@primitive.ai/prim 0.1.0-alpha.49 → 0.1.0-alpha.51

package/dist/daemon/server.js

@@ -4,7 +4,7 @@
 import { existsSync as existsSync6, readFileSync as readFileSync5, unlinkSync as unlinkSync3 } from "fs";
 import { createServer } from "net";
 import { homedir as homedir5 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import { fileURLToPath } from "url";
 
 // src/client.ts
@@ -163,6 +163,7 @@ var CONFIG_DIR_MODE = 448;
 var CREDENTIAL_FILE_MODE = 384;
 var REFRESH_THRESHOLD_MS = 6e4;
 var DEFAULT_API_URL = "https://api.getprimitive.ai";
+var AUTH_EXPIRED_MESSAGE = "Authentication expired. Run `prim auth login` to re-authenticate.";
 function loadEnvFile() {
   const envVars = {};
   for (const file of [".env.local", ".env"]) {
@@ -319,6 +320,7 @@ async function performTokenRefresh(options = {}) {
   if (selected?.source !== "token_file") return void 0;
   const startingGeneration = readTrimmed(REFRESH_TOKEN_PATH);
   if (!startingGeneration || isSessionEnded()) return void 0;
+  const startingAccessToken = selected.token;
   return withCredentialLock(
     async () => {
       const currentCredential = resolveAuthCredential();
@@ -328,6 +330,9 @@ async function performTokenRefresh(options = {}) {
       if (currentGeneration !== startingGeneration) {
         return currentCredential.token;
       }
+      if (currentCredential.token !== startingAccessToken) {
+        return currentCredential.token;
+      }
       if (isSessionEnded()) return void 0;
       const response = await fetch(`${getSiteUrl()}/mcp/broker/refresh`, {
         method: "POST",
@@ -412,6 +417,12 @@ async function request(method, path, body, options) {
     });
     if (token) credential = { token, source: "token_file" };
   }
+  if (!credential) {
+    throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
+  }
+  if (isTokenExpiringSoon(credential) && isSessionEnded()) {
+    throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
+  }
   const doFetch = (token) => {
     const headers = { "Content-Type": "application/json" };
     if (token) headers.Authorization = `Bearer ${token}`;
@@ -441,7 +452,7 @@ async function request(method, path, body, options) {
   }
   if (!response.ok) {
     if (response.status === 401) {
-      throw new HttpError(401, "Authentication expired. Run `prim auth login` to re-authenticate.");
+      throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
     }
     const errorBody = await response.json().catch(() => null);
     throw new HttpError(response.status, errorBody?.error ?? `HTTP ${response.status}`);
@@ -457,6 +468,7 @@ function getClient() {
 
 // src/flusher.ts
 import { createReadStream, renameSync as renameSync2, unlinkSync } from "fs";
+import { dirname as dirname4, join as join4 } from "path";
 import { createInterface } from "readline";
 
 // src/ingest-response.ts
@@ -824,11 +836,23 @@ async function flushOnce() {
   return { flushed: total };
 }
 var flushInFlight;
+var FLUSH_LOCK_PATH = join4(dirname4(JOURNAL_DIR), ".flush.lock");
+var FLUSH_LOCK_TIMEOUT_MS = 250;
+function isFlushLockContended(error) {
+  return error instanceof Error && error.message.startsWith("timed out waiting for file lock");
+}
 function flush() {
   if (flushInFlight) {
     return flushInFlight;
   }
-  const attempt = flushOnce().finally(() => {
+  const attempt = withFileLock(FLUSH_LOCK_PATH, flushOnce, {
+    timeoutMs: FLUSH_LOCK_TIMEOUT_MS
+  }).catch((error) => {
+    if (isFlushLockContended(error)) {
+      return { flushed: 0, skipped: true };
+    }
+    throw error;
+  }).finally(() => {
     if (flushInFlight === attempt) {
       flushInFlight = void 0;
     }
@@ -840,8 +864,8 @@ function flush() {
 // src/daemon/client.ts
 import { createConnection } from "net";
 import { homedir as homedir3 } from "os";
-import { join as join4 } from "path";
-var SOCK_PATH = join4(homedir3(), ".config", "prim", "sock");
+import { join as join5 } from "path";
+var SOCK_PATH = join5(homedir3(), ".config", "prim", "sock");
 var DEFAULT_TIMEOUT_MS2 = 250;
 var nextRequestId = 1;
 function daemonRequest(method, params = {}, opts = {}) {
@@ -936,7 +960,7 @@ function assertCallerEnvMatches(callerEnv, boundEnv) {
 // src/daemon/health.ts
 import { chmodSync as chmodSync2, existsSync as existsSync4, mkdirSync as mkdirSync4, renameSync as renameSync3, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
-import { dirname as dirname4, join as join5 } from "path";
+import { dirname as dirname5, join as join6 } from "path";
 var CONFIG_DIR_MODE2 = 448;
 var HEALTH_FILE_MODE = 384;
 var INGESTION_SLA_MS = 3e4;
@@ -944,7 +968,7 @@ var HEARTBEAT_FRESH_MS = 9e4;
 var HEARTBEAT_RETRY_CAP_MS = 3e4;
 var INGESTION_RETRY_BASE_MS = 5e3;
 var INGESTION_RETRY_CAP_MS = 15e3;
-var DAEMON_HEALTH_PATH = join5(homedir4(), ".config", "prim", "daemon-health.json");
+var DAEMON_HEALTH_PATH = join6(homedir4(), ".config", "prim", "daemon-health.json");
 function createDaemonHealthState(version, pid, startedAt2) {
   return {
     schemaVersion: 1,
@@ -982,11 +1006,11 @@ function ingestionRetryDelayMs(consecutiveFailures, random = Math.random) {
   return retryDelayMs(consecutiveFailures, INGESTION_RETRY_CAP_MS, random);
 }
 function writeDaemonHealthState(state, path = DAEMON_HEALTH_PATH) {
-  const dir = dirname4(path);
+  const dir = dirname5(path);
   if (!existsSync4(dir)) {
     mkdirSync4(dir, { recursive: true, mode: CONFIG_DIR_MODE2 });
   }
-  const tmp = join5(dir, `.${process.pid}.daemon-health.tmp`);
+  const tmp = join6(dir, `.${process.pid}.daemon-health.tmp`);
   writeFileSync3(tmp, `${JSON.stringify(state, null, 2)}
 `, { mode: HEALTH_FILE_MODE });
   chmodSync2(tmp, HEALTH_FILE_MODE);
@@ -1006,7 +1030,7 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync4
 } from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 var DIR_MODE = 448;
 var FILE_MODE2 = 384;
 var DAEMON_STARTUP_GRACE_MS = 5e3;
@@ -1037,10 +1061,10 @@ function daemonProcessIsAlive(pid) {
   }
 }
 function readDaemonOwner(configDir) {
-  return readLockRecord(join6(configDir, "daemon.lock", "owner.json"));
+  return readLockRecord(join7(configDir, "daemon.lock", "owner.json"));
 }
 function readDaemonPid(configDir) {
-  const path = join6(configDir, "daemon.pid");
+  const path = join7(configDir, "daemon.pid");
   const pid = numericPid(path);
   if (pid === void 0) {
     return;
@@ -1055,9 +1079,9 @@ function acquireDaemonOwnership(configDir, opts = {}) {
   const pid = opts.pid ?? process.pid;
   const now = opts.now ?? Date.now();
   const isAlive = opts.isAlive ?? daemonProcessIsAlive;
-  const lockDir = join6(configDir, "daemon.lock");
-  const ownerPath2 = join6(lockDir, "owner.json");
-  const pidPath = join6(configDir, "daemon.pid");
+  const lockDir = join7(configDir, "daemon.lock");
+  const ownerPath2 = join7(lockDir, "owner.json");
+  const pidPath = join7(configDir, "daemon.pid");
   const instanceId = randomUUID();
   if (!existsSync5(configDir)) {
     mkdirSync5(configDir, { recursive: true, mode: DIR_MODE });
@@ -1155,8 +1179,8 @@ function releaseDaemonOwnership(ownership2, socketPath) {
 }
 
 // src/daemon/server.ts
-var CONFIG_DIR = join7(homedir5(), ".config", "prim");
-var SOCK_PATH2 = join7(CONFIG_DIR, "sock");
+var CONFIG_DIR = join8(homedir5(), ".config", "prim");
+var SOCK_PATH2 = join8(CONFIG_DIR, "sock");
 var HEARTBEAT_INTERVAL_MS = 3e4;
 var INGESTION_POLL_INTERVAL_MS = 15e3;
 var TOKEN_CHECK_INTERVAL_MS = 6e4;
@@ -1190,7 +1214,7 @@ function resolveRuntimeVersion() {
   }
   try {
     const here = fileURLToPath(new URL(".", import.meta.url));
-    const pkg = JSON.parse(readFileSync5(join7(here, "..", "..", "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync5(join8(here, "..", "..", "package.json"), "utf-8"));
     return pkg.version ?? "unknown";
   } catch {
     return "unknown";
@@ -1430,6 +1454,10 @@ async function runIngestionLoop() {
   persistHealth();
   try {
     const result = await flush();
+    if (result.skipped) {
+      scheduleIngestion(INGESTION_POLL_INTERVAL_MS);
+      return;
+    }
     daemonHealth.ingestion.lastSuccessAt = Date.now();
     daemonHealth.ingestion.lastAcknowledgedCount = result.flushed;
     daemonHealth.ingestion.consecutiveFailures = 0;

package/dist/hooks/post-commit.js

@@ -5,11 +5,11 @@ import {
 import {
   appendMove,
   resolveOrg
-} from "../chunk-5K725K35.js";
+} from "../chunk-BOTKPLTI.js";
 import {
   isRepoActiveForCapture
 } from "../chunk-R5ZJRSLV.js";
-import "../chunk-TPROV45L.js";
+import "../chunk-DWDEQRWN.js";
 
 // src/hooks/post-commit.ts
 import { execSync, spawn } from "child_process";

package/dist/hooks/post-tool-use.js

@@ -13,7 +13,7 @@ import {
 import {
   appendMove,
   resolveOrg
-} from "../chunk-5K725K35.js";
+} from "../chunk-BOTKPLTI.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-IMAIBPUC.js";
@@ -25,7 +25,7 @@ import {
 } from "../chunk-R5ZJRSLV.js";
 import {
   getClient
-} from "../chunk-TPROV45L.js";
+} from "../chunk-DWDEQRWN.js";
 import {
   normalizeEnvelope,
   parseAgent

package/dist/hooks/pre-commit.js

@@ -2,8 +2,8 @@
 import {
   checkAffectedDecisions,
   formatDecisionsWarning
-} from "../chunk-WRPKAPVE.js";
-import "../chunk-TPROV45L.js";
+} from "../chunk-VDLAAUWV.js";
+import "../chunk-DWDEQRWN.js";
 import "../chunk-UTKQTZHL.js";
 
 // src/hooks/pre-commit.ts

package/dist/hooks/pre-tool-use.js

@@ -8,7 +8,7 @@ import {
 import {
   getClient,
   getSiteUrl
-} from "../chunk-TPROV45L.js";
+} from "../chunk-DWDEQRWN.js";
 import {
   daemonRequest
 } from "../chunk-UTKQTZHL.js";

package/dist/hooks/prim-hook.js

@@ -9,17 +9,17 @@ import {
 import {
   appendMove,
   resolveOrg
-} from "../chunk-5K725K35.js";
+} from "../chunk-BOTKPLTI.js";
 import {
   buildHookOutput,
   handoffHookOutput
-} from "../chunk-S5NUHFAD.js";
+} from "../chunk-4GLVJLEQ.js";
 import {
   FEEDBACK_DEADLINE_MS,
   acknowledgeDecisionFeedback,
   leaseDecisionFeedback,
   renderFeedback
-} from "../chunk-CK75QBCB.js";
+} from "../chunk-WELBNODJ.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-IMAIBPUC.js";
@@ -29,7 +29,7 @@ import {
 import {
   isRepoActiveForCapture
 } from "../chunk-R5ZJRSLV.js";
-import "../chunk-TPROV45L.js";
+import "../chunk-DWDEQRWN.js";
 import {
   normalizeEnvelope,
   parseAgent

package/dist/hooks/session-start.js

@@ -1,14 +1,17 @@
 #!/usr/bin/env node
+import {
+  refreshClaudePlugins
+} from "../chunk-UJEQX52M.js";
 import {
   buildHookOutput,
   handoffHookOutput
-} from "../chunk-S5NUHFAD.js";
+} from "../chunk-4GLVJLEQ.js";
 import {
   FEEDBACK_DEADLINE_MS,
   acknowledgeDecisionFeedback,
   leaseDecisionFeedback,
   renderFeedback
-} from "../chunk-CK75QBCB.js";
+} from "../chunk-WELBNODJ.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-IMAIBPUC.js";
@@ -17,11 +20,13 @@ import {
   warmBinCache
 } from "../chunk-HSZPTVKU.js";
 import {
+  gitToplevel,
   isRepoActiveForCapture
 } from "../chunk-R5ZJRSLV.js";
 import {
-  getSiteUrl
-} from "../chunk-TPROV45L.js";
+  getSiteUrl,
+  isSessionEnded
+} from "../chunk-DWDEQRWN.js";
 import {
   daemonRequest
 } from "../chunk-UTKQTZHL.js";
@@ -50,59 +55,33 @@ function kickDaemonEnsure(options = {}) {
   }
 }
 
-// src/hooks/session-start.ts
-var STDIN_TIMEOUT_MS = 1e3;
-var DAEMON_TIMEOUT_MS = 250;
-var outputAttempted = false;
-function emitOutput(output, acknowledge) {
-  outputAttempted = true;
-  return handoffHookOutput(output, acknowledge);
+// src/hooks/reauth-notice.ts
+var REAUTH_NOTICE = "[prim] authentication ended \u2014 run `prim auth login` to resume decision capture";
+function reauthNoticeFields(agent) {
+  if (agent === "codex") return { additionalContext: REAUTH_NOTICE };
+  if (agent === "claude_code") return { systemMessage: REAUTH_NOTICE };
+  return;
 }
-function readStdin() {
-  return new Promise((resolve, reject) => {
-    const chunks = [];
-    const timer = setTimeout(() => {
-      reject(new Error("stdin read timeout"));
-    }, STDIN_TIMEOUT_MS);
-    process.stdin.on("data", (chunk) => chunks.push(chunk));
-    process.stdin.on("end", () => {
-      clearTimeout(timer);
-      resolve(Buffer.concat(chunks).toString("utf-8"));
-    });
-    process.stdin.on("error", (err) => {
-      clearTimeout(timer);
-      reject(err);
-    });
-  });
-}
-async function main() {
-  const feedbackSignal = AbortSignal.timeout(FEEDBACK_DEADLINE_MS);
-  warmBinCache();
-  const agent = parseAgent(process.argv);
-  let raw;
-  try {
-    raw = await readStdin();
-  } catch {
-    await emitOutput(buildHookOutput({}));
-    return;
-  }
+
+// src/hooks/session-start-core.ts
+var DAEMON_TIMEOUT_MS = 250;
+var PRIM_SKILL_REMINDER = "Primitive is active in this repository. When this task chooses between plausible approaches or establishes or changes a lasting goal, priority, constraint, invariant, default, commitment, tradeoff, exception, or shared instruction, invoke the `prim` skill before finishing. Never invoke `prim` for routine implementation that merely follows an existing decision made before this task or for temporary tactics; they never qualify, including for evaluation. When a direct request replaces one lasting default with another but supplies no rationale, complete the work, invoke the skill, and ask one concise rationale question at the task boundary, even if the user requested only implementation or recording fails.";
+async function processSessionStart(raw, agent, feedbackSignal = AbortSignal.timeout(FEEDBACK_DEADLINE_MS)) {
   let envelope;
   try {
-    envelope = normalizeEnvelope(
-      JSON.parse(raw),
-      agent
-    );
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+      return { output: buildHookOutput({}) };
+    }
+    envelope = normalizeEnvelope(parsed, agent);
   } catch {
-    await emitOutput(buildHookOutput({}));
-    return;
+    return { output: buildHookOutput({}) };
   }
   if (envelope.hook_event_name !== "SessionStart") {
-    await emitOutput(buildHookOutput({}));
-    return;
+    return { output: buildHookOutput({}) };
   }
   if (typeof envelope.session_id !== "string" || envelope.session_id.length === 0) {
-    await emitOutput(buildHookOutput({}));
-    return;
+    return { output: buildHookOutput({}) };
   }
   kickDaemonEnsure();
   await daemonRequest(
@@ -110,6 +89,28 @@ async function main() {
     { sessionId: envelope.session_id },
     { timeoutMs: DAEMON_TIMEOUT_MS }
   );
+  const cwd = envelope.cwd ?? process.cwd();
+  let active = false;
+  let skillState = { installed: 0, refreshed: 0 };
+  if (agent === "claude_code") {
+    try {
+      const projectRoot = gitToplevel(cwd);
+      active = projectRoot !== null && isRepoActiveForCapture(cwd);
+      skillState = await refreshClaudePlugins(
+        cwd,
+        active && projectRoot !== null ? { includeProject: true, projectRoot } : { includeProject: false }
+      );
+    } catch {
+    }
+  }
+  if (isSessionEnded()) {
+    const notice = reauthNoticeFields(agent);
+    if (notice) {
+      return {
+        output: buildHookOutput({ ...notice, reloadSkills: skillState.refreshed > 0 })
+      };
+    }
+  }
   if (agent === "codex") {
     const snapshot = await daemonRequest(
       "status_snapshot",
@@ -119,15 +120,17 @@ async function main() {
       { timeoutMs: DAEMON_TIMEOUT_MS }
     );
     if (snapshot && !snapshot.presenceStale && typeof snapshot.onlineCount === "number") {
-      await emitOutput(
-        buildHookOutput({ additionalContext: `[prim] team: ${snapshot.onlineCount} online` })
-      );
-      return;
+      return {
+        output: buildHookOutput({
+          additionalContext: `[prim] team: ${snapshot.onlineCount} online`
+        })
+      };
     }
   }
   if (agent === "claude_code") {
-    const cwd = envelope.cwd ?? process.cwd();
-    if (isRepoActiveForCapture(cwd)) {
+    const additionalContext = active && skillState.installed > 0 ? PRIM_SKILL_REMINDER : void 0;
+    const reloadSkills = skillState.refreshed > 0;
+    if (active) {
       const identity = getOrCreateWorkspaceId(cwd);
       if (identity.status === "ready") {
         const lease = await leaseDecisionFeedback({
@@ -136,21 +139,64 @@ async function main() {
           signal: feedbackSignal
         });
         const rendered = lease ? renderFeedback(lease) : void 0;
-        await emitOutput(
-          buildHookOutput({ systemMessage: rendered?.systemMessage }),
-          rendered ? async () => {
+        return {
+          output: buildHookOutput({
+            systemMessage: rendered?.systemMessage,
+            additionalContext,
+            reloadSkills
+          }),
+          acknowledge: rendered ? async () => {
             await acknowledgeDecisionFeedback({
               workspaceId: identity.workspaceId,
               deliveries: rendered.deliveries,
               signal: feedbackSignal
             });
           } : void 0
-        );
-        return;
+        };
       }
     }
+    return { output: buildHookOutput({ additionalContext, reloadSkills }) };
+  }
+  return { output: buildHookOutput({}) };
+}
+
+// src/hooks/session-start.ts
+var STDIN_TIMEOUT_MS = 1e3;
+var outputAttempted = false;
+function emitOutput(output, acknowledge) {
+  outputAttempted = true;
+  return handoffHookOutput(output, acknowledge);
+}
+function readStdin() {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    const timer = setTimeout(() => {
+      reject(new Error("stdin read timeout"));
+    }, STDIN_TIMEOUT_MS);
+    process.stdin.on("data", (chunk) => chunks.push(chunk));
+    process.stdin.on("end", () => {
+      clearTimeout(timer);
+      resolve(Buffer.concat(chunks).toString("utf-8"));
+    });
+    process.stdin.on("error", (err) => {
+      clearTimeout(timer);
+      reject(err);
+    });
+  });
+}
+async function main() {
+  const feedbackSignal = AbortSignal.timeout(FEEDBACK_DEADLINE_MS);
+  warmBinCache();
+  const agent = parseAgent(process.argv);
+  let raw;
+  try {
+    raw = await readStdin();
+  } catch {
+    await emitOutput(buildHookOutput({}));
+    return;
   }
-  await emitOutput(buildHookOutput({}));
+  const result = await processSessionStart(raw, agent, feedbackSignal);
+  await emitOutput(result.output, result.acknowledge);
 }
 void main().catch(async () => {
   if (!outputAttempted) await emitOutput(buildHookOutput({}));