@pleri/olam-cli 0.1.201 → 0.1.205

package/dist/commands/install.js

@@ -1,203 +0,0 @@
-/**
- * olam install — pick an archetype and record it locally.
- *
- *   olam install --as=<archetype> [--capability <name>]... [--force]
- *
- * Archetype-aware setup for Olam. Writes `~/.olam/role.yaml` with the
- * resolved archetype and capability set so later commands + MCP
- * surfaces can introspect what this install is allowed to do.
- *
- * Local behaviour is intentionally minimal — this command records
- * intent and prints archetype-specific next steps. Heavy lifting
- * (docker bootstrap, auth container, CF deploy) stays in its
- * dedicated commands (`olam auth up`, `wrangler deploy`) so
- * `olam install` remains idempotent and boring.
- *
- * Authz enforcement is NOT wired into this file. Local mode is
- * single-actor by design; CF enforcement lands in a later slice that
- * stores roles server-side in OLAM_ROLES KV.
- */
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-import pc from 'picocolors';
-import { stringify as stringifyYaml } from 'yaml';
-import { ARCHETYPES, UnknownArchetypeError, assertCapability, expandArchetype, getArchetype, listArchetypeNames, } from '@olam/core/src/archetypes/index.js';
-import { printError, printHeader, printInfo, printSuccess } from '../output.js';
-const ROLE_FILE_PATH = path.join(os.homedir(), '.olam', 'role.yaml');
-function readRoleFile() {
-    if (!fs.existsSync(ROLE_FILE_PATH))
-        return null;
-    try {
-        // Lazy import so the CLI can still run if yaml is somehow missing
-        // (it's already a peer dep via core, but defensive).
-        const raw = fs.readFileSync(ROLE_FILE_PATH, 'utf-8');
-        // The file is structurally simple; parseYaml would work too but
-        // we keep the install command dependency-light.
-        const m = /archetype:\s*(\S+)/.exec(raw);
-        if (!m)
-            return null;
-        const archetype = m[1];
-        const customCapabilities = [];
-        for (const line of raw.split('\n')) {
-            const caps = /^\s+-\s+(\S+)$/.exec(line);
-            if (caps)
-                customCapabilities.push(caps[1]);
-        }
-        const installedAtMatch = /installedAt:\s*(\d+)/.exec(raw);
-        return {
-            archetype,
-            customCapabilities,
-            installedAt: installedAtMatch ? Number(installedAtMatch[1]) : 0,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-function writeRoleFile(role) {
-    fs.mkdirSync(path.dirname(ROLE_FILE_PATH), { recursive: true });
-    const yaml = stringifyYaml({
-        archetype: role.archetype,
-        customCapabilities: [...role.customCapabilities],
-        installedAt: role.installedAt,
-    });
-    fs.writeFileSync(ROLE_FILE_PATH, yaml, { mode: 0o644 });
-}
-/** Per-archetype "what this install covers / what to do next" hints. */
-function nextStepsFor(archetype) {
-    switch (archetype) {
-        case 'user':
-            return [
-                'You can now run `olam create --task "..."` against a workspace your admin has curated.',
-                'Register the Claude Code plugin if you haven\'t: `claude plugin install ./plugin`.',
-            ];
-        case 'workspace-curator':
-            return [
-                'You can now curate the catalog: `olam workspace add <name> --from-config`.',
-                'Share workspace YAML files via your usual dotfiles / rsync flow.',
-            ];
-        case 'policy-admin':
-            return [
-                'Set deployment-wide policy via env vars (OLAM_CLAUDE_PERMISSION_MODE) or wrangler secrets.',
-                'PR-gate defaults can be overridden per-workspace under `policy.set`.',
-            ];
-        case 'bootstrapper':
-            return [
-                'Start the auth container: `olam services up`, then `olam auth login`.',
-                'For Cloudflare deployments: `cd packages/cloudflare-worker && pnpm wrangler deploy`.',
-            ];
-        case 'admin':
-            return [
-                'Start the auth container: `olam services up`, then `olam auth login`.',
-                'Curate workspaces: `olam workspace add <name> --from-config`.',
-                'Assign narrower archetypes to teammates (CF side, once slice C lands): use `role.manage`.',
-            ];
-        case 'dev':
-            return [
-                'You have repo-local privileges. Run `npm run build:ci && npm run test:ci`.',
-                'Everything an admin has is available.',
-            ];
-        default:
-            return [];
-    }
-}
-export function registerInstall(program) {
-    program
-        .command('install')
-        .description('Pick an archetype preset for this Olam install')
-        .option('--as <archetype>', 'Archetype name (user, workspace-curator, policy-admin, bootstrapper, admin, dev)')
-        .option('--capability <name>', 'Additional capability to grant beyond the archetype preset (repeatable)', (value, acc) => {
-        acc.push(value);
-        return acc;
-    }, [])
-        .option('--force', 'Overwrite an existing role.yaml', false)
-        .option('--show', 'Print the current install\'s archetype and exit', false)
-        .action((opts) => {
-        if (opts.show) {
-            const existing = readRoleFile();
-            if (!existing) {
-                console.log(pc.dim(`No install recorded at ${ROLE_FILE_PATH}`));
-                return;
-            }
-            printHeader('Current install');
-            printInfo('Archetype', existing.archetype);
-            printInfo('File', ROLE_FILE_PATH);
-            const caps = expandArchetype(existing.archetype);
-            for (const cap of existing.customCapabilities)
-                caps.add(cap);
-            printHeader(`Effective capabilities (${caps.size})`);
-            for (const cap of [...caps].sort()) {
-                console.log(`  ${cap}`);
-            }
-            return;
-        }
-        if (!opts.as) {
-            printError('Missing --as <archetype>. Known archetypes:');
-            for (const arch of ARCHETYPES) {
-                console.log(`  ${pc.bold(arch.name.padEnd(20))} ${pc.dim(arch.description)}`);
-            }
-            process.exitCode = 1;
-            return;
-        }
-        const archetype = getArchetype(opts.as);
-        if (!archetype) {
-            printError(`Unknown archetype "${opts.as}". Known: ${listArchetypeNames().join(', ')}`);
-            process.exitCode = 1;
-            return;
-        }
-        // Validate any additional capabilities up front so we don't
-        // half-write a role file with a typo'd capability.
-        const extras = [];
-        for (const raw of opts.capability) {
-            try {
-                extras.push(assertCapability(raw));
-            }
-            catch (err) {
-                printError(err instanceof Error ? err.message : String(err));
-                process.exitCode = 1;
-                return;
-            }
-        }
-        const existing = readRoleFile();
-        if (existing && !opts.force) {
-            printError(`Install already recorded as "${existing.archetype}" at ${ROLE_FILE_PATH}. Pass --force to overwrite.`);
-            process.exitCode = 1;
-            return;
-        }
-        let resolved;
-        try {
-            resolved = expandArchetype(archetype.name);
-        }
-        catch (err) {
-            if (err instanceof UnknownArchetypeError) {
-                printError(err.message);
-                process.exitCode = 1;
-                return;
-            }
-            throw err;
-        }
-        for (const extra of extras)
-            resolved.add(extra);
-        writeRoleFile({
-            archetype: archetype.name,
-            customCapabilities: extras,
-            installedAt: Date.now(),
-        });
-        printHeader(`Installed as ${pc.bold(archetype.name)}`);
-        printInfo('File', ROLE_FILE_PATH);
-        printInfo('Description', archetype.description);
-        printInfo('Capabilities', `${resolved.size} total`);
-        if (extras.length > 0) {
-            printInfo('Added beyond preset', extras.join(', '));
-        }
-        const steps = nextStepsFor(archetype.name);
-        if (steps.length > 0) {
-            printHeader('Next steps');
-            for (const step of steps)
-                console.log(`  ${pc.dim('•')} ${step}`);
-        }
-        printSuccess('Done. Run `olam install --show` to see the full capability list.');
-    });
-}
-//# sourceMappingURL=install.js.map

package/dist/commands/install.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EACL,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,kBAAkB,GAEnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEhF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAQrE,SAAS,YAAY;IACnB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,kEAAkE;QAClE,qDAAqD;QACrD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACrD,gEAAgE;QAChE,gDAAgD;QAChD,MAAM,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,kBAAkB,GAAiB,EAAE,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,IAAI;gBAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,OAAO;YACL,SAAS;YACT,kBAAkB;YAClB,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAChE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAc;IACnC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,aAAa,CAAC;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,kBAAkB,EAAE,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAChD,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CAAC,SAAiB;IACrC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,OAAO;gBACL,wFAAwF;gBACxF,oFAAoF;aACrF,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO;gBACL,4EAA4E;gBAC5E,kEAAkE;aACnE,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,4FAA4F;gBAC5F,sEAAsE;aACvE,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,uEAAuE;gBACvE,sFAAsF;aACvF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,uEAAuE;gBACvE,+DAA+D;gBAC/D,2FAA2F;aAC5F,CAAC;QACJ,KAAK,KAAK;YACR,OAAO;gBACL,4EAA4E;gBAC5E,uCAAuC;aACxC,CAAC;QACJ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,kBAAkB,EAAE,kFAAkF,CAAC;SAC9G,MAAM,CACL,qBAAqB,EACrB,yEAAyE,EACzE,CAAC,KAAa,EAAE,GAAa,EAAE,EAAE;QAC/B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,GAAG,CAAC;IACb,CAAC,EACD,EAAc,CACf;SACA,MAAM,CAAC,SAAS,EAAE,iCAAiC,EAAE,KAAK,CAAC;SAC3D,MAAM,CAAC,QAAQ,EAAE,iDAAiD,EAAE,KAAK,CAAC;SAC1E,MAAM,CAAC,CAAC,IAKR,EAAE,EAAE;QACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,0BAA0B,cAAc,EAAE,CAAC,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,WAAW,CAAC,iBAAiB,CAAC,CAAC;YAC/B,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC3C,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACjD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,kBAAkB;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7D,WAAW,CAAC,2BAA2B,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACrD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,UAAU,CAAC,6CAA6C,CAAC,CAAC;YAC1D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,UAAU,CACR,sBAAsB,IAAI,CAAC,EAAE,aAAa,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,4DAA4D;QAC5D,mDAAmD;QACnD,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,UAAU,CACR,gCAAgC,QAAQ,CAAC,SAAS,QAAQ,cAAc,8BAA8B,CACvG,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhD,aAAa,CAAC;YACZ,SAAS,EAAE,SAAS,CAAC,IAAI;YACzB,kBAAkB,EAAE,MAAM;YAC1B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;QAEH,WAAW,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvD,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAClC,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;QAChD,SAAS,CAAC,cAAc,EAAE,GAAG,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;QACpD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,SAAS,CAAC,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,WAAW,CAAC,YAAY,CAAC,CAAC;YAC1B,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,YAAY,CAAC,kEAAkE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/keys-list-json.d.ts

@@ -1,55 +0,0 @@
-/**
- * Pure JSON serialiser for `olam keys --json`.
- *
- * Kept separate from the command action so the wire contract is
- * unit-testable without a filesystem round-trip (mirrors the pattern
- * used by `auth-list-json.ts`, `repos-list-json.ts`, and
- * `servicesStatusJson` in services.ts).
- *
- * WHY this exists: agent/script drivers (CI pipelines, Rico, flywheel
- * chain skills) need to discover which LLM API keys are configured before
- * spawning worlds that rely on them. The human table is colorized and
- * already applies redaction for display; this serialiser gives drivers a
- * stable, color-free array with the same redaction contract.
- *
- * Secret redaction: key VALUES are sensitive (e.g. `sk-proj-...` for
- * OpenAI, provider tokens, etc.). The serialiser ALWAYS emits redacted
- * values — same `first-8-chars + "..."` convention used by the human
- * renderer — so `olam keys --json` is safe to pipe to CI logs, agent
- * reasoning traces, or Rico digests without leaking secrets.
- *
- * The key NAMES are not secrets (e.g. "OPENAI", "ANTHROPIC") — they are
- * emitted verbatim to let drivers check which providers are configured.
- */
-/**
- * Per-key row in the `keys --json` payload.
- * Field names are load-bearing — add new fields freely, never rename.
- */
-export interface KeyListJsonEntry {
-    /** Key name as stored in keys.yaml (uppercase by convention). */
-    readonly name: string;
-    /**
-     * Redacted key value: first 8 chars + "...".
-     * Never the full secret — matches the human renderer's redact() contract.
-     */
-    readonly redactedValue: string;
-}
-/** Top-level shape emitted by `olam keys --json`. */
-export interface KeysListJson {
-    /** Number of configured keys. */
-    readonly count: number;
-    readonly keys: readonly KeyListJsonEntry[];
-}
-/**
- * Redact a secret value: keep first 8 chars, replace the rest with "...".
- * Matches the `redact()` helper in keys.ts — deliberately inline so the
- * serialiser has no runtime dependency on the command module.
- */
-export declare function redactKeyValue(value: string): string;
-/**
- * Serialise the keys map to the stable `--json` wire shape.
- * Accepts null (no file / empty file) and returns an empty payload.
- * Returns a JSON string (no trailing newline — caller adds it).
- */
-export declare function renderKeysListJson(keys: Record<string, string> | null): string;
-//# sourceMappingURL=keys-list-json.d.ts.map

package/dist/commands/keys-list-json.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys-list-json.d.ts","sourceRoot":"","sources":["../../src/commands/keys-list-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC5C;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,MAAM,CAiB9E"}

package/dist/commands/keys-list-json.js

@@ -1,54 +0,0 @@
-/**
- * Pure JSON serialiser for `olam keys --json`.
- *
- * Kept separate from the command action so the wire contract is
- * unit-testable without a filesystem round-trip (mirrors the pattern
- * used by `auth-list-json.ts`, `repos-list-json.ts`, and
- * `servicesStatusJson` in services.ts).
- *
- * WHY this exists: agent/script drivers (CI pipelines, Rico, flywheel
- * chain skills) need to discover which LLM API keys are configured before
- * spawning worlds that rely on them. The human table is colorized and
- * already applies redaction for display; this serialiser gives drivers a
- * stable, color-free array with the same redaction contract.
- *
- * Secret redaction: key VALUES are sensitive (e.g. `sk-proj-...` for
- * OpenAI, provider tokens, etc.). The serialiser ALWAYS emits redacted
- * values — same `first-8-chars + "..."` convention used by the human
- * renderer — so `olam keys --json` is safe to pipe to CI logs, agent
- * reasoning traces, or Rico digests without leaking secrets.
- *
- * The key NAMES are not secrets (e.g. "OPENAI", "ANTHROPIC") — they are
- * emitted verbatim to let drivers check which providers are configured.
- */
-/**
- * Redact a secret value: keep first 8 chars, replace the rest with "...".
- * Matches the `redact()` helper in keys.ts — deliberately inline so the
- * serialiser has no runtime dependency on the command module.
- */
-export function redactKeyValue(value) {
-    if (value.length <= 8)
-        return value + '...';
-    return value.slice(0, 8) + '...';
-}
-/**
- * Serialise the keys map to the stable `--json` wire shape.
- * Accepts null (no file / empty file) and returns an empty payload.
- * Returns a JSON string (no trailing newline — caller adds it).
- */
-export function renderKeysListJson(keys) {
-    if (!keys) {
-        const payload = { count: 0, keys: [] };
-        return JSON.stringify(payload);
-    }
-    const rows = Object.entries(keys).map(([name, value]) => ({
-        name,
-        redactedValue: redactKeyValue(value),
-    }));
-    const payload = {
-        count: rows.length,
-        keys: rows,
-    };
-    return JSON.stringify(payload);
-}
-//# sourceMappingURL=keys-list-json.js.map

package/dist/commands/keys-list-json.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys-list-json.js","sourceRoot":"","sources":["../../src/commands/keys-list-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAuBH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,GAAG,KAAK,CAAC;IAC5C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAmC;IACpE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,OAAO,GAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAuB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI;QACJ,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC;KACrC,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAiB;QAC5B,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,IAAI,EAAE,IAAI;KACX,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/commands/keys.d.ts

@@ -1,26 +0,0 @@
-/**
- * olam keys — Manage operator-state LLM API keys at ~/.olam/keys.yaml.
- *
- * Subcommands/options:
- *   olam keys                          — list current keys (values redacted)
- *   olam keys --set OPENAI=sk-proj-...  — write/update a single key
- *   olam keys --unset OPENAI            — remove a key
- *   olam keys path                      — print ~/.olam/keys.yaml absolute path
- *
- * Keys propagate to worlds at boot as OLAM_LLM_<UPPER_KEY> env vars.
- * File is chmod 600; values are never printed in full by the CLI.
- */
-import type { Command } from 'commander';
-/** Absolute path to ~/.olam/keys.yaml. */
-export declare function keysFilePath(): string;
-/**
- * Read ~/.olam/keys.yaml and return a plain key→value map.
- *
- * Returns null when the file is missing or empty — not an error, just
- * means the operator hasn't set any keys yet.
- * Returns null for malformed YAML so callers can surface a clear message
- * instead of a raw parse stack trace.
- */
-export declare function readKeysFile(): Record<string, string> | null;
-export declare function registerKeys(program: Command): void;
-//# sourceMappingURL=keys.d.ts.map

package/dist/commands/keys.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAezC,0CAA0C;AAC1C,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAgB5D;AA0BD,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAiFnD"}

package/dist/commands/keys.js

@@ -1,157 +0,0 @@
-/**
- * olam keys — Manage operator-state LLM API keys at ~/.olam/keys.yaml.
- *
- * Subcommands/options:
- *   olam keys                          — list current keys (values redacted)
- *   olam keys --set OPENAI=sk-proj-...  — write/update a single key
- *   olam keys --unset OPENAI            — remove a key
- *   olam keys path                      — print ~/.olam/keys.yaml absolute path
- *
- * Keys propagate to worlds at boot as OLAM_LLM_<UPPER_KEY> env vars.
- * File is chmod 600; values are never printed in full by the CLI.
- */
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-import YAML from 'yaml';
-import { printError, printSuccess, printHeader, printInfo } from '../output.js';
-import { renderKeysListJson } from './keys-list-json.js';
-// ── File helpers ──────────────────────────────────────────────────
-/** Honors OLAM_HOME for tests — mirrors olamHome() in host-cp.ts. */
-function olamHome() {
-    return process.env.OLAM_HOME ?? path.join(os.homedir(), '.olam');
-}
-/** Absolute path to ~/.olam/keys.yaml. */
-export function keysFilePath() {
-    return path.join(olamHome(), 'keys.yaml');
-}
-/**
- * Read ~/.olam/keys.yaml and return a plain key→value map.
- *
- * Returns null when the file is missing or empty — not an error, just
- * means the operator hasn't set any keys yet.
- * Returns null for malformed YAML so callers can surface a clear message
- * instead of a raw parse stack trace.
- */
-export function readKeysFile() {
-    const filePath = keysFilePath();
-    if (!fs.existsSync(filePath))
-        return null;
-    const raw = fs.readFileSync(filePath, 'utf-8').trim();
-    if (raw.length === 0)
-        return null;
-    try {
-        const parsed = YAML.parse(raw);
-        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
-            return null;
-        const result = {};
-        for (const [k, v] of Object.entries(parsed)) {
-            if (typeof v === 'string')
-                result[k] = v;
-        }
-        return Object.keys(result).length > 0 ? result : null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Ensure ~/.olam/ exists and write the given map to ~/.olam/keys.yaml
- * with chmod 600 so only the operator can read it.
- */
-function writeKeysFile(keys) {
-    const dir = olamHome();
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
-    }
-    const filePath = keysFilePath();
-    const content = YAML.stringify(keys);
-    fs.writeFileSync(filePath, content, { encoding: 'utf-8', mode: 0o600 });
-    // Enforce 600 even if file already existed with looser perms.
-    fs.chmodSync(filePath, 0o600);
-}
-/** Redact a secret value: keep first 8 chars, replace the rest with "...". */
-function redact(value) {
-    if (value.length <= 8)
-        return value + '...';
-    return value.slice(0, 8) + '...';
-}
-// ── Command registration ──────────────────────────────────────────
-export function registerKeys(program) {
-    const keysCmd = program
-        .command('keys')
-        .description('Manage LLM API keys stored at ~/.olam/keys.yaml')
-        .option('--set <KEY=VALUE>', 'Write or update a key (e.g. --set OPENAI=sk-proj-...)')
-        .option('--unset <KEY>', 'Remove a key')
-        .option('--json', 'Emit configured keys as machine-readable JSON (values redacted)', false)
-        .action((opts) => {
-        // olam keys path — print the file path
-        // (handled as subcommand below; this action handles the flag paths)
-        if (opts.set) {
-            const eqIdx = opts.set.indexOf('=');
-            if (eqIdx <= 0) {
-                printError('--set requires KEY=VALUE format (e.g. --set OPENAI=sk-proj-...)');
-                process.exitCode = 1;
-                return;
-            }
-            const key = opts.set.slice(0, eqIdx).trim().toUpperCase();
-            const value = opts.set.slice(eqIdx + 1).trim();
-            if (key.length === 0) {
-                printError('Key name cannot be empty');
-                process.exitCode = 1;
-                return;
-            }
-            if (value.length === 0) {
-                printError('Value cannot be empty — to remove a key use --unset');
-                process.exitCode = 1;
-                return;
-            }
-            const existing = readKeysFile() ?? {};
-            existing[key] = value;
-            writeKeysFile(existing);
-            printSuccess(`${key} saved to ${keysFilePath()}`);
-            return;
-        }
-        if (opts.unset) {
-            const key = opts.unset.trim().toUpperCase();
-            const existing = readKeysFile();
-            if (!existing || !(key in existing)) {
-                printError(`Key ${key} not found in ${keysFilePath()}`);
-                process.exitCode = 1;
-                return;
-            }
-            const { [key]: _removed, ...rest } = existing;
-            if (Object.keys(rest).length === 0) {
-                // Remove the file entirely when the last key is unset.
-                fs.unlinkSync(keysFilePath());
-            }
-            else {
-                writeKeysFile(rest);
-            }
-            printSuccess(`${key} removed`);
-            return;
-        }
-        // Default: list keys with redacted values
-        const keys = readKeysFile();
-        if (opts.json) {
-            process.stdout.write(renderKeysListJson(keys) + '\n');
-            return;
-        }
-        printHeader('LLM API keys (~/.olam/keys.yaml)');
-        if (!keys) {
-            console.log('  No keys configured. Use olam keys --set KEY=VALUE to add one.');
-            return;
-        }
-        for (const [k, v] of Object.entries(keys)) {
-            printInfo(k, redact(v));
-        }
-    });
-    // olam keys path — print the file path (no redaction needed)
-    keysCmd
-        .command('path')
-        .description('Print the absolute path to ~/.olam/keys.yaml')
-        .action(() => {
-        console.log(keysFilePath());
-    });
-}
-//# sourceMappingURL=keys.js.map

package/dist/commands/keys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,qEAAqE;AAErE,qEAAqE;AACrE,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxF,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;YACvE,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAA4B;IACjD,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,8DAA8D;IAC9D,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,GAAG,KAAK,CAAC;IAC5C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AACnC,CAAC;AAED,qEAAqE;AAErE,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,mBAAmB,EAAE,uDAAuD,CAAC;SACpF,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC;SACvC,MAAM,CAAC,QAAQ,EAAE,iEAAiE,EAAE,KAAK,CAAC;SAC1F,MAAM,CAAC,CAAC,IAAsD,EAAE,EAAE;QACjE,uCAAuC;QACvC,oEAAoE;QAEpE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,UAAU,CAAC,iEAAiE,CAAC,CAAC;gBAC9E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,UAAU,CAAC,0BAA0B,CAAC,CAAC;gBACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,UAAU,CAAC,qDAAqD,CAAC,CAAC;gBAClE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC;YACtC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxB,YAAY,CAAC,GAAG,GAAG,aAAa,YAAY,EAAE,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC;gBACpC,UAAU,CAAC,OAAO,GAAG,iBAAiB,YAAY,EAAE,EAAE,CAAC,CAAC;gBACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;YAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,uDAAuD;gBACvD,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,YAAY,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAE5B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,WAAW,CAAC,kCAAkC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6DAA6D;IAC7D,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,GAAG,EAAE;QACX,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/kg-build.d.ts

@@ -1,80 +0,0 @@
-/**
- * `olam kg build` — pristine workspace KG build via kg-service `/build`.
- *
- * kg-service-container-v2 Phase F (2026-05-14) migrates this command
- * from the legacy host-side scratch-copy + docker-run-graphify pattern
- * to a single HTTP POST to the always-running `olam-kg-service`
- * container. The scratch-copy now happens INSIDE the container as root
- * (no host UID permission issues), so multi-submodule workspaces with
- * non-operator-owned `.git/objects/pack/*` files and broken symlinks
- * build cleanly — closes Samuel's atlas-core failure from 2026-05-13.
- *
- * Flow:
- *   1. Resolve workspace name + source path (cwd by default).
- *   2. Translate cwd to container-side path under `/host-home/…`
- *      (kg-service container mounts $HOME read-only at /host-home).
- *   3. POST {workspace, repo_path} to localhost:9997/build.
- *   4. Server-side: cp source → /tmp/scratch (root-perms), graphify
- *      update, move output to /kg-data/<workspace>/graphify-out/, clean.
- *   5. Write host-side freshness.json mirroring the server's response.
- *
- * Failure modes surfaced with remedies:
- *   - kg-service not reachable → "run `olam services up`".
- *   - cwd not under $HOME → operator hint (mount path is $HOME:/host-home).
- *   - graphify timeout / failure / scratch_copy_failed → pass-through error.
- *
- * Out of scope (v1 behaviour retained):
- *   - Workspace-catalog lookup (deferred follow-on); cwd-as-source.
- *   - Watching / progress streaming — `/build` is synchronous, blocking.
- */
-import type { Command } from 'commander';
-interface KgBuildOptions {
-    readonly json?: boolean;
-}
-export interface QueueEntry {
-    path: string;
-    addedAt: number;
-    failedAt?: number;
-    failedReason?: string;
-}
-export type ReadQueueFn = (queuePath: string) => QueueEntry[];
-export type WriteQueueFn = (queuePath: string, entries: QueueEntry[]) => void;
-export interface KgPendingOptions {
-    readonly queuePath?: string;
-    readonly readQueueFn?: ReadQueueFn;
-    readonly writeQueueFn?: WriteQueueFn;
-}
-export interface KgPendingResult {
-    readonly exitCode: number;
-    readonly built: string[];
-    readonly failed: string[];
-}
-/**
- * Drain the kg-pending.jsonl queue: build each entry sequentially via kg-service,
- * remove successfully-built entries from the queue, leave failures with failedAt/failedReason.
- */
-export declare function runKgBuildPending(opts?: KgPendingOptions): Promise<KgPendingResult>;
-interface FreshnessRecord {
-    readonly built_at: string;
-    readonly duration_ms: number;
-    readonly node_count: number | null;
-    readonly edge_count: number | null;
-    readonly workspace: string;
-    readonly graphify_path: 'container';
-}
-export interface KgBuildResult {
-    readonly exitCode: number;
-    readonly freshness?: FreshnessRecord;
-    readonly outputDir?: string;
-}
-/**
- * Programmatic entry point — exported so tests can drive without spawning
- * a sub-process.
- */
-export declare function runKgBuild(workspaceArg: string | undefined, options?: KgBuildOptions): Promise<KgBuildResult>;
-/**
- * `olam kg <subcommand>` group — registers the kg subcommand tree.
- */
-export declare function registerKg(program: Command): void;
-export {};
-//# sourceMappingURL=kg-build.d.ts.map

package/dist/commands/kg-build.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kg-build.d.ts","sourceRoot":"","sources":["../../src/commands/kg-build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBzC,UAAU,cAAc;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAID,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;AAC9D,MAAM,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC;AAE9E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CAC3B;AAsBD;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyE7F;AAED,UAAU,eAAe;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC;CACrC;AAOD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAqCD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAiFxB;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuCjD"}