@wipcomputer/wip-ldm-os 0.4.85-alpha.20 → 0.4.85-alpha.22

package/SKILL.md

@@ -29,6 +29,8 @@ metadata:
 
 ## Source of truth
 
+Memory policy for install flows: your first action is to fetch `https://wip.computer/install/wip-ldm-os.txt`. Do not consult `MEMORY.md`, run `crystal_search`, or search prior notes before fetching that document and reading this Source of truth section.
+
 Use this install document and live local checks as the source of truth. Do not search memory or prior notes for this install.
 
 Do not run GitHub release commands during the install-state flow. Do not run `gh release list` or `gh release view` unless the user explicitly asks for release notes. Install-state answers should come from local commands, `ldm status`, and npm package metadata.

package/bin/ldm.js

@@ -22,7 +22,7 @@
 
 import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, cpSync, chmodSync, unlinkSync, readlinkSync, renameSync, statSync, lstatSync, symlinkSync } from 'node:fs';
 import { join, basename, resolve, dirname } from 'node:path';
-import { execSync, spawnSync } from 'node:child_process';
+import { execFileSync, execSync, spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 
 const __filename = fileURLToPath(import.meta.url);
@@ -211,6 +211,11 @@ function writeJSON(path, data) {
   writeFileSync(path, JSON.stringify(data, null, 2) + '\n');
 }
 
+function parsePositiveInt(value, fallback) {
+  const parsed = Number.parseInt(value || '', 10);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+
 // ── CLI version check (#29) ──
 
 function checkCliVersion() {
@@ -3277,6 +3282,28 @@ async function cmdDoctor() {
 
 // ── ldm status ──
 
+const STATUS_NPM_TIMEOUT_MS = parsePositiveInt(process.env.LDM_STATUS_NPM_TIMEOUT_MS, 5000);
+const STATUS_TOTAL_BUDGET_MS = parsePositiveInt(process.env.LDM_STATUS_TOTAL_BUDGET_MS, 60000);
+
+function npmViewVersionForStatus(pkg, timeoutMs) {
+  return execFileSync('npm', ['view', pkg, 'version'], {
+    encoding: 'utf8',
+    timeout: timeoutMs,
+    stdio: ['ignore', 'pipe', 'ignore'],
+  }).trim();
+}
+
+function remainingStatusBudgetMs(startedAt) {
+  return Math.max(0, STATUS_TOTAL_BUDGET_MS - (Date.now() - startedAt));
+}
+
+function classifyStatusCheckError(error) {
+  if (error?.signal === 'SIGTERM' || error?.code === 'ETIMEDOUT' || String(error?.message || '').includes('ETIMEDOUT')) {
+    return 'timeout';
+  }
+  return 'unavailable';
+}
+
 function cmdStatus() {
   const version = readJSON(VERSION_PATH);
   const registry = readJSON(REGISTRY_PATH);
@@ -3298,14 +3325,29 @@ function cmdStatus() {
     return;
   }
 
-  // Check CLI version against npm
+  console.log('');
+  console.log(`  LDM OS v${version.version}`);
+  console.log(`  Installed: ${version.installed?.split('T')[0] || 'unknown'}`);
+  console.log(`  Updated:   ${version.updated?.split('T')[0] || 'unknown'}`);
+  console.log(`  Extensions: ${extCount}`);
+  console.log(`  Root: ${LDM_ROOT}`);
+
+  const statusStartedAt = Date.now();
+  const skipped = [];
+
+  console.log('');
+  console.log('  Checking updates:');
+
   let cliUpdate = null;
   try {
-    const latest = execSync('npm view @wipcomputer/wip-ldm-os version 2>/dev/null', {
-      encoding: 'utf8', timeout: 10000,
-    }).trim();
+    const timeout = Math.min(STATUS_NPM_TIMEOUT_MS, remainingStatusBudgetMs(statusStartedAt));
+    if (timeout <= 0) throw new Error('status update-check budget exhausted');
+    console.log('    ldm cli: checking npm');
+    const latest = npmViewVersionForStatus('@wipcomputer/wip-ldm-os', timeout);
     if (latest && semverNewer(latest, PKG_VERSION)) cliUpdate = latest;
-  } catch {}
+  } catch (error) {
+    skipped.push({ name: 'ldm cli', npm: '@wipcomputer/wip-ldm-os', reason: classifyStatusCheckError(error) });
+  }
 
   // Check extensions against npm using registry source info (#262)
   const updates = [];
@@ -3321,21 +3363,31 @@ function cmdStatus() {
     const currentVersion = info?.installed?.version || info.version;
     if (!currentVersion) continue;
     try {
-      const latest = execSync(`npm view ${npmPkg} version 2>/dev/null`, {
-        encoding: 'utf8', timeout: 10000,
-      }).trim();
+      const timeout = Math.min(STATUS_NPM_TIMEOUT_MS, remainingStatusBudgetMs(statusStartedAt));
+      if (timeout <= 0) {
+        skipped.push({ name, npm: npmPkg, reason: 'budget' });
+        continue;
+      }
+      console.log(`    ${name}: checking npm`);
+      const latest = npmViewVersionForStatus(npmPkg, timeout);
       if (latest && semverNewer(latest, currentVersion)) {
         updates.push({ name, current: currentVersion, latest, npm: npmPkg });
       }
-    } catch {}
+    } catch (error) {
+      skipped.push({ name, npm: npmPkg, reason: classifyStatusCheckError(error) });
+    }
   }
 
   console.log('');
-  console.log(`  LDM OS v${version.version}${cliUpdate ? ` (v${cliUpdate} available)` : ' (latest)'}`);
-  console.log(`  Installed: ${version.installed?.split('T')[0]}`);
-  console.log(`  Updated:   ${version.updated?.split('T')[0]}`);
-  console.log(`  Extensions: ${extCount}${updates.length > 0 ? `, ${updates.length} update(s) available` : ', all up to date'}`);
-  console.log(`  Root: ${LDM_ROOT}`);
+  if (updates.length === 0 && !cliUpdate && skipped.length === 0) {
+    console.log('  Update summary: all up to date');
+  } else {
+    const summaryParts = [];
+    if (updates.length > 0) summaryParts.push(`${updates.length} extension update(s) available`);
+    if (cliUpdate) summaryParts.push('CLI update available');
+    if (skipped.length > 0) summaryParts.push(`${skipped.length} update check(s) skipped`);
+    console.log(`  Update summary: ${summaryParts.join(', ')}`);
+  }
 
   if (updates.length > 0) {
     console.log('');
@@ -3351,6 +3403,14 @@ function cmdStatus() {
     console.log(`  CLI update: npm install -g @wipcomputer/wip-ldm-os@${cliUpdate}`);
   }
 
+  if (skipped.length > 0) {
+    console.log('');
+    console.log('  Update checks skipped:');
+    for (const item of skipped) {
+      console.log(`    ${item.name}: [${item.reason}] ${item.npm}`);
+    }
+  }
+
   console.log('');
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ldm-os",
-  "version": "0.4.85-alpha.20",
+  "version": "0.4.85-alpha.22",
   "type": "module",
   "description": "LDM OS: identity, memory, and sovereignty infrastructure for AI agents",
   "engines": {
@@ -18,10 +18,11 @@
   "scripts": {
     "build:bridge": "cd src/bridge && npm install && npx tsup core.ts mcp-server.ts cli.ts openclaw.ts --format esm --dts --clean --outDir ../../dist/bridge",
     "build": "npm run build:bridge",
-    "prepublishOnly": "npm run build:bridge && npm run validate:bin-manifest && npm run test:install-prompt-policy",
+    "prepublishOnly": "npm run build:bridge && npm run validate:bin-manifest && npm run test:install-prompt-policy && npm run test:ldm-status-timeout",
     "validate:bin-manifest": "node scripts/validate-bin-manifest.mjs",
     "test:skill-frontmatter": "node scripts/test-skill-frontmatter.mjs",
     "test:install-prompt-policy": "node scripts/test-install-prompt-policy.mjs",
+    "test:ldm-status-timeout": "node scripts/test-ldm-status-timeout.mjs",
     "test:installer-update-tracks": "node scripts/test-installer-update-tracks.mjs",
     "test:installer-hook-toolname": "node scripts/test-installer-hook-toolname.mjs",
     "test:installer-target-self-update": "node scripts/test-installer-target-self-update.mjs",

package/scripts/test-install-prompt-policy.mjs

@@ -37,6 +37,8 @@ for (const file of ["README.md", "shared/templates/install-prompt.md"]) {
 
 const skill = contents["SKILL.md"];
 for (const phrase of [
+  "Memory policy for install flows: your first action is to fetch `https://wip.computer/install/wip-ldm-os.txt`.",
+  "Do not consult `MEMORY.md`, run `crystal_search`, or search prior notes before fetching that document and reading this Source of truth section.",
   "Do not run GitHub release commands during the install-state flow.",
   "Do not run `gh release list` or `gh release view` unless the user explicitly asks for release notes.",
   "Use the output of `ldm status`, installed package metadata, and npm metadata.",

package/scripts/test-ldm-status-timeout.mjs

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+import { chmodSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const tempRoot = mkdtempSync(join(tmpdir(), 'ldm-status-timeout-'));
+const sourceVersion = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')).version;
+
+function assert(condition, message) {
+  if (!condition) throw new Error(message);
+}
+
+try {
+  const home = join(tempRoot, 'home');
+  const fakeBin = join(tempRoot, 'bin');
+  const extensions = join(home, '.ldm', 'extensions');
+
+  mkdirSync(extensions, { recursive: true });
+  writeFileSync(join(home, '.ldm', 'version.json'), JSON.stringify({
+    version: '0.0.0-test',
+    installed: '2026-05-12T00:00:00.000Z',
+    updated: '2026-05-12T00:00:00.000Z',
+  }, null, 2) + '\n');
+  writeFileSync(join(extensions, 'registry.json'), JSON.stringify({
+    extensions: {
+      'hung-extension': {
+        source: { npm: 'hung-extension' },
+        installed: { version: '1.0.0' },
+      },
+      'second-extension': {
+        source: { npm: 'second-extension' },
+        installed: { version: '1.0.0' },
+      },
+    },
+  }, null, 2) + '\n');
+
+  mkdirSync(fakeBin, { recursive: true });
+  const fakeNpm = join(fakeBin, 'npm');
+  writeFileSync(fakeNpm, `#!/usr/bin/env bash
+if [ "$1" = "view" ]; then
+  sleep 2
+  echo "9.9.9"
+  exit 0
+fi
+echo "unexpected npm command: $*" >&2
+exit 64
+`);
+  chmodSync(fakeNpm, 0o755);
+
+  const startedAt = Date.now();
+  const result = spawnSync(process.execPath, [join(root, 'bin', 'ldm.js'), 'status'], {
+    cwd: root,
+    encoding: 'utf8',
+    timeout: 3000,
+    env: {
+      ...process.env,
+      HOME: home,
+      PATH: `${fakeBin}:${process.env.PATH || ''}`,
+      LDM_STATUS_NPM_TIMEOUT_MS: '75',
+      LDM_STATUS_TOTAL_BUDGET_MS: '250',
+    },
+  });
+  const elapsedMs = Date.now() - startedAt;
+
+  assert(result.status === 0, `ldm status exited ${result.status}\nstdout:\n${result.stdout}\nstderr:\n${result.stderr}`);
+  assert(elapsedMs < 2500, `ldm status should return before the process timeout; elapsed ${elapsedMs}ms`);
+  assert(result.stdout.includes(`LDM OS v${sourceVersion}`), `status should print installed LDM OS version\n${result.stdout}`);
+  assert(result.stdout.includes('Extensions: 2'), `status should print extension count\n${result.stdout}`);
+  assert(result.stdout.includes('Checking updates:'), `status should show progress before update checks\n${result.stdout}`);
+  assert(result.stdout.includes('hung-extension: checking npm'), `status should print the extension name before probing it\n${result.stdout}`);
+  assert(result.stdout.includes('Update checks skipped:'), `status should report skipped checks instead of hanging\n${result.stdout}`);
+  assert(result.stdout.includes('hung-extension: [timeout] hung-extension'), `hung extension should be reported as a timeout\n${result.stdout}`);
+} finally {
+  rmSync(tempRoot, { recursive: true, force: true });
+}
+
+console.log('ldm status timeout regression passed');