narai-primitives 2.0.0 → 2.1.0

package/dist/toolkit/policy/types.d.ts

@@ -18,19 +18,41 @@ export interface Classification {
     kind: Kind;
     aspects?: readonly string[];
 }
-/** Wire rules operators set per classification. */
-export type Rule = "success" | "present" | "escalate" | "denied";
+/**
+ * Wire rules operators set per classification. The toolkit-level base set
+ * holds only `success | escalate | denied`. Connectors that need a custom
+ * rule (e.g. db-agent's `"present"` rule, which means "displayed but not
+ * executed") declare it locally and translate to a base rule at their own
+ * boundary before invoking `checkPolicy`. The wire envelope (`status` is
+ * `string`) and the `extendDecision` hook still let those connectors emit
+ * connector-specific outcomes.
+ */
+export type Rule = "success" | "escalate" | "denied";
 /** Rule without `"success"` — used for safety-floor slots (admin, ddl, privilege). */
 export type RestrictedRule = Exclude<Rule, "success">;
-export interface PolicyRules {
-    read: Rule;
-    write: Rule;
-    admin: RestrictedRule;
+/**
+ * The toolkit-level rules shape, keyed by classification kind. `TExtra`
+ * mirrors `PolicyMap`'s parameter, but the default is `never` (not `string`):
+ * the toolkit gate is the strict checkpoint, so unspecialized `PolicyRules`
+ * means "base rules only". Connectors with extra rule values declare them
+ * explicitly via `PolicyRules<"present">` etc., and translate to base
+ * before invoking `checkPolicy`.
+ */
+export interface PolicyRules<TExtra extends string = never> {
+    read: Rule | TExtra;
+    write: Rule | TExtra;
+    admin: RestrictedRule | TExtra;
     /** Per-aspect rule map. Absent aspects fall through to the kind's rule. */
-    aspects?: Record<string, Rule>;
+    aspects?: Record<string, Rule | TExtra>;
 }
 export type ApprovalMode = "auto" | "confirm_once" | "confirm_each" | "grant_required";
-/** Defaults matching db-agent's historical behavior, generalized to CRUD. */
+/**
+ * Connector-agnostic default rules. Writes escalate by default (operators
+ * may downgrade to `success` per connector); admin is the safety-floor
+ * default-deny. Connectors that historically used `"present"` for write
+ * (e.g. db-agent's "displayed but not executed") declare it in their own
+ * defaults and translate to `"escalate"` before reaching the toolkit gate.
+ */
 export declare const DEFAULT_POLICY: PolicyRules;
 /**
  * A gate decision. `extendDecision` hooks (e.g., db-agent's `present_only`)

package/dist/toolkit/policy/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/toolkit/policy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,8DAA8D;AAC9D,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAMD,mDAAmD;AACnD,MAAM,MAAM,IAAI,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjE,sFAAsF;AACtF,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAEtD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,IAAI,CAAC;IACZ,KAAK,EAAE,cAAc,CAAC;IACtB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,cAAc,GACd,cAAc,GACd,gBAAgB,CAAC;AAErB,6EAA6E;AAC7E,eAAO,MAAM,cAAc,EAAE,WAK5B,CAAC;AAMF;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAChB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,sEAAsE;AACtE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAI5D,CAAC;AAMF,mEAAmE;AACnE,MAAM,MAAM,SAAS,GACjB,YAAY,GACZ,WAAW,GACX,cAAc,GACd,SAAS,GACT,kBAAkB,GAClB,cAAc,GACd,kBAAkB,CAAC;AAEvB,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC5B;AAED,0BAA0B;AAC1B,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,8BAA8B;AAC9B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,8BAA8B;AAC9B,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,SAAS,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,CAAC,EAAE,cAAc,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,MAAM,QAAQ,GAChB,eAAe,GACf,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,gBAAgB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/toolkit/policy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,8DAA8D;AAC9D,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAMD;;;;;;;;GAQG;AACH,MAAM,MAAM,IAAI,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAErD,sFAAsF;AACtF,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW,CAAC,MAAM,SAAS,MAAM,GAAG,KAAK;IACxD,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC;IACpB,KAAK,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,KAAK,EAAE,cAAc,GAAG,MAAM,CAAC;IAC/B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,cAAc,GACd,cAAc,GACd,gBAAgB,CAAC;AAErB;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,EAAE,WAK5B,CAAC;AAMF;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAChB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,sEAAsE;AACtE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAI5D,CAAC;AAMF,mEAAmE;AACnE,MAAM,MAAM,SAAS,GACjB,YAAY,GACZ,WAAW,GACX,cAAc,GACd,SAAS,GACT,kBAAkB,GAClB,cAAc,GACd,kBAAkB,CAAC;AAEvB,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC5B;AAED,0BAA0B;AAC1B,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,8BAA8B;AAC9B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,8BAA8B;AAC9B,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,SAAS,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,CAAC,EAAE,cAAc,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,MAAM,QAAQ,GAChB,eAAe,GACf,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,gBAAgB,CAAC"}

package/dist/toolkit/policy/types.js

@@ -6,10 +6,16 @@
  * | error`; connectors MAY extend with custom status values via the
  * `extendDecision` hook on `createConnector` (db-agent uses `present_only`).
  */
-/** Defaults matching db-agent's historical behavior, generalized to CRUD. */
+/**
+ * Connector-agnostic default rules. Writes escalate by default (operators
+ * may downgrade to `success` per connector); admin is the safety-floor
+ * default-deny. Connectors that historically used `"present"` for write
+ * (e.g. db-agent's "displayed but not executed") declare it in their own
+ * defaults and translate to `"escalate"` before reaching the toolkit gate.
+ */
 export const DEFAULT_POLICY = {
     read: "success",
-    write: "present",
+    write: "escalate",
     admin: "denied",
     aspects: {},
 };

package/dist/toolkit/policy/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/toolkit/policy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA4CH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,EAAE;CACZ,CAAC;AAgBF,sEAAsE;AACtE,MAAM,CAAC,MAAM,aAAa,GAAuC;IAC/D,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC;IACX,MAAM,EAAE,CAAC;CACV,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/toolkit/policy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA4DH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,UAAU;IACjB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,EAAE;CACZ,CAAC;AAgBF,sEAAsE;AACtE,MAAM,CAAC,MAAM,aAAa,GAAuC;IAC/D,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC;IACX,MAAM,EAAE,CAAC;CACV,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "narai-primitives",
-  "version": "2.0.0",
-  "description": "Read-only connectors + planning hub + connector framework, in one package. Bundles what was @narai/connector-toolkit, @narai/connector-config, @narai/connector-hub, and the seven @narai/<svc>-agent-connector packages.",
+  "version": "2.1.0",
+  "description": "Read-only connectors + planning hub + connector framework + credential resolution, in one package. Bundles what was @narai/connector-toolkit, @narai/connector-config, @narai/connector-hub, the seven @narai/<svc>-agent-connector packages, and @narai/credential-providers.",
   "type": "module",
   "main": "./dist/hub/index.js",
   "types": "./dist/hub/index.d.ts",
@@ -22,6 +22,10 @@
       "types": "./dist/config/index.d.ts",
       "import": "./dist/config/index.js"
     },
+    "./credentials": {
+      "types": "./dist/credentials/index.d.ts",
+      "import": "./dist/credentials/index.js"
+    },
     "./aws": {
       "types": "./dist/connectors/aws/index.d.ts",
       "import": "./dist/connectors/aws/index.js"
@@ -34,6 +38,18 @@
       "types": "./dist/connectors/db/index.d.ts",
       "import": "./dist/connectors/db/index.js"
     },
+    "./db/policy": {
+      "types": "./dist/connectors/db/lib/policy.d.ts",
+      "import": "./dist/connectors/db/lib/policy.js"
+    },
+    "./db/schema": {
+      "types": "./dist/connectors/db/lib/schema.d.ts",
+      "import": "./dist/connectors/db/lib/schema.js"
+    },
+    "./db/plugin-config": {
+      "types": "./dist/connectors/db/lib/plugin_config.d.ts",
+      "import": "./dist/connectors/db/lib/plugin_config.js"
+    },
     "./gcp": {
       "types": "./dist/connectors/gcp/index.d.ts",
       "import": "./dist/connectors/gcp/index.js"
@@ -92,7 +108,6 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.119",
-    "@narai/credential-providers": "^0.2.1",
     "better-sqlite3": "^12.9.0",
     "js-yaml": "^4.1.1",
     "zod": "^3.23.0"
@@ -103,7 +118,10 @@
     "@aws-sdk/client-lambda": "^3.1030.0",
     "@aws-sdk/client-rds": "^3.1030.0",
     "@aws-sdk/client-s3": "^3.1030.0",
+    "@aws-sdk/client-secrets-manager": "^3.1030.0",
     "@aws-sdk/client-sts": "^3.1030.0",
+    "@azure/keyvault-secrets": "^4.10.0",
+    "@google-cloud/secret-manager": "^6.0.0",
     "gpt-tokenizer": "^2.5.0",
     "mongodb": "^7.1.1",
     "mssql": "^12.2.1",

package/plugins/aws-agent/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-agent-plugin",
-  "version": "1.0.0",
-  "description": "Read-only AWS connector for Claude Code. Wraps @narai/aws-agent-connector. Lambda, RDS, S3, CloudWatch.",
+  "version": "1.1.0",
+  "description": "Read-only AWS connector for Claude Code. Built on narai-primitives (subpath ./aws). Lambda, RDS, S3, CloudWatch.",
   "author": "narai"
 }

package/plugins/aws-agent/README.md

@@ -1,6 +1,6 @@
 # aws-agent-plugin
 
-Claude Code plugin that wraps [`@narai/aws-agent-connector`](https://www.npmjs.com/package/@narai/aws-agent-connector) as a read-only AWS skill and slash command.
+Claude Code plugin that wraps [`narai-primitives/aws`](https://www.npmjs.com/package/narai-primitives) as a read-only AWS skill and slash command.
 
 ## What it adds
 
@@ -21,7 +21,7 @@ hook in `hooks/hooks.json`:
    next session.
 
 After a successful install,
-`${CLAUDE_PLUGIN_DATA}/node_modules/@narai/aws-agent-connector/dist/cli.js`
+`${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/dist/connectors/aws/cli.js`
 exists and `bin/aws-agent` can exec it.
 
 ## Usage

package/plugins/aws-agent/bin/aws-agent

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# aws-agent — thin shim over @narai/aws-agent-connector.
+# aws-agent — thin shim over narai-primitives (CLI at dist/connectors/aws).
 #
 # The SessionStart hook in hooks/hooks.json installs the npm package into
 # ${CLAUDE_PLUGIN_DATA}/node_modules on first session. This shim exec's
@@ -11,7 +11,7 @@ if [ -z "${CLAUDE_PLUGIN_DATA:-}" ]; then
   exit 2
 fi
 
-CLI="${CLAUDE_PLUGIN_DATA}/node_modules/@narai/aws-agent-connector/dist/cli.js"
+CLI="${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/dist/connectors/aws/cli.js"
 
 if [ ! -f "$CLI" ]; then
   echo "aws-agent: connector CLI not found at $CLI" >&2

package/plugins/aws-agent/hooks/hooks.json

@@ -9,11 +9,11 @@
           },
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/plugin/hooks/reminder.mjs\" 2>/dev/null || true"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/reminder.mjs\" 2>/dev/null || true"
           },
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/stale-summarize.mjs\" 2>/dev/null || true",
+            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/stale-summarize.mjs\" 2>/dev/null || true",
             "env": { "USAGE_CONNECTOR_NAME": "aws" }
           }
         ]
@@ -25,10 +25,10 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/usage-record.mjs\" 2>/dev/null || true",
+            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/usage-record.mjs\" 2>/dev/null || true",
             "env": {
               "USAGE_CONNECTOR_NAME": "aws",
-              "USAGE_BIN_HINT": "@narai/aws-agent-connector"
+              "USAGE_BIN_HINT": "narai-primitives/dist/connectors/aws"
             }
           }
         ]
@@ -39,7 +39,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/session-summary.mjs\" 2>/dev/null || true",
+            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/session-summary.mjs\" 2>/dev/null || true",
             "env": { "USAGE_CONNECTOR_NAME": "aws" }
           }
         ]

package/plugins/aws-agent/hooks/reminder.mjs

@@ -5,7 +5,7 @@
 try {
   const data = process.env.CLAUDE_PLUGIN_DATA;
   if (!data) process.exit(0);
-  const toolkitEntry = `${data}/node_modules/@narai/connector-toolkit/dist/plugin/reminder.js`;
+  const toolkitEntry = `${data}/node_modules/narai-primitives/dist/toolkit/plugin/reminder.js`;
   const mod = await import(toolkitEntry);
   const decision = mod.evaluateNudge({ connectors: ["aws"] });
   if (decision.nudge) {

package/plugins/aws-agent/package.json

@@ -4,6 +4,6 @@
   "private": true,
   "description": "Runtime manifest for aws-agent-plugin. The SessionStart hook runs `npm install` on this manifest into ${CLAUDE_PLUGIN_DATA}.",
   "dependencies": {
-    "@narai/aws-agent-connector": "file:.."
+    "narai-primitives": "^2.0.0"
   }
 }

package/plugins/aws-agent/skills/aws-agent/SKILL.md

@@ -11,7 +11,7 @@ context: fork
 # AWS Agent
 
 Answer the user's question by invoking the `aws-agent` binary exposed by
-this plugin. It delegates to `@narai/aws-agent-connector`, which speaks to
+this plugin. It delegates to `narai-primitives/aws`, which speaks to
 AWS via the read-only SDK v3 surface.
 
 ## Invocation

package/plugins/confluence-agent/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "confluence-agent-plugin",
-  "version": "1.0.0",
-  "description": "Read-only Confluence connector for Claude Code. Wraps @narai/confluence-agent-connector.",
+  "version": "1.1.0",
+  "description": "Read-only Confluence connector for Claude Code. Built on narai-primitives (subpath ./confluence).",
   "author": "narai"
 }

package/plugins/confluence-agent/README.md

@@ -1,6 +1,6 @@
 # confluence-agent-plugin
 
-Claude Code plugin that wraps `@narai/confluence-agent-connector` as a read-only Confluence skill and slash command. Same layout as aws/gcp/notion-agent-plugin.
+Claude Code plugin that wraps `narai-primitives/confluence` as a read-only Confluence skill and slash command. Same layout as aws/gcp/notion-agent-plugin.
 
 ## Credentials
 

package/plugins/confluence-agent/bin/confluence-agent

@@ -6,7 +6,7 @@ if [ -z "${CLAUDE_PLUGIN_DATA:-}" ]; then
   exit 2
 fi
 
-CLI="${CLAUDE_PLUGIN_DATA}/node_modules/@narai/confluence-agent-connector/dist/cli.js"
+CLI="${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/dist/connectors/confluence/cli.js"
 
 if [ ! -f "$CLI" ]; then
   echo "confluence-agent: connector CLI not found at $CLI" >&2

package/plugins/confluence-agent/hooks/hooks.json

@@ -9,11 +9,11 @@
           },
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/plugin/hooks/reminder.mjs\" 2>/dev/null || true"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/reminder.mjs\" 2>/dev/null || true"
           },
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/stale-summarize.mjs\" 2>/dev/null || true",
+            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/stale-summarize.mjs\" 2>/dev/null || true",
             "env": { "USAGE_CONNECTOR_NAME": "confluence" }
           }
         ]
@@ -25,10 +25,10 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/usage-record.mjs\" 2>/dev/null || true",
+            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/usage-record.mjs\" 2>/dev/null || true",
             "env": {
               "USAGE_CONNECTOR_NAME": "confluence",
-              "USAGE_BIN_HINT": "@narai/confluence-agent-connector"
+              "USAGE_BIN_HINT": "narai-primitives/dist/connectors/confluence"
             }
           }
         ]
@@ -39,7 +39,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/session-summary.mjs\" 2>/dev/null || true",
+            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/session-summary.mjs\" 2>/dev/null || true",
             "env": { "USAGE_CONNECTOR_NAME": "confluence" }
           }
         ]

package/plugins/confluence-agent/hooks/reminder.mjs

@@ -14,7 +14,7 @@
 try {
   const data = process.env.CLAUDE_PLUGIN_DATA;
   if (!data) process.exit(0);
-  const toolkitEntry = `${data}/node_modules/@narai/connector-toolkit/dist/plugin/reminder.js`;
+  const toolkitEntry = `${data}/node_modules/narai-primitives/dist/toolkit/plugin/reminder.js`;
   const mod = await import(toolkitEntry);
   const decision = mod.evaluateNudge({ connectors: ["confluence"] });
   if (decision.nudge) {

package/plugins/confluence-agent/package.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "private": true,
   "dependencies": {
-    "@narai/confluence-agent-connector": "file:.."
+    "narai-primitives": "^2.0.0"
   }
 }

package/plugins/confluence-agent/skills/confluence-agent/SKILL.md

@@ -11,7 +11,7 @@ context: fork
 
 Answer the user's question by invoking the `confluence-agent` binary
 exposed by this plugin. It delegates to
-`@narai/confluence-agent-connector` via Atlassian's Confluence REST v1.
+`narai-primitives/confluence` via Atlassian's Confluence REST v1.
 
 ## Invocation
 

package/plugins/db-agent/.claude-plugin/plugin.json

@@ -1,13 +1,13 @@
 {
   "name": "db-agent-plugin",
-  "version": "1.0.0",
-  "description": "Safe, read-only database query agent for Claude Code. Wraps @narai/db-agent-connector. Every statement passes the policy gate before any driver loads or any connection is opened.",
+  "version": "1.1.0",
+  "description": "Safe, read-only database query agent for Claude Code. Built on narai-primitives (subpath ./db). Every statement passes the policy gate before any driver loads or any connection is opened.",
   "author": {
     "name": "Narai Labs",
     "url": "https://github.com/narailabs"
   },
-  "homepage": "https://github.com/narailabs/db-agent-connector",
-  "repository": "https://github.com/narailabs/db-agent-connector",
+  "homepage": "https://github.com/narailabs/narai-primitives/tree/main/plugins/db-agent",
+  "repository": "https://github.com/narailabs/narai-primitives",
   "license": "MIT",
   "keywords": ["database", "sql", "postgresql", "mysql", "sqlite", "policy-gate"],
   "userConfig": {

package/plugins/db-agent/README.md

@@ -1,6 +1,6 @@
 # db-agent-plugin
 
-Claude Code plugin that wraps [`@narai/db-agent-connector`](https://www.npmjs.com/package/@narai/db-agent-connector).
+Claude Code plugin that wraps [`narai-primitives/db`](https://www.npmjs.com/package/narai-primitives).
 
 Exposes the `db-agent` skill. Every query passes through the policy gate before any driver loads or any connection opens. V2.0 vocab and defaults:
 
@@ -10,4 +10,4 @@ Exposes the `db-agent` skill. Every query passes through the policy gate before
 - `admin` (CREATE/DROP/ALTER/RENAME) → returned as formatted SQL, never executed
 - `privilege` (GRANT/REVOKE) → hard-denied
 
-Install via Claude Code's plugin marketplace. The `SessionStart` hook installs `@narai/db-agent-connector` into the plugin's data directory on first use.
+Install via Claude Code's plugin marketplace. The `SessionStart` hook installs `narai-primitives` into the plugin's data directory on first use.

package/plugins/db-agent/bin/db-agent

@@ -6,7 +6,7 @@ if [ -z "${CLAUDE_PLUGIN_DATA:-}" ]; then
   exit 2
 fi
 
-CLI="${CLAUDE_PLUGIN_DATA}/node_modules/@narai/db-agent-connector/dist/cli.js"
+CLI="${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/dist/connectors/db/cli.js"
 
 if [ ! -f "$CLI" ]; then
   echo "db-agent: connector CLI not found at $CLI" >&2

package/plugins/db-agent/hooks/hooks.json

@@ -8,11 +8,11 @@
         },
         {
           "type": "command",
-          "command": "node \"${CLAUDE_PLUGIN_ROOT}/plugin/hooks/reminder.mjs\" 2>/dev/null || true"
+          "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/reminder.mjs\" 2>/dev/null || true"
         },
         {
           "type": "command",
-          "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/stale-summarize.mjs\" 2>/dev/null || true",
+          "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/stale-summarize.mjs\" 2>/dev/null || true",
           "env": { "USAGE_CONNECTOR_NAME": "db" }
         }
       ]
@@ -24,7 +24,7 @@
       "hooks": [
         {
           "type": "command",
-          "command": "node ${CLAUDE_PLUGIN_ROOT}/plugin/hooks/db-guard.mjs",
+          "command": "node ${CLAUDE_PLUGIN_ROOT}/hooks/db-guard.mjs",
           "env": {
             "DB_AGENT_GUARDRAILS": "${user_config.install_guardrails}"
           }
@@ -38,10 +38,10 @@
       "hooks": [
         {
           "type": "command",
-          "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/usage-record.mjs\" 2>/dev/null || true",
+          "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/usage-record.mjs\" 2>/dev/null || true",
           "env": {
             "USAGE_CONNECTOR_NAME": "db",
-            "USAGE_BIN_HINT": "@narai/db-agent-connector"
+            "USAGE_BIN_HINT": "narai-primitives/dist/connectors/db"
           }
         }
       ]
@@ -52,7 +52,7 @@
       "hooks": [
         {
           "type": "command",
-          "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/session-summary.mjs\" 2>/dev/null || true",
+          "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/session-summary.mjs\" 2>/dev/null || true",
           "env": { "USAGE_CONNECTOR_NAME": "db" }
         }
       ]

package/plugins/db-agent/hooks/reminder.mjs

@@ -5,7 +5,7 @@
 try {
   const data = process.env.CLAUDE_PLUGIN_DATA;
   if (!data) process.exit(0);
-  const toolkitEntry = `${data}/node_modules/@narai/connector-toolkit/dist/plugin/reminder.js`;
+  const toolkitEntry = `${data}/node_modules/narai-primitives/dist/toolkit/plugin/reminder.js`;
   const mod = await import(toolkitEntry);
   const decision = mod.evaluateNudge({ connectors: ["db"] });
   if (decision.nudge) {

package/plugins/db-agent/package.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "private": true,
   "dependencies": {
-    "@narai/db-agent-connector": "file:.."
+    "narai-primitives": "^2.0.0"
   }
 }

package/plugins/db-agent/skills/db-agent/SKILL.md

@@ -14,7 +14,7 @@ context: fork
 # Database Agent
 
 Answer the user's question by invoking the `db-agent` binary exposed by this
-plugin. It delegates to `@narai/db-agent-connector`, which enforces the
+plugin. It delegates to `narai-primitives/db`, which enforces the
 policy gate before any backend is touched.
 
 ## Invocation

package/plugins/gcp-agent/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gcp-agent-plugin",
-  "version": "1.0.0",
-  "description": "Read-only GCP connector for Claude Code. Wraps @narai/gcp-agent-connector. Cloud Run, Cloud SQL, Pub/Sub, Cloud Logging.",
+  "version": "1.1.0",
+  "description": "Read-only GCP connector for Claude Code. Built on narai-primitives (subpath ./gcp). Cloud Run, Cloud SQL, Pub/Sub, Cloud Logging.",
   "author": "narai"
 }

package/plugins/gcp-agent/README.md

@@ -1,6 +1,6 @@
 # gcp-agent-plugin
 
-Claude Code plugin that wraps [`@narai/gcp-agent-connector`](https://www.npmjs.com/package/@narai/gcp-agent-connector) as a read-only GCP skill and slash command.
+Claude Code plugin that wraps [`narai-primitives/gcp`](https://www.npmjs.com/package/narai-primitives) as a read-only GCP skill and slash command.
 
 - **Skill** `gcp-agent` — automatic invocation for Cloud Run / Cloud SQL / Pub/Sub / Cloud Logging questions.
 - **Slash command** `/gcp-agent <action> <params-json>`.
@@ -15,7 +15,7 @@ On first `SessionStart` the hook in `hooks/hooks.json`:
 3. if the install fails, removes the stale copy so the hook re-runs next session.
 
 After install,
-`${CLAUDE_PLUGIN_DATA}/node_modules/@narai/gcp-agent-connector/dist/cli.js`
+`${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/dist/connectors/gcp/cli.js`
 exists and `bin/gcp-agent` exec's it.
 
 ## Credentials

package/plugins/gcp-agent/bin/gcp-agent

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# gcp-agent — thin shim over @narai/gcp-agent-connector.
+# gcp-agent — thin shim over narai-primitives (CLI at dist/connectors/gcp).
 set -euo pipefail
 
 if [ -z "${CLAUDE_PLUGIN_DATA:-}" ]; then
@@ -7,7 +7,7 @@ if [ -z "${CLAUDE_PLUGIN_DATA:-}" ]; then
   exit 2
 fi
 
-CLI="${CLAUDE_PLUGIN_DATA}/node_modules/@narai/gcp-agent-connector/dist/cli.js"
+CLI="${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/dist/connectors/gcp/cli.js"
 
 if [ ! -f "$CLI" ]; then
   echo "gcp-agent: connector CLI not found at $CLI" >&2

package/plugins/gcp-agent/hooks/hooks.json

@@ -9,11 +9,11 @@
           },
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/plugin/hooks/reminder.mjs\" 2>/dev/null || true"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/reminder.mjs\" 2>/dev/null || true"
           },
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/stale-summarize.mjs\" 2>/dev/null || true",
+            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/stale-summarize.mjs\" 2>/dev/null || true",
             "env": { "USAGE_CONNECTOR_NAME": "gcp" }
           }
         ]
@@ -25,10 +25,10 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/usage-record.mjs\" 2>/dev/null || true",
+            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/usage-record.mjs\" 2>/dev/null || true",
             "env": {
               "USAGE_CONNECTOR_NAME": "gcp",
-              "USAGE_BIN_HINT": "@narai/gcp-agent-connector"
+              "USAGE_BIN_HINT": "narai-primitives/dist/connectors/gcp"
             }
           }
         ]
@@ -39,7 +39,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/@narai/connector-toolkit/plugin-hooks/session-summary.mjs\" 2>/dev/null || true",
+            "command": "node \"${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/plugin-hooks/session-summary.mjs\" 2>/dev/null || true",
             "env": { "USAGE_CONNECTOR_NAME": "gcp" }
           }
         ]

package/plugins/gcp-agent/hooks/reminder.mjs

@@ -5,7 +5,7 @@
 try {
   const data = process.env.CLAUDE_PLUGIN_DATA;
   if (!data) process.exit(0);
-  const toolkitEntry = `${data}/node_modules/@narai/connector-toolkit/dist/plugin/reminder.js`;
+  const toolkitEntry = `${data}/node_modules/narai-primitives/dist/toolkit/plugin/reminder.js`;
   const mod = await import(toolkitEntry);
   const decision = mod.evaluateNudge({ connectors: ["gcp"] });
   if (decision.nudge) {

package/plugins/gcp-agent/package.json

@@ -4,6 +4,6 @@
   "private": true,
   "description": "Runtime manifest for gcp-agent-plugin. The SessionStart hook runs `npm install` on this manifest into ${CLAUDE_PLUGIN_DATA}.",
   "dependencies": {
-    "@narai/gcp-agent-connector": "file:.."
+    "narai-primitives": "^2.0.0"
   }
 }

package/plugins/gcp-agent/skills/gcp-agent/SKILL.md

@@ -10,7 +10,7 @@ context: fork
 # GCP Agent
 
 Answer the user's question by invoking the `gcp-agent` binary exposed by
-this plugin. It delegates to `@narai/gcp-agent-connector`, which speaks to
+this plugin. It delegates to `narai-primitives/gcp`, which speaks to
 GCP by shelling out to `gcloud` / `bq` with Application Default Credentials.
 
 ## Invocation

package/plugins/github-agent/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "github-agent-plugin",
-  "version": "1.0.0",
-  "description": "Read-only GitHub connector for Claude Code. Wraps @narai/github-agent-connector.",
+  "version": "1.1.0",
+  "description": "Read-only GitHub connector for Claude Code. Built on narai-primitives (subpath ./github).",
   "author": "narai"
 }

package/plugins/github-agent/README.md

@@ -1,6 +1,6 @@
 # github-agent-plugin
 
-Claude Code plugin wrapping `@narai/github-agent-connector`. Same layout as the other platform plugins.
+Claude Code plugin wrapping `narai-primitives/github`. Same layout as the other platform plugins.
 
 ## Credentials
 

package/plugins/github-agent/bin/github-agent

@@ -6,7 +6,7 @@ if [ -z "${CLAUDE_PLUGIN_DATA:-}" ]; then
   exit 2
 fi
 
-CLI="${CLAUDE_PLUGIN_DATA}/node_modules/@narai/github-agent-connector/dist/cli.js"
+CLI="${CLAUDE_PLUGIN_DATA}/node_modules/narai-primitives/dist/connectors/github/cli.js"
 
 if [ ! -f "$CLI" ]; then
   echo "github-agent: connector CLI not found at $CLI" >&2