@pleri/olam-cli 0.1.205 → 0.1.206

package/dist/image-digests.json

@@ -1,12 +1,12 @@
 {
-  "auth": "sha256:06c9cd39405e650141a78927f1701bf7b06a86cd98eeaef9b22eb53d46f6f523",
-  "devbox": "sha256:467e0da5ce48ce281c9799f52b2efabc2eba2228e4ab807412523bdb00a52917",
-  "devbox-base": "sha256:4fd8d2797b6126778c034e442a8429cbbc2e90f772ff11061bcb317d735d9293",
-  "host-cp": "sha256:501037587e33d0a1c13df88d72ad9b855508e4c0163cb65673211cd3ddd9227b",
-  "kg-service": "sha256:a739f0fdf60aef0d26b51314698a07bba423c3d43571616cffd7b1195abb205d",
-  "memory-service": "sha256:b10649ba9b56bb11b99e5142559d4b8a37a2b8ae2ad8ce38fb8b535449d26f85",
-  "mcp-auth": "sha256:cdeb8813619f0198dbbcc80b2c98dbeb3a842e8d1ec38796d459ad254c5e1d98",
+  "auth": "sha256:10879610c8930d06e2201171ca98249da756461fbbca7540face7593de3f2516",
+  "devbox": "sha256:df30833b7192a3c49f842f66556a6c59f1e125931b3eb6555d0747df9025a955",
+  "devbox-base": "sha256:bffb02ffa2abe8781753abc28f985eda029ed7660bc225c8bbb71c5aab94fde9",
+  "host-cp": "sha256:f11d34247171fba77439e3877ba8b781b857d1eb3f1c983bac2621dd7a254fef",
+  "kg-service": "sha256:4fc5f7257d2fa8e11c07e5436a68edd0353c0d503739b9e90f7736e5b336a8fa",
+  "memory-service": "sha256:4b2742280eb0437e3865e603d1d148e28408a1ec8aa4a7dd2c726cd3d31ee8dd",
+  "mcp-auth": "sha256:0780d597d7eb7d124eb998cf8e56649e375a594e4181ddb181f8b1cb2d443701",
   "$schema_version": 1,
-  "$published_version": "0.1.205",
+  "$published_version": "0.1.206",
   "$registry": "ghcr.io/pleri"
 }

package/dist/index.js

@@ -18059,11 +18059,12 @@ function mergeHomeSettingsJson(filePath, options) {
         return { status: "already-present", message: `hook already present at ${filePath}` };
       }
     } else {
+      const filteredArr = options.ensureHook.staleSentinelPrefix ? dropStaleHooks(stageArr, options.ensureHook.staleSentinelPrefix, sentinel) : stageArr;
       settings = {
         ...settings,
         hooks: {
           ...settings.hooks,
-          [stage]: [...stageArr, entry]
+          [stage]: [...filteredArr, entry]
         }
       };
       changed = true;
@@ -18097,6 +18098,24 @@ function readSettings(filePath) {
     return {};
   return JSON.parse(raw);
 }
+function dropStaleHooks(matchers, stalePrefix, currentSentinel) {
+  const out = [];
+  for (const matcher of matchers) {
+    const allCmds = [];
+    if (typeof matcher.command === "string")
+      allCmds.push(matcher.command);
+    if (Array.isArray(matcher.hooks)) {
+      for (const h of matcher.hooks) {
+        if (typeof h.command === "string")
+          allCmds.push(h.command);
+      }
+    }
+    const isStale = allCmds.some((c) => c.includes(stalePrefix)) && !allCmds.some((c) => c.includes(currentSentinel));
+    if (!isStale)
+      out.push(matcher);
+  }
+  return out;
+}
 function isHookSentinelPresent(matchers, sentinel) {
   for (const matcher of matchers) {
     if (typeof matcher?.command === "string" && matcher.command.includes(sentinel)) {
@@ -22350,6 +22369,7 @@ var init_kg_eager = __esm({
 var hook_template_exports = {};
 __export(hook_template_exports, {
   KG_HOOK_SENTINEL: () => KG_HOOK_SENTINEL,
+  KG_HOOK_SENTINEL_PREFIX: () => KG_HOOK_SENTINEL_PREFIX,
   buildHookCommand: () => buildHookCommand,
   buildHookMatcherEntry: () => buildHookMatcherEntry
 });
@@ -22366,10 +22386,20 @@ function buildHookCommand(opts) {
   const emitContext = `python3 -c 'import json,sys,os
 try:
   d=json.loads(sys.stdin.read())
-  if d.get("route") and d["route"] != "grep":
+  route=d.get("route","")
+  if route:
+    if route in ("kg","both"):
+      label=d.get("top_match") or d.get("reason","")
+      layer=d.get("layer","?")
+      nodes=d.get("nodes_matched",0)
+      saved=(d.get("savings") or {}).get("saved_tokens_est",0)
+      saved_k=round(saved/1000)
+      sys.stderr.write(f"\\x1b[32m\\u29bf\\u29bf\\x1b[0m  KG hit \\u2713 {label} \\u2192  L{layer}/{route} \\u00b7 {nodes} nodes \\u00b7 \\x1b[32m~{saved_k}k tokens saved\\x1b[0m\\n")
+    else:
+      sys.stderr.write("\\U0001f50d Grep used\\n")
+  if route and route != "grep":
     label=d.get("top_match") or d.get("reason","")
     layer=d.get("layer","?")
-    route=d["route"]
     nodes=d.get("nodes_matched",0)
     saved=(d.get("savings") or {}).get("saved_tokens_est",0)
     saved_k=round(saved/1000)
@@ -22380,7 +22410,6 @@ try:
     rel=any(k in ql for k in ("call","caller","import","uses","used","reference","who "))
     g="olam kg mirror graph \\"" + sym + "\\" --workspace <ws>"
     hint=g + (" --relates" if rel else "") + "  (where X is defined; add --relates for what calls/imports it; --repo <name> to browse a repo)"
-    sys.stderr.write(f"\\x1b[32m\\u2713 KG hit\\x1b[0m  \\"{q}\\"  \\u2192  L{layer}/{route} \\u00b7 {nodes} nodes \\u00b7 ~{saved_k}k tokens saved\\n")
     print(json.dumps({"hookSpecificOutput":{"hookEventName":"PreToolUse","additionalContext":f"[kg-classifier L{layer}|{route}] {label[:140]}\\n\\u21b3 graph: {hint}"}}))
 except Exception: pass' 2>/dev/null`;
   const isCloud = opts.flavor === "cloud-sandbox";
@@ -22389,7 +22418,7 @@ except Exception: pass' 2>/dev/null`;
   const cloudGuard = isCloud ? `if [ -z "\${OLAM_KG_PROXY_URL:-}" ] || [ -z "\${OLAM_KG_PROXY_BEARER:-}" ]; then exit 0; fi; ` : "";
   const wsField = isCloud ? `,\\"workspace\\":\\"\${OLAM_KG_PROXY_WORKSPACE:-}\\"` : "";
   const curlPost = `RESP=$(curl -s --max-time 1 -X POST -H 'Content-Type: application/json' ${authHeader} -d "{\\"q\\":\\"$(echo \\"$CMD\\" | head -c 200 | tr '\\"' ' ')\\"${wsField}}" ${resolvedUrl} 2>/dev/null)`;
-  const hostRemoteFallback = opts.flavor === "host" ? `; if [ -z "$RESP" ] && [ -r "$HOME/.olam/kg-proxy-url" ] && [ -r "$HOME/.olam/kg-proxy-bearer" ]; then RESP=$(curl -s --max-time 2 -X POST -H 'Content-Type: application/json' -H "Authorization: Bearer $(cat "$HOME/.olam/kg-proxy-bearer")" -d "{\\"q\\":\\"$(echo \\"$CMD\\" | head -c 200 | tr '\\"' ' ')\\"}" "$(cat "$HOME/.olam/kg-proxy-url")/v1/classify" 2>/dev/null); fi` : "";
+  const hostRemoteFallback = opts.flavor === "host" ? `; if [ -z "$RESP" ] && [ -r "$HOME/.olam/kg-proxy-url" ] && [ -r "$HOME/.olam/kg-proxy-bearer" ]; then KG_ORIGIN=$(sed 's|\\(https*://[^/]*\\).*|\\1|' "$HOME/.olam/kg-proxy-url" 2>/dev/null); RESP=$(curl -s --max-time 3 -X POST -H 'Content-Type: application/json' -H "Authorization: Bearer $(cat "$HOME/.olam/kg-proxy-bearer")" -d "{\\"q\\":\\"$(echo \\"$CMD\\" | head -c 200 | tr '\\"' ' ')\\"}" "$KG_ORIGIN/v1/classify" 2>/dev/null); fi` : "";
   return [
     `KG_SENTINEL=${KG_HOOK_SENTINEL}`,
     `CMD=$(${extractCmd})`,
@@ -22409,11 +22438,12 @@ function buildHookMatcherEntry(opts) {
     ]
   };
 }
-var KG_HOOK_SENTINEL;
+var KG_HOOK_SENTINEL, KG_HOOK_SENTINEL_PREFIX;
 var init_hook_template2 = __esm({
   "../core/dist/kg/hook-template.js"() {
     "use strict";
-    KG_HOOK_SENTINEL = "kg-service-v2-classifier-hook";
+    KG_HOOK_SENTINEL = "kg-service-v3-classifier-hook";
+    KG_HOOK_SENTINEL_PREFIX = "kg-service-v";
   }
 });
 
@@ -54926,15 +54956,21 @@ var HOOK_BASENAMES = [
   "agentmemory-reflect-cite.mjs",
   "recall-log.mjs"
 ];
+var SOURCE_ANCHOR = "agentmemory-session-recall.js";
+function resolveSourceDir(here3) {
+  let dir = here3;
+  for (; ; ) {
+    for (const cand of [join122(dir, "memory-hooks"), join122(dir, "memory-service", "hooks")]) {
+      if (existsSync120(join122(cand, SOURCE_ANCHOR))) return cand;
+    }
+    const parent = dirname66(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return resolve28(here3, "..", "memory-hooks");
+}
 function defaultSourceDir() {
-  const here3 = dirname66(fileURLToPath11(import.meta.url));
-  const bundled = resolve28(here3, "..", "..", "..", "memory-hooks");
-  if (existsSync120(bundled)) return bundled;
-  const sibling = resolve28(here3, "..", "..", "..", "..", "memory-service", "hooks");
-  if (existsSync120(sibling)) return sibling;
-  const srcSibling = resolve28(here3, "..", "..", "..", "..", "..", "memory-service", "hooks");
-  if (existsSync120(srcSibling)) return srcSibling;
-  return bundled;
+  return resolveSourceDir(dirname66(fileURLToPath11(import.meta.url)));
 }
 function installOne2(basename17, sourceDir, targetDir, opts) {
   const sourcePath = join122(sourceDir, basename17);
@@ -56318,6 +56354,7 @@ function registerKgInstallHookCommand(kg) {
         ensureHook: {
           stage: "PreToolUse",
           sentinel: KG_HOOK_SENTINEL,
+          staleSentinelPrefix: KG_HOOK_SENTINEL_PREFIX,
           entry: buildHookMatcherEntry({ flavor: "host" })
         }
       });
@@ -56367,7 +56404,7 @@ function dropSentinel(matchers) {
   for (const matcher of matchers) {
     const innerHooks = matcher.hooks ?? [];
     const keptInner = innerHooks.filter((h) => {
-      if (typeof h.command === "string" && h.command.includes(KG_HOOK_SENTINEL)) {
+      if (typeof h.command === "string" && h.command.includes(KG_HOOK_SENTINEL_PREFIX)) {
         changed = true;
         return false;
       }

package/dist/mcp-server.js

@@ -15051,11 +15051,12 @@ function mergeHomeSettingsJson(filePath, options) {
         return { status: "already-present", message: `hook already present at ${filePath}` };
       }
     } else {
+      const filteredArr = options.ensureHook.staleSentinelPrefix ? dropStaleHooks(stageArr, options.ensureHook.staleSentinelPrefix, sentinel) : stageArr;
       settings = {
         ...settings,
         hooks: {
           ...settings.hooks,
-          [stage]: [...stageArr, entry]
+          [stage]: [...filteredArr, entry]
         }
       };
       changed = true;
@@ -15089,6 +15090,24 @@ function readSettings(filePath) {
     return {};
   return JSON.parse(raw);
 }
+function dropStaleHooks(matchers, stalePrefix, currentSentinel) {
+  const out = [];
+  for (const matcher of matchers) {
+    const allCmds = [];
+    if (typeof matcher.command === "string")
+      allCmds.push(matcher.command);
+    if (Array.isArray(matcher.hooks)) {
+      for (const h of matcher.hooks) {
+        if (typeof h.command === "string")
+          allCmds.push(h.command);
+      }
+    }
+    const isStale = allCmds.some((c) => c.includes(stalePrefix)) && !allCmds.some((c) => c.includes(currentSentinel));
+    if (!isStale)
+      out.push(matcher);
+  }
+  return out;
+}
 function isHookSentinelPresent(matchers, sentinel) {
   for (const matcher of matchers) {
     if (typeof matcher?.command === "string" && matcher.command.includes(sentinel)) {
@@ -48697,7 +48716,7 @@ import * as path44 from "node:path";
 import * as os27 from "node:os";
 
 // ../core/dist/kg/hook-template.js
-var KG_HOOK_SENTINEL = "kg-service-v2-classifier-hook";
+var KG_HOOK_SENTINEL = "kg-service-v3-classifier-hook";
 function defaultUrl(flavor) {
   if (flavor === "host")
     return "http://127.0.0.1:9997/classify";
@@ -48711,10 +48730,20 @@ function buildHookCommand(opts) {
   const emitContext = `python3 -c 'import json,sys,os
 try:
   d=json.loads(sys.stdin.read())
-  if d.get("route") and d["route"] != "grep":
+  route=d.get("route","")
+  if route:
+    if route in ("kg","both"):
+      label=d.get("top_match") or d.get("reason","")
+      layer=d.get("layer","?")
+      nodes=d.get("nodes_matched",0)
+      saved=(d.get("savings") or {}).get("saved_tokens_est",0)
+      saved_k=round(saved/1000)
+      sys.stderr.write(f"\\x1b[32m\\u29bf\\u29bf\\x1b[0m  KG hit \\u2713 {label} \\u2192  L{layer}/{route} \\u00b7 {nodes} nodes \\u00b7 \\x1b[32m~{saved_k}k tokens saved\\x1b[0m\\n")
+    else:
+      sys.stderr.write("\\U0001f50d Grep used\\n")
+  if route and route != "grep":
     label=d.get("top_match") or d.get("reason","")
     layer=d.get("layer","?")
-    route=d["route"]
     nodes=d.get("nodes_matched",0)
     saved=(d.get("savings") or {}).get("saved_tokens_est",0)
     saved_k=round(saved/1000)
@@ -48725,7 +48754,6 @@ try:
     rel=any(k in ql for k in ("call","caller","import","uses","used","reference","who "))
     g="olam kg mirror graph \\"" + sym + "\\" --workspace <ws>"
     hint=g + (" --relates" if rel else "") + "  (where X is defined; add --relates for what calls/imports it; --repo <name> to browse a repo)"
-    sys.stderr.write(f"\\x1b[32m\\u2713 KG hit\\x1b[0m  \\"{q}\\"  \\u2192  L{layer}/{route} \\u00b7 {nodes} nodes \\u00b7 ~{saved_k}k tokens saved\\n")
     print(json.dumps({"hookSpecificOutput":{"hookEventName":"PreToolUse","additionalContext":f"[kg-classifier L{layer}|{route}] {label[:140]}\\n\\u21b3 graph: {hint}"}}))
 except Exception: pass' 2>/dev/null`;
   const isCloud = opts.flavor === "cloud-sandbox";
@@ -48734,7 +48762,7 @@ except Exception: pass' 2>/dev/null`;
   const cloudGuard = isCloud ? `if [ -z "\${OLAM_KG_PROXY_URL:-}" ] || [ -z "\${OLAM_KG_PROXY_BEARER:-}" ]; then exit 0; fi; ` : "";
   const wsField = isCloud ? `,\\"workspace\\":\\"\${OLAM_KG_PROXY_WORKSPACE:-}\\"` : "";
   const curlPost = `RESP=$(curl -s --max-time 1 -X POST -H 'Content-Type: application/json' ${authHeader2} -d "{\\"q\\":\\"$(echo \\"$CMD\\" | head -c 200 | tr '\\"' ' ')\\"${wsField}}" ${resolvedUrl} 2>/dev/null)`;
-  const hostRemoteFallback = opts.flavor === "host" ? `; if [ -z "$RESP" ] && [ -r "$HOME/.olam/kg-proxy-url" ] && [ -r "$HOME/.olam/kg-proxy-bearer" ]; then RESP=$(curl -s --max-time 2 -X POST -H 'Content-Type: application/json' -H "Authorization: Bearer $(cat "$HOME/.olam/kg-proxy-bearer")" -d "{\\"q\\":\\"$(echo \\"$CMD\\" | head -c 200 | tr '\\"' ' ')\\"}" "$(cat "$HOME/.olam/kg-proxy-url")/v1/classify" 2>/dev/null); fi` : "";
+  const hostRemoteFallback = opts.flavor === "host" ? `; if [ -z "$RESP" ] && [ -r "$HOME/.olam/kg-proxy-url" ] && [ -r "$HOME/.olam/kg-proxy-bearer" ]; then KG_ORIGIN=$(sed 's|\\(https*://[^/]*\\).*|\\1|' "$HOME/.olam/kg-proxy-url" 2>/dev/null); RESP=$(curl -s --max-time 3 -X POST -H 'Content-Type: application/json' -H "Authorization: Bearer $(cat "$HOME/.olam/kg-proxy-bearer")" -d "{\\"q\\":\\"$(echo \\"$CMD\\" | head -c 200 | tr '\\"' ' ')\\"}" "$KG_ORIGIN/v1/classify" 2>/dev/null); fi` : "";
   return [
     `KG_SENTINEL=${KG_HOOK_SENTINEL}`,
     `CMD=$(${extractCmd})`,

package/hermes-bundle/version.json

@@ -1,4 +1,4 @@
 {
-  "bundledAt": "2026-06-02T08:06:35.843Z",
+  "bundledAt": "2026-06-02T12:45:34.001Z",
   "kgFirstSha": "29a9ccce1b115d049e375c4a90eb5cf7c123e610e2d0590270a4db2cdbc64a28"
 }

package/host-cp/k8s/manifests/50-deployment.yaml

@@ -118,7 +118,7 @@ spec:
         # k3d), started by `olam upgrade` Step 0.7 — not inside this Pod.
       containers:
         - name: olam-host-cp
-          image: ghcr.io/pleri/olam-host-cp@sha256:501037587e33d0a1c13df88d72ad9b855508e4c0163cb65673211cd3ddd9227b
+          image: ghcr.io/pleri/olam-host-cp@sha256:f11d34247171fba77439e3877ba8b781b857d1eb3f1c983bac2621dd7a254fef
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

package/host-cp/k8s/manifests/auth-service/50-deployment.yaml

@@ -70,7 +70,7 @@ spec:
               mountPath: /data
       containers:
         - name: olam-auth-service
-          image: ghcr.io/pleri/olam-auth@sha256:06c9cd39405e650141a78927f1701bf7b06a86cd98eeaef9b22eb53d46f6f523
+          image: ghcr.io/pleri/olam-auth@sha256:10879610c8930d06e2201171ca98249da756461fbbca7540face7593de3f2516
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

package/host-cp/k8s/manifests/kg-service/50-deployment.yaml

@@ -61,7 +61,7 @@ spec:
               mountPath: /data
       containers:
         - name: olam-kg-service
-          image: ghcr.io/pleri/olam-kg-service@sha256:a739f0fdf60aef0d26b51314698a07bba423c3d43571616cffd7b1195abb205d
+          image: ghcr.io/pleri/olam-kg-service@sha256:4fc5f7257d2fa8e11c07e5436a68edd0353c0d503739b9e90f7736e5b336a8fa
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

package/host-cp/k8s/manifests/mcp-auth-service/50-deployment.yaml

@@ -68,7 +68,7 @@ spec:
               mountPath: /data
       containers:
         - name: olam-mcp-auth-service
-          image: ghcr.io/pleri/olam-mcp-auth@sha256:cdeb8813619f0198dbbcc80b2c98dbeb3a842e8d1ec38796d459ad254c5e1d98
+          image: ghcr.io/pleri/olam-mcp-auth@sha256:0780d597d7eb7d124eb998cf8e56649e375a594e4181ddb181f8b1cb2d443701
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

package/host-cp/k8s/manifests/memory-service/50-deployment.yaml

@@ -70,7 +70,7 @@ spec:
           # bootstrap-placeholder comment + run `npm run refresh:manifest-digests`
           # once ghcr.io/pleri/olam-memory-service has a real published digest.
           # bootstrap-placeholder: pre-publish; refresh after first release
-          image: ghcr.io/pleri/olam-memory-service@sha256:b10649ba9b56bb11b99e5142559d4b8a37a2b8ae2ad8ce38fb8b535449d26f85
+          image: ghcr.io/pleri/olam-memory-service@sha256:4b2742280eb0437e3865e603d1d148e28408a1ec8aa4a7dd2c726cd3d31ee8dd
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

package/host-cp/src/server.mjs

@@ -2241,6 +2241,35 @@ const server = http.createServer(instrumentHandler('host-cp', async (req, res) =
           ...(burstKgWorkspace ? { kgWorkspace: burstKgWorkspace } : {}),
           ...(burstHostCpUrl ? { hostCpUrl: burstHostCpUrl } : {}),
           ...(burstChunksSinkUrl ? { chunksSinkUrl: burstChunksSinkUrl } : {}),
+          // attachments → runner materializes operator-pasted file/image bytes
+          // from R2 into /workspace/<sid>/.attachments (plan-chat-spa-attachments
+          // Phase A, #1614). The runner reads body.attachments; sandbox-dispatch-client
+          // forwards it on the plan-DO path, so cloud-burst must too — else a
+          // sandbox dispatch carrying attachments silently runs without the files
+          // (drift parity with sandbox-dispatch-client — same class as #1605/#1622).
+          ...(Array.isArray(parsedBody.attachments) && parsedBody.attachments.length > 0 ? { attachments: parsedBody.attachments } : {}),
+          // Agent-capability fields the runner /spawn handler reads and
+          // sandbox-dispatch-client (cell #4) already forwards. The cloud-burst
+          // path (cell #2) builds an explicit spawnBody, so it must forward them
+          // too or a local-mode→sandbox dispatch carrying any of these silently
+          // loses the capability (same drift class as submodules/attachments).
+          // Body-supplied (the cell #2 SPA send is the only source on this path);
+          // absent → spread to nothing, so today's bare {prompt,session_id,world_id}
+          // burst is byte-for-byte unchanged.
+          //   skillSources → runner lays the operator's /100x chain into ~/.claude.
+          //   mcpServers   → runner writes ~/.claude.json so the agent has MCP tools.
+          //   interactive  → runner launches a tmux REPL instead of headless -p.
+          //   operatorSub  → in-container poster stamps chunks with the owner sub
+          //                  (runner reads body.operatorSub ?? body.operator_sub;
+          //                  forwarding the camelCase alias satisfies both reads —
+          //                  operator_sub is a documented EXCLUSIONS alias).
+          //   chunksSinkBearer → per-dispatch chunk-sink auth (NEVER logged); runner
+          //                  prefers it over its deploy-time env.CHUNKS_INGEST_BEARER.
+          ...(Array.isArray(parsedBody.skillSources) && parsedBody.skillSources.length > 0 ? { skillSources: parsedBody.skillSources } : {}),
+          ...(parsedBody.mcpServers && typeof parsedBody.mcpServers === 'object' && Object.keys(parsedBody.mcpServers).length > 0 ? { mcpServers: parsedBody.mcpServers } : {}),
+          ...(parsedBody.interactive ? { interactive: true } : {}),
+          ...(parsedBody.operatorSub ? { operatorSub: parsedBody.operatorSub } : {}),
+          ...(parsedBody.chunksSinkBearer ? { chunksSinkBearer: parsedBody.chunksSinkBearer } : {}),
           idempotencyKey,
           ...safeOptions,
         };
@@ -4064,7 +4093,7 @@ const _spaCacheByKey = new Map();
 // audit FAIL. Keep it as the canonical HN/WP-array parity source until
 // that audit is repointed at worldFetch.ts directly (follow-up).
 // eslint-disable-next-line no-unused-vars -- retained as HN/WP parity-audit source
-const BOOTSTRAP_SCRIPT = `<script>(function(){function ck(){var m=document.cookie.match(/olam_host_cp_token=([^;]+)/);return m?m[1]:'';}function sw(t){document.cookie='olam_host_cp_token='+t+'; path=/; samesite=strict';}try{var x=new XMLHttpRequest();x.open('GET','/api/bootstrap',false);x.send();if(x.status===200){var d=JSON.parse(x.responseText);sw(d.token);}}catch(e){console.error('[host-cp bootstrap]',e);}var reloading=false;function recover(){if(reloading)return;try{var x=new XMLHttpRequest();x.open('GET','/api/bootstrap',false);x.send();if(x.status===200){var d=JSON.parse(x.responseText);if(d.token&&ck()!==d.token){reloading=true;sw(d.token);console.warn('[host-cp auth recover] token rotated; reloading');location.reload();}}}catch(e){console.error('[host-cp auth recover]',e);}}var HN=['/api/bootstrap','/api/worlds','/api/projects','/api/workspaces','/api/workspaces/match','/api/repos','/api/runbooks','/api/auth','/api/host-stream','/api/plan-chat','/api/plan/agent-runtime','/health'];var WP=['/api/','/session/','/hooks/','/dispatch','/lanes','/codex/','/review/'];function sr(p){if(typeof p!=='string')return false;if(p.startsWith('/api/world/'))return false;for(var i=0;i<HN.length;i++){var n=HN[i];if(p===n||p.startsWith(n+'?')||p.startsWith(n+'/'))return false;}for(var j=0;j<WP.length;j++){var w=WP[j];if(p===w||p===w.replace(/\\/$/,'')||p.startsWith(w)||p.startsWith(w.replace(/\\/$/,'')+'?')||p.startsWith(w.replace(/\\/$/,'')+'/'))return true;}return false;}function wid(){var p=location.pathname;var m=p.match(/^\\/(world|inbox|session)\\/([^/?#]+)/);if(m)return m[2];if(/^\\/(?:worlds?|workspaces?|world|sandbox|session|inbox|plan|design|repos|runbooks|assets|api|health|favicon)($|\\/|\\?)/.test(p))return null;var r=p.match(/^\\/([a-z][a-z0-9-]+)(?:\\/|$|\\?)/);return r?r[1]:null;}function rw(p){var w=wid();return w?'/api/world/'+w+p:p;}var of=window.fetch.bind(window);window.fetch=function(input,init){var pr;if(typeof input==='string'&&sr(input))pr=of(rw(input),init);else if(input&&typeof input.url==='string'&&sr(input.url))pr=of(new Request(rw(input.url),input),init);else pr=of(input,init);return pr.then(function(res){if(res&&res.status===401)recover();return res;});};var OE=window.EventSource;if(OE){window.EventSource=function(u,i){var s=u;if(typeof s==='string'&&sr(s))s=rw(s);var es=new OE(s,i);es.addEventListener('error',function(){if(es.readyState===OE.CLOSED)recover();});return es;};window.EventSource.prototype=OE.prototype;window.EventSource.CONNECTING=OE.CONNECTING;window.EventSource.OPEN=OE.OPEN;window.EventSource.CLOSED=OE.CLOSED;}})();</script>`;
+const BOOTSTRAP_SCRIPT = `<script>(function(){function ck(){var m=document.cookie.match(/olam_host_cp_token=([^;]+)/);return m?m[1]:'';}function sw(t){document.cookie='olam_host_cp_token='+t+'; path=/; samesite=strict';}try{var x=new XMLHttpRequest();x.open('GET','/api/bootstrap',false);x.send();if(x.status===200){var d=JSON.parse(x.responseText);sw(d.token);}}catch(e){console.error('[host-cp bootstrap]',e);}var reloading=false;function recover(){if(reloading)return;try{var x=new XMLHttpRequest();x.open('GET','/api/bootstrap',false);x.send();if(x.status===200){var d=JSON.parse(x.responseText);if(d.token&&ck()!==d.token){reloading=true;sw(d.token);console.warn('[host-cp auth recover] token rotated; reloading');location.reload();}}}catch(e){console.error('[host-cp auth recover]',e);}}var HN=['/api/bootstrap','/api/whoami','/api/worlds','/api/projects','/api/chats','/api/workspaces','/api/workspaces/match','/api/repos','/api/runbooks','/api/auth','/api/host-stream','/api/plan-chat','/api/plan/agent-runtime','/health'];var WP=['/api/','/session/','/hooks/','/dispatch','/lanes','/codex/','/review/'];function sr(p){if(typeof p!=='string')return false;if(p.startsWith('/api/world/'))return false;for(var i=0;i<HN.length;i++){var n=HN[i];if(p===n||p.startsWith(n+'?')||p.startsWith(n+'/'))return false;}for(var j=0;j<WP.length;j++){var w=WP[j];if(p===w||p===w.replace(/\\/$/,'')||p.startsWith(w)||p.startsWith(w.replace(/\\/$/,'')+'?')||p.startsWith(w.replace(/\\/$/,'')+'/'))return true;}return false;}function wid(){var p=location.pathname;var m=p.match(/^\\/(world|inbox|session)\\/([^/?#]+)/);if(m)return m[2];if(/^\\/(?:worlds?|workspaces?|world|sandbox|session|inbox|plan|design|repos|runbooks|assets|api|health|favicon)($|\\/|\\?)/.test(p))return null;var r=p.match(/^\\/([a-z][a-z0-9-]+)(?:\\/|$|\\?)/);return r?r[1]:null;}function rw(p){var w=wid();return w?'/api/world/'+w+p:p;}var of=window.fetch.bind(window);window.fetch=function(input,init){var pr;if(typeof input==='string'&&sr(input))pr=of(rw(input),init);else if(input&&typeof input.url==='string'&&sr(input.url))pr=of(new Request(rw(input.url),input),init);else pr=of(input,init);return pr.then(function(res){if(res&&res.status===401)recover();return res;});};var OE=window.EventSource;if(OE){window.EventSource=function(u,i){var s=u;if(typeof s==='string'&&sr(s))s=rw(s);var es=new OE(s,i);es.addEventListener('error',function(){if(es.readyState===OE.CLOSED)recover();});return es;};window.EventSource.prototype=OE.prototype;window.EventSource.CONNECTING=OE.CONNECTING;window.EventSource.OPEN=OE.OPEN;window.EventSource.CLOSED=OE.CLOSED;}})();</script>`;
 
 /**
  * Build the plan-chat bearer injection script. Reads

package/memory-hooks/agentmemory-recall-trigger.mjs

@@ -204,6 +204,11 @@ async function main() {
   const additionalContext = formatAdditionalContext(response, prompt);
   if (!additionalContext) return;
 
+  const count = response?.results?.length ?? 0;
+  process.stderr.write(
+    `\x1b[34m[🧠⇣ Memory recalled]\x1b[0m (${count} memories · "${prompt.slice(0, 60)}${prompt.length > 60 ? '…' : ''}")\n`
+  );
+
   process.stdout.write(JSON.stringify({
     hookSpecificOutput: {
       hookEventName: 'PreToolUse',

package/memory-hooks/agentmemory-session-recall.js

@@ -321,6 +321,10 @@ async function main() {
   const additionalContext =
     `## Recalled from agent memory (query: "${query}")\n\n${lines}\n\n${nudge}`;
 
+  process.stderr.write(
+    `\x1b[34m[🧠⇣ Memory recalled]\x1b[0m (${result.results.length} memories · "${query}")\n`
+  );
+
   process.stdout.write(JSON.stringify({
     hookSpecificOutput: {
       hookEventName: 'SessionStart',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pleri/olam-cli",
-  "version": "0.1.205",
+  "version": "0.1.206",
   "type": "module",
   "bin": {
     "olam": "./bin/olam.cjs"