@pleri/olam-cli 0.1.175 → 0.1.180

package/README.md

@@ -121,6 +121,25 @@ olam --help
 olam <command> --help
 ```
 
+## Agentic coding — yolo dispatch
+
+`olam yolo` dispatches a parallel Claude Code session (`--dangerously-skip-permissions`)
+in a new tmux window backed by an isolated git worktree. Each session gets its
+own branch so it can't clobber the operator's main shell.
+
+```sh
+# Spawn a yolo on a bounded task
+olam yolo my-task --branch feat/my-task --prompt-file /tmp/my-task.txt
+
+# List active yolo windows
+olam yolo --list
+
+# Clean up after merge
+olam yolo --cleanup my-task
+```
+
+Full reference: `olam yolo --help` and [`docs/runbooks/olam-yolo-cli.md`](../../docs/runbooks/olam-yolo-cli.md).
+
 ## Multi-account Claude Code (`--claude-home`)
 
 Inspired by [t3code](https://github.com/pingdotgg/t3code) — one operator,

package/bin/olam.cjs

@@ -16,6 +16,28 @@ if (!result.ok) {
   process.exit(64);
 }
 
+// Fast-path `--version` / `-V` BEFORE loading the ESM bundle (issue #988).
+// Fresh-user installs run `olam --version` as the install-script sanity
+// check; any hang in the bundle's import graph (better-sqlite3 native probe,
+// agentmemory MCP context-loader, Dockerode lazy-binding) would block this
+// path indefinitely. Reading package.json directly from the CJS shim
+// guarantees `--version` returns in <100ms regardless of bundle state.
+const argv = process.argv.slice(2);
+if (argv.length === 1 && (argv[0] === '--version' || argv[0] === '-V')) {
+  try {
+    const fs = require('node:fs');
+    const path = require('node:path');
+    const pkgPath = path.join(__dirname, '..', 'package.json');
+    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+    process.stdout.write(`${pkg.version || '0.0.0-unknown'}\n`);
+    process.exit(0);
+  } catch (err) {
+    // Fall through to the bundle if the fast-path read fails for any reason
+    // (corrupt package.json, missing file). The bundle's own readCliVersion
+    // has the same fallback chain and will print '0.0.0-unknown' if needed.
+  }
+}
+
 const { join } = require('node:path');
 const { pathToFileURL } = require('node:url');
 const bundlePath = join(__dirname, '..', 'dist', 'index.js');

package/dist/commands/flywheel/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/flywheel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAiBvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/flywheel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAczC,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmBvD"}

package/dist/commands/flywheel/index.js

@@ -32,6 +32,8 @@ import { registerFlywheelDiversityCheck } from './diversity-check.js';
 import { registerFlywheelPing } from './ping.js';
 import { registerFlywheelInstallShims } from './install-shims.js';
 import { registerFlywheelMigrateOverlays } from './migrate-overlays.js';
+import { registerFlywheelSessionStart } from './session-start.js';
+import { registerFlywheelInstallSessionStartHook } from './install-sessionstart-hook.js';
 export function registerFlywheel(program) {
     const flywheel = program
         .command('flywheel')
@@ -46,5 +48,7 @@ export function registerFlywheel(program) {
     registerFlywheelPing(flywheel);
     registerFlywheelInstallShims(flywheel);
     registerFlywheelMigrateOverlays(flywheel);
+    registerFlywheelSessionStart(flywheel);
+    registerFlywheelInstallSessionStartHook(flywheel);
 }
 //# sourceMappingURL=index.js.map

package/dist/commands/flywheel/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/flywheel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,qCAAqC,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,oCAAoC,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AAExE,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CACV,qNAAqN,CACtN,CAAC;IAEJ,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACzC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,qCAAqC,CAAC,QAAQ,CAAC,CAAC;IAChD,oCAAoC,CAAC,QAAQ,CAAC,CAAC;IAC/C,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACzC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACvC,+BAA+B,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/flywheel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,qCAAqC,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,oCAAoC,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,uCAAuC,EAAE,MAAM,gCAAgC,CAAC;AAEzF,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CACV,qNAAqN,CACtN,CAAC;IAEJ,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACzC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,qCAAqC,CAAC,QAAQ,CAAC,CAAC;IAChD,oCAAoC,CAAC,QAAQ,CAAC,CAAC;IAC/C,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACzC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACvC,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC1C,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACvC,uCAAuC,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC"}

package/dist/commands/flywheel/install-sessionstart-hook.d.ts

@@ -0,0 +1,64 @@
+/**
+ * `olam flywheel install-sessionstart-hook [--scope project|user] [--uninstall]`
+ *
+ * Wires `olam flywheel session-start` into `<scope>/.claude/settings.json`
+ * hooks.SessionStart so Claude Code injects operator-state context (active
+ * workspace + active world + most-recent wake-brief) before the first user
+ * prompt. The 4th defense layer in Olam's hook chain (FF / PreToolUse /
+ * PostToolUse / Stop).
+ *
+ * Coexists with the existing skills-sync SessionStart hook
+ * (sentinel `olam-skills-sync-hook-v1`). Both entries sit side-by-side in
+ * the SessionStart array; Claude Code runs each matcher in order and merges
+ * their `additionalContext` outputs into the first turn's system prompt.
+ *
+ * Idempotent: re-running over an existing install is a no-op (sentinel match
+ * via `mergeHomeSettingsJson`).
+ *
+ * Pairs with: `docs/runbooks/install-sessionstart-hook.md`,
+ *             `docs/decisions/051-sessionstart-hook-4th-defense.md`.
+ */
+import type { Command } from 'commander';
+export declare const SESSIONSTART_HOOK_STAGE = "SessionStart";
+export declare const SESSIONSTART_HOOK_TIMEOUT_MS = 5000;
+interface SessionStartHookMatcher {
+    readonly matcher: string;
+    readonly hooks: ReadonlyArray<{
+        readonly type: 'command';
+        readonly command: string;
+        readonly timeout: number;
+    }>;
+}
+/**
+ * Build the matcher-entry object that lands under hooks.SessionStart in
+ * .claude/settings.json. Embeds the sentinel as a leading no-op shell
+ * assignment so `command.includes(sentinel)` works for idempotent install +
+ * surgical uninstall, then guards against uninstalled-olam to keep the hook
+ * silent when the CLI is missing (audited by `audit:hook-guards`).
+ */
+export declare function buildSessionStartHookEntry(): SessionStartHookMatcher;
+export interface InstallResult {
+    readonly status: 'installed' | 'already-present' | 'no-op';
+    readonly filePath: string;
+    readonly backupPath: string | null;
+}
+/**
+ * Install (idempotent) — programmatic API for both the CLI action and tests.
+ * Creates parent dir if needed; backs up an existing settings.json before
+ * writing (auto-deletes the backup when the install is a no-op).
+ */
+export declare function installSessionStartHook(filePath: string): InstallResult;
+export interface UninstallResult {
+    readonly status: 'removed' | 'not-found' | 'no-settings';
+    readonly filePath: string;
+}
+/**
+ * Uninstall (surgical) — walks hooks.SessionStart, drops inner entries whose
+ * command contains the sentinel, drops the outer matcher when its hooks
+ * array becomes empty. Other SessionStart entries (e.g. the skills-sync
+ * hook) are preserved verbatim.
+ */
+export declare function uninstallSessionStartHook(filePath: string): UninstallResult;
+export declare function registerFlywheelInstallSessionStartHook(parent: Command): void;
+export {};
+//# sourceMappingURL=install-sessionstart-hook.d.ts.map

package/dist/commands/flywheel/install-sessionstart-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-sessionstart-hook.d.ts","sourceRoot":"","sources":["../../../src/commands/flywheel/install-sessionstart-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKzC,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AACtD,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAIjD,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC,CAAC;CACJ;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAAI,uBAAuB,CAWpE;AAsBD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,OAAO,CAAC;IAC3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAsBvE;AAOD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAiD3E;AAED,wBAAgB,uCAAuC,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAsD7E"}

package/dist/commands/flywheel/install-sessionstart-hook.js

@@ -0,0 +1,197 @@
+/**
+ * `olam flywheel install-sessionstart-hook [--scope project|user] [--uninstall]`
+ *
+ * Wires `olam flywheel session-start` into `<scope>/.claude/settings.json`
+ * hooks.SessionStart so Claude Code injects operator-state context (active
+ * workspace + active world + most-recent wake-brief) before the first user
+ * prompt. The 4th defense layer in Olam's hook chain (FF / PreToolUse /
+ * PostToolUse / Stop).
+ *
+ * Coexists with the existing skills-sync SessionStart hook
+ * (sentinel `olam-skills-sync-hook-v1`). Both entries sit side-by-side in
+ * the SessionStart array; Claude Code runs each matcher in order and merges
+ * their `additionalContext` outputs into the first turn's system prompt.
+ *
+ * Idempotent: re-running over an existing install is a no-op (sentinel match
+ * via `mergeHomeSettingsJson`).
+ *
+ * Pairs with: `docs/runbooks/install-sessionstart-hook.md`,
+ *             `docs/decisions/051-sessionstart-hook-4th-defense.md`.
+ */
+import { existsSync, copyFileSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { mergeHomeSettingsJson } from '@olam/core/src/world/merge-settings.js';
+import { printError, printInfo, printSuccess, printWarning } from '../../output.js';
+import { SESSIONSTART_HOOK_SENTINEL } from './session-start.js';
+export const SESSIONSTART_HOOK_STAGE = 'SessionStart';
+export const SESSIONSTART_HOOK_TIMEOUT_MS = 5000;
+const NOOP_GUARD = 'command -v olam >/dev/null 2>&1 || exit 0;';
+/**
+ * Build the matcher-entry object that lands under hooks.SessionStart in
+ * .claude/settings.json. Embeds the sentinel as a leading no-op shell
+ * assignment so `command.includes(sentinel)` works for idempotent install +
+ * surgical uninstall, then guards against uninstalled-olam to keep the hook
+ * silent when the CLI is missing (audited by `audit:hook-guards`).
+ */
+export function buildSessionStartHookEntry() {
+    return {
+        matcher: '',
+        hooks: [
+            {
+                type: 'command',
+                command: `OLAM_SESSIONSTART_SENTINEL=${SESSIONSTART_HOOK_SENTINEL}; ${NOOP_GUARD} olam flywheel session-start`,
+                timeout: SESSIONSTART_HOOK_TIMEOUT_MS,
+            },
+        ],
+    };
+}
+function settingsPathFor(scope, cwd) {
+    if (scope === 'user')
+        return join(homedir(), '.claude', 'settings.json');
+    return join(cwd ?? process.cwd(), '.claude', 'settings.json');
+}
+function backup(filePath) {
+    if (!existsSync(filePath))
+        return null;
+    const ts = new Date().toISOString().replace(/[:.]/g, '-');
+    const backupPath = `${filePath}.olam-bak.${ts}`;
+    copyFileSync(filePath, backupPath);
+    return backupPath;
+}
+/**
+ * Install (idempotent) — programmatic API for both the CLI action and tests.
+ * Creates parent dir if needed; backs up an existing settings.json before
+ * writing (auto-deletes the backup when the install is a no-op).
+ */
+export function installSessionStartHook(filePath) {
+    mkdirSync(dirname(filePath), { recursive: true });
+    const backupPath = backup(filePath);
+    const result = mergeHomeSettingsJson(filePath, {
+        ensureHook: {
+            stage: SESSIONSTART_HOOK_STAGE,
+            sentinel: SESSIONSTART_HOOK_SENTINEL,
+            entry: buildSessionStartHookEntry(),
+        },
+    });
+    if (result.status === 'already-present' && backupPath) {
+        try {
+            unlinkSync(backupPath);
+        }
+        catch {
+            // best-effort
+        }
+        return { status: 'already-present', filePath, backupPath: null };
+    }
+    return { status: result.status, filePath, backupPath };
+}
+/**
+ * Uninstall (surgical) — walks hooks.SessionStart, drops inner entries whose
+ * command contains the sentinel, drops the outer matcher when its hooks
+ * array becomes empty. Other SessionStart entries (e.g. the skills-sync
+ * hook) are preserved verbatim.
+ */
+export function uninstallSessionStartHook(filePath) {
+    if (!existsSync(filePath))
+        return { status: 'no-settings', filePath };
+    const raw = readFileSync(filePath, 'utf-8');
+    const settings = raw.trim() ? JSON.parse(raw) : {};
+    const matchers = settings.hooks?.SessionStart;
+    if (!Array.isArray(matchers) || matchers.length === 0) {
+        return { status: 'not-found', filePath };
+    }
+    let changed = false;
+    const kept = [];
+    for (const matcher of matchers) {
+        const inner = matcher.hooks ?? [];
+        const keptInner = inner.filter((h) => {
+            if (typeof h.command === 'string' && h.command.includes(SESSIONSTART_HOOK_SENTINEL)) {
+                changed = true;
+                return false;
+            }
+            return true;
+        });
+        if (keptInner.length === 0 && inner.length > 0) {
+            changed = true;
+            continue;
+        }
+        if (keptInner.length === inner.length) {
+            kept.push(matcher);
+        }
+        else {
+            kept.push({ ...matcher, hooks: keptInner });
+        }
+    }
+    if (!changed)
+        return { status: 'not-found', filePath };
+    const next = {
+        ...settings,
+        hooks: { ...settings.hooks, SessionStart: kept },
+    };
+    if (kept.length === 0) {
+        const otherStages = Object.keys(next.hooks ?? {}).filter((k) => k !== 'SessionStart');
+        if (otherStages.length === 0) {
+            delete next.hooks;
+        }
+        else {
+            delete next.hooks.SessionStart;
+        }
+    }
+    writeFileSync(filePath, JSON.stringify(next, null, 2) + '\n');
+    return { status: 'removed', filePath };
+}
+export function registerFlywheelInstallSessionStartHook(parent) {
+    parent
+        .command('install-sessionstart-hook')
+        .description('Install (or --uninstall) the SessionStart context hook into .claude/settings.json. Idempotent. 4th defense layer — preloads operator state before the first prompt.')
+        .option('--scope <scope>', 'project (default; <cwd>/.claude/settings.json) or user (~/.claude/settings.json)', 'project')
+        .option('--uninstall', 'Remove the hook instead of installing it')
+        .action((opts) => {
+        const scope = opts.scope === 'user' ? 'user' : 'project';
+        const filePath = settingsPathFor(scope);
+        if (opts.uninstall) {
+            try {
+                const r = uninstallSessionStartHook(filePath);
+                switch (r.status) {
+                    case 'removed':
+                        printSuccess(`SessionStart context hook removed from ${filePath}`);
+                        return;
+                    case 'not-found':
+                        printInfo('sessionstart hook', `not found in ${filePath} — already uninstalled`);
+                        return;
+                    case 'no-settings':
+                        printInfo('sessionstart hook', `no settings.json at ${filePath} — nothing to remove`);
+                        return;
+                }
+            }
+            catch (err) {
+                printError(`uninstall failed: ${err instanceof Error ? err.message : String(err)}`);
+                process.exitCode = 1;
+            }
+            return;
+        }
+        try {
+            const r = installSessionStartHook(filePath);
+            switch (r.status) {
+                case 'installed':
+                    printSuccess(`SessionStart context hook installed (${scope} scope)`);
+                    printInfo('settings', r.filePath);
+                    if (r.backupPath)
+                        printInfo('backup', r.backupPath);
+                    printInfo('next', 'open a new Claude Code session — Olam state will preload via additionalContext');
+                    return;
+                case 'already-present':
+                    printInfo('sessionstart hook', `already installed at ${r.filePath}`);
+                    return;
+                case 'no-op':
+                    printWarning(`no change made to ${r.filePath}`);
+                    return;
+            }
+        }
+        catch (err) {
+            printError(`install failed: ${err instanceof Error ? err.message : String(err)}`);
+            process.exitCode = 1;
+        }
+    });
+}
+//# sourceMappingURL=install-sessionstart-hook.js.map

package/dist/commands/flywheel/install-sessionstart-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-sessionstart-hook.js","sourceRoot":"","sources":["../../../src/commands/flywheel/install-sessionstart-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC;AACtD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,MAAM,UAAU,GAAG,4CAA4C,CAAC;AAWhE;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,OAAO,EAAE,EAAE;QACX,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,8BAA8B,0BAA0B,KAAK,UAAU,8BAA8B;gBAC9G,OAAO,EAAE,4BAA4B;aACtC;SACF;KACF,CAAC;AACJ,CAAC;AASD,SAAS,eAAe,CAAC,KAAY,EAAE,GAAY;IACjD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB;IAC9B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,GAAG,QAAQ,aAAa,EAAE,EAAE,CAAC;IAChD,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC;AACpB,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE;QAC7C,UAAU,EAAE;YACV,KAAK,EAAE,uBAAuB;YAC9B,QAAQ,EAAE,0BAA0B;YACpC,KAAK,EAAE,0BAA0B,EAAwC;SAC1E;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,IAAI,UAAU,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,UAAU,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACzD,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAEtE,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAkB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACnC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBACpF,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAEvD,MAAM,IAAI,GAAkB;QAC1B,GAAG,QAAQ;QACX,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;KACjD,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;QACtF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,KAAM,CAAC,YAAY,CAAC;QAClC,CAAC;IACH,CAAC;IAED,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,uCAAuC,CAAC,MAAe;IACrE,MAAM;SACH,OAAO,CAAC,2BAA2B,CAAC;SACpC,WAAW,CACV,qKAAqK,CACtK;SACA,MAAM,CAAC,iBAAiB,EAAE,kFAAkF,EAAE,SAAS,CAAC;SACxH,MAAM,CAAC,aAAa,EAAE,0CAA0C,CAAC;SACjE,MAAM,CAAC,CAAC,IAAoB,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAU,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAExC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;gBAC9C,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;oBACjB,KAAK,SAAS;wBACZ,YAAY,CAAC,0CAA0C,QAAQ,EAAE,CAAC,CAAC;wBACnE,OAAO;oBACT,KAAK,WAAW;wBACd,SAAS,CAAC,mBAAmB,EAAE,gBAAgB,QAAQ,wBAAwB,CAAC,CAAC;wBACjF,OAAO;oBACT,KAAK,aAAa;wBAChB,SAAS,CAAC,mBAAmB,EAAE,uBAAuB,QAAQ,sBAAsB,CAAC,CAAC;wBACtF,OAAO;gBACX,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,UAAU,CAAC,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;YAC5C,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,WAAW;oBACd,YAAY,CAAC,wCAAwC,KAAK,SAAS,CAAC,CAAC;oBACrE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;oBAClC,IAAI,CAAC,CAAC,UAAU;wBAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;oBACpD,SAAS,CAAC,MAAM,EAAE,gFAAgF,CAAC,CAAC;oBACpG,OAAO;gBACT,KAAK,iBAAiB;oBACpB,SAAS,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACrE,OAAO;gBACT,KAAK,OAAO;oBACV,YAAY,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAChD,OAAO;YACX,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/flywheel/session-start.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `olam flywheel session-start` — emit operator-state context for the
+ * SessionStart hook (4th defense layer).
+ *
+ * Wire shape mirrors the standalone `scripts/hooks/session-start.mjs` so
+ * both surfaces are valid invocation paths:
+ *   - settings.json `hooks.SessionStart` calls `olam flywheel session-start`.
+ *   - Dev / Hermes / smoke-tests can run `node scripts/hooks/session-start.mjs`
+ *     directly without touching the CLI.
+ *
+ * Contract (matches MJS verbatim):
+ *   - stdout: `{}` when no state; else
+ *     `{ hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: "<text>" } }`
+ *   - stderr: human-readable warnings only.
+ *   - exit: ALWAYS 0 (fail-soft — never block session start).
+ *
+ * Budget: <50 ms. Reads at most 3 small files under ~/.olam/state/. No network.
+ *
+ * ADR: docs/decisions/051-sessionstart-hook-4th-defense.md
+ */
+import type { Command } from 'commander';
+export declare const SESSIONSTART_HOOK_SENTINEL = "olam-sessionstart-context-hook-v1";
+export declare function buildContextBlock(olamHome: string): string | null;
+export declare function emitSessionStartContext(olamHome: string): void;
+export declare function registerFlywheelSessionStart(parent: Command): void;
+//# sourceMappingURL=session-start.d.ts.map

package/dist/commands/flywheel/session-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.d.ts","sourceRoot":"","sources":["../../../src/commands/flywheel/session-start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,eAAO,MAAM,0BAA0B,sCAAsC,CAAC;AAkD9E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsCjE;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAqB9D;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAYlE"}

package/dist/commands/flywheel/session-start.js

@@ -0,0 +1,119 @@
+/**
+ * `olam flywheel session-start` — emit operator-state context for the
+ * SessionStart hook (4th defense layer).
+ *
+ * Wire shape mirrors the standalone `scripts/hooks/session-start.mjs` so
+ * both surfaces are valid invocation paths:
+ *   - settings.json `hooks.SessionStart` calls `olam flywheel session-start`.
+ *   - Dev / Hermes / smoke-tests can run `node scripts/hooks/session-start.mjs`
+ *     directly without touching the CLI.
+ *
+ * Contract (matches MJS verbatim):
+ *   - stdout: `{}` when no state; else
+ *     `{ hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: "<text>" } }`
+ *   - stderr: human-readable warnings only.
+ *   - exit: ALWAYS 0 (fail-soft — never block session start).
+ *
+ * Budget: <50 ms. Reads at most 3 small files under ~/.olam/state/. No network.
+ *
+ * ADR: docs/decisions/051-sessionstart-hook-4th-defense.md
+ */
+import { readFileSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+export const SESSIONSTART_HOOK_SENTINEL = 'olam-sessionstart-context-hook-v1';
+const MAX_WAKE_BRIEF_BYTES = 8 * 1024;
+const MAX_ACTIVE_WORLD_BYTES = 4 * 1024;
+const MAX_CONFIG_BYTES = 8 * 1024;
+function tryReadCapped(path, maxBytes) {
+    try {
+        const stat = statSync(path);
+        if (!stat.isFile() || stat.size === 0)
+            return null;
+        if (stat.size > maxBytes) {
+            process.stderr.write(`[${SESSIONSTART_HOOK_SENTINEL}] skipping ${path}: ${stat.size} bytes > ${maxBytes} cap\n`);
+            return null;
+        }
+        return readFileSync(path, 'utf-8');
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === 'ENOENT')
+            return null;
+        process.stderr.write(`[${SESSIONSTART_HOOK_SENTINEL}] read failed for ${path}: ${err?.message ?? err}\n`);
+        return null;
+    }
+}
+function tryParseJson(raw, label) {
+    if (raw === null)
+        return null;
+    try {
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        process.stderr.write(`[${SESSIONSTART_HOOK_SENTINEL}] ${label} JSON parse failed: ${err?.message ?? err}\n`);
+        return null;
+    }
+}
+export function buildContextBlock(olamHome) {
+    const config = tryParseJson(tryReadCapped(join(olamHome, 'config.json'), MAX_CONFIG_BYTES), 'config.json');
+    const activeWorld = tryParseJson(tryReadCapped(join(olamHome, 'state', 'active-world.json'), MAX_ACTIVE_WORLD_BYTES), 'active-world.json');
+    const wakeBrief = tryReadCapped(join(olamHome, 'state', 'wake-brief.md'), MAX_WAKE_BRIEF_BYTES);
+    const sections = [];
+    if (config && typeof config.activeWorkspace === 'string') {
+        sections.push(`Active workspace: ${config.activeWorkspace}`);
+    }
+    if (activeWorld && typeof activeWorld === 'object') {
+        const parts = [];
+        if (typeof activeWorld.worldId === 'string')
+            parts.push(`worldId=${activeWorld.worldId}`);
+        if (typeof activeWorld.branch === 'string')
+            parts.push(`branch=${activeWorld.branch}`);
+        if (typeof activeWorld.repo === 'string')
+            parts.push(`repo=${activeWorld.repo}`);
+        if (typeof activeWorld.tier === 'string')
+            parts.push(`tier=${activeWorld.tier}`);
+        if (typeof activeWorld.enteredAt === 'string')
+            parts.push(`enteredAt=${activeWorld.enteredAt}`);
+        if (parts.length > 0)
+            sections.push(`Active world: ${parts.join(', ')}`);
+    }
+    if (wakeBrief && wakeBrief.trim().length > 0) {
+        sections.push('Most recent wake brief:\n\n' + wakeBrief.trimEnd());
+    }
+    if (sections.length === 0)
+        return null;
+    const body = sections.join('\n\n');
+    return `Olam SessionStart context (${Buffer.byteLength(body, 'utf-8')} bytes):\n\n${body}`;
+}
+export function emitSessionStartContext(olamHome) {
+    try {
+        const context = buildContextBlock(olamHome);
+        if (context === null) {
+            process.stdout.write('{}\n');
+            return;
+        }
+        process.stdout.write(JSON.stringify({
+            hookSpecificOutput: {
+                hookEventName: 'SessionStart',
+                additionalContext: context,
+            },
+        }) + '\n');
+    }
+    catch (err) {
+        process.stderr.write(`[${SESSIONSTART_HOOK_SENTINEL}] unexpected error: ${err?.message ?? err}\n`);
+        process.stdout.write('{}\n');
+    }
+}
+export function registerFlywheelSessionStart(parent) {
+    parent
+        .command('session-start')
+        .description('Emit operator-state context for the SessionStart hook (4th defense layer). Reads ~/.olam/state/* and writes the additionalContext JSON to stdout. Fail-soft: always exits 0.')
+        .action(() => {
+        const olamHome = process.env.OLAM_HOME ?? join(homedir(), '.olam');
+        emitSessionStartContext(olamHome);
+        // Always exit 0 — the hook must NEVER block session start.
+        process.exit(0);
+    });
+}
+//# sourceMappingURL=session-start.js.map

package/dist/commands/flywheel/session-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.js","sourceRoot":"","sources":["../../../src/commands/flywheel/session-start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,CAAC,MAAM,0BAA0B,GAAG,mCAAmC,CAAC;AAC9E,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,CAAC;AACtC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,CAAC;AACxC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,CAAC;AAElC,SAAS,aAAa,CAAC,IAAY,EAAE,QAAgB;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,0BAA0B,cAAc,IAAI,KAAK,IAAI,CAAC,IAAI,YAAY,QAAQ,QAAQ,CAC3F,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAAyC,EAAE,IAAI,CAAC;QAC9D,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,0BAA0B,qBAAqB,IAAI,KAAM,GAAa,EAAE,OAAO,IAAI,GAAG,IAAI,CAC/F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAc,GAAkB,EAAE,KAAa;IAClE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,0BAA0B,KAAK,KAAK,uBAAwB,GAAa,EAAE,OAAO,IAAI,GAAG,IAAI,CAClG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAcD,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,MAAM,GAAG,YAAY,CACzB,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,gBAAgB,CAAC,EAC9D,aAAa,CACd,CAAC;IACF,MAAM,WAAW,GAAG,YAAY,CAC9B,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,sBAAsB,CAAC,EACnF,mBAAmB,CACpB,CAAC;IACF,MAAM,SAAS,GAAG,aAAa,CAC7B,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,EACxC,oBAAoB,CACrB,CAAC;IAEF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACnD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,IAAI,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,IAAI,OAAO,WAAW,CAAC,SAAS,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC;QAChG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,6BAA6B,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,8BAA8B,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,kBAAkB,EAAE;gBAClB,aAAa,EAAE,cAAc;gBAC7B,iBAAiB,EAAE,OAAO;aAC3B;SACF,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,0BAA0B,uBAAwB,GAAa,EAAE,OAAO,IAAI,GAAG,IAAI,CACxF,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAe;IAC1D,MAAM;SACH,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CACV,8KAA8K,CAC/K;SACA,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QACnE,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAClC,2DAA2D;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/host-cp.d.ts

@@ -81,9 +81,6 @@ interface ContainerInfo {
     readonly state: string;
     readonly status: string;
 }
-/**
- * Find the host-cp container by name. Returns null if absent.
- */
 export declare function findHostCpContainer(): Promise<ContainerInfo | null>;
 /**
  * Phase host-cp-reliability: Probe for a running host CP, supporting

package/dist/commands/host-cp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-cp.d.ts","sourceRoot":"","sources":["../../src/commands/host-cp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAezC,mEAAmE;AACnE,eAAO,MAAM,YAAY,QAAQ,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAcxC;AAeD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAK9C;AAID,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,aAAa,GAAG,IAAI,CA4BxD;AAID;;;;GAIG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAMnC;AAED,wBAAgB,SAAS,IAAI,MAAM,GAAG,IAAI,CAIzC;AAED,wBAAgB,WAAW,IAAI,OAAO,CAKrC;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI1C;AAED,wBAAgB,OAAO,IAAI,MAAM,GAAG,IAAI,CAMvC;AAED,wBAAgB,SAAS,IAAI,OAAO,CAKnC;AAID,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAezE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,GAAG,IAAI,CAAC,CAoD/F;AAED;;;GAGG;AACH,wBAAsB,6BAA6B,IAAI,OAAO,CAAC;IAC7D,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAwBD;AAoBD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,wBAAwB,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,UAAU,CACxB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACpC,aAAa,CAkBf;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkB1G;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAc9C;AAID,mFAAmF;AACnF,wBAAsB,WAAW,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7E;AAkLD,iFAAiF;AACjF,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAEhD;AAuHD,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA4CrD;AA0BD;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAE3E;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,EACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,GACb,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAoCrG;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA4B1D"}
+{"version":3,"file":"host-cp.d.ts","sourceRoot":"","sources":["../../src/commands/host-cp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAezC,mEAAmE;AACnE,eAAO,MAAM,YAAY,QAAQ,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAcxC;AAeD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAK9C;AAID,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,aAAa,GAAG,IAAI,CA4BxD;AAID;;;;GAIG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAMnC;AAED,wBAAgB,SAAS,IAAI,MAAM,GAAG,IAAI,CAIzC;AAED,wBAAgB,WAAW,IAAI,OAAO,CAKrC;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI1C;AAED,wBAAgB,OAAO,IAAI,MAAM,GAAG,IAAI,CAMvC;AAED,wBAAgB,SAAS,IAAI,OAAO,CAKnC;AAID,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAcD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CA4BzE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,GAAG,IAAI,CAAC,CAoD/F;AAED;;;GAGG;AACH,wBAAsB,6BAA6B,IAAI,OAAO,CAAC;IAC7D,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAwBD;AAoBD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,wBAAwB,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,UAAU,CACxB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACpC,aAAa,CAkBf;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkB1G;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAc9C;AAID,mFAAmF;AACnF,wBAAsB,WAAW,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7E;AAkLD,iFAAiF;AACjF,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAEhD;AAuHD,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA4CrD;AA0BD;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAE3E;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,EACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,GACb,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAoCrG;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA4B1D"}

package/dist/commands/host-cp.js

@@ -180,11 +180,36 @@ export function removePid() {
     return true;
 }
 /**
- * Find the host-cp container by name. Returns null if absent.
+ * Find the host-cp container by name. Returns null if absent OR if the
+ * Docker daemon is unresponsive within `DOCKER_PROBE_TIMEOUT_MS`.
+ *
+ * The timeout is critical for issue #988: `olam status` calls this via
+ * `probeHostCp()`; without a timeout, a wedged Docker daemon (Colima with
+ * stale state, dockerd-rootless socket present but unresponsive, etc.)
+ * makes the command hang indefinitely. Read-only commands must never hang
+ * waiting on backing services.
  */
+const DOCKER_PROBE_TIMEOUT_MS = 2_000;
 export async function findHostCpContainer() {
     const docker = new Dockerode(resolveDockerHostOptions());
-    const containers = await docker.listContainers({ all: true });
+    let timer = null;
+    const listing = docker.listContainers({ all: true }).then((cs) => cs);
+    const timeout = new Promise((resolve) => {
+        timer = setTimeout(() => resolve(null), DOCKER_PROBE_TIMEOUT_MS);
+    });
+    let containers;
+    try {
+        containers = (await Promise.race([listing, timeout]));
+    }
+    catch {
+        containers = null;
+    }
+    finally {
+        if (timer !== null)
+            clearTimeout(timer);
+    }
+    if (containers === null)
+        return null;
     for (const c of containers) {
         const names = (c.Names ?? []).map((n) => n.replace(/^\//, ''));
         if (names.includes('olam-host-cp')) {