@kontextmind/kxm 0.7.115 → 0.7.119

package/plugins/kxm/dist/runtime-supervisor.js

@@ -15624,6 +15624,7 @@ var READ_ONLY_ONESHOT_ARGS = Object.freeze({
   // AGENTS.md/CLAUDE.md context discovery, and an ephemeral session. `--no-tools` alone
   // is not enough: extensions and hooks can still run with their own permissions.
   pi: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
+  omp: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
   claude: Object.freeze(["--tools", "Read,Glob,Grep", "--restricted", "--safe-mode", "--permission-mode", "plan", "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}', "--disable-slash-commands", "--no-session-persistence"]),
   codex: Object.freeze(["--sandbox", "read-only", "--ignore-user-config", "-c", 'approval_policy="never"']),
   grok: Object.freeze(["--sandbox", "read-only", "--permission-mode", "plan", "--tools", "Read,Glob,Grep", "--no-subagents", "--disable-web-search"]),
@@ -15635,6 +15636,7 @@ function oneShotReadOnlyArgs(harness) {
 }
 var WRITER_ONESHOT_ARGS = Object.freeze({
   pi: Object.freeze(["-a", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-session"]),
+  omp: Object.freeze(["-a", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-session"]),
   grok: Object.freeze(["--always-approve", "--no-subagents", "--disable-web-search"])
 });
 function oneShotWriterArgs(harness) {
@@ -15663,6 +15665,26 @@ var BUILTIN_HARNESSES = Object.freeze([
       usageParser: parsePiOneShotUsage
     }
   },
+  {
+    id: "omp",
+    label: "Oh My Pi",
+    default: false,
+    mode: "headless",
+    commands: ["omp"],
+    versionArgs: ["--version"],
+    authArgs: ["models", "--json"],
+    update: {
+      self: ["update"],
+      extensions: ["plugin", "upgrade"],
+      models: ["models", "refresh"]
+    },
+    oneShot: {
+      argv: ["-p", ...oneShotReadOnlyArgs("omp"), "--mode", "json"],
+      promptVia: "arg",
+      outputFormat: "json",
+      usageParser: parsePiOneShotUsage
+    }
+  },
   {
     id: "claude",
     label: "Claude Code",
@@ -15911,6 +15933,16 @@ function interpretAuth(id, result) {
     if (commandSucceeded(result) && lines.some((line) => line === GROK_LOGIN_LINE)) return { authenticated: true, issues: [] };
     return { authenticated: null, issues: ["auth_unparsed"] };
   }
+  if (id === "omp") {
+    if (commandSucceeded(result)) {
+      const payload = parseJsonObject(result.stdout);
+      if (payload && Array.isArray(payload.models) && payload.models.length > 0) {
+        return { authenticated: true, issues: [] };
+      }
+      if (commandSucceeded(result)) return { authenticated: true, issues: [] };
+    }
+    return { authenticated: null, issues: ["auth_unparsed"] };
+  }
   if (id === "agy") {
     const text = `${result.stdout}
 ${result.stderr}`;
@@ -16104,7 +16136,7 @@ function validateHarnessModelPair(harnessId, modelSpec) {
     }
     return { valid: true };
   }
-  if (harnessId === "pi") {
+  if (harnessId === "pi" || harnessId === "omp") {
     if (!provider && model?.includes("/")) {
       const idx = model.indexOf("/");
       provider = model.slice(0, idx).toLowerCase();
@@ -16113,17 +16145,17 @@ function validateHarnessModelPair(harnessId, modelSpec) {
     if (!provider) return { valid: true };
     const blocked = (message) => ({ valid: false, issue: "pi_native_impersonation_blocked", message });
     if (PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
-      return blocked(`pi must not impersonate native provider ${provider}; use the native harness`);
+      return blocked(`${harnessId} must not impersonate native provider ${provider}; use the native harness`);
     }
     if (provider === "antigravity" && model && PI_ANTIGRAVITY_MODEL_ID.test(model)) return { valid: true };
     const owned = Object.hasOwn(PI_VENDOR_OWNED_PROVIDERS, provider) ? PI_VENDOR_OWNED_PROVIDERS[provider] : void 0;
     if (owned) {
-      return blocked(`pi provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
+      return blocked(`${harnessId} provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
     }
     const segment = model?.includes("/") ? model.slice(0, model.indexOf("/")).toLowerCase() : void 0;
     const vendor = segment && Object.hasOwn(PI_VENDOR_SEGMENT_ALIASES, segment) ? PI_VENDOR_SEGMENT_ALIASES[segment] : segment;
     if (vendor && PI_NATIVE_BRAKE_PROVIDERS.includes(vendor)) {
-      return blocked(`pi must not bill native vendor ${vendor} through ${provider}; use the native harness`);
+      return blocked(`${harnessId} must not bill native vendor ${vendor} through ${provider}; use the native harness`);
     }
     return { valid: true };
   }

package/plugins/kxm/dist/runtime.js

@@ -15621,6 +15621,7 @@ var READ_ONLY_ONESHOT_ARGS = Object.freeze({
   // AGENTS.md/CLAUDE.md context discovery, and an ephemeral session. `--no-tools` alone
   // is not enough: extensions and hooks can still run with their own permissions.
   pi: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
+  omp: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
   claude: Object.freeze(["--tools", "Read,Glob,Grep", "--restricted", "--safe-mode", "--permission-mode", "plan", "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}', "--disable-slash-commands", "--no-session-persistence"]),
   codex: Object.freeze(["--sandbox", "read-only", "--ignore-user-config", "-c", 'approval_policy="never"']),
   grok: Object.freeze(["--sandbox", "read-only", "--permission-mode", "plan", "--tools", "Read,Glob,Grep", "--no-subagents", "--disable-web-search"]),
@@ -15632,6 +15633,7 @@ function oneShotReadOnlyArgs(harness) {
 }
 var WRITER_ONESHOT_ARGS = Object.freeze({
   pi: Object.freeze(["-a", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-session"]),
+  omp: Object.freeze(["-a", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-session"]),
   grok: Object.freeze(["--always-approve", "--no-subagents", "--disable-web-search"])
 });
 function oneShotWriterArgs(harness) {
@@ -15660,6 +15662,26 @@ var BUILTIN_HARNESSES = Object.freeze([
       usageParser: parsePiOneShotUsage
     }
   },
+  {
+    id: "omp",
+    label: "Oh My Pi",
+    default: false,
+    mode: "headless",
+    commands: ["omp"],
+    versionArgs: ["--version"],
+    authArgs: ["models", "--json"],
+    update: {
+      self: ["update"],
+      extensions: ["plugin", "upgrade"],
+      models: ["models", "refresh"]
+    },
+    oneShot: {
+      argv: ["-p", ...oneShotReadOnlyArgs("omp"), "--mode", "json"],
+      promptVia: "arg",
+      outputFormat: "json",
+      usageParser: parsePiOneShotUsage
+    }
+  },
   {
     id: "claude",
     label: "Claude Code",
@@ -15913,6 +15935,16 @@ function interpretAuth(id, result) {
     if (commandSucceeded(result) && lines.some((line) => line === GROK_LOGIN_LINE)) return { authenticated: true, issues: [] };
     return { authenticated: null, issues: ["auth_unparsed"] };
   }
+  if (id === "omp") {
+    if (commandSucceeded(result)) {
+      const payload = parseJsonObject(result.stdout);
+      if (payload && Array.isArray(payload.models) && payload.models.length > 0) {
+        return { authenticated: true, issues: [] };
+      }
+      if (commandSucceeded(result)) return { authenticated: true, issues: [] };
+    }
+    return { authenticated: null, issues: ["auth_unparsed"] };
+  }
   if (id === "agy") {
     const text = `${result.stdout}
 ${result.stderr}`;
@@ -16127,7 +16159,7 @@ function validateHarnessModelPair(harnessId, modelSpec) {
     }
     return { valid: true };
   }
-  if (harnessId === "pi") {
+  if (harnessId === "pi" || harnessId === "omp") {
     if (!provider && model?.includes("/")) {
       const idx = model.indexOf("/");
       provider = model.slice(0, idx).toLowerCase();
@@ -16136,17 +16168,17 @@ function validateHarnessModelPair(harnessId, modelSpec) {
     if (!provider) return { valid: true };
     const blocked = (message) => ({ valid: false, issue: "pi_native_impersonation_blocked", message });
     if (PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
-      return blocked(`pi must not impersonate native provider ${provider}; use the native harness`);
+      return blocked(`${harnessId} must not impersonate native provider ${provider}; use the native harness`);
     }
     if (provider === "antigravity" && model && PI_ANTIGRAVITY_MODEL_ID.test(model)) return { valid: true };
     const owned = Object.hasOwn(PI_VENDOR_OWNED_PROVIDERS, provider) ? PI_VENDOR_OWNED_PROVIDERS[provider] : void 0;
     if (owned) {
-      return blocked(`pi provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
+      return blocked(`${harnessId} provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
     }
     const segment = model?.includes("/") ? model.slice(0, model.indexOf("/")).toLowerCase() : void 0;
     const vendor = segment && Object.hasOwn(PI_VENDOR_SEGMENT_ALIASES, segment) ? PI_VENDOR_SEGMENT_ALIASES[segment] : segment;
     if (vendor && PI_NATIVE_BRAKE_PROVIDERS.includes(vendor)) {
-      return blocked(`pi must not bill native vendor ${vendor} through ${provider}; use the native harness`);
+      return blocked(`${harnessId} must not bill native vendor ${vendor} through ${provider}; use the native harness`);
     }
     return { valid: true };
   }

package/plugins/kxm/dist/server.js

@@ -15262,6 +15262,7 @@ var READ_ONLY_ONESHOT_ARGS = Object.freeze({
   // AGENTS.md/CLAUDE.md context discovery, and an ephemeral session. `--no-tools` alone
   // is not enough: extensions and hooks can still run with their own permissions.
   pi: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
+  omp: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
   claude: Object.freeze(["--tools", "Read,Glob,Grep", "--restricted", "--safe-mode", "--permission-mode", "plan", "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}', "--disable-slash-commands", "--no-session-persistence"]),
   codex: Object.freeze(["--sandbox", "read-only", "--ignore-user-config", "-c", 'approval_policy="never"']),
   grok: Object.freeze(["--sandbox", "read-only", "--permission-mode", "plan", "--tools", "Read,Glob,Grep", "--no-subagents", "--disable-web-search"]),
@@ -15273,6 +15274,7 @@ function oneShotReadOnlyArgs(harness) {
 }
 var WRITER_ONESHOT_ARGS = Object.freeze({
   pi: Object.freeze(["-a", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-session"]),
+  omp: Object.freeze(["-a", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-session"]),
   grok: Object.freeze(["--always-approve", "--no-subagents", "--disable-web-search"])
 });
 var BUILTIN_HARNESSES = Object.freeze([
@@ -15295,6 +15297,26 @@ var BUILTIN_HARNESSES = Object.freeze([
       usageParser: parsePiOneShotUsage
     }
   },
+  {
+    id: "omp",
+    label: "Oh My Pi",
+    default: false,
+    mode: "headless",
+    commands: ["omp"],
+    versionArgs: ["--version"],
+    authArgs: ["models", "--json"],
+    update: {
+      self: ["update"],
+      extensions: ["plugin", "upgrade"],
+      models: ["models", "refresh"]
+    },
+    oneShot: {
+      argv: ["-p", ...oneShotReadOnlyArgs("omp"), "--mode", "json"],
+      promptVia: "arg",
+      outputFormat: "json",
+      usageParser: parsePiOneShotUsage
+    }
+  },
   {
     id: "claude",
     label: "Claude Code",

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-plugin",
-  "version": "0.7.115",
+  "version": "0.7.119",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/skills/kxm-harness-auth/SKILL.md

@@ -23,6 +23,12 @@ Issuing a token is an operator action. When kxm_* tools fail with
 `No active session token found in env or disk` for such a file even though it
 still blocks the tools.
 
+## Plugins
+
+| Command | Purpose | Options |
+|---|---|---|
+| `kxm plugin install` | Install KXM plugin for discovered or specified harnesses | `--all`, `--claude`, `--omp`, `--pi`, `--dry-run`, `--json` |
+
 ## Updates
 
 | Command | Purpose |

package/plugins/kxm/src/autocomplete.ts

@@ -8,6 +8,7 @@ const TOP_LEVEL_COMMANDS = [
   "runs",
   "tenant",
   "harness",
+  "plugin",
   "update",
   "runtime",
   "trust",
@@ -38,6 +39,7 @@ const SUBCOMMANDS: Record<string, string[]> = {
   runs: ["status", "cancel", "list"],
   tenant: ["status"],
   harness: ["list"],
+  plugin: ["install"],
   runtime: ["start", "status", "stop"],
   trust: ["diff", "check"],
   agent: ["worker"],
@@ -137,6 +139,7 @@ _kxm() {
     'run:Create a KXM workflow run'
     'runs:Inspect KXM runs'
     'harness:Detect coding-agent harnesses and auth'
+    'plugin:Install or manage KXM harness plugins'
     'update:Update kxm, harness CLIs, and model catalogs'
     'runtime:Manage the KXM Runtime supervisor'
     'trust:Permission-diff trust review'

package/plugins/kxm/src/cli/plugins.ts

@@ -0,0 +1,201 @@
+import { spawnSync } from "node:child_process";
+import { findKxmRepoRoot } from "../repo-root.ts";
+import { probeHarnesses } from "../harness.ts";
+import { print, type Runtime } from "./types.ts";
+
+export type PluginHarnessId = "pi" | "omp" | "claude";
+
+export const PLUGIN_SUPPORTED_HARNESSES: readonly PluginHarnessId[] = Object.freeze(["pi", "omp", "claude"]);
+
+export interface PluginInstallOptions {
+  all?: boolean | undefined;
+  claude?: boolean | undefined;
+  omp?: boolean | undefined;
+  pi?: boolean | undefined;
+}
+
+export interface PluginInstallHarnessResult {
+  harness: string;
+  status: "passed" | "failed" | "would" | "skipped";
+  command?: string | undefined;
+  args?: readonly string[] | undefined;
+  detail?: string | undefined;
+  error?: string | undefined;
+}
+
+export async function cmdPluginInstall(
+  runtime: Runtime,
+  options: PluginInstallOptions,
+): Promise<number> {
+  const repoRoot = findKxmRepoRoot(import.meta.url);
+  const env = runtime.env.PATH ? runtime.env : { ...process.env, ...runtime.env };
+  const inventory = probeHarnesses({ env });
+
+  const isExplicit = Boolean(options.claude || options.omp || options.pi);
+  const requestedHarnesses: PluginHarnessId[] = [];
+  if (options.pi) requestedHarnesses.push("pi");
+  if (options.omp) requestedHarnesses.push("omp");
+  if (options.claude) requestedHarnesses.push("claude");
+
+  const targetHarnesses: readonly PluginHarnessId[] = isExplicit
+    ? requestedHarnesses
+    : PLUGIN_SUPPORTED_HARNESSES;
+
+  const results: PluginInstallHarnessResult[] = [];
+
+  for (const harnessId of targetHarnesses) {
+    const status = inventory.harnesses.find((h) => h.id === harnessId);
+    const detected = Boolean(status?.detected && status?.command);
+
+    if (!detected) {
+      if (isExplicit) {
+        results.push({
+          harness: harnessId,
+          status: "failed",
+          error: "harness_not_detected",
+          detail: `${harnessId} harness is not installed or not found on PATH`,
+        });
+      }
+      continue;
+    }
+
+    const command = status!.command!;
+
+    if (harnessId === "pi") {
+      const args = ["install", repoRoot, "-a"];
+      if (runtime.dryRun) {
+        results.push({
+          harness: "pi",
+          status: "would",
+          command,
+          args,
+          detail: `would install kxm plugin into pi: ${command} ${args.join(" ")}`,
+        });
+      } else {
+        const run = runtime.io.spawnSync
+          ? runtime.io.spawnSync(command, args)
+          : spawnSync(command, args, { encoding: "utf8", windowsHide: true, env: runtime.env });
+        if (run.error || (run.status !== 0 && run.status !== null)) {
+          results.push({
+            harness: "pi",
+            status: "failed",
+            command,
+            args,
+            error: run.error?.message || "install_failed",
+            detail: (run.stderr || run.stdout || "pi install exited with error").trim(),
+          });
+        } else {
+          results.push({
+            harness: "pi",
+            status: "passed",
+            command,
+            args,
+            detail: "installed kxm plugin into pi",
+          });
+        }
+      }
+    } else if (harnessId === "omp") {
+      const args = ["plugin", "install", repoRoot];
+      if (runtime.dryRun) {
+        results.push({
+          harness: "omp",
+          status: "would",
+          command,
+          args,
+          detail: `would install kxm plugin into omp: ${command} ${args.join(" ")}`,
+        });
+      } else {
+        const run = runtime.io.spawnSync
+          ? runtime.io.spawnSync(command, args)
+          : spawnSync(command, args, { encoding: "utf8", windowsHide: true, env: runtime.env });
+        if (run.error || (run.status !== 0 && run.status !== null)) {
+          results.push({
+            harness: "omp",
+            status: "failed",
+            command,
+            args,
+            error: run.error?.message || "install_failed",
+            detail: (run.stderr || run.stdout || "omp plugin install exited with error").trim(),
+          });
+        } else {
+          results.push({
+            harness: "omp",
+            status: "passed",
+            command,
+            args,
+            detail: "installed kxm plugin into omp",
+          });
+        }
+      }
+    } else if (harnessId === "claude") {
+      const marketplaceArgs = ["plugin", "marketplace", "add", repoRoot];
+      const installArgs = ["plugin", "install", "kxm", "-y"];
+      if (runtime.dryRun) {
+        results.push({
+          harness: "claude",
+          status: "would",
+          command,
+          args: installArgs,
+          detail: `would add marketplace and install kxm plugin into claude: ${command} ${installArgs.join(" ")}`,
+        });
+      } else {
+        if (runtime.io.spawnSync) {
+          runtime.io.spawnSync(command, marketplaceArgs);
+        } else {
+          spawnSync(command, marketplaceArgs, { encoding: "utf8", windowsHide: true, env: runtime.env });
+        }
+        const run = runtime.io.spawnSync
+          ? runtime.io.spawnSync(command, installArgs)
+          : spawnSync(command, installArgs, { encoding: "utf8", windowsHide: true, env: runtime.env });
+        if (run.error || (run.status !== 0 && run.status !== null)) {
+          results.push({
+            harness: "claude",
+            status: "failed",
+            command,
+            args: installArgs,
+            error: run.error?.message || "install_failed",
+            detail: (run.stderr || run.stdout || "claude plugin install exited with error").trim(),
+          });
+        } else {
+          results.push({
+            harness: "claude",
+            status: "passed",
+            command,
+            args: installArgs,
+            detail: "installed kxm plugin into claude",
+          });
+        }
+      }
+    }
+  }
+
+  if (results.length === 0) {
+    const errorMsg = "no supported harnesses (pi, omp, claude) detected on PATH";
+    print(
+      runtime.io,
+      runtime.json,
+      { ok: false, command: "plugin install", error: "no_harnesses_detected", results: [] },
+      errorMsg,
+    );
+    return 1;
+  }
+
+  const ok = results.every((r) => r.status === "passed" || r.status === "would");
+  const summary = results
+    .map((r) => `${r.harness}: ${r.status}${r.detail ? ` (${r.detail})` : ""}`)
+    .join("\n");
+
+  print(
+    runtime.io,
+    runtime.json,
+    {
+      ok,
+      command: "plugin install",
+      ...(runtime.dryRun ? { dryRun: true } : {}),
+      results,
+    },
+    summary,
+  );
+
+  return ok ? 0 : 1;
+}

package/plugins/kxm/src/cli.ts

@@ -120,6 +120,8 @@ cmdBackup,
   cmdKxmRuntime,
 } from "./cli/project.ts";
 
+import { cmdPluginInstall } from "./cli/plugins.ts";
+
 import {
   cmdStatus,
   cmdDash,
@@ -185,6 +187,7 @@ const USAGE_ERROR_CODES = new Set([
  */
 const DRY_RUN_COMMANDS: ReadonlySet<string> = new Set([
   "init", "backup", "restore", "run", "explain", "suggest", "update", "dash", "completion", "completion install",
+  "plugin install", "plugin",
   "runs status", "runs drive", "runs receipt", "runs cancel", "runs list",
   "tenant status", "models inventory-refresh", "harness list", "auth token",
   "routes list", "routes count", "routes admit", "routes disable",
@@ -506,6 +509,17 @@ function createProgram(ctx: CliContext, result: { code: number }): Command {
   harnessCmd.helpCommand("help", "Show harness help");
   addGlobalOptions(harnessCmd.command("list").description("Show installed harnesses, auth, and native updaters")).action(bind(cmdHarnessList));
 
+  const pluginCmd = addGlobalOptions(program.command("plugin").description("Install or manage KXM harness plugins"));
+  pluginCmd.helpCommand("help", "Show plugin help");
+  addGlobalOptions(pluginCmd.command("install", { isDefault: true }).description("Install the KXM plugin into discovered or specified harnesses"))
+    .option("--all", "Install plugin for all discovered harnesses (default)")
+    .option("--claude", "Install plugin for Claude Code")
+    .option("--omp", "Install plugin for Oh My Pi (OMP)")
+    .option("--pi", "Install plugin for Pi")
+    .action(async function pluginInstallAction(this: Command, options: { all?: boolean; claude?: boolean; omp?: boolean; pi?: boolean }) {
+      result.code = await cmdPluginInstall(runtimeFrom(ctx, this), options);
+    });
+
   const authCmd = addGlobalOptions(program.command("auth").description("Manage credentials, tokens, and authorization"));
   authCmd.helpCommand("help", "Show auth help");
   addGlobalOptions(authCmd.command("token").description("Inspect, issue, or clear local disk session tokens"))

package/plugins/kxm/src/harness.ts

@@ -508,6 +508,7 @@ const READ_ONLY_ONESHOT_ARGS = Object.freeze({
   // AGENTS.md/CLAUDE.md context discovery, and an ephemeral session. `--no-tools` alone
   // is not enough: extensions and hooks can still run with their own permissions.
   pi: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
+  omp: Object.freeze(["--no-tools", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-context-files", "--no-session"]),
   claude: Object.freeze(["--tools", "Read,Glob,Grep", "--restricted", "--safe-mode", "--permission-mode", "plan", "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}', "--disable-slash-commands", "--no-session-persistence"]),
   codex: Object.freeze(["--sandbox", "read-only", "--ignore-user-config", "-c", 'approval_policy="never"']),
   grok: Object.freeze(["--sandbox", "read-only", "--permission-mode", "plan", "--tools", "Read,Glob,Grep", "--no-subagents", "--disable-web-search"]),
@@ -537,6 +538,7 @@ export function oneShotReadOnlyArgs(harness: string): readonly string[] | undefi
  */
 const WRITER_ONESHOT_ARGS = Object.freeze({
   pi: Object.freeze(["-a", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-session"]),
+  omp: Object.freeze(["-a", "--no-extensions", "--no-skills", "--no-prompt-templates", "--no-session"]),
   grok: Object.freeze(["--always-approve", "--no-subagents", "--disable-web-search"]),
 });
 
@@ -568,6 +570,26 @@ export const BUILTIN_HARNESSES: readonly HarnessCatalogEntry[] = Object.freeze([
       usageParser: parsePiOneShotUsage,
     },
   },
+  {
+    id: "omp",
+    label: "Oh My Pi",
+    default: false,
+    mode: "headless",
+    commands: ["omp"],
+    versionArgs: ["--version"],
+    authArgs: ["models", "--json"],
+    update: {
+      self: ["update"],
+      extensions: ["plugin", "upgrade"],
+      models: ["models", "refresh"],
+    },
+    oneShot: {
+      argv: ["-p", ...oneShotReadOnlyArgs("omp")!, "--mode", "json"],
+      promptVia: "arg",
+      outputFormat: "json",
+      usageParser: parsePiOneShotUsage,
+    },
+  },
   {
     id: "claude",
     label: "Claude Code",
@@ -857,6 +879,16 @@ function interpretAuth(id: string, result: HarnessCommandResult): Pick<HarnessSt
     if (commandSucceeded(result) && lines.some((line) => line === GROK_LOGIN_LINE)) return { authenticated: true, issues: [] };
     return { authenticated: null, issues: ["auth_unparsed"] };
   }
+  if (id === "omp") {
+    if (commandSucceeded(result)) {
+      const payload = parseJsonObject(result.stdout);
+      if (payload && Array.isArray(payload.models) && payload.models.length > 0) {
+        return { authenticated: true, issues: [] };
+      }
+      if (commandSucceeded(result)) return { authenticated: true, issues: [] };
+    }
+    return { authenticated: null, issues: ["auth_unparsed"] };
+  }
   if (id === "agy") {
     const text = `${result.stdout}\n${result.stderr}`;
     if (!commandSucceeded(result) || !text.trim()) {
@@ -1118,7 +1150,7 @@ export function validateHarnessModelPair(
     return { valid: true };
   }
 
-  if (harnessId === "pi") {
+  if (harnessId === "pi" || harnessId === "omp") {
     if (!provider && model?.includes("/")) {
       const idx = model.indexOf("/");
       provider = model.slice(0, idx).toLowerCase();
@@ -1127,17 +1159,17 @@ export function validateHarnessModelPair(
     if (!provider) return { valid: true };
     const blocked = (message: string): HarnessModelValidation => ({ valid: false, issue: "pi_native_impersonation_blocked", message });
     if (PI_NATIVE_BRAKE_PROVIDERS.includes(provider)) {
-      return blocked(`pi must not impersonate native provider ${provider}; use the native harness`);
+      return blocked(`${harnessId} must not impersonate native provider ${provider}; use the native harness`);
     }
     if (provider === "antigravity" && model && PI_ANTIGRAVITY_MODEL_ID.test(model)) return { valid: true };
     const owned = Object.hasOwn(PI_VENDOR_OWNED_PROVIDERS, provider) ? PI_VENDOR_OWNED_PROVIDERS[provider] : undefined;
     if (owned) {
-      return blocked(`pi provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
+      return blocked(`${harnessId} provider ${provider} bills native vendor ${owned} for ${model ?? "this model"}; use the native harness`);
     }
     const segment = model?.includes("/") ? model.slice(0, model.indexOf("/")).toLowerCase() : undefined;
     const vendor = segment && Object.hasOwn(PI_VENDOR_SEGMENT_ALIASES, segment) ? PI_VENDOR_SEGMENT_ALIASES[segment] : segment;
     if (vendor && PI_NATIVE_BRAKE_PROVIDERS.includes(vendor)) {
-      return blocked(`pi must not bill native vendor ${vendor} through ${provider}; use the native harness`);
+      return blocked(`${harnessId} must not bill native vendor ${vendor} through ${provider}; use the native harness`);
     }
     return { valid: true };
   }

package/plugins/kxm/src/mcp-server.ts

@@ -11,7 +11,7 @@ import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 import { sessionTokenFixHint } from "./session-token-hint.ts";
 
-const VERSION = "0.7.115";
+const VERSION = "0.7.119";
 const CONFIGURE_PLUGIN = "/plugin configure kxm@kxm";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();

package/plugins/kxm/src/providers/claude-bridge/register.ts

@@ -92,6 +92,12 @@ export function claudeBridgeRegistrationNotice(
   report: ClaudeBridgeRegistration | undefined,
   pi?: object,
 ): { message: string; type: "warning" } | undefined {
+  if (report?.warning) {
+    return {
+      message: boundedRegistrationWarning(report.warning),
+      type: "warning",
+    };
+  }
   const conflict = Boolean(report?.conflict) || (pi ? claudeBridgeStandaloneToolsPresent(pi) : false);
   if (!conflict) return undefined;
   return {
@@ -112,13 +118,23 @@ export function registerClaudeBridgeProvider(pi: ExtensionAPI): ClaudeBridgeRegi
     return { registered: false, conflict: false };
   }
 
-  pi.registerProvider(PROVIDER_ID, {
-    name: PROVIDER_NAME,
-    baseUrl: PROVIDER_ID,
-    api: CLAUDE_BRIDGE_API,
-    models: registeredClaudeBridgeModels(),
-    streamSimple: streamClaudeBridge,
-  } as unknown as Parameters<ExtensionAPI["registerProvider"]>[1]);
-
-  return { registered: true, conflict: false };
+  try {
+    pi.registerProvider(PROVIDER_ID, {
+      name: PROVIDER_NAME,
+      baseUrl: PROVIDER_ID,
+      apiKey: PROVIDER_ID,
+      api: CLAUDE_BRIDGE_API,
+      models: registeredClaudeBridgeModels(),
+      streamSimple: streamClaudeBridge,
+    } as unknown as Parameters<ExtensionAPI["registerProvider"]>[1]);
+
+    return { registered: true, conflict: false };
+  } catch (error) {
+    const reason = error instanceof Error ? error.message : String(error);
+    return {
+      registered: false,
+      conflict: false,
+      warning: `kxm: claude-bridge provider registration failed (${reason}). Configure apiKey or ensure provider auth is valid.`,
+    };
+  }
 }