@omercnet/paseo-omp 0.4.0-next.135.1 → 0.4.0-next.138.1

package/README.md

@@ -86,12 +86,12 @@ Provider functionality outside the capability flags is tracked separately:
 | Provider SDK surface | Completeness | Implementation |
 | --- | ---: | --- |
 | Registration metadata and sanitized SVG icon | **100%** | Stable `omp-plugin` identity, label, description, and bundled icon. |
-| Strict `providerOptionsSchema` | **100%** | Command, literal and names-only inherited environment, output-redaction mode, session directory, RPC timeout, and role-model options are validated and normalized. |
+| Strict `providerOptionsSchema` | **100%** | Command, literal environment, names-only profile inherited environment, output-redaction mode, session directory, RPC timeout, and role-model options are validated and normalized. Host-wide inherited names are separately persisted and merged at launch. |
 | Availability diagnostics | **100%** | Bounded checks distinguish missing, unrunnable, incompatible, and available OMP runtimes. |
-| Catalog cache identity | **100%** | Hash includes effective options, configured inherited-environment names, settings, scope, cwd, and default command, but never resolves or fingerprints inherited values. |
+| Catalog cache identity | **100%** | Hash includes effective options, merged host/profile inherited-environment names, settings, scope, cwd, and default command, but never resolves or fingerprints inherited values. |
 | Models, modes, and thinking catalog | **100%** | Native catalog is mapped to opaque public model IDs with committed defaults and permission-gated modes. |
 | Connection `send` / `onEvent` / `close` lifecycle | **100%** | Request correlation, multi-session ownership, process recovery, teardown, and provider reload/removal are covered. |
-| Session launch: cwd, env, system prompt, title, and persistence | **100%** | Complete launch configuration is bounded, validated, forwarded, and re-read on recovery; selected daemon environment values are resolved only when catalog and session children spawn. |
+| Session launch: cwd, env, system prompt, title, and persistence | **100%** | Complete launch configuration is bounded, validated, forwarded, and re-read on recovery; selected host and profile daemon environment values are resolved only when catalog and session children spawn. |
 | MCP server forwarding and host tools | **100%** | Configured MCP tools are discovered, namespaced, labeled, executed, canceled, and bounded. Caller-scoped Paseo orchestration tools retain their native names, such as `create_agent` and `list_profiles`, so OMP skills can invoke them directly. The MCP composer control delegates native server management to OMP instead of duplicating its profile and workspace precedence. Exact `toolPolicy` remains the separate 0% capability above. |
 | Denied native tools | **100%** | `disallowedTools` becomes an explicit OMP allow-list; unknown names fail closed. |
 | Commands and committed session state events | **100%** | Publishes `session.commands`, `session.opened`, `session.config`, `session.ready`, and request completion in protocol order. |
@@ -121,7 +121,7 @@ Install, update, disable, or remove `paseo-omp` independently of the bundled pro
 
 The plugin validates OMP protocol data and bounds public strings and structured values. It does not heuristically redact or rewrite content produced by native OMP, models, or tools. Do not put credentials in prompts or tool output, because that content may be published unchanged after validation and bounding.
 
-`providerOptions.outputRedaction` defaults to `none`, preserving native content subject to those bounds. `configured-values` provides best-effort literal replacement for explicitly supplied credential values and every non-empty daemon value selected through `inheritEnv`, regardless of its name. It does not detect generated secrets or encoded, transformed, or independently streamed fragments of configured values. Centralized Paseo policy is required when a deployment needs redaction guarantees.
+`providerOptions.outputRedaction` defaults to `none`, preserving native content subject to those bounds. `configured-values` provides best-effort literal replacement for explicitly supplied credential values and every non-empty daemon value selected through host or profile `inheritEnv`, regardless of its name. It does not detect generated secrets or encoded, transformed, or independently streamed fragments of configured values. Centralized Paseo policy is required when a deployment needs redaction guarantees.
 
 Unexpected or internal launch failures use fixed fallback messages rather than serializing the launch configuration. Explicit public validation errors may include caller-supplied configuration names or values. Deployments that require host-wide content redaction should implement it in a dedicated host or plugin layer rather than this protocol adapter.
 

package/client/omp-config-surface.tsx

@@ -63,6 +63,7 @@ import {
   summarizeProviderStatus,
   summarizeRpcUiSupport,
 } from "./provider-diagnostics-state";
+import { ProviderLaunchSettingsSection } from "./provider-launch-settings";
 import {
   refreshSupportReport,
   type SupportReportCopyState,
@@ -141,8 +142,10 @@ function ProviderSetupSection({ styles }: { styles: OmpConfigStyles }) {
   return (
     <SectionCard styles={styles} title="OMP Plugin">
       <Text style={styles.muted}>
-        Launch settings currently come from the active Paseo provider profile.
+        Host-wide inherited environment names apply to every OMP provider. Profile launch overrides
+        remain available for narrower exceptions.
       </Text>
+      <KeyValueRow styles={styles} label="Host policy" value="Inherited daemon environment names" />
       <KeyValueRow
         styles={styles}
         label="Per agent"
@@ -151,7 +154,7 @@ function ProviderSetupSection({ styles }: { styles: OmpConfigStyles }) {
       <KeyValueRow
         styles={styles}
         label="Provider profile"
-        value="Command, environment, session directory, RPC timeout, role models, and denied tools"
+        value="Command, additional environment, session directory, RPC timeout, role models, and denied tools"
       />
     </SectionCard>
   );
@@ -162,15 +165,15 @@ function PluginConfigurationSection({ styles }: { styles: OmpConfigStyles }) {
     <>
       <SectionCard styles={styles} title="OMP Plugin launch options">
         <Text style={styles.muted}>
-          Paseo does not expose the effective providerOptions for active launches through the plugin
-          API. Configure these values in the provider profile; this tab documents the supported
-          contract without claiming defaults are active.
+          Configure inherited daemon environment names below. Paseo does not expose effective
+          profile options for active launches, so this tab documents profile overrides without
+          claiming they are active.
         </Text>
         <KeyValueRow styles={styles} label="Command" value="Executable and argument prefix" />
         <KeyValueRow
           styles={styles}
           label="Inherited environment"
-          value="Daemon variable names copied at OMP spawn time"
+          value="Additional profile names copied at OMP spawn time"
         />
         <KeyValueRow
           styles={styles}
@@ -1125,7 +1128,12 @@ function OmpConfigContent({
         </>
       ) : null}
 
-      {view === "plugin" ? <PluginConfigurationSection styles={styles} /> : null}
+      {view === "plugin" ? (
+        <>
+          <PluginConfigurationSection styles={styles} />
+          {!cwd ? <ProviderLaunchSettingsSection theme={theme} /> : null}
+        </>
+      ) : null}
 
       {view === "plugins" ? (
         <OmpPluginManagerSection theme={theme} compact={layout.compact} cwd={cwd} store={store} />

package/client/provider-launch-settings.tsx

@@ -0,0 +1,118 @@
+import { type PluginSurfaceProps, type SettingsState, useSettings } from "@getpaseo/plugin/client";
+import {
+  SettingsAction,
+  SettingsCard,
+  SettingsInput,
+  SettingsSection,
+} from "@getpaseo/plugin/client/ui";
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { Text, View } from "react-native";
+import {
+  providerLaunchSettings,
+  providerLaunchSettingsSchema,
+} from "../shared/provider-launch-settings";
+
+type ReadySettings = Extract<
+  SettingsState<typeof providerLaunchSettings.schema>,
+  { status: "ready" }
+>;
+
+function ProviderLaunchSettingsControls({ settings }: { settings: ReadySettings }) {
+  const savedNames = settings.values.inheritEnv.join(", ");
+  const [rawNames, setRawNames] = useState(() => savedNames);
+  useEffect(() => {
+    setRawNames(savedNames);
+  }, [savedNames]);
+  const inheritEnv = [
+    ...new Set(
+      rawNames
+        .split(",")
+        .map((name) => name.trim())
+        .filter(Boolean),
+    ),
+  ];
+  const next = providerLaunchSettingsSchema.safeParse({ inheritEnv });
+  const error = next.success
+    ? null
+    : (next.error.issues[0]?.message ?? "Enter valid variable names.");
+  const save = useCallback(async () => {
+    if (!next.success) return;
+    await settings.save(next.data, settings.revision);
+  }, [next, settings]);
+
+  return (
+    <View style={{ gap: 12 }}>
+      <SettingsSection
+        title="Inherited environment"
+        info="Applies to every OMP Plugin agent on this host. Names are stored, but values are read only from the daemon environment when OMP starts."
+      >
+        <SettingsCard>
+          <SettingsInput
+            key={savedNames}
+            label="Daemon variable names"
+            hint="Comma-separated names. Each selected value is available to OMP and its child processes."
+            initialValue={savedNames}
+            onChangeText={setRawNames}
+            placeholder="ACME_OMP_API_KEY, ACME_OMP_URL"
+            error={error ?? undefined}
+            disabled={settings.saving}
+          />
+          <SettingsAction
+            label="Save inherited environment"
+            hint="Profile-specific names remain additive for narrow exceptions."
+            actionLabel="Save"
+            disabled={settings.saving || rawNames === savedNames || !next.success}
+            onPress={() => void save()}
+          />
+          <SettingsAction
+            label="Clear inherited environment"
+            actionLabel="Clear"
+            disabled={settings.saving || settings.values.inheritEnv.length === 0}
+            onPress={async () => {
+              if (await settings.save({ inheritEnv: [] }, settings.revision)) setRawNames("");
+            }}
+          />
+          {settings.saveError ? (
+            <SettingsAction
+              label="Reload host launch settings"
+              error={settings.saveError}
+              actionLabel="Reload"
+              disabled={settings.saving}
+              onPress={settings.reload}
+            />
+          ) : null}
+        </SettingsCard>
+      </SettingsSection>
+    </View>
+  );
+}
+
+export function ProviderLaunchSettingsSection({ theme }: { theme: PluginSurfaceProps["theme"] }) {
+  const settings = useSettings(providerLaunchSettings);
+  const styles = useMemo(
+    () => ({
+      root: { gap: 12 },
+      text: { color: theme.colors.foreground },
+      error: { color: theme.colors.statusDanger },
+    }),
+    [theme],
+  );
+
+  if (settings.status === "loading")
+    return <Text style={styles.text}>Loading host launch settings…</Text>;
+  if (settings.status !== "ready") {
+    return (
+      <View style={styles.root}>
+        <Text accessibilityRole="alert" style={styles.error}>
+          {settings.error}
+        </Text>
+        <SettingsAction
+          label="Read host launch settings again"
+          actionLabel="Reload"
+          onPress={settings.reload}
+        />
+      </View>
+    );
+  }
+  return <ProviderLaunchSettingsControls settings={settings} />;
+}

package/index.server.ts

@@ -24,6 +24,7 @@ import {
   discoverOmpProfilesSync,
 } from "./server/provider/profile-providers";
 import { createOmpProvider } from "./server/provider/registration";
+import { OmpPublicError } from "./server/provider/security";
 import { resolveGetOmpProviderHealth } from "./server/provider-diagnostics";
 import { resolveListOmpQuotas } from "./server/quota";
 import { resolveListOmpSessions } from "./server/sessions";
@@ -43,6 +44,7 @@ import {
 import { listOmpSettings, updateOmpSettings } from "./shared/omp-settings";
 import { listOmpStores, type OmpStore } from "./shared/omp-store";
 import { getOmpProviderHealth } from "./shared/provider-diagnostics";
+import { providerLaunchSettings } from "./shared/provider-launch-settings";
 import { listOmpQuotas } from "./shared/quota";
 import { listOmpSessions } from "./shared/sessions";
 import { getOmpSupportReport } from "./shared/support-diagnostics";
@@ -53,6 +55,12 @@ function scoped<T extends { store?: OmpStore }, R>(handler: (input: T) => R) {
 
 export default function contribute(server: PluginServerContext) {
   server.registerSettings(composerPillSettings);
+  const launchSettings = server.registerSettings(providerLaunchSettings);
+  const resolveHostInheritEnv = async (): Promise<readonly string[]> => {
+    const current = await launchSettings.read();
+    if (current.status === "ready") return current.values.inheritEnv;
+    throw new OmpPublicError("OMP host launch settings are unavailable");
+  };
   const browserAuthorizationRegistry = new OmpBrowserAuthorizationRegistry();
   const protocolViolations = new OmpProtocolViolationCollector();
   const operationalFailures = new OmpOperationalFailureCollector();
@@ -64,6 +72,7 @@ export default function contribute(server: PluginServerContext) {
         browserAuthorizationRegistry,
         reportProtocolViolation: protocolViolations.report,
         reportOperationalFailure: operationalFailures.report,
+        resolveHostInheritEnv,
       }),
     );
   }
@@ -97,6 +106,7 @@ export default function contribute(server: PluginServerContext) {
       browserAuthorizationRegistry,
       reportProtocolViolation: protocolViolations.report,
       reportOperationalFailure: operationalFailures.report,
+      resolveHostInheritEnv,
     }),
   );
   return () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omercnet/paseo-omp",
-  "version": "0.4.0-next.135.1",
+  "version": "0.4.0-next.138.1",
   "type": "module",
   "description": "Paseo integration for OMP, including its direct provider and workspace tooling.",
   "license": "MIT",

package/server/package-version.ts

@@ -1,2 +1,2 @@
 /** Release Please keeps this bundle-safe constant aligned with package.json. */
-export const PASEO_OMP_PACKAGE_VERSION = "0.4.0-next.135.1"; // x-release-please-version
+export const PASEO_OMP_PACKAGE_VERSION = "0.4.0-next.138.1"; // x-release-please-version

package/server/provider/config-normalization.ts

@@ -9,6 +9,7 @@ type ProviderCatalogOptionsCompat = {
   settings?: Readonly<Record<string, unknown>>;
 };
 
+import { MAX_INHERITED_ENVIRONMENT_NAMES } from "../../shared/provider-launch-settings";
 import { parseOmpProviderOptions } from "./provider-options";
 import { OmpPublicError } from "./security";
 import { OmpModeSchema } from "./settings";
@@ -59,11 +60,24 @@ function allowedOmpTools(deniedTools: readonly string[] | undefined): string[] |
 
 export type NormalizedOmpStartOptions = Omit<OmpStartOptions, "environment" | "signal">;
 export type OmpRecoveryOptions = Omit<OmpStartOptions, "resumeSessionId" | "signal">;
+export function mergeOmpInheritedEnvironmentNames(
+  hostNames: readonly string[],
+  profileNames: readonly string[] | undefined,
+): string[] | undefined {
+  const names = [...new Set([...hostNames, ...(profileNames ?? [])])];
+  if (names.length > MAX_INHERITED_ENVIRONMENT_NAMES) {
+    throw new OmpPublicError("OMP inherited environment has too many entries");
+  }
+  return names.length > 0 ? names : undefined;
+}
+
 export function normalizeOmpCatalogOptions(
   options: ProviderCatalogOptionsCompat,
   cwd: string,
+  hostInheritEnv: readonly string[] = [],
 ): Omit<OmpStartOptions, "environment" | "signal"> {
   const providerOptions = parseOmpProviderOptions(options.providerOptions);
+  const inheritEnv = mergeOmpInheritedEnvironmentNames(hostInheritEnv, providerOptions.inheritEnv);
   const params = providerOptions.params ?? {};
   return {
     cwd,
@@ -71,7 +85,7 @@ export function normalizeOmpCatalogOptions(
     noSession: true,
     ...(providerOptions.command ? { command: providerOptions.command } : {}),
     ...(providerOptions.env ? { env: providerOptions.env } : {}),
-    ...(providerOptions.inheritEnv ? { inheritEnv: providerOptions.inheritEnv } : {}),
+    ...(inheritEnv ? { inheritEnv } : {}),
     outputRedaction: providerOptions.outputRedaction,
     ...(params.sessionDir ? { sessionDir: params.sessionDir } : {}),
     ...(params.rpcTimeoutMs
@@ -103,6 +117,7 @@ export function withCommittedOmpSelection(
 export function normalizeOmpSessionConfig(
   config: ProviderSessionConfig,
   permissionSupported = false,
+  hostInheritEnv: readonly string[] = [],
 ): NormalizedOmpStartOptions {
   if (Object.keys(config.settings).length > 0) {
     throw new OmpPublicError("OMP does not expose live provider settings");
@@ -122,11 +137,12 @@ export function normalizeOmpSessionConfig(
   const tools = allowedOmpTools(deniedTools);
   const params = options.params ?? {};
   const env = { ...options.env, ...config.env };
+  const inheritEnv = mergeOmpInheritedEnvironmentNames(hostInheritEnv, options.inheritEnv);
   return {
     cwd: config.cwd,
     ...(options.command ? { command: options.command } : {}),
     ...(Object.keys(env).length > 0 ? { env } : {}),
-    ...(options.inheritEnv ? { inheritEnv: options.inheritEnv } : {}),
+    ...(inheritEnv ? { inheritEnv } : {}),
     outputRedaction: options.outputRedaction,
     mode: parsedMode.data,
     thinkingOption: config.thinkingOption,

package/server/provider/connection.ts

@@ -715,6 +715,7 @@ export function createOmpConnection(
   reportDiagnostic: (diagnostic: OmpConnectionDiagnostic) => void = (diagnostic) =>
     console.error("OMP provider failure", diagnostic),
   reportOperationalFailure: OmpOperationalFailureReporter = () => {},
+  resolveHostInheritEnv?: () => Promise<readonly string[]>,
 ): ProviderConnection {
   const errorDetails = (error: unknown, fallback: string): { message: string } => {
     if (isOmpPublicError(error)) return { message: error.message };
@@ -822,6 +823,7 @@ export function createOmpConnection(
               settings: configuredInput.settings,
             },
             input.cwd ?? homedir(),
+            (await resolveHostInheritEnv?.()) ?? [],
           );
           const catalog = await discoverOmpCatalog(
             runtime,
@@ -968,6 +970,7 @@ export function createOmpConnection(
             mcpConnector,
             mcpInitializationTimeoutMs,
             reportOperationalFailure,
+            (await resolveHostInheritEnv?.()) ?? [],
           );
           const discoveredNativeSessionId = session.persistenceSessionId;
           if (discoveredNativeSessionId) nativeSessionId = discoveredNativeSessionId;

package/server/provider/registration.ts

@@ -5,6 +5,7 @@ import { z } from "zod";
 import type { OmpBrowserAuthorizationRegistry } from "../mcp-browser";
 import type { OmpOperationalFailureReporter } from "../operational-failure-diagnostics";
 import { probeOmpAvailability } from "../provider-diagnostics";
+import { mergeOmpInheritedEnvironmentNames } from "./config-normalization";
 import { createOmpConnection, OmpNativeSessionReservations } from "./connection";
 import type { OmpMcpConnector } from "./host-tools";
 import { OmpRpcRuntime, type OmpRuntime } from "./omp-rpc";
@@ -74,6 +75,7 @@ export interface OmpProviderOptions {
     options: ProviderCatalogOptionsCompat,
     timeoutMs: number | undefined,
   ) => Promise<ProviderAvailabilityCompat>;
+  resolveHostInheritEnv?: () => Promise<readonly string[]>;
 }
 
 function stableJson(value: unknown): string {
@@ -104,6 +106,10 @@ export function createOmpProvider(options: OmpProviderOptions = {}): ProviderReg
     providerOptionsSchema: OmpProviderOptionsSchema,
     async getCatalogCacheKey(catalogOptions) {
       const providerOptions = parseOmpProviderOptions(catalogOptions.providerOptions);
+      const inheritEnv = mergeOmpInheritedEnvironmentNames(
+        (await options.resolveHostInheritEnv?.()) ?? [],
+        providerOptions.inheritEnv,
+      );
       // Profile providers cannot safely hash explicit environment values because they may be
       // credentials. Disable sharing for that case; otherwise retain every normalized option
       // that can change discovery alongside the fixed, non-secret store identity.
@@ -112,7 +118,7 @@ export function createOmpProvider(options: OmpProviderOptions = {}): ProviderReg
         scope: catalogOptions.scope,
         ...(catalogOptions.scope === "workspace" ? { cwd: catalogOptions.cwd } : {}),
         ...(options.catalogIdentity ? { store: options.catalogIdentity } : {}),
-        providerOptions,
+        providerOptions: { ...providerOptions, ...(inheritEnv ? { inheritEnv } : {}) },
         settings: catalogOptions.settings ?? {},
         defaultCommand: (options.environment ?? process.env).OMP_COMMAND ?? "omp",
       };
@@ -167,6 +173,7 @@ export function createOmpProvider(options: OmpProviderOptions = {}): ProviderReg
         options.browserAuthorizationRegistry,
         undefined,
         options.reportOperationalFailure,
+        options.resolveHostInheritEnv,
       );
     },
   };

package/server/provider/session.ts

@@ -451,6 +451,7 @@ export class OmpProviderSession {
     mcpConnector?: OmpMcpConnector,
     mcpInitializationTimeoutMs?: number,
     reportOperationalFailure: OmpOperationalFailureReporter = () => {},
+    hostInheritEnv: readonly string[] = [],
   ): Promise<OmpProviderSession> {
     const resumeSessionId = ompPersistenceSessionId(input);
     if (resumeSessionId && !input.config.persist) {
@@ -466,6 +467,7 @@ export class OmpProviderSession {
     const normalizedConfig = normalizeOmpSessionConfig(
       effectiveConfig,
       capabilities.includes("permission"),
+      hostInheritEnv,
     );
     const configuredRedactionValues = configuredOutputRedactionValues(
       normalizedConfig.outputRedaction ?? "none",

package/server/provider/settings.ts

@@ -1,11 +1,14 @@
 import { z } from "zod";
+import {
+  environmentNameSchema,
+  MAX_INHERITED_ENVIRONMENT_NAMES,
+} from "../../shared/provider-launch-settings";
 
 const MAX_COMMAND_PARTS = 64;
-const MAX_ENV_ENTRIES = 256;
-const MAX_TEXT_BYTES = 64 * 1024;
-const MAX_MODEL_SELECTOR_BYTES = 513;
 const MAX_PATH_BYTES = 4_096;
 const MAX_RPC_TIMEOUT_MS = 10 * 60 * 1_000;
+const MAX_TEXT_BYTES = 64 * 1024;
+const MAX_MODEL_SELECTOR_BYTES = 513;
 
 function boundedString(maxBytes: number) {
   return z
@@ -18,7 +21,7 @@ const CommandPartSchema = boundedString(MAX_PATH_BYTES).refine(
   (value) => !value.includes("\0") && !/[\r\n]/u.test(value),
   "command arguments cannot contain NUL or line breaks",
 );
-const EnvironmentNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,127}$/u);
+const EnvironmentNameSchema = environmentNameSchema;
 const EnvironmentValueSchema = z
   .string()
   .refine((value) => Buffer.byteLength(value, "utf8") <= MAX_TEXT_BYTES && !value.includes("\0"));
@@ -63,7 +66,7 @@ export const OmpProviderOptionsSchema = z
       .optional(),
     inheritEnv: z
       .array(EnvironmentNameSchema)
-      .max(MAX_ENV_ENTRIES)
+      .max(MAX_INHERITED_ENVIRONMENT_NAMES)
       .describe("Daemon environment variable names copied at OMP spawn time")
       .optional(),
     outputRedaction: OmpOutputRedactionSchema.describe(

package/shared/provider-launch-settings.ts

@@ -0,0 +1,18 @@
+import { defineSettings } from "@getpaseo/plugin";
+import { z } from "zod";
+
+export const MAX_INHERITED_ENVIRONMENT_NAMES = 256;
+export const environmentNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,127}$/u);
+
+export const providerLaunchSettingsSchema = z.object({
+  inheritEnv: z.array(environmentNameSchema).max(MAX_INHERITED_ENVIRONMENT_NAMES).default([]),
+});
+
+export type ProviderLaunchSettings = z.infer<typeof providerLaunchSettingsSchema>;
+
+export const providerLaunchSettings = defineSettings({
+  id: "provider-launch",
+  scope: "host",
+  version: 1,
+  schema: providerLaunchSettingsSchema,
+});