@primitive.ai/prim 0.1.0-alpha.55 → 0.1.0-alpha.57

package/dist/hooks/pre-tool-use.js

@@ -1,10 +1,26 @@
 #!/usr/bin/env node
+import {
+  PREFLIGHT_PROTOCOL_VERSION,
+  buildHermesOutput,
+  buildHookOutput,
+  demoteForMode,
+  failOpenHermes,
+  failOpenOutput,
+  parsePreflightResponse,
+  proposalFor,
+  readHookMode,
+  resolvePreflightTargets,
+  resultForPreflight,
+  unverifiedResult
+} from "../chunk-SWWBK4MP.js";
+import "../chunk-GUXBUBQ7.js";
 import {
   warmBinCache
-} from "../chunk-HSZPTVKU.js";
+} from "../chunk-YIMUIPMD.js";
 import {
-  isRepoActiveForCapture
-} from "../chunk-R5ZJRSLV.js";
+  isRepoActive,
+  repoSyncId
+} from "../chunk-LDQZASIF.js";
 import {
   getClient,
   getSiteUrl
@@ -17,206 +33,6 @@ import {
   parseAgent
 } from "../chunk-TCDUH7AN.js";
 
-// src/hooks/pre-tool-use-scoring.ts
-import { isAbsolute, relative, sep } from "path";
-var VERDICT_SEVERITY = {
-  allow: 0,
-  warn: 1,
-  ask: 2,
-  deny: 3
-};
-function toRepoRelative(filePath, cwd) {
-  const rel = isAbsolute(filePath) ? relative(cwd, filePath) : filePath;
-  return sep === "/" ? rel : rel.split(sep).join("/");
-}
-function aggregateCheckResults(results) {
-  let worst = "allow";
-  for (const r of results) {
-    if (r.verdict !== "unavailable" && VERDICT_SEVERITY[r.verdict] > VERDICT_SEVERITY[worst]) {
-      worst = r.verdict;
-    }
-  }
-  return worst;
-}
-function anyUnverified(results) {
-  return results.some((r) => r.verdict === "unavailable" || r.truncated);
-}
-function unverifiedNote(results) {
-  const causes = [];
-  const unavailable = results.find((r) => r.verdict === "unavailable");
-  if (unavailable) {
-    causes.push(
-      unavailable.unavailable ? `decision check skipped \u2014 ${unavailable.unavailable}` : "decision check skipped \u2014 not verified"
-    );
-  }
-  if (results.some((r) => r.truncated)) {
-    causes.push("decision check partial \u2014 conflict set truncated (per-file cap hit)");
-  }
-  return causes.map((c) => `[primitive] ${c}`).join("\n");
-}
-function buildHookOutput(aggregate, results, agent2 = "claude_code") {
-  if (aggregate === "deny") {
-    const reason = results.filter((r) => r.verdict === "deny").map((r) => r.reason).filter((s) => s.length > 0).join("\n\n") || "[primitive] conflict detected (no detail available)";
-    return {
-      hookSpecificOutput: {
-        hookEventName: "PreToolUse",
-        permissionDecision: "deny",
-        permissionDecisionReason: reason
-      }
-    };
-  }
-  if (agent2 === "codex" && aggregate === "ask") {
-    const reason = results.filter((r) => r.verdict === "ask" || r.verdict === "deny").map((r) => r.reason).filter((s) => s.length > 0).join("\n\n");
-    const context = results.map((r) => r.additionalContext).filter((s) => s.length > 0).join("\n");
-    const merged = [reason, context].filter((s) => s.length > 0).join("\n\n");
-    const out = {
-      hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "allow" }
-    };
-    if (merged.length > 0) {
-      out.hookSpecificOutput.additionalContext = merged;
-    }
-    return out;
-  }
-  if (aggregate === "ask") {
-    const reason = results.filter((r) => r.verdict === "ask" || r.verdict === "deny").map((r) => r.reason).filter((s) => s.length > 0).join("\n\n") || "[primitive] please confirm this edit";
-    const additionalContext = results.map((r) => r.additionalContext).filter((s) => s.length > 0).join("\n");
-    const out = {
-      hookSpecificOutput: {
-        hookEventName: "PreToolUse",
-        permissionDecision: "ask",
-        permissionDecisionReason: reason
-      }
-    };
-    if (additionalContext.length > 0) {
-      out.hookSpecificOutput.additionalContext = additionalContext;
-    }
-    return out;
-  }
-  const notes = [
-    ...results.map((r) => r.additionalContext).filter((s) => s.length > 0),
-    anyUnverified(results) ? unverifiedNote(results) : ""
-  ].filter((s) => s.length > 0).join("\n");
-  if (notes.length > 0) {
-    return {
-      hookSpecificOutput: {
-        hookEventName: "PreToolUse",
-        permissionDecision: "allow",
-        additionalContext: notes
-      }
-    };
-  }
-  return {
-    hookSpecificOutput: {
-      hookEventName: "PreToolUse",
-      permissionDecision: "allow"
-    }
-  };
-}
-function failOpenOutput() {
-  return {
-    hookSpecificOutput: {
-      hookEventName: "PreToolUse",
-      permissionDecision: "allow"
-    }
-  };
-}
-function buildHermesOutput(aggregate, results) {
-  if (aggregate !== "deny" && aggregate !== "ask") {
-    return {};
-  }
-  const reason = results.filter((r) => r.verdict === "deny" || r.verdict === "ask").map((r) => r.reason).filter((s) => s.length > 0).join("\n\n");
-  const directive = results.map((r) => r.additionalContext).filter((s) => s.length > 0).join("\n");
-  const message = [reason, directive].filter((s) => s.length > 0).join("\n\n") || "[primitive] conflict detected (no detail available)";
-  return { action: "block", message };
-}
-function failOpenHermes() {
-  return {};
-}
-var SUPPORTED_TOOLS = /* @__PURE__ */ new Set(["Edit", "Write", "MultiEdit"]);
-var APPLY_PATCH_FILE_RE = /^\*\*\* (?:Update|Add|Delete) File: (?<path>.+)$/;
-var MOVE_FILE_RE = /^\*\*\* Move File:\s*(?<src>.+?)\s*->\s*(?<dst>.+?)\s*$/;
-var LINE_SPLIT_RE = /\r?\n/;
-function parseApplyPatchPaths(command) {
-  const paths = /* @__PURE__ */ new Set();
-  for (const line of command.split(LINE_SPLIT_RE)) {
-    const path = APPLY_PATCH_FILE_RE.exec(line)?.groups?.path?.trim();
-    if (path) {
-      paths.add(path);
-      continue;
-    }
-    const move = MOVE_FILE_RE.exec(line)?.groups;
-    if (move?.src) {
-      paths.add(move.src.trim());
-      if (move.dst) {
-        paths.add(move.dst.trim());
-      }
-    }
-  }
-  return Array.from(paths);
-}
-function extractCodexFilePaths(toolName, toolInput) {
-  if (toolName !== "apply_patch") {
-    return [];
-  }
-  if (!toolInput || typeof toolInput !== "object") {
-    return [];
-  }
-  const command = toolInput.command;
-  return typeof command === "string" ? parseApplyPatchPaths(command) : [];
-}
-var HERMES_EDITING_TOOLS = /* @__PURE__ */ new Set(["write_file", "patch"]);
-function extractHermesFilePaths(toolName, toolInput) {
-  if (!HERMES_EDITING_TOOLS.has(toolName)) {
-    return [];
-  }
-  if (!toolInput || typeof toolInput !== "object") {
-    return [];
-  }
-  const input = toolInput;
-  if (toolName === "patch" && input.mode === "patch") {
-    return typeof input.patch === "string" ? parseApplyPatchPaths(input.patch) : [];
-  }
-  return typeof input.path === "string" && input.path.length > 0 ? [input.path] : [];
-}
-function extractFilePaths(toolName, toolInput, agent2 = "claude_code") {
-  if (agent2 === "codex") {
-    return extractCodexFilePaths(toolName, toolInput);
-  }
-  if (agent2 === "hermes") {
-    return extractHermesFilePaths(toolName, toolInput);
-  }
-  if (!SUPPORTED_TOOLS.has(toolName)) {
-    return [];
-  }
-  if (!toolInput || typeof toolInput !== "object") {
-    return [];
-  }
-  const input = toolInput;
-  if (typeof input.file_path === "string" && input.file_path.length > 0) {
-    return [input.file_path];
-  }
-  return [];
-}
-function readHookMode(env) {
-  if (env.PRIM_BYPASS === "1" || env.PRIM_BYPASS === "true") {
-    return "off";
-  }
-  const mode = env.PRIM_HOOK_MODE;
-  if (mode === "off" || mode === "warn") {
-    return mode;
-  }
-  return "block";
-}
-function demoteForMode(verdict, mode) {
-  if (mode === "off") {
-    return "allow";
-  }
-  if (mode === "warn" && (verdict === "ask" || verdict === "deny")) {
-    return "warn";
-  }
-  return verdict;
-}
-
 // src/hooks/pre-tool-use.ts
 var HOOK_TIMEOUT_MS = 4500;
 var STDIN_TIMEOUT_MS = 1e3;
@@ -246,23 +62,19 @@ function emit(output) {
 function failOpen() {
   return agent === "hermes" ? failOpenHermes() : failOpenOutput();
 }
-async function checkOneFile(file) {
-  const fromDaemon = await daemonRequest(
-    "conflict_check",
-    // callerEnv lets a staging-bound daemon refuse a prod-context gate check
-    // (and vice versa) so we fall through to a direct call against our own env.
-    { file, callerEnv: getSiteUrl() },
-    { timeoutMs: DAEMON_TIMEOUT_MS }
-  );
-  if (fromDaemon) {
-    return fromDaemon;
+function invocationId(envelope) {
+  const value = agent === "hermes" ? envelope.extra?.tool_call_id : envelope.tool_use_id;
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function emitUnverified(message) {
+  const result = unverifiedResult(message);
+  if (agent === "hermes") {
+    process.stderr.write(`[primitive] ${message}
+`);
+    emit(failOpenHermes());
+  } else {
+    emit(buildHookOutput("allow", [result], agent));
   }
-  const client = getClient();
-  return await client.post(
-    "/api/cli/decisions/conflict-check",
-    { file },
-    { signal: AbortSignal.timeout(HOOK_TIMEOUT_MS) }
-  );
 }
 async function main() {
   warmBinCache();
@@ -295,28 +107,75 @@ async function main() {
   }
   const toolName = typeof envelope.tool_name === "string" ? envelope.tool_name : "";
   const cwd = typeof envelope.cwd === "string" && envelope.cwd.length > 0 ? envelope.cwd : process.cwd();
-  const files = extractFilePaths(toolName, envelope.tool_input, agent).map(
-    (f) => toRepoRelative(f, cwd)
-  );
-  if (files.length === 0) {
+  const targets = resolvePreflightTargets({
+    toolName,
+    toolInput: envelope.tool_input,
+    agent,
+    cwd
+  });
+  if (targets.mutation === "none") {
     emit(failOpen());
     return;
   }
-  if (!isRepoActiveForCapture(cwd)) {
+  if (!isRepoActive(cwd)) {
     emit(failOpen());
     return;
   }
-  let results;
+  if (targets.paths.length === 0) {
+    emitUnverified("mutation targets could not be determined; enforcement not verified");
+    return;
+  }
+  const binding = repoSyncId(cwd);
+  const sessionId = envelope.session_id;
+  const callId = invocationId(envelope);
+  if (!binding || typeof sessionId !== "string" || !sessionId || !callId) {
+    emitUnverified("repository binding or tool invocation identity is unavailable");
+    return;
+  }
+  const request = {
+    protocolVersion: PREFLIGHT_PROTOCOL_VERSION,
+    agent,
+    sessionId,
+    invocationId: callId,
+    repoSyncId: binding,
+    paths: targets.paths,
+    coverage: targets.coverage,
+    proposal: proposalFor(envelope.tool_input)
+  };
+  let result;
   try {
-    results = await Promise.all(files.map((f) => checkOneFile(f)));
+    const fromDaemon = await daemonRequest(
+      "conflict_check",
+      { ...request, callerEnv: getSiteUrl() },
+      { timeoutMs: DAEMON_TIMEOUT_MS }
+    );
+    let response = parsePreflightResponse(fromDaemon);
+    if (!response) {
+      const direct = await getClient().post("/api/cli/decisions/conflict-check", request, {
+        signal: AbortSignal.timeout(HOOK_TIMEOUT_MS),
+        quietRefresh: true
+      });
+      response = parsePreflightResponse(direct);
+    }
+    if (!response) {
+      emitUnverified("enforcement service returned an incompatible response");
+      return;
+    }
+    result = resultForPreflight(response);
   } catch {
-    emit(failOpen());
+    emitUnverified("enforcement service unavailable; change was not verified");
     return;
   }
-  const rawAggregate = aggregateCheckResults(results);
-  const aggregate = demoteForMode(rawAggregate, mode);
+  const aggregate = demoteForMode(
+    result.verdict === "unavailable" ? "allow" : result.verdict,
+    mode
+  );
+  if (agent === "hermes" && (aggregate === "warn" || result.verdict === "unavailable")) {
+    process.stderr.write(`[primitive] ${result.reason || result.unavailable}
+`);
+  }
   emit(
-    agent === "hermes" ? buildHermesOutput(aggregate, results) : buildHookOutput(aggregate, results, agent)
+    agent === "hermes" ? buildHermesOutput(aggregate, [result]) : buildHookOutput(aggregate, [result], agent)
   );
 }
 main().catch(() => {

package/dist/hooks/prim-hook.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import {
-  scrubFromCwd
-} from "../chunk-6LAQVM26.js";
 import {
   shouldFlushAfter,
   toMove
-} from "../chunk-F5QCFBJ6.js";
+} from "../chunk-TNNHR3EZ.js";
 import {
   appendMove,
   resolveOrg
 } from "../chunk-BOTKPLTI.js";
+import {
+  scrubFromCwd
+} from "../chunk-GUXBUBQ7.js";
 import {
   buildHookOutput,
   handoffHookOutput
@@ -25,10 +25,10 @@ import {
 } from "../chunk-IMAIBPUC.js";
 import {
   warmBinCache
-} from "../chunk-HSZPTVKU.js";
+} from "../chunk-YIMUIPMD.js";
 import {
   isRepoActiveForCapture
-} from "../chunk-R5ZJRSLV.js";
+} from "../chunk-LDQZASIF.js";
 import "../chunk-DWDEQRWN.js";
 import {
   normalizeEnvelope,
@@ -90,7 +90,10 @@ async function main() {
   const identity = getOrCreateWorkspaceId(cwd);
   const workspaceId = identity.status === "ready" ? identity.workspaceId : void 0;
   try {
-    const base = toMove(parsed, resolveCliVersion(), agent, workspaceId);
+    const successfulPost = parsed.hook_event_name === "PostToolUse";
+    const rawInvocationId = agent === "hermes" ? parsed.extra?.tool_call_id : parsed.tool_use_id;
+    const invocationId = successfulPost && typeof rawInvocationId === "string" ? rawInvocationId : void 0;
+    const base = toMove(parsed, resolveCliVersion(), agent, workspaceId, invocationId);
     const move = { ...base, payload: scrubFromCwd(parsed, cwd) };
     const { orgId } = resolveOrg({ sessionId: move.sessionId, cwd: move.env.cwd });
     appendMove(move, orgId);

package/dist/hooks/session-start.js

@@ -2,7 +2,7 @@
 import {
   hasUsableCodexGuidance,
   refreshClaudePlugins
-} from "../chunk-ROL7SDXX.js";
+} from "../chunk-GQURYENF.js";
 import {
   buildHookOutput,
   handoffHookOutput
@@ -19,11 +19,11 @@ import {
 import {
   binFile,
   warmBinCache
-} from "../chunk-HSZPTVKU.js";
+} from "../chunk-YIMUIPMD.js";
 import {
   gitToplevel,
   isRepoActiveForCapture
-} from "../chunk-R5ZJRSLV.js";
+} from "../chunk-LDQZASIF.js";
 import {
   getSiteUrl,
   isSessionEnded