@junghanacs/entwurf 0.15.1 → 0.16.0

package/mcp/entwurf-bridge/src/index.ts

@@ -71,6 +71,7 @@ import { listEntwurfFacts } from "../../../pi-extensions/lib/entwurf-fact-provid
 import { renderEntwurfPeers } from "../../../pi-extensions/lib/entwurf-peers-render.ts";
 import { computeSelfAddressability, type MetaDeliveryDomain } from "../../../pi-extensions/lib/entwurf-self-address.ts";
 import { nativePushSupported } from "../../../pi-extensions/lib/entwurf-v2-contract.ts";
+import { resolveMailboxWakeModeCapability } from "../../../pi-extensions/lib/entwurf-v2-decider.ts";
 import { runAndRenderEntwurfV2FromSurface } from "../../../pi-extensions/lib/entwurf-v2-surface.ts";
 import {
 	makeVisibleResumeDeps,
@@ -83,6 +84,7 @@ import {
 	resolveTrustedMetaSenderIdentity,
 } from "../../../pi-extensions/lib/meta-sender-identity.ts";
 import {
+	applyOmpBridgeChildRootPolicy,
 	defaultMetaMailboxDir,
 	defaultMetaSessionsDir,
 	makeStoreRecordReader,
@@ -95,6 +97,29 @@ import { RESUME_CALL_REJECT_HINT, resumeCall } from "../../../pi-extensions/lib/
 import { registerNativeConversation } from "../../../pi-extensions/lib/native-push/register.ts";
 
 const HOME = os.homedir();
+
+// ============================================================================
+// OMP root policy — FIRST, before any lazy default-root consumer (#87 B1).
+//
+// This runs at module load for one reason: every meta-root consumer below resolves its
+// directory lazily inside a tool handler, and the whole point of the policy is that none
+// of them may ever see the foreign value. It is a no-op for every other child — it fires
+// only when this process carries the exact `external-mcp/omp` provenance label its managed
+// entry writes, and then it removes `PI_CODING_AGENT_DIR` from THIS process alone (the omp
+// HOST keeps it: there the variable is the vendor's own agent dir) and pins the four
+// entwurf-owned meta roots to the shared leaf's answer. See `applyOmpBridgeChildRootPolicy`.
+// ============================================================================
+try {
+	applyOmpBridgeChildRootPolicy(process.env, HOME);
+} catch (err) {
+	// FAIL CLOSED, LOUDLY. The policy refuses an ambiguous garden root (a relative
+	// `ENTWURF_META_*` override, #87 A2), and a bridge child that cannot say which store it
+	// is addressing must not boot with a guess — the extension half received the identical
+	// refusal, so proceeding here is exactly the split the policy exists to prevent.
+	console.error(`[entwurf-bridge] fatal: ${err instanceof Error ? err.message : String(err)}`);
+	process.exit(1);
+}
+
 // Directory SOURCE is this adapter's own policy — the bridge honours an explicit
 // ENTWURF_DIR override the pi side does not. The path GRAMMAR is the shared leaf.
 const ENTWURF_DIR = process.env.ENTWURF_DIR ?? defaultControlSocketDir(HOME);
@@ -239,11 +264,17 @@ async function buildTrustedMetaSenderEnvelope(cwd: string = process.cwd()): Prom
 	const { marker, identity } = trusted;
 
 	// Identity is trusted — but `replyable` is a SEPARATE fact, and WHICH fact depends on the
-	// rail a reply would ride (보정①). The domain comes from nativePushSupported(backend), not
-	// from wakeMode: `direct-inject` also covers codex/pi, which have no native-push adapter.
-	//   self-fetch (claude-code): can this citizen's own inbox wake? → the receiver presence
-	//     marker (readMetaReceiverMarker folds a dead/reused owner to null, so a match means a
-	//     live, ARMED receiver — the sender marker proves identity, never an armed watch).
+	// rail a reply would ride (보정①). THREE values, not a native-push-or-self-fetch binary:
+	//   native-push ← nativePushSupported(backend). NOT wakeMode: `direct-inject` also covers
+	//     codex/pi, which have no native-push adapter.
+	//   self-fetch  ← resolveMailboxWakeModeCapability (the decider's mailbox seam — one owner
+	//     with dispatch). A new hardcoded backend list would drift the moment the registry
+	//     admits another self-fetch citizen.
+	//   none        ← neither. omp today: no mailbox drain, no native-push adapter. Rendering
+	//     this as self-fetch printed a mailboxPath nothing drains.
+	//   self-fetch (claude-code/copilot): can this citizen's own inbox wake? → the receiver
+	//     presence marker (readMetaReceiverMarker folds a dead/reused owner to null, so a match
+	//     means a live, ARMED receiver — the sender marker proves identity, never an armed watch).
 	//   native-push (antigravity): there is no inbox and no watch. A reply is injected into a
 	//     live app-server conversation, so only an adapter probe can answer. Composing the
 	//     receiver atom here would demand `watchArmed` from a backend that never arms one, and
@@ -252,7 +283,11 @@ async function buildTrustedMetaSenderEnvelope(cwd: string = process.cwd()): Prom
 	// survive; degrading to null would erase the sender) — only with replyable:false.
 	// The rail, named ONCE and reused for both the predicate and the caller's rendering —
 	// so entwurf_self can never re-derive it differently from what decided `replyable`.
-	const metaDeliveryDomain: MetaDeliveryDomain = nativePushSupported(identity.backend) ? "native-push" : "self-fetch";
+	const metaDeliveryDomain: MetaDeliveryDomain = nativePushSupported(identity.backend)
+		? "native-push"
+		: resolveMailboxWakeModeCapability(identity)
+			? "self-fetch"
+			: "none";
 	const facts =
 		metaDeliveryDomain === "native-push"
 			? {
@@ -261,17 +296,23 @@ async function buildTrustedMetaSenderEnvelope(cwd: string = process.cwd()): Prom
 					recordBacked: true,
 					probeAlive: await probeNativeSenderAlive(identity),
 				}
-			: (() => {
-					const receiver = readMetaReceiverMarker({ gardenId: identity.gardenId });
-					const active = receiverMarkerMatchesIdentity(receiver, identity);
-					return {
+			: metaDeliveryDomain === "self-fetch"
+				? (() => {
+						const receiver = readMetaReceiverMarker({ gardenId: identity.gardenId });
+						const active = receiverMarkerMatchesIdentity(receiver, identity);
+						return {
+							origin: "meta-session" as const,
+							metaDeliveryDomain,
+							recordBacked: true,
+							ownerAlive: active,
+							watchArmed: active,
+						};
+					})()
+				: {
 						origin: "meta-session" as const,
 						metaDeliveryDomain,
 						recordBacked: true,
-						ownerAlive: active,
-						watchArmed: active,
 					};
-				})();
 	const self = computeSelfAddressability(facts);
 
 	return {
@@ -495,6 +536,8 @@ server.tool(
 					lines.push(
 						"mailbox:    none — native-push has no inbox; a reply direct-injects only while the adapter probe is alive",
 					);
+				} else if (rail === "none") {
+					lines.push("mailbox:    none — no inbound rail (no mailbox, no native-push adapter)");
 				} else {
 					// Fail-closed, matching computeSelfAddressability's own unsupplied-domain row:
 					// with no rail we cannot say how a reply would travel, so we claim no transport.
@@ -655,16 +698,19 @@ server.tool(
 // against that answer would call home to a garden id nobody holds.
 server.tool(
 	"entwurf_fresh_call",
-	"Open ONE fresh visible sibling in the operator's own tmux session and hand it a first task. Three fixed " +
-		"backends only: pi, claude-code, copilot. The sibling's FIRST action is a callback to you carrying a nonce, and the " +
+	"Open ONE fresh visible sibling in the operator's own tmux session and hand it a first task. Four fixed " +
+		"backends only: pi, claude-code, copilot, omp. The sibling's FIRST action is a callback to you carrying a nonce, and the " +
 		"sender envelope of that callback is its garden id — that is how you learn the address of something that " +
 		"did not exist a moment ago. This returns a LAUNCH receipt (tmux window/pane plus that nonce) and nothing " +
 		"else: it does NOT mean the runtime started, the first turn ran, or the task was delivered. Nothing polls " +
 		"for the callback; if it never arrives the window is visible and can be read directly. For EXISTING " +
 		"citizens use entwurf_v2 — this tool only creates, and entwurf_peers only reports. Model is REQUIRED and " +
 		"is passed to the chosen runtime CLI (`provider/model` for pi; model id/alias for Claude Code; a model name " +
-		"or `auto` for copilot). A copilot launch goes through entwurf's own managed invocation and is refused " +
-		"BEFORE any window opens if this host lacks the Copilot birth, MCP, receiver or visible-footer units. An optional " +
+		"or `auto` for copilot; a fuzzy model pattern for omp). A copilot launch goes through entwurf's own managed " +
+		"invocation and is refused BEFORE any window opens if this host lacks the Copilot birth, MCP, receiver or " +
+		"visible-footer units; an omp launch is refused the same way if this host lacks the OMP birth, MCP, receiver or " +
+		"visible-status units, or if omp's tools.xdev is not false (the vendor default hides MCP tool schemas from the " +
+		"prompt, so the sibling could not call you back at all). An optional " +
 		"cwd starts the sibling in ONE literal absolute existing directory (cross-repo fresh) — never pick resume " +
 		"for a dormant record's cwd; resume is continuity-only. Omitted/empty cwd means the caller's own directory. " +
 		"There are no arbitrary command/env knobs. Do not put secrets in the task — model and task argv are visible to " +
@@ -672,8 +718,8 @@ server.tool(
 		"inside tmux: without a pane anchor there is no session to open a sibling beside.",
 	{
 		backend: z
-			.enum(["pi", "claude-code", "copilot"])
-			.describe("Which fixed runtime to open. Only these three; there is no arbitrary command."),
+			.enum(["pi", "claude-code", "copilot", "omp"])
+			.describe("Which fixed runtime to open. Only these four; there is no arbitrary command."),
 		model: z
 			.string()
 			.min(1)

package/mcp/entwurf-bridge/tsconfig.build.json

@@ -20,8 +20,12 @@
 	// that lazy edge — the owned-outcome resume verdict — was withdrawn, so nothing
 	// on the dispatch path loads the pi-backed preflight today; the dynamic form is
 	// kept because the eager-closure guarantee must not depend on that. This is an EMIT pass, not a
-	// typecheck pass — the noEmit typecheck fence (scripts/tsconfig.json) is
-	// untouched, so every `.ts` is still typechecked by exactly one `tsc --noEmit`.
+	// typecheck pass — the noEmit fence that covers this graph is mcp/tsconfig.json
+	// (scripts/tsconfig.json fences the verification scripts), and it is untouched
+	// here, so every `.ts` is still typechecked by a `tsc --noEmit` pass. That was
+	// NOT true when this note was written: mcp/tsconfig.json inherited the root
+	// `exclude` and dropped src/index.ts from every noEmit program, leaving this
+	// emit pass as the only thing typechecking the boot entry (issue #85).
 	"extends": "../../tsconfig.json",
 	"compilerOptions": {
 		"allowImportingTsExtensions": true,
@@ -110,6 +114,15 @@
 	// the marker-less native-push quiesce row) are lib leaves the bridge graph already
 	// tolerates — the adapter is a 봉인-3 leaf (node builtins + type-only contract), and
 	// register_native already pulls both into this emit.
+	// WHY meta-bridge-omp rides THIS build (#87): `install-omp-bridge` explicitly SELECTS
+	// `dist/pi-extensions/meta-bridge-omp.js` when REPO_DIR is under node_modules — the same
+	// strip-types fence the Claude and Copilot birth entries cross — and
+	// `docs/setup-clean-host.md` tells operators to run that installer. Without the twin the
+	// installed installer dies at its own artifact check before assembling anything, so the
+	// advertised installed consumer surface never reaches compiled JS (Hard Rule 11). Its
+	// only repo import is meta-session.ts, ALREADY emitted for the store-doctor, so this adds
+	// ONE leaf JS and ZERO new deps. It is an omp-loaded extension module, never in
+	// index.ts's boot closure, so check-entwurf-bridge-pi-free is unaffected.
 	"include": [
 		"./src/index.ts",
 		"../../protocol.js",
@@ -121,7 +134,10 @@
 		"../../scripts/meta-bridge-prune.ts",
 		"../../scripts/meta-bridge-fresh-cut.ts",
 		"../../scripts/meta-facts.ts",
+		"../../scripts/omp-receive-facts.ts",
 		"../../pi-extensions/meta-bridge-hook.ts",
-		"../../pi-extensions/meta-bridge-hook-copilot.ts"
+		"../../pi-extensions/meta-bridge-hook-copilot.ts",
+		"../../pi-extensions/meta-bridge-omp.ts",
+		"../../pi-extensions/meta-bridge-receive-omp.ts"
 	]
 }

package/mcp/tsconfig.json

@@ -25,5 +25,15 @@
 		"noEmit": true,
 		"rootDir": ".."
 	},
+	// Override the root `exclude` (which lists "mcp"): without this, the
+	// inherited exclusion resolves to <repo>/mcp and filters out everything
+	// `include` adds under mcp/, so entwurf-bridge/src/index.ts — the bridge
+	// boot entry, and the only tracked .ts in no `tsc --noEmit` program — was
+	// silently NOT typechecked (issue #85; the same gap scripts/tsconfig.json
+	// already had to close in Phase 3b). The 26 pi-extensions/lib files this
+	// program did see arrived through the import graph, which `exclude` does
+	// not filter; nothing imports the entry, so nothing rescued it.
+	// Re-list the root's other exclusions, minus "mcp".
+	"exclude": ["../node_modules", "../scripts", "../plugins"],
 	"include": ["./entwurf-bridge/src/**/*.ts", "../pi-extensions/lib/**/*.ts"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@junghanacs/entwurf",
-	"version": "0.15.1",
+	"version": "0.16.0",
 	"description": "Garden-citizen dispatch substrate and meta-bridge for Claude Code, Codex, Antigravity, and pi harnesses.",
 	"license": "MIT",
 	"author": {
@@ -27,6 +27,7 @@
 		"mcp",
 		"claude-code",
 		"codex",
+		"copilot",
 		"antigravity",
 		"pi-coding-agent",
 		"pi-extension"
@@ -61,6 +62,8 @@
 		"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/hooks/hooks.json",
 		"pi/meta-bridge-copilot/entwurf-meta-receive-copilot/scripts/copilot-hook-launch.sh",
 		"pi/copilot-receive/entwurf-receive/extension.mjs",
+		"pi/meta-bridge-omp/entwurf-meta-omp/package.json",
+		"pi/omp-receive/entwurf-receive-omp/package.json",
 		"pi/skill-plugin-example/",
 		"run.sh",
 		"AGENTS.md",
@@ -116,6 +119,7 @@
 		"check-meta-v3-record": "./run.sh check-meta-v3-record",
 		"check-mailbox-receipt-state": "./run.sh check-mailbox-receipt-state",
 		"check-entwurf-capabilities": "./run.sh check-entwurf-capabilities",
+		"check-harness-admission-parity": "./run.sh check-harness-admission-parity",
 		"check-fresh-cut-gate": "./run.sh check-fresh-cut-gate",
 		"check-meta-mailbox-state-write": "./run.sh check-meta-mailbox-state-write",
 		"check-meta-identity-consumers": "./run.sh check-meta-identity-consumers",
@@ -132,6 +136,12 @@
 		"check-copilot-launch": "./run.sh check-copilot-launch",
 		"smoke-copilot-statusline-state": "./run.sh smoke-copilot-statusline-state",
 		"smoke-copilot-mcp-state": "./run.sh smoke-copilot-mcp-state",
+		"smoke-omp-bridge-state": "./run.sh smoke-omp-bridge-state",
+		"smoke-omp-mcp-state": "./run.sh smoke-omp-mcp-state",
+		"smoke-omp-receive-state": "./run.sh smoke-omp-receive-state",
+		"smoke-omp-fresh-live": "./run.sh smoke-omp-fresh-live",
+		"check-omp-receive-arm": "./run.sh check-omp-receive-arm",
+		"check-omp-fresh-preflight": "./run.sh check-omp-fresh-preflight",
 		"check-hook-launch-topology": "./run.sh check-hook-launch-topology",
 		"check-acp-carrier-augment": "./run.sh check-acp-carrier-augment",
 		"check-agy-permission-matrix": "./run.sh check-agy-permission-matrix",
@@ -154,8 +164,8 @@
 		"check:core": "pnpm run check:toolchain && pnpm run check:vitest && pnpm run check:contracts",
 		"check:toolchain": "pnpm lint && pnpm typecheck",
 		"check:vitest": "./run.sh check-mux-fresh-call && ./run.sh check-acp-sdk-surface",
-		"check:contracts": "./run.sh check-shell-quote && ./run.sh check-entwurf-session-identity && ./run.sh check-meta-session && ./run.sh check-meta-v3-record && ./run.sh check-mailbox-receipt-state && ./run.sh check-entwurf-capabilities && ./run.sh check-capability-bundle-reach && ./run.sh check-meta-mailbox-state-write && ./run.sh check-meta-receiver-marker && ./run.sh check-meta-capability-source && ./run.sh check-model-lock && ./run.sh check-dep-versions && ./run.sh check-node-floor-coherence && ./run.sh check-claude-floor-coherence && ./run.sh check-copilot-statusline && ./run.sh check-pi-import-surface && ./run.sh check-env-namespace && ./run.sh check-pi-runtime-version && ./run.sh check-pi-preflight && ./run.sh check-project-trust-handler && ./run.sh check-entwurf-v2-contract && ./run.sh check-entwurf-v2-lock && ./run.sh check-entwurf-v2-decider && ./run.sh check-entwurf-v2-matrix && ./run.sh check-entwurf-v2-release && ./run.sh check-entwurf-v2-send && ./run.sh check-entwurf-v2-send-fallback && ./run.sh check-entwurf-v2-mailbox && ./run.sh check-entwurf-v2-native-push && ./run.sh check-entwurf-v2-runner && ./run.sh check-entwurf-v2-production && ./run.sh check-entwurf-v2-surface && ./run.sh check-entwurf-bridge-pi-free && ./run.sh check-entwurf-resume-args && ./run.sh check-resume-launch-identity && ./run.sh check-mux-placement && ./run.sh check-mux-launch && ./run.sh check-mux-resume-call && ./run.sh check-mux-parent-artifact && ./run.sh check-mux-launcher-fence && ./run.sh check-entwurf-v2-visible-resume && ./run.sh check-entwurf-facts && ./run.sh check-control-socket-path && ./run.sh check-socket-discovery && ./run.sh check-meta-listing && ./run.sh check-entwurf-fact-provider && ./run.sh check-entwurf-peers-surface && ./run.sh check-entwurf-self-address && ./run.sh check-entwurf-deliverability && ./run.sh check-native-push-adapter && ./run.sh check-native-push-register && ./run.sh check-auth-boundary && ./run.sh check-acp-overlay && ./run.sh check-acp-tool-surface && ./run.sh check-acp-event-mapper && ./run.sh check-acp-prompt-builder && ./run.sh check-acp-config && ./run.sh check-acp-session-store && ./run.sh check-acp-carrier-augment",
-		"check:hermetic": "./run.sh check-bridge-delivery && ./run.sh smoke-pi-attach && ./run.sh check-fresh-cut-gate && ./run.sh check-hook-launch-topology && ./run.sh check-copilot-birth-hook && ./run.sh check-copilot-receive-arm && ./run.sh check-copilot-launch && ./run.sh check-meta-identity-consumers && ./run.sh check-socket-probe && ./run.sh smoke-meta-honesty && ./run.sh check-meta-doctor-oracle && ./run.sh check-agy-permission-matrix && ./run.sh smoke-agy-statusline-state && ./run.sh smoke-copilot-statusline-state && ./run.sh smoke-copilot-mcp-state && ./run.sh smoke-agy-hooks-state && ./run.sh smoke-pi-provider-state && ./run.sh smoke-user-scope-citizen && ./run.sh smoke-meta-prune && ./run.sh smoke-meta-keyset-guard && ./run.sh check-meta-manifest-schema && ./run.sh check-entwurf-control-rpc && ./run.sh check-entwurf-bridge-boot && ./run.sh check-probe-bridge-command && ./run.sh check-meta-facts && ./run.sh check-agy-sender-identity && ./run.sh check-acp-provider-surface && ./run.sh check-acp-stop-reason && ./run.sh check-acp-prompt-lifecycle && ./run.sh check-acp-stream-hooks && ./run.sh check-acp-backend-preflight && ./run.sh check-acp-session-reuse && ./run.sh check-release-gate-outcomes && ./run.sh check-probe-ordering && ./run.sh check-probe-cli-shim && ./run.sh check-acp-cortex",
+		"check:contracts": "./run.sh check-shell-quote && ./run.sh check-entwurf-session-identity && ./run.sh check-meta-session && ./run.sh check-meta-v3-record && ./run.sh check-mailbox-receipt-state && ./run.sh check-entwurf-capabilities && ./run.sh check-harness-admission-parity && ./run.sh check-capability-bundle-reach && ./run.sh check-meta-mailbox-state-write && ./run.sh check-meta-receiver-marker && ./run.sh check-meta-capability-source && ./run.sh check-model-lock && ./run.sh check-dep-versions && ./run.sh check-node-floor-coherence && ./run.sh check-claude-floor-coherence && ./run.sh check-copilot-statusline && ./run.sh check-pi-import-surface && ./run.sh check-env-namespace && ./run.sh check-pi-runtime-version && ./run.sh check-pi-preflight && ./run.sh check-project-trust-handler && ./run.sh check-entwurf-v2-contract && ./run.sh check-entwurf-v2-lock && ./run.sh check-entwurf-v2-decider && ./run.sh check-entwurf-v2-matrix && ./run.sh check-entwurf-v2-release && ./run.sh check-entwurf-v2-send && ./run.sh check-entwurf-v2-send-fallback && ./run.sh check-entwurf-v2-mailbox && ./run.sh check-entwurf-v2-native-push && ./run.sh check-entwurf-v2-runner && ./run.sh check-entwurf-v2-production && ./run.sh check-entwurf-v2-surface && ./run.sh check-entwurf-bridge-pi-free && ./run.sh check-entwurf-resume-args && ./run.sh check-resume-launch-identity && ./run.sh check-mux-placement && ./run.sh check-mux-launch && ./run.sh check-mux-resume-call && ./run.sh check-mux-parent-artifact && ./run.sh check-mux-launcher-fence && ./run.sh check-entwurf-v2-visible-resume && ./run.sh check-entwurf-facts && ./run.sh check-control-socket-path && ./run.sh check-socket-discovery && ./run.sh check-meta-listing && ./run.sh check-entwurf-fact-provider && ./run.sh check-entwurf-peers-surface && ./run.sh check-entwurf-self-address && ./run.sh check-entwurf-deliverability && ./run.sh check-native-push-adapter && ./run.sh check-native-push-register && ./run.sh check-auth-boundary && ./run.sh check-acp-overlay && ./run.sh check-acp-tool-surface && ./run.sh check-acp-event-mapper && ./run.sh check-acp-prompt-builder && ./run.sh check-acp-config && ./run.sh check-acp-session-store && ./run.sh check-acp-carrier-augment",
+		"check:hermetic": "./run.sh check-bridge-delivery && ./run.sh smoke-pi-attach && ./run.sh check-fresh-cut-gate && ./run.sh check-hook-launch-topology && ./run.sh check-copilot-birth-hook && ./run.sh check-copilot-receive-arm && ./run.sh check-copilot-launch && ./run.sh check-meta-identity-consumers && ./run.sh check-socket-probe && ./run.sh smoke-meta-honesty && ./run.sh check-meta-doctor-oracle && ./run.sh check-agy-permission-matrix && ./run.sh smoke-agy-statusline-state && ./run.sh smoke-copilot-statusline-state && ./run.sh smoke-copilot-mcp-state && ./run.sh smoke-omp-bridge-state && ./run.sh smoke-omp-mcp-state && ./run.sh smoke-omp-receive-state && ./run.sh check-omp-receive-arm && ./run.sh check-omp-fresh-preflight && ./run.sh smoke-agy-hooks-state && ./run.sh smoke-pi-provider-state && ./run.sh smoke-user-scope-citizen && ./run.sh smoke-meta-prune && ./run.sh smoke-meta-keyset-guard && ./run.sh check-meta-manifest-schema && ./run.sh check-entwurf-control-rpc && ./run.sh check-entwurf-bridge-boot && ./run.sh check-probe-bridge-command && ./run.sh check-meta-facts && ./run.sh check-agy-sender-identity && ./run.sh check-acp-provider-surface && ./run.sh check-acp-stop-reason && ./run.sh check-acp-prompt-lifecycle && ./run.sh check-acp-stream-hooks && ./run.sh check-acp-backend-preflight && ./run.sh check-acp-session-reuse && ./run.sh check-release-gate-outcomes && ./run.sh check-probe-ordering && ./run.sh check-probe-cli-shim && ./run.sh check-acp-cortex",
 		"check:package": "./run.sh check-install-surface && ./run.sh smoke-meta-install-state && ./run.sh smoke-agy-install-state && ./run.sh smoke-setup-verdict && ./run.sh check-pack-pin-matcher && ./run.sh check-package-source-routing && ./run.sh check-install-preflight && ./run.sh check-pack"
 	},
 	"pi": {

package/pi/entwurf-capabilities.json

@@ -5,6 +5,7 @@
 		"antigravity": { "wakeMode": "direct-inject", "deliveryLevel": "D6", "nativeIdLabel": "conversationId" },
 		"codex": { "wakeMode": "direct-inject", "deliveryLevel": "D6", "nativeIdLabel": "threadId" },
 		"copilot": { "wakeMode": "self-fetch", "deliveryLevel": "D6", "nativeIdLabel": "sessionId" },
+		"omp": { "wakeMode": "self-fetch", "deliveryLevel": "D6", "nativeIdLabel": "sessionId" },
 		"pi": { "wakeMode": "direct-inject", "deliveryLevel": "D6", "nativeIdLabel": "sessionId" }
 	}
 }

package/pi/meta-bridge-omp/entwurf-meta-omp/package.json

@@ -0,0 +1,7 @@
+{
+	"name": "entwurf-meta-omp",
+	"version": "0.1.0",
+	"private": true,
+	"type": "module",
+	"description": "entwurf OMP birth extension: mints the visible tui host as a garden citizen, refuses every other mode."
+}

package/pi/omp-receive/entwurf-receive-omp/package.json

@@ -0,0 +1,7 @@
+{
+	"name": "entwurf-receive-omp",
+	"version": "0.1.0",
+	"private": true,
+	"type": "module",
+	"description": "entwurf OMP receiver extension: arms a mailbox watch for the visible tui host's citizen and rings an announce-only doorbell."
+}

package/pi-extensions/entwurf-control.ts

@@ -1490,7 +1490,7 @@ const MUX_FRESH_CALL_MODULE = "./lib/mux-fresh-call.ts";
 interface MuxFreshCallModule {
 	freshCall(
 		params: {
-			backend: "pi" | "claude-code" | "copilot";
+			backend: "pi" | "claude-code" | "copilot" | "omp";
 			model: string;
 			task: string;
 			cwd?: string;
@@ -1519,23 +1519,26 @@ function registerFreshCallTool(pi: ExtensionAPI): void {
 	registerTool({
 		name: "entwurf_fresh_call",
 		label: "Open Fresh Sibling",
-		description: `Open ONE fresh visible sibling in the operator's own tmux session and hand it a first task. Three fixed
-backends only: pi, claude-code, copilot. The sibling's FIRST action is a callback to you carrying a nonce, and the
+		description: `Open ONE fresh visible sibling in the operator's own tmux session and hand it a first task. Four fixed
+backends only: pi, claude-code, copilot, omp. The sibling's FIRST action is a callback to you carrying a nonce, and the
 sender envelope of that callback is its garden id — that is how you learn the address of something that did
 not exist a moment ago. This returns a LAUNCH receipt (tmux window/pane plus that nonce) and nothing else:
 it does NOT mean the runtime started, the first turn ran, or the task was delivered. Nothing polls for the
 callback; if it never arrives the window is visible and can be read directly. For EXISTING citizens use
 entwurf_v2 — this tool only creates, and entwurf_peers only reports. Model is REQUIRED and passed to the
-chosen runtime CLI (provider/model for pi; model id/alias for Claude Code; a Copilot model name or auto).
-A copilot launch goes through entwurf's own managed invocation and is refused BEFORE any window opens if
-this host lacks the Copilot birth, MCP, receiver or visible-footer units. An optional cwd starts the
+chosen runtime CLI (provider/model for pi; model id/alias for Claude Code; a Copilot model name or auto; a
+fuzzy model pattern for omp). A copilot launch goes through entwurf's own managed invocation and is refused
+BEFORE any window opens if this host lacks the Copilot birth, MCP, receiver or visible-footer units; an omp
+launch is refused the same way if this host lacks the OMP birth, MCP, receiver or visible-status units, or if
+omp's tools.xdev is not false (the vendor default hides MCP tool schemas from the prompt, so the sibling
+could not call you back at all). An optional cwd starts the
 sibling in ONE literal absolute existing directory (cross-repo fresh) — never pick resume for a dormant
 record's cwd; resume is continuity-only. Omitted/empty cwd means the caller's own directory. There are no
 arbitrary command/env knobs. Do not put secrets in the task — model and task argv are visible to same-user
 processes on this host.`,
 		parameters: Type.Object({
-			backend: StringEnum(["pi", "claude-code", "copilot"], {
-				description: "Which fixed runtime to open. Only these three; there is no arbitrary command.",
+			backend: StringEnum(["pi", "claude-code", "copilot", "omp"], {
+				description: "Which fixed runtime to open. Only these four; there is no arbitrary command.",
 			}),
 			model: Type.String({
 				minLength: 1,
@@ -1559,7 +1562,7 @@ processes on this host.`,
 		}),
 		async execute(
 			_toolCallId: string,
-			params: { backend: "pi" | "claude-code" | "copilot"; model: string; task: string; cwd?: string },
+			params: { backend: "pi" | "claude-code" | "copilot" | "omp"; model: string; task: string; cwd?: string },
 			_signal: AbortSignal | undefined,
 			_onUpdate: unknown,
 			_ctx: ExtensionContext,

package/pi-extensions/lib/entwurf-self-address.ts

@@ -33,10 +33,13 @@
  *  - external-mcp: never replyable — no authoritative reply address.
  *
  * `origin` stays sender-carrier PROVENANCE, never the citizen identity authority and never a rail.
- * Which rail a meta citizen's reply rides is a SECOND axis — `metaDeliveryDomain`, derived
- * by the caller from `nativePushSupported(backend)`, not from `wakeMode` (direct-inject also
- * covers codex/pi, which have no native-push adapter). Fail-closed: an unsupplied domain is
- * not replyable.
+ * Which rail a meta citizen's reply rides is a SECOND axis — `metaDeliveryDomain`.
+ * The caller derives it as three values, never as a native-push-or-self-fetch binary:
+ *   native-push  ← `nativePushSupported(backend)` (the adapter list; NOT wakeMode —
+ *                  `direct-inject` also covers codex/pi, which have no native-push adapter)
+ *   self-fetch   ← `resolveMailboxWakeModeCapability` (the decider's own mailbox seam)
+ *   none         ← neither (omp today: no mailbox drain, no native-push adapter)
+ * Fail-closed: an unsupplied domain is not replyable.
  */
 
 import { computeMetaReceiverActive, nativePushDeliverable } from "./entwurf-deliverability.ts";
@@ -44,7 +47,7 @@ import { computeMetaReceiverActive, nativePushDeliverable } from "./entwurf-deli
 export type SelfOrigin = "pi-session" | "meta-session" | "external-mcp";
 
 /** Which delivery rail carries a reply back to a meta citizen (the second axis, never `origin`). */
-export type MetaDeliveryDomain = "self-fetch" | "native-push";
+export type MetaDeliveryDomain = "self-fetch" | "native-push" | "none";
 
 /**
  * pi control-socket reachability for a reply addressed back to this session.
@@ -108,9 +111,11 @@ export function computeSelfAddressability(facts: SelfAddressabilityFacts): SelfA
 			};
 		}
 		case "meta-session": {
-			// TWO rails, pinned apart (보정①). Each branch composes the predicate that OWNS its
+			// THREE rails, pinned apart (보정①). Each branch composes the predicate that OWNS its
 			// axis — the mailbox receiver atom and the native-push predicate share nothing, so a
-			// mailbox liveness fact can never leak into a backend that has no mailbox.
+			// mailbox liveness fact can never leak into a backend that has no mailbox. `none` is
+			// the remainder: no inbound rail at all (not an unsupplied domain — that stays the
+			// default fail-closed row).
 			switch (facts.metaDeliveryDomain) {
 				case "native-push": {
 					const push = nativePushDeliverable({ recordBacked: facts.recordBacked, probeAlive: facts.probeAlive });
@@ -136,6 +141,12 @@ export function computeSelfAddressability(facts: SelfAddressabilityFacts): SelfA
 						reason: recv.active ? `meta receiver active (${recv.reason})` : `meta receiver inactive — ${recv.reason}`,
 					};
 				}
+				case "none":
+					return {
+						replyable: false,
+						socketState: "none",
+						reason: "no inbound rail — this backend has no mailbox and no native-push adapter",
+					};
 				default:
 					return {
 						replyable: false,

package/pi-extensions/lib/meta-sender-identity.ts

@@ -57,7 +57,7 @@ import { type NativePushAdapter, resolveNativePushAdapter } from "./native-push/
  * exactly the #46 defect on agy, and copilot joined the list only once its own hook wrote one
  * (#82 RAIL 5b). Membership says a marker may EXIST, never that a reply can land: the reply
  * rail is chosen from `nativePushSupported` at the bridge, not from this list. */
-export const META_SENDER_BACKENDS: readonly MetaBackend[] = ["claude-code", "antigravity", "copilot"];
+export const META_SENDER_BACKENDS: readonly MetaBackend[] = ["claude-code", "antigravity", "copilot", "omp"];
 
 /** A marker that passed BOTH guards, together with the record that vouches for it. */
 export interface TrustedMetaSender {