@omercnet/paseo-omp 0.2.1 → 0.3.0

package/client/omp-store-picker.tsx

@@ -0,0 +1,89 @@
+import { type PluginSurfaceProps, useRpc } from "@getpaseo/plugin/client";
+import { useQuery } from "@tanstack/react-query";
+import { Pressable, Text, View } from "react-native";
+import { listOmpStores, type OmpStore, storeLabel } from "../shared/omp-store";
+import { ompStoreKey } from "./omp-store-state";
+
+export function OmpStorePicker({
+  theme,
+  store,
+  onChange,
+  disabled = false,
+}: {
+  theme: PluginSurfaceProps["theme"];
+  store?: OmpStore;
+  onChange(store: OmpStore | undefined): void;
+  disabled?: boolean;
+}) {
+  const loadStores = useRpc(listOmpStores);
+  const stores = useQuery({
+    queryKey: ["paseo-omp", "stores"],
+    queryFn: () => loadStores({}),
+    staleTime: 30_000,
+  });
+  const profiles = [
+    ...new Set([...(stores.data?.profiles ?? []), ...(store?.profile ? [store.profile] : [])]),
+  ];
+  const choices: Array<OmpStore | undefined> = [
+    undefined,
+    ...profiles.map((profile) => ({ profile })),
+  ];
+  if (store?.agentDir) choices.push(store);
+  return (
+    <View style={{ gap: 8 }}>
+      <Text style={{ color: theme.colors.foreground, fontWeight: "600" }}>OMP store</Text>
+      <View
+        accessibilityRole="radiogroup"
+        style={{ flexDirection: "row", flexWrap: "wrap", gap: 8 }}
+      >
+        {choices.map((choice) => {
+          const selected = ompStoreKey(choice) === ompStoreKey(store);
+          return (
+            <Pressable
+              key={ompStoreKey(choice)}
+              accessibilityRole="radio"
+              accessibilityLabel={storeLabel(choice)}
+              accessibilityState={{ checked: selected, disabled }}
+              aria-checked={selected}
+              aria-disabled={disabled}
+              disabled={disabled}
+              onPress={() => onChange(choice)}
+              style={{
+                borderWidth: 1,
+                borderRadius: 8,
+                paddingHorizontal: 10,
+                paddingVertical: 8,
+                borderColor: selected ? theme.colors.accent : theme.colors.border,
+                backgroundColor: theme.colors.surface1,
+                opacity: disabled ? 0.5 : 1,
+              }}
+            >
+              <Text
+                style={{ color: theme.colors.foreground, fontWeight: selected ? "600" : "400" }}
+              >
+                {selected ? "✓ " : ""}
+                {storeLabel(choice)}
+              </Text>
+            </Pressable>
+          );
+        })}
+      </View>
+      {stores.isLoading ? (
+        <Text style={{ color: theme.colors.foregroundMuted }}>Loading profiles…</Text>
+      ) : null}
+      {stores.error ? (
+        <Text style={{ color: theme.colors.statusDanger }}>
+          Could not list OMP profiles.{" "}
+          <Text
+            onPress={() => {
+              void stores.refetch();
+            }}
+            accessibilityRole="button"
+          >
+            Retry
+          </Text>
+        </Text>
+      ) : null}
+    </View>
+  );
+}

package/client/omp-store-state.ts

@@ -0,0 +1,45 @@
+import { type OmpStore, storeForProvider } from "../shared/omp-store";
+import type { OmpQuota } from "../shared/quota";
+
+export function ompStoreKey(store?: OmpStore): string {
+  return store?.profile
+    ? `profile:${store.profile}`
+    : store?.agentDir
+      ? `directory:${store.agentDir}`
+      : "default";
+}
+
+export function isOmpPluginProvider(provider?: string): boolean {
+  return provider === "omp-plugin" || storeForProvider(provider) !== undefined;
+}
+
+export function isOmpProvider(provider?: string): boolean {
+  return provider === "omp" || isOmpPluginProvider(provider);
+}
+
+/** Each store owns its own result and in-flight read. Failed reads never become empty success. */
+export function createStoreQuotaLoader(
+  load: (input: { store?: OmpStore }) => Promise<{ quotas: OmpQuota[] }>,
+  maxAgeMs: number,
+  now = Date.now,
+) {
+  const cache = new Map<string, { value: { quotas: OmpQuota[] }; at: number }>();
+  const pending = new Map<string, Promise<{ quotas: OmpQuota[] }>>();
+  return (store?: OmpStore): Promise<{ quotas: OmpQuota[] }> => {
+    const key = ompStoreKey(store);
+    const cached = cache.get(key);
+    if (cached && now() - cached.at < maxAgeMs) return Promise.resolve(cached.value);
+    const current = pending.get(key);
+    if (current) return current;
+    const request = load({ store })
+      .then((value) => {
+        cache.set(key, { value, at: now() });
+        return value;
+      })
+      .finally(() => {
+        pending.delete(key);
+      });
+    pending.set(key, request);
+    return request;
+  };
+}

package/client/paseo-types.ts

@@ -0,0 +1,9 @@
+import type { PluginClientContext } from "@getpaseo/plugin/client";
+
+type AsyncResult<Callable> = Callable extends (...args: never[]) => Promise<infer Result>
+  ? Result
+  : never;
+
+export type PaseoApi = PluginClientContext["paseo"];
+export type PaseoAgentListResult = AsyncResult<PaseoApi["agents"]["list"]>;
+export type PaseoProviderSnapshotResult = AsyncResult<PaseoApi["providers"]["snapshot"]>;

package/client/provider-diagnostics-state.ts

@@ -1,4 +1,3 @@
-import type { PaseoApi, PaseoProviderSnapshotResult } from "@getpaseo/client";
 import type {
   OmpLspDiagnostics,
   OmpMcpDiagnostics,
@@ -8,10 +7,11 @@ import type {
   OmpVersionStatus,
   PathState,
 } from "../shared/provider-diagnostics";
+import { isOmpProvider } from "./omp-store-state";
+import type { PaseoApi, PaseoProviderSnapshotResult } from "./paseo-types";
 
 export type ProviderHealthTone = "ok" | "warning" | "danger" | "muted";
 export const OMP_PROVIDER_IDS = ["omp", "omp-plugin"] as const;
-const OMP_PROVIDER_ID_SET: ReadonlySet<string> = new Set(OMP_PROVIDER_IDS);
 
 export function isUnsupportedHostError(error: unknown): boolean {
   if (typeof error !== "object" || error === null) return false;
@@ -40,6 +40,7 @@ export async function loadReadyProviderSnapshot(
 
 export interface RefreshDiagnosticsOptions {
   providers: ProviderActions;
+  providerIds?: readonly string[];
   loadForcedHealth(): Promise<OmpProviderHealth>;
   cacheHealth(health: OmpProviderHealth): void;
   cacheProviders(snapshot: PaseoProviderSnapshotResult): void;
@@ -51,7 +52,11 @@ export async function refreshProviderDiagnostics(
   options: RefreshDiagnosticsOptions,
 ): Promise<{ failed: boolean }> {
   const [providerRefresh, forcedHealth] = await Promise.allSettled([
-    options.providers.refresh({ providers: [...OMP_PROVIDER_IDS] }),
+    options.providers.refresh({
+      providers: [
+        ...new Set([...OMP_PROVIDER_IDS, ...(options.providerIds ?? []).filter(isOmpProvider)]),
+      ],
+    }),
     options.loadForcedHealth(),
   ]);
   if (forcedHealth.status === "fulfilled") options.cacheHealth(forcedHealth.value);
@@ -152,15 +157,21 @@ export function summarizeProcessDiagnostics(diagnostics: OmpProcessDiagnostics):
   if (diagnostics.status === "unavailable") return "No hub run directory found";
   if (diagnostics.status === "unknown") return "Unknown (could not read the hub run directory)";
   const count = diagnostics.trackedCount ?? 0;
-  if (diagnostics.status === "partial") return `${count} tracked (partial: some inaccessible)`;
-  return `${count} tracked`;
+  const statesKnown =
+    diagnostics.activeCount != null &&
+    diagnostics.historicalCount != null &&
+    diagnostics.unknownCount != null;
+  const detail = statesKnown
+    ? `${diagnostics.activeCount} active-state, ${diagnostics.historicalCount} historical, ${diagnostics.unknownCount} unknown`
+    : "states not reported";
+  return `${count} metadata records (${detail}${diagnostics.status === "partial" ? "; partial access" : ""}); live processes not verified`;
 }
 
 export function processTone(diagnostics: OmpProcessDiagnostics): ProviderHealthTone {
   if (diagnostics.status === "unknown") return "warning";
   if (diagnostics.status === "partial") return "warning";
   if (diagnostics.status === "unavailable") return "muted";
-  return diagnostics.trackedCount && diagnostics.trackedCount > 0 ? "ok" : "muted";
+  return "muted";
 }
 
 const PATH_STATE_LABELS: Record<PathState, string> = {
@@ -236,7 +247,7 @@ export function selectKnownOmpProviders(
   entries: readonly PaseoProviderSnapshotResult["entries"][number][],
 ): KnownOmpProviderSummary[] {
   return entries.flatMap((entry) =>
-    OMP_PROVIDER_ID_SET.has(entry.provider)
+    isOmpProvider(entry.provider)
       ? [
           {
             id: entry.provider,

package/client/quota-popover.tsx

@@ -3,7 +3,9 @@ import { Icon } from "@getpaseo/plugin/client/react-native";
 import { useQuery } from "@tanstack/react-query";
 import { useMemo } from "react";
 import { Text, View } from "react-native";
+import { storeForProvider, storeLabel } from "../shared/omp-store";
 import { listOmpQuotas } from "../shared/quota";
+import { ompStoreKey } from "./omp-store-state";
 import {
   type QuotaProviderGroup,
   quotaProviderFromSession,
@@ -21,10 +23,12 @@ export function QuotaPopover(props: PluginButtonContentProps) {
   const agentId = props.context === "agent" ? props.agentId : "";
   const session = useAgent(agentId, (agent) => ({ model: agent.model, provider: agent.provider }));
   const currentProvider = quotaProviderFromSession(session?.provider ?? "", session?.model ?? null);
+  const store = storeForProvider(session?.provider);
   const loadQuotas = useRpc(listOmpQuotas);
   const quotas = useQuery({
-    queryKey: ["paseo-omp", "quotas"],
-    queryFn: () => loadQuotas({}),
+    queryKey: ["paseo-omp", "quotas", ompStoreKey(store)],
+    queryFn: () => loadQuotas({ store }),
+    enabled: session !== undefined && session !== null,
     refetchInterval: QUOTA_POLL_MS,
   });
 
@@ -84,7 +88,7 @@ export function QuotaPopover(props: PluginButtonContentProps) {
     [layout.compact, theme],
   );
 
-  if (quotas.isLoading) return <Text style={styles.muted}>Loading omp quotas…</Text>;
+  if (!session || quotas.isLoading) return <Text style={styles.muted}>Loading omp quotas…</Text>;
   if (quotas.error) return <Text style={styles.error}>Could not read omp quota state.</Text>;
 
   const groups = quotaProviderGroups(quotas.data?.quotas ?? [], currentProvider);
@@ -96,6 +100,7 @@ export function QuotaPopover(props: PluginButtonContentProps) {
 
   return (
     <View style={styles.root}>
+      <Text style={styles.muted}>{storeLabel(store)}</Text>
       {currentProvider && !hasCurrent ? (
         <Text style={styles.muted}>
           {`No recorded quota yet for ${quotaProviderLabel(currentProvider)} (this session's provider).`}

package/client/quota-state.ts

@@ -1,4 +1,5 @@
 import type { OmpQuota } from "../shared/quota";
+import { isOmpProvider } from "./omp-store-state";
 
 const PROVIDER_LABELS: Record<string, string> = {
   anthropic: "Anthropic",
@@ -37,9 +38,9 @@ export function quotaProviderFromSession(
   model: string | null = null,
 ): string | null {
   const [runtime, modelProvider] = provider.split("/");
-  if (runtime !== "omp") return null;
+  if (!isOmpProvider(runtime)) return null;
   if (modelProvider) return modelProvider;
-  return model?.split("/")[0] ?? null;
+  return model?.includes("/") ? model.split("/")[0] : null;
 }
 
 export function quotaProviderLabel(provider: string | null): string {
@@ -51,32 +52,40 @@ export function quotaProviderLabel(provider: string | null): string {
 export function quotasForProvider(
   quotas: readonly OmpQuota[],
   provider: string | null,
+  includeAll = false,
 ): OmpQuota[] {
-  return provider ? quotas.filter((quota) => quota.provider === provider) : [];
+  return provider
+    ? quotas.filter((quota) => quota.provider === provider)
+    : includeAll
+      ? [...quotas]
+      : [];
 }
 
 export function quotaSummaryForProvider(
   quotas: readonly OmpQuota[],
   provider: string | null,
+  includeAll = false,
 ): { visible: boolean; label: string } {
-  const matching = quotasForProvider(quotas, provider);
+  const matching = quotasForProvider(quotas, provider, includeAll);
+  const label = provider ? quotaProviderLabel(provider) : "Quotas";
   const used = matching.flatMap((quota) =>
     quota.usedFraction === null ? [] : [quota.usedFraction],
   );
   if (used.length === 0) {
     return provider
       ? { visible: true, label: `${quotaProviderLabel(provider)} · —` }
-      : { visible: false, label: "Quota" };
+      : { visible: includeAll, label: "Quotas · —" };
   }
   const peak = Math.round(Math.max(...used) * 100);
-  return { visible: true, label: `${quotaProviderLabel(provider)} · ${peak}%` };
+  return { visible: true, label: `${label} · ${peak}%` };
 }
 
 export function quotaSeverityForProvider(
   quotas: readonly OmpQuota[],
   provider: string | null,
+  includeAll = false,
 ): QuotaSeverity {
-  const used = quotasForProvider(quotas, provider).flatMap((quota) =>
+  const used = quotasForProvider(quotas, provider, includeAll).flatMap((quota) =>
     quota.usedFraction === null ? [] : [quota.usedFraction],
   );
   return used.length === 0 ? "unknown" : quotaSeverityFromFraction(Math.max(...used));

package/client/sessions-popover.tsx

@@ -2,7 +2,9 @@ import { type PluginButtonContentProps, useAgent, useRpc } from "@getpaseo/plugi
 import { useQuery } from "@tanstack/react-query";
 import { useMemo } from "react";
 import { ScrollView, Text, View } from "react-native";
+import { storeForProvider, storeLabel } from "../shared/omp-store";
 import { listOmpSessions } from "../shared/sessions";
+import { ompStoreKey } from "./omp-store-state";
 
 const SESSIONS_POLL_MS = 20_000;
 const PREVIEW_LIMIT = 20;
@@ -20,11 +22,13 @@ function age(epochSeconds: number): string {
 export function SessionsPopover(props: PluginButtonContentProps) {
   const { theme, layout } = props;
   const agentId = props.context === "agent" ? props.agentId : "";
-  const cwd = useAgent(agentId, (agent) => agent.cwd) ?? "";
+  const agent = useAgent(agentId, ({ cwd, provider }) => ({ cwd, provider }));
+  const cwd = agent?.cwd ?? "";
+  const store = storeForProvider(agent?.provider);
   const loadSessions = useRpc(listOmpSessions);
   const sessions = useQuery({
-    queryKey: ["paseo-omp", "sessions", cwd],
-    queryFn: () => loadSessions({ cwd }),
+    queryKey: ["paseo-omp", "sessions", ompStoreKey(store), cwd],
+    queryFn: () => loadSessions({ cwd, store }),
     enabled: cwd.length > 0,
     refetchInterval: SESSIONS_POLL_MS,
   });
@@ -56,6 +60,7 @@ export function SessionsPopover(props: PluginButtonContentProps) {
 
   return (
     <ScrollView contentContainerStyle={styles.root}>
+      <Text style={styles.muted}>{storeLabel(store)}</Text>
       {items.slice(0, PREVIEW_LIMIT).map((entry) => (
         <View key={entry.id} style={styles.row}>
           {entry.title ? <Text style={styles.title}>{entry.title}</Text> : null}

package/docs/alpha-release-checklist.md

@@ -1,13 +1,13 @@
 # Alpha release checklist
 
-This checklist prepares `paseo-omp-v0.1.0-alpha.1`. It does not authorize publication. A maintainer must explicitly approve the tested artifact before any push, tag, GitHub release, or package publication.
+This checklist prepares `paseo-omp-v0.1.0-alpha.1`. It does not authorize publication. A maintainer must explicitly approve the tested package before any push, tag, GitHub release, or npm publication.
 
 ## Release identity
 
 - [ ] Release Please proposes `0.1.0-alpha.1` from manifest version `0.0.0`.
-- [ ] Package, tag, and archive names are `@omercnet/paseo-omp`, `paseo-omp-v0.1.0-alpha.1`, and `paseo-omp-v0.1.0-alpha.1.zip`.
+- [ ] Package and tag names are `@omercnet/paseo-omp` and `paseo-omp-v0.1.0-alpha.1`.
 - [ ] Provider identity remains `omp-plugin`; bundled `omp` remains independent and enabled or disabled by the user.
-- [ ] Paseo requirement remains an official released range, currently `^0.8.0`.
+- [ ] Paseo requirement remains the reviewed dual-version range, currently `>=0.8.0 <0.10.0`.
 - [ ] Minimum tested OMP version, checksum, CI job, README, SUPPORT, and TESTING agree.
 
 ## Required gates
@@ -16,24 +16,22 @@ This checklist prepares `paseo-omp-v0.1.0-alpha.1`. It does not authorize public
 - [ ] `npm run typecheck`
 - [ ] `npm run test:coverage`; aggregate loaded-source coverage meets the configured threshold.
 - [ ] Real installed OMP regression against the documented minimum version.
-- [ ] `npm run package:release`
 - [ ] `npm run test:integration:install`
 - [ ] `npm run test:integration:docker`
 - [ ] Windows/WSL host ownership job passes in CI.
 - [ ] Docker canary matrix passes on the exact release candidate.
 - [ ] GitHub Actions syntax and release-configuration schemas pass.
-- [ ] Release ZIP contents contain documentation, production dependencies, and both plugin entries without development-only files.
 
 ## Required manual acceptance
 
-- [ ] Maintainer installs the exact candidate archive into the controlled official-Paseo Docker canary.
+- [ ] Maintainer installs the exact `npm pack` candidate into the controlled official-Paseo Docker canary.
 - [ ] Maintainer verifies catalog, prompt, tools, configured MCP, permissions, steer, interrupt, import/resume, subagents, rewind, usage, Hub, and plugin surfaces.
 - [ ] Maintainer confirms the known limitations are acceptable for alpha.
 - [ ] Maintainer explicitly authorizes publication after testing. Silence or prior approval for development is not release authorization.
 
 ## Alpha blocker
 
-- [x] `omp-audit.1`: incomplete or compacted `agent_end` frames recover success or failure only from complete streamed `message_end` evidence whose count covers the declared terminal messages; partial evidence still fails closed.
+- [x] `omp-audit.1`: incomplete or compacted `agent_end` frames recover success, failure, or native cancellation from complete streamed `message_end` evidence, or from bounded history whose entry IDs correlate with the streamed turn. Idle state is confirmed before and after retrieval, and concurrent interrupts remain authoritative. Missing, unavailable, non-correlatable, or conflicting terminal evidence fails closed with content-free count diagnostics.
 
 ## Accepted alpha limitations
 
@@ -67,4 +65,4 @@ The prerelease notes must include:
 
 ## Publication boundary
 
-Release Please may prepare metadata. The publisher must resolve the immutable tag, require successful CI for the exact tagged commit, build from tracked allowlisted files, attest the archive and checksum, and remain idempotent for recovery. Never retag an alpha commit as stable.
+Release Please may prepare metadata. Publication must use npm trusted publishing from the immutable release commit. Never retag an alpha commit as stable.

package/docs/configuration.md

@@ -1,6 +1,6 @@
 # Configuration
 
-Open the **OMP** sidebar to browse the complete installed OMP settings catalog. Boolean, number, string, and enum settings support revision-checked Apply, Discard, and Reset actions; arrays, records, and credentials remain read-only. Configuration writes use OMP's native `config set` and `config reset` commands rather than rewriting YAML.
+Open the global **OMP** sidebar to browse and edit machine-wide state, or open the workspace **OMP** panel from the workspace tab or Explorer to manage project-scoped state. Scalar edits in the global surface use OMP's native `config set` and `config reset` commands. Workspace edits create validated overrides in `<workspace>/.omp/config.yml`; removing an override restores the effective global or default value. Arrays, records, and credentials remain read-only in both surfaces.
 
 The **Plugin** tab documents the supported `omp-plugin` launch options, including names-only inherited environment configuration. Paseo's public plugin API does not expose the effective provider options for active launches, so the tab does not claim profile values are active. Choose **OMP Plugin** when creating an agent. Model, mode, thinking level, system prompt, persistence, MCP servers, workspace, and agent environment use Paseo's standard provider controls.
 
@@ -49,17 +49,21 @@ These options cover every plugin-specific launch value. Values that belong to an
 
 ## OMP-native plugins
 
-Open **OMP → OMP plugins** to inspect plugins installed through OMP. The manager uses OMP's documented singular `omp plugin` CLI and supports user-scoped install, enable, disable, upgrade, and uninstall operations. Every state-changing action requires an explicit confirmation; already-running OMP sessions are unchanged.
+Open **OMP → OMP plugins** globally for user-scoped management, or use the workspace **OMP** panel to include project-scoped installations and effective project overrides. The manager uses OMP's documented singular `omp plugin` CLI and supports install, enable, disable, upgrade, and uninstall operations. Every state-changing action requires explicit confirmation; already-running OMP sessions are unchanged.
 
-Project-scoped installations remain visible but read-only because their lifecycle commands must run from that project's working directory. Plugin configuration exposes schema metadata without returning current or default values. Non-secret scalar plugin settings can be set or deleted through write-only controls. Secret settings are presence-only and delete-only because OMP's CLI would otherwise expose a new secret through process arguments.
+Project-scoped lifecycle commands run from the selected workspace and use `--scope project`. Duplicate path installations that share one npm package identity remain read-only because OMP's lifecycle CLI addresses npm plugins by package name rather than installation path. Plugin configuration exposes schema metadata without returning current or default values. Non-secret scalar plugin settings can be set or deleted through write-only controls. Secret settings are presence-only and delete-only because OMP's CLI would otherwise expose a new secret through process arguments.
 
 The Configuration view links to the official OMP settings reference, value parsing and precedence guides, relevant category sections, and a small curated set of setting-specific anchors.
 
 
-## MCP tools and policy boundary
+## MCP tools, management, and policy boundary
 
 Configured MCP servers and Paseo's caller-scoped MCP tools are supported. The plugin discovers their schemas, assigns collision-safe OMP names, binds them before `session.ready`, forwards progress and terminal results, propagates cancellation, and renders calls with friendly labels.
 
+Use the **MCP** control beside the composer on an **OMP Plugin** agent to run OMP's native list, add, reload, test, authorize, enable, disable, resource, and prompt commands. The control is agent-scoped because OMP MCP discovery depends on both the active profile and the workspace directory. The global OMP sidebar remains a host-level health and settings surface; a separate workspace manager would duplicate OMP's own discovery and precedence rules.
+
+Command output, setup questions, and OAuth prompts appear in the agent timeline. OAuth URLs render as an interactive card and always retain the full provider authorization URL, never substituting OMP's daemon-local `/launch` shortcut. **Open in Paseo Browser** calls the current agent's caller-scoped `browser_new_tab` tool, so the authorization page becomes a browser tab in the same workspace; it requires Paseo tools to be injected into the agent, browser tools to be enabled, and a connected Paseo desktop browser host. **Open on this device** remains available when no browser host is connected. For a loopback callback to complete automatically, the chosen browser host must run on the daemon machine. Otherwise, finish authorization in either browser, copy the final redirect URL or authorization code, and submit it in the OMP authorization prompt. Tokens and refresh material are stored by OMP on the daemon (or its configured auth broker), never in the Paseo client or plugin timeline.
+
 Paseo's exact session `toolPolicy` preapproval grants are not equivalent to OMP's `set_host_tools` contract. The plugin cannot preserve that policy exactly, so any non-empty `toolPolicy` rejects session startup. It never converts exact grants into broader access. `disallowedTools` is separate: it controls only recognized native OMP built-ins and rejects unknown names.
 
 ## Credentials and environment

package/docs/core-provider-issue-audit.md

@@ -1,6 +1,6 @@
 # Core OMP provider issue audit
 
-This audit compares reports in `getpaseo/paseo` with the community `omp-plugin` provider. It was refreshed on 2026-09-12 from GitHub issue titles and bodies containing `OMP`, `oh-my-pi`, or `rpc-ui`, OMP-related pull requests, and materially equivalent Pi/RPC reports. GitHub Discussions were also inspected; the repository had no OMP-related discussion.
+This audit compares reports in `getpaseo/paseo` with the community `omp-plugin` provider. It was refreshed on 2026-09-18 from GitHub issue titles and bodies containing `OMP`, `oh-my-pi`, or `rpc-ui`, OMP-related pull requests, and materially equivalent Pi/RPC reports. GitHub Discussions were also inspected; the repository had no OMP-related discussion.
 
 Issue and pull-request pairs are consolidated by root cause. A closed upstream issue does not prove the plugin implements the behavior, and an open upstream issue does not imply the plugin is affected.
 
@@ -17,9 +17,10 @@ Status meanings:
 | --- | --- | --- |
 | [#3838](https://github.com/getpaseo/paseo/issues/3838), [PR #3839](https://github.com/getpaseo/paseo/pull/3839) | **Verified** | A dead OMP subprocess invalidates its generation. A later write lazily resumes the same native session. Process-tree cleanup, recovery, and registry replacement are covered. |
 | [#3252](https://github.com/getpaseo/paseo/issues/3252), equivalent Pi [#3496](https://github.com/getpaseo/paseo/issues/3496), [PR #3258](https://github.com/getpaseo/paseo/pull/3258) | **Verified** | Hidden and custom notices do not terminalize a turn before the native user echo and terminal evidence. |
-| [#2260](https://github.com/getpaseo/paseo/issues/2260), [PR #2261](https://github.com/getpaseo/paseo/pull/2261) | **Verified** | Incomplete or compacted `agent_end` frames use complete streamed `message_end` evidence only when it covers the declared message count. Streamed success and failure outcomes are preserved; missing or partial evidence still fails closed. |
+| [#2260](https://github.com/getpaseo/paseo/issues/2260), [PR #2261](https://github.com/getpaseo/paseo/pull/2261) | **Verified** | Incomplete or compacted `agent_end` frames use complete streamed `message_end` evidence or bounded history correlated by entry ID, with idle state confirmed before and after retrieval. Success, failure, native cancellation, and concurrent interrupts are preserved; missing, unavailable, non-correlatable, or conflicting terminal evidence fails closed with content-free count diagnostics. |
 | [#2281](https://github.com/getpaseo/paseo/issues/2281), [PR #2282](https://github.com/getpaseo/paseo/pull/2282) | **Verified** | Local-only prompt results and structured commands have explicit terminal ownership. |
 | [#3654](https://github.com/getpaseo/paseo/issues/3654), [#3998](https://github.com/getpaseo/paseo/issues/3998), [PR #3667](https://github.com/getpaseo/paseo/pull/3667) | **Verified** | Post-`agent_end` state reconciliation is bounded. Stale or unavailable `get_state` cannot leave a turn running forever. |
+| Upstream OMP [PR #12331](https://github.com/can1357/oh-my-pi/pull/12331) and released OMP 18.2.x unkeyed `agent_end` frames | **Mitigated** | Request-keyed terminals use exact matching. For released binaries that omit the key, the plugin accepts only ordered current-prompt evidence: a fresh branch-correlated user entry followed by assistant activity, confirmed native idle/non-compacting state, and no active permission, tool, steer, or child work. Active or pre-evidence stale candidates are ignored. Confirmed-idle ambiguity fails only the Paseo turn, not the OMP runtime. The remaining same-agent stale-event misattribution risk is explicit and bounded; waiting for the upstream protocol fix would make every later turn unusable on published releases. Client reconnects, including mobile reconnect grace, are host transport behavior and do not own the daemon-managed provider session. |
 | [#3999](https://github.com/getpaseo/paseo/issues/3999), [#4000](https://github.com/getpaseo/paseo/issues/4000), [#4039](https://github.com/getpaseo/paseo/issues/4039), [PR #3772](https://github.com/getpaseo/paseo/pull/3772), [PR #4217](https://github.com/getpaseo/paseo/pull/4217) | **Verified** | `prompt.steer` is negotiated and implemented with expected-turn checks, acknowledgement ordering, duplicate correlation, and interrupt/terminal race coverage. |
 | Shared RPC cancellation [#3540](https://github.com/getpaseo/paseo/issues/3540), Pi [#3749](https://github.com/getpaseo/paseo/issues/3749) | **Verified in provider** | Native abort, exactly-one terminal event, permission cleanup, descendant cleanup, and uncertain-cleanup quarantine are tested. UI keyboard delivery remains host-owned. |
 | [#3218](https://github.com/getpaseo/paseo/issues/3218) | **Verified at provider boundary** | Session close owns and awaits OMP process cleanup. Whether every archive UI route invokes provider close is a host concern. |

package/docs/installation.md

@@ -4,43 +4,61 @@ Paseo plugins are trusted, unsandboxed code. Review this plugin and its producti
 
 ## Requirements
 
-- Paseo daemon and apps: `^0.8.0`
+- Paseo daemon and apps: `>=0.8.0 <0.10.0`; `0.9.0-beta.1` is recommended
 - OMP: `18.1.15` or newer is the supported floor
 - OMP RPC: protocol v2 must negotiate successfully
 
 The first public build is an alpha. Alpha releases are compatibility previews and may require deleting and re-importing agents created by an earlier preview.
 
-## Install a release
+## Install or update from npm on Paseo 0.9
 
-Prefer a reviewed release tag over a moving branch:
+Paseo 0.9.0-beta.1 can acquire the published package and its production dependencies directly from npm on the daemon host:
+
+```bash
+paseo plugin install npm:@omercnet/paseo-omp@<version>
+paseo plugin ls paseo-omp
+```
+
+Check for the registry's current `latest` version and approve the proposed update, or select an exact version explicitly:
+
+```bash
+paseo plugin update paseo-omp
+paseo plugin update paseo-omp --version <new-version>
+```
+
+The daemon uses its own npm registry and authentication configuration. npm acquisition installs the artifact's production dependencies before preparation; because npm artifacts omit `package-lock.json`, the preparation helper leaves that tree unchanged. A Git checkout with the committed lockfile runs frozen `npm ci --omit=dev --ignore-scripts`. A failed download, preparation, compatibility check, or activation keeps the installed revision active. Paseo 0.8 does not support npm plugin sources; use a Git tag or local directory instead.
+
+## Install a Git release on Paseo 0.8 or 0.9
+
+Install the matching reviewed Git tag:
 
 ```bash
 paseo plugin add omercnet/paseo-plugins:paseo-omp --ref paseo-omp-v<version>
 paseo plugin ls paseo-omp
 ```
 
-A tag-pinned installation does not advance through `paseo plugin update`. To upgrade, record the current installation, then replace it with the new tag in one maintenance window:
+### Update a Git installation on Paseo 0.9
+
+An ordinary update reviews the remote repository's current default HEAD. To move directly to another reviewed tag or commit, select it explicitly:
 
 ```bash
-paseo plugin ls paseo-omp --json > paseo-omp-before-update.json
-paseo plugin remove paseo-omp
-paseo plugin add omercnet/paseo-plugins:paseo-omp --ref paseo-omp-v<new-version>
+paseo plugin update paseo-omp
+paseo plugin update paseo-omp --ref paseo-omp-v<new-version>
 ```
 
-Removal deletes plugin-scoped settings and briefly makes `omp-plugin` unavailable. It does not modify Paseo's bundled `omp` provider or native OMP transcripts. Roll back by repeating the remove/add sequence with the recorded tag or commit.
+The install-time `--ref` does not constrain later updates. Paseo 0.9 stages and validates the selected revision before replacing the active installation, so plugin settings remain intact and a failed update leaves the previous revision running.
 
-## Install a release archive
+### Update a tag-pinned Git installation on Paseo 0.8
 
-Release ZIPs contain the production dependency tree and install offline. Authenticate provenance before installation:
+Paseo 0.8 does not provide the 0.9 non-destructive explicit-ref update flow. Record the current installation, then replace it with the new tag in one maintenance window:
 
 ```bash
-gh attestation verify paseo-omp-v<version>.zip --repo omercnet/paseo-plugins
-sha256sum --check paseo-omp-v<version>.zip.sha256
-unzip paseo-omp-v<version>.zip
-paseo plugin install "$PWD/paseo-omp"
+paseo plugin ls paseo-omp --json > paseo-omp-before-update.json
+paseo plugin remove paseo-omp
+paseo plugin add omercnet/paseo-plugins:paseo-omp --ref paseo-omp-v<new-version>
 ```
 
-The checksum detects accidental corruption; the GitHub attestation authenticates the artifact.
+Removal deletes plugin-scoped settings and briefly makes `omp-plugin` unavailable. It does not modify Paseo's bundled `omp` provider or native OMP transcripts. Roll back by repeating the remove/add sequence with the recorded tag or commit.
 
 ## Install a local checkout
 
@@ -62,12 +80,10 @@ paseo plugin ls paseo-omp
 
 ## Track a branch
 
-Tracking `main` executes future dependency and plugin updates with the daemon user's privileges. Record the installed commit before each update:
+Tracking `main` executes future dependency and plugin updates with the daemon user's privileges:
 
 ```bash
 paseo plugin add omercnet/paseo-plugins:paseo-omp --ref main
-paseo plugin ls paseo-omp --json > paseo-omp-before-update.json
-paseo plugin update paseo-omp
 ```
 
-A failed Git build or incompatible update leaves the previous revision active. Remove and re-add the recorded commit to roll back.
+On Paseo 0.9, preview and approve the remote default HEAD with `paseo plugin update paseo-omp`, or select `main` explicitly with `paseo plugin update paseo-omp --ref main`. On Paseo 0.8, record the installed commit before its existing branch-update workflow. A failed build or compatibility check leaves the previous revision active.