@primitive.ai/prim 0.1.0-alpha.31 → 0.1.0-alpha.33

package/README.md

@@ -28,7 +28,7 @@ One command does the whole install — auth, session hooks, daemon, git hooks,
 skill, and the welcome:
 
 ```bash
-prim setup                 # add --agent codex for Codex, --no-daemon to skip the daemon
+prim setup                 # add --agent codex or --agent hermes, --no-daemon to skip the daemon
 ```
 
 Or run the steps individually:
@@ -38,7 +38,7 @@ Or run the steps individually:
 prim auth login
 
 # 2. Wire the session hooks (decision capture + conflict gate + presence)
-prim claude install        # or: prim codex install
+prim claude install        # or: prim codex install / prim hermes install
 
 # 3. Start the companion daemon (latency + team presence)
 prim daemon start
@@ -74,6 +74,7 @@ and the manual fallback — live in [`setup.md`](./setup.md).
 ```bash
 prim setup                   # Run the whole install in one shot
 prim setup --agent codex     # Same, for OpenAI Codex
+prim setup --agent hermes    # Same, for Hermes Agent (global-only config)
 prim setup --no-daemon       # Skip the companion daemon
 ```
 
@@ -99,12 +100,16 @@ self-resolves the CLI at run time (PATH, then a local install, then
 
 Installs into the current project by default — the repo's `.claude/settings.json`
 / `.codex/hooks.json`, resolved from the git root (so any subdirectory works);
-pass `--scope user` to install machine-wide.
+pass `--scope user` to install machine-wide. Hermes is the exception: it reads
+shell hooks only from the global `~/.hermes/config.yaml`, so `prim hermes install`
+is always user-scoped — and prim merges in place, leaving the rest of that file
+(providers, models, your own hooks) untouched.
 
 ```bash
 prim claude install                # Install Claude Code hooks (project scope; uninstall / status)
 prim claude install --scope user   # Install machine-wide instead
 prim codex install                 # Install OpenAI Codex hooks (project scope)
+prim hermes install                # Install Hermes Agent hooks (global ~/.hermes/config.yaml)
 ```
 
 ### Daemon

package/SKILL.md

@@ -11,7 +11,7 @@ description: Use the prim CLI for Primitive's decision graph — passive decisio
 
 As your team codes, prim passively captures the **decisions** you make -- which library, which pattern, which config value -- into a queryable graph, and links them: a decision can depend on earlier decisions (auto-linked from shared files, or related by hand — see *Relate decisions*) and reference the files it touched. When a later change conflicts with a load-bearing prior decision, prim **gates** the edit and surfaces the decision for review.
 
-You never invoke capture. It runs automatically through the session hooks installed by `npx --yes @primitive.ai/prim claude install` (Claude Code) or `npx --yes @primitive.ai/prim codex install` (Codex). Your job is to **respond** to the gate, **read** the graph before load-bearing edits, and **answer** the occasional rationale confirmation.
+You never invoke capture. It runs automatically through the session hooks installed by `npx --yes @primitive.ai/prim claude install` (Claude Code), `npx --yes @primitive.ai/prim codex install` (Codex), or `npx --yes @primitive.ai/prim hermes install` (Hermes). Your job is to **respond** to the gate, **read** the graph before load-bearing edits, and **answer** the occasional rationale confirmation.
 
 ## Auth
 
@@ -33,10 +33,10 @@ The CLI auto-refreshes a still-valid session from the stored refresh token (proa
 
 ## Heed the conflict gate
 
-Before an edit (Claude Code: Edit/Write/MultiEdit; Codex: apply_patch) a PreToolUse hook scores the target file against the graph:
+Before an edit (Claude Code: Edit/Write/MultiEdit; Codex: apply_patch; Hermes: write_file/patch) a PreToolUse hook scores the target file against the graph:
 
 - **deny** -- the edit is blocked: it conflicts with a load-bearing prior decision. Don't fight it. Read the reason line; it names the decision id. If you genuinely intend to override that decision, run `npx --yes @primitive.ai/prim reconcile dec_<shortId>`, then retry the edit once. Otherwise choose an approach that respects the decision.
-- **warn / additional context** -- the edit proceeds, but a relevant prior decision is surfaced. Read it. On Codex a would-be `ask` is delivered as allow-plus-context (Codex can't pause mid-tool), so that context is your only signal -- read it before continuing.
+- **warn / additional context** -- the edit proceeds, but a relevant prior decision is surfaced. Read it. On Codex a would-be `ask` is delivered as allow-plus-context (Codex can't pause mid-tool), so that context is your only signal -- read it before continuing. Hermes has no soft-confirm tier, so a would-be `ask` arrives as a **deny** carrying the same reconcile directive: reconcile and retry, or set `PRIM_HOOK_MODE=warn` to downgrade it to context-only.
 - **"decision check skipped / not verified" or "... partial / truncated"** -- the check could not fully run. Treat constraints as UNKNOWN, not clear; never read silence as approval.
 
 The gate fail-opens on its *own* infrastructure errors (no daemon, network blip, org-unbound token) -- a setup problem never blocks your edit. That is exactly why an "unavailable" note matters: it is the honest signal that the check, not your edit, is what failed.
@@ -44,7 +44,7 @@ The gate fail-opens on its *own* infrastructure errors (no daemon, network blip,
 ## Read the graph before large or load-bearing edits
 
 - `npx --yes @primitive.ai/prim decisions check --files "src/a.ts,src/b.ts"` -- which active decisions reference the files you're about to touch (comma-separated paths, one `--files` value). Run it before a big change.
-- `npx --yes @primitive.ai/prim decisions recent` -- the team's recent decisions, each row badged by author and agent (`Your Claude Code` / `Your Codex`); `--limit <n>` and `--since <dur>` narrow it.
+- `npx --yes @primitive.ai/prim decisions recent` -- the team's recent decisions, each row badged by author and agent (`Your Claude Code` / `Your Codex` / `Your Hermes`); `--limit <n>` and `--since <dur>` narrow it.
 - `npx --yes @primitive.ai/prim decisions show <idOrShortId>` and `npx --yes @primitive.ai/prim decisions cascade <idOrShortId>` -- full detail, and the downstream blast radius a change would disturb.
 
 ## Reconcile and the verdict footer
@@ -116,7 +116,7 @@ npx --yes @primitive.ai/prim hooks uninstall
 
 Under `CI=1` (or with `--non-interactive`), `hooks install` fails fast in a Husky repo unless `--yes` or `--target` is set; the error names both escapes. `hooks uninstall` only removes the `.git/hooks` copies — if a hook was installed into `.husky/`, remove the prim block from that file manually. To suppress the hooks for one commit, use `git commit --no-verify`.
 
-These git hooks are separate from the **session hooks** (`claude install` / `codex install`) that drive in-session capture and the conflict gate.
+These git hooks are separate from the **session hooks** (`claude install` / `codex install` / `hermes install`) that drive in-session capture and the conflict gate.
 
 ## Output formats
 
@@ -137,7 +137,7 @@ Examples:
 - **An "unavailable" / "not verified" gate or check is not an all-clear.** Treat constraints as UNKNOWN and proceed deliberately; never read the silence as approval.
 - **A `deny` means a real prior decision conflicts.** Reconcile only when you genuinely intend to override it; otherwise pick an approach that respects it.
 - **Reconcile bypasses are single-use and short-lived.** One bypass clears your *next* edit to the governed file; it is not a standing override.
-- **Capture of your coding activity is automatic, never manual.** If decisions aren't showing up, check that the session hooks are installed (`claude status` / `codex status`) and the daemon is running — don't try to inject moves by hand. (Deliberately *authoring* a decision the user asks you to record is a separate, supported path — `decisions create`, above.)
+- **Capture of your coding activity is automatic, never manual.** If decisions aren't showing up, check that the session hooks are installed (`claude status` / `codex status` / `hermes status`) and the daemon is running — don't try to inject moves by hand. (Deliberately *authoring* a decision the user asks you to record is a separate, supported path — `decisions create`, above.)
 - **Don't fabricate rationale on a confirmation.** If you don't know why a decision was made, say so rather than guessing.
 
 ## After each task

package/dist/{chunk-7GHOFNJ2.js → chunk-S2O4P4A3.js}

@@ -19,10 +19,10 @@ function toMove(parsed, cliVersion, agent = "claude_code") {
       osPlatform: platform()
     },
     envelopeVersion: ENVELOPE_VERSION,
-    // Stamp the producer only for Codex; Claude Code moves omit it (the
-    // backend defaults an absent value to "claude_code"), keeping the
-    // Claude wire shape byte-identical.
-    ...agent === "codex" ? { producer: "codex" } : {}
+    // Stamp the producer for non-Claude agents (codex, hermes); Claude Code
+    // moves omit it (the backend defaults an absent value to "claude_code"),
+    // keeping the Claude wire shape byte-identical.
+    ...agent === "claude_code" ? {} : { producer: agent }
   };
 }
 function toCommitMove(commit, cliVersion, cwd) {

package/dist/chunk-TCDUH7AN.js

@@ -0,0 +1,35 @@
+// src/hooks/agent.ts
+function parseAgent(argv) {
+  const i = argv.indexOf("--agent");
+  const value = i !== -1 ? argv[i + 1] : void 0;
+  if (value === "codex" || value === "hermes") {
+    return value;
+  }
+  return "claude_code";
+}
+
+// src/hooks/normalize.ts
+var HERMES_EVENT_MAP = {
+  on_session_start: "SessionStart",
+  on_session_end: "SessionEnd",
+  pre_llm_call: "UserPromptSubmit",
+  post_llm_call: "Stop",
+  pre_tool_call: "PreToolUse",
+  post_tool_call: "PostToolUse",
+  subagent_stop: "SubagentStop"
+};
+function normalizeEnvelope(parsed, agent) {
+  if (agent !== "hermes") {
+    return parsed;
+  }
+  const raw = parsed.hook_event_name;
+  if (typeof raw === "string" && raw in HERMES_EVENT_MAP) {
+    return { ...parsed, hook_event_name: HERMES_EVENT_MAP[raw] };
+  }
+  return parsed;
+}
+
+export {
+  parseAgent,
+  normalizeEnvelope
+};

package/dist/hooks/post-commit.js

@@ -5,7 +5,7 @@ import {
 } from "../chunk-H4OR42TJ.js";
 import {
   toCommitMove
-} from "../chunk-7GHOFNJ2.js";
+} from "../chunk-S2O4P4A3.js";
 import "../chunk-26VA3ADF.js";
 
 // src/hooks/post-commit.ts

package/dist/hooks/post-tool-use.js

@@ -8,13 +8,14 @@ import {
 } from "../chunk-6LAQVM26.js";
 import {
   toMove
-} from "../chunk-7GHOFNJ2.js";
-import {
-  parseAgent
-} from "../chunk-7YRBACIE.js";
+} from "../chunk-S2O4P4A3.js";
 import {
   getClient
 } from "../chunk-26VA3ADF.js";
+import {
+  normalizeEnvelope,
+  parseAgent
+} from "../chunk-TCDUH7AN.js";
 
 // src/hooks/post-tool-use.ts
 import { readFileSync } from "fs";
@@ -42,6 +43,16 @@ var STDIN_TIMEOUT_MS = 1e3;
 var INGEST_TIMEOUT_MS = 4e3;
 var EDITING_TOOLS = /* @__PURE__ */ new Set(["Edit", "Write", "MultiEdit"]);
 var CODEX_EDITING_TOOLS = /* @__PURE__ */ new Set(["apply_patch"]);
+var HERMES_EDITING_TOOLS = /* @__PURE__ */ new Set(["write_file", "patch"]);
+function editingToolsFor(agent) {
+  if (agent === "codex") {
+    return CODEX_EDITING_TOOLS;
+  }
+  if (agent === "hermes") {
+    return HERMES_EDITING_TOOLS;
+  }
+  return EDITING_TOOLS;
+}
 var here = dirname(fileURLToPath(import.meta.url));
 function resolveCliVersion() {
   try {
@@ -86,6 +97,7 @@ async function ingestMove(move) {
   );
 }
 async function main() {
+  const agent = parseAgent(process.argv);
   let raw;
   try {
     raw = await readStdin();
@@ -95,7 +107,7 @@ async function main() {
   }
   let parsed;
   try {
-    parsed = JSON.parse(raw);
+    parsed = normalizeEnvelope(JSON.parse(raw), agent);
   } catch {
     emit();
     return;
@@ -106,8 +118,7 @@ async function main() {
     return;
   }
   const toolName = typeof envelope.tool_name === "string" ? envelope.tool_name : "";
-  const agent = parseAgent(process.argv);
-  const editingTools = agent === "codex" ? CODEX_EDITING_TOOLS : EDITING_TOOLS;
+  const editingTools = editingToolsFor(agent);
   if (!editingTools.has(toolName)) {
     emit();
     return;

package/dist/hooks/pre-tool-use.js

@@ -1,7 +1,4 @@
 #!/usr/bin/env node
-import {
-  parseAgent
-} from "../chunk-7YRBACIE.js";
 import {
   getClient,
   getSiteUrl
@@ -9,6 +6,10 @@ import {
 import {
   daemonRequest
 } from "../chunk-UTKQTZHL.js";
+import {
+  normalizeEnvelope,
+  parseAgent
+} from "../chunk-TCDUH7AN.js";
 
 // src/hooks/pre-tool-use-scoring.ts
 import { isAbsolute, relative, sep } from "path";
@@ -47,7 +48,7 @@ function unverifiedNote(results) {
   }
   return causes.map((c) => `[primitive] ${c}`).join("\n");
 }
-function buildHookOutput(aggregate, results, agent = "claude_code") {
+function buildHookOutput(aggregate, results, agent2 = "claude_code") {
   if (aggregate === "deny") {
     const reason = results.filter((r) => r.verdict === "deny").map((r) => r.reason).filter((s) => s.length > 0).join("\n\n") || "[primitive] conflict detected (no detail available)";
     return {
@@ -58,7 +59,7 @@ function buildHookOutput(aggregate, results, agent = "claude_code") {
       }
     };
   }
-  if (agent === "codex" && aggregate === "ask") {
+  if (agent2 === "codex" && aggregate === "ask") {
     const reason = results.filter((r) => r.verdict === "ask" || r.verdict === "deny").map((r) => r.reason).filter((s) => s.length > 0).join("\n\n");
     const context = results.map((r) => r.additionalContext).filter((s) => s.length > 0).join("\n");
     const merged = [reason, context].filter((s) => s.length > 0).join("\n\n");
@@ -113,8 +114,21 @@ function failOpenOutput() {
     }
   };
 }
+function buildHermesOutput(aggregate, results) {
+  if (aggregate !== "deny" && aggregate !== "ask") {
+    return {};
+  }
+  const reason = results.filter((r) => r.verdict === "deny" || r.verdict === "ask").map((r) => r.reason).filter((s) => s.length > 0).join("\n\n");
+  const directive = results.map((r) => r.additionalContext).filter((s) => s.length > 0).join("\n");
+  const message = [reason, directive].filter((s) => s.length > 0).join("\n\n") || "[primitive] conflict detected (no detail available)";
+  return { action: "block", message };
+}
+function failOpenHermes() {
+  return {};
+}
 var SUPPORTED_TOOLS = /* @__PURE__ */ new Set(["Edit", "Write", "MultiEdit"]);
 var APPLY_PATCH_FILE_RE = /^\*\*\* (?:Update|Add|Delete) File: (?<path>.+)$/;
+var MOVE_FILE_RE = /^\*\*\* Move File:\s*(?<src>.+?)\s*->\s*(?<dst>.+?)\s*$/;
 var LINE_SPLIT_RE = /\r?\n/;
 function parseApplyPatchPaths(command) {
   const paths = /* @__PURE__ */ new Set();
@@ -122,6 +136,14 @@ function parseApplyPatchPaths(command) {
     const path = APPLY_PATCH_FILE_RE.exec(line)?.groups?.path?.trim();
     if (path) {
       paths.add(path);
+      continue;
+    }
+    const move = MOVE_FILE_RE.exec(line)?.groups;
+    if (move?.src) {
+      paths.add(move.src.trim());
+      if (move.dst) {
+        paths.add(move.dst.trim());
+      }
     }
   }
   return Array.from(paths);
@@ -136,10 +158,27 @@ function extractCodexFilePaths(toolName, toolInput) {
   const command = toolInput.command;
   return typeof command === "string" ? parseApplyPatchPaths(command) : [];
 }
-function extractFilePaths(toolName, toolInput, agent = "claude_code") {
-  if (agent === "codex") {
+var HERMES_EDITING_TOOLS = /* @__PURE__ */ new Set(["write_file", "patch"]);
+function extractHermesFilePaths(toolName, toolInput) {
+  if (!HERMES_EDITING_TOOLS.has(toolName)) {
+    return [];
+  }
+  if (!toolInput || typeof toolInput !== "object") {
+    return [];
+  }
+  const input = toolInput;
+  if (toolName === "patch" && input.mode === "patch") {
+    return typeof input.patch === "string" ? parseApplyPatchPaths(input.patch) : [];
+  }
+  return typeof input.path === "string" && input.path.length > 0 ? [input.path] : [];
+}
+function extractFilePaths(toolName, toolInput, agent2 = "claude_code") {
+  if (agent2 === "codex") {
     return extractCodexFilePaths(toolName, toolInput);
   }
+  if (agent2 === "hermes") {
+    return extractHermesFilePaths(toolName, toolInput);
+  }
   if (!SUPPORTED_TOOLS.has(toolName)) {
     return [];
   }
@@ -193,10 +232,14 @@ async function readStdin() {
     });
   });
 }
+var agent = parseAgent(process.argv);
 function emit(output) {
   process.stdout.write(`${JSON.stringify(output)}
 `);
 }
+function failOpen() {
+  return agent === "hermes" ? failOpenHermes() : failOpenOutput();
+}
 async function checkOneFile(file) {
   const fromDaemon = await daemonRequest(
     "conflict_check",
@@ -220,47 +263,51 @@ async function main() {
   try {
     raw = await readStdin();
   } catch {
-    emit(failOpenOutput());
+    emit(failOpen());
     return;
   }
   let envelope;
   try {
-    envelope = JSON.parse(raw);
+    envelope = normalizeEnvelope(
+      JSON.parse(raw),
+      agent
+    );
   } catch {
-    emit(failOpenOutput());
+    emit(failOpen());
     return;
   }
   if (envelope.hook_event_name !== "PreToolUse") {
-    emit(failOpenOutput());
+    emit(failOpen());
     return;
   }
   const env = process.env;
   const mode = readHookMode(env);
   if (mode === "off") {
-    emit(failOpenOutput());
+    emit(failOpen());
     return;
   }
   const toolName = typeof envelope.tool_name === "string" ? envelope.tool_name : "";
   const cwd = typeof envelope.cwd === "string" && envelope.cwd.length > 0 ? envelope.cwd : process.cwd();
-  const agent = parseAgent(process.argv);
   const files = extractFilePaths(toolName, envelope.tool_input, agent).map(
     (f) => toRepoRelative(f, cwd)
   );
   if (files.length === 0) {
-    emit(failOpenOutput());
+    emit(failOpen());
     return;
   }
   let results;
   try {
     results = await Promise.all(files.map((f) => checkOneFile(f)));
   } catch {
-    emit(failOpenOutput());
+    emit(failOpen());
     return;
   }
   const rawAggregate = aggregateCheckResults(results);
   const aggregate = demoteForMode(rawAggregate, mode);
-  emit(buildHookOutput(aggregate, results, agent));
+  emit(
+    agent === "hermes" ? buildHermesOutput(aggregate, results) : buildHookOutput(aggregate, results, agent)
+  );
 }
 main().catch(() => {
-  emit(failOpenOutput());
+  emit(failOpen());
 });

package/dist/hooks/prim-hook.js

@@ -9,11 +9,12 @@ import {
 import {
   shouldFlushAfter,
   toMove
-} from "../chunk-7GHOFNJ2.js";
+} from "../chunk-S2O4P4A3.js";
+import "../chunk-26VA3ADF.js";
 import {
+  normalizeEnvelope,
   parseAgent
-} from "../chunk-7YRBACIE.js";
-import "../chunk-26VA3ADF.js";
+} from "../chunk-TCDUH7AN.js";
 
 // src/hooks/prim-hook.ts
 import { spawn } from "child_process";
@@ -37,10 +38,11 @@ function spawnBackgroundFlush() {
   }).unref();
 }
 try {
+  const agent = parseAgent(process.argv);
   const raw = readFileSync(0, "utf-8");
-  const parsed = JSON.parse(raw);
+  const parsed = normalizeEnvelope(JSON.parse(raw), agent);
   const cwd = parsed.cwd ?? process.cwd();
-  const base = toMove(parsed, resolveCliVersion(), parseAgent(process.argv));
+  const base = toMove(parsed, resolveCliVersion(), agent);
   const move = { ...base, payload: scrubFromCwd(parsed, cwd) };
   const { orgId } = resolveOrg({ sessionId: move.sessionId, cwd: move.env.cwd });
   appendMove(move, orgId);

package/dist/hooks/session-end.js

@@ -2,6 +2,10 @@
 import {
   daemonRequest
 } from "../chunk-UTKQTZHL.js";
+import {
+  normalizeEnvelope,
+  parseAgent
+} from "../chunk-TCDUH7AN.js";
 
 // src/hooks/session-end.ts
 var STDIN_TIMEOUT_MS = 1e3;
@@ -27,6 +31,7 @@ function emit() {
   process.stdout.write("{}\n");
 }
 async function main() {
+  const agent = parseAgent(process.argv);
   let raw;
   try {
     raw = await readStdin();
@@ -36,7 +41,10 @@ async function main() {
   }
   let envelope;
   try {
-    envelope = JSON.parse(raw);
+    envelope = normalizeEnvelope(
+      JSON.parse(raw),
+      agent
+    );
   } catch {
     emit();
     return;

package/dist/hooks/session-start.js

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
-import {
-  parseAgent
-} from "../chunk-7YRBACIE.js";
 import {
   getSiteUrl
 } from "../chunk-26VA3ADF.js";
 import {
   daemonRequest
 } from "../chunk-UTKQTZHL.js";
+import {
+  normalizeEnvelope,
+  parseAgent
+} from "../chunk-TCDUH7AN.js";
 
 // src/hooks/session-start.ts
 var STDIN_TIMEOUT_MS = 1e3;
@@ -44,6 +45,7 @@ function emit(additionalContext) {
 `);
 }
 async function main() {
+  const agent = parseAgent(process.argv);
   let raw;
   try {
     raw = await readStdin();
@@ -53,7 +55,10 @@ async function main() {
   }
   let envelope;
   try {
-    envelope = JSON.parse(raw);
+    envelope = normalizeEnvelope(
+      JSON.parse(raw),
+      agent
+    );
   } catch {
     emit();
     return;
@@ -71,7 +76,7 @@ async function main() {
     { sessionId: envelope.session_id },
     { timeoutMs: DAEMON_TIMEOUT_MS }
   );
-  if (parseAgent(process.argv) === "codex") {
+  if (agent === "codex") {
     const snapshot = await daemonRequest(
       "status_snapshot",
       // callerEnv: a cross-env daemon withholds onlineCount, so a prod Codex