@primitive.ai/prim 0.1.0-alpha.27 → 0.1.0-alpha.28

package/README.md

@@ -47,12 +47,25 @@ prim daemon start
 prim hooks install
 ```
 
-`prim claude install` also writes a scoped `Bash(npx --yes @primitive.ai/prim:*)`
-allow-rule into `.claude/settings.json` (covering both the `@latest` onboarding form
-and the bare day-to-day form), so an agent's prim calls don't stall on a permission
-prompt.
+`prim setup` (and `prim claude preauth`) also pre-authorize prim so an agent's own
+calls never stall on a permission prompt: a scoped `Bash(npx --yes @primitive.ai/prim*)`
+allow-rule for default mode (it covers both the `@latest` onboarding form and the bare
+day-to-day form), plus an `autoMode.environment` trust line so auto mode's safety
+classifier treats prim as trusted tooling rather than untrusted downloaded code.
 
-An AI coding agent can drive the setup itself — see [`setup.md`](./setup.md).
+### Set up with your coding agent
+
+Paste this into Claude Code (or any coding agent). The command is in **your** message,
+so the agent runs it directly — instead of fetching a doc and executing a command from
+it, which an auto-mode safety classifier blocks as untrusted-origin code:
+
+```text
+Install the Primitive CLI: run `npx --yes @primitive.ai/prim@latest setup` and surface its output. It's an agent-first CLI — drive it yourself, don't hand the command back to me. The only thing I'll do is click "Authorize" in the browser if it asks. When it finishes, show me the welcome.
+```
+
+That single command runs the whole install in one process (auth → session hooks →
+daemon → git hooks → skill → welcome). The detailed step-by-step the agent follows —
+and the manual fallback — live in [`setup.md`](./setup.md).
 
 ## Commands
 

package/dist/index.js

@@ -410,6 +410,8 @@ var ALL_PRIM_PERMISSION_RULES = /* @__PURE__ */ new Set([
   PRIM_PERMISSION_RULE,
   ...LEGACY_PRIM_PERMISSION_RULES
 ]);
+var PRIM_AUTOMODE_TRUST = "Primitive CLI (prim): the @primitive.ai/prim npm package \u2014 run via `npx --yes @primitive.ai/prim \u2026` \u2014 and its API at api.getprimitive.ai are trusted developer tooling this user installed for passive decision capture, conflict checks, and team presence. Running prim and its routine API/daemon calls is expected, not untrusted code execution or data exfiltration.";
+var AUTOMODE_DEFAULTS = "$defaults";
 function settingsPathFor(scope) {
   return scope === "user" ? USER_SCOPE_PATH : projectScopePath();
 }
@@ -499,6 +501,29 @@ function removePrimPermission(settings) {
   const hasOtherPerms = Object.values(nextPermissions).some((v) => v !== void 0);
   return { ...settings, permissions: hasOtherPerms ? nextPermissions : void 0 };
 }
+function applyAutoModeTrust(settings) {
+  const autoMode = settings.autoMode ?? {};
+  const env = autoMode.environment;
+  if (env?.includes(PRIM_AUTOMODE_TRUST)) {
+    return settings;
+  }
+  const nextEnv = env ? [...env, PRIM_AUTOMODE_TRUST] : [AUTOMODE_DEFAULTS, PRIM_AUTOMODE_TRUST];
+  return { ...settings, autoMode: { ...autoMode, environment: nextEnv } };
+}
+function removeAutoModeTrust(settings) {
+  const autoMode = settings.autoMode;
+  if (!autoMode?.environment?.includes(PRIM_AUTOMODE_TRUST)) {
+    return settings;
+  }
+  const env = autoMode.environment.filter((e) => e !== PRIM_AUTOMODE_TRUST);
+  const onlyDefaultsLeft = env.length === 0 || env.length === 1 && env[0] === AUTOMODE_DEFAULTS;
+  const nextAutoMode = {
+    ...autoMode,
+    environment: onlyDefaultsLeft ? void 0 : env
+  };
+  const hasOther = Object.values(nextAutoMode).some((v) => v !== void 0);
+  return { ...settings, autoMode: hasOther ? nextAutoMode : void 0 };
+}
 function applyInstall(settings, options = {}) {
   const hooks = { ...settings.hooks ?? {} };
   for (const reg of REGISTRATIONS) {
@@ -522,7 +547,7 @@ function applyUninstall(settings) {
   if (isPrimStatusLine(next)) {
     next.statusLine = void 0;
   }
-  return removePrimPermission(next);
+  return removeAutoModeTrust(removePrimPermission(next));
 }
 function captureInstalled(settings) {
   return CAPTURE_EVENTS.some(
@@ -588,7 +613,7 @@ function performUninstall(scope) {
 function performPermissionInstall(scope) {
   const path = settingsPathFor(scope);
   const before = readSettings(path);
-  const after = applyPermissions(before);
+  const after = applyAutoModeTrust(applyPermissions(before));
   const changed = JSON.stringify(before) !== JSON.stringify(after);
   if (changed) {
     atomicWrite(path, after);
@@ -597,6 +622,7 @@ function performPermissionInstall(scope) {
     scope,
     path,
     allowed: (after.permissions?.allow ?? []).includes(PRIM_PERMISSION_RULE),
+    autoModeTrusted: (after.autoMode?.environment ?? []).includes(PRIM_AUTOMODE_TRUST),
     changed
   };
 }
@@ -641,14 +667,16 @@ function registerClaudeCommands(program2) {
     }
     console.log(JSON.stringify(result, null, JSON_INDENT));
   });
-  claude.command("preauth").description("Write only the prim allow-rule (no hooks) so prim's own npx calls never prompt").option(
+  claude.command("preauth").description(
+    "Pre-authorize prim's own calls (allow-rule + auto-mode trust, no hooks) so they never prompt"
+  ).option(
     "--scope <scope>",
     "user (default for preauth \u2014 covers every repo) or project (this repo's .claude/settings.json)"
   ).action((opts) => {
     const scope = resolveScope(opts.scope ?? "user");
     const result = performPermissionInstall(scope);
     console.error(
-      result.changed ? `[prim] prim allow-rule written (${scope} scope) at ${result.path}` : `[prim] prim allow-rule already present at ${result.path} (no changes)`
+      result.changed ? `[prim] prim pre-authorization written (${scope} scope) at ${result.path} (allow-rule + auto-mode trust)` : `[prim] prim pre-authorization already present at ${result.path} (no changes)`
     );
     console.log(JSON.stringify(result, null, JSON_INDENT));
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.27",
+  "version": "0.1.0-alpha.28",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",