@primitive.ai/prim 0.1.0-alpha.27 → 0.1.0-alpha.29

package/README.md

@@ -47,12 +47,25 @@ prim daemon start
 prim hooks install
 ```
 
-`prim claude install` also writes a scoped `Bash(npx --yes @primitive.ai/prim:*)`
-allow-rule into `.claude/settings.json` (covering both the `@latest` onboarding form
-and the bare day-to-day form), so an agent's prim calls don't stall on a permission
-prompt.
+`prim setup` (and `prim claude preauth`) also pre-authorize prim so an agent's own
+calls never stall on a permission prompt: a scoped `Bash(npx --yes @primitive.ai/prim*)`
+allow-rule for default mode (it covers both the `@latest` onboarding form and the bare
+day-to-day form), plus an `autoMode.environment` trust line so auto mode's safety
+classifier treats prim as trusted tooling rather than untrusted downloaded code.
 
-An AI coding agent can drive the setup itself — see [`setup.md`](./setup.md).
+### Set up with your coding agent
+
+Paste this into Claude Code (or any coding agent). The command is in **your** message,
+so the agent runs it directly — instead of fetching a doc and executing a command from
+it, which an auto-mode safety classifier blocks as untrusted-origin code:
+
+```text
+Install the Primitive CLI: run `npx --yes @primitive.ai/prim@latest setup` and surface its output. It's an agent-first CLI — drive it yourself, don't hand the command back to me. The only thing I'll do is click "Authorize" in the browser if it asks. When it finishes, show me the welcome.
+```
+
+That single command runs the whole install in one process (auth → session hooks →
+daemon → git hooks → skill → welcome). The detailed step-by-step the agent follows —
+and the manual fallback — live in [`setup.md`](./setup.md).
 
 ## Commands
 

package/dist/{chunk-E5UZXMZL.js → chunk-UWAJCF7P.js}

@@ -1,5 +1,6 @@
 import {
-  getClient
+  getClient,
+  getSiteUrl
 } from "./chunk-26VA3ADF.js";
 import {
   daemonRequest
@@ -9,9 +10,11 @@ import {
 var DAEMON_HTTP_TIMEOUT_MS = 1e4;
 var DAEMON_PROBE_TIMEOUT_MS = 250;
 async function daemonOrDirect(method, params, direct) {
-  const fromDaemon = await daemonRequest(method, params, {
-    timeoutMs: DAEMON_PROBE_TIMEOUT_MS
-  });
+  const fromDaemon = await daemonRequest(
+    method,
+    { ...params, callerEnv: getSiteUrl() },
+    { timeoutMs: DAEMON_PROBE_TIMEOUT_MS }
+  );
   if (fromDaemon !== null) {
     return fromDaemon;
   }

package/dist/daemon/server.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import {
   getClient,
+  getSiteUrl,
   getTokenExpiresAt,
   refreshToken
 } from "../chunk-26VA3ADF.js";
@@ -10,6 +11,24 @@ import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "
 import { createServer } from "net";
 import { homedir } from "os";
 import { join } from "path";
+
+// src/daemon/env-binding.ts
+function normalizeApiUrl(url) {
+  return url.trim().replace(/\/+$/, "");
+}
+function apiUrlsMatch(a, b) {
+  return normalizeApiUrl(a) === normalizeApiUrl(b);
+}
+function isCrossEnv(callerEnv, boundEnv) {
+  return typeof callerEnv === "string" && !apiUrlsMatch(callerEnv, boundEnv);
+}
+function assertCallerEnvMatches(callerEnv, boundEnv) {
+  if (isCrossEnv(callerEnv, boundEnv)) {
+    throw new Error(`env mismatch: daemon is bound to ${boundEnv}, caller targets ${callerEnv}`);
+  }
+}
+
+// src/daemon/server.ts
 var CONFIG_DIR = join(homedir(), ".config", "prim");
 var SOCK_PATH = join(CONFIG_DIR, "sock");
 var PID_PATH = join(CONFIG_DIR, "daemon.pid");
@@ -94,6 +113,7 @@ async function ensureTokenFresh() {
   }
 }
 async function handleConflictCheck(params) {
+  assertCallerEnvMatches(params.callerEnv, getSiteUrl());
   if (typeof params.file !== "string") {
     throw new Error("conflict_check requires `file: string`");
   }
@@ -111,18 +131,31 @@ function assertEndpointPath(path, endpoint) {
   }
 }
 async function proxyGet(params, allowedPrefix) {
+  assertCallerEnvMatches(params.callerEnv, getSiteUrl());
   const path = pathParam(params);
   assertEndpointPath(path, allowedPrefix);
   return await client.get(path, { signal: AbortSignal.timeout(HTTP_PROXY_TIMEOUT_MS) });
 }
-function handleStatusSnapshot() {
-  const presenceFresh = lastOkAtLocal !== void 0 && Date.now() - lastOkAtLocal < PRESENCE_FRESH_WINDOW_MS;
-  const presenceStale = lastOkAtLocal !== void 0 && !presenceFresh;
-  return {
+function handleStatusSnapshot(params) {
+  const base = {
     pid: process.pid,
     uptimeMs: Date.now() - startedAt,
     sessionId: activeSessionId,
-    lastHeartbeatAt,
+    lastHeartbeatAt
+  };
+  if (isCrossEnv(params.callerEnv, getSiteUrl())) {
+    return {
+      ...base,
+      onlineCount: void 0,
+      onlineNames: void 0,
+      presenceStale: false,
+      envMismatch: true
+    };
+  }
+  const presenceFresh = lastOkAtLocal !== void 0 && Date.now() - lastOkAtLocal < PRESENCE_FRESH_WINDOW_MS;
+  const presenceStale = lastOkAtLocal !== void 0 && !presenceFresh;
+  return {
+    ...base,
     // Withhold a frozen count/names once they're no longer fresh; the
     // statusline shows "presence: stale" rather than a confident, wrong list.
     onlineCount: presenceFresh ? lastOnlineCount : void 0,
@@ -166,7 +199,7 @@ async function dispatchRequest(req) {
         return { id, ok: true, result: { ack: true } };
       }
       case "status_snapshot":
-        return { id, ok: true, result: handleStatusSnapshot() };
+        return { id, ok: true, result: handleStatusSnapshot(req.params ?? {}) };
       case "ping":
         return { id, ok: true, result: { pong: true } };
       default:

package/dist/hooks/pre-commit.js

@@ -2,7 +2,7 @@
 import {
   checkAffectedDecisions,
   formatDecisionsWarning
-} from "../chunk-E5UZXMZL.js";
+} from "../chunk-UWAJCF7P.js";
 import "../chunk-26VA3ADF.js";
 import "../chunk-UTKQTZHL.js";
 

package/dist/hooks/pre-tool-use.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import {
-  getClient
+  getClient,
+  getSiteUrl
 } from "../chunk-26VA3ADF.js";
 import {
   parseAgent
@@ -199,7 +200,9 @@ function emit(output) {
 async function checkOneFile(file) {
   const fromDaemon = await daemonRequest(
     "conflict_check",
-    { file },
+    // callerEnv lets a staging-bound daemon refuse a prod-context gate check
+    // (and vice versa) so we fall through to a direct call against our own env.
+    { file, callerEnv: getSiteUrl() },
     { timeoutMs: DAEMON_TIMEOUT_MS }
   );
   if (fromDaemon) {

package/dist/hooks/session-start.js

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  getSiteUrl
+} from "../chunk-26VA3ADF.js";
 import {
   parseAgent
 } from "../chunk-7YRBACIE.js";
@@ -71,7 +74,9 @@ async function main() {
   if (parseAgent(process.argv) === "codex") {
     const snapshot = await daemonRequest(
       "status_snapshot",
-      {},
+      // callerEnv: a cross-env daemon withholds onlineCount, so a prod Codex
+      // session never gets a staging daemon's team count injected.
+      { callerEnv: getSiteUrl() },
       { timeoutMs: DAEMON_TIMEOUT_MS }
     );
     if (snapshot && !snapshot.presenceStale && typeof snapshot.onlineCount === "number") {

package/dist/index.js

@@ -10,7 +10,7 @@ import {
   checkAffectedDecisions,
   daemonOrDirectGet,
   formatDecisionsWarning
-} from "./chunk-E5UZXMZL.js";
+} from "./chunk-UWAJCF7P.js";
 import {
   HttpError,
   REFRESH_TOKEN_PATH,
@@ -410,6 +410,8 @@ var ALL_PRIM_PERMISSION_RULES = /* @__PURE__ */ new Set([
   PRIM_PERMISSION_RULE,
   ...LEGACY_PRIM_PERMISSION_RULES
 ]);
+var PRIM_AUTOMODE_TRUST = "Primitive CLI (prim): the @primitive.ai/prim npm package \u2014 run via `npx --yes @primitive.ai/prim \u2026` \u2014 and its API at api.getprimitive.ai are trusted developer tooling this user installed for passive decision capture, conflict checks, and team presence. Running prim and its routine API/daemon calls is expected, not untrusted code execution or data exfiltration.";
+var AUTOMODE_DEFAULTS = "$defaults";
 function settingsPathFor(scope) {
   return scope === "user" ? USER_SCOPE_PATH : projectScopePath();
 }
@@ -499,6 +501,29 @@ function removePrimPermission(settings) {
   const hasOtherPerms = Object.values(nextPermissions).some((v) => v !== void 0);
   return { ...settings, permissions: hasOtherPerms ? nextPermissions : void 0 };
 }
+function applyAutoModeTrust(settings) {
+  const autoMode = settings.autoMode ?? {};
+  const env = autoMode.environment;
+  if (env?.includes(PRIM_AUTOMODE_TRUST)) {
+    return settings;
+  }
+  const nextEnv = env ? [...env, PRIM_AUTOMODE_TRUST] : [AUTOMODE_DEFAULTS, PRIM_AUTOMODE_TRUST];
+  return { ...settings, autoMode: { ...autoMode, environment: nextEnv } };
+}
+function removeAutoModeTrust(settings) {
+  const autoMode = settings.autoMode;
+  if (!autoMode?.environment?.includes(PRIM_AUTOMODE_TRUST)) {
+    return settings;
+  }
+  const env = autoMode.environment.filter((e) => e !== PRIM_AUTOMODE_TRUST);
+  const onlyDefaultsLeft = env.length === 0 || env.length === 1 && env[0] === AUTOMODE_DEFAULTS;
+  const nextAutoMode = {
+    ...autoMode,
+    environment: onlyDefaultsLeft ? void 0 : env
+  };
+  const hasOther = Object.values(nextAutoMode).some((v) => v !== void 0);
+  return { ...settings, autoMode: hasOther ? nextAutoMode : void 0 };
+}
 function applyInstall(settings, options = {}) {
   const hooks = { ...settings.hooks ?? {} };
   for (const reg of REGISTRATIONS) {
@@ -522,7 +547,7 @@ function applyUninstall(settings) {
   if (isPrimStatusLine(next)) {
     next.statusLine = void 0;
   }
-  return removePrimPermission(next);
+  return removeAutoModeTrust(removePrimPermission(next));
 }
 function captureInstalled(settings) {
   return CAPTURE_EVENTS.some(
@@ -588,7 +613,7 @@ function performUninstall(scope) {
 function performPermissionInstall(scope) {
   const path = settingsPathFor(scope);
   const before = readSettings(path);
-  const after = applyPermissions(before);
+  const after = applyAutoModeTrust(applyPermissions(before));
   const changed = JSON.stringify(before) !== JSON.stringify(after);
   if (changed) {
     atomicWrite(path, after);
@@ -597,6 +622,7 @@ function performPermissionInstall(scope) {
     scope,
     path,
     allowed: (after.permissions?.allow ?? []).includes(PRIM_PERMISSION_RULE),
+    autoModeTrusted: (after.autoMode?.environment ?? []).includes(PRIM_AUTOMODE_TRUST),
     changed
   };
 }
@@ -641,14 +667,16 @@ function registerClaudeCommands(program2) {
     }
     console.log(JSON.stringify(result, null, JSON_INDENT));
   });
-  claude.command("preauth").description("Write only the prim allow-rule (no hooks) so prim's own npx calls never prompt").option(
+  claude.command("preauth").description(
+    "Pre-authorize prim's own calls (allow-rule + auto-mode trust, no hooks) so they never prompt"
+  ).option(
     "--scope <scope>",
     "user (default for preauth \u2014 covers every repo) or project (this repo's .claude/settings.json)"
   ).action((opts) => {
     const scope = resolveScope(opts.scope ?? "user");
     const result = performPermissionInstall(scope);
     console.error(
-      result.changed ? `[prim] prim allow-rule written (${scope} scope) at ${result.path}` : `[prim] prim allow-rule already present at ${result.path} (no changes)`
+      result.changed ? `[prim] prim pre-authorization written (${scope} scope) at ${result.path} (allow-rule + auto-mode trust)` : `[prim] prim pre-authorization already present at ${result.path} (no changes)`
     );
     console.log(JSON.stringify(result, null, JSON_INDENT));
   });
@@ -823,7 +851,7 @@ ${line("project", result.project)}`);
 
 // src/commands/daemon.ts
 import { spawn } from "child_process";
-import { existsSync as existsSync4, readFileSync as readFileSync4, unlinkSync } from "fs";
+import { closeSync as closeSync2, existsSync as existsSync4, mkdirSync as mkdirSync3, openSync as openSync2, readFileSync as readFileSync4, unlinkSync } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join4 } from "path";
 
@@ -843,8 +871,12 @@ function formatTeammates(names, cap) {
 
 // src/commands/daemon.ts
 var DAEMON_BIN = "prim-daemon-server";
-var PID_PATH = join4(homedir3(), ".config", "prim", "daemon.pid");
-var SOCK_PATH = join4(homedir3(), ".config", "prim", "sock");
+var CONFIG_DIR = join4(homedir3(), ".config", "prim");
+var PID_PATH = join4(CONFIG_DIR, "daemon.pid");
+var SOCK_PATH = join4(CONFIG_DIR, "sock");
+var LOG_PATH = join4(CONFIG_DIR, "daemon.log");
+var CONFIG_DIR_MODE = 448;
+var LOG_FILE_MODE = 384;
 var STOP_TIMEOUT_MS = 5e3;
 var STOP_POLL_MS = 100;
 var STATUS_PROBE_TIMEOUT_MS = 500;
@@ -893,6 +925,12 @@ function spawnDaemon(options) {
   const file = binFile(DAEMON_BIN);
   return file ? spawn(process.execPath, [file], options) : spawn(DAEMON_BIN, [], options);
 }
+function openDaemonLog(configDir = CONFIG_DIR) {
+  if (!existsSync4(configDir)) {
+    mkdirSync3(configDir, { recursive: true, mode: CONFIG_DIR_MODE });
+  }
+  return openSync2(join4(configDir, "daemon.log"), "a", LOG_FILE_MODE);
+}
 async function waitForReady() {
   const deadline = Date.now() + READY_TIMEOUT_MS;
   while (Date.now() < deadline) {
@@ -921,8 +959,20 @@ async function daemonStart(opts) {
     });
     return;
   }
-  const child = spawnDaemon({ detached: true, stdio: ["ignore", "ignore", "ignore"] });
+  let logFd;
+  try {
+    logFd = openDaemonLog();
+  } catch {
+    logFd = void 0;
+  }
+  const child = spawnDaemon({
+    detached: true,
+    stdio: logFd === void 0 ? ["ignore", "ignore", "ignore"] : ["ignore", logFd, logFd]
+  });
   child.unref();
+  if (logFd !== void 0) {
+    closeSync2(logFd);
+  }
   const live = await waitForReady();
   if (live) {
     const after = readPidfile();
@@ -934,7 +984,7 @@ async function daemonStart(opts) {
     return;
   }
   process.stderr.write(
-    `[prim] \u2717 daemon start: spawned but the socket did not respond within ${READY_TIMEOUT_MS}ms (check that \`${DAEMON_BIN}\` resolves, and see its log)
+    `[prim] \u2717 daemon start: spawned but the socket did not respond within ${READY_TIMEOUT_MS}ms (check that \`${DAEMON_BIN}\` resolves, and see ${LOG_PATH})
 `
   );
   console.log(JSON.stringify({ started: false }, null, 2));
@@ -1834,7 +1884,7 @@ function registerDecisionsCommands(program2) {
 
 // src/commands/hooks.ts
 import { execSync as execSync2 } from "child_process";
-import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
 import { resolve } from "path";
 import { Option } from "commander";
 var PRE_COMMIT = { hookName: "pre-commit", binName: "prim-pre-commit" };
@@ -1936,7 +1986,7 @@ function installToDotGit(gitRoot, spec = PRE_COMMIT) {
   const hooksDir = resolve(gitRoot, ".git", "hooks");
   const hookPath = resolve(hooksDir, spec.hookName);
   if (!existsSync5(hooksDir)) {
-    mkdirSync3(hooksDir, { recursive: true });
+    mkdirSync4(hooksDir, { recursive: true });
   }
   if (existsSync5(hookPath)) {
     const existing = readFileSync5(hookPath, "utf-8");
@@ -2017,7 +2067,7 @@ function registerHooksCommands(program2) {
 }
 
 // src/commands/moves.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, unlinkSync as unlinkSync4, writeFileSync as writeFileSync4 } from "fs";
 import { join as join5 } from "path";
 
 // src/flusher.ts
@@ -2129,7 +2179,7 @@ function registerMovesCommands(program2) {
   moves.command("bind").description("Pin the current directory to an org via .prim/workspace.json").requiredOption("--orgId <orgId>", "Convex organization id").action((opts) => {
     const dir = join5(process.cwd(), ".prim");
     if (!existsSync6(dir)) {
-      mkdirSync4(dir, { recursive: true, mode: DIR_MODE });
+      mkdirSync5(dir, { recursive: true, mode: DIR_MODE });
     }
     const file = join5(process.cwd(), WORKSPACE_FILE);
     writeFileSync4(file, JSON.stringify({ orgId: opts.orgId, boundAt: Date.now() }, null, 2), {
@@ -2233,7 +2283,7 @@ function registerReconcileCommands(program2) {
 // src/commands/session.ts
 import {
   existsSync as existsSync7,
-  mkdirSync as mkdirSync5,
+  mkdirSync as mkdirSync6,
   readFileSync as readFileSync6,
   readdirSync,
   unlinkSync as unlinkSync5,
@@ -2244,7 +2294,7 @@ var DIR_MODE2 = 448;
 var FILE_MODE3 = 384;
 function ensureDir() {
   if (!existsSync7(SESSIONS_DIR)) {
-    mkdirSync5(SESSIONS_DIR, { recursive: true, mode: DIR_MODE2 });
+    mkdirSync6(SESSIONS_DIR, { recursive: true, mode: DIR_MODE2 });
   }
 }
 function markerPath(sessionId) {
@@ -2385,10 +2435,10 @@ function registerSetupCommand(program2) {
 
 // src/commands/skill.ts
 import {
-  closeSync as closeSync2,
+  closeSync as closeSync3,
   existsSync as existsSync8,
   fsyncSync as fsyncSync2,
-  openSync as openSync2,
+  openSync as openSync3,
   readFileSync as readFileSync7,
   renameSync as renameSync3,
   writeFileSync as writeFileSync6
@@ -2446,11 +2496,11 @@ function removeBlock(existing) {
 function atomicWrite2(target, content) {
   const tmp = `${target}.tmp`;
   writeFileSync6(tmp, content);
-  const fd = openSync2(tmp, "r+");
+  const fd = openSync3(tmp, "r+");
   try {
     fsyncSync2(fd);
   } finally {
-    closeSync2(fd);
+    closeSync3(fd);
   }
   renameSync3(tmp, target);
 }
@@ -2574,13 +2624,18 @@ async function renderStatusline() {
   const version = readPackageVersion();
   const snapshot = await daemonRequest(
     "status_snapshot",
-    {},
+    // callerEnv lets the daemon withhold presence when it is bound to a different
+    // deployment than this statusline targets.
+    { callerEnv: getSiteUrl() },
     { timeoutMs: STATUSLINE_TIMEOUT_MS }
   );
   if (!snapshot) {
     debug("daemon snapshot missing");
     return `primitive ${version} (daemon: down)`;
   }
+  if (snapshot.envMismatch) {
+    return `primitive ${version} (daemon: live \xB7 presence: other env)`;
+  }
   if (snapshot.presenceStale) {
     return `primitive ${version} (daemon: live \xB7 presence: stale)`;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.27",
+  "version": "0.1.0-alpha.29",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",