@primitive.ai/prim 0.1.0-alpha.7 → 0.1.0-alpha.70

package/dist/chunk-LMRYZL3D.js

@@ -0,0 +1,209 @@
+import {
+  getClient,
+  isTerminalSafeText,
+  terminalSafeLine,
+  terminalSafeText
+} from "./chunk-Z7YPFWAZ.js";
+
+// src/decisions/feedback.ts
+var FEEDBACK_PROTOCOL_VERSION = 2;
+var FEEDBACK_MIN_PROTOCOL_VERSION = 1;
+var FEEDBACK_DEADLINE_MS = 3e3;
+var MAX_FEEDBACK_EVENTS = 40;
+var MAX_FEEDBACK_MESSAGE_CODE_POINTS = 8e3;
+var MAX_FEEDBACK_INTENT_CODE_POINTS = 180;
+var LEASE_PATH = "/api/cli/decisions/feedback/lease";
+var ACK_PATH = "/api/cli/decisions/feedback/ack";
+var STATUS_PATH = "/api/cli/decisions/feedback/status";
+var SHORT_ID = /^[0-9a-f]{8}$/u;
+var MAX_EVENT_ID_CHARS = 128;
+var MAX_RAW_INTENT_CODE_UNITS = 512;
+var MAX_FEEDBACK_WEB_URL_CHARS = 2048;
+var SAFE_PUBLISH_DECISION_ID = /^[A-Za-z0-9_-]+$/u;
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isSupportedProtocolVersion(value) {
+  return Number.isSafeInteger(value) && Number(value) >= FEEDBACK_MIN_PROTOCOL_VERSION && Number(value) <= FEEDBACK_PROTOCOL_VERSION;
+}
+function normalizeFeedbackIntent(value) {
+  const withoutControls = terminalSafeLine(value);
+  const points = Array.from(withoutControls);
+  if (points.length <= MAX_FEEDBACK_INTENT_CODE_POINTS) {
+    return withoutControls;
+  }
+  return `${points.slice(0, MAX_FEEDBACK_INTENT_CODE_POINTS - 1).join("")}\u2026`;
+}
+function parseFeedbackWebUrl(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > MAX_FEEDBACK_WEB_URL_CHARS || !/^https:\/\//iu.test(value) || /\s/u.test(value) || !isTerminalSafeText(value)) {
+    return void 0;
+  }
+  try {
+    const url = new URL(value);
+    if (url.protocol !== "https:" || !url.hostname || url.username.length > 0 || url.password.length > 0) {
+      return void 0;
+    }
+  } catch {
+    return void 0;
+  }
+  return value;
+}
+function parseFeedbackDecisionId(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > MAX_EVENT_ID_CHARS || terminalSafeText(value) !== value || !SAFE_PUBLISH_DECISION_ID.test(value)) {
+    return void 0;
+  }
+  return value;
+}
+function parseEvent(value, protocolVersion) {
+  if (!isRecord(value)) return void 0;
+  if (typeof value.eventId !== "string" || value.eventId.length === 0 || value.eventId.length > MAX_EVENT_ID_CHARS || terminalSafeText(value.eventId) !== value.eventId) {
+    return void 0;
+  }
+  if (!Number.isSafeInteger(value.leaseVersion) || Number(value.leaseVersion) < 1) {
+    return void 0;
+  }
+  if (typeof value.shortId !== "string" || !SHORT_ID.test(value.shortId)) {
+    return void 0;
+  }
+  if (typeof value.intent !== "string" || value.intent.length > MAX_RAW_INTENT_CODE_UNITS) {
+    return void 0;
+  }
+  const intent = normalizeFeedbackIntent(value.intent);
+  if (!intent) return void 0;
+  const webUrl = value.webUrl === void 0 ? void 0 : parseFeedbackWebUrl(value.webUrl);
+  if (value.webUrl !== void 0 && webUrl === void 0) return void 0;
+  const kind = value.kind === void 0 && protocolVersion === 1 ? "confirm_prompt" : value.kind;
+  if (kind !== "confirm_prompt" && kind !== "publish_prompt") return void 0;
+  if (protocolVersion === 1 && kind === "publish_prompt") return void 0;
+  const decisionId = value.decisionId === void 0 ? void 0 : parseFeedbackDecisionId(value.decisionId);
+  if (value.decisionId !== void 0 && decisionId === void 0) return void 0;
+  if (decisionId !== void 0 && (protocolVersion !== 2 || kind !== "publish_prompt")) {
+    return void 0;
+  }
+  if (protocolVersion === 2 && kind === "publish_prompt" && decisionId === void 0) {
+    return void 0;
+  }
+  return {
+    eventId: value.eventId,
+    leaseVersion: Number(value.leaseVersion),
+    shortId: value.shortId,
+    intent,
+    ...webUrl === void 0 ? {} : { webUrl },
+    ...decisionId === void 0 ? {} : { decisionId },
+    kind
+  };
+}
+function parseFeedbackLease(value) {
+  if (!isRecord(value) || !isSupportedProtocolVersion(value.protocolVersion)) return void 0;
+  const protocolVersion = value.protocolVersion;
+  if (value.status === "empty") {
+    return value.hasMore === false ? { protocolVersion, events: [], hasMore: false } : void 0;
+  }
+  if (value.status === "unavailable") {
+    return value.reason === "organization_unbound" ? { protocolVersion, events: [], hasMore: false } : void 0;
+  }
+  if (value.status !== "leased" || typeof value.hasMore !== "boolean") return void 0;
+  if (!Array.isArray(value.events) || value.events.length === 0 || value.events.length > MAX_FEEDBACK_EVENTS) {
+    return void 0;
+  }
+  const events = value.events.map((event) => parseEvent(event, protocolVersion));
+  if (events.some((event) => event === void 0)) return void 0;
+  const parsedEvents = events;
+  if (new Set(parsedEvents.map((event) => event.eventId)).size !== parsedEvents.length) {
+    return void 0;
+  }
+  return { protocolVersion, events: parsedEvents, hasMore: value.hasMore };
+}
+function renderFeedback(lease) {
+  const lines = [];
+  const deliveries = [];
+  let pointCount = 0;
+  for (const event of lease.events) {
+    const decisionId = event.kind === "publish_prompt" ? parseFeedbackDecisionId(event.decisionId) : void 0;
+    if (event.kind === "publish_prompt" && decisionId === void 0) continue;
+    const identifier = `dec_${event.shortId}`;
+    const detail = `${event.intent}${event.webUrl ? ` (${event.webUrl})` : ""}`;
+    const line = event.kind === "publish_prompt" ? `[prim] publish this Decision draft (${identifier})? ${detail} Run \`prim decisions publish ${decisionId}\` to share it with your team.` : `[prim] response \u2192 created Decision (${identifier}): ${detail}`;
+    const extra = Array.from(line).length + (lines.length === 0 ? 0 : 1);
+    if (pointCount + extra > MAX_FEEDBACK_MESSAGE_CODE_POINTS) break;
+    lines.push(line);
+    deliveries.push({ eventId: event.eventId, leaseVersion: event.leaseVersion });
+    pointCount += extra;
+  }
+  if (lines.length === 0) return void 0;
+  return { protocolVersion: lease.protocolVersion, systemMessage: lines.join("\n"), deliveries };
+}
+async function leaseDecisionFeedback(input, dependencies = {}) {
+  try {
+    const response = await (dependencies.client ?? getClient()).post(
+      LEASE_PATH,
+      {
+        protocolVersion: FEEDBACK_PROTOCOL_VERSION,
+        workspaceId: input.workspaceId,
+        currentSessionId: input.currentSessionId
+      },
+      { signal: input.signal, quietRefresh: true }
+    );
+    const parsed = parseFeedbackLease(response);
+    if (!parsed) {
+      dependencies.onError?.(
+        new Error("server returned an unsupported decision-feedback contract")
+      );
+    }
+    return parsed;
+  } catch (error) {
+    dependencies.onError?.(error);
+    return void 0;
+  }
+}
+async function acknowledgeDecisionFeedback(input, dependencies = {}) {
+  if (!isSupportedProtocolVersion(input.protocolVersion) || input.deliveries.length === 0 || input.deliveries.length > MAX_FEEDBACK_EVENTS) {
+    return false;
+  }
+  try {
+    const response = await (dependencies.client ?? getClient()).post(
+      ACK_PATH,
+      {
+        protocolVersion: input.protocolVersion,
+        workspaceId: input.workspaceId,
+        deliveries: input.deliveries
+      },
+      { signal: input.signal, quietRefresh: true }
+    );
+    const acknowledgedEventIds = isRecord(response) ? response.acknowledgedEventIds : void 0;
+    const expectedEventIds = new Set(input.deliveries.map((delivery) => delivery.eventId));
+    const valid = isRecord(response) && response.protocolVersion === input.protocolVersion && response.status === "acked" && Array.isArray(acknowledgedEventIds) && acknowledgedEventIds.length <= input.deliveries.length && acknowledgedEventIds.every(
+      (id) => typeof id === "string" && id.length > 0 && id.length <= MAX_EVENT_ID_CHARS && expectedEventIds.has(id)
+    ) && new Set(acknowledgedEventIds).size === acknowledgedEventIds.length;
+    if (!valid) {
+      dependencies.onError?.(
+        new Error("server returned an unsupported decision-feedback acknowledgement")
+      );
+    }
+    return valid;
+  } catch (error) {
+    dependencies.onError?.(error);
+    return false;
+  }
+}
+function parseFeedbackCapability(value) {
+  if (!isRecord(value) || !isSupportedProtocolVersion(value.protocolVersion)) return void 0;
+  if (value.status === "available") return { status: "available" };
+  if (value.status === "unavailable" && value.reason === "organization_unbound") {
+    return { status: "unavailable", reason: "organization_unbound" };
+  }
+  return void 0;
+}
+async function fetchFeedbackCapability(signal, client = getClient()) {
+  const result = parseFeedbackCapability(await client.get(STATUS_PATH, { signal }));
+  if (!result) throw new Error("server returned an unsupported decision-feedback contract");
+  return result;
+}
+
+export {
+  FEEDBACK_DEADLINE_MS,
+  renderFeedback,
+  leaseDecisionFeedback,
+  acknowledgeDecisionFeedback,
+  fetchFeedbackCapability
+};

package/dist/chunk-RO3F6JYV.js

@@ -0,0 +1,126 @@
+import {
+  getClient,
+  getSiteUrl,
+  terminalSafeLine
+} from "./chunk-Z7YPFWAZ.js";
+import {
+  daemonRequest
+} from "./chunk-CUE2LKLR.js";
+
+// src/daemon/proxy.ts
+var DAEMON_HTTP_TIMEOUT_MS = 1e4;
+var DAEMON_PROBE_TIMEOUT_MS = 250;
+async function daemonOrDirect(method, params, direct) {
+  const fromDaemon = await daemonRequest(
+    method,
+    { ...params, callerEnv: getSiteUrl() },
+    { timeoutMs: DAEMON_PROBE_TIMEOUT_MS }
+  );
+  if (fromDaemon !== null) {
+    return fromDaemon;
+  }
+  return await direct();
+}
+async function daemonOrDirectGet(method, path, client, timeoutMs = DAEMON_HTTP_TIMEOUT_MS) {
+  return await daemonOrDirect(
+    method,
+    { path },
+    async () => await client.get(path, {
+      signal: AbortSignal.timeout(timeoutMs)
+    })
+  );
+}
+
+// src/hooks/decisions-check.ts
+var DECISIONS_CHECK_TIMEOUT_MS = 1e4;
+var MAX_FILES_PER_REQUEST = 25;
+var defaultDeps = { getClient };
+function chunk(items, size) {
+  const out = [];
+  for (let i = 0; i < items.length; i += size) {
+    out.push(items.slice(i, i + size));
+  }
+  return out;
+}
+async function fetchAffecting(client, batch) {
+  const params = new URLSearchParams();
+  for (const file of batch) {
+    params.append("files", file);
+  }
+  try {
+    return await daemonOrDirectGet(
+      "decisions_affecting",
+      `/api/cli/decisions/affecting?${params.toString()}`,
+      client,
+      DECISIONS_CHECK_TIMEOUT_MS
+    );
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    return { decisions: [], truncated: false, unavailable: `decision check failed: ${detail}` };
+  }
+}
+async function checkAffectedDecisions(filePaths, deps = defaultDeps) {
+  if (filePaths.length === 0) {
+    return { decisions: [], truncated: false };
+  }
+  const client = deps.getClient();
+  const responses = await Promise.all(
+    chunk(filePaths, MAX_FILES_PER_REQUEST).map((batch) => fetchAffecting(client, batch))
+  );
+  const byId = /* @__PURE__ */ new Map();
+  let truncated = false;
+  let unavailable;
+  for (const res of responses) {
+    if (res.unavailable !== void 0 && unavailable === void 0) {
+      unavailable = res.unavailable;
+    }
+    truncated ||= res.truncated === true;
+    for (const d of res.decisions) {
+      const existing = byId.get(d.id);
+      if (existing) {
+        existing.matchedFiles = [.../* @__PURE__ */ new Set([...existing.matchedFiles, ...d.matchedFiles])];
+      } else {
+        byId.set(d.id, { ...d, matchedFiles: [...d.matchedFiles] });
+      }
+    }
+  }
+  const result = { decisions: [...byId.values()], truncated };
+  if (unavailable !== void 0) {
+    result.unavailable = unavailable;
+  }
+  return result;
+}
+var FILES_PREVIEW_LIMIT = 3;
+function formatDecisionsWarning(result) {
+  const lines = [];
+  if (result.unavailable !== void 0) {
+    lines.push(`[prim] decision check not verified \u2014 ${terminalSafeLine(result.unavailable)}`);
+  }
+  if (result.decisions.length > 0) {
+    lines.push(
+      `[prim] ${String(result.decisions.length)} active decision(s) reference staged files:`
+    );
+    for (const d of result.decisions) {
+      const statusMark = d.status === "under_review" ? " (under review)" : "";
+      const preview = d.matchedFiles.slice(0, FILES_PREVIEW_LIMIT).map(terminalSafeLine).join(", ");
+      const overflow = d.matchedFiles.length > FILES_PREVIEW_LIMIT ? ` (+${String(d.matchedFiles.length - FILES_PREVIEW_LIMIT)} more)` : "";
+      lines.push(`  \xB7 ${terminalSafeLine(d.intent)}${statusMark}`);
+      lines.push(`    files: ${preview}${overflow}`);
+      if (d.rationale) {
+        lines.push(`    rationale: ${terminalSafeLine(d.rationale)}`);
+      }
+    }
+  }
+  if (result.truncated) {
+    lines.push(
+      "[prim] result truncated \u2014 more files than the server checks per request; not all decisions shown"
+    );
+  }
+  return lines.join("\n");
+}
+
+export {
+  daemonOrDirectGet,
+  checkAffectedDecisions,
+  formatDecisionsWarning
+};

package/dist/chunk-TJTVHDJ5.js

@@ -0,0 +1,321 @@
+// src/lib/git.ts
+import { execFileSync } from "child_process";
+import { createHash } from "crypto";
+import { lstatSync, realpathSync } from "fs";
+import { basename, dirname, isAbsolute, relative, resolve, sep } from "path";
+var GIT_TIMEOUT_MS = 1e3;
+var GITHUB_OWNER_PATTERN = /^(?![A-Za-z0-9-]*--)[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/u;
+var GITHUB_REPOSITORY_PATTERN = /^[A-Za-z0-9._-]{1,100}$/u;
+function gitToplevel(cwd) {
+  try {
+    return execFileSync("git", ["rev-parse", "--show-toplevel"], {
+      cwd,
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: GIT_TIMEOUT_MS
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function gitValue(cwd, args) {
+  try {
+    const value = execFileSync("git", args, {
+      cwd,
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: GIT_TIMEOUT_MS
+    }).trim();
+    return value || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function githubRepositoryFullName(cwd) {
+  const remote = gitValue(cwd, ["config", "--get", "remote.origin.url"]);
+  if (!remote || [...remote].some((char) => char < " " || char === "\x7F")) return null;
+  const match = /^(?:git@github\.com:([^?#]+)|(?:https|ssh):\/\/(?:[^/@]+@)?github\.com(?::\d+)?\/([^?#]+))$/i.exec(
+    remote
+  );
+  const path = match?.[1] ?? match?.[2];
+  if (!path) return null;
+  const parts = path.replace(/^\/+|\/+$/g, "").replace(/\.git$/i, "").split("/");
+  if (parts.length !== 2 || !GITHUB_OWNER_PATTERN.test(parts[0] ?? "") || !GITHUB_REPOSITORY_PATTERN.test(parts[1] ?? "")) {
+    return null;
+  }
+  return `${parts[0]}/${parts[1]}`;
+}
+function canonicalGitRoot(cwd) {
+  try {
+    const top = gitToplevel(cwd);
+    return top ? realpathSync.native(top) : null;
+  } catch {
+    return null;
+  }
+}
+function normalizeOriginRemote(remote) {
+  const value = remote.trim();
+  if (!value) return void 0;
+  const scp = !value.includes("://") ? /^(?:[^@/\s]+@)?(?<host>[^:/\s]+):(?<path>.+)$/.exec(value)?.groups : void 0;
+  if (scp?.host && scp.path) {
+    const path = scp.path.replace(/^\/+|\/+$/g, "").replace(/\.git$/i, "");
+    return path ? `${scp.host.toLowerCase()}/${path}` : void 0;
+  }
+  try {
+    const url = new URL(value);
+    url.username = "";
+    url.password = "";
+    url.search = "";
+    url.hash = "";
+    const path = url.pathname.replace(/^\/+|\/+$/g, "").replace(/\.git$/i, "");
+    if (url.host && path) return `${url.host.toLowerCase()}/${path}`;
+    return void 0;
+  } catch {
+    return void 0;
+  }
+}
+function opaqueRepoKey(source, value) {
+  return `repo_v1_${createHash("sha256").update(`${source}\0${value}`).digest("hex")}`;
+}
+function resolveRepositoryContext(cwd = process.cwd()) {
+  const top = gitToplevel(cwd);
+  if (!top) return null;
+  let repoRoot;
+  try {
+    repoRoot = realpathSync.native(top);
+  } catch {
+    repoRoot = resolve(top);
+  }
+  const origin = gitValue(repoRoot, ["config", "--get", "remote.origin.url"]);
+  const repoFullName = githubRepositoryFullName(repoRoot) ?? void 0;
+  const normalizedOrigin = origin ? normalizeOriginRemote(origin) : void 0;
+  if (normalizedOrigin) {
+    return {
+      repoRoot,
+      repoKey: opaqueRepoKey("origin", normalizedOrigin),
+      identitySource: "origin",
+      repoFullName
+    };
+  }
+  const roots = gitValue(repoRoot, ["rev-list", "--max-parents=0", "HEAD"])?.split(/\s+/).filter(Boolean).sort();
+  if (roots && roots.length > 0) {
+    return {
+      repoRoot,
+      repoKey: opaqueRepoKey("root_commit", roots.join("\n")),
+      identitySource: "root_commit",
+      repoFullName
+    };
+  }
+  return { repoRoot, repoFullName };
+}
+function nearestExistingAncestor(path) {
+  const suffix = [];
+  let cursor = path;
+  while (true) {
+    try {
+      lstatSync(cursor);
+      break;
+    } catch (error) {
+      const code = typeof error === "object" && error !== null && "code" in error ? error.code : void 0;
+      if (code !== "ENOENT" && code !== "ENOTDIR") return null;
+      const parent = dirname(cursor);
+      if (parent === cursor) return null;
+      suffix.unshift(cursor.slice(parent.length + (parent.endsWith(sep) ? 0 : 1)));
+      cursor = parent;
+    }
+  }
+  try {
+    return { real: realpathSync.native(cursor), suffix };
+  } catch {
+    return null;
+  }
+}
+function canonicalRepositoryPathScoped(filePath, context, baseDir) {
+  if (!filePath || filePath !== filePath.trim() || filePath.includes("\0")) {
+    return { ok: false, reason: "invalid_path" };
+  }
+  const absolute = resolve(baseDir, filePath);
+  const resolved = nearestExistingAncestor(absolute);
+  if (!resolved) return { ok: false, reason: "invalid_path" };
+  const target = resolve(resolved.real, ...resolved.suffix);
+  const rel = relative(context.repoRoot, target);
+  if (!rel || rel === ".") return { ok: false, reason: "invalid_path" };
+  if (isAbsolute(rel) || rel === ".." || rel.startsWith(`..${sep}`)) {
+    return { ok: false, reason: "outside_repository" };
+  }
+  return { ok: true, file: sep === "/" ? rel : rel.split(sep).join("/") };
+}
+function canonicalRepositoryPathLegacy(filePath, cwd, repositoryRoot = canonicalGitRoot(cwd)) {
+  if (!repositoryRoot || !filePath || [...filePath].some((char) => char < " " || char === "\x7F" || "~*?[]{}$`\\".includes(char)))
+    return null;
+  const absolute = resolve(cwd, filePath);
+  let target;
+  try {
+    const stat = lstatSync(absolute);
+    if (!stat.isFile() || stat.isSymbolicLink()) return null;
+    target = realpathSync.native(absolute);
+  } catch (error) {
+    if (!(error instanceof Error) || error.code !== "ENOENT") {
+      return null;
+    }
+    try {
+      const parent = realpathSync.native(dirname(absolute));
+      if (!lstatSync(parent).isDirectory()) return null;
+      target = resolve(parent, basename(absolute));
+    } catch {
+      return null;
+    }
+  }
+  const rel = relative(repositoryRoot, target);
+  if (!rel || isAbsolute(rel) || rel === ".." || rel.startsWith(`..${sep}`)) {
+    return null;
+  }
+  return sep === "/" ? rel : rel.split(sep).join("/");
+}
+function canonicalRepositoryPath(filePath, contextOrCwd, baseDirOrRoot) {
+  if (typeof contextOrCwd === "string") {
+    return canonicalRepositoryPathLegacy(filePath, contextOrCwd, baseDirOrRoot);
+  }
+  return canonicalRepositoryPathScoped(
+    filePath,
+    contextOrCwd,
+    baseDirOrRoot ?? contextOrCwd.repoRoot
+  );
+}
+
+// src/lib/activation.ts
+import { execFileSync as execFileSync2 } from "child_process";
+import { existsSync, readFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+var PRIM_ACTIVE_KEY = "prim.active";
+var PRIM_REPO_SYNC_ID_KEY = "prim.repoSyncId";
+var PRIM_REPO_SYNC_REPOSITORY_KEY = "prim.repoSyncRepository";
+var PRIM_REPO_BINDING_STATE_KEY = "prim.repoBindingState";
+var GIT_TIMEOUT_MS2 = 1e3;
+var REPO_SYNC_ID_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
+var PROJECT_INSTALL_FILES = [".claude/settings.json", ".codex/hooks.json"];
+var PRIM_HOOK_BINS = ["prim-hook", "prim-pre-tool-use", "prim-post-tool-use"];
+function repoActiveFlag(cwd) {
+  try {
+    const value = execFileSync2("git", ["config", "--get", PRIM_ACTIVE_KEY], {
+      cwd,
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: GIT_TIMEOUT_MS2
+    }).trim();
+    if (value === "true") return "true";
+    if (value === "false") return "false";
+    return void 0;
+  } catch {
+    return void 0;
+  }
+}
+function isRepoActive(cwd) {
+  return repoActiveFlag(cwd) === "true";
+}
+function setRepoActive(cwd, active) {
+  execFileSync2("git", ["config", "--local", PRIM_ACTIVE_KEY, active ? "true" : "false"], {
+    cwd,
+    stdio: ["ignore", "ignore", "pipe"],
+    timeout: GIT_TIMEOUT_MS2
+  });
+}
+function isValidRepoSyncId(value) {
+  return typeof value === "string" && REPO_SYNC_ID_RE.test(value);
+}
+function localGitConfigValue(cwd, key) {
+  try {
+    const value = execFileSync2("git", ["config", "--local", "--get", key], {
+      cwd,
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: GIT_TIMEOUT_MS2
+    }).trim();
+    return value || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function repoSyncId(cwd) {
+  const value = localGitConfigValue(cwd, PRIM_REPO_SYNC_ID_KEY);
+  if (!isValidRepoSyncId(value)) return void 0;
+  const repositoryFullName = localGitConfigValue(cwd, PRIM_REPO_SYNC_REPOSITORY_KEY);
+  return repositoryFullName === githubRepositoryFullName(cwd) ? value : void 0;
+}
+function setRepoSyncId(cwd, value, repositoryFullName) {
+  if (!isValidRepoSyncId(value)) {
+    throw new Error("invalid repository binding returned by server");
+  }
+  execFileSync2("git", ["config", "--local", PRIM_REPO_SYNC_ID_KEY, value], {
+    cwd,
+    stdio: ["ignore", "ignore", "pipe"],
+    timeout: GIT_TIMEOUT_MS2
+  });
+  execFileSync2("git", ["config", "--local", PRIM_REPO_SYNC_REPOSITORY_KEY, repositoryFullName], {
+    cwd,
+    stdio: ["ignore", "ignore", "pipe"],
+    timeout: GIT_TIMEOUT_MS2
+  });
+}
+function setRepositoryBindingState(cwd, state) {
+  if (state !== "connected" && state !== "unbound" && state !== "invalid") {
+    throw new Error("invalid repository binding state");
+  }
+  execFileSync2("git", ["config", "--local", PRIM_REPO_BINDING_STATE_KEY, state], {
+    cwd,
+    stdio: ["ignore", "ignore", "pipe"],
+    timeout: GIT_TIMEOUT_MS2
+  });
+}
+function repositoryBindingState(cwd) {
+  const rawId = localGitConfigValue(cwd, PRIM_REPO_SYNC_ID_KEY);
+  const marker = localGitConfigValue(cwd, PRIM_REPO_BINDING_STATE_KEY);
+  if (rawId !== void 0 && !isValidRepoSyncId(rawId)) return "invalid";
+  if (marker === "unbound" || marker === "invalid") return marker;
+  if (marker === "connected") return repoSyncId(cwd) ? "connected" : "invalid";
+  if (marker !== void 0) return "invalid";
+  return rawId === void 0 ? "unbound" : repoSyncId(cwd) ? void 0 : "unbound";
+}
+function hasProjectPrimInstall(cwd) {
+  const root = gitToplevel(cwd);
+  if (root === null || root === homedir()) return false;
+  for (const rel of PROJECT_INSTALL_FILES) {
+    const path = join(root, rel);
+    if (existsSync(path)) {
+      try {
+        const content = readFileSync(path, "utf-8");
+        if (PRIM_HOOK_BINS.some((bin) => content.includes(bin))) return true;
+      } catch {
+      }
+    }
+  }
+  return false;
+}
+function isRepoActiveForCapture(cwd) {
+  const flag = repoActiveFlag(cwd);
+  if (flag === "true") return true;
+  if (flag === "false") return false;
+  return hasProjectPrimInstall(cwd);
+}
+function decisionIngestionStatus(cwd) {
+  return isRepoActiveForCapture(cwd) ? "enabled" : "disabled";
+}
+
+export {
+  gitToplevel,
+  githubRepositoryFullName,
+  canonicalGitRoot,
+  resolveRepositoryContext,
+  canonicalRepositoryPath,
+  repoActiveFlag,
+  isRepoActive,
+  setRepoActive,
+  isValidRepoSyncId,
+  repoSyncId,
+  setRepoSyncId,
+  setRepositoryBindingState,
+  repositoryBindingState,
+  isRepoActiveForCapture,
+  decisionIngestionStatus
+};