@chengchenccc/oh-my-agent 0.2.0-rc.2 → 0.2.0-rc.3

package/dist/core/session/session-file.js

@@ -31,22 +31,63 @@ export function sessionDirFor(workspaceRoot) {
 export function sessionDir() {
     return process.env.OMA_SESSION_DIR ?? sessionDirFor(process.cwd());
 }
+/** Session ids reach the FILESYSTEM, and callers supply them (RPC resume,
+ *  TUI rename/delete): validate at this boundary. A path-shaped id
+ *  ("../x", "/abs", "a\\b", "..", trailing dots) would otherwise escape the
+ *  session directory and read/append/rename/delete outside it. Legit ids
+ *  are newSessionId() UUIDs (hex + dashes). */
+export function assertSafeSessionId(id) {
+    if (!/^[A-Za-z0-9_-]+$/.test(id)) {
+        throw new Error(`invalid session id: ${JSON.stringify(id.slice(0, 40))}`);
+    }
+    return id;
+}
+/** The single place a session id becomes a path. */
+function sessionFilePath(id, dir) {
+    return join(dir, `${assertSafeSessionId(id)}.jsonl`);
+}
 export function sessionPath(id) {
-    return join(sessionDir(), `${id}.jsonl`);
+    return sessionFilePath(id, sessionDir());
 }
 export function newSessionId() {
     return crypto.randomUUID();
 }
 /** Load the transcript messages of a session file (wire-loose shape).
- *  Missing/corrupt files yield [] (the caller falls back to a fresh
- *  session). A compaction event REPLACES everything recorded before it:
- *  the summary becomes one context message, later turns stay live — so a
- *  resumed session does not re-inflate the context it already compacted. */
+ *  Missing/corrupt files yield [] (the caller falls back to a fresh session).
+ *
+ *  A compaction event carries `replacesEarlierMessages`: whether its summary
+ *  describes everything written before it. Only then is folding lossless —
+ *  the summary becomes one context message and later turns stay live.
+ *
+ *  Why a flag and not a count: the count would have to be expressed in THIS
+ *  file's message-event space, but the run that produces the summary counts
+ *  coverage over its own session branch, and the two spaces do not align —
+ *  the branch also holds entries that never reach the file (re-seeded
+ *  `product_history`, the `meta` entry) and folds a prior summary into a
+ *  single entry. A count in the wrong space lands past the real boundary and
+ *  DELETES messages the summary never described. The flag cannot be
+ *  mis-indexed: when the summary does not describe the whole file, the
+ *  transcript is simply left intact (a resume may re-summarize, never lose).
+ *
+ *  Events without the field (files written before it existed) keep the
+ *  historical behavior: the summary replaces everything before it.
+ *
+ *  The LAST event that says "replaces" decides the fold, and a later event
+ *  saying otherwise does NOT cancel it. That distinction is what makes manual
+ *  /compact stick: /compact folds the transcript to one summary, a later
+ *  automatic compaction covers only part of what follows, and "latest event
+ *  wins" would resurrect every message the user deliberately compacted away.
+ *  Ignoring a partial summary is always safe — its content is either already
+ *  summarized or still present as messages. */
 export function loadSessionMessages(id, dir = sessionDir()) {
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     if (!existsSync(path))
         return [];
     const messages = [];
+    /** The latest summary that MAY fold, with the index it folds from. A later
+     *  non-folding summary must not overwrite these. */
+    let foldSummary;
+    let foldFrom;
     for (const line of readFileSync(path, "utf8").split("\n")) {
         if (!line.trim())
             continue;
@@ -57,18 +98,28 @@ export function loadSessionMessages(id, dir = sessionDir()) {
             if (evt.type === "message" && evt.message?.role)
                 messages.push(evt.message);
             else if (evt.type === "compaction" && typeof evt.summary === "string") {
-                messages.length = 0;
-                messages.push({
-                    role: "user",
-                    text: `<previous_session_summary>\n${evt.summary}\n</previous_session_summary>`,
-                });
+                // Evaluated in this file's own index space: everything parsed before
+                // it. Only a replacing event re-points the fold; a partial summary
+                // leaves an earlier fold in place (see the header note on /compact).
+                if (evt.replacesEarlierMessages !== false) {
+                    foldSummary = evt.summary;
+                    foldFrom = messages.length;
+                }
             }
         }
         catch {
             /* skip malformed line */
         }
     }
-    return messages;
+    if (foldSummary === undefined || foldFrom === undefined)
+        return messages;
+    return [
+        {
+            role: "user",
+            text: `<previous_session_summary>\n${foldSummary}\n</previous_session_summary>`,
+        },
+        ...messages.slice(foldFrom),
+    ];
 }
 /** Scan one session directory (all *.jsonl) into summaries. */
 function scanSessionDir(dir, workspace) {
@@ -82,6 +133,7 @@ function scanSessionDir(dir, workspace) {
         const path = join(dir, entry);
         let preview = "";
         let title;
+        let summaryText;
         let headerCwd;
         let forkOf;
         try {
@@ -98,6 +150,10 @@ function scanSessionDir(dir, workspace) {
                     title = evt.title;
                     continue;
                 }
+                if (evt.type === "summary" && typeof evt.summary === "string") {
+                    summaryText = evt.summary;
+                    continue;
+                }
                 if (evt.type === "fork_of" && typeof evt.parentId === "string") {
                     forkOf = evt.parentId;
                     continue;
@@ -115,6 +171,8 @@ function scanSessionDir(dir, workspace) {
         const summary = { id, modifiedAt: statSync(path).mtimeMs, preview };
         if (title !== undefined)
             summary.title = title;
+        if (summaryText !== undefined)
+            summary.summary = summaryText;
         if (workspace !== undefined)
             summary.workspace = workspace;
         else if (headerCwd !== undefined)
@@ -155,7 +213,7 @@ export function listAllSessions() {
  *  the TUI to mark a session titled so the loop stops re-generating one on
  *  every completed turn. */
 export function readSessionTitle(id, dir = sessionDir()) {
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     let raw;
     try {
         raw = readFileSync(path, "utf-8");
@@ -183,7 +241,7 @@ export function readSessionTitle(id, dir = sessionDir()) {
  *  loop after each completed run. Last one wins in listings. Also the
  *  primitive for /rename: appending a new title overrides the display. */
 export function appendSessionTitle(id, title, dir = sessionDir()) {
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     if (!existsSync(path))
         return;
     appendFileSync(path, `${JSON.stringify({
@@ -192,9 +250,22 @@ export function appendSessionTitle(id, title, dir = sessionDir()) {
         title,
     })}\n`);
 }
+/** Append a summary event: a one-sentence description of what the session is
+ *  about, produced by the same ephemeral call as the title. Last one wins in
+ *  listings (the resume list shows it next to the title). */
+export function appendSessionSummary(id, summary, dir = sessionDir()) {
+    const path = sessionFilePath(id, dir);
+    if (!existsSync(path))
+        return;
+    appendFileSync(path, `${JSON.stringify({
+        type: "summary",
+        timestamp: new Date().toISOString(),
+        summary,
+    })}\n`);
+}
 /** Delete a session file. Returns false when it did not exist. */
 export function deleteSession(id, dir = sessionDir()) {
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     if (!existsSync(path))
         return false;
     rmSync(path, { force: true });
@@ -203,30 +274,141 @@ export function deleteSession(id, dir = sessionDir()) {
 /** Rename a session's display title (last-wins title event). Returns false
  *  when the session file does not exist. */
 export function renameSession(id, title, dir = sessionDir()) {
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     if (!existsSync(path))
         return false;
     appendSessionTitle(id, title, dir);
     return true;
 }
+/** Append a goal-mode event (omp mode-change analogue): the latest goal
+ *  state transition for the session. Replay reconstructs the current goal
+ *  (active/paused/complete/dropped); a goal:null event means dropped. */
+export function appendSessionGoalEvent(id, state, dir = sessionDir()) {
+    const path = sessionFilePath(id, dir);
+    if (!existsSync(path))
+        return;
+    appendFileSync(path, `${JSON.stringify({
+        type: "goal",
+        timestamp: new Date().toISOString(),
+        goalMode: state,
+    })}\n`);
+}
+/** Append a goal COMPLETION record: the objective and the tracked usage at the
+ *  moment the model declared the goal done. Separate from the mode-change
+ *  events so a completed goal reads as a durable achievement rather than a
+ *  status flip (and so resumed sessions can report what was finished). */
+export function appendSessionGoalCompletion(id, record, dir = sessionDir()) {
+    const path = sessionFilePath(id, dir);
+    if (!existsSync(path))
+        return;
+    appendFileSync(path, `${JSON.stringify({
+        type: "goal_completed",
+        timestamp: new Date().toISOString(),
+        ...record,
+    })}
+`);
+}
+/** Append a plan-mode event (same mode-change shape as the goal one): the
+ *  mode plus whether it is paused. The draft itself is a FILE, so the journal
+ *  only needs the mode; resume restores "planning, paused" and never
+ *  re-enters a read-only planning turn on its own. */
+export function appendSessionPlanEvent(id, state, paused, dir = sessionDir()) {
+    const path = sessionFilePath(id, dir);
+    if (!existsSync(path))
+        return;
+    appendFileSync(path, `${JSON.stringify({
+        type: "plan",
+        timestamp: new Date().toISOString(),
+        planMode: state ? { planPath: state.planPath, paused } : null,
+    })}\n`);
+}
+/** Replay plan-mode events: the latest one wins (null = plan mode off). */
+export function loadSessionPlanState(id, dir = sessionDir()) {
+    const path = sessionFilePath(id, dir);
+    if (!existsSync(path))
+        return null;
+    let latest = null;
+    for (const line of readFileSync(path, "utf8").split("\n")) {
+        if (!line.trim() || !line.includes('"plan"'))
+            continue;
+        try {
+            const evt = JSON.parse(line);
+            if (evt.type !== "plan")
+                continue;
+            const mode = evt.planMode;
+            if (mode === null || mode === undefined || typeof mode.planPath !== "string") {
+                latest = null;
+                continue;
+            }
+            latest = { planPath: mode.planPath, paused: mode.paused === true };
+        }
+        catch {
+            /* skip malformed line */
+        }
+    }
+    return latest;
+}
+/** Reconstruct the current goal-mode state by replaying goal events (last
+ *  one wins; malformed entries are skipped like every other scan here). */
+export function loadSessionGoalState(id, dir = sessionDir()) {
+    const path = sessionFilePath(id, dir);
+    if (!existsSync(path))
+        return null;
+    let latest = null;
+    for (const line of readFileSync(path, "utf8").split("\n")) {
+        if (!line.trim() || !line.includes('"goal"'))
+            continue;
+        try {
+            const evt = JSON.parse(line);
+            if (evt.type !== "goal")
+                continue;
+            const mode = evt.goalMode;
+            if (mode === null || mode === undefined || mode.goal == null) {
+                latest = null; // explicit drop/clear wins from here on
+                continue;
+            }
+            const g = mode.goal;
+            if (typeof g.objective !== "string" ||
+                typeof g.status !== "string" ||
+                typeof g.id !== "string") {
+                continue;
+            }
+            latest = {
+                enabled: mode.enabled === true,
+                mode: mode.mode === "exiting" ? "exiting" : "active",
+                ...(mode.reason === "completed" ? { reason: "completed" } : {}),
+                goal: g,
+            };
+        }
+        catch {
+            /* skip malformed line */
+        }
+    }
+    return latest;
+}
 /** Append a compaction event: records that the run compacted everything
  *  recorded so far in this file into `summary`. Must be called AFTER the
  *  turn's messages are appended. */
-export function appendSessionCompaction(id, summary, dir = sessionDir()) {
-    const path = join(dir, `${id}.jsonl`);
+export function appendSessionCompaction(id, summary, dir = sessionDir(), 
+/** Whether this summary describes EVERYTHING already in the file, which is
+ *  what makes folding on load lossless. Omit when unknown: the load path
+ *  then keeps the transcript intact instead of folding it. */
+replacesEarlierMessages) {
+    const path = sessionFilePath(id, dir);
     if (!existsSync(path))
         return;
     appendFileSync(path, `${JSON.stringify({
         type: "compaction",
         timestamp: new Date().toISOString(),
         summary,
+        ...(replacesEarlierMessages !== undefined ? { replacesEarlierMessages } : {}),
     })}\n`);
 }
 /** Read the durable event tree of one session as parentId-chained message
  *  nodes (used by the TUI branch-tree fork overlay). Only message events
  *  carry an id; corrupt lines are skipped. */
 export function loadSessionBranchNodes(id, dir = sessionDir()) {
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     if (!existsSync(path))
         return [];
     const lines = readFileSync(path, "utf8")
@@ -281,7 +463,7 @@ export function loadSessionBranchNodes(id, dir = sessionDir()) {
 /** Copy a session file through the line at `cutIndex` into a NEW file with a
  *  fork_of marker. Shared by the ordinal and event-id fork paths. */
 function copySessionThrough(id, cutIndex, dir, markerFields) {
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     if (!existsSync(path))
         return null;
     const lines = readFileSync(path, "utf8")
@@ -303,13 +485,13 @@ function copySessionThrough(id, cutIndex, dir, markerFields) {
         /* keep the original header line */
     }
     const marker = JSON.stringify({ type: "fork_of", parentId: id, ...markerFields });
-    writeFileSync(join(dir, `${newId}.jsonl`), `${[...kept, marker].join("\n")}\n`);
+    writeFileSync(sessionFilePath(newId, dir), `${[...kept, marker].join("\n")}\n`);
     return newId;
 }
 /** Fork a session at the Nth user message (1-based) — the existing /fork
  *  semantics. */
 export function forkSession(id, ordinal, dir = sessionDir()) {
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     if (!existsSync(path))
         return null;
     const lines = readFileSync(path, "utf8")
@@ -340,7 +522,7 @@ export function forkSession(id, ordinal, dir = sessionDir()) {
 /** Fork a session through a specific branch node (message event id). The new
  *  session contains every event up to and INCLUDING that node. */
 export function forkSessionAtEvent(id, eventId, dir = sessionDir()) {
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     if (!existsSync(path))
         return null;
     const lines = readFileSync(path, "utf8")
@@ -389,7 +571,7 @@ function readLastMessageId(path) {
 }
 export function appendSessionMessages(id, cwd, messages, dir = sessionDir()) {
     mkdirSync(dir, { recursive: true });
-    const path = join(dir, `${id}.jsonl`);
+    const path = sessionFilePath(id, dir);
     const cacheKey = `${dir}:${id}`;
     if (!existsSync(path)) {
         writeFileSync(path, `${JSON.stringify({

package/dist/core/session/session-loop.d.ts

@@ -5,7 +5,7 @@ import type { OmaRuntime } from "../runtime/create-runtime.js";
  *  stores only the session id. A completed turn (input + assistant/tool
  *  messages + compaction summaries) is appended after the run. */
 /** Finalize a turn in the session file: writes compaction summaries and the
- *  auto title. Conversational messages are written in REAL TIME via
+ *  auto title/summary. Conversational messages are written in REAL TIME via
  *  createOmaRuntime's onPersistMessages (pi appendMessage) when the caller
  *  wires it; `messages` is the fallback batch for one-shot modes (print)
  *  that do not use real-time persistence. */
@@ -17,6 +17,8 @@ export declare function persistSessionTurn(opts: {
     messages?: readonly unknown[];
     /** The run's auto-generated title (outcome.title), when present. */
     title?: string;
+    /** The run's one-sentence session summary (outcome.summary), when present. */
+    summary?: string;
     /** Session directory; defaults to the current workspace. Cross-workspace
      *  resumes pass the source workspace's dir so new turns append there. */
     dir?: string;

package/dist/core/session/session-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-loop.d.ts","sourceRoot":"","sources":["../../../src/core/session/session-loop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAU/D;;;;kEAIkE;AAElE;;;;6CAI6C;AAC7C,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,UAAU,CAAC;IACpB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC9B,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;6EACyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB;AAED;;;sEAGsE;AACtE,wBAAgB,cAAc,CAC5B,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GACX;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC;CACb,CAIA"}
+{"version":3,"file":"session-loop.d.ts","sourceRoot":"","sources":["../../../src/core/session/session-loop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAW/D;;;;kEAIkE;AAElE;;;;6CAI6C;AAC7C,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,UAAU,CAAC;IACpB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC9B,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;6EACyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhB;AAED;;;sEAGsE;AACtE,wBAAgB,cAAc,CAC5B,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GACX;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC;CACb,CAIA"}

package/dist/core/session/session-loop.js

@@ -1,11 +1,11 @@
-import { appendSessionCompaction, appendSessionMessages, appendSessionTitle, loadSessionMessages, newSessionId, sessionDir, } from "./session-file.js";
+import { appendSessionCompaction, appendSessionMessages, appendSessionSummary, appendSessionTitle, loadSessionMessages, newSessionId, sessionDir, } from "./session-file.js";
 /** Shared session persistence for the interactive CLI modes (TUI) and the
  *  one-shot modes (print). Mirrors the RPC mode's session semantics
  *  (ADR 0003 decision 6): the CLI owns its session file; the product
  *  stores only the session id. A completed turn (input + assistant/tool
  *  messages + compaction summaries) is appended after the run. */
 /** Finalize a turn in the session file: writes compaction summaries and the
- *  auto title. Conversational messages are written in REAL TIME via
+ *  auto title/summary. Conversational messages are written in REAL TIME via
  *  createOmaRuntime's onPersistMessages (pi appendMessage) when the caller
  *  wires it; `messages` is the fallback batch for one-shot modes (print)
  *  that do not use real-time persistence. */
@@ -13,11 +13,15 @@ export async function persistSessionTurn(opts) {
     if (opts.messages && opts.messages.length > 0) {
         appendSessionMessages(opts.sessionId, opts.cwd, opts.messages, opts.dir);
     }
-    for (const summary of await opts.runtime.compactions()) {
-        appendSessionCompaction(opts.sessionId, summary, opts.dir);
+    for (const compaction of await opts.runtime.compactions()) {
+        // The flag rides the event: a summary that does NOT describe the whole
+        // file must not fold it, or a resume drops the messages it never saw.
+        appendSessionCompaction(opts.sessionId, compaction.summary, opts.dir, compaction.replacesEarlierMessages);
     }
     if (opts.title)
         appendSessionTitle(opts.sessionId, opts.title, opts.dir);
+    if (opts.summary)
+        appendSessionSummary(opts.sessionId, opts.summary, opts.dir);
 }
 /** Resolve the session for a new TUI turn: a --session id resumes that
  *  file (missing/corrupt file degrades to fresh); otherwise a new id.

package/dist/core/settings/project-settings.d.ts

@@ -1,7 +1,12 @@
 /** Project-level oma settings (`.oma/settings.json` in the workspace root).
- *  Standalone TUI-only. The product backend keeps agent.yml as its model
- *  truth and can be overridden per-run by the run parameter, so this file
- *  never conflicts with agent.yml in the backend->oma chain. */
+ *
+ *  Every mode reads this file, but what a mode HONORS differs on purpose: a
+ *  standalone run (TUI / print / json) takes it whole, while a product run
+ *  (rpc) takes only `bashSandbox` — a workspace file must never steer the
+ *  product's permission classifier, web access, step budget or timeouts. The
+ *  product backend keeps agent.yml as its model truth and passes per-run
+ *  values in the run snapshot, so this file cannot conflict with agent.yml in
+ *  the backend -> oma chain. */
 export interface ProjectSettings {
     /** Canonical `<provider>/<model>` id chosen in the TUI. */
     model?: string;
@@ -21,6 +26,11 @@ export interface ProjectSettings {
     modelTimeoutMs?: number;
     /** MCP call timeout ms (env OMA_MCP_TIMEOUT_MS). */
     mcpTimeoutMs?: number;
+    /** HITL ask inactivity timeout ms (env OMA_ASK_TIMEOUT_MS, omp ask.timeout
+     *  which is in SECONDS): when a question sits untouched this long, the
+     *  unanswered ones are auto-answered with their recommended option and the
+     *  answer is marked timedOut. 0 / absent = disabled (omp's default). */
+    askTimeoutMs?: number;
     /** Disable web tools (env OMA_DISABLE_WEB=1). */
     disableWeb?: boolean;
     /** Generate auto titles (env OMA_TITLE_ENABLED=0 disables). */
@@ -52,15 +62,50 @@ export interface ProjectSettings {
         model?: string;
     };
     /** Standalone permission gate (ADR 0020): "ask" cards every high-risk
-     *  tool, "auto" runs the classifier, "deny" blocks them. Absent = ungated
-     *  (legacy default). The product RPC path never reads this — its
-     *  permissionMode arrives frozen in the run snapshot. */
-    permissionMode?: "ask" | "auto" | "deny";
+     *  tool, "auto" runs the classifier, "deny" blocks them, "yolo" runs
+     *  ungated (the industry's skip-permissions mode — judgment gates off,
+     *  STATIC boundaries stay: workspace containment, protected files,
+     *  secret stripping, egress rules, write freshness; the OS bash sandbox
+     *  is force-enabled when the platform has one). Absent = ungated (legacy
+     *  default). The product RPC path never reads this — its permissionMode
+     *  arrives frozen in the run snapshot. */
+    permissionMode?: "ask" | "auto" | "deny" | "yolo";
+    /** Plan mode master switch (default ON). Turn it off in a workspace that
+     *  should never enter the read-only planning loop. */
+    planEnabled?: boolean;
+    /** Model used while planning ("provider/model"); absent = the session's
+     *  model. Planning benefits from a stronger reader than the implementer,
+     *  and the modes are separate so the two can differ. */
+    planModel?: string;
+    /** Goal mode master switch (default ON). A workspace that does not want an
+     *  autonomous multi-turn objective driver can turn it off; /goal and
+     *  /guided-goal then refuse with a hint. */
+    goalEnabled?: boolean;
+    /** Loop mode between-iteration action (`/loop`): "prompt" re-submits the
+     *  prompt, "compact" summarizes the context first, "reset" starts a fresh
+     *  session first, "ralph" runs the build loop (one work-queue item per fresh
+     *  session). Absent = "prompt". */
+    loopAction?: "prompt" | "compact" | "reset" | "ralph";
     /** Read-side tool-result pruning: old tool output outside the protect
      *  window is replaced by a short summary before each model call (a lighter
      *  touch than compaction). Absent = pruning OFF — the loop only prunes when
      *  a run was explicitly configured for it. */
     prune?: PruneKnobs;
+    /** Let the browser tool open loopback/RFC1918 targets, so a local dev server
+     *  can be inspected (env OMA_BROWSER_LOCAL_NETWORK=1). Cloud metadata
+     *  endpoints stay refused either way. Opt-IN because it loosens a boundary;
+     *  like permissionMode it is standalone-only — a backend RPC run ignores the
+     *  workspace file and takes the value from its frozen run snapshot. */
+    browserLocalNetwork?: boolean;
+    /** Write freshness policy for the file tools (env OMA_EDIT_FRESHNESS).
+     *  "require" = edit/write must echo the [fingerprint ...] a read reported, so
+     *  a write can never land on content the caller has not seen; "off" restores
+     *  the pre-fingerprint behaviour. ABSENT MEANS "require": the gate is on
+     *  unless a workspace deliberately downgrades it, and a workspace can only do
+     *  that for itself (`read_only` file tools cannot edit `.oma/settings.json` —
+     *  it is in PROTECTED_FILES). A backend RPC run ignores the workspace value
+     *  entirely and keeps the default. */
+    editFreshness?: "off" | "require";
 }
 /** Tool-output pruning knobs (see tool-pruning.ts for the mechanics). */
 export interface PruneKnobs {
@@ -86,6 +131,7 @@ export interface RuntimeKnobs {
     maxSteps?: number;
     modelTimeoutMs?: number;
     mcpTimeoutMs?: number;
+    askTimeoutMs?: number;
     maxToolTimeoutMs?: number;
     bashTimeoutMs?: number;
     evalTimeoutMs?: number;
@@ -93,6 +139,11 @@ export interface RuntimeKnobs {
     permissionClassifierModel?: string;
     permissionClassifierTimeoutMs?: number;
     disableWeb?: boolean;
+    /** Browser tool: allow loopback/RFC1918 targets (metadata stays refused). */
+    browserLocalNetwork?: boolean;
+    /** File-tool write freshness: "require" (fingerprint echo) or "off".
+     *  The assembly treats absence as "require". */
+    editFreshness?: "off" | "require";
     titleEnabled?: boolean;
     conversationTitled?: boolean;
     memoryExtract?: boolean;
@@ -107,6 +158,9 @@ export interface RuntimeKnobs {
 export declare function resolveRuntimeKnobs(settings: ProjectSettings | undefined, env?: Readonly<Record<string, string | undefined>>): RuntimeKnobs;
 /** Effective standalone permission mode: an explicit choice (CLI flag,
  *  /permission override) wins; the workspace setting is the default.
- *  "off" (a TUI override) and absent both resolve to undefined = ungated. */
-export declare function resolvePermissionMode(explicit?: "ask" | "auto" | "deny" | "off", workspaceRoot?: string): "ask" | "auto" | "deny" | undefined;
+ *  "off" (a TUI override) and absent both resolve to undefined = ungated.
+ *  "yolo" stays DISTINCT from undefined: both are ungated at the gate, but
+ *  yolo additionally force-enables the OS bash sandbox — collapsing it into
+ *  undefined would silently drop that compensating control. */
+export declare function resolvePermissionMode(explicit?: "ask" | "auto" | "deny" | "yolo" | "off", workspaceRoot?: string): "ask" | "auto" | "deny" | "yolo" | undefined;
 //# sourceMappingURL=project-settings.d.ts.map

package/dist/core/settings/project-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-settings.d.ts","sourceRoot":"","sources":["../../../src/core/settings/project-settings.ts"],"names":[],"mappings":"AAGA;;;gEAGgE;AAChE,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;+CAE2C;IAC3C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,uEAAuE;IACvE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yEAAyE;IACzE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;iCAG6B;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;oCACgC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;8DAE0D;IAC1D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;uEACmE;IACnE,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD;;;6DAGyD;IACzD,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IACzC;;;kDAG8C;IAC9C,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,yEAAyE;AACzE,MAAM,WAAW,UAAU;IACzB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAMD,oEAAoE;AACpE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CA6FjE;AAED;gDACgD;AAChD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,IAAI,CAWjF;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAGpE;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExD;AAYD;oEACoE;AACpE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAqBD;;0EAE0E;AAC1E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAC9D,YAAY,CAwCd;AAED;;6EAE6E;AAC7E,wBAAgB,qBAAqB,CACnC,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,EAC1C,aAAa,CAAC,EAAE,MAAM,GACrB,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAMrC"}
+{"version":3,"file":"project-settings.d.ts","sourceRoot":"","sources":["../../../src/core/settings/project-settings.ts"],"names":[],"mappings":"AAGA;;;;;;;;gCAQgC;AAChC,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;+CAE2C;IAC3C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,uEAAuE;IACvE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yEAAyE;IACzE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;4EAGwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;iCAG6B;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;oCACgC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;8DAE0D;IAC1D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;uEACmE;IACnE,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD;;;;;;;8CAO0C;IAC1C,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClD;0DACsD;IACtD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;4DAEwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;gDAE4C;IAC5C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;uCAGmC;IACnC,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IACtD;;;kDAG8C;IAC9C,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB;;;;2EAIuE;IACvE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;0CAOsC;IACtC,aAAa,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;CACnC;AAED,yEAAyE;AACzE,MAAM,WAAW,UAAU;IACzB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAMD,oEAAoE;AACpE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CA4HjE;AAED;gDACgD;AAChD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,IAAI,CAWjF;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAGpE;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExD;AAYD;oEACoE;AACpE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,6EAA6E;IAC7E,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;oDACgD;IAChD,aAAa,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAqBD;;0EAE0E;AAC1E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAC9D,YAAY,CAkDd;AAED;;;;;+DAK+D;AAC/D,wBAAgB,qBAAqB,CACnC,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,EACnD,aAAa,CAAC,EAAE,MAAM,GACrB,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAM9C"}

package/dist/core/settings/project-settings.js

@@ -34,6 +34,9 @@ export function loadProjectSettings(root) {
         if ("mcpTimeoutMs" in parsed && typeof parsed.mcpTimeoutMs === "number") {
             result.mcpTimeoutMs = parsed.mcpTimeoutMs;
         }
+        if ("askTimeoutMs" in parsed && typeof parsed.askTimeoutMs === "number") {
+            result.askTimeoutMs = parsed.askTimeoutMs;
+        }
         if ("disableWeb" in parsed && typeof parsed.disableWeb === "boolean") {
             result.disableWeb = parsed.disableWeb;
         }
@@ -59,6 +62,29 @@ export function loadProjectSettings(root) {
         if ("bashSandbox" in parsed && typeof parsed.bashSandbox === "boolean") {
             result.bashSandbox = parsed.bashSandbox;
         }
+        if ("browserLocalNetwork" in parsed && typeof parsed.browserLocalNetwork === "boolean") {
+            result.browserLocalNetwork = parsed.browserLocalNetwork;
+        }
+        if ("editFreshness" in parsed &&
+            (parsed.editFreshness === "off" || parsed.editFreshness === "require")) {
+            result.editFreshness = parsed.editFreshness;
+        }
+        if ("planEnabled" in parsed && typeof parsed.planEnabled === "boolean") {
+            result.planEnabled = parsed.planEnabled;
+        }
+        if ("planModel" in parsed && typeof parsed.planModel === "string" && parsed.planModel.trim()) {
+            result.planModel = parsed.planModel.trim();
+        }
+        if ("goalEnabled" in parsed && typeof parsed.goalEnabled === "boolean") {
+            result.goalEnabled = parsed.goalEnabled;
+        }
+        if ("loopAction" in parsed &&
+            (parsed.loopAction === "prompt" ||
+                parsed.loopAction === "compact" ||
+                parsed.loopAction === "reset" ||
+                parsed.loopAction === "ralph")) {
+            result.loopAction = parsed.loopAction;
+        }
         if ("memoryVector" in parsed &&
             typeof parsed.memoryVector === "object" &&
             parsed.memoryVector !== null) {
@@ -74,7 +100,8 @@ export function loadProjectSettings(root) {
         if ("permissionMode" in parsed &&
             (parsed.permissionMode === "ask" ||
                 parsed.permissionMode === "auto" ||
-                parsed.permissionMode === "deny")) {
+                parsed.permissionMode === "deny" ||
+                parsed.permissionMode === "yolo")) {
             result.permissionMode = parsed.permissionMode;
         }
         if ("maxToolTimeoutMs" in parsed && typeof parsed.maxToolTimeoutMs === "number") {
@@ -161,6 +188,9 @@ export function resolveRuntimeKnobs(settings, env = process.env) {
     const bashTimeoutMs = s.bashTimeoutMs ?? envPositive(env, "OMA_BASH_TIMEOUT_MS");
     if (bashTimeoutMs !== undefined)
         knobs.bashTimeoutMs = bashTimeoutMs;
+    const askTimeoutMs = s.askTimeoutMs ?? envNumber(env, "OMA_ASK_TIMEOUT_MS");
+    if (askTimeoutMs !== undefined)
+        knobs.askTimeoutMs = askTimeoutMs;
     const evalTimeoutMs = envNumber(env, "OMA_EVAL_TIMEOUT_MS");
     if (evalTimeoutMs !== undefined)
         knobs.evalTimeoutMs = evalTimeoutMs;
@@ -196,11 +226,22 @@ export function resolveRuntimeKnobs(settings, env = process.env) {
         knobs.memoryModel = s.memoryModel;
     if (s.prune)
         knobs.prune = s.prune;
+    const browserLocalNetwork = s.browserLocalNetwork ?? (env.OMA_BROWSER_LOCAL_NETWORK === "1" ? true : undefined);
+    if (browserLocalNetwork !== undefined)
+        knobs.browserLocalNetwork = browserLocalNetwork;
+    // Only an explicit "off" resolves here; absence stays undefined so the
+    // assembly can apply its "require" default in one visible place.
+    const editFreshness = s.editFreshness ?? (env.OMA_EDIT_FRESHNESS === "off" ? "off" : undefined);
+    if (editFreshness !== undefined)
+        knobs.editFreshness = editFreshness;
     return knobs;
 }
 /** Effective standalone permission mode: an explicit choice (CLI flag,
  *  /permission override) wins; the workspace setting is the default.
- *  "off" (a TUI override) and absent both resolve to undefined = ungated. */
+ *  "off" (a TUI override) and absent both resolve to undefined = ungated.
+ *  "yolo" stays DISTINCT from undefined: both are ungated at the gate, but
+ *  yolo additionally force-enables the OS bash sandbox — collapsing it into
+ *  undefined would silently drop that compensating control. */
 export function resolvePermissionMode(explicit, workspaceRoot) {
     if (explicit)
         return explicit === "off" ? undefined : explicit;

package/dist/core/settings/workspace-context.js

@@ -8,10 +8,10 @@ import { agentDir } from "../session/session-file.js";
  *  values (Loop scopes still pass their own LOOP.md config).
  *
  *  Context-file discovery absorbs oh-my-pi's context-files.md semantics,
- *  ponytail cut: AGENTS.md only (no multi-provider discovery), no @
- *  imports (the agent has read tools), and no RULES.md stickiness (the
- *  prompt lands in the SYSTEM role, which is sticky by construction —
- *  omp needs re-attachment because it injects into the opening message). */
+ *  ponytail cut: AGENTS.md only (no multi-provider discovery), no @ imports
+ *  (the agent has read tools), and no sticky-rule file (the prompt lands in
+ *  the SYSTEM role, which is sticky by construction — omp needs a separate
+ *  RULES.md because it injects into the opening message instead). */
 function readTextOrNull(path) {
     try {
         return readFileSync(path, "utf-8");

package/dist/core/store/in-memory-session-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"in-memory-session-store.d.ts","sourceRoot":"","sources":["../../../src/core/store/in-memory-session-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAuC,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAS5F,wBAAgB,0BAA0B,IAAI,YAAY,CAgIzD"}
+{"version":3,"file":"in-memory-session-store.d.ts","sourceRoot":"","sources":["../../../src/core/store/in-memory-session-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAuC,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAS5F,wBAAgB,0BAA0B,IAAI,YAAY,CAiIzD"}