@primitive.ai/prim 0.1.0-alpha.45 → 0.1.0-alpha.47

package/dist/statusline-main.js

@@ -1,54 +1,62 @@
 #!/usr/bin/env node
 
 // src/commands/statusline.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { dirname as dirname2, resolve as resolve2 } from "path";
+import { readFileSync as readFileSync4 } from "fs";
+import { dirname as dirname4, resolve as resolve2 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/client.ts
-import { existsSync, readFileSync, writeFileSync } from "fs";
+import { createHash, randomBytes as randomBytes2 } from "crypto";
+import {
+  chmodSync,
+  existsSync as existsSync2,
+  mkdirSync as mkdirSync2,
+  readFileSync as readFileSync2,
+  renameSync,
+  rmSync as rmSync2,
+  writeFileSync as writeFileSync2
+} from "fs";
 import { homedir } from "os";
-import { join, resolve } from "path";
+import { dirname as dirname2, join as join2, resolve } from "path";
+
+// src/lib/file-lock.ts
+import { randomBytes } from "crypto";
+import { existsSync, mkdirSync, readFileSync, rmSync, statSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
+
+// src/client.ts
+var DEFAULT_API_URL = "https://api.getprimitive.ai";
 function loadEnvFile() {
   const envVars = {};
-  const candidates = [".env.local", ".env"];
-  for (const file of candidates) {
+  for (const file of [".env.local", ".env"]) {
     const filePath = resolve(process.cwd(), file);
-    if (existsSync(filePath)) {
-      const content = readFileSync(filePath, "utf-8");
-      for (const line of content.split("\n")) {
-        const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith("#")) continue;
-        const eqIdx = trimmed.indexOf("=");
-        if (eqIdx === -1) continue;
-        const key = trimmed.slice(0, eqIdx).trim();
-        const value = trimmed.slice(eqIdx + 1).trim();
-        envVars[key] = value;
-      }
+    if (!existsSync2(filePath)) continue;
+    const content = readFileSync2(filePath, "utf-8");
+    for (const line of content.split("\n")) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#")) continue;
+      const eqIdx = trimmed.indexOf("=");
+      if (eqIdx === -1) continue;
+      envVars[trimmed.slice(0, eqIdx).trim()] = trimmed.slice(eqIdx + 1).trim();
     }
   }
   return envVars;
 }
-var TOKEN_FILE_PATH = join(homedir(), ".config", "prim", "token");
-var REFRESH_TOKEN_PATH = TOKEN_FILE_PATH.replace("/token", "/refresh_token");
-var TOKEN_EXPIRES_PATH = join(homedir(), ".config", "prim", "token_expires_at");
-var DEFAULT_API_URL = "https://api.getprimitive.ai";
+var TOKEN_FILE_PATH = join2(homedir(), ".config", "prim", "token");
+var REFRESH_TOKEN_PATH = join2(dirname2(TOKEN_FILE_PATH), "refresh_token");
+var TOKEN_EXPIRES_PATH = join2(dirname2(TOKEN_FILE_PATH), "token_expires_at");
+var TERMINAL_REFRESH_PATH = join2(dirname2(TOKEN_FILE_PATH), "refresh_terminal");
+var CREDENTIAL_LOCK_PATH = join2(dirname2(TOKEN_FILE_PATH), "credentials.lock");
 function getSiteUrl() {
-  if (process.env.PRIM_API_URL) {
-    return process.env.PRIM_API_URL;
-  }
-  const envVars = loadEnvFile();
-  if (envVars.PRIM_API_URL) {
-    return envVars.PRIM_API_URL;
-  }
-  return DEFAULT_API_URL;
+  if (process.env.PRIM_API_URL) return process.env.PRIM_API_URL;
+  return loadEnvFile().PRIM_API_URL ?? DEFAULT_API_URL;
 }
 
 // src/daemon/client.ts
 import { createConnection } from "net";
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-var SOCK_PATH = join2(homedir2(), ".config", "prim", "sock");
+import { join as join3 } from "path";
+var SOCK_PATH = join3(homedir2(), ".config", "prim", "sock");
 var DEFAULT_TIMEOUT_MS = 250;
 var nextRequestId = 1;
 function daemonRequest(method, params = {}, opts = {}) {
@@ -125,13 +133,13 @@ function daemonRequest(method, params = {}, opts = {}) {
 }
 
 // src/lib/bin-cache.ts
-import { chmodSync, mkdirSync, renameSync, writeFileSync as writeFileSync2 } from "fs";
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync3, renameSync as renameSync2, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 
 // src/lib/bin-path.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-import { dirname, isAbsolute, join as join3 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { dirname as dirname3, isAbsolute, join as join4 } from "path";
 import { fileURLToPath } from "url";
 var PKG_NAME = "@primitive.ai/prim";
 var NPX_FALLBACK = `npx --yes -p ${PKG_NAME}@latest`;
@@ -200,7 +208,7 @@ var STATUSLINE_TIMEOUT_MS = 200;
 var STATUSLINE_NAME_CAP = 3;
 function readPackageVersion() {
   try {
-    const here = dirname2(fileURLToPath2(import.meta.url));
+    const here = dirname4(fileURLToPath2(import.meta.url));
     const candidates = [
       // The supervised runtime stages a tiny manifest beside the standalone
       // statusline bundle, so it remains versioned without loading the package.
@@ -210,7 +218,7 @@ function readPackageVersion() {
     ];
     for (const path of candidates) {
       try {
-        const pkg = JSON.parse(readFileSync3(path, "utf-8"));
+        const pkg = JSON.parse(readFileSync4(path, "utf-8"));
         if (pkg.version) {
           return pkg.version;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.45",
+  "version": "0.1.0-alpha.47",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",

package/dist/chunk-PI6LDYNJ.js

@@ -1,220 +0,0 @@
-// src/client.ts
-import { existsSync, readFileSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join, resolve } from "path";
-function loadEnvFile() {
-  const envVars = {};
-  const candidates = [".env.local", ".env"];
-  for (const file of candidates) {
-    const filePath = resolve(process.cwd(), file);
-    if (existsSync(filePath)) {
-      const content = readFileSync(filePath, "utf-8");
-      for (const line of content.split("\n")) {
-        const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith("#")) continue;
-        const eqIdx = trimmed.indexOf("=");
-        if (eqIdx === -1) continue;
-        const key = trimmed.slice(0, eqIdx).trim();
-        const value = trimmed.slice(eqIdx + 1).trim();
-        envVars[key] = value;
-      }
-    }
-  }
-  return envVars;
-}
-var TOKEN_FILE_PATH = join(homedir(), ".config", "prim", "token");
-var REFRESH_TOKEN_PATH = TOKEN_FILE_PATH.replace("/token", "/refresh_token");
-var TOKEN_EXPIRES_PATH = join(homedir(), ".config", "prim", "token_expires_at");
-var REFRESH_THRESHOLD_MS = 6e4;
-function isTokenExpiringSoon() {
-  if (!existsSync(TOKEN_EXPIRES_PATH)) return false;
-  const expiresAt = Number(readFileSync(TOKEN_EXPIRES_PATH, "utf-8").trim());
-  return !Number.isNaN(expiresAt) && Date.now() >= expiresAt - REFRESH_THRESHOLD_MS;
-}
-function getJwtExpiry(token) {
-  const parts = token.split(".");
-  if (parts.length !== 3) return void 0;
-  try {
-    const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString());
-    return payload.exp ? payload.exp * 1e3 : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function saveTokenExpiry(token, expiresIn) {
-  const expiresAt = expiresIn ? Date.now() + expiresIn * 1e3 : getJwtExpiry(token);
-  if (expiresAt) {
-    writeFileSync(TOKEN_EXPIRES_PATH, String(expiresAt), { mode: 384 });
-  }
-}
-function getTokenExpiresAt() {
-  if (!existsSync(TOKEN_EXPIRES_PATH)) return void 0;
-  const val = Number(readFileSync(TOKEN_EXPIRES_PATH, "utf-8").trim());
-  return Number.isNaN(val) ? void 0 : val;
-}
-function getAuthToken() {
-  if (process.env.PRIM_TOKEN) {
-    return process.env.PRIM_TOKEN;
-  }
-  if (existsSync(TOKEN_FILE_PATH)) {
-    const token = readFileSync(TOKEN_FILE_PATH, "utf-8").trim();
-    if (token) {
-      return token;
-    }
-  }
-  const envVars = loadEnvFile();
-  if (envVars.PRIM_TOKEN) {
-    return envVars.PRIM_TOKEN;
-  }
-  return void 0;
-}
-var DEFAULT_API_URL = "https://api.getprimitive.ai";
-function getSiteUrl() {
-  if (process.env.PRIM_API_URL) {
-    return process.env.PRIM_API_URL;
-  }
-  const envVars = loadEnvFile();
-  if (envVars.PRIM_API_URL) {
-    return envVars.PRIM_API_URL;
-  }
-  return DEFAULT_API_URL;
-}
-var _endedRefreshToken;
-async function performTokenRefresh(options = {}) {
-  if (!existsSync(REFRESH_TOKEN_PATH)) {
-    return void 0;
-  }
-  const refreshTokenValue = readFileSync(REFRESH_TOKEN_PATH, "utf-8").trim();
-  if (!refreshTokenValue) {
-    return void 0;
-  }
-  if (_endedRefreshToken !== void 0 && refreshTokenValue === _endedRefreshToken) {
-    return void 0;
-  }
-  const siteUrl = getSiteUrl();
-  const response = await fetch(`${siteUrl}/mcp/broker/refresh`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ refresh_token: refreshTokenValue }),
-    signal: options.signal
-  });
-  if (!response.ok) {
-    const detail = (await response.text().catch(() => "")).slice(0, 200);
-    if (detail.includes("invalid_grant") || detail.includes("Session has already ended")) {
-      _endedRefreshToken = refreshTokenValue;
-    }
-    if (!options.quiet) {
-      process.stderr.write(
-        `[prim] token refresh rejected by broker: ${response.status} ${response.statusText}${detail ? ` \u2014 ${detail}` : ""}
-`
-      );
-    }
-    return void 0;
-  }
-  const data = await response.json();
-  if (!data.access_token) {
-    return void 0;
-  }
-  _endedRefreshToken = void 0;
-  writeFileSync(TOKEN_FILE_PATH, data.access_token, { mode: 384 });
-  if (data.refresh_token) {
-    writeFileSync(REFRESH_TOKEN_PATH, data.refresh_token, { mode: 384 });
-  }
-  saveTokenExpiry(data.access_token, data.expires_in);
-  return data.access_token;
-}
-var _refreshInFlight;
-function refreshToken(options = {}) {
-  if (_refreshInFlight) {
-    return _refreshInFlight;
-  }
-  const attempt = performTokenRefresh(options).then((token) => {
-    if (token) {
-      _cachedToken = token;
-    }
-    return token;
-  }).finally(() => {
-    if (_refreshInFlight === attempt) {
-      _refreshInFlight = void 0;
-    }
-  });
-  _refreshInFlight = attempt;
-  return attempt;
-}
-var HttpError = class extends Error {
-  status;
-  constructor(status, message) {
-    super(message);
-    this.name = "HttpError";
-    this.status = status;
-  }
-};
-var _cachedToken;
-async function request(method, path, body, options) {
-  const siteUrl = getSiteUrl();
-  const url = `${siteUrl}${path}`;
-  if (!_cachedToken) {
-    _cachedToken = getAuthToken();
-  }
-  if (_cachedToken && isTokenExpiringSoon()) {
-    const newToken = await refreshToken({
-      signal: options?.signal,
-      quiet: options?.quietRefresh
-    });
-    if (newToken) {
-      _cachedToken = newToken;
-    }
-  }
-  const doFetch = async (token) => {
-    const headers = {
-      "Content-Type": "application/json"
-    };
-    if (token) {
-      headers.Authorization = `Bearer ${token}`;
-    }
-    return fetch(url, {
-      method,
-      headers,
-      body: body !== void 0 ? JSON.stringify(body) : void 0,
-      signal: options?.signal
-    });
-  };
-  const tokenUsed = _cachedToken;
-  let res = await doFetch(tokenUsed);
-  if (res.status === 401) {
-    const newToken = _cachedToken && _cachedToken !== tokenUsed ? _cachedToken : await refreshToken({
-      signal: options?.signal,
-      quiet: options?.quietRefresh
-    });
-    if (newToken) {
-      _cachedToken = newToken;
-      res = await doFetch(newToken);
-    }
-  }
-  if (!res.ok) {
-    if (res.status === 401) {
-      throw new HttpError(401, "Authentication expired. Run `prim auth login` to re-authenticate.");
-    }
-    const errorBody = await res.json().catch(() => null);
-    throw new HttpError(res.status, errorBody?.error ?? `HTTP ${res.status}`);
-  }
-  return res.json();
-}
-function getClient() {
-  return {
-    get: (path, options) => request("GET", path, void 0, options),
-    post: (path, body, options) => request("POST", path, body, options)
-  };
-}
-
-export {
-  TOKEN_FILE_PATH,
-  REFRESH_TOKEN_PATH,
-  TOKEN_EXPIRES_PATH,
-  saveTokenExpiry,
-  getTokenExpiresAt,
-  getAuthToken,
-  getSiteUrl,
-  HttpError,
-  getClient
-};