@warren-dean/code-kit 0.22.0 → 0.22.1

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
       "name": "code-kit",
       "source": "./",
       "description": "Keeps AI coding agents inside your project's rules, from idea to merged code: spec design, lanes, layer rules, protected paths with an approval log, spec-check and design gates, proof-before-finish checks, dispatch, review, build status and CI verification, configured per project from its docs",
-      "version": "0.22.0",
+      "version": "0.22.1",
       "category": "development",
       "tags": ["guardrails", "architecture", "lanes", "layers", "spec-driven", "ci", "multi-agent"],
       "license": "MIT"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "code-kit",
-  "version": "0.22.0",
+  "version": "0.22.1",
   "description": "Keeps AI coding agents inside your project's rules, from idea to merged code: spec design, lanes, layer rules, protected paths with an approval log, spec-check and design gates, proof-before-finish checks, dispatch, review, build status and CI verification, configured per project from its docs",
   "author": {
     "name": "Warren Langeveldt"

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 What changed in each release of code-kit, newest first. Versions follow the plugin manifest and the npm package `@warren-dean/code-kit`. Each release is also on [GitHub Releases](https://github.com/warrendeanlangeveldt/code-kit/releases).
 
+## 0.22.1 (2026-10-23)
+
+For projects on the hosted team provider, which is in preview:
+
+- A session shows as live only when its own link to the provider is up. Before, one session's link made every session on the checkout look live.
+- `code-kit team provider status` checks each part of the setup: this machine's sign-in, the config in the checkout and on the base branch, the MCP server, whether the provider sees the repository, and whether this session is linked. Each part that fails says what to do, and the last line says whether the repository is connected.
+- `/code-kit:team-init` links the session it runs in once it connects, so there's no restart.
+
 ## 0.22.0 (2026-10-23)
 
 A team's roles are settled by default: the lead decides what's technical, a lane runs one story at a time, and several sessions can work one project without their decisions crossing.

package/bin/code-kit.mjs

@@ -191,6 +191,8 @@ const via = option('--via');
 const sessionId = option('--session');
 // SESS-1: the session calling, as Claude Code tells every command an agent runs, unless --session says.
 const callerSession = sessionId ?? process.env.CLAUDE_CODE_SESSION_ID ?? null;
+// A provider's command hears which session is calling, for that session's own live link.
+if (callerSession) process.env.CODE_KIT_SESSION = callerSession;
 const minutesGiven = option('--minutes');
 const answerGiven = option('--answer');
 const leaseGiven = option('--lease');

package/hooks/lib/adapters/hub/client.mjs

@@ -17,6 +17,7 @@ import {
   chmodSync,
   existsSync,
   mkdirSync,
+  readdirSync,
   readFileSync,
   renameSync,
   statSync,
@@ -104,6 +105,40 @@ const mainRoot = (cwd) => {
 const stateDir = (root) => join(mainRoot(root), '.claude', 'state');
 const hubDown = (root) => readJson(join(stateDir(root), 'hub-down.json'), {});
 
+/** The Claude Code session calling: code-kit passes it on, and Claude Code tells every command an agent runs. */
+const sessionOf = () =>
+  String(process.env.CODE_KIT_SESSION ?? process.env.CLAUDE_CODE_SESSION_ID ?? '').replace(
+    /[^\w-]/g,
+    '',
+  ) || null;
+const streamFileOf = (root, session) => join(stateDir(root), `hub-stream-${session}.json`);
+
+/**
+ * A session's live link: up while its daemon runs and its event stream is connected. Each session holds
+ * its own, so one session's link never makes another look live.
+ */
+function linkOf(root, session) {
+  const daemon = readJson(join(stateDir(root), `hub-daemon-${session}.json`));
+  const stream = readJson(streamFileOf(root, session), {});
+  return {
+    up: Boolean(daemon?.pid && alive(daemon.pid) && stream.connected),
+    why: stream.why ?? null,
+  };
+}
+
+/** The sessions on this checkout whose live link is up. */
+function linkedSessions(root) {
+  let names = [];
+  try {
+    names = readdirSync(stateDir(root));
+  } catch {
+    // no state yet
+  }
+  return names
+    .map((n) => n.match(/^hub-daemon-([\w-]+)\.json$/)?.[1])
+    .filter((s) => s && linkOf(root, s).up);
+}
+
 // --- talking to the hub ------------------------------------------------------------------------
 
 async function hub(method, path, body, { timeoutMs = 15_000 } = {}) {
@@ -153,8 +188,7 @@ export async function provide(op, input, root = process.cwd()) {
   // The daemon keeps the state fresh from the stream: read it from disk unless asked for fresh.
   if (op === 'state' && !input.fresh) {
     const kept = readJson(join(stateDir(root), 'team.json'));
-    const live = readJson(join(stateDir(root), 'hub-stream.json'), {});
-    if (kept?.hub && live.connected && Date.now() - Date.parse(kept.at) < 5 * 60_000)
+    if (kept?.hub && linkedSessions(root).length && Date.now() - Date.parse(kept.at) < 5 * 60_000)
       return named(kept, root);
   }
   const { team: _team, ...body } = input;
@@ -189,20 +223,23 @@ export async function provide(op, input, root = process.cwd()) {
 }
 
 /**
- * The state names what coordinates the team, for code-kit's Team pane: the hub, whether this session's
- * stream is live, and who this machine is signed in as.
+ * The state names what coordinates the team, for code-kit's Team pane: the hub, whether the calling
+ * session's own link is live (any session's, when no session is calling), and who this machine is
+ * signed in as.
  */
 function named(state, root) {
-  const live = readJson(join(stateDir(root), 'hub-stream.json'), {});
+  const session = sessionOf();
+  const link = session ? linkOf(root, session) : { up: linkedSessions(root).length > 0 };
   return {
     ...state,
     provider: {
       name: 'code-kit hub',
-      live: Boolean(live.connected),
+      live: link.up,
       account: credentials()?.login ?? null,
-      detail: live.connected
+      detail: link.up
         ? 'claims, leases, intents and presence as they happen; every push checked for drift'
-        : (live.why ?? 'not connected to its live updates; read on each refresh'),
+        : (link.why ??
+          "this session has no live link, so the team's state is read on each refresh; a session links as it starts"),
     },
   };
 }
@@ -449,6 +486,132 @@ async function connect(root) {
   console.log(
     `This repository now coordinates through the hub (${state.claims.length} claims, ${state.intents.length} open intents). Commit .claude/code-kit.json and .mcp.json so the team does too.`,
   );
+  // The session that ran connect links now, rather than at its next start.
+  const session = sessionOf();
+  if (session) {
+    startDaemon(root, session, claudeOf(), url);
+    console.log(
+      'This session is linked to the hub now; other sessions link as they start, or run connect in them.',
+    );
+  }
+}
+
+/** The Claude Code process this command runs under, for the link to end with it; null when there's none. */
+function claudeOf() {
+  let pid = process.ppid;
+  for (let i = 0; i < 8 && pid > 1; i += 1) {
+    const line = psOf(pid);
+    if (!line) return null;
+    if (/(^|\/)claude(\s|$)/.test(line.command)) return pid;
+    pid = line.ppid;
+  }
+  return null;
+}
+function psOf(pid) {
+  try {
+    const out = execFileSync('ps', ['-o', 'ppid=,command=', '-p', String(pid)], {
+      encoding: 'utf8',
+    }).trim();
+    const m = out.match(/^(\d+)\s+(.*)$/);
+    return m ? { ppid: Number(m[1]), command: m[2] } : null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * `team provider status`: whether this repository is connected to the hub, one check a line, each failing
+ * one saying what to do, then the answer. Connected means this machine is signed in, the config here and
+ * on the base branch name the hub, and the hub can see the repository with nothing left to set up; live
+ * means the calling session's own link is up. True when connected.
+ */
+async function status(root) {
+  const lines = [];
+  const check = (ok, text) => (lines.push(`  ${ok ? '✓' : '✗'} ${text}`), ok);
+  const repo = repoOf(originOf(root));
+  const cred = credentials();
+  const url = (() => {
+    try {
+      return hubUrl();
+    } catch {
+      return null;
+    }
+  })();
+  const names = (config) => Boolean(url) && config?.team?.provider?.hub?.replace(/\/$/, '') === url;
+  const signed = check(
+    Boolean(cred?.token),
+    cred?.token
+      ? `this machine is signed in as ${cred.login}`
+      : "this machine isn't signed in: run /code-kit:team-init (it signs in through GitHub)",
+  );
+  const here = check(
+    names(readJson(join(root, '.claude', 'code-kit.json'))),
+    names(readJson(join(root, '.claude', 'code-kit.json')))
+      ? 'the config here names the hub'
+      : 'the config here doesn\'t name the hub: set "team": { "provider": { "hub": "' +
+          (url ?? '<the hub>') +
+          '" } } in .claude/code-kit.json',
+  );
+  const base =
+    git(root, 'symbolic-ref', '--short', 'refs/remotes/origin/HEAD') ??
+    (git(root, 'rev-parse', '--verify', '-q', 'origin/main') ? 'origin/main' : null);
+  const committed = (() => {
+    if (!base) return false;
+    try {
+      return names(JSON.parse(git(root, 'show', `${base}:.claude/code-kit.json`) ?? ''));
+    } catch {
+      return false;
+    }
+  })();
+  check(
+    committed,
+    committed
+      ? `${base}'s config names the hub, so the team's sessions use it`
+      : `${base ?? 'the base branch'}'s config doesn't name the hub yet (as last fetched): commit the team section and merge it, so the hub knows the tech lead and every teammate's session uses it`,
+  );
+  const mcp = readJson(join(root, '.mcp.json'), {})?.mcpServers?.['code-kit-hub'];
+  check(
+    Boolean(url) && mcp?.url === `${url}/mcp`,
+    mcp
+      ? "the project's MCP servers include the hub's"
+      : "the project's MCP servers don't include the hub's: run /code-kit:team-init, and commit .mcp.json",
+  );
+  let seen = false;
+  if (signed && repo && url) {
+    const state = await provide('state', { fresh: true }, root);
+    const setup = Array.isArray(state.setup) ? state.setup : [];
+    seen = check(
+      !state.unreachable && state.ok !== false,
+      state.unreachable || state.ok === false
+        ? `the hub can't use ${repo}: ${state.why}`
+        : `the hub sees ${repo}`,
+    );
+    // What the hub says is left to set up doesn't stop the connection: it's shown, not failed.
+    for (const line of seen ? setup : []) lines.push(`  ! ${line}`);
+  } else if (!repo)
+    check(false, "this repository has no GitHub origin, so the hub can't be used here");
+  const session = sessionOf();
+  const linked = linkedSessions(root);
+  const live = session ? linkOf(root, session).up : linked.length > 0;
+  check(
+    live,
+    session
+      ? live
+        ? 'this session is linked: claims, intents and presence arrive as they happen'
+        : "this session isn't linked yet: run /code-kit:team-init, or start a new session, once the checks above pass"
+      : `${linked.length} session${linked.length === 1 ? '' : 's'} on this checkout linked`,
+  );
+  const connected = signed && here && committed && seen;
+  console.log(`code-kit hub${url ? ` (${url})` : ''}${repo ? `, for ${repo}` : ''}:`);
+  for (const line of lines) console.log(line);
+  console.log(
+    connected
+      ? live || !session
+        ? 'Connected.'
+        : "Connected, but this session isn't linked yet."
+      : 'Not connected yet: fix each ✗ above, in order.',
+  );
+  return connected;
 }
 
 // --- the daemon (HUB-5): the stream, the team's state on disk, presence --------------------------
@@ -457,7 +620,7 @@ async function daemon({ root, session, watch }) {
   const dir = stateDir(root);
   const repo = repoOf(originOf(root));
   if (!repo || !credentials()?.token) return;
-  const streamFile = join(dir, 'hub-stream.json');
+  const streamFile = streamFileOf(root, session);
   const eventsFile = join(dir, 'team-events.jsonl');
   writeJson(join(dir, `hub-daemon-${session}.json`), { pid: process.pid, started: Date.now() });
   let lastId = readJson(streamFile, {}).lastId ?? 0;
@@ -498,10 +661,10 @@ async function daemon({ root, session, watch }) {
     stopping = true;
     clearInterval(tick);
     await hub('POST', `/v1/repos/${repo}/leave`, { session }, { timeoutMs: 3000 }).catch(() => {});
-    writeJson(streamFile, { lastId, connected: false });
-    try {
-      unlinkSync(join(dir, `hub-daemon-${session}.json`));
-    } catch {}
+    for (const file of [streamFile, join(dir, `hub-daemon-${session}.json`)])
+      try {
+        unlinkSync(file);
+      } catch {}
     process.exit(0);
   };
   process.on('SIGTERM', stop);
@@ -670,18 +833,7 @@ async function main(argv) {
     console.log('Signed out of code-kit hub on this machine.');
     return 0;
   }
-  if (cmd === 'status') {
-    const cred = credentials();
-    console.log(
-      cred?.token ? `Signed in to ${cred.url} as ${cred.login}.` : `Not signed in: run ${SIGN_IN}.`,
-    );
-    const repo = repoOf(originOf(process.cwd()));
-    if (repo && cred?.token) {
-      const live = readJson(join(stateDir(process.cwd()), 'hub-stream.json'), {});
-      console.log(`${repo}: ${live.connected ? 'live' : (live.why ?? 'not connected')}`);
-    }
-    return 0;
-  }
+  if (cmd === 'status') return status(process.cwd()).then((ok) => (ok ? 0 : 1));
   if (cmd === 'connect') return connect(process.cwd()).then(() => 0);
   if (cmd === 'drift-model') {
     const choice = args[0];

package/hooks/mod/register.mjs

@@ -325,7 +325,7 @@ export function register(on) {
             ? ((await json('adapters', '--session', session)) ?? [])
             : [];
         // TEAM-7: the team's claims, intents and pull requests, where the project is a team's.
-        const team = valid && check.team ? await json('team') : null;
+        const team = valid && check.team ? await json('team', '--session', session) : null;
         // ASK-2: the lead's questions waiting for the person; REPORT-3: bug reports waiting to be sent.
         const questions = !valid
           ? []

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warren-dean/code-kit",
-  "version": "0.22.0",
+  "version": "0.22.1",
   "description": "Keeps AI coding agents inside your project's rules: lanes, layer rules, protected paths and proof before finish, enforced by Claude Code hooks and in CI",
   "license": "MIT",
   "author": "Warren Langeveldt",

package/skills/team-init/SKILL.md

@@ -48,7 +48,7 @@ Each is optional; ask, and do only what they want:
 
 - **CODEOWNERS** (TEAM-11): `team codeowners --write` writes `.github/CODEOWNERS` from the config, so GitHub asks the tech lead and lane owners to review. Then they require code owners' review in a ruleset on the protected branch.
 - **A Project board** (TEAM-12): with a GitHub Project's owner and number, add `"board": { "owner": "<user or organisation>", "number": <n> }` to `team` in the config; the mod then mirrors the plan onto it.
-- **A hosted team provider, only when the config already names one:** hosted providers are in preview, so never offer or suggest one. When `team.provider` is `{ "<name>": "<https address>" }` (set by hand), connect this machine: run `team provider status`; if it isn't signed in, run `team provider signin` in the background, give the person the code and the GitHub address it prints, and wait (they enter the code in their browser; never ask for a password or token); then `team provider connect`, which checks the provider can see the repository and adds its MCP server to `.mcp.json`. Commit `.mcp.json` with the config.
+- **A hosted team provider, only when the config already names one:** hosted providers are in preview, so never offer or suggest one. When `team.provider` is `{ "<name>": "<https address>" }` (set by hand), connect this machine: run `team provider status`; if it isn't signed in, run `team provider signin` in the background, give the person the code and the GitHub address it prints, and wait (they enter the code in their browser; never ask for a password or token); then `team provider connect`, which checks the provider can see the repository, adds its MCP server to `.mcp.json` and links this session (no restart). Commit `.mcp.json` with the config, on the base branch: the hub reads the team from there, and a session only links where the checked-out config names the hub. Then run `team provider status` and give the person its last line; for each ✗, say what it asks for.
 
 ## 5. Finish