@primitive.ai/prim 0.1.0-alpha.28 → 0.1.0-alpha.29

package/dist/{chunk-E5UZXMZL.js → chunk-UWAJCF7P.js}

@@ -1,5 +1,6 @@
 import {
-  getClient
+  getClient,
+  getSiteUrl
 } from "./chunk-26VA3ADF.js";
 import {
   daemonRequest
@@ -9,9 +10,11 @@ import {
 var DAEMON_HTTP_TIMEOUT_MS = 1e4;
 var DAEMON_PROBE_TIMEOUT_MS = 250;
 async function daemonOrDirect(method, params, direct) {
-  const fromDaemon = await daemonRequest(method, params, {
-    timeoutMs: DAEMON_PROBE_TIMEOUT_MS
-  });
+  const fromDaemon = await daemonRequest(
+    method,
+    { ...params, callerEnv: getSiteUrl() },
+    { timeoutMs: DAEMON_PROBE_TIMEOUT_MS }
+  );
   if (fromDaemon !== null) {
     return fromDaemon;
   }

package/dist/daemon/server.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import {
   getClient,
+  getSiteUrl,
   getTokenExpiresAt,
   refreshToken
 } from "../chunk-26VA3ADF.js";
@@ -10,6 +11,24 @@ import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "
 import { createServer } from "net";
 import { homedir } from "os";
 import { join } from "path";
+
+// src/daemon/env-binding.ts
+function normalizeApiUrl(url) {
+  return url.trim().replace(/\/+$/, "");
+}
+function apiUrlsMatch(a, b) {
+  return normalizeApiUrl(a) === normalizeApiUrl(b);
+}
+function isCrossEnv(callerEnv, boundEnv) {
+  return typeof callerEnv === "string" && !apiUrlsMatch(callerEnv, boundEnv);
+}
+function assertCallerEnvMatches(callerEnv, boundEnv) {
+  if (isCrossEnv(callerEnv, boundEnv)) {
+    throw new Error(`env mismatch: daemon is bound to ${boundEnv}, caller targets ${callerEnv}`);
+  }
+}
+
+// src/daemon/server.ts
 var CONFIG_DIR = join(homedir(), ".config", "prim");
 var SOCK_PATH = join(CONFIG_DIR, "sock");
 var PID_PATH = join(CONFIG_DIR, "daemon.pid");
@@ -94,6 +113,7 @@ async function ensureTokenFresh() {
   }
 }
 async function handleConflictCheck(params) {
+  assertCallerEnvMatches(params.callerEnv, getSiteUrl());
   if (typeof params.file !== "string") {
     throw new Error("conflict_check requires `file: string`");
   }
@@ -111,18 +131,31 @@ function assertEndpointPath(path, endpoint) {
   }
 }
 async function proxyGet(params, allowedPrefix) {
+  assertCallerEnvMatches(params.callerEnv, getSiteUrl());
   const path = pathParam(params);
   assertEndpointPath(path, allowedPrefix);
   return await client.get(path, { signal: AbortSignal.timeout(HTTP_PROXY_TIMEOUT_MS) });
 }
-function handleStatusSnapshot() {
-  const presenceFresh = lastOkAtLocal !== void 0 && Date.now() - lastOkAtLocal < PRESENCE_FRESH_WINDOW_MS;
-  const presenceStale = lastOkAtLocal !== void 0 && !presenceFresh;
-  return {
+function handleStatusSnapshot(params) {
+  const base = {
     pid: process.pid,
     uptimeMs: Date.now() - startedAt,
     sessionId: activeSessionId,
-    lastHeartbeatAt,
+    lastHeartbeatAt
+  };
+  if (isCrossEnv(params.callerEnv, getSiteUrl())) {
+    return {
+      ...base,
+      onlineCount: void 0,
+      onlineNames: void 0,
+      presenceStale: false,
+      envMismatch: true
+    };
+  }
+  const presenceFresh = lastOkAtLocal !== void 0 && Date.now() - lastOkAtLocal < PRESENCE_FRESH_WINDOW_MS;
+  const presenceStale = lastOkAtLocal !== void 0 && !presenceFresh;
+  return {
+    ...base,
     // Withhold a frozen count/names once they're no longer fresh; the
     // statusline shows "presence: stale" rather than a confident, wrong list.
     onlineCount: presenceFresh ? lastOnlineCount : void 0,
@@ -166,7 +199,7 @@ async function dispatchRequest(req) {
         return { id, ok: true, result: { ack: true } };
       }
       case "status_snapshot":
-        return { id, ok: true, result: handleStatusSnapshot() };
+        return { id, ok: true, result: handleStatusSnapshot(req.params ?? {}) };
       case "ping":
         return { id, ok: true, result: { pong: true } };
       default:

package/dist/hooks/pre-commit.js

@@ -2,7 +2,7 @@
 import {
   checkAffectedDecisions,
   formatDecisionsWarning
-} from "../chunk-E5UZXMZL.js";
+} from "../chunk-UWAJCF7P.js";
 import "../chunk-26VA3ADF.js";
 import "../chunk-UTKQTZHL.js";
 

package/dist/hooks/pre-tool-use.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import {
-  getClient
+  getClient,
+  getSiteUrl
 } from "../chunk-26VA3ADF.js";
 import {
   parseAgent
@@ -199,7 +200,9 @@ function emit(output) {
 async function checkOneFile(file) {
   const fromDaemon = await daemonRequest(
     "conflict_check",
-    { file },
+    // callerEnv lets a staging-bound daemon refuse a prod-context gate check
+    // (and vice versa) so we fall through to a direct call against our own env.
+    { file, callerEnv: getSiteUrl() },
     { timeoutMs: DAEMON_TIMEOUT_MS }
   );
   if (fromDaemon) {

package/dist/hooks/session-start.js

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  getSiteUrl
+} from "../chunk-26VA3ADF.js";
 import {
   parseAgent
 } from "../chunk-7YRBACIE.js";
@@ -71,7 +74,9 @@ async function main() {
   if (parseAgent(process.argv) === "codex") {
     const snapshot = await daemonRequest(
       "status_snapshot",
-      {},
+      // callerEnv: a cross-env daemon withholds onlineCount, so a prod Codex
+      // session never gets a staging daemon's team count injected.
+      { callerEnv: getSiteUrl() },
       { timeoutMs: DAEMON_TIMEOUT_MS }
     );
     if (snapshot && !snapshot.presenceStale && typeof snapshot.onlineCount === "number") {

package/dist/index.js

@@ -10,7 +10,7 @@ import {
   checkAffectedDecisions,
   daemonOrDirectGet,
   formatDecisionsWarning
-} from "./chunk-E5UZXMZL.js";
+} from "./chunk-UWAJCF7P.js";
 import {
   HttpError,
   REFRESH_TOKEN_PATH,
@@ -851,7 +851,7 @@ ${line("project", result.project)}`);
 
 // src/commands/daemon.ts
 import { spawn } from "child_process";
-import { existsSync as existsSync4, readFileSync as readFileSync4, unlinkSync } from "fs";
+import { closeSync as closeSync2, existsSync as existsSync4, mkdirSync as mkdirSync3, openSync as openSync2, readFileSync as readFileSync4, unlinkSync } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join4 } from "path";
 
@@ -871,8 +871,12 @@ function formatTeammates(names, cap) {
 
 // src/commands/daemon.ts
 var DAEMON_BIN = "prim-daemon-server";
-var PID_PATH = join4(homedir3(), ".config", "prim", "daemon.pid");
-var SOCK_PATH = join4(homedir3(), ".config", "prim", "sock");
+var CONFIG_DIR = join4(homedir3(), ".config", "prim");
+var PID_PATH = join4(CONFIG_DIR, "daemon.pid");
+var SOCK_PATH = join4(CONFIG_DIR, "sock");
+var LOG_PATH = join4(CONFIG_DIR, "daemon.log");
+var CONFIG_DIR_MODE = 448;
+var LOG_FILE_MODE = 384;
 var STOP_TIMEOUT_MS = 5e3;
 var STOP_POLL_MS = 100;
 var STATUS_PROBE_TIMEOUT_MS = 500;
@@ -921,6 +925,12 @@ function spawnDaemon(options) {
   const file = binFile(DAEMON_BIN);
   return file ? spawn(process.execPath, [file], options) : spawn(DAEMON_BIN, [], options);
 }
+function openDaemonLog(configDir = CONFIG_DIR) {
+  if (!existsSync4(configDir)) {
+    mkdirSync3(configDir, { recursive: true, mode: CONFIG_DIR_MODE });
+  }
+  return openSync2(join4(configDir, "daemon.log"), "a", LOG_FILE_MODE);
+}
 async function waitForReady() {
   const deadline = Date.now() + READY_TIMEOUT_MS;
   while (Date.now() < deadline) {
@@ -949,8 +959,20 @@ async function daemonStart(opts) {
     });
     return;
   }
-  const child = spawnDaemon({ detached: true, stdio: ["ignore", "ignore", "ignore"] });
+  let logFd;
+  try {
+    logFd = openDaemonLog();
+  } catch {
+    logFd = void 0;
+  }
+  const child = spawnDaemon({
+    detached: true,
+    stdio: logFd === void 0 ? ["ignore", "ignore", "ignore"] : ["ignore", logFd, logFd]
+  });
   child.unref();
+  if (logFd !== void 0) {
+    closeSync2(logFd);
+  }
   const live = await waitForReady();
   if (live) {
     const after = readPidfile();
@@ -962,7 +984,7 @@ async function daemonStart(opts) {
     return;
   }
   process.stderr.write(
-    `[prim] \u2717 daemon start: spawned but the socket did not respond within ${READY_TIMEOUT_MS}ms (check that \`${DAEMON_BIN}\` resolves, and see its log)
+    `[prim] \u2717 daemon start: spawned but the socket did not respond within ${READY_TIMEOUT_MS}ms (check that \`${DAEMON_BIN}\` resolves, and see ${LOG_PATH})
 `
   );
   console.log(JSON.stringify({ started: false }, null, 2));
@@ -1862,7 +1884,7 @@ function registerDecisionsCommands(program2) {
 
 // src/commands/hooks.ts
 import { execSync as execSync2 } from "child_process";
-import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
 import { resolve } from "path";
 import { Option } from "commander";
 var PRE_COMMIT = { hookName: "pre-commit", binName: "prim-pre-commit" };
@@ -1964,7 +1986,7 @@ function installToDotGit(gitRoot, spec = PRE_COMMIT) {
   const hooksDir = resolve(gitRoot, ".git", "hooks");
   const hookPath = resolve(hooksDir, spec.hookName);
   if (!existsSync5(hooksDir)) {
-    mkdirSync3(hooksDir, { recursive: true });
+    mkdirSync4(hooksDir, { recursive: true });
   }
   if (existsSync5(hookPath)) {
     const existing = readFileSync5(hookPath, "utf-8");
@@ -2045,7 +2067,7 @@ function registerHooksCommands(program2) {
 }
 
 // src/commands/moves.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, unlinkSync as unlinkSync4, writeFileSync as writeFileSync4 } from "fs";
 import { join as join5 } from "path";
 
 // src/flusher.ts
@@ -2157,7 +2179,7 @@ function registerMovesCommands(program2) {
   moves.command("bind").description("Pin the current directory to an org via .prim/workspace.json").requiredOption("--orgId <orgId>", "Convex organization id").action((opts) => {
     const dir = join5(process.cwd(), ".prim");
     if (!existsSync6(dir)) {
-      mkdirSync4(dir, { recursive: true, mode: DIR_MODE });
+      mkdirSync5(dir, { recursive: true, mode: DIR_MODE });
     }
     const file = join5(process.cwd(), WORKSPACE_FILE);
     writeFileSync4(file, JSON.stringify({ orgId: opts.orgId, boundAt: Date.now() }, null, 2), {
@@ -2261,7 +2283,7 @@ function registerReconcileCommands(program2) {
 // src/commands/session.ts
 import {
   existsSync as existsSync7,
-  mkdirSync as mkdirSync5,
+  mkdirSync as mkdirSync6,
   readFileSync as readFileSync6,
   readdirSync,
   unlinkSync as unlinkSync5,
@@ -2272,7 +2294,7 @@ var DIR_MODE2 = 448;
 var FILE_MODE3 = 384;
 function ensureDir() {
   if (!existsSync7(SESSIONS_DIR)) {
-    mkdirSync5(SESSIONS_DIR, { recursive: true, mode: DIR_MODE2 });
+    mkdirSync6(SESSIONS_DIR, { recursive: true, mode: DIR_MODE2 });
   }
 }
 function markerPath(sessionId) {
@@ -2413,10 +2435,10 @@ function registerSetupCommand(program2) {
 
 // src/commands/skill.ts
 import {
-  closeSync as closeSync2,
+  closeSync as closeSync3,
   existsSync as existsSync8,
   fsyncSync as fsyncSync2,
-  openSync as openSync2,
+  openSync as openSync3,
   readFileSync as readFileSync7,
   renameSync as renameSync3,
   writeFileSync as writeFileSync6
@@ -2474,11 +2496,11 @@ function removeBlock(existing) {
 function atomicWrite2(target, content) {
   const tmp = `${target}.tmp`;
   writeFileSync6(tmp, content);
-  const fd = openSync2(tmp, "r+");
+  const fd = openSync3(tmp, "r+");
   try {
     fsyncSync2(fd);
   } finally {
-    closeSync2(fd);
+    closeSync3(fd);
   }
   renameSync3(tmp, target);
 }
@@ -2602,13 +2624,18 @@ async function renderStatusline() {
   const version = readPackageVersion();
   const snapshot = await daemonRequest(
     "status_snapshot",
-    {},
+    // callerEnv lets the daemon withhold presence when it is bound to a different
+    // deployment than this statusline targets.
+    { callerEnv: getSiteUrl() },
     { timeoutMs: STATUSLINE_TIMEOUT_MS }
   );
   if (!snapshot) {
     debug("daemon snapshot missing");
     return `primitive ${version} (daemon: down)`;
   }
+  if (snapshot.envMismatch) {
+    return `primitive ${version} (daemon: live \xB7 presence: other env)`;
+  }
   if (snapshot.presenceStale) {
     return `primitive ${version} (daemon: live \xB7 presence: stale)`;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.28",
+  "version": "0.1.0-alpha.29",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",