@primitive.ai/prim 0.1.0-alpha.48 → 0.1.0-alpha.50

package/dist/daemon/server.js

@@ -4,7 +4,7 @@
 import { existsSync as existsSync6, readFileSync as readFileSync5, unlinkSync as unlinkSync3 } from "fs";
 import { createServer } from "net";
 import { homedir as homedir5 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import { fileURLToPath } from "url";
 
 // src/client.ts
@@ -163,6 +163,7 @@ var CONFIG_DIR_MODE = 448;
 var CREDENTIAL_FILE_MODE = 384;
 var REFRESH_THRESHOLD_MS = 6e4;
 var DEFAULT_API_URL = "https://api.getprimitive.ai";
+var AUTH_EXPIRED_MESSAGE = "Authentication expired. Run `prim auth login` to re-authenticate.";
 function loadEnvFile() {
   const envVars = {};
   for (const file of [".env.local", ".env"]) {
@@ -319,6 +320,7 @@ async function performTokenRefresh(options = {}) {
   if (selected?.source !== "token_file") return void 0;
   const startingGeneration = readTrimmed(REFRESH_TOKEN_PATH);
   if (!startingGeneration || isSessionEnded()) return void 0;
+  const startingAccessToken = selected.token;
   return withCredentialLock(
     async () => {
       const currentCredential = resolveAuthCredential();
@@ -328,6 +330,9 @@ async function performTokenRefresh(options = {}) {
       if (currentGeneration !== startingGeneration) {
         return currentCredential.token;
       }
+      if (currentCredential.token !== startingAccessToken) {
+        return currentCredential.token;
+      }
       if (isSessionEnded()) return void 0;
       const response = await fetch(`${getSiteUrl()}/mcp/broker/refresh`, {
         method: "POST",
@@ -412,6 +417,12 @@ async function request(method, path, body, options) {
     });
     if (token) credential = { token, source: "token_file" };
   }
+  if (!credential) {
+    throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
+  }
+  if (isTokenExpiringSoon(credential) && isSessionEnded()) {
+    throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
+  }
   const doFetch = (token) => {
     const headers = { "Content-Type": "application/json" };
     if (token) headers.Authorization = `Bearer ${token}`;
@@ -441,7 +452,7 @@ async function request(method, path, body, options) {
   }
   if (!response.ok) {
     if (response.status === 401) {
-      throw new HttpError(401, "Authentication expired. Run `prim auth login` to re-authenticate.");
+      throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
     }
     const errorBody = await response.json().catch(() => null);
     throw new HttpError(response.status, errorBody?.error ?? `HTTP ${response.status}`);
@@ -457,6 +468,7 @@ function getClient() {
 
 // src/flusher.ts
 import { createReadStream, renameSync as renameSync2, unlinkSync } from "fs";
+import { dirname as dirname4, join as join4 } from "path";
 import { createInterface } from "readline";
 
 // src/ingest-response.ts
@@ -824,11 +836,23 @@ async function flushOnce() {
   return { flushed: total };
 }
 var flushInFlight;
+var FLUSH_LOCK_PATH = join4(dirname4(JOURNAL_DIR), ".flush.lock");
+var FLUSH_LOCK_TIMEOUT_MS = 250;
+function isFlushLockContended(error) {
+  return error instanceof Error && error.message.startsWith("timed out waiting for file lock");
+}
 function flush() {
   if (flushInFlight) {
     return flushInFlight;
   }
-  const attempt = flushOnce().finally(() => {
+  const attempt = withFileLock(FLUSH_LOCK_PATH, flushOnce, {
+    timeoutMs: FLUSH_LOCK_TIMEOUT_MS
+  }).catch((error) => {
+    if (isFlushLockContended(error)) {
+      return { flushed: 0, skipped: true };
+    }
+    throw error;
+  }).finally(() => {
     if (flushInFlight === attempt) {
       flushInFlight = void 0;
     }
@@ -840,8 +864,8 @@ function flush() {
 // src/daemon/client.ts
 import { createConnection } from "net";
 import { homedir as homedir3 } from "os";
-import { join as join4 } from "path";
-var SOCK_PATH = join4(homedir3(), ".config", "prim", "sock");
+import { join as join5 } from "path";
+var SOCK_PATH = join5(homedir3(), ".config", "prim", "sock");
 var DEFAULT_TIMEOUT_MS2 = 250;
 var nextRequestId = 1;
 function daemonRequest(method, params = {}, opts = {}) {
@@ -936,7 +960,7 @@ function assertCallerEnvMatches(callerEnv, boundEnv) {
 // src/daemon/health.ts
 import { chmodSync as chmodSync2, existsSync as existsSync4, mkdirSync as mkdirSync4, renameSync as renameSync3, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
-import { dirname as dirname4, join as join5 } from "path";
+import { dirname as dirname5, join as join6 } from "path";
 var CONFIG_DIR_MODE2 = 448;
 var HEALTH_FILE_MODE = 384;
 var INGESTION_SLA_MS = 3e4;
@@ -944,7 +968,7 @@ var HEARTBEAT_FRESH_MS = 9e4;
 var HEARTBEAT_RETRY_CAP_MS = 3e4;
 var INGESTION_RETRY_BASE_MS = 5e3;
 var INGESTION_RETRY_CAP_MS = 15e3;
-var DAEMON_HEALTH_PATH = join5(homedir4(), ".config", "prim", "daemon-health.json");
+var DAEMON_HEALTH_PATH = join6(homedir4(), ".config", "prim", "daemon-health.json");
 function createDaemonHealthState(version, pid, startedAt2) {
   return {
     schemaVersion: 1,
@@ -982,11 +1006,11 @@ function ingestionRetryDelayMs(consecutiveFailures, random = Math.random) {
   return retryDelayMs(consecutiveFailures, INGESTION_RETRY_CAP_MS, random);
 }
 function writeDaemonHealthState(state, path = DAEMON_HEALTH_PATH) {
-  const dir = dirname4(path);
+  const dir = dirname5(path);
   if (!existsSync4(dir)) {
     mkdirSync4(dir, { recursive: true, mode: CONFIG_DIR_MODE2 });
   }
-  const tmp = join5(dir, `.${process.pid}.daemon-health.tmp`);
+  const tmp = join6(dir, `.${process.pid}.daemon-health.tmp`);
   writeFileSync3(tmp, `${JSON.stringify(state, null, 2)}
 `, { mode: HEALTH_FILE_MODE });
   chmodSync2(tmp, HEALTH_FILE_MODE);
@@ -1006,7 +1030,7 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync4
 } from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 var DIR_MODE = 448;
 var FILE_MODE2 = 384;
 var DAEMON_STARTUP_GRACE_MS = 5e3;
@@ -1037,10 +1061,10 @@ function daemonProcessIsAlive(pid) {
   }
 }
 function readDaemonOwner(configDir) {
-  return readLockRecord(join6(configDir, "daemon.lock", "owner.json"));
+  return readLockRecord(join7(configDir, "daemon.lock", "owner.json"));
 }
 function readDaemonPid(configDir) {
-  const path = join6(configDir, "daemon.pid");
+  const path = join7(configDir, "daemon.pid");
   const pid = numericPid(path);
   if (pid === void 0) {
     return;
@@ -1055,9 +1079,9 @@ function acquireDaemonOwnership(configDir, opts = {}) {
   const pid = opts.pid ?? process.pid;
   const now = opts.now ?? Date.now();
   const isAlive = opts.isAlive ?? daemonProcessIsAlive;
-  const lockDir = join6(configDir, "daemon.lock");
-  const ownerPath2 = join6(lockDir, "owner.json");
-  const pidPath = join6(configDir, "daemon.pid");
+  const lockDir = join7(configDir, "daemon.lock");
+  const ownerPath2 = join7(lockDir, "owner.json");
+  const pidPath = join7(configDir, "daemon.pid");
   const instanceId = randomUUID();
   if (!existsSync5(configDir)) {
     mkdirSync5(configDir, { recursive: true, mode: DIR_MODE });
@@ -1155,8 +1179,8 @@ function releaseDaemonOwnership(ownership2, socketPath) {
 }
 
 // src/daemon/server.ts
-var CONFIG_DIR = join7(homedir5(), ".config", "prim");
-var SOCK_PATH2 = join7(CONFIG_DIR, "sock");
+var CONFIG_DIR = join8(homedir5(), ".config", "prim");
+var SOCK_PATH2 = join8(CONFIG_DIR, "sock");
 var HEARTBEAT_INTERVAL_MS = 3e4;
 var INGESTION_POLL_INTERVAL_MS = 15e3;
 var TOKEN_CHECK_INTERVAL_MS = 6e4;
@@ -1190,7 +1214,7 @@ function resolveRuntimeVersion() {
   }
   try {
     const here = fileURLToPath(new URL(".", import.meta.url));
-    const pkg = JSON.parse(readFileSync5(join7(here, "..", "..", "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync5(join8(here, "..", "..", "package.json"), "utf-8"));
     return pkg.version ?? "unknown";
   } catch {
     return "unknown";
@@ -1430,6 +1454,10 @@ async function runIngestionLoop() {
   persistHealth();
   try {
     const result = await flush();
+    if (result.skipped) {
+      scheduleIngestion(INGESTION_POLL_INTERVAL_MS);
+      return;
+    }
     daemonHealth.ingestion.lastSuccessAt = Date.now();
     daemonHealth.ingestion.lastAcknowledgedCount = result.flushed;
     daemonHealth.ingestion.consecutiveFailures = 0;

package/dist/hooks/post-commit.js

@@ -5,8 +5,11 @@ import {
 import {
   appendMove,
   resolveOrg
-} from "../chunk-5K725K35.js";
-import "../chunk-TPROV45L.js";
+} from "../chunk-BOTKPLTI.js";
+import {
+  isRepoActiveForCapture
+} from "../chunk-R5ZJRSLV.js";
+import "../chunk-DWDEQRWN.js";
 
 // src/hooks/post-commit.ts
 import { execSync, spawn } from "child_process";
@@ -53,20 +56,31 @@ function spawnBackgroundFlush() {
     stdio: "ignore"
   }).unref();
 }
-try {
+function runPostCommit() {
+  const cwd = git("rev-parse --show-toplevel") ?? process.cwd();
+  if (!isRepoActiveForCapture(cwd)) {
+    return;
+  }
   const commit = readCommit();
   if (commit) {
-    const cwd = git("rev-parse --show-toplevel") ?? process.cwd();
     const move = toCommitMove(commit, resolveCliVersion(), cwd);
     const { orgId } = resolveOrg({ sessionId: "", cwd });
     appendMove(move, orgId);
     spawnBackgroundFlush();
   }
-} catch (err) {
-  if (process.env.PRIM_HOOK_DEBUG) {
-    const detail = err instanceof Error ? err.message : String(err);
-    process.stderr.write(`[prim-post-commit] capture failed: ${detail}
+}
+if (!process.env.VITEST) {
+  try {
+    runPostCommit();
+  } catch (err) {
+    if (process.env.PRIM_HOOK_DEBUG) {
+      const detail = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`[prim-post-commit] capture failed: ${detail}
 `);
+    }
   }
+  process.exit(0);
 }
-process.exit(0);
+export {
+  runPostCommit
+};

package/dist/hooks/post-tool-use.js

@@ -13,17 +13,19 @@ import {
 import {
   appendMove,
   resolveOrg
-} from "../chunk-5K725K35.js";
+} from "../chunk-BOTKPLTI.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-IMAIBPUC.js";
 import {
-  isRepoActiveForCapture,
   warmBinCache
-} from "../chunk-F7O7V6ZM.js";
+} from "../chunk-HSZPTVKU.js";
+import {
+  isRepoActiveForCapture
+} from "../chunk-R5ZJRSLV.js";
 import {
   getClient
-} from "../chunk-TPROV45L.js";
+} from "../chunk-DWDEQRWN.js";
 import {
   normalizeEnvelope,
   parseAgent

package/dist/hooks/pre-commit.js

@@ -2,8 +2,8 @@
 import {
   checkAffectedDecisions,
   formatDecisionsWarning
-} from "../chunk-WRPKAPVE.js";
-import "../chunk-TPROV45L.js";
+} from "../chunk-VDLAAUWV.js";
+import "../chunk-DWDEQRWN.js";
 import "../chunk-UTKQTZHL.js";
 
 // src/hooks/pre-commit.ts

package/dist/hooks/pre-tool-use.js

@@ -1,12 +1,14 @@
 #!/usr/bin/env node
 import {
-  isRepoActiveForCapture,
   warmBinCache
-} from "../chunk-F7O7V6ZM.js";
+} from "../chunk-HSZPTVKU.js";
+import {
+  isRepoActiveForCapture
+} from "../chunk-R5ZJRSLV.js";
 import {
   getClient,
   getSiteUrl
-} from "../chunk-TPROV45L.js";
+} from "../chunk-DWDEQRWN.js";
 import {
   daemonRequest
 } from "../chunk-UTKQTZHL.js";

package/dist/hooks/prim-hook.js

@@ -9,7 +9,7 @@ import {
 import {
   appendMove,
   resolveOrg
-} from "../chunk-5K725K35.js";
+} from "../chunk-BOTKPLTI.js";
 import {
   buildHookOutput,
   handoffHookOutput
@@ -19,15 +19,17 @@ import {
   acknowledgeDecisionFeedback,
   leaseDecisionFeedback,
   renderFeedback
-} from "../chunk-CK75QBCB.js";
+} from "../chunk-WELBNODJ.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-IMAIBPUC.js";
 import {
-  isRepoActiveForCapture,
   warmBinCache
-} from "../chunk-F7O7V6ZM.js";
-import "../chunk-TPROV45L.js";
+} from "../chunk-HSZPTVKU.js";
+import {
+  isRepoActiveForCapture
+} from "../chunk-R5ZJRSLV.js";
+import "../chunk-DWDEQRWN.js";
 import {
   normalizeEnvelope,
   parseAgent

package/dist/hooks/session-start.js

@@ -8,18 +8,21 @@ import {
   acknowledgeDecisionFeedback,
   leaseDecisionFeedback,
   renderFeedback
-} from "../chunk-CK75QBCB.js";
+} from "../chunk-WELBNODJ.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-IMAIBPUC.js";
 import {
   binFile,
-  isRepoActiveForCapture,
   warmBinCache
-} from "../chunk-F7O7V6ZM.js";
+} from "../chunk-HSZPTVKU.js";
 import {
-  getSiteUrl
-} from "../chunk-TPROV45L.js";
+  isRepoActiveForCapture
+} from "../chunk-R5ZJRSLV.js";
+import {
+  getSiteUrl,
+  isSessionEnded
+} from "../chunk-DWDEQRWN.js";
 import {
   daemonRequest
 } from "../chunk-UTKQTZHL.js";
@@ -48,6 +51,18 @@ function kickDaemonEnsure(options = {}) {
   }
 }
 
+// src/hooks/reauth-notice.ts
+var REAUTH_NOTICE = "[prim] authentication ended \u2014 run `prim auth login` to resume decision capture";
+function reauthNoticeOutput(agent) {
+  if (agent === "codex") {
+    return buildHookOutput({ additionalContext: REAUTH_NOTICE });
+  }
+  if (agent === "claude_code") {
+    return buildHookOutput({ systemMessage: REAUTH_NOTICE });
+  }
+  return;
+}
+
 // src/hooks/session-start.ts
 var STDIN_TIMEOUT_MS = 1e3;
 var DAEMON_TIMEOUT_MS = 250;
@@ -108,6 +123,13 @@ async function main() {
     { sessionId: envelope.session_id },
     { timeoutMs: DAEMON_TIMEOUT_MS }
   );
+  if (isSessionEnded()) {
+    const notice = reauthNoticeOutput(agent);
+    if (notice) {
+      await emitOutput(notice);
+      return;
+    }
+  }
   if (agent === "codex") {
     const snapshot = await daemonRequest(
       "status_snapshot",