@pleri/olam-cli 0.1.173 → 0.1.175

package/dist/mcp-server.js

@@ -12331,10 +12331,10 @@ var init_runbooks = __esm({
 // ../core/dist/global-config/port-validator.js
 import * as net2 from "node:net";
 import * as childProcess from "node:child_process";
-import { createRequire as createRequire3 } from "node:module";
+import { createRequire as createRequire4 } from "node:module";
 function getRequire() {
   if (!_require3) {
-    _require3 = createRequire3(import.meta.url);
+    _require3 = createRequire4(import.meta.url);
   }
   return _require3;
 }
@@ -14165,9 +14165,9 @@ var init_file_lock = __esm({
 });
 
 // ../core/dist/lib/min-version-filter.js
-import { existsSync as existsSync27, readFileSync as readFileSync23 } from "node:fs";
+import { existsSync as existsSync28, readFileSync as readFileSync23 } from "node:fs";
 function readOlamMinVersion(filepath) {
-  if (!existsSync27(filepath))
+  if (!existsSync28(filepath))
     return void 0;
   let text;
   try {
@@ -14790,7 +14790,7 @@ var init_meta_hook_injector = __esm({
 
 // ../core/dist/lib/markdown-merger.js
 import { createHash as createHash5 } from "node:crypto";
-import { readFileSync as readFileSync27, existsSync as existsSync30, statSync as statSync8 } from "node:fs";
+import { readFileSync as readFileSync27, existsSync as existsSync31, statSync as statSync8 } from "node:fs";
 function parseFrontmatter(text) {
   const match = FM_RE2.exec(text);
   if (match === null)
@@ -14910,7 +14910,7 @@ function mergeMarkdown(upstreamText, overlayText, labelForError, upstreamPath, o
   return { merged: fmBlock !== "" ? fmBlock + mergedBody : mergedBody };
 }
 function sha256OfPath(p) {
-  if (!existsSync30(p) || !statSync8(p).isFile())
+  if (!existsSync31(p) || !statSync8(p).isFile())
     return "MISSING";
   return createHash5("sha256").update(readFileSync27(p)).digest("hex");
 }
@@ -15123,7 +15123,7 @@ var init_prefix_deploy = __esm({
 });
 
 // ../core/dist/skill-sync/resolve-source-config.js
-import { readFileSync as readFileSync29, existsSync as existsSync31 } from "node:fs";
+import { readFileSync as readFileSync29, existsSync as existsSync32 } from "node:fs";
 import { join as join31 } from "node:path";
 import { parse as parseYaml4 } from "yaml";
 function sourceConfigPath(clonePath) {
@@ -15131,7 +15131,7 @@ function sourceConfigPath(clonePath) {
 }
 function readSourceConfig(clonePath, sourceId) {
   const path53 = sourceConfigPath(clonePath);
-  if (!existsSync31(path53))
+  if (!existsSync32(path53))
     return void 0;
   let raw;
   try {
@@ -28718,6 +28718,21 @@ var WorldRegistry = class {
     const row = this.db.prepare("SELECT * FROM worlds WHERE id = ?").get(worldId);
     return row ? rowToMetadata(row) : void 0;
   }
+  /**
+   * Find all worlds with a given `name`. Returns rows of every lifecycle
+   * status — callers filter as needed (e.g. active-only for dedup, error-
+   * only for cleanup).
+   *
+   * The schema has UNIQUE on `id` but NOT on `name`, so a single name can
+   * legitimately have multiple rows (e.g. one destroyed + one new). Issue
+   * #962: `olam create <name>` was generating fresh ids without checking
+   * for an existing row, accumulating orphan error rows under the same
+   * name. This is the registry-level primitive the manager's dedup uses.
+   */
+  findByName(name) {
+    const rows = this.db.prepare("SELECT * FROM worlds WHERE name = ? ORDER BY created_at DESC").all(name);
+    return rows.map(rowToMetadata);
+  }
   list(filter) {
     if (filter?.status) {
       const rows2 = this.db.prepare("SELECT * FROM worlds WHERE status = ? ORDER BY created_at DESC").all(filter.status);
@@ -32349,8 +32364,8 @@ function copyDirRecursive(src, dest, depth = 0, skipFiles = /* @__PURE__ */ new
   }
 }
 async function copyClaudeConfigIntoContainer(containerName) {
-  const { execSync: execSync7 } = await import("node:child_process");
-  const dockerExec = (cmd) => execSync7(`docker exec ${containerName} sh -c '${cmd}'`, { stdio: "pipe" });
+  const { execSync: execSync8 } = await import("node:child_process");
+  const dockerExec = (cmd) => execSync8(`docker exec ${containerName} sh -c '${cmd}'`, { stdio: "pipe" });
   dockerExec("mkdir -p $HOME/.claude");
   dockerExec("test -f /home/olam/workspace/.claude-host-config/settings.json && cp /home/olam/workspace/.claude-host-config/settings.json $HOME/.claude/settings.json || true");
   dockerExec("test -f /home/olam/workspace/.claude-host-config/CLAUDE.md && cp /home/olam/workspace/.claude-host-config/CLAUDE.md $HOME/.claude/CLAUDE.md || true");
@@ -32366,7 +32381,7 @@ async function copyClaudeConfigIntoContainer(containerName) {
   await sanitizeContainerClaudeHooks(containerName);
 }
 async function sanitizeContainerClaudeHooks(containerName) {
-  const { execSync: execSync7 } = await import("node:child_process");
+  const { execSync: execSync8 } = await import("node:child_process");
   const script = `
 const fs = require('fs');
 const p = (process.env.HOME || '/home/olam') + '/.claude/settings.json';
@@ -32410,7 +32425,7 @@ if (changed) {
 }
 `;
   try {
-    execSync7(`docker exec ${containerName} /usr/local/bin/node -e ${shQuote(script)}`, { stdio: "pipe" });
+    execSync8(`docker exec ${containerName} /usr/local/bin/node -e ${shQuote(script)}`, { stdio: "pipe" });
   } catch {
   }
 }
@@ -33039,29 +33054,116 @@ function register9(server, ctx, initError, deps) {
 // ../mcp-server/src/tools/world-observe.ts
 var world_observe_exports = {};
 __export(world_observe_exports, {
+  readWorldChunks: () => readWorldChunks,
   register: () => register10
 });
+import { createRequire as createRequire3 } from "node:module";
+import { existsSync as existsSync11 } from "node:fs";
 
 // ../skill-runtime/dist/skills/world-observe.js
 init_v3();
 var worldObserveInputSchema = external_exports.object({
-  worldId: external_exports.string()
+  worldId: external_exports.string(),
+  sessionId: external_exports.string().optional(),
+  sinceChunkId: external_exports.string().optional(),
+  limit: external_exports.number().int().min(1).max(1e3).optional()
 });
 var worldObserveSkill = defineSkill({
   name: "world-observe",
-  description: "Watch a world's reasoning process and retrieve its current thought stream.",
+  description: "Stream a world's reasoning chunks (thought_nodes feed). Returns JSON `{ chunks: [{ chunkId, sessionId, role, content, createdAt, nodeType }], metadata: { pane_state, count } }`, most-recent-last. Supports pagination via `sinceChunkId` (returns only chunks newer than the given id) and `limit` (default 100, max 1000). Use `olam_list` first to discover worldIds.",
   inputSchema: worldObserveInputSchema,
-  handler: (_input) => "Observation is coming in a future release. This feature will stream a world's reasoning in real-time."
+  handler: (_input) => "World observation requires an active OlamContext. Use the MCP tool surface to read a world's chunks."
 });
 
 // ../mcp-server/src/tools/world-observe.ts
+var require2 = createRequire3(import.meta.url);
+var SYSTEM_NODE_TYPES = /* @__PURE__ */ new Set(["lifecycle", "dispatch_error"]);
+var DEFAULT_LIMIT = 100;
+var BUSY_WINDOW_MS = 3e4;
+function roleFor(nodeType) {
+  return SYSTEM_NODE_TYPES.has(nodeType) ? "system" : "assistant";
+}
+function rowToChunk(row) {
+  return {
+    chunkId: row.id,
+    sessionId: row.session_id,
+    role: roleFor(row.node_type),
+    content: row.content,
+    summary: row.summary,
+    createdAt: row.created_at,
+    nodeType: row.node_type,
+    sequenceNum: row.sequence_num
+  };
+}
+function readWorldChunks(dbPath, params) {
+  const limit = params.limit ?? DEFAULT_LIMIT;
+  const now = params.now ?? Date.now();
+  const empty = () => ({
+    worldId: params.worldId,
+    chunks: [],
+    metadata: {
+      count: 0,
+      pane_state: "idle",
+      sessionFilter: params.sessionId ?? null,
+      sinceChunkId: params.sinceChunkId ?? null,
+      limit
+    }
+  });
+  if (!existsSync11(dbPath)) return empty();
+  const Sqlite = require2("better-sqlite3");
+  const db = new Sqlite(dbPath, { readonly: true, fileMustExist: true });
+  try {
+    let minSeq = -1;
+    if (params.sinceChunkId) {
+      const seqRow = db.prepare("SELECT sequence_num FROM thought_nodes WHERE id = ?").get(params.sinceChunkId);
+      if (!seqRow) {
+        return empty();
+      }
+      minSeq = seqRow.sequence_num;
+    }
+    const where = ["sequence_num > ?"];
+    const bind = [minSeq];
+    if (params.sessionId !== void 0) {
+      where.push("session_id = ?");
+      bind.push(params.sessionId);
+    }
+    const sql = `SELECT id, node_type, summary, content, source_ref, sequence_num, created_at, session_id, hook_event_name, turn_index, token_usage, duration_ms FROM thought_nodes WHERE ${where.join(" AND ")} ORDER BY sequence_num DESC LIMIT ?`;
+    const rows = db.prepare(sql).all(...bind, limit);
+    rows.reverse();
+    const lastRow = rows[rows.length - 1];
+    let paneState = "idle";
+    if (lastRow) {
+      const ageMs = now - new Date(lastRow.created_at).getTime();
+      paneState = ageMs <= BUSY_WINDOW_MS ? "busy" : "idle";
+    } else {
+      const maxRow = db.prepare("SELECT MAX(created_at) AS max_at FROM thought_nodes").get();
+      if (maxRow?.max_at) {
+        const ageMs = now - new Date(maxRow.max_at).getTime();
+        paneState = ageMs <= BUSY_WINDOW_MS ? "busy" : "idle";
+      }
+    }
+    return {
+      worldId: params.worldId,
+      chunks: rows.map(rowToChunk),
+      metadata: {
+        count: rows.length,
+        pane_state: paneState,
+        sessionFilter: params.sessionId ?? null,
+        sinceChunkId: params.sinceChunkId ?? null,
+        limit
+      }
+    };
+  } finally {
+    db.close();
+  }
+}
 function register10(server, ctx, initError) {
   const { description, inputSchema } = worldObserveSkill.asMcpTool();
   server.tool(
     "olam_observe",
     description,
     inputSchema,
-    async (_params) => {
+    async (params) => {
       if (!ctx) {
         const errorMsg = initError?.message ?? "Olam is not configured. Run /olam:init to set up.";
         return {
@@ -33069,10 +33171,34 @@ function register10(server, ctx, initError) {
           isError: true
         };
       }
-      return {
-        content: [{ type: "text", text: "Observation is coming in a future release. This feature will stream a world's reasoning in real-time." }],
-        isError: true
-      };
+      const { worldId, sessionId, sinceChunkId, limit } = params;
+      const world = ctx.worldManager.getWorld(worldId);
+      if (!world) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `World "${worldId}" not found. Use olam_list to discover available worlds.`
+            }
+          ],
+          isError: true
+        };
+      }
+      try {
+        const dbPath = getWorldDbPath(world.workspacePath);
+        const output = readWorldChunks(dbPath, { worldId, sessionId, sinceChunkId, limit });
+        return {
+          content: [{ type: "text", text: JSON.stringify(output, null, 2) }]
+        };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+          content: [
+            { type: "text", text: `Failed to read chunks for world "${worldId}": ${message}` }
+          ],
+          isError: true
+        };
+      }
     }
   );
 }
@@ -36070,16 +36196,20 @@ function register23(server, _ctx, _initError) {
           };
         }
         const data = JSON.parse(body);
+        const payload = {
+          url: `http://localhost:${data.hostPort}`,
+          host_port: data.hostPort,
+          sidecar_container_id: data.containerId,
+          container_port: data.containerPort,
+          container_name: data.containerName
+        };
+        if (data.pulledImage === true) {
+          payload["pulled_image"] = "alpine/socat:latest (first-call fallback)";
+        }
         return {
           content: [{
             type: "text",
-            text: JSON.stringify({
-              url: `http://localhost:${data.hostPort}`,
-              host_port: data.hostPort,
-              sidecar_container_id: data.containerId,
-              container_port: data.containerPort,
-              container_name: data.containerName
-            }, null, 2)
+            text: JSON.stringify(payload, null, 2)
           }]
         };
       } catch (err) {
@@ -36719,14 +36849,14 @@ import * as path37 from "node:path";
 import * as os22 from "node:os";
 
 // ../mcp-server/src/lib/skills-index.mjs
-import { createRequire as createRequire4 } from "node:module";
+import { createRequire as createRequire5 } from "node:module";
 import * as fs37 from "node:fs";
 import * as path36 from "node:path";
 import * as os21 from "node:os";
 var VECTOR_DIM = 256;
 var SCHEMA_VERSION3 = "1";
 var SCHEMA_KEY = "skills_index_schema_version";
-var _require4 = createRequire4(import.meta.url);
+var _require4 = createRequire5(import.meta.url);
 var _Database3 = null;
 function getDatabase3() {
   if (_Database3 === null) {
@@ -37738,8 +37868,8 @@ function createServer4(ctx, initError) {
 }
 
 // ../mcp-server/src/utils/native-probe.ts
-import { createRequire as createRequire5 } from "node:module";
-var PROBE_REQUIRE = createRequire5(import.meta.url);
+import { createRequire as createRequire6 } from "node:module";
+var PROBE_REQUIRE = createRequire6(import.meta.url);
 function runtimeModuleVersion() {
   return Number.parseInt(process.versions.modules, 10);
 }
@@ -37855,7 +37985,7 @@ init_loader();
 
 // ../core/dist/world/manager.js
 import * as crypto8 from "node:crypto";
-import { execSync as execSync5, spawnSync as spawnSync4 } from "node:child_process";
+import { execSync as execSync6, spawnSync as spawnSync4 } from "node:child_process";
 import * as fs49 from "node:fs";
 import * as os29 from "node:os";
 import * as path50 from "node:path";
@@ -38397,7 +38527,7 @@ function extractStderr(err) {
 function carryUncommittedEdits(repos, workspacePath, deps = {}) {
   const exec = deps.exec ?? ((cmd, args, opts) => execFileSync6(cmd, args, opts));
   const homedir30 = deps.homedir ?? (() => os26.homedir());
-  const existsSync48 = deps.existsSync ?? ((p) => fs43.existsSync(p));
+  const existsSync49 = deps.existsSync ?? ((p) => fs43.existsSync(p));
   const copyFileSync9 = deps.copyFileSync ?? ((src, dest) => fs43.copyFileSync(src, dest));
   const mkdirSync30 = deps.mkdirSync ?? ((dirPath, opts) => {
     fs43.mkdirSync(dirPath, opts);
@@ -38408,9 +38538,9 @@ function carryUncommittedEdits(repos, workspacePath, deps = {}) {
       continue;
     const repoPath = expandHome2(repo.path, homedir30);
     const worktreePath = path43.join(workspacePath, repo.name);
-    if (!existsSync48(repoPath))
+    if (!existsSync49(repoPath))
       continue;
-    if (!existsSync48(worktreePath)) {
+    if (!existsSync49(worktreePath)) {
       console.warn(`[carry] ${repo.name}: world worktree ${worktreePath} missing; skipping carry for this repo`);
       continue;
     }
@@ -38470,7 +38600,7 @@ function carryUncommittedEdits(repos, workspacePath, deps = {}) {
     for (const rel of plan.diff.untracked) {
       const src = path43.join(plan.repoPath, rel);
       const dest = path43.join(plan.worktreePath, rel);
-      if (!existsSync48(src))
+      if (!existsSync49(src))
         continue;
       try {
         mkdirSync30(path43.dirname(dest), { recursive: true });
@@ -39989,6 +40119,54 @@ async function runSeedHooks(seeds, containerName, servicePortMap, exec) {
   }
 }
 
+// ../core/dist/world/create-dedup.js
+import { execSync as execSync5 } from "node:child_process";
+var ACTIVE_STATUSES = /* @__PURE__ */ new Set([
+  "creating",
+  "running",
+  "paused",
+  "crystallizing"
+]);
+var defaultContainerProbe = (containerName) => {
+  try {
+    const out = execSync5(`docker ps --filter name=^/${containerName}$ --format '{{.Names}}'`, { stdio: ["pipe", "pipe", "pipe"], timeout: 5e3 }).toString().trim();
+    return out.length > 0;
+  } catch {
+    return false;
+  }
+};
+function resolveCreateDedup(opts) {
+  const { registry: registry2, name } = opts;
+  const probe = opts.probeContainer ?? defaultContainerProbe;
+  const containerName = `olam-${name}-devbox`;
+  const existing = registry2.findByName(name);
+  const active = existing.find((w) => ACTIVE_STATUSES.has(w.status));
+  if (active) {
+    return { action: "reuse", world: active };
+  }
+  const errorRows = existing.filter((w) => w.status === "error");
+  for (const er of errorRows) {
+    registry2.remove(er.id);
+  }
+  if (probe(containerName)) {
+    return {
+      action: "container-orphan",
+      containerName,
+      remediation: `A container '${containerName}' is running on this host but no worlds.db row exists for it. Either destroy the orphan with 'docker rm -f ${containerName}' and re-run, or wait for the reconciler (issue #963) to insert a row.`
+    };
+  }
+  return { action: "fresh", cleanedErrorRows: errorRows.length };
+}
+var ContainerOrphanError = class extends Error {
+  containerName;
+  kind = "container-orphan";
+  constructor(message, containerName) {
+    super(message);
+    this.containerName = containerName;
+    this.name = "ContainerOrphanError";
+  }
+};
+
 // ../core/dist/world/tmux-supervisor.js
 function injectBindAll(start) {
   let result = start;
@@ -40122,7 +40300,7 @@ var BotIdentityError = class extends Error {
     this.name = "BotIdentityError";
   }
 };
-function getTokenScopes(ghToken, _exec = execSync5) {
+function getTokenScopes(ghToken, _exec = execSync6) {
   try {
     const out = _exec("gh auth status 2>&1", {
       encoding: "utf-8",
@@ -40139,13 +40317,13 @@ function getTokenScopes(ghToken, _exec = execSync5) {
   }
 }
 async function setupContainerGit(containerName, repos, branch) {
-  const dockerExec = (cmd) => execSync5(`docker exec ${containerName} sh -c '${cmd.replace(/'/g, "'\\''")}'`, {
+  const dockerExec = (cmd) => execSync6(`docker exec ${containerName} sh -c '${cmd.replace(/'/g, "'\\''")}'`, {
     stdio: "pipe",
     timeout: 6e4
   }).toString();
   let ghToken = "";
   try {
-    ghToken = execSync5("gh auth token 2>/dev/null", { encoding: "utf-8", timeout: 5e3 }).trim();
+    ghToken = execSync6("gh auth token 2>/dev/null", { encoding: "utf-8", timeout: 5e3 }).trim();
   } catch {
   }
   const actorName = process.env.OLAM_BOT_NAME ?? "Claude Code (olam)";
@@ -40165,7 +40343,7 @@ async function setupContainerGit(containerName, repos, branch) {
         continue;
       const ownerRepo = ghMatch[1];
       try {
-        execSync5(`gh api repos/${ownerRepo} --silent`, {
+        execSync6(`gh api repos/${ownerRepo} --silent`, {
           stdio: "pipe",
           timeout: 5e3,
           env: { ...process.env, GH_TOKEN: ghToken }
@@ -40213,7 +40391,7 @@ ${stderr.split("\n").slice(0, 3).join(" ")}`);
     if (!olamUserPresent) {
       const imageName = (() => {
         try {
-          return execSync5(`docker inspect ${containerName} --format '{{.Config.Image}}'`, {
+          return execSync6(`docker inspect ${containerName} --format '{{.Config.Image}}'`, {
             encoding: "utf8",
             timeout: 5e3
           }).trim() || "(unknown)";
@@ -40256,7 +40434,7 @@ ${stderr.split("\n").slice(0, 3).join(" ")}`);
 function makeHostExecFn() {
   return async (cmd) => {
     try {
-      const stdout = execSync5(cmd, { encoding: "utf-8", timeout: 5e3 });
+      const stdout = execSync6(cmd, { encoding: "utf-8", timeout: 5e3 });
       return { stdout, stderr: "", exitCode: 0 };
     } catch {
       return { stdout: "", stderr: "", exitCode: 1 };
@@ -40266,7 +40444,7 @@ function makeHostExecFn() {
 function makeContainerExecFn(containerName) {
   return async (cmd) => {
     try {
-      const result = execSync5(`docker exec ${containerName} sh -c '${cmd.replace(/'/g, "'\\''")}'`, { stdio: "pipe", timeout: 6e5 });
+      const result = execSync6(`docker exec ${containerName} sh -c '${cmd.replace(/'/g, "'\\''")}'`, { stdio: "pipe", timeout: 6e5 });
       return { stdout: result.toString(), stderr: "", exitCode: 0 };
     } catch (err) {
       const execErr = err;
@@ -40280,7 +40458,7 @@ function makeContainerExecFn(containerName) {
 }
 function defaultDockerExec() {
   return (containerName, cmd) => {
-    const result = execSync5(
+    const result = execSync6(
       `docker exec ${containerName} sh -c '${cmd.replace(/'/g, "'\\''")}'`,
       // Phase E E5 raise: 10min was too tight on cold-boot for atlas-core's
       // `rails db:create` chain (Rails 7 boot + initializer load + first
@@ -40480,7 +40658,7 @@ function buildManifestRuntime(worldId, repos) {
   }
   return { worldId, repos: runtimeRepos };
 }
-function exposeWorldOverTailscale(appPortUrls, worldId, registry2, _exec = execSync5) {
+function exposeWorldOverTailscale(appPortUrls, worldId, registry2, _exec = execSync6) {
   if (process.env["OLAM_TAILSCALE_SERVE"] !== "true")
     return;
   if (appPortUrls.length === 0)
@@ -40508,7 +40686,7 @@ function exposeWorldOverTailscale(appPortUrls, worldId, registry2, _exec = execS
     registry2.storeTailscalePaths(worldId, registeredPaths);
   }
 }
-function cleanupWorldTailscale(worldId, registry2, _exec = execSync5) {
+function cleanupWorldTailscale(worldId, registry2, _exec = execSync6) {
   const paths = registry2.loadTailscalePaths(worldId);
   if (paths.length === 0)
     return;
@@ -40527,7 +40705,7 @@ function cleanupWorldTailscale(worldId, registry2, _exec = execSync5) {
     }
   }
 }
-function resolveTailscaleBin(_exec = execSync5) {
+function resolveTailscaleBin(_exec = execSync6) {
   const candidates = [
     process.env["TAILSCALE_BIN"],
     "/Applications/Tailscale.app/Contents/MacOS/Tailscale",
@@ -40552,19 +40730,38 @@ var WorldManager = class {
   dashboardManager;
   pleriClient;
   dockerExec;
+  containerProbe;
   manifestRuntimes = /* @__PURE__ */ new Map();
-  constructor(config2, provider, registry2, dashboardManager, pleriClient, dockerExec) {
+  constructor(config2, provider, registry2, dashboardManager, pleriClient, dockerExec, containerProbe) {
     this.config = config2;
     this.provider = provider;
     this.registry = registry2;
     this.dashboardManager = dashboardManager;
     this.pleriClient = pleriClient;
     this.dockerExec = dockerExec ?? defaultDockerExec();
+    this.containerProbe = containerProbe;
   }
   // -----------------------------------------------------------------------
   // createWorld
   // -----------------------------------------------------------------------
   async createWorld(opts) {
+    {
+      const dedupOpts = {
+        registry: this.registry,
+        name: opts.name,
+        ...this.containerProbe ? { probeContainer: this.containerProbe } : {}
+      };
+      const dedup = resolveCreateDedup(dedupOpts);
+      if (dedup.action === "reuse") {
+        return dedup.world;
+      }
+      if (dedup.action === "container-orphan") {
+        throw new ContainerOrphanError(dedup.remediation, dedup.containerName);
+      }
+      if (dedup.cleanedErrorRows > 0) {
+        console.log(`[manager] removed ${dedup.cleanedErrorRows} stale error row(s) for world name "${opts.name}" before fresh create (issue #962)`);
+      }
+    }
     if (!opts.noAuth) {
       const preflight = await runAuthPreflight({ autoStart: true });
       if (preflight.verdict !== "ok") {
@@ -41248,7 +41445,7 @@ ${detail}`);
         const escapedDir = `/home/olam/workspace/${repo.name.replace(/["$`\\]/g, "\\$&")}`;
         for (const cmd of repo.setup_commands) {
           try {
-            execSync5(`docker exec ${containerName} sh -c 'cd "${escapedDir}" && ${cmd.replace(/'/g, "'\\''")}'`, { stdio: "pipe", timeout: 6e5 });
+            execSync6(`docker exec ${containerName} sh -c 'cd "${escapedDir}" && ${cmd.replace(/'/g, "'\\''")}'`, { stdio: "pipe", timeout: 6e5 });
           } catch (err) {
             const msg = err instanceof Error ? err.message : String(err);
             console.warn(`[WorldManager] setup command failed for ${repo.name}: ${msg}`);
@@ -41269,11 +41466,11 @@ ${detail}`);
       });
       if (allPolicies.length > 0) {
         try {
-          execSync5(`docker exec ${containerName} mkdir -p /home/olam/.olam/policies`, { stdio: "pipe", timeout: 1e4 });
+          execSync6(`docker exec ${containerName} mkdir -p /home/olam/.olam/policies`, { stdio: "pipe", timeout: 1e4 });
           for (const repo of repos) {
             const policiesDir = path50.join(workspacePath, repo.name, ".olam", "policies");
             if (fs49.existsSync(policiesDir)) {
-              execSync5(`docker cp "${policiesDir}/." "${containerName}:/home/olam/.olam/policies/"`, { stdio: "pipe", timeout: 15e3 });
+              execSync6(`docker cp "${policiesDir}/." "${containerName}:/home/olam/.olam/policies/"`, { stdio: "pipe", timeout: 15e3 });
             }
           }
         } catch (err) {
@@ -42779,11 +42976,11 @@ function isDashboardRunning() {
 }
 
 // ../core/dist/dashboard/tunnel.js
-import { spawn as spawn4, execSync as execSync6 } from "node:child_process";
+import { spawn as spawn4, execSync as execSync7 } from "node:child_process";
 var tunnelProcess = null;
 function isCloudflaredAvailable() {
   try {
-    execSync6("which cloudflared", { stdio: "ignore" });
+    execSync7("which cloudflared", { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -43041,7 +43238,7 @@ var PleriClient = class {
 };
 
 // ../mcp-server/src/env-loader.ts
-import { readFileSync as readFileSync39, existsSync as existsSync47, statSync as statSync14 } from "node:fs";
+import { readFileSync as readFileSync39, existsSync as existsSync48, statSync as statSync14 } from "node:fs";
 import { join as join52, dirname as dirname29, resolve as resolve14 } from "node:path";
 var PROJECT_MARKERS = [
   ".olam/config.yaml",
@@ -43054,10 +43251,10 @@ function findProjectRoot2(startDir) {
   const root = resolve14("/");
   while (true) {
     for (const marker of PROJECT_MARKERS) {
-      if (existsSync47(join52(dir, marker))) return dir;
+      if (existsSync48(join52(dir, marker))) return dir;
     }
     const pkg = join52(dir, "package.json");
-    if (existsSync47(pkg)) {
+    if (existsSync48(pkg)) {
       try {
         const json = JSON.parse(readFileSync39(pkg, "utf8"));
         const isOlamWorkspace = typeof json.name === "string" && json.name.startsWith("@olam/");
@@ -43097,7 +43294,7 @@ function loadProjectEnv(startDir = process.cwd()) {
   const merged = {};
   for (const name of [".env", ".env.local"]) {
     const p = join52(root, name);
-    if (existsSync47(p) && statSync14(p).isFile()) {
+    if (existsSync48(p) && statSync14(p).isFile()) {
       Object.assign(merged, parseEnvFile(p));
       filesRead.push(p);
     }

package/hermes-bundle/version.json

@@ -1,4 +1,4 @@
 {
-  "bundledAt": "2026-05-24T11:22:38.644Z",
+  "bundledAt": "2026-05-24T13:03:21.307Z",
   "kgFirstSha": "29a9ccce1b115d049e375c4a90eb5cf7c123e610e2d0590270a4db2cdbc64a28"
 }

package/host-cp/k8s/manifests/50-deployment.yaml

@@ -118,7 +118,7 @@ spec:
         # k3d), started by `olam upgrade` Step 0.7 — not inside this Pod.
       containers:
         - name: olam-host-cp
-          image: ghcr.io/pleri/olam-host-cp@sha256:3043df80469fa58319de53688991c81575522beba48b7a1b6956d0e3f2d03b45
+          image: ghcr.io/pleri/olam-host-cp@sha256:71e376df97d498e76c51f35698464b26413bcfe4efe926b85e12248422ae1a54
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

package/host-cp/k8s/manifests/auth-service/50-deployment.yaml

@@ -70,7 +70,7 @@ spec:
               mountPath: /data
       containers:
         - name: olam-auth-service
-          image: ghcr.io/pleri/olam-auth@sha256:2e40e0c1f0469331dfa98a2e194c922c710149d8d5d3816bc660e530be6a9b97
+          image: ghcr.io/pleri/olam-auth@sha256:fe6e1ff20ee99aa2ce74e144d33ebf07411855fc2080ec046ee8a82a6144fb54
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

package/host-cp/k8s/manifests/kg-service/50-deployment.yaml

@@ -61,7 +61,7 @@ spec:
               mountPath: /data
       containers:
         - name: olam-kg-service
-          image: ghcr.io/pleri/olam-kg-service@sha256:225dd3460bce1f2572e6076e55a875ff526a5217a2d8f311d14b6dee591e8a38
+          image: ghcr.io/pleri/olam-kg-service@sha256:0300a3140a25510703df52ebeae8a1783e620b93aae7115ef0b3577208eb9b1f
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

package/host-cp/k8s/manifests/mcp-auth-service/50-deployment.yaml

@@ -68,7 +68,7 @@ spec:
               mountPath: /data
       containers:
         - name: olam-mcp-auth-service
-          image: ghcr.io/pleri/olam-mcp-auth@sha256:f61bf653ada702d59aca0a309b224b01e0f151a89e01583a76f94d8604101d20
+          image: ghcr.io/pleri/olam-mcp-auth@sha256:2a442b17f372eb60b2e1444bb16092157df10ad76b4e87cf6cc8975d386e5be4
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

package/host-cp/k8s/manifests/memory-service/50-deployment.yaml

@@ -70,7 +70,7 @@ spec:
           # bootstrap-placeholder comment + run `npm run refresh:manifest-digests`
           # once ghcr.io/pleri/olam-memory-service has a real published digest.
           # bootstrap-placeholder: pre-publish; refresh after first release
-          image: ghcr.io/pleri/olam-memory-service@sha256:86ce43a8bfec3edf0a9ac1aea63bf3ecd922209a7ab2a0f589ae9e1cedc0134a
+          image: ghcr.io/pleri/olam-memory-service@sha256:320298284431afbeebc947a55701f486bc1df0d5642817f68a61147056da9056
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true