@pleri/olam-cli 0.1.200 → 0.1.204

package/dist/protocol-version.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol-version.js","sourceRoot":"","sources":["../src/protocol-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAsB,CAAC,CAAC,CAAU,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAAqC;IAC9E,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,aAAgC,EAChC,cAAiC,gCAAgC;IAEjE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,EAAE;YACX,aAAa,EAAE,EAAE;YACjB,WAAW;YACX,UAAU,EAAE,KAAK;YACjB,MAAM,EACJ,8DAA8D;gBAC9D,+BAA+B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAC1D,gEAAgE;gBAChE,4DAA4D;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,EAAE;YACX,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC;YACjC,WAAW;YACX,UAAU,EAAE,KAAK;YACjB,MAAM,EACJ,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAC/D,wBAAwB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBACnD,CAAC,OAAO,GAAG,MAAM;oBACf,CAAC,CAAC,oFAAoF,MAAM,4CAA4C;oBACxI,CAAC,CAAC,MAAM,GAAG,OAAO;wBAChB,CAAC,CAAC,6HAA6H,MAAM,MAAM;wBAC3I,CAAC,CAAC,oEAAoE,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC;QACjC,WAAW;QACX,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC;AAeD,MAAM,iBAAiB,GAAoB,CAAC,QAAQ,EAAE,EAAE;IACtD,MAAM,MAAM,GAAG,SAAS,CACtB,QAAQ,EACR,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,qDAAqD,CAAC,EACxF,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACtC,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;KAC5B,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,gBAAiC,iBAAiB;IAElD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,QAAQ;YACR,QAAQ,EAAE,EAAE;YACZ,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,yBAAyB,QAAQ,EAAE;SACnE,CAAC;IACJ,CAAC;IACD,oEAAoE;IACpE,mEAAmE;IACnE,8BAA8B;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9C,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE,0BAA0B,CAAC,KAAK,CAAC;QAC3C,aAAa,EAAE,KAAK;QACpB,YAAY,EAAE,SAAS;KACxB,CAAC;AACJ,CAAC"}

package/dist/registry-allowlist.d.ts

@@ -1,47 +0,0 @@
-/**
- * Registry allowlist for `OLAM_DEVBOX_IMAGE` overrides.
- *
- * Closes T9 — unconstrained env-var overrides redirecting docker pulls
- * to attacker-controlled images. The default allowlist is `ghcr.io/pleri/*`
- * (the namespace olam itself publishes to). Out-of-allowlist refs require
- * the explicit `--allow-custom-registry` CLI flag.
- *
- * Decision #19 dropped the env-var bypass form (`OLAM_ALLOW_CUSTOM_REGISTRY=1`)
- * to avoid ambient bypass via shell inheritance / CI-secret leakage. Flag-only.
- *
- * Atlas-parity (Decision #15) lives at `ghcr.io/pleri/olam-devbox-atlas:<v>`
- * — same `pleri` namespace, so the allowlist accepts it without the flag.
- * Other extenders publishing under their own org (e.g. `ghcr.io/atlas/atlas-devbox`)
- * must pass `--allow-custom-registry` per invocation.
- */
-export interface AllowlistDecision {
-    readonly imageRef: string;
-    readonly allowedByDefault: boolean;
-    /**
-     * `true` when:
-     *   - allowedByDefault, OR
-     *   - the operator passed --allow-custom-registry.
-     */
-    readonly accepted: boolean;
-    /**
-     * The stderr line to emit before pull (or rejection). Always populated:
-     *   - allowedByDefault   → empty string (no warning needed)
-     *   - allowed-via-flag   → warning line ("using custom devbox image …")
-     *   - rejected (no flag) → error line ("custom registry blocked; use --allow-custom-registry to override")
-     */
-    readonly stderrLine: string;
-}
-/** Sentinel to keep call sites readable and the API explicit. */
-export interface AllowlistInput {
-    readonly imageRef: string;
-    readonly allowCustomRegistry: boolean;
-}
-export declare function decideAllowlist(input: AllowlistInput): AllowlistDecision;
-/**
- * Resolve the devbox-image reference from the operator's input, in
- * order of precedence: explicit CLI flag > env var > default. Returns
- * `undefined` when neither flag nor env var is set — caller falls back
- * to the digest-pinned default from `image-digests.json` (Phase B).
- */
-export declare function resolveDevboxImageOverride(flagValue: string | undefined, env?: NodeJS.ProcessEnv): string | undefined;
-//# sourceMappingURL=registry-allowlist.d.ts.map

package/dist/registry-allowlist.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry-allowlist.d.ts","sourceRoot":"","sources":["../src/registry-allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,iEAAiE;AACjE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,CAkCxE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CASpB"}

package/dist/registry-allowlist.js

@@ -1,67 +0,0 @@
-/**
- * Registry allowlist for `OLAM_DEVBOX_IMAGE` overrides.
- *
- * Closes T9 — unconstrained env-var overrides redirecting docker pulls
- * to attacker-controlled images. The default allowlist is `ghcr.io/pleri/*`
- * (the namespace olam itself publishes to). Out-of-allowlist refs require
- * the explicit `--allow-custom-registry` CLI flag.
- *
- * Decision #19 dropped the env-var bypass form (`OLAM_ALLOW_CUSTOM_REGISTRY=1`)
- * to avoid ambient bypass via shell inheritance / CI-secret leakage. Flag-only.
- *
- * Atlas-parity (Decision #15) lives at `ghcr.io/pleri/olam-devbox-atlas:<v>`
- * — same `pleri` namespace, so the allowlist accepts it without the flag.
- * Other extenders publishing under their own org (e.g. `ghcr.io/atlas/atlas-devbox`)
- * must pass `--allow-custom-registry` per invocation.
- */
-const DEFAULT_ALLOWLIST_PATTERNS = [
-    // ghcr.io/pleri/<anything>:<tag> or ghcr.io/pleri/<anything>@sha256:<digest>
-    /^ghcr\.io\/pleri\/[^/\s]+(?::[^\s]+|@sha256:[a-f0-9]+)?$/,
-];
-export function decideAllowlist(input) {
-    const { imageRef, allowCustomRegistry } = input;
-    const allowedByDefault = DEFAULT_ALLOWLIST_PATTERNS.some((re) => re.test(imageRef));
-    if (allowedByDefault) {
-        return {
-            imageRef,
-            allowedByDefault: true,
-            accepted: true,
-            stderrLine: '',
-        };
-    }
-    if (allowCustomRegistry) {
-        return {
-            imageRef,
-            allowedByDefault: false,
-            accepted: true,
-            stderrLine: `Warning: using custom devbox image '${imageRef}'. ` +
-                `(--allow-custom-registry was specified.) ` +
-                `Verify the source and digest before proceeding.`,
-        };
-    }
-    return {
-        imageRef,
-        allowedByDefault: false,
-        accepted: false,
-        stderrLine: `Error: image '${imageRef}' is outside allowed registries (ghcr.io/pleri/*).\n` +
-            `  To override: re-run with --allow-custom-registry\n` +
-            `  Verify the source and digest before doing so.`,
-    };
-}
-/**
- * Resolve the devbox-image reference from the operator's input, in
- * order of precedence: explicit CLI flag > env var > default. Returns
- * `undefined` when neither flag nor env var is set — caller falls back
- * to the digest-pinned default from `image-digests.json` (Phase B).
- */
-export function resolveDevboxImageOverride(flagValue, env = process.env) {
-    if (flagValue && flagValue.trim().length > 0) {
-        return flagValue.trim();
-    }
-    const envValue = env.OLAM_DEVBOX_IMAGE;
-    if (envValue && envValue.trim().length > 0) {
-        return envValue.trim();
-    }
-    return undefined;
-}
-//# sourceMappingURL=registry-allowlist.js.map

package/dist/registry-allowlist.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry-allowlist.js","sourceRoot":"","sources":["../src/registry-allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,0BAA0B,GAAsB;IACpD,6EAA6E;IAC7E,0DAA0D;CAClD,CAAC;AA0BX,MAAM,UAAU,eAAe,CAAC,KAAqB;IACnD,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,KAAK,CAAC;IAChD,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEpF,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO;YACL,QAAQ;YACR,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,EAAE;SACf,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ;YACR,gBAAgB,EAAE,KAAK;YACvB,QAAQ,EAAE,IAAI;YACd,UAAU,EACR,uCAAuC,QAAQ,KAAK;gBACpD,2CAA2C;gBAC3C,iDAAiD;SACpD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,gBAAgB,EAAE,KAAK;QACvB,QAAQ,EAAE,KAAK;QACf,UAAU,EACR,iBAAiB,QAAQ,sDAAsD;YAC/E,sDAAsD;YACtD,iDAAiD;KACpD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAA6B,EAC7B,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACvC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/spawn/home-override.d.ts

@@ -1,82 +0,0 @@
-/**
- * --claude-home — per-world Claude Code instance isolation.
- *
- * Today, every world inherits the operator's single `~/.claude/` (host login,
- * settings, hooks, MCP topology, 429 bucket). When the operator wants to run
- * one world against their personal Anthropic account and another against
- * their work account on the same host, they have no clean seam — both worlds
- * share `~/.claude/.credentials.json` and the same 429 cooldown.
- *
- * Inspired by t3code (pingdotgg/t3code) — one server process hosts N Claude
- * Code instances, each with its own `HOME` env var pointing at a separate
- * `~/.claude.instance-N` directory. Zero containers, zero processes-per-
- * account, just `env: { HOME: '...' }` on the spawn.
- *
- * This module exports two pure helpers used by `olam create --claude-home`:
- *
- *   - {@link resolveClaudeHome} — pick the directory to use as HOME for the
- *     world's Claude Code config snapshot. Precedence:
- *       1. Explicit `--claude-home <id-or-path>` flag.
- *       2. Stored claudeHome from a prior `olam create` (re-runs of
- *          `olam enter <worldId>` honour the original choice).
- *       3. Operator's default `$HOME` (legacy behaviour — no behavioural
- *          change for worlds created without the flag).
- *
- *   - {@link ensureClaudeHomeDir} — `mkdir -p` the target dir and write a
- *     `.olam-claude-home` sentinel so first-use detection works.
- *
- * Composes with @olam/auth-client's vault: the vault still rotates
- * credentials WITHIN a HOME; `--claude-home` isolates DIFFERENT HOMEs from
- * each other.
- *
- * See `docs/decisions/045-claude-home-override.md` for the full rationale
- * + operator workflow.
- */
-/** Relative path under `$HOME` where bare-id homes are materialised. */
-export declare const CLAUDE_HOMES_BASE: string;
-/** First-use sentinel filename — written into a freshly-created home. */
-export declare const SENTINEL_FILENAME = ".olam-claude-home";
-/**
- * Allowed shape of a bare `--claude-home <id>` argument.
- *
- * Same shape rule as world ids and skill prefixes: a leading lowercase-or-
- * digit char, then 0–63 more of `[a-z0-9_-]`. Rejects `..`, spaces,
- * absolute-path injections, uppercase. Absolute paths are handled
- * separately (see {@link resolveClaudeHome}) — they don't go through this
- * regex.
- */
-export declare const HOME_ID_RE: RegExp;
-export interface ResolveClaudeHomeArgs {
-    /** `--claude-home <id-or-path>` flag value from CLI parse. Optional. */
-    readonly flag?: string;
-    /**
-     * Prior `claudeHome` stored on the world's metadata. When set and the
-     * caller didn't pass `flag`, this wins over the operator's `$HOME`.
-     */
-    readonly existingWorldConfig?: {
-        readonly claudeHome?: string;
-    };
-    /** Test hook — defaults to `os.homedir()`. */
-    readonly homeDir?: string;
-    /** Test hook — defaults to `process.env.HOME ?? os.homedir()`. */
-    readonly envHome?: string;
-}
-/**
- * Resolve the absolute filesystem path to use as the world's Claude Code
- * HOME. Pure function — no IO, no env reads beyond the injected hooks.
- *
- * @throws Error if `flag` (or `existingWorldConfig.claudeHome`) is a
- *   relative path that doesn't match {@link HOME_ID_RE}.
- */
-export declare function resolveClaudeHome(args: ResolveClaudeHomeArgs): string;
-/**
- * Ensure the resolved Claude home directory exists and carries the
- * `.olam-claude-home` sentinel. Idempotent — re-running on an existing
- * home leaves the sentinel byte-identical (so `olam enter` re-runs don't
- * mutate the home's mtime gratuitously).
- *
- * Does NOT seed credentials, settings, or MCP config — that's the
- * operator's job (one-time `HOME=<resolved-path> claude login`).
- */
-export declare function ensureClaudeHomeDir(targetPath: string): Promise<void>;
-//# sourceMappingURL=home-override.d.ts.map

package/dist/spawn/home-override.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"home-override.d.ts","sourceRoot":"","sources":["../../src/spawn/home-override.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAMH,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,QAAqC,CAAC;AAEpE,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD;;;;;;;;GAQG;AACH,eAAO,MAAM,UAAU,QAA+B,CAAC;AAEvD,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAerE;AAiBD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3E"}

package/dist/spawn/home-override.js

@@ -1,107 +0,0 @@
-/**
- * --claude-home — per-world Claude Code instance isolation.
- *
- * Today, every world inherits the operator's single `~/.claude/` (host login,
- * settings, hooks, MCP topology, 429 bucket). When the operator wants to run
- * one world against their personal Anthropic account and another against
- * their work account on the same host, they have no clean seam — both worlds
- * share `~/.claude/.credentials.json` and the same 429 cooldown.
- *
- * Inspired by t3code (pingdotgg/t3code) — one server process hosts N Claude
- * Code instances, each with its own `HOME` env var pointing at a separate
- * `~/.claude.instance-N` directory. Zero containers, zero processes-per-
- * account, just `env: { HOME: '...' }` on the spawn.
- *
- * This module exports two pure helpers used by `olam create --claude-home`:
- *
- *   - {@link resolveClaudeHome} — pick the directory to use as HOME for the
- *     world's Claude Code config snapshot. Precedence:
- *       1. Explicit `--claude-home <id-or-path>` flag.
- *       2. Stored claudeHome from a prior `olam create` (re-runs of
- *          `olam enter <worldId>` honour the original choice).
- *       3. Operator's default `$HOME` (legacy behaviour — no behavioural
- *          change for worlds created without the flag).
- *
- *   - {@link ensureClaudeHomeDir} — `mkdir -p` the target dir and write a
- *     `.olam-claude-home` sentinel so first-use detection works.
- *
- * Composes with @olam/auth-client's vault: the vault still rotates
- * credentials WITHIN a HOME; `--claude-home` isolates DIFFERENT HOMEs from
- * each other.
- *
- * See `docs/decisions/045-claude-home-override.md` for the full rationale
- * + operator workflow.
- */
-import { mkdir, writeFile, access } from 'node:fs/promises';
-import { homedir } from 'node:os';
-import path from 'node:path';
-/** Relative path under `$HOME` where bare-id homes are materialised. */
-export const CLAUDE_HOMES_BASE = path.join('.olam', 'claude-homes');
-/** First-use sentinel filename — written into a freshly-created home. */
-export const SENTINEL_FILENAME = '.olam-claude-home';
-/**
- * Allowed shape of a bare `--claude-home <id>` argument.
- *
- * Same shape rule as world ids and skill prefixes: a leading lowercase-or-
- * digit char, then 0–63 more of `[a-z0-9_-]`. Rejects `..`, spaces,
- * absolute-path injections, uppercase. Absolute paths are handled
- * separately (see {@link resolveClaudeHome}) — they don't go through this
- * regex.
- */
-export const HOME_ID_RE = /^[a-z0-9][a-z0-9_-]{0,63}$/;
-/**
- * Resolve the absolute filesystem path to use as the world's Claude Code
- * HOME. Pure function — no IO, no env reads beyond the injected hooks.
- *
- * @throws Error if `flag` (or `existingWorldConfig.claudeHome`) is a
- *   relative path that doesn't match {@link HOME_ID_RE}.
- */
-export function resolveClaudeHome(args) {
-    const home = args.homeDir ?? homedir();
-    if (args.flag !== undefined && args.flag.length > 0) {
-        return resolveSpec(args.flag, home);
-    }
-    const stored = args.existingWorldConfig?.claudeHome;
-    if (stored !== undefined && stored.length > 0) {
-        return resolveSpec(stored, home);
-    }
-    // Default — legacy behaviour. Operator's $HOME, with same fallback as
-    // node's stdlib (HOME env → os.homedir()).
-    return args.envHome ?? home;
-}
-function resolveSpec(spec, home) {
-    if (path.isAbsolute(spec)) {
-        return spec;
-    }
-    if (!HOME_ID_RE.test(spec)) {
-        throw new Error(`--claude-home value "${spec}" must be either an absolute path ` +
-            `or a bare id matching ${HOME_ID_RE} (alphanumeric, underscore, dash; ` +
-            `starts with alphanumeric; max 64 chars). Rejected: relative paths, ` +
-            `parent refs, uppercase, whitespace.`);
-    }
-    return path.join(home, CLAUDE_HOMES_BASE, spec);
-}
-/**
- * Ensure the resolved Claude home directory exists and carries the
- * `.olam-claude-home` sentinel. Idempotent — re-running on an existing
- * home leaves the sentinel byte-identical (so `olam enter` re-runs don't
- * mutate the home's mtime gratuitously).
- *
- * Does NOT seed credentials, settings, or MCP config — that's the
- * operator's job (one-time `HOME=<resolved-path> claude login`).
- */
-export async function ensureClaudeHomeDir(targetPath) {
-    await mkdir(targetPath, { recursive: true });
-    const sentinelPath = path.join(targetPath, SENTINEL_FILENAME);
-    try {
-        await access(sentinelPath);
-        // Sentinel exists — leave it alone (idempotency).
-        return;
-    }
-    catch {
-        // Sentinel absent → write it.
-    }
-    await writeFile(sentinelPath, '# olam claude-home — managed by `olam create --claude-home`.\n' +
-        '# Do not delete. Re-create by running `olam create --claude-home <id>` again.\n', 'utf-8');
-}
-//# sourceMappingURL=home-override.js.map

package/dist/spawn/home-override.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"home-override.js","sourceRoot":"","sources":["../../src/spawn/home-override.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AAEpE,yEAAyE;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,4BAA4B,CAAC;AAgBvD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IAEvC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,sEAAsE;IACtE,2CAA2C;IAC3C,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,oCAAoC;YAC9D,yBAAyB,UAAU,oCAAoC;YACvE,qEAAqE;YACrE,qCAAqC,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IAC1D,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3B,kDAAkD;QAClD,OAAO;IACT,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,MAAM,SAAS,CACb,YAAY,EACZ,gEAAgE;QAC9D,iFAAiF,EACnF,OAAO,CACR,CAAC;AACJ,CAAC"}

package/host-cp/src/linear-sync.mjs

@@ -1,43 +0,0 @@
-// H6 (Phase G) — Linear outbound sync skeleton.
-//
-// When a planning_artifacts row is created via H2 chunk extraction AND
-// the operator has Linear MCP active, host-cp posts a new Linear issue
-// (OR appends a comment to an existing linked issue if linear_issue_url
-// is already populated on the row).
-//
-// PHASE G SHIPS SKELETON ONLY. The MCP-from-host wiring is not yet in
-// host-cp; full Linear outbound posting lands in a follow-up commit
-// when the MCP runtime story for host-cp is settled (today MCP lives in
-// the operator's Claude Code runtime, not host-cp).
-//
-// Reverse channel (incoming Linear webhooks update artifact row status):
-// EXPLICITLY OUT OF SCOPE for Phase G per plan body Out of scope list.
-// Deferred to follow-up plan.
-
-/**
- * Best-effort Linear outbound sync. Returns null when MCP is unavailable
- * (the typical case today — silent no-op). When MCP wires in, this
- * function resolves to the posted issue URL which the caller can persist
- * back to planning_artifacts.linear_issue_url.
- *
- * @param {object} args
- * @param {string} args.artifactId
- * @param {string} args.title
- * @param {unknown} args.body            — JSON body of the artifact
- * @param {string} args.sessionId
- * @returns {Promise<string | null>}     — Linear issue URL or null
- */
-export async function syncArtifactToLinear({ artifactId, title, body, sessionId }) {
-  // Probe for Linear MCP availability via host-cp's bootstrap config (TBD).
-  // Until that surface exists, return null. Logging the intent surfaces
-  // the wiring gap to operators inspecting host-cp logs.
-  void artifactId;
-  void title;
-  void body;
-  void sessionId;
-  console.log(
-    `[linear-sync] outbound skip — Linear MCP not yet wired to host-cp; ` +
-      `artifactId=${artifactId} sessionId=${sessionId}`,
-  );
-  return null;
-}