@pleri/olam-cli 0.1.40 → 0.1.42

package/dist/mcp-server.js

@@ -21213,7 +21213,7 @@ __export(auth_exports, {
   register: () => register2
 });
 
-// ../core/src/auth/secret.ts
+// ../core/dist/auth/secret.js
 import * as crypto from "node:crypto";
 import * as fs2 from "node:fs";
 import * as os from "node:os";
@@ -21226,11 +21226,13 @@ function getSecretFilePath() {
 }
 function getOrCreateSecret() {
   const fromEnv = process.env[SECRET_ENV_VAR];
-  if (fromEnv && fromEnv.length > 0) return fromEnv;
+  if (fromEnv && fromEnv.length > 0)
+    return fromEnv;
   const file = getSecretFilePath();
   if (fs2.existsSync(file)) {
     const value = fs2.readFileSync(file, "utf-8").trim();
-    if (value.length > 0) return value;
+    if (value.length > 0)
+      return value;
   }
   const generated = crypto.randomBytes(SECRET_BYTES).toString("base64url");
   fs2.mkdirSync(path2.dirname(file), { recursive: true });
@@ -21243,14 +21245,16 @@ function getOrCreateSecret() {
 }
 function readSecretIfExists() {
   const fromEnv = process.env[SECRET_ENV_VAR];
-  if (fromEnv && fromEnv.length > 0) return fromEnv;
+  if (fromEnv && fromEnv.length > 0)
+    return fromEnv;
   const file = getSecretFilePath();
-  if (!fs2.existsSync(file)) return null;
+  if (!fs2.existsSync(file))
+    return null;
   const value = fs2.readFileSync(file, "utf-8").trim();
   return value.length > 0 ? value : null;
 }
 
-// ../core/src/auth/client.ts
+// ../core/dist/auth/client.js
 var DEFAULT_BASE_URL = "http://127.0.0.1:9999";
 var DEFAULT_TIMEOUT_MS = 3e3;
 var RETRY_COUNT = 2;
@@ -21295,7 +21299,8 @@ var AuthClient = class {
       params.set("account", options.account);
     }
     const res = await this.request("GET", `/credentials?${params.toString()}`);
-    if (res.status === 404) return null;
+    if (res.status === 404)
+      return null;
     if (!res.ok) {
       throw new Error(`auth service returned ${res.status} fetching credentials`);
     }
@@ -21332,19 +21337,13 @@ var AuthClient = class {
     }
   }
   async disableAccount(accountId) {
-    const res = await this.request(
-      "POST",
-      `/credentials/${encodeURIComponent(accountId)}/disable`
-    );
+    const res = await this.request("POST", `/credentials/${encodeURIComponent(accountId)}/disable`);
     if (!res.ok) {
       throw new Error(`failed to disable account ${accountId} (HTTP ${res.status})`);
     }
   }
   async enableAccount(accountId) {
-    const res = await this.request(
-      "POST",
-      `/credentials/${encodeURIComponent(accountId)}/enable`
-    );
+    const res = await this.request("POST", `/credentials/${encodeURIComponent(accountId)}/enable`);
     if (!res.ok) {
       throw new Error(`failed to enable account ${accountId} (HTTP ${res.status})`);
     }
@@ -21355,11 +21354,7 @@ var AuthClient = class {
    * `anthropic-ratelimit-reset` (epoch seconds) — the server normalizes.
    */
   async reportRateLimit(accountId, info) {
-    const res = await this.request(
-      "POST",
-      `/credentials/${encodeURIComponent(accountId)}/rate-limited`,
-      info
-    );
+    const res = await this.request("POST", `/credentials/${encodeURIComponent(accountId)}/rate-limited`, info);
     if (!res.ok) {
       throw new Error(`failed to report rate-limit for ${accountId} (HTTP ${res.status})`);
     }
@@ -21369,8 +21364,10 @@ var AuthClient = class {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), this.timeoutMs);
     const headers = {};
-    if (body) headers["Content-Type"] = "application/json";
-    if (this.secret) headers["X-Olam-Secret"] = this.secret;
+    if (body)
+      headers["Content-Type"] = "application/json";
+    if (this.secret)
+      headers["X-Olam-Secret"] = this.secret;
     try {
       return await fetch(url, {
         method,
@@ -21390,12 +21387,14 @@ var AuthClient = class {
   }
 };
 function isTransient(err) {
-  if (!(err instanceof Error)) return false;
+  if (!(err instanceof Error))
+    return false;
   const message = err.message.toLowerCase();
   return message.includes("econnrefused") || message.includes("econnreset") || message.includes("fetch failed");
 }
 function describeError(err) {
-  if (err instanceof Error) return err.message;
+  if (err instanceof Error)
+    return err.message;
   return "unknown error";
 }
 async function safeText(res) {
@@ -21409,7 +21408,7 @@ function sleep(ms) {
   return new Promise((resolve6) => setTimeout(resolve6, ms));
 }
 
-// ../core/src/auth/container.ts
+// ../core/dist/auth/container.js
 import { execFileSync, spawnSync } from "node:child_process";
 import { existsSync as existsSync3 } from "node:fs";
 import * as path3 from "node:path";
@@ -21433,11 +21432,7 @@ var AuthContainerController = class {
     this.imageTag = options.imageTag ?? DEFAULT_IMAGE;
   }
   status() {
-    const inspect = spawnSync(
-      "docker",
-      ["inspect", "--format", "{{.State.Status}}|{{.Id}}", this.containerName],
-      { encoding: "utf-8" }
-    );
+    const inspect = spawnSync("docker", ["inspect", "--format", "{{.State.Status}}|{{.Id}}", this.containerName], { encoding: "utf-8" });
     if (inspect.status === 0) {
       const [stateRaw, id] = inspect.stdout.trim().split("|");
       const state = stateRaw === "running" ? "running" : "stopped";
@@ -21460,7 +21455,8 @@ var AuthContainerController = class {
    */
   start() {
     const current = this.status();
-    if (current.state === "running") return;
+    if (current.state === "running")
+      return;
     if (current.state === "stopped") {
       execFileSync("docker", ["start", this.containerName], { stdio: "pipe" });
       return;
@@ -21483,15 +21479,9 @@ var AuthContainerController = class {
   buildImage() {
     const dockerfileDir = resolveAuthServicePath();
     if (!existsSync3(path3.join(dockerfileDir, "Dockerfile"))) {
-      throw new Error(
-        `auth image '${this.imageTag}' is not present locally and no Dockerfile is available at ${dockerfileDir} to build from. Run \`olam bootstrap\` to pull the published image, or check out the olam source tree.`
-      );
+      throw new Error(`auth image '${this.imageTag}' is not present locally and no Dockerfile is available at ${dockerfileDir} to build from. Run \`olam bootstrap\` to pull the published image, or check out the olam source tree.`);
     }
-    execFileSync(
-      "docker",
-      ["build", "--tag", this.imageTag, dockerfileDir],
-      { stdio: "inherit" }
-    );
+    execFileSync("docker", ["build", "--tag", this.imageTag, dockerfileDir], { stdio: "inherit" });
   }
   /**
    * `docker run` the auth container. Injects the shared secret so every
@@ -21499,33 +21489,30 @@ var AuthContainerController = class {
    */
   runContainer() {
     const secret = getOrCreateSecret();
-    execFileSync(
-      "docker",
-      [
-        "run",
-        "--detach",
-        "--name",
-        this.containerName,
-        "--restart",
-        "unless-stopped",
-        "--publish",
-        `${this.port}:9999`,
-        "--volume",
-        `${this.volume}:/auth-data`,
-        "--env",
-        `AUTH_BIND=0.0.0.0`,
-        "--env",
-        `AUTH_DATA_DIR=/auth-data`,
-        "--env",
-        `OLAM_AUTH_SECRET=${secret}`,
-        this.imageTag
-      ],
-      { stdio: "pipe" }
-    );
+    execFileSync("docker", [
+      "run",
+      "--detach",
+      "--name",
+      this.containerName,
+      "--restart",
+      "unless-stopped",
+      "--publish",
+      `${this.port}:9999`,
+      "--volume",
+      `${this.volume}:/auth-data`,
+      "--env",
+      `AUTH_BIND=0.0.0.0`,
+      "--env",
+      `AUTH_DATA_DIR=/auth-data`,
+      "--env",
+      `OLAM_AUTH_SECRET=${secret}`,
+      this.imageTag
+    ], { stdio: "pipe" });
   }
   stop() {
     const current = this.status();
-    if (current.state !== "running") return;
+    if (current.state !== "running")
+      return;
     execFileSync("docker", ["stop", this.containerName], { stdio: "pipe" });
   }
   remove() {
@@ -21537,7 +21524,8 @@ var AuthContainerController = class {
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
       const health = await client.health();
-      if (health.ok) return true;
+      if (health.ok)
+        return true;
       await sleep2(500);
     }
     return false;
@@ -21552,7 +21540,7 @@ function sleep2(ms) {
   return new Promise((resolve6) => setTimeout(resolve6, ms));
 }
 
-// ../core/src/auth/preflight.ts
+// ../core/dist/auth/preflight.js
 async function runAuthPreflight(options = {}) {
   const client = new AuthClient(options);
   const controller = new AuthContainerController();
@@ -21760,7 +21748,7 @@ __export(pr_exports, {
   register: () => register3
 });
 
-// ../core/src/world/registry.ts
+// ../core/dist/world/registry.js
 import { createRequire } from "node:module";
 import * as net from "node:net";
 import * as os2 from "node:os";
@@ -21795,15 +21783,18 @@ function rowToMetadata(row) {
   let expectedServices;
   let appPortUrls;
   try {
-    if (row.readiness_chain) readinessChain = JSON.parse(row.readiness_chain);
+    if (row.readiness_chain)
+      readinessChain = JSON.parse(row.readiness_chain);
   } catch {
   }
   try {
-    if (row.expected_services) expectedServices = JSON.parse(row.expected_services);
+    if (row.expected_services)
+      expectedServices = JSON.parse(row.expected_services);
   } catch {
   }
   try {
-    if (row.app_port_urls) appPortUrls = JSON.parse(row.app_port_urls);
+    if (row.app_port_urls)
+      appPortUrls = JSON.parse(row.app_port_urls);
   } catch {
   }
   return {
@@ -21884,9 +21875,7 @@ var WorldRegistry = class {
     if (!row) {
       this.db.prepare("INSERT INTO meta (key, value) VALUES (?, ?)").run("schema_version", SCHEMA_VERSION);
     }
-    const cols = this.db.prepare("PRAGMA table_info(worlds)").all().map(
-      (r) => r.name
-    );
+    const cols = this.db.prepare("PRAGMA table_info(worlds)").all().map((r) => r.name);
     if (!cols.includes("pr_url")) {
       this.db.exec("ALTER TABLE worlds ADD COLUMN pr_url TEXT");
       this.db.exec("ALTER TABLE worlds ADD COLUMN pr_number INTEGER");
@@ -21894,43 +21883,16 @@ var WorldRegistry = class {
       this.db.exec("ALTER TABLE worlds ADD COLUMN pr_created_at TEXT");
       this.db.exec("ALTER TABLE worlds ADD COLUMN pr_state TEXT NOT NULL DEFAULT 'none'");
       this.db.exec("ALTER TABLE worlds ADD COLUMN pr_merged_at TEXT");
-      this.db.exec(
-        "ALTER TABLE worlds ADD COLUMN auto_destroy_on_merge INTEGER NOT NULL DEFAULT 1"
-      );
+      this.db.exec("ALTER TABLE worlds ADD COLUMN auto_destroy_on_merge INTEGER NOT NULL DEFAULT 1");
     }
   }
   register(world) {
-    this.db.prepare(
-      `INSERT INTO worlds
+    this.db.prepare(`INSERT INTO worlds
          (id, name, status, repos, branch, port_offset, workspace_path,
           compute_provider, total_cost_usd, thought_count, created_at, updated_at,
           pr_url, pr_number, pr_repo, pr_created_at, pr_state, pr_merged_at, auto_destroy_on_merge,
           readiness_chain, expected_services, app_port_urls)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(
-      world.id,
-      world.name,
-      world.status,
-      JSON.stringify(world.repos),
-      world.branch,
-      world.portOffset,
-      world.workspacePath,
-      world.computeProvider,
-      world.totalCostUsd,
-      world.thoughtCount,
-      world.createdAt,
-      world.updatedAt,
-      world.prUrl ?? null,
-      world.prNumber ?? null,
-      world.prRepo ?? null,
-      world.prCreatedAt ?? null,
-      world.prState ?? "none",
-      world.prMergedAt ?? null,
-      world.autoDestroyOnMerge === false ? 0 : 1,
-      world.readinessChain !== void 0 ? JSON.stringify(world.readinessChain) : null,
-      world.expectedServices !== void 0 ? JSON.stringify(world.expectedServices) : null,
-      world.appPortUrls !== void 0 ? JSON.stringify(world.appPortUrls) : null
-    );
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(world.id, world.name, world.status, JSON.stringify(world.repos), world.branch, world.portOffset, world.workspacePath, world.computeProvider, world.totalCostUsd, world.thoughtCount, world.createdAt, world.updatedAt, world.prUrl ?? null, world.prNumber ?? null, world.prRepo ?? null, world.prCreatedAt ?? null, world.prState ?? "none", world.prMergedAt ?? null, world.autoDestroyOnMerge === false ? 0 : 1, world.readinessChain !== void 0 ? JSON.stringify(world.readinessChain) : null, world.expectedServices !== void 0 ? JSON.stringify(world.expectedServices) : null, world.appPortUrls !== void 0 ? JSON.stringify(world.appPortUrls) : null);
   }
   update(worldId, updates) {
     const setClauses = [];
@@ -21971,7 +21933,8 @@ var WorldRegistry = class {
         }
       }
     }
-    if (setClauses.length === 0) return;
+    if (setClauses.length === 0)
+      return;
     if (!updates.updatedAt) {
       setClauses.push("updated_at = ?");
       values.push((/* @__PURE__ */ new Date()).toISOString());
@@ -21996,9 +21959,7 @@ var WorldRegistry = class {
     return rows.map(rowToMetadata);
   }
   listWithPr() {
-    const rows = this.db.prepare(
-      "SELECT * FROM worlds WHERE pr_url IS NOT NULL AND pr_state != 'merged_destroyed' ORDER BY created_at DESC"
-    ).all();
+    const rows = this.db.prepare("SELECT * FROM worlds WHERE pr_url IS NOT NULL AND pr_state != 'merged_destroyed' ORDER BY created_at DESC").all();
     return rows.map(rowToMetadata);
   }
   remove(worldId) {
@@ -22010,13 +21971,13 @@ var WorldRegistry = class {
    * control plane port (19080+offset) is not already bound on the host.
    */
   getNextPortOffset() {
-    const rows = this.db.prepare(
-      `SELECT port_offset FROM worlds WHERE status != 'destroyed' ORDER BY port_offset`
-    ).all();
+    const rows = this.db.prepare(`SELECT port_offset FROM worlds WHERE status != 'destroyed' ORDER BY port_offset`).all();
     const usedOffsets = new Set(rows.map((r) => r.port_offset));
     for (let candidate = 0; candidate <= 1e4; candidate += 100) {
-      if (usedOffsets.has(candidate)) continue;
-      if (isPortInUse(19080 + candidate)) continue;
+      if (usedOffsets.has(candidate))
+        continue;
+      if (isPortInUse(19080 + candidate))
+        continue;
       return candidate;
     }
     const max = rows.length > 0 ? rows[rows.length - 1].port_offset : -100;
@@ -22027,7 +21988,7 @@ var WorldRegistry = class {
   }
 };
 
-// ../core/src/pr-gate/client.ts
+// ../core/dist/pr-gate/client.js
 var HOST_CONTROL_PLANE_BASE = 19080;
 var DEFAULT_TIMEOUT_MS2 = 3e3;
 function worldBaseUrl(portOffset) {
@@ -22044,24 +22005,24 @@ async function request(url, init = {}, timeoutMs = DEFAULT_TIMEOUT_MS2) {
 }
 async function listGates(portOffset) {
   const res = await request(`${worldBaseUrl(portOffset)}/api/pr-gate`);
-  if (!res.ok) throw new Error(`list gates failed: HTTP ${res.status}`);
+  if (!res.ok)
+    throw new Error(`list gates failed: HTTP ${res.status}`);
   return await res.json();
 }
 async function getGate(portOffset, id) {
   const res = await request(`${worldBaseUrl(portOffset)}/api/pr-gate/${encodeURIComponent(id)}`);
-  if (res.status === 404) return null;
-  if (!res.ok) throw new Error(`get gate failed: HTTP ${res.status}`);
+  if (res.status === 404)
+    return null;
+  if (!res.ok)
+    throw new Error(`get gate failed: HTTP ${res.status}`);
   return await res.json();
 }
 async function decideGate(portOffset, id, payload) {
-  const res = await request(
-    `${worldBaseUrl(portOffset)}/api/pr-gate/${encodeURIComponent(id)}/decision`,
-    {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(payload)
-    }
-  );
+  const res = await request(`${worldBaseUrl(portOffset)}/api/pr-gate/${encodeURIComponent(id)}/decision`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(payload)
+  });
   if (!res.ok) {
     const text = await res.text().catch(() => "");
     throw new Error(`decide gate failed: HTTP ${res.status} ${text.slice(0, 200)}`);
@@ -22260,7 +22221,7 @@ __export(workspace_exports, {
 });
 import { stringify as stringifyYaml2 } from "yaml";
 
-// ../core/src/workspace/schema.ts
+// ../core/dist/workspace/schema.js
 var ReadinessServiceSchema = external_exports.object({
   name: external_exports.string().min(1),
   port: external_exports.number().int().positive(),
@@ -22276,10 +22237,7 @@ var RESERVED_REPO_NAMES = /* @__PURE__ */ new Set([
   "tostring",
   "valueof"
 ]);
-var repoNameSchema = external_exports.string().min(1).max(64).regex(
-  REPO_NAME_PATTERN,
-  'repo name must be ASCII lowercase + digits + dash (1-64 chars, no leading/trailing dash). E.g. "atlas-core", "diner-app". The `${repos.<name>.<field>}` reference syntax reserves "."; worktree paths reserve "/" and whitespace.'
-).refine((name) => !RESERVED_REPO_NAMES.has(name), {
+var repoNameSchema = external_exports.string().min(1).max(64).regex(REPO_NAME_PATTERN, 'repo name must be ASCII lowercase + digits + dash (1-64 chars, no leading/trailing dash). E.g. "atlas-core", "diner-app". The `${repos.<name>.<field>}` reference syntax reserves "."; worktree paths reserve "/" and whitespace.').refine((name) => !RESERVED_REPO_NAMES.has(name), {
   message: 'repo name shadows an Object.prototype member (e.g. "constructor", "toString") \u2014 choose a different name to avoid downstream confusion'
 });
 var WorkspaceRepoSchema = external_exports.object({
@@ -22325,32 +22283,29 @@ var WorkspaceSchema = external_exports.object({
   updatedAt: external_exports.number().int().nonnegative()
 });
 
-// ../core/src/workspace/store.ts
+// ../core/dist/workspace/store.js
 import * as fs4 from "node:fs";
 import * as os4 from "node:os";
 import * as path6 from "node:path";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 
-// ../core/src/config/version.ts
-var versionStringSchema = external_exports.string().regex(
-  /^[\d][\w.+-]*$/,
-  "Version must start with a digit and contain only alphanumeric, dots, dashes, plus signs"
-);
+// ../core/dist/config/version.js
+var versionStringSchema = external_exports.string().regex(/^[\d][\w.+-]*$/, "Version must start with a digit and contain only alphanumeric, dots, dashes, plus signs");
 var runtimeVersionSchema = external_exports.object({
   ruby: versionStringSchema.optional(),
   node: versionStringSchema.optional(),
   python: versionStringSchema.optional()
 });
 
-// ../core/src/world/repo-manifest.ts
+// ../core/dist/world/repo-manifest.js
 import { existsSync as existsSync4, lstatSync, readFileSync as readFileSync3 } from "node:fs";
 import { join as join5 } from "node:path";
 import YAML from "yaml";
 
-// ../core/src/manifest/version.ts
+// ../core/dist/manifest/version.js
 var MANIFEST_VERSION = 1;
 
-// ../core/src/world/repo-manifest.ts
+// ../core/dist/world/repo-manifest.js
 var runtimeSchema = external_exports.object({
   ruby: versionStringSchema.optional(),
   node: versionStringSchema.optional(),
@@ -22449,12 +22404,7 @@ function refineForbiddenKeys(value, path21, ctx, rejectSource) {
       });
       continue;
     }
-    refineForbiddenKeys(
-      value[key],
-      [...path21, key],
-      ctx,
-      false
-    );
+    refineForbiddenKeys(value[key], [...path21, key], ctx, false);
   }
 }
 function rejectForbiddenKeys(value, path21, rejectSource) {
@@ -22463,20 +22413,12 @@ function rejectForbiddenKeys(value, path21, rejectSource) {
   }
   for (const key of Object.keys(value)) {
     if (FORBIDDEN_KEYS.has(key)) {
-      throw new Error(
-        `[manifest] ${path21}: forbidden key "${key}" (prototype-pollution surface)`
-      );
+      throw new Error(`[manifest] ${path21}: forbidden key "${key}" (prototype-pollution surface)`);
     }
     if (rejectSource && key === "source") {
-      throw new Error(
-        `[manifest] ${path21}: top-level "source" is loader-stamped \u2014 manifests must not author it`
-      );
+      throw new Error(`[manifest] ${path21}: top-level "source" is loader-stamped \u2014 manifests must not author it`);
     }
-    rejectForbiddenKeys(
-      value[key],
-      `${path21}.${key}`,
-      false
-    );
+    rejectForbiddenKeys(value[key], `${path21}.${key}`, false);
   }
 }
 function unknownTopLevelKeys(parsed) {
@@ -22498,64 +22440,51 @@ function loadRepoManifest(repoDir) {
   }
   const stat = lstatSync(manifestPath);
   if (stat.isSymbolicLink()) {
-    throw new Error(
-      `[manifest] ${manifestPath}: symbolic links are not permitted`
-    );
+    throw new Error(`[manifest] ${manifestPath}: symbolic links are not permitted`);
   }
   const raw = readFileSync3(manifestPath, "utf-8");
   const parsed = YAML.parse(raw, { maxAliasCount: 100 });
   if (parsed === null || parsed === void 0) {
     if (source === "olam" && existsSync4(adbPath)) {
-      console.warn(
-        `[manifest] ${manifestPath}: file is empty; .adb.yaml is NOT consulted (delete .olam.yaml to fall back)`
-      );
+      console.warn(`[manifest] ${manifestPath}: file is empty; .adb.yaml is NOT consulted (delete .olam.yaml to fall back)`);
     }
     return null;
   }
   if (typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new Error(
-      `[manifest] ${manifestPath}: expected a YAML mapping at the top level`
-    );
+    throw new Error(`[manifest] ${manifestPath}: expected a YAML mapping at the top level`);
   }
   rejectForbiddenKeys(parsed, manifestPath, true);
   const body = RepoManifestSchema.parse(parsed);
   if (parsed["version"] === void 0) {
-    console.warn(
-      `[manifest] ${manifestPath}: missing "version: ${MANIFEST_VERSION}" field \u2014 add it to suppress this warning (backward-compat: file still parses)`
-    );
+    console.warn(`[manifest] ${manifestPath}: missing "version: ${MANIFEST_VERSION}" field \u2014 add it to suppress this warning (backward-compat: file still parses)`);
   }
   const unknown2 = unknownTopLevelKeys(parsed);
   if (unknown2.length > 0) {
-    console.warn(
-      `[manifest] ${manifestPath}: unknown top-level fields preserved (passthrough): ${unknown2.join(", ")}`
-    );
+    console.warn(`[manifest] ${manifestPath}: unknown top-level fields preserved (passthrough): ${unknown2.join(", ")}`);
   }
   return { ...body, source };
 }
 
-// ../core/src/util/path.ts
+// ../core/dist/util/path.js
 import * as os3 from "node:os";
 import * as path5 from "node:path";
 function resolveTildePath(p) {
-  if (p === "~") return os3.homedir();
-  if (p.startsWith("~/")) return path5.join(os3.homedir(), p.slice(2));
+  if (p === "~")
+    return os3.homedir();
+  if (p.startsWith("~/"))
+    return path5.join(os3.homedir(), p.slice(2));
   if (p.startsWith("~")) {
-    throw new Error(
-      `[path] POSIX "~user" syntax is not supported (got "${p}"). Use "~/..." for the operator's home or an absolute path.`
-    );
+    throw new Error(`[path] POSIX "~user" syntax is not supported (got "${p}"). Use "~/..." for the operator's home or an absolute path.`);
   }
-  if (p.startsWith("/")) return p;
-  throw new Error(
-    `[path] expected absolute path or "~/..."; got "${p}"`
-  );
+  if (p.startsWith("/"))
+    return p;
+  throw new Error(`[path] expected absolute path or "~/..."; got "${p}"`);
 }
 
-// ../core/src/workspace/store.ts
+// ../core/dist/workspace/store.js
 var WorkspaceNameError = class extends Error {
   constructor(name) {
-    super(
-      `invalid workspace name "${name}": must match ${WORKSPACE_NAME_PATTERN} (lowercase alnum + dashes, 1\u201364 chars, no leading/trailing dash)`
-    );
+    super(`invalid workspace name "${name}": must match ${WORKSPACE_NAME_PATTERN} (lowercase alnum + dashes, 1\u201364 chars, no leading/trailing dash)`);
     this.name = "WorkspaceNameError";
   }
 };
@@ -22567,7 +22496,8 @@ var WorkspaceExistsError = class extends Error {
 };
 function workspacesDir() {
   const override = process.env["OLAM_WORKSPACES_DIR"];
-  if (override && override.length > 0) return override;
+  if (override && override.length > 0)
+    return override;
   return path6.join(os4.homedir(), ".olam", "workspaces");
 }
 function validateName(name) {
@@ -22580,7 +22510,8 @@ function filePathFor(name) {
 }
 function listWorkspaces() {
   const dir = workspacesDir();
-  if (!fs4.existsSync(dir)) return [];
+  if (!fs4.existsSync(dir))
+    return [];
   const entries = fs4.readdirSync(dir).filter((f) => f.endsWith(".yaml"));
   const result = [];
   for (const entry of entries) {
@@ -22601,7 +22532,8 @@ function listWorkspaces() {
 function readWorkspace(name) {
   validateName(name);
   const file = filePathFor(name);
-  if (!fs4.existsSync(file)) return null;
+  if (!fs4.existsSync(file))
+    return null;
   const raw = fs4.readFileSync(file, "utf-8");
   return WorkspaceSchema.parse(parseYaml(raw));
 }
@@ -22621,7 +22553,8 @@ function writeWorkspace(ws, options = {}) {
 function removeWorkspace(name) {
   validateName(name);
   const file = filePathFor(name);
-  if (!fs4.existsSync(file)) return false;
+  if (!fs4.existsSync(file))
+    return false;
   fs4.unlinkSync(file);
   return true;
 }
@@ -22633,9 +22566,7 @@ function workspaceToRepoConfigs(ws) {
       manifest = repoPath ? loadRepoManifest(repoPath) : null;
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      throw new Error(
-        `[workspace "${ws.name}"] repo "${repo.name}" at ${repoPath}: ${msg}`
-      );
+      throw new Error(`[workspace "${ws.name}"] repo "${repo.name}" at ${repoPath}: ${msg}`);
     }
     if (manifest?.runtime) {
       logRuntimeReconciliation(repo.name, manifest.runtime);
@@ -22657,15 +22588,16 @@ function workspaceToRepoConfigs(ws) {
 function logRuntimeReconciliation(repoName, runtime) {
   const validated = [];
   for (const [lang, version2] of Object.entries(runtime)) {
-    if (typeof version2 !== "string" || version2.length === 0) continue;
-    if (!versionStringSchema.safeParse(version2).success) continue;
+    if (typeof version2 !== "string" || version2.length === 0)
+      continue;
+    if (!versionStringSchema.safeParse(version2).success)
+      continue;
     const safeLang = lang.replace(/[\r\n\x00-\x1f]/g, "?");
     validated.push(`${safeLang}=${version2}`);
   }
-  if (validated.length === 0) return;
-  console.warn(
-    `[manifest] repo "${repoName}" supersedes central stack: ${validated.join(", ")}`
-  );
+  if (validated.length === 0)
+    return;
+  console.warn(`[manifest] repo "${repoName}" supersedes central stack: ${validated.join(", ")}`);
 }
 
 // ../mcp-server/src/tools/workspace.ts
@@ -24764,18 +24696,18 @@ __export(world_dispatch_exports, {
 });
 import "node:path";
 
-// ../core/src/world-paths.ts
+// ../core/dist/world-paths.js
 import * as path8 from "node:path";
 var WORLD_DB_FILENAME = "world.db";
 function getWorldDbPath(workspacePath) {
   return path8.join(workspacePath, WORLD_DB_FILENAME);
 }
 
-// ../core/src/orchestrator/dispatch.ts
+// ../core/dist/orchestrator/dispatch.js
 var DEEP_MODE_SUFFIX = "\n\nUltrathink and use sub-agents (the Agent tool) to parallelize independent work. Break complex tasks into focused sub-tasks.";
 var COMPLEX_PROMPT_RE = /\b(implement|build|create|design|refactor|architect|analyze|research|write.*documentation)\b/i;
 
-// ../core/src/thought/local-store.ts
+// ../core/dist/thought/local-store.js
 import { createRequire as createRequire2 } from "node:module";
 var _require2 = createRequire2(import.meta.url);
 var _Database2 = null;
@@ -25007,13 +24939,11 @@ var ThoughtLocalStore = class {
   }
   /** Returns distinct session IDs ordered by earliest appearance. Uses idx_nodes_session. */
   getDistinctSessionIds() {
-    const rows = this.db.prepare(
-      `SELECT session_id, MIN(created_at) AS first_at
+    const rows = this.db.prepare(`SELECT session_id, MIN(created_at) AS first_at
          FROM thought_nodes
          WHERE session_id IS NOT NULL AND session_id != ''
          GROUP BY session_id
-         ORDER BY first_at DESC`
-    ).all();
+         ORDER BY first_at DESC`).all();
     return rows.map((r) => r.session_id);
   }
   /** Returns all nodes for a given session, ordered by sequence number. */
@@ -25023,8 +24953,7 @@ var ThoughtLocalStore = class {
   }
   /** Returns per-session aggregates in a single query. */
   getSessionAggregates() {
-    const rows = this.db.prepare(
-      `SELECT session_id,
+    const rows = this.db.prepare(`SELECT session_id,
                 COUNT(*) AS node_count,
                 MIN(created_at) AS first_at,
                 MAX(created_at) AS last_at,
@@ -25032,8 +24961,7 @@ var ThoughtLocalStore = class {
          FROM thought_nodes
          WHERE session_id IS NOT NULL AND session_id != ''
          GROUP BY session_id
-         ORDER BY first_at DESC`
-    ).all();
+         ORDER BY first_at DESC`).all();
     return rows.map((r) => ({
       sessionId: r.session_id,
       nodeCount: r.node_count,
@@ -25054,14 +24982,14 @@ var ThoughtLocalStore = class {
   }
 };
 
-// ../core/src/world/env-setup.ts
+// ../core/dist/world/env-setup.js
 import * as crypto2 from "node:crypto";
 import * as fs6 from "node:fs";
 import * as os6 from "node:os";
 import * as path9 from "node:path";
 import { globSync } from "node:fs";
 
-// ../core/src/thought/hooks-config.ts
+// ../core/dist/thought/hooks-config.js
 var DEFAULT_HOOK_SERVER_URL = "http://localhost:8080";
 function generateHooksConfig(hookServerUrl = DEFAULT_HOOK_SERVER_URL) {
   const makeHookEntry = (hookPath) => [{
@@ -25133,11 +25061,12 @@ function generateHooksConfig(hookServerUrl = DEFAULT_HOOK_SERVER_URL) {
   };
 }
 
-// ../core/src/world/env-setup.ts
+// ../core/dist/world/env-setup.js
 function copyClaudeConfig(workspacePath, homeDir) {
   const sourceClaudeDir = path9.join(homeDir ?? os6.homedir(), ".claude");
   const destClaudeDir = path9.join(workspacePath, ".claude-host-config");
-  if (!fs6.existsSync(sourceClaudeDir)) return;
+  if (!fs6.existsSync(sourceClaudeDir))
+    return;
   fs6.mkdirSync(destClaudeDir, { recursive: true });
   const settingsPath = path9.join(sourceClaudeDir, "settings.json");
   let settings = {};
@@ -25150,10 +25079,7 @@ function copyClaudeConfig(workspacePath, homeDir) {
   }
   const hooksConfig = generateHooksConfig(DEFAULT_HOOK_SERVER_URL);
   settings["hooks"] = hooksConfig["hooks"];
-  fs6.writeFileSync(
-    path9.join(destClaudeDir, "settings.json"),
-    JSON.stringify(settings, null, 2)
-  );
+  fs6.writeFileSync(path9.join(destClaudeDir, "settings.json"), JSON.stringify(settings, null, 2));
   const claudeMdPath = path9.join(sourceClaudeDir, "CLAUDE.md");
   if (fs6.existsSync(claudeMdPath)) {
     fs6.copyFileSync(claudeMdPath, path9.join(destClaudeDir, "CLAUDE.md"));
@@ -25199,14 +25125,19 @@ var SKIP_DIRS = /* @__PURE__ */ new Set([
   "backups"
 ]);
 function copyDirRecursive(src, dest, depth = 0, skipFiles = /* @__PURE__ */ new Set()) {
-  if (depth > 10) return;
+  if (depth > 10)
+    return;
   fs6.mkdirSync(dest, { recursive: true });
   for (const entry of fs6.readdirSync(src, { withFileTypes: true })) {
     const { name } = entry;
-    if (skipFiles.has(name)) continue;
-    if (SKIP_FILES.has(name)) continue;
-    if (DENY_PATTERNS.some((p) => p.test(name))) continue;
-    if (entry.isDirectory() && SKIP_DIRS.has(name)) continue;
+    if (skipFiles.has(name))
+      continue;
+    if (SKIP_FILES.has(name))
+      continue;
+    if (DENY_PATTERNS.some((p) => p.test(name)))
+      continue;
+    if (entry.isDirectory() && SKIP_DIRS.has(name))
+      continue;
     const srcPath = path9.join(src, name);
     const destPath = path9.join(dest, name);
     if (entry.isSymbolicLink()) {
@@ -25217,7 +25148,8 @@ function copyDirRecursive(src, dest, depth = 0, skipFiles = /* @__PURE__ */ new
         continue;
       }
       if (stat.isDirectory()) {
-        if (SKIP_DIRS.has(name)) continue;
+        if (SKIP_DIRS.has(name))
+          continue;
         copyDirRecursive(srcPath, destPath, depth + 1, skipFiles);
       } else if (stat.isFile()) {
         fs6.copyFileSync(srcPath, destPath);
@@ -25243,9 +25175,7 @@ async function copyClaudeConfigIntoContainer(containerName) {
   dockerExec("test -d /home/olam/workspace/.claude-host-config/skills && cp -r /home/olam/workspace/.claude-host-config/skills/* /home/olam/.claude/skills/ 2>/dev/null || true");
   dockerExec("mkdir -p /home/olam/.claude/scripts");
   dockerExec("test -d /home/olam/workspace/.claude-host-config/scripts && cp -r /home/olam/workspace/.claude-host-config/scripts/* /home/olam/.claude/scripts/ 2>/dev/null || true");
-  dockerExec(
-    'OWNER="$(stat -c %U:%G /home/olam/.claude 2>/dev/null || echo olam:olam)"; chown -R "$OWNER" /home/olam/.claude 2>/dev/null || true'
-  );
+  dockerExec('OWNER="$(stat -c %U:%G /home/olam/.claude 2>/dev/null || echo olam:olam)"; chown -R "$OWNER" /home/olam/.claude 2>/dev/null || true');
   await sanitizeContainerClaudeHooks(containerName);
 }
 async function sanitizeContainerClaudeHooks(containerName) {
@@ -25293,10 +25223,7 @@ if (changed) {
 }
 `;
   try {
-    execSync6(
-      `docker exec ${containerName} /usr/local/bin/node -e ${shQuote(script)}`,
-      { stdio: "pipe" }
-    );
+    execSync6(`docker exec ${containerName} /usr/local/bin/node -e ${shQuote(script)}`, { stdio: "pipe" });
   } catch {
   }
 }
@@ -25350,25 +25277,17 @@ function sanitizeEnvKeyValue(repoName, source, raw) {
     clean[k] = v;
   }
   if (rejectedKeys.length > 0) {
-    console.warn(
-      `[env] repo "${repoName}" (${source}): dropped ${rejectedKeys.length} entr${rejectedKeys.length === 1 ? "y" : "ies"} with invalid key shape (must match /^[A-Z_][A-Z0-9_]*$/): ${rejectedKeys.join(", ")}`
-    );
+    console.warn(`[env] repo "${repoName}" (${source}): dropped ${rejectedKeys.length} entr${rejectedKeys.length === 1 ? "y" : "ies"} with invalid key shape (must match /^[A-Z_][A-Z0-9_]*$/): ${rejectedKeys.join(", ")}`);
   }
   if (rejectedValues.length > 0) {
-    console.warn(
-      `[env] repo "${repoName}" (${source}): dropped ${rejectedValues.length} entr${rejectedValues.length === 1 ? "y" : "ies"} with control chars in value: ${rejectedValues.join(", ")}`
-    );
+    console.warn(`[env] repo "${repoName}" (${source}): dropped ${rejectedValues.length} entr${rejectedValues.length === 1 ? "y" : "ies"} with control chars in value: ${rejectedValues.join(", ")}`);
   }
   return { clean, rejectedKeys, rejectedValues };
 }
 function buildRepoEnvBundle(repoName, serviceEnv, crossRepoEnv, envOverrides) {
   const injectables = {};
   if (crossRepoEnv) {
-    const { clean: sanitizedManifest } = sanitizeEnvKeyValue(
-      repoName,
-      "manifest",
-      crossRepoEnv
-    );
+    const { clean: sanitizedManifest } = sanitizeEnvKeyValue(repoName, "manifest", crossRepoEnv);
     const droppedProtected = [];
     for (const [k, v] of Object.entries(sanitizedManifest)) {
       if (PROTECTED_ENV_KEY_SET.has(k)) {
@@ -25378,18 +25297,10 @@ function buildRepoEnvBundle(repoName, serviceEnv, crossRepoEnv, envOverrides) {
       injectables[k] = v;
     }
     if (droppedProtected.length > 0) {
-      console.warn(
-        `[env] repo "${repoName}": manifest tried to set protected key(s) ${droppedProtected.join(
-          ", "
-        )}; service-discovery value(s) preserved`
-      );
+      console.warn(`[env] repo "${repoName}": manifest tried to set protected key(s) ${droppedProtected.join(", ")}; service-discovery value(s) preserved`);
     }
   }
-  const { clean: sanitizedOverrides } = sanitizeEnvKeyValue(
-    repoName,
-    "overrides",
-    envOverrides
-  );
+  const { clean: sanitizedOverrides } = sanitizeEnvKeyValue(repoName, "overrides", envOverrides);
   const overrideProtected = [];
   for (const [k, v] of Object.entries(sanitizedOverrides)) {
     if (PROTECTED_ENV_KEY_SET.has(k)) {
@@ -25398,11 +25309,7 @@ function buildRepoEnvBundle(repoName, serviceEnv, crossRepoEnv, envOverrides) {
     injectables[k] = v;
   }
   if (overrideProtected.length > 0) {
-    console.warn(
-      `[env] repo "${repoName}": env_overrides set protected key(s) ${overrideProtected.join(
-        ", "
-      )} \u2014 operator override wins, but verify this is intentional (service discovery may break)`
-    );
+    console.warn(`[env] repo "${repoName}": env_overrides set protected key(s) ${overrideProtected.join(", ")} \u2014 operator override wins, but verify this is intentional (service discovery may break)`);
   }
   const merged = { ...serviceEnv, ...injectables };
   return { merged, injectables };
@@ -25415,16 +25322,13 @@ function setupWorldEnv(repos, workspacePath, serviceEnv, crossRepoEnv = {}) {
   for (const repo of repos) {
     const worktreePath = path9.join(workspacePath, repo.name);
     const sourcePath = repo.path;
-    if (!sourcePath || !fs6.existsSync(worktreePath)) continue;
+    if (!sourcePath || !fs6.existsSync(worktreePath))
+      continue;
     const envSetup = repo.env_setup;
-    if (!envSetup) continue;
+    if (!envSetup)
+      continue;
     const repoCrossEnv = crossRepoEnv[repo.name];
-    const { merged, injectables } = buildRepoEnvBundle(
-      repo.name,
-      serviceEnv,
-      repoCrossEnv,
-      envSetup.env_overrides
-    );
+    const { merged, injectables } = buildRepoEnvBundle(repo.name, serviceEnv, repoCrossEnv, envSetup.env_overrides);
     for (const pattern of envSetup.credential_patterns) {
       copyMatchingFiles(sourcePath, worktreePath, pattern);
     }
@@ -25462,10 +25366,12 @@ function generateEnvFromExample(repoPath, overrides) {
   const exampleFiles = [".env.example", ".env.sample", ".env.local.example"];
   for (const exampleName of exampleFiles) {
     const examplePath = path9.join(repoPath, exampleName);
-    if (!fs6.existsSync(examplePath)) continue;
+    if (!fs6.existsSync(examplePath))
+      continue;
     const targetName = exampleName.replace(".example", "").replace(".sample", "");
     const targetPath = path9.join(repoPath, targetName);
-    if (fs6.existsSync(targetPath)) continue;
+    if (fs6.existsSync(targetPath))
+      continue;
     const template = fs6.readFileSync(examplePath, "utf-8");
     const generated = template.split("\n").map((line) => {
       const match = /^([A-Z_][A-Z0-9_]*)=(.*)$/.exec(line);
@@ -25484,9 +25390,7 @@ function applyEnvOverrides(repoPath, overrides) {
   const envPath = path9.join(repoPath, ".env");
   if (fs6.existsSync(envPath)) {
     const existing = fs6.readFileSync(envPath, "utf-8");
-    const existingKeys = new Set(
-      existing.split("\n").map((l) => l.split("=")[0]?.trim()).filter(Boolean)
-    );
+    const existingKeys = new Set(existing.split("\n").map((l) => l.split("=")[0]?.trim()).filter(Boolean));
     const additions = [];
     for (const [key, value] of Object.entries(overrides)) {
       if (!existingKeys.has(key)) {
@@ -25658,7 +25562,7 @@ __export(world_enter_exports, {
   register: () => register11
 });
 
-// ../core/src/orchestrator/enter.ts
+// ../core/dist/orchestrator/enter.js
 function getEnterCommand(worldId, containerId, provider, sshHost) {
   if (provider === "docker") {
     const command = `docker exec -it ${containerId} claude`;
@@ -25753,7 +25657,7 @@ __export(world_crystallize_exports, {
 import "node:path";
 import * as fs7 from "node:fs";
 
-// ../core/src/crystallize/checksum.ts
+// ../core/dist/crystallize/checksum.js
 import { createHash as createHash2 } from "node:crypto";
 function computeGraphChecksum(nodes, edges) {
   const sortedNodes = [...nodes].sort((a, b) => a.id.localeCompare(b.id));
@@ -27711,7 +27615,7 @@ __export(create_from_prompt_exports, {
   register: () => register21
 });
 
-// ../core/src/world/infer-repos.ts
+// ../core/dist/world/infer-repos.js
 var PICKER_CONFIDENCE_THRESHOLD = 0.7;
 var TOKEN_REGEX = /\b[a-z][a-z0-9]*(?:[-_][a-z0-9]+)+\b/g;
 function extractCandidates(prompt) {
@@ -27760,7 +27664,7 @@ function inferRepos(input) {
   };
 }
 
-// ../core/src/world/match-workspace.ts
+// ../core/dist/world/match-workspace.js
 var SUBSET_MATCH_RATIO = 0.5;
 function decideWorkspaceMatch(input) {
   if (input.exactMatches.length === 1 && input.exactMatches[0]) {
@@ -27790,16 +27694,14 @@ function decideWorkspaceMatch(input) {
   for (const ws of input.fullCatalog) {
     const wsProjectsLower = ws.projects.map((p) => p.toLowerCase());
     const wsProjectSet = new Set(wsProjectsLower);
-    const matched = input.inferredRepos.filter(
-      (r) => wsProjectSet.has(r.toLowerCase())
-    );
-    if (matched.length === 0) continue;
+    const matched = input.inferredRepos.filter((r) => wsProjectSet.has(r.toLowerCase()));
+    if (matched.length === 0)
+      continue;
     const ratio = matched.length / Math.max(1, wsProjectsLower.length);
-    if (ratio < SUBSET_MATCH_RATIO) continue;
+    if (ratio < SUBSET_MATCH_RATIO)
+      continue;
     const confidence = 0.5 + 0.4 * ratio;
-    const extraRepos = input.inferredRepos.filter(
-      (r) => !wsProjectSet.has(r.toLowerCase())
-    );
+    const extraRepos = input.inferredRepos.filter((r) => !wsProjectSet.has(r.toLowerCase()));
     subsetCandidates.push({
       workspace: ws,
       confidence,
@@ -27808,7 +27710,8 @@ function decideWorkspaceMatch(input) {
     });
   }
   subsetCandidates.sort((a, b) => {
-    if (b.confidence !== a.confidence) return b.confidence - a.confidence;
+    if (b.confidence !== a.confidence)
+      return b.confidence - a.confidence;
     return a.workspace.name.localeCompare(b.workspace.name);
   });
   if (subsetCandidates.length === 1) {
@@ -27837,7 +27740,7 @@ function decideWorkspaceMatch(input) {
   };
 }
 
-// ../core/src/util/open-url.ts
+// ../core/dist/util/open-url.js
 import { spawnSync as spawnSync2 } from "node:child_process";
 function openUrl(url) {
   if (process.env.CI === "true") {
@@ -28166,12 +28069,12 @@ function createServer3(ctx, initError) {
   return server;
 }
 
-// ../core/src/config/loader.ts
+// ../core/dist/config/loader.js
 import * as fs9 from "node:fs";
 import * as path12 from "node:path";
 import { parse as parseYaml2 } from "yaml";
 
-// ../core/src/config/schema.ts
+// ../core/dist/config/schema.js
 var repoTypeSchema = external_exports.enum(["rails", "node", "python", "generic"]);
 var envSetupSchema = external_exports.object({
   credential_patterns: external_exports.array(external_exports.string()).optional().default([]),
@@ -28216,10 +28119,7 @@ var ServiceConfigSchema = external_exports.object({
   // optional <variant>. Rejects empty string explicitly — dockerode silently
   // falls back to host arch when Platform is empty, which would silently
   // recreate the very wrong-arch bug T11 exists to prevent.
-  platform: external_exports.string().regex(
-    /^[a-z0-9]+\/[a-z0-9_]+(?:\/v[0-9]+)?$/,
-    "platform must match OCI shape, e.g. linux/amd64, linux/arm64, linux/arm64/v8"
-  ).optional()
+  platform: external_exports.string().regex(/^[a-z0-9]+\/[a-z0-9_]+(?:\/v[0-9]+)?$/, "platform must match OCI shape, e.g. linux/amd64, linux/arm64, linux/arm64/v8").optional()
 });
 var sshHostSchema = external_exports.object({
   host: external_exports.string().min(1),
@@ -28239,8 +28139,10 @@ function isSecureOrLocalhost(value) {
   } catch {
     return false;
   }
-  if (parsed.protocol === "https:") return true;
-  if (parsed.protocol !== "http:") return false;
+  if (parsed.protocol === "https:")
+    return true;
+  if (parsed.protocol !== "http:")
+    return false;
   return parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1" || parsed.hostname === "[::1]" || parsed.hostname === "::1";
 }
 var computeProvidersSchema = external_exports.object({
@@ -28297,9 +28199,7 @@ var PleriConfigSchema = external_exports.object({
 var authModeSchema = external_exports.enum(["api_key", "oauth"]);
 var AuthConfigSchema = external_exports.object({
   mode: authModeSchema.default("oauth"),
-  autoInject: external_exports.boolean().default(true).describe(
-    "Copy host credentials into world at creation. Set false to use browser OAuth instead."
-  )
+  autoInject: external_exports.boolean().default(true).describe("Copy host credentials into world at creation. Set false to use browser OAuth instead.")
 });
 var DevboxRegistrySchema = external_exports.object({
   /**
@@ -28331,14 +28231,9 @@ var DevboxImageSelectorSchema = external_exports.object({
    * from corrupting the amd64 container's mise installs.
    */
   cache_arch: external_exports.enum(["x64", "arm64"]).optional()
-}).refine(
-  (s) => Boolean(
-    s.requires_all && s.requires_all.length > 0 || s.requires_any && s.requires_any.length > 0 || s.requires_type
-  ),
-  {
-    message: "selector must declare at least one of requires_all, requires_any, or requires_type"
-  }
-);
+}).refine((s) => Boolean(s.requires_all && s.requires_all.length > 0 || s.requires_any && s.requires_any.length > 0 || s.requires_type), {
+  message: "selector must declare at least one of requires_all, requires_any, or requires_type"
+});
 var DevboxConfigSchema = external_exports.object({
   registry: DevboxRegistrySchema.optional(),
   /**
@@ -28370,12 +28265,12 @@ var OlamConfigSchema = external_exports.object({
   devbox: DevboxConfigSchema.optional()
 });
 
-// ../core/src/config/defaults.ts
+// ../core/dist/config/defaults.js
 var CONFIG_DIR_NAME = ".olam";
 var CONFIG_FILENAME = "config.yaml";
 var LEGACY_CONFIG_FILENAME = "olam.yaml";
 
-// ../core/src/config/errors.ts
+// ../core/dist/config/errors.js
 var OlamConfigNotFoundError = class extends Error {
   code = "CONFIG_NOT_FOUND";
   searchedPaths;
@@ -28435,7 +28330,7 @@ var OlamConfigEnvError = class extends Error {
   }
 };
 
-// ../core/src/config/substitute.ts
+// ../core/dist/config/substitute.js
 var ENV_VAR_PATTERN = /\$\{([^}]+)\}/g;
 function isCrossReference(expr) {
   return expr.includes(".");
@@ -28458,10 +28353,7 @@ function resolveExpression(expr) {
   return value;
 }
 function substituteString(input) {
-  return input.replace(
-    ENV_VAR_PATTERN,
-    (_, expr) => resolveExpression(expr)
-  );
+  return input.replace(ENV_VAR_PATTERN, (_, expr) => resolveExpression(expr));
 }
 function substituteEnvVars(obj) {
   if (typeof obj === "string") {
@@ -28480,16 +28372,19 @@ function substituteEnvVars(obj) {
   return obj;
 }
 
-// ../core/src/config/dotenv.ts
+// ../core/dist/config/dotenv.js
 import * as fs8 from "node:fs";
 function loadDotEnv(envPath) {
-  if (!fs8.existsSync(envPath)) return;
+  if (!fs8.existsSync(envPath))
+    return;
   const content = fs8.readFileSync(envPath, "utf-8");
   for (const line of content.split("\n")) {
     const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith("#")) continue;
+    if (!trimmed || trimmed.startsWith("#"))
+      continue;
     const eqIndex = trimmed.indexOf("=");
-    if (eqIndex === -1) continue;
+    if (eqIndex === -1)
+      continue;
     const key = trimmed.slice(0, eqIndex).trim();
     const value = trimmed.slice(eqIndex + 1).trim().replace(/^["']|["']$/g, "");
     if (process.env[key] === void 0) {
@@ -28498,7 +28393,7 @@ function loadDotEnv(envPath) {
   }
 }
 
-// ../core/src/config/loader.ts
+// ../core/dist/config/loader.js
 function findConfigFile(startDir) {
   const searched = [];
   let current = path12.resolve(startDir);
@@ -28513,7 +28408,8 @@ function findConfigFile(startDir) {
       return { path: legacyLayout, isLegacy: true };
     }
     const parent = path12.dirname(current);
-    if (parent === current) break;
+    if (parent === current)
+      break;
     current = parent;
   }
   throw new OlamConfigNotFoundError(searched);
@@ -28522,11 +28418,9 @@ function loadConfig(startDir) {
   const dir = startDir ?? process.cwd();
   const found = findConfigFile(dir);
   if (found.isLegacy) {
-    process.stderr.write(
-      `[olam] DEPRECATED: found legacy config at ${found.path}
+    process.stderr.write(`[olam] DEPRECATED: found legacy config at ${found.path}
        Run /olam:init to migrate to .olam/config.yaml
-`
-    );
+`);
   } else {
     const envPath = path12.join(path12.dirname(found.path), ".env");
     loadDotEnv(envPath);
@@ -28535,9 +28429,7 @@ function loadConfig(startDir) {
   try {
     rawContent = fs9.readFileSync(found.path, "utf-8");
   } catch (err) {
-    throw new Error(
-      `Failed to read ${found.path}: ${err instanceof Error ? err.message : String(err)}`
-    );
+    throw new Error(`Failed to read ${found.path}: ${err instanceof Error ? err.message : String(err)}`);
   }
   let parsed;
   try {
@@ -28547,9 +28439,7 @@ function loadConfig(startDir) {
     throw new Error(`Invalid YAML in ${found.path}: ${message}`);
   }
   if (parsed === null || parsed === void 0 || typeof parsed !== "object") {
-    throw new Error(
-      `Invalid YAML in ${found.path}: expected an object at the document root`
-    );
+    throw new Error(`Invalid YAML in ${found.path}: expected an object at the document root`);
   }
   const substituted = substituteEnvVars(parsed);
   try {
@@ -28566,14 +28456,14 @@ function loadConfig(startDir) {
   }
 }
 
-// ../core/src/world/manager.ts
-import "node:crypto";
+// ../core/dist/world/manager.js
+import * as crypto4 from "node:crypto";
 import { execSync as execSync4 } from "node:child_process";
 import * as fs14 from "node:fs";
 import * as os8 from "node:os";
 import * as path18 from "node:path";
 
-// ../core/src/world/state.ts
+// ../core/dist/world/state.js
 var VALID_TRANSITIONS = {
   creating: ["running", "error"],
   running: ["paused", "crystallizing", "destroyed", "error"],
@@ -28583,12 +28473,12 @@ var VALID_TRANSITIONS = {
   error: ["destroyed"]
 };
 var WorldStateMachine = class {
+  worldId;
+  _state;
   constructor(worldId, initialState) {
     this.worldId = worldId;
     this._state = initialState;
   }
-  worldId;
-  _state;
   get state() {
     return this._state;
   }
@@ -28598,18 +28488,17 @@ var WorldStateMachine = class {
   }
   transition(to) {
     if (!this.canTransition(to)) {
-      throw new Error(
-        `Invalid state transition for world "${this.worldId}": ${this._state} \u2192 ${to}`
-      );
+      throw new Error(`Invalid state transition for world "${this.worldId}": ${this._state} \u2192 ${to}`);
     }
     this._state = to;
   }
 };
 
-// ../core/src/world/devbox-image.ts
+// ../core/dist/world/devbox-image.js
 function selectDevboxImage(config2, repos) {
   const selectors = config2.devbox?.image_selectors;
-  if (!selectors || selectors.length === 0) return void 0;
+  if (!selectors || selectors.length === 0)
+    return void 0;
   const repoNames = new Set(repos.map((r) => r.name));
   const repoTypes = new Set(repos.map((r) => r.type));
   for (const sel of selectors) {
@@ -28625,19 +28514,23 @@ function selectDevboxImage(config2, repos) {
 }
 function matches(sel, repoNames, repoTypes) {
   if (sel.requires_all && sel.requires_all.length > 0) {
-    if (!sel.requires_all.every((n) => repoNames.has(n))) return false;
+    if (!sel.requires_all.every((n) => repoNames.has(n)))
+      return false;
   }
   if (sel.requires_any && sel.requires_any.length > 0) {
-    if (!sel.requires_any.some((n) => repoNames.has(n))) return false;
+    if (!sel.requires_any.some((n) => repoNames.has(n)))
+      return false;
   }
   if (sel.requires_type) {
-    if (!repoTypes.has(sel.requires_type)) return false;
+    if (!repoTypes.has(sel.requires_type))
+      return false;
   }
   return true;
 }
 function resolveDevboxImage(config2, tag) {
   const registry2 = config2.devbox?.registry;
-  if (!registry2) return `olam-devbox:${tag}`;
+  if (!registry2)
+    return `olam-devbox:${tag}`;
   if (registry2.tags && registry2.tags[tag]) {
     return registry2.tags[tag];
   }
@@ -28648,7 +28541,7 @@ function resolveDevboxImage(config2, tag) {
   return `olam-devbox:${tag}`;
 }
 
-// ../core/src/world/worktree.ts
+// ../core/dist/world/worktree.js
 import { execFileSync as execFileSync2 } from "node:child_process";
 import * as fs10 from "node:fs";
 import * as path13 from "node:path";
@@ -28656,9 +28549,7 @@ function resolveGitDir(repo) {
   if (repo.path) {
     return repo.path;
   }
-  throw new Error(
-    `Repo "${repo.name}" has no local path. Clone from ${repo.url} first.`
-  );
+  throw new Error(`Repo "${repo.name}" has no local path. Clone from ${repo.url} first.`);
 }
 async function createWorktrees(repos, worldId, workspacePath, branch) {
   const created = [];
@@ -28694,9 +28585,7 @@ async function createWorktrees(repos, worldId, workspacePath, branch) {
         }
       }
       const message = err instanceof Error ? err.message : String(err);
-      throw new Error(
-        `Failed to create worktree for repo "${repo.name}": ${message}`
-      );
+      throw new Error(`Failed to create worktree for repo "${repo.name}": ${message}`);
     }
   }
 }
@@ -28746,11 +28635,7 @@ function removeBranch(repo, branch) {
   }
   let hasUpstream = false;
   try {
-    execFileSync2(
-      "git",
-      ["rev-parse", "--abbrev-ref", `${branch}@{upstream}`],
-      { cwd: gitDir, stdio: "pipe" }
-    );
+    execFileSync2("git", ["rev-parse", "--abbrev-ref", `${branch}@{upstream}`], { cwd: gitDir, stdio: "pipe" });
     hasUpstream = true;
   } catch {
   }
@@ -28759,11 +28644,7 @@ function removeBranch(repo, branch) {
   }
   let localCommitCount = 0;
   try {
-    const output = execFileSync2(
-      "git",
-      ["rev-list", "--count", branch, "--not", "--remotes"],
-      { cwd: gitDir, stdio: "pipe" }
-    ).toString().trim();
+    const output = execFileSync2("git", ["rev-list", "--count", branch, "--not", "--remotes"], { cwd: gitDir, stdio: "pipe" }).toString().trim();
     localCommitCount = parseInt(output, 10) || 0;
   } catch {
     localCommitCount = 1;
@@ -28778,14 +28659,12 @@ function removeBranch(repo, branch) {
     }
     return { branch, action: "deleted" };
   }
-  process.stderr.write(
-    `[olam] Branch "${branch}" has ${localCommitCount} unpushed commit(s). Keeping branch \u2014 push or merge before re-creating a world with the same branch name.
-`
-  );
+  process.stderr.write(`[olam] Branch "${branch}" has ${localCommitCount} unpushed commit(s). Keeping branch \u2014 push or merge before re-creating a world with the same branch name.
+`);
   return { branch, action: "kept-local-commits", localCommitCount };
 }
 
-// ../core/src/world/baseline-diff.ts
+// ../core/dist/world/baseline-diff.js
 import { execFileSync as execFileSync3 } from "node:child_process";
 import * as fs11 from "node:fs";
 import * as os7 from "node:os";
@@ -28799,12 +28678,14 @@ function sanitizeRepoFilename(name) {
   return sanitized.length > 0 ? sanitized : "_";
 }
 function isOversizeError(err) {
-  if (!err || typeof err !== "object") return false;
+  if (!err || typeof err !== "object")
+    return false;
   const code = err.code;
   return code === "ENOBUFS";
 }
 function isNoHeadError(err) {
-  if (!err || typeof err !== "object") return false;
+  if (!err || typeof err !== "object")
+    return false;
   const msg = err.message ?? "";
   const stderr = String(err.stderr ?? "");
   const blob = `${msg}
@@ -28825,7 +28706,8 @@ function snapshotBaselineDiff(repos, workspacePath, deps = {}) {
   const perRepo = [];
   let total = 0;
   for (const repo of repos) {
-    if (!repo.path) continue;
+    if (!repo.path)
+      continue;
     const filename = `${sanitizeRepoFilename(repo.name)}.diff`;
     const outPath = path14.join(baselineDir, filename);
     const repoPath = expandHome(repo.path, homedir11);
@@ -28876,9 +28758,7 @@ function snapshotBaselineDiff(repos, workspacePath, deps = {}) {
     } catch (err) {
       if (isOversizeError(err)) {
         oversized = true;
-        console.warn(
-          `[baseline-diff] ${repo.name}: git diff HEAD exceeded ${DEFAULT_MAX_BUFFER_BYTES / (1024 * 1024)}MB; baseline could not be captured \u2014 reaper PR for this repo will treat all tracked changes as claude's work, review carefully`
-        );
+        console.warn(`[baseline-diff] ${repo.name}: git diff HEAD exceeded ${DEFAULT_MAX_BUFFER_BYTES / (1024 * 1024)}MB; baseline could not be captured \u2014 reaper PR for this repo will treat all tracked changes as claude's work, review carefully`);
       } else {
         const msg = err instanceof Error ? err.message : String(err);
         console.warn(`[baseline-diff] ${repo.name}: git diff failed (${msg}); skipping`);
@@ -28907,7 +28787,8 @@ function writeBaselineFile(outPath, content) {
 function stripWorktreeEdits(repos, workspacePath) {
   for (const repo of repos) {
     const worktreePath = path14.join(workspacePath, repo.name);
-    if (!fs11.existsSync(worktreePath)) continue;
+    if (!fs11.existsSync(worktreePath))
+      continue;
     try {
       execFileSync3("git", ["checkout", "--", "."], {
         cwd: worktreePath,
@@ -28923,8 +28804,10 @@ function formatBaselineSummary(result) {
   const noHeadRepos = result.perRepo.filter((r) => r.noHead).map((r) => r.name);
   const oversizedRepos = result.perRepo.filter((r) => r.oversized).map((r) => r.name);
   const flagsSuffix = [];
-  if (noHeadRepos.length > 0) flagsSuffix.push(`noHead: ${noHeadRepos.join(", ")}`);
-  if (oversizedRepos.length > 0) flagsSuffix.push(`oversized: ${oversizedRepos.join(", ")}`);
+  if (noHeadRepos.length > 0)
+    flagsSuffix.push(`noHead: ${noHeadRepos.join(", ")}`);
+  if (oversizedRepos.length > 0)
+    flagsSuffix.push(`oversized: ${oversizedRepos.join(", ")}`);
   const flagsStr = flagsSuffix.length > 0 ? ` [${flagsSuffix.join("; ")}]` : "";
   if (result.totalUncommittedFiles === 0) {
     return `[baseline] no uncommitted files; per-repo baseline files written empty${flagsStr}`;
@@ -28933,7 +28816,7 @@ function formatBaselineSummary(result) {
   return `[baseline] skipping ${result.totalUncommittedFiles} uncommitted file(s) (${perRepoStr})${flagsStr}; pass --carry-uncommitted to bring them in`;
 }
 
-// ../core/src/world/context-injection.ts
+// ../core/dist/world/context-injection.js
 import * as fs12 from "node:fs";
 import * as path15 from "node:path";
 function injectWorldContext(opts) {
@@ -29112,7 +28995,8 @@ function formatTaskSource(ctx) {
   return ctx.source;
 }
 function hasPlanFile(world) {
-  if (world.repos.length === 0) return false;
+  if (world.repos.length === 0)
+    return false;
   const plansDir = path15.join(world.workspacePath, world.repos[0], "docs", "plans");
   try {
     return fs12.existsSync(plansDir) && fs12.readdirSync(plansDir).length > 0;
@@ -29121,11 +29005,13 @@ function hasPlanFile(world) {
   }
 }
 
-// ../core/src/world/stack-detect.ts
+// ../core/dist/world/stack-detect.js
 function sanitizeVersion(raw) {
-  if (!raw) return void 0;
+  if (!raw)
+    return void 0;
   const trimmed = raw.trim();
-  if (!trimmed) return void 0;
+  if (!trimmed)
+    return void 0;
   return versionStringSchema.safeParse(trimmed).success ? trimmed : void 0;
 }
 function shellEscapePath(p) {
@@ -29134,24 +29020,30 @@ function shellEscapePath(p) {
 async function detectRubyVersion(exec, repoDir) {
   const escapedDir = shellEscapePath(repoDir);
   const rv = await tryReadFile(exec, `${escapedDir}/.ruby-version`);
-  if (rv) return sanitizeVersion(rv);
+  if (rv)
+    return sanitizeVersion(rv);
   const gemfile = await tryReadFile(exec, `${escapedDir}/Gemfile`);
   if (gemfile) {
     const match = gemfile.match(/^\s*ruby\s+['"]([^'"~>=<]+)['"]/m);
-    if (match) return sanitizeVersion(match[1]);
+    if (match)
+      return sanitizeVersion(match[1]);
     const rangeMatch = gemfile.match(/^\s*ruby\s+['"]~>\s*(\d+\.\d+(?:\.\d+)?)['"]/m);
-    if (rangeMatch) return sanitizeVersion(rangeMatch[1]);
+    if (rangeMatch)
+      return sanitizeVersion(rangeMatch[1]);
     const minMatch = gemfile.match(/^\s*ruby\s+['"]>=?\s*(\d+\.\d+(?:\.\d+)?)['"]/m);
-    if (minMatch) return sanitizeVersion(minMatch[1]);
+    if (minMatch)
+      return sanitizeVersion(minMatch[1]);
   }
   const tv = await tryReadToolVersions(exec, escapedDir, "ruby");
-  if (tv) return sanitizeVersion(tv);
+  if (tv)
+    return sanitizeVersion(tv);
   return void 0;
 }
 async function detectNodeVersion(exec, repoDir) {
   const escapedDir = shellEscapePath(repoDir);
   const nv = await tryReadFile(exec, `${escapedDir}/.node-version`);
-  if (nv) return sanitizeVersion(nv);
+  if (nv)
+    return sanitizeVersion(nv);
   const pkg = await tryReadFile(exec, `${escapedDir}/package.json`);
   if (pkg) {
     try {
@@ -29159,30 +29051,37 @@ async function detectNodeVersion(exec, repoDir) {
       const nodeVersion = parsed.engines?.node;
       if (nodeVersion) {
         const exact = nodeVersion.match(/(\d+\.\d+\.\d+)/);
-        if (exact) return sanitizeVersion(exact[1]);
+        if (exact)
+          return sanitizeVersion(exact[1]);
         const major = nodeVersion.match(/(\d+)/);
-        if (major) return sanitizeVersion(major[1]);
+        if (major)
+          return sanitizeVersion(major[1]);
       }
     } catch {
     }
   }
   const nvmrc = await tryReadFile(exec, `${escapedDir}/.nvmrc`);
-  if (nvmrc) return sanitizeVersion(nvmrc);
+  if (nvmrc)
+    return sanitizeVersion(nvmrc);
   const tv = await tryReadToolVersions(exec, escapedDir, "nodejs");
-  if (tv) return sanitizeVersion(tv);
+  if (tv)
+    return sanitizeVersion(tv);
   return void 0;
 }
 async function detectPythonVersion(exec, repoDir) {
   const escapedDir = shellEscapePath(repoDir);
   const pv = await tryReadFile(exec, `${escapedDir}/.python-version`);
-  if (pv) return sanitizeVersion(pv);
+  if (pv)
+    return sanitizeVersion(pv);
   const pyproject = await tryReadFile(exec, `${escapedDir}/pyproject.toml`);
   if (pyproject) {
     const match = pyproject.match(/requires-python\s*=\s*["']>=?\s*(\d+\.\d+(?:\.\d+)?)/);
-    if (match) return sanitizeVersion(match[1]);
+    if (match)
+      return sanitizeVersion(match[1]);
   }
   const tv = await tryReadToolVersions(exec, escapedDir, "python");
-  if (tv) return sanitizeVersion(tv);
+  if (tv)
+    return sanitizeVersion(tv);
   return void 0;
 }
 async function tryReadFile(exec, escapedPath) {
@@ -29197,10 +29096,12 @@ async function tryReadFile(exec, escapedPath) {
 }
 async function tryReadToolVersions(exec, escapedDir, runtime) {
   const content = await tryReadFile(exec, `${escapedDir}/.tool-versions`);
-  if (!content) return void 0;
+  if (!content)
+    return void 0;
   for (const line of content.split("\n")) {
     const trimmed = line.trim();
-    if (trimmed.startsWith("#") || !trimmed) continue;
+    if (trimmed.startsWith("#") || !trimmed)
+      continue;
     const parts = trimmed.split(/\s+/);
     if (parts[0] === runtime && parts[1]) {
       return parts[1].trim();
@@ -29215,16 +29116,20 @@ async function detectRepoStack(exec, repoDir, repoName) {
     detectPythonVersion(exec, repoDir)
   ]);
   const versions = {};
-  if (ruby) versions.ruby = ruby;
-  if (node) versions.node = node;
-  if (python) versions.python = python;
+  if (ruby)
+    versions.ruby = ruby;
+  if (node)
+    versions.node = node;
+  if (python)
+    versions.python = python;
   return { repoName, versions };
 }
 function collectUniqueRuntimes(stacks) {
   const runtimes = /* @__PURE__ */ new Map();
   for (const stack of stacks) {
     for (const [runtime, version2] of Object.entries(stack.versions)) {
-      if (!version2) continue;
+      if (!version2)
+        continue;
       const existing = runtimes.get(runtime) ?? /* @__PURE__ */ new Set();
       existing.add(version2);
       runtimes.set(runtime, existing);
@@ -29233,7 +29138,7 @@ function collectUniqueRuntimes(stacks) {
   return runtimes;
 }
 
-// ../core/src/world/stack-install.ts
+// ../core/dist/world/stack-install.js
 var MISE_RUNTIME_NAME = {
   ruby: "ruby",
   node: "node",
@@ -29297,11 +29202,13 @@ async function installStack(exec, repos, stacks) {
   }
   for (const repo of repos) {
     const stack = stacks.get(repo.name);
-    if (!stack || Object.keys(stack.versions).length === 0) continue;
+    if (!stack || Object.keys(stack.versions).length === 0)
+      continue;
     const repoDir = `/home/olam/workspace/${shellEscapePath2(repo.name)}`;
     const entries = [];
     for (const [runtime, version2] of Object.entries(stack.versions)) {
-      if (!version2) continue;
+      if (!version2)
+        continue;
       const miseName = MISE_RUNTIME_NAME[runtime] ?? runtime;
       entries.push(`${miseName} ${version2}`);
     }
@@ -29317,7 +29224,7 @@ async function installStack(exec, repos, stacks) {
   };
 }
 
-// ../core/src/world/stack-image.ts
+// ../core/dist/world/stack-image.js
 import { execSync as execSync2 } from "node:child_process";
 import * as crypto3 from "node:crypto";
 var BASE_IMAGE = "olam-devbox";
@@ -29331,7 +29238,8 @@ function computeFingerprint(runtimes) {
     }
   }
   parts.sort();
-  if (parts.length === 0) return "base";
+  if (parts.length === 0)
+    return "base";
   const joined = parts.join("_");
   return sanitizeTag(joined);
 }
@@ -29361,19 +29269,14 @@ function lookupCachedImage(runtimes) {
 function commitAsImage(containerName, imageName) {
   const baseDigest = getBaseImageDigest();
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  execSync2(
-    `docker commit --change 'LABEL ${LABEL_PREFIX}=true' --change 'LABEL ${LABEL_PREFIX}.created-at=${now}' --change 'LABEL ${LABEL_PREFIX}.base-digest=${baseDigest}' ${containerName} ${imageName}`,
-    { stdio: "pipe", timeout: 12e4 }
-  );
+  execSync2(`docker commit --change 'LABEL ${LABEL_PREFIX}=true' --change 'LABEL ${LABEL_PREFIX}.created-at=${now}' --change 'LABEL ${LABEL_PREFIX}.base-digest=${baseDigest}' ${containerName} ${imageName}`, { stdio: "pipe", timeout: 12e4 });
 }
 var cachedBaseDigest;
 function getBaseImageDigest() {
-  if (cachedBaseDigest) return cachedBaseDigest;
+  if (cachedBaseDigest)
+    return cachedBaseDigest;
   try {
-    const digest = execSync2(
-      `docker inspect ${BASE_IMAGE}:latest --format '{{.Id}}'`,
-      { encoding: "utf-8", timeout: 5e3 }
-    ).trim();
+    const digest = execSync2(`docker inspect ${BASE_IMAGE}:latest --format '{{.Id}}'`, { encoding: "utf-8", timeout: 5e3 }).trim();
     cachedBaseDigest = digest.replace("sha256:", "").slice(0, 16);
     return cachedBaseDigest;
   } catch {
@@ -29390,52 +29293,46 @@ function sanitizeTag(raw) {
   return tag;
 }
 
-// ../core/src/world/manager.ts
+// ../core/dist/world/manager.js
 import YAML3 from "yaml";
 
-// ../core/src/world/manifest-env.ts
+// ../core/dist/world/manifest-env.js
 var EXPR_PATTERN = /\$\{[^}]+\}/;
 var MAX_DEPTH = 8;
 var REPO_FIELDS = /* @__PURE__ */ new Set(["url", "path", "port", "branch"]);
 var SERVICE_FIELDS = /* @__PURE__ */ new Set(["port", "host"]);
 var WORLD_FIELDS = /* @__PURE__ */ new Set(["id", "branch", "portOffset"]);
 var EnvSubstCycleError = class extends Error {
+  key;
+  chain;
   constructor(key, chain) {
-    super(
-      `[manifest-env] cycle detected for key "${key}" \u2014 values cycled: ${chain.map((v) => `"${v}"`).join(" \u2192 ")}`
-    );
+    super(`[manifest-env] cycle detected for key "${key}" \u2014 values cycled: ${chain.map((v) => `"${v}"`).join(" \u2192 ")}`);
     this.key = key;
     this.chain = chain;
     this.name = "EnvSubstCycleError";
   }
-  key;
-  chain;
 };
 var EnvSubstDepthExceededError = class extends Error {
+  key;
+  lastValue;
+  maxDepth;
   constructor(key, lastValue, maxDepth) {
-    super(
-      `[manifest-env] reference for key "${key}" did not resolve within ${maxDepth} passes (last value: "${lastValue}"); chain too deep \u2014 examine for unintended indirection`
-    );
+    super(`[manifest-env] reference for key "${key}" did not resolve within ${maxDepth} passes (last value: "${lastValue}"); chain too deep \u2014 examine for unintended indirection`);
     this.key = key;
     this.lastValue = lastValue;
     this.maxDepth = maxDepth;
     this.name = "EnvSubstDepthExceededError";
   }
-  key;
-  lastValue;
-  maxDepth;
 };
 var EnvSubstMissingRepoError = class extends Error {
+  subject;
+  expression;
   constructor(subject, expression) {
-    super(
-      `[manifest-env] \${${expression}}: ${subject} unresolved; using empty string`
-    );
+    super(`[manifest-env] \${${expression}}: ${subject} unresolved; using empty string`);
     this.subject = subject;
     this.expression = expression;
     this.name = "EnvSubstMissingRepoError";
   }
-  subject;
-  expression;
 };
 function parseExpression(expr) {
   const idx = expr.indexOf(":-");
@@ -29445,15 +29342,20 @@ function parseExpression(expr) {
   return { name: expr.slice(0, idx), fallback: expr.slice(idx + 2) };
 }
 function readWhitelistedField(obj, field, whitelist) {
-  if (!obj) return void 0;
-  if (!whitelist.has(field)) return void 0;
-  if (!Object.hasOwn(obj, field)) return void 0;
+  if (!obj)
+    return void 0;
+  if (!whitelist.has(field))
+    return void 0;
+  if (!Object.hasOwn(obj, field))
+    return void 0;
   const value = obj[field];
-  if (value === void 0 || value === null) return void 0;
+  if (value === void 0 || value === null)
+    return void 0;
   return String(value);
 }
 function readEnvVar(env, name) {
-  if (!Object.hasOwn(env, name)) return void 0;
+  if (!Object.hasOwn(env, name))
+    return void 0;
   const v = env[name];
   return v;
 }
@@ -29471,11 +29373,7 @@ function resolveRef(name, ctx) {
         reason: `repo field "${field}" is not a permitted reference (allowed: ${[...REPO_FIELDS].join(", ")})`
       };
     }
-    const value = readWhitelistedField(
-      repo,
-      field,
-      REPO_FIELDS
-    );
+    const value = readWhitelistedField(repo, field, REPO_FIELDS);
     if (value === void 0) {
       return { kind: "miss", reason: `repo "${repoName}" has no field "${field}"` };
     }
@@ -29493,11 +29391,7 @@ function resolveRef(name, ctx) {
         reason: `service field "${field}" is not a permitted reference (allowed: ${[...SERVICE_FIELDS].join(", ")})`
       };
     }
-    const value = readWhitelistedField(
-      svc,
-      field,
-      SERVICE_FIELDS
-    );
+    const value = readWhitelistedField(svc, field, SERVICE_FIELDS);
     if (value === void 0) {
       return { kind: "miss", reason: `service "${serviceName}" has no field "${field}"` };
     }
@@ -29511,11 +29405,7 @@ function resolveRef(name, ctx) {
         reason: `world field "${field}" is not a permitted reference (allowed: ${[...WORLD_FIELDS].join(", ")})`
       };
     }
-    const value = readWhitelistedField(
-      ctx.world,
-      field,
-      WORLD_FIELDS
-    );
+    const value = readWhitelistedField(ctx.world, field, WORLD_FIELDS);
     if (value === void 0) {
       return { kind: "miss", reason: `world has no field "${field}"` };
     }
@@ -29547,11 +29437,11 @@ function substituteOnce(input, ctx, warnings) {
   return input.replace(/\$\{([^}]+)\}/g, (_, expr) => {
     const { name, fallback } = parseExpression(expr);
     const ref = resolveRef(name, ctx);
-    if (ref.kind === "ok") return ref.value;
-    if (fallback !== void 0) return fallback;
-    warnings.push(
-      new EnvSubstMissingRepoError(ref.reason, expr).message
-    );
+    if (ref.kind === "ok")
+      return ref.value;
+    if (fallback !== void 0)
+      return fallback;
+    warnings.push(new EnvSubstMissingRepoError(ref.reason, expr).message);
     return "";
   });
 }
@@ -29562,9 +29452,11 @@ function resolveManifestEnv(env, ctx) {
     let current = rawValue;
     const seen = /* @__PURE__ */ new Set([current]);
     for (let depth = 0; depth < MAX_DEPTH; depth++) {
-      if (!EXPR_PATTERN.test(current)) break;
+      if (!EXPR_PATTERN.test(current))
+        break;
       const next = substituteOnce(current, ctx, warnings);
-      if (next === current) break;
+      if (next === current)
+        break;
       if (seen.has(next)) {
         throw new EnvSubstCycleError(key, [...seen, next]);
       }
@@ -29579,7 +29471,7 @@ function resolveManifestEnv(env, ctx) {
   return { env: resolved, warnings: [...new Set(warnings)] };
 }
 
-// ../core/src/world/bootstrap-runner.ts
+// ../core/dist/world/bootstrap-runner.js
 var BootstrapStepError = class extends Error {
   step;
   index;
@@ -29597,12 +29489,12 @@ ${stderr}`);
 var SAFE_IDENT = /^[a-z0-9][a-z0-9-]{0,63}$/;
 var SAFE_WORKDIR_SEGMENT = /^[\w.-]+$/;
 function isSafeWorkdir(workdir) {
-  if (!workdir.startsWith("/")) return false;
+  if (!workdir.startsWith("/"))
+    return false;
   const segments = workdir.slice(1).split("/");
-  if (segments.length === 0) return false;
-  return segments.every(
-    (seg) => seg.length > 0 && seg !== "." && seg !== ".." && SAFE_WORKDIR_SEGMENT.test(seg)
-  );
+  if (segments.length === 0)
+    return false;
+  return segments.every((seg) => seg.length > 0 && seg !== "." && seg !== ".." && SAFE_WORKDIR_SEGMENT.test(seg));
 }
 var SENTINEL_PREFIX = ".olam-bootstrap-";
 var SENTINEL_SUFFIX = "-done";
@@ -29611,14 +29503,10 @@ function sentinelPath(workdir, index) {
 }
 async function runBootstrap(containerName, workdir, steps, exec, options = {}) {
   if (!SAFE_IDENT.test(containerName)) {
-    throw new Error(
-      `containerName "${containerName}" must match ${SAFE_IDENT} (defensive guard)`
-    );
+    throw new Error(`containerName "${containerName}" must match ${SAFE_IDENT} (defensive guard)`);
   }
   if (!isSafeWorkdir(workdir)) {
-    throw new Error(
-      `workdir "${workdir}" must be an absolute path with no "." or ".." segments (defensive guard)`
-    );
+    throw new Error(`workdir "${workdir}" must be an absolute path with no "." or ".." segments (defensive guard)`);
   }
   const clock = options.clock ?? Date.now;
   if (options.rebootstrap) {
@@ -29668,16 +29556,19 @@ function shellQuote(s) {
   return `'${s.replace(/'/g, `'\\''`)}'`;
 }
 
-// ../core/src/world/secrets-fetcher.ts
+// ../core/dist/world/secrets-fetcher.js
 import { execSync as execSync3 } from "node:child_process";
 function parseGcpSecretUrl(url) {
-  if (!url.startsWith("gcp://")) return null;
+  if (!url.startsWith("gcp://"))
+    return null;
   const without = url.slice("gcp://".length);
   const slash = without.indexOf("/");
-  if (slash === -1) return null;
+  if (slash === -1)
+    return null;
   const project = without.slice(0, slash);
   const secretName = without.slice(slash + 1);
-  if (!project || !secretName) return null;
+  if (!project || !secretName)
+    return null;
   return { project, secretName };
 }
 function defaultExecFn(cmd, opts) {
@@ -29687,27 +29578,18 @@ function fetchGcpSecret(ref, execFn = defaultExecFn) {
   const { project, secretName } = ref;
   let raw;
   try {
-    raw = execFn(
-      `gcloud secrets versions access latest --secret=${secretName} --project=${project}`,
-      { timeout: 15e3 }
-    ).trim();
+    raw = execFn(`gcloud secrets versions access latest --secret=${secretName} --project=${project}`, { timeout: 15e3 }).trim();
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     if (msg.includes("NOT_FOUND") || msg.includes("not found")) {
-      throw new Error(
-        `Secret not found: gcp://${project}/${secretName}. Check the secret name exists in project ${project}.`
-      );
+      throw new Error(`Secret not found: gcp://${project}/${secretName}. Check the secret name exists in project ${project}.`);
     }
     if (msg.includes("PERMISSION_DENIED") || msg.includes("403")) {
-      throw new Error(
-        `Permission denied fetching gcp://${project}/${secretName}. Grant your gcloud account roles/secretmanager.secretAccessor on this secret.`
-      );
+      throw new Error(`Permission denied fetching gcp://${project}/${secretName}. Grant your gcloud account roles/secretmanager.secretAccessor on this secret.`);
     }
     if (msg.includes("not authenticated") || msg.includes("credentials") || msg.includes("login") || msg.includes("authenticated")) {
-      throw new Error(
-        `No gcloud credentials found while fetching gcp://${project}/${secretName}.
-Run: gcloud auth application-default login`
-      );
+      throw new Error(`No gcloud credentials found while fetching gcp://${project}/${secretName}.
+Run: gcloud auth application-default login`);
     }
     throw new Error(`Failed to fetch secret gcp://${project}/${secretName}: ${msg}`);
   }
@@ -29718,14 +29600,10 @@ Run: gcloud auth application-default login`
   try {
     parsed = JSON.parse(raw);
   } catch {
-    throw new Error(
-      `Secret gcp://${project}/${secretName} is not valid JSON. The secret value must be a JSON object: {"ENV_VAR": "value", ...}`
-    );
+    throw new Error(`Secret gcp://${project}/${secretName} is not valid JSON. The secret value must be a JSON object: {"ENV_VAR": "value", ...}`);
   }
   if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-    throw new Error(
-      `Secret gcp://${project}/${secretName} must be a JSON object, got ${Array.isArray(parsed) ? "array" : typeof parsed}.`
-    );
+    throw new Error(`Secret gcp://${project}/${secretName} must be a JSON object, got ${Array.isArray(parsed) ? "array" : typeof parsed}.`);
   }
   const result = {};
   for (const [k, v] of Object.entries(parsed)) {
@@ -29737,11 +29615,10 @@ var FILE_BACKED_SECRET_KEYS = [
   { envVar: "RAILS_MASTER_KEY", filePath: "config/credentials/development.key" }
 ];
 function fetchSecretsForRepos(repoSecretUrls, execFn = defaultExecFn) {
-  if (repoSecretUrls.length === 0) return { env: {}, fileWrites: [] };
+  if (repoSecretUrls.length === 0)
+    return { env: {}, fileWrites: [] };
   if (!gcloudAvailable(execFn)) {
-    console.warn(
-      "[secrets] WARN: gcloud CLI not installed or not authenticated \u2014 skipping GCP secret injection for ALL repos. To enable: install gcloud and run `gcloud auth application-default login`. World will boot WITHOUT declared GCP secrets."
-    );
+    console.warn("[secrets] WARN: gcloud CLI not installed or not authenticated \u2014 skipping GCP secret injection for ALL repos. To enable: install gcloud and run `gcloud auth application-default login`. World will boot WITHOUT declared GCP secrets.");
     return { env: {}, fileWrites: [] };
   }
   const env = {};
@@ -29774,9 +29651,7 @@ function fetchSecretsForRepos(repoSecretUrls, execFn = defaultExecFn) {
         envCount++;
       }
     }
-    console.log(
-      `[secrets] ${repoName}: ${envCount} env var(s) + ${fileCount} file-backed key(s) from ${secretsUrl}`
-    );
+    console.log(`[secrets] ${repoName}: ${envCount} env var(s) + ${fileCount} file-backed key(s) from ${secretsUrl}`);
   }
   return { env, fileWrites };
 }
@@ -29789,7 +29664,7 @@ function gcloudAvailable(execFn = defaultExecFn) {
   }
 }
 
-// ../core/src/world/olam-yaml.ts
+// ../core/dist/world/olam-yaml.js
 import * as path16 from "node:path";
 import YAML2 from "yaml";
 function enrichReposWithManifests(repos, workspacePath) {
@@ -29805,18 +29680,20 @@ function enrichReposWithManifests(repos, workspacePath) {
       const msg = err instanceof Error ? err.message : String(err);
       console.warn(`[olam-yaml] failed to load manifest for repo "${repo.name}": ${msg}`);
     }
-    if (manifest === null) return repo;
+    if (manifest === null)
+      return repo;
     return { ...repo, manifest };
   });
 }
 
-// ../core/src/policies/loader.ts
+// ../core/dist/policies/loader.js
 import * as fs13 from "node:fs";
 import * as path17 from "node:path";
 import { parse as parseYaml3 } from "yaml";
 function parseFrontmatter(content) {
   const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/m.exec(content);
-  if (!match) return null;
+  if (!match)
+    return null;
   const [, yamlText = "", body = ""] = match;
   try {
     const frontmatter = parseYaml3(yamlText);
@@ -29826,12 +29703,14 @@ function parseFrontmatter(content) {
   }
 }
 function toStringArray(v) {
-  if (!Array.isArray(v)) return [];
+  if (!Array.isArray(v))
+    return [];
   return v.filter((x) => typeof x === "string");
 }
 function loadPolicies(workspaceRoot) {
   const policiesDir = path17.join(workspaceRoot, ".olam", "policies");
-  if (!fs13.existsSync(policiesDir)) return [];
+  if (!fs13.existsSync(policiesDir))
+    return [];
   let files;
   try {
     files = fs13.readdirSync(policiesDir).filter((f) => f.endsWith(".md")).sort();
@@ -29854,9 +29733,7 @@ function loadPolicies(workspaceRoot) {
         continue;
       }
       const requires = fm.requires !== null && typeof fm.requires === "object" ? {
-        diff_includes: toStringArray(
-          fm.requires.diff_includes
-        )
+        diff_includes: toStringArray(fm.requires.diff_includes)
       } : void 0;
       const policy = {
         id: fm.id,
@@ -29876,7 +29753,8 @@ function loadPolicies(workspaceRoot) {
   return policies;
 }
 function formatPoliciesBrief(policies) {
-  if (policies.length === 0) return "";
+  if (policies.length === 0)
+    return "";
   const lines = [
     "## Active policies for this workspace",
     "The following policies apply to your work. Read them carefully \u2014 your",
@@ -29893,15 +29771,13 @@ function formatPoliciesBrief(policies) {
   return lines.join("\n");
 }
 
-// ../core/src/world/tmux-supervisor.ts
+// ../core/dist/world/tmux-supervisor.js
 var PortInUseError = class extends Error {
   port;
   repo;
   manifestPath;
   constructor(port, repo, manifestPath) {
-    super(
-      `Port ${port} already in use on host (claimed by repo "${repo}"). Free the port or change \`app_port\` in ${manifestPath}.`
-    );
+    super(`Port ${port} already in use on host (claimed by repo "${repo}"). Free the port or change \`app_port\` in ${manifestPath}.`);
     this.name = "PortInUseError";
     this.port = port;
     this.repo = repo;
@@ -29911,25 +29787,17 @@ var PortInUseError = class extends Error {
 var SAFE_IDENT2 = /^[a-z0-9][a-z0-9-]{0,63}$/;
 async function startSupervisedApps(containerName, worldId, repos, exec, options = {}) {
   if (!SAFE_IDENT2.test(containerName)) {
-    throw new Error(
-      `containerName "${containerName}" must match ${SAFE_IDENT2} (defensive guard)`
-    );
+    throw new Error(`containerName "${containerName}" must match ${SAFE_IDENT2} (defensive guard)`);
   }
   if (!SAFE_IDENT2.test(worldId)) {
-    throw new Error(
-      `worldId "${worldId}" must match ${SAFE_IDENT2} (defensive guard)`
-    );
+    throw new Error(`worldId "${worldId}" must match ${SAFE_IDENT2} (defensive guard)`);
   }
   for (const repo of repos) {
     if (!SAFE_IDENT2.test(repo.name)) {
-      throw new Error(
-        `repo.name "${repo.name}" must match ${SAFE_IDENT2} (defensive guard)`
-      );
+      throw new Error(`repo.name "${repo.name}" must match ${SAFE_IDENT2} (defensive guard)`);
     }
     if (!Number.isInteger(repo.hostPort) || repo.hostPort < 1 || repo.hostPort > 65535) {
-      throw new Error(
-        `repo.hostPort ${repo.hostPort} for "${repo.name}" must be an integer in [1, 65535]`
-      );
+      throw new Error(`repo.hostPort ${repo.hostPort} for "${repo.name}" must be an integer in [1, 65535]`);
     }
   }
   const sessionName = `olam-${worldId}`;
@@ -29943,13 +29811,8 @@ async function startSupervisedApps(containerName, worldId, repos, exec, options
     }
   }
   exec(containerName, `tmux new-session -A -d -s ${sessionName}`);
-  const existingRaw = exec(
-    containerName,
-    `tmux list-windows -t ${sessionName} -F '#W' 2>/dev/null || true`
-  );
-  const existingWindows = new Set(
-    existingRaw.split("\n").map((s) => s.trim()).filter(Boolean)
-  );
+  const existingRaw = exec(containerName, `tmux list-windows -t ${sessionName} -F '#W' 2>/dev/null || true`);
+  const existingWindows = new Set(existingRaw.split("\n").map((s) => s.trim()).filter(Boolean));
   const windowsCreated = [];
   const windowsExisting = [];
   for (const repo of repos) {
@@ -29957,25 +29820,17 @@ async function startSupervisedApps(containerName, worldId, repos, exec, options
       windowsExisting.push(repo.name);
       continue;
     }
-    const expandedStart = repo.start.replace(
-      /\$\{?PORT\}?/g,
-      String(repo.hostPort)
-    );
+    const expandedStart = repo.start.replace(/\$\{?PORT\}?/g, String(repo.hostPort));
     const startCmd = `cd ${shellQuote2(repo.dir)} && exec ${expandedStart}`;
-    exec(
-      containerName,
-      `tmux new-window -t ${sessionName} -n ${repo.name} -d ${shellQuote2(startCmd)}`
-    );
+    exec(containerName, `tmux new-window -t ${sessionName} -n ${repo.name} -d ${shellQuote2(startCmd)}`);
     windowsCreated.push(repo.name);
   }
-  const health = await Promise.all(
-    repos.map((repo) => probeOne(exec, containerName, repo, {
-      probeTimeoutMs,
-      probeIntervalMs,
-      clock,
-      sleep: sleep3
-    }))
-  );
+  const health = await Promise.all(repos.map((repo) => probeOne(exec, containerName, repo, {
+    probeTimeoutMs,
+    probeIntervalMs,
+    clock,
+    sleep: sleep3
+  })));
   return {
     sessionName,
     windowsCreated,
@@ -30014,7 +29869,7 @@ function shellQuote2(s) {
   return `'${s.replace(/'/g, `'\\''`)}'`;
 }
 
-// ../core/src/world/manager.ts
+// ../core/dist/world/manager.js
 var BotIdentityError = class extends Error {
   constructor(message) {
     super(message);
@@ -30030,7 +29885,8 @@ function getTokenScopes(ghToken, _exec = execSync4) {
     });
     const m = out.match(/Token scopes:\s*(.+)/);
     const list = m?.[1];
-    if (!list) return [];
+    if (!list)
+      return [];
     return list.split(",").map((s) => s.trim().replace(/^['"]|['"]$/g, "")).filter((s) => s.length > 0);
   } catch {
     return [];
@@ -30051,19 +29907,16 @@ async function setupContainerGit(containerName, repos, branch) {
   const SAFE_BOT_NAME = /^[A-Za-z0-9 .,()@_+\-]+$/;
   const SAFE_BOT_EMAIL = /^[A-Za-z0-9._+\-]+@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}$/;
   if (!SAFE_BOT_NAME.test(actorName)) {
-    throw new BotIdentityError(
-      `OLAM_BOT_NAME contains unsafe characters: ${JSON.stringify(actorName)}. Allowed: alphanumeric + space + .,()@_+-. Shell metacharacters are rejected to prevent injection into the world container.`
-    );
+    throw new BotIdentityError(`OLAM_BOT_NAME contains unsafe characters: ${JSON.stringify(actorName)}. Allowed: alphanumeric + space + .,()@_+-. Shell metacharacters are rejected to prevent injection into the world container.`);
   }
   if (!SAFE_BOT_EMAIL.test(actorEmail)) {
-    throw new BotIdentityError(
-      `OLAM_BOT_EMAIL is not a valid email or contains unsafe characters: ${JSON.stringify(actorEmail)}. Expected format: localpart@domain.tld with alphanumeric + ._+- only.`
-    );
+    throw new BotIdentityError(`OLAM_BOT_EMAIL is not a valid email or contains unsafe characters: ${JSON.stringify(actorEmail)}. Expected format: localpart@domain.tld with alphanumeric + ._+- only.`);
   }
   if (ghToken) {
     for (const repo of repos) {
       const ghMatch = repo.url.match(/(?:git@github\.com:|github\.com\/)([^/]+\/[^.]+)/);
-      if (!ghMatch) continue;
+      if (!ghMatch)
+        continue;
       const ownerRepo = ghMatch[1];
       try {
         execSync4(`gh api repos/${ownerRepo} --silent`, {
@@ -30080,9 +29933,7 @@ ${stderr.split("\n").slice(0, 3).join(" ")}`);
     }
     const tokenScopes = getTokenScopes(ghToken);
     if (tokenScopes.length > 0 && !tokenScopes.includes("workflow")) {
-      console.warn(
-        "[world] WARN: gh token is missing the `workflow` scope. Pushes that modify .github/workflows/* will be rejected by GitHub. If this world will touch CI files, run: `gh auth refresh -h github.com -s workflow` then re-spawn."
-      );
+      console.warn("[world] WARN: gh token is missing the `workflow` scope. Pushes that modify .github/workflows/* will be rejected by GitHub. If this world will touch CI files, run: `gh auth refresh -h github.com -s workflow` then re-spawn.");
     }
   }
   for (const repo of repos) {
@@ -30115,10 +29966,8 @@ ${stderr.split("\n").slice(0, 3).join(" ")}`);
       dockerExec(`gh auth setup-git`);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.warn(
-        `[world] gh auth setup failed for ${containerName}: ${msg}
-         PR push from inside the world will not work. Operator must inject GH_TOKEN manually or run \`gh auth login\` inside the container.`
-      );
+      console.warn(`[world] gh auth setup failed for ${containerName}: ${msg}
+         PR push from inside the world will not work. Operator must inject GH_TOKEN manually or run \`gh auth login\` inside the container.`);
     } finally {
       if (tokenWritten) {
         try {
@@ -30142,10 +29991,7 @@ function makeHostExecFn() {
 function makeContainerExecFn(containerName) {
   return async (cmd) => {
     try {
-      const result = execSync4(
-        `docker exec ${containerName} sh -c '${cmd.replace(/'/g, "'\\''")}'`,
-        { stdio: "pipe", timeout: 6e5 }
-      );
+      const result = execSync4(`docker exec ${containerName} sh -c '${cmd.replace(/'/g, "'\\''")}'`, { stdio: "pipe", timeout: 6e5 });
       return { stdout: result.toString(), stderr: "", exitCode: 0 };
     } catch (err) {
       const execErr = err;
@@ -30202,12 +30048,11 @@ function planManifestPipeline(repos, baselineServices, worldId, branch, portOffs
   const mergedServices = [...baselineServices];
   const existingNames = new Set(mergedServices.map((s) => s.name));
   for (const repo of repos) {
-    if (!repo.manifest?.services) continue;
+    if (!repo.manifest?.services)
+      continue;
     for (const [svcName, svcConf] of Object.entries(repo.manifest.services)) {
       if (existingNames.has(svcName)) {
-        console.warn(
-          `[manifest] step 2b service "${svcName}" from "${repo.name}" ignored (already declared by central or earlier manifest); first-write-wins`
-        );
+        console.warn(`[manifest] step 2b service "${svcName}" from "${repo.name}" ignored (already declared by central or earlier manifest); first-write-wins`);
         continue;
       }
       mergedServices.push({
@@ -30217,79 +30062,63 @@ function planManifestPipeline(repos, baselineServices, worldId, branch, portOffs
         environment: svcConf.environment
       });
       existingNames.add(svcName);
-      console.log(
-        `[manifest] step 2b service "${svcName}" registered from "${repo.name}"`
-      );
+      console.log(`[manifest] step 2b service "${svcName}" registered from "${repo.name}"`);
     }
   }
   const ctx = {
-    repos: Object.fromEntries(
-      repos.map((r) => [
-        r.name,
-        {
-          url: r.url,
-          ...r.path !== void 0 ? { path: r.path } : {},
-          ...r.manifest?.app?.port !== void 0 || r.app_port !== void 0 ? { port: r.manifest?.app?.port ?? r.app_port } : {},
-          branch
-        }
-      ])
-    ),
-    services: Object.fromEntries(
-      mergedServices.map((s) => [s.name, { port: s.port, host: s.name }])
-    ),
+    repos: Object.fromEntries(repos.map((r) => [
+      r.name,
+      {
+        url: r.url,
+        ...r.path !== void 0 ? { path: r.path } : {},
+        ...r.manifest?.app?.port !== void 0 || r.app_port !== void 0 ? { port: r.manifest?.app?.port ?? r.app_port } : {},
+        branch
+      }
+    ])),
+    services: Object.fromEntries(mergedServices.map((s) => [s.name, { port: s.port, host: s.name }])),
     world: { id: worldId, branch, portOffset },
     env: process.env
   };
   const crossRepoEnv = {};
   for (const repo of repos) {
-    if (!repo.manifest?.env) continue;
+    if (!repo.manifest?.env)
+      continue;
     try {
-      const { env: resolvedEnv, warnings } = resolveManifestEnv(
-        repo.manifest.env,
-        ctx
-      );
+      const { env: resolvedEnv, warnings } = resolveManifestEnv(repo.manifest.env, ctx);
       crossRepoEnv[repo.name] = resolvedEnv;
       for (const w of warnings) {
         console.warn(`[manifest] step 2c env warning for "${repo.name}": ${w}`);
       }
-      console.log(
-        `[manifest] step 2c env resolved for "${repo.name}" (${Object.keys(resolvedEnv).length} keys)`
-      );
+      console.log(`[manifest] step 2c env resolved for "${repo.name}" (${Object.keys(resolvedEnv).length} keys)`);
     } catch (err) {
       if (err instanceof EnvSubstCycleError || err instanceof EnvSubstDepthExceededError) {
         throw err;
       }
       const msg = err instanceof Error ? err.message : String(err);
-      console.warn(
-        `[manifest] step 2c env resolution failed for "${repo.name}": ${msg}`
-      );
+      console.warn(`[manifest] step 2c env resolution failed for "${repo.name}": ${msg}`);
     }
   }
   return { services: mergedServices, crossRepoEnv };
 }
 async function runManifestRuntime(containerName, worldId, repos, exec) {
   const hasAnyManifest = repos.some((r) => r.manifest !== void 0);
-  if (!hasAnyManifest) return {};
+  if (!hasAnyManifest)
+    return {};
   const bootstrapTasks = [];
   for (const repo of repos) {
     const bootstrap = repo.manifest?.bootstrap;
-    if (!bootstrap || bootstrap.length === 0) continue;
+    if (!bootstrap || bootstrap.length === 0)
+      continue;
     if (repo.setup_commands.length > 0) {
-      console.warn(
-        `[manifest] step 4e' both bootstrap[] and setup_commands populated for "${repo.name}". HARD-STOP semantics apply to bootstrap[] (OQ9): if any bootstrap step exits non-zero, the world transitions to 'error' and the legacy setup_commands path will NOT run as a fallback. Migrate setup_commands \u2192 manifest.bootstrap and remove the duplicate.`
-      );
+      console.warn(`[manifest] step 4e' both bootstrap[] and setup_commands populated for "${repo.name}". HARD-STOP semantics apply to bootstrap[] (OQ9): if any bootstrap step exits non-zero, the world transitions to 'error' and the legacy setup_commands path will NOT run as a fallback. Migrate setup_commands \u2192 manifest.bootstrap and remove the duplicate.`);
     }
     const workdir = `/home/olam/workspace/${repo.name}`;
     const cmds = bootstrap.map(bootstrapStepCmd);
-    console.log(
-      `[manifest] step 4e bootstrap "${repo.name}" (${cmds.length} steps)`
-    );
-    bootstrapTasks.push(
-      (async () => {
-        await runBootstrap(containerName, workdir, cmds, exec);
-        console.log(`[manifest] step 4e bootstrap "${repo.name}" complete`);
-      })()
-    );
+    console.log(`[manifest] step 4e bootstrap "${repo.name}" (${cmds.length} steps)`);
+    bootstrapTasks.push((async () => {
+      await runBootstrap(containerName, workdir, cmds, exec);
+      console.log(`[manifest] step 4e bootstrap "${repo.name}" complete`);
+    })());
   }
   if (bootstrapTasks.length > 0) {
     const results = await Promise.allSettled(bootstrapTasks);
@@ -30301,12 +30130,11 @@ async function runManifestRuntime(containerName, worldId, repos, exec) {
   const supervisedRepos = [];
   for (const repo of repos) {
     const start = repo.manifest?.start;
-    if (!start) continue;
+    if (!start)
+      continue;
     const hostPort = repo.manifest?.app?.port ?? repo.app_port ?? 0;
     if (!Number.isInteger(hostPort) || hostPort < 1) {
-      console.warn(
-        `[manifest] step 4g skipping "${repo.name}" \u2014 no app.port (got ${hostPort})`
-      );
+      console.warn(`[manifest] step 4g skipping "${repo.name}" \u2014 no app.port (got ${hostPort})`);
       continue;
     }
     supervisedRepos.push({
@@ -30317,19 +30145,11 @@ async function runManifestRuntime(containerName, worldId, repos, exec) {
       manifestPath: repo.path ? `${repo.path}/.olam.yaml or ${repo.path}/.adb.yaml` : `<unknown manifest path for ${repo.name}>`
     });
   }
-  if (supervisedRepos.length === 0) return {};
-  console.log(
-    `[manifest] step 4f port pre-flight (${supervisedRepos.length} repos)`
-  );
-  const supervisor = await startSupervisedApps(
-    containerName,
-    worldId,
-    supervisedRepos,
-    exec
-  );
-  console.log(
-    `[manifest] step 4g tmux supervisor session=${supervisor.sessionName} created=${supervisor.windowsCreated.length} existing=${supervisor.windowsExisting.length}`
-  );
+  if (supervisedRepos.length === 0)
+    return {};
+  console.log(`[manifest] step 4f port pre-flight (${supervisedRepos.length} repos)`);
+  const supervisor = await startSupervisedApps(containerName, worldId, supervisedRepos, exec);
+  console.log(`[manifest] step 4g tmux supervisor session=${supervisor.sessionName} created=${supervisor.windowsCreated.length} existing=${supervisor.windowsExisting.length}`);
   return { supervisor };
 }
 var ADJECTIVES = ["amber", "blue", "coral", "dawn", "ember", "frost", "gold", "haze", "iron", "jade"];
@@ -30341,28 +30161,29 @@ function generateWorldId() {
   return `${adj}-${noun}-${num}`;
 }
 var AuthPreflightError = class extends Error {
+  verdict;
+  remedy;
   constructor(verdict, message, remedy) {
     super(message);
     this.verdict = verdict;
     this.remedy = remedy;
     this.name = "AuthPreflightError";
   }
-  verdict;
-  remedy;
 };
 var WorkspaceNotFoundError = class extends Error {
+  workspaceName;
   constructor(workspaceName) {
     super(`Workspace "${workspaceName}" not found \u2014 run \`olam workspace add ${workspaceName}\` first, or check the name.`);
     this.workspaceName = workspaceName;
     this.name = "WorkspaceNotFoundError";
   }
-  workspaceName;
 };
 function buildManifestRuntime(worldId, repos) {
   const runtimeRepos = [];
   for (const repo of repos) {
     const m = repo.manifest;
-    if (!m) continue;
+    if (!m)
+      continue;
     const services = {};
     for (const [name, svc] of Object.entries(m.services ?? {})) {
       services[name] = {
@@ -30383,6 +30204,13 @@ function buildManifestRuntime(worldId, repos) {
   return { worldId, repos: runtimeRepos };
 }
 var WorldManager = class {
+  config;
+  provider;
+  registry;
+  dashboardManager;
+  pleriClient;
+  dockerExec;
+  manifestRuntimes = /* @__PURE__ */ new Map();
   constructor(config2, provider, registry2, dashboardManager, pleriClient, dockerExec) {
     this.config = config2;
     this.provider = provider;
@@ -30391,13 +30219,6 @@ var WorldManager = class {
     this.pleriClient = pleriClient;
     this.dockerExec = dockerExec ?? defaultDockerExec();
   }
-  config;
-  provider;
-  registry;
-  dashboardManager;
-  pleriClient;
-  dockerExec;
-  manifestRuntimes = /* @__PURE__ */ new Map();
   // -----------------------------------------------------------------------
   // createWorld
   // -----------------------------------------------------------------------
@@ -30463,10 +30284,12 @@ var WorldManager = class {
       ".env.test.local"
     ];
     for (const repo of repos) {
-      if (!repo.path) continue;
+      if (!repo.path)
+        continue;
       const sourceRoot = repo.path.replace(/^~/, os8.homedir());
       const worktreeRoot = path18.join(workspacePath, repo.name);
-      if (!fs14.existsSync(sourceRoot) || !fs14.existsSync(worktreeRoot)) continue;
+      if (!fs14.existsSync(sourceRoot) || !fs14.existsSync(worktreeRoot))
+        continue;
       let copied = 0;
       for (const pattern of RUNTIME_FILE_PATTERNS) {
         const matches2 = [];
@@ -30477,7 +30300,8 @@ var WorldManager = class {
             const ext = glob.replace(/^\*+/, "");
             try {
               for (const entry of fs14.readdirSync(sourceDir)) {
-                if (ext === "" || entry.endsWith(ext)) matches2.push(path18.join(dir, entry));
+                if (ext === "" || entry.endsWith(ext))
+                  matches2.push(path18.join(dir, entry));
               }
             } catch {
             }
@@ -30490,7 +30314,8 @@ var WorldManager = class {
           const dst = path18.join(worktreeRoot, rel);
           try {
             const st = fs14.statSync(src);
-            if (!st.isFile()) continue;
+            if (!st.isFile())
+              continue;
             fs14.mkdirSync(path18.dirname(dst), { recursive: true });
             fs14.copyFileSync(src, dst);
             copied++;
@@ -30514,13 +30339,7 @@ var WorldManager = class {
       console.warn(`[manifest] worktree manifest discovery failed (non-fatal): ${msg}`);
     }
     const baselineServices = this.resolveServices(enrichedRepos);
-    const { services, crossRepoEnv } = planManifestPipeline(
-      enrichedRepos,
-      baselineServices,
-      worldId,
-      branch,
-      portOffset
-    );
+    const { services, crossRepoEnv } = planManifestPipeline(enrichedRepos, baselineServices, worldId, branch, portOffset);
     this.manifestRuntimes.set(worldId, buildManifestRuntime(worldId, enrichedRepos));
     const serviceEnv = {};
     for (const svc of services) {
@@ -30623,17 +30442,13 @@ var WorldManager = class {
       if (selected) {
         selectedImage = selected.image;
         cacheArchOverride = selected.cacheArch;
-        console.log(
-          `[WorldManager] image_selector matched \u2014 using ${selected.image} (tag=${selected.tag}${selected.cacheArch ? `, cache_arch=${selected.cacheArch}` : ""})`
-        );
+        console.log(`[WorldManager] image_selector matched \u2014 using ${selected.image} (tag=${selected.tag}${selected.cacheArch ? `, cache_arch=${selected.cacheArch}` : ""})`);
       } else {
         const hasRailsRepo = repos.some((r) => r.type === "rails");
         if (hasRailsRepo) {
           selectedImage = resolveDevboxImage(this.config, "amd64");
           cacheArchOverride = "x64";
-          console.log(
-            `[WorldManager] Rails repo detected \u2014 using ${selectedImage} + x64 mise-cache (Rosetta path)`
-          );
+          console.log(`[WorldManager] Rails repo detected \u2014 using ${selectedImage} + x64 mise-cache (Rosetta path)`);
         }
       }
     }
@@ -30652,18 +30467,24 @@ var WorldManager = class {
     });
     try {
       const worldEnv = {};
-      if (opts.task) worldEnv.OLAM_TASK = opts.task;
+      if (opts.task)
+        worldEnv.OLAM_TASK = opts.task;
       const r2CredsPath = path18.join(os8.homedir(), ".olam", "r2-credentials.json");
       if (fs14.existsSync(r2CredsPath)) {
         try {
           const r2Raw = fs14.readFileSync(r2CredsPath, "utf-8").trim();
           if (r2Raw.length > 0) {
             const r2 = JSON.parse(r2Raw);
-            if (typeof r2.account_id === "string") worldEnv.OLAM_R2_ACCOUNT_ID = r2.account_id;
-            if (typeof r2.bucket === "string") worldEnv.OLAM_R2_BUCKET = r2.bucket;
-            if (typeof r2.access_key_id === "string") worldEnv.OLAM_R2_ACCESS_KEY_ID = r2.access_key_id;
-            if (typeof r2.secret_access_key === "string") worldEnv.OLAM_R2_SECRET_ACCESS_KEY = r2.secret_access_key;
-            if (typeof r2.public_url_base === "string") worldEnv.OLAM_R2_PUBLIC_URL_BASE = r2.public_url_base;
+            if (typeof r2.account_id === "string")
+              worldEnv.OLAM_R2_ACCOUNT_ID = r2.account_id;
+            if (typeof r2.bucket === "string")
+              worldEnv.OLAM_R2_BUCKET = r2.bucket;
+            if (typeof r2.access_key_id === "string")
+              worldEnv.OLAM_R2_ACCESS_KEY_ID = r2.access_key_id;
+            if (typeof r2.secret_access_key === "string")
+              worldEnv.OLAM_R2_SECRET_ACCESS_KEY = r2.secret_access_key;
+            if (typeof r2.public_url_base === "string")
+              worldEnv.OLAM_R2_PUBLIC_URL_BASE = r2.public_url_base;
           }
         } catch {
         }
@@ -30676,7 +30497,8 @@ var WorldManager = class {
             const parsed = YAML3.parse(keysRaw);
             if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
               for (const [k, v] of Object.entries(parsed)) {
-                if (typeof v !== "string") continue;
+                if (typeof v !== "string")
+                  continue;
                 const envKey = `OLAM_LLM_${k.toUpperCase()}`;
                 if (!(envKey in worldEnv)) {
                   worldEnv[envKey] = v;
@@ -30692,14 +30514,14 @@ var WorldManager = class {
       const seenFromRepo = /* @__PURE__ */ new Map();
       for (const repo of repos) {
         const repoEnv = crossRepoEnv[repo.name];
-        if (!repoEnv) continue;
+        if (!repoEnv)
+          continue;
         for (const [k, v] of Object.entries(repoEnv)) {
-          if (PROTECTED_ENV_KEY_SET.has(k)) continue;
+          if (PROTECTED_ENV_KEY_SET.has(k))
+            continue;
           const prevRepo = seenFromRepo.get(k);
           if (prevRepo !== void 0) {
-            console.warn(
-              `[manifest] cross-repo env collision on "${k}": "${prevRepo}" wins over "${repo.name}" (iteration order)`
-            );
+            console.warn(`[manifest] cross-repo env collision on "${k}": "${prevRepo}" wins over "${repo.name}" (iteration order)`);
             continue;
           }
           worldEnv[k] = v;
@@ -30713,7 +30535,8 @@ var WorldManager = class {
             console.warn(`[secrets] ignoring "${k}" from GCP secret \u2014 OLAM_* keys are protected`);
             continue;
           }
-          if (!(k in worldEnv)) worldEnv[k] = v;
+          if (!(k in worldEnv))
+            worldEnv[k] = v;
         }
         for (const { repoName, relativePath, content } of fileWrites) {
           const absPath = path18.join(workspacePath, repoName, relativePath);
@@ -30773,7 +30596,8 @@ var WorldManager = class {
     try {
       await setupContainerGit(containerName, repos, branch);
     } catch (err) {
-      if (err instanceof BotIdentityError) throw err;
+      if (err instanceof BotIdentityError)
+        throw err;
       const msg = err instanceof Error ? err.message : String(err);
       console.warn(`[WorldManager] container git setup failed: ${msg}`);
     }
@@ -30829,12 +30653,8 @@ var WorldManager = class {
     } catch (err) {
       if (opts.allowBootstrapFailure && err instanceof BootstrapStepError) {
         const msg = err instanceof Error ? err.message : String(err);
-        console.warn(
-          `[manifest] WARN: bootstrap failure allowed by --allow-bootstrap-failure: ${msg}`
-        );
-        console.warn(
-          `[manifest] WARN: world ${worldId} stays running; rerun the failing step manually inside the world if needed.`
-        );
+        console.warn(`[manifest] WARN: bootstrap failure allowed by --allow-bootstrap-failure: ${msg}`);
+        console.warn(`[manifest] WARN: world ${worldId} stays running; rerun the failing step manually inside the world if needed.`);
       } else if (err instanceof BootstrapStepError || err instanceof PortInUseError || err instanceof EnvSubstCycleError || err instanceof EnvSubstDepthExceededError) {
         sm.transition("error");
         this.registry.update(worldId, { status: "error" });
@@ -30857,10 +30677,7 @@ var WorldManager = class {
         const escapedDir = `/home/olam/workspace/${repo.name.replace(/["$`\\]/g, "\\$&")}`;
         for (const cmd of repo.setup_commands) {
           try {
-            execSync4(
-              `docker exec ${containerName} sh -c 'cd "${escapedDir}" && ${cmd.replace(/'/g, "'\\''")}'`,
-              { stdio: "pipe", timeout: 6e5 }
-            );
+            execSync4(`docker exec ${containerName} sh -c 'cd "${escapedDir}" && ${cmd.replace(/'/g, "'\\''")}'`, { stdio: "pipe", timeout: 6e5 });
           } catch (err) {
             const msg = err instanceof Error ? err.message : String(err);
             console.warn(`[WorldManager] setup command failed for ${repo.name}: ${msg}`);
@@ -30870,10 +30687,7 @@ var WorldManager = class {
     }
     if (credentialsInjected.claude) {
       try {
-        execSync4(
-          `docker exec ${containerName} curl -sf -X POST http://localhost:8080/session/start-agent 2>/dev/null || true`,
-          { stdio: "pipe", timeout: 45e3 }
-        );
+        execSync4(`docker exec ${containerName} curl -sf -X POST http://localhost:8080/session/start-agent 2>/dev/null || true`, { stdio: "pipe", timeout: 45e3 });
       } catch {
       }
       if (opts.task) {
@@ -30885,7 +30699,8 @@ var WorldManager = class {
           });
           const seen = /* @__PURE__ */ new Set();
           const uniquePolicies = allPolicies.filter((p) => {
-            if (seen.has(p.id)) return false;
+            if (seen.has(p.id))
+              return false;
             seen.add(p.id);
             return true;
           });
@@ -30893,17 +30708,11 @@ var WorldManager = class {
             const brief = formatPoliciesBrief(uniquePolicies);
             taskWithPolicies = `${brief}## Your task
 ${opts.task}`;
-            execSync4(
-              `docker exec ${containerName} mkdir -p /home/olam/.olam/policies`,
-              { stdio: "pipe", timeout: 1e4 }
-            );
+            execSync4(`docker exec ${containerName} mkdir -p /home/olam/.olam/policies`, { stdio: "pipe", timeout: 1e4 });
             for (const repo of repos) {
               const policiesDir = path18.join(workspacePath, repo.name, ".olam", "policies");
               if (fs14.existsSync(policiesDir)) {
-                execSync4(
-                  `docker cp "${policiesDir}/." "${containerName}:/home/olam/.olam/policies/"`,
-                  { stdio: "pipe", timeout: 15e3 }
-                );
+                execSync4(`docker cp "${policiesDir}/." "${containerName}:/home/olam/.olam/policies/"`, { stdio: "pipe", timeout: 15e3 });
               }
             }
           }
@@ -30913,10 +30722,7 @@ ${opts.task}`;
         }
         try {
           const payload = JSON.stringify({ prompt: taskWithPolicies }).replace(/'/g, "'\\''");
-          execSync4(
-            `docker exec ${containerName} curl -sf -X POST -H 'Content-Type: application/json' -d '${payload}' http://localhost:8080/dispatch 2>/dev/null || true`,
-            { stdio: "pipe", timeout: 3e4 }
-          );
+          execSync4(`docker exec ${containerName} curl -sf -X POST -H 'Content-Type: application/json' -d '${payload}' http://localhost:8080/dispatch 2>/dev/null || true`, { stdio: "pipe", timeout: 3e4 });
           console.log("[world] Task auto-dispatched");
         } catch {
         }
@@ -30985,7 +30791,11 @@ ${opts.task}`;
     }
     try {
       fs14.rmSync(world.workspacePath, { recursive: true, force: true });
-    } catch {
+      if (fs14.existsSync(world.workspacePath)) {
+        console.warn(`[WorldManager] destroyWorld(${worldId}): workspace dir ${world.workspacePath} still exists after rmSync. Run \`olam clean --apply\` to reap.`);
+      }
+    } catch (err) {
+      console.warn(`[WorldManager] destroyWorld(${worldId}): failed to remove ${world.workspacePath}: ${err instanceof Error ? err.message : String(err)}. Run \`olam clean --apply\` to reap.`);
     }
     for (const repo of repos) {
       try {
@@ -31000,7 +30810,8 @@ ${opts.task}`;
   // -----------------------------------------------------------------------
   async pauseWorld(worldId) {
     const world = this.registry.get(worldId);
-    if (!world) throw new Error(`World "${worldId}" not found`);
+    if (!world)
+      throw new Error(`World "${worldId}" not found`);
     const sm = new WorldStateMachine(worldId, world.status);
     sm.transition("paused");
     if (this.provider.pauseWorld) {
@@ -31010,7 +30821,8 @@ ${opts.task}`;
   }
   async resumeWorld(worldId) {
     const world = this.registry.get(worldId);
-    if (!world) throw new Error(`World "${worldId}" not found`);
+    if (!world)
+      throw new Error(`World "${worldId}" not found`);
     const sm = new WorldStateMachine(worldId, world.status);
     sm.transition("running");
     if (this.provider.resumeWorld) {
@@ -31042,7 +30854,8 @@ ${opts.task}`;
     }
     if (opts.workspace) {
       const ws = readWorkspace(opts.workspace);
-      if (!ws) throw new WorkspaceNotFoundError(opts.workspace);
+      if (!ws)
+        throw new WorkspaceNotFoundError(opts.workspace);
       return workspaceToRepoConfigs(ws);
     }
     return this.resolveRepos(void 0);
@@ -31066,7 +30879,8 @@ ${opts.task}`;
     const planContent = fs14.readFileSync(planFilePath, "utf-8");
     const planFileName = path18.basename(planFilePath);
     const targetRepo = repoNames[0];
-    if (!targetRepo) return;
+    if (!targetRepo)
+      return;
     const plansDir = path18.join(workspacePath, targetRepo, "docs", "plans");
     fs14.mkdirSync(plansDir, { recursive: true });
     fs14.writeFileSync(path18.join(plansDir, planFileName), planContent);
@@ -31090,13 +30904,13 @@ ${opts.task}`;
   }
 };
 
-// ../core/src/cost/tracker.ts
+// ../core/dist/cost/tracker.js
 var CostTracker = class {
+  budgetConfig;
+  records = [];
   constructor(budgetConfig) {
     this.budgetConfig = budgetConfig;
   }
-  budgetConfig;
-  records = [];
   // ── Mutations ────────────────────────────────────────────────────────────
   record(entry) {
     this.records.push(entry);
@@ -31139,26 +30953,29 @@ var CostTracker = class {
   }
 };
 function deriveStatus(percentUsed, warningThreshold) {
-  if (percentUsed >= 1) return "exceeded";
-  if (percentUsed >= warningThreshold) return "warning";
+  if (percentUsed >= 1)
+    return "exceeded";
+  if (percentUsed >= warningThreshold)
+    return "warning";
   return "ok";
 }
 function todayIsoPrefix() {
   return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 }
 
-// ../core/src/dashboard/index.ts
-import "node:http";
+// ../core/dist/dashboard/index.js
+import * as http2 from "node:http";
 
-// ../core/src/dashboard/server.ts
+// ../core/dist/dashboard/server.js
 import * as http from "node:http";
 import * as fs15 from "node:fs";
 import * as path19 from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
-// ../core/src/dashboard/serialize.ts
+// ../core/dist/dashboard/serialize.js
 function serializeTokenUsage(usage) {
-  if (!usage) return void 0;
+  if (!usage)
+    return void 0;
   return {
     input_tokens: usage.inputTokens,
     output_tokens: usage.outputTokens,
@@ -31201,20 +31018,26 @@ function parsePsAux(stdout) {
   const result = [];
   for (const line of dataLines) {
     const trimmed = line.trim();
-    if (!trimmed) continue;
+    if (!trimmed)
+      continue;
     const parts = trimmed.split(/\s+/);
-    if (parts.length < 11) continue;
+    if (parts.length < 11)
+      continue;
     const pid = parseInt(parts[1], 10);
-    if (isNaN(pid)) continue;
+    if (isNaN(pid))
+      continue;
     const cpuPercent = parseFloat(parts[2]) || 0;
     const rssKb = parseInt(parts[5], 10) || 0;
     const stat = parts[7] ?? "";
     const command = parts.slice(10).join(" ");
     const name = command.split(/\s/)[0]?.split("/").pop() ?? command;
     let status = "running";
-    if (stat.startsWith("T")) status = "stopped";
-    else if (stat.startsWith("Z")) status = "error";
-    else if (stat.startsWith("S") && cpuPercent === 0) status = "idle";
+    if (stat.startsWith("T"))
+      status = "stopped";
+    else if (stat.startsWith("Z"))
+      status = "error";
+    else if (stat.startsWith("S") && cpuPercent === 0)
+      status = "idle";
     result.push({
       pid,
       name,
@@ -31311,7 +31134,7 @@ function serializeGanttTimeline(timeline) {
   };
 }
 
-// ../core/src/dashboard/session-aggregator.ts
+// ../core/dist/dashboard/session-aggregator.js
 function sumTokenUsage(nodes) {
   let hasAny = false;
   let inputTokens = 0;
@@ -31319,28 +31142,33 @@ function sumTokenUsage(nodes) {
   let cacheCreation = 0;
   let cacheRead = 0;
   for (const node of nodes) {
-    if (!node.tokenUsage) continue;
+    if (!node.tokenUsage)
+      continue;
     hasAny = true;
     inputTokens += node.tokenUsage.inputTokens;
     outputTokens += node.tokenUsage.outputTokens;
     cacheCreation += node.tokenUsage.cacheCreationInputTokens ?? 0;
     cacheRead += node.tokenUsage.cacheReadInputTokens ?? 0;
   }
-  if (!hasAny) return null;
+  if (!hasAny)
+    return null;
   return { inputTokens, outputTokens, cacheCreationInputTokens: cacheCreation, cacheReadInputTokens: cacheRead };
 }
 function inferSessionStatus(nodes, lastAt) {
   for (const n of nodes) {
-    if (n.nodeType === "lifecycle" && n.hookEventName === "Stop") return "completed";
+    if (n.nodeType === "lifecycle" && n.hookEventName === "Stop")
+      return "completed";
   }
   const lastMs = new Date(lastAt).getTime();
   const fiveMinAgo = Date.now() - 5 * 60 * 1e3;
-  if (lastMs > fiveMinAgo) return "running";
+  if (lastMs > fiveMinAgo)
+    return "running";
   return "idle";
 }
 function deriveSessionTitle(nodes) {
   for (const n of nodes) {
-    if (n.nodeType === "intent" && n.summary) return n.summary.slice(0, 100);
+    if (n.nodeType === "intent" && n.summary)
+      return n.summary.slice(0, 100);
   }
   for (const n of nodes) {
     if (n.nodeType === "lifecycle" && n.hookEventName === "SessionStart") {
@@ -31352,13 +31180,16 @@ function deriveSessionTitle(nodes) {
 function countFilesModified(nodes) {
   const files = /* @__PURE__ */ new Set();
   for (const node of nodes) {
-    if (node.nodeType !== "action") continue;
+    if (node.nodeType !== "action")
+      continue;
     const content = node.content;
     const toolName = content.tool_name;
-    if (toolName !== "Write" && toolName !== "Edit") continue;
+    if (toolName !== "Write" && toolName !== "Edit")
+      continue;
     const toolInput = content.tool_input;
     const filePath = toolInput?.file_path;
-    if (filePath) files.add(filePath);
+    if (filePath)
+      files.add(filePath);
   }
   return files.size;
 }
@@ -31452,7 +31283,7 @@ function buildWorldTimeline(sessions) {
   };
 }
 
-// ../core/src/dashboard/server.ts
+// ../core/dist/dashboard/server.js
 var MIME = {
   ".html": "text/html; charset=utf-8",
   ".js": "application/javascript; charset=utf-8",
@@ -31473,7 +31304,8 @@ function notFound(res) {
 }
 function openThoughtStore(workspacePath) {
   const dbPath = getWorldDbPath(workspacePath);
-  if (!fs15.existsSync(dbPath)) return null;
+  if (!fs15.existsSync(dbPath))
+    return null;
   return new ThoughtLocalStore(dbPath);
 }
 function handleGetWorlds(registry2) {
@@ -31509,7 +31341,8 @@ function handleGetWorlds(registry2) {
 }
 function handleGetWorld(registry2, worldId) {
   const w = registry2.get(worldId);
-  if (!w) return null;
+  if (!w)
+    return null;
   let nodeCount = 0;
   let edgeCount = 0;
   let sessionCount = 0;
@@ -31537,8 +31370,10 @@ function handleGetWorld(registry2, worldId) {
           latencyCount += 1;
         }
       }
-      if (tokenSum > 0) totalTokens = tokenSum;
-      if (latencyCount > 0) avgLatencyMs = Math.round(latencySum / latencyCount);
+      if (tokenSum > 0)
+        totalTokens = tokenSum;
+      if (latencyCount > 0)
+        avgLatencyMs = Math.round(latencySum / latencyCount);
     } finally {
       store.close();
     }
@@ -31560,7 +31395,8 @@ function handleGetWorld(registry2, worldId) {
 }
 function handleGetThoughts(registry2, worldId) {
   const w = registry2.get(worldId);
-  if (!w) return null;
+  if (!w)
+    return null;
   const store = openThoughtStore(w.workspacePath);
   if (!store) {
     return { nodes: [], edges: [] };
@@ -31609,10 +31445,12 @@ function handleGetCostsByWorld(registry2, worldId) {
 function findSessionNodes(registry2, sessionId) {
   for (const w of registry2.list()) {
     const store = openThoughtStore(w.workspacePath);
-    if (!store) continue;
+    if (!store)
+      continue;
     try {
       const nodes = store.getNodesBySession(sessionId);
-      if (nodes.length > 0) return { worldId: w.id, nodes };
+      if (nodes.length > 0)
+        return { worldId: w.id, nodes };
     } finally {
       store.close();
     }
@@ -31622,11 +31460,13 @@ function findSessionNodes(registry2, sessionId) {
 function findSessionInWorld(registry2, sessionId) {
   for (const w of registry2.list()) {
     const store = openThoughtStore(w.workspacePath);
-    if (!store) continue;
+    if (!store)
+      continue;
     try {
       const sessions = aggregateSessions(store, w.id);
       const found = sessions.find((s) => s.id === sessionId);
-      if (found) return found;
+      if (found)
+        return found;
     } finally {
       store.close();
     }
@@ -31669,13 +31509,15 @@ function createDashboardServer(opts) {
         }
         if (pathname === "/api/world" && req.method === "GET" && scopedWorldId) {
           const data = handleGetWorld(registry2, scopedWorldId);
-          if (!data) return notFound(res);
+          if (!data)
+            return notFound(res);
           jsonResponse(res, data);
           return;
         }
         if (pathname === "/api/thoughts" && req.method === "GET" && scopedWorldId) {
           const data = handleGetThoughts(registry2, scopedWorldId);
-          if (!data) return notFound(res);
+          if (!data)
+            return notFound(res);
           jsonResponse(res, data);
           return;
         }
@@ -31683,7 +31525,8 @@ function createDashboardServer(opts) {
         if (thoughtsMatch && req.method === "GET") {
           const worldId = scopedWorldId ?? thoughtsMatch[1];
           const data = handleGetThoughts(registry2, worldId);
-          if (!data) return notFound(res);
+          if (!data)
+            return notFound(res);
           jsonResponse(res, data);
           return;
         }
@@ -31801,7 +31644,8 @@ function createDashboardServer(opts) {
         if (worldMatch && req.method === "GET") {
           const worldId = scopedWorldId ?? worldMatch[1];
           const data = handleGetWorld(registry2, worldId);
-          if (!data) return notFound(res);
+          if (!data)
+            return notFound(res);
           jsonResponse(res, data);
           return;
         }
@@ -31908,9 +31752,7 @@ function createDashboardServer(opts) {
     }
     if (!hasPublicDir) {
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(
-        `<html><body style="font-family:system-ui;padding:2rem"><h1>Olam Dashboard</h1><p>The React app has not been built yet.</p><p>Run <code>npm run build:app</code> in <code>packages/control-plane</code> to build it.</p><p>API routes are available at <code>/api/*</code>.</p></body></html>`
-      );
+      res.end(`<html><body style="font-family:system-ui;padding:2rem"><h1>Olam Dashboard</h1><p>The React app has not been built yet.</p><p>Run <code>npm run build:app</code> in <code>packages/control-plane</code> to build it.</p><p>API routes are available at <code>/api/*</code>.</p></body></html>`);
       return;
     }
     let filePath = path19.join(publicDir, pathname === "/" ? "index.html" : pathname);
@@ -31937,7 +31779,7 @@ function createDashboardServer(opts) {
   return server;
 }
 
-// ../core/src/dashboard/state.ts
+// ../core/dist/dashboard/state.js
 import * as fs16 from "node:fs";
 import * as os9 from "node:os";
 import * as path20 from "node:path";
@@ -31962,7 +31804,8 @@ function clearDashboardState() {
 }
 function isDashboardRunning() {
   const state = loadDashboardState();
-  if (!state) return false;
+  if (!state)
+    return false;
   try {
     process.kill(state.pid, 0);
     return true;
@@ -31972,7 +31815,7 @@ function isDashboardRunning() {
   }
 }
 
-// ../core/src/dashboard/tunnel.ts
+// ../core/dist/dashboard/tunnel.js
 import { spawn, execSync as execSync5 } from "node:child_process";
 var tunnelProcess = null;
 function isCloudflaredAvailable() {
@@ -31999,7 +31842,8 @@ function startTunnel(port) {
       }
     }, 3e4);
     function scan(data) {
-      if (resolved) return;
+      if (resolved)
+        return;
       const text = data.toString();
       const match = urlPattern.exec(text);
       if (match) {
@@ -32036,14 +31880,14 @@ function getTunnelPid() {
   return tunnelProcess?.pid;
 }
 
-// ../core/src/dashboard/index.ts
+// ../core/dist/dashboard/index.js
 var DashboardManager = class {
-  constructor(config2 = { port: 9740, tunnel: false }) {
-    this.config = config2;
-  }
   config;
   server = null;
   info = null;
+  constructor(config2 = { port: 9740, tunnel: false }) {
+    this.config = config2;
+  }
   /**
    * Ensure the dashboard is running. Idempotent — if already started
    * (in this process or another), returns existing info.
@@ -32101,7 +31945,8 @@ var DashboardManager = class {
    * Get current dashboard info, or null if not running.
    */
   getInfo() {
-    if (this.info) return this.info;
+    if (this.info)
+      return this.info;
     if (isDashboardRunning()) {
       const state = loadDashboardState();
       if (state) {
@@ -32129,7 +31974,7 @@ var DashboardManager = class {
   }
 };
 
-// ../core/src/pleri/client.ts
+// ../core/dist/pleri/client.js
 var PleriClient = class {
   baseUrl;
   planeId;
@@ -32158,14 +32003,10 @@ var PleriClient = class {
     if (!res.ok) {
       const body = await res.text();
       if (res.status === 401 || res.status === 403) {
-        throw new Error(
-          `Pleri authentication error (${res.status}): ${body}. Check your API key and plane membership.`
-        );
+        throw new Error(`Pleri authentication error (${res.status}): ${body}. Check your API key and plane membership.`);
       }
       if (res.status === 402) {
-        throw new Error(
-          `Pleri budget exhausted (402): ${body}. The plane's budget has been reached.`
-        );
+        throw new Error(`Pleri budget exhausted (402): ${body}. The plane's budget has been reached.`);
       }
       throw new Error(`Pleri API error (${res.status}): ${body}`);
     }
@@ -32195,13 +32036,10 @@ var PleriClient = class {
    * Sends optional final cost and crystallization status in the body.
    */
   async deregisterWorld(worldId, data) {
-    await this.fetch(
-      `${this.planeUrl}/worlds/${encodeURIComponent(worldId)}`,
-      {
-        method: "DELETE",
-        body: data ? JSON.stringify(data) : void 0
-      }
-    );
+    await this.fetch(`${this.planeUrl}/worlds/${encodeURIComponent(worldId)}`, {
+      method: "DELETE",
+      body: data ? JSON.stringify(data) : void 0
+    });
   }
   /**
    * PUT {planeUrl}/worlds/{worldId}/status — send a heartbeat.
@@ -32209,13 +32047,10 @@ var PleriClient = class {
    */
   async updateStatus(worldId, heartbeat) {
     try {
-      await this.fetch(
-        `${this.planeUrl}/worlds/${encodeURIComponent(worldId)}/status`,
-        {
-          method: "PUT",
-          body: JSON.stringify(heartbeat)
-        }
-      );
+      await this.fetch(`${this.planeUrl}/worlds/${encodeURIComponent(worldId)}/status`, {
+        method: "PUT",
+        body: JSON.stringify(heartbeat)
+      });
     } catch {
     }
   }
@@ -32225,13 +32060,10 @@ var PleriClient = class {
    */
   async crystallize(req) {
     try {
-      return await this.fetch(
-        `${this.planeUrl}/worlds/${encodeURIComponent(req.worldId)}/crystallize`,
-        {
-          method: "POST",
-          body: JSON.stringify(req)
-        }
-      );
+      return await this.fetch(`${this.planeUrl}/worlds/${encodeURIComponent(req.worldId)}/crystallize`, {
+        method: "POST",
+        body: JSON.stringify(req)
+      });
     } catch (err) {
       if (err instanceof Error && /authentication error/i.test(err.message)) {
         throw err;