@omercnet/paseo-omp 5.1.0 → 5.1.1-next.335.1

package/README.md

@@ -54,7 +54,7 @@ Profile selection is request-local: concurrent clients cannot change each other'
 
 ## Paseo provider SDK coverage
 
-The capability inventory is pinned to `@getpaseo/plugin` 0.14.0-beta.1, with nightly compatibility checks
+The capability inventory is pinned to `@getpaseo/plugin` 0.14.0, with nightly compatibility checks
 against the latest and beta channels. Provider capability scoring covers
 all 18 entries in the SDK's `PROVIDER_CAPABILITIES`; the separate provider/client SDK table below
 also tracks the registration, screen, and sidebar APIs introduced in 0.11. This measures strict SDK surface
@@ -126,7 +126,7 @@ Existing agents whose provider is `omp` remain owned by the bundled provider. Ne
 
 OMP `18.1.15` is the oldest version tested end to end. The direct provider's hard compatibility gate is `rpc-ui` protocol v2: metadata-free legacy ready frames and v1-only runtimes are rejected before a provider session opens because they cannot support the advertised persistence and conversation-rewind capabilities. Typed tool approvals remain capability-gated and fall back as described above. For terminal completion, a matching `agent_end.requestId` is authoritative and mismatches are ignored before state changes. Released OMP 18.2.x builds that omit that field use an ordered fallback requiring a fresh correlated native user entry followed by current-turn assistant activity, an idle non-compacting runtime, and no conflicting permission, tool, steer, or child-session work. Ambiguous events while OMP is active are ignored; unresolved ambiguity after confirmed idle fails only the Paseo turn. This trades a bounded residual same-agent stale-event risk for compatibility with released OMP instead of terminating and lazily restarting the runtime after every later prompt. Paseo clients, including mobile clients inside reconnect grace, do not own or terminate the daemon-managed OMP session.
 
-Paseo 0.14 is the minimum supported release. The controlled Docker canary is pinned to official 0.14.0-beta.1; nightly SDK checks cover the latest and beta channels. The canary preserves nested provider-subagent ancestry and spawning-tool links, and validates npm-managed plugin sources, platform-owned external URL opening, and whole-item timeline transforms before Overview grouping.
+Paseo 0.14 is the minimum supported release. The controlled Docker canary is pinned to official 0.14.0; nightly SDK checks cover the latest and beta channels. The canary preserves nested provider-subagent ancestry and spawning-tool links, and validates npm-managed plugin sources, platform-owned external URL opening, and whole-item timeline transforms before Overview grouping.
 
 Paseo releases idle resumable agent runtimes after one hour; the agent stays listed as `closed` and the next prompt resumes the same OMP session. The plugin vetoes that release while the session has a running turn, a pending permission, an active subagent, or OMP background async work, and while OMP does not report a settled state (the plugin needs the `hasPendingAsyncWork` and `isSettled` fields in OMP's `get_state`; builds without them are never released). Set `agents.idleRuntimeCleanup: false` in the Paseo config to disable idle release for every provider.
 

package/npm-shrinkwrap.json

@@ -1,22 +1,22 @@
 {
   "name": "@omercnet/paseo-omp",
-  "version": "5.1.0",
+  "version": "5.1.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@omercnet/paseo-omp",
-      "version": "5.1.0",
+      "version": "5.1.1",
       "dependencies": {
-        "@getpaseo/protocol": "0.14.0-beta.1",
+        "@getpaseo/protocol": "0.14.0",
         "@modelcontextprotocol/sdk": "1.30.0",
         "yaml": "^2.9.0"
       }
     },
     "node_modules/@getpaseo/protocol": {
-      "version": "0.14.0-beta.1",
-      "resolved": "https://registry.npmjs.org/@getpaseo/protocol/-/protocol-0.14.0-beta.1.tgz",
-      "integrity": "sha512-qkZCmLlL5EQ1PkN0Jy8JLIfyqoj34UC2HdJIicERQ/OdrYGQ3krpOfIpYJ3c3BU27GcDL/E4aoA0GbuEVR4qUw==",
+      "version": "0.14.0",
+      "resolved": "https://registry.npmjs.org/@getpaseo/protocol/-/protocol-0.14.0.tgz",
+      "integrity": "sha512-fF0na1u91sKKgk6R0EKtXQMTJKbqLx8jZ8IuiUcm3jLVOnGruAvPggAQVAzm4MX2mrikesj3immqztHjPNxjTQ==",
       "dependencies": {
         "semver": "^7.8.5",
         "zod": "^4.4.3"
@@ -313,12 +313,16 @@
       "license": "MIT"
     },
     "node_modules/encodeurl": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
-      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.1.tgz",
+      "integrity": "sha512-Ev/hIyePLZtpL98x562lvPtenrUfGr0lfaf44HFZ+hDEwso7ccV9QAZrEVLg0hxNAzygaAFxy2dYaAKKM0G06A==",
       "license": "MIT",
       "engines": {
         "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/es-define-property": {
@@ -687,9 +691,9 @@
       "license": "ISC"
     },
     "node_modules/jose": {
-      "version": "6.2.13",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.13.tgz",
-      "integrity": "sha512-7TIg10ZE1x82YediN+lcrPNvGMKge9yFHQD+Qho/b8y2adfugU3AsvvHfxV0fzyFllT6l9xCjf4RWY9g/Z9PJQ==",
+      "version": "6.2.14",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.14.tgz",
+      "integrity": "sha512-3JasLuki1NRLQvY4wCoC37KZk4qxoBx2k2aFqLxT84IezqW0bkJKnNtxnZj/Fu1xsQivoc/lytxaRHJoGLjJ1A==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
@@ -902,9 +906,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.17.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.17.0.tgz",
-      "integrity": "sha512-5LK5BZ2XDHMvcUJaf0CQ5HL3aVgKbpklvByC7qLSxYkfE8COEEbJg5xCHWCTqzqi0Gs4Jn5Mv5v3R38W6edscA==",
+      "version": "6.17.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.17.1.tgz",
+      "integrity": "sha512-jd3COkaKVgGUW+ZHyEHCG9bH7RoaaiWuMgzsIBjUMVjLAaWGWpoUAVwljVvBHxRu/2qEHnadLGZrkutYUBPQJA==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "es-define-property": "^1.0.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omercnet/paseo-omp",
-  "version": "5.1.0",
+  "version": "5.1.1-next.335.1",
   "type": "module",
   "description": "Paseo integration for OMP, including its direct provider and workspace tooling.",
   "license": "MIT",
@@ -54,16 +54,16 @@
     "typecheck": "tsc --noEmit -p tsconfig.client.json && tsc --noEmit -p tsconfig.server.json && tsc --noEmit -p tsconfig.tests.json"
   },
   "dependencies": {
-    "@getpaseo/protocol": "0.14.0-beta.1",
+    "@getpaseo/protocol": "0.14.0",
     "@modelcontextprotocol/sdk": "1.30.0",
     "yaml": "^2.9.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.10",
-    "@getpaseo/cli": "0.14.0-beta.1",
-    "@getpaseo/client": "0.14.0-beta.1",
-    "@getpaseo/plugin": "0.14.0-beta.1",
-    "@getpaseo/server": "0.14.0-beta.1",
+    "@getpaseo/cli": "0.14.0",
+    "@getpaseo/client": "0.14.0",
+    "@getpaseo/plugin": "0.14.0",
+    "@getpaseo/server": "0.14.0",
     "@oh-my-pi/pi-agent-core": "18.12.6",
     "@oh-my-pi/pi-coding-agent": "18.12.6",
     "@tanstack/react-query": "^5.102.3",
@@ -71,9 +71,9 @@
     "@types/react": "^19.2.18",
     "@vitest/coverage-v8": "^5.0.0",
     "esbuild": "0.28.2",
+    "pino": "10.3.1",
     "react": "19.1.0",
     "react-native": "0.81.5",
-    "pino": "10.3.1",
     "tsx": "^4.20.6",
     "typescript": "^7.0.2",
     "vitest": "^5.0.0",

package/server/package-version.ts

@@ -1,2 +1,2 @@
 /** Release Please keeps this bundle-safe constant aligned with package.json. */
-export const PASEO_OMP_PACKAGE_VERSION = "5.1.0"; // x-release-please-version
+export const PASEO_OMP_PACKAGE_VERSION = "5.1.1-next.335.1"; // x-release-please-version

package/server/provider/omp-rpc-transport.ts

@@ -1003,7 +1003,12 @@ export class OmpRpcProcess {
         4_096,
       ) !== Number.POSITIVE_INFINITY;
     if (onlyUnsafePayload && payloadIsSafe) return false;
-    if (envelope.data.isTerminal === false) {
+    // Nonterminal messages are never read, so an over-budget list is dropped like a terminal one.
+    if (
+      envelope.data.isTerminal === false &&
+      frame.messages !== undefined &&
+      !Array.isArray(frame.messages)
+    ) {
       this.fail(new Error("OMP emitted an invalid nonterminal agent_end payload"));
       return true;
     }
@@ -1351,6 +1356,7 @@ export class OmpRpcProcess {
     }
   }
 
+  // The session shows this message to the user. Pass only plugin-authored text, never OMP output.
   private fail(error: Error): void {
     if (this.fatalError || this.closed) return;
     this.fatalError = error;

package/server/provider/session.ts

@@ -2359,7 +2359,7 @@ export class OmpProviderSession implements OmpOpenedSession {
       return;
     }
     if (event.type === "process_exit") {
-      this.handleRuntimeFailure();
+      this.handleRuntimeFailure(`OMP runtime failed: ${event.error}`);
       return;
     }
     if (event.type === "retry_fallback_applied" || event.type === "retry_fallback_succeeded") {

package/server/provider/timeline-projector.ts

@@ -372,8 +372,8 @@ export class OmpTimelineProjector {
   private flushTimer: unknown;
   private currentTurnId: string | null = null;
   private assistantSequence = 0;
+  // Least recently used first, so a long turn evicts its oldest identities.
   private readonly turnNativeMessageIds = new Map<string, string>();
-  private nativeIdentitySaturated = false;
   private assistantIdentitySequence = 0;
   private noticeSequence = 0;
   private toolSequence = 0;
@@ -901,7 +901,6 @@ export class OmpTimelineProjector {
     this.currentTurnId = null;
     this.assistantSequence = 0;
     this.turnNativeMessageIds.clear();
-    this.nativeIdentitySaturated = false;
     this.assistantIdentitySequence = 0;
     this.toolSequence = 0;
     this.userSequence = 0;
@@ -1174,7 +1173,6 @@ export class OmpTimelineProjector {
     this.currentTurnId = null;
     this.assistantSequence = 0;
     this.turnNativeMessageIds.clear();
-    this.nativeIdentitySaturated = false;
   }
 
   close(): void {
@@ -1242,13 +1240,12 @@ export class OmpTimelineProjector {
     this.commandPublishedText = "";
   }
 
-  private beginStream(message: OmpAssistantMessage, turnId: string): StreamSnapshot | null {
+  private beginStream(message: OmpAssistantMessage, turnId: string): StreamSnapshot {
     this.assistantSequence += 1;
     const nativeIdentity = assistantIdentity(message);
     const messageId = nativeIdentity
       ? this.messageIdForNativeIdentity(nativeIdentity)
       : this.nextAssistantMessageId(`turn:${turnId}:${this.assistantSequence}`);
-    if (!messageId) return null;
     this.stream = {
       messageId,
       ...(nativeIdentity ? { nativeIdentity } : {}),
@@ -1261,15 +1258,16 @@ export class OmpTimelineProjector {
     };
     return this.stream;
   }
-  private messageIdForNativeIdentity(nativeIdentity: string): string | undefined {
+  private messageIdForNativeIdentity(nativeIdentity: string): string {
     const existing = this.turnNativeMessageIds.get(nativeIdentity);
-    if (existing) return existing;
-    if (
-      this.nativeIdentitySaturated ||
-      this.turnNativeMessageIds.size >= MAX_TURN_NATIVE_IDENTITIES
-    ) {
-      this.nativeIdentitySaturated = true;
-      return undefined;
+    if (existing) {
+      this.turnNativeMessageIds.delete(nativeIdentity);
+      this.turnNativeMessageIds.set(nativeIdentity, existing);
+      return existing;
+    }
+    if (this.turnNativeMessageIds.size >= MAX_TURN_NATIVE_IDENTITIES) {
+      const oldest = this.turnNativeMessageIds.keys().next().value;
+      if (oldest !== undefined) this.turnNativeMessageIds.delete(oldest);
     }
     const messageId = this.nextAssistantMessageId(nativeIdentity);
     this.turnNativeMessageIds.set(nativeIdentity, messageId);
@@ -1290,12 +1288,7 @@ export class OmpTimelineProjector {
     const nativeIdentity = assistantIdentity(message);
     if (this.stream && nativeIdentity && this.stream.nativeIdentity !== nativeIdentity) {
       if (!this.stream.nativeIdentity && !this.stream.published) {
-        const messageId = this.messageIdForNativeIdentity(nativeIdentity);
-        if (!messageId) {
-          this.stream = null;
-          return;
-        }
-        this.stream.messageId = messageId;
+        this.stream.messageId = this.messageIdForNativeIdentity(nativeIdentity);
         this.stream.nativeIdentity = nativeIdentity;
       } else {
         this.flush();
@@ -1303,7 +1296,6 @@ export class OmpTimelineProjector {
       }
     }
     const stream = this.stream ?? this.beginStream(message, turnId);
-    if (!stream) return;
     if (update?.contentIndex !== undefined) {
       this.updateBlock(stream, message, update.contentIndex, update);
       return;