@pleri/olam-cli 0.1.153 → 0.1.157

package/dist/commands/flywheel/ping.js

@@ -0,0 +1,79 @@
+/**
+ * `olam flywheel ping` — no-op subcommand for cold-start telemetry.
+ *
+ * Establishes the measurement baseline OQ12 references: before porting any
+ * subcommand from atlas-toolbox to olam, we need to know what cold-start
+ * overhead the shim → olam binary path adds vs the current bash-invoked
+ * scripts. Operators run `time olam flywheel ping` on a representative
+ * machine + record the result.
+ *
+ * Branch decision (per plan A2):
+ *   ≤200ms total invocation  → full-port for A3+ subcommands (drop hybrid hedge S2)
+ *   200-500ms                → full-port with follow-up perf-investigation tagged
+ *   >500ms                   → escalate to hybrid model (heavy helpers ported;
+ *                              emit-breadcrumb stays as native script delegating)
+ *
+ * Telemetry baseline written to ~/.local/share/olam/flywheel-baseline.json.
+ * Permanent telemetry surface for `olam doctor` (promoted in task A13).
+ */
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+const COLD_START_BUDGET_GOOD_MS = 200;
+const COLD_START_BUDGET_FAIR_MS = 500;
+function classifyColdStart(coldStartMs) {
+    if (coldStartMs <= COLD_START_BUDGET_GOOD_MS)
+        return 'good';
+    if (coldStartMs <= COLD_START_BUDGET_FAIR_MS)
+        return 'fair';
+    return 'over-budget';
+}
+function readOlamVersion() {
+    try {
+        // packageVersion is injected at build time by the bundle script;
+        // fall back to env when running via `npm run dev`.
+        return process.env.npm_package_version ?? '0.0.0-dev';
+    }
+    catch {
+        return '0.0.0-dev';
+    }
+}
+function writeBaseline(record) {
+    const baselinePath = join(homedir(), '.local', 'share', 'olam', 'flywheel-baseline.json');
+    mkdirSync(dirname(baselinePath), { recursive: true });
+    writeFileSync(baselinePath, JSON.stringify(record, null, 2) + '\n', 'utf8');
+    return baselinePath;
+}
+export function registerFlywheelPing(parent) {
+    parent
+        .command('ping')
+        .description('No-op cold-start telemetry surface (measures + records flywheel CLI baseline)')
+        .option('--json', 'emit baseline record as JSON instead of human-readable status')
+        .option('--no-record-baseline', 'do not write ~/.local/share/olam/flywheel-baseline.json (default: record)')
+        .action((opts) => {
+        // We measure from the Node process load tick. uptime() returns seconds since
+        // the process started, including module-resolution + commander parsing —
+        // exactly the operator-visible cold-start surface we want to measure.
+        const coldStartMs = Math.round(process.uptime() * 1000);
+        const record = {
+            cold_start_ms: coldStartMs,
+            olam_version: readOlamVersion(),
+            measured_at: new Date().toISOString(),
+            classification: classifyColdStart(coldStartMs),
+        };
+        let baselinePath;
+        if (opts.recordBaseline !== false) {
+            baselinePath = writeBaseline(record);
+        }
+        if (opts.json) {
+            process.stdout.write(JSON.stringify(record) + '\n');
+        }
+        else {
+            process.stdout.write(`flywheel ping: cold_start=${record.cold_start_ms}ms classification=${record.classification} version=${record.olam_version}\n`);
+            if (baselinePath !== undefined) {
+                process.stdout.write(`baseline recorded: ${baselinePath}\n`);
+            }
+        }
+    });
+}
+//# sourceMappingURL=ping.js.map

package/dist/commands/flywheel/ping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ping.js","sourceRoot":"","sources":["../../../src/commands/flywheel/ping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AActC,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,IAAI,WAAW,IAAI,yBAAyB;QAAE,OAAO,MAAM,CAAC;IAC5D,IAAI,WAAW,IAAI,yBAAyB;QAAE,OAAO,MAAM,CAAC;IAC5D,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,iEAAiE;QACjE,mDAAmD;QACnD,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,WAAW,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAwB;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC1F,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5E,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+EAA+E,CAAC;SAC5F,MAAM,CAAC,QAAQ,EAAE,+DAA+D,CAAC;SACjF,MAAM,CACL,sBAAsB,EACtB,2EAA2E,CAC5E;SACA,MAAM,CAAC,CAAC,IAAyB,EAAE,EAAE;QACpC,6EAA6E;QAC7E,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QACxD,MAAM,MAAM,GAAqB;YAC/B,aAAa,EAAE,WAAW;YAC1B,YAAY,EAAE,eAAe,EAAE;YAC/B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,cAAc,EAAE,iBAAiB,CAAC,WAAW,CAAC;SAC/C,CAAC;QAEF,IAAI,YAAgC,CAAC;QACrC,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YAClC,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,MAAM,CAAC,aAAa,qBAAqB,MAAM,CAAC,cAAc,YAAY,MAAM,CAAC,YAAY,IAAI,CAC/H,CAAC;YACF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,YAAY,IAAI,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/flywheel/sanitize-persona-output.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `olam flywheel sanitize-persona-output` — stub registered in task A1.
+ * Implementation lands in task A6 (port from `shared/engineering/scripts/sanitize-persona-output.py`).
+ */
+import type { Command } from 'commander';
+export declare function registerFlywheelSanitizePersonaOutput(parent: Command): void;
+//# sourceMappingURL=sanitize-persona-output.d.ts.map

package/dist/commands/flywheel/sanitize-persona-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-persona-output.d.ts","sourceRoot":"","sources":["../../../src/commands/flywheel/sanitize-persona-output.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAY3E"}

package/dist/commands/flywheel/sanitize-persona-output.js

@@ -0,0 +1,14 @@
+/**
+ * `olam flywheel sanitize-persona-output` — stub registered in task A1.
+ * Implementation lands in task A6 (port from `shared/engineering/scripts/sanitize-persona-output.py`).
+ */
+export function registerFlywheelSanitizePersonaOutput(parent) {
+    parent
+        .command('sanitize-persona-output')
+        .description('Pipe persona output through sanitization rules (stdin→stdout; rejects header-injection, slug-mismatch) (stub — implemented in task A6)')
+        .action(() => {
+        console.error('olam flywheel sanitize-persona-output: not yet implemented (task A6). See docs/plans/olam-flywheel-cli-namespace/phase-a-tasks.md');
+        process.exit(2);
+    });
+}
+//# sourceMappingURL=sanitize-persona-output.js.map

package/dist/commands/flywheel/sanitize-persona-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-persona-output.js","sourceRoot":"","sources":["../../../src/commands/flywheel/sanitize-persona-output.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,UAAU,qCAAqC,CAAC,MAAe;IACnE,MAAM;SACH,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CACV,wIAAwI,CACzI;SACA,MAAM,CAAC,GAAG,EAAE;QACX,OAAO,CAAC,KAAK,CACX,mIAAmI,CACpI,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/hermes-kg-hook.d.ts

@@ -0,0 +1,36 @@
+/**
+ * hermes-kg-hook.ts — install / uninstall the kg-first.sh hook for Hermes.
+ *
+ * Shared by:
+ *   - `olam hermes bootstrap` (via runHermesBootstrap)
+ *   - `olam kg install-hook --for hermes`
+ *   - `olam kg uninstall-hook --for hermes`
+ *
+ * Writes the bundled kg-first.sh template from hermes-bundle/ into
+ * ~/.hermes/hooks/kg-first.sh and makes it executable. Idempotent:
+ * re-installing over an identical file is detected via content hash.
+ *
+ * HERMES_KG_HOOK_SENTINEL is embedded in the script body (the comment
+ * `# OLAM_KG_HOOK` present in the template). It is the stable string
+ * both this module and the config-entry writer use to detect presence.
+ */
+/** Stable sentinel that appears in both the hook script and config entry. */
+export declare const HERMES_KG_HOOK_SENTINEL = "OLAM_KG_HOOK";
+type HermesKgHookStatus = 'installed' | 'already-present' | 'dry-run';
+export interface HermesKgHookResult {
+    readonly status: HermesKgHookStatus;
+    readonly destPath: string;
+}
+/**
+ * Install kg-first.sh into hooksDir.
+ * Returns 'already-present' when an identical script is already there.
+ * Returns 'dry-run' when dryRun=true.
+ */
+export declare function installKgFirstHookForHermes(hooksDir: string, dryRun: boolean): HermesKgHookResult;
+/**
+ * Uninstall: remove kg-first.sh if it contains the sentinel.
+ * Returns 'already-present' (noop) when the file doesn't exist or lacks the sentinel.
+ */
+export declare function uninstallKgFirstHookForHermes(hooksDir: string, dryRun: boolean): HermesKgHookResult;
+export {};
+//# sourceMappingURL=hermes-kg-hook.d.ts.map

package/dist/commands/hermes-kg-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-kg-hook.d.ts","sourceRoot":"","sources":["../../src/commands/hermes-kg-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AAEtD,KAAK,kBAAkB,GAAG,WAAW,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAmBD;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,GACd,kBAAkB,CAqBpB;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,GACd,kBAAkB,CAmBpB"}

package/dist/commands/hermes-kg-hook.js

@@ -0,0 +1,80 @@
+/**
+ * hermes-kg-hook.ts — install / uninstall the kg-first.sh hook for Hermes.
+ *
+ * Shared by:
+ *   - `olam hermes bootstrap` (via runHermesBootstrap)
+ *   - `olam kg install-hook --for hermes`
+ *   - `olam kg uninstall-hook --for hermes`
+ *
+ * Writes the bundled kg-first.sh template from hermes-bundle/ into
+ * ~/.hermes/hooks/kg-first.sh and makes it executable. Idempotent:
+ * re-installing over an identical file is detected via content hash.
+ *
+ * HERMES_KG_HOOK_SENTINEL is embedded in the script body (the comment
+ * `# OLAM_KG_HOOK` present in the template). It is the stable string
+ * both this module and the config-entry writer use to detect presence.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { createHash } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+/** Stable sentinel that appears in both the hook script and config entry. */
+export const HERMES_KG_HOOK_SENTINEL = 'OLAM_KG_HOOK';
+function bundleDir() {
+    // Resolve hermes-bundle/ relative to this source file.
+    // In the published tarball: dist/commands/hermes-kg-hook.js → ../../hermes-bundle/
+    // In source (tsx): src/commands/hermes-kg-hook.ts → ../../hermes-bundle/
+    const thisFile = fileURLToPath(import.meta.url);
+    return path.resolve(path.dirname(thisFile), '..', '..', 'hermes-bundle');
+}
+function templateContent() {
+    const templatePath = path.join(bundleDir(), 'kg-first.sh');
+    return fs.readFileSync(templatePath);
+}
+function sha256(buf) {
+    return createHash('sha256').update(buf).digest('hex');
+}
+/**
+ * Install kg-first.sh into hooksDir.
+ * Returns 'already-present' when an identical script is already there.
+ * Returns 'dry-run' when dryRun=true.
+ */
+export function installKgFirstHookForHermes(hooksDir, dryRun) {
+    const destPath = path.join(hooksDir, 'kg-first.sh');
+    const template = templateContent();
+    // Idempotency: compare content hashes
+    if (fs.existsSync(destPath)) {
+        const existing = fs.readFileSync(destPath);
+        if (sha256(existing) === sha256(template)) {
+            return { status: 'already-present', destPath };
+        }
+    }
+    if (dryRun) {
+        return { status: 'dry-run', destPath };
+    }
+    fs.mkdirSync(hooksDir, { recursive: true });
+    fs.writeFileSync(destPath, template);
+    fs.chmodSync(destPath, 0o755);
+    return { status: 'installed', destPath };
+}
+/**
+ * Uninstall: remove kg-first.sh if it contains the sentinel.
+ * Returns 'already-present' (noop) when the file doesn't exist or lacks the sentinel.
+ */
+export function uninstallKgFirstHookForHermes(hooksDir, dryRun) {
+    const destPath = path.join(hooksDir, 'kg-first.sh');
+    if (!fs.existsSync(destPath)) {
+        return { status: 'already-present', destPath };
+    }
+    const content = fs.readFileSync(destPath, 'utf-8');
+    if (!content.includes(HERMES_KG_HOOK_SENTINEL)) {
+        // Not ours — do not remove
+        return { status: 'already-present', destPath };
+    }
+    if (dryRun) {
+        return { status: 'dry-run', destPath };
+    }
+    fs.unlinkSync(destPath);
+    return { status: 'installed', destPath };
+}
+//# sourceMappingURL=hermes-kg-hook.js.map

package/dist/commands/hermes-kg-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-kg-hook.js","sourceRoot":"","sources":["../../src/commands/hermes-kg-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAStD,SAAS,SAAS;IAChB,uDAAuD;IACvD,mFAAmF;IACnF,yEAAyE;IACzE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;IAC3D,OAAO,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,MAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,sCAAsC;IACtC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE9B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAgB,EAChB,MAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAEpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC/C,2BAA2B;QAC3B,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC"}

package/dist/commands/hermes.d.ts

@@ -0,0 +1,46 @@
+/**
+ * `olam hermes bootstrap` — one-shot wiring of a fresh Hermes install to olam.
+ *
+ * Performs:
+ *   1. Validates ~/.hermes/config.yaml exists (refuses with actionable message if not).
+ *   2. Adds mcp_servers.olam (resolved via `which olam` or argv[1] fallback).
+ *   3. Optionally adds mcp_servers.agentmemory-atlas when bridge URL + secret
+ *      are available (env vars or --bridge-url / --bridge-secret flags).
+ *   4. Installs kg-first.sh hook via installKgFirstHookForHermes.
+ *   5. Mirrors ~/.claude/skills/* symlinks into ~/.hermes/skills/.
+ *   6. Sets terminal.backend = 'local' (unless --keep-docker is given).
+ *   7. Prints a summary of added / skipped / next-steps.
+ *
+ * All mutations are idempotent: re-running is safe.
+ * --dry-run prints the planned diff without writing anything.
+ */
+import type { Command } from 'commander';
+import { type HermesKgHookResult } from './hermes-kg-hook.js';
+interface HermesBootstrapOptions {
+    readonly dryRun?: boolean;
+    readonly keepDocker?: boolean;
+    readonly bridgeUrl?: string;
+    readonly bridgeSecret?: string;
+}
+type HermesConfig = Record<string, unknown>;
+export declare function hermesConfigPath(): string;
+export declare function hermesHooksDir(): string;
+export declare function hermesSkillsDir(): string;
+export declare function claudeSkillsDir(): string;
+interface BootstrapSummary {
+    added: string[];
+    skipped: string[];
+    nextSteps: string[];
+}
+export declare function runHermesBootstrap(opts: HermesBootstrapOptions, deps?: {
+    readonly configPath?: string;
+    readonly olamBin?: string;
+    readonly workspaceDir?: string;
+    readonly readConfig?: (p: string) => HermesConfig;
+    readonly writeConfig?: (p: string, c: HermesConfig) => void;
+    readonly mirrorSkills?: (dryRun: boolean, summary: BootstrapSummary) => void;
+    readonly installHook?: (hooksDir: string, dryRun: boolean) => HermesKgHookResult;
+}): Promise<void>;
+export declare function registerHermes(program: Command): void;
+export {};
+//# sourceMappingURL=hermes.d.ts.map

package/dist/commands/hermes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes.d.ts","sourceRoot":"","sources":["../../src/commands/hermes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOzC,OAAO,EAGL,KAAK,kBAAkB,EAExB,MAAM,qBAAqB,CAAC;AAI7B,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAID,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAI5C,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAoDD,UAAU,gBAAgB;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AA6HD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,EAC5B,IAAI,GAAE;IACJ,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,YAAY,CAAC;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,KAAK,IAAI,CAAC;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC7E,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,kBAAkB,CAAC;CAC7E,GACL,OAAO,CAAC,IAAI,CAAC,CAwGf;AA+CD,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAerD"}

package/dist/commands/hermes.js

@@ -0,0 +1,320 @@
+/**
+ * `olam hermes bootstrap` — one-shot wiring of a fresh Hermes install to olam.
+ *
+ * Performs:
+ *   1. Validates ~/.hermes/config.yaml exists (refuses with actionable message if not).
+ *   2. Adds mcp_servers.olam (resolved via `which olam` or argv[1] fallback).
+ *   3. Optionally adds mcp_servers.agentmemory-atlas when bridge URL + secret
+ *      are available (env vars or --bridge-url / --bridge-secret flags).
+ *   4. Installs kg-first.sh hook via installKgFirstHookForHermes.
+ *   5. Mirrors ~/.claude/skills/* symlinks into ~/.hermes/skills/.
+ *   6. Sets terminal.backend = 'local' (unless --keep-docker is given).
+ *   7. Prints a summary of added / skipped / next-steps.
+ *
+ * All mutations are idempotent: re-running is safe.
+ * --dry-run prints the planned diff without writing anything.
+ */
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import * as child_process from 'node:child_process';
+import { parse as yamlParse, stringify as yamlStringify } from 'yaml';
+import { printError, printInfo, printSuccess, printWarning } from '../output.js';
+import { installKgFirstHookForHermes, uninstallKgFirstHookForHermes, HERMES_KG_HOOK_SENTINEL, } from './hermes-kg-hook.js';
+// ── Paths ─────────────────────────────────────────────────────────────────────
+export function hermesConfigPath() {
+    return path.join(os.homedir(), '.hermes', 'config.yaml');
+}
+export function hermesHooksDir() {
+    return path.join(os.homedir(), '.hermes', 'hooks');
+}
+export function hermesSkillsDir() {
+    return path.join(os.homedir(), '.hermes', 'skills');
+}
+export function claudeSkillsDir() {
+    return path.join(os.homedir(), '.claude', 'skills');
+}
+// ── YAML helpers ──────────────────────────────────────────────────────────────
+function readHermesConfig(configPath) {
+    const raw = fs.readFileSync(configPath, 'utf-8');
+    const parsed = yamlParse(raw);
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error(`${configPath} is not a YAML mapping`);
+    }
+    return parsed;
+}
+function writeHermesConfig(configPath, config) {
+    fs.writeFileSync(configPath, yamlStringify(config), 'utf-8');
+}
+// ── Olam binary resolution ────────────────────────────────────────────────────
+function resolveOlamBinary() {
+    // Prefer `which olam` from PATH.
+    try {
+        const result = child_process.spawnSync('which', ['olam'], { encoding: 'utf-8' });
+        const found = result.stdout.trim();
+        if (found && fs.existsSync(found))
+            return found;
+    }
+    catch {
+        // fall through
+    }
+    // Fallback to process.argv[1] (the running CLI binary).
+    return process.argv[1] ?? 'olam';
+}
+// ── Workspace dir resolution ──────────────────────────────────────────────────
+function resolveWorkspaceDir() {
+    // Try `olam config get workspace.dir`; fall back to cwd.
+    try {
+        const result = child_process.spawnSync(process.argv[0] ?? 'node', [process.argv[1] ?? 'olam', 'config', 'get', 'workspace.dir'], { encoding: 'utf-8' });
+        const out = result.stdout.trim();
+        if (out && fs.existsSync(out))
+            return out;
+    }
+    catch {
+        // fall through
+    }
+    return process.cwd();
+}
+// ── Sub-operations ────────────────────────────────────────────────────────────
+function ensureMcpOlam(config, olamBin, workspaceDir, dryRun, summary) {
+    const mcpServers = (config['mcp_servers'] ?? {});
+    if (mcpServers['olam'] !== undefined) {
+        summary.skipped.push('mcp_servers.olam (already present)');
+        return config;
+    }
+    if (dryRun) {
+        summary.added.push(`mcp_servers.olam → { command: "${olamBin}", args: ["mcp","serve"], cwd: "${workspaceDir}" }`);
+        return config;
+    }
+    const updated = {
+        ...config,
+        mcp_servers: {
+            ...mcpServers,
+            olam: {
+                command: olamBin,
+                args: ['mcp', 'serve'],
+                cwd: workspaceDir,
+            },
+        },
+    };
+    summary.added.push('mcp_servers.olam');
+    return updated;
+}
+function ensureMcpAgentMemory(config, bridgeUrl, bridgeSecret, dryRun, summary) {
+    const mcpServers = (config['mcp_servers'] ?? {});
+    const key = 'agentmemory-atlas';
+    if (mcpServers[key] !== undefined) {
+        summary.skipped.push(`mcp_servers.${key} (already present)`);
+        return config;
+    }
+    if (dryRun) {
+        summary.added.push(`mcp_servers.${key} → { bridge_url, bridge_secret }`);
+        return config;
+    }
+    const updated = {
+        ...config,
+        mcp_servers: {
+            ...mcpServers,
+            [key]: {
+                bridge_url: bridgeUrl,
+                bridge_secret: bridgeSecret,
+            },
+        },
+    };
+    summary.added.push(`mcp_servers.${key}`);
+    return updated;
+}
+function ensureTerminalBackendLocal(config, dryRun, summary) {
+    const terminal = (config['terminal'] ?? {});
+    if (terminal['backend'] === 'local') {
+        summary.skipped.push('terminal.backend (already local)');
+        return config;
+    }
+    if (dryRun) {
+        summary.added.push('terminal.backend = local');
+        return config;
+    }
+    return {
+        ...config,
+        terminal: { ...terminal, backend: 'local' },
+    };
+}
+function mirrorSkillSymlinks(dryRun, summary) {
+    const srcDir = claudeSkillsDir();
+    if (!fs.existsSync(srcDir)) {
+        summary.skipped.push('skills mirror (no ~/.claude/skills/ found)');
+        return;
+    }
+    const destDir = hermesSkillsDir();
+    if (!dryRun) {
+        fs.mkdirSync(destDir, { recursive: true });
+    }
+    const entries = fs.readdirSync(srcDir);
+    let mirrored = 0;
+    let collisions = 0;
+    for (const entry of entries) {
+        const srcPath = path.join(srcDir, entry);
+        const destPath = path.join(destDir, entry);
+        if (fs.existsSync(destPath) || fs.lstatSync(srcPath).isFile()) {
+            // Skip collisions and non-directory entries (skills are dirs)
+            if (fs.existsSync(destPath))
+                collisions++;
+            continue;
+        }
+        if (dryRun) {
+            mirrored++;
+            continue;
+        }
+        try {
+            fs.symlinkSync(srcPath, destPath);
+            mirrored++;
+        }
+        catch (err) {
+            printWarning(`skills mirror: skipping ${entry} — ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    if (mirrored > 0)
+        summary.added.push(`${mirrored} skill symlink(s) → ~/.hermes/skills/`);
+    if (collisions > 0)
+        summary.skipped.push(`${collisions} skill symlink collision(s)`);
+}
+// ── Bootstrap action ──────────────────────────────────────────────────────────
+export async function runHermesBootstrap(opts, deps = {}) {
+    const dryRun = opts.dryRun ?? false;
+    const keepDocker = opts.keepDocker ?? false;
+    const configPath = deps.configPath ?? hermesConfigPath();
+    const olamBin = deps.olamBin ?? resolveOlamBinary();
+    const workspaceDir = deps.workspaceDir ?? resolveWorkspaceDir();
+    const readConfig = deps.readConfig ?? readHermesConfig;
+    const writeConfig = deps.writeConfig ?? writeHermesConfig;
+    const mirrorSkillsFn = deps.mirrorSkills ?? mirrorSkillSymlinks;
+    const installHookFn = deps.installHook ?? installKgFirstHookForHermes;
+    // Guard: ~/.hermes/config.yaml must exist
+    if (!fs.existsSync(configPath)) {
+        printError(`~/.hermes/config.yaml not found at ${configPath}`);
+        printInfo('remedy', 'Install Hermes first: https://hermes.ai/docs/install — then re-run `olam hermes bootstrap`');
+        process.exitCode = 1;
+        return;
+    }
+    const summary = { added: [], skipped: [], nextSteps: [] };
+    // Load current config
+    let config;
+    try {
+        config = readConfig(configPath);
+    }
+    catch (err) {
+        printError(`Could not parse ${configPath}: ${err instanceof Error ? err.message : String(err)}`);
+        process.exitCode = 1;
+        return;
+    }
+    // Step 2: mcp_servers.olam
+    config = ensureMcpOlam(config, olamBin, workspaceDir, dryRun, summary);
+    // Step 3: mcp_servers.agentmemory-atlas (optional)
+    const bridgeUrl = opts.bridgeUrl ?? process.env['AGENTMEMORY_BRIDGE_URL'];
+    const bridgeSecret = opts.bridgeSecret ?? process.env['AGENTMEMORY_BRIDGE_SECRET'];
+    if (bridgeUrl && bridgeSecret) {
+        config = ensureMcpAgentMemory(config, bridgeUrl, bridgeSecret, dryRun, summary);
+    }
+    else {
+        summary.skipped.push('mcp_servers.agentmemory-atlas (AGENTMEMORY_BRIDGE_URL/SECRET not set; use --bridge-url/--bridge-secret to add)');
+    }
+    // Step 4: kg-first hook
+    const hooksDir = path.join(path.dirname(configPath), 'hooks');
+    const hookResult = installHookFn(hooksDir, dryRun);
+    switch (hookResult.status) {
+        case 'installed':
+            summary.added.push('kg-first.sh hook');
+            break;
+        case 'already-present':
+            summary.skipped.push('kg-first.sh hook (already installed)');
+            break;
+        case 'dry-run':
+            summary.added.push('kg-first.sh hook (dry-run)');
+            break;
+    }
+    // Ensure hooks.pre_tool_call entry in config
+    config = ensureHermesHookEntry(config, hooksDir, dryRun, summary);
+    // Step 5: mirror skill symlinks
+    mirrorSkillsFn(dryRun, summary);
+    // Step 6: terminal.backend = local
+    if (!keepDocker) {
+        config = ensureTerminalBackendLocal(config, dryRun, summary);
+    }
+    else {
+        summary.skipped.push('terminal.backend (--keep-docker)');
+    }
+    // Write updated config
+    if (!dryRun) {
+        try {
+            writeConfig(configPath, config);
+        }
+        catch (err) {
+            printError(`Could not write ${configPath}: ${err instanceof Error ? err.message : String(err)}`);
+            process.exitCode = 1;
+            return;
+        }
+    }
+    // Step 7: print summary
+    if (dryRun) {
+        printInfo('dry-run', 'No changes written. Planned additions:');
+    }
+    else {
+        printSuccess('Hermes bootstrap complete');
+    }
+    for (const item of summary.added) {
+        printInfo(dryRun ? 'would add' : 'added', item);
+    }
+    for (const item of summary.skipped) {
+        printInfo('skipped', item);
+    }
+    summary.nextSteps.push('hermes gateway restart');
+    for (const step of summary.nextSteps) {
+        printInfo('next', step);
+    }
+}
+// ── Hook config entry ─────────────────────────────────────────────────────────
+const HOOK_MATCHERS = ['terminal', 'bash', 'shell', 'search_files', 'grep', 'ripgrep'];
+function ensureHermesHookEntry(config, hooksDir, dryRun, summary) {
+    const hookScriptPath = path.join(hooksDir, 'kg-first.sh');
+    const hooks = (config['hooks'] ?? {});
+    const preToolCall = Array.isArray(hooks['pre_tool_call'])
+        ? hooks['pre_tool_call']
+        : [];
+    // Idempotency: check if our sentinel command is already present
+    const alreadyPresent = preToolCall.some((entry) => typeof entry['command'] === 'string' && entry['command'].includes(HERMES_KG_HOOK_SENTINEL));
+    if (alreadyPresent) {
+        summary.skipped.push('hooks.pre_tool_call entry (already present)');
+        return config;
+    }
+    const newEntry = {
+        matcher: HOOK_MATCHERS.join('|'),
+        command: `${hookScriptPath} # ${HERMES_KG_HOOK_SENTINEL}`,
+    };
+    if (dryRun) {
+        summary.added.push(`hooks.pre_tool_call entry (matcher: ${HOOK_MATCHERS.join('|')})`);
+        return config;
+    }
+    const updatedPreToolCall = [...preToolCall, newEntry];
+    return {
+        ...config,
+        hooks: { ...hooks, pre_tool_call: updatedPreToolCall },
+        hooks_auto_accept: true,
+    };
+}
+// ── Command registration ──────────────────────────────────────────────────────
+export function registerHermes(program) {
+    const hermes = program
+        .command('hermes')
+        .description('Hermes integration commands');
+    hermes
+        .command('bootstrap')
+        .description('One-shot wiring of a fresh Hermes install to olam (MCP + KG hook + skill mirror)')
+        .option('--dry-run', 'Print planned changes without writing anything')
+        .option('--keep-docker', 'Skip setting terminal.backend = local')
+        .option('--bridge-url <url>', 'agentmemory bridge URL (overrides AGENTMEMORY_BRIDGE_URL env)')
+        .option('--bridge-secret <secret>', 'agentmemory bridge secret (overrides AGENTMEMORY_BRIDGE_SECRET env)')
+        .action(async (opts) => {
+        await runHermesBootstrap(opts);
+    });
+}
+//# sourceMappingURL=hermes.js.map

package/dist/commands/hermes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes.js","sourceRoot":"","sources":["../../src/commands/hermes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAE7B,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAe7B,iFAAiF;AAEjF,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,iFAAiF;AAEjF,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,wBAAwB,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAsB,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB,EAAE,MAAoB;IACjE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,iFAAiF;AAEjF,SAAS,iBAAiB;IACxB,iCAAiC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,wDAAwD;IACxD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AACnC,CAAC;AAED,iFAAiF;AAEjF,SAAS,mBAAmB;IAC1B,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,EACzB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAC,EAC7D,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,GAAG,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAUD,iFAAiF;AAEjF,SAAS,aAAa,CACpB,MAAoB,EACpB,OAAe,EACf,YAAoB,EACpB,MAAe,EACf,OAAyB;IAEzB,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5E,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,kCAAkC,OAAO,mCAAmC,YAAY,KAAK,CAAC,CAAC;QAClH,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAiB;QAC5B,GAAG,MAAM;QACT,WAAW,EAAE;YACX,GAAG,UAAU;YACb,IAAI,EAAE;gBACJ,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;gBACtB,GAAG,EAAE,YAAY;aAClB;SACF;KACF,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAoB,EACpB,SAAiB,EACjB,YAAoB,EACpB,MAAe,EACf,OAAyB;IAEzB,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5E,MAAM,GAAG,GAAG,mBAAmB,CAAC;IAChC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,GAAG,oBAAoB,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,kCAAkC,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAiB;QAC5B,GAAG,MAAM;QACT,WAAW,EAAE;YACX,GAAG,UAAU;YACb,CAAC,GAAG,CAAC,EAAE;gBACL,UAAU,EAAE,SAAS;gBACrB,aAAa,EAAE,YAAY;aAC5B;SACF;KACF,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAoB,EACpB,MAAe,EACf,OAAyB;IAEzB,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAA4B,CAAC;IACvE,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,OAAO,EAAE,CAAC;QACpC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAe,EAAE,OAAyB;IACrE,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9D,8DAA8D;YAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,UAAU,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAClC,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,2BAA2B,KAAK,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,uCAAuC,CAAC,CAAC;IACzF,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,6BAA6B,CAAC,CAAC;AACvF,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAA4B,EAC5B,OAQI,EAAE;IAEN,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;IAE5C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACvD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC;IAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAChE,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,IAAI,2BAA2B,CAAC;IAEtE,0CAA0C;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,UAAU,CAAC,sCAAsC,UAAU,EAAE,CAAC,CAAC;QAC/D,SAAS,CACP,QAAQ,EACR,4FAA4F,CAC7F,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAqB,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAE5E,sBAAsB;IACtB,IAAI,MAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,CAAC,mBAAmB,UAAU,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,2BAA2B;IAC3B,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvE,mDAAmD;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACnF,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,gHAAgH,CAAC,CAAC;IACzI,CAAC;IAED,wBAAwB;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,QAAQ,UAAU,CAAC,MAAM,EAAE,CAAC;QAC1B,KAAK,WAAW;YACd,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACvC,MAAM;QACR,KAAK,iBAAiB;YACpB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YAC7D,MAAM;QACR,KAAK,SAAS;YACZ,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YACjD,MAAM;IACV,CAAC;IAED,6CAA6C;IAC7C,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAElE,gCAAgC;IAChC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEhC,mCAAmC;IACnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,GAAG,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,mBAAmB,UAAU,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,MAAM,EAAE,CAAC;QACX,SAAS,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,2BAA2B,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACnC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACrC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAEvF,SAAS,qBAAqB,CAC5B,MAAoB,EACpB,QAAgB,EAChB,MAAe,EACf,OAAyB;IAEzB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAC;IACjE,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACvD,CAAC,CAAE,KAAK,CAAC,eAAe,CAAoC;QAC5D,CAAC,CAAC,EAAE,CAAC;IAEP,gEAAgE;IAChE,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CACrC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CACtG,CAAC;IACF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAA4B;QACxC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAChC,OAAO,EAAE,GAAG,cAAc,MAAM,uBAAuB,EAAE;KAC1D,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,uCAAuC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,kBAAkB,GAAG,CAAC,GAAG,WAAW,EAAE,QAAQ,CAAC,CAAC;IACtD,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE;QACtD,iBAAiB,EAAE,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,6BAA6B,CAAC,CAAC;IAE9C,MAAM;SACH,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,kFAAkF,CAAC;SAC/F,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;SACrE,MAAM,CAAC,eAAe,EAAE,uCAAuC,CAAC;SAChE,MAAM,CAAC,oBAAoB,EAAE,+DAA+D,CAAC;SAC7F,MAAM,CAAC,0BAA0B,EAAE,qEAAqE,CAAC;SACzG,MAAM,CAAC,KAAK,EAAE,IAA4B,EAAE,EAAE;QAC7C,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/kg-install-hook.d.ts

@@ -1,7 +1,13 @@
 /**
- * `olam kg install-hook [--scope project|user]` — wire the kg-service PreToolUse
+ * `olam kg install-hook [--scope project|user] [--for claude|hermes]`
+ *
+ * Default (--for claude, --scope project): wire the kg-service PreToolUse
  * hook into .claude/settings.json.
  *
+ * --for hermes: install kg-first.sh into ~/.hermes/hooks/ and patch
+ * ~/.hermes/config.yaml hooks.pre_tool_call. Refuses if
+ * ~/.hermes/config.yaml doesn't exist.
+ *
  * Default scope=project writes to `<cwd>/.claude/settings.json`. Per-repo
  * opt-in keeps blast radius small (operator can try it on one repo before
  * promoting to --scope user which targets `~/.claude/settings.json`).