lazycodex-ai 5.0.0-beta.82 → 5.0.0-beta.84

package/packages/omo-codex/plugin/skills/browser/references/owned-engine/network.md

@@ -0,0 +1,42 @@
+# Read the network, not the DOM
+
+When a page renders a list, a table, or search results, the data almost always arrived as JSON one
+request earlier. That JSON is complete, typed, free of markup, and immune to the layout changing
+next week. Watching traffic costs nothing on a target you own, and the page cannot observe it.
+
+**Snoop before you scrape.** Scroll-and-parse is the fallback, not the default.
+
+## Wait for a request, never for a clock
+
+A fixed sleep is a guess that fails on a slower machine and wastes time on a faster one. Subscribe
+to the response you expect **before** triggering the action, then await that signal with a bounded
+timeout. This is the same rule that governs test code, for the same reason.
+
+## Collecting through infinite scroll
+
+Drive scroll and extraction as a generator: scroll, collect what is new, stop on a target count or
+a scroll ceiling. Bound both, so a page that keeps producing cannot run forever.
+
+## Flight traces
+
+For QA evidence, record a trace: one entry per step with before/after screenshots, the network
+log, and console output, written as a line-delimited log plus an HAR. That triple is what makes a
+failure reconstructable afterwards instead of re-runnable-in-theory.
+
+Cap recorded body sizes. An untrimmed trace of a media-heavy page is mostly bytes nobody reads.
+
+## Request interception
+
+Route matching by glob, regular expression, or predicate lets you stub an endpoint, fail one
+request to test an error path, or block third-party noise. Enable interception on the first route
+and disable it on dispose — leaving it on slows every later navigation.
+
+## Cookies
+
+Injecting a cookie export into your own profile is legitimate for ordinary sessions and useless
+for the ones you most want: accounts whose risk engines bind a session to a device will invalidate
+it, and a password manager's session is tab-bound and never portable. Sanitize what you do inject
+(drop expired entries, keep host-prefixed cookies secure and root-scoped).
+
+**Never copy a session out of the user's real browser profile.** If you need their login, that is
+the attached engine's job.

package/packages/omo-codex/plugin/skills/browser/references/recipes/1password.md

@@ -0,0 +1,59 @@
+# Reading a 1Password vault the user has unlocked
+
+Scope: reading an item out of a vault **the user has already unlocked in their browser**. Signing
+in is the user's job; see "Not in scope" below.
+
+## The fact that shapes everything
+
+1Password web is zero-knowledge. The unlocked vault key lives in **one tab's `sessionStorage`**,
+not in a cookie. So:
+
+- A **new** tab pointed at the vault redirects to the sign-in page even while a signed-in tab sits
+  right beside it. Opening your own tab does not work and never will.
+- Navigating the authenticated tab away, or closing it, **destroys the session** until a human
+  signs in again.
+
+Therefore: borrow the existing tab, read, return it. Do not open, do not navigate away, do not
+"refresh to fix" anything.
+
+```bash
+bsk tab list --scope user           # find the already-signed-in tab
+bsk tab borrow <tab-id>
+# ... read ...
+bsk tab return <tab-id>
+```
+
+## Check liveness by URL, never by title
+
+The app mutates its URL hash without updating the document title, so a signed-in vault can still
+report a sign-in title. A live session's `location.href` contains the app path and never the
+sign-in path. Read the URL.
+
+## The browser may be shared
+
+Other automation may be driving the same window.
+
+- **Clear the search box before typing.** It often holds someone else's query, and typing alone
+  appends to it, returning confident results for the wrong search.
+- **Read the autocomplete listbox, not the results grid.** The grid holds whatever query was last
+  committed, possibly by another actor. Scraping every option on the page silently merges two
+  different searches.
+- **Leave the tab on the item list** when you are done, so the next actor starts clean.
+
+## If it is locked
+
+```bash
+bsk request-help --session <id> --prompt "Please unlock 1Password in this tab, then continue."
+```
+
+Then observe again.
+
+## Not in scope
+
+- **Do not type a master password, and do not automate the sign-in form.** Only the account owner
+  signs in. If the vault is locked, hand it to them.
+- **Do not extract secrets through the page** beyond the single value the user asked for, and
+  report it masked (`abcd…9fb0 (len 37)`) unless they asked for the exact string.
+- **Do not copy, inject, or reuse session cookies.** The session is device- and tab-bound; cookie
+  reuse cannot work and trips account protections.
+- Clear the clipboard if you ever populate it.

package/packages/omo-codex/plugin/skills/browser/references/remote.md

@@ -0,0 +1,24 @@
+# Agent here, browser there
+
+The agent and the browser do not have to be the same machine. Upstream supports this directly;
+nothing in this package needs to bridge it.
+
+Shape:
+
+- The **browser machine** needs only the extension.
+- The **agent machine** runs the `bsk` CLI and this skill.
+- They are joined by a daemon in server mode plus a pairing link.
+
+```bash
+bsk daemon start --mode server      # on the machine the agent runs on
+```
+
+Then follow upstream's pairing guide, which owns the current flag surface and the TLS
+prerequisites: https://github.com/Tencent/BrowserSkill/blob/main/docs/remote-extension-connection.md
+
+Once paired, every command in `commands.md` behaves identically; `--out` paths still resolve on
+the machine that ran the command.
+
+If pairing is not configured, say so and ask. Do not substitute a browser on the agent machine:
+the point of the attached engine is the sessions that live in the user's browser, and a local
+browser has none of them.

package/packages/omo-codex/plugin/skills/browser/scripts/browser-doctor.mjs

@@ -0,0 +1,41 @@
+#!/usr/bin/env node
+import { platform } from "node:os"
+import { connectedBrowsers, readStatus, resolveCli, STORE_LISTINGS, SUPPORTED_PLATFORMS } from "./browser-env.mjs"
+
+const REMEDIES = {
+  ready: "Start a session: bsk session start --json --no-focus --name \"<task>\"",
+  "no-extension": `Ask the user to install and enable the extension, then re-run this doctor.\n  Chrome: ${STORE_LISTINGS.chrome}\n  Edge:   ${STORE_LISTINGS.edge}`,
+  "no-cli": "Install the CLI: node \"<skill-root>/scripts/browser-install.mjs\", then re-run this doctor.",
+  "no-browser-support": "This platform has no supported browser. Say so and stop; do not substitute another engine.",
+}
+
+async function diagnose() {
+  if (!SUPPORTED_PLATFORMS.has(platform())) {
+    return { state: "no-browser-support", platform: platform() }
+  }
+  const cli = await resolveCli()
+  if (cli === undefined) return { state: "no-cli", platform: platform() }
+
+  let status
+  try {
+    status = await readStatus(cli)
+  } catch (error) {
+    return { state: "no-extension", platform: platform(), cli, detail: `status failed: ${error.message}` }
+  }
+  const browsers = connectedBrowsers(status)
+  if (browsers.length === 0) return { state: "no-extension", platform: platform(), cli }
+  return { state: "ready", platform: platform(), cli, browsers: browsers.length }
+}
+
+const report = await diagnose()
+const json = process.argv.includes("--json")
+if (json) {
+  console.log(JSON.stringify({ ...report, remedy: REMEDIES[report.state] }, null, 2))
+} else {
+  console.log(`state: ${report.state}`)
+  if (report.cli) console.log(`cli:   ${report.cli}`)
+  if (report.browsers) console.log(`browsers connected: ${report.browsers}`)
+  if (report.detail) console.log(`detail: ${report.detail}`)
+  console.log(`\n${REMEDIES[report.state]}`)
+}
+process.exit(report.state === "ready" ? 0 : 1)

package/packages/omo-codex/plugin/skills/browser/scripts/browser-env.mjs

@@ -0,0 +1,41 @@
+import { execFile } from "node:child_process"
+import { existsSync } from "node:fs"
+import { homedir, platform } from "node:os"
+import { join } from "node:path"
+import { promisify } from "node:util"
+
+const run = promisify(execFile)
+
+export const STORE_LISTINGS = {
+  chrome: "https://chromewebstore.google.com/detail/hhcmgoofomhgciiibhipgmgkgnoenaoi",
+  edge: "https://microsoftedge.microsoft.com/addons/detail/browserskill/emacgiaaaiojkkpkddmmdfhmokgmnikg",
+}
+
+export const SUPPORTED_PLATFORMS = new Set(["darwin", "linux", "win32"])
+
+export function localBinCandidates() {
+  const bin = join(homedir(), ".local", "bin")
+  return platform() === "win32" ? [join(bin, "bsk.exe"), join(bin, "bsk")] : [join(bin, "bsk")]
+}
+
+export async function resolveCli() {
+  for (const candidate of localBinCandidates()) {
+    if (existsSync(candidate)) return candidate
+  }
+  try {
+    await run("bsk", ["--version"], { timeout: 15000, windowsHide: true })
+    return "bsk"
+  } catch {
+    return undefined
+  }
+}
+
+export async function readStatus(cli) {
+  const { stdout } = await run(cli, ["status", "--json"], { timeout: 30000, windowsHide: true })
+  return JSON.parse(stdout)
+}
+
+export function connectedBrowsers(status) {
+  const browsers = status?.browsers
+  return Array.isArray(browsers) ? browsers : []
+}

package/packages/omo-codex/plugin/skills/browser/scripts/browser-install.mjs

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+import { spawn } from "node:child_process"
+import { platform } from "node:os"
+import { resolveCli, STORE_LISTINGS, SUPPORTED_PLATFORMS } from "./browser-env.mjs"
+
+const UNIX_INSTALL = "curl -fsSL https://raw.githubusercontent.com/Tencent/BrowserSkill/main/install.sh | sh"
+const WINDOWS_INSTALL = "irm https://raw.githubusercontent.com/Tencent/BrowserSkill/main/install.ps1 | iex"
+
+function installCommand() {
+  return platform() === "win32"
+    ? { file: "powershell", args: ["-NoProfile", "-Command", WINDOWS_INSTALL], display: WINDOWS_INSTALL }
+    : { file: "sh", args: ["-c", UNIX_INSTALL], display: UNIX_INSTALL }
+}
+
+function spawnInstaller({ file, args }) {
+  return new Promise((resolve) => {
+    const child = spawn(file, args, { stdio: "inherit", windowsHide: true })
+    child.on("error", () => resolve(1))
+    child.on("close", (code) => resolve(code ?? 1))
+  })
+}
+
+if (!SUPPORTED_PLATFORMS.has(platform())) {
+  console.error(`unsupported platform: ${platform()}. macOS, Linux and Windows x64 only.`)
+  process.exit(1)
+}
+
+if (await resolveCli()) {
+  console.log("bsk is already installed; run browser-doctor.mjs to check the extension.")
+  process.exit(0)
+}
+
+const command = installCommand()
+console.log(`installing the bsk CLI with the upstream installer:\n  ${command.display}\n`)
+const code = await spawnInstaller(command)
+if (code !== 0) {
+  console.error(`\ninstaller exited ${code}. Report this instead of retrying blindly.`)
+  process.exit(code)
+}
+
+console.log([
+  "",
+  "CLI installed. Two things remain, and only the user can do the first:",
+  "",
+  "1. Install the browser extension from the store, then enable it:",
+  `     Chrome: ${STORE_LISTINGS.chrome}`,
+  `     Edge:   ${STORE_LISTINGS.edge}`,
+  "2. Re-run: node \"<skill-root>/scripts/browser-doctor.mjs\"",
+  "",
+  "If PATH does not pick up the CLI in this shell, use its absolute path under ~/.local/bin.",
+].join("\n"))

package/packages/omo-codex/plugin/skills/lcx-contribute-bug-fix/SKILL.md

@@ -84,7 +84,7 @@ sync_latest_source() {
   git -C "$DEST" checkout -B "$DEFAULT_BRANCH" FETCH_HEAD
 }
 sync_latest_source code-yeongyu/lazycodex "$LAZYCODEX_SOURCE_ROOT/lazycodex-source"
-sync_latest_source openai/codex "$LAZYCODEX_SOURCE_ROOT/openai-codex-source"
+sync_latest_source openai/codex "$LAZYCODEX_SOURCE_ROOT/chatgpt-subscription-source"
 ```
 4. Create a fresh temporary clone and branch under `${TMPDIR:-/tmp}`. Do not modify the user's current repository for the target fix unless the current repository is itself the requested target and the user explicitly asked for local edits.
 

package/packages/omo-codex/plugin/skills/lcx-doctor/SKILL.md

@@ -58,7 +58,7 @@ sync_latest_source() {
   git -C "$DEST" checkout -B "$DEFAULT_BRANCH" FETCH_HEAD
 }
 sync_latest_source code-yeongyu/lazycodex "$LAZYCODEX_SOURCE_ROOT/lazycodex-source"
-sync_latest_source openai/codex "$LAZYCODEX_SOURCE_ROOT/openai-codex-source"
+sync_latest_source openai/codex "$LAZYCODEX_SOURCE_ROOT/chatgpt-subscription-source"
 ```
 
 2. Inventory the installed surface. Resolve `CODEX_HOME` (default `~/.codex`), then collect:
@@ -102,7 +102,7 @@ sync_latest_source openai/codex "$LAZYCODEX_SOURCE_ROOT/openai-codex-source"
 | Plugin payload wiring | PASS/WARN/FAIL | [evidence] |
 | Bin links / aliases | PASS/WARN/FAIL | [evidence] |
 | Runtime probe | PASS/WARN/FAIL | [evidence] |
-| Drift vs latest source | PASS/WARN/FAIL | [evidence, citing `$LAZYCODEX_SOURCE_ROOT/lazycodex-source` or `$LAZYCODEX_SOURCE_ROOT/openai-codex-source` paths] |
+| Drift vs latest source | PASS/WARN/FAIL | [evidence, citing `$LAZYCODEX_SOURCE_ROOT/lazycodex-source` or `$LAZYCODEX_SOURCE_ROOT/chatgpt-subscription-source` paths] |
 
 ### Remediations
 1. [Most important fix first: exact command or config edit, and what it resolves. When Astra readiness is WARN: upgrade Codex to 0.153.1 or newer and relaunch it once so `models_cache.json` picks up `gpt-6-astra`.]
@@ -124,7 +124,7 @@ Do not:
 
 - mutate config, installs, or repositories during diagnosis
 - report a verdict without captured evidence
-- compare against remembered source layout instead of `$LAZYCODEX_SOURCE_ROOT/lazycodex-source` and `$LAZYCODEX_SOURCE_ROOT/openai-codex-source`
+- compare against remembered source layout instead of `$LAZYCODEX_SOURCE_ROOT/lazycodex-source` and `$LAZYCODEX_SOURCE_ROOT/chatgpt-subscription-source`
 - require retired payload paths that the current `.codex-plugin/plugin.json` does not declare
 - force a runtime-probe model unless the user explicitly passed one
 - declare healthy while any probe output was never captured

package/packages/omo-codex/plugin/skills/lcx-report-bug/SKILL.md

@@ -78,14 +78,14 @@ sync_latest_source() {
   git -C "$DEST" checkout -B "$DEFAULT_BRANCH" FETCH_HEAD
 }
 sync_latest_source code-yeongyu/lazycodex "$LAZYCODEX_SOURCE_ROOT/lazycodex-source"
-sync_latest_source openai/codex "$LAZYCODEX_SOURCE_ROOT/openai-codex-source"
+sync_latest_source openai/codex "$LAZYCODEX_SOURCE_ROOT/chatgpt-subscription-source"
 ```
 4. Follow the debugging skill far enough to gather runtime evidence:
    - form at least three plausible hypotheses
    - run the smallest reproduction that exercises the real surface
    - confirm the root cause by observing the failing state
    - identify the minimal fix path or maintainer action
-5. Compare runtime evidence with both `$LAZYCODEX_SOURCE_ROOT/lazycodex-source` and `$LAZYCODEX_SOURCE_ROOT/openai-codex-source` before choosing the target repo. Cite exact files, commands, logs, or source paths that support the routing decision.
+5. Compare runtime evidence with both `$LAZYCODEX_SOURCE_ROOT/lazycodex-source` and `$LAZYCODEX_SOURCE_ROOT/chatgpt-subscription-source` before choosing the target repo. Cite exact files, commands, logs, or source paths that support the routing decision.
 6. Choose the target repo:
    - Use `code-yeongyu/lazycodex` when the bug is in LazyCodex integration, distribution, bundled plugin code, skills, hooks, MCP wiring, installer behavior, aliases, marketplace sync, docs, or any behavior that disappears in clean upstream Codex.
    - Use `openai/codex` when the bug reproduces in clean upstream Codex without LazyCodex, or the failing behavior comes from Codex CLI core, plugin API contracts, sandboxing, approvals, config loading, or built-in tool behavior.
@@ -142,7 +142,7 @@ Write the issue body in English and keep it direct:
 - Target repository:
 - Why this belongs there:
 - LazyCodex evidence (runtime + `$LAZYCODEX_SOURCE_ROOT/lazycodex-source`):
-- Upstream Codex source evidence from `$LAZYCODEX_SOURCE_ROOT/openai-codex-source`:
+- Upstream Codex source evidence from `$LAZYCODEX_SOURCE_ROOT/chatgpt-subscription-source`:
 
 ## Reproduction
 1. [Exact command or UI action]
@@ -186,7 +186,7 @@ Use this only when a PR is the right artifact, which is only ever for `openai/co
 - Target repository:
 - Why this belongs there:
 - LazyCodex evidence (runtime + `$LAZYCODEX_SOURCE_ROOT/lazycodex-source`):
-- Upstream Codex source evidence from `$LAZYCODEX_SOURCE_ROOT/openai-codex-source`:
+- Upstream Codex source evidence from `$LAZYCODEX_SOURCE_ROOT/chatgpt-subscription-source`:
 
 ## Root Cause
 [Confirmed cause. Cite runtime evidence and source paths.]
@@ -263,6 +263,6 @@ Do not file:
 - a vague issue without reproduction steps
 - an issue that claims a root cause not supported by runtime evidence
 - a duplicate when commenting on an existing issue is enough
-- an issue without checking the latest `$LAZYCODEX_SOURCE_ROOT/lazycodex-source` and `$LAZYCODEX_SOURCE_ROOT/openai-codex-source` checkouts
+- an issue without checking the latest `$LAZYCODEX_SOURCE_ROOT/lazycodex-source` and `$LAZYCODEX_SOURCE_ROOT/chatgpt-subscription-source` checkouts
 - a LazyCodex issue when the bug is proven to reproduce in clean upstream Codex
 - a fix PR without a concrete branch, implemented fix, and verification result

package/packages/omo-codex/plugin/test/sync-skills-test-support.mjs

@@ -6,6 +6,7 @@ export const CONTEXT_PRESSURE_SKILL_BUDGET_BYTES = 25_000;
 
 export const expectedSkills = [
 	"ast-grep",
+	"browser",
 	"coding-agent-sessions",
 	"comment-checker",
 	"data-scientist",

package/packages/omo-codex/scripts/install-dist/install-local.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// omo-codex-install:6df5dbbbb7ca9b9dce86fae98a525a9caa7de96caed85a4b77d4e8b4ab4d1501:4c50a551b52c74c82521d2fcbd9c9a1db21370470eb76a3195db19bdfcbad5b1
+// omo-codex-install:b1e0dfcae282bb92472824778dcf95a71e63338e183d024d83d0bf18fa3ca376:26f3e8d24b70718930a9e6c72473ecc49b02f7d7ad950f64a5622bf51679d9ea
 var __esm = (fn, res, err) => () => {
   if (fn)
     try {
@@ -316,7 +316,7 @@ function shouldRetainLine(line, cutoffMs) {
 function parseDiagnosticLine(line) {
   try {
     const parsed = JSON.parse(line);
-    if (!isRecord9(parsed)) {
+    if (!isRecord10(parsed)) {
       return null;
     }
     return parsed;
@@ -327,7 +327,7 @@ function parseDiagnosticLine(line) {
     throw error;
   }
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function trimToMaxBytes(lines) {
@@ -7817,7 +7817,7 @@ function coerceBool(value) {
 function coerceString(value) {
   return typeof value == "string" ? value : undefined;
 }
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value == "object" && value !== null && !Array.isArray(value);
 }
 function toRfc3339(timestamp) {
@@ -7839,7 +7839,7 @@ function relocateInto(properties, key, value) {
     properties[key] = value;
 }
 function buildV1Event(message) {
-  const sourceProperties = isRecord10(message.properties) ? message.properties : {};
+  const sourceProperties = isRecord11(message.properties) ? message.properties : {};
   const properties = {
     ...sourceProperties
   };
@@ -9984,7 +9984,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@oh-my-opencode/omo-codex",
-    version: "5.0.0-beta.82",
+    version: "5.0.0-beta.84",
     type: "module",
     private: true,
     description: "Codex harness adapter for oh-my-openagent. Vendored Codex plugin namespace (omo) + TypeScript installer + telemetry.",
@@ -16515,8 +16515,10 @@ var OmoGitMasterSettingsSchema = OmoGitMasterSettingsLayerSchema.extend({
 
 // packages/omo-config-core/src/schema/harness.ts
 var HARNESS_IDS = ["codex", "opencode", "omo"];
-var OMO_CONFIG_HARNESS_IDS = ["opencode", "senpi", "codex"];
+var OMO_CONFIG_HARNESS_IDS = ["opencode", "native", "codex"];
 var OmoHarnessIdSchema = _enum(OMO_CONFIG_HARNESS_IDS);
+var OMO_CONFIG_LEGACY_HARNESS_ALIASES = { senpi: "native" };
+var OMO_CONFIG_LEGACY_HARNESS_IDS = Object.keys(OMO_CONFIG_LEGACY_HARNESS_ALIASES);
 
 // packages/omo-config-core/src/schema/memory.ts
 var OmoMemoryReflectionTriggerSchema = object({
@@ -16975,6 +16977,7 @@ var OmoConfigProfileSchema = object({
   telemetry: OmoTelemetrySettingsLayerSchema.optional(),
   disabled_skills: OmoDisabledSkillsSchema.optional(),
   "[opencode]": OmoOpenCodeHarnessConfigSchema.optional(),
+  "[native]": OmoTypedHarnessConfigSchema.optional(),
   "[senpi]": OmoTypedHarnessConfigSchema.optional(),
   "[codex]": OmoTypedHarnessConfigSchema.optional()
 }).strict();
@@ -16993,6 +16996,7 @@ var OmoConfigSchema = object({
   telemetry: OmoTelemetrySettingsSchema.optional(),
   disabled_skills: OmoDisabledSkillsSchema.optional(),
   "[opencode]": OmoOpenCodeHarnessConfigSchema.optional(),
+  "[native]": OmoTypedHarnessConfigSchema.optional(),
   "[senpi]": OmoTypedHarnessConfigSchema.optional(),
   "[codex]": OmoTypedHarnessConfigSchema.optional(),
   profiles: record(string2(), OmoConfigProfileSchema).default({}),
@@ -17014,6 +17018,7 @@ var OmoConfigLayerSchema = object({
   telemetry: OmoTelemetrySettingsLayerSchema.optional(),
   disabled_skills: OmoDisabledSkillsSchema.optional(),
   "[opencode]": OmoOpenCodeHarnessConfigSchema.optional(),
+  "[native]": OmoTypedHarnessConfigSchema.optional(),
   "[senpi]": OmoTypedHarnessConfigSchema.optional(),
   "[codex]": OmoTypedHarnessConfigSchema.optional(),
   profiles: record(string2(), OmoConfigProfileSchema).optional(),
@@ -17077,6 +17082,54 @@ function canonicalizeLegacyCategoryNames(document) {
   return { document: canonicalized, renames };
 }
 
+// packages/omo-config-core/src/schema/legacy-harness-names.ts
+function canonicalHarnessName(name) {
+  return Object.hasOwn(OMO_CONFIG_LEGACY_HARNESS_ALIASES, name) ? OMO_CONFIG_LEGACY_HARNESS_ALIASES[name] : name;
+}
+function harnessBlockKey(harness) {
+  return `[${harness}]`;
+}
+function legacyHarnessOfBlockKey(key) {
+  if (!key.startsWith("[") || !key.endsWith("]"))
+    return;
+  const harness = key.slice(1, -1);
+  return Object.hasOwn(OMO_CONFIG_LEGACY_HARNESS_ALIASES, harness) ? harness : undefined;
+}
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function canonicalizeBlocksIn(container, path, renames) {
+  const result = {};
+  for (const [key, value] of Object.entries(container)) {
+    const legacyHarness = legacyHarnessOfBlockKey(key);
+    if (legacyHarness === undefined) {
+      result[key] = value;
+      continue;
+    }
+    const canonical = harnessBlockKey(canonicalHarnessName(legacyHarness));
+    const dropped = Object.hasOwn(container, canonical);
+    renames.push({ canonical, dropped, legacy: key, path: [...path, key].join(".") });
+    if (!dropped)
+      result[canonical] = value;
+  }
+  return result;
+}
+function canonicalizeLegacyHarnessBlocks(document) {
+  if (!isRecord7(document))
+    return { document: {}, renames: [] };
+  const renames = [];
+  const canonicalized = canonicalizeBlocksIn(document, [], renames);
+  const profiles = canonicalized["profiles"];
+  if (isRecord7(profiles)) {
+    const canonicalProfiles = {};
+    for (const [name, profile] of Object.entries(profiles)) {
+      canonicalProfiles[name] = isRecord7(profile) ? canonicalizeBlocksIn(profile, ["profiles", name], renames) : profile;
+    }
+    canonicalized["profiles"] = canonicalProfiles;
+  }
+  return { document: canonicalized, renames };
+}
+
 // node_modules/.bun/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/scanner.js
 function createScanner(text, ignoreTrivia = false) {
   const len = text.length;
@@ -18052,7 +18105,7 @@ function resolveOmoConfigPaths(options) {
 }
 
 // packages/omo-config-core/src/loader/resolution.ts
-var HARNESS_KEYS = [...new Set([...HARNESS_IDS, ...OMO_CONFIG_HARNESS_IDS])].map((harness) => `[${harness}]`);
+var HARNESS_KEYS = [...new Set([...HARNESS_IDS, ...OMO_CONFIG_HARNESS_IDS, ...OMO_CONFIG_LEGACY_HARNESS_IDS])].map((harness) => harnessBlockKey(harness));
 function profileName(value) {
   return value === "" ? undefined : value;
 }
@@ -18081,7 +18134,13 @@ function withoutControlKeys(config) {
 function harnessLayer(config, harness) {
   if (harness === undefined)
     return {};
-  return toRecord(config[`[${harness}]`]) ?? {};
+  const canonical = canonicalHarnessName(harness);
+  const legacyKeys = Object.entries(OMO_CONFIG_LEGACY_HARNESS_ALIASES).filter(([, target]) => target === canonical).map(([legacy]) => harnessBlockKey(legacy));
+  let layer = {};
+  for (const key of [...legacyKeys, harnessBlockKey(canonical)]) {
+    layer = mergeOmoConfigRecords(layer, toRecord(config[key]) ?? {});
+  }
+  return layer;
 }
 function resolveOmoConfigView(options) {
   const profiles = toRecord(options.config["profiles"]);
@@ -18132,6 +18191,7 @@ var DEFAULT_RAW_CONFIG = {
 function stripResolutionControlKeys(config) {
   const {
     "[codex]": _codex,
+    "[native]": _native,
     "[opencode]": _opencode,
     "[senpi]": _senpi,
     profiles: _profiles,
@@ -18157,21 +18217,21 @@ function hasUnsafeUnrecognizedKey(issues) {
 function hasTamperedPrototype(value) {
   if (Array.isArray(value))
     return value.some((entry) => hasTamperedPrototype(entry));
-  if (!isRecord7(value))
+  if (!isRecord8(value))
     return false;
   const prototype = Object.getPrototypeOf(value);
   if (prototype !== Object.prototype && prototype !== null)
     return true;
   return Object.values(value).some((entry) => hasTamperedPrototype(entry));
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function containerAt(record, path) {
   let container = record;
   for (const segment of path) {
     const next = container[segment];
-    if (!isRecord7(next))
+    if (!isRecord8(next))
       return null;
     container = next;
   }
@@ -18282,6 +18342,15 @@ function legacyCategoryDiagnostic(path, renames) {
     issuePaths: renames.map((rename) => rename.path)
   };
 }
+function legacyHarnessDiagnostic(path, renames) {
+  const detail = renames.map((rename) => rename.dropped ? `${rename.path} ignored because ${rename.canonical} is also configured` : `${rename.path} renamed to ${rename.canonical}`).join(", ");
+  return {
+    kind: "deprecated-keys",
+    message: `Deprecated harness block in ${path}: ${detail}. Rename it; the alias is removed in a future release.`,
+    path,
+    issuePaths: renames.map((rename) => rename.path)
+  };
+}
 function loadOmoConfig(options = {}) {
   const fileSystem = options.fileSystem ?? DEFAULT_READ_FILE_SYSTEM;
   const cwd = options.cwd ?? process.cwd();
@@ -18304,8 +18373,12 @@ function loadOmoConfig(options = {}) {
       if (canonicalized.renames.length > 0) {
         diagnostics.push(legacyCategoryDiagnostic(candidate.path, canonicalized.renames));
       }
-      layers.push({ config: canonicalized.document, source: loaded.source });
-      merged = mergeOmoConfigRecords(merged, canonicalized.document);
+      const harnessCanonicalized = canonicalizeLegacyHarnessBlocks(canonicalized.document);
+      if (harnessCanonicalized.renames.length > 0) {
+        diagnostics.push(legacyHarnessDiagnostic(candidate.path, harnessCanonicalized.renames));
+      }
+      layers.push({ config: harnessCanonicalized.document, source: loaded.source });
+      merged = mergeOmoConfigRecords(merged, harnessCanonicalized.document);
     }
   }
   const requestedProfile = resolveOmoProfileName({
@@ -20905,10 +20978,10 @@ function readCatalogMultiAgentVersion(model, cachePath) {
   } catch {
     return null;
   }
-  if (!isRecord8(cache) || !Array.isArray(cache.models))
+  if (!isRecord9(cache) || !Array.isArray(cache.models))
     return null;
   for (const entry of cache.models) {
-    if (!isRecord8(entry))
+    if (!isRecord9(entry))
       continue;
     if (entry.slug !== model && entry.id !== model)
       continue;
@@ -20933,7 +21006,7 @@ function readRootModelCatalogPath(config) {
   const single = config.match(/^\s*model_catalog_json\s*=\s*'([^']+)'/m);
   return single?.[1] ?? null;
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function removeFeatureFlagSetting(config, featureName) {

package/packages/shared-skills/skills/browser/ATTRIBUTION.md

@@ -0,0 +1,25 @@
+# ATTRIBUTION / NOTICE
+
+This skill (`browser`, part of `@oh-my-opencode/shared-skills`) is project-original documentation.
+It drives a third-party tool that it does **not** redistribute.
+
+## BrowserSkill — driven, not vendored
+
+The attached engine this skill documents is **BrowserSkill** by Tencent.
+
+- Upstream: https://github.com/Tencent/BrowserSkill
+- License: MIT
+- What ships here: documentation and two local helper scripts, authored by this project.
+- What does NOT ship here: the `bsk` CLI, the daemon, the browser extension, or any upstream
+  source. The user installs those from upstream's own installer and from the Chrome Web Store /
+  Edge Add-ons listings. This package never bundles a browser binary or an extension payload.
+
+MIT permits redistribution; we simply have no reason to, because upstream publishes signed
+per-platform releases and store builds that stay current on their own.
+
+## Owned-engine references
+
+`references/owned-engine/` documents a *contract* for a code-driven browser — the escalation
+ladder, viewport pinning, reading the network instead of the DOM, overlay and cross-origin
+handling — not any particular package. The techniques are generic CDP practice. No third-party
+source is reproduced.