imprnt 0.1.2 → 0.1.3-edge.12

package/CLAUDE.md

@@ -166,8 +166,10 @@ Core is the vault + `ingest → recall → check`. Everything else (a task-mirro
 - **Write** single-writer-per-path: a plugin writes only its own folder and **proposes** vault-note changes for `ingest`/you to apply. It never mutates a note. Frontmatter labels are **slug-namespaced** (`whenful.synced`), read-your-own-only. Core ignores unknown keys.
 - **`recall` searches `vault/` only, forever.** Sibling dirs + `raw/` are outside the corpus by construction. A plugin surfaces into search only by **proposing one low-frequency summary note** (the escape hatch).
 - **Behavior plugins** are a separate class: ship a fixed-size fragment the **user wires into the agent's system prompt**. The vault never auto-injects. Remove = delete the wire-in. No referee for conflicting fragments, the user owns composition. (The old system imposed. imprnt composes.)
+- **Harness plugins** are the third class: they customize Claude Code itself, never the vault (guard's PreToolUse hook, the statusline, a skill). The same plugin folder doubles as a **native Claude Code plugin** (`.claude-plugin/plugin.json` + `hooks/` + `skills/`, Anthropic's format) and/or carries **`imp-settings.json`** (the settings keys Claude only takes via config, e.g. `statusLine`, with `${PLUGIN_DIR}` as the plugin's absolute dir). `imp` carries enabled ones into every session it launches: one `--plugin-dir` per native plugin + one merged `--settings`. Stock `claude` stays stock, nothing is ever written to settings files, `plugin rm` undoes everything.
+- **Secrets are env vars at the plugin's edge.** A plugin calling an external service reads its key from an env var named in its README and fails loud when missing. Keys never land in the vault, the plugin folder, or anything committed. No central secret store.
 - **Commands only, no forced daemon.** The user schedules sync. Install/remove is manual (README `## Install` / `## Remove` + `rm -rf`), no registry.
-- **Core ↔ plugin contact = exactly two convention-based aggregators**, both dumb and uniform: `imprnt check --all` globs `plugins/*/check.js` (each plugin's built artifact), runs each with `node`, reads **exit code only**, forwards stdout verbatim, never parses plugin output. `imprnt ingest --apply` files staged notes the plugins drop in `plugins/*/proposed/`. Both discover by filename/dir convention, never by import, never by naming a specific plugin. Fence: core may provide read-only *aggregation* helpers, never write/orchestration. (Not k8s liveness/readiness. Nothing runs, so the only health question is "is the data sound", which is what `check` answers.)
+- **Core ↔ plugin contact = exactly three convention-based aggregators**, all dumb and uniform: `imprnt check --all` globs `plugins/*/check.js` (each plugin's built artifact), runs each with `node`, reads **exit code only**, forwards stdout verbatim, never parses plugin output. `imprnt ingest --apply` files staged notes the plugins drop in `plugins/*/proposed/`. `imp` turns the enable list into launch flags (`--plugin-dir` per native plugin + one merged `--settings`) for the session it spawns. All discover by filename/dir convention, never by import, never by naming a specific plugin. Fence: core may provide read-only *aggregation* helpers, never write/orchestration. (Not k8s liveness/readiness. Nothing runs, so the only health question is "is the data sound", which is what `check` answers.)
 
 ## Out of scope (on purpose)
 No task management. No auto-injected context. No background loop. No self-grading. No MCP/vector/embeddings on the vault. No sensitivity machinery (it's private by being private). **No `out/` zone for deliverables.** A produced artifact (an article, an export) lives in your artifacts dir and a vault note points to it. The vault holds knowledge, not outputs. Every plugin is a self-contained dir you can `rm -rf`. "It belongs" is not a reason to add it. (Plugin-contract out-of-scope list lives in `plugins/README.md`.)

package/README.md

@@ -67,21 +67,6 @@ imprnt init            # scaffold your vault, drop CLAUDE.md (the contract your
 imp                    # open your assistant and talk
 ```
 
-> **Temporarily off npm (June 2026).** The package is unpublished while the installer gets a final
-> polish, so `npm i -g imprnt` 404s right now. Until it returns, install from source (needs
-> [Bun](https://bun.sh) to build):
->
-> ```sh
-> git clone https://github.com/aleksandr-bogdanov/imprnt
-> cd imprnt && bun install && bun run build
-> (cd packages/imprnt && bun run shipdocs)   # stage the CLAUDE.md contract the install ships
-> npm i -g ./packages/imprnt                 # the same imprnt + imp commands, from your clone
-> ```
->
-> The `shipdocs` step is what npm's publish runs for you. From source you run it once by hand so
-> `imprnt init` has the contract to drop. The global install symlinks to your clone, so keep the
-> clone in place.
-
 `imprnt init` scaffolds the vault, writes the `CLAUDE.md` contract that teaches your assistant
 how it works, and registers the folder so `imp` finds it from anywhere. Runs on
 [Node](https://nodejs.org) 18 or newer, driving [Claude Code](https://claude.com/claude-code) as
@@ -127,7 +112,9 @@ asking ("add the anti-slop plugin"), each a separate `imprnt-plugin-*` package:
 | `imprnt-plugin-character` | A voice and standards to write in. "Scribe" is the default you copy and personalize. |
 | `imprnt-plugin-anti-slop` | Rules that keep its prose from reading like AI. |
 | `imprnt-plugin-whenful` | A local mirror of your [Whenful](https://whenful.com) tasks, shown inline at read. |
-| `imprnt-plugin-guard` | A deterministic blocklist for dangerous shell commands. |
+| `imprnt-plugin-guard` | A hook that blocks dangerous shell commands before they run. |
+| `imprnt-plugin-statusline` | A customizable status line: model, branch, context, cost, rate limits, clock. |
+| `imprnt-plugin-telegram` | Your vault from your phone: text a bot, the answer comes from your notes. |
 
 Adding one copies it into your project and wires it into `CLAUDE.local.md`, the per-machine file
 your assistant loads each session. A fresh setup loads zero plugins until you add them. The full

package/dist/cli.js

@@ -153,6 +153,15 @@ function isEnabled(root, name) {
   const prefix = `@plugins/${name}/`;
   return liveImportLines(root).some((l) => l.startsWith(prefix));
 }
+function enabledPluginDirs(root) {
+  const out = [];
+  for (const target of importTargets(root)) {
+    const name = target.match(/^plugins\/([^/]+)\//)?.[1];
+    if (name && !out.includes(name))
+      out.push(name);
+  }
+  return out;
+}
 function addPlugin(root, spec) {
   const invalid = specError(root, spec);
   if (invalid)
@@ -293,7 +302,7 @@ function purgePlugin(projectRoot, name) {
 var OFFICIAL;
 var init_install = __esm(() => {
   init_plugins();
-  OFFICIAL = ["anti-slop", "character", "whenful", "guard"];
+  OFFICIAL = ["anti-slop", "character", "whenful", "guard", "statusline", "telegram"];
 });
 
 // scripts/lib/roots.ts
@@ -607,6 +616,49 @@ function pointerFragment(pkgRoot, vaultProject) {
   const tpl = readFileSync6(join7(pkgRoot, "templates", "pointer.md"), "utf8");
   return tpl.replaceAll("{{VAULT_PROJECT}}", () => vaultProject);
 }
+function substitutePluginDir(value, dir) {
+  if (typeof value === "string")
+    return value.replaceAll("${PLUGIN_DIR}", dir).replaceAll("${CLAUDE_PLUGIN_ROOT}", dir);
+  if (Array.isArray(value))
+    return value.map((v) => substitutePluginDir(v, dir));
+  if (value && typeof value === "object") {
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, substitutePluginDir(v, dir)]));
+  }
+  return value;
+}
+function isPlainObject(v) {
+  return !!v && typeof v === "object" && !Array.isArray(v);
+}
+function mergeSettings(a, b) {
+  const out = { ...a };
+  for (const [k, v] of Object.entries(b)) {
+    const prev = out[k];
+    out[k] = isPlainObject(prev) && isPlainObject(v) ? mergeSettings(prev, v) : v;
+  }
+  return out;
+}
+function harnessFlags(root) {
+  const flags = [];
+  let settings = {};
+  for (const name of enabledPluginDirs(root)) {
+    const dir = join7(root, "plugins", name);
+    if (entryExists(root, `plugins/${name}/.claude-plugin/plugin.json`))
+      flags.push("--plugin-dir", dir);
+    if (!entryExists(root, `plugins/${name}/imp-settings.json`))
+      continue;
+    try {
+      const parsed = JSON.parse(readFileSync6(join7(dir, "imp-settings.json"), "utf8"));
+      if (!isPlainObject(parsed))
+        throw new Error("not a JSON object");
+      settings = mergeSettings(settings, substitutePluginDir(parsed, dir));
+    } catch (e) {
+      console.error(`imp: skipping bad settings fragment plugins/${name}/imp-settings.json: ${e instanceof Error ? e.message : String(e)}`);
+    }
+  }
+  if (Object.keys(settings).length)
+    flags.push("--settings", JSON.stringify(settings));
+  return flags;
+}
 function realResolve(p) {
   try {
     return realpathSync(p);
@@ -637,8 +689,9 @@ function buildLaunch(opts) {
     console.error(`imp: vault project not found at ${opts.vaultProject} - launching plain claude (re-run \`imprnt init\` there, or fix IMPRNT_ROOT)`);
     return { args: pass, env: process.env };
   }
+  const harness = harnessFlags(opts.vaultProject);
   if (isInside(opts.cwd, opts.vaultProject))
-    return { args: pass, env: childEnv(opts.vaultProject) };
+    return { args: [...harness, ...pass], env: childEnv(opts.vaultProject) };
   const fragment = [castFragment(opts.vaultProject), pointerFragment(opts.pkgRoot, opts.vaultProject)].filter(Boolean).join(`
 
 `);
@@ -667,7 +720,7 @@ function buildLaunch(opts) {
     args.splice(term, 0, ...inject);
   else
     args.push(...inject);
-  return { args, env: childEnv(opts.vaultProject) };
+  return { args: [...harness, ...args], env: childEnv(opts.vaultProject) };
 }
 function launchClaude(cwd, args, env = process.env) {
   if (!isDir(cwd)) {
@@ -2035,6 +2088,14 @@ import { join as join14, dirname as dirname4, resolve as resolve6 } from "node:p
 import { homedir as homedir3 } from "node:os";
 import { fileURLToPath } from "node:url";
 import { createInterface } from "node:readline/promises";
+function pluginRoot() {
+  const local = projectRoot();
+  if (process.env.IMPRNT_ROOT || process.env.IMPRINT_ROOT)
+    return local;
+  if (existsSync12(join14(local, "vault")) || existsSync12(join14(local, "CLAUDE.local.md")))
+    return local;
+  return registeredRoot() ?? local;
+}
 function vaultArg() {
   const i = rest.indexOf("--vault");
   if (i >= 0) {
@@ -2113,7 +2174,8 @@ var init_cli = __esm(async () => {
     }
     case "lair": {
       const home = requireVaultHome();
-      process.exit(launchClaude(home, rest, childEnv(home)));
+      const lair = buildLaunch({ cwd: home, vaultProject: home, pkgRoot, passthrough: rest });
+      process.exit(launchClaude(home, lair.args, lair.env));
     }
     case "context": {
       const home = requireVaultHome();
@@ -2126,7 +2188,9 @@ var init_cli = __esm(async () => {
       break;
     }
     case "plugin": {
-      const proj = projectRoot();
+      const proj = pluginRoot();
+      if (proj !== process.cwd())
+        console.error(`(targeting vault project: ${proj})`);
       const [sub, ...specs] = rest;
       if (sub === "list") {
         const dirs = listPluginDirs(proj);

package/dist/imp.js

@@ -153,6 +153,15 @@ function isEnabled(root, name) {
   const prefix = `@plugins/${name}/`;
   return liveImportLines(root).some((l) => l.startsWith(prefix));
 }
+function enabledPluginDirs(root) {
+  const out = [];
+  for (const target of importTargets(root)) {
+    const name = target.match(/^plugins\/([^/]+)\//)?.[1];
+    if (name && !out.includes(name))
+      out.push(name);
+  }
+  return out;
+}
 function addPlugin(root, spec) {
   const invalid = specError(root, spec);
   if (invalid)
@@ -293,7 +302,7 @@ function purgePlugin(projectRoot, name) {
 var OFFICIAL;
 var init_install = __esm(() => {
   init_plugins();
-  OFFICIAL = ["anti-slop", "character", "whenful", "guard"];
+  OFFICIAL = ["anti-slop", "character", "whenful", "guard", "statusline", "telegram"];
 });
 
 // scripts/lib/roots.ts
@@ -607,6 +616,49 @@ function pointerFragment(pkgRoot, vaultProject) {
   const tpl = readFileSync6(join7(pkgRoot, "templates", "pointer.md"), "utf8");
   return tpl.replaceAll("{{VAULT_PROJECT}}", () => vaultProject);
 }
+function substitutePluginDir(value, dir) {
+  if (typeof value === "string")
+    return value.replaceAll("${PLUGIN_DIR}", dir).replaceAll("${CLAUDE_PLUGIN_ROOT}", dir);
+  if (Array.isArray(value))
+    return value.map((v) => substitutePluginDir(v, dir));
+  if (value && typeof value === "object") {
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, substitutePluginDir(v, dir)]));
+  }
+  return value;
+}
+function isPlainObject(v) {
+  return !!v && typeof v === "object" && !Array.isArray(v);
+}
+function mergeSettings(a, b) {
+  const out = { ...a };
+  for (const [k, v] of Object.entries(b)) {
+    const prev = out[k];
+    out[k] = isPlainObject(prev) && isPlainObject(v) ? mergeSettings(prev, v) : v;
+  }
+  return out;
+}
+function harnessFlags(root) {
+  const flags = [];
+  let settings = {};
+  for (const name of enabledPluginDirs(root)) {
+    const dir = join7(root, "plugins", name);
+    if (entryExists(root, `plugins/${name}/.claude-plugin/plugin.json`))
+      flags.push("--plugin-dir", dir);
+    if (!entryExists(root, `plugins/${name}/imp-settings.json`))
+      continue;
+    try {
+      const parsed = JSON.parse(readFileSync6(join7(dir, "imp-settings.json"), "utf8"));
+      if (!isPlainObject(parsed))
+        throw new Error("not a JSON object");
+      settings = mergeSettings(settings, substitutePluginDir(parsed, dir));
+    } catch (e) {
+      console.error(`imp: skipping bad settings fragment plugins/${name}/imp-settings.json: ${e instanceof Error ? e.message : String(e)}`);
+    }
+  }
+  if (Object.keys(settings).length)
+    flags.push("--settings", JSON.stringify(settings));
+  return flags;
+}
 function realResolve(p) {
   try {
     return realpathSync(p);
@@ -637,8 +689,9 @@ function buildLaunch(opts) {
     console.error(`imp: vault project not found at ${opts.vaultProject} - launching plain claude (re-run \`imprnt init\` there, or fix IMPRNT_ROOT)`);
     return { args: pass, env: process.env };
   }
+  const harness = harnessFlags(opts.vaultProject);
   if (isInside(opts.cwd, opts.vaultProject))
-    return { args: pass, env: childEnv(opts.vaultProject) };
+    return { args: [...harness, ...pass], env: childEnv(opts.vaultProject) };
   const fragment = [castFragment(opts.vaultProject), pointerFragment(opts.pkgRoot, opts.vaultProject)].filter(Boolean).join(`
 
 `);
@@ -667,7 +720,7 @@ function buildLaunch(opts) {
     args.splice(term, 0, ...inject);
   else
     args.push(...inject);
-  return { args, env: childEnv(opts.vaultProject) };
+  return { args: [...harness, ...args], env: childEnv(opts.vaultProject) };
 }
 function launchClaude(cwd, args, env = process.env) {
   if (!isDir(cwd)) {
@@ -2035,6 +2088,14 @@ import { join as join14, dirname as dirname4, resolve as resolve6 } from "node:p
 import { homedir as homedir3 } from "node:os";
 import { fileURLToPath } from "node:url";
 import { createInterface } from "node:readline/promises";
+function pluginRoot() {
+  const local = projectRoot();
+  if (process.env.IMPRNT_ROOT || process.env.IMPRINT_ROOT)
+    return local;
+  if (existsSync12(join14(local, "vault")) || existsSync12(join14(local, "CLAUDE.local.md")))
+    return local;
+  return registeredRoot() ?? local;
+}
 function vaultArg() {
   const i = rest.indexOf("--vault");
   if (i >= 0) {
@@ -2113,7 +2174,8 @@ var init_cli = __esm(async () => {
     }
     case "lair": {
       const home = requireVaultHome();
-      process.exit(launchClaude(home, rest, childEnv(home)));
+      const lair = buildLaunch({ cwd: home, vaultProject: home, pkgRoot, passthrough: rest });
+      process.exit(launchClaude(home, lair.args, lair.env));
     }
     case "context": {
       const home = requireVaultHome();
@@ -2126,7 +2188,9 @@ var init_cli = __esm(async () => {
       break;
     }
     case "plugin": {
-      const proj = projectRoot();
+      const proj = pluginRoot();
+      if (proj !== process.cwd())
+        console.error(`(targeting vault project: ${proj})`);
       const [sub, ...specs] = rest;
       if (sub === "list") {
         const dirs = listPluginDirs(proj);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "imprnt",
-  "version": "0.1.2",
+  "version": "0.1.3-edge.12",
   "description": "Deterministic-first, plain-markdown knowledge vault. Code does the bulk transform. The LLM only touches the irreducibly-semantic 20%. Native grep plus BM25 retrieval, zero MCP on the vault.",
   "type": "module",
   "bin": {