@polderlabs/bizar-omp 0.8.1 → 0.9.0

package/dist/omp/session-ownership.js

@@ -0,0 +1,269 @@
+import { createHash } from "node:crypto";
+import { closeSync, existsSync, mkdirSync, openSync, readSync } from "node:fs";
+import { createRequire } from "node:module";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { OwnershipError } from "../core/errors.js";
+import { acquireLease } from "../storage/lease.js";
+/**
+ * Session ownership, keyed the way OMP 18.5 keys it.
+ *
+ * OMP moved ownership from the journal's path to the session id in its header:
+ * `tryAcquireSessionLease(sessionId)` holds an OS-backed lease — an abstract
+ * Unix socket on Linux, a named mutex on Windows — under OMP's own
+ * session-owners directory. Because the key is the id rather than the path,
+ * every process that reaches one journal, through a hard link, a symlink, or
+ * after a move, meets the same lease; and a journal that has been replaced by a
+ * different session is detected instead of being written into.
+ *
+ * Bizar previously keyed a private lease on the journal's inode. That protects
+ * processes which cooperate with Bizar's own lock, but it is a different
+ * ownership domain from OMP's: a plain `omp` process never took it, so
+ * claiming "already open in another OMP or OMB process" asserted more than
+ * Bizar could prove.
+ *
+ * So this module keeps the two apart rather than conflating them:
+ *
+ * 1. It reads and validates the journal's native session id before any
+ *    ownership operation, because an id is what both domains key on.
+ * 2. It takes OMP's **native** lease through OMP's own exported function when
+ *    that runtime is reachable, so a plain OMP process holding the journal is
+ *    observed instead of guessed at. Bizar does not reimplement OMP's lock
+ *    format — an abstract socket cannot be reimplemented from the outside.
+ *
+ * The Bizar-private lease remains, but only for Bizar-owned state OMP itself
+ * does not own, and it is keyed by the same session id so both agree on which
+ * journal is being claimed.
+ *
+ * Acquisition is synchronous because every caller is synchronous — session
+ * start, session switch, delete, and migration all sit on synchronous
+ * extension handlers. The native module is therefore loaded with
+ * `createRequire` rather than a dynamic `import()`, which would only resolve
+ * later and leave the native path permanently unexercised.
+ */
+/** Bytes read to find a header; the fixed-width title slot plus one line fits well inside. */
+const HEADER_PREFIX_BYTES = 64 * 1024;
+const NATIVE_SESSION_STORAGE = ["src", "session", "session-storage.ts"];
+/**
+ * The session id in the header of the journal at `journalPath`.
+ *
+ * OMP writes a fixed-width title slot ahead of the JSONL entries, so the first
+ * line is not necessarily the header. This scans the bounded prefix for the
+ * first entry that is actually a session header, the same tolerance the
+ * repository's existing journal reader applies, rather than assuming a fixed
+ * line position. Anything that never yields a session header reports
+ * `undefined` instead of a guessed id.
+ */
+export function readJournalSessionId(journalPath) {
+    let prefix;
+    try {
+        const fd = openSync(journalPath, "r");
+        try {
+            const buffer = Buffer.alloc(HEADER_PREFIX_BYTES);
+            prefix = buffer.toString("utf8", 0, readSync(fd, buffer, 0, buffer.length, 0));
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    catch {
+        return undefined;
+    }
+    for (const line of prefix.split("\n")) {
+        const id = sessionIdFromLine(line);
+        if (id !== undefined)
+            return id;
+    }
+    return undefined;
+}
+function sessionIdFromLine(line) {
+    try {
+        const entry = JSON.parse(line);
+        if (entry === null || typeof entry !== "object")
+            return undefined;
+        const record = entry;
+        if (record.type !== "session" || typeof record.id !== "string" || !record.id.trim())
+            return undefined;
+        return record.id.trim();
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Where OMP's own package lives, or `undefined` when it is not reachable.
+ *
+ * An OMP installed as a self-contained binary exposes no importable module at
+ * all, which is a real supported shape rather than a failure.
+ */
+function resolveOmpPackageRoot(env) {
+    const configured = env.BIZAR_OMP_PACKAGE_ROOT?.trim();
+    if (configured)
+        return resolve(configured);
+    try {
+        return dirname(createRequire(import.meta.url).resolve("@oh-my-pi/pi-coding-agent/package.json"));
+    }
+    catch {
+        // Not resolvable from Bizar; fall through to the executable's own tree.
+    }
+    for (const executable of [env.OMP_PATH?.trim(), "/usr/local/bin/omp", "/usr/bin/omp"].filter((value) => Boolean(value))) {
+        let dir = dirname(resolve(executable));
+        for (let depth = 0; depth < 6; depth += 1) {
+            const root = join(dir, "node_modules", "@oh-my-pi", "pi-coding-agent");
+            if (existsSync(join(root, "package.json")))
+                return root;
+            const parent = dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+        }
+    }
+    return undefined;
+}
+/**
+ * Narrow a loaded module to the lease function, or `undefined` when the export
+ * is absent. A shape check is required because the module comes from outside
+ * this package and a missing export must degrade, not throw.
+ */
+function asNativeSessionStorage(loaded) {
+    if (loaded === null || typeof loaded !== "object")
+        return undefined;
+    const candidate = loaded;
+    const acquire = candidate.tryAcquireSessionLease;
+    if (typeof acquire !== "function")
+        return undefined;
+    return { tryAcquireSessionLease: (sessionId) => acquire.call(loaded, sessionId) };
+}
+const nativeModuleCache = {};
+/**
+ * Native leases this process already holds, so a second claim on the same
+ * session is a re-entry rather than self-collision.
+ *
+ * OMP keeps an equivalent process-local map, because one logical migration can
+ * legitimately need to claim the same session more than once — for example the
+ * source and its staged copy. Without this, Bizar would report its own
+ * re-entry as "another OMP process owns it".
+ */
+const heldNativeLeases = new Map();
+/**
+ * Take OMP's own ownership lease for `sessionId` through OMP's exported
+ * function, resolved from the installed OMP runtime.
+ *
+ * A runtime that is not reachable is reported as `unavailable`, never as
+ * "nobody owns it". That distinction matters: Bizar must not conclude a
+ * journal is free because it failed to find the module.
+ */
+export function probeNativeSessionLease(sessionId, env = process.env) {
+    const root = resolveOmpPackageRoot(env);
+    const reentry = heldNativeLeases.get(sessionId);
+    if (reentry) {
+        reentry.depth += 1;
+        return { status: "acquired", release: () => releaseHeldNativeLease(sessionId, reentry) };
+    }
+    if (!root)
+        return { status: "unavailable", reason: "the installed OMP runtime exposes no importable session-storage module" };
+    if (nativeModuleCache.root !== root) {
+        nativeModuleCache.root = root;
+        try {
+            // A plain path, not a `file://` URL: Node's CommonJS resolver rejects a
+            // URL string here, and it loads a `.ts` source with its JavaScript loader.
+            const loaded = createRequire(import.meta.url)(join(root, ...NATIVE_SESSION_STORAGE));
+            nativeModuleCache.storage = asNativeSessionStorage(loaded);
+        }
+        catch {
+            nativeModuleCache.storage = undefined;
+        }
+    }
+    const storage = nativeModuleCache.storage;
+    if (!storage)
+        return { status: "unavailable", reason: "the installed OMP runtime exports no session ownership lease" };
+    let handle;
+    try {
+        handle = storage.tryAcquireSessionLease(sessionId);
+    }
+    catch (error) {
+        // OMP's own `claimSession` swallows a failed probe and carries on. Bizar's
+        // delete, migrate and resume callers depend on a throw to refuse, so a
+        // failed probe fails closed here instead of downgrading to the Bizar lock.
+        return { status: "probe-failed", reason: error instanceof Error ? error.message : String(error) };
+    }
+    if (handle === null)
+        return { status: "held-by-another-process" };
+    // Bound to its handle: OMP's FileLock.release reaches a native exclusive
+    // reference through `this`, so an unbound copy throws "Failed to unwrap
+    // exclusive reference of FileLock" instead of releasing the lease.
+    const held = { release: handle.release.bind(handle), depth: 1 };
+    heldNativeLeases.set(sessionId, held);
+    return { status: "acquired", release: () => releaseHeldNativeLease(sessionId, held) };
+}
+/**
+ * Test seam: drop every memoized module and held-claim so another runtime, or
+ * the next case, starts from a clean process-local state.
+ */
+export function resetNativeSessionLeaseProbe() {
+    nativeModuleCache.root = undefined;
+    nativeModuleCache.storage = undefined;
+    heldNativeLeases.clear();
+}
+/** Drop one level of this process's claim, releasing OMP's lease at zero. */
+function releaseHeldNativeLease(sessionId, held) {
+    // A double release must not drive the counter negative, which would leave
+    // the map claiming a claim that no longer exists.
+    if (held.depth <= 0)
+        return;
+    held.depth -= 1;
+    if (held.depth > 0)
+        return;
+    heldNativeLeases.delete(sessionId);
+    held.release();
+}
+/** Bizar's own cooperating-process lease, keyed by the same native session id. */
+function sessionLeasePath(sessionId, env) {
+    const root = sessionLeaseRoot(env);
+    return join(root, `${createHash("sha256").update(`session:${sessionId}`).digest("hex")}.lock`);
+}
+/** Create Bizar's lease root, which `acquireLease` requires to already exist. */
+function sessionLeaseRoot(env) {
+    const root = join(env.XDG_STATE_HOME || join(env.HOME || homedir(), ".local", "state"), "bizar-omp", "session-leases");
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    return root;
+}
+/**
+ * Claim exclusive write access to a native OMP journal.
+ *
+ * The journal's native session id is read first and is required: ownership in
+ * both domains is keyed on it, so a journal with no readable id cannot be
+ * proven to be the one Bizar recorded. Refusing there is deliberate — the
+ * alternative is mutating a file whose identity Bizar never established.
+ *
+ * When OMP's native lease is reachable it is taken too, so a plain `omp`
+ * process holding this journal blocks the operation. When it is not reachable
+ * the message names only Bizar-owned state, because that is all Bizar can
+ * actually prove at that moment.
+ */
+export function acquireSessionOwnership(journalPath, env = process.env) {
+    const sessionId = readJournalSessionId(journalPath);
+    if (!sessionId)
+        throw new OwnershipError(`Refusing to modify a session journal with no readable native session id: ${journalPath}`);
+    const native = probeNativeSessionLease(sessionId, env);
+    if (native.status === "held-by-another-process") {
+        throw new OwnershipError("This OMP session is open in another OMP process; close it there before resuming or deleting it.");
+    }
+    if (native.status === "probe-failed") {
+        throw new OwnershipError(`Refusing to modify a session journal because OMP's ownership lease could not be probed: ${native.reason}`);
+    }
+    const lease = acquireLease(sessionLeasePath(sessionId, env), native.status === "acquired"
+        ? "This OMP session is already open in another OMP or OMB process; close it there before resuming."
+        : "This session is already open in another OMB process; close it there before resuming.");
+    if (native.status === "acquired") {
+        const releaseNative = native.release;
+        return { release() { try {
+                lease.release();
+            }
+            finally {
+                releaseNative();
+            } } };
+    }
+    return lease;
+}
+//# sourceMappingURL=session-ownership.js.map

package/dist/omp/session-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-ownership.js","sourceRoot":"","sources":["../../src/omp/session-ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAc,MAAM,qBAAqB,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,8FAA8F;AAC9F,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAsBxE;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACjD,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClE,MAAM,MAAM,GAAG,KAAyC,CAAC;QACzD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC;QACtG,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAsB;IACnD,MAAM,UAAU,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,oBAAoB,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzI,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;YACvE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM;YAC1B,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,MAAe;IAC7C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,SAAS,GAAG,MAAiC,CAAC;IACpD,MAAM,OAAO,GAAG,SAAS,CAAC,sBAAsB,CAAC;IACjD,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,EAAE,sBAAsB,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAA+B,EAAE,CAAC;AAC1H,CAAC;AAED,MAAM,iBAAiB,GAAsD,EAAE,CAAC;AAEhF;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA8C,CAAC;AAE/E;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC7F,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,wEAAwE,EAAE,CAAC;IAC9H,IAAI,iBAAiB,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACpC,iBAAiB,CAAC,IAAI,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,wEAAwE;YACxE,2EAA2E;YAC3E,MAAM,MAAM,GAAY,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC;YAC9F,iBAAiB,CAAC,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,CAAC,OAAO,GAAG,SAAS,CAAC;QACxC,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,8DAA8D,EAAE,CAAC;IACvH,IAAI,MAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,uEAAuE;QACvE,2EAA2E;QAC3E,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAClE,yEAAyE;IACzE,wEAAwE;IACxE,mEAAmE;IACnE,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAChE,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B;IAC1C,iBAAiB,CAAC,IAAI,GAAG,SAAS,CAAC;IACnC,iBAAiB,CAAC,OAAO,GAAG,SAAS,CAAC;IACtC,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,SAAS,sBAAsB,CAAC,SAAiB,EAAE,IAAwC;IACzF,0EAA0E;IAC1E,kDAAkD;IAClD,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO;IAC5B,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IAChB,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO;IAC3B,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;AACjB,CAAC;AAED,kFAAkF;AAClF,SAAS,gBAAgB,CAAC,SAAiB,EAAE,GAAsB;IACjE,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACjG,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACvH,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAmB,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC/F,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,cAAc,CAAC,4EAA4E,WAAW,EAAE,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QAChD,MAAM,IAAI,cAAc,CAAC,iGAAiG,CAAC,CAAC;IAC9H,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,cAAc,CAAC,2FAA2F,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU;QACvF,CAAC,CAAC,iGAAiG;QACnG,CAAC,CAAC,sFAAsF,CAAC,CAAC;IAC5F,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;gBAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,aAAa,EAAE,CAAC;YAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/omp/task-model-selector.d.ts

@@ -0,0 +1,58 @@
+import type { ObservedRouting, RoutingSource } from "../core/types.js";
+export interface RequestedModelRouting {
+    /** Exact per-call selectors, in the order the caller supplied them. */
+    selectors: string[];
+    /** The native routing source Bizar admitted for this dispatch. */
+    source: RoutingSource;
+    /** The caller-supplied `effort`, kept separate from model identity. */
+    effort?: string;
+}
+/**
+ * Normalize a requested per-call `model` into the ordered selector list Bizar
+ * journals, or refuse a selector OMP documents as invalid.
+ *
+ * Returns an empty list when no selector was requested, which is the signal
+ * that the specialist's own frontmatter and exact-agent override remain
+ * authoritative.
+ */
+export declare function normalizeRequestedModelSelectors(value: unknown): string[];
+/**
+ * Build the routing record for one dispatch.
+ *
+ * Specialist identity and model routing stay separate fields: a
+ * `bizar-implementer` remains the implementer whichever selector it runs on.
+ * With no requested selector the source stays `specialist-default`, so the
+ * specialist's own model role keeps working exactly as before.
+ */
+export declare function requestedRouting(input: {
+    model?: unknown;
+    effort?: unknown;
+}): RequestedModelRouting;
+/**
+ * Select the settled result belonging to one dispatch.
+ *
+ * A call settles into `details.results`, one entry per spawn, and each entry
+ * carries the wire `name` it was spawned under. Matching is by that identity,
+ * never by position: `admitNativeTasks` skips tasks that name no work item, so
+ * the admitted dispatches are fewer than the spawns and indexing by admission
+ * order would hand a dispatch whichever spawn happened to come first.
+ *
+ * A single-entry batch is used directly, because there is only one candidate
+ * and the host may omit `name`. A purely background call returns `results: []`
+ * and leaves its routing on the progress snapshot, so an absent match stays
+ * unobserved: recording another spawn's routing would be a false provenance
+ * claim, which is the exact failure this contract exists to prevent.
+ */
+export declare function settledResultFor(details: unknown, workItemId: string): unknown;
+/**
+ * Read the native routing OMP actually used for one settled spawn.
+ *
+ * These are the host's own flat fields on the settled result, siblings of
+ * `structuredOutput`, so the journal can distinguish the selector Bizar
+ * admitted from the model, identity, effort and fallback state OMP resolved.
+ * Every field is optional: the host omits routing it did not resolve, and an
+ * absent field must leave the dispatch on what was requested rather than
+ * inventing an observation.
+ */
+export declare function readObservedRouting(result: unknown): ObservedRouting | undefined;
+//# sourceMappingURL=task-model-selector.d.ts.map

package/dist/omp/task-model-selector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-model-selector.d.ts","sourceRoot":"","sources":["../../src/omp/task-model-selector.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA2BvE,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kEAAkE;IAClE,MAAM,EAAE,aAAa,CAAC;IACtB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA4BD;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAQzE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,qBAAqB,CAKpG;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO9E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAehF"}

package/dist/omp/task-model-selector.js

@@ -0,0 +1,144 @@
+import { ContractError } from "../core/errors.js";
+/**
+ * Per-call `model` selector policy for managed Bizar dispatches.
+ *
+ * OMP 18.5 made `model` a public, highest-precedence field on every `task`
+ * item: it outranks `task.agentModelOverrides[agentName]` and the agent
+ * definition's own `model`. A managed run that dropped the field would admit a
+ * dispatch, journal a Bizar-computed role, and then let the host execute a
+ * different model than the journal claims — a provenance failure, not just a
+ * missing feature.
+ *
+ * Bizar therefore records what was requested instead of ignoring it, and
+ * refuses only the selectors OMP documents as ambiguous or structurally empty.
+ *
+ * What this module deliberately does **not** do is resolve the selector.
+ * Deciding whether `provider/model:level` names a live model, whether the
+ * suffix is a valid thinking level, or whether it has working credentials all
+ * require OMP's model catalog and credential store. Re-deciding any of that
+ * here would create the second model resolver this package must not own; those
+ * cases fail natively at OMP preflight and Bizar reports the refusal as a
+ * failed dispatch rather than a settled one.
+ */
+/** Selectors OMP documents as ambiguous and therefore refuses. */
+const AMBIGUOUS_LITERALS = { default: true, inherit: true };
+/**
+ * Whether one selector is the bare `default`/`inherit` literal OMP calls
+ * ambiguous, optionally carrying a thinking suffix.
+ *
+ * The suffix is stripped only to recognise that reserved word. A registered
+ * model id that legitimately ends in `:max` keeps its suffix and is left for
+ * OMP to resolve, because Bizar cannot tell an id from a selector without the
+ * catalog. `@default` is the documented way to inherit the parent session's
+ * model, so it is deliberately not ambiguous.
+ */
+function isAmbiguousLiteral(selector) {
+    const trimmed = selector.trim();
+    const withoutSuffix = trimmed.includes(":") ? trimmed.slice(0, trimmed.lastIndexOf(":")) : trimmed;
+    return AMBIGUOUS_LITERALS[withoutSuffix] === true;
+}
+function normalizeSelector(entry, field) {
+    if (typeof entry !== "string")
+        throw new ContractError(`${field} must be a selector string, received ${entry === null ? "null" : typeof entry}`);
+    const trimmed = entry.trim();
+    // OMP rejects blank and separator-only selectors; mirroring that here keeps
+    // the refusal at admission instead of leaving a dispatch nothing can settle.
+    if (trimmed.replace(/[\s,]/g, "").length === 0)
+        throw new ContractError(`${field} was blank; use a concrete provider/model selector or a role alias such as @bizar_build`);
+    if (isAmbiguousLiteral(trimmed))
+        throw new ContractError(`${field} used the ambiguous literal "${trimmed}"; OMP refuses it at preflight. Use @default to inherit the parent session's model.`);
+    return trimmed;
+}
+/**
+ * Normalize a requested per-call `model` into the ordered selector list Bizar
+ * journals, or refuse a selector OMP documents as invalid.
+ *
+ * Returns an empty list when no selector was requested, which is the signal
+ * that the specialist's own frontmatter and exact-agent override remain
+ * authoritative.
+ */
+export function normalizeRequestedModelSelectors(value) {
+    if (value === undefined || value === null)
+        return [];
+    if (Array.isArray(value)) {
+        if (value.length === 0)
+            throw new ContractError("model was given as an empty array; supply an ordered, non-empty selector list or omit the field");
+        return value.map((entry, index) => normalizeSelector(entry, `model[${index}]`));
+    }
+    if (typeof value === "string")
+        return [normalizeSelector(value, "model")];
+    throw new ContractError(`model must be a selector string or an ordered array of selectors, received ${typeof value}`);
+}
+/**
+ * Build the routing record for one dispatch.
+ *
+ * Specialist identity and model routing stay separate fields: a
+ * `bizar-implementer` remains the implementer whichever selector it runs on.
+ * With no requested selector the source stays `specialist-default`, so the
+ * specialist's own model role keeps working exactly as before.
+ */
+export function requestedRouting(input) {
+    const selectors = normalizeRequestedModelSelectors(input.model);
+    const routing = { selectors, source: selectors.length > 0 ? "explicit-per-call" : "specialist-default" };
+    if (typeof input.effort === "string" && input.effort.trim())
+        routing.effort = input.effort.trim();
+    return routing;
+}
+/**
+ * Select the settled result belonging to one dispatch.
+ *
+ * A call settles into `details.results`, one entry per spawn, and each entry
+ * carries the wire `name` it was spawned under. Matching is by that identity,
+ * never by position: `admitNativeTasks` skips tasks that name no work item, so
+ * the admitted dispatches are fewer than the spawns and indexing by admission
+ * order would hand a dispatch whichever spawn happened to come first.
+ *
+ * A single-entry batch is used directly, because there is only one candidate
+ * and the host may omit `name`. A purely background call returns `results: []`
+ * and leaves its routing on the progress snapshot, so an absent match stays
+ * unobserved: recording another spawn's routing would be a false provenance
+ * claim, which is the exact failure this contract exists to prevent.
+ */
+export function settledResultFor(details, workItemId) {
+    if (details === null || typeof details !== "object")
+        return undefined;
+    const results = details.results;
+    if (!Array.isArray(results))
+        return undefined;
+    if (results.length === 1)
+        return results[0];
+    const named = results.find(result => result !== null && typeof result === "object" && result.name === workItemId);
+    return named;
+}
+/**
+ * Read the native routing OMP actually used for one settled spawn.
+ *
+ * These are the host's own flat fields on the settled result, siblings of
+ * `structuredOutput`, so the journal can distinguish the selector Bizar
+ * admitted from the model, identity, effort and fallback state OMP resolved.
+ * Every field is optional: the host omits routing it did not resolve, and an
+ * absent field must leave the dispatch on what was requested rather than
+ * inventing an observation.
+ */
+export function readObservedRouting(result) {
+    if (result === null || typeof result !== "object")
+        return undefined;
+    const record = result;
+    const observed = {};
+    for (const key of ["modelRole", "resolvedModel", "resolvedModelIdentity", "resolvedThinkingLevel", "resolvedModelRoute"]) {
+        const value = record[key];
+        if (typeof value === "string" && value.trim())
+            observed[key] = value.trim();
+    }
+    // A per-spawn override may be a single selector or the ordered list the
+    // caller supplied, so it is recorded as sent rather than collapsed.
+    const override = record.modelOverride;
+    if (typeof override === "string" && override.trim())
+        observed.modelOverride = override.trim();
+    else if (Array.isArray(override))
+        observed.modelOverride = override.map(selector => String(selector));
+    if (typeof record.resolvedModelIsFallback === "boolean")
+        observed.resolvedModelIsFallback = record.resolvedModelIsFallback;
+    return Object.keys(observed).length > 0 ? observed : undefined;
+}
+//# sourceMappingURL=task-model-selector.js.map

package/dist/omp/task-model-selector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-model-selector.js","sourceRoot":"","sources":["../../src/omp/task-model-selector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,kEAAkE;AAClE,MAAM,kBAAkB,GAAyB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAWlF;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACnG,OAAO,kBAAkB,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,wCAAwC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;IACjJ,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,4EAA4E;IAC5E,6EAA6E;IAC7E,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,yFAAyF,CAAC,CAAC;IAC3K,IAAI,kBAAkB,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,gCAAgC,OAAO,qFAAqF,CAAC,CAAC;IAC/L,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC,CAAC,KAAc;IAC7D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,iGAAiG,CAAC,CAAC;QACnJ,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,aAAa,CAAC,8EAA8E,OAAO,KAAK,EAAE,CAAC,CAAC;AACxH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4C;IAC3E,MAAM,SAAS,GAAG,gCAAgC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,OAAO,GAA0B,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;IAChI,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAClG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,UAAkB;IACpE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,OAAO,GAAI,OAAiC,CAAC,OAAO,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAK,MAA6B,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAC1I,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAe;IAClD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,oBAAoB,CAAU,EAAE,CAAC;QACnI,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7E,CAAC;IACD,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC;IACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,aAAa,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;SACzF,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,QAAQ,CAAC,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtG,IAAI,OAAO,MAAM,CAAC,uBAAuB,KAAK,SAAS;QAAE,QAAQ,CAAC,uBAAuB,GAAG,MAAM,CAAC,uBAAuB,CAAC;IAC3H,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC"}

package/dist/scripts/emit-compatibility-receipt.js

@@ -16,10 +16,21 @@ const root = resolve(here, "..", "..");
 const pkg = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
 if (typeof pkg.version !== "string")
     throw new Error("package.json has no version");
-/** Null rather than a guess: an unpacked tarball has no commit to report. */
+/**
+ * Null by default, and the release path passes --no-commit for the same reason.
+ *
+ * A receipt that is committed into the repository cannot name the commit that
+ * contains it, so any value here refers to a *parent* -- a tree that does not
+ * contain the OMP baseline this receipt asserts. A reader who follows that
+ * commit lands on a tree contradicting the receipt. Provenance is therefore
+ * opt-in via --commit, for callers writing a throwaway file outside the repo.
+ */
+const flags = new Set(["--no-commit", "--commit"]);
+const target = process.argv.slice(2).find(arg => !flags.has(arg)) ?? join(root, "compatibility-receipt.json");
+const wantsCommit = process.argv.includes("--commit") && !process.argv.includes("--no-commit");
 let commit = null;
 try {
-    if (!process.argv.includes("--no-commit")) {
+    if (wantsCommit) {
         commit = execFileSync("git", ["rev-parse", "HEAD"], { cwd: root, encoding: "utf8", timeout: 10_000 }).trim();
     }
 }
@@ -27,7 +38,6 @@ catch {
     commit = null;
 }
 const receipt = buildCompatibilityReceipt({ packageVersion: pkg.version, commit });
-const target = process.argv.slice(2).find(arg => arg !== "--no-commit") ?? join(root, "compatibility-receipt.json");
 writeFileSync(target, renderCompatibilityReceipt(receipt));
 process.stdout.write(`wrote ${target}\n`);
 //# sourceMappingURL=emit-compatibility-receipt.js.map

package/dist/scripts/emit-compatibility-receipt.js.map

@@ -1 +1 @@
-{"version":3,"file":"emit-compatibility-receipt.js","sourceRoot":"","sources":["../../src/scripts/emit-compatibility-receipt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAExG,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,iCAAiC;AACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;AACjG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;IAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAEpF,6EAA6E;AAC7E,IAAI,MAAM,GAAkB,IAAI,CAAC;AACjC,IAAI,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/G,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,GAAG,yBAAyB,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACnF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;AACpH,aAAa,CAAC,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,MAAM,IAAI,CAAC,CAAC"}
+{"version":3,"file":"emit-compatibility-receipt.js","sourceRoot":"","sources":["../../src/scripts/emit-compatibility-receipt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAExG,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,iCAAiC;AACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;AACjG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;IAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;GAQG;AACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AACnD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;AAC9G,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAC/F,IAAI,MAAM,GAAkB,IAAI,CAAC;AACjC,IAAI,CAAC;IACH,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/G,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,GAAG,yBAAyB,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACnF,aAAa,CAAC,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,MAAM,IAAI,CAAC,CAAC"}

package/docs/assets/bizar-omp-banner.svg

@@ -1,20 +1,53 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1200 280" role="img" aria-labelledby="title desc">
-  <title id="title">BizarHarness OMP</title>
-  <desc id="desc">Autonomous engineering for oh-my-pi with evidence in the loop.</desc>
-  <rect width="1200" height="280" rx="18" fill="#0b1220"/>
-  <path d="M0 224h1200" stroke="#1e293b" stroke-width="2"/>
-  <path d="M0 56h1200" stroke="#1e293b" stroke-width="2"/>
-  <g transform="translate(72 72)">
-    <rect width="88" height="88" rx="14" fill="#0f766e"/>
-    <path d="M22 26h44v12H34v12h26v12H34v12h32v12H22z" fill="#ecfeff"/>
-    <circle cx="74" cy="22" r="8" fill="#38bdf8"/>
-    <circle cx="16" cy="74" r="8" fill="#fbbf24"/>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1400 360" role="img" aria-labelledby="title desc">
+  <title id="title">BizarOMP</title>
+  <desc id="desc">Native workflow, evidence, and session control for oh-my-pi.</desc>
+  <defs>
+    <pattern id="grid" width="32" height="32" patternUnits="userSpaceOnUse">
+      <path d="M32 0H0V32" fill="none" stroke="#171a21" stroke-width="1"/>
+    </pattern>
+    <clipPath id="frame"><rect x="1" y="1" width="1398" height="358" rx="18"/></clipPath>
+  </defs>
+  <rect width="1400" height="360" rx="18" fill="#07080a"/>
+  <g clip-path="url(#frame)">
+    <rect width="1400" height="360" fill="url(#grid)" opacity=".55"/>
+    <circle cx="232" cy="-34" r="248" fill="#ff2ea6" opacity=".055"/>
+    <circle cx="1268" cy="392" r="290" fill="#00b4ff" opacity=".05"/>
   </g>
-  <text x="204" y="112" fill="#f8fafc" font-family="Inter,Segoe UI,Arial,sans-serif" font-size="58" font-weight="700" letter-spacing="2">BIZAR // OMP</text>
-  <text x="208" y="158" fill="#99f6e4" font-family="Inter,Segoe UI,Arial,sans-serif" font-size="23" letter-spacing="1">AUTONOMOUS ENGINEERING, WITH EVIDENCE IN THE LOOP</text>
-  <g fill="#38bdf8">
-    <circle cx="210" cy="207" r="5"/><circle cx="232" cy="207" r="5"/><circle cx="254" cy="207" r="5"/>
+  <rect x="1" y="1" width="1398" height="358" rx="18" fill="none" stroke="#232833" stroke-width="2"/>
+  <g font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace">
+    <g transform="translate(72 58)">
+      <rect width="48" height="48" rx="11" fill="#111319" stroke="#343946"/>
+      <path d="M14 16l9 8-9 8" fill="none" stroke="#ff2ea6" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/>
+      <path d="M28 32h8" stroke="#00b4ff" stroke-width="3" stroke-linecap="round"/>
+      <text x="68" y="19" fill="#8b93a7" font-size="13" font-weight="700" letter-spacing="2.2">POLDERLABS / OMP NATIVE</text>
+      <text x="68" y="42" fill="#5f6678" font-size="12" letter-spacing="1.4">OPERATOR WORKFLOW SYSTEM</text>
+    </g>
+    <text x="72" y="182" fill="#f3f4f7" font-size="62" font-weight="760" letter-spacing="-2.6">BIZAR</text>
+    <text x="282" y="182" fill="#ff2ea6" font-size="62" font-weight="760" letter-spacing="-2.6">OMP</text>
+    <text x="74" y="221" fill="#a9afbd" font-size="18" letter-spacing=".25">Native workflow, evidence, and session control for oh-my-pi.</text>
+    <g transform="translate(72 265)" font-size="12" font-weight="700" letter-spacing="1.1">
+      <rect width="112" height="31" rx="7" fill="#0f1116" stroke="#2c303b"/><text x="18" y="20" fill="#e7e9ee">SESSIONS</text>
+      <rect x="124" width="122" height="31" rx="7" fill="#0f1116" stroke="#2c303b"/><text x="142" y="20" fill="#e7e9ee">WORKFLOWS</text>
+      <rect x="258" width="118" height="31" rx="7" fill="#0f1116" stroke="#2c303b"/><text x="276" y="20" fill="#e7e9ee">EVIDENCE</text>
+      <rect x="388" width="98" height="31" rx="7" fill="#0f1116" stroke="#2c303b"/><text x="406" y="20" fill="#e7e9ee">MOBILE</text>
+    </g>
+    <g transform="translate(900 48)">
+      <rect width="424" height="264" rx="14" fill="#0d0f13" stroke="#2a2e38"/>
+      <path d="M0 44h424" stroke="#232833"/>
+      <circle cx="22" cy="22" r="4" fill="#ff2ea6"/><circle cx="38" cy="22" r="4" fill="#4b5262"/><circle cx="54" cy="22" r="4" fill="#4b5262"/>
+      <text x="80" y="27" fill="#7f8798" font-size="11" letter-spacing="1.5">OMB / SESSION CONTROL</text>
+      <text x="24" y="79" fill="#00b4ff" font-size="14">$</text><text x="43" y="79" fill="#f0f1f4" font-size="14">omb</text>
+      <text x="24" y="111" fill="#626a7c" font-size="11">HOST</text><text x="104" y="111" fill="#d8dbe2" font-size="12">local / project</text>
+      <text x="24" y="138" fill="#626a7c" font-size="11">SESSION</text><text x="104" y="138" fill="#d8dbe2" font-size="12">working</text><circle cx="184" cy="134" r="4" fill="#34d399"/>
+      <text x="24" y="165" fill="#626a7c" font-size="11">RUNTIME</text><text x="104" y="165" fill="#d8dbe2" font-size="12">OMP native</text>
+      <path d="M24 194h376" stroke="#232833"/>
+      <g transform="translate(24 214)">
+        <text x="0" y="0" fill="#9198a8" font-size="11">PLAN</text><path d="M42 -4h38" stroke="#343946"/><circle cx="88" cy="-4" r="3" fill="#ff2ea6"/>
+        <text x="104" y="0" fill="#9198a8" font-size="11">RUN</text><path d="M136 -4h38" stroke="#343946"/><circle cx="182" cy="-4" r="3" fill="#ff2ea6"/>
+        <text x="198" y="0" fill="#9198a8" font-size="11">VERIFY</text><path d="M250 -4h38" stroke="#343946"/><circle cx="296" cy="-4" r="3" fill="#00b4ff"/>
+        <text x="312" y="0" fill="#cdd1da" font-size="11">INTEGRATE</text>
+      </g>
+      <text x="24" y="247" fill="#5d6576" font-size="10" letter-spacing="1.2">OMP OWNS THE RUNTIME · BIZAR OWNS THE PROOF</text>
+    </g>
   </g>
-  <text x="278" y="215" fill="#94a3b8" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="18">workflows  /  sessions  /  verification  /  integration</text>
-  <text x="1080" y="244" text-anchor="end" fill="#64748b" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="14">POLDERLABS</text>
-</svg>
+</svg>