@omercnet/paseo-omp 1.0.3 → 1.1.0-next.197.1

package/README.md

@@ -24,7 +24,7 @@ before capture.
 
 ## Quick start
 
-Requirements: Paseo `^0.9.2 || ^0.10.0-beta.1`, OMP `18.1.15` or newer, and OMP RPC protocol v2. Paseo 0.9.2 is required for reliable plugin-provider request failure containment, reload cleanup, and daemon shutdown ordering; 0.10.0-beta.1 is verified against the same public plugin contracts.
+Requirements: Paseo `^0.9.2 || ^0.10.0`, OMP `18.1.15` or newer, and OMP RPC protocol v2. Paseo 0.9.2 is required for reliable plugin-provider request failure containment, reload cleanup, and daemon shutdown ordering; 0.10.1 is verified against the same public plugin contracts.
 
 ```bash
 paseo plugin install npm:@omercnet/paseo-omp@<version>
@@ -40,7 +40,7 @@ Open the **OMP** sidebar to review the provider-profile contract, choose which c
 - [Core-provider issue and parity audit](docs/core-provider-issue-audit.md)
 - [Alpha release checklist](docs/alpha-release-checklist.md)
 
-The plugin uses public Paseo 0.9 and 0.10 beta provider and client contracts and registers distinct `omp-plugin` and `omp-plugin-<profile>` identities; it does not modify the bundled `omp` provider.
+The plugin uses public Paseo 0.9 and 0.10 provider and client contracts and registers distinct `omp-plugin` and `omp-plugin-<profile>` identities; it does not modify the bundled `omp` provider.
 
 ## Named OMP profiles
 
@@ -54,7 +54,7 @@ Profile selection is request-local: concurrent clients cannot change each other'
 
 ## Paseo provider SDK coverage
 
-This matrix inventories the complete capability set exported by the pinned `@getpaseo/plugin` 0.9.2 provider SDK. Paseo 0.10.0-beta.1 preserves that public provider surface; compatibility is checked nightly against both SDK channels. It measures strict SDK surface coverage, not general product quality.
+This matrix inventories the complete capability set exported by the pinned `@getpaseo/plugin` 0.10.1 provider SDK, whose public provider surface is unchanged since 0.9.0; compatibility is checked nightly against the 0.9, 0.10, and latest SDK channels. It measures strict SDK surface coverage, not general product quality.
 
 **Current capability completeness: 61.8%.** The provider advertises 11 of 17 capabilities (64.7%); ten are complete and `session.configure` is partial.
 
@@ -117,7 +117,7 @@ Existing agents whose provider is `omp` remain owned by the bundled provider. Ne
 
 OMP `18.1.15` is the oldest version tested end to end. The direct provider's hard compatibility gate is `rpc-ui` protocol v2: metadata-free legacy ready frames and v1-only runtimes are rejected before a provider session opens because they cannot support the advertised persistence and conversation-rewind capabilities. Typed tool approvals remain capability-gated and fall back as described above. For terminal completion, a matching `agent_end.requestId` is authoritative and mismatches are ignored before state changes. Released OMP 18.2.x builds that omit that field use an ordered fallback requiring a fresh correlated native user entry followed by current-turn assistant activity, an idle non-compacting runtime, and no conflicting permission, tool, steer, or child-session work. Ambiguous events while OMP is active are ignored; unresolved ambiguity after confirmed idle fails only the Paseo turn. This trades a bounded residual same-agent stale-event risk for compatibility with released OMP instead of terminating and lazily restarting the runtime after every later prompt. Paseo clients, including mobile clients inside reconnect grace, do not own or terminate the daemon-managed OMP session.
 
-Paseo 0.9.2 is the minimum supported stable release, and 0.10.0-beta.1 is supported as a prerelease. The controlled Docker canary remains pinned to official 0.9.2; nightly SDK checks cover both 0.9 latest and the 0.10 beta. The canary preserves nested provider-subagent ancestry and spawning-tool links, and validates npm-managed plugin sources, platform-owned external URL opening, and whole-item timeline transforms before Overview grouping.
+Paseo 0.9.2 is the minimum supported stable release, and 0.10.1 is supported. The controlled Docker canary remains pinned to official 0.9.2; nightly SDK checks cover the newest 0.9, 0.10, and latest releases. The canary preserves nested provider-subagent ancestry and spawning-tool links, and validates npm-managed plugin sources, platform-owned external URL opening, and whole-item timeline transforms before Overview grouping.
 
 Install, update, disable, or remove `paseo-omp` independently of the bundled provider. Verify the provider snapshot contains `omp-plugin` after installation; a bundled `omp` entry may remain present and is not modified by this plugin.
 
@@ -133,7 +133,7 @@ Unexpected or internal launch failures use fixed fallback messages rather than s
 
 The repeatable Docker canary and every validation command are documented in [TESTING.md](TESTING.md). It covers discovery, modes, text, images, tools, MCP, permissions, steering, interruption, persistence, host-wide and scoped session listing, import, resume, subagents, Hub, usage, plugin RPCs, and conversation rewind.
 
-Use `canary-mock/Deterministic Canary` for assertions. The optional local Ollama model is exploratory and nondeterministic.
+Use `Deterministic Canary` for picker-label assertions. The optional local Ollama model is exploratory and nondeterministic.
 
 ## Support
 

package/client/memory-panel.tsx

@@ -23,7 +23,7 @@ export function OmpMemoryPanel({ theme, layout, workspaceId }: PluginWorkspacePa
   const styles = useMemo(
     () => ({
       root: {
-        flex: 1,
+        flexGrow: 1,
         gap: layout.compact ? 10 : 14,
         padding: layout.compact ? 16 : 24,
         backgroundColor: theme.colors.surface0,
@@ -52,16 +52,17 @@ export function OmpMemoryPanel({ theme, layout, workspaceId }: PluginWorkspacePa
   return (
     <ScrollView contentContainerStyle={styles.root}>
       <View style={{ gap: 4 }}>
-        <Text style={styles.title}>OMP Memory</Text>
+        <Text style={styles.title}>Local Mnemopi Memory</Text>
+        <Text style={styles.subtitle}>Shows local facts only.</Text>
         <Text style={styles.subtitle}>
-          {memory.data?.bank ? `Bank: ${memory.data.bank}` : "Retained workspace facts"}
+          {memory.data?.bank ? `Local bank: ${memory.data.bank}` : "Local Mnemopi workspace facts"}
         </Text>
       </View>
       <OmpStorePicker theme={theme} store={store} onChange={setStore} />
-      {memory.isLoading ? <Text style={styles.subtitle}>Loading retained facts…</Text> : null}
-      {memory.error ? <Text style={styles.error}>Could not read workspace memory.</Text> : null}
+      {memory.isLoading ? <Text style={styles.subtitle}>Loading local Mnemopi facts…</Text> : null}
+      {memory.error ? <Text style={styles.error}>Could not read local Mnemopi facts.</Text> : null}
       {!memory.isLoading && !memory.error && (memory.data?.facts.length ?? 0) === 0 ? (
-        <Text style={styles.subtitle}>No retained facts for this workspace.</Text>
+        <Text style={styles.subtitle}>No local Mnemopi facts for this workspace.</Text>
       ) : null}
       {memory.data?.facts.map((fact) => (
         <View key={fact.id} style={styles.card}>

package/client/memory-popover.tsx

@@ -43,21 +43,23 @@ export function MemoryPopover(props: PluginButtonContentProps) {
     [layout.compact, theme],
   );
 
-  if (memory.isLoading) return <Text style={styles.muted}>Loading retained facts…</Text>;
-  if (memory.error) return <Text style={styles.error}>Could not read workspace memory.</Text>;
-
   const facts = memory.data?.facts ?? [];
-  if (facts.length === 0) {
-    return <Text style={styles.muted}>No retained facts for this workspace.</Text>;
-  }
 
   return (
     <View style={styles.root}>
       <View style={styles.header}>
-        <Text style={styles.title}>OMP Memory · {storeLabel(store)}</Text>
+        <Text style={styles.title}>Local Mnemopi · {storeLabel(store)}</Text>
         <Text style={styles.muted}>{facts.length} facts</Text>
       </View>
-      <Text style={styles.muted}>{memory.data?.bank ?? "Workspace memory"}</Text>
+      <Text style={styles.muted}>Shows local facts only.</Text>
+      {memory.isLoading ? <Text style={styles.muted}>Loading local Mnemopi facts…</Text> : null}
+      {memory.error ? <Text style={styles.error}>Could not read local Mnemopi facts.</Text> : null}
+      {!memory.isLoading && !memory.error && facts.length === 0 ? (
+        <Text style={styles.muted}>No local Mnemopi facts for this workspace.</Text>
+      ) : null}
+      {!memory.isLoading && !memory.error && memory.data?.bank ? (
+        <Text style={styles.muted}>{memory.data.bank}</Text>
+      ) : null}
       {facts.slice(0, PREVIEW_LIMIT).map((fact) => (
         <View key={fact.id} style={styles.card}>
           <Text style={styles.fact}>{`${fact.subject} ${fact.predicate} ${fact.object}`}</Text>

package/client/omp-config-styles.ts

@@ -70,7 +70,7 @@ export function useConfigStyles(
   return useMemo(
     () => ({
       root: {
-        flex: 1,
+        flexGrow: 1,
         gap: compact ? 10 : 14,
         padding: compact ? 16 : 24,
         backgroundColor: theme.colors.surface0,

package/index.client.tsx

@@ -133,7 +133,7 @@ export default function contribute(client: PluginClientContext) {
   });
   const removeOpenMemory = client.addCommandCenterItem({
     id: "open-memory",
-    title: "Open OMP Memory",
+    title: "Open local memory",
     icon: "Brain",
     keywords: ["omp", "memory", "facts", "recall"],
     context: "workspace",
@@ -245,7 +245,7 @@ export default function contribute(client: PluginClientContext) {
         workspaceId: entry.workspaceId,
         agentId: agent.id,
         button: {
-          title: "OMP workspace memory",
+          title: "Local memory",
           icon: "Brain",
           label: "Memory",
           behavior: { kind: "popover", Content: MemoryPopover },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omercnet/paseo-omp",
-  "version": "1.0.3",
+  "version": "1.1.0-next.197.1",
   "type": "module",
   "description": "Paseo integration for OMP, including its direct provider and workspace tooling.",
   "license": "MIT",
@@ -51,16 +51,16 @@
     "typecheck": "tsc --noEmit -p tsconfig.client.json && tsc --noEmit -p tsconfig.server.json && tsc --noEmit -p tsconfig.tests.json"
   },
   "dependencies": {
-    "@getpaseo/protocol": "0.9.2",
+    "@getpaseo/protocol": "0.10.1",
     "@modelcontextprotocol/sdk": "1.30.0",
     "yaml": "^2.9.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.10",
-    "@getpaseo/cli": "0.9.2",
-    "@getpaseo/client": "0.9.2",
-    "@getpaseo/plugin": "0.9.2",
-    "@getpaseo/server": "0.9.2",
+    "@getpaseo/cli": "0.10.1",
+    "@getpaseo/client": "0.10.1",
+    "@getpaseo/plugin": "0.10.1",
+    "@getpaseo/server": "0.10.1",
     "@oh-my-pi/pi-agent-core": "18.2.0",
     "@oh-my-pi/pi-coding-agent": "18.2.0",
     "@tanstack/react-query": "^5.102.3",
@@ -68,9 +68,9 @@
     "@types/react": "^19.2.18",
     "@vitest/coverage-v8": "^5.0.0",
     "esbuild": "0.28.2",
+    "pino": "10.3.1",
     "react": "19.1.0",
     "react-native": "0.81.5",
-    "pino": "10.3.1",
     "tsx": "^4.20.6",
     "typescript": "^7.0.2",
     "vitest": "^5.0.0",

package/paseo-plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "paseo-omp",
   "description": "Paseo integration for OMP, including its direct provider and workspace tooling.",
-  "requirements": { "paseo": "^0.9.2 || ^0.10.0-beta.1" },
+  "requirements": { "paseo": "^0.9.2 || ^0.10.0" },
   "build": [["node", "scripts/prepare-dependencies.mjs"]]
 }

package/server/package-version.ts

@@ -1,2 +1,2 @@
 /** Release Please keeps this bundle-safe constant aligned with package.json. */
-export const PASEO_OMP_PACKAGE_VERSION = "1.0.3"; // x-release-please-version
+export const PASEO_OMP_PACKAGE_VERSION = "1.1.0-next.197.1"; // x-release-please-version

package/server/provider/catalog.ts

@@ -109,7 +109,7 @@ export function mapOmpModels(
     const name = model.name ? serializer.text(model.name, 256) : modelId;
     return {
       id,
-      label: `${provider}/${name}`,
+      label: name,
       description: `${provider}/${modelId}`,
       ...(typeof model.contextWindow === "number"
         ? { contextWindowMaxTokens: model.contextWindow }

package/server/provider/omp-rpc-environment.ts

@@ -33,6 +33,8 @@ export interface OmpStartOptions {
   requestTimeoutMs?: number;
   /** Resume this exact native OMP session; never use this to start a new conversation. */
   resumeSessionId?: string;
+  /** Authorized transcript of `resumeSessionId`; when set, OMP resumes this file directly. */
+  resumeSessionFile?: string;
   noSession?: boolean;
   signal?: AbortSignal;
 }
@@ -340,7 +342,12 @@ export function buildOmpSpawnRequest(
       validateBoundedText(options.sessionDir, "session directory", MAX_PATH_LENGTH),
     );
   }
-  if (options.resumeSessionId !== undefined) {
+  if (options.resumeSessionFile !== undefined) {
+    // OMP opens an absolute .jsonl directly, skipping its id lookup and global fallback.
+    const file = validateBoundedText(options.resumeSessionFile, "session file", MAX_PATH_LENGTH);
+    if (!isAbsolute(file) || !file.endsWith(".jsonl")) throw new Error("Invalid OMP session file");
+    args.push("--resume", file);
+  } else if (options.resumeSessionId !== undefined) {
     args.push("--resume", validateNativeSessionId(options.resumeSessionId));
   }
   if (options.noSession) args.push("--no-session");

package/server/provider/omp-rpc-transport.ts

@@ -12,6 +12,7 @@ import {
   type ProcessTreeCleanup,
   stopWindowsTree,
   terminatePosixProcessTree,
+  waitMs,
 } from "./omp-rpc-process";
 import {
   createOptionalMetadataSanitizer,
@@ -56,7 +57,10 @@ import {
   sanitizeHistoryResponseData,
   sanitizeLiveDisplayFrame,
 } from "./omp-rpc-protocol";
-import { boundedJsonBytes, OmpPublicError, utf8Bytes } from "./security";
+import { boundedJsonBytes, OmpCleanupFailure, OmpPublicError, utf8Bytes } from "./security";
+
+// Unverified close keeps the native session quarantined; these retries let a slow exit clear it.
+const TREE_CLEANUP_RETRY_DELAYS_MS = [500, 1_000, 2_000, 4_000];
 
 type TimerHandle = number | NodeJS.Timeout;
 type SpawnProcess = (request: OmpSpawnRequest) => ChildProcessWithoutNullStreams;
@@ -483,7 +487,12 @@ export class OmpRpcProcess {
       }
     }
     const cleanup = await cleanupPromise;
-    if (cleanup !== "verified") throw new Error("OMP RPC process tree cleanup failed");
+    if (cleanup !== "verified") {
+      throw new OmpCleanupFailure(
+        "OMP RPC process tree cleanup failed",
+        this.reverifyTreeCleanup(),
+      );
+    }
     if (process.platform === "win32" && !this.exited) {
       try {
         this.child.stdin.end();
@@ -496,8 +505,28 @@ export class OmpRpcProcess {
       !this.exited &&
       !(await this.waitForExit(PROCESS_STOP_TIMEOUT_MS))
     ) {
-      throw new Error("OMP RPC process did not close after tree cleanup");
+      throw new OmpCleanupFailure(
+        "OMP RPC process did not close after tree cleanup",
+        this.reverifyTreeCleanup(),
+      );
+    }
+  }
+
+  private async reverifyTreeCleanup(): Promise<void> {
+    const pid = this.child.pid;
+    if (pid !== undefined) {
+      for (const delayMs of TREE_CLEANUP_RETRY_DELAYS_MS) {
+        await waitMs(delayMs);
+        const outcome = await this.terminateProcessTree(pid).catch(() => "failed");
+        if (
+          outcome === "verified" &&
+          (this.exited || (await this.waitForExit(PROCESS_STOP_TIMEOUT_MS)))
+        ) {
+          return;
+        }
+      }
     }
+    throw new Error("OMP RPC process tree cleanup is unverified");
   }
 
   private startTreeCleanup(): Promise<ProcessTreeCleanup> {

package/server/provider/omp-rpc.ts

@@ -159,6 +159,13 @@ export interface OmpRpcRuntimeOptions {
   ) => OmpSessionDescriptor[] | Promise<OmpSessionDescriptor[]>;
 }
 
+// OMP accepts an empty message when images carry the prompt.
+function promptText(message: string, images: readonly OmpImage[], field: string): string {
+  return message === "" && images.length > 0
+    ? message
+    : validateBoundedText(message, field, MAX_TEXT_LENGTH);
+}
+
 class OmpRpcSession implements OmpRuntimeSession {
   get maxHostToolFrameBytes(): number {
     return this.process.outboundFrameLimit;
@@ -495,7 +502,7 @@ class OmpRpcSession implements OmpRuntimeSession {
     onAccepted?: () => void,
     onRequested?: (requestId: string) => void,
   ): Promise<{ requestId: string; agentInvoked?: boolean }> {
-    const safeMessage = validateBoundedText(message, "prompt", MAX_TEXT_LENGTH);
+    const safeMessage = promptText(message, images, "prompt");
     let acknowledgement: z.infer<typeof OmpPromptAckSchema> | undefined;
     const request = this.process.startRequest(
       buildOmpPromptRequest(safeMessage, images),
@@ -511,7 +518,7 @@ class OmpRpcSession implements OmpRuntimeSession {
   }
 
   async steer(message: string, images: readonly OmpImage[] = []): Promise<void> {
-    const safeMessage = validateBoundedText(message, "steer", MAX_TEXT_LENGTH);
+    const safeMessage = promptText(message, images, "steer");
     await this.process.request({
       type: "steer",
       message: safeMessage,
@@ -519,7 +526,7 @@ class OmpRpcSession implements OmpRuntimeSession {
     });
   }
   async followUp(message: string, images: readonly OmpImage[] = []): Promise<void> {
-    const safeMessage = validateBoundedText(message, "follow-up", MAX_TEXT_LENGTH);
+    const safeMessage = promptText(message, images, "follow-up");
     await this.process.request({
       type: "follow_up",
       message: safeMessage,

package/server/provider/session-descriptors.ts

@@ -10,8 +10,10 @@ const MAX_DESCRIPTOR_PREFIX_BYTES = 64 * 1024;
 const MAX_DESCRIPTOR_SUFFIX_BYTES = 64 * 1024;
 const MAX_PROMPT_PREVIEW_CHARS = 160;
 const MAX_DIRECTORY_DEPTH = 8;
-const MAX_SCAN_DIRECTORIES = 1_024;
-const MAX_SCAN_FILES = 10_000;
+// Count caps only bound memory; the byte and time budgets bound scan work. OMP keeps one
+// directory per workspace, so these must exceed real session trees or lookups silently miss.
+const MAX_SCAN_DIRECTORIES = 65_536;
+const MAX_SCAN_FILES = 262_144;
 const MAX_SCAN_BYTES = 16 * 1024 * 1024;
 const MAX_SCAN_MS = 1_000;
 const SCAN_YIELD_INTERVAL = 128;

package/server/provider/session.ts

@@ -490,7 +490,13 @@ export class OmpProviderSession {
       ...normalizedConfig,
       // Thinking is authorized only after this runtime reports its exact model catalog.
       thinkingOption: undefined,
-      ...(resumeSessionId ? { systemPrompt: undefined, resumeSessionId } : {}),
+      ...(resumeSessionId
+        ? {
+            systemPrompt: undefined,
+            resumeSessionId,
+            resumeSessionFile: persistedDescriptor?.transcriptFile,
+          }
+        : {}),
       signal,
       environment,
     };
@@ -1990,7 +1996,9 @@ export class OmpProviderSession {
       recovered = await this.runtimeFactory.startSession({
         ...this.recoveryOptions,
         ...(recoverFromNativeConfig ? { model: undefined, thinkingOption: undefined } : {}),
-        ...(expectedSessionId ? { resumeSessionId: expectedSessionId } : {}),
+        ...(expectedSessionId
+          ? { resumeSessionId: expectedSessionId, resumeSessionFile: this.nativeSessionFile }
+          : {}),
         signal: this.lifetime.signal,
       });
     } catch (error) {
@@ -2830,6 +2838,22 @@ export class OmpProviderSession {
     turn.ambiguousTerminalTimer = undefined;
   }
 
+  private async cancelIndeterminateTerminal(
+    turn: ActiveTurn,
+    message: string,
+    invalidateRuntime = false,
+  ): Promise<void> {
+    this.recordOperationalFailure({ category: "terminal-outcome", stage: "unresolved" });
+    this.projector.projectPassive({
+      type: "notice",
+      level: "warning",
+      message: "OMP ended before its final response could be confirmed. Partial output was kept.",
+    });
+    if (invalidateRuntime) this.invalidateRuntime(message);
+    this.subsessions?.terminalize("canceled");
+    await this.finishTurn(turn, "canceled", undefined, true, true);
+  }
+
   private async settleAmbiguousTerminal(
     turn: ActiveTurn,
     candidate: TerminalCandidate,
@@ -2848,16 +2872,19 @@ export class OmpProviderSession {
     const state = await this.usage.boundedTerminalState(turn, FINAL_USAGE_WAIT_MS);
     if (turn.terminal || this.activeTurn !== turn || turn.deferredAgentEnd !== candidate) return;
     if (!state) {
-      turn.operationalTerminalStage = "unresolved";
-      this.handleRuntimeFailure("OMP agent_end state could not be confirmed");
+      await this.cancelIndeterminateTerminal(
+        turn,
+        "OMP agent_end state could not be confirmed",
+        true,
+      );
       return;
     }
     turn.deferredAgentEnd = undefined;
     if (state.isStreaming || state.isCompacting) return;
-    turn.operationalTerminalStage = "unresolved";
-    await this.finishTurn(turn, "failed", {
-      message: "OMP unkeyed agent_end could not be correlated to the current prompt",
-    });
+    await this.cancelIndeterminateTerminal(
+      turn,
+      "OMP unkeyed agent_end could not be correlated to the current prompt",
+    );
   }
 
   private async completeLocalOnlyTurn(turn: ActiveTurn): Promise<void> {
@@ -2929,8 +2956,11 @@ export class OmpProviderSession {
       ) {
         void this.completeAgentEnd(turn, candidate.event);
       } else {
-        turn.operationalTerminalStage = "unresolved";
-        this.handleRuntimeFailure("OMP agent_end state could not be confirmed");
+        void this.cancelIndeterminateTerminal(
+          turn,
+          "OMP agent_end state could not be confirmed",
+          true,
+        );
       }
     }, AGENT_END_SETTLE_MS);
     this.finishFromAgentEnd(turn, candidate);
@@ -3043,8 +3073,11 @@ export class OmpProviderSession {
       return;
     }
     if (turn.userEchoObserved) {
-      turn.operationalTerminalStage = "unresolved";
-      this.handleRuntimeFailure("OMP agent_end state could not be confirmed");
+      await this.cancelIndeterminateTerminal(
+        turn,
+        "OMP agent_end state could not be confirmed",
+        true,
+      );
       return;
     }
     if (turn.agentEndRetryTimer === undefined) {

package/server/provider/timeline-projector.ts

@@ -1099,13 +1099,16 @@ export class OmpTimelineProjector {
     for (const contentIndex of indexes) {
       const block = stream.blocks.get(contentIndex);
       if (!block) continue;
-      const publicText =
+      let publicText =
         block.kind === "image"
           ? block.text
           : truncateUtf8(
               this.dataFilter.text(block.text, MAX_REDACTED_STREAM_TEXT_LENGTH),
               remainingTextBytes,
             );
+      if (block.kind === "assistant_message") {
+        publicText = publicText.replace(/\n*\[System Error\] Provider connection closed\s*$/, "");
+      }
       if (block.kind !== "image") {
         remainingTextBytes = Math.max(0, remainingTextBytes - utf8Bytes(publicText));
       }