@primitive.ai/prim 0.1.0-alpha.49 → 0.1.0-alpha.50

package/dist/{chunk-5K725K35.js → chunk-BOTKPLTI.js}

@@ -1,6 +1,6 @@
 import {
   getSiteUrl
-} from "./chunk-TPROV45L.js";
+} from "./chunk-DWDEQRWN.js";
 
 // src/journal.ts
 import {

package/dist/{chunk-TPROV45L.js → chunk-DWDEQRWN.js}

@@ -154,6 +154,7 @@ var CONFIG_DIR_MODE = 448;
 var CREDENTIAL_FILE_MODE = 384;
 var REFRESH_THRESHOLD_MS = 6e4;
 var DEFAULT_API_URL = "https://api.getprimitive.ai";
+var AUTH_EXPIRED_MESSAGE = "Authentication expired. Run `prim auth login` to re-authenticate.";
 function loadEnvFile() {
   const envVars = {};
   for (const file of [".env.local", ".env"]) {
@@ -349,6 +350,7 @@ async function performTokenRefresh(options = {}) {
   if (selected?.source !== "token_file") return void 0;
   const startingGeneration = readTrimmed(REFRESH_TOKEN_PATH);
   if (!startingGeneration || isSessionEnded()) return void 0;
+  const startingAccessToken = selected.token;
   return withCredentialLock(
     async () => {
       const currentCredential = resolveAuthCredential();
@@ -358,6 +360,9 @@ async function performTokenRefresh(options = {}) {
       if (currentGeneration !== startingGeneration) {
         return currentCredential.token;
       }
+      if (currentCredential.token !== startingAccessToken) {
+        return currentCredential.token;
+      }
       if (isSessionEnded()) return void 0;
       const response = await fetch(`${getSiteUrl()}/mcp/broker/refresh`, {
         method: "POST",
@@ -442,6 +447,12 @@ async function request(method, path, body, options) {
     });
     if (token) credential = { token, source: "token_file" };
   }
+  if (!credential) {
+    throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
+  }
+  if (isTokenExpiringSoon(credential) && isSessionEnded()) {
+    throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
+  }
   const doFetch = (token) => {
     const headers = { "Content-Type": "application/json" };
     if (token) headers.Authorization = `Bearer ${token}`;
@@ -471,7 +482,7 @@ async function request(method, path, body, options) {
   }
   if (!response.ok) {
     if (response.status === 401) {
-      throw new HttpError(401, "Authentication expired. Run `prim auth login` to re-authenticate.");
+      throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
     }
     const errorBody = await response.json().catch(() => null);
     throw new HttpError(response.status, errorBody?.error ?? `HTTP ${response.status}`);

package/dist/{chunk-WRPKAPVE.js → chunk-VDLAAUWV.js}

@@ -1,7 +1,7 @@
 import {
   getClient,
   getSiteUrl
-} from "./chunk-TPROV45L.js";
+} from "./chunk-DWDEQRWN.js";
 import {
   daemonRequest
 } from "./chunk-UTKQTZHL.js";

package/dist/{chunk-CK75QBCB.js → chunk-WELBNODJ.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-TPROV45L.js";
+} from "./chunk-DWDEQRWN.js";
 
 // src/decisions/feedback.ts
 var FEEDBACK_PROTOCOL_VERSION = 1;

package/dist/daemon/server.js

@@ -4,7 +4,7 @@
 import { existsSync as existsSync6, readFileSync as readFileSync5, unlinkSync as unlinkSync3 } from "fs";
 import { createServer } from "net";
 import { homedir as homedir5 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import { fileURLToPath } from "url";
 
 // src/client.ts
@@ -163,6 +163,7 @@ var CONFIG_DIR_MODE = 448;
 var CREDENTIAL_FILE_MODE = 384;
 var REFRESH_THRESHOLD_MS = 6e4;
 var DEFAULT_API_URL = "https://api.getprimitive.ai";
+var AUTH_EXPIRED_MESSAGE = "Authentication expired. Run `prim auth login` to re-authenticate.";
 function loadEnvFile() {
   const envVars = {};
   for (const file of [".env.local", ".env"]) {
@@ -319,6 +320,7 @@ async function performTokenRefresh(options = {}) {
   if (selected?.source !== "token_file") return void 0;
   const startingGeneration = readTrimmed(REFRESH_TOKEN_PATH);
   if (!startingGeneration || isSessionEnded()) return void 0;
+  const startingAccessToken = selected.token;
   return withCredentialLock(
     async () => {
       const currentCredential = resolveAuthCredential();
@@ -328,6 +330,9 @@ async function performTokenRefresh(options = {}) {
       if (currentGeneration !== startingGeneration) {
         return currentCredential.token;
       }
+      if (currentCredential.token !== startingAccessToken) {
+        return currentCredential.token;
+      }
       if (isSessionEnded()) return void 0;
       const response = await fetch(`${getSiteUrl()}/mcp/broker/refresh`, {
         method: "POST",
@@ -412,6 +417,12 @@ async function request(method, path, body, options) {
     });
     if (token) credential = { token, source: "token_file" };
   }
+  if (!credential) {
+    throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
+  }
+  if (isTokenExpiringSoon(credential) && isSessionEnded()) {
+    throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
+  }
   const doFetch = (token) => {
     const headers = { "Content-Type": "application/json" };
     if (token) headers.Authorization = `Bearer ${token}`;
@@ -441,7 +452,7 @@ async function request(method, path, body, options) {
   }
   if (!response.ok) {
     if (response.status === 401) {
-      throw new HttpError(401, "Authentication expired. Run `prim auth login` to re-authenticate.");
+      throw new HttpError(401, AUTH_EXPIRED_MESSAGE);
     }
     const errorBody = await response.json().catch(() => null);
     throw new HttpError(response.status, errorBody?.error ?? `HTTP ${response.status}`);
@@ -457,6 +468,7 @@ function getClient() {
 
 // src/flusher.ts
 import { createReadStream, renameSync as renameSync2, unlinkSync } from "fs";
+import { dirname as dirname4, join as join4 } from "path";
 import { createInterface } from "readline";
 
 // src/ingest-response.ts
@@ -824,11 +836,23 @@ async function flushOnce() {
   return { flushed: total };
 }
 var flushInFlight;
+var FLUSH_LOCK_PATH = join4(dirname4(JOURNAL_DIR), ".flush.lock");
+var FLUSH_LOCK_TIMEOUT_MS = 250;
+function isFlushLockContended(error) {
+  return error instanceof Error && error.message.startsWith("timed out waiting for file lock");
+}
 function flush() {
   if (flushInFlight) {
     return flushInFlight;
   }
-  const attempt = flushOnce().finally(() => {
+  const attempt = withFileLock(FLUSH_LOCK_PATH, flushOnce, {
+    timeoutMs: FLUSH_LOCK_TIMEOUT_MS
+  }).catch((error) => {
+    if (isFlushLockContended(error)) {
+      return { flushed: 0, skipped: true };
+    }
+    throw error;
+  }).finally(() => {
     if (flushInFlight === attempt) {
       flushInFlight = void 0;
     }
@@ -840,8 +864,8 @@ function flush() {
 // src/daemon/client.ts
 import { createConnection } from "net";
 import { homedir as homedir3 } from "os";
-import { join as join4 } from "path";
-var SOCK_PATH = join4(homedir3(), ".config", "prim", "sock");
+import { join as join5 } from "path";
+var SOCK_PATH = join5(homedir3(), ".config", "prim", "sock");
 var DEFAULT_TIMEOUT_MS2 = 250;
 var nextRequestId = 1;
 function daemonRequest(method, params = {}, opts = {}) {
@@ -936,7 +960,7 @@ function assertCallerEnvMatches(callerEnv, boundEnv) {
 // src/daemon/health.ts
 import { chmodSync as chmodSync2, existsSync as existsSync4, mkdirSync as mkdirSync4, renameSync as renameSync3, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
-import { dirname as dirname4, join as join5 } from "path";
+import { dirname as dirname5, join as join6 } from "path";
 var CONFIG_DIR_MODE2 = 448;
 var HEALTH_FILE_MODE = 384;
 var INGESTION_SLA_MS = 3e4;
@@ -944,7 +968,7 @@ var HEARTBEAT_FRESH_MS = 9e4;
 var HEARTBEAT_RETRY_CAP_MS = 3e4;
 var INGESTION_RETRY_BASE_MS = 5e3;
 var INGESTION_RETRY_CAP_MS = 15e3;
-var DAEMON_HEALTH_PATH = join5(homedir4(), ".config", "prim", "daemon-health.json");
+var DAEMON_HEALTH_PATH = join6(homedir4(), ".config", "prim", "daemon-health.json");
 function createDaemonHealthState(version, pid, startedAt2) {
   return {
     schemaVersion: 1,
@@ -982,11 +1006,11 @@ function ingestionRetryDelayMs(consecutiveFailures, random = Math.random) {
   return retryDelayMs(consecutiveFailures, INGESTION_RETRY_CAP_MS, random);
 }
 function writeDaemonHealthState(state, path = DAEMON_HEALTH_PATH) {
-  const dir = dirname4(path);
+  const dir = dirname5(path);
   if (!existsSync4(dir)) {
     mkdirSync4(dir, { recursive: true, mode: CONFIG_DIR_MODE2 });
   }
-  const tmp = join5(dir, `.${process.pid}.daemon-health.tmp`);
+  const tmp = join6(dir, `.${process.pid}.daemon-health.tmp`);
   writeFileSync3(tmp, `${JSON.stringify(state, null, 2)}
 `, { mode: HEALTH_FILE_MODE });
   chmodSync2(tmp, HEALTH_FILE_MODE);
@@ -1006,7 +1030,7 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync4
 } from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 var DIR_MODE = 448;
 var FILE_MODE2 = 384;
 var DAEMON_STARTUP_GRACE_MS = 5e3;
@@ -1037,10 +1061,10 @@ function daemonProcessIsAlive(pid) {
   }
 }
 function readDaemonOwner(configDir) {
-  return readLockRecord(join6(configDir, "daemon.lock", "owner.json"));
+  return readLockRecord(join7(configDir, "daemon.lock", "owner.json"));
 }
 function readDaemonPid(configDir) {
-  const path = join6(configDir, "daemon.pid");
+  const path = join7(configDir, "daemon.pid");
   const pid = numericPid(path);
   if (pid === void 0) {
     return;
@@ -1055,9 +1079,9 @@ function acquireDaemonOwnership(configDir, opts = {}) {
   const pid = opts.pid ?? process.pid;
   const now = opts.now ?? Date.now();
   const isAlive = opts.isAlive ?? daemonProcessIsAlive;
-  const lockDir = join6(configDir, "daemon.lock");
-  const ownerPath2 = join6(lockDir, "owner.json");
-  const pidPath = join6(configDir, "daemon.pid");
+  const lockDir = join7(configDir, "daemon.lock");
+  const ownerPath2 = join7(lockDir, "owner.json");
+  const pidPath = join7(configDir, "daemon.pid");
   const instanceId = randomUUID();
   if (!existsSync5(configDir)) {
     mkdirSync5(configDir, { recursive: true, mode: DIR_MODE });
@@ -1155,8 +1179,8 @@ function releaseDaemonOwnership(ownership2, socketPath) {
 }
 
 // src/daemon/server.ts
-var CONFIG_DIR = join7(homedir5(), ".config", "prim");
-var SOCK_PATH2 = join7(CONFIG_DIR, "sock");
+var CONFIG_DIR = join8(homedir5(), ".config", "prim");
+var SOCK_PATH2 = join8(CONFIG_DIR, "sock");
 var HEARTBEAT_INTERVAL_MS = 3e4;
 var INGESTION_POLL_INTERVAL_MS = 15e3;
 var TOKEN_CHECK_INTERVAL_MS = 6e4;
@@ -1190,7 +1214,7 @@ function resolveRuntimeVersion() {
   }
   try {
     const here = fileURLToPath(new URL(".", import.meta.url));
-    const pkg = JSON.parse(readFileSync5(join7(here, "..", "..", "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync5(join8(here, "..", "..", "package.json"), "utf-8"));
     return pkg.version ?? "unknown";
   } catch {
     return "unknown";
@@ -1430,6 +1454,10 @@ async function runIngestionLoop() {
   persistHealth();
   try {
     const result = await flush();
+    if (result.skipped) {
+      scheduleIngestion(INGESTION_POLL_INTERVAL_MS);
+      return;
+    }
     daemonHealth.ingestion.lastSuccessAt = Date.now();
     daemonHealth.ingestion.lastAcknowledgedCount = result.flushed;
     daemonHealth.ingestion.consecutiveFailures = 0;

package/dist/hooks/post-commit.js

@@ -5,11 +5,11 @@ import {
 import {
   appendMove,
   resolveOrg
-} from "../chunk-5K725K35.js";
+} from "../chunk-BOTKPLTI.js";
 import {
   isRepoActiveForCapture
 } from "../chunk-R5ZJRSLV.js";
-import "../chunk-TPROV45L.js";
+import "../chunk-DWDEQRWN.js";
 
 // src/hooks/post-commit.ts
 import { execSync, spawn } from "child_process";

package/dist/hooks/post-tool-use.js

@@ -13,7 +13,7 @@ import {
 import {
   appendMove,
   resolveOrg
-} from "../chunk-5K725K35.js";
+} from "../chunk-BOTKPLTI.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-IMAIBPUC.js";
@@ -25,7 +25,7 @@ import {
 } from "../chunk-R5ZJRSLV.js";
 import {
   getClient
-} from "../chunk-TPROV45L.js";
+} from "../chunk-DWDEQRWN.js";
 import {
   normalizeEnvelope,
   parseAgent

package/dist/hooks/pre-commit.js

@@ -2,8 +2,8 @@
 import {
   checkAffectedDecisions,
   formatDecisionsWarning
-} from "../chunk-WRPKAPVE.js";
-import "../chunk-TPROV45L.js";
+} from "../chunk-VDLAAUWV.js";
+import "../chunk-DWDEQRWN.js";
 import "../chunk-UTKQTZHL.js";
 
 // src/hooks/pre-commit.ts

package/dist/hooks/pre-tool-use.js

@@ -8,7 +8,7 @@ import {
 import {
   getClient,
   getSiteUrl
-} from "../chunk-TPROV45L.js";
+} from "../chunk-DWDEQRWN.js";
 import {
   daemonRequest
 } from "../chunk-UTKQTZHL.js";

package/dist/hooks/prim-hook.js

@@ -9,7 +9,7 @@ import {
 import {
   appendMove,
   resolveOrg
-} from "../chunk-5K725K35.js";
+} from "../chunk-BOTKPLTI.js";
 import {
   buildHookOutput,
   handoffHookOutput
@@ -19,7 +19,7 @@ import {
   acknowledgeDecisionFeedback,
   leaseDecisionFeedback,
   renderFeedback
-} from "../chunk-CK75QBCB.js";
+} from "../chunk-WELBNODJ.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-IMAIBPUC.js";
@@ -29,7 +29,7 @@ import {
 import {
   isRepoActiveForCapture
 } from "../chunk-R5ZJRSLV.js";
-import "../chunk-TPROV45L.js";
+import "../chunk-DWDEQRWN.js";
 import {
   normalizeEnvelope,
   parseAgent

package/dist/hooks/session-start.js

@@ -8,7 +8,7 @@ import {
   acknowledgeDecisionFeedback,
   leaseDecisionFeedback,
   renderFeedback
-} from "../chunk-CK75QBCB.js";
+} from "../chunk-WELBNODJ.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-IMAIBPUC.js";
@@ -20,8 +20,9 @@ import {
   isRepoActiveForCapture
 } from "../chunk-R5ZJRSLV.js";
 import {
-  getSiteUrl
-} from "../chunk-TPROV45L.js";
+  getSiteUrl,
+  isSessionEnded
+} from "../chunk-DWDEQRWN.js";
 import {
   daemonRequest
 } from "../chunk-UTKQTZHL.js";
@@ -50,6 +51,18 @@ function kickDaemonEnsure(options = {}) {
   }
 }
 
+// src/hooks/reauth-notice.ts
+var REAUTH_NOTICE = "[prim] authentication ended \u2014 run `prim auth login` to resume decision capture";
+function reauthNoticeOutput(agent) {
+  if (agent === "codex") {
+    return buildHookOutput({ additionalContext: REAUTH_NOTICE });
+  }
+  if (agent === "claude_code") {
+    return buildHookOutput({ systemMessage: REAUTH_NOTICE });
+  }
+  return;
+}
+
 // src/hooks/session-start.ts
 var STDIN_TIMEOUT_MS = 1e3;
 var DAEMON_TIMEOUT_MS = 250;
@@ -110,6 +123,13 @@ async function main() {
     { sessionId: envelope.session_id },
     { timeoutMs: DAEMON_TIMEOUT_MS }
   );
+  if (isSessionEnded()) {
+    const notice = reauthNoticeOutput(agent);
+    if (notice) {
+      await emitOutput(notice);
+      return;
+    }
+  }
   if (agent === "codex") {
     const snapshot = await daemonRequest(
       "status_snapshot",

package/dist/index.js

@@ -12,7 +12,7 @@ import {
   checkAffectedDecisions,
   daemonOrDirectGet,
   formatDecisionsWarning
-} from "./chunk-WRPKAPVE.js";
+} from "./chunk-VDLAAUWV.js";
 import {
   JOURNAL_DIR,
   SESSIONS_DIR,
@@ -21,10 +21,10 @@ import {
   listFlushing,
   pendingJournalStats,
   readMovesFromPath
-} from "./chunk-5K725K35.js";
+} from "./chunk-BOTKPLTI.js";
 import {
   fetchFeedbackCapability
-} from "./chunk-CK75QBCB.js";
+} from "./chunk-WELBNODJ.js";
 import {
   inspectWorkspaceId
 } from "./chunk-IMAIBPUC.js";
@@ -56,7 +56,7 @@ import {
   resolveAuthCredential,
   setStoredToken,
   withFileLock
-} from "./chunk-TPROV45L.js";
+} from "./chunk-DWDEQRWN.js";
 import {
   daemonIsLive,
   daemonRequest
@@ -64,7 +64,7 @@ import {
 
 // src/index.ts
 import { readFileSync as readFileSync12 } from "fs";
-import { dirname as dirname8, resolve as resolve6 } from "path";
+import { dirname as dirname9, resolve as resolve6 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { Command } from "commander";
 import updateNotifier from "update-notifier";
@@ -4241,10 +4241,11 @@ function registerHooksCommands(program2) {
 
 // src/commands/moves.ts
 import { existsSync as existsSync8, mkdirSync as mkdirSync6, unlinkSync as unlinkSync4, writeFileSync as writeFileSync5 } from "fs";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 
 // src/flusher.ts
 import { createReadStream, renameSync as renameSync4, unlinkSync as unlinkSync3 } from "fs";
+import { dirname as dirname5, join as join7 } from "path";
 import { createInterface } from "readline";
 var BATCH_SIZE = 500;
 var HTTP_TIMEOUT_MS = 1e4;
@@ -4368,11 +4369,23 @@ async function flushOnce() {
   return { flushed: total };
 }
 var flushInFlight;
+var FLUSH_LOCK_PATH = join7(dirname5(JOURNAL_DIR), ".flush.lock");
+var FLUSH_LOCK_TIMEOUT_MS = 250;
+function isFlushLockContended(error) {
+  return error instanceof Error && error.message.startsWith("timed out waiting for file lock");
+}
 function flush() {
   if (flushInFlight) {
     return flushInFlight;
   }
-  const attempt = flushOnce().finally(() => {
+  const attempt = withFileLock(FLUSH_LOCK_PATH, flushOnce, {
+    timeoutMs: FLUSH_LOCK_TIMEOUT_MS
+  }).catch((error) => {
+    if (isFlushLockContended(error)) {
+      return { flushed: 0, skipped: true };
+    }
+    throw error;
+  }).finally(() => {
     if (flushInFlight === attempt) {
       flushInFlight = void 0;
     }
@@ -4410,7 +4423,11 @@ var WORKSPACE_FILE = ".prim/workspace.json";
 function registerMovesCommands(program2) {
   const moves = program2.command("moves").description("Decision Event Pipeline \u2014 local journal");
   moves.command("flush").description("Drain all local move journals to the server").action(async () => {
-    const { flushed } = await flush();
+    const { flushed, skipped } = await flush();
+    if (skipped) {
+      console.log("[prim] another flush is already draining; moves left journaled");
+      return;
+    }
     console.log(`[prim] flushed ${String(flushed)} move${flushed === 1 ? "" : "s"}`);
   });
   moves.command("status").description("Show per-bucket pending stats").action(() => {
@@ -4469,18 +4486,18 @@ function registerMovesCommands(program2) {
     }
   });
   moves.command("bind").description("Pin the current directory to an org via .prim/workspace.json").requiredOption("--orgId <orgId>", "Convex organization id").action((opts) => {
-    const dir = join7(process.cwd(), ".prim");
+    const dir = join8(process.cwd(), ".prim");
     if (!existsSync8(dir)) {
       mkdirSync6(dir, { recursive: true, mode: DIR_MODE });
     }
-    const file = join7(process.cwd(), WORKSPACE_FILE);
+    const file = join8(process.cwd(), WORKSPACE_FILE);
     writeFileSync5(file, JSON.stringify({ orgId: opts.orgId, boundAt: Date.now() }, null, 2), {
       mode: FILE_MODE
     });
     console.log(`[prim] bound ${process.cwd()} to org ${opts.orgId}`);
   });
   moves.command("drop").description("Remove the .prim/workspace.json binding from the cwd").action(() => {
-    const file = join7(process.cwd(), WORKSPACE_FILE);
+    const file = join8(process.cwd(), WORKSPACE_FILE);
     if (!existsSync8(file)) {
       console.log("[prim] no workspace binding in cwd");
       return;
@@ -4581,7 +4598,7 @@ import {
   unlinkSync as unlinkSync5,
   writeFileSync as writeFileSync6
 } from "fs";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 var DIR_MODE2 = 448;
 var FILE_MODE2 = 384;
 function ensureDir() {
@@ -4590,7 +4607,7 @@ function ensureDir() {
   }
 }
 function markerPath(sessionId) {
-  return join8(SESSIONS_DIR, `${sessionId}.json`);
+  return join9(SESSIONS_DIR, `${sessionId}.json`);
 }
 function registerSessionCommands(program2) {
   const session = program2.command("session").description("Decision Event Pipeline \u2014 session binding markers");
@@ -4618,7 +4635,7 @@ function registerSessionCommands(program2) {
     for (const f of files) {
       const sessionId = f.replace(/\.json$/, "");
       try {
-        const m = JSON.parse(readFileSync7(join8(SESSIONS_DIR, f), "utf-8"));
+        const m = JSON.parse(readFileSync7(join9(SESSIONS_DIR, f), "utf-8"));
         console.log(`${sessionId}  org=${m.orgId}`);
       } catch {
       }
@@ -4638,7 +4655,7 @@ function registerSessionCommands(program2) {
 // src/commands/setup.ts
 import { spawnSync as spawnSync2 } from "child_process";
 import { existsSync as existsSync10, readFileSync as readFileSync8 } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 var EXIT_INCOMPLETE = 1;
 var EXIT_USAGE3 = 2;
 var SESSION_LABELS = {
@@ -4714,7 +4731,7 @@ function detectProjectConflicts(agent, run) {
   }
   try {
     const root = gitToplevel();
-    const preCommit = root && join9(root, ".git", "hooks", "pre-commit");
+    const preCommit = root && join10(root, ".git", "hooks", "pre-commit");
     if (preCommit && existsSync10(preCommit) && readFileSync8(preCommit, "utf-8").includes("prim-pre-commit")) {
       conflicts.push(CONFLICT_HOOKS);
     }
@@ -4865,31 +4882,31 @@ import {
   writeFileSync as writeFileSync7
 } from "fs";
 import { homedir as homedir8 } from "os";
-import { dirname as dirname6, join as join11, resolve as resolve4 } from "path";
+import { dirname as dirname7, join as join12, resolve as resolve4 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { createPatch } from "diff";
 
 // src/commands/claude-plugin.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync9, readdirSync as readdirSync2, rmSync as rmSync3, rmdirSync } from "fs";
 import { homedir as homedir7 } from "os";
-import { dirname as dirname5, join as join10, resolve as resolve3 } from "path";
+import { dirname as dirname6, join as join11, resolve as resolve3 } from "path";
 import { fileURLToPath } from "url";
-var __dirname = dirname5(fileURLToPath(import.meta.url));
+var __dirname = dirname6(fileURLToPath(import.meta.url));
 var PLUGIN_DESCRIPTION = "Primitive decision-graph guidance for the prim CLI \u2014 a model-invoked skill installed by prim skill install.";
 function resolvePluginDir(cwd, scope) {
   if (scope && scope !== "user" && scope !== "project") {
     console.error(`Unknown --scope "${scope}" (expected user or project)`);
     return null;
   }
-  const base = scope === "user" ? join10(homedir7(), ".claude") : join10(gitToplevel(cwd) ?? cwd, ".claude");
-  return join10(base, "skills", "prim");
+  const base = scope === "user" ? join11(homedir7(), ".claude") : join11(gitToplevel(cwd) ?? cwd, ".claude");
+  return join11(base, "skills", "prim");
 }
 function packageVersion() {
   let dir = __dirname;
-  while (dir !== dirname5(dir)) {
+  while (dir !== dirname6(dir)) {
     const p = resolve3(dir, "package.json");
     if (existsSync11(p)) return JSON.parse(readFileSync9(p, "utf-8")).version;
-    dir = dirname5(dir);
+    dir = dirname6(dir);
   }
   return "0.0.0";
 }
@@ -4903,8 +4920,8 @@ function removeDirIfEmpty(dir) {
 }
 function pluginPaths(dir) {
   return {
-    manifestPath: join10(dir, ".claude-plugin", "plugin.json"),
-    skillPath: join10(dir, "SKILL.md")
+    manifestPath: join11(dir, ".claude-plugin", "plugin.json"),
+    skillPath: join11(dir, "SKILL.md")
   };
 }
 function installClaudePlugin(cwd, opts) {
@@ -4923,7 +4940,7 @@ function installClaudePlugin(cwd, opts) {
     console.log(`Would write plugin to ${dir} (.claude-plugin/plugin.json + SKILL.md)`);
     return 0;
   }
-  mkdirSync8(join10(dir, ".claude-plugin"), { recursive: true });
+  mkdirSync8(join11(dir, ".claude-plugin"), { recursive: true });
   atomicWrite3(manifestPath, manifest);
   atomicWrite3(skillPath, skill);
   console.log(`Installed prim skill plugin at ${dir}`);
@@ -4943,7 +4960,7 @@ function uninstallClaudePlugin(cwd, opts) {
   }
   rmSync3(manifestPath, { force: true });
   rmSync3(skillPath, { force: true });
-  removeDirIfEmpty(join10(dir, ".claude-plugin"));
+  removeDirIfEmpty(join11(dir, ".claude-plugin"));
   removeDirIfEmpty(dir);
   console.log(`Removed prim skill plugin from ${dir}`);
   return 0;
@@ -4966,7 +4983,7 @@ function statusClaudePlugin(cwd, opts) {
 }
 
 // src/commands/skill.ts
-var __dirname2 = dirname6(fileURLToPath2(import.meta.url));
+var __dirname2 = dirname7(fileURLToPath2(import.meta.url));
 var SKILL_BEGIN = "<!-- BEGIN PRIM SKILL v1 -->";
 var SKILL_END = "<!-- END PRIM SKILL v1 -->";
 var TARGET_CANDIDATES = [
@@ -4984,19 +5001,19 @@ var AGENT_TARGET = {
   hermes: ".hermes.md"
 };
 function userTargetFor(agent) {
-  if (agent === "claude") return join11(homedir8(), ".claude", "CLAUDE.md");
-  if (agent === "codex") return join11(homedir8(), ".codex", "AGENTS.md");
+  if (agent === "claude") return join12(homedir8(), ".claude", "CLAUDE.md");
+  if (agent === "codex") return join12(homedir8(), ".codex", "AGENTS.md");
   if (agent === "hermes") {
-    return join11(process.env.HERMES_HOME ?? join11(homedir8(), ".hermes"), ".hermes.md");
+    return join12(process.env.HERMES_HOME ?? join12(homedir8(), ".hermes"), ".hermes.md");
   }
   return null;
 }
 function loadSkill() {
   let dir = __dirname2;
-  while (dir !== dirname6(dir)) {
+  while (dir !== dirname7(dir)) {
     const p = resolve4(dir, "SKILL.md");
     if (existsSync12(p)) return readFileSync10(p, "utf-8");
-    dir = dirname6(dir);
+    dir = dirname7(dir);
   }
   throw new Error("SKILL.md not found in package");
 }
@@ -5150,13 +5167,13 @@ function registerSkillCommands(program2) {
 
 // src/commands/statusline.ts
 import { readFileSync as readFileSync11 } from "fs";
-import { dirname as dirname7, resolve as resolve5 } from "path";
+import { dirname as dirname8, resolve as resolve5 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 var STATUSLINE_TIMEOUT_MS = 200;
 var STATUSLINE_NAME_CAP = 3;
 function readPackageVersion() {
   try {
-    const here = dirname7(fileURLToPath3(import.meta.url));
+    const here = dirname8(fileURLToPath3(import.meta.url));
     const candidates = [
       // The supervised runtime stages a tiny manifest beside the standalone
       // statusline bundle, so it remains versioned without loading the package.
@@ -5197,6 +5214,9 @@ async function renderStatusline() {
     return `primitive ${version} (daemon: down)`;
   }
   if (snapshot.healthy === false) {
+    if (snapshot.needsReauth) {
+      return `primitive ${version} (daemon: paused \xB7 run \`prim auth login\`)`;
+    }
     if (snapshot.ingestion?.healthy === false) {
       const pending = snapshot.ingestion.pendingCount;
       const qualifier = snapshot.ingestion.pendingSampled ? "at least " : "";
@@ -5350,7 +5370,7 @@ function registerWelcomeCommand(program2, deps = { getClient }) {
 }
 
 // src/index.ts
-var __dirname3 = dirname8(fileURLToPath4(import.meta.url));
+var __dirname3 = dirname9(fileURLToPath4(import.meta.url));
 var pkg = JSON.parse(readFileSync12(resolve6(__dirname3, "../package.json"), "utf-8"));
 updateNotifier({ pkg }).notify();
 var program = new Command();

package/dist/statusline-main.js

@@ -312,6 +312,9 @@ async function renderStatusline() {
     return `primitive ${version} (daemon: down)`;
   }
   if (snapshot.healthy === false) {
+    if (snapshot.needsReauth) {
+      return `primitive ${version} (daemon: paused \xB7 run \`prim auth login\`)`;
+    }
     if (snapshot.ingestion?.healthy === false) {
       const pending = snapshot.ingestion.pendingCount;
       const qualifier = snapshot.ingestion.pendingSampled ? "at least " : "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.49",
+  "version": "0.1.0-alpha.50",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",