@omercnet/paseo-omp 2.0.1 → 2.0.2-next.260.1

package/OVERVIEW.md

@@ -2,7 +2,7 @@ OMP adds an agent provider for the OMP coding agent, plus an OMP sidebar and wor
 
 ## Setup
 
-- Paseo ^0.11.0.
+- Paseo ^0.11.0 || ^0.12.0.
 - OMP 18.1.15 or newer on the daemon host, speaking RPC protocol v2. Older runtimes are rejected.
 - Provider options let you change the OMP command, set environment values, choose an output redaction mode and set a session directory and timeout. Named OMP profiles appear as separate `OMP · <profile>` providers.
 

package/README.md

@@ -24,7 +24,7 @@ before capture.
 
 ## Quick start
 
-Requirements: Paseo `^0.11.0`, OMP `18.1.15` or newer, and OMP RPC protocol v2. The config screen and Hub row use the 0.11 screen and sidebar APIs, so Paseo 0.9 and 0.10 hosts are no longer supported.
+Requirements: Paseo `^0.11.0 || ^0.12.0`, OMP `18.1.15` or newer, and OMP RPC protocol v2. The config screen and Hub row use the 0.11 screen and sidebar APIs, so Paseo 0.9 and 0.10 hosts are no longer supported.
 
 ```bash
 paseo plugin install npm:@omercnet/paseo-omp@<version>
@@ -54,7 +54,7 @@ Profile selection is request-local: concurrent clients cannot change each other'
 
 ## Paseo provider SDK coverage
 
-The capability inventory is pinned to `@getpaseo/plugin` 0.11.1, with nightly compatibility checks
+The capability inventory is pinned to `@getpaseo/plugin` 0.12.0-beta.2, with nightly compatibility checks
 against the latest and beta channels. Provider capability scoring covers
 all 17 entries in the SDK's `PROVIDER_CAPABILITIES`; the separate provider/client SDK table below
 also tracks the 0.11 registration, screen, and sidebar APIs. This measures strict SDK surface
@@ -100,7 +100,7 @@ Provider functionality outside the capability flags is tracked separately:
 | Models, modes, and thinking catalog | **100%** | Native catalog is mapped to opaque public model IDs with committed defaults and permission-gated modes. |
 | Connection `send` / `onEvent` / `close` lifecycle | **100%** | Request correlation, multi-session ownership, process recovery, teardown, and provider reload/removal are covered. |
 | Session launch: cwd, env, system prompt, title, and persistence | **100%** | Complete launch configuration is bounded, validated, forwarded, and re-read on recovery; selected host and profile daemon environment values are resolved only when catalog and session children spawn. |
-| MCP server forwarding and host tools | **100%** | Configured MCP tools are discovered, namespaced, labeled, executed, canceled, and bounded. Caller-scoped Paseo orchestration tools retain their native names, such as `create_agent` and `list_profiles`, so OMP skills can invoke them directly. The MCP composer control delegates native server management to OMP instead of duplicating its profile and workspace precedence. Exact `toolPolicy` remains the separate 0% capability above. |
+| MCP server forwarding and host tools | **100%** | Configured MCP tools are discovered, namespaced, labeled, executed, canceled, and bounded. Forwarded tools are namespaced `mcpx__<server>_<tool>`: OMP treats `mcp__` as its own MCP manager's namespace and deletes that whole namespace from the session registry on every `refreshMCPTools`, so a forwarded tool registered under it is accepted and then dropped. Registration races OMP's deferred MCP discovery on every supported release; from 18.9.0 the ordering is deterministic and the tools were always lost. An OMP approval policy or inline-docs glob keyed on the old `mcp__<server>_<tool>` spelling must be re-keyed to `mcpx__<server>_<tool>`; OMP matches approval entries by exact tool name. Caller-scoped Paseo orchestration tools retain their native names, such as `create_agent` and `list_profiles`, so OMP skills can invoke them directly. The MCP composer control delegates native server management to OMP instead of duplicating its profile and workspace precedence. Exact `toolPolicy` remains the separate 0% capability above. |
 | Denied native tools | **100%** | `disallowedTools` becomes an explicit OMP allow-list; unknown names fail closed. |
 | Commands and committed session state events | **100%** | Publishes `session.commands`, `session.opened`, `session.config`, `session.ready`, and request completion in protocol order. |
 | Built-in timeline snapshots | **100%** | Assistant, reasoning, tools, todos, notifications, errors, compaction, and friendly MCP labels use stable IDs and complete snapshots. OMP emits client-safe PNG/JPEG when possible; validated legacy WebP images render on capable clients with an explicit per-image fallback elsewhere. |

package/npm-shrinkwrap.json

@@ -1,31 +1,31 @@
 {
   "name": "@omercnet/paseo-omp",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@omercnet/paseo-omp",
-      "version": "2.0.1",
+      "version": "2.0.2",
       "dependencies": {
-        "@getpaseo/protocol": "0.11.1",
+        "@getpaseo/protocol": "0.12.0-beta.2",
         "@modelcontextprotocol/sdk": "1.30.0",
         "yaml": "^2.9.0"
       }
     },
     "node_modules/@getpaseo/protocol": {
-      "version": "0.11.1",
-      "resolved": "https://registry.npmjs.org/@getpaseo/protocol/-/protocol-0.11.1.tgz",
-      "integrity": "sha512-L3/wI9/lDGfcY/0JEkbOt2pQ/pQzEziVd4sNvFap90eo5ItU6Nf+IIznJFKnJkhaDG0Pono8kmugqspgbostxQ==",
+      "version": "0.12.0-beta.2",
+      "resolved": "https://registry.npmjs.org/@getpaseo/protocol/-/protocol-0.12.0-beta.2.tgz",
+      "integrity": "sha512-Rolt7NUf+aJpoRM8Rqxj5Ao0i6wz/MMj0i57IqJsGdxJRBS+SrnfacJD1cqtq4TY8UicsI3GBEue6V3+LOyBnw==",
       "dependencies": {
         "semver": "^7.8.5",
         "zod": "^4.4.3"
       }
     },
     "node_modules/@hono/node-server": {
-      "version": "2.1.4",
-      "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-2.1.4.tgz",
-      "integrity": "sha512-2g1qeHl4BduwDn6L8nkAvDrPUWPMlkQ//a5NhP/zIyaXKMjZNRV+cG9Csu+BiJFf6+68pqzjf4Hi5sJGKHuS1g==",
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-2.1.5.tgz",
+      "integrity": "sha512-MgP/I06GdvsilDspMk/qmRzpk8LOUStP6jFAbSRi40W09DhoyUn+Mj7eyKICPqeYKybOjVFLVIAQzvu1bfIa7Q==",
       "license": "MIT",
       "engines": {
         "node": ">=20"
@@ -657,9 +657,9 @@
       "license": "ISC"
     },
     "node_modules/ip-address": {
-      "version": "10.7.3",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.3.tgz",
-      "integrity": "sha512-A1kdq/tSb5QjvKvAMgIoEvDBIgL7qaqVP/jkvSwYYRZ9iEzvPpopxp2wQfu3SuZRHtpHNxMn8Fs0bS+gf5Xmwg==",
+      "version": "10.7.4",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.4.tgz",
+      "integrity": "sha512-DWBMKyeM25D70nrIiTkgQth59/G+naKOTep6huF9j+GmeK3DMD60Zvxg5d5qQnz+38AHgou6ean2LECX+lrKDg==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -898,9 +898,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.16.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
-      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
+      "version": "6.16.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.1.tgz",
+      "integrity": "sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "es-define-property": "^1.0.1",
@@ -1232,9 +1232,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "4.6.5",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.5.tgz",
-      "integrity": "sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==",
+      "version": "4.6.7",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz",
+      "integrity": "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omercnet/paseo-omp",
-  "version": "2.0.1",
+  "version": "2.0.2-next.260.1",
   "type": "module",
   "description": "Paseo integration for OMP, including its direct provider and workspace tooling.",
   "license": "MIT",
@@ -16,7 +16,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "packageManager": "bun@1.4.2",
+  "packageManager": "bun@1.4.3",
   "engines": {
     "node": ">=22.18.0"
   },
@@ -53,26 +53,26 @@
     "typecheck": "tsc --noEmit -p tsconfig.client.json && tsc --noEmit -p tsconfig.server.json && tsc --noEmit -p tsconfig.tests.json"
   },
   "dependencies": {
-    "@getpaseo/protocol": "0.11.1",
+    "@getpaseo/protocol": "0.12.0-beta.2",
     "@modelcontextprotocol/sdk": "1.30.0",
     "yaml": "^2.9.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.10",
-    "@getpaseo/cli": "0.11.1",
-    "@getpaseo/client": "0.11.1",
-    "@getpaseo/plugin": "0.11.1",
-    "@getpaseo/server": "0.11.1",
-    "@oh-my-pi/pi-agent-core": "18.8.4",
-    "@oh-my-pi/pi-coding-agent": "18.8.4",
+    "@getpaseo/cli": "0.12.0-beta.2",
+    "@getpaseo/client": "0.12.0-beta.2",
+    "@getpaseo/plugin": "0.12.0-beta.2",
+    "@getpaseo/server": "0.12.0-beta.2",
+    "@oh-my-pi/pi-agent-core": "18.10.1",
+    "@oh-my-pi/pi-coding-agent": "18.10.1",
     "@tanstack/react-query": "^5.102.3",
     "@types/node": "^24.10.1",
     "@types/react": "^19.2.18",
     "@vitest/coverage-v8": "^5.0.0",
     "esbuild": "0.28.2",
+    "pino": "10.3.1",
     "react": "19.1.0",
     "react-native": "0.81.5",
-    "pino": "10.3.1",
     "tsx": "^4.20.6",
     "typescript": "^7.0.2",
     "vitest": "^5.0.0",

package/paseo-plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "paseo-omp",
   "description": "Paseo integration for OMP, including its direct provider and workspace tooling.",
-  "requirements": { "paseo": "^0.11.0" },
+  "requirements": { "paseo": "^0.11.0 || ^0.12.0" },
   "build": [["node", "scripts/prepare-dependencies.mjs"]]
 }

package/server/package-version.ts

@@ -1,2 +1,2 @@
 /** Release Please keeps this bundle-safe constant aligned with package.json. */
-export const PASEO_OMP_PACKAGE_VERSION = "2.0.1"; // x-release-please-version
+export const PASEO_OMP_PACKAGE_VERSION = "2.0.2-next.260.1"; // x-release-please-version

package/server/provider/host-tools.ts

@@ -259,11 +259,26 @@ function serverNamespaces(servers: readonly ClassifiedServer[]): ReadonlyMap<str
   );
 }
 
+/**
+ * Namespace prefix for tools this plugin registers through `set_host_tools`.
+ *
+ * It deliberately avoids OMP's `mcp__` prefix. OMP treats that prefix as its own
+ * MCP manager's namespace (`isMCPToolName`), and every `refreshMCPTools` deletes
+ * the whole namespace from the session tool registry before rebuilding it from
+ * manager- and extension-owned tools only. Host tools registered over RPC are in
+ * neither set, so an `mcp__` name is accepted and then dropped once OMP's own
+ * deferred MCP discovery completes, leaving the tool callable from nowhere.
+ */
+export const HOST_TOOL_NAME_PREFIX = "mcpx__";
+
+/** Prefix used before {@link HOST_TOOL_NAME_PREFIX}; still rendered in persisted timelines. */
+export const LEGACY_HOST_TOOL_NAME_PREFIX = "mcp__";
+
 function exposedToolName(server: ClassifiedServer, namespace: string, toolName: string): string {
   const tool = safeName(toolName, "tool");
   if (server.canonical) return tool;
   const unprefixed = tool.startsWith(`${namespace}_`) ? tool.slice(namespace.length + 1) : tool;
-  const base = `mcp__${namespace}_${unprefixed}`;
+  const base = `${HOST_TOOL_NAME_PREFIX}${namespace}_${unprefixed}`;
   if (utf8Bytes(base) <= MAX_HOST_TOOL_NAME_BYTES) return base;
   const suffix = digest(`${server.name}\0${toolName}`);
   return `${base.slice(0, MAX_HOST_TOOL_NAME_BYTES - suffix.length - 1)}_${suffix}`;

package/server/provider/timeline-projector.ts

@@ -5,6 +5,7 @@ import type {
   ProviderToolCallDetail,
 } from "@getpaseo/plugin/server/provider";
 import { OMP_MCP_AUTH_TIMELINE_KIND } from "../../shared/mcp";
+import { HOST_TOOL_NAME_PREFIX, LEGACY_HOST_TOOL_NAME_PREFIX } from "./host-tools";
 import { isOmpImageMimeType, isValidImagePayload, type OmpImageMimeType } from "./image";
 import {
   OMP_MAX_CONTENT_PARTS,
@@ -189,8 +190,15 @@ function xdeviceToolName(nativeName: string, input: JsonValue): string | undefin
   const match = path?.match(/^xd:\/\/([A-Za-z0-9_][A-Za-z0-9_.-]{0,255})(?:[/?#]|$)/u);
   return match?.[1];
 }
+function hostToolPrefixOf(name: string): string | undefined {
+  if (name.startsWith(HOST_TOOL_NAME_PREFIX)) return HOST_TOOL_NAME_PREFIX;
+  // Timelines persisted before the rename still carry the legacy prefix.
+  if (name.startsWith(LEGACY_HOST_TOOL_NAME_PREFIX)) return LEGACY_HOST_TOOL_NAME_PREFIX;
+  return undefined;
+}
 function friendlyXdeviceToolName(name: string): string {
-  const routedName = name.startsWith("mcp__") ? name.slice("mcp__".length) : name;
+  const prefix = hostToolPrefixOf(name);
+  const routedName = prefix ? name.slice(prefix.length) : name;
   const words = routedName
     .replace(/[-_.]+/gu, " ")
     .replace(/\s+/gu, " ")
@@ -541,7 +549,7 @@ export class OmpTimelineProjector {
         const routedToolName = xdeviceToolName(event.toolName, input);
         const displayName =
           this.hostToolLabels.get(routedToolName ?? event.toolName) ??
-          (routedToolName || event.toolName.startsWith("mcp__")
+          (routedToolName || hostToolPrefixOf(event.toolName)
             ? friendlyXdeviceToolName(routedToolName ?? event.toolName)
             : event.toolName);
         const snapshot: ToolSnapshot = {