@polderlabs/bizar-omp 0.6.1 → 0.6.3

package/dist/tests/tmux.test.js

@@ -0,0 +1,239 @@
+import { describe, expect, it, vi } from "vitest";
+import { chmodSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { launchOmb, ombSessionName, shouldLaunchOmbInTmux } from "../src/omp/tmux.js";
+const isWindows = process.platform === "win32";
+/**
+ * Bizar hosts run the inner OMP inside the multiplexer boundary
+ * (`TMUX`/`TMUX_PANE`) with `BIZAR_OMP_NO_TMUX=1`, so an inherited
+ * `process.env` silently disables the boundary these tests exercise and the
+ * launcher spawns a real interactive OMP instead. Build the launch
+ * environment explicitly rather than inheriting host state.
+ */
+function hermeticEnv(overrides = {}) {
+    const env = { ...process.env, ...overrides };
+    delete env.TMUX;
+    delete env.TMUX_PANE;
+    delete env.BIZAR_OMP_NO_TMUX;
+    return env;
+}
+/** Force interactive-host detection without depending on the runner's stdio. */
+function stubInteractiveTty() {
+    const previousIn = Object.getOwnPropertyDescriptor(process.stdin, "isTTY");
+    const previousOut = Object.getOwnPropertyDescriptor(process.stdout, "isTTY");
+    Object.defineProperty(process.stdin, "isTTY", { configurable: true, value: true });
+    Object.defineProperty(process.stdout, "isTTY", { configurable: true, value: true });
+    return () => {
+        if (previousIn)
+            Object.defineProperty(process.stdin, "isTTY", previousIn);
+        else
+            Reflect.deleteProperty(process.stdin, "isTTY");
+        if (previousOut)
+            Object.defineProperty(process.stdout, "isTTY", previousOut);
+        else
+            Reflect.deleteProperty(process.stdout, "isTTY");
+    };
+}
+describe("omb launcher", () => {
+    const tty = { stdinIsTTY: true, stdoutIsTTY: true, args: [] };
+    it("uses the multiplexer only for interactive hosts outside tmux", () => {
+        // The psmux integration enables the boundary on every platform; Windows
+        // resolves to psmux (asserted live in psmux-windows.test.ts).
+        expect(shouldLaunchOmbInTmux({ ...tty, env: {} })).toBe(true);
+        expect(shouldLaunchOmbInTmux({ ...tty, env: { TMUX: "/tmp/tmux" } })).toBe(false);
+        expect(shouldLaunchOmbInTmux({ ...tty, env: { BIZAR_OMP_NO_TMUX: "1" } })).toBe(false);
+        expect(shouldLaunchOmbInTmux({ ...tty, args: ["--print"] })).toBe(false);
+        expect(shouldLaunchOmbInTmux({ ...tty, args: ["--mode", "rpc"] })).toBe(false);
+        expect(shouldLaunchOmbInTmux({ ...tty, stdinIsTTY: false })).toBe(false);
+    });
+    it("creates stable, safe per-project session names", () => {
+        const first = ombSessionName("/work/my project");
+        expect(first).toBe(ombSessionName("/work/my project"));
+        expect(first).toMatch(/^bizar-my-project-[a-f0-9]{10}$/);
+        expect(first.length).toBeLessThanOrEqual(63);
+        expect(ombSessionName("/work/my project", "review"))
+            .toMatch(/^bizar-my-project-[a-f0-9]{10}-review$/);
+        expect(ombSessionName("/work/my project", "review"))
+            .not.toBe(first);
+        expect(ombSessionName("/work/my project", "!!!")).toBe(first);
+    });
+    it("launches through the foreground tmux boundary without a detached handoff", async () => {
+        if (isWindows)
+            return; // `/usr/bin/true` stand-in does not exist on Windows.
+        const restoreTty = stubInteractiveTty();
+        try {
+            await expect(launchOmb("/tmp", [], hermeticEnv({ BIZAR_TMUX_BIN: "true" }))).resolves.toBe(0);
+        }
+        finally {
+            restoreTty();
+        }
+    });
+    it("gives each Bizar host an isolated native OMP session directory", async () => {
+        if (isWindows)
+            return; // /bin/sh fake multiplexer cannot run on Windows.
+        const root = mkdtempSync(join(tmpdir(), "bizar-native-session-test-"));
+        const fakeTmux = join(root, "tmux");
+        const log = join(root, "calls");
+        writeFileSync(fakeTmux, "#!/bin/sh\nprintf '%s\\n' \"$*\" >> \"$BIZAR_TEST_TMUX_LOG\"\ncase \"$1\" in has-session) exit 1;; list-panes) printf '0\\n';; esac\n");
+        chmodSync(fakeTmux, 0o755);
+        const restoreTty = stubInteractiveTty();
+        const env = hermeticEnv({ BIZAR_TMUX_BIN: fakeTmux, BIZAR_TEST_TMUX_LOG: log, XDG_STATE_HOME: root });
+        try {
+            await expect(launchOmb("/tmp", ["Investigate the API"], env, "review")).resolves.toBe(0);
+            expect(readFileSync(log, "utf8")).toContain("new-session -d -s bizar-tmp-");
+            expect(readFileSync(log, "utf8")).toContain("--session-dir");
+            expect(readFileSync(log, "utf8")).toContain("/bizar-omp/native-sessions/");
+        }
+        finally {
+            restoreTty();
+            rmSync(root, { recursive: true, force: true });
+        }
+    });
+    it("keeps direct noninteractive invocation out of tmux", async () => {
+        if (isWindows)
+            return; // `/usr/bin/true` stand-in does not exist on Windows.
+        await expect(launchOmb("/tmp", ["--print"], hermeticEnv({ BIZAR_OMP_BIN: "true" }))).resolves.toBe(0);
+    });
+    it("falls back to a direct OMP spawn when no multiplexer binary exists", async () => {
+        const restoreTty = stubInteractiveTty();
+        // `/usr/bin/true` accepts any args and exits 0 on POSIX; cmd's no-op
+        // variant serves the same purpose on Windows.
+        const env = hermeticEnv({
+            BIZAR_TMUX_BIN: "definitely-not-a-multiplexer-xyz",
+            BIZAR_OMP_BIN: isWindows ? "cmd.exe" : "true",
+        });
+        try {
+            await expect(launchOmb("/tmp", isWindows ? ["/c", "exit"] : [], env)).resolves.toBe(0);
+        }
+        finally {
+            restoreTty();
+        }
+    });
+    it("respawns a dead host pane before reconnecting and preserves mouse scrolling", async () => {
+        if (isWindows)
+            return; // /bin/sh fake multiplexer cannot run on Windows.
+        const root = mkdtempSync(join(tmpdir(), "bizar-tmux-test-"));
+        const fakeTmux = join(root, "tmux");
+        const log = join(root, "calls");
+        writeFileSync(fakeTmux, "#!/bin/sh\nprintf '%s\\n' \"$*\" >> \"$BIZAR_TEST_TMUX_LOG\"\ncase \"$1\" in list-panes) printf '1\\n';; esac\n");
+        chmodSync(fakeTmux, 0o755);
+        const restoreTty = stubInteractiveTty();
+        const env = hermeticEnv({ BIZAR_TMUX_BIN: fakeTmux, BIZAR_TEST_TMUX_LOG: log });
+        try {
+            await expect(launchOmb("/tmp", [], env)).resolves.toBe(0);
+            expect(readFileSync(log, "utf8").trim().split("\n")).toEqual([
+                expect.stringContaining("list-sessions -F "),
+                expect.stringContaining("has-session -t "),
+                expect.stringContaining("list-panes -t "),
+                expect.stringContaining("respawn-pane -k -t "),
+                expect.stringContaining("remain-on-exit off"),
+                expect.stringContaining("history-limit 100000"),
+                expect.stringContaining("set-option -t "),
+                expect.stringContaining("bind-key -T "),
+                expect.stringContaining("bind-key -T "),
+                expect.stringContaining("bind-key -T "),
+                expect.stringContaining("bind-key -T "),
+                expect.stringContaining("bind-key -T "),
+                expect.stringContaining("bind-key -T "),
+                expect.stringContaining("bind-key -T "),
+                expect.stringContaining("bind-key -T "),
+                expect.stringContaining("set-option -t "),
+                expect.stringContaining("attach-session -t "),
+            ]);
+            expect(readFileSync(log, "utf8")).toContain("remain-on-exit off");
+            expect(readFileSync(log, "utf8")).not.toContain("remain-on-exit on");
+            expect(readFileSync(log, "utf8")).toContain("mouse on");
+            expect(readFileSync(log, "utf8")).toContain("C-d detach-client");
+            expect(readFileSync(log, "utf8")).toContain("C-c detach-client");
+            expect(readFileSync(log, "utf8")).toContain("C-b switch-client -T prefix");
+            expect(readFileSync(log, "utf8")).toContain("key-table bizar-");
+            expect(readFileSync(log, "utf8")).toContain("WheelUpPane if-shell -F #{alternate_on} send-keys -M copy-mode -e; send-keys -M");
+            expect(readFileSync(log, "utf8")).toContain("WheelDownPane if-shell -F #{alternate_on} send-keys -M send-keys -M");
+            expect(readFileSync(log, "utf8")).toContain("MouseDown1Pane if-shell -F #{alternate_on} send-keys -M select-pane");
+        }
+        finally {
+            restoreTty();
+            rmSync(root, { recursive: true, force: true });
+        }
+    });
+    it("skips tmux key-table binds under psmux on Windows but keeps them on POSIX", async () => {
+        const root = mkdtempSync(join(tmpdir(), "bizar-fake-mux-"));
+        const log = join(root, "calls");
+        const fake = (body) => `require("fs").appendFileSync(process.env.BIZAR_TEST_TMUX_LOG, process.argv.slice(1).join(" ") + "\\n");\n${body}\n`;
+        for (const [name, body] of [
+            ["list-sessions", "process.exit(1);"],
+            ["has-session", "process.exit(1);"],
+            ["new-session", ""],
+            ["list-panes", 'process.stdout.write("0\\n");'],
+            ["set-option", ""],
+            ["bind-key", ""],
+            ["respawn-pane", ""],
+            ["attach-session", "process.exit(0);"],
+        ]) {
+            writeFileSync(join(root, name), fake(body));
+        }
+        // Launch through an explicit environment: an inherited `process.env` from a
+        // Bizar host carries `BIZAR_OMP_NO_TMUX=1`, which disables the multiplexer
+        // boundary this test exercises and hands the terminal to a real OMP.
+        const env = hermeticEnv({ BIZAR_TMUX_BIN: process.execPath, BIZAR_TEST_TMUX_LOG: log, XDG_STATE_HOME: root });
+        const restoreTty = stubInteractiveTty();
+        try {
+            await expect(launchOmb(root, [], env)).resolves.toBe(0);
+            const lines = readFileSync(log, "utf8").trim().split("\n");
+            const has = (needle) => lines.some((line) => line.includes(needle));
+            expect(has("attach-session -t ")).toBe(true);
+            if (isWindows) {
+                expect(has("bind-key")).toBe(false);
+                expect(has("-bizar-root")).toBe(false);
+                expect(has("key-table")).toBe(false);
+            }
+            else {
+                expect(has("bind-key -T ")).toBe(true);
+                expect(has("-bizar-root")).toBe(true);
+                expect(has("key-table ")).toBe(true);
+            }
+        }
+        finally {
+            restoreTty();
+            rmSync(root, { recursive: true, force: true });
+        }
+    });
+    it("pauses stdin before handing a TTY off to the direct fallback child", async () => {
+        process.stdin.resume();
+        const previousBin = process.env.BIZAR_TMUX_BIN;
+        const previousOmp = process.env.BIZAR_OMP_BIN;
+        const previousIn = Object.getOwnPropertyDescriptor(process.stdin, "isTTY");
+        const previousOut = Object.getOwnPropertyDescriptor(process.stdout, "isTTY");
+        process.env.BIZAR_TMUX_BIN = "definitely-not-a-multiplexer-xyz";
+        process.env.BIZAR_OMP_BIN = isWindows ? "cmd.exe" : "true";
+        Object.defineProperty(process.stdin, "isTTY", { configurable: true, value: true });
+        Object.defineProperty(process.stdout, "isTTY", { configurable: true, value: true });
+        const pauseSpy = vi.spyOn(process.stdin, "pause");
+        try {
+            await expect(launchOmb(isWindows ? process.cwd() : "/tmp", isWindows ? ["/c", "exit"] : [], process.env)).resolves.toBe(0);
+            expect(pauseSpy).toHaveBeenCalledTimes(1);
+        }
+        finally {
+            pauseSpy.mockRestore();
+            if (previousIn)
+                Object.defineProperty(process.stdin, "isTTY", previousIn);
+            else
+                delete process.stdin.isTTY;
+            if (previousOut)
+                Object.defineProperty(process.stdout, "isTTY", previousOut);
+            else
+                delete process.stdout.isTTY;
+            if (previousBin === undefined)
+                delete process.env.BIZAR_TMUX_BIN;
+            else
+                process.env.BIZAR_TMUX_BIN = previousBin;
+            if (previousOmp === undefined)
+                delete process.env.BIZAR_OMP_BIN;
+            else
+                process.env.BIZAR_OMP_BIN = previousOmp;
+            process.stdin.pause();
+        }
+    });
+});
+//# sourceMappingURL=tmux.test.js.map

package/dist/tests/tmux.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tmux.test.js","sourceRoot":"","sources":["../../tests/tmux.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEtF,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE/C;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,SAAS,GAA2B,EAAE;IACzD,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;IAChE,OAAO,GAAG,CAAC,IAAI,CAAC;IAChB,OAAO,GAAG,CAAC,SAAS,CAAC;IACrB,OAAO,GAAG,CAAC,iBAAiB,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,SAAS,kBAAkB;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,OAAO,GAAG,EAAE;QACV,IAAI,UAAU;YAAE,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;;YACrE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,WAAW;YAAE,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;;YACxE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,GAAG,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAE9D,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,CAAC,qBAAqB,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,qBAAqB,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,CAAC,qBAAqB,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvF,MAAM,CAAC,qBAAqB,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,CAAC,qBAAqB,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,qBAAqB,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,cAAc,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;aACjD,OAAO,CAAC,wCAAwC,CAAC,CAAC;QACrD,MAAM,CAAC,cAAc,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;aACjD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,IAAI,SAAS;YAAE,OAAO,CAAC,sDAAsD;QAC7E,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChG,CAAC;gBAAS,CAAC;YACT,UAAU,EAAE,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,IAAI,SAAS;YAAE,OAAO,CAAC,kDAAkD;QACzE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChC,aAAa,CAAC,QAAQ,EAAE,uIAAuI,CAAC,CAAC;QACjK,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACtG,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;YAC5E,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC7D,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,UAAU,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,IAAI,SAAS;YAAE,OAAO,CAAC,sDAAsD;QAC7E,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;QACxC,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,GAAG,GAAG,WAAW,CAAC;YACtB,cAAc,EAAE,kCAAkC;YAClD,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;gBAAS,CAAC;YACT,UAAU,EAAE,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,IAAI,SAAS;YAAE,OAAO,CAAC,kDAAkD;QACzE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChC,aAAa,CACX,QAAQ,EACR,iHAAiH,CAClH,CAAC;QACF,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC3D,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;gBAC5C,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;gBAC1C,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;gBACzC,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;gBAC9C,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;gBAC7C,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,CAAC;gBAC/C,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;gBACzC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBACvC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBACvC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBACvC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBACvC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBACvC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBACvC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBACvC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBACvC,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;gBACzC,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;aAC9C,CAAC,CAAC;YACH,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAClE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YACrE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YACjE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YACjE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;YAC3E,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;YAChE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,iFAAiF,CAAC,CAAC;YAC/H,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,qEAAqE,CAAC,CAAC;YACnH,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,qEAAqE,CAAC,CAAC;QACrH,CAAC;gBAAS,CAAC;YACT,UAAU,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,4GAA4G,IAAI,IAAI,CAAC;QACpJ,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI;YACzB,CAAC,eAAe,EAAE,kBAAkB,CAAC;YACrC,CAAC,aAAa,EAAE,kBAAkB,CAAC;YACnC,CAAC,aAAa,EAAE,EAAE,CAAC;YACnB,CAAC,YAAY,EAAE,+BAA+B,CAAC;YAC/C,CAAC,YAAY,EAAE,EAAE,CAAC;YAClB,CAAC,UAAU,EAAE,EAAE,CAAC;YAChB,CAAC,cAAc,EAAE,EAAE,CAAC;YACpB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;SAC9B,EAAE,CAAC;YACX,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,4EAA4E;QAC5E,2EAA2E;QAC3E,qEAAqE;QACrE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9G,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,UAAU,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,kCAAkC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3D,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,CACV,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAC5F,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,UAAU;gBAAE,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;;gBACrE,OAAQ,OAAO,CAAC,KAA6B,CAAC,KAAK,CAAC;YACzD,IAAI,WAAW;gBAAE,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;;gBACxE,OAAQ,OAAO,CAAC,MAA8B,CAAC,KAAK,CAAC;YAC1D,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;;gBAC5D,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,WAAW,CAAC;YAC9C,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;;gBAC3D,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/tray.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/tray.test.js

@@ -0,0 +1,37 @@
+import { describe, expect, it } from "vitest";
+import { existsSync, readFileSync, rmSync } from "node:fs";
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { DEFAULT_OMB_SETTINGS } from "../src/omp/omb-settings.js";
+import { trayIconPaths } from "../src/omp/tray-icons.js";
+import { trayLockPath, readTrayStatus } from "../src/omp/tray.js";
+describe("omb tray", () => {
+    it("keeps the tray opt-in by default", () => {
+        expect(DEFAULT_OMB_SETTINGS.trayEnabled).toBe(false);
+    });
+    it("creates native PNG and ICO icon paths in private state", () => {
+        const root = mkdtempSync(join(tmpdir(), "bizar-tray-icons-"));
+        try {
+            const paths = trayIconPaths({ XDG_STATE_HOME: root, HOME: root });
+            expect(existsSync(paths.png)).toBe(true);
+            expect(existsSync(paths.ico)).toBe(true);
+            expect(readFileSync(paths.png).subarray(0, 8)).toEqual(Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]));
+            expect(readFileSync(paths.ico).readUInt16LE(2)).toBe(1);
+        }
+        finally {
+            rmSync(root, { recursive: true, force: true });
+        }
+    });
+    it("reports a missing tray lock as stopped", () => {
+        const root = mkdtempSync(join(tmpdir(), "bizar-tray-status-"));
+        try {
+            expect(readTrayStatus({ XDG_STATE_HOME: root, HOME: root }).state).toMatch(/stopped|unsupported/);
+            expect(trayLockPath({ XDG_STATE_HOME: root, HOME: root })).toContain("tray.json");
+        }
+        finally {
+            rmSync(root, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=tray.test.js.map

package/dist/tests/tray.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tray.test.js","sourceRoot":"","sources":["../../tests/tray.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAElE,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YACvG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YAClG,MAAM,CAAC,YAAY,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACpF,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/verification.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/verification.test.js

@@ -0,0 +1,61 @@
+import { describe, expect, it } from "vitest";
+import { mkdtempSync, rmSync } from "node:fs";
+import { execFileSync } from "node:child_process";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { Journal } from "../src/storage/journal.js";
+import { bindSession, startObjective } from "../src/omp/lifecycle.js";
+import { runVerification } from "../src/tools/verify.js";
+describe("host-observed verification", () => {
+    it("redacts credential-shaped output and records a passing target-bound receipt", async () => {
+        const root = mkdtempSync(join(tmpdir(), "bizar-verify-"));
+        const state = mkdtempSync(join(tmpdir(), "bizar-verify-state-"));
+        try {
+            execFileSync("git", ["init", "-q", root]);
+            execFileSync("git", ["-C", root, "config", "user.email", "test@example.invalid"]);
+            execFileSync("git", ["-C", root, "config", "user.name", "Test"]);
+            execFileSync("git", ["-C", root, "commit", "--allow-empty", "-qm", "init"]);
+            const journal = new Journal(join(state, "state.jsonl"));
+            const binding = bindSession(journal, { cwd: root });
+            startObjective(binding, { objective: "verify", nonGoals: [], constraints: [], acceptanceCriteria: ["check"], verificationPlan: ["secret-check"], stopConditions: [], userRestrictions: [] });
+            const receipt = await runVerification(binding, "secret-check", [process.execPath, "-e", "console.log('token=secret-value')"], root);
+            expect(receipt.stdout).not.toContain("secret-value");
+            expect(receipt.result).toBe("passed");
+            expect(journal.snapshot().evidence[0].stdout).toContain("[REDACTED]");
+            expect(journal.snapshot().evidence[0].stdout).not.toContain("secret-value");
+        }
+        finally {
+            rmSync(root, { recursive: true, force: true });
+            rmSync(state, { recursive: true, force: true });
+        }
+    });
+    it("persists a redacted argv and runs with an environment allowlist", async () => {
+        const root = mkdtempSync(join(tmpdir(), "bizar-verify-"));
+        const state = mkdtempSync(join(tmpdir(), "bizar-verify-state-"));
+        const previous = process.env.BIZAR_VERIFY_SECRET;
+        process.env.BIZAR_VERIFY_SECRET = "must-not-cross-boundary";
+        try {
+            execFileSync("git", ["init", "-q", root]);
+            execFileSync("git", ["-C", root, "config", "user.email", "test@example.invalid"]);
+            execFileSync("git", ["-C", root, "config", "user.name", "Test"]);
+            execFileSync("git", ["-C", root, "commit", "--allow-empty", "-qm", "init"]);
+            const journal = new Journal(join(state, "state.jsonl"));
+            const binding = bindSession(journal, { cwd: root });
+            startObjective(binding, { objective: "verify", nonGoals: [], constraints: [], acceptanceCriteria: ["check"], verificationPlan: ["argv-check"], stopConditions: [], userRestrictions: [] });
+            const receipt = await runVerification(binding, "argv-check", [process.execPath, "-e", "console.log(process.env.BIZAR_VERIFY_SECRET ?? 'unset')", "--", "--token=secret-value"], root);
+            expect(receipt.stdout).toContain("unset");
+            expect(receipt.command).toContain("[REDACTED]");
+            expect(journal.snapshot().evidence[0].command).toContain("[REDACTED]");
+            expect(JSON.stringify(journal.snapshot().evidence[0])).not.toContain("secret-value");
+        }
+        finally {
+            if (previous === undefined)
+                delete process.env.BIZAR_VERIFY_SECRET;
+            else
+                process.env.BIZAR_VERIFY_SECRET = previous;
+            rmSync(root, { recursive: true, force: true });
+            rmSync(state, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=verification.test.js.map

package/dist/tests/verification.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.test.js","sourceRoot":"","sources":["../../tests/verification.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC5H,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC,CAAC;YAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAC5Q,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,cAAc,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,cAAc,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7L,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,mCAAmC,CAAC,EAAE,IAAI,CAAC,CAAC;YACpI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5L,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAChH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC5H,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,yBAAyB,CAAC;QAC5D,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC,CAAC;YAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAC5Q,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,cAAc,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,YAAY,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3L,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,yDAAyD,EAAE,IAAI,EAAE,sBAAsB,CAAC,EAAE,IAAI,CAAC,CAAC;YACtL,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACvF,CAAC;gBAAS,CAAC;YACT,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;;gBAAM,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,QAAQ,CAAC;YACpH,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/workflow-features.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/workflow-features.test.js

@@ -0,0 +1,82 @@
+import { describe, expect, it } from "vitest";
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { analyzeRecipe, admitRecipe } from "../src/services/recipes.js";
+import { readyWorkItems, validateDependencies } from "../src/services/readiness.js";
+import { reserveBudget, settleBudget } from "../src/services/budget.js";
+import { capabilityReport } from "../src/omp/capabilities.js";
+import { createEvidenceBundle, writeEvidenceBundle } from "../src/services/evidence-bundle.js";
+import { projectWorkflow } from "../src/services/projection.js";
+import { createRun, addWorkItem } from "../src/core/transitions.js";
+import { createEvidence } from "../src/core/evidence.js";
+import { assertCandidateEndpoint, createCandidateAppLease, releaseCandidateAppLease } from "../src/services/candidate-local.js";
+import { approveLesson, lessonHash } from "../src/services/lessons.js";
+import { applySessionControl } from "../src/omp/session-controls.js";
+describe("inspectable workflow features", () => {
+    it("previews conventional checks without executing repository scripts", () => {
+        const root = mkdtempSync(join(tmpdir(), "bizar-recipe-"));
+        try {
+            writeFileSync(join(root, "package.json"), JSON.stringify({ scripts: { test: "echo test", build: "echo build" } }));
+            const preview = analyzeRecipe(root, { objective: "fix", nonGoals: [], constraints: [], acceptanceCriteria: ["tests pass"], verificationPlan: [], stopConditions: [], userRestrictions: [] });
+            expect(preview.trusted).toBe(false);
+            expect(preview.checks.map(check => check.id)).toEqual(["recipe:test", "recipe:build"]);
+            expect(admitRecipe(preview, true).checkSpecs).toHaveLength(2);
+            expect(() => admitRecipe({ ...preview, recipeHash: "changed" }, true)).toThrow(/changed since preview/);
+        }
+        finally {
+            rmSync(root, { recursive: true, force: true });
+        }
+    });
+    it("rejects dependency cycles and only returns ready non-overlapping work", () => {
+        const item = (id, dependencies, scope) => ({ id, revision: 0, role: "worker", title: id, scope, dependencies, acceptanceCriteria: [], verificationPlan: [], lifecycle: "pending", attempt: 0 });
+        expect(() => validateDependencies([item("a", ["b"], ["a"]), item("b", ["a"], ["b"])])).toThrow(/cycle/);
+        const items = [item("a", [], ["src/a"]), item("b", [], ["src/b"]), item("c", ["a"], ["src/c"])];
+        expect(readyWorkItems(items, 2).map(item => item.id)).toEqual(["a", "b"]);
+    });
+    it("keeps unknown usage explicit and exposes unqualified native paths", () => {
+        const reserved = reserveBudget({ reservedRequests: 0, settledRequests: 0, reservedDurationMs: 0, observedDurationMs: 0, unknownUsage: false }, { maxRequests: 1 });
+        const settled = settleBudget(reserved, { durationMs: 50 });
+        expect(settled.unknownUsage).toBe(true);
+        expect(settled.observedTokens).toBeUndefined();
+        const capabilities = capabilityReport({ version: "18.2.6", extensionLoaded: true });
+        expect(capabilities.managedAvailable).toBe(false);
+        expect(capabilities.capabilities.every(capability => capability.level === "advisory")).toBe(true);
+    });
+    it("projects blockers and writes an offline evidence bundle", () => {
+        const root = mkdtempSync(join(tmpdir(), "bizar-bundle-"));
+        try {
+            let run = createRun("p", { objective: "x", nonGoals: [], constraints: [], acceptanceCriteria: ["done"], verificationPlan: [], stopConditions: [], userRestrictions: [] });
+            run = addWorkItem(run, { title: "change", role: "worker", scope: ["src"], dependencies: [], acceptanceCriteria: ["done"], verificationPlan: ["unit"] });
+            const evidence = createEvidence({ id: "ev", runId: run.runId, type: "test", checkId: "unit", result: "passed", targetDigest: "tree", inputDigests: {}, artifactHashes: [], provenance: { producer: "test", observedAt: "now" } });
+            const state = { revision: 1, run, dispatches: [], observations: [], evidence: [evidence], integrations: [], decisions: [], lastSequence: 1 };
+            const projection = projectWorkflow(state, { requiredChecks: ["unit"], targetDigest: "tree", ownedWork: [] });
+            expect(projection.acceptance.eligible).toBe(true);
+            const output = writeEvidenceBundle(join(root, "bundle"), createEvidenceBundle(state, projection.acceptance));
+            expect(readFileSync(output, "utf8")).toContain("schemaVersion");
+            expect(readFileSync(join(root, "bundle", "state.json"), "utf8")).toContain("ev");
+        }
+        finally {
+            rmSync(root, { recursive: true, force: true });
+        }
+    });
+    it("binds application assertions to a leased candidate endpoint", () => {
+        const lease = createCandidateAppLease({ leaseId: "lease", candidateId: "candidate", workspaceId: "workspace", host: "127.0.0.1", port: 43123, owner: "owner", expiresAt: Date.now() + 10_000 });
+        expect(() => assertCandidateEndpoint(lease, "http://127.0.0.1:43123/health")).not.toThrow();
+        expect(() => assertCandidateEndpoint(lease, "http://127.0.0.1:43124/health")).toThrow(/different endpoint/);
+        expect(releaseCandidateAppLease(lease).state).toBe("released");
+    });
+    it("requires independent approval before promoting a failure lesson", () => {
+        const lesson = { id: "lesson", observedFailure: "broken interaction", requirement: "scroll works", candidateId: "candidate", environment: "fixture", proposedFixture: "scroll-and-assert", sourceEvidenceIds: ["ev"], status: "proposed", revision: 1 };
+        expect(approveLesson(lesson, true, lessonHash(lesson)).status).toBe("approved");
+        expect(() => approveLesson(lesson, false, lessonHash(lesson))).toThrow(/independent review/);
+    });
+    it("keeps session controls owner- and revision-bound and idempotent", () => {
+        const initial = { sessionId: "s", owner: "owner", revision: 1, actionKeys: [], admission: "open" };
+        const request = { owner: "owner", sessionId: "s", expectedRevision: 1, idempotencyKey: "cancel-1" };
+        const first = applySessionControl(initial, "cancel-workflow", request);
+        expect(first.state.admission).toBe("cancelled");
+        expect(applySessionControl(first.state, "cancel-workflow", { ...request, expectedRevision: first.state.revision }).repeated).toBe(true);
+    });
+});
+//# sourceMappingURL=workflow-features.test.js.map

package/dist/tests/workflow-features.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-features.test.js","sourceRoot":"","sources":["../../tests/workflow-features.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAa,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAChI,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;YACnH,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7L,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;YAC5H,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC1G,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,YAAsB,EAAE,KAAe,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,SAAS,EAAE,SAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACrO,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChG,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACnK,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,aAAa,EAAE,CAAC;QACxF,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1K,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxJ,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAClO,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;YAC7I,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7G,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,oBAAoB,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7G,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpJ,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAChM,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC5F,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC5G,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,oBAAoB,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACjQ,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChF,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,MAAe,EAAE,CAAC;QAC5G,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;QACpG,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1I,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/workflow-safety.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/workflow-safety.test.js

@@ -0,0 +1,57 @@
+import { afterEach, expect, it } from "vitest";
+import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { execFileSync } from "node:child_process";
+import { Journal } from "../src/storage/journal.js";
+import { repositoryIdentity, statePath } from "../src/storage/repository-identity.js";
+import { bindSession } from "../src/omp/lifecycle.js";
+import { runWorkflow } from "../src/tools/workflow.js";
+import { runVerification } from "../src/tools/verify.js";
+const roots = [];
+afterEach(() => { for (const root of roots.splice(0))
+    rmSync(root, { recursive: true, force: true }); });
+function setup() {
+    const root = mkdtempSync(join(tmpdir(), "bizar-workflow-test-"));
+    roots.push(root);
+    execFileSync("git", ["init", "-q", root]);
+    const binding = bindSession(new Journal(statePath(repositoryIdentity(root))), { cwd: root, sessionManager: { getSessionFile: () => "owner" } });
+    const objective = { objective: "Implement", acceptanceCriteria: ["checks pass"], verificationPlan: ["unit"], nonGoals: [], constraints: [], stopConditions: [], userRestrictions: [] };
+    runWorkflow(binding, "start", { objective });
+    runWorkflow(binding, "transition", { to: "executing" });
+    return { root, binding, objective };
+}
+it("requires nonempty fresh checks and accepted work before completing", async () => {
+    const { root, binding } = setup();
+    expect(() => runWorkflow(binding, "transition", { to: "complete" })).toThrow();
+    expect(() => runWorkflow(binding, "complete", { requiredChecks: [] })).toThrow();
+    const item = runWorkflow(binding, "add-work", { item: { title: "change", role: "bizar-implementer", scope: ["src"], dependencies: [], acceptanceCriteria: ["works"], verificationPlan: ["unit"] } });
+    const receipt = await runVerification(binding, "unit", [process.execPath, "-e", "process.exit(0)"]);
+    expect(() => runWorkflow(binding, "complete", { requiredChecks: ["unit"] })).toThrow();
+    runWorkflow(binding, "accept-work", { workItemId: item.id, evidenceIds: [receipt.evidenceId] });
+    writeFileSync(join(root, "new.txt"), "changed");
+    expect(() => runWorkflow(binding, "complete", { requiredChecks: ["unit"] })).toThrow();
+    await runVerification(binding, "unit", [process.execPath, "-e", "process.exit(0)"]);
+    expect(runWorkflow(binding, "complete", { requiredChecks: ["unit"] })).toMatchObject({ phase: "complete" });
+});
+it("rejects other session mutations and resets evidence for the next run", async () => {
+    const { binding, objective } = setup();
+    expect(() => runWorkflow({ ...binding, owner: "other" }, "cancel", {})).toThrow(/owner/);
+    await runVerification(binding, "unit", [process.execPath, "-e", "process.exit(0)"]);
+    expect(() => runWorkflow(binding, "start", { objective })).toThrow(/non-terminal/);
+    runWorkflow(binding, "cancel", {});
+    runWorkflow(binding, "start", { objective });
+    expect(binding.journal.snapshot().evidence).toEqual([]);
+});
+it("does not let an older passing check conceal a later failure", async () => {
+    const { binding } = setup();
+    await runVerification(binding, "unit", [process.execPath, "-e", "process.exit(0)"]);
+    await runVerification(binding, "unit", [process.execPath, "-e", "process.exit(1)"]);
+    expect(() => runWorkflow(binding, "complete", { requiredChecks: ["unit"] })).toThrow(/fresh checks/);
+});
+it("enforces the cancellation fence at verification admission", async () => {
+    const { binding } = setup();
+    runWorkflow(binding, "cancel", { reason: "operator stop" });
+    await expect(runVerification(binding, "unit", [process.execPath, "-e", "process.exit(0)"])).rejects.toThrow(/cancellation fence/);
+});
+//# sourceMappingURL=workflow-safety.test.js.map

package/dist/tests/workflow-safety.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-safety.test.js","sourceRoot":"","sources":["../../tests/workflow-safety.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,KAAK,GAAa,EAAE,CAAC;AAC3B,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzG,SAAS,KAAK;IACZ,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAChJ,MAAM,SAAS,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,aAAa,CAAC,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACvL,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACtC,CAAC;AAED,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/E,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAmB,CAAC;IACvN,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpG,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACvF,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACvF,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AAC9G,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;IACvC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzF,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACnF,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IAC5B,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpF,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AACvG,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IAC5B,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AACpI,CAAC,CAAC,CAAC"}

package/docs/compatibility/baseline.json

@@ -25,7 +25,7 @@
   },
   "package": {
     "name": "@polderlabs/bizar-omp",
-    "version": "0.6.1",
+    "version": "0.6.3",
     "integrity": "computed by npm pack in CI",
     "extensionEntry": "dist/extension.js"
   }

package/docs/decisions/console-handoff.md

@@ -0,0 +1,5 @@
+# Console handoff
+
+Every TTY handoff to an inherit child — psmux/tmux attach, `switch-client`, and the direct `omp` fallback — first pauses `process.stdin`. An ink unmount can leave stdin flowing with no data listener; on Windows that read loop consumes console input records, so the attach child sharing the console never sees keystrokes (a new `omb agents` session appeared frozen). Pausing only stops this process from reading; the child keeps full console access, piped hosts are untouched (`isTTY === true` guard), and the attached client restores terminal state itself on real tmux.
+
+Bizar's per-session root key-table binds (`C-d`/`C-c` detach, `C-b` prefix, and the wheel/click bindings that forward pointer events to the OMP pane) are skipped under psmux on Windows: psmux ignores persistent key-table assignment and its `set-option` quirk eats dash-leading values, so the binds cannot take effect there. Real tmux keeps them.

package/docs/releases/0.6.2.md

@@ -0,0 +1,32 @@
+# 0.6.2
+
+## Highlights
+
+- `/bizar-models` re-evaluates the whole Bizar role distribution with a bounded background agent instead of applying a locally scored mapping: the command reads the live OMP catalog, compares it with the current role mapping and the last observed catalog, and the agent persists its decision through the native `bizar_apply_model_roles` tool. A host without agent messaging still applies the deterministic baseline itself.
+- Roles that already hold a value are re-evaluated on every run, so a changed catalog can produce a new distribution instead of the command reporting that nothing needs to happen.
+- Session rows carry a display name — the native OMP title, then the first prompt, then a generated label — so the dashboard, the `omb agents` hub, and the tray stop showing bare session ids.
+- OMB sessions keep 100,000 lines of tmux window history (the tmux default is 2,000), raised when the session window is created and again on attach, so a long OMP chat stays reviewable (#55).
+- The dashboard visual system is its own surface rather than a TUI copy: one monospace stack, magenta accent with blue links, a near-black canvas lit by a dual radial glow, border-first panels, uppercase micro-labels, and a warm-paper light theme.
+- Long command reports are appended verbatim to `.bizar-omp/run.log` in the project they ran in, while the status line keeps a fitted summary, so `/bizar-models` and `/bizar-dashboard` output is never silently clipped.
+
+## Model-role evaluation
+
+- The agent receives only the sanitized live catalog, the current mapping, role purposes and requirements, and the deterministic baseline, and is instructed never to infer capability, cost, or locality from a model name.
+- Every selector is validated against the live catalog and the OMP resolver before anything is written: the whole mapping is refused when any selector is unresolvable, and a selector that differs only in casing is stored under the catalog's spelling with the repair reported back.
+- Unrelated roles, provider credentials, and user policy settings are preserved. The catalog observation is persisted only after a successful apply, and a bookkeeping failure is reported as a note rather than hiding the applied mapping.
+- When the host cannot message an agent, `/bizar-models` applies the deterministic baseline and states that no agent took part.
+
+## Sessions, hub, and dashboard
+
+- Renaming or recreating a session clears its deletion tombstone, so an intentionally removed session can be created and opened again; only Bizar-owned session names are ever tombstoned.
+- The daemon snapshot carries display names, an explicit unknown state instead of a sentinel cwd, and last activity to the dashboard session list and conversation header.
+- The mobile dashboard switches between sessions, chat, and details views with the same content as the desktop three-pane layout, and session search and filters stay available at that width.
+
+## Validation
+
+- 171 Vitest tests across 27 files, TypeScript typecheck, build, package verification, generated-doc check, and secret scan.
+- Three live OMP sessions in separate projects: `/bizar-models` dispatched an agent turn, the agent called the native `bizar_apply_model_roles` tool, and 13/13 roles were persisted from the 40-model live catalog with canonical selector casing. A second run reported `Catalog: 0 added, 0 removed, 0 changed, 40 unchanged (40 available)` and re-evaluated all 13 roles.
+- Live tmux check on the raised history limit: an OMB-named session's window option reads `history-limit 100000` after the attach path runs, and a name Bizar does not own is refused.
+- Live run log: the exported `/bizar-models` report is present in the project's `.bizar-omp/run.log` as a single JSON entry with the `bizar-models` event.
+
+The native loader gate ran against OMP 18.2.6 with a resolvable package root: `verify:omp` reports `{"ok":true,"tools":8,"agents":8,"skills":8}` and passes packed install, repeat install, native discovery, profile isolation, and uninstall, and `verify:omp:registry` passes registry install, native discovery, and doctor against the published `@polderlabs/bizar-omp@0.6.2`.