@primitive.ai/prim 0.1.0-alpha.70 → 0.1.0-alpha.72

package/dist/hook-runtime/index.js

@@ -32185,7 +32185,6 @@ var API_KEY_ID = /^api_key_[A-Za-z0-9_-]+$/u;
 var API_KEY_NAME = /^[\x21-\x7e](?:[\x20-\x7e]{0,126}[\x21-\x7e])?$/u;
 var API_KEY_PERMISSION = /^[\x21-\x7e]+$/u;
 var API_KEY_SECRET = /^sk_[\x21-\x7e]+(?: [\x21-\x7e]+)*$/u;
-var API_KEY_OBFUSCATED_VALUE = /^[\x20-\x7e]+$/u;
 var MINT_PATH = "/api/cli/auth/api-keys";
 var REQUEST_ID = /^[a-f0-9]{64}$/u;
 function record(value) {
@@ -32206,6 +32205,16 @@ function isApiKeyId(value) {
 function isApiKeyName(value) {
   return isBoundedString(value, 1, 128, API_KEY_NAME);
 }
+function isSafeObfuscatedValue(value) {
+  if (!isBoundedString(value, 1, 256)) return false;
+  for (const character of value) {
+    const point = character.codePointAt(0) ?? 0;
+    if (point <= 31 || point >= 127 && point <= 159 || point === 8232 || point === 8233 || point === 1564 || point >= 8203 && point <= 8207 || point >= 8234 && point <= 8238 || point === 8288 || point >= 8294 && point <= 8297 || point === 65279) {
+      return false;
+    }
+  }
+  return true;
+}
 function isMetadata(value) {
   const parsed = record(value);
   if (parsed === void 0 || !hasExactKeys(parsed, [
@@ -32221,7 +32230,7 @@ function isMetadata(value) {
     return void 0;
   }
   const { id, name, obfuscatedValue, permissions, lastUsedAt, expiresAt, createdAt, updatedAt } = parsed;
-  if (!isApiKeyId(id) || !isApiKeyName(name) || !isBoundedString(obfuscatedValue, 1, 256, API_KEY_OBFUSCATED_VALUE) || !Array.isArray(permissions) || permissions.length > 100 || !permissions.every((permission) => isBoundedString(permission, 1, 128, API_KEY_PERMISSION)) || lastUsedAt !== null && !isSafeTimestamp(lastUsedAt) || expiresAt !== null && !isSafeTimestamp(expiresAt) || !isSafeTimestamp(createdAt) || !isSafeTimestamp(updatedAt)) {
+  if (!isApiKeyId(id) || !isApiKeyName(name) || !isSafeObfuscatedValue(obfuscatedValue) || !Array.isArray(permissions) || permissions.length > 100 || !permissions.every((permission) => isBoundedString(permission, 1, 128, API_KEY_PERMISSION)) || lastUsedAt !== null && !isSafeTimestamp(lastUsedAt) || expiresAt !== null && !isSafeTimestamp(expiresAt) || !isSafeTimestamp(createdAt) || !isSafeTimestamp(updatedAt)) {
     return void 0;
   }
   return {
@@ -36628,7 +36637,8 @@ function toRequestBody(request2) {
     reversibility: request2.reversibility,
     files: request2.files,
     protocolVersion: request2.protocolVersion,
-    repoSyncId: request2.repoSyncId
+    repoSyncId: request2.repoSyncId,
+    stageOverride: request2.stageOverride
   };
   const body = {};
   for (const [key, value] of Object.entries(candidate)) {
@@ -36671,16 +36681,19 @@ var defaultDependencies2 = {
 var EXPECTED_STAGE = {
   publish: "provisional",
   restore: "draft",
+  ratify: "adopted",
   supersede: "superseded"
 };
 var PATH = {
   publish: "/api/cli/decisions/publish",
   restore: "/api/cli/decisions/restore",
+  ratify: "/api/cli/decisions/ratify",
   supersede: "/api/cli/decisions/supersede"
 };
 var PAST_PARTICIPLE = {
   publish: "published",
   restore: "restored",
+  ratify: "ratified",
   supersede: "superseded"
 };
 var ORG_UNBOUND_MESSAGE = "CLI token is not bound to an organization";
@@ -36731,6 +36744,9 @@ function formatSuccessHuman(operation, request2, response) {
   if (operation === "restore") {
     return `[prim] ${identifier} restored as a private draft.`;
   }
+  if (operation === "ratify") {
+    return `[prim] ${identifier} ratified as ${response.stage}.`;
+  }
   const replacement = safeRequestedIdentifier(
     request2.by,
     "the replacement Decision"
@@ -36877,6 +36893,10 @@ function restoreDecision(id, dependencies = defaultDependencies2) {
   const request2 = { id };
   return executeLifecycle("restore", request2, dependencies);
 }
+function ratifyDecision(id, dependencies = defaultDependencies2) {
+  const request2 = { id };
+  return executeLifecycle("ratify", request2, dependencies);
+}
 function supersedeDecision(id, by, dependencies = defaultDependencies2) {
   const request2 = { id, by };
   return executeLifecycle("supersede", request2, dependencies);
@@ -37831,6 +37851,9 @@ function registerDecisionsCommands(program3) {
   decisions.command("restore <idOrShortId>").description("Restore an authored abandoned Decision to a private draft").action(async (idOrShortId) => {
     process.exitCode = await restoreDecision(idOrShortId);
   });
+  decisions.command("ratify <idOrShortId>").description("Ratify an authored Decision as adopted").action(async (idOrShortId) => {
+    process.exitCode = await ratifyDecision(idOrShortId);
+  });
   decisions.command("supersede <idOrShortId>").description("Supersede a Decision with a distinct replacement Decision").requiredOption("--by <replacementIdOrShortId>", "Decision that replaces the named Decision").action(async (idOrShortId, opts) => {
     process.exitCode = await supersedeDecision(idOrShortId, opts.by);
   });
@@ -37907,11 +37930,17 @@ function registerDecisionsCommands(program3) {
     "One rejected option, verbatim; repeat the flag for each",
     collectItem,
     []
-  ).option("--confidence <level>", "high | medium | low (default high)").option("--reversibility <level>", "high | low (default high)").option(
+  ).option("--confidence <level>", "high | medium | low (default high)").option("--reversibility <level>", "high | low (default high)").option("--draft", "Create a private draft instead of publishing immediately").option("--adopt", "Create an adopted Decision as the authenticated author").option(
     "--files <paths>",
     "Comma-separated exact repo-relative paths this decision governs (repeatable)",
     collectPaths
   ).action(async (opts, command) => {
+    if (opts.draft && opts.adopt) {
+      console.error("[prim] create rejected: --draft and --adopt cannot be used together.");
+      console.log(JSON.stringify({ ok: false, error: "conflicting_stage_override" }, null, 2));
+      process.exitCode = EXIT_USAGE;
+      return;
+    }
     const requestedFiles = opts.files ?? [];
     let explicitScope = {};
     if (requestedFiles.length > 0) {
@@ -37956,6 +37985,7 @@ function registerDecisionsCommands(program3) {
       alternatives: opts.alternatives,
       confidence: opts.confidence,
       reversibility: opts.reversibility,
+      stageOverride: opts.draft ? "draft" : opts.adopt ? "adopted" : void 0,
       ...explicitScope
     };
     try {

package/dist/index.js

@@ -9981,7 +9981,6 @@ var API_KEY_ID = /^api_key_[A-Za-z0-9_-]+$/u;
 var API_KEY_NAME = /^[\x21-\x7e](?:[\x20-\x7e]{0,126}[\x21-\x7e])?$/u;
 var API_KEY_PERMISSION = /^[\x21-\x7e]+$/u;
 var API_KEY_SECRET = /^sk_[\x21-\x7e]+(?: [\x21-\x7e]+)*$/u;
-var API_KEY_OBFUSCATED_VALUE = /^[\x20-\x7e]+$/u;
 var MINT_PATH = "/api/cli/auth/api-keys";
 var REQUEST_ID = /^[a-f0-9]{64}$/u;
 function record(value) {
@@ -10002,6 +10001,16 @@ function isApiKeyId(value) {
 function isApiKeyName(value) {
   return isBoundedString(value, 1, 128, API_KEY_NAME);
 }
+function isSafeObfuscatedValue(value) {
+  if (!isBoundedString(value, 1, 256)) return false;
+  for (const character of value) {
+    const point = character.codePointAt(0) ?? 0;
+    if (point <= 31 || point >= 127 && point <= 159 || point === 8232 || point === 8233 || point === 1564 || point >= 8203 && point <= 8207 || point >= 8234 && point <= 8238 || point === 8288 || point >= 8294 && point <= 8297 || point === 65279) {
+      return false;
+    }
+  }
+  return true;
+}
 function isMetadata(value) {
   const parsed = record(value);
   if (parsed === void 0 || !hasExactKeys(parsed, [
@@ -10017,7 +10026,7 @@ function isMetadata(value) {
     return void 0;
   }
   const { id, name, obfuscatedValue, permissions, lastUsedAt, expiresAt, createdAt, updatedAt } = parsed;
-  if (!isApiKeyId(id) || !isApiKeyName(name) || !isBoundedString(obfuscatedValue, 1, 256, API_KEY_OBFUSCATED_VALUE) || !Array.isArray(permissions) || permissions.length > 100 || !permissions.every((permission) => isBoundedString(permission, 1, 128, API_KEY_PERMISSION)) || lastUsedAt !== null && !isSafeTimestamp(lastUsedAt) || expiresAt !== null && !isSafeTimestamp(expiresAt) || !isSafeTimestamp(createdAt) || !isSafeTimestamp(updatedAt)) {
+  if (!isApiKeyId(id) || !isApiKeyName(name) || !isSafeObfuscatedValue(obfuscatedValue) || !Array.isArray(permissions) || permissions.length > 100 || !permissions.every((permission) => isBoundedString(permission, 1, 128, API_KEY_PERMISSION)) || lastUsedAt !== null && !isSafeTimestamp(lastUsedAt) || expiresAt !== null && !isSafeTimestamp(expiresAt) || !isSafeTimestamp(createdAt) || !isSafeTimestamp(updatedAt)) {
     return void 0;
   }
   return {
@@ -14234,7 +14243,8 @@ function toRequestBody(request) {
     reversibility: request.reversibility,
     files: request.files,
     protocolVersion: request.protocolVersion,
-    repoSyncId: request.repoSyncId
+    repoSyncId: request.repoSyncId,
+    stageOverride: request.stageOverride
   };
   const body = {};
   for (const [key, value] of Object.entries(candidate)) {
@@ -14277,16 +14287,19 @@ var defaultDependencies2 = {
 var EXPECTED_STAGE = {
   publish: "provisional",
   restore: "draft",
+  ratify: "adopted",
   supersede: "superseded"
 };
 var PATH = {
   publish: "/api/cli/decisions/publish",
   restore: "/api/cli/decisions/restore",
+  ratify: "/api/cli/decisions/ratify",
   supersede: "/api/cli/decisions/supersede"
 };
 var PAST_PARTICIPLE = {
   publish: "published",
   restore: "restored",
+  ratify: "ratified",
   supersede: "superseded"
 };
 var ORG_UNBOUND_MESSAGE = "CLI token is not bound to an organization";
@@ -14337,6 +14350,9 @@ function formatSuccessHuman(operation, request, response) {
   if (operation === "restore") {
     return `[prim] ${identifier} restored as a private draft.`;
   }
+  if (operation === "ratify") {
+    return `[prim] ${identifier} ratified as ${response.stage}.`;
+  }
   const replacement = safeRequestedIdentifier(
     request.by,
     "the replacement Decision"
@@ -14483,6 +14499,10 @@ function restoreDecision(id, dependencies = defaultDependencies2) {
   const request = { id };
   return executeLifecycle("restore", request, dependencies);
 }
+function ratifyDecision(id, dependencies = defaultDependencies2) {
+  const request = { id };
+  return executeLifecycle("ratify", request, dependencies);
+}
 function supersedeDecision(id, by, dependencies = defaultDependencies2) {
   const request = { id, by };
   return executeLifecycle("supersede", request, dependencies);
@@ -15349,6 +15369,9 @@ function registerDecisionsCommands(program2) {
   decisions.command("restore <idOrShortId>").description("Restore an authored abandoned Decision to a private draft").action(async (idOrShortId) => {
     process.exitCode = await restoreDecision(idOrShortId);
   });
+  decisions.command("ratify <idOrShortId>").description("Ratify an authored Decision as adopted").action(async (idOrShortId) => {
+    process.exitCode = await ratifyDecision(idOrShortId);
+  });
   decisions.command("supersede <idOrShortId>").description("Supersede a Decision with a distinct replacement Decision").requiredOption("--by <replacementIdOrShortId>", "Decision that replaces the named Decision").action(async (idOrShortId, opts) => {
     process.exitCode = await supersedeDecision(idOrShortId, opts.by);
   });
@@ -15425,11 +15448,17 @@ function registerDecisionsCommands(program2) {
     "One rejected option, verbatim; repeat the flag for each",
     collectItem,
     []
-  ).option("--confidence <level>", "high | medium | low (default high)").option("--reversibility <level>", "high | low (default high)").option(
+  ).option("--confidence <level>", "high | medium | low (default high)").option("--reversibility <level>", "high | low (default high)").option("--draft", "Create a private draft instead of publishing immediately").option("--adopt", "Create an adopted Decision as the authenticated author").option(
     "--files <paths>",
     "Comma-separated exact repo-relative paths this decision governs (repeatable)",
     collectPaths
   ).action(async (opts, command) => {
+    if (opts.draft && opts.adopt) {
+      console.error("[prim] create rejected: --draft and --adopt cannot be used together.");
+      console.log(JSON.stringify({ ok: false, error: "conflicting_stage_override" }, null, 2));
+      process.exitCode = EXIT_USAGE;
+      return;
+    }
     const requestedFiles = opts.files ?? [];
     let explicitScope = {};
     if (requestedFiles.length > 0) {
@@ -15474,6 +15503,7 @@ function registerDecisionsCommands(program2) {
       alternatives: opts.alternatives,
       confidence: opts.confidence,
       reversibility: opts.reversibility,
+      stageOverride: opts.draft ? "draft" : opts.adopt ? "adopted" : void 0,
       ...explicitScope
     };
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.70",
+  "version": "0.1.0-alpha.72",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",