUT=$(cat)
 
+# Shared local daemon secret (wired by `polaris install`); sent when available
+SECRET_HEADER=""
+if [ -n "$POLARIS_DAEMON_SECRET" ]; then
+  SECRET_HEADER="x-polaris-daemon-secret: $POLARIS_DAEMON_SECRET"
+fi
+
 # POST to polaris local client, fail silently
 curl -s -X POST \
   -H "Content-Type: application/json" \
+  ${SECRET_HEADER:+-H "$SECRET_HEADER"} \
   -d "$INPUT" \
   "$POLARIS_URL" \
   >/dev/null 2>&1 || true

package/hooks/statusline.sh

@@ -4,6 +4,12 @@
 
 POLARIS_DAEMON_PORT="${POLARIS_DAEMON_PORT:-4322}"
 
+# Shared local daemon secret (wired by `polaris install`); sent when available
+SECRET_HEADER=""
+if [ -n "$POLARIS_DAEMON_SECRET" ]; then
+  SECRET_HEADER="x-polaris-daemon-secret: $POLARIS_DAEMON_SECRET"
+fi
+
 # Read stdin (session JSON from the coding agent)
 INPUT=$(cat)
 
@@ -12,13 +18,13 @@ CC_SESSION_ID=$(echo "$INPUT" | jq -r '.session_id // ""' 2>/dev/null || echo ""
 
 # Query daemon — try specific session first, fall back to any connected session
 if [ -n "$CC_SESSION_ID" ]; then
-  STATUS=$(curl -s "http://127.0.0.1:${POLARIS_DAEMON_PORT}/status/${CC_SESSION_ID}" 2>/dev/null)
+  STATUS=$(curl -s ${SECRET_HEADER:+-H "$SECRET_HEADER"} "http://127.0.0.1:${POLARIS_DAEMON_PORT}/status/${CC_SESSION_ID}" 2>/dev/null)
   CONNECTED=$(echo "$STATUS" | jq -r '.connected' 2>/dev/null || echo "false")
 fi
 
 # If no match, check if there's any active session
 if [ "$CONNECTED" != "true" ]; then
-  STATUS=$(curl -s "http://127.0.0.1:${POLARIS_DAEMON_PORT}/status" 2>/dev/null)
+  STATUS=$(curl -s ${SECRET_HEADER:+-H "$SECRET_HEADER"} "http://127.0.0.1:${POLARIS_DAEMON_PORT}/status" 2>/dev/null)
   FIRST_SESSION=$(echo "$STATUS" | jq -r '.sessions[0] // empty' 2>/dev/null)
   if [ -n "$FIRST_SESSION" ]; then
     STATUS="{\"connected\":true,\"project\":$(echo "$STATUS" | jq '.sessions[0].project'),\"session\":$(echo "$STATUS" | jq '.sessions[0].session'),\"user\":$(echo "$STATUS" | jq '.sessions[0].user')}"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lightupai/polaris",
-  "version": "0.0.77",
+  "version": "0.0.79",
   "description": "Record and stream Claude Code sessions to Slack. Like Gong for AI coding — capture every prompt, response, and tool call. Multiplayer collaboration across AI coding agents.",
   "keywords": [
     "claude-code",

package/scripts/backup.sh

@@ -0,0 +1,71 @@
+#!/bin/bash
+set -euo pipefail
+
+# Polaris Postgres backup: pg_dump to a timestamped file.
+#
+# Never destructive — this script only creates new files. It never deletes,
+# rotates, or overwrites anything (it refuses to clobber an existing dump).
+#
+# Usage:
+#   DATABASE_URL=postgres://user:pass@host:5432/polaris ./scripts/backup.sh [output-dir]
+#
+# Parameters (env):
+#   DATABASE_URL   (required)  Postgres connection string to back up.
+#   BACKUP_DIR     (optional)  Output directory (default: ./backups).
+#                              A positional arg, if given, takes precedence.
+#   BACKUP_S3_URI  (optional)  Object-storage target, e.g. s3://my-bucket/polaris.
+#                              If set and the `aws` CLI is installed, the dump is
+#                              also uploaded there (the local copy is kept).
+#
+# Cron wiring (on the prod host, e.g. nightly at 03:17 UTC):
+#   crontab -e
+#   17 3 * * * DATABASE_URL=postgres://polaris:PASS@127.0.0.1:5432/polaris \
+#     BACKUP_DIR=/var/backups/polaris /opt/polaris/scripts/backup.sh \
+#     >> /var/log/polaris-backup.log 2>&1
+#
+# Retention is intentionally NOT handled here (this script never deletes).
+# If you want it, pair the cron entry with something like:
+#   find /var/backups/polaris -name 'polaris-*.dump' -mtime +30 -delete
+#
+# Restore with:
+#   pg_restore --clean --if-exists -d "$DATABASE_URL" /path/to/polaris-<stamp>.dump
+#
+# Note: pg_dump's major version must be >= the server's (pg_dump aborts
+# otherwise). On a host without a matching client, run via the container:
+#   docker exec <postgres-container> pg_dump --format=custom "$DATABASE_URL" > out.dump
+
+DATABASE_URL="${DATABASE_URL:?DATABASE_URL is required (postgres://user:pass@host:port/db)}"
+BACKUP_DIR="${1:-${BACKUP_DIR:-./backups}}"
+BACKUP_S3_URI="${BACKUP_S3_URI:-}"
+
+STAMP="$(date -u +%Y%m%d-%H%M%S)"
+OUT="$BACKUP_DIR/polaris-$STAMP.dump"
+
+mkdir -p "$BACKUP_DIR"
+
+if [ -e "$OUT" ]; then
+  echo "Refusing to overwrite existing $OUT" >&2
+  exit 1
+fi
+
+echo "Backing up to $OUT ..."
+
+# Custom format (-Fc): compressed, restorable with pg_restore.
+# Dump to a .partial first so an interrupted dump is never mistaken for a
+# complete backup, then atomically rename.
+pg_dump --format=custom --file="$OUT.partial" "$DATABASE_URL"
+mv "$OUT.partial" "$OUT"
+
+echo "Backup written: $OUT ($(du -h "$OUT" | cut -f1))"
+
+if [ -n "$BACKUP_S3_URI" ]; then
+  if command -v aws >/dev/null 2>&1; then
+    echo "Uploading to $BACKUP_S3_URI/ ..."
+    aws s3 cp "$OUT" "$BACKUP_S3_URI/$(basename "$OUT")"
+    echo "Upload complete."
+  else
+    echo "BACKUP_S3_URI is set but the aws CLI is not installed; skipping upload (local copy kept)." >&2
+  fi
+fi
+
+echo "Done."

package/src/bridge-discover-org.ts

@@ -1,5 +1,31 @@
 import postgres from "postgres";
-const sql = postgres(process.env.DATABASE_URL ?? "");
-const rows = await sql`SELECT id FROM orgs WHERE slack_team_id IS NOT NULL LIMIT 1`;
-if (rows.length > 0) console.log(rows[0].id);
-await sql.end();
+import type { Sql } from "./service/db";
+
+// All orgs eligible for a Slack bridge: Slack-connected (team id) with a bot token.
+export async function discoverBridgeOrgs(sql: Sql): Promise<string[]> {
+  const rows = await sql`
+    SELECT id FROM orgs
+    WHERE slack_team_id IS NOT NULL AND slack_bot_token IS NOT NULL
+    ORDER BY created_at ASC
+  `;
+  return rows.map((row) => row.id as string);
+}
+
+// Back-compat: first eligible org (legacy single-org callers).
+export async function discoverBridgeOrg(sql: Sql): Promise<string | null> {
+  const orgs = await discoverBridgeOrgs(sql);
+  return orgs[0] ?? null;
+}
+
+// CLI mode (docker/bridge-entrypoint.sh): print the first eligible org id.
+// Kept single-line so `ORG_ID=$(bun run src/bridge-discover-org.ts)` stays valid;
+// multi-org deployments should run bridge.ts with no args (startAllBridges) instead.
+if (import.meta.main) {
+  const sql = postgres(process.env.DATABASE_URL ?? "");
+  try {
+    const orgId = await discoverBridgeOrg(sql);
+    if (orgId) console.log(orgId);
+  } finally {
+    await sql.end();
+  }
+}