@primitive.ai/prim 0.1.0-alpha.79 → 0.1.0-alpha.80

package/README.md

@@ -205,8 +205,7 @@ metadata (equivalent to `git rev-parse --git-path prim/workspace-id`), never an
 absolute repository path. Linked worktrees receive distinct IDs, moving a
 worktree preserves its ID, and a clone creates a new one. A corrupt or
 unwritable identity is never silently replaced: capture falls back to the
-legacy envelope and `prim doctor` reports the limitation. Disable/uninstall
-does not delete the identity.
+legacy envelope. Disable/uninstall does not delete the identity.
 
 Feedback uses the invoking CLI's credentials for direct HTTPS calls rather
 than the daemon, avoiding cross-organization token ambiguity. One absolute
@@ -228,7 +227,7 @@ Alternatives considered:
 | Detached delivery | Does not block Stop | Cannot return the current hook's `systemMessage` |
 
 Run `prim claude status` to verify both existing feedback handlers are installed
-and `prim doctor` to inspect the worktree identity and server capability. No new
+and `prim doctor` to inspect server capability. No new
 hook registration or binary is required when upgrading an existing correct
 installation.
 

package/dist/{chunk-UVIWZWM6.js → chunk-EZXEWFDG.js}

@@ -206,6 +206,5 @@ function errorCode(error) {
 
 export {
   isCanonicalWorkspaceId,
-  inspectWorkspaceId,
   getOrCreateWorkspaceId
 };

package/dist/{chunk-H64F6QHV.js → chunk-OUXH3UEP.js}

@@ -1,6 +1,6 @@
 import {
   isCanonicalWorkspaceId
-} from "./chunk-UVIWZWM6.js";
+} from "./chunk-EZXEWFDG.js";
 import {
   scrubEnvironmentPaths
 } from "./chunk-FI3LIRCB.js";

package/dist/hook-runtime/hooks/pre-tool-use.js

@@ -7036,10 +7036,7 @@ async function main() {
     return;
   }
   if (targets.paths.length === 0) {
-    await emitUnverified(
-      "mutation targets could not be determined; enforcement not verified",
-      envelope
-    );
+    await emit(failOpen());
     return;
   }
   const binding = repoSyncId(cwd);

package/dist/hook-runtime/hooks/session-start.js

@@ -10261,6 +10261,9 @@ async function resolveRepositoryBindingWithClient(root, client, options) {
   }
   return { status: "connected", repoSyncId: response.repoSyncId, repositoryFullName };
 }
+async function resolveRepositoryBinding(root, options) {
+  return resolveRepositoryBindingWithClient(root, getClient(), options);
+}
 function persistRepositoryBinding(root, binding) {
   if (binding.status === "connected") {
     setRepoSyncId(root, binding.repoSyncId, binding.repositoryFullName);
@@ -11123,17 +11126,37 @@ async function activeProjectRoot(cwd) {
       }
     }
     try {
-      await bindRepository(root, {
+      const binding = await bindRepository(root, {
         signal: AbortSignal.timeout(REPOSITORY_BIND_TIMEOUT_MS),
         quietRefresh: true
       });
+      return { root, binding };
     } catch {
     }
-    return root;
+    return { root };
   } catch {
     return null;
   }
 }
+function claudeBindingReminder(binding) {
+  if (binding.status === "connected") {
+    return `The current GitHub repository is connected to Primitive. In your first response, begin with exactly: "GitHub repository connected to Primitive: ${binding.repositoryFullName}." Then continue the user's request.`;
+  }
+  return `The current GitHub repository is not connected to Primitive. Before doing task work, ask exactly: "This GitHub repository isn't connected to Primitive yet. Would you like me to start the one-time GitHub connection now?" Wait for the user's answer. If they approve, run \`npx --yes @primitive.ai/prim github connect\`, drive the browser-based GitHub App workflow, report its actual outcome concisely, and resume work. If they decline or the connection does not complete, continue without asking again in this session. Do not use owner/admin escalation or capability-loss warnings.`;
+}
+async function claudeRepositoryBinding(cwd, activeProject) {
+  const root = activeProject?.root ?? gitToplevel(cwd);
+  if (!root || !githubRepositoryFullName(root)) return void 0;
+  if (activeProject) return activeProject.binding;
+  try {
+    return await resolveRepositoryBinding(root, {
+      signal: AbortSignal.timeout(REPOSITORY_BIND_TIMEOUT_MS),
+      quietRefresh: true
+    });
+  } catch {
+    return void 0;
+  }
+}
 async function processSessionStart(raw, agent, feedbackSignal) {
   let envelope;
   try {
@@ -11161,9 +11184,12 @@ async function processSessionStart(raw, agent, feedbackSignal) {
   let projectRoot = null;
   let active = false;
   let skillState = { installed: 0, refreshed: 0 };
+  let claudeBinding;
   if (agent === "claude_code") {
-    projectRoot = await activeProjectRoot(cwd);
+    const activeProject = await activeProjectRoot(cwd);
+    projectRoot = activeProject?.root ?? null;
     active = projectRoot !== null;
+    claudeBinding = await claudeRepositoryBinding(cwd, activeProject);
     try {
       skillState = await refreshClaudePlugins(
         cwd,
@@ -11191,7 +11217,7 @@ async function processSessionStart(raw, agent, feedbackSignal) {
       });
     } catch {
     }
-    projectRoot = await activeProjectRoot(cwd);
+    projectRoot = (await activeProjectRoot(cwd))?.root ?? null;
     active = projectRoot !== null;
     let proactive = false;
     try {
@@ -11207,7 +11233,10 @@ async function processSessionStart(raw, agent, feedbackSignal) {
     };
   }
   if (agent === "claude_code") {
-    const additionalContext = active && skillState.installed > 0 ? PRIM_SKILL_REMINDER : void 0;
+    const additionalContext = [
+      claudeBinding ? claudeBindingReminder(claudeBinding) : void 0,
+      active && skillState.installed > 0 ? PRIM_SKILL_REMINDER : void 0
+    ].filter((value) => value !== void 0).join("\n\n");
     const reloadSkills = skillState.refreshed > 0;
     if (active) {
       const identity = getOrCreateWorkspaceId(cwd);