@primitive.ai/prim 0.1.0-alpha.25 → 0.1.0-alpha.27

package/dist/index.js

@@ -401,8 +401,11 @@ var REGISTRATIONS = [
   makeRegistration("SessionStart", "*", SESSION_START_BIN),
   makeRegistration("SessionEnd", "*", SESSION_END_BIN)
 ];
-var PRIM_PERMISSION_RULE = "Bash(npx --yes @primitive.ai/prim:*)";
-var LEGACY_PRIM_PERMISSION_RULES = ["Bash(npx --yes @primitive.ai/prim@latest:*)"];
+var PRIM_PERMISSION_RULE = "Bash(npx --yes @primitive.ai/prim*)";
+var LEGACY_PRIM_PERMISSION_RULES = [
+  "Bash(npx --yes @primitive.ai/prim@latest:*)",
+  "Bash(npx --yes @primitive.ai/prim:*)"
+];
 var ALL_PRIM_PERMISSION_RULES = /* @__PURE__ */ new Set([
   PRIM_PERMISSION_RULE,
   ...LEGACY_PRIM_PERMISSION_RULES
@@ -472,13 +475,16 @@ function applyStatusLine(settings) {
 function applyPermissions(settings) {
   const permissions = settings.permissions ?? {};
   const allow = permissions.allow ?? [];
-  const withoutPrim = allow.filter((rule) => !ALL_PRIM_PERMISSION_RULES.has(rule));
-  const nextAllow = [...withoutPrim, PRIM_PERMISSION_RULE];
-  const unchanged = allow.length === nextAllow.length && allow.every((rule, i) => rule === nextAllow[i]);
-  if (unchanged) {
+  const hasCanonical = allow.includes(PRIM_PERMISSION_RULE);
+  const hasLegacy = allow.some((rule) => LEGACY_PRIM_PERMISSION_RULES.includes(rule));
+  if (hasCanonical && !hasLegacy) {
     return settings;
   }
-  return { ...settings, permissions: { ...permissions, allow: nextAllow } };
+  const withoutPrim = allow.filter((rule) => !ALL_PRIM_PERMISSION_RULES.has(rule));
+  return {
+    ...settings,
+    permissions: { ...permissions, allow: [...withoutPrim, PRIM_PERMISSION_RULE] }
+  };
 }
 function removePrimPermission(settings) {
   const permissions = settings.permissions;
@@ -579,6 +585,21 @@ function performUninstall(scope) {
     changed
   };
 }
+function performPermissionInstall(scope) {
+  const path = settingsPathFor(scope);
+  const before = readSettings(path);
+  const after = applyPermissions(before);
+  const changed = JSON.stringify(before) !== JSON.stringify(after);
+  if (changed) {
+    atomicWrite(path, after);
+  }
+  return {
+    scope,
+    path,
+    allowed: (after.permissions?.allow ?? []).includes(PRIM_PERMISSION_RULE),
+    changed
+  };
+}
 function performStatus() {
   const statusFor = (path) => {
     const settings = readSettings(path);
@@ -620,6 +641,17 @@ function registerClaudeCommands(program2) {
     }
     console.log(JSON.stringify(result, null, JSON_INDENT));
   });
+  claude.command("preauth").description("Write only the prim allow-rule (no hooks) so prim's own npx calls never prompt").option(
+    "--scope <scope>",
+    "user (default for preauth \u2014 covers every repo) or project (this repo's .claude/settings.json)"
+  ).action((opts) => {
+    const scope = resolveScope(opts.scope ?? "user");
+    const result = performPermissionInstall(scope);
+    console.error(
+      result.changed ? `[prim] prim allow-rule written (${scope} scope) at ${result.path}` : `[prim] prim allow-rule already present at ${result.path} (no changes)`
+    );
+    console.log(JSON.stringify(result, null, JSON_INDENT));
+  });
   claude.command("uninstall").description("Remove all prim hooks + the prim statusline from settings.json").option(
     "--scope <scope>",
     "project (default, the repo's .claude/settings.json) or user (~/.claude/settings.json)"
@@ -2323,6 +2355,10 @@ function registerSetupCommand(program2) {
         return false;
       }
     };
+    if (agent === "claude") {
+      note("pre-authorize \xB7 writing prim allow-rule (user scope)\u2026");
+      results.preauth = run(["claude", "preauth", "--scope", "user"]).code === 0 ? "ok" : "skipped";
+    }
     if (isAuthed(run(["auth", "status", "--json"], true).stdout)) {
       note("auth \xB7 already authenticated");
       results.auth = "ok";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.25",
+  "version": "0.1.0-alpha.27",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",