oh-my-opencode 5.1.29 → 5.1.32

package/dist/shared/disabled-agents.d.ts

@@ -0,0 +1 @@
+export declare function migrateDisabledAgents(disabledAgents: readonly string[] | undefined): string[];

package/dist/shared/opencode-shell.d.ts

@@ -0,0 +1,27 @@
+import type { ShellType } from "./shell-env";
+/**
+ * The shell OpenCode's bash tool will actually run, mirrored from OpenCode's
+ * `Shell.acceptable(cfg.shell)` (packages/core/src/shell.ts, stable since 1.4.0;
+ * `cfg.shell` is honored from 1.14.27). Command prefixes must use this shell's
+ * syntax: inferring it from ComSpec picks cmd on machines where OpenCode runs
+ * PowerShell (#9733).
+ *
+ * Order: the configured `shell`, else `$SHELL`, when it is not fish/nu and
+ * resolves to a file; otherwise on Windows the first of pwsh, powershell,
+ * Git Bash, then COMSPEC (or cmd.exe); elsewhere /bin/zsh on macOS, then bash,
+ * then /bin/sh.
+ */
+export interface OpenCodeShellHost {
+    readonly platform: NodeJS.Platform;
+    readonly env: NodeJS.ProcessEnv;
+    readonly isFile: (file: string) => boolean;
+}
+export declare function openCodeShellName(file: string, host?: OpenCodeShellHost): string;
+export declare function resolveOpenCodeShell(configShell: string | undefined, host?: OpenCodeShellHost): string;
+export declare function shellTypeForOpenCodeShell(shellPath: string, host?: OpenCodeShellHost): ShellType;
+export interface OpenCodeShellTypeResolver {
+    setConfiguredShell(shell: unknown): void;
+    resolveShellType(): ShellType;
+}
+export declare function createOpenCodeShellTypeResolver(host?: () => OpenCodeShellHost): OpenCodeShellTypeResolver;
+export declare const openCodeShellTypeResolver: OpenCodeShellTypeResolver;

package/dist/skills/browser/SKILL.md

@@ -11,7 +11,7 @@ One library, two engines. omowright ships inside this skill; choose the engine b
 |---|---|---|
 | A site the user is signed into, their open tabs, a form, a click-through, a screenshot, web QA, an extension popup | **attached** — the user's own browser through BrowserSkill | `connectBrowserSkill()` |
 | A throwaway profile, bot-scoring evasion, a CAPTCHA, network interception, a QA flight trace, coordinate control, headless runs | **owned** — a browser your code launches | `connectPipe()` / `connectCloakProfile()` — [references/owned-engine/README.md](references/owned-engine/README.md) |
-| Text out of a URL, a 403 bypass, a platform that blocks fetchers | neither | the `ultimate-browsing` skill |
+| A 403/WAF host the attached engine cannot open, a platform with a native reader, an archive snapshot | neither | the `ultimate-browsing` skill |
 
 **Attached is the default,** because it is the only engine carrying the user's logins and the only
 one where a human is a single call away. Never substitute one engine for the other silently: if

package/dist/skills/browser/runtime/omowright/manifest.json

@@ -5,5 +5,5 @@
     "index.js": "b6b064fab277031c6c51f5a58b84b31040f9960bf767bf646adc0540c1d25c1b",
     "page-bundle.js": "bfd51e8383cf47200d57387bbbed258bce5a3a3d00c38fc108034d2888e23f0c"
   },
-  "stagedAtUtc": "2026-10-09T17:45:46.876Z"
+  "stagedAtUtc": "2026-10-13T00:11:24.408Z"
 }

package/dist/skills/ultimate-browsing/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: ultimate-browsing
-description: "Renders, drives, and screenshots web pages: JS-rendered sources, clicks and forms, persistent logins, WAF-blocked hosts (platform-native readers, stealth Chrome), and the browsing lane of a research run, with screenshots as provenance. Not for plain search or unblocked static fetch."
+description: "Reaches web pages the user's browser cannot open: WAF-blocked and bot-scored hosts, platform-native readers (Chinese and social platforms), archive snapshots with provenance, and a browser you own for stealth or throwaway profiles. Not for plain search, an unblocked static fetch, or a page the user's browser can open."
 ---
 
 # Ultimate Browsing
 
-Web access for everything a plain fetch cannot finish: a page that renders in JS, a click or a form, a screenshot, a login that must persist across pages, or a host that blocks generic fetchers (WAF / 403 / Cloudflare). Start at the cheapest tier that can do the job and climb only when it cannot:
+Web access for the hosts the user's browser cannot open (WAF / 403 / Cloudflare / bot-scored pages) and for platforms with a native reader. Reading and interaction on a page the user's browser can open belong to the `browser` skill's attached engine, not here. Start at the cheapest tier that can reach the blocked host and climb only when it cannot:
 
 **Tier 1 — insane-search** (headless extraction + WAF bypass) -> **Tier 1.5 — agent-reach** (platform-native APIs, esp. Chinese platforms) -> **Tier 2 — a real browser** through omowright from js eval: 2a the owned engine (a browser your code launches, CloakBrowser for stealth), 2b the attached engine (the user's own signed-in browser).
 
@@ -14,29 +14,27 @@ Web access for everything a plain fetch cannot finish: a page that renders in JS
 ```
 User request
   |
-  +- extract text/data from a URL --------------------- TIER 1  insane-search
+  +- a page the user's browser can open (read, click, screenshot, QA, login)  NOT this skill (browser skill, attached engine)
+  +- simple search query ------------------------------ NOT this skill (use web-search)
+  |
   +- URL blocked / 403 / Cloudflare / WAF ------------- TIER 1  insane-search
   +- YouTube/Vimeo/TikTok subtitles or metadata ------- TIER 1  insane-search (yt-dlp)
-  +- read an article / blog / Reddit / HN / arXiv ----- TIER 1  insane-search
+  +- archive snapshot of a dead or changed page ------- TIER 1  insane-search (surrogates, provenance-tagged)
   |
   +- Chinese platform (xhs/douyin/weibo/bilibili/v2ex/wechat)  TIER 1.5 agent-reach
   +- podcast transcript / stock forum ----------------- TIER 1.5 agent-reach
   +- Twitter feed / LinkedIn profile / GitHub via CLI - TIER 1.5 agent-reach
   |
-  +- Tier 1/1.5 returned empty or partial ------------- TIER 2  2a owned engine -> 2b attached engine
-  +- click / fill form / scroll / interact ------------ TIER 2  2a owned engine -> 2b attached engine
-  +- screenshot / render / play video ----------------- TIER 2  2a owned engine -> 2b attached engine
-  +- login session across pages / the user's account --- TIER 2  2b attached engine (their browser)
-  +- test web app / QA / dogfood ---------------------- TIER 2  2a owned engine -> 2b attached engine
-  |
-  +- simple search query ------------------------------ NOT this skill (use web-search)
+  +- Tier 1/1.5 returned empty or partial ------------- TIER 2  2a owned engine (stealth)
+  +- a blocked host that also needs a click, a scroll or a screenshot  TIER 2  2a owned engine
+  +- the user's account on a host the owned engine cannot pass  TIER 2  2b attached engine (their browser)
 ```
 
 Read the matching reference before acting: [`references/insane-search/README.md`](references/insane-search/README.md), [`references/agent-reach/README.md`](references/agent-reach/README.md), or [`references/chrome-stealth.md`](references/chrome-stealth.md).
 
 ## Tier 1 — insane-search (headless extraction)
 
-**When**: content extraction, blocked-URL bypass, media metadata — no browser UI needed.
+**When**: blocked-URL bypass, media metadata, archive surrogates — no browser UI needed.
 **Why first**: ~10x faster than a browser, no process spin-up; handles most "fetch this blocked page" requests via curl_cffi TLS impersonation, yt-dlp (1858 sites), official public APIs, mobile URL transforms, **Phase-2.5 surrogate archives** (Wayback / archive.today snapshots, provenance-tagged — see [`references/insane-search/cache-archive.md`](references/insane-search/cache-archive.md)), a key-gated Jina Reader (`JINA_API_KEY`), and a Playwright real-Chrome fallback. The engine lives **inside this skill** at `engine/` and is invoked as a module. Surrogate results are dated COPIES: a result whose `provenance` is `snapshot` must be reported with its `snapshot_timestamp`, never presented as the live page.
 
 ```bash
@@ -56,7 +54,7 @@ The full engine harness (rules R1-R7, the Phase 0 official-API index, the no-sit
 
 ### Escalate to Tier 1.5 or Tier 2 when
 - The target is a Chinese / social platform with a native reader -> Tier 1.5.
-- insane-search returns empty/partial, or the page needs JS interaction, a screenshot, a persistent login, or media playback -> Tier 2.
+- insane-search returns empty/partial, or the blocked page needs JS interaction, a screenshot, or media playback -> Tier 2.
 
 ## Tier 1.5 — agent-reach (platform-native readers)
 
@@ -82,7 +80,7 @@ Routing table, per-platform auth (set `TWITTER_*` env vars, `gh auth login`, a t
 
 ## Tier 2 — a real browser (real interaction)
 
-**When**: real interaction is needed (clicks, forms, screenshots, video, persistent login), or Tier 1/1.5 failed.
+**When**: Tier 1/1.5 failed on a blocked host, or that host needs interaction (clicks, scroll, screenshots, video). A page the user's browser can open is the `browser` skill's job, attached engine first.
 
 Both tiers are omowright, staged inside the `browser` skill and loaded from js eval:
 
@@ -110,9 +108,9 @@ try {
 
 The rest of the surface (CUA coordinates, captcha solving, routes, traces, frames, human handoff) is in the `browser` skill's `references/owned-engine/`. A stealth binary is not proof of access: inspect the rendered result and report challenges that remain.
 
-### Tier 2b — attached engine (logged-in pages)
+### Tier 2b — attached engine (the user's account on a blocked host)
 
-When the page needs the user's account, drive the browser they are already signed into instead of cloning their profile: `connectBrowserSkill()` → `session.navigate` → `bskSnapshot(session)` / `session.observe()` → `session.click` → `session.stop()`. NEVER launch against or clear cookies/cache/site data from the user's live profile, and never fall back to the owned engine for an authenticated criterion: if no extension is connected, run the `browser` skill's onboarding script and relay its one human step. The full loop is the `browser` skill.
+When the blocked flow needs the user's account, drive the browser they are already signed into instead of cloning their profile: `connectBrowserSkill()` → `session.navigate` → `bskSnapshot(session)` / `session.observe()` → `session.click` → `session.stop()`. NEVER launch against or clear cookies/cache/site data from the user's live profile, and never fall back to the owned engine for an authenticated criterion: if no extension is connected, run the `browser` skill's onboarding script and relay its one human step. The full loop is the `browser` skill.
 
 ### Cookie login (cross-platform)
 

package/dist/skills/ulw-execute/SKILL.md

@@ -96,7 +96,7 @@ Write `.omo/boulder.json` before implementation starts. Prefix session ids with
 }
 ```
 
-Every phase (plan wave) runs in its own task-owned worktree with its own goal: before the wave's first dispatch, record the wave's goal — its checkboxes and their acceptance criteria — as a ledger entry, then `git worktree add <repo>-wt/<plan>-<wave> <branch off the integration base>` (or verify a `--worktree` path with `git worktree list --porcelain`), store the absolute path as `worktree_path`, run every edit, command, test, and evidence capture inside it; the wave lands on the integration base once its checkboxes are verified (direct merge, or the PR under `--make-pr`/`--ship`), and the next wave branches from that landed base.
+Every phase (plan wave) runs in its own task-owned worktree with its own goal: before the wave's first dispatch, record the wave's goal — its checkboxes and their acceptance criteria — as a ledger entry, then `git worktree add <repo>-wt/<plan>-<wave> <branch off the integration base>` (or verify a `--worktree` path with `git worktree list --porcelain`), store the absolute path as `worktree_path`, run every edit, command, test, and evidence capture inside it; the wave lands on the integration base once its checkboxes are verified (direct merge, or the PR under `--make-pr`/`--ship`), and the next wave branches from that landed base. Use the bundled ultrawork directive’s Task resources and todo rules at wave/worktree creation; read those sections if absent from context.
 
 ## Parallel delivery lanes (teams and worktrees)
 
@@ -227,7 +227,7 @@ Only after verification passes:
 When all top-level checkboxes in `## TODOs` and `## Final Verification Wave` are complete:
 
 1. Run the plan's final verification commands.
-2. For PR/branch work, finish the lifecycle from the last phase's worktree: sync `.omo/` state back to the main repo, create or update the PR, wait for review/verification gates, merge by default unless explicitly opted out, and remove the worktree only after successful merge or explicit handoff.
+2. For PR/branch work, finish the lifecycle from the last phase's worktree: sync `.omo/` state back to the main repo, create or update the PR, wait for review/verification gates, merge by default unless explicitly opted out, and remove the worktree only after successful merge or explicit handoff. Finish directory teardown per Task resources and record its receipts.
 3. Remove or mark the Boulder work as completed.
 4. Print an `ORCHESTRATION COMPLETE` block with the plan path, verification commands, artifacts, and cleanup receipts.
 

package/dist/skills/ulw-research/SKILL.md

@@ -86,7 +86,7 @@ Saturation research defaults to teammode, not isolated fire-and-forget workers:
 
 ## Worker ground rules
 
-Research workers (explore, librarian, browsing) differ by harness, but assume:
+Research workers (explore, web, repo-dive) differ by harness, but assume:
 
 - **Read-only.** Most research workers cannot write files. Never ask a worker to write the journal or any session file — every journal write is yours.
 - **No recursion — workers AND members.** Workers cannot spawn their own subagents, and team members must not re-orchestrate: a member researches its axis and reports; it never stands up its own team, loads this skill, or fans out a research swarm of its own. Depth comes from YOUR expansion waves. Say so in every spawn message — a member that starts its own research protocol burns the run's budget on duplicated orchestration and returns nothing you can cite.
@@ -119,11 +119,13 @@ Before spawning anything, decompose the query. Start from "what must be true if
 <analysis>
 Core question: <the actual information need>
 Axes (3+ orthogonal): <axis — what to search, where, why> ...
-Codebase relevant: <yes/no> · External: <yes/no> · Browsing: <yes/no> · Verification likely: <yes/no>
+Codebase relevant: <yes/no> · External: <yes/no> · Collection: <search-only | browser> · Verification likely: <yes/no>
 Scale: <axis count, source territories, target document length> · Precision demand: <what a wrong claim costs here> → lifecycle: <single team | research team then refinement team>
 </analysis>
 ```
 
+`Collection` is `search-only` only when a result snippet settles every axis (a date, a version, a spec value); anything that needs reading a source is `browser`.
+
 Then create the session directory:
 
 ```bash
@@ -169,26 +171,23 @@ Otherwise launch the entire first wave in one turn — every axis at once, as te
 
 Scaling floor — more angles always justify more workers:
 
-| Query scope | explore | librarian | browsing | repo-dive | floor |
-|---|---|---|---|---|---|
-| Single topic, codebase only | 3 | 0 | 0 | 0 | 3 |
-| Single topic, web only | 0 | 4 | 1 | 1 | 6 |
-| Single topic, both | 2 | 3 | 1 | 1 | 7 |
-| Multi-faceted | 4 | 6 | 2 | 2 | 14 |
-| Full due diligence | 4 | 6 | 3 | 2 | 15 |
-
-The browsing column is BINDING, not advisory: when the brief says `Browsing: yes`, the roster names a browsing-worker angle, armed with the `ultimate-browsing` skill, before the first wave launches, and that worker is spawned in the same turn as the rest of the wave. A run that reaches wave 2 with zero browsing workers on a `Browsing: yes` brief has silently downgraded every source to what plain fetch happened to return.
+| Query scope | explore | web | repo-dive | floor |
+|---|---|---|---|---|
+| Single topic, codebase only | 3 | 0 | 0 | 3 |
+| Single topic, web only | 0 | 5 | 1 | 6 |
+| Single topic, both | 2 | 4 | 1 | 7 |
+| Multi-faceted | 4 | 8 | 2 | 14 |
+| Full due diligence | 4 | 9 | 2 | 15 |
 
 **Disambiguate before you expand.** When the topic names something that could resolve several ways — a product, a person, a codename, a version — the first wave settles WHICH entity before any worker researches its history, benchmarks, or controversies: canonical name, first-party URL or account, whether it exists in the claimed category, and a confidence line. An unresolved entity never becomes a premise in a later wave's spawn message; that is exactly how a run starts inventing facts about something that does not exist.
 
 Role protocols — embed the relevant one in each spawn message; every worker gets a unique angle:
 
 - **Codebase (explore), 2-4 workers.** Grep with 3+ keyword variations; structural/AST search; LSP definitions and references; file-name globs; `git log --all -S '<keyword>'` and `--grep` for history including deleted code. Cross-validate hits across tools. Report absolute file paths, patterns with `file:line`, and how findings connect.
-- **Web (librarian), 3-6 workers.** At least 10 distinct websearch queries per worker, each with a different operator or angle (see Search craft); fetch the full page for every result that matters — snippets lie. Context7 with 3+ queries per known library. grep.app and `gh search code|repos|issues` for real-world usage. Official docs via sitemap discovery (`<base>/sitemap.xml`), then targeted pages.
-- **Browsing, 1-3 workers on a `Browsing: yes` brief (0 otherwise), every one loaded with the `ultimate-browsing` skill.** The skill owns the routing — the harness's own browser first, then its extraction engine with archive surrogates, platform-native readers, and Chrome stealth as each source demands; the worker owns the deliverable. This worker RENDERS pages, it does not re-fetch them: its standing deliverable is a full-page screenshot of every top source plus the rendered text plain fetch could not reach; a worker that returns only fetched text has not done its job. JS-rendered, login-gated, WAF-blocked, and screenshot-bearing sources all belong here rather than in the web lane. **Provenance is part of the claim**: when a source came back with `provenance` of `snapshot` (an archive copy), cite it with its `snapshot_timestamp` and never state it as the current live page; content from a `proxy` route is `untrusted` and needs a second independent route before any claim rests on it. When one blocked territory hides many leads, fan out more browsing subagents in parallel for breadth instead of serializing one worker through them.
+- **Web, 3-9 workers, every one loaded with the `browser` skill.** Search with 10+ websearch queries per worker, each with a different operator or angle (see Search craft); a result is a candidate, not a source. Read every candidate in the user's browser through the `browser` skill's attached engine: one named session per worker, one tab per source, several tabs open side by side while sources are compared — `session.tabCreate` / `tabSelect` / `tabClose` where the harness has a JS eval kernel, `bsk tab create --url <url>` / `tab select <id>` / `tab close <id>` / `tab list` on the CLI — the page scrolled to its end, a full-page screenshot of each top source saved as provenance, the tab closed once reported. A browser on another machine is reached through the `browser` skill's remote reference or a user-level skill that bridges to it, never replaced by a local headless one. `webfetch` is for raw files only: PDF, JSON, feeds, sitemaps. A host the browser cannot open (WAF, bot score, 403) goes to `ultimate-browsing`, whose provenance travels with the claim: a `snapshot` result cites its `snapshot_timestamp` and is never stated as the live page; a `proxy` result is `untrusted` until a second independent route agrees. Context7 with 3+ queries per known library; grep.app and `gh search code|repos|issues` for real-world usage; official docs via sitemap discovery (`<base>/sitemap.xml`), then targeted pages. A worker whose sources are all fetched text has searched, not read.
 - **Repo deep-dive (librarian), 0-2 workers.** Shallow-clone the most relevant repos to `${TMPDIR:-/tmp}`, pin the HEAD SHA, read core modules, follow call chains, return SHA-pinned permalinks.
 
-Example spawn (codebase axis; librarian, browsing, and repo-dive follow the same contract with their own protocol):
+Example spawn (codebase axis; web and repo-dive follow the same contract with their own protocol):
 
 ```
 task(subagent_type="explore", run_in_background=true, prompt="TASK: act as a codebase researcher. AXIS: <specific angle>.
@@ -207,9 +206,9 @@ This loop is what makes the mode research rather than search. Collect returns as
 3. Spawn an expansion worker immediately for each new unchecked lead:
 
 ```
-task(subagent_type="librarian", run_in_background=true, prompt="TASK: expansion wave <N> — investigate: <lead>.
+task(category="deep-low", load_skills=["browser"], run_in_background=true, prompt="TASK: expansion wave <N> — investigate: <lead>.
 PARENT: <which return surfaced it>. This is an explicit exhaustive-research assignment; budgets do not apply.
-<role protocol for the lead's territory — librarian protocol for external leads, explore protocol for codebase leads>
+<role protocol for the lead's territory — web protocol for external leads, explore protocol for codebase leads>
 End your reply with the ## EXPAND tail.")
 ```
 
@@ -331,7 +330,7 @@ Asset workers (background, parallel, each fed `design-spec.md`) — visuals are
 - **Charts for every quantitative finding, computed from real data.** Pull the numbers into an actual table first (CSV/JSON under `$SESSION_DIR`), then plot from that table, never from prose. Follow the data-scientist tool doctrine — numpy always, Polars for filtering/sorting/transforms, DuckDB for joins/aggregations/window functions, never pandas — and load the `data-scientist` skill when this session has it: `uv run --with numpy --with polars --with duckdb --with pyarrow --with matplotlib python`. Keep `pyarrow` in that set — the DuckDB-to-Polars handoff (`.pl()`) fails without it, and `.df()` fails without pandas, so hand data across through `.pl()`, never `.df()`. Save to `$SESSION_DIR/assets/`.
 - **Mermaid graphs** for process, architecture, argument, timeline, and evidence-flow structure, themed to the spec's fonts and palette. Render each to SVG and confirm the file exists before the document references it.
 - **Generated visuals through the imagegen skill whenever the session has it:** a cover plus a concept illustration per major theme, prompted from the spec's style, palette, and mood — document-styled illustration, never generic stock art dropped into a designed page.
-- **Full-page screenshots** of the top 5-10 sources (browsing worker) as provenance you can show.
+- **Full-page screenshots** of the top 5-10 sources, saved by the web workers while reading, as provenance you can show.
 
 **Verify the asset manifest before rendering.** List every asset the document references, assert each file exists and is non-empty on disk, and re-render whatever is missing. A document that renders with three broken diagrams is a document you will publish twice.
 
@@ -390,7 +389,7 @@ High-yield combinations: official docs (`site:<docs domain>`), GitHub implementa
 | Obeying a surrounding "stop exploring" rule mid-research | Authority section — those rules do not bind this mode |
 | Asking a worker to write journal or session files | Workers are read-only; you journal every return |
 | Two workers given the same angle | One unique angle per worker, always |
-| A `Browsing: yes` run whose roster carries no browsing worker, or a browsing worker spawned without `ultimate-browsing` | The browsing column is binding — name the angle in the brief and spawn it, armed with the skill, in the first wave before any lead is chased |
+| A web worker that returned only fetched text, or a `Collection: browser` run whose workers never opened a tab | Sources are read in the user's browser through the `browser` skill; `webfetch` is for raw files; every web worker carries the skill from the first wave |
 | Contested claim settled by judgment | Phase 3 — run code, capture output, verdict |
 | Deliverable claims without citations | Every claim cites a source or a verification artifact |
 | Guessing the deliverable format | Derive it from the request and destination; ask the empty-info interview only for what is still missing, and record `answered_by` for every field |

package/dist/skills/ulw-research/scripts/cli-support.test.ts

@@ -1,5 +1,5 @@
-import { describe, expect, test } from "bun:test"
-import { mkdtempSync, readdirSync, readFileSync, writeFileSync } from "node:fs"
+import { describe, expect, onTestFinished, test } from "bun:test"
+import { mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from "node:fs"
 import { tmpdir } from "node:os"
 import { join } from "node:path"
 import { pathToFileURL } from "node:url"
@@ -8,7 +8,9 @@ import { CliError, exitCodeFor, parseArgs, readJsonFile, writeJsonAtomic } from
 import { isCliEntry } from "./entry-guard.mjs"
 
 function tempDir() {
-	return mkdtempSync(join(tmpdir(), "report-tools-"))
+	const dir = mkdtempSync(join(tmpdir(), "report-tools-"))
+	onTestFinished(() => rmSync(dir, { recursive: true, force: true }))
+	return dir
 }
 
 describe("parseArgs", () => {

package/dist/skills/ulw-research/scripts/outcome.test.ts

@@ -1,5 +1,5 @@
-import { describe, expect, test } from "bun:test"
-import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, writeFileSync } from "node:fs"
+import { describe, expect, onTestFinished, test } from "bun:test"
+import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from "node:fs"
 import { tmpdir } from "node:os"
 import { join } from "node:path"
 
@@ -22,8 +22,14 @@ import {
 const STAMP = "20260101-120000"
 const START_LOCAL = new Date(2026, 0, 1, 12, 0, 0)
 
+function tempRoot(): string {
+	const root = mkdtempSync(join(tmpdir(), "ulw-outcome-"))
+	onTestFinished(() => rmSync(root, { recursive: true, force: true }))
+	return root
+}
+
 function sessionDir(): string {
-	const dir = join(mkdtempSync(join(tmpdir(), "ulw-outcome-")), STAMP)
+	const dir = join(tempRoot(), STAMP)
 	mkdirSync(dir)
 	return dir
 }
@@ -57,7 +63,7 @@ describe("initManifest", () => {
 
 	test("#given a session dir without a YYYYMMDD-HHMMSS basename #when initialised #then it throws a typed error", () => {
 		// given
-		const dir = mkdtempSync(join(tmpdir(), "ulw-outcome-"))
+		const dir = tempRoot()
 		// when / then
 		expect(() => initManifest({ sessionDir: dir, promised: ["pdf"], lane: null })).toThrow(OutcomeError)
 	})

package/dist/skills/ulw-research/scripts/report-tools.test.ts

@@ -1,5 +1,5 @@
-import { describe, expect, test } from "bun:test"
-import { mkdtempSync, mkdirSync, readFileSync, writeFileSync } from "node:fs"
+import { describe, expect, onTestFinished, test } from "bun:test"
+import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs"
 import { tmpdir } from "node:os"
 import { delimiter, join } from "node:path"
 
@@ -10,6 +10,7 @@ const FIXTURES = join(import.meta.dir, "tests", "fixtures")
 
 function sessionDir() {
 	const root = mkdtempSync(join(tmpdir(), "report-tools-cli-"))
+	onTestFinished(() => rmSync(root, { recursive: true, force: true }))
 	const dir = join(root, "20260101-120000")
 	mkdirSync(dir)
 	return dir

package/dist/skills/visual-qa/scripts/cli.test.ts

@@ -1,5 +1,5 @@
-import { describe, expect, test } from "bun:test"
-import { mkdtempSync, writeFileSync } from "node:fs"
+import { describe, expect, onTestFinished, test } from "bun:test"
+import { mkdtempSync, rmSync, writeFileSync } from "node:fs"
 import { tmpdir } from "node:os"
 import { join } from "node:path"
 
@@ -7,7 +7,9 @@ import { run, runImageDiff, runTuiCheck } from "./cli"
 import { encodeRgbaPng, solidRgba } from "./png-synth"
 
 function tempDir(): string {
-	return mkdtempSync(join(tmpdir(), "visual-qa-"))
+	const dir = mkdtempSync(join(tmpdir(), "visual-qa-"))
+	onTestFinished(() => rmSync(dir, { recursive: true, force: true }))
+	return dir
 }
 
 describe("runImageDiff", () => {

package/dist/tools/delegate-task/executor-types.d.ts

@@ -12,6 +12,7 @@ export interface ExecutorContext {
     browserProvider?: BrowserAutomationProvider;
     agentOverrides?: AgentOverrides;
     sisyphusAgentConfig?: SisyphusAgentConfig;
+    claudeCodeAgentsEnabled?: boolean;
     modelFallbackControllerAccessor?: ModelFallbackControllerAccessor;
     onSyncSessionCreated?: (event: {
         sessionID: string;

package/dist/tools/delegate-task/sync-session-creator.d.ts

@@ -5,6 +5,7 @@ export declare function createSyncSession(client: OpencodeClient, input: {
     agentToUse: string;
     description: string;
     defaultDirectory: string;
+    category?: string;
     categoryModel?: DelegatedModelConfig;
 }): Promise<{
     ok: true;

package/dist/tools/delegate-task/types.d.ts

@@ -124,6 +124,8 @@ export interface DelegateTaskToolOptions {
     /** Reload model-bearing config at task invocation time so edits are honored without rebuilding tools. */
     loadCurrentModelConfig?: () => Pick<OhMyOpenCodeConfig, "agents" | "categories">;
     sisyphusAgentConfig?: SisyphusAgentConfig;
+    /** Mirrors `claude_code.agents`; when false, `.claude/agents` definitions are not read during subagent matching. */
+    claudeCodeAgentsEnabled?: boolean;
     modelFallbackControllerAccessor?: ModelFallbackControllerAccessor;
     onSyncSessionCreated?: (event: SyncSessionCreatedEvent) => Promise<void>;
     syncPollTimeoutMs?: number;

package/dist/tools/session-manager/sdk-storage.d.ts

@@ -1,8 +1,21 @@
 import type { PluginInput } from "@opencode-ai/plugin";
 import type { SessionMessage, SessionMetadata, TodoItem } from "./types";
-export declare function getSdkMainSessions(client: PluginInput["client"], directory?: string): Promise<SessionMetadata[]>;
-export declare function getSdkAllSessions(client: PluginInput["client"]): Promise<string[]>;
+type ExperimentalSessionList = (input: {
+    roots?: boolean;
+    cursor?: number;
+    limit: number;
+}) => Promise<unknown>;
+export type GlobalSessionClient = {
+    experimental: {
+        session: {
+            list: ExperimentalSessionList;
+        };
+    };
+};
+export declare function getSdkMainSessions(client: PluginInput["client"], directory?: string, globalClient?: GlobalSessionClient, limit?: number): Promise<SessionMetadata[]>;
+export declare function getSdkAllSessions(client: PluginInput["client"], globalClient?: GlobalSessionClient, limit?: number): Promise<string[]>;
 export declare function sdkSessionExists(client: PluginInput["client"], sessionID: string): Promise<boolean>;
 export declare function getSdkSessionMessages(client: PluginInput["client"], sessionID: string): Promise<SessionMessage[]>;
 export declare function getSdkSessionTodos(client: PluginInput["client"], sessionID: string): Promise<TodoItem[]>;
 export declare function shouldFallbackFromSdkError(error: unknown): boolean;
+export {};

package/dist/tools/session-manager/session-error.d.ts

@@ -0,0 +1,7 @@
+export declare function describeSessionError(error: unknown): string;
+export declare function toSessionError(error: unknown): Error;
+export type SkippedSession = {
+    readonly id: string;
+    readonly reason: string;
+};
+export declare function formatSkippedSessions(skipped: readonly SkippedSession[]): string;

package/dist/tools/session-manager/storage.d.ts

@@ -1,12 +1,14 @@
 import type { PluginInput } from "@opencode-ai/plugin";
+import { type GlobalSessionClient } from "./sdk-storage";
 import type { SessionInfo, SessionMessage, SessionMetadata, TodoItem } from "./types";
 export interface GetMainSessionsOptions {
     directory?: string;
+    limit?: number;
 }
-export declare function setStorageClient(client: PluginInput["client"]): void;
+export declare function setStorageClient(client: PluginInput["client"], globalClient?: GlobalSessionClient): void;
 export declare function resetStorageClient(): void;
 export declare function getMainSessions(options: GetMainSessionsOptions): Promise<SessionMetadata[]>;
-export declare function getAllSessions(): Promise<string[]>;
+export declare function getAllSessions(limit?: number): Promise<string[]>;
 export { getMessageDir } from "../../shared/opencode-message-dir";
 export declare function sessionExists(sessionID: string): Promise<boolean>;
 export declare function readSessionMessages(sessionID: string): Promise<SessionMessage[]>;