@sjawhar/pi-legion-envoy 0.44.1 → 1.1.0

package/README.md

@@ -104,7 +104,9 @@ Configure the shared `envoy.json` with:
 
 The user file is `~/.config/opencode/envoy.json`; a
 `<cwd>/.opencode/envoy.json` file shallow-merges over it. `DISPATCH_URL` and
-`DISPATCH_TOKEN` override the file values for one process. Omitting
+`DISPATCH_TOKEN` override the file values for one process; `DISPATCH_TOKEN_FILE`
+(a path whose trimmed contents are the token — how the Legion daemon delivers it
+to a pane) wins over both and never falls back when unreadable. Omitting
 `dispatch.serverUrl` while `dispatch.enabled` is true targets
 `http://localhost:8766`, the Go server's listen address. Invalid configuration,
 an invalid URL, or an empty token leaves the twelve tools unavailable and reports

package/dist/envoy.js

@@ -30244,8 +30244,7 @@ var LegionDaemonApi = {
       roleTokens: record(string2(), string2()),
       controlSubject: nonEmptyString,
       gates: object({
-        design: _enum2(["root-issues", "off"]),
-        merge: _enum2(["human", "off"])
+        design: _enum2(["root-issues", "off"])
       }).optional(),
       secret: nonEmptyString
     })
@@ -30254,14 +30253,6 @@ var LegionDaemonApi = {
     request: architectCapability.extend({ generation: number2().int() }),
     response: object({})
   },
-  MergeGate: {
-    request: architectCapability.extend({ pr: number2().int().positive() }),
-    response: object({
-      approved: boolean2(),
-      pr: number2().int().positive(),
-      headSha: nonEmptyString
-    })
-  },
   ProcessExit: {
     request: architectCapability.extend({ generation: number2().int() }),
     response: object({})
@@ -31198,7 +31189,7 @@ ${envelope.payload ?? ""}`;
 }
 
 // ../envoy-client/src/dispatch-config.ts
-import { readFileSync } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import { homedir } from "os";
 import * as path from "path";
 
@@ -31207,6 +31198,21 @@ function messageFor(error) {
   return error instanceof Error ? error.message : String(error);
 }
 
+// ../envoy-client/src/secret-file.ts
+import { readFileSync } from "fs";
+function readSecretFile(variable, filePath) {
+  let contents;
+  try {
+    contents = readFileSync(filePath, "utf8");
+  } catch (error) {
+    throw new Error(`${variable} names ${filePath}, which could not be read: ${messageFor(error)}`);
+  }
+  const value = contents.trim();
+  if (value.length === 0)
+    throw new Error(`${variable} names ${filePath}, which is empty`);
+  return value;
+}
+
 // ../envoy-client/src/dispatch-config.ts
 var DEFAULT_SERVER_URL = "http://localhost:8766";
 function normalizeDispatchUrl(url2) {
@@ -31243,7 +31249,7 @@ function describeSchemaIssue(filePath, error) {
 function readEnvoyFile(filePath) {
   let raw;
   try {
-    raw = readFileSync(filePath, "utf-8");
+    raw = readFileSync2(filePath, "utf-8");
   } catch {
     return { kind: "absent" };
   }
@@ -31276,8 +31282,22 @@ function resolveDispatchConfig(env, options = {}) {
   };
   const rawUrl = explicitUrl !== undefined ? { value: explicitUrl, source: "DISPATCH_URL" } : merged.enabled === true ? { value: merged.serverUrl ?? DEFAULT_SERVER_URL, source: "dispatch.serverUrl" } : null;
   const url2 = rawUrl ? parsedDispatchUrl(rawUrl.value, rawUrl.source) : { url: null, error: null };
-  const token = env.DISPATCH_TOKEN ?? merged.token ?? null;
-  const tokenSource = env.DISPATCH_TOKEN === undefined ? "dispatch.token" : "DISPATCH_TOKEN";
+  let token;
+  let tokenSource;
+  if (env.DISPATCH_TOKEN_FILE !== undefined) {
+    tokenSource = "DISPATCH_TOKEN_FILE";
+    try {
+      token = readSecretFile(tokenSource, env.DISPATCH_TOKEN_FILE);
+    } catch (error) {
+      return { enabled: false, url: url2.url, token: null, error: messageFor(error) };
+    }
+  } else if (env.DISPATCH_TOKEN !== undefined) {
+    tokenSource = "DISPATCH_TOKEN";
+    token = env.DISPATCH_TOKEN;
+  } else {
+    tokenSource = "dispatch.token";
+    token = merged.token ?? null;
+  }
   if (url2.error !== null)
     return { enabled: false, url: null, token, error: url2.error };
   if (url2.url === null)

package/dist/legion.js

@@ -30243,8 +30243,7 @@ var LegionDaemonApi = {
       roleTokens: record(string2(), string2()),
       controlSubject: nonEmptyString,
       gates: object({
-        design: _enum2(["root-issues", "off"]),
-        merge: _enum2(["human", "off"])
+        design: _enum2(["root-issues", "off"])
       }).optional(),
       secret: nonEmptyString
     })
@@ -30253,14 +30252,6 @@ var LegionDaemonApi = {
     request: architectCapability.extend({ generation: number2().int() }),
     response: object({})
   },
-  MergeGate: {
-    request: architectCapability.extend({ pr: number2().int().positive() }),
-    response: object({
-      approved: boolean2(),
-      pr: number2().int().positive(),
-      headSha: nonEmptyString
-    })
-  },
   ProcessExit: {
     request: architectCapability.extend({ generation: number2().int() }),
     response: object({})
@@ -30441,6 +30432,21 @@ function messageFor(error) {
 var import_nats2 = __toESM(require_mod4(), 1);
 import { logger as logger2 } from "@oh-my-pi/pi-utils";
 
+// ../envoy-client/src/secret-file.ts
+import { readFileSync } from "fs";
+function readSecretFile(variable, filePath) {
+  let contents;
+  try {
+    contents = readFileSync(filePath, "utf8");
+  } catch (error) {
+    throw new Error(`${variable} names ${filePath}, which could not be read: ${messageFor(error)}`);
+  }
+  const value = contents.trim();
+  if (value.length === 0)
+    throw new Error(`${variable} names ${filePath}, which is empty`);
+  return value;
+}
+
 // src/legion/classify.ts
 function classifySession(env) {
   if (env.LEGION_CONTROLLER !== undefined && env.LEGION_TREE !== undefined) {
@@ -30466,10 +30472,20 @@ function requiredEnvironment(env, key) {
     throw new Error(`${key} is required for Legion`);
   return value;
 }
+function requiredSecret(env, key) {
+  const fileKey = `${key}_FILE`;
+  const file = env[fileKey];
+  if (file !== undefined)
+    return readSecretFile(fileKey, file);
+  return requiredEnvironment(env, key);
+}
 function requiredControllerCapability(env) {
+  if (env.LEGION_CONTROLLER_SECRET_FILE !== undefined) {
+    return readSecretFile("LEGION_CONTROLLER_SECRET_FILE", env.LEGION_CONTROLLER_SECRET_FILE);
+  }
   const secret = env.LEGION_CONTROLLER_SECRET;
   if (!secret) {
-    throw new Error("LEGION_CONTROLLER_SECRET is required to claim the controller. " + "Launch OMP with LEGION_CONTROLLER_SECRET in its environment before running " + "/legion-claim-controller.");
+    throw new Error("LEGION_CONTROLLER_SECRET or LEGION_CONTROLLER_SECRET_FILE is required to claim the controller. " + "Launch OMP with one of them in its environment before running /legion-claim-controller.");
   }
   return secret;
 }
@@ -30593,7 +30609,6 @@ function createLegionDaemonClient(baseUrl, fetchFn = fetch, recovery) {
     workerStarted: (input) => post("/legion/v1/worker/started", input, LegionDaemonApi.WorkerStarted.response),
     workerReady: (input) => noContent("/legion/v1/worker/ready", input, LegionDaemonApi.WorkerReady.response),
     spawnWorker: (input) => post("/legion/v1/worker/spawn", input, LegionDaemonApi.SpawnWorker.response),
-    mergeGate: (input) => post("/legion/v1/merge-gate", input, LegionDaemonApi.MergeGate.response),
     releaseWave: (input) => post("/legion/v1/waves/release", input, LegionDaemonApi.WaveRelease.response),
     provisioningCredential: (input) => post("/legion/v1/provisioning-credential", input, LegionDaemonApi.ProvisioningCredential.response),
     escalate: (input) => noContent("/legion/v1/escalate", input, LegionDaemonApi.Escalate.response),
@@ -30712,20 +30727,12 @@ var LEGION_OP_FIELDS = {
   register_gate: ["issue", "askId"],
   release_wave: ["issues"],
   escalate: ["kind", "context"],
-  merge_gate: ["pr"],
   spawn_worker: ["issue", "role", "task"]
 };
 function legionToolSchema(pi) {
   const z = pi.zod;
   return z.object({
-    op: z.enum([
-      "set_status",
-      "register_gate",
-      "release_wave",
-      "escalate",
-      "merge_gate",
-      "spawn_worker"
-    ]),
+    op: z.enum(["set_status", "register_gate", "release_wave", "escalate", "spawn_worker"]),
     issue: z.string().optional(),
     status: z.enum(LIFECYCLE_STATUSES2).optional(),
     askId: z.string().optional(),
@@ -30733,7 +30740,6 @@ function legionToolSchema(pi) {
     context: z.unknown().optional(),
     issues: z.array(z.string()).optional(),
     rationale: z.string().optional(),
-    pr: z.number().optional(),
     role: z.enum(LEGION_ROLES).optional(),
     task: z.string().optional()
   });
@@ -30757,13 +30763,6 @@ function createLegionTool(deps) {
             throw new Error(`${String(parameters.op)} requires ${name}`);
           return value;
         };
-        const numberInput = (name) => {
-          const value = parameters[name];
-          if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0) {
-            throw new Error(`${String(parameters.op)} requires a positive integer ${name}`);
-          }
-          return value;
-        };
         const op = String(parameters.op);
         const allowedFields = LEGION_OP_FIELDS[op];
         if (allowedFields) {
@@ -30774,13 +30773,6 @@ function createLegionTool(deps) {
           }
         }
         switch (parameters.op) {
-          case "merge_gate":
-            return jsonSuccess(await daemon.mergeGate({
-              tree: architect.tree,
-              pr: numberInput("pr"),
-              sessionId,
-              secret: architect.secret
-            }));
           case "set_status": {
             const status = parameters.status;
             if (typeof status !== "string" || !isLifecycleStatus(status)) {
@@ -31645,7 +31637,7 @@ ${envelope.payload ?? ""}`;
 }
 
 // ../envoy-client/src/dispatch-config.ts
-import { readFileSync } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import { homedir } from "os";
 import * as path3 from "path";
 var DEFAULT_SERVER_URL = "http://localhost:8766";
@@ -31683,7 +31675,7 @@ function describeSchemaIssue(filePath, error) {
 function readEnvoyFile(filePath) {
   let raw;
   try {
-    raw = readFileSync(filePath, "utf-8");
+    raw = readFileSync2(filePath, "utf-8");
   } catch {
     return { kind: "absent" };
   }
@@ -31716,8 +31708,22 @@ function resolveDispatchConfig(env, options = {}) {
   };
   const rawUrl = explicitUrl !== undefined ? { value: explicitUrl, source: "DISPATCH_URL" } : merged.enabled === true ? { value: merged.serverUrl ?? DEFAULT_SERVER_URL, source: "dispatch.serverUrl" } : null;
   const url2 = rawUrl ? parsedDispatchUrl(rawUrl.value, rawUrl.source) : { url: null, error: null };
-  const token = env.DISPATCH_TOKEN ?? merged.token ?? null;
-  const tokenSource = env.DISPATCH_TOKEN === undefined ? "dispatch.token" : "DISPATCH_TOKEN";
+  let token;
+  let tokenSource;
+  if (env.DISPATCH_TOKEN_FILE !== undefined) {
+    tokenSource = "DISPATCH_TOKEN_FILE";
+    try {
+      token = readSecretFile(tokenSource, env.DISPATCH_TOKEN_FILE);
+    } catch (error) {
+      return { enabled: false, url: url2.url, token: null, error: messageFor(error) };
+    }
+  } else if (env.DISPATCH_TOKEN !== undefined) {
+    tokenSource = "DISPATCH_TOKEN";
+    token = env.DISPATCH_TOKEN;
+  } else {
+    tokenSource = "dispatch.token";
+    token = merged.token ?? null;
+  }
   if (url2.error !== null)
     return { enabled: false, url: null, token, error: url2.error };
   if (url2.url === null)
@@ -34018,7 +34024,7 @@ function legionExtension(pi) {
     return createLegionDaemonClient(requiredEnvironment(process.env, "LEGION_DAEMON_URL"), fetch, {
       recoveryToken: (sessionId) => {
         if (capability !== undefined && sessionId === capability.sessionID) {
-          return requiredEnvironment(process.env, "LEGION_BOOT_TOKEN");
+          return requiredSecret(process.env, "LEGION_BOOT_TOKEN");
         }
         throw new Error(`Legion session ${sessionId} has no persisted recovery token`);
       },
@@ -34101,7 +34107,7 @@ function legionExtension(pi) {
       return;
     if (bootstrap)
       return bootstrap;
-    const bootToken = requiredEnvironment(process.env, "LEGION_BOOT_TOKEN");
+    const bootToken = requiredSecret(process.env, "LEGION_BOOT_TOKEN");
     bootstrap = (async () => {
       const { sessionFile, agentId } = await persistedTranscript(context);
       const started = await (async () => {
@@ -34168,7 +34174,7 @@ function legionExtension(pi) {
       return;
     if (bootstrap)
       return bootstrap;
-    const bootToken = requiredEnvironment(process.env, "LEGION_BOOT_TOKEN");
+    const bootToken = requiredSecret(process.env, "LEGION_BOOT_TOKEN");
     const workspace = requiredEnvironment(process.env, "LEGION_WORKSPACE");
     bootstrap = (async () => {
       const { sessionFile, agentId } = await persistedTranscript(context);

package/dist/skills/AGENTS.md

@@ -34,6 +34,8 @@ directly for a durable human question; replies come back to the worker's own ses
 ## Durable artifacts
 
 Phase handoffs are committed in lifecycle order: architect, plan, implement, test, and review.
-The reviewer removes `.legion/` as its final commit; retro records its learning in
+A clean review ends with the `.legion/` deletion pushed by the implementer at the reviewer's
+direction (the review App holds no `contents` permission and cannot push), which the reviewer
+then approves; retro records its learning in
 `docs/solutions/` and writes no handoff. GitHub comments and reviews carry the required Legion
 footer so the daemon can attribute artifacts to their worker session.

package/dist/skills/legion-architect/SKILL.md

@@ -164,28 +164,30 @@ Wait for the messaged implementer to report its durable retro result. Retro outp
 `docs/solutions/` plus an issue comment; it must not create a `.legion` file or change
 the reviewer-approved head after cleanup.
 
-## 6. Architect sign-off and final merge gate
+## 6. Architect sign-off and merge
 
 Sign off only when scope is fully met, integration evidence is current, corrective work
 is complete, review is clean, retro completed, and no necessary work was silently
 deferred. Make the sign-off comment explicit about that evidence.
 
-When the config-armed final merge gate applies, preserve this order exactly:
+Preserve this order exactly:
 
 1. tester green and review cycles complete;
-2. reviewer pushes the `.legion/` deletion as its final commit and approves that head;
-3. retro completes without dirtying the branch;
-4. enter the Sami-approval step by calling
-   `legion({ op: "merge_gate", pr: <pull request number> })`. The daemon performs one
-   current GitHub review read against the pinned head. If it returns `approved: true`, the
-   approval already satisfies the gate and you immediately continue to the merger; do not
-   wait for a new wake. If it returns `approved: false`, request or retain Sami approval
-   and park for a later `pr-ready` wake. Do not poll or retry this check;
-5. The merger verifies the approved head and publishes `READY #<n> at <sha>` to
-   `notifications.role.pr-queue`; it never merges. The merge queue approves and merges under its own authority.
-
-If anything changes the approved head, return to review; do not let the merger publish
-`READY` for an obsolete approval.
+2. on a clean review, `spawn_worker` the implementer once more to push only the `.legion/`
+   deletion (the review App holds no `contents` permission), then the reviewer approves that
+   head. The deletion must land before that approval, which is head-pinned. An implementer
+   completion always writes the issue's status as `testing`; this one is not a test round,
+   so on its `phase-complete` wake call `legion({ op: "set_status", issue, status: "retro" })`
+   before messaging the reviewer to approve;
+3. retro completes without dirtying the branch beyond `docs/solutions/`;
+4. the merger verifies the current head is the reviewer-approved head plus only the retro
+   commits and publishes `READY #<n> at <sha>` to `notifications.role.pr-queue`; it never
+   merges. The merge queue merges under its own authority and the repository's own rules
+   (branch protection, CODEOWNERS); whether a human must approve first is that repository's
+   setting, not Legion's, and you never ask for or wait on such an approval.
+
+If anything else changes the head, return to review; do not let the merger publish `READY`
+for an obsolete approval.
 
 ## 7. Close
 
@@ -193,7 +195,7 @@ After the merge result and sign-off are recorded, post the sign-off and close th
 through the Legion write surface:
 
 ```text
-dispatch_comment({ issue: "LEGION-40", body: "<sign-off: scope, integration evidence, review, retro, Sami approval, and merge>" })
+dispatch_comment({ issue: "LEGION-40", body: "<sign-off: scope, integration evidence, review, retro, and merge>" })
 legion({ op: "set_status", issue: "LEGION-40", status: "done" })
 ```
 
@@ -213,7 +215,7 @@ corresponding lifecycle procedure.
 | `phase-complete` | Payload `{type:"phase-complete", issue, role, summary}`. May arrive live or via `catchup-overseer`'s `phaseCompletions`. Read the committed handoff for that phase, then spawn the next phase's owner, or `spawn_worker` on the same role again to resume it with corrections if the handoff shows unresolved gaps. A `reviewer` completion whose GitHub review is `CHANGES_REQUESTED` (the daemon has already returned the issue's Dispatch status to `in_progress` for this) means `spawn_worker` the **implementer** again with the review findings — thread URLs and blocking items — as its task, then route back through tester and reviewer in order; never `spawn_worker` the reviewer directly off this wake and never proceed to retro on this verdict. A reviewer completion with an `APPROVED` review proceeds to retro (step 5). |
 | `worker-queued` | Payload `{type:"worker-queued", issue, role}`. The deployment's worker cap is full; this role's spawn is queued. Do not respawn or retry — wait for `worker-started`. |
 | `worker-started` | Payload `{type:"worker-started", issue, role}`. A previously queued role has been promoted and is now running. Treat it exactly as a normal spawn: resume tracking that role's live session. |
-| `pr-ready` | Verify the live PR head, green status, and review state. Continue the review/retro/Sami/merger order only for that current head. |
+| `pr-ready` | Verify the live PR head, green status, and review state. Continue the review/retro/merger order only for that current head. |
 | `pr-review` | Payload `{type:"pr-review", state, author, body}`. Delivered to whichever role is currently active for the issue, falling back to you when no worker phase is active. Follows the same verdict rule as a reviewer's `phase-complete`: `state: "changes_requested"` sends the implementer back in with the review findings, then tester, then reviewer — never the reviewer again and never retro; `state: "approved"` proceeds toward retro (step 5) once the step 6 integration/merge-gate conditions are met. |
 | `pr-blocked` | Read the failed CI evidence and recovery attempts. Assign a focused implementer or corrective child, then return it through testing and review; do not treat the blocked PR as final. |
 | `pr-closed-unmerged` | Decide from current scope whether to reopen the work, send a fresh implementer, or cancel it with a reason. Delegate the repository action to the responsible phase worker and keep ownership. |

package/dist/skills/legion-controller/SKILL.md

@@ -18,8 +18,9 @@ until that PR merges, this skill's contract is not yet runnable on `main`.
 The Legion extension claims `legion-<project>-controller` and registers controller readiness
 with the daemon during session startup. Do not handle a wake unless that startup succeeded.
 
-For an interactive takeover, start OMP with `LEGION_CONTROLLER_SECRET` and
-`LEGION_DAEMON_URL` in its environment, then run:
+For an interactive takeover, start OMP with `LEGION_CONTROLLER_SECRET` (or
+`LEGION_CONTROLLER_SECRET_FILE`, a path to a file holding it) and `LEGION_DAEMON_URL` in its
+environment, then run:
 
 ```text
 /legion-claim-controller

package/dist/skills/legion-retro/SKILL.md

@@ -15,14 +15,15 @@ Follow this ordering exactly. It keeps the reviewed branch clean while preservin
 retrospective's durable output.
 
 1. Tester green and all code-review cycles finish.
-2. The reviewer removes `.legion/`, pushes that deletion as its final commit, then approves.
+2. The implementer pushes the `.legion/` deletion at the reviewer's direction, and the reviewer
+   approves that head.
 3. Run this retro: commit durable learnings to `docs/solutions/` and post the issue comment.
    Retro writes **no `.legion` file**, so it never re-dirties the cleaned handoff tree.
-4. Sami approves the final reviewed head.
-5. The merger verifies the approved head, publishes `READY`, and pushes nothing; the merge queue merges.
+4. The merger verifies the approved head, publishes `READY`, and pushes nothing; the merge queue
+   merges under the repository's own rules.
 
-Do not start retro before step 2, skip it because the change seems mechanical, or merge before
-steps 3 and 4. The design gate is not a substitute for this final merge gate.
+Do not start retro before step 2, skip it because the change seems mechanical, or publish `READY`
+before step 3. The design gate is not a substitute for review and retro.
 
 ## Two perspectives
 
@@ -84,4 +85,4 @@ Before returning, verify all of the following:
 - The learning documents and issue comment both exist.
 - No `.legion` file was created or modified by retro.
 - The fresh-eyes analysis was considered alongside the implementer's context.
-- Sami's approval and the merger remain subsequent steps, not work performed by retro.
+- The merger remains a subsequent step, not work performed by retro.

package/dist/skills/legion-worker/SKILL.md

@@ -19,8 +19,9 @@ until that PR merges, this skill's contract is not yet runnable on `main`.
 
 The daemon spawns you as a separate `omp --mode rpc` process (behind `legion worker-shim`,
 in a tmux pane) with `LEGION_TREE`, `LEGION_ISSUE`, `LEGION_ROLE`, `LEGION_GENERATION`,
-`LEGION_BOOT_TOKEN`, `LEGION_DAEMON_URL`, `LEGION_STATE_DIR`, and `LEGION_WORKSPACE` in your
-environment (`LEGION_PROJECT` is also supplied, but nothing reads it). The extension
+`LEGION_BOOT_TOKEN_FILE` (a 0600 file under `$LEGION_STATE_DIR/secrets` holding your boot token;
+the extension reads it for you), `LEGION_DAEMON_URL`, `LEGION_STATE_DIR`, and `LEGION_WORKSPACE`
+in your environment (`LEGION_PROJECT` is also supplied, but nothing reads it). The extension
 completes the boot handshake for you at session start — it registers with the daemon, claims
 your role, and signals readiness. You never call `envoy_role_set` yourself.
 
@@ -219,8 +220,9 @@ Negative control: <deliberately broken input> → <refusal or failure observed>.
   never from a handoff — then runs `task(agent="thermonuclear-deep-review")` and
   `task(agent="thermonuclear-code-quality")` once at that head and records the verdict.
   Skip the `Thermo` line entirely on a docs-only PR. Post every correctness finding as a
-  PR review comment and return the issue to the architect; when clean, delete `.legion/`,
-  push, review **that** head, and approve it by name.
+  PR review comment and return the issue to the architect; when clean, have the architect send
+  the implementer back to push the `.legion/` deletion (the review App cannot push), then
+  review **that** head and approve it by name.
 - Once a base is frozen for others to stack on, never rewrite it — fixes land as new
   commits on top, and the `Chain` line records what is frozen.
 - The merger confirms the approved head still equals the current head, then publishes
@@ -262,8 +264,8 @@ cd -- "$LEGION_WORKSPACE" && \
 
 Do not report phase completion until the write, existence check, and handoff commit
 succeed; when an issue branch exists, its push is also required. This is the committed
-copy the next phase reads after revival. The reviewer later removes `.legion/` as its final
-commit; phase workers do not remove it.
+copy the next phase reads after revival. It is removed once, at the end of a clean review: the
+implementer pushes that deletion at the reviewer's direction. No other phase removes it.
 
 ## Completion: report to the architect, then stay
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/pi-legion-envoy",
-  "version": "0.44.1",
+  "version": "1.1.0",
   "type": "module",
   "omp": {
     "extensions": [