lazycodex-ai 5.1.63 → 5.1.65

package/dist/cli/index.js

@@ -2132,7 +2132,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "oh-my-opencode",
-    version: "5.1.63",
+    version: "5.1.65",
     description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -2319,7 +2319,7 @@ var init_package = __esm(() => {
     },
     devDependencies: {
       "@clack/prompts": "^1.8.1",
-      "@code-yeongyu/senpi": "2026.11.5-1",
+      "@code-yeongyu/senpi": "2026.11.6-3",
       "@modelcontextprotocol/sdk": "^1.30.0",
       "@oh-my-opencode/agents-md-core": "workspace:*",
       "@oh-my-opencode/ast-grep-mcp": "workspace:*",
@@ -2374,7 +2374,7 @@ var init_package = __esm(() => {
       "jsonc-parser": "^3.3.1",
       knip: "6.43.0",
       "node-pty": "^1.1.0",
-      omowright: "github:code-yeongyu/omowright#73c4898ca492e6e12e3f13948be7151806457a43",
+      omowright: "^0.3.0",
       "oxc-parser": "0.148.0",
       oxlint: "1.89.0",
       picocolors: "^1.1.1",
@@ -2384,18 +2384,18 @@ var init_package = __esm(() => {
       typescript: "^7.0.2"
     },
     optionalDependencies: {
-      "oh-my-opencode-darwin-arm64": "5.1.63",
-      "oh-my-opencode-darwin-x64": "5.1.63",
-      "oh-my-opencode-darwin-x64-baseline": "5.1.63",
-      "oh-my-opencode-linux-arm64": "5.1.63",
-      "oh-my-opencode-linux-arm64-musl": "5.1.63",
-      "oh-my-opencode-linux-x64": "5.1.63",
-      "oh-my-opencode-linux-x64-baseline": "5.1.63",
-      "oh-my-opencode-linux-x64-musl": "5.1.63",
-      "oh-my-opencode-linux-x64-musl-baseline": "5.1.63",
-      "oh-my-opencode-windows-arm64": "5.1.63",
-      "oh-my-opencode-windows-x64": "5.1.63",
-      "oh-my-opencode-windows-x64-baseline": "5.1.63"
+      "oh-my-opencode-darwin-arm64": "5.1.65",
+      "oh-my-opencode-darwin-x64": "5.1.65",
+      "oh-my-opencode-darwin-x64-baseline": "5.1.65",
+      "oh-my-opencode-linux-arm64": "5.1.65",
+      "oh-my-opencode-linux-arm64-musl": "5.1.65",
+      "oh-my-opencode-linux-x64": "5.1.65",
+      "oh-my-opencode-linux-x64-baseline": "5.1.65",
+      "oh-my-opencode-linux-x64-musl": "5.1.65",
+      "oh-my-opencode-linux-x64-musl-baseline": "5.1.65",
+      "oh-my-opencode-windows-arm64": "5.1.65",
+      "oh-my-opencode-windows-x64": "5.1.65",
+      "oh-my-opencode-windows-x64-baseline": "5.1.65"
     },
     overrides: {
       hono: "^4.13.8",
@@ -77120,7 +77120,7 @@ var init_memory_agreements = __esm(() => {
 });
 
 // packages/omo-config-core/src/schema/memory.ts
-var OmoMemoryReflectionTriggerSchema, OmoMemoryReflectionSchema, OmoMemorySyncSchema, OmoMemorySearchSchema, OmoMemoryRecallEventCapsSchema, OmoMemoryRecallSchema, OmoMemoryProjectScopeSchema, OmoMemoryProjectScopeLayerSchema, OmoMemoryNudgeSchema, OmoMemoryFactsSchema, OmoMemoryDreamSchema, OmoMemoryPeopleSchema, OmoMemorySoulSchema, OmoMemoryWriteNoticeSchema, OmoMemoryReflectionTriggerLayerSchema, OmoMemoryReflectionLayerSchema, OmoMemorySyncLayerSchema, OmoMemorySearchLayerSchema, OmoMemoryRecallEventCapsLayerSchema, OmoMemoryRecallLayerSchema, OmoMemoryNudgeLayerSchema, OmoMemoryFactsLayerSchema, OmoMemoryDreamLayerSchema, OmoMemoryPeopleLayerSchema, OmoMemorySoulLayerSchema, OmoMemoryWriteNoticeLayerSchema, OmoMemoryProjectionSchema, OmoMemoryProjectionLayerSchema, OmoMemoryAgentOverridesSchema, OmoMemoryAutoIdentitySchema, OmoMemorySettingsSchema, OmoMemorySettingsLayerSchema;
+var OmoMemoryReflectionTriggerSchema, OmoMemoryReflectionSchema, OmoMemorySyncSchema, OmoMemorySearchSchema, OmoMemoryRecallEventCapsSchema, OmoMemoryRecallSchema, OmoMemoryProjectScopeSchema, OmoMemoryProjectScopeLayerSchema, OmoMemoryNudgeSchema, OmoMemoryFactsSchema, OmoMemoryDreamSchema, OmoMemoryPeopleSchema, OmoMemorySoulSchema, OmoMemoryWriteNoticeSchema, OmoMemoryReflectionTriggerLayerSchema, OmoMemoryReflectionLayerSchema, OmoMemorySyncLayerSchema, OmoMemorySearchLayerSchema, OmoMemoryRecallEventCapsLayerSchema, OmoMemoryRecallLayerSchema, OmoMemoryNudgeLayerSchema, OmoMemoryFactsLayerSchema, OmoMemoryDreamLayerSchema, OmoMemoryPeopleLayerSchema, OmoMemorySoulLayerSchema, OmoMemoryWriteNoticeLayerSchema, OmoMemoryProjectionSchema, OmoMemoryProjectionLayerSchema, OmoMemoryRuntimeSchema, OmoMemoryRuntimeLayerSchema, OmoMemoryAgentOverridesSchema, OmoMemoryAutoIdentitySchema, OmoMemorySettingsSchema, OmoMemorySettingsLayerSchema;
 var init_memory = __esm(() => {
   init_zod();
   init_memory_agreements();
@@ -77269,6 +77269,22 @@ var init_memory = __esm(() => {
     max_entries_per_directory: number2().int().min(0).optional(),
     max_bytes: number2().int().min(0).optional()
   }).strict();
+  OmoMemoryRuntimeSchema = object({
+    retention_days: number2().int().min(1).default(7),
+    abandoned_journal_days: number2().int().min(1).default(14),
+    completions_days: number2().int().min(1).default(30),
+    pass_budget_ms: number2().int().min(1).default(60000),
+    discard_unreflected_journals: boolean2().default(false),
+    max_bytes: number2().int().min(0).default(2 * 1024 * 1024 * 1024)
+  }).strict();
+  OmoMemoryRuntimeLayerSchema = object({
+    retention_days: number2().int().min(1).optional(),
+    abandoned_journal_days: number2().int().min(1).optional(),
+    completions_days: number2().int().min(1).optional(),
+    pass_budget_ms: number2().int().min(1).optional(),
+    discard_unreflected_journals: boolean2().optional(),
+    max_bytes: number2().int().min(0).optional()
+  }).strict();
   OmoMemoryAgentOverridesSchema = object({
     enabled: boolean2().optional(),
     agent: string2().min(1).optional(),
@@ -77284,6 +77300,7 @@ var init_memory = __esm(() => {
     search: OmoMemorySearchLayerSchema.optional(),
     recall: OmoMemoryRecallLayerSchema.optional(),
     projection: OmoMemoryProjectionLayerSchema.optional(),
+    runtime: OmoMemoryRuntimeLayerSchema.optional(),
     compile_warn_tokens: number2().int().positive().optional()
   }).strict();
   OmoMemoryAutoIdentitySchema = _enum(["path", "git"]);
@@ -77328,6 +77345,7 @@ var init_memory = __esm(() => {
     }),
     project_scope: OmoMemoryProjectScopeSchema.default({ nudge: true, recall: true }),
     projection: OmoMemoryProjectionSchema.default({ max_entries_per_directory: 0, max_bytes: 40960 }),
+    runtime: OmoMemoryRuntimeSchema.default({ retention_days: 7, abandoned_journal_days: 14, completions_days: 30, pass_budget_ms: 60000, discard_unreflected_journals: false, max_bytes: 2 * 1024 * 1024 * 1024 }),
     compile_warn_tokens: number2().int().positive().default(30000),
     agents: record(string2(), OmoMemoryAgentOverridesSchema).default({})
   }).strict();
@@ -77348,6 +77366,7 @@ var init_memory = __esm(() => {
     recall: OmoMemoryRecallLayerSchema.optional(),
     project_scope: OmoMemoryProjectScopeLayerSchema.optional(),
     projection: OmoMemoryProjectionLayerSchema.optional(),
+    runtime: OmoMemoryRuntimeLayerSchema.optional(),
     compile_warn_tokens: number2().int().positive().optional(),
     agents: record(string2(), OmoMemoryAgentOverridesSchema).optional()
   }).strict();
@@ -92739,7 +92758,7 @@ var package_default2;
 var init_package2 = __esm(() => {
   package_default2 = {
     name: "@oh-my-opencode/omo-codex",
-    version: "5.1.63",
+    version: "5.1.65",
     type: "module",
     private: true,
     description: "Codex harness adapter for oh-my-openagent. Vendored Codex plugin namespace (omo) + TypeScript installer + telemetry.",
@@ -109502,8 +109521,8 @@ var package_default3 = {
   },
   dependencies: {
     "@clack/prompts": "^1.8.1",
-    "@code-yeongyu/senpi": "2026.11.5-1",
-    "@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.11.5-1",
+    "@code-yeongyu/senpi": "2026.11.6-3",
+    "@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.11.6-3",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@oh-my-opencode/agents-md-core": "workspace:*",
     "@oh-my-opencode/boulder-state": "workspace:*",
@@ -112356,6 +112375,15 @@ function signInHint(when, route = signInRoute()) {
   return SIGN_IN_HINTS[route][when];
 }
 
+// packages/omo-opencode/src/cli/service-auth/closed-device-login.ts
+init_commander();
+function withClosedDeviceLoginOptions(command) {
+  return command.helpOption(false).allowUnknownOption().allowExcessArguments().option("--device").option("--no-browser").option("--api <url>");
+}
+function isClosedDeviceLogin(options, leftover) {
+  return (options.device === true || options.browser === false) && leftover.length === 0;
+}
+
 // packages/omo-opencode/src/cli/service-auth/browser.ts
 import { execFile as execFile6 } from "child_process";
 var execute = (file, args, env) => new Promise((resolve) => {
@@ -115085,6 +115113,7 @@ var discardedOf = (credentials, cause) => ({
 });
 function createSession(options) {
   const api = serviceOrigin(options.api);
+  const deviceService = options.deviceService;
   const now = options.now ?? Date.now;
   const { store, signal, beforeKeysDiscarded } = options;
   const markerPath = signedOutMarkerPath(options.home ?? homedir35(), credentialId(api));
@@ -115121,6 +115150,7 @@ function createSession(options) {
       if (error instanceof ApiRefusal && error.status < 500 && ["unauthorized", "account_deleted", "reauth_required", "invalid_grant", "device_revoked"].includes(error.code)) {
         await beforeKeysDiscarded(discardedOf(current, "refused"));
         await store.clear();
+        await deviceService?.forget();
         throw new SessionEnded(error.code === "reauth_required" ? `This session was ended because its refresh token was reused. ${signInHint("again")}` : refusalMessage(refusalGuidance(error.code, error.status)), DEVICE_REVOKING_REFUSALS.has(error.code), error.code);
       }
       if (error instanceof RequestFailure && error.notSent || error instanceof ApiRefusal && error.status === 429 && error.code === "rate_limited") {
@@ -115162,6 +115192,7 @@ function createSession(options) {
         await store.write(value, "fresh-sign-in", () => beforeKeysDiscarded({ kind: "unreadable" }));
         await clearSignedOutMarker(markerPath);
       });
+      await deviceService?.adopt(value);
     },
     signedOutMarker: () => readSignedOutMarker(markerPath),
     clearSignedOutMarker: () => clearSignedOutMarker(markerPath),
@@ -115180,41 +115211,46 @@ function createSession(options) {
     },
     async forget() {
       await locked(() => store.clear());
+      await deviceService?.forget();
     },
     accessSnapshot: snapshot,
     async logout() {
-      return locked(async () => {
-        let current = null;
-        let account;
-        try {
-          current = await store.readAuthoritative();
-          if (current !== null) {
-            if (current.refreshState === "uncertain")
-              return false;
-            const access = Date.parse(current.accessTokenExpiresAt) <= now() ? (await refreshed(current)).accessToken : current.accessToken;
-            if (current.accountId === undefined && current.owner === undefined && await beforeKeysDiscarded.wantsAccount?.() === true) {
-              account = await accountOf(access);
+      try {
+        return await locked(async () => {
+          let current = null;
+          let account;
+          try {
+            current = await store.readAuthoritative();
+            if (current !== null) {
+              if (current.refreshState === "uncertain")
+                return false;
+              const access = Date.parse(current.accessTokenExpiresAt) <= now() ? (await refreshed(current)).accessToken : current.accessToken;
+              if (current.accountId === undefined && current.owner === undefined && await beforeKeysDiscarded.wantsAccount?.() === true) {
+                account = await accountOf(access);
+              }
+              await request(`/v1/devices/${encodeURIComponent(current.device.id)}`, {
+                method: "DELETE",
+                headers: { authorization: `Bearer ${access}` }
+              });
             }
-            await request(`/v1/devices/${encodeURIComponent(current.device.id)}`, {
-              method: "DELETE",
-              headers: { authorization: `Bearer ${access}` }
-            });
+            return true;
+          } catch (error) {
+            if (error instanceof SessionEnded)
+              return error.deviceRevoked;
+            if (error instanceof SignInError)
+              return false;
+            throw error;
+          } finally {
+            await writeSignedOutMarker(markerPath, current?.device.id ?? null);
+            const stored = current === null ? null : await store.read().catch(() => current);
+            if (stored !== null)
+              await beforeKeysDiscarded(discardedOf(stored.accountId === undefined && account !== undefined ? { ...stored, accountId: account } : stored, "logout"));
+            await store.clear();
           }
-          return true;
-        } catch (error) {
-          if (error instanceof SessionEnded)
-            return error.deviceRevoked;
-          if (error instanceof SignInError)
-            return false;
-          throw error;
-        } finally {
-          await writeSignedOutMarker(markerPath, current?.device.id ?? null);
-          const stored = current === null ? null : await store.read().catch(() => current);
-          if (stored !== null)
-            await beforeKeysDiscarded(discardedOf(stored.accountId === undefined && account !== undefined ? { ...stored, accountId: account } : stored, "logout"));
-          await store.clear();
-        }
-      });
+        });
+      } finally {
+        await deviceService?.forget();
+      }
     },
     async accessToken(expect) {
       signal?.throwIfAborted();
@@ -115303,7 +115339,7 @@ var DEFAULT_ACCOUNTS_ORIGIN = "https://signin.omo.dev";
 function accountsOrigin(options, env) {
   return serviceOrigin(options.accounts ?? env.OMO_SERVICE_ACCOUNTS_URL ?? DEFAULT_ACCOUNTS_ORIGIN);
 }
-async function run2(action, options) {
+async function run2(action, options, hooks = {}) {
   const controller = new AbortController;
   const cancel = () => controller.abort();
   process.once("SIGINT", cancel);
@@ -115311,10 +115347,12 @@ async function run2(action, options) {
   try {
     const api = serviceOrigin(options.api ?? process.env.OMO_SERVICE_API_URL ?? "https://api.omo.dev");
     const store = createCredentialStore(api, { wait: INTERACTIVE_READ_WAIT });
+    const deviceService = hooks.deviceService?.(api);
     const session = createSession({
       api,
       store,
       signal: controller.signal,
+      ...deviceService === undefined ? {} : { deviceService },
       beforeKeysDiscarded: retireSyncPinOnDiscard({ pinDir: () => syncPinDir(resolveMemoryRoot(process.env, process.cwd())), log: (line) => console.error(line) })
     });
     if (action === "logout") {
@@ -115374,10 +115412,10 @@ function refuseClosedServiceAuth() {
   console.error(SERVICE_ACCOUNTS_CLOSED_MESSAGE);
   process.exit(1);
 }
-function configureClosedServiceAuthCommands(program) {
+function configureClosedServiceAuthCommands(program, hooks) {
   for (const name of SERVICE_AUTH_COMMANDS) {
     if (name === "login") {
-      configureClosedDeviceLogin(program);
+      configureClosedDeviceLogin(program, hooks);
       continue;
     }
     const command = program.command(name, { hidden: true }).helpOption(false).allowUnknownOption().allowExcessArguments().action(() => {
@@ -115387,25 +115425,25 @@ function configureClosedServiceAuthCommands(program) {
     command.help = refuseClosedServiceAuth;
   }
 }
-function configureClosedDeviceLogin(program) {
-  const command = program.command("login", { hidden: true }).helpOption(false).allowUnknownOption().allowExcessArguments().option("--device").option("--no-browser").option("--api <url>").action((options) => {
-    if (options.device !== true && options.browser !== false || command.args.length > 0) {
+function configureClosedDeviceLogin(program, hooks) {
+  const command = withClosedDeviceLoginOptions(program.command("login", { hidden: true })).action((options) => {
+    if (!isClosedDeviceLogin(options, command.args)) {
       console.error(SERVICE_ACCOUNTS_CLOSED_MESSAGE);
       process.exitCode = 1;
       return;
     }
-    return run2("login", { ...options, device: true });
+    return run2("login", { ...options, device: true }, hooks);
   });
   command.help = refuseClosedServiceAuth;
 }
-function configureServiceAuthCommands(program, open = serviceAccountsOpen()) {
+function configureServiceAuthCommands(program, open = serviceAccountsOpen(), hooks = {}) {
   if (!open) {
-    configureClosedServiceAuthCommands(program);
+    configureClosedServiceAuthCommands(program, hooks);
     return;
   }
-  program.command("login").description("Sign in to OmO using the OS credential store").option("--device", "Use a device code instead of a browser callback").option("--no-browser", "Sign in by device code without opening a browser").option("--api <url>", "OmO API origin (or OMO_SERVICE_API_URL)").option("--accounts <url>", "OmO sign-in page origin (or OMO_SERVICE_ACCOUNTS_URL)").action((options) => run2("login", options));
+  program.command("login").description("Sign in to OmO using the OS credential store").option("--device", "Use a device code instead of a browser callback").option("--no-browser", "Sign in by device code without opening a browser").option("--api <url>", "OmO API origin (or OMO_SERVICE_API_URL)").option("--accounts <url>", "OmO sign-in page origin (or OMO_SERVICE_ACCOUNTS_URL)").action((options) => run2("login", options, hooks));
   for (const action of ["logout", "whoami"]) {
-    program.command(action).description(action === "logout" ? "Remove stored OmO credentials and device keys" : "Show the current OmO device sign-in").option("--api <url>", "OmO API origin (or OMO_SERVICE_API_URL)").action((options) => run2(action, options));
+    program.command(action).description(action === "logout" ? "Remove stored OmO credentials and device keys" : "Show the current OmO device sign-in").option("--api <url>", "OmO API origin (or OMO_SERVICE_API_URL)").action((options) => run2(action, options, hooks));
   }
 }
 

package/dist/cli/service-auth/closed-device-login.d.ts

@@ -0,0 +1,16 @@
+import { Command } from "commander";
+/**
+ * The one parse of a closed-accounts `login` (#12639, #12646). While accounts are closed the device-code sign-in
+ * is the only terminal sign-in that runs. `commands.ts` refuses every other closed `login` argv, and the compiled
+ * entry (`omo-native/compile-args.ts`) decides from the same argv whether to answer with the static refusal. Both
+ * layers read it through this module, so `login -- --device` (an operand, not the option) cannot be a device login
+ * to one layer and a refusal to the other.
+ */
+export declare function withClosedDeviceLoginOptions(command: Command): Command;
+/** The device flow runs only for `--device` or `--no-browser` with nothing else left over (no operand, no unknown option). */
+export declare function isClosedDeviceLogin(options: {
+    readonly device?: unknown;
+    readonly browser?: unknown;
+}, leftover: readonly string[]): boolean;
+/** Whether a whole `omo …` argv is the closed-accounts device-code login, parsed exactly as `commands.ts` parses it. */
+export declare function parsesAsClosedDeviceLogin(args: readonly string[]): boolean;

package/dist/cli/service-auth/commands.d.ts

@@ -1,11 +1,16 @@
 import { Command } from "commander";
 import { type ListedDevice } from "./protocol";
+import { type DeviceServiceHandoff } from "./session";
 type Options = {
     readonly api?: string;
     readonly accounts?: string;
     readonly device?: boolean;
     readonly browser?: boolean;
 };
+/** What the host adds to the account commands: its device service for an API origin (design D r9 sections 4-5). */
+export type ServiceAuthHooks = {
+    readonly deviceService?: (api: string) => DeviceServiceHandoff;
+};
 export declare function deviceChoices(devices: readonly ListedDevice[]): {
     value: string;
     label: string;
@@ -16,5 +21,7 @@ export declare const DEFAULT_ACCOUNTS_ORIGIN = "https://signin.omo.dev";
 export declare function accountsOrigin(options: Pick<Options, "accounts">, env: Record<string, string | undefined>): string;
 export { SERVICE_ACCOUNTS_OPEN } from "./accounts-gate";
 export declare const SERVICE_ACCOUNTS_CLOSED_MESSAGE = "Signing in from the terminal isn't available yet. Sign in from the OmO desktop app on this computer; omo uses that sign-in.";
-export declare function configureServiceAuthCommands(program: Command, open?: boolean): void;
-export declare function runServiceAuthCommand(args: readonly string[]): Promise<void>;
+export declare function configureServiceAuthCommands(program: Command, open?: boolean, hooks?: ServiceAuthHooks): void;
+/** The root program the service-auth bundle parses `omo login|logout|whoami` with. */
+export declare function serviceAuthProgram(open?: boolean, hooks?: ServiceAuthHooks): Command;
+export declare function runServiceAuthCommand(args: readonly string[], hooks?: ServiceAuthHooks): Promise<void>;

package/dist/cli/service-auth/session.d.ts

@@ -24,6 +24,16 @@ export type BeforeKeysDiscarded = ((discarded: DiscardedCredential) => Promise<v
     /** Whether a sign-in that names no account should have it read before logout revokes the device. */
     readonly wantsAccount?: () => Promise<boolean>;
 };
+/**
+ * This machine's device service, told about the sign-in from memory (design D r9 sections 4-5): `adopt` gets a fresh
+ * sign-in's credential after the signed-out marker is gone, `forget` runs at every local end of a sign-in (logout on
+ * every path, forget, a session the service ended). Neither ever reads the credential store, and neither throws: a
+ * device service that is down or refuses never fails a sign-in or a sign-out.
+ */
+export type DeviceServiceHandoff = {
+    readonly adopt: (credentials: Credentials) => Promise<void>;
+    readonly forget: () => Promise<void>;
+};
 export declare const discardedOf: (credentials: Credentials, cause: "refused" | "forget" | "logout" | "replaced") => DiscardedCredential;
 export declare function createSession(options: {
     readonly api: string;
@@ -33,6 +43,8 @@ export declare function createSession(options: {
     readonly now?: () => number;
     /** Runs inside the credential lock immediately before a stored principal's keys are discarded. */
     readonly beforeKeysDiscarded: BeforeKeysDiscarded;
+    /** This machine's device service; absent, no device service is told anything. */
+    readonly deviceService?: DeviceServiceHandoff;
 }): {
     request: (path: string, init: RequestInit) => Promise<unknown>;
     signal: AbortSignal | undefined;