@primitive.ai/prim 0.1.0-alpha.80 → 0.1.0-alpha.82

package/dist/{chunk-KKP2NYZ3.js → chunk-4CZTNXIS.js}

@@ -1,7 +1,7 @@
 import {
   formatStatusline,
   packageVersion
-} from "./chunk-4A2XB2PC.js";
+} from "./chunk-PMRDE2DA.js";
 import {
   decisionIngestionStatus,
   gitToplevel,

package/dist/{chunk-2KW7DVFJ.js → chunk-HWSS4BV5.js}

@@ -2,7 +2,7 @@ import {
   binFile,
   compareSemver,
   pinnedNpxCommand
-} from "./chunk-4A2XB2PC.js";
+} from "./chunk-PMRDE2DA.js";
 import {
   gitToplevel,
   githubRepositoryFullName,

package/dist/{chunk-4A2XB2PC.js → chunk-PMRDE2DA.js}

@@ -239,8 +239,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;

package/dist/daemon/server.js

@@ -13711,8 +13711,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;

package/dist/hook-runtime/daemon/server.js

@@ -13711,8 +13711,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;

package/dist/hook-runtime/hooks/post-tool-use.js

@@ -1846,8 +1846,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;

package/dist/hook-runtime/hooks/pre-tool-use.js

@@ -1520,8 +1520,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;
@@ -7043,7 +7043,10 @@ async function main() {
   const sessionId = envelope.session_id;
   const callId = invocationId(envelope);
   if (!binding || typeof sessionId !== "string" || !sessionId || !callId) {
-    await emitUnverified("repository binding or tool invocation identity is unavailable", envelope);
+    await emitUnverified(
+      "GitHub repo connection is required for repository-specific file attribution, Conflict Gate verification, and commit correlation; or tool invocation identity is unavailable",
+      envelope
+    );
     return;
   }
   const request2 = {

package/dist/hook-runtime/hooks/prim-hook.js

@@ -2083,8 +2083,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;

package/dist/hook-runtime/hooks/session-start.js

@@ -10579,8 +10579,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;
@@ -11140,9 +11140,9 @@ async function activeProjectRoot(cwd) {
 }
 function claudeBindingReminder(binding) {
   if (binding.status === "connected") {
-    return `The current GitHub repository is connected to Primitive. In your first response, begin with exactly: "GitHub repository connected to Primitive: ${binding.repositoryFullName}." Then continue the user's request.`;
+    return `The GitHub repo connection is complete for ${binding.repositoryFullName}. It enables repository-specific file attribution, Conflict Gate verification, and commit correlation. In your first response, begin with exactly: "GitHub repo connection is complete for ${binding.repositoryFullName}. It enables repository-specific file attribution, Conflict Gate verification, and commit correlation." Then continue the user's request.`;
   }
-  return `The current GitHub repository is not connected to Primitive. Before doing task work, ask exactly: "This GitHub repository isn't connected to Primitive yet. Would you like me to start the one-time GitHub connection now?" Wait for the user's answer. If they approve, run \`npx --yes @primitive.ai/prim github connect\`, drive the browser-based GitHub App workflow, report its actual outcome concisely, and resume work. If they decline or the connection does not complete, continue without asking again in this session. Do not use owner/admin escalation or capability-loss warnings.`;
+  return `GitHub repo connection is required before using Primitive in this repository. It connects ${binding.repositoryFullName} to Primitive and enables repository-specific file attribution, Conflict Gate verification, and commit correlation. Before doing task work, tell the user exactly: "GitHub repo connection is required before using Primitive in this repository. It connects ${binding.repositoryFullName} to Primitive and enables repository-specific file attribution, Conflict Gate verification, and commit correlation. Shall I start the one-time GitHub connection now?" Do not begin task work or treat a decline as an opt-out. When they approve, run \`npx --yes @primitive.ai/prim github connect\`, drive the browser-based GitHub App workflow, and report the actual outcome. If it does not complete, repeat that the GitHub repo connection is required and keep prompting until it is complete. Do not call this a binding or use owner/admin escalation warnings.`;
 }
 async function claudeRepositoryBinding(cwd, activeProject) {
   const root = activeProject?.root ?? gitToplevel(cwd);

package/dist/hook-runtime/index.js

@@ -35205,7 +35205,7 @@ function reportConnectFailure(error) {
 function reportBinding(binding, installAttempted = false) {
   if (binding.status === "connected") {
     process.stderr.write(
-      `[prim] repository binding connected for GitHub origin ${binding.repositoryFullName}
+      `[prim] GitHub repo connection complete for ${binding.repositoryFullName}
 `
     );
     printJson(binding);
@@ -35213,8 +35213,8 @@ function reportBinding(binding, installAttempted = false) {
     return;
   }
   process.stderr.write(
-    installAttempted ? `[prim] GitHub installation completed, but ${binding.repositoryFullName} was not granted admin access; repository binding remains unbound
-` : `[prim] repository binding unbound for GitHub origin ${binding.repositoryFullName}; starting GitHub App installation
+    installAttempted ? `[prim] GitHub repo connection could not be completed for ${binding.repositoryFullName}; the GitHub App was not granted admin access to that repository
+` : `[prim] GitHub repo connection is required for ${binding.repositoryFullName}; it enables repository-specific file attribution, Conflict Gate verification, and commit correlation. Starting GitHub App installation\u2026
 `
   );
   printJson(binding);
@@ -35296,8 +35296,10 @@ async function performGithubConnect(dependencies = defaultDependencies2, options
   }
 }
 function registerGithubCommands(program3, dependencies = defaultDependencies2) {
-  const github = program3.command("github").description("Manage GitHub repository bindings");
-  github.command("connect").description("Install or reuse the Primitive GitHub App and bind the current GitHub origin").option("--no-browser", "Print the GitHub installation URL without opening a browser").action(async (options, command) => {
+  const github = program3.command("github").description("Manage GitHub repo connections");
+  github.command("connect").description(
+    "Install or reuse the Primitive GitHub App and connect the current GitHub repository"
+  ).option("--no-browser", "Print the GitHub installation URL without opening a browser").action(async (options, command) => {
     const globals = command.optsWithGlobals();
     await performGithubConnect(dependencies, {
       browser: options.browser && globals.nonInteractive !== true
@@ -35867,7 +35869,8 @@ function registerHooksCommands(program3) {
 }
 
 // src/commands/activation.ts
-var CONNECT_PROMPT = "[prim] Connect this repository to Primitive via the GitHub App now?";
+var CONNECT_PROMPT = "[prim] GitHub repo connection is required to enable repository-specific file attribution, Conflict Gate verification, and commit correlation. Start the GitHub App connection now?";
+var GITHUB_CONNECTION_REQUIRED = "GitHub repo connection is required before using Primitive in this repository. It enables repository-specific file attribution, Conflict Gate verification, and commit correlation. Run `prim github connect` to complete it.";
 async function maybeConnectRepository(root, globals) {
   if (isNonInteractive(globals)) return void 0;
   const approved = Boolean(globals.yes) || await askConfirmation(CONNECT_PROMPT, process.stderr);
@@ -35875,7 +35878,7 @@ async function maybeConnectRepository(root, globals) {
   const outcome = await runGithubConnect(void 0, { root, browser: true });
   if (outcome.kind === "connected") {
     process.stderr.write(
-      `[prim] repository binding connected for GitHub origin ${outcome.binding.repositoryFullName}
+      `[prim] GitHub repo connection complete for ${outcome.binding.repositoryFullName}
 `
     );
     return outcome.binding;
@@ -35911,26 +35914,32 @@ async function applyActivation(active, globals = {}) {
         process.stderr.write(`[prim] post-rewrite hook coverage is degraded: ${detail}
 `);
       }
-      phase = "repository binding";
+      phase = "GitHub repo connection";
       binding = await bindRepository(root);
-      phase = "local activation";
     }
-    setRepoActive(root, active);
     if (active && binding?.status === "unbound") {
       const connected = await maybeConnectRepository(root, globals);
-      if (connected) binding = connected;
+      if (!connected) {
+        process.stderr.write(`[prim] ${GITHUB_CONNECTION_REQUIRED}
+`);
+        printJson({
+          active: false,
+          repo: root,
+          bindingStatus: binding.status,
+          repositoryFullName: binding.repositoryFullName,
+          ...postCommitHook ? { postCommitHook } : {},
+          ...postRewriteHook ? { postRewriteHook } : {}
+        });
+        process.exitCode = 1;
+        return;
+      }
+      binding = connected;
     }
+    phase = "local activation";
+    setRepoActive(root, active);
     await daemonRequest("statusline_invalidate", {}, { timeoutMs: 250 });
-    if (binding?.status === "unbound") {
-      process.stderr.write(`[prim] Prim is enabled locally in ${root}
-`);
-      process.stderr.write(
-        "[prim] GitHub repository binding is not connected \u2014 run `prim github connect` when you're ready\n"
-      );
-    } else {
-      process.stderr.write(`[prim] prim ${active ? "enabled" : "disabled"} in ${root}
+    process.stderr.write(`[prim] prim ${active ? "enabled" : "disabled"} in ${root}
 `);
-    }
     printJson({
       active,
       repo: root,
@@ -38239,8 +38248,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;
@@ -39211,16 +39220,26 @@ var CascadeNotFoundError = class extends Error {
     this.name = "CascadeNotFoundError";
   }
 };
+function normalizeCascade(raw) {
+  return {
+    ...raw,
+    upstream: {
+      files: raw.upstream.files ?? [],
+      contexts: raw.upstream.contexts ?? []
+    }
+  };
+}
 async function fetchCascade(idOrShortId, deps = defaultDeps) {
   const params = new URLSearchParams({ id: idOrShortId });
   const client = deps.getClient();
   try {
-    return await daemonOrDirectGet(
+    const raw = await daemonOrDirectGet(
       "decisions_cascade",
       `/api/cli/decisions/cascade?${params.toString()}`,
       client,
       CASCADE_TIMEOUT_MS
     );
+    return normalizeCascade(raw);
   } catch (err) {
     if (err instanceof Error && NOT_FOUND_RE.test(err.message)) {
       throw new CascadeNotFoundError(idOrShortId);
@@ -42035,39 +42054,40 @@ async function checkJournalOrganization() {
   return classifyJournalOrganization(new Set(buckets).size, inspection.retainedBuckets);
 }
 function classifyRepositoryBinding(value, current, active) {
+  const connectionCapabilities = "It enables repository-specific file attribution, Conflict Gate verification, and commit correlation.";
   if (current.status === "unbound") {
     if (!active) {
       return {
-        name: "repo-binding",
+        name: "github-repo-connection",
         status: "fail",
-        detail: "passive capture is inactive \u2014 run `prim enable`"
+        detail: `GitHub repo connection is required before using Primitive in this repository. ${connectionCapabilities} Run \`prim github connect\`, then \`prim enable\`.`
       };
     }
-    const localDetail = value === void 0 ? "repository is unbound" : isValidRepoSyncId(value) ? "server reports this repository unbound; the last binding is retained locally for recovery" : "server reports this repository unbound; the local cached binding is invalid";
+    const localDetail = value === void 0 ? "GitHub repo connection is not complete" : isValidRepoSyncId(value) ? "server reports GitHub repo connection is not complete; the last connection state is retained locally for recovery" : "server reports GitHub repo connection is not complete; the local cached connection state is invalid";
     return {
-      name: "repo-binding",
+      name: "github-repo-connection",
       status: "warn",
-      detail: `${localDetail} \u2014 local capture is active; run \`prim github connect\` to connect this GitHub repository`
+      detail: `${localDetail} \u2014 GitHub repo connection is required before using Primitive in this repository. ${connectionCapabilities} Run \`prim github connect\` to complete it.`
     };
   }
   if (!isValidRepoSyncId(value)) {
     return {
-      name: "repo-binding",
+      name: "github-repo-connection",
       status: "fail",
-      detail: "missing or invalid local prim.repoSyncId \u2014 run `prim enable`"
+      detail: `GitHub repo connection state is missing or invalid. ${connectionCapabilities} Run \`prim github connect\`, then \`prim enable\`.`
     };
   }
   if (value !== current.repoSyncId) {
     return {
-      name: "repo-binding",
+      name: "github-repo-connection",
       status: "fail",
-      detail: "local repository binding is stale for the current origin \u2014 run `prim enable`"
+      detail: `GitHub repo connection is stale for the current origin. ${connectionCapabilities} Run \`prim github connect\`, then \`prim enable\`.`
     };
   }
   return {
-    name: "repo-binding",
+    name: "github-repo-connection",
     status: "ok",
-    detail: "local repository binding matches the current server binding"
+    detail: `GitHub repo connection is verified. ${connectionCapabilities}`
   };
 }
 async function checkRepositoryBinding() {
@@ -42081,9 +42101,9 @@ async function checkRepositoryBinding() {
     return classifyRepositoryBinding(local, current, isRepoActiveForCapture(root));
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
-    const detail = boundedHealthError(`could not verify the current repository binding \u2014 ${message}`) ?? "could not verify the current repository binding";
+    const detail = boundedHealthError(`could not verify the current GitHub repo connection \u2014 ${message}`) ?? "could not verify the current GitHub repo connection";
     return {
-      name: "repo-binding",
+      name: "github-repo-connection",
       status: "fail",
       detail
     };

package/dist/hook-runtime/statusline-main.js

@@ -649,8 +649,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;

package/dist/hooks/post-tool-use.js

@@ -22,8 +22,8 @@ import "../chunk-BQUJ4AFJ.js";
 import {
   appendCodexContext,
   prepareCodexContext
-} from "../chunk-KKP2NYZ3.js";
-import "../chunk-4A2XB2PC.js";
+} from "../chunk-4CZTNXIS.js";
+import "../chunk-PMRDE2DA.js";
 import {
   scrubFromCwd
 } from "../chunk-FI3LIRCB.js";

package/dist/hooks/pre-tool-use.js

@@ -15,10 +15,10 @@ import {
   appendCodexContext,
   hasVisibleCodexMessage,
   prepareCodexContext
-} from "../chunk-KKP2NYZ3.js";
+} from "../chunk-4CZTNXIS.js";
 import {
   packageVersion
-} from "../chunk-4A2XB2PC.js";
+} from "../chunk-PMRDE2DA.js";
 import {
   DEFAULT_RULES,
   scrub
@@ -292,7 +292,10 @@ async function main() {
   const sessionId = envelope.session_id;
   const callId = invocationId(envelope);
   if (!binding || typeof sessionId !== "string" || !sessionId || !callId) {
-    await emitUnverified("repository binding or tool invocation identity is unavailable", envelope);
+    await emitUnverified(
+      "GitHub repo connection is required for repository-specific file attribution, Conflict Gate verification, and commit correlation; or tool invocation identity is unavailable",
+      envelope
+    );
     return;
   }
   const request = {

package/dist/hooks/prim-hook.js

@@ -28,8 +28,8 @@ import {
 import "../chunk-BQUJ4AFJ.js";
 import {
   prepareCodexContext
-} from "../chunk-KKP2NYZ3.js";
-import "../chunk-4A2XB2PC.js";
+} from "../chunk-4CZTNXIS.js";
+import "../chunk-PMRDE2DA.js";
 import {
   scrubFromCwd,
   writeHookDebug

package/dist/hooks/session-start.js

@@ -7,7 +7,7 @@ import {
   refreshClaudePlugins,
   resolveRepositoryBinding,
   warmBinCache
-} from "../chunk-2KW7DVFJ.js";
+} from "../chunk-HWSS4BV5.js";
 import {
   buildHookOutput,
   handoffHookOutput
@@ -23,10 +23,10 @@ import {
 } from "../chunk-EZXEWFDG.js";
 import {
   prepareCodexContext
-} from "../chunk-KKP2NYZ3.js";
+} from "../chunk-4CZTNXIS.js";
 import {
   binFile
-} from "../chunk-4A2XB2PC.js";
+} from "../chunk-PMRDE2DA.js";
 import {
   gitToplevel,
   githubRepositoryFullName,
@@ -126,9 +126,9 @@ async function activeProjectRoot(cwd) {
 }
 function claudeBindingReminder(binding) {
   if (binding.status === "connected") {
-    return `The current GitHub repository is connected to Primitive. In your first response, begin with exactly: "GitHub repository connected to Primitive: ${binding.repositoryFullName}." Then continue the user's request.`;
+    return `The GitHub repo connection is complete for ${binding.repositoryFullName}. It enables repository-specific file attribution, Conflict Gate verification, and commit correlation. In your first response, begin with exactly: "GitHub repo connection is complete for ${binding.repositoryFullName}. It enables repository-specific file attribution, Conflict Gate verification, and commit correlation." Then continue the user's request.`;
   }
-  return `The current GitHub repository is not connected to Primitive. Before doing task work, ask exactly: "This GitHub repository isn't connected to Primitive yet. Would you like me to start the one-time GitHub connection now?" Wait for the user's answer. If they approve, run \`npx --yes @primitive.ai/prim github connect\`, drive the browser-based GitHub App workflow, report its actual outcome concisely, and resume work. If they decline or the connection does not complete, continue without asking again in this session. Do not use owner/admin escalation or capability-loss warnings.`;
+  return `GitHub repo connection is required before using Primitive in this repository. It connects ${binding.repositoryFullName} to Primitive and enables repository-specific file attribution, Conflict Gate verification, and commit correlation. Before doing task work, tell the user exactly: "GitHub repo connection is required before using Primitive in this repository. It connects ${binding.repositoryFullName} to Primitive and enables repository-specific file attribution, Conflict Gate verification, and commit correlation. Shall I start the one-time GitHub connection now?" Do not begin task work or treat a decline as an opt-out. When they approve, run \`npx --yes @primitive.ai/prim github connect\`, drive the browser-based GitHub App workflow, and report the actual outcome. If it does not complete, repeat that the GitHub repo connection is required and keep prompting until it is complete. Do not call this a binding or use owner/admin escalation warnings.`;
 }
 async function claudeRepositoryBinding(cwd, activeProject) {
   const root = activeProject?.root ?? gitToplevel(cwd);

package/dist/index.js

@@ -17,7 +17,7 @@ import {
   uninstallPostRewriteHookAtPath,
   uninstallProjectPostCommitHook,
   uninstallProjectPostRewriteHook
-} from "./chunk-2KW7DVFJ.js";
+} from "./chunk-HWSS4BV5.js";
 import {
   requireDurableIngestAcknowledgement
 } from "./chunk-XGADQPCI.js";
@@ -54,7 +54,7 @@ import {
   pinnedNpxArgs,
   repositoryBindingDiagnosticLabel,
   stableHookCommand
-} from "./chunk-4A2XB2PC.js";
+} from "./chunk-PMRDE2DA.js";
 import {
   bold,
   boundedHealthError,
@@ -12931,7 +12931,7 @@ function reportConnectFailure(error) {
 function reportBinding(binding, installAttempted = false) {
   if (binding.status === "connected") {
     process.stderr.write(
-      `[prim] repository binding connected for GitHub origin ${binding.repositoryFullName}
+      `[prim] GitHub repo connection complete for ${binding.repositoryFullName}
 `
     );
     printJson(binding);
@@ -12939,8 +12939,8 @@ function reportBinding(binding, installAttempted = false) {
     return;
   }
   process.stderr.write(
-    installAttempted ? `[prim] GitHub installation completed, but ${binding.repositoryFullName} was not granted admin access; repository binding remains unbound
-` : `[prim] repository binding unbound for GitHub origin ${binding.repositoryFullName}; starting GitHub App installation
+    installAttempted ? `[prim] GitHub repo connection could not be completed for ${binding.repositoryFullName}; the GitHub App was not granted admin access to that repository
+` : `[prim] GitHub repo connection is required for ${binding.repositoryFullName}; it enables repository-specific file attribution, Conflict Gate verification, and commit correlation. Starting GitHub App installation\u2026
 `
   );
   printJson(binding);
@@ -13022,8 +13022,10 @@ async function performGithubConnect(dependencies = defaultDependencies2, options
   }
 }
 function registerGithubCommands(program2, dependencies = defaultDependencies2) {
-  const github = program2.command("github").description("Manage GitHub repository bindings");
-  github.command("connect").description("Install or reuse the Primitive GitHub App and bind the current GitHub origin").option("--no-browser", "Print the GitHub installation URL without opening a browser").action(async (options, command) => {
+  const github = program2.command("github").description("Manage GitHub repo connections");
+  github.command("connect").description(
+    "Install or reuse the Primitive GitHub App and connect the current GitHub repository"
+  ).option("--no-browser", "Print the GitHub installation URL without opening a browser").action(async (options, command) => {
     const globals = command.optsWithGlobals();
     await performGithubConnect(dependencies, {
       browser: options.browser && globals.nonInteractive !== true
@@ -13594,7 +13596,8 @@ function registerHooksCommands(program2) {
 }
 
 // src/commands/activation.ts
-var CONNECT_PROMPT = "[prim] Connect this repository to Primitive via the GitHub App now?";
+var CONNECT_PROMPT = "[prim] GitHub repo connection is required to enable repository-specific file attribution, Conflict Gate verification, and commit correlation. Start the GitHub App connection now?";
+var GITHUB_CONNECTION_REQUIRED = "GitHub repo connection is required before using Primitive in this repository. It enables repository-specific file attribution, Conflict Gate verification, and commit correlation. Run `prim github connect` to complete it.";
 async function maybeConnectRepository(root, globals) {
   if (isNonInteractive(globals)) return void 0;
   const approved = Boolean(globals.yes) || await askConfirmation(CONNECT_PROMPT, process.stderr);
@@ -13602,7 +13605,7 @@ async function maybeConnectRepository(root, globals) {
   const outcome = await runGithubConnect(void 0, { root, browser: true });
   if (outcome.kind === "connected") {
     process.stderr.write(
-      `[prim] repository binding connected for GitHub origin ${outcome.binding.repositoryFullName}
+      `[prim] GitHub repo connection complete for ${outcome.binding.repositoryFullName}
 `
     );
     return outcome.binding;
@@ -13638,26 +13641,32 @@ async function applyActivation(active, globals = {}) {
         process.stderr.write(`[prim] post-rewrite hook coverage is degraded: ${detail}
 `);
       }
-      phase = "repository binding";
+      phase = "GitHub repo connection";
       binding = await bindRepository(root);
-      phase = "local activation";
     }
-    setRepoActive(root, active);
     if (active && binding?.status === "unbound") {
       const connected = await maybeConnectRepository(root, globals);
-      if (connected) binding = connected;
+      if (!connected) {
+        process.stderr.write(`[prim] ${GITHUB_CONNECTION_REQUIRED}
+`);
+        printJson({
+          active: false,
+          repo: root,
+          bindingStatus: binding.status,
+          repositoryFullName: binding.repositoryFullName,
+          ...postCommitHook ? { postCommitHook } : {},
+          ...postRewriteHook ? { postRewriteHook } : {}
+        });
+        process.exitCode = 1;
+        return;
+      }
+      binding = connected;
     }
+    phase = "local activation";
+    setRepoActive(root, active);
     await daemonRequest("statusline_invalidate", {}, { timeoutMs: 250 });
-    if (binding?.status === "unbound") {
-      process.stderr.write(`[prim] Prim is enabled locally in ${root}
-`);
-      process.stderr.write(
-        "[prim] GitHub repository binding is not connected \u2014 run `prim github connect` when you're ready\n"
-      );
-    } else {
-      process.stderr.write(`[prim] prim ${active ? "enabled" : "disabled"} in ${root}
+    process.stderr.write(`[prim] prim ${active ? "enabled" : "disabled"} in ${root}
 `);
-    }
     printJson({
       active,
       repo: root,
@@ -16815,16 +16824,26 @@ var CascadeNotFoundError = class extends Error {
     this.name = "CascadeNotFoundError";
   }
 };
+function normalizeCascade(raw) {
+  return {
+    ...raw,
+    upstream: {
+      files: raw.upstream.files ?? [],
+      contexts: raw.upstream.contexts ?? []
+    }
+  };
+}
 async function fetchCascade(idOrShortId, deps = defaultDeps) {
   const params = new URLSearchParams({ id: idOrShortId });
   const client = deps.getClient();
   try {
-    return await daemonOrDirectGet(
+    const raw = await daemonOrDirectGet(
       "decisions_cascade",
       `/api/cli/decisions/cascade?${params.toString()}`,
       client,
       CASCADE_TIMEOUT_MS
     );
+    return normalizeCascade(raw);
   } catch (err) {
     if (err instanceof Error && NOT_FOUND_RE.test(err.message)) {
       throw new CascadeNotFoundError(idOrShortId);
@@ -19300,39 +19319,40 @@ async function checkJournalOrganization() {
   return classifyJournalOrganization(new Set(buckets).size, inspection.retainedBuckets);
 }
 function classifyRepositoryBinding(value, current, active) {
+  const connectionCapabilities = "It enables repository-specific file attribution, Conflict Gate verification, and commit correlation.";
   if (current.status === "unbound") {
     if (!active) {
       return {
-        name: "repo-binding",
+        name: "github-repo-connection",
         status: "fail",
-        detail: "passive capture is inactive \u2014 run `prim enable`"
+        detail: `GitHub repo connection is required before using Primitive in this repository. ${connectionCapabilities} Run \`prim github connect\`, then \`prim enable\`.`
       };
     }
-    const localDetail = value === void 0 ? "repository is unbound" : isValidRepoSyncId(value) ? "server reports this repository unbound; the last binding is retained locally for recovery" : "server reports this repository unbound; the local cached binding is invalid";
+    const localDetail = value === void 0 ? "GitHub repo connection is not complete" : isValidRepoSyncId(value) ? "server reports GitHub repo connection is not complete; the last connection state is retained locally for recovery" : "server reports GitHub repo connection is not complete; the local cached connection state is invalid";
     return {
-      name: "repo-binding",
+      name: "github-repo-connection",
       status: "warn",
-      detail: `${localDetail} \u2014 local capture is active; run \`prim github connect\` to connect this GitHub repository`
+      detail: `${localDetail} \u2014 GitHub repo connection is required before using Primitive in this repository. ${connectionCapabilities} Run \`prim github connect\` to complete it.`
     };
   }
   if (!isValidRepoSyncId(value)) {
     return {
-      name: "repo-binding",
+      name: "github-repo-connection",
       status: "fail",
-      detail: "missing or invalid local prim.repoSyncId \u2014 run `prim enable`"
+      detail: `GitHub repo connection state is missing or invalid. ${connectionCapabilities} Run \`prim github connect\`, then \`prim enable\`.`
     };
   }
   if (value !== current.repoSyncId) {
     return {
-      name: "repo-binding",
+      name: "github-repo-connection",
       status: "fail",
-      detail: "local repository binding is stale for the current origin \u2014 run `prim enable`"
+      detail: `GitHub repo connection is stale for the current origin. ${connectionCapabilities} Run \`prim github connect\`, then \`prim enable\`.`
     };
   }
   return {
-    name: "repo-binding",
+    name: "github-repo-connection",
     status: "ok",
-    detail: "local repository binding matches the current server binding"
+    detail: `GitHub repo connection is verified. ${connectionCapabilities}`
   };
 }
 async function checkRepositoryBinding() {
@@ -19346,9 +19366,9 @@ async function checkRepositoryBinding() {
     return classifyRepositoryBinding(local, current, isRepoActiveForCapture(root));
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
-    const detail = boundedHealthError(`could not verify the current repository binding \u2014 ${message}`) ?? "could not verify the current repository binding";
+    const detail = boundedHealthError(`could not verify the current GitHub repo connection \u2014 ${message}`) ?? "could not verify the current GitHub repo connection";
     return {
-      name: "repo-binding",
+      name: "github-repo-connection",
       status: "fail",
       detail
     };

package/dist/statusline-main.js

@@ -649,8 +649,8 @@ function formatTeammatesWithArea(teammates, cap, plainLinks = false) {
 
 // src/lib/statusline-render.ts
 function repositoryBindingDiagnosticLabel(state) {
-  if (state === "unbound") return "repository: unbound (enforcement not evaluating)";
-  if (state === "invalid") return "repository binding: invalid (run `prim doctor`)";
+  if (state === "unbound") return "GitHub repo connection: required (run `prim github connect`)";
+  if (state === "invalid") return "GitHub repo connection: invalid (run `prim doctor`)";
   return void 0;
 }
 var STATUSLINE_NAME_CAP = 3;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.80",
+  "version": "0.1.0-alpha.82",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",