@primitive.ai/prim 0.1.0-alpha.83 → 0.1.0-alpha.84

package/dist/{chunk-ZOSNEO5N.js → chunk-7O6NAUKJ.js}

@@ -1,7 +1,7 @@
 import {
   analyzeShellTargets,
   extractFileTargets
-} from "./chunk-BQUJ4AFJ.js";
+} from "./chunk-PPQYQEIR.js";
 import {
   canonicalRepositoryPath
 } from "./chunk-TJTVHDJ5.js";
@@ -26,7 +26,7 @@ function preserveHookFileMetadata(payload, resolution) {
   return { ...payload, primitive };
 }
 function resolveHookFileRefs(args) {
-  const command = (args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash" && args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.command === "string" ? args.toolInput.command : void 0;
+  const command = (args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash" ? typeof args.toolInput === "string" ? args.toolInput : args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.command === "string" ? args.toolInput.command : void 0 : void 0;
   const shell = command === void 0 ? void 0 : analyzeShellTargets(command);
   const shellMutation = shell?.mutation === "none" ? "none" : shell?.coverage === "complete" ? "resolved" : shell ? "unresolved" : void 0;
   const readPath = args.agent === "claude_code" && args.toolName === "Read" && args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.file_path === "string" ? [args.toolInput.file_path] : void 0;

package/dist/{chunk-BQUJ4AFJ.js → chunk-PPQYQEIR.js}

@@ -136,11 +136,18 @@ function extractCodexFileTargets(toolName, toolInput) {
   if (toolName !== "apply_patch") {
     return null;
   }
-  if (!toolInput || typeof toolInput !== "object") {
-    return { paths: [], complete: false };
+  const text = codexPatchText(toolInput);
+  return text !== null ? parseApplyPatchTargets(text) : { paths: [], complete: false };
+}
+function codexPatchText(toolInput) {
+  if (typeof toolInput === "string") return toolInput;
+  if (!toolInput || typeof toolInput !== "object") return null;
+  const input = toolInput;
+  for (const key of ["command", "input", "patch"]) {
+    const value = input[key];
+    if (typeof value === "string") return value;
   }
-  const command = toolInput.command;
-  return typeof command === "string" ? parseApplyPatchTargets(command) : { paths: [], complete: false };
+  return null;
 }
 var HERMES_EDITING_TOOLS = /* @__PURE__ */ new Set(["write_file", "patch"]);
 function extractHermesFileTargets(toolName, toolInput) {
@@ -674,6 +681,31 @@ function visitRedirect(redirect, state) {
     recordTarget(redirect.target, state);
   else unknown(state);
 }
+function visitApplyPatch(command, state) {
+  state.mutation = true;
+  state.definiteEdit = true;
+  let hasBody = false;
+  if (command.suffix.length > 0) state.complete = false;
+  for (const redirect of command.redirects) {
+    if (redirect.operator !== "<<") {
+      visitRedirect(redirect, state);
+      continue;
+    }
+    if (typeof redirect.content !== "string") {
+      state.complete = false;
+      continue;
+    }
+    hasBody = true;
+    if (redirect.heredocQuoted !== true && redirect.body !== void 0) {
+      state.complete = false;
+      continue;
+    }
+    const targets = parseApplyPatchTargets(redirect.content);
+    for (const path of targets.paths) state.paths.add(path);
+    if (!targets.complete) state.complete = false;
+  }
+  if (!hasBody) state.complete = false;
+}
 function operands(words, short = "", long = /* @__PURE__ */ new Set()) {
   const result = [];
   let optionsEnded = false;
@@ -688,10 +720,16 @@ function operands(words, short = "", long = /* @__PURE__ */ new Set()) {
   return result;
 }
 function visitCommand(command, state) {
-  for (const redirect of command.redirects) visitRedirect(redirect, state);
   const name = staticWord(command.name);
-  if (!name || name.includes("/") || command.suffix.some((word) => !staticWord(word))) {
+  const literalApplyPatch = name === "apply_patch" && !command.redirects.some((redirect) => redirect.operator === "<<-");
+  if (literalApplyPatch) {
+    visitApplyPatch(command, state);
+  } else {
+    for (const redirect of command.redirects) visitRedirect(redirect, state);
+  }
+  if (!name || name.includes("/") || !literalApplyPatch && command.suffix.some((word) => !staticWord(word))) {
     unknown(state);
+  } else if (literalApplyPatch) {
   } else if (!READ_ONLY_COMMANDS.has(name) && !knownNoWorktreeMutation(name, staticArgs(command.suffix))) {
     state.mutation = true;
     let targets;
@@ -744,13 +782,19 @@ function analyzeShellTargets(source) {
     return { paths: [], coverage: "complete", mutation: "none" };
   try {
     const script = parse(source);
-    const state = { paths: /* @__PURE__ */ new Set(), complete: !script.errors?.length, mutation: false };
+    const state = {
+      paths: /* @__PURE__ */ new Set(),
+      complete: !script.errors?.length,
+      mutation: false,
+      definiteEdit: false
+    };
     for (const statement of script.commands) visitStatement(statement, state);
     if (script.errors?.length) state.mutation = true;
     return {
       paths: [...state.paths],
       coverage: state.complete ? "complete" : "unverified",
-      mutation: state.mutation ? "present" : "none"
+      mutation: state.mutation ? "present" : "none",
+      ...state.definiteEdit ? { definiteEdit: true } : {}
     };
   } catch {
     return { paths: [], coverage: "unverified", mutation: "present" };

package/dist/hook-runtime/hooks/post-tool-use.js

@@ -2380,11 +2380,18 @@ function extractCodexFileTargets(toolName, toolInput) {
   if (toolName !== "apply_patch") {
     return null;
   }
-  if (!toolInput || typeof toolInput !== "object") {
-    return { paths: [], complete: false };
+  const text = codexPatchText(toolInput);
+  return text !== null ? parseApplyPatchTargets(text) : { paths: [], complete: false };
+}
+function codexPatchText(toolInput) {
+  if (typeof toolInput === "string") return toolInput;
+  if (!toolInput || typeof toolInput !== "object") return null;
+  const input = toolInput;
+  for (const key of ["command", "input", "patch"]) {
+    const value = input[key];
+    if (typeof value === "string") return value;
   }
-  const command = toolInput.command;
-  return typeof command === "string" ? parseApplyPatchTargets(command) : { paths: [], complete: false };
+  return null;
 }
 var HERMES_EDITING_TOOLS = /* @__PURE__ */ new Set(["write_file", "patch"]);
 function extractHermesFileTargets(toolName, toolInput) {
@@ -6732,6 +6739,31 @@ function visitRedirect(redirect, state) {
     recordTarget(redirect.target, state);
   else unknown(state);
 }
+function visitApplyPatch(command, state) {
+  state.mutation = true;
+  state.definiteEdit = true;
+  let hasBody = false;
+  if (command.suffix.length > 0) state.complete = false;
+  for (const redirect of command.redirects) {
+    if (redirect.operator !== "<<") {
+      visitRedirect(redirect, state);
+      continue;
+    }
+    if (typeof redirect.content !== "string") {
+      state.complete = false;
+      continue;
+    }
+    hasBody = true;
+    if (redirect.heredocQuoted !== true && redirect.body !== void 0) {
+      state.complete = false;
+      continue;
+    }
+    const targets = parseApplyPatchTargets(redirect.content);
+    for (const path of targets.paths) state.paths.add(path);
+    if (!targets.complete) state.complete = false;
+  }
+  if (!hasBody) state.complete = false;
+}
 function operands(words, short = "", long = /* @__PURE__ */ new Set()) {
   const result = [];
   let optionsEnded = false;
@@ -6746,10 +6778,16 @@ function operands(words, short = "", long = /* @__PURE__ */ new Set()) {
   return result;
 }
 function visitCommand(command, state) {
-  for (const redirect of command.redirects) visitRedirect(redirect, state);
   const name = staticWord(command.name);
-  if (!name || name.includes("/") || command.suffix.some((word) => !staticWord(word))) {
+  const literalApplyPatch = name === "apply_patch" && !command.redirects.some((redirect) => redirect.operator === "<<-");
+  if (literalApplyPatch) {
+    visitApplyPatch(command, state);
+  } else {
+    for (const redirect of command.redirects) visitRedirect(redirect, state);
+  }
+  if (!name || name.includes("/") || !literalApplyPatch && command.suffix.some((word) => !staticWord(word))) {
     unknown(state);
+  } else if (literalApplyPatch) {
   } else if (!READ_ONLY_COMMANDS.has(name) && !knownNoWorktreeMutation(name, staticArgs(command.suffix))) {
     state.mutation = true;
     let targets;
@@ -6802,13 +6840,19 @@ function analyzeShellTargets(source) {
     return { paths: [], coverage: "complete", mutation: "none" };
   try {
     const script = parse(source);
-    const state = { paths: /* @__PURE__ */ new Set(), complete: !script.errors?.length, mutation: false };
+    const state = {
+      paths: /* @__PURE__ */ new Set(),
+      complete: !script.errors?.length,
+      mutation: false,
+      definiteEdit: false
+    };
     for (const statement of script.commands) visitStatement(statement, state);
     if (script.errors?.length) state.mutation = true;
     return {
       paths: [...state.paths],
       coverage: state.complete ? "complete" : "unverified",
-      mutation: state.mutation ? "present" : "none"
+      mutation: state.mutation ? "present" : "none",
+      ...state.definiteEdit ? { definiteEdit: true } : {}
     };
   } catch {
     return { paths: [], coverage: "unverified", mutation: "present" };
@@ -6835,7 +6879,7 @@ function preserveHookFileMetadata(payload, resolution) {
   return { ...payload, primitive };
 }
 function resolveHookFileRefs(args) {
-  const command = (args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash" && args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.command === "string" ? args.toolInput.command : void 0;
+  const command = (args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash" ? typeof args.toolInput === "string" ? args.toolInput : args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.command === "string" ? args.toolInput.command : void 0 : void 0;
   const shell = command === void 0 ? void 0 : analyzeShellTargets(command);
   const shellMutation = shell?.mutation === "none" ? "none" : shell?.coverage === "complete" ? "resolved" : shell ? "unresolved" : void 0;
   const readPath = args.agent === "claude_code" && args.toolName === "Read" && args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.file_path === "string" ? [args.toolInput.file_path] : void 0;

package/dist/hook-runtime/hooks/pre-tool-use.js

@@ -2194,11 +2194,18 @@ function extractCodexFileTargets(toolName, toolInput) {
   if (toolName !== "apply_patch") {
     return null;
   }
-  if (!toolInput || typeof toolInput !== "object") {
-    return { paths: [], complete: false };
+  const text = codexPatchText(toolInput);
+  return text !== null ? parseApplyPatchTargets(text) : { paths: [], complete: false };
+}
+function codexPatchText(toolInput) {
+  if (typeof toolInput === "string") return toolInput;
+  if (!toolInput || typeof toolInput !== "object") return null;
+  const input = toolInput;
+  for (const key of ["command", "input", "patch"]) {
+    const value = input[key];
+    if (typeof value === "string") return value;
   }
-  const command = toolInput.command;
-  return typeof command === "string" ? parseApplyPatchTargets(command) : { paths: [], complete: false };
+  return null;
 }
 var HERMES_EDITING_TOOLS = /* @__PURE__ */ new Set(["write_file", "patch"]);
 function extractHermesFileTargets(toolName, toolInput) {
@@ -6711,6 +6718,31 @@ function visitRedirect(redirect, state) {
     recordTarget(redirect.target, state);
   else unknown(state);
 }
+function visitApplyPatch(command, state) {
+  state.mutation = true;
+  state.definiteEdit = true;
+  let hasBody = false;
+  if (command.suffix.length > 0) state.complete = false;
+  for (const redirect of command.redirects) {
+    if (redirect.operator !== "<<") {
+      visitRedirect(redirect, state);
+      continue;
+    }
+    if (typeof redirect.content !== "string") {
+      state.complete = false;
+      continue;
+    }
+    hasBody = true;
+    if (redirect.heredocQuoted !== true && redirect.body !== void 0) {
+      state.complete = false;
+      continue;
+    }
+    const targets = parseApplyPatchTargets(redirect.content);
+    for (const path of targets.paths) state.paths.add(path);
+    if (!targets.complete) state.complete = false;
+  }
+  if (!hasBody) state.complete = false;
+}
 function operands(words, short = "", long = /* @__PURE__ */ new Set()) {
   const result = [];
   let optionsEnded = false;
@@ -6725,10 +6757,16 @@ function operands(words, short = "", long = /* @__PURE__ */ new Set()) {
   return result;
 }
 function visitCommand(command, state) {
-  for (const redirect of command.redirects) visitRedirect(redirect, state);
   const name = staticWord(command.name);
-  if (!name || name.includes("/") || command.suffix.some((word) => !staticWord(word))) {
+  const literalApplyPatch = name === "apply_patch" && !command.redirects.some((redirect) => redirect.operator === "<<-");
+  if (literalApplyPatch) {
+    visitApplyPatch(command, state);
+  } else {
+    for (const redirect of command.redirects) visitRedirect(redirect, state);
+  }
+  if (!name || name.includes("/") || !literalApplyPatch && command.suffix.some((word) => !staticWord(word))) {
     unknown(state);
+  } else if (literalApplyPatch) {
   } else if (!READ_ONLY_COMMANDS.has(name) && !knownNoWorktreeMutation(name, staticArgs(command.suffix))) {
     state.mutation = true;
     let targets;
@@ -6781,13 +6819,19 @@ function analyzeShellTargets(source) {
     return { paths: [], coverage: "complete", mutation: "none" };
   try {
     const script = parse(source);
-    const state = { paths: /* @__PURE__ */ new Set(), complete: !script.errors?.length, mutation: false };
+    const state = {
+      paths: /* @__PURE__ */ new Set(),
+      complete: !script.errors?.length,
+      mutation: false,
+      definiteEdit: false
+    };
     for (const statement of script.commands) visitStatement(statement, state);
     if (script.errors?.length) state.mutation = true;
     return {
       paths: [...state.paths],
       coverage: state.complete ? "complete" : "unverified",
-      mutation: state.mutation ? "present" : "none"
+      mutation: state.mutation ? "present" : "none",
+      ...state.definiteEdit ? { definiteEdit: true } : {}
     };
   } catch {
     return { paths: [], coverage: "unverified", mutation: "present" };
@@ -6811,8 +6855,9 @@ function resolvePreflightTargets(args) {
   let rawPaths;
   let coverage = "complete";
   let mutation = "present";
-  if (args.agent === "claude_code" && args.toolName === "Bash") {
-    const command = args.toolInput && typeof args.toolInput === "object" ? args.toolInput.command : void 0;
+  let definite = false;
+  if ((args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash") {
+    const command = typeof args.toolInput === "string" ? args.toolInput : args.toolInput && typeof args.toolInput === "object" ? args.toolInput.command : void 0;
     if (typeof command !== "string") {
       return { paths: [], coverage: "unverified", mutation: "present" };
     }
@@ -6820,11 +6865,13 @@ function resolvePreflightTargets(args) {
     rawPaths = shell.paths;
     coverage = shell.coverage;
     mutation = shell.mutation;
+    definite = shell.definiteEdit === true;
   } else {
     const extracted = extractFileTargets(args.toolName, args.toolInput, args.agent);
     if (!extracted) return { paths: [], coverage: "complete", mutation: "none" };
     rawPaths = extracted.paths;
     if (!extracted.complete) coverage = "unverified";
+    definite = true;
   }
   const root = canonicalGitRoot(args.cwd);
   const paths = /* @__PURE__ */ new Set();
@@ -6835,7 +6882,11 @@ function resolvePreflightTargets(args) {
   }
   const bounded = [...paths];
   if (bounded.length > MAX_PREFLIGHT_PATHS) coverage = "unverified";
-  return { paths: bounded.slice(0, MAX_PREFLIGHT_PATHS), coverage, mutation };
+  const resolved = bounded.slice(0, MAX_PREFLIGHT_PATHS);
+  if (definite && resolved.length === 0 && mutation === "present") {
+    return { paths: resolved, coverage: "unverified", mutation, definite: true };
+  }
+  return { paths: resolved, coverage, mutation };
 }
 function truncateUtf8(value, maxBytes) {
   const encoded = Buffer2.from(value);
@@ -7035,7 +7086,7 @@ async function main() {
     await emit(failOpen());
     return;
   }
-  if (targets.paths.length === 0) {
+  if (targets.paths.length === 0 && !targets.definite) {
     await emit(failOpen());
     return;
   }

package/dist/hook-runtime/hooks/prim-hook.js

@@ -2678,11 +2678,18 @@ function extractCodexFileTargets(toolName, toolInput) {
   if (toolName !== "apply_patch") {
     return null;
   }
-  if (!toolInput || typeof toolInput !== "object") {
-    return { paths: [], complete: false };
+  const text = codexPatchText(toolInput);
+  return text !== null ? parseApplyPatchTargets(text) : { paths: [], complete: false };
+}
+function codexPatchText(toolInput) {
+  if (typeof toolInput === "string") return toolInput;
+  if (!toolInput || typeof toolInput !== "object") return null;
+  const input = toolInput;
+  for (const key of ["command", "input", "patch"]) {
+    const value = input[key];
+    if (typeof value === "string") return value;
   }
-  const command = toolInput.command;
-  return typeof command === "string" ? parseApplyPatchTargets(command) : { paths: [], complete: false };
+  return null;
 }
 var HERMES_EDITING_TOOLS = /* @__PURE__ */ new Set(["write_file", "patch"]);
 function extractHermesFileTargets(toolName, toolInput) {
@@ -7030,6 +7037,31 @@ function visitRedirect(redirect, state) {
     recordTarget(redirect.target, state);
   else unknown(state);
 }
+function visitApplyPatch(command, state) {
+  state.mutation = true;
+  state.definiteEdit = true;
+  let hasBody = false;
+  if (command.suffix.length > 0) state.complete = false;
+  for (const redirect of command.redirects) {
+    if (redirect.operator !== "<<") {
+      visitRedirect(redirect, state);
+      continue;
+    }
+    if (typeof redirect.content !== "string") {
+      state.complete = false;
+      continue;
+    }
+    hasBody = true;
+    if (redirect.heredocQuoted !== true && redirect.body !== void 0) {
+      state.complete = false;
+      continue;
+    }
+    const targets = parseApplyPatchTargets(redirect.content);
+    for (const path of targets.paths) state.paths.add(path);
+    if (!targets.complete) state.complete = false;
+  }
+  if (!hasBody) state.complete = false;
+}
 function operands(words, short = "", long = /* @__PURE__ */ new Set()) {
   const result = [];
   let optionsEnded = false;
@@ -7044,10 +7076,16 @@ function operands(words, short = "", long = /* @__PURE__ */ new Set()) {
   return result;
 }
 function visitCommand(command, state) {
-  for (const redirect of command.redirects) visitRedirect(redirect, state);
   const name = staticWord(command.name);
-  if (!name || name.includes("/") || command.suffix.some((word) => !staticWord(word))) {
+  const literalApplyPatch = name === "apply_patch" && !command.redirects.some((redirect) => redirect.operator === "<<-");
+  if (literalApplyPatch) {
+    visitApplyPatch(command, state);
+  } else {
+    for (const redirect of command.redirects) visitRedirect(redirect, state);
+  }
+  if (!name || name.includes("/") || !literalApplyPatch && command.suffix.some((word) => !staticWord(word))) {
     unknown(state);
+  } else if (literalApplyPatch) {
   } else if (!READ_ONLY_COMMANDS.has(name) && !knownNoWorktreeMutation(name, staticArgs(command.suffix))) {
     state.mutation = true;
     let targets;
@@ -7100,13 +7138,19 @@ function analyzeShellTargets(source) {
     return { paths: [], coverage: "complete", mutation: "none" };
   try {
     const script = parse(source);
-    const state = { paths: /* @__PURE__ */ new Set(), complete: !script.errors?.length, mutation: false };
+    const state = {
+      paths: /* @__PURE__ */ new Set(),
+      complete: !script.errors?.length,
+      mutation: false,
+      definiteEdit: false
+    };
     for (const statement of script.commands) visitStatement(statement, state);
     if (script.errors?.length) state.mutation = true;
     return {
       paths: [...state.paths],
       coverage: state.complete ? "complete" : "unverified",
-      mutation: state.mutation ? "present" : "none"
+      mutation: state.mutation ? "present" : "none",
+      ...state.definiteEdit ? { definiteEdit: true } : {}
     };
   } catch {
     return { paths: [], coverage: "unverified", mutation: "present" };
@@ -7133,7 +7177,7 @@ function preserveHookFileMetadata(payload, resolution) {
   return { ...payload, primitive };
 }
 function resolveHookFileRefs(args) {
-  const command = (args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash" && args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.command === "string" ? args.toolInput.command : void 0;
+  const command = (args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash" ? typeof args.toolInput === "string" ? args.toolInput : args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.command === "string" ? args.toolInput.command : void 0 : void 0;
   const shell = command === void 0 ? void 0 : analyzeShellTargets(command);
   const shellMutation = shell?.mutation === "none" ? "none" : shell?.coverage === "complete" ? "resolved" : shell ? "unresolved" : void 0;
   const readPath = args.agent === "claude_code" && args.toolName === "Read" && args.toolInput && typeof args.toolInput === "object" && typeof args.toolInput.file_path === "string" ? [args.toolInput.file_path] : void 0;

package/dist/hook-runtime/index.js

@@ -29606,7 +29606,7 @@ var GATE_BIN2 = "prim-pre-tool-use";
 var POST_TOOL_USE_BIN2 = "prim-post-tool-use";
 var SESSION_START_BIN2 = "prim-session-start";
 var CODEX_ARGS = "--agent codex";
-var CODEX_EDIT_MATCHER = "apply_patch";
+var CODEX_EDIT_MATCHER = "apply_patch|Bash";
 var CODEX_POST_TOOL_MATCHER = "apply_patch|Bash";
 var JSON_INDENT2 = 2;
 var CODEX_CAPTURE_EVENTS = [

package/dist/hooks/post-tool-use.js

@@ -5,7 +5,7 @@ import {
 import {
   enrichHookPayloadWithFileRefs,
   preserveHookFileMetadata
-} from "../chunk-ZOSNEO5N.js";
+} from "../chunk-7O6NAUKJ.js";
 import {
   postToolInvocationId,
   toMove,
@@ -18,7 +18,7 @@ import {
   appendMove,
   resolveOrg
 } from "../chunk-YWO7O6QG.js";
-import "../chunk-BQUJ4AFJ.js";
+import "../chunk-PPQYQEIR.js";
 import {
   appendCodexContext,
   prepareCodexContext

package/dist/hooks/pre-tool-use.js

@@ -10,7 +10,7 @@ import {
   failOpenHermes,
   failOpenOutput,
   readHookMode
-} from "../chunk-BQUJ4AFJ.js";
+} from "../chunk-PPQYQEIR.js";
 import {
   appendCodexContext,
   hasVisibleCodexMessage,
@@ -60,8 +60,9 @@ function resolvePreflightTargets(args) {
   let rawPaths;
   let coverage = "complete";
   let mutation = "present";
-  if (args.agent === "claude_code" && args.toolName === "Bash") {
-    const command = args.toolInput && typeof args.toolInput === "object" ? args.toolInput.command : void 0;
+  let definite = false;
+  if ((args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash") {
+    const command = typeof args.toolInput === "string" ? args.toolInput : args.toolInput && typeof args.toolInput === "object" ? args.toolInput.command : void 0;
     if (typeof command !== "string") {
       return { paths: [], coverage: "unverified", mutation: "present" };
     }
@@ -69,11 +70,13 @@ function resolvePreflightTargets(args) {
     rawPaths = shell.paths;
     coverage = shell.coverage;
     mutation = shell.mutation;
+    definite = shell.definiteEdit === true;
   } else {
     const extracted = extractFileTargets(args.toolName, args.toolInput, args.agent);
     if (!extracted) return { paths: [], coverage: "complete", mutation: "none" };
     rawPaths = extracted.paths;
     if (!extracted.complete) coverage = "unverified";
+    definite = true;
   }
   const root = canonicalGitRoot(args.cwd);
   const paths = /* @__PURE__ */ new Set();
@@ -84,7 +87,11 @@ function resolvePreflightTargets(args) {
   }
   const bounded = [...paths];
   if (bounded.length > MAX_PREFLIGHT_PATHS) coverage = "unverified";
-  return { paths: bounded.slice(0, MAX_PREFLIGHT_PATHS), coverage, mutation };
+  const resolved = bounded.slice(0, MAX_PREFLIGHT_PATHS);
+  if (definite && resolved.length === 0 && mutation === "present") {
+    return { paths: resolved, coverage: "unverified", mutation, definite: true };
+  }
+  return { paths: resolved, coverage, mutation };
 }
 function truncateUtf8(value, maxBytes) {
   const encoded = Buffer2.from(value);
@@ -284,7 +291,7 @@ async function main() {
     await emit(failOpen());
     return;
   }
-  if (targets.paths.length === 0) {
+  if (targets.paths.length === 0 && !targets.definite) {
     await emit(failOpen());
     return;
   }

package/dist/hooks/prim-hook.js

@@ -12,7 +12,7 @@ import {
 import {
   enrichHookPayloadWithFileRefs,
   preserveHookFileMetadata
-} from "../chunk-ZOSNEO5N.js";
+} from "../chunk-7O6NAUKJ.js";
 import {
   postToolInvocationId,
   shouldFlushAfter,
@@ -25,7 +25,7 @@ import {
   appendMove,
   resolveOrg
 } from "../chunk-YWO7O6QG.js";
-import "../chunk-BQUJ4AFJ.js";
+import "../chunk-PPQYQEIR.js";
 import {
   prepareCodexContext
 } from "../chunk-4CZTNXIS.js";

package/dist/index.js

@@ -14660,7 +14660,7 @@ var GATE_BIN2 = "prim-pre-tool-use";
 var POST_TOOL_USE_BIN2 = "prim-post-tool-use";
 var SESSION_START_BIN2 = "prim-session-start";
 var CODEX_ARGS = "--agent codex";
-var CODEX_EDIT_MATCHER = "apply_patch";
+var CODEX_EDIT_MATCHER = "apply_patch|Bash";
 var CODEX_POST_TOOL_MATCHER = "apply_patch|Bash";
 var JSON_INDENT2 = 2;
 var CODEX_CAPTURE_EVENTS = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitive.ai/prim",
-  "version": "0.1.0-alpha.83",
+  "version": "0.1.0-alpha.84",
   "description": "CLI for Primitive's decision graph — passive decision capture, conflict gate, and team presence",
   "type": "module",
   "license": "MIT",