@primitive.ai/prim 0.1.0-alpha.63 → 0.1.0-alpha.64

package/dist/{chunk-KBFFVYBC.js → chunk-LNU44OJV.js}

@@ -1,8 +1,3 @@
-// src/lib/bin-cache.ts
-import { chmodSync, mkdirSync, renameSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join as join2 } from "path";
-
 // src/lib/bin-path.ts
 import { existsSync, readFileSync } from "fs";
 import { dirname, isAbsolute, join } from "path";
@@ -76,6 +71,9 @@ function commandMatchesBin(command, bin) {
 }
 
 // src/lib/bin-cache.ts
+import { chmodSync, mkdirSync, renameSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join as join2 } from "path";
 var CACHED_BINS = [
   "prim",
   "prim-hook",

package/dist/{chunk-WNIY6Z6N.js → chunk-MCPHIB4W.js}

@@ -649,6 +649,7 @@ if [ "$(git config --get prim.active 2>/dev/null)" = "true" ]; then
   case "$prim_commit_sha" in *[!0-9a-f]*|"") prim_commit_sha= ;; esac
   case "\${#prim_commit_sha}" in 40|64) ;; *) prim_commit_sha= ;; esac
   if [ -n "$prim_commit_sha" ]; then
+    prim_commit_observed_file=$(mktemp "\${TMPDIR:-/tmp}/prim-post-commit-observed.XXXXXXXX" 2>/dev/null) || prim_commit_observed_file=
     prim_commit_branch=$(git symbolic-ref --quiet --short HEAD 2>/dev/null) || prim_commit_branch=
     prim_cache_dir="\${XDG_CACHE_HOME:-$HOME/.cache}/prim/bin"
     prim_post_commit_ran=0
@@ -656,18 +657,23 @@ if [ "$(git config --get prim.active 2>/dev/null)" = "true" ]; then
       prim_node=$(cat "$prim_cache_dir/node")
       prim_entry=$(cat "$prim_cache_dir/prim-post-commit")
       if [ -x "$prim_node" ] && [ -f "$prim_entry" ]; then
-        ( trap '' HUP; export PRIM_COMMIT_SHA="$prim_commit_sha" PRIM_COMMIT_BRANCH="$prim_commit_branch"; "$prim_node" "$prim_entry" ) </dev/null >/dev/null 2>&1 &
+        ( trap '' HUP; trap 'if [ -n "$prim_commit_observed_file" ]; then rm -f "$prim_commit_observed_file"; fi' 0; export PRIM_COMMIT_SHA="$prim_commit_sha" PRIM_COMMIT_BRANCH="$prim_commit_branch" PRIM_COMMIT_OBSERVED_FILE="$prim_commit_observed_file"; "$prim_node" "$prim_entry" ) </dev/null >/dev/null 2>&1 &
         prim_post_commit_ran=1
       fi
     fi
     if [ "$prim_post_commit_ran" -eq 0 ]; then
       if [ -x "./node_modules/.bin/prim-post-commit" ]; then
-        ( trap '' HUP; export PRIM_COMMIT_SHA="$prim_commit_sha" PRIM_COMMIT_BRANCH="$prim_commit_branch"; ./node_modules/.bin/prim-post-commit ) </dev/null >/dev/null 2>&1 &
+        ( trap '' HUP; trap 'if [ -n "$prim_commit_observed_file" ]; then rm -f "$prim_commit_observed_file"; fi' 0; export PRIM_COMMIT_SHA="$prim_commit_sha" PRIM_COMMIT_BRANCH="$prim_commit_branch" PRIM_COMMIT_OBSERVED_FILE="$prim_commit_observed_file"; ./node_modules/.bin/prim-post-commit ) </dev/null >/dev/null 2>&1 &
+        prim_post_commit_ran=1
       elif command -v npx >/dev/null 2>&1; then
-        ( trap '' HUP; export PRIM_COMMIT_SHA="$prim_commit_sha" PRIM_COMMIT_BRANCH="$prim_commit_branch"; npx --yes -p @primitive.ai/prim@latest prim-post-commit ) </dev/null >/dev/null 2>&1 &
+        ( trap '' HUP; trap 'if [ -n "$prim_commit_observed_file" ]; then rm -f "$prim_commit_observed_file"; fi' 0; export PRIM_COMMIT_SHA="$prim_commit_sha" PRIM_COMMIT_BRANCH="$prim_commit_branch" PRIM_COMMIT_OBSERVED_FILE="$prim_commit_observed_file"; npx --yes -p @primitive.ai/prim@latest prim-post-commit ) </dev/null >/dev/null 2>&1 &
+        prim_post_commit_ran=1
       fi
     fi
-    unset prim_cache_dir prim_post_commit_ran prim_node prim_entry prim_commit_branch
+    if [ "$prim_post_commit_ran" -eq 0 ] && [ -n "$prim_commit_observed_file" ]; then
+      rm -f "$prim_commit_observed_file"
+    fi
+    unset prim_cache_dir prim_post_commit_ran prim_node prim_entry prim_commit_branch prim_commit_observed_file
   fi
   unset prim_commit_sha
 fi
@@ -1211,7 +1217,7 @@ function uninstallPostCommitHookAtPath(hookPath) {
 }
 
 // src/lib/repository-binding.ts
-async function bindRepository(root, options) {
+async function resolveRepositoryBinding(root, options) {
   const repositoryFullName = githubRepositoryFullName(root);
   if (!repositoryFullName) {
     throw new Error("origin must be a GitHub HTTPS/SSH remote in owner/name form");
@@ -1224,9 +1230,13 @@ async function bindRepository(root, options) {
   if (!isValidRepoSyncId(response.repoSyncId)) {
     throw new Error("server returned no repository binding");
   }
-  setRepoSyncId(root, response.repoSyncId);
   return { repoSyncId: response.repoSyncId, repositoryFullName };
 }
+async function bindRepository(root, options) {
+  const binding = await resolveRepositoryBinding(root, options);
+  setRepoSyncId(root, binding.repoSyncId);
+  return binding;
+}
 
 export {
   postCommitHookBlock,
@@ -1235,6 +1245,7 @@ export {
   inspectEffectivePostCommitHook,
   uninstallProjectPostCommitHook,
   uninstallPostCommitHookAtPath,
+  resolveRepositoryBinding,
   bindRepository,
   printJson,
   compareSemver,

package/dist/{chunk-DA4BMHEB.js → chunk-VYGY3OOX.js}

@@ -1,7 +1,7 @@
 import {
   analyzeShellTargets,
   extractFileTargets
-} from "./chunk-GF5QII7T.js";
+} from "./chunk-G5D3FF3D.js";
 import {
   canonicalRepositoryPath
 } from "./chunk-XTNMSS4C.js";
@@ -26,7 +26,7 @@ function preserveHookFileMetadata(payload, resolution) {
   return { ...payload, primitive };
 }
 function resolveHookFileRefs(args) {
-  const command = args.agent === "claude_code" && args.toolName === "Bash" && args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.command === "string" ? args.toolInput.command : void 0;
+  const command = (args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash" && args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.command === "string" ? args.toolInput.command : void 0;
   const shell = command === void 0 ? void 0 : analyzeShellTargets(command);
   const shellMutation = shell?.mutation === "none" ? "none" : shell?.coverage === "complete" ? "resolved" : shell ? "unresolved" : void 0;
   const readPath = args.agent === "claude_code" && args.toolName === "Read" && args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.file_path === "string" ? [args.toolInput.file_path] : void 0;

package/dist/hooks/post-commit.js

@@ -2,7 +2,7 @@
 import {
   commitAttributionFromEnvironment,
   toCommitMove
-} from "../chunk-QGVHLP5J.js";
+} from "../chunk-7X7SFOPJ.js";
 import {
   appendMove,
   resolveOrg
@@ -20,12 +20,30 @@ import "../chunk-CPX3BUOC.js";
 
 // src/hooks/post-commit.ts
 import { execFileSync, spawn } from "child_process";
-import { readFileSync } from "fs";
-import { dirname, join } from "path";
+import { lstatSync, readFileSync } from "fs";
+import { basename, dirname, isAbsolute, join } from "path";
 import { fileURLToPath } from "url";
 var here = dirname(fileURLToPath(import.meta.url));
 var GIT_TIMEOUT_MS = 1e3;
 var FULL_SHA_RE = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/u;
+var OBSERVATION_MARKER_RE = /^prim-post-commit-observed\.[A-Za-z0-9]+$/u;
+var MAX_OBSERVATION_MARKER_AGE_MS = 10 * 60 * 1e3;
+var MAX_OBSERVATION_MARKER_FUTURE_SKEW_MS = 5e3;
+function capturedAtFromLauncher(env = process.env, now = Date.now()) {
+  const path = env.PRIM_COMMIT_OBSERVED_FILE;
+  if (!path || !isAbsolute(path) || !OBSERVATION_MARKER_RE.test(basename(path))) return;
+  try {
+    const stat = lstatSync(path);
+    const capturedAt = Math.trunc(stat.mtimeMs);
+    const uid = process.getuid?.();
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size !== 0 || stat.nlink !== 1 || (stat.mode & 63) !== 0 || uid !== void 0 && stat.uid !== uid || !Number.isSafeInteger(capturedAt) || capturedAt <= 0 || capturedAt < now - MAX_OBSERVATION_MARKER_AGE_MS || capturedAt > now + MAX_OBSERVATION_MARKER_FUTURE_SKEW_MS) {
+      return;
+    }
+    return capturedAt;
+  } catch {
+    return;
+  }
+}
 function gitText(args) {
   try {
     return execFileSync("git", args, {
@@ -117,6 +135,10 @@ function runPostCommit() {
   if (!isRepoActiveForCapture(cwd)) {
     return;
   }
+  const capturedAt = capturedAtFromLauncher();
+  if (process.env.PRIM_COMMIT_OBSERVED_FILE !== void 0 && capturedAt === void 0) {
+    return;
+  }
   const commit = readCommit();
   if (commit) {
     const repository = resolveRepositoryContext(cwd);
@@ -128,7 +150,8 @@ function runPostCommit() {
       repoFullName: githubRepositoryFullName(cwd) ?? void 0,
       repoSyncId: repoSyncId(cwd),
       workspaceId,
-      attribution
+      attribution,
+      ...capturedAt === void 0 ? {} : { capturedAt }
     });
     const { orgId } = resolveOrg({ sessionId: move.sessionId, cwd });
     appendMove(move, orgId);
@@ -148,5 +171,6 @@ if (!process.env.VITEST) {
   process.exit(0);
 }
 export {
+  capturedAtFromLauncher,
   runPostCommit
 };

package/dist/hooks/post-tool-use.js

@@ -7,24 +7,25 @@ import {
 import {
   enrichHookPayloadWithFileRefs,
   preserveHookFileMetadata
-} from "../chunk-DA4BMHEB.js";
+} from "../chunk-VYGY3OOX.js";
 import {
   postToolInvocationId,
-  toMove
-} from "../chunk-QGVHLP5J.js";
+  toMove,
+  toolOutcomeFor
+} from "../chunk-7X7SFOPJ.js";
 import {
   appendMove,
   resolveOrg
 } from "../chunk-HIMWM526.js";
 import {
   scrubFromCwd
-} from "../chunk-GF5QII7T.js";
+} from "../chunk-G5D3FF3D.js";
 import {
   getOrCreateWorkspaceId
 } from "../chunk-UVIWZWM6.js";
 import {
   warmBinCache
-} from "../chunk-KBFFVYBC.js";
+} from "../chunk-LNU44OJV.js";
 import {
   isRepoActiveForCapture,
   repoSyncId,
@@ -74,7 +75,7 @@ function isVerdictFooterContext(value) {
 // src/hooks/post-tool-use.ts
 var STDIN_TIMEOUT_MS = 1e3;
 var EDITING_TOOLS = /* @__PURE__ */ new Set(["Edit", "Write", "MultiEdit", "NotebookEdit", "Bash"]);
-var CODEX_EDITING_TOOLS = /* @__PURE__ */ new Set(["apply_patch"]);
+var CODEX_EDITING_TOOLS = /* @__PURE__ */ new Set(["apply_patch", "Bash"]);
 var HERMES_EDITING_TOOLS = /* @__PURE__ */ new Set(["write_file", "patch"]);
 function editingToolsFor(agent) {
   if (agent === "codex") {
@@ -137,17 +138,27 @@ async function main() {
     emit();
     return;
   }
-  const envelope = parsed;
-  if (envelope.hook_event_name !== "PostToolUse") {
+  let envelope = parsed;
+  const isToolResult = envelope.hook_event_name === "PostToolUse" || agent === "claude_code" && envelope.hook_event_name === "PostToolUseFailure";
+  const isHermesDenial = agent === "hermes" && envelope.hook_event_name === "post_approval_response" && toolOutcomeFor(parsed, agent) === "prevented";
+  if (!isToolResult && !isHermesDenial) {
+    emit();
+    return;
+  }
+  const invocationId = postToolInvocationId(parsed, agent);
+  if (isHermesDenial && !invocationId) {
     emit();
     return;
   }
   const toolName = typeof envelope.tool_name === "string" ? envelope.tool_name : "";
-  const editingTools = editingToolsFor(agent);
-  if (!editingTools.has(toolName)) {
+  if (!isHermesDenial && !editingToolsFor(agent).has(toolName)) {
     emit();
     return;
   }
+  if (isHermesDenial && (typeof envelope.session_id !== "string" || envelope.session_id.length === 0) && typeof envelope.extra?.session_key === "string" && envelope.extra.session_key.length > 0) {
+    parsed = { ...parsed, session_id: envelope.extra.session_key };
+    envelope = parsed;
+  }
   if (typeof envelope.session_id !== "string" || envelope.session_id.length === 0) {
     emit();
     return;
@@ -170,18 +181,19 @@ async function main() {
     repository
   });
   const { resolution } = enrichment;
-  if (resolution.shellMutation === "none") {
-    emit();
-    return;
-  }
-  if (resolution.shellMutation === void 0 && resolution.fileRefs.length === 0) {
-    emit();
-    return;
+  if (!isHermesDenial) {
+    if (resolution.shellMutation === "none") {
+      emit();
+      return;
+    }
+    if (resolution.shellMutation === void 0 && resolution.fileRefs.length === 0) {
+      emit();
+      return;
+    }
   }
   const enriched = enrichment.parsed;
   const identity = getOrCreateWorkspaceId(cwd);
   const workspaceId = identity.status === "ready" ? identity.workspaceId : void 0;
-  const invocationId = postToolInvocationId(enriched, agent);
   const base = toMove(enriched, resolveCliVersion(), agent, workspaceId, repository, invocationId);
   const scrubbed = scrubFromCwd(enriched, cwd);
   const move = {

package/dist/hooks/pre-tool-use.js

@@ -12,10 +12,11 @@ import {
   failOpenOutput,
   readHookMode,
   scrub
-} from "../chunk-GF5QII7T.js";
+} from "../chunk-G5D3FF3D.js";
 import {
+  packageVersion,
   warmBinCache
-} from "../chunk-KBFFVYBC.js";
+} from "../chunk-LNU44OJV.js";
 import {
   canonicalGitRoot,
   canonicalRepositoryPath,
@@ -36,6 +37,11 @@ var PREFLIGHT_PROTOCOL_VERSION = 3;
 var PREFLIGHT_TIMEOUT_MS = 6500;
 var MAX_PREFLIGHT_PATHS = 32;
 var MAX_PROPOSAL_BYTES = 6144;
+var MAX_CLIENT_VERSION_CHARS = 32;
+var CLIENT_VERSION_RE = /^[A-Za-z0-9][A-Za-z0-9._+-]*$/;
+function boundedClientVersion(raw) {
+  return typeof raw === "string" && raw.length <= MAX_CLIENT_VERSION_CHARS && CLIENT_VERSION_RE.test(raw) ? raw : "unknown";
+}
 function resolvePreflightTargets(args) {
   let rawPaths;
   let coverage = "complete";
@@ -224,6 +230,8 @@ async function main() {
   const request = {
     protocolVersion: PREFLIGHT_PROTOCOL_VERSION,
     agent,
+    clientMode: mode,
+    clientVersion: boundedClientVersion(packageVersion()),
     sessionId,
     invocationId: callId,
     repoSyncId: binding,

package/dist/hooks/prim-hook.js

@@ -2,19 +2,19 @@
 import {
   enrichHookPayloadWithFileRefs,
   preserveHookFileMetadata
-} from "../chunk-DA4BMHEB.js";
+} from "../chunk-VYGY3OOX.js";
 import {
   postToolInvocationId,
   shouldFlushAfter,
   toMove
-} from "../chunk-QGVHLP5J.js";
+} from "../chunk-7X7SFOPJ.js";
 import {
   appendMove,
   resolveOrg
 } from "../chunk-HIMWM526.js";
 import {
   scrubFromCwd
-} from "../chunk-GF5QII7T.js";
+} from "../chunk-G5D3FF3D.js";
 import {
   buildHookOutput,
   handoffHookOutput
@@ -30,7 +30,7 @@ import {
 } from "../chunk-UVIWZWM6.js";
 import {
   warmBinCache
-} from "../chunk-KBFFVYBC.js";
+} from "../chunk-LNU44OJV.js";
 import {
   isRepoActiveForCapture,
   repoSyncId,

package/dist/hooks/session-start.js

@@ -4,7 +4,7 @@ import {
   ensureEffectivePostCommitHook,
   hasUsableCodexGuidance,
   refreshClaudePlugins
-} from "../chunk-WNIY6Z6N.js";
+} from "../chunk-MCPHIB4W.js";
 import {
   buildHookOutput,
   handoffHookOutput
@@ -21,12 +21,11 @@ import {
 import {
   binFile,
   warmBinCache
-} from "../chunk-KBFFVYBC.js";
+} from "../chunk-LNU44OJV.js";
 import {
   gitToplevel,
   isRepoActiveForCapture,
   repoActiveFlag,
-  repoSyncId,
   setRepoActive
 } from "../chunk-XTNMSS4C.js";
 import {
@@ -102,14 +101,12 @@ async function activeProjectRoot(cwd) {
       } catch {
       }
     }
-    if (!repoSyncId(root)) {
-      try {
-        await bindRepository(root, {
-          signal: AbortSignal.timeout(REPOSITORY_BIND_TIMEOUT_MS),
-          quietRefresh: true
-        });
-      } catch {
-      }
+    try {
+      await bindRepository(root, {
+        signal: AbortSignal.timeout(REPOSITORY_BIND_TIMEOUT_MS),
+        quietRefresh: true
+      });
+    } catch {
     }
     return root;
   } catch {

package/dist/index.js

@@ -32,9 +32,10 @@ import {
   postCommitHookBlock,
   printJson,
   registerSkillCommands,
+  resolveRepositoryBinding,
   uninstallPostCommitHookAtPath,
   uninstallProjectPostCommitHook
-} from "./chunk-WNIY6Z6N.js";
+} from "./chunk-MCPHIB4W.js";
 import {
   fetchFeedbackCapability
 } from "./chunk-KHZNYEUV.js";
@@ -48,7 +49,7 @@ import {
   packageVersion,
   pinnedHookCommand,
   warmBinCache
-} from "./chunk-KBFFVYBC.js";
+} from "./chunk-LNU44OJV.js";
 import {
   canonicalGitRoot,
   canonicalRepositoryPath,
@@ -1473,6 +1474,7 @@ var CAPTURE_EVENTS = [
   "UserPromptSubmit",
   "PreToolUse",
   "PostToolUse",
+  "PostToolUseFailure",
   "Stop",
   "SessionEnd",
   "SubagentStop"
@@ -1494,6 +1496,11 @@ var REGISTRATIONS = [
   ),
   makeRegistration("PreToolUse", "Edit|Write|MultiEdit|NotebookEdit|Bash", GATE_BIN),
   makeRegistration("PostToolUse", "Edit|Write|MultiEdit|NotebookEdit|Bash", POST_TOOL_USE_BIN),
+  makeRegistration(
+    "PostToolUseFailure",
+    "Edit|Write|MultiEdit|NotebookEdit|Bash",
+    POST_TOOL_USE_BIN
+  ),
   makeRegistration("SessionStart", "*", SESSION_START_BIN),
   makeDetachedRegistration("SessionEnd", "*", SESSION_END_BIN)
 ];
@@ -1875,6 +1882,8 @@ var GATE_BIN2 = "prim-pre-tool-use";
 var POST_TOOL_USE_BIN2 = "prim-post-tool-use";
 var SESSION_START_BIN2 = "prim-session-start";
 var CODEX_ARGS = "--agent codex";
+var CODEX_EDIT_MATCHER = "apply_patch";
+var CODEX_POST_TOOL_MATCHER = "apply_patch|Bash";
 var JSON_INDENT2 = 2;
 var CODEX_CAPTURE_EVENTS = [
   "SessionStart",
@@ -1887,8 +1896,8 @@ var CODEX_CAPTURE_EVENTS = [
 var PRIM_BINS2 = [CAPTURE_BIN2, GATE_BIN2, POST_TOOL_USE_BIN2, SESSION_START_BIN2];
 var CODEX_REGISTRATIONS = [
   ...CODEX_CAPTURE_EVENTS.map((event) => makeRegistration(event, "*", CAPTURE_BIN2, CODEX_ARGS)),
-  makeRegistration("PreToolUse", "apply_patch", GATE_BIN2, CODEX_ARGS),
-  makeRegistration("PostToolUse", "apply_patch", POST_TOOL_USE_BIN2, CODEX_ARGS),
+  makeRegistration("PreToolUse", CODEX_EDIT_MATCHER, GATE_BIN2, CODEX_ARGS),
+  makeRegistration("PostToolUse", CODEX_POST_TOOL_MATCHER, POST_TOOL_USE_BIN2, CODEX_ARGS),
   makeRegistration("SessionStart", "*", SESSION_START_BIN2, CODEX_ARGS)
 ];
 var USER_SCOPE_PATH2 = join3(homedir3(), ".codex", "hooks.json");
@@ -3908,19 +3917,46 @@ function checkWorkspaceIdentity() {
       };
   }
 }
-function classifyRepositoryBinding(value) {
-  return isValidRepoSyncId(value) ? {
+function classifyRepositoryBinding(value, currentServerValue) {
+  if (!isValidRepoSyncId(value)) {
+    return {
+      name: "repo-binding",
+      status: "fail",
+      detail: "missing or invalid local prim.repoSyncId \u2014 run `prim enable`"
+    };
+  }
+  if (currentServerValue !== void 0 && value !== currentServerValue) {
+    return {
+      name: "repo-binding",
+      status: "fail",
+      detail: "local repository binding is stale for the current origin \u2014 run `prim enable`"
+    };
+  }
+  return {
     name: "repo-binding",
     status: "ok",
-    detail: "valid local repository binding ready"
-  } : {
-    name: "repo-binding",
-    status: "fail",
-    detail: "missing or invalid local prim.repoSyncId \u2014 run `prim enable`"
+    detail: currentServerValue === void 0 ? "valid local repository binding ready" : "local repository binding matches the current server binding"
   };
 }
-function checkRepositoryBinding() {
-  return classifyRepositoryBinding(repoSyncId(process.cwd()));
+async function checkRepositoryBinding() {
+  const root = process.cwd();
+  const local = repoSyncId(root);
+  const localCheck = classifyRepositoryBinding(local);
+  if (localCheck.status === "fail") return localCheck;
+  try {
+    const current = await resolveRepositoryBinding(root, {
+      signal: AbortSignal.timeout(CONNECTIVITY_TIMEOUT_MS),
+      quietRefresh: true
+    });
+    return classifyRepositoryBinding(local, current.repoSyncId);
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    return {
+      name: "repo-binding",
+      status: "fail",
+      detail: `could not verify the current repository binding \u2014 ${detail.slice(0, 80)}`
+    };
+  }
 }
 function classifyPostCommitHook(inspection) {
   if (inspection.covered) {
@@ -4067,7 +4103,7 @@ async function collectChecks() {
     checkStranded(),
     checkFeedbackHooks(),
     checkWorkspaceIdentity(),
-    checkRepositoryBinding(),
+    await checkRepositoryBinding(),
     checkPostCommitHook(),
     ...backend,
     await checkFeedbackCapability()
@@ -4176,6 +4212,7 @@ var REGISTRATIONS2 = [
   ...CAPTURE_EVENTS2.map((event) => ({ event, bin: CAPTURE_BIN3 })),
   { event: "pre_tool_call", matcher: EDIT_MATCHER, bin: GATE_BIN3, timeout: GATE_TIMEOUT_SECONDS },
   { event: "post_tool_call", matcher: EDIT_MATCHER, bin: POST_TOOL_USE_BIN3 },
+  { event: "post_approval_response", bin: POST_TOOL_USE_BIN3 },
   { event: "on_session_start", bin: SESSION_START_BIN3 },
   { event: "on_session_end", bin: SESSION_END_BIN2 }
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.63",
+  "version": "0.1.0-alpha.64",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",