@plur-ai/cli 0.9.11 → 0.9.12

package/dist/commands/{chunk-57GFJSEE.js → chunk-OAIEWP3Q.js}

@@ -2,7 +2,16 @@
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
 import { join, dirname } from "path";
 import { homedir, platform } from "os";
+function findMcpShim() {
+  const name = platform() === "win32" ? "plur-mcp.cmd" : "plur-mcp";
+  const path = join(homedir(), ".plur", "bin", name);
+  return existsSync(path) ? path : null;
+}
 function buildMcpServerEntry() {
+  const shim = findMcpShim();
+  if (shim) {
+    return { command: shim, args: [] };
+  }
   if (platform() === "win32") {
     return {
       command: "cmd.exe",

package/dist/commands/doctor.js

@@ -4,7 +4,7 @@ import {
   hasPlurMcp,
   knownConfigFiles,
   readConfig
-} from "./chunk-57GFJSEE.js";
+} from "./chunk-OAIEWP3Q.js";
 import {
   outputJson,
   outputText,
@@ -38,6 +38,30 @@ function hasStaleNpxHooks(config) {
   }
   return false;
 }
+function hasStaleNpxMcp(config) {
+  const servers = config.mcpServers ?? {};
+  const plur = servers.plur;
+  if (!plur) return false;
+  if (plur.command && plur.command.includes("npx")) return true;
+  const argsBlob = (plur.args ?? []).join(" ");
+  return argsBlob.includes("npx") && argsBlob.includes("@plur-ai/mcp");
+}
+function validateMcpShim() {
+  const name = platform() === "win32" ? "plur-mcp.cmd" : "plur-mcp";
+  const path = join(homedir(), ".plur", "bin", name);
+  if (!existsSync(path)) {
+    return { valid: false, shimPath: path, error: "shim not found \u2014 run `plur init` to create it (requires @plur-ai/mcp installed alongside CLI)" };
+  }
+  const content = readFileSync(path, "utf-8");
+  const match = content.match(/"([^"]+index\.js)"/);
+  if (!match) {
+    return { valid: false, shimPath: path, error: "shim has unexpected format" };
+  }
+  if (!existsSync(match[1])) {
+    return { valid: false, shimPath: path, error: `entrypoint missing: ${match[1]} \u2014 run \`plur init\` to fix` };
+  }
+  return { valid: true, shimPath: path };
+}
 function validateHookShim() {
   const name = platform() === "win32" ? "plur-hook.cmd" : "plur-hook";
   const path = join(homedir(), ".plur", "bin", name);
@@ -248,11 +272,17 @@ function buildReport(skipHandshake, flags) {
     const config = readConfig(c.path);
     return hasStaleNpxHooks(config);
   });
+  const staleNpxMcp = configs.some((c) => {
+    if (!c.exists) return false;
+    const config = readConfig(c.path);
+    return hasStaleNpxMcp(config);
+  });
   const hookShim = validateHookShim();
+  const mcpShim = validateMcpShim();
   const handshakePromise = skipHandshake ? Promise.resolve({ ok: false, error: "skipped (--no-handshake)" }) : mcpHandshake();
   return Promise.all([handshakePromise, checkEmbedder(flags)]).then(([handshake, embedder]) => {
     const overall = hooksInstalled && mcpRegistered && (skipHandshake || handshake.ok) ? "ok" : "fail";
-    return { configs, hooksInstalled, mcpRegistered, datacoreCollision, staleNpxHooks, hookShim, handshake, embedder, overall };
+    return { configs, hooksInstalled, mcpRegistered, datacoreCollision, staleNpxHooks, staleNpxMcp, hookShim, mcpShim, handshake, embedder, overall };
   });
 }
 function printText(report) {
@@ -294,6 +324,18 @@ function printText(report) {
     outputText("\u26A0  Hooks still use npx \u2014 slow (200-2000ms per hook) and vulnerable to cache corruption.");
     outputText("   Fix: run `plur init` to migrate to the local hook binary (<5ms per hook).");
   }
+  if (report.mcpShim.valid) {
+    outputText(`\u2713 MCP shim:  ${report.mcpShim.shimPath}`);
+  } else {
+    outputText(`\u2717 MCP shim:  ${report.mcpShim.error}`);
+  }
+  if (report.staleNpxMcp) {
+    outputText("");
+    outputText("\u26A0  plur MCP still launched via npx \u2014 vulnerable to ENOTEMPTY cache corruption on version bumps (#234).");
+    outputText("   This is the same bug class as #178 (which fixed hooks). Symptom: Claude Code");
+    outputText("   sessions silently lose PLUR memory after a new @plur-ai/mcp publish.");
+    outputText("   Fix: run `plur init` to migrate to the local MCP binary (no npx, no race).");
+  }
   outputText("");
   if (report.handshake.ok) {
     outputText(`\u2713 MCP handshake: ${report.handshake.serverName} v${report.handshake.serverVersion}`);

package/dist/commands/hook-inject.js

@@ -3,10 +3,11 @@ import {
 } from "./chunk-O6WTH7H7.js";
 
 // src/commands/hook-inject.ts
-import { existsSync, writeFileSync, readFileSync, appendFileSync, mkdirSync, readSync, statSync } from "fs";
-import { dirname, join, resolve } from "path";
+import { existsSync, writeFileSync, readFileSync, appendFileSync, mkdirSync, readSync, statSync, readdirSync, unlinkSync } from "fs";
+import { join } from "path";
 import { tmpdir, homedir } from "os";
 import { randomUUID } from "crypto";
+import { readProjectConfig } from "@plur-ai/core";
 var MAX_REMOTE_TASK_CHARS = 1e3;
 var MAX_REMOTE_RESPONSE_BYTES = 128 * 1024;
 var REMOTE_TIMEOUT_MS = 1500;
@@ -22,83 +23,6 @@ function logRemoteAttempt(entry) {
   }
 }
 var REMINDER_INTERVAL_MS = 10 * 60 * 1e3;
-function findProjectConfigPath(startDir = process.cwd()) {
-  const home = resolve(homedir());
-  let dir = resolve(startDir);
-  const MAX_DEPTH = 12;
-  for (let depth = 0; depth < MAX_DEPTH; depth++) {
-    if (dir !== home) {
-      const candidate = join(dir, ".plur.yaml");
-      if (existsSync(candidate)) return candidate;
-    }
-    if (existsSync(join(dir, ".git"))) return null;
-    if (dir === home || dir === "/" || dir === ".") return null;
-    const parent = dirname(dir);
-    if (parent === dir) return null;
-    dir = parent;
-  }
-  return null;
-}
-function unquoteYamlValue(v) {
-  return v.replace(/^(['"])(.*)\1$/, "$2");
-}
-function readProjectConfig() {
-  const configPath = findProjectConfigPath();
-  if (!configPath) return {};
-  try {
-    const content = readFileSync(configPath, "utf8").replace(/^/, "");
-    const config = {};
-    let inListKey = null;
-    let listAcc = [];
-    const finishList = () => {
-      if (inListKey === "remote_scopes") {
-        config.remote_scopes = listAcc;
-      }
-      inListKey = null;
-      listAcc = [];
-    };
-    for (const rawLine of content.split("\n")) {
-      const line = rawLine.replace(/\r$/, "");
-      const trimmed = line.trim();
-      if (trimmed.startsWith("#") || !trimmed) continue;
-      if (inListKey === "remote_scopes" && trimmed.startsWith("-")) {
-        listAcc.push(unquoteYamlValue(trimmed.slice(1).trim()));
-        continue;
-      }
-      if (inListKey) finishList();
-      const colonIdx = trimmed.indexOf(":");
-      if (colonIdx < 0) continue;
-      const key = trimmed.slice(0, colonIdx).trim();
-      const value = unquoteYamlValue(trimmed.slice(colonIdx + 1).trim());
-      switch (key) {
-        case "domain":
-          config.domain = value;
-          break;
-        case "scope":
-          config.scope = value;
-          break;
-        case "remote_url":
-          config.remote_url = value;
-          break;
-        case "remote_token":
-          config.remote_token = value;
-          break;
-        case "remote_scopes":
-          if (value === "" || value === "|" || value === ">") {
-            inListKey = "remote_scopes";
-            listAcc = [];
-          } else {
-            config.remote_scopes = value.split(",").map((s) => unquoteYamlValue(s.trim())).filter(Boolean);
-          }
-          break;
-      }
-    }
-    finishList();
-    return config;
-  } catch {
-    return {};
-  }
-}
 async function tryRemoteInject(config, task) {
   if (!config.remote_url || !config.remote_token) return null;
   const startTs = Date.now();
@@ -228,6 +152,44 @@ function extractEventTask(input, event) {
       return "";
   }
 }
+function processDeferredWrapups() {
+  const plurDir = process.env.PLUR_PATH ?? join(homedir(), ".plur");
+  const sessionsDir = join(plurDir, "sessions");
+  if (!existsSync(sessionsDir)) return null;
+  const notices = [];
+  try {
+    const files = readdirSync(sessionsDir).filter((f) => f.endsWith(".checkpoint.json"));
+    const now = Date.now();
+    const staleMin = parseInt(process.env.PLUR_CHECKPOINT_STALE_MIN ?? "5", 10);
+    const STALE_THRESHOLD_MS = Math.max(1, staleMin) * 60 * 1e3;
+    for (const file of files) {
+      const path = join(sessionsDir, file);
+      try {
+        const checkpoint = JSON.parse(readFileSync(path, "utf8"));
+        const lastCheckpoint = new Date(checkpoint.last_checkpoint).getTime();
+        if (now - lastCheckpoint < STALE_THRESHOLD_MS) continue;
+        const started = new Date(checkpoint.started_at);
+        const ended = new Date(checkpoint.last_checkpoint);
+        const durationMin = Math.round((ended.getTime() - started.getTime()) / 6e4);
+        const durationStr = durationMin >= 60 ? `${Math.floor(durationMin / 60)}h ${durationMin % 60}m` : `${durationMin}m`;
+        notices.push(
+          `Previous session (${durationStr}, ${checkpoint.stop_count} responses${checkpoint.cwd ? ", " + checkpoint.cwd.split("/").slice(-2).join("/") : ""}) ended without wrap-up.`
+        );
+        unlinkSync(path);
+      } catch {
+        try {
+          unlinkSync(path);
+        } catch {
+        }
+      }
+    }
+  } catch {
+    return null;
+  }
+  if (notices.length === 0) return null;
+  return `[PLUR] ${notices.join(" ")}
+Consider running plur_session_end with engram_suggestions when this session ends.`;
+}
 async function run(args, flags) {
   const isRehydrate = args.includes("--rehydrate");
   const eventIdx = args.indexOf("--event");
@@ -359,6 +321,8 @@ ${parts2.join("\n")}` };
     if (sessionId) parts.push(`Session ID: ${sessionId}`);
     if (projectConfig.domain) parts.push(`Project domain: ${projectConfig.domain}`);
     if (projectConfig.scope) parts.push(`Project scope: ${projectConfig.scope} \u2014 use this scope for plur_learn calls`);
+    const deferredNotice = processDeferredWrapups();
+    if (deferredNotice) parts.push("", deferredNotice);
   }
   if (context) {
     parts.push("");

package/dist/commands/hook-learn-check.js

@@ -1,14 +1,47 @@
 // src/commands/hook-learn-check.ts
 import { readSync, readFileSync, writeFileSync, mkdirSync } from "fs";
 import { join } from "path";
-import { tmpdir } from "os";
-var INTERVAL = 3;
+import { tmpdir, homedir } from "os";
+var LEARN_INTERVAL = 3;
+var CHECKPOINT_INTERVAL = parseInt(process.env.PLUR_CHECKPOINT_INTERVAL || "10", 10);
+function sessionKey() {
+  const raw = process.env.CLAUDE_SESSION_ID || String(process.ppid || "unknown");
+  return raw.replace(/[^a-zA-Z0-9_-]/g, "").slice(0, 64) || "default";
+}
 function counterPath() {
   const dir = join(tmpdir(), "plur-sessions");
   mkdirSync(dir, { recursive: true });
-  const sessionKey = process.env.CLAUDE_SESSION_ID || String(process.ppid || "unknown");
-  const safeKey = sessionKey.replace(/[^a-zA-Z0-9_-]/g, "").slice(0, 64) || "default";
-  return join(dir, `${safeKey}.stop-count`);
+  return join(dir, `${sessionKey()}.stop-count`);
+}
+function plurPath() {
+  return process.env.PLUR_PATH ?? join(homedir(), ".plur");
+}
+function checkpointDir() {
+  const dir = join(plurPath(), "sessions");
+  mkdirSync(dir, { recursive: true });
+  return dir;
+}
+function writeCheckpoint(count, cwd) {
+  const id = sessionKey();
+  const dir = checkpointDir();
+  const path = join(dir, `${id}.checkpoint.json`);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const dateStr = now.slice(0, 10);
+  let startedAt = now;
+  try {
+    const existing = JSON.parse(readFileSync(path, "utf8"));
+    if (existing.started_at) startedAt = existing.started_at;
+  } catch {
+  }
+  const checkpoint = {
+    session_id: id,
+    started_at: startedAt,
+    last_checkpoint: now,
+    stop_count: count,
+    cwd,
+    observation_file: `${dateStr}.jsonl`
+  };
+  writeFileSync(path, JSON.stringify(checkpoint, null, 2) + "\n");
 }
 function readStdinRaw() {
   try {
@@ -31,6 +64,12 @@ function readStdinRaw() {
 var LEARN_PROMPT = `[PLUR] Did you discover, learn, or get corrected on something in your last response? If yes \u2014 call plur_learn now before moving on. If no \u2014 continue.`;
 async function run(_args, _flags) {
   const raw = readStdinRaw();
+  let cwd = process.cwd();
+  try {
+    const data = JSON.parse(raw);
+    if (data.cwd) cwd = data.cwd;
+  } catch {
+  }
   const cPath = counterPath();
   let count = 1;
   try {
@@ -42,7 +81,13 @@ async function run(_args, _flags) {
     writeFileSync(cPath, String(count));
   } catch {
   }
-  if (count % INTERVAL !== 0) {
+  if (count % CHECKPOINT_INTERVAL === 0) {
+    try {
+      writeCheckpoint(count, cwd);
+    } catch {
+    }
+  }
+  if (count % LEARN_INTERVAL !== 0) {
     process.stdout.write(raw);
     return;
   }

package/dist/commands/init.js

@@ -5,7 +5,7 @@ import {
   mergePlurMcp,
   readConfig,
   writeConfig
-} from "./chunk-57GFJSEE.js";
+} from "./chunk-OAIEWP3Q.js";
 import {
   outputText
 } from "./chunk-7U4W4J3G.js";
@@ -49,6 +49,51 @@ exec "${nodeBin}" "${entrypoint}" "$@"
   writeFileSync(join(binDir, "plur-hook.meta.json"), JSON.stringify(meta, null, 2) + "\n");
   return { shimPath: target, status: "installed" };
 }
+function resolveMcpEntrypoint() {
+  const cliEntry = resolveCliEntrypoint();
+  let dir = dirname(cliEntry);
+  const MAX_DEPTH = 12;
+  for (let depth = 0; depth < MAX_DEPTH; depth++) {
+    const candidate = join(dir, "node_modules", "@plur-ai", "mcp", "dist", "index.js");
+    if (existsSync(candidate)) return candidate;
+    const adjacent = join(dir, "..", "@plur-ai", "mcp", "dist", "index.js");
+    if (existsSync(adjacent)) return adjacent;
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
+function mcpShimPath() {
+  const name = platform() === "win32" ? "plur-mcp.cmd" : "plur-mcp";
+  return join(homedir(), ".plur", "bin", name);
+}
+function installMcpBinary() {
+  const binDir = join(homedir(), ".plur", "bin");
+  mkdirSync(binDir, { recursive: true });
+  const entrypoint = resolveMcpEntrypoint();
+  const nodeBin = process.execPath;
+  if (!entrypoint) {
+    return { shimPath: "", status: "skipped: @plur-ai/mcp not installed alongside CLI" };
+  }
+  const target = mcpShimPath();
+  if (platform() === "win32") {
+    writeFileSync(target, `@echo off\r
+"${nodeBin}" "${entrypoint}" %*\r
+`);
+  } else {
+    writeFileSync(target, `#!/bin/sh
+exec "${nodeBin}" "${entrypoint}" "$@"
+`, { mode: 493 });
+    try {
+      chmodSync(target, 493);
+    } catch {
+    }
+  }
+  const meta = { entrypoint, node: nodeBin, installed: (/* @__PURE__ */ new Date()).toISOString() };
+  writeFileSync(join(binDir, "plur-mcp.meta.json"), JSON.stringify(meta, null, 2) + "\n");
+  return { shimPath: target, status: "installed" };
+}
 function buildEnforcementHooks(cmd) {
   return {
     SessionStart: [
@@ -320,6 +365,7 @@ function hooksStatusFor(before, after, hadHooks) {
 async function run(args, flags) {
   const shim = installHookBinary();
   const cmd = shim.shimPath || "npx @plur-ai/cli";
+  const mcpShim = installMcpBinary();
   const PLUR_HOOKS_ENFORCEMENT = buildEnforcementHooks(cmd);
   const PLUR_HOOKS_INJECTION = buildInjectionHooks(cmd);
   const injectionPath = findSettingsPath(flags, args);
@@ -375,6 +421,7 @@ async function run(args, flags) {
   outputText("PLUR installed for Claude Code.");
   outputText("");
   outputText(`Hook binary: ${shim.status}${shim.shimPath ? ` (${shim.shimPath})` : ""}`);
+  outputText(`MCP binary:  ${mcpShim.status}${mcpShim.shimPath ? ` (${mcpShim.shimPath})` : ""}`);
   outputText("");
   outputText("Architecture: One global engram store (~/.plur/), enforcement hooks global, injection hooks project-scoped.");
   outputText("Multi-project scoping via domain/scope fields on engrams, not separate installs.");

package/dist/index.js

@@ -49,7 +49,7 @@ function createPlur(flags2) {
 }
 
 // src/index.ts
-var VERSION = "0.9.11";
+var VERSION = "0.9.12";
 var argv = process.argv.slice(2);
 if (argv.includes("--version") || argv.includes("-v")) {
   console.log(VERSION);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plur-ai/cli",
-  "version": "0.9.11",
+  "version": "0.9.12",
   "type": "module",
   "bin": {
     "plur": "dist/index.js"
@@ -10,7 +10,7 @@
     "dist"
   ],
   "dependencies": {
-    "@plur-ai/core": "0.9.11"
+    "@plur-ai/core": "0.9.12"
   },
   "devDependencies": {
     "@types/node": "^25.5.0"