@primitive.ai/prim 0.1.0-alpha.93 → 0.1.0-alpha.96

package/dist/hook-runtime/hooks/session-start.js

@@ -51,10 +51,20 @@ var require_ucs2length = __commonJS({
   }
 });
 
-// src/lib/bin-cache.ts
-import { chmodSync, mkdirSync as mkdirSync2 } from "fs";
-import { homedir } from "os";
-import { join as join2 } from "path";
+// src/hooks/agent.ts
+function parseAgent(argv) {
+  const i = argv.indexOf("--agent");
+  const value = i !== -1 ? argv[i + 1] : void 0;
+  if (value === "codex" || value === "cursor" || value === "hermes") {
+    return value;
+  }
+  return "claude_code";
+}
+
+// src/commands/cursor-install.ts
+import { existsSync as existsSync5, readFileSync as readFileSync5 } from "fs";
+import { homedir as homedir3 } from "os";
+import { isAbsolute as isAbsolute5, join as join6 } from "path";
 
 // src/lib/atomic-file.ts
 import { randomUUID } from "crypto";
@@ -242,6 +252,13 @@ function pinnedNpxCommand(bin, args = [], options = {}) {
 }
 var STABLE_HOOK_ARGUMENTS_RE = /^[-A-Za-z0-9_ ]*$/u;
 var STABLE_HOOK_BIN_RE = /^[A-Za-z0-9][A-Za-z0-9-]*$/u;
+var PRIM_CONFIG_SHELL_RESOLVER = [
+  'prim_absolute() { case "$1" in [/]* ) ;; *) return 1 ;; esac; case "$1" in [[:space:]]*|*[[:space:]]|*[/][/]*|*[/].[/]*|*[/]..[/]*|*[/].|*[/]..|?*[/]) return 1 ;; esac; }; ',
+  'prim_config=${PRIM_CONFIG_DIR:-}; if ! prim_absolute "$prim_config"; then prim_config=${XDG_CONFIG_HOME:-}; if prim_absolute "$prim_config"; then ',
+  'case "$prim_config" in /) prim_config=/prim ;; *) prim_config="$prim_config/prim" ;; esac; ',
+  'else prim_home=${HOME:-}; prim_absolute "$prim_home" || exit 78; case "$prim_home" in /) prim_config=/.config/prim ;; *) prim_config="$prim_home/.config/prim" ;; esac; ',
+  "fi; fi; "
+].join("");
 function stableHookCommand(bin, args = "") {
   if (!STABLE_HOOK_BIN_RE.test(bin) || !STABLE_HOOK_ARGUMENTS_RE.test(args)) {
     throw new Error("invalid stable hook command");
@@ -251,11 +268,7 @@ function stableHookCommand(bin, args = "") {
     // it as inert data during the rolling window so an older uninstall or
     // reinstall can remove the stable entry without invoking npm or PATH.
     `prim_legacy_reader='-p ${PKG_NAME}@stable prim-shim.sh ${bin} '; `,
-    'prim_absolute() { case "$1" in [/]* ) ;; *) return 1 ;; esac; case "$1" in [[:space:]]*|*[[:space:]]|*[/][/]*|*[/].[/]*|*[/]..[/]*|*[/].|*[/]..|?*[/]) return 1 ;; esac; }; ',
-    'prim_config=${PRIM_CONFIG_DIR:-}; if ! prim_absolute "$prim_config"; then prim_config=${XDG_CONFIG_HOME:-}; if prim_absolute "$prim_config"; then ',
-    'case "$prim_config" in /) prim_config=/prim ;; *) prim_config="$prim_config/prim" ;; esac; ',
-    'else prim_home=${HOME:-}; prim_absolute "$prim_home" || exit 78; case "$prim_home" in /) prim_config=/.config/prim ;; *) prim_config="$prim_home/.config/prim" ;; esac; ',
-    "fi; fi; ",
+    PRIM_CONFIG_SHELL_RESOLVER,
     `case "$prim_config" in /) prim_launcher=/${STABLE_HOOK_LAUNCHER_NAME} ;; *) prim_launcher="$prim_config/${STABLE_HOOK_LAUNCHER_NAME}" ;; esac; `,
     'exec "$prim_launcher" "$@"'
   ].join("");
@@ -266,61 +279,16 @@ function detachedHookShimCommand(bin, args = "") {
   return `payload=$(cat); { trap '' HUP; printf '%s' "$payload" | { ${stableHookCommand(bin, args)}; }; } </dev/null >/dev/null 2>&1 &`;
 }
 
-// src/lib/bin-cache.ts
-var GIT_HOOK_CACHE_SHELL_DIR = "${XDG_CACHE_HOME:-$HOME/.cache}/prim/bin";
-var GIT_HOOK_CACHE_TTL_MINUTES = 1440;
-var GIT_HOOK_CACHED_BINS = ["prim-post-commit", "prim-post-rewrite"];
-function binCacheDir() {
-  const base = process.env.XDG_CACHE_HOME || join2(homedir(), ".cache");
-  return join2(base, "prim", "bin");
-}
-function writeAtomic(path, content) {
-  atomicWriteFile(path, content, { mode: 384 });
-}
-function warmBinCache() {
-  try {
-    if (process.env.PRIM_BIN_CACHE === "0") {
-      return;
-    }
-    const dir = binCacheDir();
-    mkdirSync2(dir, { recursive: true, mode: 448 });
-    chmodSync(dir, 448);
-    writeAtomic(join2(dir, "node"), process.execPath);
-    for (const bin of GIT_HOOK_CACHED_BINS) {
-      const file = binFile(bin);
-      if (file) {
-        writeAtomic(join2(dir, bin), file);
-      }
-    }
-  } catch {
-  }
-}
-
-// src/hooks/agent.ts
-function parseAgent(argv) {
-  const i = argv.indexOf("--agent");
-  const value = i !== -1 ? argv[i + 1] : void 0;
-  if (value === "codex" || value === "cursor" || value === "hermes") {
-    return value;
-  }
-  return "claude_code";
-}
-
-// src/commands/cursor-install.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5 } from "fs";
-import { homedir as homedir4 } from "os";
-import { isAbsolute as isAbsolute5, join as join7 } from "path";
-
 // src/lib/hook-runtime.ts
 import { createHash, randomBytes as randomBytes2 } from "crypto";
 import {
   constants as constants2,
   accessSync,
-  chmodSync as chmodSync2,
+  chmodSync,
   copyFileSync,
   existsSync as existsSync3,
   lstatSync,
-  mkdirSync as mkdirSync4,
+  mkdirSync as mkdirSync3,
   mkdtempSync,
   readFileSync as readFileSync3,
   readdirSync,
@@ -331,12 +299,12 @@ import {
   utimesSync,
   writeFileSync as writeFileSync3
 } from "fs";
-import { delimiter, dirname as dirname4, isAbsolute as isAbsolute3, join as join5, resolve } from "path";
+import { delimiter, dirname as dirname4, isAbsolute as isAbsolute3, join as join4, resolve } from "path";
 
 // src/lib/file-lock.ts
 import { randomBytes } from "crypto";
-import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync2, rmSync as rmSync2, statSync, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname3, join as join3 } from "path";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync as rmSync2, statSync, writeFileSync as writeFileSync2 } from "fs";
+import { dirname as dirname3, join as join2 } from "path";
 
 // src/lib/process-liveness.ts
 function processIsAlive(pid, probe = process.kill) {
@@ -356,7 +324,7 @@ var DEFAULT_INIT_GRACE_MS = 2e3;
 var DIRECTORY_MODE = 448;
 var FILE_MODE = 384;
 function ownerPath(lockDir) {
-  return join3(lockDir, "owner.json");
+  return join2(lockDir, "owner.json");
 }
 function readOwner(lockDir) {
   try {
@@ -374,7 +342,7 @@ function sameOwner(a, b) {
 }
 function tryTakeLock(lockDir, now) {
   try {
-    mkdirSync3(lockDir, { mode: DIRECTORY_MODE });
+    mkdirSync2(lockDir, { mode: DIRECTORY_MODE });
   } catch (error) {
     if (error.code === "EEXIST") return null;
     throw error;
@@ -427,14 +395,14 @@ function throwIfAborted(signal) {
 }
 async function defaultSleep(ms, signal) {
   if (!signal) {
-    await new Promise((resolve9) => setTimeout(resolve9, ms));
+    await new Promise((resolve10) => setTimeout(resolve10, ms));
     return;
   }
   throwIfAborted(signal);
-  await new Promise((resolve9, reject) => {
+  await new Promise((resolve10, reject) => {
     const timer = setTimeout(() => {
       signal.removeEventListener("abort", onAbort);
-      resolve9();
+      resolve10();
     }, ms);
     const onAbort = () => {
       clearTimeout(timer);
@@ -445,7 +413,7 @@ async function defaultSleep(ms, signal) {
 }
 var syncSleeper = new Int32Array(new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT));
 async function withFileLock(lockDir, operation, options = {}) {
-  mkdirSync3(dirname3(lockDir), { recursive: true, mode: DIRECTORY_MODE });
+  mkdirSync2(dirname3(lockDir), { recursive: true, mode: DIRECTORY_MODE });
   const nowMs = options.nowMs ?? Date.now;
   const alive = options.processAlive ?? processIsAlive;
   const deadline = nowMs() + (options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
@@ -476,9 +444,147 @@ async function withFileLock(lockDir, operation, options = {}) {
   }
 }
 
+// src/lib/git-hook-contract.ts
+var MANAGED_GIT_HOOK_NAMES = ["pre-commit", "post-commit", "post-rewrite"];
+var GIT_HOOK_ENTRYPOINT_NAME = "prim-git-hook-v1";
+var GIT_HOOK_CONTRACT_VERSION = 1;
+var CONTRACT_LINE_PREFIX = "# prim git hook v";
+var CONTRACT_LINE_RE = /^# prim git hook v([0-9]+)\b/mu;
+function blockMarkers(hook) {
+  return { start: `# >>> prim ${hook} hook >>>`, end: `# <<< prim ${hook} hook <<<` };
+}
+function entrypointCommand(hook) {
+  const script = [
+    PRIM_CONFIG_SHELL_RESOLVER,
+    `case "$prim_config" in /) prim_entry=/${GIT_HOOK_ENTRYPOINT_NAME} ;; `,
+    `*) prim_entry="$prim_config/${GIT_HOOK_ENTRYPOINT_NAME}" ;; esac; `,
+    '[ -x "$prim_entry" ] || exit 0; exec "$prim_entry" "$@"'
+  ].join("");
+  return `/bin/sh -c ${shellQuote(script)} ${GIT_HOOK_ENTRYPOINT_NAME} ${hook} "$@"`;
+}
+function managedHookBlock(hook) {
+  const { start, end } = blockMarkers(hook);
+  const header = `${CONTRACT_LINE_PREFIX}${GIT_HOOK_CONTRACT_VERSION}: a no-op unless prim is installed and enabled here (see \`prim hooks snippet ${hook}\`).`;
+  if (hook !== "post-rewrite") {
+    return `${start}
+${header}
+# shellcheck disable=SC2016
+${entrypointCommand(hook)} || :
+${end}`;
+  }
+  return `${start}
+${header}
+prim_rewrite_stdin=$(mktemp 2>/dev/null) || prim_rewrite_stdin=
+if test -n "\${prim_rewrite_stdin}" && cat >"\${prim_rewrite_stdin}"; then
+  # shellcheck disable=SC2016
+  ${entrypointCommand(hook)} <"\${prim_rewrite_stdin}" || :
+  exec <"\${prim_rewrite_stdin}"
+fi
+if test -n "\${prim_rewrite_stdin}"; then rm -f "\${prim_rewrite_stdin}"; fi
+unset prim_rewrite_stdin
+${end}`;
+}
+var OPEN_WORDS = /* @__PURE__ */ new Set(["then", "do", "else", "{", "(", "&&", "||", "|"]);
+function canonicalHookBlock(text) {
+  const tokens = [];
+  let word = "";
+  let quote;
+  const separate = () => {
+    const last = tokens.at(-1);
+    if (last !== void 0 && last !== ";" && !OPEN_WORDS.has(last)) tokens.push(";");
+  };
+  const flush = () => {
+    if (word === "") return;
+    const last = tokens.at(-1);
+    if (last !== void 0 && /^[0-9]*(?:<|>|>>|<&|>&)$/u.test(last))
+      tokens[tokens.length - 1] += word;
+    else tokens.push(word);
+    word = "";
+  };
+  for (let index = 0; index < text.length; index += 1) {
+    const char = text[index];
+    if (quote) {
+      word += char;
+      if (char === quote) quote = void 0;
+      continue;
+    }
+    if (char === "'" || char === '"') {
+      quote = char;
+      word += char;
+    } else if (char === "#" && word === "") {
+      const end = text.indexOf("\n", index);
+      const comment = text.slice(index, end === -1 ? text.length : end);
+      tokens.push(comment.replace(/\s+/gu, " ").trim());
+      index = (end === -1 ? text.length : end) - 1;
+    } else if (char === "\n" || char === ";") {
+      flush();
+      if (char === ";" && text[index + 1] === ";") {
+        tokens.push(";;");
+        index += 1;
+      } else {
+        separate();
+      }
+    } else if (/\s/u.test(char)) {
+      flush();
+    } else {
+      word += char;
+    }
+  }
+  flush();
+  while (tokens.at(-1) === ";") tokens.pop();
+  return tokens.join("\0");
+}
+function hookBlockContractVersion(block) {
+  const match = CONTRACT_LINE_RE.exec(block);
+  return match?.[1] ? Number(match[1]) : void 0;
+}
+var GIT_HOOK_ENTRYPOINT_CONTENT = `#!/bin/sh
+# prim git hook entrypoint v1 \u2014 managed by prim; do not edit.
+# Run by the "# >>> prim <hook> hook >>>" block in a Git hook file. Acts only
+# where prim is active (git config prim.active true) and never fails the hook.
+case "$0" in */*) prim_dir=\${0%/*} ;; *) exit 0 ;; esac
+prim_launcher="$prim_dir/${STABLE_HOOK_LAUNCHER_NAME}"
+[ -x "$prim_launcher" ] || exit 0
+[ "$(git config --get prim.active 2>/dev/null)" = "true" ] || exit 0
+prim_hook=\${1-}
+if [ "$#" -gt 0 ]; then shift; fi
+case "$prim_hook" in
+pre-commit)
+  "$prim_launcher" prim-pre-commit "$@" || :
+  ;;
+post-commit)
+  prim_sha=$(git rev-parse --verify HEAD 2>/dev/null) || exit 0
+  case "$prim_sha" in *[!0-9a-f]* | "") exit 0 ;; esac
+  case "\${#prim_sha}" in 40 | 64) ;; *) exit 0 ;; esac
+  prim_branch=$(git symbolic-ref --quiet --short HEAD 2>/dev/null) || prim_branch=
+  prim_observed=$(mktemp "\${TMPDIR:-/tmp}/prim-post-commit-observed.XXXXXXXX" 2>/dev/null) || prim_observed=
+  (
+    trap '' HUP
+    trap 'if [ -n "$prim_observed" ]; then rm -f "$prim_observed"; fi' 0
+    PRIM_COMMIT_SHA=$prim_sha PRIM_COMMIT_BRANCH=$prim_branch PRIM_COMMIT_OBSERVED_FILE=$prim_observed "$prim_launcher" prim-post-commit
+  ) </dev/null >/dev/null 2>&1 &
+  ;;
+post-rewrite)
+  case "\${1-}" in amend | rebase) prim_source=$1 ;; *) exit 0 ;; esac
+  prim_pairs=$(mktemp "\${TMPDIR:-/tmp}/prim-post-rewrite-pairs.XXXXXXXX" 2>/dev/null) || exit 0
+  if ! chmod 600 "$prim_pairs" 2>/dev/null || ! cat >"$prim_pairs"; then
+    rm -f "$prim_pairs"
+    exit 0
+  fi
+  prim_branch=$(git symbolic-ref --quiet --short HEAD 2>/dev/null) || prim_branch=
+  (
+    trap '' HUP
+    trap 'rm -f "$prim_pairs"' 0
+    PRIM_REWRITE_SOURCE=$prim_source PRIM_REWRITE_BRANCH=$prim_branch PRIM_REWRITE_PAIRS_FILE=$prim_pairs "$prim_launcher" prim-post-rewrite
+  ) </dev/null >/dev/null 2>&1 &
+  ;;
+esac
+exit 0
+`;
+
 // src/lib/paths.ts
-import { homedir as homedir2 } from "os";
-import { isAbsolute as isAbsolute2, join as join4, normalize } from "path";
+import { homedir } from "os";
+import { isAbsolute as isAbsolute2, join as join3, normalize } from "path";
 var UNSAFE_CONFIG_PATH_CHARACTERS = /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u;
 function absolutePath(value, variable) {
   if (value !== void 0 && UNSAFE_CONFIG_PATH_CHARACTERS.test(value)) {
@@ -493,12 +599,12 @@ function resolvePrimConfigDirectory(options = {}) {
   const explicit = absolutePath(env.PRIM_CONFIG_DIR, "PRIM_CONFIG_DIR");
   if (explicit) return { path: explicit, source: "explicit" };
   const xdgConfigHome = absolutePath(env.XDG_CONFIG_HOME, "XDG_CONFIG_HOME");
-  if (xdgConfigHome) return { path: join4(xdgConfigHome, "prim"), source: "xdg" };
-  const home = absolutePath(options.homeDir ?? homedir2(), "HOME");
+  if (xdgConfigHome) return { path: join3(xdgConfigHome, "prim"), source: "xdg" };
+  const home = absolutePath(options.homeDir ?? homedir(), "HOME");
   if (!home) {
     throw new Error("cannot resolve Primitive config directory: HOME is not an absolute path");
   }
-  return { path: join4(home, ".config", "prim"), source: "default" };
+  return { path: join3(home, ".config", "prim"), source: "default" };
 }
 function primConfigDirectory(options = {}) {
   return resolvePrimConfigDirectory(options).path;
@@ -529,6 +635,24 @@ var SOURCE_ENTRIES = Object.fromEntries(
     target.replace(/^dist\//u, "")
   ])
 );
+function hookRuntimePaths(options = {}) {
+  const env = options.env ?? process.env;
+  const configDir = primConfigDirectory({
+    ...options,
+    env,
+    homeDir: options.homeDir ?? env.HOME ?? ""
+  });
+  const runtimeDir = join4(configDir, "hook-runtime");
+  return {
+    configDir,
+    launcher: join4(configDir, STABLE_HOOK_LAUNCHER_NAME),
+    gitHookEntrypoint: join4(configDir, GIT_HOOK_ENTRYPOINT_NAME),
+    runtimeDir,
+    releasesDir: join4(runtimeDir, "releases"),
+    current: join4(runtimeDir, "current"),
+    selectionLock: join4(runtimeDir, "selection.lock")
+  };
+}
 var STABLE_HOOK_LAUNCHER_CONTENT = `#!/bin/sh
 set -eu
 case "$0" in */*) prim_launcher_dir=\${0%/*} ;; *) exit 78 ;; esac
@@ -548,11 +672,45 @@ case "$prim_node" in /*) ;; *) exit 69 ;; esac
 [ -x "$prim_node" ] && [ -f "$prim_entry" ] || exit 69
 exec "$prim_node" "$prim_entry" "$@"
 `;
+function gitHookEntrypointCurrent(paths) {
+  try {
+    return readFileSync3(paths.gitHookEntrypoint, "utf8") === GIT_HOOK_ENTRYPOINT_CONTENT;
+  } catch {
+    return false;
+  }
+}
+function inspectGitHookEntrypoint(options = {}) {
+  let paths;
+  try {
+    paths = hookRuntimePaths(options);
+  } catch {
+    return "invalid";
+  }
+  try {
+    const entrypoint = lstatIfPresent(paths.gitHookEntrypoint);
+    if (!entrypoint) return "missing";
+    if (!entrypoint.isFile() || (Number(entrypoint.mode) & 64) === 0 || !gitHookEntrypointCurrent(paths) || readFileSync3(paths.launcher, "utf8") !== STABLE_HOOK_LAUNCHER_CONTENT || !lstatIfPresent(paths.current)?.isFile()) {
+      return "invalid";
+    }
+    return "ready";
+  } catch {
+    return "invalid";
+  }
+}
+function lstatIfPresent(path) {
+  try {
+    return lstatSync(path);
+  } catch (error) {
+    const code = error.code;
+    if (code === "ENOENT" || code === "ENOTDIR") return void 0;
+    throw error;
+  }
+}
 
 // src/commands/claude-install.ts
 import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join6 } from "path";
+import { homedir as homedir2 } from "os";
+import { join as join5 } from "path";
 
 // src/lib/git.ts
 import { execFileSync } from "child_process";
@@ -666,7 +824,7 @@ var SESSION_END_BIN = "prim-session-end";
 var STATUSLINE_BIN = "prim-statusline";
 var STATUSLINE_ARGS = "";
 var STATUSLINE_COMMAND = stableHookCommand(STATUSLINE_BIN, STATUSLINE_ARGS);
-var USER_SCOPE_PATH = join6(homedir3(), ".claude", "settings.json");
+var USER_SCOPE_PATH = join5(homedir2(), ".claude", "settings.json");
 function projectRoot() {
   return gitToplevel() ?? process.cwd();
 }
@@ -741,15 +899,15 @@ var REGISTRATIONS2 = [
   { event: "sessionStart", bin: SESSION_START_BIN2 },
   { event: "sessionEnd", bin: SESSION_END_BIN2 }
 ];
-function cursorConfigDirectory(env = process.env, home = homedir4(), platform = process.platform) {
+function cursorConfigDirectory(env = process.env, home = homedir3(), platform = process.platform) {
   const explicit = env.CURSOR_CONFIG_DIR?.trim();
   if (explicit && isAbsolute5(explicit)) return explicit;
   const xdg = env.XDG_CONFIG_HOME?.trim();
-  if (platform !== "darwin" && xdg && isAbsolute5(xdg)) return join7(xdg, "cursor");
-  return join7(home, ".cursor");
+  if (platform !== "darwin" && xdg && isAbsolute5(xdg)) return join6(xdg, "cursor");
+  return join6(home, ".cursor");
 }
 function cursorHooksPath(scope, root = projectRoot()) {
-  return scope === "user" ? join7(cursorConfigDirectory(), "hooks.json") : join7(root, ".cursor", "hooks.json");
+  return scope === "user" ? join6(cursorConfigDirectory(), "hooks.json") : join6(root, ".cursor", "hooks.json");
 }
 function plainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -881,13 +1039,13 @@ function buildHookOutput(options) {
   return output;
 }
 function writeHookOutput(output, stream = process.stdout) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let settled = false;
     const finish = (ok, retainErrorListener = false) => {
       if (settled) return;
       settled = true;
       if (!retainErrorListener) stream.off("error", onError);
-      resolve9(ok);
+      resolve10(ok);
     };
     const onError = () => {
       if (settled) {
@@ -922,7 +1080,7 @@ async function handoffHookOutput(output, acknowledge, stream = process.stdout) {
 // src/hooks/hook-stdin.ts
 var DEFAULT_MAX_BYTES = 1024 * 1024;
 function readHookStdin(timeoutMs = 1e3, maxBytes = DEFAULT_MAX_BYTES) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     const chunks = [];
     let bytes = 0;
     let settled = false;
@@ -934,7 +1092,7 @@ function readHookStdin(timeoutMs = 1e3, maxBytes = DEFAULT_MAX_BYTES) {
       process.stdin.removeAllListeners("end");
       process.stdin.removeAllListeners("error");
       if (error) reject(error);
-      else resolve9(Buffer.concat(chunks, bytes).toString("utf-8"));
+      else resolve10(Buffer.concat(chunks, bytes).toString("utf-8"));
     };
     const timer = setTimeout(() => finish(new Error("stdin read timeout")), timeoutMs);
     process.stdin.on("data", (chunk) => {
@@ -952,13 +1110,13 @@ function readHookStdin(timeoutMs = 1e3, maxBytes = DEFAULT_MAX_BYTES) {
 
 // src/client.ts
 import { createHash as createHash4 } from "crypto";
-import { chmodSync as chmodSync3, existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync7, rmSync as rmSync4 } from "fs";
+import { chmodSync as chmodSync2, existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync7, rmSync as rmSync4 } from "fs";
 import { dirname as dirname7 } from "path";
 
 // src/lib/credentials.ts
 import { createHash as createHash3 } from "crypto";
 import { readFileSync as readFileSync6 } from "fs";
-import { join as join8 } from "path";
+import { join as join7 } from "path";
 
 // src/lib/workos-connect.ts
 var TOKEN_PATH = "/oauth2/token";
@@ -1106,14 +1264,14 @@ function parseWorkosConnectTokens(value, options = {}) {
 
 // src/lib/credentials.ts
 var CONFIG_DIRECTORY = primConfigDirectory();
-var TOKEN_FILE_PATH = join8(CONFIG_DIRECTORY, "token");
-var REFRESH_TOKEN_PATH = join8(CONFIG_DIRECTORY, "refresh_token");
-var TOKEN_EXPIRES_PATH = join8(CONFIG_DIRECTORY, "token_expires_at");
-var TERMINAL_REFRESH_PATH = join8(CONFIG_DIRECTORY, "refresh_terminal");
-var CREDENTIAL_METADATA_PATH = join8(CONFIG_DIRECTORY, "credential_metadata.json");
-var CREDENTIAL_FAMILY_PATH = join8(CONFIG_DIRECTORY, "credential_family.json");
-var CREDENTIAL_MIGRATION_PATH = join8(CONFIG_DIRECTORY, "credential_migration.json");
-var CREDENTIAL_LOCK_PATH = join8(CONFIG_DIRECTORY, "credentials.lock");
+var TOKEN_FILE_PATH = join7(CONFIG_DIRECTORY, "token");
+var REFRESH_TOKEN_PATH = join7(CONFIG_DIRECTORY, "refresh_token");
+var TOKEN_EXPIRES_PATH = join7(CONFIG_DIRECTORY, "token_expires_at");
+var TERMINAL_REFRESH_PATH = join7(CONFIG_DIRECTORY, "refresh_terminal");
+var CREDENTIAL_METADATA_PATH = join7(CONFIG_DIRECTORY, "credential_metadata.json");
+var CREDENTIAL_FAMILY_PATH = join7(CONFIG_DIRECTORY, "credential_family.json");
+var CREDENTIAL_MIGRATION_PATH = join7(CONFIG_DIRECTORY, "credential_migration.json");
+var CREDENTIAL_LOCK_PATH = join7(CONFIG_DIRECTORY, "credentials.lock");
 var MAX_CREDENTIAL_METADATA_BYTES = 4096;
 var CREDENTIAL_MIGRATION_VERSION = 1;
 var CREDENTIAL_MIGRATION_STATE = "family_bound";
@@ -1313,8 +1471,8 @@ function expiresAtFor(token, expiresIn) {
 }
 function ensureConfigDirectory() {
   const directory = dirname7(TOKEN_FILE_PATH);
-  mkdirSync5(directory, { recursive: true, mode: CONFIG_DIR_MODE });
-  chmodSync3(directory, CONFIG_DIR_MODE);
+  mkdirSync4(directory, { recursive: true, mode: CONFIG_DIR_MODE });
+  chmodSync2(directory, CONFIG_DIR_MODE);
 }
 function atomicWrite(path, content) {
   ensureConfigDirectory();
@@ -1746,7 +1904,7 @@ import {
   existsSync as existsSync8,
   fstatSync as fstatSync2,
   lstatSync as lstatSync4,
-  mkdirSync as mkdirSync6,
+  mkdirSync as mkdirSync5,
   openSync as openSync3,
   readFileSync as readFileSync9,
   readSync as readSync2,
@@ -1755,8 +1913,8 @@ import {
   rmSync as rmSync5,
   rmdirSync as rmdirSync2
 } from "fs";
-import { homedir as homedir6 } from "os";
-import { dirname as dirname9, isAbsolute as isAbsolute6, join as join12, relative as relative2, resolve as resolve5, sep as sep2 } from "path";
+import { homedir as homedir5 } from "os";
+import { dirname as dirname9, isAbsolute as isAbsolute6, join as join11, relative as relative2, resolve as resolve5, sep as sep2 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 
 // node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/browser/dist/nodes/identity.js
@@ -5191,10 +5349,10 @@ function resolveBlockMap({ composeNode: composeNode2, composeEmptyNode: composeE
   let offset = bm.offset;
   let commentEnd = null;
   for (const collItem of bm.items) {
-    const { start, key, sep: sep3, value } = collItem;
+    const { start, key, sep: sep4, value } = collItem;
     const keyProps = resolveProps(start, {
       indicator: "explicit-key-ind",
-      next: key ?? sep3?.[0],
+      next: key ?? sep4?.[0],
       offset,
       onError,
       parentIndent: bm.indent,
@@ -5208,7 +5366,7 @@ function resolveBlockMap({ composeNode: composeNode2, composeEmptyNode: composeE
         else if ("indent" in key && key.indent !== bm.indent)
           onError(offset, "BAD_INDENT", startColMsg);
       }
-      if (!keyProps.anchor && !keyProps.tag && !sep3) {
+      if (!keyProps.anchor && !keyProps.tag && !sep4) {
         commentEnd = keyProps.end;
         if (keyProps.comment) {
           if (map2.comment)
@@ -5232,7 +5390,7 @@ function resolveBlockMap({ composeNode: composeNode2, composeEmptyNode: composeE
     ctx.atKey = false;
     if (mapIncludes(ctx, map2.items, keyNode))
       onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-    const valueProps = resolveProps(sep3 ?? [], {
+    const valueProps = resolveProps(sep4 ?? [], {
       indicator: "map-value-ind",
       next: value,
       offset: keyNode.range[2],
@@ -5248,7 +5406,7 @@ function resolveBlockMap({ composeNode: composeNode2, composeEmptyNode: composeE
         if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
           onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
       }
-      const valueNode = value ? composeNode2(ctx, value, valueProps, onError) : composeEmptyNode2(ctx, offset, sep3, null, valueProps, onError);
+      const valueNode = value ? composeNode2(ctx, value, valueProps, onError) : composeEmptyNode2(ctx, offset, sep4, null, valueProps, onError);
       if (ctx.schema.compat)
         flowIndentCheck(bm.indent, value, onError);
       offset = valueNode.range[2];
@@ -5324,7 +5482,7 @@ function resolveEnd(end, offset, reqSpace, onError) {
   let comment = "";
   if (end) {
     let hasSpace = false;
-    let sep3 = "";
+    let sep4 = "";
     for (const token of end) {
       const { source, type } = token;
       switch (type) {
@@ -5338,13 +5496,13 @@ function resolveEnd(end, offset, reqSpace, onError) {
           if (!comment)
             comment = cb;
           else
-            comment += sep3 + cb;
-          sep3 = "";
+            comment += sep4 + cb;
+          sep4 = "";
           break;
         }
         case "newline":
           if (comment)
-            sep3 += source;
+            sep4 += source;
           hasSpace = true;
           break;
         default:
@@ -5373,18 +5531,18 @@ function resolveFlowCollection({ composeNode: composeNode2, composeEmptyNode: co
   let offset = fc.offset + fc.start.source.length;
   for (let i = 0; i < fc.items.length; ++i) {
     const collItem = fc.items[i];
-    const { start, key, sep: sep3, value } = collItem;
+    const { start, key, sep: sep4, value } = collItem;
     const props = resolveProps(start, {
       flow: fcName,
       indicator: "explicit-key-ind",
-      next: key ?? sep3?.[0],
+      next: key ?? sep4?.[0],
       offset,
       onError,
       parentIndent: fc.indent,
       startOnNewline: false
     });
     if (!props.found) {
-      if (!props.anchor && !props.tag && !sep3 && !value) {
+      if (!props.anchor && !props.tag && !sep4 && !value) {
         if (i === 0 && props.comma)
           onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
         else if (i < fc.items.length - 1)
@@ -5438,8 +5596,8 @@ function resolveFlowCollection({ composeNode: composeNode2, composeEmptyNode: co
         }
       }
     }
-    if (!isMap2 && !sep3 && !props.found) {
-      const valueNode = value ? composeNode2(ctx, value, props, onError) : composeEmptyNode2(ctx, props.end, sep3, null, props, onError);
+    if (!isMap2 && !sep4 && !props.found) {
+      const valueNode = value ? composeNode2(ctx, value, props, onError) : composeEmptyNode2(ctx, props.end, sep4, null, props, onError);
       coll.items.push(valueNode);
       offset = valueNode.range[2];
       if (isBlock(value))
@@ -5451,7 +5609,7 @@ function resolveFlowCollection({ composeNode: composeNode2, composeEmptyNode: co
       if (isBlock(key))
         onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
       ctx.atKey = false;
-      const valueProps = resolveProps(sep3 ?? [], {
+      const valueProps = resolveProps(sep4 ?? [], {
         flow: fcName,
         indicator: "map-value-ind",
         next: value,
@@ -5462,8 +5620,8 @@ function resolveFlowCollection({ composeNode: composeNode2, composeEmptyNode: co
       });
       if (valueProps.found) {
         if (!isMap2 && !props.found && ctx.options.strict) {
-          if (sep3)
-            for (const st of sep3) {
+          if (sep4)
+            for (const st of sep4) {
               if (st === valueProps.found)
                 break;
               if (st.type === "newline") {
@@ -5480,7 +5638,7 @@ function resolveFlowCollection({ composeNode: composeNode2, composeEmptyNode: co
         else
           onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
       }
-      const valueNode = value ? composeNode2(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode2(ctx, valueProps.end, sep3, null, valueProps, onError) : null;
+      const valueNode = value ? composeNode2(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode2(ctx, valueProps.end, sep4, null, valueProps, onError) : null;
       if (valueNode) {
         if (isBlock(value))
           onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -5640,7 +5798,7 @@ function resolveBlockScalar(ctx, scalar, onError) {
       chompStart = i + 1;
   }
   let value = "";
-  let sep3 = "";
+  let sep4 = "";
   let prevMoreIndented = false;
   for (let i = 0; i < contentStart; ++i)
     value += lines[i][0].slice(trimIndent) + "\n";
@@ -5657,24 +5815,24 @@ function resolveBlockScalar(ctx, scalar, onError) {
       indent = "";
     }
     if (type === Scalar.BLOCK_LITERAL) {
-      value += sep3 + indent.slice(trimIndent) + content;
-      sep3 = "\n";
+      value += sep4 + indent.slice(trimIndent) + content;
+      sep4 = "\n";
     } else if (indent.length > trimIndent || content[0] === "	") {
-      if (sep3 === " ")
-        sep3 = "\n";
-      else if (!prevMoreIndented && sep3 === "\n")
-        sep3 = "\n\n";
-      value += sep3 + indent.slice(trimIndent) + content;
-      sep3 = "\n";
+      if (sep4 === " ")
+        sep4 = "\n";
+      else if (!prevMoreIndented && sep4 === "\n")
+        sep4 = "\n\n";
+      value += sep4 + indent.slice(trimIndent) + content;
+      sep4 = "\n";
       prevMoreIndented = true;
     } else if (content === "") {
-      if (sep3 === "\n")
+      if (sep4 === "\n")
         value += "\n";
       else
-        sep3 = "\n";
+        sep4 = "\n";
     } else {
-      value += sep3 + content;
-      sep3 = " ";
+      value += sep4 + content;
+      sep4 = " ";
       prevMoreIndented = false;
     }
   }
@@ -5848,25 +6006,25 @@ function foldLines(source) {
   if (!match)
     return source;
   let res = match[1];
-  let sep3 = " ";
+  let sep4 = " ";
   let pos = first.lastIndex;
   line.lastIndex = pos;
   while (match = line.exec(source)) {
     if (match[1] === "") {
-      if (sep3 === "\n")
-        res += sep3;
+      if (sep4 === "\n")
+        res += sep4;
       else
-        sep3 = "\n";
+        sep4 = "\n";
     } else {
-      res += sep3 + match[1];
-      sep3 = " ";
+      res += sep4 + match[1];
+      sep4 = " ";
     }
     pos = line.lastIndex;
   }
   const last = /[ \t]*(.*)/sy;
   last.lastIndex = pos;
   match = last.exec(source);
-  return res + sep3 + (match?.[1] ?? "");
+  return res + sep4 + (match?.[1] ?? "");
 }
 function doubleQuotedValue(source, onError) {
   let res = "";
@@ -7483,18 +7641,18 @@ var Parser = class {
     if (this.type === "map-value-ind") {
       const prev = getPrevProps(this.peek(2));
       const start = getFirstKeyStartProps(prev);
-      let sep3;
+      let sep4;
       if (scalar.end) {
-        sep3 = scalar.end;
-        sep3.push(this.sourceToken);
+        sep4 = scalar.end;
+        sep4.push(this.sourceToken);
         delete scalar.end;
       } else
-        sep3 = [this.sourceToken];
+        sep4 = [this.sourceToken];
       const map2 = {
         type: "block-map",
         offset: scalar.offset,
         indent: scalar.indent,
-        items: [{ start, key: scalar, sep: sep3 }]
+        items: [{ start, key: scalar, sep: sep4 }]
       };
       this.onKeyLine = true;
       this.stack[this.stack.length - 1] = map2;
@@ -7647,15 +7805,15 @@ var Parser = class {
             } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
               const start2 = getFirstKeyStartProps(it.start);
               const key = it.key;
-              const sep3 = it.sep;
-              sep3.push(this.sourceToken);
+              const sep4 = it.sep;
+              sep4.push(this.sourceToken);
               delete it.key;
               delete it.sep;
               this.stack.push({
                 type: "block-map",
                 offset: this.offset,
                 indent: this.indent,
-                items: [{ start: start2, key, sep: sep3 }]
+                items: [{ start: start2, key, sep: sep4 }]
               });
             } else if (start.length > 0) {
               it.sep = it.sep.concat(start, this.sourceToken);
@@ -7849,13 +8007,13 @@ var Parser = class {
         const prev = getPrevProps(parent);
         const start = getFirstKeyStartProps(prev);
         fixFlowSeqItems(fc);
-        const sep3 = fc.end.splice(1, fc.end.length);
-        sep3.push(this.sourceToken);
+        const sep4 = fc.end.splice(1, fc.end.length);
+        sep4.push(this.sourceToken);
         const map2 = {
           type: "block-map",
           offset: fc.offset,
           indent: fc.indent,
-          items: [{ start, key: fc, sep: sep3 }]
+          items: [{ start, key: fc, sep: sep4 }]
         };
         this.onKeyLine = true;
         this.stack[this.stack.length - 1] = map2;
@@ -8041,8 +8199,8 @@ import {
   rmdirSync,
   unlinkSync
 } from "fs";
-import { homedir as homedir5 } from "os";
-import { dirname as dirname8, join as join11, resolve as resolve4 } from "path";
+import { homedir as homedir4 } from "os";
+import { dirname as dirname8, join as join10, resolve as resolve4 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // node_modules/.pnpm/diff@5.2.2/node_modules/diff/lib/index.mjs
@@ -8212,7 +8370,7 @@ Diff.prototype = {
   tokenize: function tokenize(value) {
     return value.split("");
   },
-  join: function join10(chars) {
+  join: function join9(chars) {
     return chars.join("");
   }
 };
@@ -8429,10 +8587,10 @@ function readCodexGuidance(path) {
   }
 }
 function effectiveCodexGuidance(scope) {
-  const override = readCodexGuidance(join11(scope, "AGENTS.override.md"));
+  const override = readCodexGuidance(join10(scope, "AGENTS.override.md"));
   if (override === null) return null;
   if (override !== void 0 && override.toString("utf8").trim().length > 0) return override;
-  const base = readCodexGuidance(join11(scope, "AGENTS.md"));
+  const base = readCodexGuidance(join10(scope, "AGENTS.md"));
   return base ?? null;
 }
 function hasUsablePrimBlock(content, visibleBytes) {
@@ -8455,7 +8613,7 @@ function hasUsablePrimBlock(content, visibleBytes) {
 }
 function hasUsableCodexGuidance(projectRoot2) {
   try {
-    const codexHome = process.env.CODEX_HOME?.trim() ? resolve4(process.env.CODEX_HOME) : join11(homedir5(), ".codex");
+    const codexHome = process.env.CODEX_HOME?.trim() ? resolve4(process.env.CODEX_HOME) : join10(homedir4(), ".codex");
     const scopes = [
       { path: codexHome, visibleBytes: CODEX_GUIDANCE_LIMIT_BYTES },
       { path: projectRoot2, visibleBytes: CODEX_DEFAULT_PROJECT_GUIDANCE_BYTES }
@@ -8475,14 +8633,14 @@ function sha256(content) {
 }
 function cursorSkillDirectory(cwd, scope) {
   const base = scope === "user" ? cursorConfigDirectory() : gitToplevel(cwd) ?? cwd;
-  return join11(base, scope === "user" ? "skills" : ".cursor/skills", "prim");
+  return join10(base, scope === "user" ? "skills" : ".cursor/skills", "prim");
 }
 function cursorSkillPaths(cwd, scope) {
   const directory = cursorSkillDirectory(cwd, scope);
   return {
     directory,
-    skill: join11(directory, "SKILL.md"),
-    manifest: join11(directory, CURSOR_SKILL_MANIFEST)
+    skill: join10(directory, "SKILL.md"),
+    manifest: join10(directory, CURSOR_SKILL_MANIFEST)
   };
 }
 function readCursorSkillManifest(path) {
@@ -8535,8 +8693,8 @@ var MAX_SKILL_BYTES = 1024 * 1024;
 var REFRESH_LOCK_TIMEOUT_MS = 150;
 var REFRESH_LOCK_POLL_MS = 10;
 function pluginDirFor(cwd, scope) {
-  const base = scope === "user" ? join12(homedir6(), ".claude") : join12(gitToplevel(cwd) ?? cwd, ".claude");
-  return join12(base, "skills", "prim");
+  const base = scope === "user" ? join11(homedir5(), ".claude") : join11(gitToplevel(cwd) ?? cwd, ".claude");
+  return join11(base, "skills", "prim");
 }
 function packageVersion2() {
   let dir = __dirname2;
@@ -8558,8 +8716,8 @@ function renderClaudePlugin() {
 }
 function pluginPaths(dir) {
   return {
-    manifestPath: join12(dir, ".claude-plugin", "plugin.json"),
-    skillPath: join12(dir, "SKILL.md")
+    manifestPath: join11(dir, ".claude-plugin", "plugin.json"),
+    skillPath: join11(dir, "SKILL.md")
   };
 }
 function pathIsInside(root, path) {
@@ -8624,9 +8782,9 @@ function inspectRecognizedInstallation(paths, projectRoot2) {
   };
 }
 function refreshLockDir(physicalPluginDir) {
-  const cacheRoot = process.env.XDG_CACHE_HOME || join12(homedir6(), ".cache");
+  const cacheRoot = process.env.XDG_CACHE_HOME || join11(homedir5(), ".cache");
   const identity = createHash6("sha256").update(physicalPluginDir).digest("hex");
-  return join12(cacheRoot, "prim", "skill-refresh-locks", `${identity}.lock`);
+  return join11(cacheRoot, "prim", "skill-refresh-locks", `${identity}.lock`);
 }
 async function refreshClaudePlugins(cwd, options = {}) {
   const result = { installed: 0, refreshed: 0 };
@@ -8634,7 +8792,7 @@ async function refreshClaudePlugins(cwd, options = {}) {
   if (options.includeProject !== false) {
     const projectRoot2 = options.projectRoot ?? gitToplevel(cwd);
     if (projectRoot2 !== null && isAbsolute6(projectRoot2)) {
-      candidates.push({ dir: join12(projectRoot2, ".claude", "skills", "prim"), projectRoot: projectRoot2 });
+      candidates.push({ dir: join11(projectRoot2, ".claude", "skills", "prim"), projectRoot: projectRoot2 });
     }
   }
   candidates.push({ dir: pluginDirFor(cwd, "user") });
@@ -8698,7 +8856,7 @@ async function refreshClaudePlugins(cwd, options = {}) {
 
 // src/daemon/client.ts
 import { createConnection } from "net";
-import { join as join13 } from "path";
+import { join as join12 } from "path";
 
 // src/daemon/principal.ts
 import { createHash as createHash7 } from "crypto";
@@ -8748,7 +8906,7 @@ function parseDaemonResponseEnvelope(value) {
 }
 
 // src/daemon/client.ts
-var SOCK_PATH = join13(primConfigDirectory(), "sock");
+var SOCK_PATH = join12(primConfigDirectory(), "sock");
 var DEFAULT_TIMEOUT_MS2 = 250;
 var nextRequestId = 1;
 function daemonRequest(method, params = {}, opts = {}) {
@@ -8761,7 +8919,7 @@ function daemonRequest(method, params = {}, opts = {}) {
     ...caller ? { caller } : {}
   };
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let settled = false;
     let socket;
     let buffer = Buffer.alloc(0);
@@ -8776,7 +8934,7 @@ function daemonRequest(method, params = {}, opts = {}) {
         } catch {
         }
       }
-      resolve9(value);
+      resolve10(value);
     };
     const timer = setTimeout(() => settle(null), timeoutMs);
     timer.unref();
@@ -9055,8 +9213,8 @@ async function acknowledgeDecisionFeedback(input, dependencies = {}) {
 // src/lib/activation.ts
 import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync9, readFileSync as readFileSync10 } from "fs";
-import { homedir as homedir7 } from "os";
-import { join as join14 } from "path";
+import { homedir as homedir6 } from "os";
+import { join as join13 } from "path";
 var PRIM_ACTIVE_KEY = "prim.active";
 var PRIM_REPO_SYNC_ID_KEY = "prim.repoSyncId";
 var PRIM_REPO_SYNC_REPOSITORY_KEY = "prim.repoSyncRepository";
@@ -9152,9 +9310,9 @@ function repositoryBindingState(cwd) {
 }
 function hasProjectPrimInstall(cwd) {
   const root = gitToplevel(cwd);
-  if (root === null || root === homedir7()) return false;
+  if (root === null || root === homedir6()) return false;
   for (const rel of PROJECT_INSTALL_FILES) {
-    const path = join14(root, rel);
+    const path = join13(root, rel);
     if (existsSync9(path)) {
       try {
         const content = readFileSync10(path, "utf-8");
@@ -9175,6 +9333,39 @@ function decisionIngestionStatus(cwd) {
   return isRepoActiveForCapture(cwd) ? "enabled" : "disabled";
 }
 
+// src/lib/bin-cache.ts
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync6 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join14 } from "path";
+var GIT_HOOK_CACHE_SHELL_DIR = "${XDG_CACHE_HOME:-$HOME/.cache}/prim/bin";
+var GIT_HOOK_CACHE_TTL_MINUTES = 1440;
+var GIT_HOOK_CACHED_BINS = ["prim-post-commit", "prim-post-rewrite"];
+function binCacheDir() {
+  const base = process.env.XDG_CACHE_HOME || join14(homedir7(), ".cache");
+  return join14(base, "prim", "bin");
+}
+function writeAtomic(path, content) {
+  atomicWriteFile(path, content, { mode: 384 });
+}
+function warmBinCache() {
+  try {
+    if (process.env.PRIM_BIN_CACHE === "0") {
+      return;
+    }
+    const dir = binCacheDir();
+    mkdirSync6(dir, { recursive: true, mode: 448 });
+    chmodSync3(dir, 448);
+    writeAtomic(join14(dir, "node"), process.execPath);
+    for (const bin of GIT_HOOK_CACHED_BINS) {
+      const file = binFile(bin);
+      if (file) {
+        writeAtomic(join14(dir, bin), file);
+      }
+    }
+  } catch {
+  }
+}
+
 // src/generated/cli-http-v1.validators.js
 var import_ucs2length = __toESM(require_ucs2length(), 1);
 var schema33 = { "type": "object", "properties": { "authenticated": { "type": "boolean", "const": true }, "organizationBindingVersion": { "type": "number", "const": 1 }, "captureAuthorityKind": { "type": "string", "enum": ["workos", "service_token"] }, "organizationId": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "workosOrganizationId": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] } }, "required": ["authenticated", "organizationBindingVersion", "captureAuthorityKind", "organizationId", "workosOrganizationId"], "additionalProperties": false };
@@ -20255,7 +20446,6 @@ function validate45(data, { instancePath = "", parentData, parentDataProperty, r
   return errors === 0;
 }
 validate45.evaluated = { "dynamicProps": true, "dynamicItems": false };
-var schema83 = { "anyOf": [{ "type": "object", "properties": { "error": { "type": "string", "const": "Unauthorized" } }, "required": ["error"], "additionalProperties": false }, { "type": "object", "properties": { "error": { "type": "string", "const": "interactive_workos_authority_required" } }, "required": ["error"], "additionalProperties": false }, { "type": "object", "properties": { "error": { "type": "string", "const": "feature_disabled" }, "feature": { "type": "string", "const": "github-connect" } }, "required": ["error", "feature"], "additionalProperties": false }, { "type": "object", "properties": { "error": { "type": "string", "enum": ["github_connect_unavailable", "feature_check_unavailable"] }, "feature": { "type": "string", "const": "github-connect" } }, "required": ["error", "feature"], "additionalProperties": false }, { "type": "object", "properties": { "error": { "type": "string", "const": "WorkOS identity authority is temporarily unavailable" } }, "required": ["error"], "additionalProperties": false }, { "type": "object", "properties": { "error": { "type": "string", "const": "github_install_intent_conflict" } }, "required": ["error"], "additionalProperties": false }, { "type": "object", "properties": { "error": { "type": "string", "const": "github_install_intent_rate_limited" }, "retryAt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["error", "retryAt"], "additionalProperties": false }] };
 function validate46(data, { instancePath = "", parentData, parentDataProperty, rootData = data, dynamicAnchors = {} } = {}) {
   ;
   let vErrors = null;
@@ -20405,7 +20595,7 @@ function validate46(data, { instancePath = "", parentData, parentDataProperty, r
   if (errors === _errs12) {
     if (data && typeof data == "object" && !Array.isArray(data)) {
       let missing2;
-      if (data.error === void 0 && (missing2 = "error") || data.feature === void 0 && (missing2 = "feature")) {
+      if (data.error === void 0 && (missing2 = "error")) {
         const err10 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/2/required", keyword: "required", params: { missingProperty: missing2 }, message: "must have required property '" + missing2 + "'" };
         if (vErrors === null) {
           vErrors = [err10];
@@ -20416,7 +20606,7 @@ function validate46(data, { instancePath = "", parentData, parentDataProperty, r
       } else {
         const _errs14 = errors;
         for (const key2 in data) {
-          if (!(key2 === "error" || key2 === "feature")) {
+          if (!(key2 === "error")) {
             const err11 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/2/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key2 }, message: "must NOT have additional properties" };
             if (vErrors === null) {
               vErrors = [err11];
@@ -20430,7 +20620,6 @@ function validate46(data, { instancePath = "", parentData, parentDataProperty, r
         if (_errs14 === errors) {
           if (data.error !== void 0) {
             let data2 = data.error;
-            const _errs15 = errors;
             if (typeof data2 !== "string") {
               const err12 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/2/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
               if (vErrors === null) {
@@ -20440,8 +20629,8 @@ function validate46(data, { instancePath = "", parentData, parentDataProperty, r
               }
               errors++;
             }
-            if ("feature_disabled" !== data2) {
-              const err13 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/2/properties/error/const", keyword: "const", params: { allowedValue: "feature_disabled" }, message: "must be equal to constant" };
+            if ("github_connect_unavailable" !== data2) {
+              const err13 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/2/properties/error/const", keyword: "const", params: { allowedValue: "github_connect_unavailable" }, message: "must be equal to constant" };
               if (vErrors === null) {
                 vErrors = [err13];
               } else {
@@ -20449,45 +20638,15 @@ function validate46(data, { instancePath = "", parentData, parentDataProperty, r
               }
               errors++;
             }
-            var valid4 = _errs15 === errors;
-          } else {
-            var valid4 = true;
-          }
-          if (valid4) {
-            if (data.feature !== void 0) {
-              let data3 = data.feature;
-              const _errs17 = errors;
-              if (typeof data3 !== "string") {
-                const err14 = { instancePath: instancePath + "/feature", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/2/properties/feature/type", keyword: "type", params: { type: "string" }, message: "must be string" };
-                if (vErrors === null) {
-                  vErrors = [err14];
-                } else {
-                  vErrors.push(err14);
-                }
-                errors++;
-              }
-              if ("github-connect" !== data3) {
-                const err15 = { instancePath: instancePath + "/feature", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/2/properties/feature/const", keyword: "const", params: { allowedValue: "github-connect" }, message: "must be equal to constant" };
-                if (vErrors === null) {
-                  vErrors = [err15];
-                } else {
-                  vErrors.push(err15);
-                }
-                errors++;
-              }
-              var valid4 = _errs17 === errors;
-            } else {
-              var valid4 = true;
-            }
           }
         }
       }
     } else {
-      const err16 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/2/type", keyword: "type", params: { type: "object" }, message: "must be object" };
+      const err14 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/2/type", keyword: "type", params: { type: "object" }, message: "must be object" };
       if (vErrors === null) {
-        vErrors = [err16];
+        vErrors = [err14];
       } else {
-        vErrors.push(err16);
+        vErrors.push(err14);
       }
       errors++;
     }
@@ -20499,148 +20658,117 @@ function validate46(data, { instancePath = "", parentData, parentDataProperty, r
       props0 = true;
     }
   }
-  const _errs19 = errors;
-  if (errors === _errs19) {
+  const _errs17 = errors;
+  if (errors === _errs17) {
     if (data && typeof data == "object" && !Array.isArray(data)) {
       let missing3;
-      if (data.error === void 0 && (missing3 = "error") || data.feature === void 0 && (missing3 = "feature")) {
-        const err17 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/required", keyword: "required", params: { missingProperty: missing3 }, message: "must have required property '" + missing3 + "'" };
+      if (data.error === void 0 && (missing3 = "error")) {
+        const err15 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/required", keyword: "required", params: { missingProperty: missing3 }, message: "must have required property '" + missing3 + "'" };
         if (vErrors === null) {
-          vErrors = [err17];
+          vErrors = [err15];
         } else {
-          vErrors.push(err17);
+          vErrors.push(err15);
         }
         errors++;
       } else {
-        const _errs21 = errors;
+        const _errs19 = errors;
         for (const key3 in data) {
-          if (!(key3 === "error" || key3 === "feature")) {
-            const err18 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key3 }, message: "must NOT have additional properties" };
+          if (!(key3 === "error")) {
+            const err16 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key3 }, message: "must NOT have additional properties" };
             if (vErrors === null) {
-              vErrors = [err18];
+              vErrors = [err16];
             } else {
-              vErrors.push(err18);
+              vErrors.push(err16);
             }
             errors++;
             break;
           }
         }
-        if (_errs21 === errors) {
+        if (_errs19 === errors) {
           if (data.error !== void 0) {
-            let data4 = data.error;
-            const _errs22 = errors;
-            if (typeof data4 !== "string") {
-              const err19 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+            let data3 = data.error;
+            if (typeof data3 !== "string") {
+              const err17 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
               if (vErrors === null) {
-                vErrors = [err19];
+                vErrors = [err17];
               } else {
-                vErrors.push(err19);
+                vErrors.push(err17);
               }
               errors++;
             }
-            if (!(data4 === "github_connect_unavailable" || data4 === "feature_check_unavailable")) {
-              const err20 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/properties/error/enum", keyword: "enum", params: { allowedValues: schema83.anyOf[3].properties.error.enum }, message: "must be equal to one of the allowed values" };
+            if ("WorkOS identity authority is temporarily unavailable" !== data3) {
+              const err18 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/properties/error/const", keyword: "const", params: { allowedValue: "WorkOS identity authority is temporarily unavailable" }, message: "must be equal to constant" };
               if (vErrors === null) {
-                vErrors = [err20];
+                vErrors = [err18];
               } else {
-                vErrors.push(err20);
+                vErrors.push(err18);
               }
               errors++;
             }
-            var valid5 = _errs22 === errors;
-          } else {
-            var valid5 = true;
-          }
-          if (valid5) {
-            if (data.feature !== void 0) {
-              let data5 = data.feature;
-              const _errs24 = errors;
-              if (typeof data5 !== "string") {
-                const err21 = { instancePath: instancePath + "/feature", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/properties/feature/type", keyword: "type", params: { type: "string" }, message: "must be string" };
-                if (vErrors === null) {
-                  vErrors = [err21];
-                } else {
-                  vErrors.push(err21);
-                }
-                errors++;
-              }
-              if ("github-connect" !== data5) {
-                const err22 = { instancePath: instancePath + "/feature", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/properties/feature/const", keyword: "const", params: { allowedValue: "github-connect" }, message: "must be equal to constant" };
-                if (vErrors === null) {
-                  vErrors = [err22];
-                } else {
-                  vErrors.push(err22);
-                }
-                errors++;
-              }
-              var valid5 = _errs24 === errors;
-            } else {
-              var valid5 = true;
-            }
           }
         }
       }
     } else {
-      const err23 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/type", keyword: "type", params: { type: "object" }, message: "must be object" };
+      const err19 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/3/type", keyword: "type", params: { type: "object" }, message: "must be object" };
       if (vErrors === null) {
-        vErrors = [err23];
+        vErrors = [err19];
       } else {
-        vErrors.push(err23);
+        vErrors.push(err19);
       }
       errors++;
     }
   }
-  var _valid0 = _errs19 === errors;
+  var _valid0 = _errs17 === errors;
   valid1 = valid1 || _valid0;
   if (_valid0) {
     if (props0 !== true) {
       props0 = true;
     }
   }
-  const _errs26 = errors;
-  if (errors === _errs26) {
+  const _errs22 = errors;
+  if (errors === _errs22) {
     if (data && typeof data == "object" && !Array.isArray(data)) {
       let missing4;
       if (data.error === void 0 && (missing4 = "error")) {
-        const err24 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/required", keyword: "required", params: { missingProperty: missing4 }, message: "must have required property '" + missing4 + "'" };
+        const err20 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/required", keyword: "required", params: { missingProperty: missing4 }, message: "must have required property '" + missing4 + "'" };
         if (vErrors === null) {
-          vErrors = [err24];
+          vErrors = [err20];
         } else {
-          vErrors.push(err24);
+          vErrors.push(err20);
         }
         errors++;
       } else {
-        const _errs28 = errors;
+        const _errs24 = errors;
         for (const key4 in data) {
           if (!(key4 === "error")) {
-            const err25 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key4 }, message: "must NOT have additional properties" };
+            const err21 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key4 }, message: "must NOT have additional properties" };
             if (vErrors === null) {
-              vErrors = [err25];
+              vErrors = [err21];
             } else {
-              vErrors.push(err25);
+              vErrors.push(err21);
             }
             errors++;
             break;
           }
         }
-        if (_errs28 === errors) {
+        if (_errs24 === errors) {
           if (data.error !== void 0) {
-            let data6 = data.error;
-            if (typeof data6 !== "string") {
-              const err26 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+            let data4 = data.error;
+            if (typeof data4 !== "string") {
+              const err22 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
               if (vErrors === null) {
-                vErrors = [err26];
+                vErrors = [err22];
               } else {
-                vErrors.push(err26);
+                vErrors.push(err22);
               }
               errors++;
             }
-            if ("WorkOS identity authority is temporarily unavailable" !== data6) {
-              const err27 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/properties/error/const", keyword: "const", params: { allowedValue: "WorkOS identity authority is temporarily unavailable" }, message: "must be equal to constant" };
+            if ("github_install_intent_conflict" !== data4) {
+              const err23 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/properties/error/const", keyword: "const", params: { allowedValue: "github_install_intent_conflict" }, message: "must be equal to constant" };
               if (vErrors === null) {
-                vErrors = [err27];
+                vErrors = [err23];
               } else {
-                vErrors.push(err27);
+                vErrors.push(err23);
               }
               errors++;
             }
@@ -20648,195 +20776,128 @@ function validate46(data, { instancePath = "", parentData, parentDataProperty, r
         }
       }
     } else {
-      const err28 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/type", keyword: "type", params: { type: "object" }, message: "must be object" };
+      const err24 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/4/type", keyword: "type", params: { type: "object" }, message: "must be object" };
       if (vErrors === null) {
-        vErrors = [err28];
+        vErrors = [err24];
       } else {
-        vErrors.push(err28);
+        vErrors.push(err24);
       }
       errors++;
     }
   }
-  var _valid0 = _errs26 === errors;
+  var _valid0 = _errs22 === errors;
   valid1 = valid1 || _valid0;
   if (_valid0) {
     if (props0 !== true) {
       props0 = true;
     }
   }
-  const _errs31 = errors;
-  if (errors === _errs31) {
+  const _errs27 = errors;
+  if (errors === _errs27) {
     if (data && typeof data == "object" && !Array.isArray(data)) {
       let missing5;
-      if (data.error === void 0 && (missing5 = "error")) {
-        const err29 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/required", keyword: "required", params: { missingProperty: missing5 }, message: "must have required property '" + missing5 + "'" };
+      if (data.error === void 0 && (missing5 = "error") || data.retryAt === void 0 && (missing5 = "retryAt")) {
+        const err25 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/required", keyword: "required", params: { missingProperty: missing5 }, message: "must have required property '" + missing5 + "'" };
         if (vErrors === null) {
-          vErrors = [err29];
+          vErrors = [err25];
         } else {
-          vErrors.push(err29);
+          vErrors.push(err25);
         }
         errors++;
       } else {
-        const _errs33 = errors;
+        const _errs29 = errors;
         for (const key5 in data) {
-          if (!(key5 === "error")) {
-            const err30 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key5 }, message: "must NOT have additional properties" };
+          if (!(key5 === "error" || key5 === "retryAt")) {
+            const err26 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key5 }, message: "must NOT have additional properties" };
             if (vErrors === null) {
-              vErrors = [err30];
+              vErrors = [err26];
             } else {
-              vErrors.push(err30);
+              vErrors.push(err26);
             }
             errors++;
             break;
           }
         }
-        if (_errs33 === errors) {
+        if (_errs29 === errors) {
           if (data.error !== void 0) {
-            let data7 = data.error;
-            if (typeof data7 !== "string") {
-              const err31 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+            let data5 = data.error;
+            const _errs30 = errors;
+            if (typeof data5 !== "string") {
+              const err27 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
               if (vErrors === null) {
-                vErrors = [err31];
+                vErrors = [err27];
               } else {
-                vErrors.push(err31);
+                vErrors.push(err27);
               }
               errors++;
             }
-            if ("github_install_intent_conflict" !== data7) {
-              const err32 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/properties/error/const", keyword: "const", params: { allowedValue: "github_install_intent_conflict" }, message: "must be equal to constant" };
+            if ("github_install_intent_rate_limited" !== data5) {
+              const err28 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/properties/error/const", keyword: "const", params: { allowedValue: "github_install_intent_rate_limited" }, message: "must be equal to constant" };
               if (vErrors === null) {
-                vErrors = [err32];
+                vErrors = [err28];
               } else {
-                vErrors.push(err32);
+                vErrors.push(err28);
               }
               errors++;
             }
+            var valid7 = _errs30 === errors;
+          } else {
+            var valid7 = true;
+          }
+          if (valid7) {
+            if (data.retryAt !== void 0) {
+              let data6 = data.retryAt;
+              const _errs32 = errors;
+              if (!(typeof data6 == "number" && (!(data6 % 1) && !isNaN(data6)) && isFinite(data6))) {
+                const err29 = { instancePath: instancePath + "/retryAt", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/properties/retryAt/type", keyword: "type", params: { type: "integer" }, message: "must be integer" };
+                if (vErrors === null) {
+                  vErrors = [err29];
+                } else {
+                  vErrors.push(err29);
+                }
+                errors++;
+              }
+              if (errors === _errs32) {
+                if (typeof data6 == "number" && isFinite(data6)) {
+                  if (data6 > 9007199254740991 || isNaN(data6)) {
+                    const err30 = { instancePath: instancePath + "/retryAt", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/properties/retryAt/maximum", keyword: "maximum", params: { comparison: "<=", limit: 9007199254740991 }, message: "must be <= 9007199254740991" };
+                    if (vErrors === null) {
+                      vErrors = [err30];
+                    } else {
+                      vErrors.push(err30);
+                    }
+                    errors++;
+                  } else {
+                    if (data6 < 0 || isNaN(data6)) {
+                      const err31 = { instancePath: instancePath + "/retryAt", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/properties/retryAt/minimum", keyword: "minimum", params: { comparison: ">=", limit: 0 }, message: "must be >= 0" };
+                      if (vErrors === null) {
+                        vErrors = [err31];
+                      } else {
+                        vErrors.push(err31);
+                      }
+                      errors++;
+                    }
+                  }
+                }
+              }
+              var valid7 = _errs32 === errors;
+            } else {
+              var valid7 = true;
+            }
           }
         }
       }
     } else {
-      const err33 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/type", keyword: "type", params: { type: "object" }, message: "must be object" };
+      const err32 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/5/type", keyword: "type", params: { type: "object" }, message: "must be object" };
       if (vErrors === null) {
-        vErrors = [err33];
+        vErrors = [err32];
       } else {
-        vErrors.push(err33);
+        vErrors.push(err32);
       }
       errors++;
     }
   }
-  var _valid0 = _errs31 === errors;
-  valid1 = valid1 || _valid0;
-  if (_valid0) {
-    if (props0 !== true) {
-      props0 = true;
-    }
-  }
-  const _errs36 = errors;
-  if (errors === _errs36) {
-    if (data && typeof data == "object" && !Array.isArray(data)) {
-      let missing6;
-      if (data.error === void 0 && (missing6 = "error") || data.retryAt === void 0 && (missing6 = "retryAt")) {
-        const err34 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/6/required", keyword: "required", params: { missingProperty: missing6 }, message: "must have required property '" + missing6 + "'" };
-        if (vErrors === null) {
-          vErrors = [err34];
-        } else {
-          vErrors.push(err34);
-        }
-        errors++;
-      } else {
-        const _errs38 = errors;
-        for (const key6 in data) {
-          if (!(key6 === "error" || key6 === "retryAt")) {
-            const err35 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/6/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key6 }, message: "must NOT have additional properties" };
-            if (vErrors === null) {
-              vErrors = [err35];
-            } else {
-              vErrors.push(err35);
-            }
-            errors++;
-            break;
-          }
-        }
-        if (_errs38 === errors) {
-          if (data.error !== void 0) {
-            let data8 = data.error;
-            const _errs39 = errors;
-            if (typeof data8 !== "string") {
-              const err36 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/6/properties/error/type", keyword: "type", params: { type: "string" }, message: "must be string" };
-              if (vErrors === null) {
-                vErrors = [err36];
-              } else {
-                vErrors.push(err36);
-              }
-              errors++;
-            }
-            if ("github_install_intent_rate_limited" !== data8) {
-              const err37 = { instancePath: instancePath + "/error", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/6/properties/error/const", keyword: "const", params: { allowedValue: "github_install_intent_rate_limited" }, message: "must be equal to constant" };
-              if (vErrors === null) {
-                vErrors = [err37];
-              } else {
-                vErrors.push(err37);
-              }
-              errors++;
-            }
-            var valid8 = _errs39 === errors;
-          } else {
-            var valid8 = true;
-          }
-          if (valid8) {
-            if (data.retryAt !== void 0) {
-              let data9 = data.retryAt;
-              const _errs41 = errors;
-              if (!(typeof data9 == "number" && (!(data9 % 1) && !isNaN(data9)) && isFinite(data9))) {
-                const err38 = { instancePath: instancePath + "/retryAt", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/6/properties/retryAt/type", keyword: "type", params: { type: "integer" }, message: "must be integer" };
-                if (vErrors === null) {
-                  vErrors = [err38];
-                } else {
-                  vErrors.push(err38);
-                }
-                errors++;
-              }
-              if (errors === _errs41) {
-                if (typeof data9 == "number" && isFinite(data9)) {
-                  if (data9 > 9007199254740991 || isNaN(data9)) {
-                    const err39 = { instancePath: instancePath + "/retryAt", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/6/properties/retryAt/maximum", keyword: "maximum", params: { comparison: "<=", limit: 9007199254740991 }, message: "must be <= 9007199254740991" };
-                    if (vErrors === null) {
-                      vErrors = [err39];
-                    } else {
-                      vErrors.push(err39);
-                    }
-                    errors++;
-                  } else {
-                    if (data9 < 0 || isNaN(data9)) {
-                      const err40 = { instancePath: instancePath + "/retryAt", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/6/properties/retryAt/minimum", keyword: "minimum", params: { comparison: ">=", limit: 0 }, message: "must be >= 0" };
-                      if (vErrors === null) {
-                        vErrors = [err40];
-                      } else {
-                        vErrors.push(err40);
-                      }
-                      errors++;
-                    }
-                  }
-                }
-              }
-              var valid8 = _errs41 === errors;
-            } else {
-              var valid8 = true;
-            }
-          }
-        }
-      }
-    } else {
-      const err41 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf/6/type", keyword: "type", params: { type: "object" }, message: "must be object" };
-      if (vErrors === null) {
-        vErrors = [err41];
-      } else {
-        vErrors.push(err41);
-      }
-      errors++;
-    }
-  }
-  var _valid0 = _errs36 === errors;
+  var _valid0 = _errs27 === errors;
   valid1 = valid1 || _valid0;
   if (_valid0) {
     if (props0 !== true) {
@@ -20844,11 +20905,11 @@ function validate46(data, { instancePath = "", parentData, parentDataProperty, r
     }
   }
   if (!valid1) {
-    const err42 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf", keyword: "anyOf", params: {}, message: "must match a schema in anyOf" };
+    const err33 = { instancePath, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/GitHubInstallIntentStartErrorResponse/anyOf", keyword: "anyOf", params: {}, message: "must match a schema in anyOf" };
     if (vErrors === null) {
-      vErrors = [err42];
+      vErrors = [err33];
     } else {
-      vErrors.push(err42);
+      vErrors.push(err33);
     }
     errors++;
     validate46.errors = vErrors;
@@ -22950,7 +23011,7 @@ function validate50(data, { instancePath = "", parentData, parentDataProperty, r
   return errors === 0;
 }
 validate50.evaluated = { "dynamicProps": true, "dynamicItems": false };
-var schema93 = { "type": "object", "properties": { "batch": { "type": "array", "items": { "anyOf": [{ "type": "object", "properties": { "moveId": { "type": "string" }, "capturedAt": { "type": "number" }, "sessionId": { "type": "string" }, "invocationId": { "type": "string" }, "eventType": { "type": "string" }, "payload": {}, "env": {}, "capturedOrganizationId": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9_-]+$" }, "captureAuthorityKind": { "type": "string", "enum": ["workos", "service_token"] }, "decisionLifecycleProtocolVersion": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "producer": { "type": "string", "enum": ["claude_code", "codex", "cursor", "hermes"] }, "toolOutcome": { "type": "string", "enum": ["succeeded", "returned", "failed", "interrupted", "prevented", "unknown"] }, "envelopeVersion": { "type": "number", "const": 4 } }, "required": ["moveId", "capturedAt", "sessionId", "eventType", "capturedOrganizationId", "captureAuthorityKind", "decisionLifecycleProtocolVersion", "envelopeVersion"], "additionalProperties": {} }, { "type": "object", "properties": { "moveId": { "type": "string" }, "capturedAt": { "type": "number" }, "sessionId": { "type": "string" }, "invocationId": { "type": "string" }, "eventType": { "type": "string" }, "payload": {}, "env": {}, "capturedOrganizationId": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9_-]+$" }, "captureAuthorityKind": { "type": "string", "enum": ["workos", "service_token"] }, "decisionLifecycleProtocolVersion": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "producer": { "type": "string", "enum": ["claude_code", "codex", "cursor", "hermes"] }, "toolOutcome": { "type": "string", "enum": ["succeeded", "returned", "failed", "interrupted", "prevented", "unknown"] }, "envelopeVersion": { "type": "number", "exclusiveMaximum": 4 } }, "required": ["moveId", "capturedAt", "sessionId", "eventType"], "additionalProperties": {} }] } } }, "required": ["batch"], "additionalProperties": {} };
+var schema93 = { "type": "object", "properties": { "batch": { "type": "array", "items": { "anyOf": [{ "type": "object", "properties": { "moveId": { "type": "string" }, "capturedAt": { "type": "number" }, "sessionId": { "type": "string" }, "invocationId": { "type": "string" }, "eventType": { "type": "string" }, "payload": {}, "env": {}, "repositoryContext": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "repository_bound" }, "repoSyncId": { "type": "string", "minLength": 1, "maxLength": 128 } }, "required": ["kind", "repoSyncId"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "non_repository" } }, "required": ["kind"], "additionalProperties": false }] }, "capturedOrganizationId": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9_-]+$" }, "captureAuthorityKind": { "type": "string", "enum": ["workos", "service_token"] }, "decisionLifecycleProtocolVersion": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "producer": { "type": "string", "enum": ["claude_code", "codex", "cursor", "hermes"] }, "toolOutcome": { "type": "string", "enum": ["succeeded", "returned", "failed", "interrupted", "prevented", "unknown"] }, "envelopeVersion": { "type": "number", "const": 4 } }, "required": ["moveId", "capturedAt", "sessionId", "eventType", "capturedOrganizationId", "captureAuthorityKind", "decisionLifecycleProtocolVersion", "envelopeVersion"], "additionalProperties": {} }, { "type": "object", "properties": { "moveId": { "type": "string" }, "capturedAt": { "type": "number" }, "sessionId": { "type": "string" }, "invocationId": { "type": "string" }, "eventType": { "type": "string" }, "payload": {}, "env": {}, "repositoryContext": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "repository_bound" }, "repoSyncId": { "type": "string", "minLength": 1, "maxLength": 128 } }, "required": ["kind", "repoSyncId"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "non_repository" } }, "required": ["kind"], "additionalProperties": false }] }, "capturedOrganizationId": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9_-]+$" }, "captureAuthorityKind": { "type": "string", "enum": ["workos", "service_token"] }, "decisionLifecycleProtocolVersion": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "producer": { "type": "string", "enum": ["claude_code", "codex", "cursor", "hermes"] }, "toolOutcome": { "type": "string", "enum": ["succeeded", "returned", "failed", "interrupted", "prevented", "unknown"] }, "envelopeVersion": { "type": "number", "exclusiveMaximum": 4 } }, "required": ["moveId", "capturedAt", "sessionId", "eventType"], "additionalProperties": {} }] } } }, "required": ["batch"], "additionalProperties": {} };
 var pattern8 = new RegExp("^[A-Za-z0-9_-]+$", "u");
 function validate51(data, { instancePath = "", parentData, parentDataProperty, rootData = data, dynamicAnchors = {} } = {}) {
   ;
@@ -23077,13 +23138,18 @@ function validate51(data, { instancePath = "", parentData, parentDataProperty, r
                                 var valid4 = true;
                               }
                               if (valid4) {
-                                if (data1.capturedOrganizationId !== void 0) {
-                                  let data7 = data1.capturedOrganizationId;
+                                if (data1.repositoryContext !== void 0) {
+                                  let data7 = data1.repositoryContext;
                                   const _errs20 = errors;
-                                  if (errors === _errs20) {
-                                    if (typeof data7 === "string") {
-                                      if (func1(data7) > 128) {
-                                        const err6 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/capturedOrganizationId/maxLength", keyword: "maxLength", params: { limit: 128 }, message: "must NOT have more than 128 characters" };
+                                  const _errs21 = errors;
+                                  let valid5 = false;
+                                  let passing0 = null;
+                                  const _errs22 = errors;
+                                  if (errors === _errs22) {
+                                    if (data7 && typeof data7 == "object" && !Array.isArray(data7)) {
+                                      let missing2;
+                                      if (data7.kind === void 0 && (missing2 = "kind") || data7.repoSyncId === void 0 && (missing2 = "repoSyncId")) {
+                                        const err6 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/0/required", keyword: "required", params: { missingProperty: missing2 }, message: "must have required property '" + missing2 + "'" };
                                         if (vErrors === null) {
                                           vErrors = [err6];
                                         } else {
@@ -23091,201 +23157,409 @@ function validate51(data, { instancePath = "", parentData, parentDataProperty, r
                                         }
                                         errors++;
                                       } else {
-                                        if (func1(data7) < 1) {
-                                          const err7 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/capturedOrganizationId/minLength", keyword: "minLength", params: { limit: 1 }, message: "must NOT have fewer than 1 characters" };
-                                          if (vErrors === null) {
-                                            vErrors = [err7];
-                                          } else {
-                                            vErrors.push(err7);
-                                          }
-                                          errors++;
-                                        } else {
-                                          if (!pattern8.test(data7)) {
-                                            const err8 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/capturedOrganizationId/pattern", keyword: "pattern", params: { pattern: "^[A-Za-z0-9_-]+$" }, message: 'must match pattern "^[A-Za-z0-9_-]+$"' };
+                                        const _errs24 = errors;
+                                        for (const key0 in data7) {
+                                          if (!(key0 === "kind" || key0 === "repoSyncId")) {
+                                            const err7 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/0/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key0 }, message: "must NOT have additional properties" };
                                             if (vErrors === null) {
-                                              vErrors = [err8];
+                                              vErrors = [err7];
                                             } else {
-                                              vErrors.push(err8);
+                                              vErrors.push(err7);
                                             }
                                             errors++;
+                                            break;
+                                          }
+                                        }
+                                        if (_errs24 === errors) {
+                                          if (data7.kind !== void 0) {
+                                            let data8 = data7.kind;
+                                            const _errs25 = errors;
+                                            if (typeof data8 !== "string") {
+                                              const err8 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/kind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/0/properties/kind/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                              if (vErrors === null) {
+                                                vErrors = [err8];
+                                              } else {
+                                                vErrors.push(err8);
+                                              }
+                                              errors++;
+                                            }
+                                            if ("repository_bound" !== data8) {
+                                              const err9 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/kind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/0/properties/kind/const", keyword: "const", params: { allowedValue: "repository_bound" }, message: "must be equal to constant" };
+                                              if (vErrors === null) {
+                                                vErrors = [err9];
+                                              } else {
+                                                vErrors.push(err9);
+                                              }
+                                              errors++;
+                                            }
+                                            var valid6 = _errs25 === errors;
+                                          } else {
+                                            var valid6 = true;
+                                          }
+                                          if (valid6) {
+                                            if (data7.repoSyncId !== void 0) {
+                                              let data9 = data7.repoSyncId;
+                                              const _errs27 = errors;
+                                              if (errors === _errs27) {
+                                                if (typeof data9 === "string") {
+                                                  if (func1(data9) > 128) {
+                                                    const err10 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/repoSyncId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/0/properties/repoSyncId/maxLength", keyword: "maxLength", params: { limit: 128 }, message: "must NOT have more than 128 characters" };
+                                                    if (vErrors === null) {
+                                                      vErrors = [err10];
+                                                    } else {
+                                                      vErrors.push(err10);
+                                                    }
+                                                    errors++;
+                                                  } else {
+                                                    if (func1(data9) < 1) {
+                                                      const err11 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/repoSyncId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/0/properties/repoSyncId/minLength", keyword: "minLength", params: { limit: 1 }, message: "must NOT have fewer than 1 characters" };
+                                                      if (vErrors === null) {
+                                                        vErrors = [err11];
+                                                      } else {
+                                                        vErrors.push(err11);
+                                                      }
+                                                      errors++;
+                                                    }
+                                                  }
+                                                } else {
+                                                  const err12 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/repoSyncId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/0/properties/repoSyncId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                                  if (vErrors === null) {
+                                                    vErrors = [err12];
+                                                  } else {
+                                                    vErrors.push(err12);
+                                                  }
+                                                  errors++;
+                                                }
+                                              }
+                                              var valid6 = _errs27 === errors;
+                                            } else {
+                                              var valid6 = true;
+                                            }
                                           }
                                         }
                                       }
                                     } else {
-                                      const err9 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/capturedOrganizationId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                      const err13 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/0/type", keyword: "type", params: { type: "object" }, message: "must be object" };
                                       if (vErrors === null) {
-                                        vErrors = [err9];
+                                        vErrors = [err13];
                                       } else {
-                                        vErrors.push(err9);
+                                        vErrors.push(err13);
                                       }
                                       errors++;
                                     }
                                   }
-                                  var valid4 = _errs20 === errors;
-                                } else {
-                                  var valid4 = true;
-                                }
-                                if (valid4) {
-                                  if (data1.captureAuthorityKind !== void 0) {
-                                    let data8 = data1.captureAuthorityKind;
-                                    const _errs22 = errors;
-                                    if (typeof data8 !== "string") {
-                                      const err10 = { instancePath: instancePath + "/batch/" + i0 + "/captureAuthorityKind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/captureAuthorityKind/type", keyword: "type", params: { type: "string" }, message: "must be string" };
-                                      if (vErrors === null) {
-                                        vErrors = [err10];
+                                  var _valid1 = _errs22 === errors;
+                                  if (_valid1) {
+                                    valid5 = true;
+                                    passing0 = 0;
+                                    var props0 = true;
+                                  }
+                                  const _errs29 = errors;
+                                  if (errors === _errs29) {
+                                    if (data7 && typeof data7 == "object" && !Array.isArray(data7)) {
+                                      let missing3;
+                                      if (data7.kind === void 0 && (missing3 = "kind")) {
+                                        const err14 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/1/required", keyword: "required", params: { missingProperty: missing3 }, message: "must have required property '" + missing3 + "'" };
+                                        if (vErrors === null) {
+                                          vErrors = [err14];
+                                        } else {
+                                          vErrors.push(err14);
+                                        }
+                                        errors++;
                                       } else {
-                                        vErrors.push(err10);
+                                        const _errs31 = errors;
+                                        for (const key1 in data7) {
+                                          if (!(key1 === "kind")) {
+                                            const err15 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/1/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key1 }, message: "must NOT have additional properties" };
+                                            if (vErrors === null) {
+                                              vErrors = [err15];
+                                            } else {
+                                              vErrors.push(err15);
+                                            }
+                                            errors++;
+                                            break;
+                                          }
+                                        }
+                                        if (_errs31 === errors) {
+                                          if (data7.kind !== void 0) {
+                                            let data10 = data7.kind;
+                                            if (typeof data10 !== "string") {
+                                              const err16 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/kind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/1/properties/kind/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                              if (vErrors === null) {
+                                                vErrors = [err16];
+                                              } else {
+                                                vErrors.push(err16);
+                                              }
+                                              errors++;
+                                            }
+                                            if ("non_repository" !== data10) {
+                                              const err17 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/kind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/1/properties/kind/const", keyword: "const", params: { allowedValue: "non_repository" }, message: "must be equal to constant" };
+                                              if (vErrors === null) {
+                                                vErrors = [err17];
+                                              } else {
+                                                vErrors.push(err17);
+                                              }
+                                              errors++;
+                                            }
+                                          }
+                                        }
                                       }
-                                      errors++;
-                                    }
-                                    if (!(data8 === "workos" || data8 === "service_token")) {
-                                      const err11 = { instancePath: instancePath + "/batch/" + i0 + "/captureAuthorityKind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/captureAuthorityKind/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[0].properties.captureAuthorityKind.enum }, message: "must be equal to one of the allowed values" };
+                                    } else {
+                                      const err18 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf/1/type", keyword: "type", params: { type: "object" }, message: "must be object" };
                                       if (vErrors === null) {
-                                        vErrors = [err11];
+                                        vErrors = [err18];
                                       } else {
-                                        vErrors.push(err11);
+                                        vErrors.push(err18);
                                       }
                                       errors++;
                                     }
-                                    var valid4 = _errs22 === errors;
+                                  }
+                                  var _valid1 = _errs29 === errors;
+                                  if (_valid1 && valid5) {
+                                    valid5 = false;
+                                    passing0 = [passing0, 1];
                                   } else {
-                                    var valid4 = true;
+                                    if (_valid1) {
+                                      valid5 = true;
+                                      passing0 = 1;
+                                      if (props0 !== true) {
+                                        props0 = true;
+                                      }
+                                    }
                                   }
-                                  if (valid4) {
-                                    if (data1.decisionLifecycleProtocolVersion !== void 0) {
-                                      let data9 = data1.decisionLifecycleProtocolVersion;
-                                      const _errs24 = errors;
-                                      if (!(typeof data9 == "number" && (!(data9 % 1) && !isNaN(data9)) && isFinite(data9))) {
-                                        const err12 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/decisionLifecycleProtocolVersion/type", keyword: "type", params: { type: "integer" }, message: "must be integer" };
-                                        if (vErrors === null) {
-                                          vErrors = [err12];
-                                        } else {
-                                          vErrors.push(err12);
-                                        }
-                                        errors++;
+                                  if (!valid5) {
+                                    const err19 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/repositoryContext/oneOf", keyword: "oneOf", params: { passingSchemas: passing0 }, message: "must match exactly one schema in oneOf" };
+                                    if (vErrors === null) {
+                                      vErrors = [err19];
+                                    } else {
+                                      vErrors.push(err19);
+                                    }
+                                    errors++;
+                                  } else {
+                                    errors = _errs21;
+                                    if (vErrors !== null) {
+                                      if (_errs21) {
+                                        vErrors.length = _errs21;
+                                      } else {
+                                        vErrors = null;
                                       }
-                                      if (errors === _errs24) {
-                                        if (typeof data9 == "number" && isFinite(data9)) {
-                                          if (data9 > 9007199254740991 || isNaN(data9)) {
-                                            const err13 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/decisionLifecycleProtocolVersion/maximum", keyword: "maximum", params: { comparison: "<=", limit: 9007199254740991 }, message: "must be <= 9007199254740991" };
+                                    }
+                                  }
+                                  var valid4 = _errs20 === errors;
+                                } else {
+                                  var valid4 = true;
+                                }
+                                if (valid4) {
+                                  if (data1.capturedOrganizationId !== void 0) {
+                                    let data11 = data1.capturedOrganizationId;
+                                    const _errs34 = errors;
+                                    if (errors === _errs34) {
+                                      if (typeof data11 === "string") {
+                                        if (func1(data11) > 128) {
+                                          const err20 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/capturedOrganizationId/maxLength", keyword: "maxLength", params: { limit: 128 }, message: "must NOT have more than 128 characters" };
+                                          if (vErrors === null) {
+                                            vErrors = [err20];
+                                          } else {
+                                            vErrors.push(err20);
+                                          }
+                                          errors++;
+                                        } else {
+                                          if (func1(data11) < 1) {
+                                            const err21 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/capturedOrganizationId/minLength", keyword: "minLength", params: { limit: 1 }, message: "must NOT have fewer than 1 characters" };
                                             if (vErrors === null) {
-                                              vErrors = [err13];
+                                              vErrors = [err21];
                                             } else {
-                                              vErrors.push(err13);
+                                              vErrors.push(err21);
                                             }
                                             errors++;
                                           } else {
-                                            if (data9 < 1 || isNaN(data9)) {
-                                              const err14 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/decisionLifecycleProtocolVersion/minimum", keyword: "minimum", params: { comparison: ">=", limit: 1 }, message: "must be >= 1" };
+                                            if (!pattern8.test(data11)) {
+                                              const err22 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/capturedOrganizationId/pattern", keyword: "pattern", params: { pattern: "^[A-Za-z0-9_-]+$" }, message: 'must match pattern "^[A-Za-z0-9_-]+$"' };
                                               if (vErrors === null) {
-                                                vErrors = [err14];
+                                                vErrors = [err22];
                                               } else {
-                                                vErrors.push(err14);
+                                                vErrors.push(err22);
                                               }
                                               errors++;
                                             }
                                           }
                                         }
+                                      } else {
+                                        const err23 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/capturedOrganizationId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                        if (vErrors === null) {
+                                          vErrors = [err23];
+                                        } else {
+                                          vErrors.push(err23);
+                                        }
+                                        errors++;
+                                      }
+                                    }
+                                    var valid4 = _errs34 === errors;
+                                  } else {
+                                    var valid4 = true;
+                                  }
+                                  if (valid4) {
+                                    if (data1.captureAuthorityKind !== void 0) {
+                                      let data12 = data1.captureAuthorityKind;
+                                      const _errs36 = errors;
+                                      if (typeof data12 !== "string") {
+                                        const err24 = { instancePath: instancePath + "/batch/" + i0 + "/captureAuthorityKind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/captureAuthorityKind/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                        if (vErrors === null) {
+                                          vErrors = [err24];
+                                        } else {
+                                          vErrors.push(err24);
+                                        }
+                                        errors++;
+                                      }
+                                      if (!(data12 === "workos" || data12 === "service_token")) {
+                                        const err25 = { instancePath: instancePath + "/batch/" + i0 + "/captureAuthorityKind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/captureAuthorityKind/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[0].properties.captureAuthorityKind.enum }, message: "must be equal to one of the allowed values" };
+                                        if (vErrors === null) {
+                                          vErrors = [err25];
+                                        } else {
+                                          vErrors.push(err25);
+                                        }
+                                        errors++;
                                       }
-                                      var valid4 = _errs24 === errors;
+                                      var valid4 = _errs36 === errors;
                                     } else {
                                       var valid4 = true;
                                     }
                                     if (valid4) {
-                                      if (data1.producer !== void 0) {
-                                        let data10 = data1.producer;
-                                        const _errs26 = errors;
-                                        if (typeof data10 !== "string") {
-                                          const err15 = { instancePath: instancePath + "/batch/" + i0 + "/producer", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/producer/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                      if (data1.decisionLifecycleProtocolVersion !== void 0) {
+                                        let data13 = data1.decisionLifecycleProtocolVersion;
+                                        const _errs38 = errors;
+                                        if (!(typeof data13 == "number" && (!(data13 % 1) && !isNaN(data13)) && isFinite(data13))) {
+                                          const err26 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/decisionLifecycleProtocolVersion/type", keyword: "type", params: { type: "integer" }, message: "must be integer" };
                                           if (vErrors === null) {
-                                            vErrors = [err15];
+                                            vErrors = [err26];
                                           } else {
-                                            vErrors.push(err15);
+                                            vErrors.push(err26);
                                           }
                                           errors++;
                                         }
-                                        if (!(data10 === "claude_code" || data10 === "codex" || data10 === "cursor" || data10 === "hermes")) {
-                                          const err16 = { instancePath: instancePath + "/batch/" + i0 + "/producer", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/producer/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[0].properties.producer.enum }, message: "must be equal to one of the allowed values" };
-                                          if (vErrors === null) {
-                                            vErrors = [err16];
-                                          } else {
-                                            vErrors.push(err16);
+                                        if (errors === _errs38) {
+                                          if (typeof data13 == "number" && isFinite(data13)) {
+                                            if (data13 > 9007199254740991 || isNaN(data13)) {
+                                              const err27 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/decisionLifecycleProtocolVersion/maximum", keyword: "maximum", params: { comparison: "<=", limit: 9007199254740991 }, message: "must be <= 9007199254740991" };
+                                              if (vErrors === null) {
+                                                vErrors = [err27];
+                                              } else {
+                                                vErrors.push(err27);
+                                              }
+                                              errors++;
+                                            } else {
+                                              if (data13 < 1 || isNaN(data13)) {
+                                                const err28 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/decisionLifecycleProtocolVersion/minimum", keyword: "minimum", params: { comparison: ">=", limit: 1 }, message: "must be >= 1" };
+                                                if (vErrors === null) {
+                                                  vErrors = [err28];
+                                                } else {
+                                                  vErrors.push(err28);
+                                                }
+                                                errors++;
+                                              }
+                                            }
                                           }
-                                          errors++;
                                         }
-                                        var valid4 = _errs26 === errors;
+                                        var valid4 = _errs38 === errors;
                                       } else {
                                         var valid4 = true;
                                       }
                                       if (valid4) {
-                                        if (data1.toolOutcome !== void 0) {
-                                          let data11 = data1.toolOutcome;
-                                          const _errs28 = errors;
-                                          if (typeof data11 !== "string") {
-                                            const err17 = { instancePath: instancePath + "/batch/" + i0 + "/toolOutcome", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/toolOutcome/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                        if (data1.producer !== void 0) {
+                                          let data14 = data1.producer;
+                                          const _errs40 = errors;
+                                          if (typeof data14 !== "string") {
+                                            const err29 = { instancePath: instancePath + "/batch/" + i0 + "/producer", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/producer/type", keyword: "type", params: { type: "string" }, message: "must be string" };
                                             if (vErrors === null) {
-                                              vErrors = [err17];
+                                              vErrors = [err29];
                                             } else {
-                                              vErrors.push(err17);
+                                              vErrors.push(err29);
                                             }
                                             errors++;
                                           }
-                                          if (!(data11 === "succeeded" || data11 === "returned" || data11 === "failed" || data11 === "interrupted" || data11 === "prevented" || data11 === "unknown")) {
-                                            const err18 = { instancePath: instancePath + "/batch/" + i0 + "/toolOutcome", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/toolOutcome/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[0].properties.toolOutcome.enum }, message: "must be equal to one of the allowed values" };
+                                          if (!(data14 === "claude_code" || data14 === "codex" || data14 === "cursor" || data14 === "hermes")) {
+                                            const err30 = { instancePath: instancePath + "/batch/" + i0 + "/producer", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/producer/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[0].properties.producer.enum }, message: "must be equal to one of the allowed values" };
                                             if (vErrors === null) {
-                                              vErrors = [err18];
+                                              vErrors = [err30];
                                             } else {
-                                              vErrors.push(err18);
+                                              vErrors.push(err30);
                                             }
                                             errors++;
                                           }
-                                          var valid4 = _errs28 === errors;
+                                          var valid4 = _errs40 === errors;
                                         } else {
                                           var valid4 = true;
                                         }
                                         if (valid4) {
-                                          if (data1.envelopeVersion !== void 0) {
-                                            let data12 = data1.envelopeVersion;
-                                            const _errs30 = errors;
-                                            if (!(typeof data12 == "number" && isFinite(data12))) {
-                                              const err19 = { instancePath: instancePath + "/batch/" + i0 + "/envelopeVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/envelopeVersion/type", keyword: "type", params: { type: "number" }, message: "must be number" };
+                                          if (data1.toolOutcome !== void 0) {
+                                            let data15 = data1.toolOutcome;
+                                            const _errs42 = errors;
+                                            if (typeof data15 !== "string") {
+                                              const err31 = { instancePath: instancePath + "/batch/" + i0 + "/toolOutcome", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/toolOutcome/type", keyword: "type", params: { type: "string" }, message: "must be string" };
                                               if (vErrors === null) {
-                                                vErrors = [err19];
+                                                vErrors = [err31];
                                               } else {
-                                                vErrors.push(err19);
+                                                vErrors.push(err31);
                                               }
                                               errors++;
                                             }
-                                            if (4 !== data12) {
-                                              const err20 = { instancePath: instancePath + "/batch/" + i0 + "/envelopeVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/envelopeVersion/const", keyword: "const", params: { allowedValue: 4 }, message: "must be equal to constant" };
+                                            if (!(data15 === "succeeded" || data15 === "returned" || data15 === "failed" || data15 === "interrupted" || data15 === "prevented" || data15 === "unknown")) {
+                                              const err32 = { instancePath: instancePath + "/batch/" + i0 + "/toolOutcome", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/toolOutcome/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[0].properties.toolOutcome.enum }, message: "must be equal to one of the allowed values" };
                                               if (vErrors === null) {
-                                                vErrors = [err20];
+                                                vErrors = [err32];
                                               } else {
-                                                vErrors.push(err20);
+                                                vErrors.push(err32);
                                               }
                                               errors++;
                                             }
-                                            var valid4 = _errs30 === errors;
+                                            var valid4 = _errs42 === errors;
                                           } else {
                                             var valid4 = true;
                                           }
-                                        }
-                                      }
-                                    }
-                                  }
-                                }
-                              }
-                            }
+                                          if (valid4) {
+                                            if (data1.envelopeVersion !== void 0) {
+                                              let data16 = data1.envelopeVersion;
+                                              const _errs44 = errors;
+                                              if (!(typeof data16 == "number" && isFinite(data16))) {
+                                                const err33 = { instancePath: instancePath + "/batch/" + i0 + "/envelopeVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/envelopeVersion/type", keyword: "type", params: { type: "number" }, message: "must be number" };
+                                                if (vErrors === null) {
+                                                  vErrors = [err33];
+                                                } else {
+                                                  vErrors.push(err33);
+                                                }
+                                                errors++;
+                                              }
+                                              if (4 !== data16) {
+                                                const err34 = { instancePath: instancePath + "/batch/" + i0 + "/envelopeVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/properties/envelopeVersion/const", keyword: "const", params: { allowedValue: 4 }, message: "must be equal to constant" };
+                                                if (vErrors === null) {
+                                                  vErrors = [err34];
+                                                } else {
+                                                  vErrors.push(err34);
+                                                }
+                                                errors++;
+                                              }
+                                              var valid4 = _errs44 === errors;
+                                            } else {
+                                              var valid4 = true;
+                                            }
+                                          }
+                                        }
+                                      }
+                                    }
+                                  }
+                                }
+                              }
+                            }
                           }
                         }
                       }
                     }
                   } else {
-                    const err21 = { instancePath: instancePath + "/batch/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/type", keyword: "type", params: { type: "object" }, message: "must be object" };
+                    const err35 = { instancePath: instancePath + "/batch/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/0/type", keyword: "type", params: { type: "object" }, message: "must be object" };
                     if (vErrors === null) {
-                      vErrors = [err21];
+                      vErrors = [err35];
                     } else {
-                      vErrors.push(err21);
+                      vErrors.push(err35);
                     }
                     errors++;
                   }
@@ -23293,296 +23567,509 @@ function validate51(data, { instancePath = "", parentData, parentDataProperty, r
                 var _valid0 = _errs7 === errors;
                 valid3 = valid3 || _valid0;
                 if (_valid0) {
-                  var props0 = true;
+                  var props1 = true;
                 }
-                const _errs32 = errors;
-                if (errors === _errs32) {
+                const _errs46 = errors;
+                if (errors === _errs46) {
                   if (data1 && typeof data1 == "object" && !Array.isArray(data1)) {
-                    let missing2;
-                    if (data1.moveId === void 0 && (missing2 = "moveId") || data1.capturedAt === void 0 && (missing2 = "capturedAt") || data1.sessionId === void 0 && (missing2 = "sessionId") || data1.eventType === void 0 && (missing2 = "eventType")) {
-                      const err22 = { instancePath: instancePath + "/batch/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/required", keyword: "required", params: { missingProperty: missing2 }, message: "must have required property '" + missing2 + "'" };
+                    let missing4;
+                    if (data1.moveId === void 0 && (missing4 = "moveId") || data1.capturedAt === void 0 && (missing4 = "capturedAt") || data1.sessionId === void 0 && (missing4 = "sessionId") || data1.eventType === void 0 && (missing4 = "eventType")) {
+                      const err36 = { instancePath: instancePath + "/batch/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/required", keyword: "required", params: { missingProperty: missing4 }, message: "must have required property '" + missing4 + "'" };
                       if (vErrors === null) {
-                        vErrors = [err22];
+                        vErrors = [err36];
                       } else {
-                        vErrors.push(err22);
+                        vErrors.push(err36);
                       }
                       errors++;
                     } else {
                       if (data1.moveId !== void 0) {
-                        const _errs35 = errors;
+                        const _errs49 = errors;
                         if (typeof data1.moveId !== "string") {
-                          const err23 = { instancePath: instancePath + "/batch/" + i0 + "/moveId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/moveId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                          const err37 = { instancePath: instancePath + "/batch/" + i0 + "/moveId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/moveId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
                           if (vErrors === null) {
-                            vErrors = [err23];
+                            vErrors = [err37];
                           } else {
-                            vErrors.push(err23);
+                            vErrors.push(err37);
                           }
                           errors++;
                         }
-                        var valid5 = _errs35 === errors;
+                        var valid8 = _errs49 === errors;
                       } else {
-                        var valid5 = true;
+                        var valid8 = true;
                       }
-                      if (valid5) {
+                      if (valid8) {
                         if (data1.capturedAt !== void 0) {
-                          let data14 = data1.capturedAt;
-                          const _errs37 = errors;
-                          if (!(typeof data14 == "number" && isFinite(data14))) {
-                            const err24 = { instancePath: instancePath + "/batch/" + i0 + "/capturedAt", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedAt/type", keyword: "type", params: { type: "number" }, message: "must be number" };
+                          let data18 = data1.capturedAt;
+                          const _errs51 = errors;
+                          if (!(typeof data18 == "number" && isFinite(data18))) {
+                            const err38 = { instancePath: instancePath + "/batch/" + i0 + "/capturedAt", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedAt/type", keyword: "type", params: { type: "number" }, message: "must be number" };
                             if (vErrors === null) {
-                              vErrors = [err24];
+                              vErrors = [err38];
                             } else {
-                              vErrors.push(err24);
+                              vErrors.push(err38);
                             }
                             errors++;
                           }
-                          var valid5 = _errs37 === errors;
+                          var valid8 = _errs51 === errors;
                         } else {
-                          var valid5 = true;
+                          var valid8 = true;
                         }
-                        if (valid5) {
+                        if (valid8) {
                           if (data1.sessionId !== void 0) {
-                            const _errs39 = errors;
+                            const _errs53 = errors;
                             if (typeof data1.sessionId !== "string") {
-                              const err25 = { instancePath: instancePath + "/batch/" + i0 + "/sessionId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/sessionId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                              const err39 = { instancePath: instancePath + "/batch/" + i0 + "/sessionId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/sessionId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
                               if (vErrors === null) {
-                                vErrors = [err25];
+                                vErrors = [err39];
                               } else {
-                                vErrors.push(err25);
+                                vErrors.push(err39);
                               }
                               errors++;
                             }
-                            var valid5 = _errs39 === errors;
+                            var valid8 = _errs53 === errors;
                           } else {
-                            var valid5 = true;
+                            var valid8 = true;
                           }
-                          if (valid5) {
+                          if (valid8) {
                             if (data1.invocationId !== void 0) {
-                              const _errs41 = errors;
+                              const _errs55 = errors;
                               if (typeof data1.invocationId !== "string") {
-                                const err26 = { instancePath: instancePath + "/batch/" + i0 + "/invocationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/invocationId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                const err40 = { instancePath: instancePath + "/batch/" + i0 + "/invocationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/invocationId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
                                 if (vErrors === null) {
-                                  vErrors = [err26];
+                                  vErrors = [err40];
                                 } else {
-                                  vErrors.push(err26);
+                                  vErrors.push(err40);
                                 }
                                 errors++;
                               }
-                              var valid5 = _errs41 === errors;
+                              var valid8 = _errs55 === errors;
                             } else {
-                              var valid5 = true;
+                              var valid8 = true;
                             }
-                            if (valid5) {
+                            if (valid8) {
                               if (data1.eventType !== void 0) {
-                                const _errs43 = errors;
+                                const _errs57 = errors;
                                 if (typeof data1.eventType !== "string") {
-                                  const err27 = { instancePath: instancePath + "/batch/" + i0 + "/eventType", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/eventType/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                  const err41 = { instancePath: instancePath + "/batch/" + i0 + "/eventType", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/eventType/type", keyword: "type", params: { type: "string" }, message: "must be string" };
                                   if (vErrors === null) {
-                                    vErrors = [err27];
+                                    vErrors = [err41];
                                   } else {
-                                    vErrors.push(err27);
+                                    vErrors.push(err41);
                                   }
                                   errors++;
                                 }
-                                var valid5 = _errs43 === errors;
+                                var valid8 = _errs57 === errors;
                               } else {
-                                var valid5 = true;
+                                var valid8 = true;
                               }
-                              if (valid5) {
-                                if (data1.capturedOrganizationId !== void 0) {
-                                  let data18 = data1.capturedOrganizationId;
-                                  const _errs45 = errors;
-                                  if (errors === _errs45) {
-                                    if (typeof data18 === "string") {
-                                      if (func1(data18) > 128) {
-                                        const err28 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedOrganizationId/maxLength", keyword: "maxLength", params: { limit: 128 }, message: "must NOT have more than 128 characters" };
+                              if (valid8) {
+                                if (data1.repositoryContext !== void 0) {
+                                  let data22 = data1.repositoryContext;
+                                  const _errs59 = errors;
+                                  const _errs60 = errors;
+                                  let valid9 = false;
+                                  let passing1 = null;
+                                  const _errs61 = errors;
+                                  if (errors === _errs61) {
+                                    if (data22 && typeof data22 == "object" && !Array.isArray(data22)) {
+                                      let missing5;
+                                      if (data22.kind === void 0 && (missing5 = "kind") || data22.repoSyncId === void 0 && (missing5 = "repoSyncId")) {
+                                        const err42 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/0/required", keyword: "required", params: { missingProperty: missing5 }, message: "must have required property '" + missing5 + "'" };
                                         if (vErrors === null) {
-                                          vErrors = [err28];
+                                          vErrors = [err42];
                                         } else {
-                                          vErrors.push(err28);
+                                          vErrors.push(err42);
                                         }
                                         errors++;
                                       } else {
-                                        if (func1(data18) < 1) {
-                                          const err29 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedOrganizationId/minLength", keyword: "minLength", params: { limit: 1 }, message: "must NOT have fewer than 1 characters" };
-                                          if (vErrors === null) {
-                                            vErrors = [err29];
-                                          } else {
-                                            vErrors.push(err29);
-                                          }
-                                          errors++;
-                                        } else {
-                                          if (!pattern8.test(data18)) {
-                                            const err30 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedOrganizationId/pattern", keyword: "pattern", params: { pattern: "^[A-Za-z0-9_-]+$" }, message: 'must match pattern "^[A-Za-z0-9_-]+$"' };
+                                        const _errs63 = errors;
+                                        for (const key2 in data22) {
+                                          if (!(key2 === "kind" || key2 === "repoSyncId")) {
+                                            const err43 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/0/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key2 }, message: "must NOT have additional properties" };
                                             if (vErrors === null) {
-                                              vErrors = [err30];
+                                              vErrors = [err43];
                                             } else {
-                                              vErrors.push(err30);
+                                              vErrors.push(err43);
                                             }
                                             errors++;
+                                            break;
+                                          }
+                                        }
+                                        if (_errs63 === errors) {
+                                          if (data22.kind !== void 0) {
+                                            let data23 = data22.kind;
+                                            const _errs64 = errors;
+                                            if (typeof data23 !== "string") {
+                                              const err44 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/kind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/0/properties/kind/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                              if (vErrors === null) {
+                                                vErrors = [err44];
+                                              } else {
+                                                vErrors.push(err44);
+                                              }
+                                              errors++;
+                                            }
+                                            if ("repository_bound" !== data23) {
+                                              const err45 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/kind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/0/properties/kind/const", keyword: "const", params: { allowedValue: "repository_bound" }, message: "must be equal to constant" };
+                                              if (vErrors === null) {
+                                                vErrors = [err45];
+                                              } else {
+                                                vErrors.push(err45);
+                                              }
+                                              errors++;
+                                            }
+                                            var valid10 = _errs64 === errors;
+                                          } else {
+                                            var valid10 = true;
+                                          }
+                                          if (valid10) {
+                                            if (data22.repoSyncId !== void 0) {
+                                              let data24 = data22.repoSyncId;
+                                              const _errs66 = errors;
+                                              if (errors === _errs66) {
+                                                if (typeof data24 === "string") {
+                                                  if (func1(data24) > 128) {
+                                                    const err46 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/repoSyncId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/0/properties/repoSyncId/maxLength", keyword: "maxLength", params: { limit: 128 }, message: "must NOT have more than 128 characters" };
+                                                    if (vErrors === null) {
+                                                      vErrors = [err46];
+                                                    } else {
+                                                      vErrors.push(err46);
+                                                    }
+                                                    errors++;
+                                                  } else {
+                                                    if (func1(data24) < 1) {
+                                                      const err47 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/repoSyncId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/0/properties/repoSyncId/minLength", keyword: "minLength", params: { limit: 1 }, message: "must NOT have fewer than 1 characters" };
+                                                      if (vErrors === null) {
+                                                        vErrors = [err47];
+                                                      } else {
+                                                        vErrors.push(err47);
+                                                      }
+                                                      errors++;
+                                                    }
+                                                  }
+                                                } else {
+                                                  const err48 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/repoSyncId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/0/properties/repoSyncId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                                  if (vErrors === null) {
+                                                    vErrors = [err48];
+                                                  } else {
+                                                    vErrors.push(err48);
+                                                  }
+                                                  errors++;
+                                                }
+                                              }
+                                              var valid10 = _errs66 === errors;
+                                            } else {
+                                              var valid10 = true;
+                                            }
                                           }
                                         }
                                       }
                                     } else {
-                                      const err31 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedOrganizationId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                      const err49 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/0/type", keyword: "type", params: { type: "object" }, message: "must be object" };
                                       if (vErrors === null) {
-                                        vErrors = [err31];
+                                        vErrors = [err49];
                                       } else {
-                                        vErrors.push(err31);
+                                        vErrors.push(err49);
                                       }
                                       errors++;
                                     }
                                   }
-                                  var valid5 = _errs45 === errors;
-                                } else {
-                                  var valid5 = true;
-                                }
-                                if (valid5) {
-                                  if (data1.captureAuthorityKind !== void 0) {
-                                    let data19 = data1.captureAuthorityKind;
-                                    const _errs47 = errors;
-                                    if (typeof data19 !== "string") {
-                                      const err32 = { instancePath: instancePath + "/batch/" + i0 + "/captureAuthorityKind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/captureAuthorityKind/type", keyword: "type", params: { type: "string" }, message: "must be string" };
-                                      if (vErrors === null) {
-                                        vErrors = [err32];
+                                  var _valid2 = _errs61 === errors;
+                                  if (_valid2) {
+                                    valid9 = true;
+                                    passing1 = 0;
+                                    var props2 = true;
+                                  }
+                                  const _errs68 = errors;
+                                  if (errors === _errs68) {
+                                    if (data22 && typeof data22 == "object" && !Array.isArray(data22)) {
+                                      let missing6;
+                                      if (data22.kind === void 0 && (missing6 = "kind")) {
+                                        const err50 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/1/required", keyword: "required", params: { missingProperty: missing6 }, message: "must have required property '" + missing6 + "'" };
+                                        if (vErrors === null) {
+                                          vErrors = [err50];
+                                        } else {
+                                          vErrors.push(err50);
+                                        }
+                                        errors++;
                                       } else {
-                                        vErrors.push(err32);
+                                        const _errs70 = errors;
+                                        for (const key3 in data22) {
+                                          if (!(key3 === "kind")) {
+                                            const err51 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/1/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: key3 }, message: "must NOT have additional properties" };
+                                            if (vErrors === null) {
+                                              vErrors = [err51];
+                                            } else {
+                                              vErrors.push(err51);
+                                            }
+                                            errors++;
+                                            break;
+                                          }
+                                        }
+                                        if (_errs70 === errors) {
+                                          if (data22.kind !== void 0) {
+                                            let data25 = data22.kind;
+                                            if (typeof data25 !== "string") {
+                                              const err52 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/kind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/1/properties/kind/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                              if (vErrors === null) {
+                                                vErrors = [err52];
+                                              } else {
+                                                vErrors.push(err52);
+                                              }
+                                              errors++;
+                                            }
+                                            if ("non_repository" !== data25) {
+                                              const err53 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext/kind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/1/properties/kind/const", keyword: "const", params: { allowedValue: "non_repository" }, message: "must be equal to constant" };
+                                              if (vErrors === null) {
+                                                vErrors = [err53];
+                                              } else {
+                                                vErrors.push(err53);
+                                              }
+                                              errors++;
+                                            }
+                                          }
+                                        }
                                       }
-                                      errors++;
-                                    }
-                                    if (!(data19 === "workos" || data19 === "service_token")) {
-                                      const err33 = { instancePath: instancePath + "/batch/" + i0 + "/captureAuthorityKind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/captureAuthorityKind/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[1].properties.captureAuthorityKind.enum }, message: "must be equal to one of the allowed values" };
+                                    } else {
+                                      const err54 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf/1/type", keyword: "type", params: { type: "object" }, message: "must be object" };
                                       if (vErrors === null) {
-                                        vErrors = [err33];
+                                        vErrors = [err54];
                                       } else {
-                                        vErrors.push(err33);
+                                        vErrors.push(err54);
                                       }
                                       errors++;
                                     }
-                                    var valid5 = _errs47 === errors;
+                                  }
+                                  var _valid2 = _errs68 === errors;
+                                  if (_valid2 && valid9) {
+                                    valid9 = false;
+                                    passing1 = [passing1, 1];
                                   } else {
-                                    var valid5 = true;
+                                    if (_valid2) {
+                                      valid9 = true;
+                                      passing1 = 1;
+                                      if (props2 !== true) {
+                                        props2 = true;
+                                      }
+                                    }
                                   }
-                                  if (valid5) {
-                                    if (data1.decisionLifecycleProtocolVersion !== void 0) {
-                                      let data20 = data1.decisionLifecycleProtocolVersion;
-                                      const _errs49 = errors;
-                                      if (!(typeof data20 == "number" && (!(data20 % 1) && !isNaN(data20)) && isFinite(data20))) {
-                                        const err34 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/decisionLifecycleProtocolVersion/type", keyword: "type", params: { type: "integer" }, message: "must be integer" };
-                                        if (vErrors === null) {
-                                          vErrors = [err34];
-                                        } else {
-                                          vErrors.push(err34);
-                                        }
-                                        errors++;
+                                  if (!valid9) {
+                                    const err55 = { instancePath: instancePath + "/batch/" + i0 + "/repositoryContext", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/repositoryContext/oneOf", keyword: "oneOf", params: { passingSchemas: passing1 }, message: "must match exactly one schema in oneOf" };
+                                    if (vErrors === null) {
+                                      vErrors = [err55];
+                                    } else {
+                                      vErrors.push(err55);
+                                    }
+                                    errors++;
+                                  } else {
+                                    errors = _errs60;
+                                    if (vErrors !== null) {
+                                      if (_errs60) {
+                                        vErrors.length = _errs60;
+                                      } else {
+                                        vErrors = null;
                                       }
-                                      if (errors === _errs49) {
-                                        if (typeof data20 == "number" && isFinite(data20)) {
-                                          if (data20 > 9007199254740991 || isNaN(data20)) {
-                                            const err35 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/decisionLifecycleProtocolVersion/maximum", keyword: "maximum", params: { comparison: "<=", limit: 9007199254740991 }, message: "must be <= 9007199254740991" };
+                                    }
+                                  }
+                                  var valid8 = _errs59 === errors;
+                                } else {
+                                  var valid8 = true;
+                                }
+                                if (valid8) {
+                                  if (data1.capturedOrganizationId !== void 0) {
+                                    let data26 = data1.capturedOrganizationId;
+                                    const _errs73 = errors;
+                                    if (errors === _errs73) {
+                                      if (typeof data26 === "string") {
+                                        if (func1(data26) > 128) {
+                                          const err56 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedOrganizationId/maxLength", keyword: "maxLength", params: { limit: 128 }, message: "must NOT have more than 128 characters" };
+                                          if (vErrors === null) {
+                                            vErrors = [err56];
+                                          } else {
+                                            vErrors.push(err56);
+                                          }
+                                          errors++;
+                                        } else {
+                                          if (func1(data26) < 1) {
+                                            const err57 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedOrganizationId/minLength", keyword: "minLength", params: { limit: 1 }, message: "must NOT have fewer than 1 characters" };
                                             if (vErrors === null) {
-                                              vErrors = [err35];
+                                              vErrors = [err57];
                                             } else {
-                                              vErrors.push(err35);
+                                              vErrors.push(err57);
                                             }
                                             errors++;
                                           } else {
-                                            if (data20 < 1 || isNaN(data20)) {
-                                              const err36 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/decisionLifecycleProtocolVersion/minimum", keyword: "minimum", params: { comparison: ">=", limit: 1 }, message: "must be >= 1" };
+                                            if (!pattern8.test(data26)) {
+                                              const err58 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedOrganizationId/pattern", keyword: "pattern", params: { pattern: "^[A-Za-z0-9_-]+$" }, message: 'must match pattern "^[A-Za-z0-9_-]+$"' };
                                               if (vErrors === null) {
-                                                vErrors = [err36];
+                                                vErrors = [err58];
                                               } else {
-                                                vErrors.push(err36);
+                                                vErrors.push(err58);
                                               }
                                               errors++;
                                             }
                                           }
                                         }
+                                      } else {
+                                        const err59 = { instancePath: instancePath + "/batch/" + i0 + "/capturedOrganizationId", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/capturedOrganizationId/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                        if (vErrors === null) {
+                                          vErrors = [err59];
+                                        } else {
+                                          vErrors.push(err59);
+                                        }
+                                        errors++;
                                       }
-                                      var valid5 = _errs49 === errors;
+                                    }
+                                    var valid8 = _errs73 === errors;
+                                  } else {
+                                    var valid8 = true;
+                                  }
+                                  if (valid8) {
+                                    if (data1.captureAuthorityKind !== void 0) {
+                                      let data27 = data1.captureAuthorityKind;
+                                      const _errs75 = errors;
+                                      if (typeof data27 !== "string") {
+                                        const err60 = { instancePath: instancePath + "/batch/" + i0 + "/captureAuthorityKind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/captureAuthorityKind/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                        if (vErrors === null) {
+                                          vErrors = [err60];
+                                        } else {
+                                          vErrors.push(err60);
+                                        }
+                                        errors++;
+                                      }
+                                      if (!(data27 === "workos" || data27 === "service_token")) {
+                                        const err61 = { instancePath: instancePath + "/batch/" + i0 + "/captureAuthorityKind", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/captureAuthorityKind/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[1].properties.captureAuthorityKind.enum }, message: "must be equal to one of the allowed values" };
+                                        if (vErrors === null) {
+                                          vErrors = [err61];
+                                        } else {
+                                          vErrors.push(err61);
+                                        }
+                                        errors++;
+                                      }
+                                      var valid8 = _errs75 === errors;
                                     } else {
-                                      var valid5 = true;
+                                      var valid8 = true;
                                     }
-                                    if (valid5) {
-                                      if (data1.producer !== void 0) {
-                                        let data21 = data1.producer;
-                                        const _errs51 = errors;
-                                        if (typeof data21 !== "string") {
-                                          const err37 = { instancePath: instancePath + "/batch/" + i0 + "/producer", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/producer/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                    if (valid8) {
+                                      if (data1.decisionLifecycleProtocolVersion !== void 0) {
+                                        let data28 = data1.decisionLifecycleProtocolVersion;
+                                        const _errs77 = errors;
+                                        if (!(typeof data28 == "number" && (!(data28 % 1) && !isNaN(data28)) && isFinite(data28))) {
+                                          const err62 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/decisionLifecycleProtocolVersion/type", keyword: "type", params: { type: "integer" }, message: "must be integer" };
                                           if (vErrors === null) {
-                                            vErrors = [err37];
+                                            vErrors = [err62];
                                           } else {
-                                            vErrors.push(err37);
+                                            vErrors.push(err62);
                                           }
                                           errors++;
                                         }
-                                        if (!(data21 === "claude_code" || data21 === "codex" || data21 === "cursor" || data21 === "hermes")) {
-                                          const err38 = { instancePath: instancePath + "/batch/" + i0 + "/producer", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/producer/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[1].properties.producer.enum }, message: "must be equal to one of the allowed values" };
-                                          if (vErrors === null) {
-                                            vErrors = [err38];
-                                          } else {
-                                            vErrors.push(err38);
+                                        if (errors === _errs77) {
+                                          if (typeof data28 == "number" && isFinite(data28)) {
+                                            if (data28 > 9007199254740991 || isNaN(data28)) {
+                                              const err63 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/decisionLifecycleProtocolVersion/maximum", keyword: "maximum", params: { comparison: "<=", limit: 9007199254740991 }, message: "must be <= 9007199254740991" };
+                                              if (vErrors === null) {
+                                                vErrors = [err63];
+                                              } else {
+                                                vErrors.push(err63);
+                                              }
+                                              errors++;
+                                            } else {
+                                              if (data28 < 1 || isNaN(data28)) {
+                                                const err64 = { instancePath: instancePath + "/batch/" + i0 + "/decisionLifecycleProtocolVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/decisionLifecycleProtocolVersion/minimum", keyword: "minimum", params: { comparison: ">=", limit: 1 }, message: "must be >= 1" };
+                                                if (vErrors === null) {
+                                                  vErrors = [err64];
+                                                } else {
+                                                  vErrors.push(err64);
+                                                }
+                                                errors++;
+                                              }
+                                            }
                                           }
-                                          errors++;
                                         }
-                                        var valid5 = _errs51 === errors;
+                                        var valid8 = _errs77 === errors;
                                       } else {
-                                        var valid5 = true;
+                                        var valid8 = true;
                                       }
-                                      if (valid5) {
-                                        if (data1.toolOutcome !== void 0) {
-                                          let data22 = data1.toolOutcome;
-                                          const _errs53 = errors;
-                                          if (typeof data22 !== "string") {
-                                            const err39 = { instancePath: instancePath + "/batch/" + i0 + "/toolOutcome", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/toolOutcome/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                      if (valid8) {
+                                        if (data1.producer !== void 0) {
+                                          let data29 = data1.producer;
+                                          const _errs79 = errors;
+                                          if (typeof data29 !== "string") {
+                                            const err65 = { instancePath: instancePath + "/batch/" + i0 + "/producer", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/producer/type", keyword: "type", params: { type: "string" }, message: "must be string" };
                                             if (vErrors === null) {
-                                              vErrors = [err39];
+                                              vErrors = [err65];
                                             } else {
-                                              vErrors.push(err39);
+                                              vErrors.push(err65);
                                             }
                                             errors++;
                                           }
-                                          if (!(data22 === "succeeded" || data22 === "returned" || data22 === "failed" || data22 === "interrupted" || data22 === "prevented" || data22 === "unknown")) {
-                                            const err40 = { instancePath: instancePath + "/batch/" + i0 + "/toolOutcome", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/toolOutcome/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[1].properties.toolOutcome.enum }, message: "must be equal to one of the allowed values" };
+                                          if (!(data29 === "claude_code" || data29 === "codex" || data29 === "cursor" || data29 === "hermes")) {
+                                            const err66 = { instancePath: instancePath + "/batch/" + i0 + "/producer", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/producer/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[1].properties.producer.enum }, message: "must be equal to one of the allowed values" };
                                             if (vErrors === null) {
-                                              vErrors = [err40];
+                                              vErrors = [err66];
                                             } else {
-                                              vErrors.push(err40);
+                                              vErrors.push(err66);
                                             }
                                             errors++;
                                           }
-                                          var valid5 = _errs53 === errors;
+                                          var valid8 = _errs79 === errors;
                                         } else {
-                                          var valid5 = true;
+                                          var valid8 = true;
                                         }
-                                        if (valid5) {
-                                          if (data1.envelopeVersion !== void 0) {
-                                            let data23 = data1.envelopeVersion;
-                                            const _errs55 = errors;
-                                            if (errors === _errs55) {
-                                              if (typeof data23 == "number" && isFinite(data23)) {
-                                                if (data23 >= 4 || isNaN(data23)) {
-                                                  const err41 = { instancePath: instancePath + "/batch/" + i0 + "/envelopeVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/envelopeVersion/exclusiveMaximum", keyword: "exclusiveMaximum", params: { comparison: "<", limit: 4 }, message: "must be < 4" };
+                                        if (valid8) {
+                                          if (data1.toolOutcome !== void 0) {
+                                            let data30 = data1.toolOutcome;
+                                            const _errs81 = errors;
+                                            if (typeof data30 !== "string") {
+                                              const err67 = { instancePath: instancePath + "/batch/" + i0 + "/toolOutcome", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/toolOutcome/type", keyword: "type", params: { type: "string" }, message: "must be string" };
+                                              if (vErrors === null) {
+                                                vErrors = [err67];
+                                              } else {
+                                                vErrors.push(err67);
+                                              }
+                                              errors++;
+                                            }
+                                            if (!(data30 === "succeeded" || data30 === "returned" || data30 === "failed" || data30 === "interrupted" || data30 === "prevented" || data30 === "unknown")) {
+                                              const err68 = { instancePath: instancePath + "/batch/" + i0 + "/toolOutcome", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/toolOutcome/enum", keyword: "enum", params: { allowedValues: schema93.properties.batch.items.anyOf[1].properties.toolOutcome.enum }, message: "must be equal to one of the allowed values" };
+                                              if (vErrors === null) {
+                                                vErrors = [err68];
+                                              } else {
+                                                vErrors.push(err68);
+                                              }
+                                              errors++;
+                                            }
+                                            var valid8 = _errs81 === errors;
+                                          } else {
+                                            var valid8 = true;
+                                          }
+                                          if (valid8) {
+                                            if (data1.envelopeVersion !== void 0) {
+                                              let data31 = data1.envelopeVersion;
+                                              const _errs83 = errors;
+                                              if (errors === _errs83) {
+                                                if (typeof data31 == "number" && isFinite(data31)) {
+                                                  if (data31 >= 4 || isNaN(data31)) {
+                                                    const err69 = { instancePath: instancePath + "/batch/" + i0 + "/envelopeVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/envelopeVersion/exclusiveMaximum", keyword: "exclusiveMaximum", params: { comparison: "<", limit: 4 }, message: "must be < 4" };
+                                                    if (vErrors === null) {
+                                                      vErrors = [err69];
+                                                    } else {
+                                                      vErrors.push(err69);
+                                                    }
+                                                    errors++;
+                                                  }
+                                                } else {
+                                                  const err70 = { instancePath: instancePath + "/batch/" + i0 + "/envelopeVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/envelopeVersion/type", keyword: "type", params: { type: "number" }, message: "must be number" };
                                                   if (vErrors === null) {
-                                                    vErrors = [err41];
+                                                    vErrors = [err70];
                                                   } else {
-                                                    vErrors.push(err41);
+                                                    vErrors.push(err70);
                                                   }
                                                   errors++;
                                                 }
-                                              } else {
-                                                const err42 = { instancePath: instancePath + "/batch/" + i0 + "/envelopeVersion", schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/properties/envelopeVersion/type", keyword: "type", params: { type: "number" }, message: "must be number" };
-                                                if (vErrors === null) {
-                                                  vErrors = [err42];
-                                                } else {
-                                                  vErrors.push(err42);
-                                                }
-                                                errors++;
                                               }
+                                              var valid8 = _errs83 === errors;
+                                            } else {
+                                              var valid8 = true;
                                             }
-                                            var valid5 = _errs55 === errors;
-                                          } else {
-                                            var valid5 = true;
                                           }
                                         }
                                       }
@@ -23596,28 +24083,28 @@ function validate51(data, { instancePath = "", parentData, parentDataProperty, r
                       }
                     }
                   } else {
-                    const err43 = { instancePath: instancePath + "/batch/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/type", keyword: "type", params: { type: "object" }, message: "must be object" };
+                    const err71 = { instancePath: instancePath + "/batch/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf/1/type", keyword: "type", params: { type: "object" }, message: "must be object" };
                     if (vErrors === null) {
-                      vErrors = [err43];
+                      vErrors = [err71];
                     } else {
-                      vErrors.push(err43);
+                      vErrors.push(err71);
                     }
                     errors++;
                   }
                 }
-                var _valid0 = _errs32 === errors;
+                var _valid0 = _errs46 === errors;
                 valid3 = valid3 || _valid0;
                 if (_valid0) {
-                  if (props0 !== true) {
-                    props0 = true;
+                  if (props1 !== true) {
+                    props1 = true;
                   }
                 }
                 if (!valid3) {
-                  const err44 = { instancePath: instancePath + "/batch/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf", keyword: "anyOf", params: {}, message: "must match a schema in anyOf" };
+                  const err72 = { instancePath: instancePath + "/batch/" + i0, schemaPath: "https://api.getprimitive.ai/contracts/cli-http-v1.schema.json#/$defs/MoveIngestRequest/properties/batch/items/anyOf", keyword: "anyOf", params: {}, message: "must match a schema in anyOf" };
                   if (vErrors === null) {
-                    vErrors = [err44];
+                    vErrors = [err72];
                   } else {
-                    vErrors.push(err44);
+                    vErrors.push(err72);
                   }
                   errors++;
                   validate51.errors = vErrors;
@@ -27089,8 +27576,59 @@ async function fetchAndCacheCollectScope(cwd, dependencies = defaultDependencies
   return dependencies.writeCached(cwd, response);
 }
 
-// src/lib/post-commit-hook.ts
+// src/lib/commit-heartbeat.ts
 import { execFileSync as execFileSync3 } from "child_process";
+import { mkdirSync as mkdirSync7, readFileSync as readFileSync11, readdirSync as readdirSync4, unlinkSync as unlinkSync2 } from "fs";
+import { dirname as dirname10, join as join15, resolve as resolve6 } from "path";
+var WIRED_PATH = "prim/git-hooks-wired";
+var GIT_TIMEOUT_MS3 = 1e3;
+var MAX_STAMP_BYTES = 1024;
+function commonPath(cwd, relative4) {
+  const value = execFileSync3("git", ["rev-parse", "--git-common-dir"], {
+    cwd,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "ignore"],
+    timeout: GIT_TIMEOUT_MS3
+  }).replace(/\r?\n$/u, "");
+  if (value === "" || /[\0\r\n]/u.test(value)) throw new Error("Git returned an unsafe path");
+  return join15(resolve6(cwd, value), relative4);
+}
+function ensurePrivateParent(path) {
+  mkdirSync7(dirname10(dirname10(path)), { recursive: true, mode: 448 });
+  mkdirSync7(dirname10(path), { recursive: true, mode: 448 });
+}
+function writeStamp(path, at) {
+  ensurePrivateParent(path);
+  atomicWriteFile(path, `${JSON.stringify({ at })}
+`, { mode: 384 });
+}
+function readStampAt(path) {
+  try {
+    const raw = readFileSync11(path, "utf8");
+    if (raw.length > MAX_STAMP_BYTES) return void 0;
+    const parsed = JSON.parse(raw);
+    return typeof parsed.at === "number" && Number.isSafeInteger(parsed.at) && parsed.at > 0 ? parsed.at : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function recordHooksWired(cwd, options = {}) {
+  try {
+    const path = commonPath(cwd, WIRED_PATH);
+    if (options.onlyIfAbsent && readStampAt(path) !== void 0) return;
+    writeStamp(path, options.now ?? Date.now());
+  } catch {
+  }
+}
+function clearHooksWired(cwd) {
+  try {
+    unlinkSync2(commonPath(cwd, WIRED_PATH));
+  } catch {
+  }
+}
+
+// src/lib/git-hooks.ts
+import { execFileSync as execFileSync4 } from "child_process";
 import { createHash as createHash8, randomUUID as randomUUID2 } from "crypto";
 import {
   constants as constants5,
@@ -27099,50 +27637,28 @@ import {
   fchmodSync as fchmodSync2,
   fsyncSync as fsyncSync2,
   lstatSync as lstatSync5,
-  mkdirSync as mkdirSync7,
+  mkdirSync as mkdirSync8,
   openSync as openSync4,
-  readFileSync as readFileSync11,
+  readFileSync as readFileSync12,
+  realpathSync as realpathSync4,
   renameSync as renameSync3,
-  unlinkSync as unlinkSync2,
+  unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync4
 } from "fs";
-import { basename as basename2, dirname as dirname10, isAbsolute as isAbsolute7, resolve as resolve6 } from "path";
-var PRIM_POST_COMMIT_BLOCK_START = "# >>> prim post-commit hook >>>";
-var PRIM_POST_COMMIT_BLOCK_END = "# <<< prim post-commit hook <<<";
-var PRIM_CREATED_MARK = "prim-created-post-commit-hook";
-var PRIM_POST_REWRITE_BLOCK_START = "# >>> prim post-rewrite hook >>>";
-var PRIM_POST_REWRITE_BLOCK_END = "# <<< prim post-rewrite hook <<<";
-var PRIM_POST_REWRITE_CREATED_MARK = "prim-created-post-rewrite-hook";
-var LEGACY_PRIM_CREATED_MARK = "prim-created-hook";
-var LEGACY_PRIM_OWNED_HEADER = "# prim post-commit hook \u2014 installed by: prim hooks install (prim-managed-hook)";
-var LEGACY_GLOBAL_OWNED_HEADER = "# prim global post-commit hook (core.hooksPath) \u2014 managed by prim; do not edit.";
-var MAX_HOOK_BYTES = 1048576;
-var GIT_TIMEOUT_MS3 = 1e3;
-var SUPPORTED_SHEBANGS = /* @__PURE__ */ new Set([
-  "#!/bin/sh",
-  "#!/usr/bin/env sh",
-  "#!/bin/bash",
-  "#!/usr/bin/env bash",
-  "#!/bin/zsh",
-  "#!/usr/bin/env zsh"
-]);
-var HUSKY_V9_DISPATCHERS = /* @__PURE__ */ new Set([
-  '#!/usr/bin/env sh\n. "${0%/*}/h"',
-  '#!/usr/bin/env sh\n. "$(dirname "$0")/h"'
-]);
-var HUSKY_DIRECT_DISPATCHER = '#!/bin/sh\nexec sh "$(dirname "$0")/../post-commit"\n';
-var HUSKY_V9_RUNTIME_HASHES = /* @__PURE__ */ new Set([
-  "d6aaa6f3f7c11008c525e649161df4a93152f1e55d0887fa1d7b8d622735d380",
-  "b02cb91cab7125a9e906be723a1b85297fc435a8307d429ae845546b4ee0ecde",
-  "9db5d129c4eb822a773157d98cd8fb8f1b156b85e3193117fefe527ca6d45e91",
-  "3b2cb21335e544b4ebce658ca47af4a69d2c77026cc4d3f8b2227c34d062b207",
-  "548990e1c11285694096184993d907b258d41235461a7ca2551e3b53ff9d3a38",
-  "c029a943acea5d6e2ddbaa271a1fb22c2da55d56b5c6fb59ca804ac9a4018708",
-  "ae3413a8fe2b39372de48bdc9691f42055f089c0c7529834b2fb07a131585b6a",
-  "70200b200ca709b0622784f93839a5b2872333a917a09afddefd7dc2d8cdc680"
-]);
-function currentPostCommitBlock() {
-  return `${PRIM_POST_COMMIT_BLOCK_START}
+import { basename as basename2, dirname as dirname11, isAbsolute as isAbsolute8, join as join16, relative as relative3, resolve as resolve7, sep as sep3 } from "path";
+
+// src/lib/git-hook-legacy.ts
+import { isAbsolute as isAbsolute7 } from "path";
+var PRIM_MANAGED_MARK = "prim-managed-hook";
+var PRE_COMMIT = { hookName: "pre-commit", binName: "prim-pre-commit" };
+function blockMarkers2(spec) {
+  return {
+    start: `# >>> prim ${spec.hookName} hook >>>`,
+    end: `# <<< prim ${spec.hookName} hook <<<`
+  };
+}
+function legacyPostCommitBlock() {
+  return `# >>> prim post-commit hook >>>
 if [ "$(git config --get prim.active 2>/dev/null)" = "true" ]; then
   prim_commit_sha=$(git rev-parse --verify HEAD 2>/dev/null) || prim_commit_sha=
   case "$prim_commit_sha" in *[!0-9a-f]*|"") prim_commit_sha= ;; esac
@@ -27171,13 +27687,10 @@ if [ "$(git config --get prim.active 2>/dev/null)" = "true" ]; then
   fi
   unset prim_commit_sha
 fi
-${PRIM_POST_COMMIT_BLOCK_END}`;
+# <<< prim post-commit hook <<<`;
 }
-function postCommitHookBlock() {
-  return currentPostCommitBlock();
-}
-function postRewriteHookBlock() {
-  return `${PRIM_POST_REWRITE_BLOCK_START}
+function legacyPostRewriteBlock() {
+  return `# >>> prim post-rewrite hook >>>
 if [ "$(git config --get prim.active 2>/dev/null)" = "true" ]; then
   case "$1" in amend|rebase) prim_rewrite_source="$1" ;; *) prim_rewrite_source= ;; esac
   if [ -n "$prim_rewrite_source" ]; then
@@ -27216,22 +27729,159 @@ if [ "$(git config --get prim.active 2>/dev/null)" = "true" ]; then
   fi
   unset prim_rewrite_source
 fi
-${PRIM_POST_REWRITE_BLOCK_END}`;
-}
-var POST_COMMIT_MANAGED_HOOK = {
-  hookName: "post-commit",
-  blockStart: PRIM_POST_COMMIT_BLOCK_START,
-  blockEnd: PRIM_POST_COMMIT_BLOCK_END,
-  createdMark: PRIM_CREATED_MARK,
-  block: postCommitHookBlock
-};
-var POST_REWRITE_MANAGED_HOOK = {
-  hookName: "post-rewrite",
-  blockStart: PRIM_POST_REWRITE_BLOCK_START,
-  blockEnd: PRIM_POST_REWRITE_BLOCK_END,
-  createdMark: PRIM_POST_REWRITE_CREATED_MARK,
-  block: postRewriteHookBlock
+# <<< prim post-rewrite hook <<<`;
+}
+var PRE_COMMIT_GATE = 'if [ "$(git config --get prim.active 2>/dev/null)" = "true" ]; then';
+function preCommitLadder(fallback, failSoft) {
+  const soft = failSoft ? " || true" : "";
+  return `if command -v prim-pre-commit >/dev/null 2>&1; then
+  prim-pre-commit${soft}
+elif [ -f "./node_modules/.bin/prim-pre-commit" ]; then
+  ./node_modules/.bin/prim-pre-commit${soft}
+else
+  ${fallback} 2>/dev/null || true
+fi`;
+}
+var LADDER_ALPHA_2 = preCommitLadder("npx --yes @primitive.ai/prim pre-commit-hook", false);
+var LADDER_ALPHA_9 = preCommitLadder("npx --yes -p @primitive.ai/prim prim-pre-commit", false);
+var LADDER_ALPHA_35 = preCommitLadder("npx --yes -p @primitive.ai/prim prim-pre-commit", true);
+var PINNED_NPX_PRE_COMMIT = String.raw`npx --yes(?: --ignore-scripts)? -p @primitive\.ai/prim@[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)? prim-pre-commit`;
+var PINNED_PRE_COMMIT_RE = new RegExp(
+  String.raw`^\{ (?:${PINNED_NPX_PRE_COMMIT}|if \[ -x (?<node>'.*') \] && \[ -f (?<entry>'.*') \]; then \k<node> \k<entry>; else ${PINNED_NPX_PRE_COMMIT}; fi); \} \|\| true$`,
+  "u"
+);
+var SHELL_QUOTED_RE = /^'(?:[^']|'"'"')*'$/u;
+function decodePinnedPath(token) {
+  if (!token || !SHELL_QUOTED_RE.test(token)) return void 0;
+  const value = token.slice(1, -1).replaceAll(`'"'"'`, "'");
+  if (!isAbsolute7(value) || value.includes("\0") || value.includes("\n") || value.includes("\r")) {
+    return void 0;
+  }
+  return value;
+}
+function isPinnedPreCommitInvocation(line) {
+  const match = PINNED_PRE_COMMIT_RE.exec(line);
+  if (!match) return false;
+  if (match.groups?.node === void 0) return true;
+  return Boolean(
+    decodePinnedPath(match.groups.node) && decodePinnedPath(match.groups.entry)?.endsWith("/dist/hooks/pre-commit.js")
+  );
+}
+function isLegacyPreCommitBody(body) {
+  if (body === LADDER_ALPHA_2 || body === LADDER_ALPHA_9 || body === LADDER_ALPHA_35) return true;
+  if (isPinnedPreCommitInvocation(body)) return true;
+  const prefix = `${PRE_COMMIT_GATE}
+`;
+  if (!body.startsWith(prefix) || !body.endsWith("\nfi")) return false;
+  const inner = body.slice(prefix.length, -"\nfi".length);
+  return inner === LADDER_ALPHA_35 || isPinnedPreCommitInvocation(inner);
+}
+function isLegacyOwnedPreCommitScript(content) {
+  const original = (ladder) => `#!/bin/sh
+# prim pre-commit hook \u2014 auto-syncs affected specs on commit
+# Installed by: prim hooks install
+
+# Find the nearest node_modules/.bin with prim, or use npx
+${ladder}
+`;
+  if (content === original(LADDER_ALPHA_2) || content === original(LADDER_ALPHA_9)) return true;
+  if (content === `#!/bin/sh
+# prim pre-commit hook \u2014 installed by: prim hooks install
+
+${LADDER_ALPHA_9}
+`) {
+    return true;
+  }
+  const prefix = `#!/bin/sh
+# prim pre-commit hook \u2014 installed by: prim hooks install (${PRIM_MANAGED_MARK})
+
+`;
+  if (!content.startsWith(prefix) || !content.endsWith("\n")) return false;
+  const body = content.slice(prefix.length, -1);
+  return body === LADDER_ALPHA_35 || isPinnedPreCommitInvocation(body);
+}
+var PINNED_PACKAGE_VERSION_RE = /@primitive\.ai\/prim@[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?/gu;
+function legacyInlineHookBlock(hookName) {
+  return hookName === "post-commit" ? legacyPostCommitBlock() : legacyPostRewriteBlock();
+}
+function isRecognizedLegacyBlock(hookName, block) {
+  if (hookName === "pre-commit") {
+    const { start, end } = blockMarkers2(PRE_COMMIT);
+    const prefix = `${start}
+`;
+    const suffix = `
+${end}`;
+    if (!block.startsWith(prefix) || !block.endsWith(suffix)) return false;
+    return isLegacyPreCommitBody(block.slice(prefix.length, -suffix.length));
+  }
+  const expected = legacyInlineHookBlock(hookName);
+  const normalize2 = (text) => text.replace(PINNED_PACKAGE_VERSION_RE, "@primitive.ai/prim@<version>");
+  return normalize2(block) === normalize2(expected);
+}
+
+// src/lib/git-hooks.ts
+var LEGACY_PRIM_CREATED_MARK = "prim-created-hook";
+var LEGACY_PRIM_OWNED_HEADER = "# prim post-commit hook \u2014 installed by: prim hooks install (prim-managed-hook)";
+var LEGACY_GLOBAL_OWNED_HEADER = "# prim global post-commit hook (core.hooksPath) \u2014 managed by prim; do not edit.";
+var MAX_HOOK_BYTES = 1048576;
+var GIT_TIMEOUT_MS4 = 1e3;
+var SUPPORTED_SHEBANGS = /* @__PURE__ */ new Set([
+  "#!/bin/sh",
+  "#!/usr/bin/env sh",
+  "#!/bin/bash",
+  "#!/usr/bin/env bash",
+  "#!/bin/zsh",
+  "#!/usr/bin/env zsh"
+]);
+var HUSKY_V9_DISPATCHERS = /* @__PURE__ */ new Set([
+  '#!/usr/bin/env sh\n. "${0%/*}/h"',
+  '#!/usr/bin/env sh\n. "$(dirname "$0")/h"'
+]);
+var HUSKY_DIRECT_DISPATCHER = '#!/bin/sh\nexec sh "$(dirname "$0")/../post-commit"\n';
+var HUSKY_V9_RUNTIME_HASHES = /* @__PURE__ */ new Set([
+  "d6aaa6f3f7c11008c525e649161df4a93152f1e55d0887fa1d7b8d622735d380",
+  "b02cb91cab7125a9e906be723a1b85297fc435a8307d429ae845546b4ee0ecde",
+  "9db5d129c4eb822a773157d98cd8fb8f1b156b85e3193117fefe527ca6d45e91",
+  "3b2cb21335e544b4ebce658ca47af4a69d2c77026cc4d3f8b2227c34d062b207",
+  "548990e1c11285694096184993d907b258d41235461a7ca2551e3b53ff9d3a38",
+  "c029a943acea5d6e2ddbaa271a1fb22c2da55d56b5c6fb59ca804ac9a4018708",
+  "ae3413a8fe2b39372de48bdc9691f42055f089c0c7529834b2fb07a131585b6a",
+  "70200b200ca709b0622784f93839a5b2872333a917a09afddefd7dc2d8cdc680"
+]);
+function managedHookSpecFor(hookName) {
+  const { start, end } = blockMarkers(hookName);
+  return {
+    hookName,
+    blockStart: start,
+    blockEnd: end,
+    createdMark: `prim-created-${hookName}-hook`
+  };
+}
+var MANAGED_HOOK_SPECS = {
+  "pre-commit": managedHookSpecFor("pre-commit"),
+  "post-commit": managedHookSpecFor("post-commit"),
+  "post-rewrite": managedHookSpecFor("post-rewrite")
 };
+function managedHookSpec(hookName) {
+  return MANAGED_HOOK_SPECS[hookName];
+}
+function gitHooksMode(options = {}) {
+  try {
+    const value = execFileSync4(
+      "git",
+      ["config", ...options.global ? ["--global"] : [], "--get", "prim.gitHooks"],
+      {
+        cwd: options.cwd,
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+        timeout: GIT_TIMEOUT_MS4
+      }
+    ).trim();
+    return value === "manual" ? "manual" : "auto";
+  } catch {
+    return "auto";
+  }
+}
 function legacyFloatingInvocation() {
   return `if command -v prim-post-commit >/dev/null 2>&1; then
   prim-post-commit || true
@@ -27248,15 +27898,6 @@ fi
 `);
 }
 var PINNED_INVOCATION_RE = /^\{ if \[ -x (?<node>'.*') \] && \[ -f (?<entry>'.*') \]; then \k<node> \k<entry>; else npx --yes -p @primitive\.ai\/prim@(?<version>[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?) prim-post-commit; fi; \} \|\| true$/u;
-var SHELL_QUOTED_RE = /^'(?:[^']|'"'"')*'$/u;
-function decodePinnedPath(token) {
-  if (!token || !SHELL_QUOTED_RE.test(token)) return void 0;
-  const value = token.slice(1, -1).replaceAll(`'"'"'`, "'");
-  if (!isAbsolute7(value) || value.includes("\0") || value.includes("\n") || value.includes("\r")) {
-    return void 0;
-  }
-  return value;
-}
 function isPinnedInvocation(value) {
   const match = PINNED_INVOCATION_RE.exec(value);
   const node = decodePinnedPath(match?.groups?.node);
@@ -27289,48 +27930,122 @@ function isKnownLegacyGlobalGate(value) {
 }
 function createdScaffold(spec) {
   return Buffer.from(`#!/bin/sh
-${spec.block()}
+${managedHookBlock(spec.hookName)}
 # ${spec.createdMark}
 `);
 }
+function oldCreatedPrefixes(spec) {
+  return [
+    Buffer.from(`#!/bin/sh
+# ${spec.createdMark}
+
+`),
+    Buffer.from(`#!/bin/sh
+# ${LEGACY_PRIM_CREATED_MARK}
+
+`)
+  ];
+}
+function isOwnedStandalonePreCommit(content) {
+  return content === "#!/bin/sh\nprim-pre-commit\n" || isLegacyOwnedPreCommitScript(content);
+}
+function realpathLoose(path) {
+  const missing = [];
+  let current = resolve7(path);
+  for (; ; ) {
+    try {
+      return join16(realpathSync4.native(current), ...missing);
+    } catch {
+      const parent = dirname11(current);
+      if (parent === current) return resolve7(path);
+      missing.unshift(basename2(current));
+      current = parent;
+    }
+  }
+}
+function isWithin(path, directory) {
+  const rel = relative3(directory, path);
+  return rel === "" || !isAbsolute8(rel) && rel !== ".." && !rel.startsWith(`..${sep3}`);
+}
+function primGitHooksDirectory() {
+  try {
+    return join16(primConfigDirectory(), "git-hooks");
+  } catch {
+    return void 0;
+  }
+}
+function otherWorktreeRoots(gitRoot) {
+  try {
+    const self = realpathLoose(gitRoot);
+    return execFileSync4("git", ["worktree", "list", "--porcelain"], {
+      cwd: gitRoot,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: GIT_TIMEOUT_MS4
+    }).split("\n").flatMap((line) => line.startsWith("worktree ") ? [realpathLoose(line.slice(9))] : []).filter((root) => root !== self);
+  } catch {
+    return [];
+  }
+}
+function hookLocation(hookPath, dirs) {
+  const path = realpathLoose(hookPath);
+  if (isWithin(path, realpathLoose(dirs.gitDir)) || isWithin(path, realpathLoose(dirs.commonDir))) {
+    return "repository";
+  }
+  const primDir = primGitHooksDirectory();
+  if (primDir !== void 0 && isWithin(path, realpathLoose(primDir))) return "prim";
+  const root = realpathLoose(dirs.gitRoot);
+  if (!isWithin(path, root)) return "external";
+  const nested = otherWorktreeRoots(dirs.gitRoot).filter((other) => isWithin(other, root));
+  return nested.some((other) => isWithin(path, other)) ? "external" : "worktree";
+}
 function safeGitPath(root, value) {
   if (value.length === 0 || value !== value.trim() || value.includes("\0") || value.includes("\n") || value.includes("\r")) {
     throw new Error("Git returned an unsafe hooks path");
   }
-  return isAbsolute7(value) ? resolve6(value) : resolve6(root, value);
+  return isAbsolute8(value) ? resolve7(value) : resolve7(root, value);
 }
-function resolveEffectiveManagedHook(spec, cwd = process.cwd()) {
+function resolveEffectiveGitHook(hookName, cwd = process.cwd()) {
   const gitRoot = gitToplevel(cwd);
   if (!gitRoot) throw new Error("not a git repository");
-  const value = execFileSync3("git", ["rev-parse", "--git-path", "hooks"], {
-    cwd: gitRoot,
-    encoding: "utf8",
-    stdio: ["ignore", "pipe", "ignore"],
-    timeout: GIT_TIMEOUT_MS3
-  }).replace(/\r?\n$/u, "");
-  const hooksDir = safeGitPath(gitRoot, value);
-  if (basename2(hooksDir) === "_" && basename2(dirname10(hooksDir)) === ".husky") {
+  const lines = execFileSync4(
+    "git",
+    ["rev-parse", "--git-path", "hooks", "--absolute-git-dir", "--git-common-dir"],
+    {
+      cwd: gitRoot,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: GIT_TIMEOUT_MS4
+    }
+  ).replace(/\r?\n$/u, "").split(/\r?\n/u);
+  if (lines.length !== 3) throw new Error("Git returned unexpected repository paths");
+  const [hooksValue, gitDirValue, commonDirValue] = lines;
+  const hooksDir = safeGitPath(gitRoot, hooksValue);
+  const dirs = {
+    gitRoot,
+    gitDir: safeGitPath(gitRoot, gitDirValue),
+    commonDir: safeGitPath(gitRoot, commonDirValue)
+  };
+  if (basename2(hooksDir) === "_" && basename2(dirname11(hooksDir)) === ".husky") {
+    const hookPath2 = resolve7(dirname11(hooksDir), hookName);
     return {
       gitRoot,
       hooksDir,
-      hookPath: resolve6(dirname10(hooksDir), spec.hookName),
+      hookPath: hookPath2,
       kind: "husky_v9",
-      dispatcherPath: resolve6(hooksDir, spec.hookName)
+      dispatcherPath: resolve7(hooksDir, hookName),
+      location: hookLocation(hookPath2, dirs)
     };
   }
+  const hookPath = resolve7(hooksDir, hookName);
   return {
     gitRoot,
     hooksDir,
-    hookPath: resolve6(hooksDir, spec.hookName),
-    kind: "direct"
+    hookPath,
+    kind: "direct",
+    location: hookLocation(hookPath, dirs)
   };
 }
-function resolveEffectivePostCommitHook(cwd = process.cwd()) {
-  return resolveEffectiveManagedHook(POST_COMMIT_MANAGED_HOOK, cwd);
-}
-function resolveEffectivePostRewriteHook(cwd = process.cwd()) {
-  return resolveEffectiveManagedHook(POST_REWRITE_MANAGED_HOOK, cwd);
-}
 function assertSafeFile(path, spec) {
   if (!existsSync10(path)) return void 0;
   const stat = lstatSync5(path);
@@ -27354,7 +28069,7 @@ function assertUsableHuskyDispatcher(target, spec) {
   if (!HUSKY_V9_DISPATCHERS.has(normalizedDispatcher)) {
     throw new Error(`unrecognized Husky ${spec.hookName} dispatcher: ${target.dispatcherPath}`);
   }
-  const huskyRuntime = resolve6(dirname10(target.dispatcherPath), "h");
+  const huskyRuntime = resolve7(dirname11(target.dispatcherPath), "h");
   const runtimeStat = assertSafeFile(huskyRuntime, spec);
   const runtime = runtimeStat ? readHookFile(huskyRuntime) : void 0;
   const runtimeHash = runtime ? createHash8("sha256").update(runtime).digest("hex") : void 0;
@@ -27363,7 +28078,7 @@ function assertUsableHuskyDispatcher(target, spec) {
   }
 }
 function readHookFile(path) {
-  const value = readFileSync11(path);
+  const value = readFileSync12(path);
   return Buffer.isBuffer(value) ? value : Buffer.from(value);
 }
 function decodeHookText(content, spec) {
@@ -27412,16 +28127,107 @@ function blockRange(content, spec) {
   }
   const start = starts[0];
   const end = ends[0] + endMarker.length;
-  const current = Buffer.from(spec.block());
-  return content.subarray(start, end).equals(current) ? { kind: "current", start, end } : { kind: "stale", start, end };
+  const text = content.subarray(start, end).toString("utf8");
+  if (canonicalHookBlock(text) === canonicalHookBlock(managedHookBlock(spec.hookName))) {
+    return { kind: "current", start, end };
+  }
+  const version = hookBlockContractVersion(text);
+  if (version !== void 0 && version > GIT_HOOK_CONTRACT_VERSION) {
+    return { kind: "newer", start, end };
+  }
+  return { kind: "stale", start, end };
+}
+var HUSKY_V8_SOURCE_RE = /^\.[ \t]+"\$\(dirname(?:[ \t]+--)?[ \t]+"\$0"\)\/_\/husky\.sh"[ \t]*$/mu;
+function blockInsertionPoint(content, allowShebangless, spec, huskyV8) {
+  const shebangEnd = shellInsertionPoint(content, allowShebangless, spec);
+  if (!huskyV8) return shebangEnd;
+  const rest = content.subarray(shebangEnd).toString("utf8");
+  const match = HUSKY_V8_SOURCE_RE.exec(rest);
+  if (!match) return shebangEnd;
+  const lineEnd = match.index + match[0].length;
+  const afterLine = rest[lineEnd] === "\n" ? lineEnd + 1 : lineEnd;
+  return shebangEnd + Buffer.byteLength(rest.slice(0, afterLine), "utf8");
+}
+var HUSKY_SPEC_MAJOR_RE = /^\s*[~^]?=?\s*v?([0-9]+)(?:\.(?:[0-9]+|[xX*])){0,2}(?:-[0-9A-Za-z.-]+)?\s*$/u;
+function declaredHuskyMajor(dir) {
+  for (let current = resolve7(dir); ; ) {
+    const manifest = join16(current, "package.json");
+    if (existsSync10(manifest)) {
+      try {
+        if (lstatSync5(manifest).size > MAX_HOOK_BYTES) return void 0;
+        const parsed = JSON.parse(readFileSync12(manifest, "utf8"));
+        const range = parsed.devDependencies?.husky ?? parsed.dependencies?.husky;
+        const major = typeof range === "string" ? HUSKY_SPEC_MAJOR_RE.exec(range)?.[1] : void 0;
+        return major === void 0 ? void 0 : Number(major);
+      } catch {
+        return void 0;
+      }
+    }
+    const parent = dirname11(current);
+    if (parent === current || existsSync10(join16(current, ".git"))) return void 0;
+    current = parent;
+  }
 }
-function mergedContent(existing, allowShebangless, spec) {
-  const block = Buffer.from(spec.block());
-  if (!existing) {
+function isHuskyV8Hook(hookPath) {
+  const runtime = join16(dirname11(hookPath), "_", "husky.sh");
+  try {
+    const stat = lstatSync5(runtime);
+    return stat.isFile() && stat.size <= MAX_HOOK_BYTES && readFileSync12(runtime, "utf8").includes("husky_skip_init");
+  } catch (error) {
+    if (errorCode(error) !== "ENOENT") return false;
+  }
+  const major = declaredHuskyMajor(dirname11(dirname11(hookPath)));
+  return major !== void 0 && major <= 8;
+}
+var TERMINAL_LINE_RE = /^(?:exit|return)(?:\s|;|$)/u;
+var REDIRECT_OPERATOR_RE = /^[0-9]*(?:<<?|>>?|<&|>&|<>|>\|)$/u;
+var REDIRECT_WORD_RE = /^[0-9]*(?:<|>)/u;
+function isReplacingExec(line) {
+  if (!/^exec(?:\s|$)/u.test(line)) return false;
+  const words = line.slice(4).trim().split(/\s+/u).filter(Boolean);
+  for (let index = 0; index < words.length; index += 1) {
+    const word = words[index];
+    if (word.startsWith("#")) break;
+    if (REDIRECT_OPERATOR_RE.test(word)) {
+      index += 1;
+      continue;
+    }
+    if (!REDIRECT_WORD_RE.test(word)) return true;
+  }
+  return false;
+}
+function terminatesBefore(content, from, offset) {
+  const lines = content.subarray(from, offset).toString("utf8").split("\n");
+  return lines.some((line) => TERMINAL_LINE_RE.test(line) || isReplacingExec(line));
+}
+function mayTerminateBefore(content, from, offset) {
+  return content.subarray(from, offset).toString("utf8").split(/\n|;|&&|\|\||\||[{()]|\b(?:then|do|else)\b/u).some((part) => {
+    const command = part.trim();
+    return TERMINAL_LINE_RE.test(command) || isReplacingExec(command);
+  });
+}
+function withoutRange(content, start, end) {
+  const suffix = content.subarray(end);
+  return Buffer.concat([
+    content.subarray(0, start),
+    suffix.at(0) === 10 ? suffix.subarray(1) : suffix
+  ]);
+}
+function insertBlock(content, at, spec) {
+  return Buffer.concat([
+    content.subarray(0, at),
+    Buffer.from(managedHookBlock(spec.hookName)),
+    Buffer.from("\n"),
+    content.subarray(at)
+  ]);
+}
+function migratedLegacyContent(existing, allowShebangless, spec, huskyV8) {
+  const text = existing.toString("utf8");
+  if (spec.hookName === "pre-commit" && isOwnedStandalonePreCommit(text)) {
     return createdScaffold(spec);
   }
-  const range = blockRange(existing, spec);
-  if (spec.hookName === POST_COMMIT_MANAGED_HOOK.hookName && range.kind === "absent" && existing.toString("utf8").startsWith(`#!/bin/sh
+  if (spec.hookName !== "post-commit") return void 0;
+  if (text.startsWith(`#!/bin/sh
 ${LEGACY_GLOBAL_OWNED_HEADER}
 `)) {
     const gateAt = existing.indexOf(Buffer.from('if [ "$(git config --get prim.active'));
@@ -27436,15 +28242,13 @@ ${LEGACY_GLOBAL_OWNED_HEADER}
       existing.subarray(0, gateAt),
       existing.subarray(chainAt)
     ]);
-    const shebangEnd2 = shellInsertionPoint(withoutLegacyGate, allowShebangless, spec);
-    return Buffer.concat([
-      withoutLegacyGate.subarray(0, shebangEnd2),
-      block,
-      Buffer.from("\n"),
-      withoutLegacyGate.subarray(shebangEnd2)
-    ]);
+    return insertBlock(
+      withoutLegacyGate,
+      blockInsertionPoint(withoutLegacyGate, allowShebangless, spec, huskyV8),
+      spec
+    );
   }
-  if (spec.hookName === POST_COMMIT_MANAGED_HOOK.hookName && range.kind === "absent" && existing.toString("utf8").startsWith(`#!/bin/sh
+  if (text.startsWith(`#!/bin/sh
 ${LEGACY_PRIM_OWNED_HEADER}
 `)) {
     const prefixLength = legacyProjectPrefixLength(existing);
@@ -27453,42 +28257,59 @@ ${LEGACY_PRIM_OWNED_HEADER}
     }
     return Buffer.concat([createdScaffold(spec), existing.subarray(prefixLength)]);
   }
-  if (range.kind !== "absent") {
-    const oldCreatedPrefixes = [
-      Buffer.from(`#!/bin/sh
-# ${spec.createdMark}
-
-`),
-      ...spec.hookName === POST_COMMIT_MANAGED_HOOK.hookName ? [Buffer.from(`#!/bin/sh
-# ${LEGACY_PRIM_CREATED_MARK}
-
-`)] : []
-    ];
-    const oldCreated = oldCreatedPrefixes.some(
+  return void 0;
+}
+function mergedContent(existing, allowShebangless, spec, relocate, huskyV8) {
+  if (!existing) return { content: createdScaffold(spec), migrates: false };
+  const range = blockRange(existing, spec);
+  if (range.kind === "absent") {
+    const migrated = migratedLegacyContent(existing, allowShebangless, spec, huskyV8);
+    if (migrated) return { content: migrated, migrates: true };
+  } else if (range.kind !== "newer") {
+    const oldCreated = oldCreatedPrefixes(spec).some(
       (prefix) => range.start === prefix.length && existing.subarray(0, prefix.length).equals(prefix)
     );
     if (oldCreated) {
       const suffix = existing.subarray(range.end);
       const tail = suffix.at(0) === 10 ? suffix.subarray(1) : suffix;
-      return Buffer.concat([createdScaffold(spec), tail]);
+      return {
+        content: Buffer.concat([createdScaffold(spec), tail]),
+        migrates: range.kind === "stale"
+      };
     }
   }
   const shebangEnd = shellInsertionPoint(existing, allowShebangless, spec);
-  if (range.kind === "current" && range.start === shebangEnd) return existing;
-  let withoutBlock = existing;
-  if (range.kind !== "absent") {
-    const suffix = existing.subarray(range.end);
-    withoutBlock = Buffer.concat([
-      existing.subarray(0, range.start),
-      range.start === shebangEnd && suffix.at(0) === 10 ? suffix.subarray(1) : suffix
-    ]);
+  const insertion = blockInsertionPoint(existing, allowShebangless, spec, huskyV8);
+  switch (range.kind) {
+    case "newer":
+      return { content: existing, migrates: false };
+    case "absent":
+      return { content: insertBlock(existing, insertion, spec), migrates: false };
+    case "current":
+    case "stale": {
+      const misplaced = terminatesBefore(existing, shebangEnd, range.start) || range.start < insertion;
+      if (relocate && misplaced) {
+        const without = withoutRange(existing, range.start, range.end);
+        return {
+          content: insertBlock(
+            without,
+            blockInsertionPoint(without, allowShebangless, spec, huskyV8),
+            spec
+          ),
+          migrates: range.kind === "stale"
+        };
+      }
+      if (range.kind === "current") return { content: existing, migrates: false };
+      return {
+        content: Buffer.concat([
+          existing.subarray(0, range.start),
+          Buffer.from(managedHookBlock(spec.hookName)),
+          existing.subarray(range.end)
+        ]),
+        migrates: true
+      };
+    }
   }
-  return Buffer.concat([
-    withoutBlock.subarray(0, shebangEnd),
-    block,
-    Buffer.from("\n"),
-    withoutBlock.subarray(shebangEnd)
-  ]);
 }
 function errorCode(error) {
   return typeof error === "object" && error !== null && "code" in error ? error.code : void 0;
@@ -27509,9 +28330,9 @@ function assertTargetUnchanged(path, expected, spec, stat) {
   }
 }
 function rewriteHookAtomically(path, next, expected, spec, stat) {
-  const parent = dirname10(path);
-  mkdirSync7(parent, { recursive: true });
-  const temporary = resolve6(
+  const parent = dirname11(path);
+  mkdirSync8(parent, { recursive: true });
+  const temporary = resolve7(
     parent,
     `.${basename2(path)}.prim-${String(process.pid)}-${randomUUID2()}.tmp`
   );
@@ -27537,41 +28358,71 @@ function rewriteHookAtomically(path, next, expected, spec, stat) {
       }
     }
     try {
-      unlinkSync2(temporary);
+      unlinkSync3(temporary);
     } catch (error) {
       if (errorCode(error) !== "ENOENT") {
       }
     }
   }
 }
-function ensureEffectivePostCommitHook(cwd = process.cwd()) {
-  const target = resolveEffectivePostCommitHook(cwd);
-  return ensureTarget(target, POST_COMMIT_MANAGED_HOOK);
-}
-function ensureEffectivePostRewriteHook(cwd = process.cwd()) {
-  const target = resolveEffectivePostRewriteHook(cwd);
-  return ensureTarget(target, POST_REWRITE_MANAGED_HOOK);
+function workingLegacyBlock(content, target, spec) {
+  try {
+    const range = blockRange(content, spec);
+    if (range.kind !== "stale") return false;
+    const block = content.subarray(range.start, range.end).toString("utf8");
+    const from = shellInsertionPoint(content, target.kind === "husky_v9", spec);
+    return isRecognizedLegacyBlock(spec.hookName, block) && !mayTerminateBefore(content, from, range.start);
+  } catch {
+    return false;
+  }
 }
-function ensureTarget(target, spec, initialContent) {
+var AMBIENT_LOCATIONS = ["repository", "prim"];
+var EXPLICIT_LOCATIONS = ["repository", "prim", "worktree"];
+function ensureTarget(target, spec, policy) {
+  const result = { hookName: spec.hookName, path: target.hookPath, kind: target.kind };
+  const skip = (outcome) => ({
+    ...result,
+    changed: false,
+    outcome
+  });
   assertUsableHuskyDispatcher(target, spec);
   const stat = assertSafeFile(target.hookPath, spec);
   if (stat && target.kind === "direct" && (stat.mode & 64) === 0) {
     throw new Error(`existing ${spec.hookName} hook is not executable: ${target.hookPath}`);
   }
   const existing = stat ? readHookFile(target.hookPath) : void 0;
-  const next = !existing && initialContent !== void 0 ? Buffer.from(initialContent) : mergedContent(existing, target.kind === "husky_v9", spec);
-  if (!existing && initialContent !== void 0) {
-    const shebangEnd = shellInsertionPoint(next, target.kind === "husky_v9", spec);
-    const range = blockRange(next, spec);
-    if (range.kind !== "current" || range.start !== shebangEnd) {
-      throw new Error(`invalid initial Prim ${spec.hookName} scaffold`);
-    }
-  }
-  const contentChanged = !existing || !next.equals(existing);
-  if (contentChanged) {
-    rewriteHookAtomically(target.hookPath, next, existing, spec, stat);
+  if (policy.repairOnly && (!existing || blockRange(existing, spec).kind === "absent")) {
+    return skip("skipped");
+  }
+  const huskyV8 = isHuskyV8Hook(target.hookPath);
+  const next = mergedContent(existing, target.kind === "husky_v9", spec, policy.relocate, huskyV8);
+  if (existing && next.content.equals(existing)) return skip("unchanged");
+  if (!policy.writable(target.location)) {
+    if (target.location === "worktree") return skip("deferred");
+    return skip(existing && workingLegacyBlock(existing, target, spec) ? "kept" : "external");
+  }
+  if (next.migrates && inspectGitHookEntrypoint() !== "ready") return skip("runtime_missing");
+  rewriteHookAtomically(target.hookPath, next.content, existing, spec, stat);
+  return { ...result, changed: true, outcome: existing ? "updated" : "created" };
+}
+function ensureEffectiveGitHook(hookName, cwd = process.cwd(), options = {}) {
+  const target = resolveEffectiveGitHook(hookName, cwd);
+  if (gitHooksMode({ cwd: target.gitRoot }) === "manual") {
+    return {
+      hookName,
+      path: target.hookPath,
+      kind: target.kind,
+      changed: false,
+      outcome: "manual"
+    };
   }
-  return { path: target.hookPath, changed: contentChanged || !stat, kind: target.kind };
+  const explicit = (options.context ?? "explicit") === "explicit";
+  const allowed = explicit ? EXPLICIT_LOCATIONS : AMBIENT_LOCATIONS;
+  return ensureTarget(target, managedHookSpec(hookName), {
+    writable: (location) => allowed.includes(location),
+    relocate: explicit,
+    repairOnly: options.repairOnly === true
+  });
 }
 
 // src/lib/repository-binding.ts
@@ -27631,7 +28482,7 @@ async function bindRepository(root, options) {
 }
 
 // src/lib/workspace-id.ts
-import { execFileSync as execFileSync4 } from "child_process";
+import { execFileSync as execFileSync5 } from "child_process";
 import { randomUUID as randomUUID3 } from "crypto";
 import {
   constants as constants6,
@@ -27641,15 +28492,15 @@ import {
   fsyncSync as fsyncSync3,
   linkSync,
   lstatSync as lstatSync6,
-  mkdirSync as mkdirSync8,
+  mkdirSync as mkdirSync9,
   openSync as openSync5,
-  readFileSync as readFileSync12,
+  readFileSync as readFileSync13,
   statSync as statSync3,
-  unlinkSync as unlinkSync3,
+  unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync5
 } from "fs";
-import { dirname as dirname11, isAbsolute as isAbsolute8, join as join15, resolve as resolve7 } from "path";
-var WORKSPACE_ID_RELATIVE_PATH = join15("prim", "workspace-id");
+import { dirname as dirname12, isAbsolute as isAbsolute9, join as join17, resolve as resolve8 } from "path";
+var WORKSPACE_ID_RELATIVE_PATH = join17("prim", "workspace-id");
 var MAX_ANCESTORS = 64;
 var MAX_GIT_FILE_BYTES = 4096;
 var MAX_ID_FILE_BYTES = 128;
@@ -27677,7 +28528,7 @@ function resolveWorkspaceIdPath(cwd) {
     if (fromFilesystem) return { status: "resolved", path: fromFilesystem };
   }
   try {
-    const output = execFileSync4(
+    const output = execFileSync5(
       "git",
       ["rev-parse", "--is-inside-work-tree", "--git-path", WORKSPACE_ID_RELATIVE_PATH],
       {
@@ -27695,7 +28546,7 @@ function resolveWorkspaceIdPath(cwd) {
     }
     return {
       status: "resolved",
-      path: isAbsolute8(gitPath) ? resolve7(gitPath) : resolve7(cwd, gitPath)
+      path: isAbsolute9(gitPath) ? resolve8(gitPath) : resolve8(cwd, gitPath)
     };
   } catch (error) {
     const code = errorCode2(error);
@@ -27706,21 +28557,21 @@ function resolveWorkspaceIdPath(cwd) {
   }
 }
 function resolveFromFilesystem(cwd) {
-  let current = resolve7(cwd);
+  let current = resolve8(cwd);
   for (let depth = 0; depth < MAX_ANCESTORS; depth += 1) {
-    const dotGit = join15(current, ".git");
+    const dotGit = join17(current, ".git");
     try {
       const stat = lstatSync6(dotGit);
       if (stat.isDirectory() && isGitDirectory(dotGit)) {
-        return join15(dotGit, WORKSPACE_ID_RELATIVE_PATH);
+        return join17(dotGit, WORKSPACE_ID_RELATIVE_PATH);
       }
       if (stat.isFile() && stat.size <= MAX_GIT_FILE_BYTES) {
-        const contents = readFileSync12(dotGit, "utf8");
+        const contents = readFileSync13(dotGit, "utf8");
         const match = /^gitdir: (.+?)(?:\r?\n)?$/.exec(contents);
         if (match?.[1]) {
-          const gitDirectory = isAbsolute8(match[1]) ? resolve7(match[1]) : resolve7(current, match[1]);
+          const gitDirectory = isAbsolute9(match[1]) ? resolve8(match[1]) : resolve8(current, match[1]);
           if (isGitDirectory(gitDirectory)) {
-            return join15(gitDirectory, WORKSPACE_ID_RELATIVE_PATH);
+            return join17(gitDirectory, WORKSPACE_ID_RELATIVE_PATH);
           }
         }
       }
@@ -27731,7 +28582,7 @@ function resolveFromFilesystem(cwd) {
         return null;
       }
     }
-    const parent = dirname11(current);
+    const parent = dirname12(current);
     if (parent === current) break;
     current = parent;
   }
@@ -27739,7 +28590,7 @@ function resolveFromFilesystem(cwd) {
 }
 function isGitDirectory(path) {
   try {
-    return statSync3(join15(path, "HEAD")).isFile();
+    return statSync3(join17(path, "HEAD")).isFile();
   } catch {
     return false;
   }
@@ -27758,7 +28609,7 @@ function inspectPath(path) {
     return { status: "corrupt", path, reason: "invalid_content" };
   }
   try {
-    const contents = readFileSync12(path, "utf8");
+    const contents = readFileSync13(path, "utf8");
     const workspaceId = contents.endsWith("\n") ? contents.slice(0, -1) : contents;
     if ((contents === workspaceId || contents === `${workspaceId}
 `) && isCanonicalWorkspaceId(workspaceId)) {
@@ -27775,13 +28626,13 @@ function inspectPath(path) {
   }
 }
 function createWorkspaceId(path) {
-  const parent = dirname11(path);
+  const parent = dirname12(path);
   const workspaceId = randomUUID3();
-  const temporaryPath = join15(parent, `.workspace-id-${process.pid}-${randomUUID3()}.tmp`);
+  const temporaryPath = join17(parent, `.workspace-id-${process.pid}-${randomUUID3()}.tmp`);
   let temporaryCreated = false;
   let publishing = false;
   try {
-    mkdirSync8(parent, { recursive: true, mode: 448 });
+    mkdirSync9(parent, { recursive: true, mode: 448 });
     chmodSync4(parent, 448);
     const fd = openSync5(
       temporaryPath,
@@ -27811,7 +28662,7 @@ function createWorkspaceId(path) {
   } finally {
     if (temporaryCreated) {
       try {
-        unlinkSync3(temporaryPath);
+        unlinkSync4(temporaryPath);
       } catch {
       }
     }
@@ -27841,16 +28692,16 @@ import { createHash as createHash9, randomBytes as randomBytes4 } from "crypto";
 import {
   chmodSync as chmodSync5,
   existsSync as existsSync11,
-  mkdirSync as mkdirSync9,
-  readFileSync as readFileSync13,
-  readdirSync as readdirSync4,
+  mkdirSync as mkdirSync10,
+  readFileSync as readFileSync14,
+  readdirSync as readdirSync5,
   renameSync as renameSync4,
   rmSync as rmSync6,
   statSync as statSync4,
-  unlinkSync as unlinkSync4,
+  unlinkSync as unlinkSync5,
   writeFileSync as writeFileSync6
 } from "fs";
-import { join as join16 } from "path";
+import { join as join18 } from "path";
 
 // src/daemon/decision-digest-cache.ts
 import { randomBytes as randomBytes3 } from "crypto";
@@ -28003,10 +28854,10 @@ var STATE_VERSION = 1;
 var DRAFT_STATE_VERSION = 2;
 var NO_CURSOR = -1;
 function stateRoot(namespace) {
-  return join16(primConfigDirectory(), namespace, "decision-digests");
+  return join18(primConfigDirectory(), namespace, "decision-digests");
 }
 function draftStateRoot(namespace) {
-  return join16(primConfigDirectory(), namespace, "decision-draft-deliveries");
+  return join18(primConfigDirectory(), namespace, "decision-draft-deliveries");
 }
 function workspaceFor(cwd) {
   try {
@@ -28018,12 +28869,12 @@ function workspaceFor(cwd) {
 function statePath(args) {
   const identity = `${args.siteUrl}\0${workspaceFor(args.cwd)}\0${args.sessionId}`;
   const key = createHash9("sha256").update(identity).digest("hex");
-  return join16(stateRoot(args.namespace), `${key}.json`);
+  return join18(stateRoot(args.namespace), `${key}.json`);
 }
 function draftStatePath(args) {
   const identity = `${args.siteUrl}\0${workspaceFor(args.cwd)}\0${args.sessionId}\0${args.principalId}\0${args.organizationId}\0${args.credentialFingerprint}`;
   const key = createHash9("sha256").update(identity).digest("hex");
-  return join16(draftStateRoot(args.namespace), `${key}.json`);
+  return join18(draftStateRoot(args.namespace), `${key}.json`);
 }
 function parseState(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
@@ -28064,7 +28915,7 @@ function parseDraftState(value) {
 function readState(path) {
   if (!existsSync11(path)) return void 0;
   try {
-    return parseState(JSON.parse(readFileSync13(path, "utf8")));
+    return parseState(JSON.parse(readFileSync14(path, "utf8")));
   } catch {
     return void 0;
   }
@@ -28072,15 +28923,15 @@ function readState(path) {
 function readDraftState(path) {
   if (!existsSync11(path)) return void 0;
   try {
-    return parseDraftState(JSON.parse(readFileSync13(path, "utf8")));
+    return parseDraftState(JSON.parse(readFileSync14(path, "utf8")));
   } catch {
     return void 0;
   }
 }
 function writeStateFile(path, directory, state) {
-  mkdirSync9(directory, { recursive: true, mode: 448 });
+  mkdirSync10(directory, { recursive: true, mode: 448 });
   chmodSync5(directory, 448);
-  const temporary = join16(
+  const temporary = join18(
     directory,
     `.${path.slice(directory.length + 1)}.tmp-${process.pid}-${randomBytes4(8).toString("hex")}`
   );
@@ -28095,7 +28946,7 @@ function writeStateFile(path, directory, state) {
     renameSync4(temporary, path);
   } finally {
     try {
-      unlinkSync4(temporary);
+      unlinkSync5(temporary);
     } catch {
     }
   }
@@ -28104,14 +28955,14 @@ function cleanupStateFiles(directory, now) {
   if (!existsSync11(directory)) return;
   let names;
   try {
-    names = readdirSync4(directory);
+    names = readdirSync5(directory);
   } catch {
     return;
   }
   const files = [];
   const residue = [];
   for (const name of names) {
-    const path = join16(directory, name);
+    const path = join18(directory, name);
     try {
       const mtimeMs = statSync4(path).mtimeMs;
       if (name.endsWith(".json")) {
@@ -28126,7 +28977,7 @@ function cleanupStateFiles(directory, now) {
   const excess = files.filter((file) => !stale.some((candidate) => candidate.path === file.path)).sort((a, b) => a.mtimeMs - b.mtimeMs).slice(0, Math.max(0, files.length - CODEX_DIGEST_STATE_MAX_FILES));
   for (const file of [...stale, ...excess]) {
     try {
-      unlinkSync4(file.path);
+      unlinkSync5(file.path);
     } catch {
     }
   }
@@ -28417,8 +29268,8 @@ async function prepareCodexContext(options) {
 
 // src/hooks/normalize.ts
 import { createHash as createHash10 } from "crypto";
-import { realpathSync as realpathSync4 } from "fs";
-import { isAbsolute as isAbsolute9, resolve as resolve8 } from "path";
+import { realpathSync as realpathSync5 } from "fs";
+import { isAbsolute as isAbsolute10, resolve as resolve9 } from "path";
 var HERMES_EVENT_MAP = {
   on_session_start: "SessionStart",
   on_session_end: "SessionEnd",
@@ -28466,16 +29317,16 @@ function cursorToolUseId(value) {
 function workspaceCandidates(value) {
   if (!Array.isArray(value)) return [];
   const roots = value.filter((item) => typeof item === "string" && item.length > 0);
-  if (roots.some((root) => !isAbsolute9(root))) {
+  if (roots.some((root) => !isAbsolute10(root))) {
     throw new TypeError("Cursor workspace roots must be absolute");
   }
   return roots;
 }
 function pathIdentity(path) {
   try {
-    return realpathSync4.native(path);
+    return realpathSync5.native(path);
   } catch {
-    return resolve8(path);
+    return resolve9(path);
   }
 }
 function resolveCursorCwd(parsed) {
@@ -28490,17 +29341,17 @@ function resolveCursorCwd(parsed) {
   }
   const expectedRepo = [...repositoryRoots][0];
   const rawCwd = typeof parsed.cwd === "string" && parsed.cwd.length > 0 ? parsed.cwd : void 0;
-  if (rawCwd && !isAbsolute9(rawCwd)) {
+  if (rawCwd && !isAbsolute10(rawCwd)) {
     throw new TypeError("Cursor hook cwd must be absolute");
   }
   const envelopeCwd = rawCwd ? pathIdentity(rawCwd) : void 0;
   const input = typeof parsed.tool_input === "object" && parsed.tool_input !== null && !Array.isArray(parsed.tool_input) ? parsed.tool_input : void 0;
   const rawToolCwd = parsed.tool_name === "Shell" && typeof input?.working_directory === "string" ? input.working_directory : void 0;
   const base = envelopeCwd ?? (roots.length === 1 ? roots[0] : expectedRepo);
-  if (rawToolCwd && !isAbsolute9(rawToolCwd) && !base) {
+  if (rawToolCwd && !isAbsolute10(rawToolCwd) && !base) {
     throw new TypeError("relative Cursor tool cwd has no workspace base");
   }
-  const toolCwd = rawToolCwd ? pathIdentity(isAbsolute9(rawToolCwd) ? rawToolCwd : resolve8(base, rawToolCwd)) : void 0;
+  const toolCwd = rawToolCwd ? pathIdentity(isAbsolute10(rawToolCwd) ? rawToolCwd : resolve9(base, rawToolCwd)) : void 0;
   const selected = toolCwd ?? envelopeCwd ?? (roots.length === 1 ? roots[0] : expectedRepo);
   if (!selected) {
     throw new TypeError("Cursor hook envelope has no unambiguous workspace");
@@ -28594,7 +29445,11 @@ var CODEX_PRIM_REMINDER = primReminder(CODEX_PRIM_ACTION, CODEX_PRIM_ACTION);
 async function activeProjectRoot(cwd) {
   try {
     const root = gitToplevel(cwd);
-    if (!root || !isRepoActiveForCapture(cwd)) return null;
+    if (!root) return null;
+    if (!isRepoActiveForCapture(cwd)) {
+      if (repoActiveFlag(root) === "false") clearHooksWired(root);
+      return null;
+    }
     let shellGateActive = repoActiveFlag(root) === "true";
     if (!shellGateActive) {
       try {
@@ -28604,13 +29459,18 @@ async function activeProjectRoot(cwd) {
       }
     }
     if (shellGateActive) {
-      try {
-        ensureEffectivePostCommitHook(root);
-      } catch {
-      }
-      try {
-        ensureEffectivePostRewriteHook(root);
-      } catch {
+      for (const hookName of MANAGED_GIT_HOOK_NAMES) {
+        try {
+          const result = ensureEffectiveGitHook(hookName, root, {
+            context: "ambient",
+            repairOnly: hookName === "pre-commit"
+          });
+          if (hookName === "post-commit" && // Manual mode: the user's own wiring is expected to reach prim too.
+          ["created", "updated", "unchanged", "manual"].includes(result.outcome)) {
+            recordHooksWired(root, { onlyIfAbsent: true });
+          }
+        } catch {
+        }
       }
     }
     try {
@@ -28653,13 +29513,18 @@ async function processSessionStart(raw, agent, feedbackSignal) {
   if (typeof envelope.session_id !== "string" || envelope.session_id.length === 0) {
     return { output: buildHookOutput({}) };
   }
+  const cwd = envelope.cwd ?? process.cwd();
+  if (!gitToplevel(cwd) || !isRepoActiveForCapture(cwd)) {
+    if (repoActiveFlag(cwd) === "false") clearHooksWired(cwd);
+    return { output: agent === "cursor" ? {} : buildHookOutput({}) };
+  }
+  warmBinCache();
   kickDaemonEnsure();
   await daemonRequest(
     "session_start",
     { sessionId: envelope.session_id, callerEnv: getSiteUrl() },
     { timeoutMs: DAEMON_TIMEOUT_MS }
   );
-  const cwd = envelope.cwd ?? process.cwd();
   let projectRoot2 = null;
   let active = false;
   let skillState = { installed: 0, refreshed: 0 };
@@ -28786,7 +29651,6 @@ function emitOutput(output, acknowledge) {
   return handoffHookOutput(output, acknowledge);
 }
 async function main() {
-  warmBinCache();
   const agent = parseAgent(process.argv);
   let raw;
   try {