@omercnet/paseo-omp 4.0.0 → 5.0.0-next.321.1

package/OVERVIEW.md

@@ -2,7 +2,7 @@ OMP adds an agent provider for the OMP coding agent, plus an OMP sidebar and wor
 
 ## Setup
 
-- Paseo ^0.13.0.
+- Paseo ^0.14.0.
 - OMP 18.1.15 or newer on the daemon host, speaking RPC protocol v2. Older runtimes are rejected.
 - Provider options let you change the OMP command, set environment values, choose an output redaction mode and set a session directory and timeout. Named OMP profiles appear as separate `OMP · <profile>` providers.
 

package/README.md

@@ -24,7 +24,7 @@ before capture.
 
 ## Quick start
 
-Requirements: Paseo `^0.13.0`, OMP `18.1.15` or newer, and OMP RPC protocol v2. Workspace discovery passes `includeBackground`, which throws on hosts that do not advertise `features.backgroundWorkspaces`; every 0.13 host does.
+Requirements: Paseo `^0.14.0`, OMP `18.1.15` or newer, and OMP RPC protocol v2. Workspace discovery passes `includeBackground`, which throws on hosts that do not advertise `features.backgroundWorkspaces`; every 0.14 host does.
 
 ```bash
 paseo plugin install npm:@omercnet/paseo-omp@<version>
@@ -40,7 +40,7 @@ Open the **OMP** sidebar to review the provider-profile contract, choose which c
 - [Core-provider issue and parity audit](docs/core-provider-issue-audit.md)
 - [Release checklist](docs/release-checklist.md)
 
-The plugin uses public Paseo 0.13 provider and client contracts and registers distinct `omp-plugin` and `omp-plugin-<profile>` identities; it does not modify the bundled `omp` provider.
+The plugin uses public Paseo 0.14 provider and client contracts and registers distinct `omp-plugin` and `omp-plugin-<profile>` identities; it does not modify the bundled `omp` provider.
 
 ## Named OMP profiles
 
@@ -54,20 +54,20 @@ Profile selection is request-local: concurrent clients cannot change each other'
 
 ## Paseo provider SDK coverage
 
-The capability inventory is pinned to `@getpaseo/plugin` 0.13.0, with nightly compatibility checks
+The capability inventory is pinned to `@getpaseo/plugin` 0.14.0-beta.1, with nightly compatibility checks
 against the latest and beta channels. Provider capability scoring covers
-all 17 entries in the SDK's `PROVIDER_CAPABILITIES`; the separate provider/client SDK table below
+all 18 entries in the SDK's `PROVIDER_CAPABILITIES`; the separate provider/client SDK table below
 also tracks the registration, screen, and sidebar APIs introduced in 0.11. This measures strict SDK surface
 coverage, not general product quality.
 
-**Provider capability completeness: 61.8%.** The provider advertises 11 of 17 capabilities (64.7%); ten are complete and `session.configure` is partial.
+**Provider capability completeness: 63.9%.** The provider advertises 12 of 18 capabilities (66.7%); eleven are complete and `session.configure` is partial.
 
 Scoring is deliberately mechanical so releases remain comparable:
 
 - **100%**: advertised, implemented end to end, and covered by automated provider tests.
 - **50%**: advertised with a meaningful subset, but at least one material SDK operation is rejected.
 - **0%**: not advertised; requests are rejected rather than silently approximated.
-- Overall completeness is the unweighted arithmetic mean of all 17 SDK capability rows.
+- Overall completeness is the unweighted arithmetic mean of all 18 SDK capability rows.
 
 | SDK capability | Completeness | Support and gap |
 | --- | ---: | --- |
@@ -77,6 +77,7 @@ Scoring is deliberately mechanical so releases remain comparable:
 | `prompt.output_schema` | **0%** | Not advertised. OMP has no equivalent structured-output contract; `outputSchema` fails visibly. |
 | `prompt.steer` | **100%** | Native steering with turn ownership, user-message correlation, stale-target rejection, and terminal race handling. |
 | `session.archive` | **0%** | Not advertised. Paseo may archive its agent record, but OMP has no native transcript archive operation. |
+| `session.can_stop_runtime` | **100%** | Answers Paseo's idle-release safety query. Returns `false` while a turn, permission, revert, configuration change, runtime recovery, active subagent, or OMP background async work is pending, and when OMP does not report a settled state; errors and unknown sessions fail the request, which also keeps the runtime. |
 | `session.configure` | **50%** | Live model and thinking changes commit and republish native state. Live approval-mode changes require a new session, and non-empty SDK `settings` are rejected. |
 | `session.list` | **100%** | Bounded host-wide and cwd-scoped discovery, search, previews, profile-specific session roots, and cleanup-reservation guards. |
 | `session.persistence` | **100%** | Versioned opaque handles, exact resume, import, replay-before-ready, runtime recovery, and cleanup quarantine. Archived agents whose recorded workspace has been removed load read-only from their authorized transcript when Paseo opens them with its `history` purpose, without spawning OMP or connecting MCP servers; interactive create and resume still require the workspace. |
@@ -125,7 +126,9 @@ Existing agents whose provider is `omp` remain owned by the bundled provider. Ne
 
 OMP `18.1.15` is the oldest version tested end to end. The direct provider's hard compatibility gate is `rpc-ui` protocol v2: metadata-free legacy ready frames and v1-only runtimes are rejected before a provider session opens because they cannot support the advertised persistence and conversation-rewind capabilities. Typed tool approvals remain capability-gated and fall back as described above. For terminal completion, a matching `agent_end.requestId` is authoritative and mismatches are ignored before state changes. Released OMP 18.2.x builds that omit that field use an ordered fallback requiring a fresh correlated native user entry followed by current-turn assistant activity, an idle non-compacting runtime, and no conflicting permission, tool, steer, or child-session work. Ambiguous events while OMP is active are ignored; unresolved ambiguity after confirmed idle fails only the Paseo turn. This trades a bounded residual same-agent stale-event risk for compatibility with released OMP instead of terminating and lazily restarting the runtime after every later prompt. Paseo clients, including mobile clients inside reconnect grace, do not own or terminate the daemon-managed OMP session.
 
-Paseo 0.13 is the minimum supported release. The controlled Docker canary is pinned to official 0.13.0; nightly SDK checks cover the latest and beta channels. The canary preserves nested provider-subagent ancestry and spawning-tool links, and validates npm-managed plugin sources, platform-owned external URL opening, and whole-item timeline transforms before Overview grouping.
+Paseo 0.14 is the minimum supported release. The controlled Docker canary is pinned to official 0.14.0-beta.1; nightly SDK checks cover the latest and beta channels. The canary preserves nested provider-subagent ancestry and spawning-tool links, and validates npm-managed plugin sources, platform-owned external URL opening, and whole-item timeline transforms before Overview grouping.
+
+Paseo releases idle resumable agent runtimes after one hour; the agent stays listed as `closed` and the next prompt resumes the same OMP session. The plugin vetoes that release while the session has a running turn, a pending permission, an active subagent, or OMP background async work, and while OMP does not report a settled state (the plugin needs the `hasPendingAsyncWork` and `isSettled` fields in OMP's `get_state`; builds without them are never released). Set `agents.idleRuntimeCleanup: false` in the Paseo config to disable idle release for every provider.
 
 Install, update, disable, or remove `paseo-omp` independently of the bundled provider. Verify the provider snapshot contains `omp-plugin` after installation; a bundled `omp` entry may remain present and is not modified by this plugin.
 

package/npm-shrinkwrap.json

@@ -1,22 +1,22 @@
 {
   "name": "@omercnet/paseo-omp",
-  "version": "4.0.0",
+  "version": "5.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@omercnet/paseo-omp",
-      "version": "4.0.0",
+      "version": "5.0.0",
       "dependencies": {
-        "@getpaseo/protocol": "0.13.0",
+        "@getpaseo/protocol": "0.14.0-beta.1",
         "@modelcontextprotocol/sdk": "1.30.0",
         "yaml": "^2.9.0"
       }
     },
     "node_modules/@getpaseo/protocol": {
-      "version": "0.13.0",
-      "resolved": "https://registry.npmjs.org/@getpaseo/protocol/-/protocol-0.13.0.tgz",
-      "integrity": "sha512-g5Hp6QP5hV7KTCrSRBVye2+qhptwnhhLXRn6PHaS1L8PgmeRh5LvrE8PZq3HRq8B1WxflVDuV2WRB2Z3FNcvJA==",
+      "version": "0.14.0-beta.1",
+      "resolved": "https://registry.npmjs.org/@getpaseo/protocol/-/protocol-0.14.0-beta.1.tgz",
+      "integrity": "sha512-qkZCmLlL5EQ1PkN0Jy8JLIfyqoj34UC2HdJIicERQ/OdrYGQ3krpOfIpYJ3c3BU27GcDL/E4aoA0GbuEVR4qUw==",
       "dependencies": {
         "semver": "^7.8.5",
         "zod": "^4.4.3"
@@ -606,9 +606,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.13.13",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.13.tgz",
-      "integrity": "sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==",
+      "version": "4.13.14",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.14.tgz",
+      "integrity": "sha512-yhRLQ21U6qa9Hsu2N7Qcbh8tE+WKEcoErjIo56LeSGiGXGp9sA7UpE86Ui9uexb61KakiGwuHMn2QdV7w6i6kQ==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -657,9 +657,9 @@
       "license": "ISC"
     },
     "node_modules/ip-address": {
-      "version": "10.7.4",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.4.tgz",
-      "integrity": "sha512-DWBMKyeM25D70nrIiTkgQth59/G+naKOTep6huF9j+GmeK3DMD60Zvxg5d5qQnz+38AHgou6ean2LECX+lrKDg==",
+      "version": "10.7.5",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.5.tgz",
+      "integrity": "sha512-t2v0rkILYv9WXmSL7TpAaU3HXgaFYOPUcH3QHgwQ++gpJuH3bqyMy4Fvt/DJCTKwzH3Cf+bAp5W/mFL39KPLzA==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -902,9 +902,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.16.1",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.1.tgz",
-      "integrity": "sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==",
+      "version": "6.17.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.17.0.tgz",
+      "integrity": "sha512-5LK5BZ2XDHMvcUJaf0CQ5HL3aVgKbpklvByC7qLSxYkfE8COEEbJg5xCHWCTqzqi0Gs4Jn5Mv5v3R38W6edscA==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "es-define-property": "^1.0.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omercnet/paseo-omp",
-  "version": "4.0.0",
+  "version": "5.0.0-next.321.1",
   "type": "module",
   "description": "Paseo integration for OMP, including its direct provider and workspace tooling.",
   "license": "MIT",
@@ -16,7 +16,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "packageManager": "bun@1.4.3",
+  "packageManager": "bun@1.4.4",
   "engines": {
     "node": ">=22.18.0"
   },
@@ -53,16 +53,16 @@
     "typecheck": "tsc --noEmit -p tsconfig.client.json && tsc --noEmit -p tsconfig.server.json && tsc --noEmit -p tsconfig.tests.json"
   },
   "dependencies": {
-    "@getpaseo/protocol": "0.13.0",
+    "@getpaseo/protocol": "0.14.0-beta.1",
     "@modelcontextprotocol/sdk": "1.30.0",
     "yaml": "^2.9.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.10",
-    "@getpaseo/cli": "0.13.0",
-    "@getpaseo/client": "0.13.0",
-    "@getpaseo/plugin": "0.13.0",
-    "@getpaseo/server": "0.13.0",
+    "@getpaseo/cli": "0.14.0-beta.1",
+    "@getpaseo/client": "0.14.0-beta.1",
+    "@getpaseo/plugin": "0.14.0-beta.1",
+    "@getpaseo/server": "0.14.0-beta.1",
     "@oh-my-pi/pi-agent-core": "18.10.1",
     "@oh-my-pi/pi-coding-agent": "18.10.1",
     "@tanstack/react-query": "^5.102.3",
@@ -70,15 +70,15 @@
     "@types/react": "^19.2.18",
     "@vitest/coverage-v8": "^5.0.0",
     "esbuild": "0.28.2",
+    "pino": "10.3.1",
     "react": "19.1.0",
     "react-native": "0.81.5",
-    "pino": "10.3.1",
     "tsx": "^4.20.6",
     "typescript": "^7.0.2",
     "vitest": "^5.0.0",
     "zod": "4.4.3"
   },
   "overrides": {
-    "qs": "6.16.0"
+    "qs": "6.16.1"
   }
 }

package/paseo-plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "paseo-omp",
   "description": "Paseo integration for OMP, including its direct provider and workspace tooling.",
-  "requirements": { "paseo": "^0.13.0" },
+  "requirements": { "paseo": "^0.14.0" },
   "build": [["node", "scripts/prepare-dependencies.mjs"]]
 }

package/server/package-version.ts

@@ -1,2 +1,2 @@
 /** Release Please keeps this bundle-safe constant aligned with package.json. */
-export const PASEO_OMP_PACKAGE_VERSION = "4.0.0"; // x-release-please-version
+export const PASEO_OMP_PACKAGE_VERSION = "5.0.0-next.321.1"; // x-release-please-version

package/server/provider/connection.ts

@@ -48,6 +48,7 @@ const SUPPORTED_CAPABILITIES: Readonly<Record<string, true>> = {
   "prompt.command": true,
   "prompt.image": true,
   "prompt.steer": true,
+  "session.can_stop_runtime": true,
   "session.configure": true,
   "session.list": true,
   "session.persistence": true,
@@ -65,6 +66,7 @@ const SUPPORTED_INPUTS: Readonly<Record<string, true>> = {
   "session.permission": true,
   "session.revert": true,
   "session.interrupt": true,
+  "session.can_stop_runtime": true,
   "session.close": true,
 };
 const MAX_CONNECTION_SESSIONS = 32;
@@ -1135,6 +1137,21 @@ export function createOmpConnection(
         await session.interrupt(input);
         return;
       }
+      case "session.can_stop_runtime": {
+        const session = sessions.get(input.sessionId)?.session;
+        if (!session) {
+          requestFailure(input.requestId, new OmpPublicError("Unknown OMP session"));
+          return;
+        }
+        const canStop = await session.canStopRuntime();
+        emit({
+          type: "session.can_stop_runtime",
+          requestId: input.requestId,
+          sessionId: input.sessionId,
+          canStop,
+        });
+        return;
+      }
       case "session.close": {
         const slot = sessions.get(input.sessionId);
         if (!slot) {

package/server/provider/omp-rpc-protocol.ts

@@ -155,7 +155,7 @@ export const OMP_RPC_COMMAND_POLICIES = {
   predict_word_feedback: "unsupported",
   promote_queued_message: "unsupported",
   remove_queued_message: "unsupported",
-  set_ask_dialog: "unsupported",
+  set_ask_dialog: "implemented",
   set_cache_warming: "unsupported",
   set_slow_mode: "unsupported",
   steer_subagent: "unsupported",
@@ -524,6 +524,10 @@ const OMP_PROVIDER_NAME = NAME.refine((provider) => !provider.includes("/"));
 const TEXT = boundedString(MAX_TEXT_LENGTH);
 const RAW_DISPLAY_TEXT = boundedString(MAX_IMAGE_DATA_LENGTH);
 const DISPLAY_TRUNCATION_MARKER = "<truncated>";
+/** OMP's `ask` tool has no upstream caps; these bound one dialog like the select schema does. */
+export const MAX_ASK_QUESTIONS = 32;
+export const MAX_ASK_OPTIONS = 128;
+const MAX_ASK_QUESTION_ID_BYTES = 4_096;
 
 function boundRawDisplayContent(value: unknown): unknown {
   if (typeof value === "string") {
@@ -634,6 +638,7 @@ export const OMP_RPC_DIAGNOSTIC_COMMANDS = [
   "get_messages",
   "abort",
   "set_host_tools",
+  "set_ask_dialog",
 ] as const;
 export type OmpRpcDiagnosticCommand = (typeof OMP_RPC_DIAGNOSTIC_COMMANDS)[number];
 type JsonBoundViolation = {
@@ -1226,6 +1231,8 @@ export const OmpSessionStateSchema = z.object({
   thinkingLevel: OmpCurrentThinkingLevelSchema,
   isStreaming: z.boolean(),
   isCompacting: z.boolean(),
+  hasPendingAsyncWork: z.boolean().optional(),
+  isSettled: z.boolean().optional(),
   sessionId: IDENTIFIER,
   autoCompactionEnabled: z.boolean().optional(),
   contextUsage: OmpContextUsageSchema.nullable().optional().catch(undefined),
@@ -1695,6 +1702,44 @@ const OmpExtensionUiRequestSchema = z.discriminatedUnion("method", [
       timeout: z.number().nonnegative().finite().optional(),
     })
     .strict(),
+  z
+    .object({
+      ...ExtensionUiBase,
+      method: z.literal("ask"),
+      questions: z
+        .array(
+          z
+            .object({
+              id: boundedString(MAX_ASK_QUESTION_ID_BYTES, 1),
+              question: boundedString(64 * 1024),
+              header: boundedString(4_096).optional(),
+              options: z
+                .array(
+                  z
+                    .object({
+                      label: boundedString(4_096),
+                      description: boundedString(16_384).optional(),
+                      preview: boundedString(64 * 1024).optional(),
+                    })
+                    .strict(),
+                )
+                .max(MAX_ASK_OPTIONS),
+              multi: z.boolean().optional(),
+              recommended: z.number().int().nonnegative().optional(),
+            })
+            .strict(),
+        )
+        .min(1)
+        .max(MAX_ASK_QUESTIONS),
+      timeout: z.number().nonnegative().finite().optional(),
+    })
+    .strict()
+    .superRefine((request, context) => {
+      const ids = new Set(request.questions.map((question) => question.id));
+      if (ids.size !== request.questions.length) {
+        context.addIssue({ code: "custom", message: "invalid extension UI request" });
+      }
+    }),
   z.object({ ...ExtensionUiBase, method: z.literal("cancel"), targetId: IDENTIFIER }).strict(),
   z
     .object({
@@ -1859,6 +1904,8 @@ export function projectSessionStateResponseData(value: unknown): unknown {
     "thinkingLevel",
     "isStreaming",
     "isCompacting",
+    "hasPendingAsyncWork",
+    "isSettled",
     "sessionId",
     "autoCompactionEnabled",
     "contextUsage",
@@ -1980,7 +2027,37 @@ export interface OmpPersistedSessionMessages {
 
 export type OmpAvailableCommand = z.infer<typeof OmpAvailableCommandSchema>;
 export type OmpImage = { type: "image"; data: string; mimeType: string };
-export type OmpExtensionUiResponse =
-  | { type: "extension_ui_response"; id: string; value: string }
-  | { type: "extension_ui_response"; id: string; confirmed: boolean }
-  | { type: "extension_ui_response"; id: string; cancelled: true; timedOut?: boolean };
+export const OmpExtensionUiResponseSchema = z.union([
+  z.object({ type: z.literal("extension_ui_response"), id: IDENTIFIER, value: TEXT }).strict(),
+  z
+    .object({ type: z.literal("extension_ui_response"), id: IDENTIFIER, confirmed: z.boolean() })
+    .strict(),
+  z
+    .object({
+      type: z.literal("extension_ui_response"),
+      id: IDENTIFIER,
+      cancelled: z.literal(true),
+      timedOut: z.boolean().optional(),
+    })
+    .strict(),
+  z
+    .object({
+      type: z.literal("extension_ui_response"),
+      id: IDENTIFIER,
+      answers: z
+        .array(
+          z
+            .object({
+              id: boundedString(MAX_ASK_QUESTION_ID_BYTES, 1),
+              selectedOptions: z.array(boundedString(4_096)).max(MAX_ASK_OPTIONS),
+              customInput: TEXT.optional(),
+            })
+            .strict(),
+        )
+        .min(1)
+        .max(MAX_ASK_QUESTIONS),
+    })
+    .strict(),
+]);
+export type OmpExtensionUiResponse = z.infer<typeof OmpExtensionUiResponseSchema>;
+export const OmpAskDialogEnabledSchema = z.object({ enabled: z.boolean() }).strict();

package/server/provider/omp-rpc.ts

@@ -10,6 +10,7 @@ import {
   MAX_REPLAY_MESSAGES,
   NAME,
   OMP_MESSAGE_PAGE_LIMIT,
+  OmpAskDialogEnabledSchema,
   type OmpAvailableCommand,
   OmpAvailableCommandsResultSchema,
   OmpBranchMessagesResultSchema,
@@ -18,6 +19,7 @@ import {
   type OmpCompactionResult,
   OmpCompactionResultSchema,
   type OmpExtensionUiResponse,
+  OmpExtensionUiResponseSchema,
   type OmpHostToolDefinition,
   OmpHostToolDefinitionSchema,
   type OmpHostToolResult,
@@ -546,7 +548,10 @@ class OmpRpcSession implements OmpRuntimeSession {
   }
 
   respondToExtensionUi(response: OmpExtensionUiResponse): Promise<void> {
-    return this.process.sendFrame(response);
+    // Callers chain `.catch` without a surrounding try, so a bad frame must reject, not throw.
+    const parsed = OmpExtensionUiResponseSchema.safeParse(response);
+    if (!parsed.success) return Promise.reject(parsed.error);
+    return this.process.sendFrame(parsed.data);
   }
   respondToToolApproval(response: OmpToolApprovalResponse): Promise<void> {
     return this.process.sendFrame(OmpToolApprovalResponseSchema.parse(response));
@@ -652,6 +657,7 @@ export class OmpRpcRuntime implements OmpRuntime {
         }),
       );
       options.signal?.throwIfAborted();
+      enableAskDialog(process);
       return new OmpRpcSession(
         process,
         removeAbortListener,
@@ -671,3 +677,17 @@ export class OmpRpcRuntime implements OmpRuntime {
     }
   }
 }
+
+/**
+ * Opts into OMP's single-request `ask` dialog so every question reaches Paseo as one card that can
+ * be revisited before submitting. OMP applies the flag in command order, so it is set before any
+ * later prompt can ask; startup does not wait for the acknowledgement. OMP releases without
+ * `set_ask_dialog` reject it and keep the per-question select/editor fallback, which the
+ * permission bridge still handles.
+ */
+function enableAskDialog(process: OmpRpcProcess): void {
+  process
+    .request({ type: "set_ask_dialog", enabled: true })
+    .then((data) => OmpAskDialogEnabledSchema.parse(data))
+    .catch(() => undefined);
+}

package/server/provider/registration.ts

@@ -97,6 +97,7 @@ const CAPABILITIES = [
   "prompt.command",
   "prompt.image",
   "prompt.steer",
+  "session.can_stop_runtime",
   "session.configure",
   "session.list",
   "session.persistence",

package/server/provider/session-history.ts

@@ -301,6 +301,10 @@ export class OmpHistorySession implements OmpOpenedSession {
     return Promise.resolve();
   }
 
+  canStopRuntime(): Promise<boolean> {
+    return Promise.resolve(true);
+  }
+
   beginConnectionShutdown(): void {
     this.lifetime.abort(new Error("OMP provider connection closed"));
   }

package/server/provider/session-permissions.ts

@@ -25,14 +25,23 @@ import type { OmpTimelineProjector, OmpTimelineScheduler } from "./timeline-proj
 type SessionPermissionInput = Extract<ProviderInput, { type: "session.permission" }>;
 type OmpQuestionRequest = Extract<
   Extract<OmpRpcEvent, { type: "extension_ui_request" }>,
-  { method: "select" | "confirm" | "input" | "editor" }
+  { method: "select" | "confirm" | "input" | "editor" | "ask" }
 >;
+type OmpAskRequest = Extract<OmpQuestionRequest, { method: "ask" }>;
 type Emit = (event: ProviderEvent) => void;
 
 const MAX_PENDING_PERMISSIONS = 32;
 const MAX_PENDING_PERMISSION_BYTES = 2 * 1024 * 1024;
 const MAX_RESOLVED_TOOL_APPROVAL_IDS = 1_024;
-const OMP_ASK_USER_FREEFORM_SENTINEL = "✏️ Type custom response...";
+/**
+ * Select rows that hand off to a follow-up free-text request: `ask_user` extensions follow with
+ * `input`, OMP's own `ask` fallback (hosts without `set_ask_dialog`) follows with `editor`.
+ */
+const OMP_FREEFORM_SENTINELS: readonly string[] = [
+  "✏️ Type custom response...",
+  "Other (type your own)",
+];
+const OMP_ASK_RECOMMENDED_SUFFIX = " (Recommended)";
 const MAX_FREEFORM_RESPONSE_BYTES = 64 * 1024;
 
 type PendingPermission = {
@@ -50,6 +59,14 @@ type PendingPermission = {
   turnId?: string;
   request: OmpQuestionRequest;
   freeformSentinel?: string;
+  askQuestions?: readonly PendingAskQuestion[];
+};
+/** One `ask` question as rendered on the Paseo card, with display labels mapped back to OMP. */
+type PendingAskQuestion = {
+  id: string;
+  header: string;
+  multi: boolean;
+  nativeLabels: ReadonlyMap<string, string>;
 };
 type PendingToolPermission = {
   nativeId: string;
@@ -75,6 +92,96 @@ function permissionFingerprint(request: OmpQuestionRequest): string {
   return createHash("sha256").update(JSON.stringify(request)).digest("base64url");
 }
 
+type CardQuestion = {
+  header: string;
+  question: string;
+  options: Array<{ label: string; value?: string; description?: string; preview?: string }>;
+  multiSelect: boolean;
+  allowOther?: boolean;
+  placeholder?: string;
+  prefill?: string;
+};
+type AskAnswer = { id: string; selectedOptions: string[]; customInput?: string };
+
+function uniqueLabel(base: string, used: Set<string>): string {
+  let label = base;
+  let suffix = 2;
+  while (used.has(label)) {
+    label = `${base} (${suffix})`;
+    suffix += 1;
+  }
+  used.add(label);
+  return label;
+}
+
+/**
+ * Paseo's question card submits a multi-select answer as one string: checked option labels in
+ * click order, then any typed answer, joined with ", ". Exact labels are consumed from the front,
+ * longest first so a label containing ", " wins over its prefix; the rest is the typed answer.
+ */
+function splitMultiSelectAnswer(
+  answer: string,
+  labels: readonly string[],
+): { selected: string[]; custom: string } {
+  const candidates = [...labels].sort((left, right) => right.length - left.length);
+  const selected: string[] = [];
+  let remaining = answer;
+  while (remaining.length > 0) {
+    const label = candidates.find(
+      (candidate) =>
+        !selected.includes(candidate) &&
+        (remaining === candidate || remaining.startsWith(`${candidate}, `)),
+    );
+    if (label === undefined) break;
+    selected.push(label);
+    remaining = remaining === label ? "" : remaining.slice(label.length + 2);
+  }
+  return { selected, custom: remaining };
+}
+
+/**
+ * Converts one card answer to OMP's shape. OMP rejects unknown or repeated labels and, for
+ * single-select questions, a selection combined with typed text, so neither is ever produced.
+ */
+function askAnswer(question: PendingAskQuestion, answer: unknown): AskAnswer {
+  const parts =
+    answer === undefined || answer === null
+      ? []
+      : typeof answer === "string"
+        ? [answer]
+        : Array.isArray(answer) && answer.every((part) => typeof part === "string")
+          ? answer
+          : undefined;
+  if (!parts) throw new OmpPublicError("OMP question response is invalid");
+  const labels = [...question.nativeLabels.keys()];
+  const selectedOptions: string[] = [];
+  const custom: string[] = [];
+  const select = (label: string) => {
+    const native = question.nativeLabels.get(label);
+    if (native !== undefined && !selectedOptions.includes(native)) selectedOptions.push(native);
+  };
+  for (const part of parts) {
+    if (question.nativeLabels.has(part)) {
+      select(part);
+    } else if (question.multi) {
+      const split = splitMultiSelectAnswer(part, labels);
+      for (const label of split.selected) select(label);
+      if (split.custom.trim()) custom.push(split.custom);
+    } else if (part.trim()) {
+      custom.push(part);
+    }
+  }
+  const customInput = custom.join(", ").trim();
+  if (
+    customInput.includes("\0") ||
+    utf8Bytes(customInput) > MAX_FREEFORM_RESPONSE_BYTES ||
+    (!question.multi && selectedOptions.length + (customInput ? 1 : 0) > 1)
+  ) {
+    throw new OmpPublicError("OMP question response is invalid");
+  }
+  return { id: question.id, selectedOptions, ...(customInput ? { customInput } : {}) };
+}
+
 interface PermissionContext {
   runtime: OmpRuntimeSession;
   generation: number;
@@ -279,7 +386,7 @@ export class OmpSessionPermissions {
   }
 
   submitPendingFreeformSelection(
-    request: Extract<OmpQuestionRequest, { method: "input" }>,
+    request: Extract<OmpQuestionRequest, { method: "input" | "editor" }>,
   ): boolean {
     const pending = this.pendingFreeformSelection;
     if (!pending) return false;
@@ -505,10 +612,17 @@ export class OmpSessionPermissions {
     if (!existingId) this.permissionSequence += 1;
     const id =
       existingId ?? `omp:permission:${this.permissionNamespace}:${this.permissionSequence}`;
-    const header = this.dataFilter.text(request.title ?? "OMP question", 4_096);
+    const header = this.dataFilter.text(
+      request.method === "ask"
+        ? request.questions.length === 1
+          ? "OMP question"
+          : `OMP questions (${request.questions.length})`
+        : (request.title ?? "OMP question"),
+      4_096,
+    );
     const freeformSentinel =
-      request.method === "select" && request.options.includes(OMP_ASK_USER_FREEFORM_SENTINEL)
-        ? OMP_ASK_USER_FREEFORM_SENTINEL
+      request.method === "select"
+        ? request.options.find((option) => OMP_FREEFORM_SENTINELS.includes(option))
         : undefined;
     const optionValues = new Map<string, string>();
     const displayValues = new Map<string, string>();
@@ -523,14 +637,7 @@ export class OmpSessionPermissions {
     const options =
       request.method === "select"
         ? selectableOptions.map(({ nativeValue, index }) => {
-            const baseLabel = this.dataFilter.text(nativeValue, 4_096);
-            let label = baseLabel;
-            let suffix = 2;
-            while (usedOptionLabels.has(label)) {
-              label = `${baseLabel} (${suffix})`;
-              suffix += 1;
-            }
-            usedOptionLabels.add(label);
+            const label = uniqueLabel(this.dataFilter.text(nativeValue, 4_096), usedOptionLabels);
             const value = `${id}:option:${index}`;
             optionValues.set(value, nativeValue);
             displayValues.set(label, nativeValue);
@@ -550,6 +657,28 @@ export class OmpSessionPermissions {
         : undefined;
     const questionOptions =
       request.method === "confirm" ? [{ label: "Yes" }, { label: "No" }] : (options ?? []);
+    const ask = request.method === "ask" ? this.askCard(request) : undefined;
+    const cardQuestions: CardQuestion[] =
+      request.method === "ask"
+        ? (ask?.questions ?? [])
+        : [
+            {
+              header,
+              question: this.dataFilter.text(
+                request.method === "confirm" ? request.message : request.title,
+                64 * 1024,
+              ),
+              options: questionOptions,
+              multiSelect: false,
+              ...(freeformSentinel ? { allowOther: true } : {}),
+              ...(request.method === "input" && request.placeholder
+                ? { placeholder: this.dataFilter.text(request.placeholder, 4_096) }
+                : {}),
+              ...((request.method === "input" || request.method === "editor") && request.prefill
+                ? { prefill: this.dataFilter.text(request.prefill) }
+                : {}),
+            },
+          ];
     const actions =
       request.method === "select"
         ? [
@@ -591,7 +720,7 @@ export class OmpSessionPermissions {
       runtime: this.runtime,
       request,
       retainedBytes: boundedJsonBytes(
-        { request, header, options: questionOptions, actions },
+        { request, header, questions: cardQuestions, actions },
         MAX_PENDING_PERMISSION_BYTES,
         512,
         MAX_PENDING_PERMISSION_BYTES,
@@ -600,6 +729,7 @@ export class OmpSessionPermissions {
       ...(this.activeTurn ? { turnId: this.activeTurn.turnId } : {}),
       ...(request.timeout !== undefined ? { expiresAt: Date.now() + request.timeout } : {}),
       ...(freeformSentinel ? { freeformSentinel } : {}),
+      ...(ask ? { askQuestions: ask.pending } : {}),
     };
     let retainedPermissionBytes = pending.retainedBytes;
     for (const [permissionId, retained] of this.pendingPermissions) {
@@ -647,26 +777,7 @@ export class OmpSessionPermissions {
         ...(request.method === "confirm"
           ? { description: this.dataFilter.text(request.message, 64 * 1024) }
           : {}),
-        input: {
-          questions: [
-            {
-              header,
-              question: this.dataFilter.text(
-                request.method === "confirm" ? request.message : request.title,
-                64 * 1024,
-              ),
-              options: questionOptions,
-              multiSelect: false,
-              ...(freeformSentinel ? { allowOther: true } : {}),
-              ...(request.method === "input" && request.placeholder
-                ? { placeholder: this.dataFilter.text(request.placeholder, 4_096) }
-                : {}),
-              ...((request.method === "input" || request.method === "editor") && request.prefill
-                ? { prefill: this.dataFilter.text(request.prefill) }
-                : {}),
-            },
-          ],
-        },
+        input: { questions: cardQuestions },
         actions,
       },
     });
@@ -688,6 +799,76 @@ export class OmpSessionPermissions {
       .catch(() => this.handleRuntimeFailure());
   }
 
+  /**
+   * Renders every `ask` question on one card. Headers key the card's answers and option labels
+   * come back verbatim, so both are made unique here and mapped back to OMP's labels on submit.
+   */
+  private askCard(request: OmpAskRequest): {
+    questions: CardQuestion[];
+    pending: PendingAskQuestion[];
+  } {
+    const usedHeaders = new Set<string>();
+    const questions: CardQuestion[] = [];
+    const pending: PendingAskQuestion[] = [];
+    for (const [index, question] of request.questions.entries()) {
+      const header = uniqueLabel(
+        this.dataFilter.text(question.header?.trim() || `Question ${index + 1}`, 4_096),
+        usedHeaders,
+      );
+      const usedLabels = new Set<string>();
+      const nativeLabels = new Map<string, string>();
+      const options = question.options.map((option, optionIndex) => {
+        const label = uniqueLabel(
+          `${this.dataFilter.text(option.label, 4_096)}${
+            optionIndex === question.recommended ? OMP_ASK_RECOMMENDED_SUFFIX : ""
+          }`,
+          usedLabels,
+        );
+        nativeLabels.set(label, option.label);
+        return {
+          label,
+          ...(option.description
+            ? { description: this.dataFilter.text(option.description, 16_384) }
+            : {}),
+          ...(option.preview ? { preview: this.dataFilter.text(option.preview, 64 * 1024) } : {}),
+        };
+      });
+      const multi = question.multi === true;
+      questions.push({
+        header,
+        question: this.dataFilter.text(question.question, 64 * 1024),
+        options,
+        multiSelect: multi,
+        allowOther: true,
+      });
+      pending.push({ id: question.id, header, multi, nativeLabels });
+    }
+    return { questions, pending };
+  }
+
+  /** Maps card answers to OMP's per-question `selectedOptions`/`customInput` in question order. */
+  private askResponse(
+    pending: PendingPermission,
+    response: ProviderPermissionResponse,
+  ): OmpExtensionUiResponse {
+    const answers = response.behavior === "allow" ? response.updatedInput?.answers : undefined;
+    if (
+      !pending.askQuestions ||
+      !answers ||
+      typeof answers !== "object" ||
+      Array.isArray(answers)
+    ) {
+      throw new OmpPublicError("OMP question response requires answers");
+    }
+    return {
+      type: "extension_ui_response",
+      id: pending.nativeId,
+      answers: pending.askQuestions.map((question) =>
+        askAnswer(question, (answers as Record<string, unknown>)[question.header]),
+      ),
+    };
+  }
+
   private freeformSelection(
     pending: PendingPermission,
     response: ProviderPermissionResponse,
@@ -754,6 +935,7 @@ export class OmpSessionPermissions {
     if (response.behavior === "deny") {
       return { type: "extension_ui_response", id: nativeId, cancelled: true };
     }
+    if (request.method === "ask") return this.askResponse(pending, response);
     const selectedValue = response.selectedActionId
       ? pending.optionValues.get(response.selectedActionId)
       : undefined;
@@ -968,6 +1150,16 @@ export class OmpSessionPermissions {
     return this.activeTurn?.turnId === pending.turnId && !this.activeTurn.terminal;
   }
 
+  hasPending(): boolean {
+    return (
+      this.pendingPermissions.size > 0 ||
+      this.inFlightPermissions.size > 0 ||
+      this.pendingToolPermissions.size > 0 ||
+      this.inFlightToolPermissions.size > 0 ||
+      this.pendingFreeformSelection !== null
+    );
+  }
+
   hasForTurn(turnId: string): boolean {
     const ownsTurn = (pending: PendingPermission | PendingToolPermission) =>
       pending.turnId === turnId;

package/server/provider/session.ts

@@ -111,6 +111,7 @@ export interface OmpOpenedSession {
   configure(input: SessionConfigureInput): Promise<void>;
   revert(input: SessionRevertInput): Promise<void>;
   interrupt(input: SessionInterruptInput): Promise<void>;
+  canStopRuntime(): Promise<boolean>;
   close(input?: SessionCloseInput): Promise<void>;
   abortOpen(): Promise<void>;
   beginConnectionShutdown(): void;
@@ -1465,6 +1466,28 @@ export class OmpProviderSession implements OmpOpenedSession {
     }
   }
 
+  async canStopRuntime(): Promise<boolean> {
+    const hasLocalWork =
+      this.closed ||
+      this.runtimeDead !== null ||
+      this.recoveryPromise !== null ||
+      this.activeTurn !== null ||
+      this.activeAbort !== null ||
+      this.revertInFlight ||
+      this.configMutationInFlight ||
+      this.permissions.hasPending() ||
+      Boolean(this.subsessions?.hasActiveChildren());
+    if (hasLocalWork) return false;
+    const state = await this.runtime.getState();
+    // OMP builds that predate these fields report neither, which keeps the runtime alive.
+    return (
+      state.isSettled === true &&
+      state.hasPendingAsyncWork === false &&
+      !state.isStreaming &&
+      !state.isCompacting
+    );
+  }
+
   async interrupt(input: SessionInterruptInput): Promise<void> {
     const turn = this.activeTurn;
     if (!turn) {
@@ -2280,13 +2303,17 @@ export class OmpProviderSession implements OmpOpenedSession {
         this.permissions.resolvePermissionByNativeId(event.targetId ?? "");
         return;
       }
-      if (event.method === "input" && this.permissions.submitPendingFreeformSelection(event))
+      if (
+        (event.method === "input" || event.method === "editor") &&
+        this.permissions.submitPendingFreeformSelection(event)
+      )
         return;
       if (
         event.method === "select" ||
         event.method === "confirm" ||
         event.method === "input" ||
-        event.method === "editor"
+        event.method === "editor" ||
+        event.method === "ask"
       ) {
         if (!this.capabilities.includes("permission")) {
           this.handleRuntimeFailure();
@@ -2459,7 +2486,9 @@ export class OmpProviderSession implements OmpOpenedSession {
     if (event.type === "tool_execution_start") turn.activeToolCallIds.add(event.toolCallId);
     if (event.type === "tool_execution_end") {
       turn.activeToolCallIds.delete(event.toolCallId);
-      if (event.toolName === "ask_user") this.permissions.clearPendingFreeformSelection();
+      if (event.toolName === "ask_user" || event.toolName === "ask") {
+        this.permissions.clearPendingFreeformSelection();
+      }
     }
     if (event.type === "tool_execution_start" || event.type === "tool_execution_end") {
       try {