@primitive.ai/prim 0.1.0-alpha.83 → 0.1.0-alpha.85

package/dist/hook-runtime/index.js

@@ -26797,6 +26797,417 @@ function validate61(data, { instancePath = "", parentData, parentDataProperty, r
   return errors === 0;
 }
 validate61.evaluated = { "props": true, "dynamicProps": false, "dynamicItems": false };
+function validate62(data, { instancePath = "", parentData, parentDataProperty, rootData = data, dynamicAnchors = {} } = {}) {
+  ;
+  let vErrors = null;
+  let errors = 0;
+  const evaluated0 = validate62.evaluated;
+  if (evaluated0.dynamicProps) {
+    evaluated0.props = void 0;
+  }
+  if (evaluated0.dynamicItems) {
+    evaluated0.items = void 0;
+  }
+  const _errs0 = errors;
+  if (errors === _errs0) {
+    if (data && typeof data == "object" && !Array.isArray(data)) {
+      let missing0;
+      if (data.error === void 0 && (missing0 = "error")) {
+        validate62.errors = [{ instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationDisabled/required", keyword: "required", params: { missingProperty: missing0 }, message: "must have required property '" + missing0 + "'" }];
+        return false;
+      } else {
+        const _errs2 = errors;
+        for (const key0 in data) {
+          if (!(key0 === "error")) {
+            validate62.errors = [{ instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationDisabled/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key0 }, message: "must NOT have additional properties" }];
+            return false;
+            break;
+          }
+        }
+        if (_errs2 === errors) {
+          if (data.error !== void 0) {
+            let data0 = data.error;
+            if (typeof data0 !== "string") {
+              validate62.errors = [{ instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationDisabled/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" }];
+              return false;
+            }
+            if ("Not found" !== data0) {
+              validate62.errors = [{ instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationDisabled/properties/error/const", keyword: "const", params: { allowedValue: "Not found" }, message: "must be equal to constant" }];
+              return false;
+            }
+          }
+        }
+      }
+    } else {
+      validate62.errors = [{ instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationDisabled/type", keyword: "type", params: { type: "object" }, message: "must be object" }];
+      return false;
+    }
+  }
+  validate62.errors = vErrors;
+  return errors === 0;
+}
+validate62.evaluated = { "props": true, "dynamicProps": false, "dynamicItems": false };
+function validate63(data, { instancePath = "", parentData, parentDataProperty, rootData = data, dynamicAnchors = {} } = {}) {
+  ;
+  let vErrors = null;
+  let errors = 0;
+  const evaluated0 = validate63.evaluated;
+  if (evaluated0.dynamicProps) {
+    evaluated0.props = void 0;
+  }
+  if (evaluated0.dynamicItems) {
+    evaluated0.items = void 0;
+  }
+  const _errs1 = errors;
+  let valid1 = false;
+  const _errs2 = errors;
+  if (errors === _errs2) {
+    if (data && typeof data == "object" && !Array.isArray(data)) {
+      let missing0;
+      if (data.error === void 0 && (missing0 = "error")) {
+        const err0 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/0/required", keyword: "required", params: { missingProperty: missing0 }, message: "must have required property '" + missing0 + "'" };
+        if (vErrors === null) {
+          vErrors = [err0];
+        } else {
+          vErrors.push(err0);
+        }
+        errors++;
+      } else {
+        const _errs4 = errors;
+        for (const key0 in data) {
+          if (!(key0 === "error")) {
+            const err1 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/0/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key0 }, message: "must NOT have additional properties" };
+            if (vErrors === null) {
+              vErrors = [err1];
+            } else {
+              vErrors.push(err1);
+            }
+            errors++;
+            break;
+          }
+        }
+        if (_errs4 === errors) {
+          if (data.error !== void 0) {
+            let data0 = data.error;
+            if (typeof data0 !== "string") {
+              const err2 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/0/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+              if (vErrors === null) {
+                vErrors = [err2];
+              } else {
+                vErrors.push(err2);
+              }
+              errors++;
+            }
+            if ("Not found" !== data0) {
+              const err3 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/0/properties/error/const", keyword: "const", params: { allowedValue: "Not found" }, message: "must be equal to constant" };
+              if (vErrors === null) {
+                vErrors = [err3];
+              } else {
+                vErrors.push(err3);
+              }
+              errors++;
+            }
+          }
+        }
+      }
+    } else {
+      const err4 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/0/type", keyword: "type", params: { type: "object" }, message: "must be object" };
+      if (vErrors === null) {
+        vErrors = [err4];
+      } else {
+        vErrors.push(err4);
+      }
+      errors++;
+    }
+  }
+  var _valid0 = _errs2 === errors;
+  valid1 = valid1 || _valid0;
+  if (_valid0) {
+    var props0 = true;
+  }
+  const _errs7 = errors;
+  if (errors === _errs7) {
+    if (data && typeof data == "object" && !Array.isArray(data)) {
+      let missing1;
+      if (data.error === void 0 && (missing1 = "error")) {
+        const err5 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/1/required", keyword: "required", params: { missingProperty: missing1 }, message: "must have required property '" + missing1 + "'" };
+        if (vErrors === null) {
+          vErrors = [err5];
+        } else {
+          vErrors.push(err5);
+        }
+        errors++;
+      } else {
+        const _errs9 = errors;
+        for (const key1 in data) {
+          if (!(key1 === "error")) {
+            const err6 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/1/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key1 }, message: "must NOT have additional properties" };
+            if (vErrors === null) {
+              vErrors = [err6];
+            } else {
+              vErrors.push(err6);
+            }
+            errors++;
+            break;
+          }
+        }
+        if (_errs9 === errors) {
+          if (data.error !== void 0) {
+            let data1 = data.error;
+            if (typeof data1 !== "string") {
+              const err7 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/1/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+              if (vErrors === null) {
+                vErrors = [err7];
+              } else {
+                vErrors.push(err7);
+              }
+              errors++;
+            }
+            if ("connect_device_auth_unavailable" !== data1) {
+              const err8 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/1/properties/error/const", keyword: "const", params: { allowedValue: "connect_device_auth_unavailable" }, message: "must be equal to constant" };
+              if (vErrors === null) {
+                vErrors = [err8];
+              } else {
+                vErrors.push(err8);
+              }
+              errors++;
+            }
+          }
+        }
+      }
+    } else {
+      const err9 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf/1/type", keyword: "type", params: { type: "object" }, message: "must be object" };
+      if (vErrors === null) {
+        vErrors = [err9];
+      } else {
+        vErrors.push(err9);
+      }
+      errors++;
+    }
+  }
+  var _valid0 = _errs7 === errors;
+  valid1 = valid1 || _valid0;
+  if (_valid0) {
+    if (props0 !== true) {
+      props0 = true;
+    }
+  }
+  if (!valid1) {
+    const err10 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationError/anyOf", keyword: "anyOf", params: {}, message: "must match a schema in anyOf" };
+    if (vErrors === null) {
+      vErrors = [err10];
+    } else {
+      vErrors.push(err10);
+    }
+    errors++;
+    validate63.errors = vErrors;
+    return false;
+  } else {
+    errors = _errs1;
+    if (vErrors !== null) {
+      if (_errs1) {
+        vErrors.length = _errs1;
+      } else {
+        vErrors = null;
+      }
+    }
+  }
+  validate63.errors = vErrors;
+  evaluated0.props = props0;
+  return errors === 0;
+}
+validate63.evaluated = { "dynamicProps": true, "dynamicItems": false };
+var schema119 = { "type": "object", "properties": { "protocol_version": { "type": "number", "const": 1 }, "issuer": { "type": "string", "format": "uri" }, "client_id": { "type": "string", "maxLength": 256, "pattern": "^client_[A-Za-z0-9_-]+$" }, "default_scopes": { "minItems": 4, "maxItems": 4, "type": "array", "items": { "type": "string", "enum": ["openid", "profile", "email", "offline_access"] } } }, "required": ["protocol_version", "issuer", "client_id", "default_scopes"], "additionalProperties": false, "x-primitive-runtime-refinements": ["canonical_https_origin", "exact_workos_connect_device_scopes"] };
+var pattern37 = new RegExp("^client_[A-Za-z0-9_-]+$", "u");
+function validate64(data, { instancePath = "", parentData, parentDataProperty, rootData = data, dynamicAnchors = {} } = {}) {
+  ;
+  let vErrors = null;
+  let errors = 0;
+  const evaluated0 = validate64.evaluated;
+  if (evaluated0.dynamicProps) {
+    evaluated0.props = void 0;
+  }
+  if (evaluated0.dynamicItems) {
+    evaluated0.items = void 0;
+  }
+  const _errs0 = errors;
+  if (errors === _errs0) {
+    if (data && typeof data == "object" && !Array.isArray(data)) {
+      let missing0;
+      if (data.protocol_version === void 0 && (missing0 = "protocol_version") || data.issuer === void 0 && (missing0 = "issuer") || data.client_id === void 0 && (missing0 = "client_id") || data.default_scopes === void 0 && (missing0 = "default_scopes")) {
+        validate64.errors = [{ instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/required", keyword: "required", params: { missingProperty: missing0 }, message: "must have required property '" + missing0 + "'" }];
+        return false;
+      } else {
+        const _errs3 = errors;
+        for (const key0 in data) {
+          if (!(key0 === "protocol_version" || key0 === "issuer" || key0 === "client_id" || key0 === "default_scopes")) {
+            validate64.errors = [{ instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key0 }, message: "must NOT have additional properties" }];
+            return false;
+            break;
+          }
+        }
+        if (_errs3 === errors) {
+          if (data.protocol_version !== void 0) {
+            let data0 = data.protocol_version;
+            const _errs4 = errors;
+            if (!(typeof data0 == "number" && isFinite(data0))) {
+              validate64.errors = [{ instancePath: instancePath + "/protocol_version", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/protocol_version/type", keyword: "type", params: { type: "number" }, message: "must be number" }];
+              return false;
+            }
+            if (1 !== data0) {
+              validate64.errors = [{ instancePath: instancePath + "/protocol_version", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/protocol_version/const", keyword: "const", params: { allowedValue: 1 }, message: "must be equal to constant" }];
+              return false;
+            }
+            var valid1 = _errs4 === errors;
+          } else {
+            var valid1 = true;
+          }
+          if (valid1) {
+            if (data.issuer !== void 0) {
+              const _errs6 = errors;
+              if (errors === _errs6) {
+                if (errors === _errs6) {
+                  if (!(typeof data.issuer === "string")) {
+                    validate64.errors = [{ instancePath: instancePath + "/issuer", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/issuer/type", keyword: "type", params: { type: "string" }, message: "must be string" }];
+                    return false;
+                  }
+                }
+              }
+              var valid1 = _errs6 === errors;
+            } else {
+              var valid1 = true;
+            }
+            if (valid1) {
+              if (data.client_id !== void 0) {
+                let data2 = data.client_id;
+                const _errs8 = errors;
+                if (errors === _errs8) {
+                  if (typeof data2 === "string") {
+                    if (func1(data2) > 256) {
+                      validate64.errors = [{ instancePath: instancePath + "/client_id", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/client_id/maxLength", keyword: "maxLength", params: { limit: 256 }, message: "must NOT have more than 256 characters" }];
+                      return false;
+                    } else {
+                      if (!pattern37.test(data2)) {
+                        validate64.errors = [{ instancePath: instancePath + "/client_id", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/client_id/pattern", keyword: "pattern", params: { pattern: "^client_[A-Za-z0-9_-]+$" }, message: 'must match pattern "^client_[A-Za-z0-9_-]+$"' }];
+                        return false;
+                      }
+                    }
+                  } else {
+                    validate64.errors = [{ instancePath: instancePath + "/client_id", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/client_id/type", keyword: "type", params: { type: "string" }, message: "must be string" }];
+                    return false;
+                  }
+                }
+                var valid1 = _errs8 === errors;
+              } else {
+                var valid1 = true;
+              }
+              if (valid1) {
+                if (data.default_scopes !== void 0) {
+                  let data3 = data.default_scopes;
+                  const _errs10 = errors;
+                  if (errors === _errs10) {
+                    if (Array.isArray(data3)) {
+                      if (data3.length > 4) {
+                        validate64.errors = [{ instancePath: instancePath + "/default_scopes", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/default_scopes/maxItems", keyword: "maxItems", params: { limit: 4 }, message: "must NOT have more than 4 items" }];
+                        return false;
+                      } else {
+                        if (data3.length < 4) {
+                          validate64.errors = [{ instancePath: instancePath + "/default_scopes", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/default_scopes/minItems", keyword: "minItems", params: { limit: 4 }, message: "must NOT have fewer than 4 items" }];
+                          return false;
+                        } else {
+                          var valid2 = true;
+                          const len0 = data3.length;
+                          for (let i0 = 0; i0 < len0; i0++) {
+                            let data4 = data3[i0];
+                            const _errs12 = errors;
+                            if (typeof data4 !== "string") {
+                              validate64.errors = [{ instancePath: instancePath + "/default_scopes/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/default_scopes/items/type", keyword: "type", params: { type: "string" }, message: "must be string" }];
+                              return false;
+                            }
+                            if (!(data4 === "openid" || data4 === "profile" || data4 === "email" || data4 === "offline_access")) {
+                              validate64.errors = [{ instancePath: instancePath + "/default_scopes/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/default_scopes/items/enum", keyword: "enum", params: { allowedValues: schema119.properties.default_scopes.items.enum }, message: "must be equal to one of the allowed values" }];
+                              return false;
+                            }
+                            var valid2 = _errs12 === errors;
+                            if (!valid2) {
+                              break;
+                            }
+                          }
+                        }
+                      }
+                    } else {
+                      validate64.errors = [{ instancePath: instancePath + "/default_scopes", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/properties/default_scopes/type", keyword: "type", params: { type: "array" }, message: "must be array" }];
+                      return false;
+                    }
+                  }
+                  var valid1 = _errs10 === errors;
+                } else {
+                  var valid1 = true;
+                }
+              }
+            }
+          }
+        }
+      }
+    } else {
+      validate64.errors = [{ instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationSuccess/type", keyword: "type", params: { type: "object" }, message: "must be object" }];
+      return false;
+    }
+  }
+  validate64.errors = vErrors;
+  return errors === 0;
+}
+validate64.evaluated = { "props": true, "dynamicProps": false, "dynamicItems": false };
+function validate65(data, { instancePath = "", parentData, parentDataProperty, rootData = data, dynamicAnchors = {} } = {}) {
+  ;
+  let vErrors = null;
+  let errors = 0;
+  const evaluated0 = validate65.evaluated;
+  if (evaluated0.dynamicProps) {
+    evaluated0.props = void 0;
+  }
+  if (evaluated0.dynamicItems) {
+    evaluated0.items = void 0;
+  }
+  const _errs0 = errors;
+  if (errors === _errs0) {
+    if (data && typeof data == "object" && !Array.isArray(data)) {
+      let missing0;
+      if (data.error === void 0 && (missing0 = "error")) {
+        validate65.errors = [{ instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationUnavailable/required", keyword: "required", params: { missingProperty: missing0 }, message: "must have required property '" + missing0 + "'" }];
+        return false;
+      } else {
+        const _errs2 = errors;
+        for (const key0 in data) {
+          if (!(key0 === "error")) {
+            validate65.errors = [{ instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationUnavailable/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key0 }, message: "must NOT have additional properties" }];
+            return false;
+            break;
+          }
+        }
+        if (_errs2 === errors) {
+          if (data.error !== void 0) {
+            let data0 = data.error;
+            if (typeof data0 !== "string") {
+              validate65.errors = [{ instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationUnavailable/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" }];
+              return false;
+            }
+            if ("connect_device_auth_unavailable" !== data0) {
+              validate65.errors = [{ instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationUnavailable/properties/error/const", keyword: "const", params: { allowedValue: "connect_device_auth_unavailable" }, message: "must be equal to constant" }];
+              return false;
+            }
+          }
+        }
+      }
+    } else {
+      validate65.errors = [{ instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/WorkosConnectDeviceConfigurationUnavailable/type", keyword: "type", params: { type: "object" }, message: "must be object" }];
+      return false;
+    }
+  }
+  validate65.errors = vErrors;
+  return errors === 0;
+}
+validate65.evaluated = { "props": true, "dynamicProps": false, "dynamicItems": false };
 
 // src/contract/cli-http-v1.ts
 function isGitHubInstallIntentStatusResponse(value) {
@@ -29606,7 +30017,7 @@ var GATE_BIN2 = "prim-pre-tool-use";
 var POST_TOOL_USE_BIN2 = "prim-post-tool-use";
 var SESSION_START_BIN2 = "prim-session-start";
 var CODEX_ARGS = "--agent codex";
-var CODEX_EDIT_MATCHER = "apply_patch";
+var CODEX_EDIT_MATCHER = "apply_patch|Bash";
 var CODEX_POST_TOOL_MATCHER = "apply_patch|Bash";
 var JSON_INDENT2 = 2;
 var CODEX_CAPTURE_EVENTS = [
@@ -32212,18 +32623,29 @@ var EXPECTED_STAGE = {
   publish: "provisional",
   restore: "draft",
   ratify: "adopted",
+  promote: "adopted",
+  demote: "provisional",
+  withdraw: "abandoned",
   supersede: "superseded"
 };
 var PATH = {
   publish: "/api/cli/decisions/publish",
   restore: "/api/cli/decisions/restore",
   ratify: "/api/cli/decisions/ratify",
+  // `promote` is the human-facing alias for the established ratify wire
+  // operation; no second server transition or contract endpoint exists.
+  promote: "/api/cli/decisions/ratify",
+  demote: "/api/cli/decisions/demote",
+  withdraw: "/api/cli/decisions/withdraw",
   supersede: "/api/cli/decisions/supersede"
 };
 var PAST_PARTICIPLE = {
   publish: "published",
   restore: "restored",
   ratify: "ratified",
+  promote: "promoted",
+  demote: "demoted",
+  withdraw: "withdrawn",
   supersede: "superseded"
 };
 var ORG_UNBOUND_MESSAGE = "CLI token is not bound to an organization";
@@ -32233,6 +32655,8 @@ var DECISION_NOT_FOUND_MESSAGE = "Decision not found";
 var REPLACEMENT_NOT_FOUND_MESSAGE = "Replacement decision not found";
 var SELF_REPLACEMENT_MESSAGE = "A decision cannot supersede itself";
 var OLD_SERVER_NOT_FOUND_MESSAGE = "Not found";
+var FEATURE_DISABLED_MESSAGE = "feature_disabled";
+var FEATURE_CHECK_UNAVAILABLE_MESSAGE = "feature_check_unavailable";
 var STAGE_NAME = "(?:draft|provisional|adopted|superseded|abandoned)";
 var IMMUTABLE_MESSAGE = new RegExp(
   `^An ${STAGE_NAME} decision is immutable \u2014 supersede it to change it$`,
@@ -32277,6 +32701,15 @@ function formatSuccessHuman(operation, request2, response) {
   if (operation === "ratify") {
     return `[prim] ${identifier} ratified as ${response.stage}.`;
   }
+  if (operation === "promote") {
+    return `[prim] ${identifier} promoted as ${response.stage}.`;
+  }
+  if (operation === "demote") {
+    return `[prim] ${identifier} demoted to provisional \u2014 advisory again until re-ratified.`;
+  }
+  if (operation === "withdraw") {
+    return `[prim] ${identifier} withdrawn as abandoned \u2014 removed from active guidance, not deleted; recover with \`prim decisions restore\`.`;
+  }
   const replacement = safeRequestedIdentifier(
     request2.by,
     "the replacement Decision"
@@ -32300,6 +32733,12 @@ function classifyHttpError2(error) {
   if (error.status === 403 && message === NOT_AUTHOR_MESSAGE) {
     return failure2("not_author", DECISION_LIFECYCLE_EXIT.rejected, error.status);
   }
+  if (error.status === 403 && message === FEATURE_DISABLED_MESSAGE) {
+    return failure2("feature_disabled", DECISION_LIFECYCLE_EXIT.rejected, error.status);
+  }
+  if (error.status === 503 && message === FEATURE_CHECK_UNAVAILABLE_MESSAGE) {
+    return failure2("feature_check_unavailable", DECISION_LIFECYCLE_EXIT.server, error.status);
+  }
   if (error.status === 409 && message === AMBIGUOUS_MESSAGE) {
     return failure2("ambiguous_identifier", DECISION_LIFECYCLE_EXIT.rejected, error.status);
   }
@@ -32359,6 +32798,10 @@ function formatFailureHuman(operation, result) {
       return `[prim] ${verb} rejected: Decision not found.`;
     case "replacement_not_found":
       return "[prim] supersede rejected: replacement Decision not found.";
+    case "feature_disabled":
+      return `[prim] ${verb} rejected: manual lifecycle actions are not enabled for this account.`;
+    case "feature_check_unavailable":
+      return `[prim] ${verb} unavailable: the server could not verify feature availability; retry shortly.`;
     case "unsupported_server":
       return `[prim] ${verb} unavailable: this Primitive server does not support this Decision lifecycle operation; upgrade the server before retrying.`;
     case "rejected":
@@ -32427,6 +32870,18 @@ function ratifyDecision(id, dependencies = defaultDependencies3) {
   const request2 = { id };
   return executeLifecycle("ratify", request2, dependencies);
 }
+function promoteDecision(id, dependencies = defaultDependencies3) {
+  const request2 = { id };
+  return executeLifecycle("promote", request2, dependencies);
+}
+function demoteDecision(id, dependencies = defaultDependencies3) {
+  const request2 = { id };
+  return executeLifecycle("demote", request2, dependencies);
+}
+function withdrawDecision(id, dependencies = defaultDependencies3) {
+  const request2 = { id };
+  return executeLifecycle("withdraw", request2, dependencies);
+}
 function supersedeDecision(id, by, dependencies = defaultDependencies3) {
   const request2 = { id, by };
   return executeLifecycle("supersede", request2, dependencies);
@@ -33367,6 +33822,19 @@ function registerDecisionsCommands(program3) {
   decisions.command("ratify <idOrShortId>").description("Ratify an authored Decision as adopted").action(async (idOrShortId) => {
     process.exitCode = await ratifyDecision(idOrShortId);
   });
+  decisions.command("promote <idOrShortId>").description("Promote an authored Decision to adopted, ratified guidance").action(async (idOrShortId) => {
+    process.exitCode = await promoteDecision(idOrShortId);
+  });
+  decisions.command("demote <idOrShortId>").description(
+    "Demote an authored adopted Decision back to provisional \u2014 advisory guidance only, no longer ratified"
+  ).action(async (idOrShortId) => {
+    process.exitCode = await demoteDecision(idOrShortId);
+  });
+  decisions.command("withdraw <idOrShortId>").description(
+    "Withdraw an authored Decision as abandoned \u2014 removed from active guidance but never deleted; `prim decisions restore` recovers it as a private draft"
+  ).action(async (idOrShortId) => {
+    process.exitCode = await withdrawDecision(idOrShortId);
+  });
   decisions.command("supersede <idOrShortId>").description("Supersede a Decision with a distinct replacement Decision").requiredOption("--by <replacementIdOrShortId>", "Decision that replaces the named Decision").action(async (idOrShortId, opts) => {
     process.exitCode = await supersedeDecision(idOrShortId, opts.by);
   });

package/dist/hooks/post-tool-use.js

@@ -5,7 +5,7 @@ import {
 import {
   enrichHookPayloadWithFileRefs,
   preserveHookFileMetadata
-} from "../chunk-ZOSNEO5N.js";
+} from "../chunk-7O6NAUKJ.js";
 import {
   postToolInvocationId,
   toMove,
@@ -18,7 +18,7 @@ import {
   appendMove,
   resolveOrg
 } from "../chunk-YWO7O6QG.js";
-import "../chunk-BQUJ4AFJ.js";
+import "../chunk-PPQYQEIR.js";
 import {
   appendCodexContext,
   prepareCodexContext

package/dist/hooks/pre-tool-use.js

@@ -10,7 +10,7 @@ import {
   failOpenHermes,
   failOpenOutput,
   readHookMode
-} from "../chunk-BQUJ4AFJ.js";
+} from "../chunk-PPQYQEIR.js";
 import {
   appendCodexContext,
   hasVisibleCodexMessage,
@@ -60,8 +60,9 @@ function resolvePreflightTargets(args) {
   let rawPaths;
   let coverage = "complete";
   let mutation = "present";
-  if (args.agent === "claude_code" && args.toolName === "Bash") {
-    const command = args.toolInput && typeof args.toolInput === "object" ? args.toolInput.command : void 0;
+  let definite = false;
+  if ((args.agent === "claude_code" || args.agent === "codex") && args.toolName === "Bash") {
+    const command = typeof args.toolInput === "string" ? args.toolInput : args.toolInput && typeof args.toolInput === "object" ? args.toolInput.command : void 0;
     if (typeof command !== "string") {
       return { paths: [], coverage: "unverified", mutation: "present" };
     }
@@ -69,11 +70,13 @@ function resolvePreflightTargets(args) {
     rawPaths = shell.paths;
     coverage = shell.coverage;
     mutation = shell.mutation;
+    definite = shell.definiteEdit === true;
   } else {
     const extracted = extractFileTargets(args.toolName, args.toolInput, args.agent);
     if (!extracted) return { paths: [], coverage: "complete", mutation: "none" };
     rawPaths = extracted.paths;
     if (!extracted.complete) coverage = "unverified";
+    definite = true;
   }
   const root = canonicalGitRoot(args.cwd);
   const paths = /* @__PURE__ */ new Set();
@@ -84,7 +87,11 @@ function resolvePreflightTargets(args) {
   }
   const bounded = [...paths];
   if (bounded.length > MAX_PREFLIGHT_PATHS) coverage = "unverified";
-  return { paths: bounded.slice(0, MAX_PREFLIGHT_PATHS), coverage, mutation };
+  const resolved = bounded.slice(0, MAX_PREFLIGHT_PATHS);
+  if (definite && resolved.length === 0 && mutation === "present") {
+    return { paths: resolved, coverage: "unverified", mutation, definite: true };
+  }
+  return { paths: resolved, coverage, mutation };
 }
 function truncateUtf8(value, maxBytes) {
   const encoded = Buffer2.from(value);
@@ -284,7 +291,7 @@ async function main() {
     await emit(failOpen());
     return;
   }
-  if (targets.paths.length === 0) {
+  if (targets.paths.length === 0 && !targets.definite) {
     await emit(failOpen());
     return;
   }

package/dist/hooks/prim-hook.js

@@ -12,7 +12,7 @@ import {
 import {
   enrichHookPayloadWithFileRefs,
   preserveHookFileMetadata
-} from "../chunk-ZOSNEO5N.js";
+} from "../chunk-7O6NAUKJ.js";
 import {
   postToolInvocationId,
   shouldFlushAfter,
@@ -25,7 +25,7 @@ import {
   appendMove,
   resolveOrg
 } from "../chunk-YWO7O6QG.js";
-import "../chunk-BQUJ4AFJ.js";
+import "../chunk-PPQYQEIR.js";
 import {
   prepareCodexContext
 } from "../chunk-4CZTNXIS.js";