@primitive.ai/prim 0.1.0-alpha.92 → 0.1.0-alpha.94

package/dist/hook-runtime/hooks/prim-hook.js

@@ -53,8 +53,8 @@ var require_ucs2length = __commonJS({
 
 // src/hooks/prim-hook.ts
 import { spawn } from "child_process";
-import { readFileSync as readFileSync14 } from "fs";
-import { dirname as dirname11, join as join16 } from "path";
+import { readFileSync as readFileSync15 } from "fs";
+import { dirname as dirname12, join as join17 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/binding.ts
@@ -1342,17 +1342,30 @@ async function acknowledgeDecisionFeedback(input, dependencies = {}) {
 import {
   appendFileSync,
   closeSync as closeSync2,
-  existsSync as existsSync4,
+  existsSync as existsSync5,
   fstatSync,
   mkdirSync as mkdirSync4,
   openSync as openSync2,
   opendirSync,
-  readFileSync as readFileSync5,
+  readFileSync as readFileSync6,
   readSync,
-  readdirSync
+  readdirSync as readdirSync2
+} from "fs";
+import { dirname as dirname6, join as join7 } from "path";
+
+// src/drain-progress.ts
+import {
+  chmodSync as chmodSync2,
+  existsSync as existsSync4,
+  readFileSync as readFileSync5,
+  readdirSync,
+  rmSync as rmSync4,
+  rmdirSync
 } from "fs";
-import { dirname as dirname5, join as join6 } from "path";
-var JOURNAL_DIR = join6(primConfigDirectory(), "moves");
+import { basename, dirname as dirname5, join as join6 } from "path";
+
+// src/journal.ts
+var JOURNAL_DIR = join7(primConfigDirectory(), "moves");
 var UNBOUND_BUCKET = "_unbound";
 var JOURNAL_BASENAME = "journal.ndjson";
 var JOURNAL_STATS_SAMPLE_BYTES = 64 * 1024;
@@ -1364,15 +1377,15 @@ function envSlug(apiUrl) {
   return slug;
 }
 function currentEnvDir() {
-  return join6(JOURNAL_DIR, envSlug(getSiteUrl()));
+  return join7(JOURNAL_DIR, envSlug(getSiteUrl()));
 }
 var DIR_MODE = 448;
 var FILE_MODE2 = 384;
 var SAFE_BUCKET = /^[A-Za-z0-9_-]+$/;
 var RESERVED_BUCKETS = /* @__PURE__ */ new Set([UNBOUND_BUCKET, "_legacy"]);
 function appendMoveToPath(path, move) {
-  const dir = dirname5(path);
-  if (!existsSync4(dir)) {
+  const dir = dirname6(path);
+  if (!existsSync5(dir)) {
     mkdirSync4(dir, { recursive: true, mode: DIR_MODE });
   }
   appendFileSync(path, `${JSON.stringify(move)}
@@ -1380,10 +1393,10 @@ function appendMoveToPath(path, move) {
 }
 function bucketDir(orgId) {
   const safe = orgId !== void 0 && SAFE_BUCKET.test(orgId) && !RESERVED_BUCKETS.has(orgId);
-  return join6(currentEnvDir(), safe ? orgId : UNBOUND_BUCKET);
+  return join7(currentEnvDir(), safe ? orgId : UNBOUND_BUCKET);
 }
 function journalPath(orgId) {
-  return join6(bucketDir(orgId), JOURNAL_BASENAME);
+  return join7(bucketDir(orgId), JOURNAL_BASENAME);
 }
 function appendMove(move, orgId) {
   appendMoveToPath(journalPath(orgId), move);
@@ -1392,15 +1405,15 @@ var FLUSHING_PREFIX = `${JOURNAL_BASENAME}.flushing.`;
 
 // src/lib/activation.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync5, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync7 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 
 // src/lib/git.ts
 import { execFileSync } from "child_process";
 import { createHash as createHash3 } from "crypto";
 import { lstatSync, realpathSync } from "fs";
-import { basename, dirname as dirname6, isAbsolute as isAbsolute2, relative, resolve as resolve2, sep } from "path";
+import { basename as basename2, dirname as dirname7, isAbsolute as isAbsolute2, relative, resolve as resolve2, sep } from "path";
 var GIT_TIMEOUT_MS = 1e3;
 var GITHUB_OWNER_PATTERN = /^(?![A-Za-z0-9-]*--)[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/u;
 var GITHUB_REPOSITORY_PATTERN = /^[A-Za-z0-9._-]{1,100}$/u;
@@ -1519,7 +1532,7 @@ function nearestExistingAncestor(path) {
     } catch (error) {
       const code = typeof error === "object" && error !== null && "code" in error ? error.code : void 0;
       if (code !== "ENOENT" && code !== "ENOTDIR") return null;
-      const parent = dirname6(cursor);
+      const parent = dirname7(cursor);
       if (parent === cursor) return null;
       suffix.unshift(cursor.slice(parent.length + (parent.endsWith(sep) ? 0 : 1)));
       cursor = parent;
@@ -1560,9 +1573,9 @@ function canonicalRepositoryPathLegacy(filePath, cwd, repositoryRoot = canonical
       return null;
     }
     try {
-      const parent = realpathSync.native(dirname6(absolute));
+      const parent = realpathSync.native(dirname7(absolute));
       if (!lstatSync(parent).isDirectory()) return null;
-      target = resolve2(parent, basename(absolute));
+      target = resolve2(parent, basename2(absolute));
     } catch {
       return null;
     }
@@ -1643,10 +1656,10 @@ function hasProjectPrimInstall(cwd) {
   const root = gitToplevel(cwd);
   if (root === null || root === homedir2()) return false;
   for (const rel of PROJECT_INSTALL_FILES) {
-    const path = join7(root, rel);
-    if (existsSync5(path)) {
+    const path = join8(root, rel);
+    if (existsSync6(path)) {
       try {
-        const content = readFileSync6(path, "utf-8");
+        const content = readFileSync7(path, "utf-8");
         if (PRIM_HOOK_BINS.some((bin) => content.includes(bin))) return true;
       } catch {
       }
@@ -19735,12 +19748,18 @@ function cachedCollectScopeAdmits(cwd, facts) {
   );
 }
 
+// src/lib/unattended.ts
+var UNATTENDED_ENV = "PRIM_UNATTENDED";
+function unattendedEnv(env = process.env) {
+  return { ...env, [UNATTENDED_ENV]: "1" };
+}
+
 // src/lib/workspace-id.ts
 import { execFileSync as execFileSync3 } from "child_process";
 import { randomUUID as randomUUID2 } from "crypto";
 import {
   constants as constants2,
-  chmodSync as chmodSync2,
+  chmodSync as chmodSync3,
   closeSync as closeSync3,
   fchmodSync as fchmodSync2,
   fsyncSync as fsyncSync2,
@@ -19748,13 +19767,13 @@ import {
   lstatSync as lstatSync2,
   mkdirSync as mkdirSync5,
   openSync as openSync3,
-  readFileSync as readFileSync7,
+  readFileSync as readFileSync8,
   statSync as statSync2,
   unlinkSync,
   writeFileSync as writeFileSync3
 } from "fs";
-import { dirname as dirname7, isAbsolute as isAbsolute3, join as join8, resolve as resolve3 } from "path";
-var WORKSPACE_ID_RELATIVE_PATH = join8("prim", "workspace-id");
+import { dirname as dirname8, isAbsolute as isAbsolute3, join as join9, resolve as resolve3 } from "path";
+var WORKSPACE_ID_RELATIVE_PATH = join9("prim", "workspace-id");
 var MAX_ANCESTORS = 64;
 var MAX_GIT_FILE_BYTES = 4096;
 var MAX_ID_FILE_BYTES = 128;
@@ -19813,19 +19832,19 @@ function resolveWorkspaceIdPath(cwd) {
 function resolveFromFilesystem(cwd) {
   let current = resolve3(cwd);
   for (let depth = 0; depth < MAX_ANCESTORS; depth += 1) {
-    const dotGit = join8(current, ".git");
+    const dotGit = join9(current, ".git");
     try {
       const stat = lstatSync2(dotGit);
       if (stat.isDirectory() && isGitDirectory(dotGit)) {
-        return join8(dotGit, WORKSPACE_ID_RELATIVE_PATH);
+        return join9(dotGit, WORKSPACE_ID_RELATIVE_PATH);
       }
       if (stat.isFile() && stat.size <= MAX_GIT_FILE_BYTES) {
-        const contents = readFileSync7(dotGit, "utf8");
+        const contents = readFileSync8(dotGit, "utf8");
         const match = /^gitdir: (.+?)(?:\r?\n)?$/.exec(contents);
         if (match?.[1]) {
           const gitDirectory = isAbsolute3(match[1]) ? resolve3(match[1]) : resolve3(current, match[1]);
           if (isGitDirectory(gitDirectory)) {
-            return join8(gitDirectory, WORKSPACE_ID_RELATIVE_PATH);
+            return join9(gitDirectory, WORKSPACE_ID_RELATIVE_PATH);
           }
         }
       }
@@ -19836,7 +19855,7 @@ function resolveFromFilesystem(cwd) {
         return null;
       }
     }
-    const parent = dirname7(current);
+    const parent = dirname8(current);
     if (parent === current) break;
     current = parent;
   }
@@ -19844,7 +19863,7 @@ function resolveFromFilesystem(cwd) {
 }
 function isGitDirectory(path) {
   try {
-    return statSync2(join8(path, "HEAD")).isFile();
+    return statSync2(join9(path, "HEAD")).isFile();
   } catch {
     return false;
   }
@@ -19863,7 +19882,7 @@ function inspectPath(path) {
     return { status: "corrupt", path, reason: "invalid_content" };
   }
   try {
-    const contents = readFileSync7(path, "utf8");
+    const contents = readFileSync8(path, "utf8");
     const workspaceId = contents.endsWith("\n") ? contents.slice(0, -1) : contents;
     if ((contents === workspaceId || contents === `${workspaceId}
 `) && isCanonicalWorkspaceId(workspaceId)) {
@@ -19880,14 +19899,14 @@ function inspectPath(path) {
   }
 }
 function createWorkspaceId(path) {
-  const parent = dirname7(path);
+  const parent = dirname8(path);
   const workspaceId = randomUUID2();
-  const temporaryPath = join8(parent, `.workspace-id-${process.pid}-${randomUUID2()}.tmp`);
+  const temporaryPath = join9(parent, `.workspace-id-${process.pid}-${randomUUID2()}.tmp`);
   let temporaryCreated = false;
   let publishing = false;
   try {
     mkdirSync5(parent, { recursive: true, mode: 448 });
-    chmodSync2(parent, 448);
+    chmodSync3(parent, 448);
     const fd = openSync3(
       temporaryPath,
       constants2.O_CREAT | constants2.O_EXCL | constants2.O_WRONLY,
@@ -19954,22 +19973,22 @@ function parseAgent(argv) {
 // src/hooks/codex-context.ts
 import { createHash as createHash5, randomBytes as randomBytes3 } from "crypto";
 import {
-  chmodSync as chmodSync3,
-  existsSync as existsSync7,
+  chmodSync as chmodSync4,
+  existsSync as existsSync8,
   mkdirSync as mkdirSync6,
-  readFileSync as readFileSync9,
-  readdirSync as readdirSync2,
+  readFileSync as readFileSync10,
+  readdirSync as readdirSync3,
   renameSync as renameSync2,
-  rmSync as rmSync4,
+  rmSync as rmSync5,
   statSync as statSync3,
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync4
 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 
 // src/daemon/client.ts
 import { createConnection } from "net";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 
 // src/daemon/principal.ts
 import { createHash as createHash4 } from "crypto";
@@ -20019,7 +20038,7 @@ function parseDaemonResponseEnvelope(value) {
 }
 
 // src/daemon/client.ts
-var SOCK_PATH = join9(primConfigDirectory(), "sock");
+var SOCK_PATH = join10(primConfigDirectory(), "sock");
 var DEFAULT_TIMEOUT_MS2 = 250;
 var nextRequestId = 1;
 function daemonRequest(method, params = {}, opts = {}) {
@@ -20120,8 +20139,8 @@ function isActionablePrivateDraft(row) {
 }
 
 // src/lib/bin-path.ts
-import { existsSync as existsSync6, readFileSync as readFileSync8 } from "fs";
-import { dirname as dirname8, isAbsolute as isAbsolute4, join as join10 } from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync9 } from "fs";
+import { dirname as dirname9, isAbsolute as isAbsolute4, join as join11 } from "path";
 import { fileURLToPath } from "url";
 var PKG_NAME = "@primitive.ai/prim";
 var ROOT_WALK_LIMIT = 6;
@@ -20131,12 +20150,12 @@ function locateRoot() {
   if (resolvedRoot !== void 0) {
     return resolvedRoot;
   }
-  let dir = dirname8(fileURLToPath(import.meta.url));
+  let dir = dirname9(fileURLToPath(import.meta.url));
   for (let depth = 0; depth < ROOT_WALK_LIMIT; depth++) {
-    const manifestPath = join10(dir, "package.json");
-    if (existsSync6(manifestPath)) {
+    const manifestPath = join11(dir, "package.json");
+    if (existsSync7(manifestPath)) {
       try {
-        const manifest = JSON.parse(readFileSync8(manifestPath, "utf-8"));
+        const manifest = JSON.parse(readFileSync9(manifestPath, "utf-8"));
         if (manifest.name === PKG_NAME && manifest.bin) {
           resolvedRoot = { dir, version: manifest.version, bin: manifest.bin };
           return resolvedRoot;
@@ -20144,7 +20163,7 @@ function locateRoot() {
       } catch {
       }
     }
-    const parent = dirname8(dir);
+    const parent = dirname9(dir);
     if (parent === dir) {
       break;
     }
@@ -20161,6 +20180,13 @@ function shellQuote(value) {
 }
 var STABLE_HOOK_ARGUMENTS_RE = /^[-A-Za-z0-9_ ]*$/u;
 var STABLE_HOOK_BIN_RE = /^[A-Za-z0-9][A-Za-z0-9-]*$/u;
+var PRIM_CONFIG_SHELL_RESOLVER = [
+  'prim_absolute() { case "$1" in [/]* ) ;; *) return 1 ;; esac; case "$1" in [[:space:]]*|*[[:space:]]|*[/][/]*|*[/].[/]*|*[/]..[/]*|*[/].|*[/]..|?*[/]) return 1 ;; esac; }; ',
+  'prim_config=${PRIM_CONFIG_DIR:-}; if ! prim_absolute "$prim_config"; then prim_config=${XDG_CONFIG_HOME:-}; if prim_absolute "$prim_config"; then ',
+  'case "$prim_config" in /) prim_config=/prim ;; *) prim_config="$prim_config/prim" ;; esac; ',
+  'else prim_home=${HOME:-}; prim_absolute "$prim_home" || exit 78; case "$prim_home" in /) prim_config=/.config/prim ;; *) prim_config="$prim_home/.config/prim" ;; esac; ',
+  "fi; fi; "
+].join("");
 function stableHookCommand(bin, args = "") {
   if (!STABLE_HOOK_BIN_RE.test(bin) || !STABLE_HOOK_ARGUMENTS_RE.test(args)) {
     throw new Error("invalid stable hook command");
@@ -20170,11 +20196,7 @@ function stableHookCommand(bin, args = "") {
     // it as inert data during the rolling window so an older uninstall or
     // reinstall can remove the stable entry without invoking npm or PATH.
     `prim_legacy_reader='-p ${PKG_NAME}@stable prim-shim.sh ${bin} '; `,
-    'prim_absolute() { case "$1" in [/]* ) ;; *) return 1 ;; esac; case "$1" in [[:space:]]*|*[[:space:]]|*[/][/]*|*[/].[/]*|*[/]..[/]*|*[/].|*[/]..|?*[/]) return 1 ;; esac; }; ',
-    'prim_config=${PRIM_CONFIG_DIR:-}; if ! prim_absolute "$prim_config"; then prim_config=${XDG_CONFIG_HOME:-}; if prim_absolute "$prim_config"; then ',
-    'case "$prim_config" in /) prim_config=/prim ;; *) prim_config="$prim_config/prim" ;; esac; ',
-    'else prim_home=${HOME:-}; prim_absolute "$prim_home" || exit 78; case "$prim_home" in /) prim_config=/.config/prim ;; *) prim_config="$prim_home/.config/prim" ;; esac; ',
-    "fi; fi; ",
+    PRIM_CONFIG_SHELL_RESOLVER,
     `case "$prim_config" in /) prim_launcher=/${STABLE_HOOK_LAUNCHER_NAME} ;; *) prim_launcher="$prim_config/${STABLE_HOOK_LAUNCHER_NAME}" ;; esac; `,
     'exec "$prim_launcher" "$@"'
   ].join("");
@@ -20185,6 +20207,36 @@ function detachedHookShimCommand(bin, args = "") {
   return `payload=$(cat); { trap '' HUP; printf '%s' "$payload" | { ${stableHookCommand(bin, args)}; }; } </dev/null >/dev/null 2>&1 &`;
 }
 
+// src/lib/ansi.ts
+var MAX_HEALTH_ERROR_LENGTH = 240;
+function boundedHealthError(value) {
+  if (!value) return void 0;
+  const clean = terminalSafeLine(value);
+  if (!clean) return void 0;
+  return clean.length <= MAX_HEALTH_ERROR_LENGTH ? clean : `${clean.slice(0, MAX_HEALTH_ERROR_LENGTH - 1)}\u2026`;
+}
+
+// src/lib/delivery-backlog.ts
+var MS_PER_SECOND = 1e3;
+var MS_PER_MINUTE = 60 * MS_PER_SECOND;
+var MS_PER_HOUR = 60 * MS_PER_MINUTE;
+var MS_PER_DAY = 24 * MS_PER_HOUR;
+function isNonNegativeInteger(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function isPositiveInteger(value) {
+  return isNonNegativeInteger(value) && value > 0;
+}
+function deliveryBacklogState(ingestion) {
+  if (ingestion?.healthy !== false) return void 0;
+  const failures = ingestion.consecutiveFailures;
+  const failedWithoutProgress = failures !== 0 && !(isPositiveInteger(failures) && isPositiveInteger(ingestion.lastFailedDrainAcknowledgedCount));
+  if (failedWithoutProgress) return "failing";
+  const retained = ingestion.lastRetainedBucketCount;
+  if (!isNonNegativeInteger(retained)) return "failing";
+  return retained > 0 ? "retained" : "draining";
+}
+
 // src/lib/presence.ts
 var DECISION_ORIGIN = "https://app.getprimitive.ai";
 function validDecisionUrl(value) {
@@ -20259,7 +20311,8 @@ function formatStatusline(version, snapshot, resolveIngestionStatus, options = {
     if (snapshot.ingestion?.healthy === false) {
       const pending = snapshot.ingestion.pendingCount;
       const qualifier = snapshot.ingestion.pendingSampled ? "at least " : "";
-      return `primitive ${version} (daemon: degraded \xB7 delivery: stalled${typeof pending === "number" ? ` \xB7 ${qualifier}${String(pending)} pending` : ""}${repositorySuffix}${ingestionSuffix(ingestionStatus)})`;
+      const delivery = deliveryBacklogState(snapshot.ingestion) === "draining" && snapshot.heartbeat?.healthy === true ? "draining" : "stalled";
+      return `primitive ${version} (daemon: degraded \xB7 delivery: ${delivery}${typeof pending === "number" ? ` \xB7 ${qualifier}${String(pending)} pending` : ""}${repositorySuffix}${ingestionSuffix(ingestionStatus)})`;
     }
     if (snapshot.heartbeat?.healthy === false) {
       return `primitive ${version} (daemon: degraded \xB7 presence: unavailable${repositorySuffix}${ingestionSuffix(ingestionStatus)})`;
@@ -20301,10 +20354,10 @@ var STATE_VERSION = 1;
 var DRAFT_STATE_VERSION = 2;
 var NO_CURSOR = -1;
 function stateRoot(namespace) {
-  return join11(primConfigDirectory(), namespace, "decision-digests");
+  return join12(primConfigDirectory(), namespace, "decision-digests");
 }
 function draftStateRoot(namespace) {
-  return join11(primConfigDirectory(), namespace, "decision-draft-deliveries");
+  return join12(primConfigDirectory(), namespace, "decision-draft-deliveries");
 }
 function workspaceFor(cwd) {
   try {
@@ -20316,12 +20369,12 @@ function workspaceFor(cwd) {
 function statePath(args) {
   const identity = `${args.siteUrl}\0${workspaceFor(args.cwd)}\0${args.sessionId}`;
   const key = createHash5("sha256").update(identity).digest("hex");
-  return join11(stateRoot(args.namespace), `${key}.json`);
+  return join12(stateRoot(args.namespace), `${key}.json`);
 }
 function draftStatePath(args) {
   const identity = `${args.siteUrl}\0${workspaceFor(args.cwd)}\0${args.sessionId}\0${args.principalId}\0${args.organizationId}\0${args.credentialFingerprint}`;
   const key = createHash5("sha256").update(identity).digest("hex");
-  return join11(draftStateRoot(args.namespace), `${key}.json`);
+  return join12(draftStateRoot(args.namespace), `${key}.json`);
 }
 function parseState(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
@@ -20360,25 +20413,25 @@ function parseDraftState(value) {
   };
 }
 function readState(path) {
-  if (!existsSync7(path)) return void 0;
+  if (!existsSync8(path)) return void 0;
   try {
-    return parseState(JSON.parse(readFileSync9(path, "utf8")));
+    return parseState(JSON.parse(readFileSync10(path, "utf8")));
   } catch {
     return void 0;
   }
 }
 function readDraftState(path) {
-  if (!existsSync7(path)) return void 0;
+  if (!existsSync8(path)) return void 0;
   try {
-    return parseDraftState(JSON.parse(readFileSync9(path, "utf8")));
+    return parseDraftState(JSON.parse(readFileSync10(path, "utf8")));
   } catch {
     return void 0;
   }
 }
 function writeStateFile(path, directory, state) {
   mkdirSync6(directory, { recursive: true, mode: 448 });
-  chmodSync3(directory, 448);
-  const temporary = join11(
+  chmodSync4(directory, 448);
+  const temporary = join12(
     directory,
     `.${path.slice(directory.length + 1)}.tmp-${process.pid}-${randomBytes3(8).toString("hex")}`
   );
@@ -20389,7 +20442,7 @@ function writeStateFile(path, directory, state) {
       mode: 384,
       flag: "wx"
     });
-    chmodSync3(temporary, 384);
+    chmodSync4(temporary, 384);
     renameSync2(temporary, path);
   } finally {
     try {
@@ -20399,17 +20452,17 @@ function writeStateFile(path, directory, state) {
   }
 }
 function cleanupStateFiles(directory, now) {
-  if (!existsSync7(directory)) return;
+  if (!existsSync8(directory)) return;
   let names;
   try {
-    names = readdirSync2(directory);
+    names = readdirSync3(directory);
   } catch {
     return;
   }
   const files = [];
   const residue = [];
   for (const name of names) {
-    const path = join11(directory, name);
+    const path = join12(directory, name);
     try {
       const mtimeMs = statSync3(path).mtimeMs;
       if (name.endsWith(".json")) {
@@ -20431,7 +20484,7 @@ function cleanupStateFiles(directory, now) {
   for (const path of residue) {
     try {
       if (now - statSync3(path).mtimeMs > CODEX_DIGEST_STATE_RETENTION_MS) {
-        rmSync4(path, { recursive: true, force: true });
+        rmSync5(path, { recursive: true, force: true });
       }
     } catch {
     }
@@ -20747,31 +20800,78 @@ async function processCodexMessageContext(envelope, deps = defaultDeps) {
 }
 
 // src/commands/cursor-install.ts
-import { existsSync as existsSync10, readFileSync as readFileSync12 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync13 } from "fs";
 import { homedir as homedir4 } from "os";
-import { isAbsolute as isAbsolute6, join as join14 } from "path";
+import { isAbsolute as isAbsolute6, join as join15 } from "path";
 
 // src/lib/hook-runtime.ts
 import { createHash as createHash6, randomBytes as randomBytes4 } from "crypto";
 import {
   constants as constants3,
   accessSync,
-  chmodSync as chmodSync4,
+  chmodSync as chmodSync5,
   copyFileSync,
-  existsSync as existsSync8,
+  existsSync as existsSync9,
   lstatSync as lstatSync3,
   mkdirSync as mkdirSync7,
   mkdtempSync,
-  readFileSync as readFileSync10,
-  readdirSync as readdirSync3,
+  readFileSync as readFileSync11,
+  readdirSync as readdirSync4,
   realpathSync as realpathSync2,
   renameSync as renameSync3,
-  rmSync as rmSync5,
+  rmSync as rmSync6,
   statSync as statSync4,
   utimesSync,
   writeFileSync as writeFileSync5
 } from "fs";
-import { delimiter, dirname as dirname9, isAbsolute as isAbsolute5, join as join12, resolve as resolve4 } from "path";
+import { delimiter, dirname as dirname10, isAbsolute as isAbsolute5, join as join13, resolve as resolve4 } from "path";
+
+// src/lib/git-hook-contract.ts
+var GIT_HOOK_ENTRYPOINT_CONTENT = `#!/bin/sh
+# prim git hook entrypoint v1 \u2014 managed by prim; do not edit.
+# Run by the "# >>> prim <hook> hook >>>" block in a Git hook file. Acts only
+# where prim is active (git config prim.active true) and never fails the hook.
+case "$0" in */*) prim_dir=\${0%/*} ;; *) exit 0 ;; esac
+prim_launcher="$prim_dir/${STABLE_HOOK_LAUNCHER_NAME}"
+[ -x "$prim_launcher" ] || exit 0
+[ "$(git config --get prim.active 2>/dev/null)" = "true" ] || exit 0
+prim_hook=\${1-}
+if [ "$#" -gt 0 ]; then shift; fi
+case "$prim_hook" in
+pre-commit)
+  "$prim_launcher" prim-pre-commit "$@" || :
+  ;;
+post-commit)
+  prim_sha=$(git rev-parse --verify HEAD 2>/dev/null) || exit 0
+  case "$prim_sha" in *[!0-9a-f]* | "") exit 0 ;; esac
+  case "\${#prim_sha}" in 40 | 64) ;; *) exit 0 ;; esac
+  prim_branch=$(git symbolic-ref --quiet --short HEAD 2>/dev/null) || prim_branch=
+  prim_observed=$(mktemp "\${TMPDIR:-/tmp}/prim-post-commit-observed.XXXXXXXX" 2>/dev/null) || prim_observed=
+  (
+    trap '' HUP
+    trap 'if [ -n "$prim_observed" ]; then rm -f "$prim_observed"; fi' 0
+    PRIM_COMMIT_SHA=$prim_sha PRIM_COMMIT_BRANCH=$prim_branch PRIM_COMMIT_OBSERVED_FILE=$prim_observed "$prim_launcher" prim-post-commit
+  ) </dev/null >/dev/null 2>&1 &
+  ;;
+post-rewrite)
+  case "\${1-}" in amend | rebase) prim_source=$1 ;; *) exit 0 ;; esac
+  prim_pairs=$(mktemp "\${TMPDIR:-/tmp}/prim-post-rewrite-pairs.XXXXXXXX" 2>/dev/null) || exit 0
+  if ! chmod 600 "$prim_pairs" 2>/dev/null || ! cat >"$prim_pairs"; then
+    rm -f "$prim_pairs"
+    exit 0
+  fi
+  prim_branch=$(git symbolic-ref --quiet --short HEAD 2>/dev/null) || prim_branch=
+  (
+    trap '' HUP
+    trap 'rm -f "$prim_pairs"' 0
+    PRIM_REWRITE_SOURCE=$prim_source PRIM_REWRITE_BRANCH=$prim_branch PRIM_REWRITE_PAIRS_FILE=$prim_pairs "$prim_launcher" prim-post-rewrite
+  ) </dev/null >/dev/null 2>&1 &
+  ;;
+esac
+exit 0
+`;
+
+// src/lib/hook-runtime.ts
 var RELEASE_PREFIX = "release-";
 var MAX_MANIFEST_BYTES = 64 * 1024;
 var RELEASE_GRACE_MS = 10 * 60 * 1e3;
@@ -20817,9 +20917,9 @@ exec "$prim_node" "$prim_entry" "$@"
 `;
 
 // src/commands/claude-install.ts
-import { existsSync as existsSync9, readFileSync as readFileSync11 } from "fs";
+import { existsSync as existsSync10, readFileSync as readFileSync12 } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 var CAPTURE_BIN = "prim-hook";
 var GATE_BIN = "prim-pre-tool-use";
 var POST_TOOL_USE_BIN = "prim-post-tool-use";
@@ -20828,7 +20928,7 @@ var SESSION_END_BIN = "prim-session-end";
 var STATUSLINE_BIN = "prim-statusline";
 var STATUSLINE_ARGS = "";
 var STATUSLINE_COMMAND = stableHookCommand(STATUSLINE_BIN, STATUSLINE_ARGS);
-var USER_SCOPE_PATH = join13(homedir3(), ".claude", "settings.json");
+var USER_SCOPE_PATH = join14(homedir3(), ".claude", "settings.json");
 function projectRoot() {
   return gitToplevel() ?? process.cwd();
 }
@@ -20907,20 +21007,20 @@ function cursorConfigDirectory(env = process.env, home = homedir4(), platform2 =
   const explicit = env.CURSOR_CONFIG_DIR?.trim();
   if (explicit && isAbsolute6(explicit)) return explicit;
   const xdg = env.XDG_CONFIG_HOME?.trim();
-  if (platform2 !== "darwin" && xdg && isAbsolute6(xdg)) return join14(xdg, "cursor");
-  return join14(home, ".cursor");
+  if (platform2 !== "darwin" && xdg && isAbsolute6(xdg)) return join15(xdg, "cursor");
+  return join15(home, ".cursor");
 }
 function cursorHooksPath(scope, root = projectRoot()) {
-  return scope === "user" ? join14(cursorConfigDirectory(), "hooks.json") : join14(root, ".cursor", "hooks.json");
+  return scope === "user" ? join15(cursorConfigDirectory(), "hooks.json") : join15(root, ".cursor", "hooks.json");
 }
 function plainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readCursorHooks(path) {
-  if (!existsSync10(path)) return {};
+  if (!existsSync11(path)) return {};
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync12(path, "utf8"));
+    parsed = JSON.parse(readFileSync13(path, "utf8"));
   } catch {
     throw new Error(`invalid Cursor hooks JSON at ${path}`);
   }
@@ -25881,20 +25981,9 @@ import { platform } from "os";
 var AGENT_ENVELOPE_VERSION = 3;
 
 // src/hooks/redact.ts
-import { existsSync as existsSync11, readFileSync as readFileSync13, statSync as statSync5 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync14, statSync as statSync5 } from "fs";
+import { join as join16 } from "path";
 import { Worker } from "worker_threads";
-
-// src/lib/ansi.ts
-var MAX_HEALTH_ERROR_LENGTH = 240;
-function boundedHealthError(value) {
-  if (!value) return void 0;
-  const clean = terminalSafeLine(value);
-  if (!clean) return void 0;
-  return clean.length <= MAX_HEALTH_ERROR_LENGTH ? clean : `${clean.slice(0, MAX_HEALTH_ERROR_LENGTH - 1)}\u2026`;
-}
-
-// src/hooks/redact.ts
 var USER_HOME_RULES = [
   {
     pattern: /\/Users\/[^/\\\s"'`]+/g,
@@ -25969,15 +26058,15 @@ function normalizedWorkspaceFlags(value) {
   return [...new Set(`g${requested}`)].sort().join("");
 }
 function loadWorkspaceRules(cwd) {
-  const path = join15(cwd, WORKSPACE_FILE2);
-  if (!existsSync11(path)) return [];
+  const path = join16(cwd, WORKSPACE_FILE2);
+  if (!existsSync12(path)) return [];
   let cfg;
   try {
     if (statSync5(path).size > MAX_WORKSPACE_CONFIG_BYTES) {
       debugRedaction(`ignoring oversized ${WORKSPACE_FILE2}`);
       return [];
     }
-    cfg = JSON.parse(readFileSync13(path, "utf-8"));
+    cfg = JSON.parse(readFileSync14(path, "utf-8"));
   } catch {
     debugRedaction(`ignoring unparseable ${WORKSPACE_FILE2}`);
     return [];
@@ -26252,7 +26341,7 @@ function shouldFlushAfter(eventType, agent = "claude_code") {
 }
 
 // src/hooks/prim-hook.ts
-var here = dirname11(fileURLToPath2(import.meta.url));
+var here = dirname12(fileURLToPath2(import.meta.url));
 var outputAttempted = false;
 function emitOutput(output, acknowledge) {
   outputAttempted = true;
@@ -26260,17 +26349,18 @@ function emitOutput(output, acknowledge) {
 }
 function resolveCliVersion() {
   try {
-    const pkg = JSON.parse(readFileSync14(join16(here, "..", "..", "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync15(join17(here, "..", "..", "package.json"), "utf-8"));
     return pkg.version ?? "unknown";
   } catch {
     return "unknown";
   }
 }
 function spawnBackgroundFlush() {
-  const entry = join16(here, "..", "index.js");
+  const entry = join17(here, "..", "index.js");
   spawn(process.execPath, [entry, "moves", "flush"], {
     detached: true,
-    stdio: "ignore"
+    stdio: "ignore",
+    env: unattendedEnv()
   }).unref();
 }
 async function main() {