@plur-ai/cli 0.8.2 → 0.8.4

package/dist/commands/hook-inject.js

@@ -167,8 +167,7 @@ ${parts2.join("\n")}` };
   } else {
     task = input.prompt || "";
     if (!task) {
-      writeFileSync(marker, "");
-      return;
+      task = "general session";
     }
     const sessionId2 = randomUUID();
     writeFileSync(marker, JSON.stringify({ task, sessionId: sessionId2 }));

package/dist/commands/hook-session-guard.js

@@ -0,0 +1,54 @@
+// src/commands/hook-session-guard.ts
+import { readSync, existsSync } from "fs";
+import { join } from "path";
+import { tmpdir } from "os";
+var EXEMPT_TOOLS = /* @__PURE__ */ new Set([
+  "mcp__plur__plur_session_start",
+  "ToolSearch"
+]);
+function readStdinRaw() {
+  try {
+    const chunks = [];
+    const buf = Buffer.alloc(65536);
+    while (true) {
+      try {
+        const n = readSync(0, buf, 0, buf.length, null);
+        if (n === 0) break;
+        chunks.push(Buffer.from(buf.subarray(0, n)));
+      } catch {
+        break;
+      }
+    }
+    return Buffer.concat(chunks).toString("utf8");
+  } catch {
+    return "";
+  }
+}
+function sentinelPath(sessionId) {
+  return join(tmpdir(), `plur-session-${sessionId}`);
+}
+async function run(_args, _flags) {
+  const raw = readStdinRaw();
+  let data;
+  try {
+    data = JSON.parse(raw);
+  } catch {
+    return;
+  }
+  const toolName = data.tool_name ?? "";
+  const sessionId = data.session_id ?? "";
+  if (EXEMPT_TOOLS.has(toolName)) return;
+  if (!sessionId) return;
+  if (existsSync(sentinelPath(sessionId))) return;
+  const output = {
+    hookSpecificOutput: {
+      hookEventName: "PreToolUse",
+      permissionDecision: "deny",
+      permissionDecisionReason: "BLOCKED: plur_session_start has not been called yet. You MUST call mcp__plur__plur_session_start before using any other tool. Use ToolSearch to load it first if needed."
+    }
+  };
+  process.stdout.write(JSON.stringify(output));
+}
+export {
+  run
+};

package/dist/commands/hook-session-mark.js

@@ -0,0 +1,41 @@
+// src/commands/hook-session-mark.ts
+import { readSync, writeFileSync } from "fs";
+import { join } from "path";
+import { tmpdir } from "os";
+function readStdinRaw() {
+  try {
+    const chunks = [];
+    const buf = Buffer.alloc(65536);
+    while (true) {
+      try {
+        const n = readSync(0, buf, 0, buf.length, null);
+        if (n === 0) break;
+        chunks.push(Buffer.from(buf.subarray(0, n)));
+      } catch {
+        break;
+      }
+    }
+    return Buffer.concat(chunks).toString("utf8");
+  } catch {
+    return "";
+  }
+}
+async function run(_args, _flags) {
+  const raw = readStdinRaw();
+  let data;
+  try {
+    data = JSON.parse(raw);
+  } catch {
+    return;
+  }
+  const sessionId = data.session_id ?? "";
+  if (!sessionId) return;
+  const sentinel = join(tmpdir(), `plur-session-${sessionId}`);
+  try {
+    writeFileSync(sentinel, "");
+  } catch {
+  }
+}
+export {
+  run
+};

package/dist/commands/hook-session-remind.js

@@ -0,0 +1,13 @@
+// src/commands/hook-session-remind.ts
+async function run(_args, _flags) {
+  const output = {
+    hookSpecificOutput: {
+      hookEventName: "SessionStart",
+      additionalContext: "MANDATORY FIRST ACTION \u2014 DO THIS NOW BEFORE ANYTHING ELSE:\n1. Call ToolSearch with query 'select:mcp__plur__plur_session_start'\n2. Call mcp__plur__plur_session_start with the user's task description\n3. Only THEN proceed with any other work\n\nA PreToolUse guard will BLOCK all other tool calls until this is done. This is not optional. This is not a suggestion. Do it now."
+    }
+  };
+  process.stdout.write(JSON.stringify(output));
+}
+export {
+  run
+};

package/dist/commands/init.js

@@ -16,6 +16,19 @@ import { join } from "path";
 import { homedir } from "os";
 var CLI = "npx @plur-ai/cli";
 var PLUR_HOOKS = {
+  // --- Session enforcement ---
+  // These three hooks ensure plur_session_start is always called first.
+  // Without session start, feedback loops, episode tracking, and scoped
+  // injection don't work. The guard blocks all tools until the sentinel
+  // file exists; the mark creates it after plur_session_start succeeds.
+  // Forceful directive at session open
+  SessionStart: [
+    {
+      hooks: [
+        { type: "command", command: `${CLI} hook-session-remind`, timeout: 3 }
+      ]
+    }
+  ],
   // --- Session lifecycle ---
   // First message: inject engrams based on the prompt.
   // Subsequent messages: periodic reminder to call plur_learn (~1ms skip).
@@ -35,8 +48,16 @@ var PLUR_HOOKS = {
       ]
     }
   ],
-  // --- Contextual injection ---
+  // --- Contextual injection + session guard ---
   PreToolUse: [
+    // Session guard — blocks all tools until plur_session_start is called.
+    // Must be first so it runs before any other PreToolUse hook.
+    {
+      matcher: "*",
+      hooks: [
+        { type: "command", command: `${CLI} hook-session-guard`, timeout: 3 }
+      ]
+    },
     // Full injection when entering plan mode — planning needs broad context
     {
       matcher: "EnterPlanMode",
@@ -66,8 +87,15 @@ var PLUR_HOOKS = {
       ]
     }
   ],
-  // Observation capture — log tool results
+  // Observation capture — log tool results + session sentinel
   PostToolUse: [
+    // Session sentinel — creates marker file after plur_session_start succeeds
+    {
+      matcher: "mcp__plur__plur_session_start",
+      hooks: [
+        { type: "command", command: `${CLI} hook-session-mark`, timeout: 3 }
+      ]
+    },
     {
       matcher: "Bash|Edit|Write|Agent",
       hooks: [
@@ -103,11 +131,11 @@ You have persistent memory via PLUR. Corrections, preferences, and conventions p
 
 PLUR is installed **globally** \u2014 one MCP server, one engram store (\`~/.plur/\`), available in every project. You do NOT need per-project installation. The \`plur\` MCP server provides tools named \`plur_session_start\`, \`plur_learn\`, \`plur_recall_hybrid\`, \`plur_feedback\`, \`plur_session_end\`, etc. If you cannot find these tools, run \`plur doctor\` to diagnose. Do **not** substitute tools from other MCP servers (e.g. \`datacore_*\`) \u2014 those belong to a different system.
 
-Hooks inject engrams automatically on every first message \u2014 you do not need to call \`plur_session_start\` manually (though you can for explicit session tracking).
+A PreToolUse guard enforces that \`plur_session_start\` is called at the beginning of every session. All other tools are blocked until this is done. The flow is: ToolSearch to load \`plur_session_start\` \u2192 call it with a task description \u2192 proceed.
 
 ### Session Workflow
 
-1. **Automatic**: Hooks inject relevant engrams on first message \u2014 no action needed
+1. **Start**: Call \`plur_session_start\` with task description \u2014 enforced by guard hook
 2. **Learn**: When corrected or discovering something new, call \`plur_learn\` immediately
 3. **Recall**: Before answering factual questions, call \`plur_recall_hybrid\` \u2014 check memory first
 4. **Feedback**: Rate injected engrams with \`plur_feedback\` (positive/negative) \u2014 trains relevance
@@ -261,7 +289,10 @@ async function run(args, flags) {
   outputText(`MCP server (plur): ${mcpStatus}`);
   outputText(`  command: ${entry.command} ${entry.args.join(" ")}`);
   outputText("");
-  outputText(`Hooks (9):         ${hooksStatus}`);
+  outputText(`Hooks (12):        ${hooksStatus}`);
+  outputText("  SessionStart      \u2014 enforce plur_session_start before any work");
+  outputText("  PreToolUse        \u2014 session guard (blocks tools until session started)");
+  outputText("  PostToolUse       \u2014 session sentinel (marks session as started)");
   outputText("  UserPromptSubmit  \u2014 inject engrams + auto-start session");
   outputText("  PostCompact       \u2014 re-inject engrams after context compaction");
   outputText("  PreToolUse        \u2014 contextual injection (plan mode, skills, agents)");

package/dist/index.js

@@ -49,7 +49,7 @@ function createPlur(flags2) {
 }
 
 // src/index.ts
-var VERSION = "0.8.2";
+var VERSION = "0.8.4";
 var argv = process.argv.slice(2);
 if (argv.includes("--version") || argv.includes("-v")) {
   console.log(VERSION);
@@ -84,6 +84,9 @@ Commands:
   hook-inject             (internal) Hook handler for engram injection
   hook-observe            (internal) Hook handler for observation capture
   hook-learn-check        (internal) Hook handler for learning reflection
+  hook-session-guard      (internal) Hook handler for session enforcement
+  hook-session-mark       (internal) Hook handler for session sentinel
+  hook-session-remind     (internal) Hook handler for session start reminder
 
 Global flags:
   --json       Force JSON output (auto-detected when piped)
@@ -117,7 +120,10 @@ var COMMANDS = {
   doctor: "./commands/doctor.js",
   "hook-inject": "./commands/hook-inject.js",
   "hook-observe": "./commands/hook-observe.js",
-  "hook-learn-check": "./commands/hook-learn-check.js"
+  "hook-learn-check": "./commands/hook-learn-check.js",
+  "hook-session-guard": "./commands/hook-session-guard.js",
+  "hook-session-mark": "./commands/hook-session-mark.js",
+  "hook-session-remind": "./commands/hook-session-remind.js"
 };
 if (!command || !COMMANDS[command]) {
   exit(1, `Unknown command: ${command}. Run 'plur --help' for usage.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plur-ai/cli",
-  "version": "0.8.2",
+  "version": "0.8.4",
   "type": "module",
   "bin": {
     "plur": "dist/index.js"
@@ -10,7 +10,7 @@
     "dist"
   ],
   "dependencies": {
-    "@plur-ai/core": "0.8.2"
+    "@plur-ai/core": "0.8.3"
   },
   "devDependencies": {
     "@types/node": "^25.5.0"