omnius 1.0.859 → 1.0.860

package/dist/index.js

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/dist/index.js
-size: 37502243 bytes
-sha256: a96343966b01daadfb5e65d2c3e37f3925126949b4fba8bbc25bbef23f8b7510
+size: 37501867 bytes
+sha256: c8a6351bd6377859e05a76c5a058d67f79dae585b8be315c2c53b921ad995ba7

package/dist/library.js

@@ -343141,8 +343141,7 @@ function createOpenCodeCompatibilityRequestHeaders(omniusVersion, sessionId) {
     "x-session-affinity": session,
     "X-Session-Id": session,
     "x-opencode-session": session,
-    "x-opencode-project": createHash43("sha1").update("omnius").digest("hex"),
-    "x-opencode-request": compatibilityIdentifier("msg_", false)
+    "x-opencode-project": createHash43("sha1").update("omnius").digest("hex")
   };
 }
 var OPENCODE_COMPATIBILITY_SYSTEM_PREFIX = `You are an AI agent running in OpenCode, a coding agent harness. Help the user accomplish their goals using the tools you have available.
@@ -343466,7 +343465,7 @@ function parseKeylessInferenceRegistry(html) {
 var rows = [
   ["muse-spark-1.3-contributor-free", "Muse Spark 1.3 Free", 1048576, 131072, void 0, true, true],
   ["step-5-preview-free", "Step 5 Preview Free", 1e6, 65536, 1e6, true],
-  ["ling-3.1-flash-free", "Ling 3.1 Flash Free", 262144, 32768, void 0, false],
+  ["nemotron-3-ultra-free", "Nemotron 3 Ultra Free", 1e6, 128e3, void 0, void 0],
   ["mimo-v2.6-flash-free", "MiMo-V2.6-Flash Free", 2e5, 32e3, void 0, void 0],
   ["nemotron-3.5-lightning-free", "Nemotron 3.5 Lightning Free", 262144, 262144, void 0, true],
   ["big-pickle", "Big Pickle", 2e5, 32e3, 16e4, true],
@@ -345983,7 +345982,7 @@ var RemoteInferenceFallback = class _RemoteInferenceFallback {
           continue;
         }
         this.lifecycle(request, "failed", candidate, error);
-        if (this.restrictedProvider(candidate, error))
+        if (this.restrictedModel(candidate, error))
           continue;
         if (errorChain(error).some((value) => value instanceof AttemptTimeout && value.deadlineKind === "remote_aggregate"))
           break;
@@ -346113,7 +346112,7 @@ var RemoteInferenceFallback = class _RemoteInferenceFallback {
         this.lifecycle(request, "failed", candidate, error, frames);
         if (emitted)
           throw new StreamInterruptedError(safeFailure(error, request, candidate, frames));
-        if (this.restrictedProvider(candidate, error))
+        if (this.restrictedModel(candidate, error))
           continue;
         if (errorChain(error).some((value) => value instanceof AttemptTimeout && value.deadlineKind === "remote_aggregate"))
           break;
@@ -346725,10 +346724,10 @@ ${line}`).join("");
       rateLimited
     });
   }
-  restrictedProvider(route, error) {
+  restrictedModel(route, error) {
     if (route.baseUrl !== OPENCODE_INFERENCE_BASE_URL || route.keyless?.clientIdentity !== "opencode" || !errorChain(error).some((value) => value instanceof InferenceProviderAccessError))
       return false;
-    route.accessRestricted = true;
+    route.modelAccessRestricted = true;
     return true;
   }
   async *retryableCandidates(request, deadline) {
@@ -346751,7 +346750,6 @@ ${line}`).join("");
           yield bounded3;
       }
     }.bind(this);
-    const restrictedOrigins = /* @__PURE__ */ new Set();
     const waiting = /* @__PURE__ */ new Map();
     const attempts = /* @__PURE__ */ new Map();
     const priority = /* @__PURE__ */ new Map();
@@ -346762,8 +346760,6 @@ ${line}`).join("");
         waiting.set(key, candidate);
     };
     for await (const candidate of candidates()) {
-      if (restrictedOrigins.has(new URL(candidate.baseUrl).origin))
-        continue;
       const key = routeKey(candidate);
       if (!priority.has(key))
         priority.set(key, priority.size);
@@ -346779,26 +346775,20 @@ ${line}`).join("");
         return;
       attempts.set(key, 1);
       yield candidate;
-      if (candidate.accessRestricted) {
-        restrictedOrigins.add(new URL(candidate.baseUrl).origin);
+      if (candidate.modelAccessRestricted)
         continue;
-      }
-      while (candidate.schemaRecoveryPending && (schemaRetries.get(key) ?? 0) < SUPPORTED_PROVIDER_SCHEMA_ADAPTATIONS.length && this.now() < deadline) {
+      while (!candidate.modelAccessRestricted && candidate.schemaRecoveryPending && (schemaRetries.get(key) ?? 0) < SUPPORTED_PROVIDER_SCHEMA_ADAPTATIONS.length && this.now() < deadline) {
         candidate.schemaRecoveryPending = false;
         schemaRetries.set(key, (schemaRetries.get(key) ?? 0) + 1);
         this.fence(request);
         if (this.compatible(request, candidate))
           yield candidate;
       }
-      defer(candidate);
+      if (!candidate.modelAccessRestricted)
+        defer(candidate);
     }
     while (waiting.size && this.now() < deadline) {
       this.fence(request);
-      for (const [key2, candidate2] of waiting)
-        if (restrictedOrigins.has(new URL(candidate2.baseUrl).origin))
-          waiting.delete(key2);
-      if (!waiting.size)
-        return;
       const entries = [...waiting];
       const ready = entries.filter(([, candidate2]) => (routeCooldown(candidate2, request)?.until ?? 0) <= this.now());
       const [key, candidate] = ready.length ? ready.sort(([a], [b]) => priority.get(a) - priority.get(b))[0] : entries.sort(([, a], [, b]) => (routeCooldown(a, request)?.until ?? 0) - (routeCooldown(b, request)?.until ?? 0))[0];
@@ -346821,18 +346811,17 @@ ${line}`).join("");
       waiting.delete(key);
       attempts.set(key, (attempts.get(key) ?? 0) + 1);
       yield candidate;
-      if (candidate.accessRestricted) {
-        restrictedOrigins.add(new URL(candidate.baseUrl).origin);
+      if (candidate.modelAccessRestricted)
         continue;
-      }
-      while (candidate.schemaRecoveryPending && (schemaRetries.get(key) ?? 0) < SUPPORTED_PROVIDER_SCHEMA_ADAPTATIONS.length && this.now() < deadline) {
+      while (!candidate.modelAccessRestricted && candidate.schemaRecoveryPending && (schemaRetries.get(key) ?? 0) < SUPPORTED_PROVIDER_SCHEMA_ADAPTATIONS.length && this.now() < deadline) {
         candidate.schemaRecoveryPending = false;
         schemaRetries.set(key, (schemaRetries.get(key) ?? 0) + 1);
         this.fence(request);
         if (this.compatible(request, candidate))
           yield candidate;
       }
-      defer(candidate);
+      if (!candidate.modelAccessRestricted)
+        defer(candidate);
     }
   }
   async *candidates(request, deadline, includeCooling = false) {
@@ -347006,10 +346995,9 @@ ${line}`).join("");
             availabilityCaches.set(fetcher, { until: this.now() + (refreshed ? 3e5 : 15e3), ids: available });
           }
         }
-        const availableIds = available === void 0 ? void 0 : new Set(available);
         const anonymousTier = provider.anonymousTier === true && provider.id === "ovh_ai_endpoints" && route.baseUrl === "https://oai.endpoints.kepler.ai.cloud.ovh.net/v1" && !route.apiKey && !provider.anonymousAuthorization;
         const zeroPrice = (value) => (typeof value === "number" || typeof value === "string" && value.trim().length > 0) && Number.isFinite(Number(value)) && Number(value) === 0;
-        const models = raw.data.filter((model) => chatCatalogModel(model, anonymousTier) && (!kiloCatalog || object12(model.pricing) && zeroPrice(model.pricing.prompt) && zeroPrice(model.pricing.completion) && Object.values(model.pricing).every(zeroPrice)) && (!availableIds || availableIds.has(String(model.id))));
+        const models = raw.data.filter((model) => chatCatalogModel(model, anonymousTier) && (!kiloCatalog || object12(model.pricing) && zeroPrice(model.pricing.prompt) && zeroPrice(model.pricing.completion) && Object.values(model.pricing).every(zeroPrice)));
         const unique4 = [...new Map(models.map((model) => [String(model.id), model])).values()];
         const preferredModel = this.builtInPrimaryRequest && openCodeCatalog ? this.primary.model : route.model;
         const preferred = unique4.find((model) => model.id === preferredModel);
@@ -347027,6 +347015,8 @@ ${line}`).join("");
               candidate.nativeStructuredOutput = false;
             else if (selected.json_mode === true || capabilities2?.json_mode === true)
               candidate.nativeStructuredOutput = true;
+            else if (openCodeCatalog)
+              candidate.nativeStructuredOutput = false;
             if (request.tools.length && (selected.tools_calling === false || capabilities2?.tools === false || Array.isArray(selected.supported_parameters) && !selected.supported_parameters.includes("tools")))
               continue;
             const nestedWindow = object12(selected.context_window) ? selected.context_window.tokens : selected.context_window;

package/docs/DISCOVERY.json

@@ -33092,6 +33092,42 @@
         }
       ]
     },
+    {
+      "id": "guide.work-orders-evidence-genuine-opencode-access-repair-20261014",
+      "kind": "guide",
+      "title": "Genuine Opencode Access Repair 20261014",
+      "summary": "Bundled Omnius documentation artifact: docs/work-orders/evidence/genuine-opencode-access-repair-20261014.json.",
+      "keywords": [
+        "work",
+        "orders",
+        "evidence",
+        "genuine",
+        "opencode",
+        "access",
+        "repair",
+        "20261014",
+        "json"
+      ],
+      "maturity": "internal",
+      "audiences": [
+        "maintainer",
+        "large-context-agent"
+      ],
+      "layer": "documentation",
+      "interfaces": [
+        {
+          "type": "file",
+          "target": "docs/work-orders/evidence/genuine-opencode-access-repair-20261014.json"
+        }
+      ],
+      "references": [
+        {
+          "type": "documentation",
+          "target": "docs/work-orders/evidence/genuine-opencode-access-repair-20261014.json",
+          "relation": "canonical-artifact"
+        }
+      ]
+    },
     {
       "id": "guide.work-orders-evidence-installed-fallback-verification-20261012",
       "kind": "guide",
@@ -39141,7 +39177,7 @@
       "id": "guide.work-orders-wo-builtin-provider-authorized-access-20261014-uppercase",
       "kind": "guide",
       "title": "Built-in provider authorized access — 2026-10-14",
-      "summary": "Status: authenticated route implemented; full clean build, current shared-worktree build, and 685 combined focused tests passed. Bundling, a 604-file tarball audit with zero warnings, and a compiler-free fresh npm install passed. Implementation and verification are complete; the live remote-access prerequisite remains unresolved. Live successful remote infer",
+      "summary": "Status: authenticated route implemented; full clean build, current shared-worktree build, and 685 combined focused tests passed. Bundling, a 604-file tarball audit with zero warnings, and a compiler-free fresh npm install passed. Those implementation checks remain valid. Subsequent genuine-client and wire controls established that public access works and Omn",
       "keywords": [
         "work",
         "orders",
@@ -39386,6 +39422,41 @@
         }
       ]
     },
+    {
+      "id": "guide.work-orders-wo-genuine-opencode-access-20261014-uppercase",
+      "kind": "guide",
+      "title": "Genuine OpenCode access and source compatibility — 2026-10-14",
+      "summary": "Status: implemented and verified against the exact scoped source snapshot. All nine active free models passed live bundled Telegram attention, reply generation and review. Actual automatic failover and native tool continuations passed. No mocked inference reply establishes acceptance.",
+      "keywords": [
+        "work",
+        "orders",
+        "WO",
+        "genuine",
+        "opencode",
+        "access",
+        "20261014",
+        "md"
+      ],
+      "maturity": "internal",
+      "audiences": [
+        "maintainer",
+        "large-context-agent"
+      ],
+      "layer": "documentation",
+      "interfaces": [
+        {
+          "type": "file",
+          "target": "docs/work-orders/WO-genuine-opencode-access-20261014.md"
+        }
+      ],
+      "references": [
+        {
+          "type": "documentation",
+          "target": "docs/work-orders/WO-genuine-opencode-access-20261014.md",
+          "relation": "canonical-artifact"
+        }
+      ]
+    },
     {
       "id": "guide.work-orders-wo-inference-fallback-20261012-uppercase",
       "kind": "guide",
@@ -39496,7 +39567,7 @@
       "id": "guide.work-orders-wo-local-admission-provider-access-20261014-uppercase",
       "kind": "guide",
       "title": "Local admission and remote access recovery — 2026-10-14",
-      "summary": "Status: local admission/access classification repair verified and delivered in 539cf00e; TUI/Runner producers verified and committed in a3fd9bab. Authorized remote access remains unresolved. Do not reset operator configuration or restart the live Telegram/TUI session as part of validation.",
+      "summary": "Status: local admission/access classification repair verified and delivered in 539cf00e; TUI/Runner producers verified and committed in a3fd9bab. Remote public access was subsequently diagnosed and repaired in genuine-client validation. Do not reset operator configuration or restart the live Telegram/TUI session as part of validation.",
       "keywords": [
         "work",
         "orders",

package/docs/DISCOVERY.md

@@ -536,6 +536,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-evidence-fallback-model-benchmarks-20261012` | Fallback Model Benchmarks 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-model-benchmarks-20261012.json. |
 | `guide.work-orders-evidence-fallback-quality-installed-20261012` | Fallback Quality Installed 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-quality-installed-20261012.json. |
 | `guide.work-orders-evidence-fallback-reply-contracts-installed-20261012` | Fallback Reply Contracts Installed 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/fallback-reply-contracts-installed-20261012.json. |
+| `guide.work-orders-evidence-genuine-opencode-access-repair-20261014` | Genuine Opencode Access Repair 20261014 | Bundled Omnius documentation artifact: docs/work-orders/evidence/genuine-opencode-access-repair-20261014.json. |
 | `guide.work-orders-evidence-installed-fallback-verification-20261012` | Installed Fallback Verification 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/installed-fallback-verification-20261012.json. |
 | `guide.work-orders-evidence-keyless-compatibility-20261012` | Keyless Compatibility 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/keyless-compatibility-20261012.json. |
 | `guide.work-orders-evidence-keyless-provider-survey-20261012` | Keyless Provider Survey 20261012 | Bundled Omnius documentation artifact: docs/work-orders/evidence/keyless-provider-survey-20261012.json. |
@@ -697,17 +698,18 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-wo-am-gaps-uppercase` | Associative Memory Gap Work Orders | Generated: 2026-04-13 Source: Deep audit of multimodal associative memory systems Status: READY FOR IMPLEMENTATION |
 | `guide.work-orders-wo-automatic-capacity-recovery-and-room-history-20261013-uppercase` | Automatic capacity recovery and consecutive room history | Status: automatic recovery and exact unread-source preservation are implemented and verified through live remote inference in the isolated installed package, for both default eager and file-backed source storage. Supersedes treating ordinary context pressure as an acceptable terminal result in the complete-source work order. Publication and active-runtime up |
 | `guide.work-orders-wo-built-in-free-model-startup-20261012-uppercase` | Built-in free inference and clean Telegram settlement | Status: implemented, tested and committed. Live service limits are recorded below rather than claimed as model availability. Publication and bot restart remain operator-owned. |
-| `guide.work-orders-wo-builtin-provider-authorized-access-20261014-uppercase` | Built-in provider authorized access — 2026-10-14 | Status: authenticated route implemented; full clean build, current shared-worktree build, and 685 combined focused tests passed. Bundling, a 604-file tarball audit with zero warnings, and a compiler-free fresh npm install passed. Implementation and verification are complete; the live remote-access prerequisite remains unresolved. Live successful remote infer |
+| `guide.work-orders-wo-builtin-provider-authorized-access-20261014-uppercase` | Built-in provider authorized access — 2026-10-14 | Status: authenticated route implemented; full clean build, current shared-worktree build, and 685 combined focused tests passed. Bundling, a 604-file tarball audit with zero warnings, and a compiler-free fresh npm install passed. Those implementation checks remain valid. Subsequent genuine-client and wire controls established that public access works and Omn |
 | `guide.work-orders-wo-completion-review-recovery-20261013-uppercase` | Completion review recovery and Telegram liveness | Status: implementation and verification complete; source pushed to origin/main. Operator publication and bot restart remain pending. Follow-up to the live completion-block and typing indicator report on installed Omnius 1.0.852, PID 2845019, telegramtest, and subsequent 1.0.853 restart PID 3697027. |
 | `guide.work-orders-wo-computer-use-loop-reconciliation-20261013-uppercase` | Reconcile legacy desktop tools with the rapid computer-use controller | Status: reconciliation implemented; isolated build, focused regressions and real read-only desktop observation/capture verified. Live Kev/Moondream inference and visual input acceptance remain incomplete: the model services and operator profile have not been provisioned. The earlier host GPU-health fault is historical; current readiness and remaining deploym |
 | `guide.work-orders-wo-escape-crash-and-gpu-incident-20261013-uppercase` | Escape exit and NVIDIA device incident | Status: parallel read-only investigation complete. GNOME Terminal crashed in GTK; one A100 is unqueryable and the broker correctly blocks new CUDA work. The exact GTK trigger and physical GPU failure cause remain unresolved. The computer-use reconciliation is delivered separately; a broad application refactor is not established as a repair for either failure |
 | `guide.work-orders-wo-fallback-contract-cooldown-20261013-uppercase` | Keep internal inference failures within their contract and budget | Status: contract cooldown, aggregate deadline and phase output allocations verified; final installed full-source public-path acceptance passed. |
 | `guide.work-orders-wo-fallback-quality-order-20261012-uppercase` | Benchmark-informed fallback cascade | Status: implemented and verified. Publication and active runtime replacement remain with the user. Telegram progress presentation stays deferred. |
 | `guide.work-orders-wo-fallback-reply-contracts-20261012-uppercase` | Fallback reply contracts and live Telegram regressions | Status: implemented and verified in source and the freshly installed package. Publishing and restarting the active bot remain user-owned. The subsequent OpenCode-first capability ordering is tracked in its work order; Telegram progress presentation remains explicitly deferred. |
+| `guide.work-orders-wo-genuine-opencode-access-20261014-uppercase` | Genuine OpenCode access and source compatibility — 2026-10-14 | Status: implemented and verified against the exact scoped source snapshot. All nine active free models passed live bundled Telegram attention, reply generation and review. Actual automatic failover and native tool continuations passed. No mocked inference reply establishes acceptance. |
 | `guide.work-orders-wo-inference-fallback-20261012-uppercase` | Local inference outage fallback | Status: source implementation complete and verified. Installed-runtime activation is separate; the running daemon has not been upgraded or restarted. |
 | `guide.work-orders-wo-keyless-fallback-coverage-20261012-uppercase` | Keyless automatic fallback coverage and compatibility | Status: implemented and verified. Publication and replacement of the running bot remain user-owned; the running bot has not been restarted by this work. |
 | `guide.work-orders-wo-live-native-cascade-ui-freeze-20261013-uppercase` | Live native-planning cascade and TUI responsiveness | Status: implementation and live packaged acceptance complete. The operator reported publication in progress; runtime restart/activation is not yet verified. Follow-up to the live 1.0.851 report after the built-in free-model integration; do not substitute another ping-only check. |
-| `guide.work-orders-wo-local-admission-provider-access-20261014-uppercase` | Local admission and remote access recovery — 2026-10-14 | Status: local admission/access classification repair verified and delivered in 539cf00e; TUI/Runner producers verified and committed in a3fd9bab. Authorized remote access remains unresolved. Do not reset operator configuration or restart the live Telegram/TUI session as part of validation. |
+| `guide.work-orders-wo-local-admission-provider-access-20261014-uppercase` | Local admission and remote access recovery — 2026-10-14 | Status: local admission/access classification repair verified and delivered in 539cf00e; TUI/Runner producers verified and committed in a3fd9bab. Remote public access was subsequently diagnosed and repaired in genuine-client validation. Do not reset operator configuration or restart the live Telegram/TUI session as part of validation. |
 | `guide.work-orders-wo-native-transport-fresh-install-20261012-uppercase` | Native transport failure in the fresh npm installation gate | Status: implemented and verified. Publication remains with the user. |
 | `guide.work-orders-wo-opencode-all-free-models-20261012-uppercase` | All OpenCode free models in the fallback cascade | Status: implemented and verified. Publication and runtime replacement remain with the user. The subsequent live-reply fixes are tracked separately in fallback reply contracts. The original preferred-first/provider-fairness ordering recorded below has been superseded by benchmark-informed priority at the user's subsequent request. |
 | `guide.work-orders-wo-opencode-production-compatibility-20261012-uppercase` | OpenCode production request compatibility | Status: implemented and verified. Telegram presentation is also completed. Publication and active-runtime restart remain with the operator. Step's native attention-format compatibility remains unverified after a provider limit; the working cascade can continue to other compatible models. |

package/docs/opencode-free-model-discovery.md

@@ -12,7 +12,7 @@ Omnius requires explicit zero input and output costs, including any advertised c
 
 The catalog lists paid models too. The inference `/v1/models` response supplies IDs without cost or capability metadata and cannot establish free eligibility. Free suffixes are insufficient: Big Pickle has zero costs without that suffix, and old free rows can remain deprecated or unavailable.
 
-An optional intersection with `https://opencode.ai/inference/v1/models` removes free metadata rows that the gateway no longer lists. This unauthenticated endpoint returned 83 IDs on 2026-10-12; `exo-free`, `ling-3.0-flash-fin-free` and `nemotron-3-ultra-free` were absent. These observations are not hardcoded exclusions. A valid empty list excludes all models; missing, malformed or oversized discovery preserves the canonical zero-cost metadata instead of treating a discovery outage as an authoritative empty provider. ID-only rows can never add a model or supply price, tools, schema or context metadata.
+Listing hints from `https://opencode.ai/inference/v1/models` establish positive listing evidence, not exhaustive exclusions. A genuine installed-client request returned a valid Nemotron Ultra reply on 2026-10-14 while that alias remained omitted; canonical active zero-cost metadata therefore determines eligibility. This unauthenticated endpoint returned 83 IDs on 2026-10-12; `exo-free`, `ling-3.0-flash-fin-free` and `nemotron-3-ultra-free` were absent. These observations are not hardcoded exclusions. Empty, partial, missing, malformed or oversized availability discovery preserves canonical zero-cost eligibility; an explicitly empty valid canonical catalog still excludes all models. ID-only rows can never add a model or supply price, tools, schema or context metadata.
 
 The [complete free-model follow-up](work-orders/WO-opencode-all-free-models-20261012.md)
 removes the previous 16-model cascade cutoff: all eligible OpenCode models within
@@ -28,10 +28,12 @@ Two further synthetic streamed probes also returned HTTP 200 with normal termina
 
 Current [App metadata](https://github.com/anomalyco/opencode/blob/15b24ae12ddb8b7ae3e923b286b4032761bee510/packages/core/src/app.ts) and [model request construction](https://github.com/anomalyco/opencode/blob/15b24ae12ddb8b7ae3e923b286b4032761bee510/packages/core/src/session/model-request.ts) supply the header format. The public [inference proxy](https://github.com/anomalyco/opencode/blob/15b24ae12ddb8b7ae3e923b286b4032761bee510/packages/console/app/src/lib/inference-proxy.ts) delegates free-tier admission to the inference service; its server-side guard was not found in this public source tree. No TLS fingerprint or hidden-signature requirement has been established. See the provider's [access discussion](https://github.com/anomalyco/opencode/issues/49580).
 
-The module exports fixed header, system-prefix and core-tool metadata from that pinned source, plus an OpenAI-style catalog normalizer. Its request-header factory generates fresh source-format identifiers and uses a stable SHA-1 of the public namespace `omnius` as its project marker. It can retain a caller-owned session ID for affinity while issuing a fresh message ID per request. It reads no user credentials, private project paths or existing conversation/session data and supplies no Authorization header or execution implementation. A truthful `omnius/unknown` attribution is allowed when no application version is available.
+The module exports fixed header, system-prefix and core-tool metadata from that pinned source, plus an OpenAI-style catalog normalizer. Its request-header factory generates a source-format session identifier and uses a stable SHA-1 of the public namespace `omnius` as its project marker. It can retain a caller-owned session ID for affinity. The obsolete `x-opencode-request` header is omitted: single-header live controls found it caused 403 while the unchanged body succeeded without it. It reads no user credentials, private project paths or existing conversation/session data and supplies no Authorization header or execution implementation. A truthful `omnius/unknown` attribution is allowed when no application version is available.
 
 Callers must keep host authorization, original tool schemas, history and tool-choice bindings, invert any existing tool-name aliases, and reject calls to compatibility definitions that have no host execution authority. The parser's catalog-only receipt remains separate from live route admission. Identifier generation follows upstream [Identifier](https://github.com/anomalyco/opencode/blob/15b24ae12ddb8b7ae3e923b286b4032761bee510/packages/schema/src/identifier.ts) and [SessionID](https://github.com/anomalyco/opencode/blob/15b24ae12ddb8b7ae3e923b286b4032761bee510/packages/schema/src/session-id.ts); core metadata follows the [read](https://github.com/anomalyco/opencode/blob/15b24ae12ddb8b7ae3e923b286b4032761bee510/packages/core/src/tool/plugin/read.ts) and [shell](https://github.com/anomalyco/opencode/blob/15b24ae12ddb8b7ae3e923b286b4032761bee510/packages/core/src/tool/plugin/shell.ts) definitions.
 
+Current source comparisons, genuine-client controls and Telegram acceptance are recorded in the [2026-10-14 work order](work-orders/WO-genuine-opencode-access-20261014.md). Unknown native grammar support uses prompt-only formatting on validated built-in routes, preserving full host schemas and callbacks.
+
 The adapted discovery is covered by OpenCode's [MIT license](https://github.com/anomalyco/opencode/blob/15b24ae12ddb8b7ae3e923b286b4032761bee510/LICENSE):
 
 ```text

package/docs/work-orders/WO-builtin-provider-authorized-access-20261014.md

@@ -1,10 +1,10 @@
 # Built-in provider authorized access — 2026-10-14
 
-Status: authenticated route implemented; full clean build, current shared-worktree build, and 685 combined focused tests passed. Bundling, a 604-file tarball audit with zero warnings, and a compiler-free fresh npm install passed. Implementation and verification are complete; the live remote-access prerequisite remains unresolved. Live successful remote inference remains unverified because no authorized inference credential is configured and the provider denies public requests.
+Status: authenticated route implemented; full clean build, current shared-worktree build, and 685 combined focused tests passed. Bundling, a 604-file tarball audit with zero warnings, and a compiler-free fresh npm install passed. Those implementation checks remain valid. Subsequent genuine-client and wire controls established that public access works and Omnius's obsolete request header caused the checked denials; an account key is not required for the restored anonymous path. See [genuine access repair](WO-genuine-opencode-access-20261014.md) for the live results and current acceptance status.
 
 The operator requires actual built-in model replies before publishing. An old official 1.0.856 protocol projection and current 1.0.858 both receive the same explicit client-restriction HTTP 403 today. This must not be misreported as an output parser failure or fixed by claiming a successful mock response.
 
-## Source and actual missing prerequisite
+## Source and optional credentials
 
 Official provider source at commit `13afea6a1a76360936bbaa7677cff600ad52d452` uses the same pinned HTTPS endpoint and supports `OPENCODE_API_KEY` or an authorized Console credential. Standard local credential/account databases contain zero entries; no provider credential reference is present in the running Omnius process environment. The local Ollama key and local OpenCode server password are not remote inference credentials and must never be reused for this provider. The existence audit did not search arbitrary private files or print secret values.
 
@@ -17,7 +17,7 @@ Evidence: [read-only credential/access audit](evidence/builtin-provider-authoriz
 - Keep credentials in transport headers and privileged host state. Do not persist raw environment keys in model selection/configuration or include them in model messages, tool context, route receipts or error bodies. Preserve manual fallback approval before conversation/tool context can be sent remotely.
 - Treat the credentialed route as authenticated when anonymous fallback is disabled; do not enable other anonymous providers. Check credential scope again at dispatch. Revocation or malformed configuration must fail clearly without silently substituting public credentials.
 - Verify selected and cascade modes, native schema/tool/stream adapters, origin isolation, no context/receipt leaks, mid-request revocation and CLI selection persistence. Run a combined isolated build/package smoke.
-- A positive live model reply through the actual Telegram/runtime path is still required when an authorized access grant is available. Contract tests do not satisfy that acceptance criterion. Do not claim the operator's publication condition is met until this passes.
+- A positive live model reply through the actual Telegram/runtime path remains the acceptance requirement, using supported public access or an authorized credential. Contract tests do not satisfy that acceptance criterion. Do not claim the operator's publication condition is met until this passes.
 
 The operator has been asked for an authorized environment-variable reference only, never the secret itself. No account creation, provider identity bypass, remote credential guess, or unauthorized retry is part of this repair.
 

package/docs/work-orders/WO-genuine-opencode-access-20261014.md

@@ -0,0 +1,81 @@
+# Genuine OpenCode access and source compatibility — 2026-10-14
+
+Status: implemented and verified against the exact scoped source snapshot. All nine active free models passed live bundled Telegram attention, reply generation and review. Actual automatic failover and native tool continuations passed. No mocked inference reply establishes acceptance.
+
+## Proven failure and correction
+
+The original missing-credential explanation was incomplete. Official source intentionally supports anonymous free access with `apiKey: "public"`. A supported request observer in genuine v2.0.29 captured the final serialized request without changing its endpoint, headers or body. A synthetic cross-control isolated the failure to Omnius's added `x-opencode-request` header:
+
+| Live control | HTTP |
+| --- | --- |
+| Genuine body and genuine headers | 200 |
+| Genuine body and original Omnius headers | 403 FreeTierError |
+| Omnius body and genuine headers | 200 |
+| Omnius headers with only User-Agent version updated | 403 |
+| Omnius headers with only x-omnius-client removed | 403 |
+| Omnius headers with only x-opencode-request removed | 200 |
+| Omnius headers with only project ID replaced | 403 |
+
+The repair removes only the obsolete request header. Omnius attribution, session affinity, original bodies, provider-bound authorization and endpoint pinning remain intact. The experiment establishes today's failure, not the gateway's private implementation or the date its behavior changed.
+
+An older cached catalog also routed genuine clients through `/zen/v1`; the current unchanged public catalog routes through `/inference/v1`. Stable 1.19.0 and installed 2.0.10 both succeeded when supplied the current catalog through supported configuration. Omnius already used the current endpoint; changing its endpoint was not the header repair.
+
+## Required work and acceptance
+
+1. Remove the obsolete request header in the shared transport and assert its absence for Chat, Responses, streaming and onboarding. Done.
+2. Treat a FreeTierError as a denial of the attempted model/request. Keep healthy siblings eligible, bound retries and preserve independent credential-revocation fences. Done.
+3. Preserve the producer's original JSON schema across Telegram compatibility retries. Compose schema validation with the producer's semantic callback. Do not relax the harness to count an untyped retry as fully validated. Done.
+4. Treat gateway `/models` entries as positive listing hints. Its omissions are not exhaustive negatives: the genuine installed client returned a valid reply from `nemotron-3-ultra-free` while that alias was omitted. Retain strict active, zero-cost, transport and endpoint eligibility; preserve selected-model and capability priority. Done.
+5. For validated built-in catalog models with unknown native structured-output support, use prompt-only framing from the first request, retaining the full original contract and host callback. Ultra's native-schema request returned an upstream error; a wire-only diagnostic omitting that hint returned valid attention, generation and review. Keep generic 500 classification and other providers unchanged. Done.
+6. Refresh the saved fallback catalog from the same public metadata: include active Ultra and remove now-deprecated Ling 3.1. Unknown raw capabilities remain unknown. Done.
+7. Verify the exact scoped source snapshot with a full build, focused regressions, a private bundle and live Telegram-phase tests, including real automatic failover. Done; receipts below.
+
+No private conversation, provider key, local inference request or Telegram message is needed for these synthetic acceptance tests. The operator's live client and publish staging remain untouched. A running old package needs the repaired package loaded before its transport changes.
+
+## Reproducible genuine-client harness
+
+```sh
+node scripts/live-opencode-access-harness.mjs \
+  --binary /absolute/path/to/official/opencode \
+  --model opencode/muse-spark-1.3-contributor-free \
+  --model opencode/nemotron-3-ultra-free \
+  --output-dir /tmp/omnius-genuine-cli-access-new-run \
+  --tool-policy ask --timeout-ms 120000
+```
+
+`--catalog /absolute/path/to/unchanged-public-catalog.json` is optional. It validates the official provider host/path and zero-cost selected rows, copies the receipt without modification and records its hash. Without it, the report records a free-identifier check rather than claiming verified pricing; the genuine client owns discovery.
+
+The harness uses private application/XDG/project directories, no inherited provider credentials, a fixed synthetic prompt, no automatic approval and timeout cancellation limited to its own process group. It leaves the system HOME setting alone. Ask permissions retain genuine tool schemas; they are not a universal operating-system sandbox. Version 1 runs privately in process; version 2 uses `--standalone`. A pass requires exit 0, exactly `OPENCODE_LIVE_OK`, no truncation and no recorded tools, permissions or errors. Full raw logs remain private; the report contains bounded text, sanitized errors, body digests and separately identified runtime/provider log IDs.
+
+The Telegram harness invokes actual attention routing, chat generation and independent semantic review. It forbids Telegram delivery and native action dispatch. Pinned runs test each model; an explicit cascade run tests automatic provider recovery. All model responses remain live. Contract regression fixtures are reported separately.
+
+## Source and evidence anchors
+
+Official current source: `13afea6a1a76360936bbaa7677cff600ad52d452`; installed v2.0.10 tag: `b8cedc1a7a5e2916bbb65dc1d4b620729c261638`; stable v1.19.0: `733b2c627e5aec39cb33cc22373bdce33053ef2c`.
+
+- Current `packages/core/src/plugin/provider/opencode.ts:337` selects the public sentinel when no credential is configured.
+- `packages/core/src/session/model-request.ts:279` builds the genuine session headers; its supported `http.request` hook at 337 observes the final request without a proxy or binary patch.
+- TUI and `run --standalone` share server-side inference identity. The local server's Basic password is not a remote credential.
+- Provider filtering uses canonical catalog costs and capabilities. The gateway listing does not define all callable aliases.
+- The Console inference proxy delegates anonymous authorization/accounting to the gateway. The inspected public source does not define FreeTierError enforcement.
+
+Current public catalog SHA-256: `94443e070c993dd16f330d05b9d4bc4ecef7684138d19c9fcfe8f423a1f5415d`. It contains nine active eligible free models; other zero-price deprecated entries remain excluded.
+
+The initial repaired eight-model run completed all 26 HTTP calls with 200; it also exposed the retry's missing schema receipt. The subsequent run retained that schema but recorded an intermittent Big Pickle envelope failure, Ultra's native-format upstream failure and a Step endpoint outage. Later Big Pickle byte captures returned valid standard SSE and passed all three phases, so no speculative parser change was made. Failed runs remain evidence; a later pass does not erase them. Final verification retains those failures and confirms recovery without relaxing validation.
+
+
+## Final verification and delivery boundary
+
+The isolated clean workspace build and 1,095 focused tests passed (846 orchestrator, 249 CLI, 38 suites). The package bundle, 605-file tarball audit, README checks and pack passed. Two earlier timing-only test failures under concurrent load passed unchanged with serial CLI execution; their logs remain recorded. The private artifact uses projected declared runtime dependencies; this verification does not claim a new fresh npm install.
+
+Bundle SHA-256: `023444acbff8efddf071415dafa8cb0bf5500b99c5f1863fe238b5fd63248ac3`. All 23 staged runtime/test/harness files match the sealed tested snapshot byte for byte. Subsequent work-order and receipt additions do not change those files.
+
+Live acceptance used that bundle with ordinary Node settings and no provider key:
+
+- Nine models, 18 cases covering attention, reply generation and independent review: passed; all 29 inference HTTP calls returned 200. Big Pickle and Lightning needed bounded attention retries with the full original contract retained.
+- Real automatic cascade: Big Pickle produced rejected output during attention and again during review; both phases recovered through Muse. The five HTTP calls remained live, and the reviewed reply completed successfully.
+- Native tool calls: Muse Responses and Ultra Chat each generated `diagnostic_add(19,23)`, the host actually computed 42, and each model continued with the actual result. Four live calls passed; two arithmetic tool actions executed.
+
+Telegram network delivery/ACK and the native action runner remain outside this inference harness. No test sent a Telegram message, generated local GPU inference, changed user configuration, restarted a live session or published a package. The operator owns publication; existing clients must load the repaired package afterward.
+
+[Curated genuine-client controls, retained failures, sealed verification and final live receipts](evidence/genuine-opencode-access-repair-20261014.json).

package/docs/work-orders/WO-local-admission-provider-access-20261014.md

@@ -1,6 +1,6 @@
 # Local admission and remote access recovery — 2026-10-14
 
-Status: local admission/access classification repair verified and delivered in `539cf00e`; TUI/Runner producers verified and committed in `a3fd9bab`. Authorized remote access remains unresolved. Do not reset operator configuration or restart the live Telegram/TUI session as part of validation.
+Status: local admission/access classification repair verified and delivered in `539cf00e`; TUI/Runner producers verified and committed in `a3fd9bab`. Remote public access was subsequently diagnosed and repaired in [genuine-client validation](WO-genuine-opencode-access-20261014.md). Do not reset operator configuration or restart the live Telegram/TUI session as part of validation.
 
 ## Observed production causes
 
@@ -16,7 +16,7 @@ Status: local admission/access classification repair verified and delivered in `
 2. Carry the host's original finite admission budget through Telegram's central inference producer. Preserve short generation/body liveness budgets, explicit user local limits, Stop, and original cancellation. HTTP headers do not reliably identify the start of generation for unary responses: the original finite ceiling remains authoritative without pretending broker phase evidence exists.
 3. Pass exact retained broker queue contracts back to the existing resume owner, with the same logical ID and bodyless retry; do not resubmit the accepted prompt or discover remote providers for that retained job.
 4. Recheck managed local readiness on each request so cleared holds and recovered devices are not hidden behind a stale outage cache.
-5. Classify only the exact proven client restriction, at its pinned origin, as `access_denied`. Skip its siblings for this cascade only, rechecking fresh requests. Preserve model-specific handling for generic 403s.
+5. Classify only the exact proven client restriction, at its pinned origin, as `access_denied`. The later genuine-client controls disproved provider-wide sibling suppression: deny only the affected model for this request, retaining healthy siblings and fresh-request rechecks. Preserve model-specific handling for generic 403s.
 6. Persist/render allowlisted hold/access reasons and response digests; never retain raw provider bodies or keys in route history.
 7. Verify focused regressions, combined isolated build, package integrity, and a real local production-path response. Record limitations honestly; do not promise an external free endpoint can never reject or rate-limit requests.
 
@@ -32,7 +32,7 @@ Combined isolated workspace build and 503 focused tests passed. The real `Telegr
 
 Live evidence: [actual Telegram inference wrapper](evidence/telegram-local-inference-live-20261014.json). [Current production route receipts](evidence/local-recovery-production-routes-20261014.json) also show local router/chat/review/actor successes after hold release, followed by an actor timeout at the old installed client’s exact 20-second first-frame limit. The client repair requires the new package to be loaded.
 
-The isolated package passed bundling, a 598-file tarball audit with zero warnings, and a compiler-free fresh npm install (required SQLite prebuild loaded). The live client’s global `/fallback manual` setting was preserved. TUI/Runner producers are implemented below; [authenticated provider support](WO-builtin-provider-authorized-access-20261014.md) is implemented and separately verified; public endpoint access is still denied, so this is not a claim of restored remote replies. The user's publish staging and running sessions remain untouched. A new package must be published/loaded to apply client repairs to those sessions; the operator hold release already affects the current broker.
+The isolated package passed bundling, a 598-file tarball audit with zero warnings, and a compiler-free fresh npm install (required SQLite prebuild loaded). The live client’s global `/fallback manual` setting was preserved. TUI/Runner producers are implemented below; [authenticated provider support](WO-builtin-provider-authorized-access-20261014.md) is implemented and separately verified; the later [genuine-client repair](WO-genuine-opencode-access-20261014.md) records restored public replies and supersedes the earlier unresolved-access conclusion. The user's publish staging and running sessions remain untouched. A new package must be published/loaded to apply client repairs to those sessions; the operator hold release already affects the current broker.
 
 ## Shared TUI and Runner producer follow-up