@pleri/olam-cli 0.1.145 → 0.1.147

package/dist/commands/skills-onboard.js

@@ -0,0 +1,227 @@
+/**
+ * olam skills onboard — fresh-install umbrella that composes the 3-step
+ * recipe into one operator-friendly verb.
+ *
+ *   olam skills onboard --name <n> --git-url <url> [--branch main]
+ *                       [--trust] [--scope project|user]
+ *
+ * Pipeline:
+ *   1. addSkillSource({ trustMethod: 'flag' }) — `--trust` is the only
+ *      sanctioned trust method here. Onboard is non-interactive by
+ *      design (it composes 4 steps; an interactive picker mid-pipeline
+ *      would be confusing). Operators who want the picker should run
+ *      `olam skills source add` directly.
+ *   2. cloneSkillSource(...) — register + clone.
+ *   3. installSkillsHookToFile(...) at --scope (default project).
+ *   4. syncSkills() — first sync.
+ *   5. Print a single success summary covering all 4 steps.
+ *
+ * Failure rollback: any failure AFTER step 1 (clone, hook install,
+ * sync) unwinds the registered source so the operator can re-try
+ * cleanly. Each step appends an audit row so the trust-coverage gate
+ * stays accurate even when the umbrella partially fails.
+ */
+import pc from 'picocolors';
+import { addSkillSource, cloneSkillSource, installSkillsHookToFile, removeSkillSource, removeSkillSourceClone, skillsHookSettingsPathFor, syncSkills, updateSkillSource, appendTrustAudit, redactUrl, } from '@olam/core/src/skill-sources/index.js';
+import { printError, printInfo, printSuccess, printHeader } from '../output.js';
+function asMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+export function registerSkillsOnboard(program) {
+    const skills = program.commands.find((c) => c.name() === 'skills') ??
+        program.command('skills').description('Manage skill sources and synchronization');
+    skills
+        .command('onboard')
+        .description('Fresh-install umbrella: register + clone + install SessionStart hook + first sync, in one verb')
+        .requiredOption('--name <name>', 'Display name (lowercase, digits, dash)')
+        .requiredOption('--git-url <url>', 'git URL (https://, git@, ssh://, file://, or absolute path)')
+        .option('--branch <branch>', 'Branch to track', 'main')
+        .option('--trust', 'Acknowledge that registering grants symlink-into-~/.claude permission (required: onboard is non-interactive)')
+        .option('--scope <scope>', 'Hook install scope: project (<cwd>/.claude/settings.json) or user (~/.claude/settings.json)', 'project')
+        .action(async (opts) => {
+        const scope = opts.scope === 'user' ? 'user' : 'project';
+        // Onboard composes 4 steps end-to-end. Surfacing a TTY trust prompt
+        // mid-pipeline would split operator attention; require --trust as
+        // the only sanctioned path here. Operators who want the picker can
+        // run `olam skills source add` (then run install-hook + sync
+        // themselves) — same surface, different ergonomic.
+        if (opts.trust !== true) {
+            try {
+                appendTrustAudit({
+                    gitUrl: redactUrl(opts.gitUrl),
+                    action: 'auto-rejected',
+                    trustMethod: 'auto-reject-tty',
+                    note: 'onboard: --trust required (composed pipeline; no mid-flow picker)',
+                });
+            }
+            catch {
+                // best-effort audit
+            }
+            printError('`olam skills onboard` requires --trust. Registering a skill source grants ' +
+                'symlink-into-~/.claude permission; onboard is non-interactive so the operator ' +
+                'must acknowledge up front. (For the interactive picker use `olam skills source add`.)');
+            process.exitCode = 1;
+            return;
+        }
+        // ---------------------------------------------------------------
+        // Step 1: register the source (writes 'added' audit entry internally).
+        // ---------------------------------------------------------------
+        let entry;
+        try {
+            entry = addSkillSource({
+                name: opts.name,
+                gitUrl: opts.gitUrl,
+                branch: opts.branch ?? 'main',
+                trustMethod: 'flag',
+            });
+        }
+        catch (err) {
+            try {
+                appendTrustAudit({
+                    gitUrl: redactUrl(opts.gitUrl),
+                    action: 'failed',
+                    trustMethod: 'flag',
+                    note: `onboard step=add: ${asMessage(err)}`,
+                });
+            }
+            catch {
+                // best-effort
+            }
+            printError(asMessage(err));
+            process.exitCode = 1;
+            return;
+        }
+        // ---------------------------------------------------------------
+        // Step 2: clone the source. Rolls back step 1 on failure.
+        // ---------------------------------------------------------------
+        let headSha;
+        try {
+            const result = cloneSkillSource({
+                gitUrl: entry.gitUrl,
+                branch: entry.branch,
+                id: entry.id,
+            });
+            headSha = result.headSha;
+            updateSkillSource(entry.id, { lastPulledSha: result.headSha });
+        }
+        catch (err) {
+            try {
+                removeSkillSource(entry.id);
+            }
+            catch {
+                // best-effort
+            }
+            try {
+                appendTrustAudit({
+                    gitUrl: redactUrl(entry.gitUrl),
+                    action: 'failed',
+                    trustMethod: 'flag',
+                    sourceId: entry.id,
+                    note: `onboard step=clone: ${asMessage(err)}`,
+                });
+            }
+            catch {
+                // best-effort
+            }
+            printError(asMessage(err));
+            process.exitCode = 1;
+            return;
+        }
+        // ---------------------------------------------------------------
+        // Step 3: install SessionStart hook. Rolls back clone + register
+        // on failure so the operator's state stays clean.
+        // ---------------------------------------------------------------
+        const hookFilePath = skillsHookSettingsPathFor(scope);
+        let hookStatus;
+        let hookBackupPath;
+        try {
+            const result = installSkillsHookToFile(hookFilePath);
+            hookStatus = result.status;
+            hookBackupPath = result.backupPath;
+        }
+        catch (err) {
+            try {
+                removeSkillSourceClone(entry.id);
+                removeSkillSource(entry.id);
+            }
+            catch {
+                // best-effort
+            }
+            try {
+                appendTrustAudit({
+                    gitUrl: redactUrl(entry.gitUrl),
+                    action: 'failed',
+                    trustMethod: 'flag',
+                    sourceId: entry.id,
+                    note: `onboard step=install-hook: ${asMessage(err)}`,
+                });
+            }
+            catch {
+                // best-effort
+            }
+            printError(`install-hook failed: ${asMessage(err)}`);
+            process.exitCode = 1;
+            return;
+        }
+        // ---------------------------------------------------------------
+        // Step 4: first sync. Rolls back clone + register on failure so
+        // the operator can re-try cleanly. Leaves the hook in place — the
+        // hook is independently useful even if THIS source failed to
+        // deploy artifacts; uninstall-hook is its own surgical action.
+        // ---------------------------------------------------------------
+        let syncedArtifacts = 0;
+        try {
+            const summary = await syncSkills({});
+            syncedArtifacts = summary.artifactCount;
+        }
+        catch (err) {
+            try {
+                removeSkillSourceClone(entry.id);
+                removeSkillSource(entry.id);
+            }
+            catch {
+                // best-effort
+            }
+            try {
+                appendTrustAudit({
+                    gitUrl: redactUrl(entry.gitUrl),
+                    action: 'failed',
+                    trustMethod: 'flag',
+                    sourceId: entry.id,
+                    note: `onboard step=sync: ${asMessage(err)}`,
+                });
+            }
+            catch {
+                // best-effort
+            }
+            printError(`sync failed: ${asMessage(err)}`);
+            process.exitCode = 1;
+            return;
+        }
+        // ---------------------------------------------------------------
+        // Single success summary covering all 4 steps.
+        // ---------------------------------------------------------------
+        printHeader('skills onboard — complete');
+        printSuccess(`registered "${entry.name}" (${entry.id}) @ ${headSha.slice(0, 8)}`);
+        printInfo('git url', entry.gitUrl);
+        printInfo('branch', entry.branch);
+        printInfo('clone', `(see ~/.olam/state/skill-sources/${entry.id})`);
+        switch (hookStatus) {
+            case 'installed':
+                printInfo('hook', `installed (${scope} scope) at ${hookFilePath}`);
+                if (hookBackupPath)
+                    printInfo('backup', hookBackupPath);
+                break;
+            case 'already-present':
+                printInfo('hook', `already installed at ${hookFilePath}`);
+                break;
+            case 'no-op':
+                printInfo('hook', `no change at ${hookFilePath}`);
+                break;
+        }
+        printInfo('sync', `${syncedArtifacts} artifact(s) deployed`);
+        console.log();
+        console.log(pc.dim('  Open a new Claude Code session to pick up the deployed skills.'));
+    });
+}
+//# sourceMappingURL=skills-onboard.js.map

package/dist/commands/skills-onboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-onboard.js","sourceRoot":"","sources":["../../src/commands/skills-onboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,yBAAyB,EACzB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,GAEV,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhF,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAUD,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;QACnD,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC;IAEpF,MAAM;SACH,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,gGAAgG,CACjG;SACA,cAAc,CAAC,eAAe,EAAE,wCAAwC,CAAC;SACzE,cAAc,CAAC,iBAAiB,EAAE,6DAA6D,CAAC;SAChG,MAAM,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,CAAC;SACtD,MAAM,CACL,SAAS,EACT,8GAA8G,CAC/G;SACA,MAAM,CACL,iBAAiB,EACjB,6FAA6F,EAC7F,SAAS,CACV;SACA,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;QAClC,MAAM,KAAK,GAAoB,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1E,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,6DAA6D;QAC7D,mDAAmD;QACnD,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,gBAAgB,CAAC;oBACf,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC9B,MAAM,EAAE,eAAe;oBACvB,WAAW,EAAE,iBAAiB;oBAC9B,IAAI,EAAE,mEAAmE;iBAC1E,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;YACD,UAAU,CACR,4EAA4E;gBAC1E,gFAAgF;gBAChF,uFAAuF,CAC1F,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,kEAAkE;QAClE,uEAAuE;QACvE,kEAAkE;QAClE,IAAI,KAAoD,CAAC;QACzD,IAAI,CAAC;YACH,KAAK,GAAG,cAAc,CAAC;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;gBAC7B,WAAW,EAAE,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,gBAAgB,CAAC;oBACf,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC9B,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,MAAM;oBACnB,IAAI,EAAE,qBAAqB,SAAS,CAAC,GAAG,CAAC,EAAE;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,kEAAkE;QAClE,0DAA0D;QAC1D,kEAAkE;QAClE,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,EAAE,EAAE,KAAK,CAAC,EAAE;aACb,CAAC,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YACzB,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,IAAI,CAAC;gBACH,gBAAgB,CAAC;oBACf,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC/B,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,MAAM;oBACnB,QAAQ,EAAE,KAAK,CAAC,EAAE;oBAClB,IAAI,EAAE,uBAAuB,SAAS,CAAC,GAAG,CAAC,EAAE;iBAC9C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,kEAAkE;QAClE,iEAAiE;QACjE,kDAAkD;QAClD,kEAAkE;QAClE,MAAM,YAAY,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,UAAqD,CAAC;QAC1D,IAAI,cAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACrD,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,IAAI,CAAC;gBACH,gBAAgB,CAAC;oBACf,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC/B,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,MAAM;oBACnB,QAAQ,EAAE,KAAK,CAAC,EAAE;oBAClB,IAAI,EAAE,8BAA8B,SAAS,CAAC,GAAG,CAAC,EAAE;iBACrD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,UAAU,CAAC,wBAAwB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,6DAA6D;QAC7D,+DAA+D;QAC/D,kEAAkE;QAClE,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;YACrC,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,IAAI,CAAC;gBACH,gBAAgB,CAAC;oBACf,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC/B,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,MAAM;oBACnB,QAAQ,EAAE,KAAK,CAAC,EAAE;oBAClB,IAAI,EAAE,sBAAsB,SAAS,CAAC,GAAG,CAAC,EAAE;iBAC7C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,UAAU,CAAC,gBAAgB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,kEAAkE;QAClE,+CAA+C;QAC/C,kEAAkE;QAClE,WAAW,CAAC,2BAA2B,CAAC,CAAC;QACzC,YAAY,CAAC,eAAe,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAClF,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,SAAS,CAAC,OAAO,EAAE,oCAAoC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,WAAW;gBACd,SAAS,CAAC,MAAM,EAAE,cAAc,KAAK,cAAc,YAAY,EAAE,CAAC,CAAC;gBACnE,IAAI,cAAc;oBAAE,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;gBACxD,MAAM;YACR,KAAK,iBAAiB;gBACpB,SAAS,CAAC,MAAM,EAAE,wBAAwB,YAAY,EAAE,CAAC,CAAC;gBAC1D,MAAM;YACR,KAAK,OAAO;gBACV,SAAS,CAAC,MAAM,EAAE,gBAAgB,YAAY,EAAE,CAAC,CAAC;gBAClD,MAAM;QACV,CAAC;QACD,SAAS,CAAC,MAAM,EAAE,GAAG,eAAe,uBAAuB,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/skills-shadow-backups.d.ts

@@ -0,0 +1,15 @@
+/**
+ * olam skills shadow-backups — manage A4's quarantine files.
+ *
+ *   olam skills shadow-backups list                       all backups + ages
+ *   olam skills shadow-backups prune [--older-than=<dur>] delete old ones
+ *                                    [--all --force]      OR delete every one
+ *                                    [--dry-run]
+ *   olam skills shadow-backups restore <path> [--force]   move back to original
+ *
+ * T2 mitigation: prevents unbounded backup growth without ever touching a
+ * non-shadow-backup file (strict `.shadow-backup-<digits>` suffix match).
+ */
+import type { Command } from 'commander';
+export declare function registerSkillsShadowBackups(program: Command): void;
+//# sourceMappingURL=skills-shadow-backups.d.ts.map

package/dist/commands/skills-shadow-backups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-shadow-backups.d.ts","sourceRoot":"","sources":["../../src/commands/skills-shadow-backups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0CzC,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsFlE"}

package/dist/commands/skills-shadow-backups.js

@@ -0,0 +1,132 @@
+/**
+ * olam skills shadow-backups — manage A4's quarantine files.
+ *
+ *   olam skills shadow-backups list                       all backups + ages
+ *   olam skills shadow-backups prune [--older-than=<dur>] delete old ones
+ *                                    [--all --force]      OR delete every one
+ *                                    [--dry-run]
+ *   olam skills shadow-backups restore <path> [--force]   move back to original
+ *
+ * T2 mitigation: prevents unbounded backup growth without ever touching a
+ * non-shadow-backup file (strict `.shadow-backup-<digits>` suffix match).
+ */
+import * as fs from 'node:fs';
+import pc from 'picocolors';
+import { listShadowBackups, pruneShadowBackups, restoreShadowBackup, parseDurationToMs, } from '@olam/core/src/skill-sources/index.js';
+import { printError, printHeader, printSuccess } from '../output.js';
+function asMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function formatAge(ms) {
+    if (ms < 0)
+        return '<future>';
+    const d = Math.floor(ms / 86_400_000);
+    if (d >= 1)
+        return `${d}d`;
+    const h = Math.floor(ms / 3_600_000);
+    if (h >= 1)
+        return `${h}h`;
+    const m = Math.floor(ms / 60_000);
+    if (m >= 1)
+        return `${m}m`;
+    const s = Math.floor(ms / 1_000);
+    return `${s}s`;
+}
+function formatSize(bytes) {
+    if (bytes < 1024)
+        return `${bytes}B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)}KB`;
+    return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
+}
+function printBackupRows(backups) {
+    for (const b of backups) {
+        const when = new Date(b.epochSeconds * 1000).toISOString().slice(0, 10);
+        console.log(`  ${pc.dim(formatAge(b.ageMs).padStart(6))}  ${formatSize(b.sizeBytes).padStart(7)}  ${pc.dim(when)}  ${b.bucket}/${pc.bold(b.basename)}`);
+    }
+}
+export function registerSkillsShadowBackups(program) {
+    const skills = program.commands.find((c) => c.name() === 'skills') ??
+        program.command('skills').description('Manage skill sources and synchronization');
+    const sb = skills
+        .command('shadow-backups')
+        .description('Manage `.shadow-backup-<epoch>` quarantine files left by `olam skills sync`');
+    sb.command('list')
+        .description('List all shadow-backup files under ~/.claude/')
+        .action(() => {
+        const all = listShadowBackups();
+        if (all.length === 0) {
+            console.log(pc.dim('No shadow-backup files under ~/.claude/.'));
+            return;
+        }
+        printHeader(`${all.length} shadow backup(s)`);
+        console.log(pc.dim('   age      size  created     bucket/basename'));
+        printBackupRows(all);
+    });
+    sb.command('prune')
+        .description('Delete shadow-backup files older than a duration (e.g. 30d) OR all of them with --all --force')
+        .option('--older-than <duration>', 'Delete backups older than this duration (e.g. 30d, 7d, 24h, 2w)', '30d')
+        .option('--all', 'Delete every shadow-backup file (requires --force)')
+        .option('--force', 'Confirm deletion when --all is used')
+        .option('--dry-run', 'Show what would be deleted without deleting')
+        .action((opts) => {
+        try {
+            let pruneOpts;
+            if (opts.all === true) {
+                if (opts.force !== true) {
+                    printError('--all requires --force (refuses accidental wipes)');
+                    process.exitCode = 1;
+                    return;
+                }
+                pruneOpts = { all: true, dryRun: opts.dryRun };
+            }
+            else {
+                const olderThanMs = parseDurationToMs(opts.olderThan);
+                if (olderThanMs === undefined) {
+                    printError(`unrecognized --older-than value "${opts.olderThan}" (expected like "30d", "7d", "24h", "2w")`);
+                    process.exitCode = 1;
+                    return;
+                }
+                pruneOpts = { olderThanMs, dryRun: opts.dryRun };
+            }
+            const result = pruneShadowBackups(pruneOpts);
+            const action = opts.dryRun ? 'would delete' : 'deleted';
+            if (result.deleted.length === 0) {
+                console.log(pc.dim(`No shadow-backups match — ${result.skipped.length} kept`));
+                return;
+            }
+            printHeader(`${action} ${result.deleted.length} shadow backup(s) (${result.skipped.length} kept)`);
+            printBackupRows(result.deleted);
+            if (opts.dryRun) {
+                console.log(pc.dim('\n(dry-run — re-run without --dry-run to delete)'));
+            }
+            else {
+                printSuccess(`pruned ${result.deleted.length} backup(s)`);
+            }
+        }
+        catch (err) {
+            printError(asMessage(err));
+            process.exitCode = 1;
+        }
+    });
+    sb.command('restore')
+        .description('Move a shadow-backup file back to its original path')
+        .argument('<path>', 'Absolute path to the .shadow-backup-<epoch> file')
+        .option('--force', 'Overwrite the original path if it already exists')
+        .action((p, opts) => {
+        try {
+            if (!fs.existsSync(p)) {
+                printError(`backup file not found: ${p}`);
+                process.exitCode = 1;
+                return;
+            }
+            const result = restoreShadowBackup({ backupPath: p, force: opts.force });
+            printSuccess(`restored → ${result.restoredTo}`);
+        }
+        catch (err) {
+            printError(asMessage(err));
+            process.exitCode = 1;
+        }
+    });
+}
+//# sourceMappingURL=skills-shadow-backups.js.map

package/dist/commands/skills-shadow-backups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-shadow-backups.js","sourceRoot":"","sources":["../../src/commands/skills-shadow-backups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,GAElB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAErE,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC,GAAG,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,GAAG,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,OAAuB;IAC9C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAC3I,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;QACnD,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC;IACpF,MAAM,EAAE,GAAG,MAAM;SACd,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,6EAA6E,CAAC,CAAC;IAE9F,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,WAAW,CAAC,GAAG,GAAG,CAAC,MAAM,mBAAmB,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC;QACrE,eAAe,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,+FAA+F,CAAC;SAC5G,MAAM,CAAC,yBAAyB,EAAE,iEAAiE,EAAE,KAAK,CAAC;SAC3G,MAAM,CAAC,OAAO,EAAE,oDAAoD,CAAC;SACrE,MAAM,CAAC,SAAS,EAAE,qCAAqC,CAAC;SACxD,MAAM,CAAC,WAAW,EAAE,6CAA6C,CAAC;SAClE,MAAM,CAAC,CAAC,IAA6E,EAAE,EAAE;QACxF,IAAI,CAAC;YACH,IAAI,SAAmD,CAAC;YACxD,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;gBACtB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBACxB,UAAU,CAAC,mDAAmD,CAAC,CAAC;oBAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBACD,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,UAAU,CACR,oCAAoC,IAAI,CAAC,SAAS,4CAA4C,CAC/F,CAAC;oBACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBACD,SAAS,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACnD,CAAC;YAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,6BAA6B,MAAM,CAAC,OAAO,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC;gBAC/E,OAAO;YACT,CAAC;YACD,WAAW,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,sBAAsB,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC;YACnG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,UAAU,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,qDAAqD,CAAC;SAClE,QAAQ,CAAC,QAAQ,EAAE,kDAAkD,CAAC;SACtE,MAAM,CAAC,SAAS,EAAE,kDAAkD,CAAC;SACrE,MAAM,CAAC,CAAC,CAAS,EAAE,IAAyB,EAAE,EAAE;QAC/C,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;gBAC1C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACzE,YAAY,CAAC,cAAc,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/skills-source.d.ts

@@ -8,5 +8,30 @@
  *   olam skills source show <id>
  */
 import type { Command } from 'commander';
+/**
+ * Post-add interactive picker — surfaces two follow-ups after a
+ * successful `source add` so operators don't have to remember the
+ * separate `sync` + `install-hook` invocations:
+ *
+ *   1. Sync now? [Y/n]
+ *   2. Install SessionStart hook so future sessions auto-sync? [Y/n]
+ *      (only offered if hook not already installed at the chosen scope)
+ *
+ * Default Yes on both — onboard-friendly without forcing the umbrella
+ * verb (`olam skills onboard`) on operators who want the picker shape.
+ *
+ * Non-interactive (no-TTY) callers skip both prompts silently and keep
+ * the pre-Phase-D behavior. CLI flags `--sync-now` / `--no-sync-now`
+ * / `--install-hook` / `--no-install-hook` give scripts explicit
+ * control.
+ */
+export interface PostAddPromptInput {
+    hookAlreadyInstalled: boolean;
+}
+export interface PostAddPromptResult {
+    syncNow: boolean;
+    installHook: boolean;
+}
+export type PostAddPromptFn = (input: PostAddPromptInput) => Promise<PostAddPromptResult>;
 export declare function registerSkillsSource(program: Command): void;
 //# sourceMappingURL=skills-source.d.ts.map

package/dist/commands/skills-source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills-source.d.ts","sourceRoot":"","sources":["../../src/commands/skills-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmBzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2H3D"}
+{"version":3,"file":"skills-source.d.ts","sourceRoot":"","sources":["../../src/commands/skills-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+EzC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,kBAAkB;IACjC,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AACD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AACD,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAyB1F,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgX3D"}