@primitive.ai/prim 0.1.0-alpha.90 → 0.1.0-alpha.91

package/dist/{chunk-YWO7O6QG.js → chunk-FBAYCS3X.js}

@@ -1,11 +1,11 @@
 import {
   getSiteUrl
-} from "./chunk-Z7YPFWAZ.js";
+} from "./chunk-PCVGBE5B.js";
 import {
   jwtOrganizationId,
   primConfigDirectory,
   resolveAuthCredential
-} from "./chunk-3EEFL6NJ.js";
+} from "./chunk-67VNLLBN.js";
 
 // src/journal.ts
 import {

package/dist/{chunk-R26A7TWY.js → chunk-FKXFUUWJ.js}

@@ -1,6 +1,6 @@
 import {
   scheduleCollectScopeRefresh
-} from "./chunk-MAZWKJGL.js";
+} from "./chunk-M6RIJVRE.js";
 
 // src/ingest-response.ts
 var IngestAcknowledgementError = class extends Error {

package/dist/{chunk-C7T7B45R.js → chunk-FOLKHXLJ.js}

@@ -1,21 +1,26 @@
+import {
+  isValidRepoSyncId,
+  setRepoSyncId,
+  setRepositoryBindingState
+} from "./chunk-M6RIJVRE.js";
+import {
+  HttpError,
+  getClient
+} from "./chunk-PCVGBE5B.js";
 import {
   binFile,
   compareSemver,
+  cursorConfigDirectory,
   pinnedNpxCommand
-} from "./chunk-PMRDE2DA.js";
+} from "./chunk-EWZMDD44.js";
 import {
   gitToplevel,
-  githubRepositoryFullName,
-  isValidRepoSyncId,
-  setRepoSyncId,
-  setRepositoryBindingState
-} from "./chunk-MAZWKJGL.js";
+  githubRepositoryFullName
+} from "./chunk-H4UNYFUC.js";
 import {
-  HttpError,
   atomicWriteFile,
-  getClient,
   withFileLock
-} from "./chunk-Z7YPFWAZ.js";
+} from "./chunk-67VNLLBN.js";
 
 // src/lib/bin-cache.ts
 import { chmodSync, mkdirSync } from "fs";
@@ -51,6 +56,7 @@ function warmBinCache() {
 }
 
 // src/commands/skill.ts
+import { createHash as createHash2 } from "crypto";
 import {
   constants as constants2,
   closeSync as closeSync2,
@@ -59,7 +65,10 @@ import {
   lstatSync as lstatSync2,
   openSync as openSync2,
   readFileSync as readFileSync2,
-  readSync as readSync2
+  readSync as readSync2,
+  readdirSync as readdirSync2,
+  rmdirSync as rmdirSync2,
+  unlinkSync
 } from "fs";
 import { homedir as homedir3 } from "os";
 import { dirname as dirname2, join as join3, resolve as resolve2 } from "path";
@@ -413,6 +422,107 @@ var AGENT_TARGET = {
   codex: "AGENTS.md",
   hermes: ".hermes.md"
 };
+var CURSOR_SKILL_OWNER = "@primitive.ai/prim";
+var CURSOR_SKILL_MANIFEST = ".prim-owned.json";
+function sha256(content) {
+  return createHash2("sha256").update(content).digest("hex");
+}
+function cursorSkillDirectory(cwd, scope) {
+  const base = scope === "user" ? cursorConfigDirectory() : gitToplevel(cwd) ?? cwd;
+  return join3(base, scope === "user" ? "skills" : ".cursor/skills", "prim");
+}
+function cursorSkillPaths(cwd, scope) {
+  const directory = cursorSkillDirectory(cwd, scope);
+  return {
+    directory,
+    skill: join3(directory, "SKILL.md"),
+    manifest: join3(directory, CURSOR_SKILL_MANIFEST)
+  };
+}
+function readCursorSkillManifest(path) {
+  try {
+    const value = JSON.parse(readFileSync2(path, "utf8"));
+    if (!value || typeof value !== "object" || Array.isArray(value)) return;
+    const record = value;
+    if (record.version !== 1 || record.owner !== CURSOR_SKILL_OWNER || typeof record.contentSha256 !== "string" || !/^[0-9a-f]{64}$/u.test(record.contentSha256)) {
+      return;
+    }
+    return record;
+  } catch {
+    return;
+  }
+}
+function cursorSkillStatus(cwd, scope) {
+  const paths = cursorSkillPaths(cwd, scope);
+  const manifest = readCursorSkillManifest(paths.manifest);
+  const content = existsSync2(paths.skill) ? readFileSync2(paths.skill, "utf8") : void 0;
+  const owned = manifest !== void 0;
+  const installed = owned && content !== void 0 && sha256(content) === manifest.contentSha256;
+  return {
+    installed,
+    owned,
+    edited: owned && content !== void 0 && !installed,
+    target: paths.skill
+  };
+}
+function validCursorSkillScope(scope) {
+  if (scope === void 0 || scope === "project" || scope === "user") return true;
+  console.error(`Unknown --scope "${scope}" (expected user or project)`);
+  return false;
+}
+function installCursorSkill(cwd, opts) {
+  const paths = cursorSkillPaths(cwd, opts.scope);
+  const status = cursorSkillStatus(cwd, opts.scope);
+  const manifestExists = existsSync2(paths.manifest);
+  const skillExists = existsSync2(paths.skill);
+  if (manifestExists && !status.owned || !manifestExists && skillExists || status.edited) {
+    console.error(`Refusing to overwrite a foreign or edited Cursor skill at ${paths.skill}`);
+    return 1;
+  }
+  const content = loadSkill();
+  const manifest = {
+    version: 1,
+    owner: CURSOR_SKILL_OWNER,
+    contentSha256: sha256(content)
+  };
+  if (status.installed && readFileSync2(paths.skill, "utf8") === content) {
+    console.log(`No changes \u2014 Cursor skill already up to date at ${paths.skill}`);
+    return 0;
+  }
+  if (opts.dryRun) {
+    const existing = skillExists ? readFileSync2(paths.skill, "utf8") : "";
+    process.stdout.write(createPatch(paths.skill, existing, content, "current", "proposed"));
+    return 0;
+  }
+  atomicWriteFile(paths.skill, content, { ensureParent: true });
+  atomicWriteFile(paths.manifest, `${JSON.stringify(manifest, null, 2)}
+`, { ensureParent: true });
+  console.log(`Installed Cursor skill at ${paths.skill}`);
+  return 0;
+}
+function uninstallCursorSkill(cwd, scope) {
+  const paths = cursorSkillPaths(cwd, scope);
+  const status = cursorSkillStatus(cwd, scope);
+  if (!status.owned) {
+    console.log(`No Primitive-owned Cursor skill at ${paths.skill}`);
+    return 0;
+  }
+  if (status.edited) {
+    console.error(`Refusing to remove an edited Cursor skill at ${paths.skill}`);
+    return 1;
+  }
+  if (existsSync2(paths.skill)) unlinkSync(paths.skill);
+  if (existsSync2(paths.manifest)) unlinkSync(paths.manifest);
+  try {
+    if (readdirSync2(paths.directory).length === 0) rmdirSync2(paths.directory);
+  } catch {
+  }
+  console.log(`Removed Primitive-owned Cursor skill from ${paths.skill}`);
+  return 0;
+}
+function hasUsableCursorSkill(projectRoot) {
+  return cursorSkillStatus(projectRoot, "project").installed || cursorSkillStatus(projectRoot, "user").installed;
+}
 function userTargetFor(agent) {
   if (agent === "claude") return join3(homedir3(), ".claude", "CLAUDE.md");
   if (agent === "codex") return join3(homedir3(), ".codex", "AGENTS.md");
@@ -468,18 +578,18 @@ function resolveTarget(cwd, opts) {
   if (opts.target) return resolve2(cwd, opts.target);
   if (opts.scope === "user") {
     if (!opts.agent) {
-      console.error("--scope user requires --agent (claude, codex, or hermes)");
+      console.error("--scope user requires --agent (claude, codex, cursor, or hermes)");
       return null;
     }
     const userTarget = userTargetFor(opts.agent);
     if (userTarget) return userTarget;
-    console.error(`Unknown --agent "${opts.agent}" (expected claude, codex, or hermes)`);
+    console.error(`Unknown --agent "${opts.agent}" (expected claude, codex, cursor, or hermes)`);
     return null;
   }
   if (opts.agent) {
     const mapped = AGENT_TARGET[opts.agent];
     if (typeof mapped === "string") return resolve2(cwd, mapped);
-    console.error(`Unknown --agent "${opts.agent}" (expected claude, codex, or hermes)`);
+    console.error(`Unknown --agent "${opts.agent}" (expected claude, codex, cursor, or hermes)`);
     return null;
   }
   const matches = detectTargets(cwd);
@@ -491,6 +601,10 @@ function resolveTarget(cwd, opts) {
 }
 function runInstall(cwd, opts) {
   if (opts.agent === "claude" && !opts.target) return installClaudePlugin(cwd, opts);
+  if (opts.agent === "cursor" && !opts.target) {
+    if (!validCursorSkillScope(opts.scope)) return 1;
+    return installCursorSkill(cwd, opts);
+  }
   const target = resolveTarget(cwd, opts);
   if (target === null) return 1;
   const existing = existsSync2(target) ? readFileSync2(target, "utf-8") : "";
@@ -511,6 +625,10 @@ function runInstall(cwd, opts) {
 }
 function runUninstall(cwd, opts) {
   if (opts.agent === "claude" && !opts.target) return uninstallClaudePlugin(cwd, opts);
+  if (opts.agent === "cursor" && !opts.target) {
+    if (!validCursorSkillScope(opts.scope)) return 1;
+    return uninstallCursorSkill(cwd, opts.scope);
+  }
   const target = resolveTarget(cwd, opts);
   if (target === null) return 1;
   if (!existsSync2(target)) {
@@ -529,6 +647,16 @@ function runUninstall(cwd, opts) {
 }
 function runStatus(cwd, opts) {
   if (opts.agent === "claude" && !opts.target) return statusClaudePlugin(cwd, opts);
+  if (opts.agent === "cursor" && !opts.target) {
+    if (!validCursorSkillScope(opts.scope)) return 1;
+    const status = cursorSkillStatus(cwd, opts.scope);
+    if (opts.json) printJson(status);
+    else
+      console.log(
+        status.installed ? `Primitive Cursor skill installed at ${status.target}` : `No intact Primitive-owned Cursor skill at ${status.target}`
+      );
+    return status.installed ? 0 : 1;
+  }
   const target = resolveTarget(cwd, opts);
   if (target === null) return 1;
   const fileExists = existsSync2(target);
@@ -554,7 +682,7 @@ function runStatus(cwd, opts) {
 }
 function registerSkillCommands(program) {
   const skill = program.command("skill").description("Manage the prim skill in your project rules file");
-  skill.command("install").description("Install the prim skill block into your project rules file").option("--target <path>", "Path to the rules file (overrides auto-detection)").option("--agent <agent>", "claude, codex, or hermes (selects the default rules file)").option("--scope <scope>", "project (default, this repo) or user (machine-global \u2014 every repo)").option("--dry-run", "Print a unified diff without writing").action((opts) => {
+  skill.command("install").description("Install the prim skill block into your project rules file").option("--target <path>", "Path to the rules file (overrides auto-detection)").option("--agent <agent>", "claude, codex, cursor, or hermes").option("--scope <scope>", "project (default, this repo) or user (machine-global \u2014 every repo)").option("--dry-run", "Print a unified diff without writing").action((opts) => {
     try {
       process.exit(runInstall(process.cwd(), opts));
     } catch (err) {
@@ -562,17 +690,17 @@ function registerSkillCommands(program) {
       process.exit(2);
     }
   });
-  skill.command("uninstall").description("Remove the prim skill block from your project rules file").option("--target <path>", "Path to the rules file (overrides auto-detection)").option("--agent <agent>", "claude, codex, or hermes (selects the default rules file)").option("--scope <scope>", "project (default, this repo) or user (machine-global \u2014 every repo)").action((opts) => {
+  skill.command("uninstall").description("Remove the prim skill block from your project rules file").option("--target <path>", "Path to the rules file (overrides auto-detection)").option("--agent <agent>", "claude, codex, cursor, or hermes").option("--scope <scope>", "project (default, this repo) or user (machine-global \u2014 every repo)").action((opts) => {
     process.exit(runUninstall(process.cwd(), opts));
   });
-  skill.command("status").description("Report whether the prim skill block is installed").option("--target <path>", "Path to the rules file (overrides auto-detection)").option("--agent <agent>", "claude, codex, or hermes (selects the default rules file)").option("--scope <scope>", "project (default, this repo) or user (machine-global \u2014 every repo)").option("--json", "Output as JSON").action((opts) => {
+  skill.command("status").description("Report whether the prim skill block is installed").option("--target <path>", "Path to the rules file (overrides auto-detection)").option("--agent <agent>", "claude, codex, cursor, or hermes").option("--scope <scope>", "project (default, this repo) or user (machine-global \u2014 every repo)").option("--json", "Output as JSON").action((opts) => {
     process.exit(runStatus(process.cwd(), opts));
   });
 }
 
 // src/lib/post-commit-hook.ts
 import { execFileSync } from "child_process";
-import { createHash as createHash2, randomUUID } from "crypto";
+import { createHash as createHash3, randomUUID } from "crypto";
 import {
   constants as constants3,
   closeSync as closeSync3,
@@ -584,7 +712,7 @@ import {
   openSync as openSync3,
   readFileSync as readFileSync3,
   renameSync,
-  unlinkSync,
+  unlinkSync as unlinkSync2,
   writeFileSync
 } from "fs";
 import { basename, dirname as dirname3, isAbsolute as isAbsolute2, resolve as resolve3 } from "path";
@@ -838,7 +966,7 @@ function assertUsableHuskyDispatcher(target, spec) {
   const huskyRuntime = resolve3(dirname3(target.dispatcherPath), "h");
   const runtimeStat = assertSafeFile(huskyRuntime, spec);
   const runtime = runtimeStat ? readHookFile(huskyRuntime) : void 0;
-  const runtimeHash = runtime ? createHash2("sha256").update(runtime).digest("hex") : void 0;
+  const runtimeHash = runtime ? createHash3("sha256").update(runtime).digest("hex") : void 0;
   if (!runtimeHash || !HUSKY_V9_RUNTIME_HASHES.has(runtimeHash)) {
     throw new Error(`unrecognized Husky v9 hook runtime: ${huskyRuntime}`);
   }
@@ -1018,7 +1146,7 @@ function rewriteHookAtomically(path, next, expected, spec, stat) {
       }
     }
     try {
-      unlinkSync(temporary);
+      unlinkSync2(temporary);
     } catch (error) {
       if (errorCode(error) !== "ENOENT") {
       }
@@ -1027,7 +1155,7 @@ function rewriteHookAtomically(path, next, expected, spec, stat) {
 }
 function unlinkHookUnchanged(path, expected, stat, spec) {
   assertTargetUnchanged(path, expected, spec, stat);
-  unlinkSync(path);
+  unlinkSync2(path);
 }
 function ensureEffectivePostCommitHook(cwd = process.cwd()) {
   const target = resolveEffectivePostCommitHook(cwd);
@@ -1396,5 +1524,6 @@ export {
   printJson,
   refreshClaudePlugins,
   hasUsableCodexGuidance,
+  hasUsableCursorSkill,
   registerSkillCommands
 };

package/dist/chunk-H4UNYFUC.js

@@ -0,0 +1,196 @@
+// src/lib/git.ts
+import { execFileSync } from "child_process";
+import { createHash } from "crypto";
+import { lstatSync, realpathSync } from "fs";
+import { basename, dirname, isAbsolute, relative, resolve, sep } from "path";
+var GIT_TIMEOUT_MS = 1e3;
+var GITHUB_OWNER_PATTERN = /^(?![A-Za-z0-9-]*--)[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/u;
+var GITHUB_REPOSITORY_PATTERN = /^[A-Za-z0-9._-]{1,100}$/u;
+function gitToplevel(cwd) {
+  try {
+    return execFileSync("git", ["rev-parse", "--show-toplevel"], {
+      cwd,
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: GIT_TIMEOUT_MS
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function gitValue(cwd, args) {
+  try {
+    const value = execFileSync("git", args, {
+      cwd,
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: GIT_TIMEOUT_MS
+    }).trim();
+    return value || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function currentBranch(cwd) {
+  return gitValue(cwd, ["symbolic-ref", "--quiet", "--short", "HEAD"]);
+}
+function githubRepositoryFullName(cwd) {
+  const remote = gitValue(cwd, ["config", "--get", "remote.origin.url"]);
+  if (!remote || [...remote].some((char) => char < " " || char === "\x7F")) return null;
+  const match = /^(?:git@github\.com:([^?#]+)|(?:https|ssh):\/\/(?:[^/@]+@)?github\.com(?::\d+)?\/([^?#]+))$/i.exec(
+    remote
+  );
+  const path = match?.[1] ?? match?.[2];
+  if (!path) return null;
+  const parts = path.replace(/^\/+|\/+$/g, "").replace(/\.git$/i, "").split("/");
+  if (parts.length !== 2 || !GITHUB_OWNER_PATTERN.test(parts[0] ?? "") || !GITHUB_REPOSITORY_PATTERN.test(parts[1] ?? "")) {
+    return null;
+  }
+  return `${parts[0]}/${parts[1]}`;
+}
+function canonicalGitRoot(cwd) {
+  try {
+    const top = gitToplevel(cwd);
+    return top ? realpathSync.native(top) : null;
+  } catch {
+    return null;
+  }
+}
+function normalizeOriginRemote(remote) {
+  const value = remote.trim();
+  if (!value) return void 0;
+  const scp = !value.includes("://") ? /^(?:[^@/\s]+@)?(?<host>[^:/\s]+):(?<path>.+)$/.exec(value)?.groups : void 0;
+  if (scp?.host && scp.path) {
+    const path = scp.path.replace(/^\/+|\/+$/g, "").replace(/\.git$/i, "");
+    return path ? `${scp.host.toLowerCase()}/${path}` : void 0;
+  }
+  try {
+    const url = new URL(value);
+    url.username = "";
+    url.password = "";
+    url.search = "";
+    url.hash = "";
+    const path = url.pathname.replace(/^\/+|\/+$/g, "").replace(/\.git$/i, "");
+    if (url.host && path) return `${url.host.toLowerCase()}/${path}`;
+    return void 0;
+  } catch {
+    return void 0;
+  }
+}
+function opaqueRepoKey(source, value) {
+  return `repo_v1_${createHash("sha256").update(`${source}\0${value}`).digest("hex")}`;
+}
+function resolveRepositoryContext(cwd = process.cwd()) {
+  const top = gitToplevel(cwd);
+  if (!top) return null;
+  let repoRoot;
+  try {
+    repoRoot = realpathSync.native(top);
+  } catch {
+    repoRoot = resolve(top);
+  }
+  const origin = gitValue(repoRoot, ["config", "--get", "remote.origin.url"]);
+  const repoFullName = githubRepositoryFullName(repoRoot) ?? void 0;
+  const normalizedOrigin = origin ? normalizeOriginRemote(origin) : void 0;
+  if (normalizedOrigin) {
+    return {
+      repoRoot,
+      repoKey: opaqueRepoKey("origin", normalizedOrigin),
+      identitySource: "origin",
+      repoFullName
+    };
+  }
+  const roots = gitValue(repoRoot, ["rev-list", "--max-parents=0", "HEAD"])?.split(/\s+/).filter(Boolean).sort();
+  if (roots && roots.length > 0) {
+    return {
+      repoRoot,
+      repoKey: opaqueRepoKey("root_commit", roots.join("\n")),
+      identitySource: "root_commit",
+      repoFullName
+    };
+  }
+  return { repoRoot, repoFullName };
+}
+function nearestExistingAncestor(path) {
+  const suffix = [];
+  let cursor = path;
+  while (true) {
+    try {
+      lstatSync(cursor);
+      break;
+    } catch (error) {
+      const code = typeof error === "object" && error !== null && "code" in error ? error.code : void 0;
+      if (code !== "ENOENT" && code !== "ENOTDIR") return null;
+      const parent = dirname(cursor);
+      if (parent === cursor) return null;
+      suffix.unshift(cursor.slice(parent.length + (parent.endsWith(sep) ? 0 : 1)));
+      cursor = parent;
+    }
+  }
+  try {
+    return { real: realpathSync.native(cursor), suffix };
+  } catch {
+    return null;
+  }
+}
+function canonicalRepositoryPathScoped(filePath, context, baseDir) {
+  if (!filePath || filePath !== filePath.trim() || filePath.includes("\0")) {
+    return { ok: false, reason: "invalid_path" };
+  }
+  const absolute = resolve(baseDir, filePath);
+  const resolved = nearestExistingAncestor(absolute);
+  if (!resolved) return { ok: false, reason: "invalid_path" };
+  const target = resolve(resolved.real, ...resolved.suffix);
+  const rel = relative(context.repoRoot, target);
+  if (!rel || rel === ".") return { ok: false, reason: "invalid_path" };
+  if (isAbsolute(rel) || rel === ".." || rel.startsWith(`..${sep}`)) {
+    return { ok: false, reason: "outside_repository" };
+  }
+  return { ok: true, file: sep === "/" ? rel : rel.split(sep).join("/") };
+}
+function canonicalRepositoryPathLegacy(filePath, cwd, repositoryRoot = canonicalGitRoot(cwd)) {
+  if (!repositoryRoot || !filePath || [...filePath].some((char) => char < " " || char === "\x7F" || "~*?[]{}$`\\".includes(char)))
+    return null;
+  const absolute = resolve(cwd, filePath);
+  let target;
+  try {
+    const stat = lstatSync(absolute);
+    if (!stat.isFile() || stat.isSymbolicLink()) return null;
+    target = realpathSync.native(absolute);
+  } catch (error) {
+    if (!(error instanceof Error) || error.code !== "ENOENT") {
+      return null;
+    }
+    try {
+      const parent = realpathSync.native(dirname(absolute));
+      if (!lstatSync(parent).isDirectory()) return null;
+      target = resolve(parent, basename(absolute));
+    } catch {
+      return null;
+    }
+  }
+  const rel = relative(repositoryRoot, target);
+  if (!rel || isAbsolute(rel) || rel === ".." || rel.startsWith(`..${sep}`)) {
+    return null;
+  }
+  return sep === "/" ? rel : rel.split(sep).join("/");
+}
+function canonicalRepositoryPath(filePath, contextOrCwd, baseDirOrRoot) {
+  if (typeof contextOrCwd === "string") {
+    return canonicalRepositoryPathLegacy(filePath, contextOrCwd, baseDirOrRoot);
+  }
+  return canonicalRepositoryPathScoped(
+    filePath,
+    contextOrCwd,
+    baseDirOrRoot ?? contextOrCwd.repoRoot
+  );
+}
+
+export {
+  gitToplevel,
+  currentBranch,
+  githubRepositoryFullName,
+  canonicalGitRoot,
+  resolveRepositoryContext,
+  canonicalRepositoryPath
+};