oh-my-openagent 5.1.32 → 5.1.33

package/dist/cli/index.js

@@ -64,7 +64,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "oh-my-opencode",
-    version: "5.1.32",
+    version: "5.1.33",
     description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -241,7 +241,7 @@ var init_package = __esm(() => {
     },
     devDependencies: {
       "@clack/prompts": "^1.8.1",
-      "@code-yeongyu/senpi": "2026.10.12",
+      "@code-yeongyu/senpi": "2026.10.13",
       "@modelcontextprotocol/sdk": "^1.30.0",
       "@oh-my-opencode/agents-md-core": "workspace:*",
       "@oh-my-opencode/ast-grep-mcp": "workspace:*",
@@ -300,18 +300,18 @@ var init_package = __esm(() => {
       typescript: "^7.0.2"
     },
     optionalDependencies: {
-      "oh-my-opencode-darwin-arm64": "5.1.32",
-      "oh-my-opencode-darwin-x64": "5.1.32",
-      "oh-my-opencode-darwin-x64-baseline": "5.1.32",
-      "oh-my-opencode-linux-arm64": "5.1.32",
-      "oh-my-opencode-linux-arm64-musl": "5.1.32",
-      "oh-my-opencode-linux-x64": "5.1.32",
-      "oh-my-opencode-linux-x64-baseline": "5.1.32",
-      "oh-my-opencode-linux-x64-musl": "5.1.32",
-      "oh-my-opencode-linux-x64-musl-baseline": "5.1.32",
-      "oh-my-opencode-windows-arm64": "5.1.32",
-      "oh-my-opencode-windows-x64": "5.1.32",
-      "oh-my-opencode-windows-x64-baseline": "5.1.32"
+      "oh-my-opencode-darwin-arm64": "5.1.33",
+      "oh-my-opencode-darwin-x64": "5.1.33",
+      "oh-my-opencode-darwin-x64-baseline": "5.1.33",
+      "oh-my-opencode-linux-arm64": "5.1.33",
+      "oh-my-opencode-linux-arm64-musl": "5.1.33",
+      "oh-my-opencode-linux-x64": "5.1.33",
+      "oh-my-opencode-linux-x64-baseline": "5.1.33",
+      "oh-my-opencode-linux-x64-musl": "5.1.33",
+      "oh-my-opencode-linux-x64-musl-baseline": "5.1.33",
+      "oh-my-opencode-windows-arm64": "5.1.33",
+      "oh-my-opencode-windows-x64": "5.1.33",
+      "oh-my-opencode-windows-x64-baseline": "5.1.33"
     },
     overrides: {
       hono: "^4.13.8",
@@ -89902,7 +89902,7 @@ var package_default2;
 var init_package2 = __esm(() => {
   package_default2 = {
     name: "@oh-my-opencode/omo-codex",
-    version: "5.1.32",
+    version: "5.1.33",
     type: "module",
     private: true,
     description: "Codex harness adapter for oh-my-openagent. Vendored Codex plugin namespace (omo) + TypeScript installer + telemetry.",

package/dist/cli-node/index.js

@@ -65,7 +65,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "oh-my-opencode",
-    version: "5.1.32",
+    version: "5.1.33",
     description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -242,7 +242,7 @@ var init_package = __esm(() => {
     },
     devDependencies: {
       "@clack/prompts": "^1.8.1",
-      "@code-yeongyu/senpi": "2026.10.12",
+      "@code-yeongyu/senpi": "2026.10.13",
       "@modelcontextprotocol/sdk": "^1.30.0",
       "@oh-my-opencode/agents-md-core": "workspace:*",
       "@oh-my-opencode/ast-grep-mcp": "workspace:*",
@@ -301,18 +301,18 @@ var init_package = __esm(() => {
       typescript: "^7.0.2"
     },
     optionalDependencies: {
-      "oh-my-opencode-darwin-arm64": "5.1.32",
-      "oh-my-opencode-darwin-x64": "5.1.32",
-      "oh-my-opencode-darwin-x64-baseline": "5.1.32",
-      "oh-my-opencode-linux-arm64": "5.1.32",
-      "oh-my-opencode-linux-arm64-musl": "5.1.32",
-      "oh-my-opencode-linux-x64": "5.1.32",
-      "oh-my-opencode-linux-x64-baseline": "5.1.32",
-      "oh-my-opencode-linux-x64-musl": "5.1.32",
-      "oh-my-opencode-linux-x64-musl-baseline": "5.1.32",
-      "oh-my-opencode-windows-arm64": "5.1.32",
-      "oh-my-opencode-windows-x64": "5.1.32",
-      "oh-my-opencode-windows-x64-baseline": "5.1.32"
+      "oh-my-opencode-darwin-arm64": "5.1.33",
+      "oh-my-opencode-darwin-x64": "5.1.33",
+      "oh-my-opencode-darwin-x64-baseline": "5.1.33",
+      "oh-my-opencode-linux-arm64": "5.1.33",
+      "oh-my-opencode-linux-arm64-musl": "5.1.33",
+      "oh-my-opencode-linux-x64": "5.1.33",
+      "oh-my-opencode-linux-x64-baseline": "5.1.33",
+      "oh-my-opencode-linux-x64-musl": "5.1.33",
+      "oh-my-opencode-linux-x64-musl-baseline": "5.1.33",
+      "oh-my-opencode-windows-arm64": "5.1.33",
+      "oh-my-opencode-windows-x64": "5.1.33",
+      "oh-my-opencode-windows-x64-baseline": "5.1.33"
     },
     overrides: {
       hono: "^4.13.8",
@@ -89981,7 +89981,7 @@ var package_default2;
 var init_package2 = __esm(() => {
   package_default2 = {
     name: "@oh-my-opencode/omo-codex",
-    version: "5.1.32",
+    version: "5.1.33",
     type: "module",
     private: true,
     description: "Codex harness adapter for oh-my-openagent. Vendored Codex plugin namespace (omo) + TypeScript installer + telemetry.",

package/dist/features/background-agent/concurrency.d.ts

@@ -6,6 +6,12 @@ export declare class ConcurrencyManager {
     constructor(config?: BackgroundTaskConfig);
     getConcurrencyLimit(model: string): number;
     getConcurrencyKey(model: string): string;
+    /**
+     * Non-blocking acquire: takes a slot immediately when one is free.
+     * Returns true when a slot was taken, false when the group is full (in
+     * which case nothing is held and the caller decides whether to queue).
+     */
+    tryAcquire(model: string): boolean;
     acquire(model: string, taskId?: string): Promise<void>;
     release(model: string): void;
     /**

package/dist/features/background-agent/manager.d.ts

@@ -62,6 +62,7 @@ export declare class BackgroundManager {
     private processingKeys;
     private completionTimers;
     private readonly syncAttachedSessions;
+    private readonly resumesAwaitingAdmission;
     private completedTaskArchive;
     private completedTaskSummaries;
     private idleDeferralTimers;
@@ -165,6 +166,7 @@ export declare class BackgroundManager {
         concurrencyKey?: string;
     }): Promise<BackgroundTask>;
     resume(input: ResumeInput): Promise<BackgroundTask>;
+    private startResumedTask;
     private checkSessionTodos;
     private markSessionOutputObserved;
     private clearDispatchedParentWake;

package/dist/features/background-agent/task-history.d.ts

@@ -14,6 +14,7 @@ export declare class TaskHistory {
     record(parentSessionID: string | undefined, entry: TaskHistoryEntry): void;
     getByParentSession(parentSessionID: string): TaskHistoryEntry[];
     clearSession(parentSessionID: string): void;
+    restoreEntry(parentSessionID: string, taskID: string, entry: TaskHistoryEntry | undefined): void;
     clearAll(): void;
     formatForCompaction(parentSessionID: string): string | null;
 }

package/dist/features/background-agent/types.d.ts

@@ -38,10 +38,12 @@ export interface BackgroundTask {
     teamRunId?: string;
     description: string;
     prompt: string;
+    originalPrompt?: string;
     agent: string;
     spawnDepth?: number;
     status: BackgroundTaskStatus;
     queuedAt?: Date;
+    pendingResume?: object;
     startedAt?: Date;
     completedAt?: Date;
     result?: string;

package/dist/index.js

@@ -99137,7 +99137,7 @@ function getCachedVersion(options = {}) {
 // package.json
 var package_default = {
   name: "oh-my-opencode",
-  version: "5.1.32",
+  version: "5.1.33",
   description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
   main: "./dist/index.js",
   types: "dist/index.d.ts",
@@ -99314,7 +99314,7 @@ var package_default = {
   },
   devDependencies: {
     "@clack/prompts": "^1.8.1",
-    "@code-yeongyu/senpi": "2026.10.12",
+    "@code-yeongyu/senpi": "2026.10.13",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@oh-my-opencode/agents-md-core": "workspace:*",
     "@oh-my-opencode/ast-grep-mcp": "workspace:*",
@@ -99373,18 +99373,18 @@ var package_default = {
     typescript: "^7.0.2"
   },
   optionalDependencies: {
-    "oh-my-opencode-darwin-arm64": "5.1.32",
-    "oh-my-opencode-darwin-x64": "5.1.32",
-    "oh-my-opencode-darwin-x64-baseline": "5.1.32",
-    "oh-my-opencode-linux-arm64": "5.1.32",
-    "oh-my-opencode-linux-arm64-musl": "5.1.32",
-    "oh-my-opencode-linux-x64": "5.1.32",
-    "oh-my-opencode-linux-x64-baseline": "5.1.32",
-    "oh-my-opencode-linux-x64-musl": "5.1.32",
-    "oh-my-opencode-linux-x64-musl-baseline": "5.1.32",
-    "oh-my-opencode-windows-arm64": "5.1.32",
-    "oh-my-opencode-windows-x64": "5.1.32",
-    "oh-my-opencode-windows-x64-baseline": "5.1.32"
+    "oh-my-opencode-darwin-arm64": "5.1.33",
+    "oh-my-opencode-darwin-x64": "5.1.33",
+    "oh-my-opencode-darwin-x64-baseline": "5.1.33",
+    "oh-my-opencode-linux-arm64": "5.1.33",
+    "oh-my-opencode-linux-arm64-musl": "5.1.33",
+    "oh-my-opencode-linux-x64": "5.1.33",
+    "oh-my-opencode-linux-x64-baseline": "5.1.33",
+    "oh-my-opencode-linux-x64-musl": "5.1.33",
+    "oh-my-opencode-linux-x64-musl-baseline": "5.1.33",
+    "oh-my-opencode-windows-arm64": "5.1.33",
+    "oh-my-opencode-windows-x64": "5.1.33",
+    "oh-my-opencode-windows-x64-baseline": "5.1.33"
   },
   overrides: {
     hono: "^4.13.8",
@@ -142452,17 +142452,24 @@ class ConcurrencyManager {
     }
     return model;
   }
-  async acquire(model, taskId) {
+  tryAcquire(model) {
     const key = this.getConcurrencyKey(model);
     const limit = this.getConcurrencyLimit(model);
     if (limit === Infinity) {
-      return;
+      return true;
     }
     const current = this.counts.get(key) ?? 0;
     if (current < limit) {
       this.counts.set(key, current + 1);
+      return true;
+    }
+    return false;
+  }
+  async acquire(model, taskId) {
+    if (this.tryAcquire(model)) {
       return;
     }
+    const key = this.getConcurrencyKey(model);
     return new Promise((resolve, reject) => {
       const queue = this.queues.get(key) ?? [];
       const entry = {
@@ -142765,9 +142772,17 @@ async function tryFallbackRetry(args) {
   const rawKey = task.model ? `${task.model.providerID}/${task.model.modelID}` : task.agent;
   const key = concurrencyManager.getConcurrencyKey(rawKey);
   const queue = queuesByKey.get(key) ?? [];
+  const hasContinuation = !!task.originalPrompt && task.originalPrompt !== task.prompt;
+  const retryPrompt = hasContinuation ? `${task.originalPrompt}
+
+[Latest continuation instruction]
+${task.prompt}` : task.prompt;
+  const retryNote = hasContinuation ? `
+
+[Note: this is a retry in a new session after the previous session failed; the earlier session's context is not available. Work from the original task and latest continuation instruction above.]` : "";
   const retryInput = {
     description: task.description,
-    prompt: task.prompt,
+    prompt: `${retryPrompt}${retryNote}`,
     agent: task.agent,
     parentSessionId: task.parentSessionId,
     parentMessageId: task.parentMessageId,
@@ -144701,6 +144716,25 @@ class TaskHistory {
   clearSession(parentSessionID) {
     this.entries.delete(parentSessionID);
   }
+  restoreEntry(parentSessionID, taskID, entry) {
+    const list = this.entries.get(parentSessionID);
+    if (!list) {
+      if (entry)
+        this.record(parentSessionID, entry);
+      return;
+    }
+    const index = list.findIndex((current) => current.id === taskID);
+    if (index !== -1) {
+      if (entry)
+        list[index] = { ...entry };
+      else
+        list.splice(index, 1);
+    } else if (entry) {
+      this.record(parentSessionID, entry);
+    }
+    if (list.length === 0)
+      this.entries.delete(parentSessionID);
+  }
   clearAll() {
     this.entries.clear();
   }
@@ -145300,6 +145334,7 @@ class BackgroundManager {
   processingKeys = new Set;
   completionTimers = new Map;
   syncAttachedSessions = new Set;
+  resumesAwaitingAdmission = new Set;
   completedTaskArchive = new Map;
   completedTaskSummaries = new Map;
   idleDeferralTimers = new Map;
@@ -145506,8 +145541,12 @@ class BackgroundManager {
     taskIDs.add(task.id);
     this.tasksByParentSession.set(parentSessionID, taskIDs);
   }
-  captureResumeTaskSnapshot(task) {
+  captureResumeTaskSnapshot(task, resumeParentSessionID) {
     return {
+      prompt: task.prompt,
+      originalPrompt: task.originalPrompt,
+      queuedAt: task.queuedAt,
+      historyEntry: this.taskHistory.getByParentSession(resumeParentSessionID).find((entry) => entry.id === task.id),
       status: task.status,
       completedAt: task.completedAt,
       error: task.error,
@@ -145523,16 +145562,23 @@ class BackgroundManager {
     };
   }
   restoreTaskAfterSkippedResume(task, snapshot, skippedStatus) {
+    if (this.shutdownTriggered)
+      return;
     log2("[background-agent] Restoring task after skipped resume prompt:", {
       taskId: task.id,
       sessionID: task.sessionId,
       skippedStatus
     });
+    const resumeParentSessionID = task.parentSessionId;
     this.cleanupPendingByParent(task);
+    this.taskHistory.restoreEntry(resumeParentSessionID, task.id, snapshot.historyEntry);
     if (task.concurrencyKey) {
       this.concurrencyManager.release(task.concurrencyKey);
     }
     task.status = snapshot.status;
+    task.prompt = snapshot.prompt;
+    task.originalPrompt = snapshot.originalPrompt;
+    task.queuedAt = snapshot.queuedAt;
     task.completedAt = snapshot.completedAt;
     task.error = snapshot.error;
     task.startedAt = snapshot.startedAt;
@@ -145549,6 +145595,9 @@ class BackgroundManager {
       this.scheduleTaskRemoval(task.id);
     }
     this.updateBackgroundTaskMarker(task.parentSessionId);
+    if (resumeParentSessionID !== task.parentSessionId) {
+      this.updateBackgroundTaskMarker(resumeParentSessionID);
+    }
   }
   removeTaskFromParentIndex(taskID, parentSessionID) {
     if (!parentSessionID) {
@@ -146145,14 +146194,74 @@ The fallback retry session is now created and can be inspected directly.
     if (existingTask.status === "running") {
       throw new Error(`Task ${existingTask.id} is currently running and cannot accept a continuation prompt. ` + "Wait for it to complete before resuming it with task_id.");
     }
-    const resumeSnapshot = this.captureResumeTaskSnapshot(existingTask);
+    if (existingTask.status === "pending" && existingTask.pendingResume) {
+      throw new Error(`Task ${existingTask.id} already has a continuation queued for admission and cannot accept another one. ` + "Wait for it to start and complete before resuming it with task_id.");
+    }
+    if (this.resumesAwaitingAdmission.has(existingTask.id)) {
+      throw new Error(`Task ${existingTask.id} is already being resumed and cannot accept another continuation. ` + "Wait for it to complete before resuming it with task_id.");
+    }
+    const resumeSnapshot = this.captureResumeTaskSnapshot(existingTask, input.parentSessionId);
     const completionTimer = this.completionTimers.get(existingTask.id);
     if (completionTimer) {
       clearTimeout(completionTimer);
       this.completionTimers.delete(existingTask.id);
     }
     const concurrencyKey = this.concurrencyManager.getConcurrencyKey(existingTask.concurrencyGroup ?? existingTask.agent);
-    await this.concurrencyManager.acquire(concurrencyKey);
+    if (this.concurrencyManager.tryAcquire(concurrencyKey)) {
+      this.resumesAwaitingAdmission.add(existingTask.id);
+      try {
+        await Promise.resolve();
+        return await this.startResumedTask(existingTask, input, resumeSnapshot, concurrencyKey);
+      } finally {
+        this.resumesAwaitingAdmission.delete(existingTask.id);
+      }
+    }
+    const admission = this.concurrencyManager.acquire(concurrencyKey, existingTask.id);
+    const resumeToken = {};
+    existingTask.pendingResume = resumeToken;
+    existingTask.status = "pending";
+    existingTask.queuedAt = new Date;
+    existingTask.completedAt = undefined;
+    existingTask.error = undefined;
+    this.updateTaskParent(existingTask, input.parentSessionId);
+    existingTask.parentMessageId = input.parentMessageId;
+    existingTask.parentModel = input.parentModel;
+    existingTask.parentAgent = input.parentAgent;
+    if (input.parentTools)
+      existingTask.parentTools = input.parentTools;
+    if (input.parentSessionId) {
+      const pending = this.pendingByParent.get(input.parentSessionId) ?? new Set;
+      pending.add(existingTask.id);
+      this.pendingByParent.set(input.parentSessionId, pending);
+    }
+    this.taskHistory.record(input.parentSessionId, { id: existingTask.id, sessionID: existingTask.sessionId, agent: existingTask.agent, description: existingTask.description, status: "pending", category: existingTask.category });
+    getTaskToastManager()?.addTask({ id: existingTask.id, description: existingTask.description, agent: existingTask.agent, isBackground: true, status: "queued" });
+    this.updateBackgroundTaskMarker(existingTask.parentSessionId);
+    admission.then(async () => {
+      if (this.shutdownTriggered || existingTask.status !== "pending" || existingTask.pendingResume !== resumeToken) {
+        this.concurrencyManager.release(concurrencyKey);
+        return;
+      }
+      await this.startResumedTask(existingTask, input, resumeSnapshot, concurrencyKey);
+    }).catch((error) => {
+      this.logger("[background-agent] Queued resume was not admitted:", { taskId: existingTask.id, error: error instanceof Error ? error.message : String(error) });
+      if (this.shutdownTriggered || existingTask.status !== "pending" || existingTask.pendingResume !== resumeToken)
+        return;
+      existingTask.pendingResume = undefined;
+      this.restoreTaskAfterSkippedResume(existingTask, resumeSnapshot, "unavailable");
+    });
+    return existingTask;
+  }
+  async startResumedTask(existingTask, input, resumeSnapshot, concurrencyKey) {
+    if (this.shutdownTriggered) {
+      this.concurrencyManager.release(concurrencyKey);
+      return existingTask;
+    }
+    if (!existingTask.sessionId)
+      throw new Error(`Task has no sessionID: ${existingTask.id}`);
+    existingTask.pendingResume = undefined;
+    existingTask.originalPrompt ??= existingTask.prompt;
+    existingTask.prompt = input.prompt;
     existingTask.concurrencyKey = concurrencyKey;
     existingTask.concurrencyGroup = concurrencyKey;
     existingTask.status = "running";
@@ -146166,6 +146275,15 @@ The fallback retry session is now created and can be inspected directly.
       existingTask.parentTools = input.parentTools;
     }
     existingTask.startedAt = new Date;
+    this.taskHistory.record(input.parentSessionId, {
+      id: existingTask.id,
+      sessionID: existingTask.sessionId,
+      agent: existingTask.agent,
+      description: existingTask.description,
+      status: "running",
+      category: existingTask.category,
+      startedAt: existingTask.startedAt
+    });
     existingTask.progress = {
       toolCalls: existingTask.progress?.toolCalls ?? 0,
       toolCallWindow: existingTask.progress?.toolCallWindow,
@@ -146276,6 +146394,16 @@ The fallback retry session is now created and can be inspected directly.
       const errorMessage = errorInfo.message ?? (error instanceof Error ? error.message : String(error));
       existingTask.error = errorMessage;
       existingTask.completedAt = new Date;
+      this.taskHistory.record(existingTask.parentSessionId, {
+        id: existingTask.id,
+        sessionID: existingTask.sessionId,
+        agent: existingTask.agent,
+        description: existingTask.description,
+        status: "interrupt",
+        category: existingTask.category,
+        startedAt: existingTask.startedAt,
+        completedAt: existingTask.completedAt
+      });
       if (existingTask.rootSessionId) {
         this.unregisterRootDescendant(existingTask.rootSessionId);
       }
@@ -147596,7 +147724,17 @@ The task was re-queued on a fallback model after a retryable failure.
     this.stopPolling();
     const trackedSessionIDs = new Set;
     const abortRequests = [];
+    const queuedResumeParents = new Set;
     for (const task of this.tasks.values()) {
+      if (task.pendingResume) {
+        queuedResumeParents.add(task.parentSessionId);
+        task.pendingResume = undefined;
+        task.status = "cancelled";
+        task.completedAt = new Date;
+        this.concurrencyManager.cancelWaiter(task.concurrencyGroup ?? task.agent, task.id);
+        this.cleanupPendingByParent(task);
+        removeTaskToastTracking(task.id);
+      }
       if (task.sessionId) {
         trackedSessionIDs.add(task.sessionId);
       }
@@ -147662,6 +147800,9 @@ The task was re-queued on a fallback model after a retryable failure.
     this.queuesByKey.clear();
     this.processingKeys.clear();
     this.taskHistory.clearAll();
+    for (const parentSessionID of queuedResumeParents) {
+      this.updateBackgroundTaskMarker(parentSessionID);
+    }
     this.completedTaskSummaries.clear();
     this.unregisterProcessCleanup();
     log2("[background-agent] Shutdown complete");

package/dist/skills/browser/runtime/omowright/manifest.json

@@ -5,5 +5,5 @@
     "index.js": "b6b064fab277031c6c51f5a58b84b31040f9960bf767bf646adc0540c1d25c1b",
     "page-bundle.js": "bfd51e8383cf47200d57387bbbed258bce5a3a3d00c38fc108034d2888e23f0c"
   },
-  "stagedAtUtc": "2026-10-13T00:11:24.408Z"
+  "stagedAtUtc": "2026-10-13T16:36:35.078Z"
 }

package/dist/skills/ulw-execute/SKILL.md

@@ -34,7 +34,7 @@ Plan and reviewer agents may run for a long time: spawn them in the background a
 
 # ulw-execute
 
-Execute a work plan until every top-level checkbox is complete. This skill pairs with the harness's ulw-execute continuation hook, which re-injects the next turn while `.omo/boulder.json` says this `codex:<session_id>` still has unchecked plan work.
+Execute a work plan until every top-level checkbox is `[x]` or `[~]`. This skill pairs with the harness's ulw-execute continuation hook, which re-injects the next turn while `.omo/boulder.json` says this `codex:<session_id>` still has unchecked plan work.
 
 ## Usage
 
@@ -53,7 +53,7 @@ Do ALL of this immediately after the plan is selected, BEFORE the first implemen
 
 1. **Set the goal, in detail.** When a goal tool is available (`create_goal`), call it with a DETAILED objective: the plan name and path, the concrete end state, the phase and task counts, the delivery mode (direct, `--make-pr`, or `--ship`), and how completion will be verified. One work session = one registered goal (the goal tool holds one active goal); each phase then carries its own concrete goal — the ledger entry Phase 2 records before the wave's first dispatch, defined from the previous phase's landed and verified evidence. No goal tool -> record the same objective as the first ledger entry.
 2. **Register every phase and task as todos.** Mirror the plan into the todo/plan tool of your harness: one phase per plan wave, one todo per column-zero checkbox (including the final verification wave). Register ALL of them up front - never keep tasks in memory only.
-3. **Keep them current at every moment.** Mark a todo in_progress when its work dispatches and done immediately after its verification passes. Never batch-complete at the end, never execute work that is not a registered todo; discovered work inside the change's blast radius — the request not delivered, a regression this change introduces, an invalid proof, a failing test or stale doc of touched code — is appended to the plan as a checkbox, mirrored as a todo before it runs, and fixed to the ideal state; a defect outside it gets a tracked issue with reproduction and evidence and a line in the final report. A worker that meets a defect outside its assigned files reports it instead of fixing it; only the orchestrator appends the checkbox and dispatches it to a correctly scoped unit. The todo list, Boulder state, and plan checkboxes must always tell the same story.
+3. **Keep them current at every moment.** Mark a todo in_progress when its work dispatches and done immediately after its verification passes. Never batch-complete at the end, never execute work that is not a registered todo; discovered work inside the change's blast radius — the request not delivered, a regression this change introduces, an invalid proof, a failing test or stale doc of touched code — is appended to the plan as a follow-up checkbox after the checkpoint in progress, mirrored as a todo, and fixed to the ideal state once that checkpoint closes; it joins the open checkpoint only when it blocks that checkpoint's acceptance; a defect outside it gets a tracked issue with reproduction and evidence and a line in the final report. A worker that meets a defect outside its assigned files reports it instead of fixing it; only the orchestrator appends the checkbox and dispatches it to a correctly scoped unit. The todo list, Boulder state, and plan checkboxes must always tell the same story.
 
 ## Phase 1: Select the plan
 
@@ -96,14 +96,14 @@ Write `.omo/boulder.json` before implementation starts. Prefix session ids with
 }
 ```
 
-Every phase (plan wave) runs in its own task-owned worktree with its own goal: before the wave's first dispatch, record the wave's goal — its checkboxes and their acceptance criteria — as a ledger entry, then `git worktree add <repo>-wt/<plan>-<wave> <branch off the integration base>` (or verify a `--worktree` path with `git worktree list --porcelain`), store the absolute path as `worktree_path`, run every edit, command, test, and evidence capture inside it; the wave lands on the integration base once its checkboxes are verified (direct merge, or the PR under `--make-pr`/`--ship`), and the next wave branches from that landed base. Use the bundled ultrawork directive’s Task resources and todo rules at wave/worktree creation; read those sections if absent from context.
+Every phase (plan wave) runs in its own task-owned worktree with its own goal: before the wave's first dispatch, record the wave's goal — its checkboxes and their acceptance criteria — as a ledger entry, then `git worktree add <repo>-wt/<plan>-<wave> <branch off the integration base>` (or verify a `--worktree` path with `git worktree list --porcelain`), store the absolute path as `worktree_path`, run every edit, command, test, and evidence capture inside it; the wave lands on the integration base once each of its checkboxes is verified or `[~]` (direct merge, or the PR under `--make-pr`/`--ship`; a `[~]` row's unverified changes do not land: a dispatched worker reverts them in the wave worktree before landing, and the `unmet` entry records the revert), and the next wave branches from that landed base. Use the bundled ultrawork directive’s Task resources and todo rules at wave/worktree creation; read those sections if absent from context.
 
 ## Parallel delivery lanes (teams and worktrees)
 
 Solo orchestration with parallel background workers is the default topology. Decide once, when the wave's lanes are known, and record the verdict in the ledger:
 
 - **Independent lanes -> parallel workers.** Separate files, no shared contract: one parallel spawn burst; no team.
-- **Dependency-ordered lanes -> one `workflow` run per wave.** Sub-tasks with real ordering between them (C needs A and B finished first) and a harness with a native `workflow` tool: dispatch the wave as ONE run (one producer node per lane plus a verification node); recover inside it with `retry`/`amend`/`send`; let node completions wake you instead of arming per-lane watchers; the next wave is a NEW run (or `amend` when only the definition changed) — never one graph for the whole plan. Read the `mass-ulw` skill's `SKILL.md` and `references/planning.md` IN FULL before defining any graph.
+- **Dependency-ordered lanes -> one `workflow` run per wave.** Sub-tasks with real ordering between them (C needs A and B finished first) and a harness with a native `workflow` tool: dispatch the wave as ONE run (one producer node per lane plus a verification node); recover inside it with `retry`/`amend`/`send`; let the run's settle wake you instead of arming per-lane watchers; the next wave is a NEW run (or `amend` when only the definition changed) — never one graph for the whole plan. Read the `mass-ulw` skill's `SKILL.md` and `references/planning.md` IN FULL before defining any graph.
 - **Overlapping lanes -> a team.** The lanes touch the same module or contract AND running them concurrently actually finishes sooner: stand up a team (where the harness has one) so one lane's discoveries relay through you mid-flight.
 - **PR-mode independent lanes -> a worktree per lane.** Under `--make-pr`/`--ship`, when a wave holds independent checkboxes, give each lane its own branch and task-owned worktree, delivered as its own PR.
 
@@ -181,7 +181,7 @@ For each checkbox, complete all five gates before marking it done:
 4. Adversarial QA: exercise every class the Phase 3 trigger map marks applicable and capture the observable result for each.
 5. Cleanup: register every QA resource teardown as its own todo when spawned (QA scripts, tmux assets, browser sessions, PIDs, ports, containers, temp dirs), execute each, and capture the receipt. No QA asset is left running.
 
-Append evidence to `.omo/ulw-execute/ledger.jsonl`, one JSON object per line. Include at least `event`, `plan`, `task`, `session_id`, `commands`, `artifact`, `adversarial_classes`, and `cleanup` fields. `adversarial_classes` lists each probed class with its observable result and each ruled-out class with a one-line reason.
+Append evidence to `.omo/ulw-execute/ledger.jsonl`, one JSON object per line. Include at least `event`, `plan`, `task`, `session_id`, `commands`, `artifact`, `adversarial_classes`, and `cleanup` fields, plus `attempt` and `checkpoint_opened_at` on every entry tied to a checkbox. `adversarial_classes` lists each probed class with its observable result and each ruled-out class with a one-line reason.
 
 ### Completion contract
 
@@ -199,6 +199,7 @@ A worker done claim is never final: each implementation sub-task returns a `Done
   },
   "AdversarialVerify": {
     "verdict": "confirmed | false-positive | needs-fix | needs-human-review",
+    "failure_class": "none | product | harness",
     "evidence": ["file path, command, log, artifact, or explicit not inspected"],
     "repro": "exact command or manual steps when available",
     "confidence": 0.0
@@ -210,7 +211,9 @@ Rules:
 - `confirmed` is the only pass verdict. `false-positive`, `needs-fix`, and `needs-human-review` all block checkbox completion.
 - The verifier must be independent from the executor: use the harness's gate reviewer (see the harness compatibility section) or a fresh reviewer worker on a strong model, or root only when root did not implement or materially rewrite that task.
 - A worker done claim must be independently verified before it becomes checkbox completion.
-- On any non-confirmed verdict, append the feedback to the ledger, reset the checkbox work to in-progress, and re-dispatch the executor with the exact failure.
+- On a non-confirmed verdict, append the feedback to the ledger with the attempt number and its failure signature (the failing check plus its first error line, with volatile values stripped: temp-dir paths, timestamps, process and run ids, durations). Attempts count per checkbox across all its sub-tasks and re-splits, timed from its first dispatch (`checkpoint_opened_at`). STOP when the same signature repeats on consecutive attempts, on the third failed attempt, or 4 hours after the first dispatch (a plan may change these numbers, never remove the stop). Check the 4-hour bound also when a lane's watcher fires or the turn resumes without a verdict; when it has passed, cancel that lane and stop the same way: mark the checkbox `- [~]` (the plan grammar's blocked state) with a one-line gap naming what is unmet and the last evidence, mark every checkbox that depends on it, directly or through another `[~]` row, `- [~]` with the gap `blocked by <id>`, close the todo of every row marked `[~]` here labelled `blocked: <gap>`, append an `unmet` ledger entry listing what each attempt changed, and continue in the same turn with the next checkpoint that depends on none of them, or with Completion when none remains. Otherwise leave the checkbox `- [ ]` and re-dispatch the executor with the exact failure.
+- A `[~]` row counts as closed, never as a met dependency: Phase 3 skips it, Completion starts once every top-level row is `[x]` or `[~]`, and the `ORCHESTRATION COMPLETE` block names each `[~]` row with its gap. Final Verification Wave rows are never dependents of a `[~]` row: they verify the landed work and report each `[~]` row as a known gap, which alone never fails a final-wave row. A `[~]` gap is never re-queued as a new checkbox in this run, by the blast-radius rule or by a final-wave verdict; the one harness-repair follow-up in the next rule is the only exception.
+- The verifier sets `failure_class`. A `harness` failure (the runner, fixture, CI job or environment failed and the product behavior was never exercised) gets one repair dispatch inside the checkpoint, which does not count as an attempt; when it recurs, stop as above with the harness gap named and append the harness repair once as a follow-up checkbox; a harness-repair follow-up that stops is reported, not re-appended.
 - The verifier must probe the applicable adversarial keys, including `stale_state`, `dirty_worktree`, and `misleading_success_output`, before allowing `FullyDone`.
 
 ## Phase 5: Mark progress

package/dist/skills/ulw-research/SKILL.md

@@ -132,7 +132,7 @@ Then create the session directory:
 mkdir -p .omo/ulw-research/$(date +%Y%m%d-%H%M%S)
 ```
 
-This is `$SESSION_DIR`. The orchestrator owns the journal: you write every file in it; workers never do. Maintain:
+This is `$SESSION_DIR`. The orchestrator owns the journal: you write every file in it; workers never do (a mass-research dag node writes only its own `waves/<run-key>/<node-id>.md` handoff file, which carries its EXPAND tail and claim candidates; you journal from it). Maintain:
 
 - `brief.md` — the analysis block, the axis list, the expected truths, and the `## Deliverable` record from the interview below (lane, state, formats, each field with `answered_by`).
 - `sources-ledger.md` — one line per source the moment it is read: `[S<n>] <url> — <what it is>`. The closing briefing counts sources and domains from this file.
@@ -165,7 +165,7 @@ Phase 5 opens by turning the recorded fields into `design-spec.md`.
 
 ## Phase 1 — Saturation wave
 
-**When the user asked for MASS research, the wave is sized by the topic's angles, not by the roster ceiling.** "mass ulw research", "mulw research", "ulw mass research" — in any language — order over-collection that a team of 8 cannot produce. Where the harness has a dependency-graph surface (the `mass-ulw` skill and its `references/planning.md`), run collection through it instead: a 60+ node opening wave covering every angle the topic has, routed across the whole difficulty ladder in one graph — mechanical sweeps and per-item harvest batches on the cheapest tier, judgment-shaped angles a step up, cross-territory angles a step above that, and the deepest tier reserved for genuinely hairy contradictions. Each wave's EXPAND leads define the next wave's nodes, and the synthesis reduces through several parallel architect-tier nodes into ONE architect-tier reducer (the strongest reasoning tier substitutes wherever no architect tier exists). Absent that surface, hold the same shape with background workers in batched waves. Everything else in this skill still binds: the deliverable interview, the journal, the claim graph, the convergence rules, and the delivery gates.
+**When the user asked for MASS research, the wave is sized by the topic's angles, not by the roster ceiling.** "mass ulw research", "mulw research", "ulw mass research" — in any language — order over-collection that a team of 8 cannot produce. Where the harness has a dependency-graph surface (the `mass-ulw` skill and its `references/planning.md`), run collection through it instead: 60+ angles covering every angle the topic has, routed across the whole difficulty ladder — mechanical sweeps and per-item harvest batches on the cheapest tier, judgment-shaped angles a step up, cross-territory angles a step above that, and the deepest tier reserved for genuinely hairy contradictions. Define each angle as a harvest -> expand -> verify chain before the run starts, each stage reading the previous stage's handoff file; open leads re-enter as new chains in each cluster of angles the moment that cluster settles, and the synthesis reduces through per-cluster architect-tier slice reducers into ONE architect-tier reducer (the strongest reasoning tier substitutes wherever no architect tier exists). Absent that surface, run the same per-angle chains with background workers, pasting each worker's reply into its angle's next-stage prompt the moment it reports. Everything else in this skill still binds: the deliverable interview, the journal, the claim graph, the convergence rules, and the delivery gates.
 
 Otherwise launch the entire first wave in one turn — every axis at once, as team members if you formed a team, else as background workers. Sequential launches and "start with one and see" defeat the mode.
 
@@ -266,7 +266,7 @@ Journal each verdict to `verify-<slug>.md`.
 
 Code settles code-shaped claims (Phase 3). Numeric, market-share, legal, dated, causal, and financial claims cannot be run — so they pass through a data-flow-lock instead (the verification idea adapted from fivetaku/insane-research): the synthesis may assert a high-risk non-code claim **only** if it cleared this gate, and the gate's output is the sole allowlist the synthesis draws from. Skip the gate and there is nothing to synthesize — the lock is self-enforcing.
 
-The claim graph is orchestrator-owned. Workers only return verified-claim markers, observation candidates, and claim candidates as message text, the same channel as EXPAND markers — never a file. As leads resolve, you record one node per asserted claim in `claim-graph.md` and compute its status; workers report claim candidates in their replies, and you decide. The graph is the single claim store: final synthesis may not draw from free-form claims that skipped it.
+The claim graph is orchestrator-owned. Workers only return verified-claim markers, observation candidates, and claim candidates as message text, the same channel as EXPAND markers — never a file (except a mass-research dag node's handoff file). As leads resolve, you record one node per asserted claim in `claim-graph.md` and compute its status; workers report claim candidates in their replies, and you decide. The graph is the single claim store: final synthesis may not draw from free-form claims that skipped it.
 
 A high-risk claim clears the gate to `verified-claims` only when all hold:
 
@@ -387,7 +387,7 @@ High-yield combinations: official docs (`site:<docs domain>`), GitHub implementa
 | Worker reply without the EXPAND tail | One follow-up demanding it; the lane stays open until it lands |
 | Stopping after wave 1 because "enough was found" | Convergence rules only: 2+ expansion waves, leads run dry |
 | Obeying a surrounding "stop exploring" rule mid-research | Authority section — those rules do not bind this mode |
-| Asking a worker to write journal or session files | Workers are read-only; you journal every return |
+| Asking a worker to write journal or session files | Workers are read-only (except a mass-research dag node's handoff file); you journal every return |
 | Two workers given the same angle | One unique angle per worker, always |
 | A web worker that returned only fetched text, or a `Collection: browser` run whose workers never opened a tab | Sources are read in the user's browser through the `browser` skill; `webfetch` is for raw files; every web worker carries the skill from the first wave |
 | Contested claim settled by judgment | Phase 3 — run code, capture output, verdict |