oh-my-opencode 5.0.0-beta.8 → 5.0.0-beta.9

package/dist/cli-node/index.js

@@ -1020,7 +1020,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         this._exitCallback = (err) => {
           if (err.code !== "commander.executeSubCommandAsync") {
             throw err;
-          } else {}
+          }
         };
       }
       return this;
@@ -2146,7 +2146,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "oh-my-opencode",
-    version: "5.0.0-beta.8",
+    version: "5.0.0-beta.9",
     description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -2282,6 +2282,7 @@ var init_package = __esm(() => {
       "typecheck:script": "tsgo --noEmit -p script/tsconfig.json",
       test: "bun test",
       "test:codex": "bun run build:codex-install && bun run build:git-bash-mcp && bun run build:lsp-tools-mcp && bun run build:lsp-daemon && npm --prefix packages/lsp-tools-mcp test && npm --prefix packages/omo-codex/plugin ci && npm --prefix packages/omo-codex/plugin/components/ulw-loop test && bun run --cwd packages/omo-codex/plugin build && npm --prefix packages/omo-codex/plugin/components/codegraph run typecheck && npm --prefix packages/omo-codex/plugin/components/codegraph test && node scripts/check-third-party-notices.mjs --ship && bun test packages/omo-opencode/src/cli/cli-installer.platform.test.ts packages/omo-codex/src/install/codex-cache.test.ts packages/omo-codex/src/install/codex-cleanup.test.ts packages/omo-codex/src/install/codex-config-agent-cleanup.test.ts packages/omo-codex/src/install/codex-config-autonomous-features.test.ts packages/omo-codex/src/install/codex-config-reasoning.test.ts packages/omo-codex/src/install/codex-config-toml.test.ts packages/omo-codex/src/install/codex-project-local-cleanup.test.ts packages/omo-codex/src/install/install-codex-project-local-cleanup.test.ts packages/omo-codex/src/install/install-codex.test.ts packages/omo-codex/src/install/install-codex-packaged.test.ts packages/omo-codex/src/install/link-cached-plugin-agents.test.ts packages/omo-codex/src/**/*.test.ts packages/utils/src/jsonc-parser.test.ts packages/utils/src/frontmatter.test.ts packages/hashline-core/src/hash-computation.test.ts packages/hashline-core/src/smoke-untested-modules.test.ts packages/rules-engine/src/index.test.ts packages/rules-engine/src/security-boundary.test.ts packages/agents-md-core/src/injector.test.ts packages/omo-codex/plugin/components/lsp/test/package-smoke.test.ts && node --test packages/omo-codex/plugin/test/*.test.mjs packages/omo-codex/scripts/install-cache-copy.test.mjs packages/omo-codex/scripts/install-cli-args.test.mjs packages/omo-codex/scripts/install-delegated-command.test.mjs packages/omo-codex/scripts/install-config-autonomous-features.test.mjs packages/omo-codex/scripts/install-config-autonomous.test.mjs packages/omo-codex/scripts/install-config-reasoning.test.mjs packages/omo-codex/scripts/install-config.test.mjs packages/omo-codex/scripts/install-hook-targets.test.mjs packages/omo-codex/scripts/install-project-local-cleanup.test.mjs packages/omo-codex/scripts/install-lazycodex-version-stamp.test.mjs packages/omo-codex/scripts/install-local-entrypoint.test.mjs packages/omo-codex/scripts/install-local-git-bash-preflight.test.mjs packages/omo-codex/scripts/install-local.test.mjs packages/omo-codex/scripts/install-marketplace-cache.test.mjs packages/omo-codex/scripts/install-mcp-context7-runtime.test.mjs packages/omo-codex/scripts/install-mcp-runtime.test.mjs packages/omo-codex/scripts/install-packaged-local.test.mjs packages/omo-codex/scripts/install-generated-bundle.test.mjs packages/omo-codex/scripts/install-agent-links.test.mjs packages/omo-codex/scripts/install-bin-links.test.mjs",
+      "test:fast": "bun run script/test-fast.ts",
       "test:senpi": "bun run build:senpi-plugin && tsgo --noEmit -p packages/omo-senpi/tsconfig.json && bun test packages/omo-senpi",
       "test:windows-codex": "bun run test:codex",
       "build:git-bash-mcp": "bun run --cwd packages/git-bash-mcp build",
@@ -2326,7 +2327,7 @@ var init_package = __esm(() => {
       zod: "^4.4.3"
     },
     devDependencies: {
-      "@code-yeongyu/senpi": "2026.8.16",
+      "@code-yeongyu/senpi": "2026.8.17",
       "@oh-my-opencode/agents-md-core": "workspace:*",
       "@oh-my-opencode/ast-grep-mcp": "workspace:*",
       "@oh-my-opencode/boulder-state": "workspace:*",
@@ -2367,18 +2368,18 @@ var init_package = __esm(() => {
       typescript: "^7.0.2"
     },
     optionalDependencies: {
-      "oh-my-opencode-darwin-arm64": "5.0.0-beta.8",
-      "oh-my-opencode-darwin-x64": "5.0.0-beta.8",
-      "oh-my-opencode-darwin-x64-baseline": "5.0.0-beta.8",
-      "oh-my-opencode-linux-arm64": "5.0.0-beta.8",
-      "oh-my-opencode-linux-arm64-musl": "5.0.0-beta.8",
-      "oh-my-opencode-linux-x64": "5.0.0-beta.8",
-      "oh-my-opencode-linux-x64-baseline": "5.0.0-beta.8",
-      "oh-my-opencode-linux-x64-musl": "5.0.0-beta.8",
-      "oh-my-opencode-linux-x64-musl-baseline": "5.0.0-beta.8",
-      "oh-my-opencode-windows-arm64": "5.0.0-beta.8",
-      "oh-my-opencode-windows-x64": "5.0.0-beta.8",
-      "oh-my-opencode-windows-x64-baseline": "5.0.0-beta.8"
+      "oh-my-opencode-darwin-arm64": "5.0.0-beta.9",
+      "oh-my-opencode-darwin-x64": "5.0.0-beta.9",
+      "oh-my-opencode-darwin-x64-baseline": "5.0.0-beta.9",
+      "oh-my-opencode-linux-arm64": "5.0.0-beta.9",
+      "oh-my-opencode-linux-arm64-musl": "5.0.0-beta.9",
+      "oh-my-opencode-linux-x64": "5.0.0-beta.9",
+      "oh-my-opencode-linux-x64-baseline": "5.0.0-beta.9",
+      "oh-my-opencode-linux-x64-musl": "5.0.0-beta.9",
+      "oh-my-opencode-linux-x64-musl-baseline": "5.0.0-beta.9",
+      "oh-my-opencode-windows-arm64": "5.0.0-beta.9",
+      "oh-my-opencode-windows-x64": "5.0.0-beta.9",
+      "oh-my-opencode-windows-x64-baseline": "5.0.0-beta.9"
     },
     overrides: {
       "@earendil-works/pi-agent-core": "0.84.2",
@@ -18763,7 +18764,7 @@ function finalize(ctx, schema) {
     result.$schema = "http://json-schema.org/draft-07/schema#";
   } else if (ctx.target === "draft-04") {
     result.$schema = "http://json-schema.org/draft-04/schema#";
-  } else if (ctx.target === "openapi-3.0") {} else {}
+  } else if (ctx.target === "openapi-3.0") {}
   if (ctx.external?.uri) {
     const id = ctx.external.registry.get(schema)?.id;
     if (!id)
@@ -19024,7 +19025,7 @@ var formatMap, stringProcessor = (schema, ctx, _json, _params) => {
     if (val === undefined) {
       if (ctx.unrepresentable === "throw") {
         throw new Error("Literal `undefined` cannot be represented in JSON Schema");
-      } else {}
+      }
     } else if (typeof val === "bigint") {
       if (ctx.unrepresentable === "throw") {
         throw new Error("BigInt literals cannot be represented in JSON Schema");
@@ -83263,21 +83264,21 @@ var init_session_cursor = __esm(() => {
 });
 
 // packages/omo-opencode/src/shared/shell-env.ts
-function detectShellType() {
-  if (process.env.SHELL) {
-    const shell = process.env.SHELL;
+function detectShellType(platform = process.platform, env2 = process.env) {
+  if (env2.SHELL) {
+    const shell = env2.SHELL;
     if (shell.includes("csh") || shell.includes("tcsh")) {
       return "csh";
     }
     return "unix";
   }
-  if (process.platform === "win32" && (process.env.BASH_VERSION || process.env.MSYSTEM || process.env.WSL_DISTRO_NAME)) {
+  if (platform === "win32" && (env2.BASH_VERSION || env2.MSYSTEM || env2.WSL_DISTRO_NAME)) {
     return "unix";
   }
-  if (process.env.PSModulePath) {
+  if (env2.PSModulePath) {
     return "powershell";
   }
-  return process.platform === "win32" ? "cmd" : "unix";
+  return platform === "win32" ? "cmd" : "unix";
 }
 var init_shell_env = () => {};
 
@@ -94685,7 +94686,7 @@ var package_default2;
 var init_package2 = __esm(() => {
   package_default2 = {
     name: "@oh-my-opencode/omo-codex",
-    version: "5.0.0-beta.8",
+    version: "5.0.0-beta.9",
     type: "module",
     private: true,
     description: "Codex harness adapter for oh-my-openagent. Vendored Codex plugin namespace (omo) + TypeScript installer + telemetry.",
@@ -106470,7 +106471,7 @@ function createJsonOutputManager(options = {}) {
 
 // packages/omo-opencode/src/cli/run/on-complete-hook.ts
 init_spawn_with_windows_hide();
-init_shared();
+init_shell_env();
 init_logger2();
 var defaultDeps3 = {
   spawnWithWindowsHide,
@@ -106490,15 +106491,15 @@ async function readOutput(stream, streamName, deps = defaultDeps3) {
     return "";
   }
 }
-function resolveHookShellCommand(command) {
-  const shellType = detectShellType();
+function resolveHookShellCommand(command, platform, env3) {
+  const shellType = detectShellType(platform, env3);
   switch (shellType) {
     case "powershell": {
-      const powershellExecutable = process.platform === "win32" ? "powershell.exe" : "pwsh";
+      const powershellExecutable = platform === "win32" ? "powershell.exe" : "pwsh";
       return [powershellExecutable, "-NoProfile", "-Command", command];
     }
     case "cmd":
-      return [process.env.ComSpec || "cmd.exe", "/d", "/s", "/c", command];
+      return [env3.ComSpec || "cmd.exe", "/d", "/s", "/c", command];
     case "csh":
       return ["csh", "-c", command];
     case "unix":
@@ -106514,10 +106515,12 @@ async function executeOnCompleteHook(options, deps = defaultDeps3) {
   }
   deps.log("Running on-complete hook", { command: trimmedCommand });
   try {
-    const shellCommand = resolveHookShellCommand(trimmedCommand);
+    const platform = deps.platform ?? process.platform;
+    const env3 = deps.env ?? process.env;
+    const shellCommand = resolveHookShellCommand(trimmedCommand, platform, env3);
     const proc = deps.spawnWithWindowsHide(shellCommand, {
       env: {
-        ...process.env,
+        ...env3,
         SESSION_ID: sessionId,
         EXIT_CODE: String(exitCode),
         DURATION_MS: String(durationMs),

package/dist/hooks/atlas/final-wave-approval-gate.test-support.d.ts

@@ -0,0 +1,50 @@
+import { mock } from "bun:test";
+import type { createAtlasHook } from "./index";
+import type { createToolExecuteAfterHandler } from "./tool-execute-after";
+import type { SessionState, ToolExecuteAfterOutput } from "./types";
+type AtlasHookContext = Parameters<typeof createAtlasHook>[0];
+type PromptMock = ReturnType<typeof mock>;
+export type FinalWaveMockPluginInput = AtlasHookContext & {
+    _promptMock: PromptMock;
+};
+export type FinalWaveAfterHandlerHarness = {
+    sessionState: SessionState;
+    run: (toolOutput: ToolExecuteAfterOutput) => Promise<void>;
+};
+/**
+ * Builds a mock plugin input with a recording prompt mock. `resolveParentSessionID`
+ * maps a subagent task session id to the orchestrator session the task belongs to.
+ */
+export declare function createFinalWaveMockPluginInput(options: {
+    directory: string;
+    resolveParentSessionID: (taskSessionID: string) => string;
+}): FinalWaveMockPluginInput;
+/**
+ * Registers per-test temp-directory lifecycle hooks (`.omo` scaffold + boulder state
+ * cleanup) and exposes the current directory. `resetAgentRegistration` also resets
+ * the shared claude-code session-state registry between tests.
+ */
+export declare function registerFinalWaveTestEnvironment(options?: {
+    resetAgentRegistration?: boolean;
+}): {
+    readonly directory: string;
+};
+/** Writes the plan markdown plus the boulder state pointing the session at it. */
+export declare function writeFinalWavePlanState(options: {
+    directory: string;
+    sessionID: string;
+    planName: string;
+    planContent: string;
+}): string;
+/**
+ * Wraps `createToolExecuteAfterHandler` with a shared in-memory session-state map so
+ * tests can assert pause/count flags. The handler factory is passed in explicitly:
+ * suites that mock modules (`mock.module`) must hand over their post-mock import so
+ * the harness runs against the same module instance the suite asserts on.
+ */
+export declare function createFinalWaveAfterHandlerHarness(options: {
+    ctx: AtlasHookContext;
+    sessionID: string;
+    createHandler: typeof createToolExecuteAfterHandler;
+}): FinalWaveAfterHandlerHarness;
+export {};

package/dist/hooks/atlas/system-reminder-templates.d.ts

@@ -2,6 +2,5 @@ export declare const DIRECT_WORK_REMINDER: string;
 export declare const BOULDER_CONTINUATION_PROMPT: string;
 export declare const BOULDER_COMPLETE_PROMPT = "<system-reminder>\nBOULDER COMPLETE: plan \"{PLAN_NAME}\" is fully checked.\n\nTotal elapsed: {ELAPSED_HUMAN}\n\nPer-task breakdown:\n{TASK_BREAKDOWN}\n\nPer your <boulder_completion_response> instructions, print the final ORCHESTRATION COMPLETE summary in your next turn. This nudge fires at most once.\n</system-reminder>";
 export declare const VERIFICATION_REMINDER = "**THE SUBAGENT JUST CLAIMED THIS TASK IS DONE. THEY ARE PROBABLY LYING.**\n\nSubagents say \"done\" when code has errors, tests pass trivially, logic is wrong,\nor they quietly added features nobody asked for. This happens EVERY TIME.\nAssume the work is broken until YOU prove otherwise.\n\n---\n\n**PHASE 1: READ THE CODE FIRST (before running anything)**\n\nDo NOT run tests yet. Read the code FIRST so you know what you're testing.\n\n1. `Bash(\"git diff --stat -- ':!node_modules'\")` - see exactly which files changed. Any file outside expected scope = scope creep.\n2. `Read` EVERY changed file - no exceptions, no skimming.\n3. For EACH file, critically ask:\n   - Does this code ACTUALLY do what the task required? (Re-read the task, compare line by line)\n   - Any stubs, TODOs, placeholders, hardcoded values? (`Grep` for TODO, FIXME, HACK, xxx)\n   - Logic errors? Trace the happy path AND the error path in your head.\n   - Anti-patterns? (`Grep` for `as any`, `@ts-ignore`, empty catch, console.log in changed files)\n   - Scope creep? Did the subagent touch things or add features NOT in the task spec?\n4. Cross-check every claim:\n   - Said \"Updated X\" - READ X. Actually updated, or just superficially touched?\n   - Said \"Added tests\" - READ the tests. Do they test REAL behavior or just `expect(true).toBe(true)`?\n   - Said \"Follows patterns\" - OPEN a reference file. Does it ACTUALLY match?\n\n**If you cannot explain what every changed line does, you have NOT reviewed it.**\n\n**PHASE 2: RUN AUTOMATED CHECKS (targeted, then broad)**\n\nNow that you understand the code, verify mechanically:\n1. `lsp_diagnostics` on EACH changed file - ZERO new errors\n2. Run tests for changed modules FIRST, then full suite\n3. Build/typecheck - exit 0\n\nIf Phase 1 found issues but Phase 2 passes: Phase 2 is WRONG. The code has bugs that tests don't cover. Fix the code.\n\n**PHASE 3: HANDS-ON QA - ACTUALLY RUN IT (MANDATORY for user-facing changes)**\n\nTests and linters CANNOT catch: visual bugs, wrong CLI output, broken user flows, API response shape issues.\n\n**If this task produced anything a user would SEE or INTERACT with, you MUST launch it and verify yourself.**\n\n- **Frontend/UI**: `/playwright` skill - load the page, click through the flow, check console. Verify: page loads, interactions work, console clean, responsive.\n- **TUI/CLI**: `interactive_bash` - run the command, try good input, try bad input, try --help. Verify: command runs, output correct, error messages helpful, edge inputs handled.\n- **API/Backend**: `Bash` with curl - hit the endpoint, check response body, send malformed input. Verify: returns 200, body correct, error cases return proper errors.\n- **Config/Build**: Actually start the service or import the config. Verify: loads without error, backward compatible.\n\nThis is NOT optional \"if applicable\". If the deliverable is user-facing and you did not run it, you are shipping untested work.\n\n**PHASE 4: GATE DECISION - Should you proceed to the next task?**\n\nAnswer honestly:\n1. Can I explain what EVERY changed line does? (If no - back to Phase 1)\n2. Did I SEE it work with my own eyes? (If user-facing and no - back to Phase 3)\n3. Am I confident nothing existing is broken? (If no - run broader tests)\n\nALL three must be YES. \"Probably\" = NO. \"I think so\" = NO. Investigate until CERTAIN.\n\n- **All 3 YES** - Proceed: mark task complete, move to next.\n- **Any NO** - Reject: resume with `task_id`, fix the specific issue.\n- **Unsure** - Reject: \"unsure\" = \"no\". Investigate until you have a definitive answer.\n\n**DO NOT proceed to the next task until all 4 phases are complete and the gate passes.**";
-export declare const VERIFICATION_REMINDER_GEMINI = "**THE SUBAGENT HAS FINISHED. THEIR WORK IS EXTREMELY SUSPICIOUS.**\n\nThe subagent CLAIMS this task is done. Based on thousands of executions, subagent claims are FALSE more often than true.\nThey ROUTINELY:\n- Ship code with syntax errors they didn't bother to check\n- Create stub implementations with TODOs and call it \"done\"\n- Write tests that pass trivially (testing nothing meaningful)\n- Implement logic that does NOT match what was requested\n- Add features nobody asked for and call it \"improvement\"\n- Report \"all tests pass\" when they didn't run any tests\n\n**This is NOT a theoretical warning. This WILL happen on this task. Assume the work is BROKEN.**\n\n**YOU MUST VERIFY WITH ACTUAL TOOL CALLS. NOT REASONING. TOOL CALLS.**\nThinking \"it looks correct\" is NOT verification. Running `lsp_diagnostics` IS.\n\n---\n\n**PHASE 1: READ THE CODE FIRST (DO NOT SKIP - DO NOT RUN TESTS YET)**\n\nRead the code FIRST so you know what you're testing.\n\n1. `Bash(\"git diff --stat -- ':!node_modules'\")` - see exactly which files changed.\n2. `Read` EVERY changed file - no exceptions, no skimming.\n3. For EACH file:\n   - Does this code ACTUALLY do what the task required? RE-READ the task spec.\n   - Any stubs, TODOs, placeholders? `Grep` for TODO, FIXME, HACK, xxx\n   - Anti-patterns? `Grep` for `as any`, `@ts-ignore`, empty catch\n   - Scope creep? Did the subagent add things NOT in the task spec?\n4. Cross-check EVERY claim against actual code.\n\n**If you cannot explain what every changed line does, GO BACK AND READ AGAIN.**\n\n**PHASE 2: RUN AUTOMATED CHECKS**\n\n1. `lsp_diagnostics` on EACH changed file - ZERO new errors. ACTUALLY RUN THIS.\n2. Run tests for changed modules, then full suite. ACTUALLY RUN THESE.\n3. Build/typecheck - exit 0.\n\nIf Phase 1 found issues but Phase 2 passes: Phase 2 is WRONG. Fix the code.\n\n**PHASE 3: HANDS-ON QA (MANDATORY for user-facing changes)**\n\n- **Frontend/UI**: `/playwright`\n- **TUI/CLI**: `interactive_bash`\n- **API/Backend**: `Bash` with curl\n\n**If user-facing and you did not run it, you are shipping UNTESTED BROKEN work.**\n\n**PHASE 4: GATE DECISION**\n\n1. Can I explain what EVERY changed line does? (If no \u2192 Phase 1)\n2. Did I SEE it work via tool calls? (If user-facing and no \u2192 Phase 3)\n3. Am I confident nothing is broken? (If no \u2192 broader tests)\n\nALL three must be YES. \"Probably\" = NO. \"I think so\" = NO.\n\n**DO NOT proceed to the next task until all 4 phases are complete.**";
 export declare const ORCHESTRATOR_DELEGATION_REQUIRED: string;
 export declare const SINGLE_TASK_DIRECTIVE: string;

package/dist/index.js

@@ -84416,21 +84416,21 @@ function restoreMessageCursor(sessionID, cursor) {
   sessionCursors.set(sessionID, cloneCursorState(cursor));
 }
 // packages/omo-opencode/src/shared/shell-env.ts
-function detectShellType() {
-  if (process.env.SHELL) {
-    const shell = process.env.SHELL;
+function detectShellType(platform = process.platform, env2 = process.env) {
+  if (env2.SHELL) {
+    const shell = env2.SHELL;
     if (shell.includes("csh") || shell.includes("tcsh")) {
       return "csh";
     }
     return "unix";
   }
-  if (process.platform === "win32" && (process.env.BASH_VERSION || process.env.MSYSTEM || process.env.WSL_DISTRO_NAME)) {
+  if (platform === "win32" && (env2.BASH_VERSION || env2.MSYSTEM || env2.WSL_DISTRO_NAME)) {
     return "unix";
   }
-  if (process.env.PSModulePath) {
+  if (env2.PSModulePath) {
     return "powershell";
   }
-  return process.platform === "win32" ? "cmd" : "unix";
+  return platform === "win32" ? "cmd" : "unix";
 }
 function shellEscape(value, shellType) {
   if (value === "") {
@@ -98726,7 +98726,7 @@ function getCachedVersion(options = {}) {
 // package.json
 var package_default = {
   name: "oh-my-opencode",
-  version: "5.0.0-beta.8",
+  version: "5.0.0-beta.9",
   description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
   main: "./dist/index.js",
   types: "dist/index.d.ts",
@@ -98862,6 +98862,7 @@ var package_default = {
     "typecheck:script": "tsgo --noEmit -p script/tsconfig.json",
     test: "bun test",
     "test:codex": "bun run build:codex-install && bun run build:git-bash-mcp && bun run build:lsp-tools-mcp && bun run build:lsp-daemon && npm --prefix packages/lsp-tools-mcp test && npm --prefix packages/omo-codex/plugin ci && npm --prefix packages/omo-codex/plugin/components/ulw-loop test && bun run --cwd packages/omo-codex/plugin build && npm --prefix packages/omo-codex/plugin/components/codegraph run typecheck && npm --prefix packages/omo-codex/plugin/components/codegraph test && node scripts/check-third-party-notices.mjs --ship && bun test packages/omo-opencode/src/cli/cli-installer.platform.test.ts packages/omo-codex/src/install/codex-cache.test.ts packages/omo-codex/src/install/codex-cleanup.test.ts packages/omo-codex/src/install/codex-config-agent-cleanup.test.ts packages/omo-codex/src/install/codex-config-autonomous-features.test.ts packages/omo-codex/src/install/codex-config-reasoning.test.ts packages/omo-codex/src/install/codex-config-toml.test.ts packages/omo-codex/src/install/codex-project-local-cleanup.test.ts packages/omo-codex/src/install/install-codex-project-local-cleanup.test.ts packages/omo-codex/src/install/install-codex.test.ts packages/omo-codex/src/install/install-codex-packaged.test.ts packages/omo-codex/src/install/link-cached-plugin-agents.test.ts packages/omo-codex/src/**/*.test.ts packages/utils/src/jsonc-parser.test.ts packages/utils/src/frontmatter.test.ts packages/hashline-core/src/hash-computation.test.ts packages/hashline-core/src/smoke-untested-modules.test.ts packages/rules-engine/src/index.test.ts packages/rules-engine/src/security-boundary.test.ts packages/agents-md-core/src/injector.test.ts packages/omo-codex/plugin/components/lsp/test/package-smoke.test.ts && node --test packages/omo-codex/plugin/test/*.test.mjs packages/omo-codex/scripts/install-cache-copy.test.mjs packages/omo-codex/scripts/install-cli-args.test.mjs packages/omo-codex/scripts/install-delegated-command.test.mjs packages/omo-codex/scripts/install-config-autonomous-features.test.mjs packages/omo-codex/scripts/install-config-autonomous.test.mjs packages/omo-codex/scripts/install-config-reasoning.test.mjs packages/omo-codex/scripts/install-config.test.mjs packages/omo-codex/scripts/install-hook-targets.test.mjs packages/omo-codex/scripts/install-project-local-cleanup.test.mjs packages/omo-codex/scripts/install-lazycodex-version-stamp.test.mjs packages/omo-codex/scripts/install-local-entrypoint.test.mjs packages/omo-codex/scripts/install-local-git-bash-preflight.test.mjs packages/omo-codex/scripts/install-local.test.mjs packages/omo-codex/scripts/install-marketplace-cache.test.mjs packages/omo-codex/scripts/install-mcp-context7-runtime.test.mjs packages/omo-codex/scripts/install-mcp-runtime.test.mjs packages/omo-codex/scripts/install-packaged-local.test.mjs packages/omo-codex/scripts/install-generated-bundle.test.mjs packages/omo-codex/scripts/install-agent-links.test.mjs packages/omo-codex/scripts/install-bin-links.test.mjs",
+    "test:fast": "bun run script/test-fast.ts",
     "test:senpi": "bun run build:senpi-plugin && tsgo --noEmit -p packages/omo-senpi/tsconfig.json && bun test packages/omo-senpi",
     "test:windows-codex": "bun run test:codex",
     "build:git-bash-mcp": "bun run --cwd packages/git-bash-mcp build",
@@ -98906,7 +98907,7 @@ var package_default = {
     zod: "^4.4.3"
   },
   devDependencies: {
-    "@code-yeongyu/senpi": "2026.8.16",
+    "@code-yeongyu/senpi": "2026.8.17",
     "@oh-my-opencode/agents-md-core": "workspace:*",
     "@oh-my-opencode/ast-grep-mcp": "workspace:*",
     "@oh-my-opencode/boulder-state": "workspace:*",
@@ -98947,18 +98948,18 @@ var package_default = {
     typescript: "^7.0.2"
   },
   optionalDependencies: {
-    "oh-my-opencode-darwin-arm64": "5.0.0-beta.8",
-    "oh-my-opencode-darwin-x64": "5.0.0-beta.8",
-    "oh-my-opencode-darwin-x64-baseline": "5.0.0-beta.8",
-    "oh-my-opencode-linux-arm64": "5.0.0-beta.8",
-    "oh-my-opencode-linux-arm64-musl": "5.0.0-beta.8",
-    "oh-my-opencode-linux-x64": "5.0.0-beta.8",
-    "oh-my-opencode-linux-x64-baseline": "5.0.0-beta.8",
-    "oh-my-opencode-linux-x64-musl": "5.0.0-beta.8",
-    "oh-my-opencode-linux-x64-musl-baseline": "5.0.0-beta.8",
-    "oh-my-opencode-windows-arm64": "5.0.0-beta.8",
-    "oh-my-opencode-windows-x64": "5.0.0-beta.8",
-    "oh-my-opencode-windows-x64-baseline": "5.0.0-beta.8"
+    "oh-my-opencode-darwin-arm64": "5.0.0-beta.9",
+    "oh-my-opencode-darwin-x64": "5.0.0-beta.9",
+    "oh-my-opencode-darwin-x64-baseline": "5.0.0-beta.9",
+    "oh-my-opencode-linux-arm64": "5.0.0-beta.9",
+    "oh-my-opencode-linux-arm64-musl": "5.0.0-beta.9",
+    "oh-my-opencode-linux-x64": "5.0.0-beta.9",
+    "oh-my-opencode-linux-x64-baseline": "5.0.0-beta.9",
+    "oh-my-opencode-linux-x64-musl": "5.0.0-beta.9",
+    "oh-my-opencode-linux-x64-musl-baseline": "5.0.0-beta.9",
+    "oh-my-opencode-windows-arm64": "5.0.0-beta.9",
+    "oh-my-opencode-windows-x64": "5.0.0-beta.9",
+    "oh-my-opencode-windows-x64-baseline": "5.0.0-beta.9"
   },
   overrides: {
     "@earendil-works/pi-agent-core": "0.84.2",
@@ -116413,6 +116414,10 @@ async function handleAtlasSessionIdle(input) {
     return;
   }
   const { boulderState, progress, appendedSession } = activeBoulderSession;
+  if (sessionState.waitingForFinalWaveApproval) {
+    log2(`[${HOOK_NAME9}] Skipped: waiting for explicit final-wave approval`, { sessionID });
+    return;
+  }
   if (progress.isComplete) {
     await handleCompletedBoulderIdle({ ctx, options, sessionID, sessionState, boulderState });
     return;
@@ -116440,10 +116445,6 @@ async function handleAtlasSessionIdle(input) {
   const now = Date.now();
   const activePlanPath = resolveBoulderPlanPath(ctx.directory, boulderState);
   resetStallStateForPlanChange(sessionState, activePlanPath);
-  if (sessionState.waitingForFinalWaveApproval) {
-    log2(`[${HOOK_NAME9}] Skipped: waiting for explicit final-wave approval`, { sessionID });
-    return;
-  }
   if (sessionState.stalledContinuationReason) {
     log2(`[${HOOK_NAME9}] Skipped: boulder continuation stalled`, {
       sessionID,

package/dist/shared/shell-env.d.ts

@@ -13,7 +13,7 @@ export type ShellType = "unix" | "powershell" | "cmd" | "csh";
  * specific (BASH_VERSION, MSYSTEM, WSL_DISTRO_NAME) — TERM is excluded
  * because some PowerShell users set it manually.
  */
-export declare function detectShellType(): ShellType;
+export declare function detectShellType(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): ShellType;
 /**
  * Shell-escape a value for use in environment variable assignment.
  *

package/dist/skills/ultimate-browsing/ATTRIBUTION.md

@@ -1,19 +1,46 @@
 # ATTRIBUTION / NOTICE
 
 This skill (`ultimate-browsing`, part of `@oh-my-opencode/shared-skills`) ships
-project-original content plus two third-party tools that it installs at runtime
-(it does NOT vendor their source). Each runtime tool's license and required
-notices are reproduced below.
+project-original content, one vendored-and-modified upstream engine, plus two
+third-party tools that it installs at runtime (it does NOT vendor their source).
+Each component's provenance, license, and required notices are reproduced below.
 
 ---
 
-## 1. Project-original content (no third-party source vendored)
+## 1. insane-search engine — vendored upstream snapshot, modified
+
+`engine/**` originates from the **insane-search** project and is NOT
+project-original code, despite being heavily modified since import.
+
+- Upstream source: https://github.com/fivetaku/insane-search
+- Vendored into this repository on 2026-06-21 by commit
+  **`a4e4ed797`** (`feat(ultimate-browsing): vendor insane-search engine (junk-excluded)`),
+  via an explicit file whitelist that excluded caches and smoke-test junk.
+- Baseline: the upstream state as of that date, a **pre-0.7.0 snapshot**.
+  Upstream's CHANGELOG dates 0.7.0 to 2026-06-22; imported files carry no
+  version marker. We have never re-vendored since; the tree has diverged in
+  both directions.
+- Modifications by this project (non-exhaustive): de-personalization
+  (`4743199a5`), the Phase 2.5 surrogate retrieval stage and surrogate registry,
+  the provenance/trust result contract, the `bias_check.py` no-site-name CI gate,
+  module split of the fetch chain, and the Python test suite under
+  `engine/tests/`.
+- No upstream `LICENSE` file was included in the vendored snapshot, so this
+  repository has no upstream license text to reproduce here. Do not infer
+  project-original licensing from that absence; treat `engine/**` as
+  upstream-derived when reasoning about provenance.
+
+The binding version policy — which upstream baseline we sit on, why we stay
+pinned, what a future re-vendor must preserve, and what it must not import — is
+[`engine/AGENTS.md` §UPSTREAM BASELINE AND VERSION POLICY](engine/AGENTS.md).
+
+---
+
+## 2. Project-original content (no third-party source vendored)
 
 The following are authored by the oh-my-openagent project and carry no third-party
 license obligation:
 
-- `engine/**` — the insane-search Tier-1 fetch engine (curl_cffi grid, WAF
-  detection, Playwright fallback templates, `bias_check.py` no-site-name gate).
 - `references/insane-search/**` and `references/agent-reach/**` — the Tier-1 and
   Tier-1.5 reference docs.
 - `scripts/extract_cookies.py`, `scripts/cookie_paths.py`, `scripts/cookie_crypto.py`
@@ -26,7 +53,7 @@ user installs separately; this skill includes none of their source.
 
 ---
 
-## 2. CloakBrowser (CloakHQ) — Tier-2 stealth Chromium (runtime dependency)
+## 3. CloakBrowser (CloakHQ) — Tier-2 stealth Chromium (runtime dependency)
 
 The Tier-2 stealth browser is **CloakBrowser**, installed at runtime via `pip`
 (`pip install cloakbrowser`). No CloakBrowser source is vendored in this repository.
@@ -73,7 +100,7 @@ SOFTWARE.
 
 ---
 
-## 3. agent-browser (vercel-labs) — Tier-2 CDP automation CLI (runtime dependency)
+## 4. agent-browser (vercel-labs) — Tier-2 CDP automation CLI (runtime dependency)
 
 The Tier-2 automation CLI is **agent-browser**, installed at runtime via `npm`
 (`npm i -g agent-browser`). No agent-browser source is vendored in this repository.

package/dist/skills/ultimate-browsing/engine/AGENTS.md

@@ -2,6 +2,116 @@
 
 **Generated:** 2026-08-10 / 38d268995
 
+## UPSTREAM BASELINE AND VERSION POLICY
+
+**READ THIS BEFORE TOUCHING `engine/**` OR PROPOSING AN UPSTREAM SYNC.**
+
+This engine is NOT project-original code. It is a vendored-and-modified snapshot of
+[fivetaku/insane-search](https://github.com/fivetaku/insane-search), and the version
+we run on is a deliberate choice, not an accident of neglect.
+
+### The pin
+
+| Fact | Value |
+|---|---|
+| Upstream project | `https://github.com/fivetaku/insane-search` |
+| Vendoring commit | `a4e4ed797` (2026-06-21) `feat(ultimate-browsing): vendor insane-search engine (junk-excluded)` |
+| De-personalization | `4743199a5` (2026-06-21) |
+| Pinned upstream baseline | upstream state as of 2026-06-21, **pre-0.7.0** (0.7.0 is dated 2026-06-22) |
+| Re-vendors since | none — every later change here is ours |
+
+We intentionally track a **pinned baseline plus local divergence**, not upstream HEAD.
+There is no submodule and no automated drift check for this engine (unlike the
+`frontend` skill's upstream submodules): the vendored files ARE the source of truth,
+and upstream is a reference we port FROM, deliberately, file by file.
+
+### Why we do not blind-rebase onto upstream HEAD
+
+1. **Upstream reset its public history.** On 2026-08-06 upstream published a single
+   squashed commit, `019ee16 refactor: reset public history at 0.14.0`, discarding the
+   prior public history through 0.13.x. There is no upstream commit graph to rebase onto and no
+   way to cherry-pick an individual upstream change by sha — only whole-file diffing
+   against a moving HEAD.
+2. **Upstream 0.14.0 REMOVED capability.** The endpoint-mining / internal-API
+   auto-derivation / site-recipe subsystems that upstream carried publicly between
+   0.12.0 and 0.14.0 are gone from upstream HEAD. Syncing to HEAD is therefore not
+   strictly an upgrade: parts of it are a downgrade relative to the intermediate
+   versions, and none of it is recoverable from the reset history.
+3. **Our tree diverged on purpose.** The KEEP list below is functionality upstream
+   never had. A wholesale overwrite with upstream HEAD would silently delete it.
+4. **Different threat model.** Our engine ships inside a published npm package and a
+   public marketplace mirror, under a CI no-site-name gate and a de-personalization
+   deny-list. Upstream carries neither constraint, so upstream code is not
+   drop-in-shippable here.
+
+### KEEP — our divergences a re-vendor MUST NOT regress
+
+These exist only in our tree. Any upstream sync that removes or bypasses one of them
+is a regression, not an upgrade:
+
+- **Phase 2.5 surrogate retrieval** (`surrogate.py`, `surrogates.yaml`) — archive /
+  reader / proxy routes tried before paying for a browser spin-up, with per-entry
+  `last_verified` staleness handling and `--allow-proxy` gating.
+- **Provenance / trust contract** (`result_schema.py`) — `Provenance` and `Trust`
+  literals on every result, so a snapshot can never be reported as the live page.
+- **Surrogate dead-end validation** (L1.5 in `validators.py`) — interstitial titles and
+  AMP-style redirect stubs rejected instead of returned as content.
+- **The no-site-name rule and its CI gate** (`bias_check.py`) — zero hard-coded site
+  names, brands, or target domains in `engine/**`.
+- **Module split of the fetch chain** — `curl_probe` / `referers` / `url_transforms` /
+  `waf_detector` / `validators` / `executor` / `summary` as separate modules rather than
+  one monolith.
+- **The Python test suite** under `engine/tests/` with its HTML/JSON fixtures.
+- **De-personalization** — no personal absolute paths, no personal auth token literals,
+  no personal browser choice; enforced by `depersonalization-gate.test.ts`.
+- **Skill-level layering** — the engine is Tier 1 under a router that also owns Tier 1.5
+  (agent-reach) and Tier 2 (CloakBrowser + agent-browser). Upstream has no such tiering.
+
+### WANT — upstream improvements worth porting forward
+
+Our snapshot predates these; they are wanted, and each must be ported as a reviewed,
+site-agnostic change that preserves every KEEP item above. Port individually; never as
+a tree overwrite:
+
+- **Content quality**: dedicated markdown conversion of fetched HTML, main-content
+  extraction, PDF text extraction, and JSON-LD rescue when the HTML body is thin.
+- **Transient-failure retry** and **render-merge** of statically fetched HTML with the
+  browser-rendered DOM.
+- **Differential block classification** — distinguishing a bot-detection block from an
+  infrastructure or authentication failure, instead of collapsing both into `challenge`.
+- **Additional stealth fetch backends** beyond the current Playwright templates, and
+  additional WAF vendor profiles.
+- **Per-host route learning** — remembering which route succeeded for a host, with a TTL
+  and a bounded store. Must stay runtime state, never committed site knowledge (R4).
+- **Engine-level Phase 0 routing** — the official-public-API preference is currently only
+  a documented rule (R5) the agent can skip; upstream moved it into code so it cannot be
+  skipped. Worth adopting.
+
+### OUT OF SCOPE
+
+- **The removed upstream endpoint-mining / internal-API auto-derivation / site-recipe
+  subsystems.** They are absent from upstream HEAD and are not reconstructed here. They
+  also sit against R3/R4 and R7's anti-bias rule: discovered internal endpoints are
+  runtime findings, never committed engine knowledge.
+- **Any upstream code carrying site-specific selectors, domains, or brand names.** It
+  fails `bias_check.py` at the door; re-derive it site-agnostically or leave it out.
+- **Automated upstream tracking.** No submodule, no drift check, no auto-bump. Syncing is
+  a deliberate, reviewed, human-initiated act.
+
+### THE SYNC RULE
+
+Any future upstream sync preserves BOTH sides. Concretely:
+
+1. Diff the specific upstream capability you want against our tree — do not overwrite
+   files wholesale, and never `git checkout` upstream over `engine/`.
+2. Port it as its own reviewed change, keeping every KEEP item intact.
+3. Re-run `python3 engine/bias_check.py` and the `engine/tests/` suite; a port that
+   introduces a site name or breaks a fixture does not ship.
+4. Update the pin table above (baseline, date, what was ported) in the same change, plus
+   the provenance section of [`../ATTRIBUTION.md`](../ATTRIBUTION.md).
+5. If a port must drop a KEEP item, say so explicitly in the PR and get it agreed first —
+   silent regressions of the KEEP list are the failure mode this policy exists to prevent.
+
 ## OVERVIEW
 
 A 17-module Python package embedded in the `ultimate-browsing` skill: a site-agnostic fetch chain that escalates from a cheap curl probe to a real browser, with declarative WAF and surrogate registries. Not "optional scripts" — it has its own CLI entry (`python3 -m engine URL`), two YAML config schemas, a 4-file test suite, and a standalone CI guard. Package exports (`__init__.py`): `fetch`, `FetchResult`, `Attempt`, `Verdict`, `ValidationResult`, `validate`, `CHALLENGE_MARKERS`, `detect`, `TRANSFORMS`, `apply_transform`.

package/dist/tui.js

@@ -15197,7 +15197,7 @@ function finalize(ctx, schema) {
     result.$schema = "http://json-schema.org/draft-07/schema#";
   } else if (ctx.target === "draft-04") {
     result.$schema = "http://json-schema.org/draft-04/schema#";
-  } else if (ctx.target === "openapi-3.0") {} else {}
+  } else if (ctx.target === "openapi-3.0") {}
   if (ctx.external?.uri) {
     const id = ctx.external.registry.get(schema)?.id;
     if (!id)
@@ -15458,7 +15458,7 @@ var formatMap, stringProcessor = (schema, ctx, _json, _params) => {
     if (val === undefined) {
       if (ctx.unrepresentable === "throw") {
         throw new Error("Literal `undefined` cannot be represented in JSON Schema");
-      } else {}
+      }
     } else if (typeof val === "bigint") {
       if (ctx.unrepresentable === "throw") {
         throw new Error("BigInt literals cannot be represented in JSON Schema");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oh-my-opencode",
-  "version": "5.0.0-beta.8",
+  "version": "5.0.0-beta.9",
   "description": "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
   "main": "./dist/index.js",
   "types": "dist/index.d.ts",
@@ -136,6 +136,7 @@
     "typecheck:script": "tsgo --noEmit -p script/tsconfig.json",
     "test": "bun test",
     "test:codex": "bun run build:codex-install && bun run build:git-bash-mcp && bun run build:lsp-tools-mcp && bun run build:lsp-daemon && npm --prefix packages/lsp-tools-mcp test && npm --prefix packages/omo-codex/plugin ci && npm --prefix packages/omo-codex/plugin/components/ulw-loop test && bun run --cwd packages/omo-codex/plugin build && npm --prefix packages/omo-codex/plugin/components/codegraph run typecheck && npm --prefix packages/omo-codex/plugin/components/codegraph test && node scripts/check-third-party-notices.mjs --ship && bun test packages/omo-opencode/src/cli/cli-installer.platform.test.ts packages/omo-codex/src/install/codex-cache.test.ts packages/omo-codex/src/install/codex-cleanup.test.ts packages/omo-codex/src/install/codex-config-agent-cleanup.test.ts packages/omo-codex/src/install/codex-config-autonomous-features.test.ts packages/omo-codex/src/install/codex-config-reasoning.test.ts packages/omo-codex/src/install/codex-config-toml.test.ts packages/omo-codex/src/install/codex-project-local-cleanup.test.ts packages/omo-codex/src/install/install-codex-project-local-cleanup.test.ts packages/omo-codex/src/install/install-codex.test.ts packages/omo-codex/src/install/install-codex-packaged.test.ts packages/omo-codex/src/install/link-cached-plugin-agents.test.ts packages/omo-codex/src/**/*.test.ts packages/utils/src/jsonc-parser.test.ts packages/utils/src/frontmatter.test.ts packages/hashline-core/src/hash-computation.test.ts packages/hashline-core/src/smoke-untested-modules.test.ts packages/rules-engine/src/index.test.ts packages/rules-engine/src/security-boundary.test.ts packages/agents-md-core/src/injector.test.ts packages/omo-codex/plugin/components/lsp/test/package-smoke.test.ts && node --test packages/omo-codex/plugin/test/*.test.mjs packages/omo-codex/scripts/install-cache-copy.test.mjs packages/omo-codex/scripts/install-cli-args.test.mjs packages/omo-codex/scripts/install-delegated-command.test.mjs packages/omo-codex/scripts/install-config-autonomous-features.test.mjs packages/omo-codex/scripts/install-config-autonomous.test.mjs packages/omo-codex/scripts/install-config-reasoning.test.mjs packages/omo-codex/scripts/install-config.test.mjs packages/omo-codex/scripts/install-hook-targets.test.mjs packages/omo-codex/scripts/install-project-local-cleanup.test.mjs packages/omo-codex/scripts/install-lazycodex-version-stamp.test.mjs packages/omo-codex/scripts/install-local-entrypoint.test.mjs packages/omo-codex/scripts/install-local-git-bash-preflight.test.mjs packages/omo-codex/scripts/install-local.test.mjs packages/omo-codex/scripts/install-marketplace-cache.test.mjs packages/omo-codex/scripts/install-mcp-context7-runtime.test.mjs packages/omo-codex/scripts/install-mcp-runtime.test.mjs packages/omo-codex/scripts/install-packaged-local.test.mjs packages/omo-codex/scripts/install-generated-bundle.test.mjs packages/omo-codex/scripts/install-agent-links.test.mjs packages/omo-codex/scripts/install-bin-links.test.mjs",
+    "test:fast": "bun run script/test-fast.ts",
     "test:senpi": "bun run build:senpi-plugin && tsgo --noEmit -p packages/omo-senpi/tsconfig.json && bun test packages/omo-senpi",
     "test:windows-codex": "bun run test:codex",
     "build:git-bash-mcp": "bun run --cwd packages/git-bash-mcp build",
@@ -180,7 +181,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@code-yeongyu/senpi": "2026.8.16",
+    "@code-yeongyu/senpi": "2026.8.17",
     "@oh-my-opencode/agents-md-core": "workspace:*",
     "@oh-my-opencode/ast-grep-mcp": "workspace:*",
     "@oh-my-opencode/boulder-state": "workspace:*",
@@ -221,18 +222,18 @@
     "typescript": "^7.0.2"
   },
   "optionalDependencies": {
-    "oh-my-opencode-darwin-arm64": "5.0.0-beta.8",
-    "oh-my-opencode-darwin-x64": "5.0.0-beta.8",
-    "oh-my-opencode-darwin-x64-baseline": "5.0.0-beta.8",
-    "oh-my-opencode-linux-arm64": "5.0.0-beta.8",
-    "oh-my-opencode-linux-arm64-musl": "5.0.0-beta.8",
-    "oh-my-opencode-linux-x64": "5.0.0-beta.8",
-    "oh-my-opencode-linux-x64-baseline": "5.0.0-beta.8",
-    "oh-my-opencode-linux-x64-musl": "5.0.0-beta.8",
-    "oh-my-opencode-linux-x64-musl-baseline": "5.0.0-beta.8",
-    "oh-my-opencode-windows-arm64": "5.0.0-beta.8",
-    "oh-my-opencode-windows-x64": "5.0.0-beta.8",
-    "oh-my-opencode-windows-x64-baseline": "5.0.0-beta.8"
+    "oh-my-opencode-darwin-arm64": "5.0.0-beta.9",
+    "oh-my-opencode-darwin-x64": "5.0.0-beta.9",
+    "oh-my-opencode-darwin-x64-baseline": "5.0.0-beta.9",
+    "oh-my-opencode-linux-arm64": "5.0.0-beta.9",
+    "oh-my-opencode-linux-arm64-musl": "5.0.0-beta.9",
+    "oh-my-opencode-linux-x64": "5.0.0-beta.9",
+    "oh-my-opencode-linux-x64-baseline": "5.0.0-beta.9",
+    "oh-my-opencode-linux-x64-musl": "5.0.0-beta.9",
+    "oh-my-opencode-linux-x64-musl-baseline": "5.0.0-beta.9",
+    "oh-my-opencode-windows-arm64": "5.0.0-beta.9",
+    "oh-my-opencode-windows-x64": "5.0.0-beta.9",
+    "oh-my-opencode-windows-x64-baseline": "5.0.0-beta.9"
   },
   "overrides": {
     "@earendil-works/pi-agent-core": "0.84.2",