omp-fabric 1.18.3 → 1.19.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 1.19.0
+
+### Changed
+
+- `omp.*` no longer reaches a core tool OMP itself has turned off. Discovery omits the denied names, and a call rejects with `OMP tool bash is not permitted by OMP's active tool selection`; a child worker's inherited `OMP_FABRIC_TOOL_ALLOWLIST` keeps its own message and the two intersect. A denied name is refused before the registry's name repair runs, because a hidden action otherwise looks like a typo: with `grep` denied, `omp.grep({ pattern, path })` repaired into `omp.find` through the shared synonym class and searched for filenames, which validates and answers the wrong question. Providers declare this through the optional `denialMessage(actionName)` hook. The authority is the host's active set with Fabric's own hiding undone, because full code mode removes the native core tools before the runtime activates: reading `getActiveTools()` at that moment returns `["fabric_exec", "task"]`, measured by driving the extension entry, which would have denied all seven core calls in the only mode where the adapter is installed. It is read per call rather than snapshotted, so toggling a tool takes effect without rebuilding the runtime, and an empty host set reads as unknown and denies nothing.
+- The kernel guidance names the denied core tools for the session and stops recommending `omp.edit`/`omp.write` when the host has turned them off, so the model is not steered toward a call that can only fail. The guest type declaration is unchanged: property-existence diagnostics (TS2339) are deliberately dropped by the guest checker, so narrowing the declared surface would have been decoration rather than a gate.
+
+## 1.18.4
+
+### Fixed
+
+- Full code mode names the file-editing path. It hides OMP's native `edit` and `write` from the model by default — `effectiveToolCaptureConfig` strips every core name but `fabric_exec` from `keepVisible` — while the guidance mentioned `omp.edit`/`omp.write` only as return-shape examples, so a model that had lost its edit tool reached for `omp.bash` and tried to reshape TypeScript through `sed`, a heredoc and `node -e` across three consecutive turns before reverting its own work with `git checkout`. The clause states a preference rather than a prohibition, so shell-driven formatters and codemods stay allowed, which is what `prewalk.detectShellWrites` exists to catch; and it rides `fabricExecutionKernelGuidance` rather than the replaceable execution slot, so a custom execution profile registered with `placement: "replace"` cannot delete it. An `omp.write` / `omp.read` round-trip of a payload carrying backticks, `${}`, a backslash, an escaped quote, `\u00e9` and an emoji returns byte-identical at 223 of 223 characters, so the edit path itself was never the defect.
+- The advisor no longer prescribes tools it has not seen. Its prompt receives the parent event and recent transcript but never the host's tool surface, and on the escaping failure above it emitted a blocker telling the main agent to use "the session's native `write` or `edit` tool directly on the file path" — advice full code mode makes impossible to follow. Both advisor prompts now require transcript evidence that a tool is callable before naming it, and state that the main agent's file tools are `omp.edit`/`omp.write` under full code mode. The copy in `fabric-ambient` is corrected alongside `fabric-advisor`, since both create the same `advisor` actor through the same setup program.
+
 ## 1.18.3
 
 ### Fixed

package/dist/chunks/{chunk-N5DHCLLX.js → chunk-4J65SMNI.js}

@@ -8,7 +8,7 @@ import {
   loadTieredIndex,
   reconstructSessionLineage,
   searchMemoryIndex
-} from "./chunk-2KEWFW56.js";
+} from "./chunk-SDZXNTBF.js";
 import {
   compareLexical,
   normalizeMemoryPhrase,
@@ -23,11 +23,11 @@ import {
   overrideSessionDir,
   resolveScope,
   resolveSessionTarget
-} from "./chunk-FX3XLQYI.js";
+} from "./chunk-MQSRZC2O.js";
 import {
   expandSessionEntriesChecked,
   normalizeSession
-} from "./chunk-6QBPSZJ5.js";
+} from "./chunk-BPMSLBX4.js";
 import {
   hash,
   hashLcmPayload,
@@ -2467,4 +2467,4 @@ export {
   normalizeMemoryArgs,
   MemoryProvider
 };
-//# sourceMappingURL=chunk-N5DHCLLX.js.map
+//# sourceMappingURL=chunk-4J65SMNI.js.map

package/dist/chunks/{chunk-T5ZA5YRU.js → chunk-52JBWP2C.js}

@@ -1,6 +1,6 @@
 import {
   isOmpShellRef
-} from "./chunk-6N4XGAZY.js";
+} from "./chunk-ZFMSJLQE.js";
 
 // src/audit/projection.ts
 var emptyProjection = (args) => ({
@@ -783,4 +783,4 @@ export {
   isFabricExecutionTraceV1,
   readFabricExecutionTraceV1
 };
-//# sourceMappingURL=chunk-T5ZA5YRU.js.map
+//# sourceMappingURL=chunk-52JBWP2C.js.map

package/dist/chunks/{chunk-7OAFYAJC.js → chunk-5BFEXYPV.js}

@@ -10,11 +10,11 @@ import {
   lifecycleSourceIdentity,
   loadModelUsage,
   useBudgetLedger
-} from "./chunk-VYB7ROEH.js";
+} from "./chunk-YE3CSYYB.js";
 import {
   normalizeModelAliases,
   resolveAvailableOmpModel
-} from "./chunk-GIBZGL4G.js";
+} from "./chunk-HKRSGUUQ.js";
 import {
   parseFabricOwnedModelGuidance,
   resolveFabricModelGuidance
@@ -685,4 +685,4 @@ if (isMain) {
 export {
   runResidentHostFromConfigPath
 };
-//# sourceMappingURL=chunk-7OAFYAJC.js.map
+//# sourceMappingURL=chunk-5BFEXYPV.js.map

package/dist/chunks/{chunk-6QBPSZJ5.js → chunk-BPMSLBX4.js}

@@ -1,7 +1,7 @@
 import {
   readFabricBranchSummaryDetails,
   readFabricProjectionTrace
-} from "./chunk-4HQDSTHN.js";
+} from "./chunk-YBNCEX5E.js";
 
 // src/memory/normalize.ts
 import fs from "node:fs";
@@ -644,4 +644,4 @@ export {
   expandSessionEntries,
   expandSessionEntriesChecked
 };
-//# sourceMappingURL=chunk-6QBPSZJ5.js.map
+//# sourceMappingURL=chunk-BPMSLBX4.js.map

package/dist/chunks/{chunk-C5JMLDIM.js → chunk-DC3KUZQ5.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-NX2G7BRO.js";
 import {
   rawContextTokens
-} from "./chunk-WMB6QCWX.js";
+} from "./chunk-Z5YXOMNU.js";
 import {
   compactionRequestBoundsError,
   encodeCompactionRequest
@@ -463,4 +463,4 @@ export {
   buildPeerCards,
   awaitPeerSettle
 };
-//# sourceMappingURL=chunk-C5JMLDIM.js.map
+//# sourceMappingURL=chunk-DC3KUZQ5.js.map

package/dist/chunks/{chunk-BMIE4PIL.js → chunk-DTG3DYVC.js}

@@ -13,7 +13,7 @@ import {
 import {
   sessionDirsForCwd,
   sessionsDirRoot
-} from "./chunk-FX3XLQYI.js";
+} from "./chunk-MQSRZC2O.js";
 import {
   stableJsonHash,
   stableJsonHashArrayAsync
@@ -25,7 +25,7 @@ import {
 import {
   FABRIC_EXECUTION_TRACE_KIND,
   readFabricExecutionTraceV1
-} from "./chunk-T5ZA5YRU.js";
+} from "./chunk-52JBWP2C.js";
 
 // src/entropy/types.ts
 var ENTROPY_METRIC_VERSION = 2;
@@ -2208,4 +2208,4 @@ export {
   formatEntropyCompileNotice,
   runEntropyTrial
 };
-//# sourceMappingURL=chunk-BMIE4PIL.js.map
+//# sourceMappingURL=chunk-DTG3DYVC.js.map

package/dist/chunks/{chunk-GIBZGL4G.js → chunk-HKRSGUUQ.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-KAD7UWT2.js";
 import {
   OMP_CORE_TOOL_NAME_SET
-} from "./chunk-6N4XGAZY.js";
+} from "./chunk-ZFMSJLQE.js";
 
 // src/core/model-resolution.ts
 var PROVIDER_MODEL_RE = /^[^\s/]+\/[^\s/]+$/;
@@ -1603,4 +1603,4 @@ export {
   saveFabricConfig,
   resolveAgentDir
 };
-//# sourceMappingURL=chunk-GIBZGL4G.js.map
+//# sourceMappingURL=chunk-HKRSGUUQ.js.map

package/dist/chunks/{chunk-FX3XLQYI.js → chunk-MQSRZC2O.js}

@@ -1,6 +1,6 @@
 import {
   readSessionHeader
-} from "./chunk-6QBPSZJ5.js";
+} from "./chunk-BPMSLBX4.js";
 
 // src/memory/discovery.ts
 import crypto from "node:crypto";
@@ -252,4 +252,4 @@ export {
   InvalidProjectScopeError,
   resolveScope
 };
-//# sourceMappingURL=chunk-FX3XLQYI.js.map
+//# sourceMappingURL=chunk-MQSRZC2O.js.map

package/dist/chunks/{chunk-2LGLDM34.js → chunk-R4EFMCIY.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-4A4MVZQW.js";
 import {
   FABRIC_NESTED_TOOL_CALL_ID_PREFIX
-} from "./chunk-RBA54WC7.js";
+} from "./chunk-X2SKPWJA.js";
 import {
   stableJsonHash
 } from "./chunk-7363CD5A.js";
@@ -20,7 +20,7 @@ import {
   FabricResolutionError,
   FabricTraceSafeError,
   executionOutcomeFromError
-} from "./chunk-T5ZA5YRU.js";
+} from "./chunk-52JBWP2C.js";
 
 // src/core/action-registry.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
@@ -1515,6 +1515,8 @@ var ActionRegistry = class {
         suggestions: []
       };
     }
+    const denial = provider.denialMessage?.(actionName);
+    if (denial) throw new FabricResolutionError(denial);
     if (!allowRepair) return { suggestions: [] };
     const declared = (await this.#declaredActionNames(provider, context)).filter(
       (name) => !activeQuarantinedRefNames().has(`${provider.name}.${name}`)
@@ -1611,4 +1613,4 @@ export {
   NESTED_TOOL_CALL_ID_PREFIX,
   ActionRegistry
 };
-//# sourceMappingURL=chunk-2LGLDM34.js.map
+//# sourceMappingURL=chunk-R4EFMCIY.js.map