@kl-c/matrixos 0.1.39 → 0.1.49

package/dist/budget/agent-budget.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Per-agent token budget (cost guardrails).
+ *
+ * Tracks cumulative tokens consumed per agent and triggers an action when
+ * the configured budget is exceeded. Inspired by Sprint B9 (cost-alerter)
+ * but per-agent instead of global.
+ *
+ * Defaults: tank=50k, morpheus=200k, general=100k, unlimited for others.
+ * Action on overrun: warn (log) by default; can be set to "throttle" (block
+ * the call) or "throw" (reject the call) via the action field.
+ */
+export type BudgetAction = "warn" | "throttle" | "throw";
+export type BudgetConfig = {
+    tokens: number;
+    action: BudgetAction;
+};
+export declare function setBudget(agent: string, config: BudgetConfig): void;
+export declare function recordTokens(agent: string, tokens: number): BudgetStatus;
+export declare function getUsed(agent: string): number;
+export declare function resetBudget(agent?: string): void;
+export type BudgetStatus = {
+    used: number;
+    limit: number;
+    percent: number;
+    action: BudgetAction | null;
+    over: boolean;
+};
+/** Convenience: throw if action=throw and budget is over. Returns the status either way. */
+export declare function enforceBudget(agent: string, tokens: number): BudgetStatus;

package/dist/cli/index.js

@@ -2145,7 +2145,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@kl-c/matrixos",
-    version: "0.1.39",
+    version: "0.1.49",
     description: "MaTrixOS \u2014 Agentic OS for OpenCode. Personalizable, communicating, self-improving, resilient.",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -82991,7 +82991,7 @@ function ignoreToastError(error51) {
 async function showUpdateAvailableToast(ctx, latestVersion, getToastMessage) {
   await ctx.client.tui.showToast({
     body: {
-      title: `OhMyOpenCode ${latestVersion}`,
+      title: `MaTrixOS ${latestVersion}`,
       message: getToastMessage(true, latestVersion),
       variant: "info",
       duration: 8000
@@ -83002,7 +83002,7 @@ async function showUpdateAvailableToast(ctx, latestVersion, getToastMessage) {
 async function showAutoUpdatedToast(ctx, oldVersion, newVersion) {
   await ctx.client.tui.showToast({
     body: {
-      title: "OhMyOpenCode Updated!",
+      title: "MaTrixOS Updated!",
       message: `v${oldVersion} \u2192 v${newVersion}
 Restart OpenCode to apply.`,
       variant: "success",
@@ -83328,7 +83328,7 @@ async function showSpinnerToast(ctx, version3, message) {
     const spinner2 = MORPHEUS_SPINNER[i3 % MORPHEUS_SPINNER.length];
     await ctx.client.tui.showToast({
       body: {
-        title: `${spinner2} OhMyOpenCode ${version3}`,
+        title: `${spinner2} MaTrixOS ${version3}`,
         message,
         variant: "info",
         duration: frameInterval + 50
@@ -83376,8 +83376,8 @@ Morpheus pilote OpenCode.
 v${latestVersion} disponible. Red\xE9marre pour appliquer.` : `${brand}
 Morpheus pilote OpenCode.`;
     }
-    return isUpdate ? `OpenCode is now on Steroids. oMoMoMoMo...
-v${latestVersion} available. Restart OpenCode to apply.` : "OpenCode is now on Steroids. oMoMoMoMo...";
+    return isUpdate ? `OpenCode is now on Steroids. MaTrixOS...
+v${latestVersion} available. Restart OpenCode to apply.` : "OpenCode is now on Steroids. MaTrixOS...";
   };
   let hasChecked = false;
   let hasScheduled = false;
@@ -117796,7 +117796,7 @@ function executeMigrateCommand(opts, targetPath = "matrixos.jsonc") {
 `;
   fsys.writeFileSync(targetPath, serialized);
   return {
-    stdout: `Migrated OMO config '${opts.sourcePath}' \u2192 '${targetPath}'
+    stdout: `Migrated MaTrixOS config '${opts.sourcePath}' \u2192 '${targetPath}'
 ` + `Carried: ${KNOWN_KEYS.filter((k) => (k in target)).join(", ") || "(none)"}
 ` + (ignored.length ? `Ignored (review manually): ${ignored.join(", ")}
 ` : `No ignored keys.
@@ -118581,7 +118581,7 @@ function formatConfigSummary(config) {
 function printHeader(isUpdate) {
   const mode = isUpdate ? "Update" : "Install";
   console.log();
-  console.log(import_picocolors.default.bgMagenta(import_picocolors.default.white(` oMoMoMoMo... ${mode} `)));
+  console.log(import_picocolors.default.bgMagenta(import_picocolors.default.white(` MaTrixOS... ${mode} `)));
   console.log();
 }
 function printStep(step, total, message) {
@@ -119315,7 +119315,7 @@ async function runCliInstaller(args, version) {
   if (args.tui) {
     await maybePromptForGitHubStars(config.platform);
   }
-  console.log(import_picocolors3.default.dim("oMoMoMoMo... Enjoy!"));
+  console.log(import_picocolors3.default.dim("MaTrixOS... Enjoy!"));
   console.log();
   if (hasOpenCode && (config.hasClaude || config.hasGemini || config.hasCopilot) && !args.skipAuth) {
     printBox(`Run ${import_picocolors3.default.cyan("opencode auth login")} and select your provider:
@@ -121239,7 +121239,7 @@ async function runTuiInstaller(args, version) {
     gatewayTelegramToken: null
   };
   const isUpdate = hasOpenCode && detected.isInstalled;
-  intro(import_picocolors4.default.bgMagenta(import_picocolors4.default.white(isUpdate ? " oMoMoMoMo... Update " : " oMoMoMoMo... ")));
+  intro(import_picocolors4.default.bgMagenta(import_picocolors4.default.white(isUpdate ? " MaTrixOS... Update " : " MaTrixOS... ")));
   if (isUpdate) {
     const initial = detectedToInitialValues(detected);
     log4.info(`Existing configuration detected: Claude=${initial.claude}, Gemini=${initial.gemini}`);
@@ -121335,7 +121335,7 @@ async function runTuiInstaller(args, version) {
       log4.warn("Make sure GitHub CLI is installed and authenticated.");
     }
   }
-  outro(import_picocolors4.default.green("oMoMoMoMo... Enjoy!"));
+  outro(import_picocolors4.default.green("MaTrixOS... Enjoy!"));
   if (config.hasOpenCode && (config.hasClaude || config.hasGemini || config.hasCopilot) && !args.skipAuth) {
     const providers = [];
     if (config.hasClaude)
@@ -133980,7 +133980,7 @@ function formatStatusMark(available) {
 }
 function formatHeader() {
   return `
-${import_picocolors18.default.bgMagenta(import_picocolors18.default.white(" oMoMoMoMo Doctor "))}
+${import_picocolors18.default.bgMagenta(import_picocolors18.default.white(" MaTrixOS Doctor "))}
 `;
 }
 function formatIssue(issue2, index) {
@@ -142227,7 +142227,7 @@ function configureRuntimeCommands(program2) {
     });
     process.exit(exitCode);
   });
-  program2.command("upstream").description("Upstream sync commands (read-only, NEVER auto-merge)").command("check").description("Fetch recent OMO releases and classify commits (merge | cherry-pick | manual | skip). Human decides.").option("--repo <owner/name>", "Override upstream repo (default: shirofx/MaTrixOS)").option("--token <token>", "GitHub token (default: $GITHUB_TOKEN)").option("--recent <n>", "Limit to N most recent releases", (v) => Number.parseInt(v, 10), 3).option("--json", "Output as JSON").action(async (options) => {
+  program2.command("upstream").description("Upstream sync commands (read-only, NEVER auto-merge)").command("check").description("Fetch recent MaTrixOS releases and classify commits (merge | cherry-pick | manual | skip). Human decides.").option("--repo <owner/name>", "Override upstream repo (default: shirofx/MaTrixOS)").option("--token <token>", "GitHub token (default: $GITHUB_TOKEN)").option("--recent <n>", "Limit to N most recent releases", (v) => Number.parseInt(v, 10), 3).option("--json", "Output as JSON").action(async (options) => {
     const exitCode = await upstreamCheckCli({
       repo: options.repo,
       token: options.token,
@@ -142538,7 +142538,7 @@ program2.command("profile-create <name>").description("Create a new business pro
   process.stdout.write(result.stdout + `
 `);
 });
-program2.command("migrate").description("Import an OMO config into MaTrixOS (scope minimal: known keys)").requiredOption("--from-omo <path>", "Path to the source omo.jsonc").option("--out <path>", "Target config path", "matrixos.jsonc").action(async (options) => {
+program2.command("migrate").description("Import a MaTrixOS config into MaTrixOS (scope minimal: known keys)").requiredOption("--from-omo <path>", "Path to the source omo.jsonc").option("--out <path>", "Target config path", "matrixos.jsonc").action(async (options) => {
   const { executeMigrateCommand: executeMigrateCommand2 } = await Promise.resolve().then(() => (init_migrate(), exports_migrate));
   const result = executeMigrateCommand2({ sourcePath: options.fromOmo }, options.out ?? "matrixos.jsonc");
   process.stdout.write(result.stdout + `

package/dist/cli-node/index.js

@@ -2145,7 +2145,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@kl-c/matrixos",
-    version: "0.1.39",
+    version: "0.1.49",
     description: "MaTrixOS \u2014 Agentic OS for OpenCode. Personalizable, communicating, self-improving, resilient.",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -83046,7 +83046,7 @@ function ignoreToastError(error51) {
 async function showUpdateAvailableToast(ctx, latestVersion, getToastMessage) {
   await ctx.client.tui.showToast({
     body: {
-      title: `OhMyOpenCode ${latestVersion}`,
+      title: `MaTrixOS ${latestVersion}`,
       message: getToastMessage(true, latestVersion),
       variant: "info",
       duration: 8000
@@ -83057,7 +83057,7 @@ async function showUpdateAvailableToast(ctx, latestVersion, getToastMessage) {
 async function showAutoUpdatedToast(ctx, oldVersion, newVersion) {
   await ctx.client.tui.showToast({
     body: {
-      title: "OhMyOpenCode Updated!",
+      title: "MaTrixOS Updated!",
       message: `v${oldVersion} \u2192 v${newVersion}
 Restart OpenCode to apply.`,
       variant: "success",
@@ -83383,7 +83383,7 @@ async function showSpinnerToast(ctx, version3, message) {
     const spinner2 = MORPHEUS_SPINNER[i3 % MORPHEUS_SPINNER.length];
     await ctx.client.tui.showToast({
       body: {
-        title: `${spinner2} OhMyOpenCode ${version3}`,
+        title: `${spinner2} MaTrixOS ${version3}`,
         message,
         variant: "info",
         duration: frameInterval + 50
@@ -83431,8 +83431,8 @@ Morpheus pilote OpenCode.
 v${latestVersion} disponible. Red\xE9marre pour appliquer.` : `${brand}
 Morpheus pilote OpenCode.`;
     }
-    return isUpdate ? `OpenCode is now on Steroids. oMoMoMoMo...
-v${latestVersion} available. Restart OpenCode to apply.` : "OpenCode is now on Steroids. oMoMoMoMo...";
+    return isUpdate ? `OpenCode is now on Steroids. MaTrixOS...
+v${latestVersion} available. Restart OpenCode to apply.` : "OpenCode is now on Steroids. MaTrixOS...";
   };
   let hasChecked = false;
   let hasScheduled = false;
@@ -117851,7 +117851,7 @@ function executeMigrateCommand(opts, targetPath = "matrixos.jsonc") {
 `;
   fsys.writeFileSync(targetPath, serialized);
   return {
-    stdout: `Migrated OMO config '${opts.sourcePath}' \u2192 '${targetPath}'
+    stdout: `Migrated MaTrixOS config '${opts.sourcePath}' \u2192 '${targetPath}'
 ` + `Carried: ${KNOWN_KEYS.filter((k) => (k in target)).join(", ") || "(none)"}
 ` + (ignored.length ? `Ignored (review manually): ${ignored.join(", ")}
 ` : `No ignored keys.
@@ -118636,7 +118636,7 @@ function formatConfigSummary(config) {
 function printHeader(isUpdate) {
   const mode = isUpdate ? "Update" : "Install";
   console.log();
-  console.log(import_picocolors.default.bgMagenta(import_picocolors.default.white(` oMoMoMoMo... ${mode} `)));
+  console.log(import_picocolors.default.bgMagenta(import_picocolors.default.white(` MaTrixOS... ${mode} `)));
   console.log();
 }
 function printStep(step, total, message) {
@@ -119370,7 +119370,7 @@ async function runCliInstaller(args, version) {
   if (args.tui) {
     await maybePromptForGitHubStars(config.platform);
   }
-  console.log(import_picocolors3.default.dim("oMoMoMoMo... Enjoy!"));
+  console.log(import_picocolors3.default.dim("MaTrixOS... Enjoy!"));
   console.log();
   if (hasOpenCode && (config.hasClaude || config.hasGemini || config.hasCopilot) && !args.skipAuth) {
     printBox(`Run ${import_picocolors3.default.cyan("opencode auth login")} and select your provider:
@@ -121294,7 +121294,7 @@ async function runTuiInstaller(args, version) {
     gatewayTelegramToken: null
   };
   const isUpdate = hasOpenCode && detected.isInstalled;
-  intro(import_picocolors4.default.bgMagenta(import_picocolors4.default.white(isUpdate ? " oMoMoMoMo... Update " : " oMoMoMoMo... ")));
+  intro(import_picocolors4.default.bgMagenta(import_picocolors4.default.white(isUpdate ? " MaTrixOS... Update " : " MaTrixOS... ")));
   if (isUpdate) {
     const initial = detectedToInitialValues(detected);
     log4.info(`Existing configuration detected: Claude=${initial.claude}, Gemini=${initial.gemini}`);
@@ -121390,7 +121390,7 @@ async function runTuiInstaller(args, version) {
       log4.warn("Make sure GitHub CLI is installed and authenticated.");
     }
   }
-  outro(import_picocolors4.default.green("oMoMoMoMo... Enjoy!"));
+  outro(import_picocolors4.default.green("MaTrixOS... Enjoy!"));
   if (config.hasOpenCode && (config.hasClaude || config.hasGemini || config.hasCopilot) && !args.skipAuth) {
     const providers = [];
     if (config.hasClaude)
@@ -134035,7 +134035,7 @@ function formatStatusMark(available) {
 }
 function formatHeader() {
   return `
-${import_picocolors18.default.bgMagenta(import_picocolors18.default.white(" oMoMoMoMo Doctor "))}
+${import_picocolors18.default.bgMagenta(import_picocolors18.default.white(" MaTrixOS Doctor "))}
 `;
 }
 function formatIssue(issue2, index) {
@@ -142282,7 +142282,7 @@ function configureRuntimeCommands(program2) {
     });
     process.exit(exitCode);
   });
-  program2.command("upstream").description("Upstream sync commands (read-only, NEVER auto-merge)").command("check").description("Fetch recent OMO releases and classify commits (merge | cherry-pick | manual | skip). Human decides.").option("--repo <owner/name>", "Override upstream repo (default: shirofx/MaTrixOS)").option("--token <token>", "GitHub token (default: $GITHUB_TOKEN)").option("--recent <n>", "Limit to N most recent releases", (v) => Number.parseInt(v, 10), 3).option("--json", "Output as JSON").action(async (options) => {
+  program2.command("upstream").description("Upstream sync commands (read-only, NEVER auto-merge)").command("check").description("Fetch recent MaTrixOS releases and classify commits (merge | cherry-pick | manual | skip). Human decides.").option("--repo <owner/name>", "Override upstream repo (default: shirofx/MaTrixOS)").option("--token <token>", "GitHub token (default: $GITHUB_TOKEN)").option("--recent <n>", "Limit to N most recent releases", (v) => Number.parseInt(v, 10), 3).option("--json", "Output as JSON").action(async (options) => {
     const exitCode = await upstreamCheckCli({
       repo: options.repo,
       token: options.token,
@@ -142593,7 +142593,7 @@ program2.command("profile-create <name>").description("Create a new business pro
   process.stdout.write(result.stdout + `
 `);
 });
-program2.command("migrate").description("Import an OMO config into MaTrixOS (scope minimal: known keys)").requiredOption("--from-omo <path>", "Path to the source omo.jsonc").option("--out <path>", "Target config path", "matrixos.jsonc").action(async (options) => {
+program2.command("migrate").description("Import a MaTrixOS config into MaTrixOS (scope minimal: known keys)").requiredOption("--from-omo <path>", "Path to the source omo.jsonc").option("--out <path>", "Target config path", "matrixos.jsonc").action(async (options) => {
   const { executeMigrateCommand: executeMigrateCommand2 } = await Promise.resolve().then(() => (init_migrate(), exports_migrate));
   const result = executeMigrateCommand2({ sourcePath: options.fromOmo }, options.out ?? "matrixos.jsonc");
   process.stdout.write(result.stdout + `

package/dist/features/matrix-inventory/features.js

@@ -93,7 +93,7 @@ var MATRIX_FEATURES = [
   {
     id: "upstream-sync",
     name: "Upstream Sync",
-    description: "Periodic comparison with upstream OMO releases, classified into merge/cherry-pick/skip recommendations.",
+    description: "Periodic comparison with upstream MaTrixOS releases, classified into merge/cherry-pick/skip recommendations.",
     enabledByDefault: false,
     status: "opt-in",
     userBenefit: "Stay current with upstream fixes without blindly auto-merging.",

package/dist/features/upstream-sync/check.d.ts

@@ -1,5 +1,5 @@
 /**
- * Upstream Sync (§4.10) — fetch OMO releases and classify commits.
+ * Upstream Sync (§4.10) — fetch MaTrixOS releases and classify commits.
  *
  * Per CDC §4.10: never auto-merge. This module is read-only:
  * - Fetches recent releases from the upstream repo

package/dist/index.js

@@ -297678,7 +297678,7 @@ function updateMatrixosConfig(options) {
   writeAtomically(path28, nextContent, fileSystem);
   return backupPath === undefined ? { path: path28 } : { backupPath, path: path28 };
 }
-var EMPTY_OMO_CONFIG = `// OMO configuration
+var EMPTY_OMO_CONFIG = `// MaTrixOS configuration
 {
 }
 `, FORMATTING_OPTIONS;
@@ -368023,7 +368023,7 @@ function getCachedVersion(options = {}) {
 // package.json
 var package_default = {
   name: "@kl-c/matrixos",
-  version: "0.1.39",
+  version: "0.1.49",
   description: "MaTrixOS \u2014 Agentic OS for OpenCode. Personalizable, communicating, self-improving, resilient.",
   main: "./dist/index.js",
   types: "dist/index.d.ts",
@@ -368779,7 +368779,7 @@ function ignoreToastError(error) {
 async function showUpdateAvailableToast(ctx, latestVersion, getToastMessage) {
   await ctx.client.tui.showToast({
     body: {
-      title: `OhMyOpenCode ${latestVersion}`,
+      title: `MaTrixOS ${latestVersion}`,
       message: getToastMessage(true, latestVersion),
       variant: "info",
       duration: 8000
@@ -368790,7 +368790,7 @@ async function showUpdateAvailableToast(ctx, latestVersion, getToastMessage) {
 async function showAutoUpdatedToast(ctx, oldVersion, newVersion) {
   await ctx.client.tui.showToast({
     body: {
-      title: "OhMyOpenCode Updated!",
+      title: "MaTrixOS Updated!",
       message: `v${oldVersion} \u2192 v${newVersion}
 Restart OpenCode to apply.`,
       variant: "success",
@@ -369090,7 +369090,7 @@ async function showSpinnerToast(ctx, version, message) {
     const spinner = MORPHEUS_SPINNER[i % MORPHEUS_SPINNER.length];
     await ctx.client.tui.showToast({
       body: {
-        title: `${spinner} OhMyOpenCode ${version}`,
+        title: `${spinner} MaTrixOS ${version}`,
         message,
         variant: "info",
         duration: frameInterval + 50
@@ -369152,8 +369152,8 @@ Morpheus pilote OpenCode.
 v${latestVersion} disponible. Red\xE9marre pour appliquer.` : `${brand}
 Morpheus pilote OpenCode.`;
     }
-    return isUpdate ? `OpenCode is now on Steroids. oMoMoMoMo...
-v${latestVersion} available. Restart OpenCode to apply.` : "OpenCode is now on Steroids. oMoMoMoMo...";
+    return isUpdate ? `OpenCode is now on Steroids. MaTrixOS...
+v${latestVersion} available. Restart OpenCode to apply.` : "OpenCode is now on Steroids. MaTrixOS...";
   };
   let hasChecked = false;
   let hasScheduled = false;
@@ -431108,7 +431108,7 @@ async function buildTheOracleAgentConfig(params) {
     mode: "primary",
     prompt: getTheOraclePrompt(resolvedModel, params.disabledTools),
     permission: THE_ORACLE_PERMISSION,
-    description: `${params.configAgentPlan?.description ?? "Plan agent"} (TheOracle - OhMyOpenCode)`,
+    description: `${params.configAgentPlan?.description ?? "Plan agent"} (TheOracle - MaTrixOS)`,
     color: params.configAgentPlan?.color ?? "#FF5722",
     ...temperatureToUse !== undefined ? { temperature: temperatureToUse } : {},
     ...topPToUse !== undefined ? { top_p: topPToUse } : {},
@@ -441224,6 +441224,149 @@ async function resolveSessionAgent(client5, sessionId) {
 // packages/omo-opencode/src/plugin/tool-execute-before.ts
 init_constants3();
 init_storage();
+
+// packages/omo-opencode/src/security/validation-guard.ts
+var PATTERNS = [
+  {
+    id: "bash.rm-recursive",
+    description: "Recursively deletes files (rm -rf). Confirm before running.",
+    match: (c) => c.tool.toLowerCase() === "bash" && typeof c.args.command === "string" && /\brm\s+(-[a-zA-Z]*r[a-zA-Z]*f|-[a-zA-Z]*f[a-zA-Z]*r)\b/.test(c.args.command)
+  },
+  {
+    id: "bash.git-force-push",
+    description: "Force-pushes git history. Can destroy remote work.",
+    match: (c) => c.tool.toLowerCase() === "bash" && typeof c.args.command === "string" && /\bgit\s+push\s+(-[a-zA-Z]*f|--force(?!-with-lease))/.test(c.args.command)
+  },
+  {
+    id: "bash.git-reset-hard",
+    description: "git reset --hard destroys uncommitted changes.",
+    match: (c) => c.tool.toLowerCase() === "bash" && typeof c.args.command === "string" && /\bgit\s+reset\s+--hard\b/.test(c.args.command)
+  },
+  {
+    id: "bash.npm-publish",
+    description: "Publishes a package to a public registry. Confirm version + scope.",
+    match: (c) => c.tool.toLowerCase() === "bash" && typeof c.args.command === "string" && /\bnpm\s+publish\b/.test(c.args.command)
+  },
+  {
+    id: "bash.chmod-777",
+    description: "chmod 777 opens the file to everyone. Confirm intent.",
+    match: (c) => c.tool.toLowerCase() === "bash" && typeof c.args.command === "string" && /\bchmod\s+(-[a-zA-Z]*R\s+)?777\b/.test(c.args.command)
+  },
+  {
+    id: "bash.curl-pipe-bash",
+    description: "Pipes a remote script into bash (remote code execution).",
+    match: (c) => c.tool.toLowerCase() === "bash" && typeof c.args.command === "string" && /curl[^|]*\|\s*(sudo\s+)?bash/.test(c.args.command)
+  },
+  {
+    id: "write.env-or-secrets",
+    description: "Writes to a .env / credentials / secrets file.",
+    match: (c) => {
+      if (c.tool.toLowerCase() !== "write" && c.tool.toLowerCase() !== "edit")
+        return false;
+      const path27 = typeof c.args.filePath === "string" ? c.args.filePath : typeof c.args.path === "string" ? c.args.path : "";
+      return /\.env(\.|$)|\/\.klc-secrets\/|\/\.aws\/credentials|id_rsa|id_ed25519/.test(path27);
+    }
+  },
+  {
+    id: "write.system-path",
+    description: "Writes to a system path (/etc/, /usr/, /var/). Confirm intent.",
+    match: (c) => {
+      if (c.tool.toLowerCase() !== "write" && c.tool.toLowerCase() !== "edit")
+        return false;
+      const path27 = typeof c.args.filePath === "string" ? c.args.filePath : typeof c.args.path === "string" ? c.args.path : "";
+      return /^\s*(\/etc\/|\/usr\/|\/var\/)/.test(path27);
+    }
+  }
+];
+function checkValidation(tool3, args) {
+  const call = { tool: tool3, args };
+  for (const p of PATTERNS) {
+    if (p.match(call)) {
+      return {
+        verdict: "deny",
+        reason: `[P-001 Prepare-Never-Submit] Blocked: ${p.description} (pattern: ${p.id}). Ask the user to confirm before running this command.`,
+        pattern: p.id
+      };
+    }
+  }
+  return { verdict: "allow" };
+}
+
+// packages/omo-opencode/src/security/injection-guard.ts
+var INJECTION_PATTERNS = [
+  { id: "ignore-previous", re: /\bignore\s+(all\s+)?(previous|prior|above)\s+(instructions?|directives?|prompts?)/i, description: "ignore previous instructions" },
+  { id: "you-are-now", re: /\byou\s+are\s+now\s+(a|an)\s+/i, description: "you are now a \u2026" },
+  { id: "system-prompt-tag", re: /<\|im_start\|>\s*system|<\|im_end\|>/i, description: "ChatML system tag (model-tag injection)" },
+  { id: "assistant-tag-injection", re: /<\|im_start\|>\s*assistant\b/i, description: "ChatML assistant tag in user content" },
+  { id: "developer-mode", re: /\b(developer|dan|jailbreak|do\s+anything\s+now)\s+mode\b/i, description: "jailbreak mode trigger" },
+  { id: "disregard-safety", re: /\b(disregard|bypass|ignore)\s+(safety|guardrails?|restrictions?|policies)/i, description: "disregard safety guardrails" },
+  { id: "execute-following", re: /\bexecute\s+the\s+following\s+(command|code|instructions?)/i, description: "execute the following \u2026" },
+  { id: "new-instructions", re: /\bnew\s+instructions?:/i, description: "new instructions: header" },
+  { id: "repeat-after-me", re: /\brepeat\s+after\s+me\b/i, description: "repeat after me" },
+  { id: "system-colon-override", re: /^\s*system\s*:\s*[\w]/im, description: "system: override (line-start)" }
+];
+function containsInjection(text) {
+  for (const p of INJECTION_PATTERNS) {
+    const m = p.re.exec(text);
+    if (m) {
+      const start = Math.max(0, m.index - 20);
+      const end = Math.min(text.length, m.index + m[0].length + 20);
+      return { id: p.id, description: p.description, snippet: text.slice(start, end) };
+    }
+  }
+  return null;
+}
+var STRICT_FIELDS = {
+  bash: {
+    command: "string-narrow",
+    timeout: "number"
+  },
+  write: {
+    filePath: "string-strict",
+    content: "string-narrow"
+  },
+  edit: {
+    filePath: "string-strict",
+    oldString: "string-strict",
+    newString: "string-narrow"
+  },
+  read: {
+    filePath: "string-strict"
+  },
+  glob: {
+    pattern: "string-strict"
+  },
+  grep: {
+    pattern: "string-strict",
+    path: "string-strict"
+  }
+};
+var PATH_RE = /^[^\x00-\x1f]*$/;
+var MAX_NARROW = 1e5;
+function sanitizeToolArgs(tool3, args) {
+  const schema2 = STRICT_FIELDS[tool3.toLowerCase()];
+  if (!schema2)
+    return { ok: true };
+  for (const [field, kind] of Object.entries(schema2)) {
+    const v = args[field];
+    if (v === undefined || v === null)
+      continue;
+    if (typeof v !== "string" && typeof v !== "number" && typeof v !== "boolean") {
+      return { ok: false, reason: `field ${field} has wrong type ${typeof v}`, field };
+    }
+    if (typeof v === "string") {
+      if (kind === "string-strict" && !PATH_RE.test(v)) {
+        return { ok: false, reason: `field ${field} contains control characters or is empty`, field };
+      }
+      if (kind === "string-narrow" && v.length > MAX_NARROW) {
+        return { ok: false, reason: `field ${field} too long (${v.length} > ${MAX_NARROW})`, field };
+      }
+    }
+  }
+  return { ok: true };
+}
+
+// packages/omo-opencode/src/plugin/tool-execute-before.ts
 var BACKGROUND_WAIT_BLOCK_MESSAGE = [
   "Background task wait is already managed by the plugin.",
   "End this response now and wait for the <system-reminder> completion notification.",
@@ -441300,6 +441443,27 @@ function createToolExecuteBeforeHandler3(args) {
     if (egressDecision?.verdict === "deny") {
       throw new Error(`Egress blocked: ${egressDecision.reason}`);
     }
+    const validation = checkValidation(input.tool, output.args);
+    if (validation.verdict === "deny") {
+      throw new Error(validation.reason);
+    }
+    const sanitize = sanitizeToolArgs(input.tool, output.args);
+    if (!sanitize.ok) {
+      throw new Error(`[A12 injection-guard] Tool arg rejected: ${sanitize.reason} (field: ${sanitize.field})`);
+    }
+    if (input.tool.toLowerCase() === "bash" && typeof output.args.command === "string") {
+      const inj = containsInjection(output.args.command);
+      if (inj) {
+        log2("[A12 injection-guard] Possible prompt injection in bash command", {
+          sessionID: input.sessionID,
+          callID: input.callID,
+          match: inj
+        });
+        if (output.args.command.includes("MTRX-CANARY-")) {
+          throw new Error(`[A12 injection-guard] Bash command contains canary token \u2014 possible exfiltration attempt. Aborting.`);
+        }
+      }
+    }
     await hooks.writeExistingFileGuard?.["tool.execute.before"]?.(input, output);
     await hooks.notepadWriteGuard?.["tool.execute.before"]?.(input, output);
     await hooks.questionLabelTruncator?.["tool.execute.before"]?.(input, output);

package/dist/observability/progress.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Task Progress Streaming (ANNEXE A17).
+ *
+ * Emits structured progress events for long-running tool calls so the
+ * gateway (or CLI) can display real-time status instead of a silent wait.
+ *
+ * NOTE: today the consumer is the structured log. The Telegram gateway
+ * (CDC §7) is not implemented yet — when it is, it can subscribe to
+ * these events to edit messages in real time. The schema is stable.
+ */
+export type ProgressEvent = {
+    type: "task.progress";
+    taskId: string;
+    tool: string;
+    sessionID: string;
+    callID: string;
+    step: number;
+    totalSteps: number;
+    message: string;
+    startedAt: number;
+    elapsedMs: number;
+};
+type Listener = (e: ProgressEvent) => void;
+/** Subscribe to progress events. Returns an unsubscribe function. */
+export declare function onProgress(listener: Listener): () => void;
+/** Start a task. Returns the taskId. */
+export declare function startTask(tool: string, sessionID: string, callID: string, totalSteps?: number): string;
+/** Advance the current task. */
+export declare function advance(message: string): void;
+/** End the current task. */
+export declare function endTask(message?: string): void;
+/** Run an async operation with task progress tracking. */
+export declare function withProgress<T>(tool: string, sessionID: string, callID: string, op: (advance: (msg: string) => void) => Promise<T>): Promise<T>;
+export {};

package/dist/recovery/checkpoint.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Mid-Task Checkpoint (ANNEXE A9).
+ *
+ * Saves the in-flight task state every 30s so a crash (network, OOM, SIGKILL)
+ * can resume mid-task instead of restarting from scratch.
+ *
+ * Difference from snapshot (CDC §18.7): checkpoint is automatic + granular
+ * (one file, the in-flight task state), snapshot is manual + coarse
+ * (full DB + files).
+ *
+ * Storage: .matrixos/checkpoints/<taskId>.json (last write wins).
+ */
+export type CheckpointState = {
+    taskId: string;
+    tool: string;
+    sessionID: string;
+    startedAt: number;
+    updatedAt: number;
+    step: number;
+    totalSteps: number;
+    history: {
+        tool: string;
+        args: Record<string, unknown>;
+        at: number;
+        ok: boolean;
+    }[];
+    context: Record<string, unknown>;
+};
+/** Start checkpointing a new task. Replaces any prior current task. */
+export declare function startCheckpoint(taskId: string, tool: string, sessionID: string, totalSteps?: number, context?: Record<string, unknown>): void;
+/** Record that a tool call happened. */
+export declare function recordStep(tool: string, args: Record<string, unknown>, ok: boolean): void;
+/** Update free-form context (e.g. current goal, partial results). */
+export declare function updateContext(patch: Record<string, unknown>): void;
+/** Force a flush to disk (in addition to the 30s timer). */
+export declare function flush(): Promise<void>;
+/** Stop the current checkpoint (call when the task completes). */
+export declare function stopCheckpoint(): void;
+/** Read a saved checkpoint by taskId, if it exists. */
+export declare function loadCheckpoint(taskId: string, dir?: string): Promise<CheckpointState | null>;
+/** List all checkpoints (for crash-recovery on session start). */
+export declare function listCheckpoints(dir?: string): Promise<string[]>;

package/dist/resilience/retry.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Graceful Degradation / Retry with Backoff (ANNEXE A14).
+ *
+ * Generic retry wrapper with exponential backoff + jitter.
+ * Used by the model resolver to retry on transient failures
+ * (rate-limit, network blip, 5xx) before falling back to the
+ * next provider in the chain.
+ */
+export type RetryOptions = {
+    maxAttempts: number;
+    baseDelayMs: number;
+    maxDelayMs: number;
+    jitterRatio: number;
+    shouldRetry: (err: unknown) => boolean;
+};
+export declare function withRetry<T>(fn: () => Promise<T>, opts?: Partial<RetryOptions>): Promise<T>;
+/** Default shouldRetry: retry on transient errors, NOT on validation/programmer errors. */
+export declare function isTransientError(err: unknown): boolean;

package/dist/security/injection-guard.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Prompt Injection Defense (ANNEXE A12).
+ *
+ * Three defense layers applied at the tool boundary:
+ *  1. containsInjection() — detect known prompt-injection patterns in content
+ *     the agent is about to consume (file contents, command output, etc.).
+ *  2. extractCanary() — pull a canary token from the system prompt and let
+ *     checkCanaryInOutput() flag any tool output that contains it (a sign
+ *     that the system prompt was exfiltrated into a tool result).
+ *  3. sanitizeToolArgs() — reject free-form text in tool arg fields that
+ *     should be strictly typed (paths, IDs, enums).
+ */
+export type InjectionMatch = {
+    id: string;
+    description: string;
+    snippet: string;
+};
+/** Returns the first injection match found, or null if clean. */
+export declare function containsInjection(text: string): InjectionMatch | null;
+/** Returns the canary token to embed in the system prompt. */
+export declare function generateCanary(): string;
+/** Returns true if the canary appears in the output (sign of exfiltration). */
+export declare function checkCanaryInOutput(output: string, canary: string): boolean;
+export type SanitizeResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+    field: string;
+};
+/** Reject tool args that don't match the strict schema (no control chars in paths, etc.). */
+export declare function sanitizeToolArgs(tool: string, args: Record<string, unknown>): SanitizeResult;

package/dist/security/validation-guard.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Prepare-Never-Submit (P-001) — tool-level validation guard.
+ *
+ * Inspired by ANNEXE_A A3. Detects high-risk tool calls BEFORE execution and
+ * throws so the agent sees the error and asks the human to confirm.
+ *
+ * NOTE: The annex proposes a skill-level frontmatter (requires_validation).
+ * The current OpenCode hook system does not expose skill context at the
+ * tool.execute.before layer, so this guard is PATTERN-based on tool + args.
+ * This is less fine-grained but more robust (catches both skill-driven and
+ * ad-hoc risky calls) and applicable today without a hook refactor.
+ */
+export type ToolCall = {
+    tool: string;
+    args: Record<string, unknown>;
+};
+export type ValidationDecision = {
+    verdict: "deny";
+    reason: string;
+    pattern: string;
+} | {
+    verdict: "allow";
+};
+/** Decide whether the tool call needs human validation. Throws nothing — pure decision. */
+export declare function checkValidation(tool: string, args: Record<string, unknown>): ValidationDecision;

package/dist/skills/skill-registry.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Skill versioning.
+ *
+ * Convention: <root>/<skill-name>/<semver>/SKILL.md
+ * The active version is recorded in <root>/<skill-name>/active (a file
+ * whose content is the version string, e.g. "1.0.0").
+ *
+ * Why: when modifying a skill, the old version is preserved. The active
+ * pointer lets the runtime pick the current version without breaking
+ * the in-flight calls. Rollback = rewrite the active file.
+ */
+export type SkillVersion = {
+    name: string;
+    version: string;
+    path: string;
+};
+export declare class SkillRegistry {
+    private root;
+    constructor(root: string);
+    /** All versions of a skill, newest first. */
+    list(name: string): Promise<SkillVersion[]>;
+    /** List all skills that have at least one versioned SKILL.md. */
+    listAll(): Promise<{
+        name: string;
+        versions: SkillVersion[];
+    }[]>;
+    /** Read the active version (or the latest if no active file). */
+    getActive(name: string): Promise<SkillVersion | null>;
+    /** Set the active version. */
+    setActive(name: string, version: string): Promise<void>;
+    /** Add a new version (mkdir + write SKILL.md content). */
+    addVersion(name: string, version: string, content: string): Promise<SkillVersion>;
+}

package/dist/skills/skill-test-runner.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Skill test runner.
+ *
+ * Convention: a skill may have a co-located <name>.test.ts (or
+ * __tests__/<name>.test.ts) that exercises the skill instructions. The
+ * runner discovers these files, parses the skill frontmatter, and exposes
+ * the metadata to the test as a fixture.
+ *
+ * Usage (CLI):
+ *   matrixos skill test <name>         # run a skill's tests
+ *   matrixos skill test --all          # run all skills' tests
+ *
+ * Usage (programmatic):
+ *   import { runSkillTest, parseSkillFrontmatter } from "./skill-test-runner"
+ */
+export type SkillFrontmatter = {
+    name: string;
+    description: string;
+    triggers: string[];
+    requiresValidation: boolean;
+    raw: Record<string, unknown>;
+};
+export declare function parseSkillFrontmatter(content: string): {
+    frontmatter: SkillFrontmatter;
+    body: string;
+} | null;
+/** Find the test file for a skill. */
+export declare function findSkillTestFile(skillRoot: string, skillName: string): Promise<string | null>;
+/** Run a single skill test (programmatic). Returns a result object. */
+export declare function runSkillTest(skillRoot: string, skillName: string, testFn: (ctx: {
+    skill: SkillFrontmatter;
+    body: string;
+}) => void | Promise<void>): Promise<{
+    ok: boolean;
+    error?: string;
+}>;
+/** Discover all skills with test files. */
+export declare function discoverSkillTests(skillRoot: string): Promise<{
+    name: string;
+    testFile: string;
+}[]>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kl-c/matrixos",
-  "version": "0.1.39",
+  "version": "0.1.49",
   "description": "MaTrixOS — Agentic OS for OpenCode. Personalizable, communicating, self-improving, resilient.",
   "main": "./dist/index.js",
   "types": "dist/index.d.ts",