open-multi-agent-kit 0.98.3 → 0.98.4

package/dist/utils/terminal-links.js

@@ -0,0 +1,68 @@
+import { existsSync } from "node:fs";
+import { win32 } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { normalizePath, resolvePath } from "./paths.js";
+/** File URLs are opened by the host terminal, not by a Linux process inside WSL. */
+export function terminalFileUrl(path, cwd, options = {}) {
+    const env = options.env ?? process.env;
+    const platform = options.platform ?? process.platform;
+    if (/^[a-z]:[\\/]|^\\\\/i.test(path))
+        return pathToFileURL(path, { windows: true }).href;
+    const absolute = platform === "win32" ? win32.resolve(cwd, normalizePath(path)) : resolvePath(path, cwd);
+    const distro = env.WSL_DISTRO_NAME;
+    if (platform === "linux" && distro && !env.SSH_CONNECTION && !env.SSH_TTY && !/[\\/\x00-\x1f]/.test(distro)) {
+        const drive = /^\/mnt\/([a-z])(?:\/|$)/i.exec(absolute);
+        const windowsPath = drive
+            ? `${drive[1].toUpperCase()}:\\${absolute.slice(drive[0].length).replaceAll("/", "\\")}`
+            : `\\\\wsl.localhost\\${distro}${absolute.replaceAll("/", "\\")}`;
+        return pathToFileURL(windowsPath, { windows: true }).href;
+    }
+    return pathToFileURL(absolute, { windows: platform === "win32" }).href;
+}
+/** Bind destinations to the active project so resumed sessions do not use the launch cwd. */
+export function terminalMarkdownLinks(cwd, options = {}) {
+    return {
+        resolveLink(href) {
+            if (/[\x00-\x1f\x7f]/.test(href))
+                return undefined;
+            if (/^[a-z]:[\\/]|^\\\\/i.test(href))
+                return terminalFileUrl(href, cwd, options);
+            if (href.startsWith("#"))
+                return href;
+            if (/^file:/i.test(href)) {
+                try {
+                    const url = new URL(href);
+                    if (url.hostname && url.hostname !== "localhost")
+                        return href;
+                    const windows = /^\/[a-z]:\//i.test(url.pathname);
+                    return terminalFileUrl(fileURLToPath(url, { windows }), cwd, options) + url.search + url.hash;
+                }
+                catch {
+                    return undefined;
+                }
+            }
+            if (/^[a-z][a-z\d+.-]*:/i.test(href) || href.startsWith("//"))
+                return href;
+            const boundary = href.search(/[?#]/);
+            const pathname = boundary < 0 ? href : href.slice(0, boundary);
+            const suffix = boundary < 0 ? "" : href.slice(boundary);
+            try {
+                return terminalFileUrl(decodeURIComponent(pathname), cwd, options) + suffix;
+            }
+            catch (error) {
+                if (error instanceof URIError)
+                    return terminalFileUrl(pathname, cwd, options) + suffix;
+                throw error;
+            }
+        },
+        resolveFileLink(text) {
+            if (/^[a-z][a-z\d+.-]*:/i.test(text) && !/^[a-z]:[\\/]/i.test(text))
+                return undefined;
+            if (/[\x00-\x1f\x7f]/.test(text) || (!/[\\/]/.test(text) && !/\.[a-z\d]{1,10}$/i.test(text)))
+                return undefined;
+            const path = resolvePath(text, cwd);
+            return existsSync(path) ? terminalFileUrl(text, cwd, options) : undefined;
+        },
+    };
+}
+//# sourceMappingURL=terminal-links.js.map

package/dist/utils/terminal-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-links.js","sourceRoot":"","sources":["../../src/utils/terminal-links.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAOxD,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAW,EAAE,OAAO,GAA4B,EAAE,EAAU;IACzG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,QAAQ,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;IACnC,IAAI,QAAQ,KAAK,OAAO,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7G,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,KAAK;YACxB,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE;YACxF,CAAC,CAAC,sBAAsB,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,aAAa,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,aAAa,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC;AAAA,CACvE;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,OAAO,GAA4B,EAAE,EAAE;IACzF,OAAO;QACN,WAAW,CAAC,IAAY,EAAsB;YAC7C,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACnD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC1B,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW;wBAAE,OAAO,IAAI,CAAC;oBAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAClD,OAAO,eAAe,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC/F,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,SAAS,CAAC;gBAClB,CAAC;YACF,CAAC;YACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,CAAC;gBACJ,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;YAC7E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,QAAQ;oBAAE,OAAO,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;gBACvF,MAAM,KAAK,CAAC;YACb,CAAC;QAAA,CACD;QACD,eAAe,CAAC,IAAY,EAAsB;YACjD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACtF,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC/G,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACpC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAAA,CAC1E;KACD,CAAC;AAAA,CACF","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { win32 } from \"node:path\";\nimport { fileURLToPath, pathToFileURL } from \"node:url\";\nimport { normalizePath, resolvePath } from \"./paths.ts\";\n\ninterface TerminalLinkEnvironment {\n\treadonly env?: NodeJS.ProcessEnv;\n\treadonly platform?: NodeJS.Platform;\n}\n\n/** File URLs are opened by the host terminal, not by a Linux process inside WSL. */\nexport function terminalFileUrl(path: string, cwd: string, options: TerminalLinkEnvironment = {}): string {\n\tconst env = options.env ?? process.env;\n\tconst platform = options.platform ?? process.platform;\n\tif (/^[a-z]:[\\\\/]|^\\\\\\\\/i.test(path)) return pathToFileURL(path, { windows: true }).href;\n\tconst absolute = platform === \"win32\" ? win32.resolve(cwd, normalizePath(path)) : resolvePath(path, cwd);\n\tconst distro = env.WSL_DISTRO_NAME;\n\tif (platform === \"linux\" && distro && !env.SSH_CONNECTION && !env.SSH_TTY && !/[\\\\/\\x00-\\x1f]/.test(distro)) {\n\t\tconst drive = /^\\/mnt\\/([a-z])(?:\\/|$)/i.exec(absolute);\n\t\tconst windowsPath = drive\n\t\t\t? `${drive[1].toUpperCase()}:\\\\${absolute.slice(drive[0].length).replaceAll(\"/\", \"\\\\\")}`\n\t\t\t: `\\\\\\\\wsl.localhost\\\\${distro}${absolute.replaceAll(\"/\", \"\\\\\")}`;\n\t\treturn pathToFileURL(windowsPath, { windows: true }).href;\n\t}\n\treturn pathToFileURL(absolute, { windows: platform === \"win32\" }).href;\n}\n\n/** Bind destinations to the active project so resumed sessions do not use the launch cwd. */\nexport function terminalMarkdownLinks(cwd: string, options: TerminalLinkEnvironment = {}) {\n\treturn {\n\t\tresolveLink(href: string): string | undefined {\n\t\t\tif (/[\\x00-\\x1f\\x7f]/.test(href)) return undefined;\n\t\t\tif (/^[a-z]:[\\\\/]|^\\\\\\\\/i.test(href)) return terminalFileUrl(href, cwd, options);\n\t\t\tif (href.startsWith(\"#\")) return href;\n\t\t\tif (/^file:/i.test(href)) {\n\t\t\t\ttry {\n\t\t\t\t\tconst url = new URL(href);\n\t\t\t\t\tif (url.hostname && url.hostname !== \"localhost\") return href;\n\t\t\t\t\tconst windows = /^\\/[a-z]:\\//i.test(url.pathname);\n\t\t\t\t\treturn terminalFileUrl(fileURLToPath(url, { windows }), cwd, options) + url.search + url.hash;\n\t\t\t\t} catch {\n\t\t\t\t\treturn undefined;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (/^[a-z][a-z\\d+.-]*:/i.test(href) || href.startsWith(\"//\")) return href;\n\t\t\tconst boundary = href.search(/[?#]/);\n\t\t\tconst pathname = boundary < 0 ? href : href.slice(0, boundary);\n\t\t\tconst suffix = boundary < 0 ? \"\" : href.slice(boundary);\n\t\t\ttry {\n\t\t\t\treturn terminalFileUrl(decodeURIComponent(pathname), cwd, options) + suffix;\n\t\t\t} catch (error) {\n\t\t\t\tif (error instanceof URIError) return terminalFileUrl(pathname, cwd, options) + suffix;\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\t\tresolveFileLink(text: string): string | undefined {\n\t\t\tif (/^[a-z][a-z\\d+.-]*:/i.test(text) && !/^[a-z]:[\\\\/]/i.test(text)) return undefined;\n\t\t\tif (/[\\x00-\\x1f\\x7f]/.test(text) || (!/[\\\\/]/.test(text) && !/\\.[a-z\\d]{1,10}$/i.test(text))) return undefined;\n\t\t\tconst path = resolvePath(text, cwd);\n\t\t\treturn existsSync(path) ? terminalFileUrl(text, cwd, options) : undefined;\n\t\t},\n\t};\n}\n"]}

package/dist/utils/windows-clipboard-image.d.ts

@@ -0,0 +1,16 @@
+export type WindowsClipboardResult = {
+    readonly kind: "image";
+    readonly bytes: Uint8Array;
+    readonly mimeType: "image/png";
+} | {
+    readonly kind: "empty";
+} | {
+    readonly kind: "unavailable";
+    readonly reason: "not-found" | "timeout" | "failed";
+};
+export declare class WindowsClipboardError extends Error {
+    constructor(message: string);
+}
+/** Read only image data. No clipboard writes, temporary screenshots, profiles, or policy bypass. */
+export declare function readWindowsClipboardImage(env?: NodeJS.ProcessEnv): Promise<WindowsClipboardResult>;
+//# sourceMappingURL=windows-clipboard-image.d.ts.map

package/dist/utils/windows-clipboard-image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-clipboard-image.d.ts","sourceRoot":"","sources":["../../src/utils/windows-clipboard-image.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAA;CAAE,CAAC;AAEzF,qBAAa,qBAAsB,SAAQ,KAAK;IAC/C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AA2DD,oGAAoG;AACpG,wBAAsB,yBAAyB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBrH","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { dirname, isAbsolute } from \"node:path\";\nimport { PROMPT_ATTACHMENT_LIMITS, sniffImageMimeType } from \"../core/prompt-attachment.ts\";\n\nexport type WindowsClipboardResult =\n\t| { readonly kind: \"image\"; readonly bytes: Uint8Array; readonly mimeType: \"image/png\" }\n\t| { readonly kind: \"empty\" }\n\t| { readonly kind: \"unavailable\"; readonly reason: \"not-found\" | \"timeout\" | \"failed\" };\n\nexport class WindowsClipboardError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WindowsClipboardError\";\n\t}\n}\n\nconst PREFIX = \"OMK_CLIPBOARD_PNG:\";\nconst SCRIPT = [\n\t\"$ErrorActionPreference = 'Stop'\",\n\t\"Add-Type -AssemblyName System.Windows.Forms\",\n\t\"Add-Type -AssemblyName System.Drawing\",\n\t\"$image = [System.Windows.Forms.Clipboard]::GetImage()\",\n\t\"if ($null -eq $image) { [Console]::Write('OMK_CLIPBOARD_EMPTY'); exit 0 }\",\n\t\"$stream = New-Object System.IO.MemoryStream\",\n\t\"try {\",\n\t`if ([long]$image.Width * $image.Height -gt ${PROMPT_ATTACHMENT_LIMITS.maxPixels}) { [Console]::Write('OMK_CLIPBOARD_TOO_LARGE'); exit 0 };`,\n\t\"$image.Save($stream, [System.Drawing.Imaging.ImageFormat]::Png);\",\n\t`if ($stream.Length -gt ${PROMPT_ATTACHMENT_LIMITS.maxImageBytes}) { [Console]::Write('OMK_CLIPBOARD_TOO_LARGE'); exit 0 };`,\n\t`[Console]::Write('${PREFIX}' + [Convert]::ToBase64String($stream.ToArray()))`,\n\t\"} finally { $stream.Dispose(); $image.Dispose() }\",\n].join(\"\\n\");\n\nfunction readCommand(command: string, env: NodeJS.ProcessEnv): Promise<string | WindowsClipboardResult> {\n\tconst childEnv: NodeJS.ProcessEnv = {};\n\tfor (const key of [\n\t\t\"PATH\",\n\t\t\"Path\",\n\t\t\"SystemRoot\",\n\t\t\"SYSTEMROOT\",\n\t\t\"WINDIR\",\n\t\t\"TEMP\",\n\t\t\"TMP\",\n\t\t\"USERPROFILE\",\n\t\t\"WSL_INTEROP\",\n\t\t\"WSL_DISTRO_NAME\",\n\t]) {\n\t\tif (env[key] !== undefined) childEnv[key] = env[key];\n\t}\n\treturn new Promise((resolve) => {\n\t\texecFile(\n\t\t\tcommand,\n\t\t\t[\"-NoProfile\", \"-NonInteractive\", \"-STA\", \"-Command\", SCRIPT],\n\t\t\t{\n\t\t\t\tencoding: \"utf8\",\n\t\t\t\twindowsHide: true,\n\t\t\t\t// Avoid launching Windows in a project UNC directory across the WSL filesystem bridge.\n\t\t\t\tcwd: isAbsolute(command) ? dirname(command) : undefined,\n\t\t\t\tenv: childEnv,\n\t\t\t\ttimeout: 5000,\n\t\t\t\tmaxBuffer: Math.ceil(PROMPT_ATTACHMENT_LIMITS.maxImageBytes / 3) * 4 + 1024,\n\t\t\t},\n\t\t\t(error, stdout) => {\n\t\t\t\tif (!error) resolve(stdout.trim());\n\t\t\t\telse\n\t\t\t\t\tresolve({\n\t\t\t\t\t\tkind: \"unavailable\",\n\t\t\t\t\t\treason: error.code === \"ENOENT\" ? \"not-found\" : error.killed ? \"timeout\" : \"failed\",\n\t\t\t\t\t});\n\t\t\t},\n\t\t);\n\t});\n}\n\n/** Read only image data. No clipboard writes, temporary screenshots, profiles, or policy bypass. */\nexport async function readWindowsClipboardImage(env: NodeJS.ProcessEnv = process.env): Promise<WindowsClipboardResult> {\n\tfor (const command of [\"/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe\", \"powershell.exe\"]) {\n\t\tconst result = await readCommand(command, env);\n\t\tif (typeof result !== \"string\") {\n\t\t\tif (result.kind === \"unavailable\" && result.reason === \"not-found\") continue;\n\t\t\treturn result;\n\t\t}\n\t\tif (result === \"OMK_CLIPBOARD_EMPTY\") return { kind: \"empty\" };\n\t\tif (result === \"OMK_CLIPBOARD_TOO_LARGE\")\n\t\t\tthrow new WindowsClipboardError(\"Windows clipboard image exceeds the prompt image size limit.\");\n\t\tconst encoded = result.startsWith(PREFIX) ? result.slice(PREFIX.length) : \"\";\n\t\tif (!encoded || encoded.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(encoded)) {\n\t\t\tthrow new WindowsClipboardError(\"Windows clipboard returned invalid PNG data.\");\n\t\t}\n\t\tconst bytes = Buffer.from(encoded, \"base64\");\n\t\tif (bytes.length > PROMPT_ATTACHMENT_LIMITS.maxImageBytes || sniffImageMimeType(bytes) !== \"image/png\") {\n\t\t\tthrow new WindowsClipboardError(\"Windows clipboard returned invalid or oversized PNG data.\");\n\t\t}\n\t\treturn { kind: \"image\", bytes, mimeType: \"image/png\" };\n\t}\n\treturn { kind: \"unavailable\", reason: \"not-found\" };\n}\n"]}

package/dist/utils/windows-clipboard-image.js

@@ -0,0 +1,87 @@
+import { execFile } from "node:child_process";
+import { dirname, isAbsolute } from "node:path";
+import { PROMPT_ATTACHMENT_LIMITS, sniffImageMimeType } from "../core/prompt-attachment.js";
+export class WindowsClipboardError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "WindowsClipboardError";
+    }
+}
+const PREFIX = "OMK_CLIPBOARD_PNG:";
+const SCRIPT = [
+    "$ErrorActionPreference = 'Stop'",
+    "Add-Type -AssemblyName System.Windows.Forms",
+    "Add-Type -AssemblyName System.Drawing",
+    "$image = [System.Windows.Forms.Clipboard]::GetImage()",
+    "if ($null -eq $image) { [Console]::Write('OMK_CLIPBOARD_EMPTY'); exit 0 }",
+    "$stream = New-Object System.IO.MemoryStream",
+    "try {",
+    `if ([long]$image.Width * $image.Height -gt ${PROMPT_ATTACHMENT_LIMITS.maxPixels}) { [Console]::Write('OMK_CLIPBOARD_TOO_LARGE'); exit 0 };`,
+    "$image.Save($stream, [System.Drawing.Imaging.ImageFormat]::Png);",
+    `if ($stream.Length -gt ${PROMPT_ATTACHMENT_LIMITS.maxImageBytes}) { [Console]::Write('OMK_CLIPBOARD_TOO_LARGE'); exit 0 };`,
+    `[Console]::Write('${PREFIX}' + [Convert]::ToBase64String($stream.ToArray()))`,
+    "} finally { $stream.Dispose(); $image.Dispose() }",
+].join("\n");
+function readCommand(command, env) {
+    const childEnv = {};
+    for (const key of [
+        "PATH",
+        "Path",
+        "SystemRoot",
+        "SYSTEMROOT",
+        "WINDIR",
+        "TEMP",
+        "TMP",
+        "USERPROFILE",
+        "WSL_INTEROP",
+        "WSL_DISTRO_NAME",
+    ]) {
+        if (env[key] !== undefined)
+            childEnv[key] = env[key];
+    }
+    return new Promise((resolve) => {
+        execFile(command, ["-NoProfile", "-NonInteractive", "-STA", "-Command", SCRIPT], {
+            encoding: "utf8",
+            windowsHide: true,
+            // Avoid launching Windows in a project UNC directory across the WSL filesystem bridge.
+            cwd: isAbsolute(command) ? dirname(command) : undefined,
+            env: childEnv,
+            timeout: 5000,
+            maxBuffer: Math.ceil(PROMPT_ATTACHMENT_LIMITS.maxImageBytes / 3) * 4 + 1024,
+        }, (error, stdout) => {
+            if (!error)
+                resolve(stdout.trim());
+            else
+                resolve({
+                    kind: "unavailable",
+                    reason: error.code === "ENOENT" ? "not-found" : error.killed ? "timeout" : "failed",
+                });
+        });
+    });
+}
+/** Read only image data. No clipboard writes, temporary screenshots, profiles, or policy bypass. */
+export async function readWindowsClipboardImage(env = process.env) {
+    for (const command of ["/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe", "powershell.exe"]) {
+        const result = await readCommand(command, env);
+        if (typeof result !== "string") {
+            if (result.kind === "unavailable" && result.reason === "not-found")
+                continue;
+            return result;
+        }
+        if (result === "OMK_CLIPBOARD_EMPTY")
+            return { kind: "empty" };
+        if (result === "OMK_CLIPBOARD_TOO_LARGE")
+            throw new WindowsClipboardError("Windows clipboard image exceeds the prompt image size limit.");
+        const encoded = result.startsWith(PREFIX) ? result.slice(PREFIX.length) : "";
+        if (!encoded || encoded.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(encoded)) {
+            throw new WindowsClipboardError("Windows clipboard returned invalid PNG data.");
+        }
+        const bytes = Buffer.from(encoded, "base64");
+        if (bytes.length > PROMPT_ATTACHMENT_LIMITS.maxImageBytes || sniffImageMimeType(bytes) !== "image/png") {
+            throw new WindowsClipboardError("Windows clipboard returned invalid or oversized PNG data.");
+        }
+        return { kind: "image", bytes, mimeType: "image/png" };
+    }
+    return { kind: "unavailable", reason: "not-found" };
+}
+//# sourceMappingURL=windows-clipboard-image.js.map

package/dist/utils/windows-clipboard-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-clipboard-image.js","sourceRoot":"","sources":["../../src/utils/windows-clipboard-image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAO5F,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC/C,YAAY,OAAe,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IAAA,CACpC;CACD;AAED,MAAM,MAAM,GAAG,oBAAoB,CAAC;AACpC,MAAM,MAAM,GAAG;IACd,iCAAiC;IACjC,6CAA6C;IAC7C,uCAAuC;IACvC,uDAAuD;IACvD,2EAA2E;IAC3E,6CAA6C;IAC7C,OAAO;IACP,8CAA8C,wBAAwB,CAAC,SAAS,4DAA4D;IAC5I,kEAAkE;IAClE,0BAA0B,wBAAwB,CAAC,aAAa,4DAA4D;IAC5H,qBAAqB,MAAM,mDAAmD;IAC9E,mDAAmD;CACnD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,WAAW,CAAC,OAAe,EAAE,GAAsB,EAA4C;IACvG,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI;QACjB,MAAM;QACN,MAAM;QACN,YAAY;QACZ,YAAY;QACZ,QAAQ;QACR,MAAM;QACN,KAAK;QACL,aAAa;QACb,aAAa;QACb,iBAAiB;KACjB,EAAE,CAAC;QACH,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/B,QAAQ,CACP,OAAO,EACP,CAAC,YAAY,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAC7D;YACC,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;YACjB,uFAAuF;YACvF,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YACvD,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI;SAC3E,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;;gBAElC,OAAO,CAAC;oBACP,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;iBACnF,CAAC,CAAC;QAAA,CACJ,CACD,CAAC;IAAA,CACF,CAAC,CAAC;AAAA,CACH;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAmC;IACtH,KAAK,MAAM,OAAO,IAAI,CAAC,+DAA+D,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC3G,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAAE,SAAS;YAC7E,OAAO,MAAM,CAAC;QACf,CAAC;QACD,IAAI,MAAM,KAAK,qBAAqB;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/D,IAAI,MAAM,KAAK,yBAAyB;YACvC,MAAM,IAAI,qBAAqB,CAAC,8DAA8D,CAAC,CAAC;QACjG,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,qBAAqB,CAAC,8CAA8C,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB,CAAC,aAAa,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,WAAW,EAAE,CAAC;YACxG,MAAM,IAAI,qBAAqB,CAAC,2DAA2D,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAAA,CACpD","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { dirname, isAbsolute } from \"node:path\";\nimport { PROMPT_ATTACHMENT_LIMITS, sniffImageMimeType } from \"../core/prompt-attachment.ts\";\n\nexport type WindowsClipboardResult =\n\t| { readonly kind: \"image\"; readonly bytes: Uint8Array; readonly mimeType: \"image/png\" }\n\t| { readonly kind: \"empty\" }\n\t| { readonly kind: \"unavailable\"; readonly reason: \"not-found\" | \"timeout\" | \"failed\" };\n\nexport class WindowsClipboardError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WindowsClipboardError\";\n\t}\n}\n\nconst PREFIX = \"OMK_CLIPBOARD_PNG:\";\nconst SCRIPT = [\n\t\"$ErrorActionPreference = 'Stop'\",\n\t\"Add-Type -AssemblyName System.Windows.Forms\",\n\t\"Add-Type -AssemblyName System.Drawing\",\n\t\"$image = [System.Windows.Forms.Clipboard]::GetImage()\",\n\t\"if ($null -eq $image) { [Console]::Write('OMK_CLIPBOARD_EMPTY'); exit 0 }\",\n\t\"$stream = New-Object System.IO.MemoryStream\",\n\t\"try {\",\n\t`if ([long]$image.Width * $image.Height -gt ${PROMPT_ATTACHMENT_LIMITS.maxPixels}) { [Console]::Write('OMK_CLIPBOARD_TOO_LARGE'); exit 0 };`,\n\t\"$image.Save($stream, [System.Drawing.Imaging.ImageFormat]::Png);\",\n\t`if ($stream.Length -gt ${PROMPT_ATTACHMENT_LIMITS.maxImageBytes}) { [Console]::Write('OMK_CLIPBOARD_TOO_LARGE'); exit 0 };`,\n\t`[Console]::Write('${PREFIX}' + [Convert]::ToBase64String($stream.ToArray()))`,\n\t\"} finally { $stream.Dispose(); $image.Dispose() }\",\n].join(\"\\n\");\n\nfunction readCommand(command: string, env: NodeJS.ProcessEnv): Promise<string | WindowsClipboardResult> {\n\tconst childEnv: NodeJS.ProcessEnv = {};\n\tfor (const key of [\n\t\t\"PATH\",\n\t\t\"Path\",\n\t\t\"SystemRoot\",\n\t\t\"SYSTEMROOT\",\n\t\t\"WINDIR\",\n\t\t\"TEMP\",\n\t\t\"TMP\",\n\t\t\"USERPROFILE\",\n\t\t\"WSL_INTEROP\",\n\t\t\"WSL_DISTRO_NAME\",\n\t]) {\n\t\tif (env[key] !== undefined) childEnv[key] = env[key];\n\t}\n\treturn new Promise((resolve) => {\n\t\texecFile(\n\t\t\tcommand,\n\t\t\t[\"-NoProfile\", \"-NonInteractive\", \"-STA\", \"-Command\", SCRIPT],\n\t\t\t{\n\t\t\t\tencoding: \"utf8\",\n\t\t\t\twindowsHide: true,\n\t\t\t\t// Avoid launching Windows in a project UNC directory across the WSL filesystem bridge.\n\t\t\t\tcwd: isAbsolute(command) ? dirname(command) : undefined,\n\t\t\t\tenv: childEnv,\n\t\t\t\ttimeout: 5000,\n\t\t\t\tmaxBuffer: Math.ceil(PROMPT_ATTACHMENT_LIMITS.maxImageBytes / 3) * 4 + 1024,\n\t\t\t},\n\t\t\t(error, stdout) => {\n\t\t\t\tif (!error) resolve(stdout.trim());\n\t\t\t\telse\n\t\t\t\t\tresolve({\n\t\t\t\t\t\tkind: \"unavailable\",\n\t\t\t\t\t\treason: error.code === \"ENOENT\" ? \"not-found\" : error.killed ? \"timeout\" : \"failed\",\n\t\t\t\t\t});\n\t\t\t},\n\t\t);\n\t});\n}\n\n/** Read only image data. No clipboard writes, temporary screenshots, profiles, or policy bypass. */\nexport async function readWindowsClipboardImage(env: NodeJS.ProcessEnv = process.env): Promise<WindowsClipboardResult> {\n\tfor (const command of [\"/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe\", \"powershell.exe\"]) {\n\t\tconst result = await readCommand(command, env);\n\t\tif (typeof result !== \"string\") {\n\t\t\tif (result.kind === \"unavailable\" && result.reason === \"not-found\") continue;\n\t\t\treturn result;\n\t\t}\n\t\tif (result === \"OMK_CLIPBOARD_EMPTY\") return { kind: \"empty\" };\n\t\tif (result === \"OMK_CLIPBOARD_TOO_LARGE\")\n\t\t\tthrow new WindowsClipboardError(\"Windows clipboard image exceeds the prompt image size limit.\");\n\t\tconst encoded = result.startsWith(PREFIX) ? result.slice(PREFIX.length) : \"\";\n\t\tif (!encoded || encoded.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(encoded)) {\n\t\t\tthrow new WindowsClipboardError(\"Windows clipboard returned invalid PNG data.\");\n\t\t}\n\t\tconst bytes = Buffer.from(encoded, \"base64\");\n\t\tif (bytes.length > PROMPT_ATTACHMENT_LIMITS.maxImageBytes || sniffImageMimeType(bytes) !== \"image/png\") {\n\t\t\tthrow new WindowsClipboardError(\"Windows clipboard returned invalid or oversized PNG data.\");\n\t\t}\n\t\treturn { kind: \"image\", bytes, mimeType: \"image/png\" };\n\t}\n\treturn { kind: \"unavailable\", reason: \"not-found\" };\n}\n"]}

package/docs/adaptorch-onboarding.md

@@ -0,0 +1,80 @@
+# OMK / WPL → AdaptOrch 안내
+
+AdaptOrch는 OMK와 별개의 선택적 서비스입니다. OMK와 MIT 라이선스의
+`omk-adaptorch-wpl` 사용에 가입이나 유료 플랜은 필요하지 않습니다.
+이 경로는 웹사이트 방문을 돕는 CRM 유입 경로이며, 계정 생성이나 리드 저장을
+대신 수행하는 CRM 클라이언트가 아닙니다.
+
+## CLI에서 시작
+
+```bash
+omk doctor adaptorch --links
+omk doctor adaptorch --links --json
+```
+
+`--links`는 API 키 없이 작동합니다. 환경의 API 키나 API URL을 읽거나 검증하지
+않으며, HTTP 요청·브라우저 열기·파일 저장·run 제출을 하지 않습니다.
+JSON 출력의 `mode: "links"`, `networkAccess: false`, `accountRequired: false`는
+이 **로컬 안내 명령**의 상태입니다. 웹사이트의 요금이나 가입 조건을 뜻하지 않습니다.
+
+| 행동 | 목적지 | 용도 |
+| --- | --- | --- |
+| Plans / local Starter | `https://adaptorch.com/#pricing` | 로컬 평가와 호스티드 플랜 비교 |
+| Sign up | `https://adaptorch.com/app/signup` | 사용자가 직접 가입 |
+| Team / private-runner contact | `https://adaptorch.com/#bookDemo` | 팀·사설 러너 상담 |
+| Claim boundary | `https://adaptorch.com/claim-boundary` | 검증 범위와 한계 확인 |
+
+실제 출력 URL에는 아래의 고정 UTM 태그가 붙습니다. 사용자가 링크를 열면 해당
+태그가 웹사이트로 전달됩니다. OMK 자체는 클릭을 관찰하거나 추적 요청을 보내지 않습니다.
+
+계정을 만든 뒤 API 연결을 확인하려면 키를 안전하게 설정하고 별도로 실행합니다.
+
+```bash
+omk doctor adaptorch
+omk doctor adaptorch --json
+```
+
+이 명령은 설정된 API의 `GET /v1/whoami`에 인증 요청을 보냅니다.
+종료 코드 `0`은 API 인증 성공, `1`은 미설정, `2`는 잘못된 설정이나 연결 실패입니다.
+인증 성공은 코드 검증, WPL 자동 실행, 배포 승인을 뜻하지 않습니다.
+`--links`의 성공 종료 코드는 API 연결 여부와 무관합니다.
+
+## WPL 소비자에서 사용
+
+```typescript
+import { getAdaptOrchLinks } from "omk-adaptorch-wpl";
+
+const links = getAdaptOrchLinks(); // 기본 표면: wpl
+// 사용자가 요청한 도움말이나 별도 제품 안내 화면에서 렌더링합니다.
+console.log(links.plans, links.signup, links.contact, links.claimBoundary);
+```
+
+`getAdaptOrchLinks("doctor")`는 CLI 유입용입니다. 함수는 매번 독립적인 링크 객체를
+반환하고 네트워크·환경 변수·사용자 파일에 접근하지 않습니다.
+링크를 판정 카드의 `next_actions`나 서명된 receipt에 삽입하지 마세요.
+가입·결제 여부는 `canApply`, `shouldSubmit`, 사람 검토 요구를 바꾸지 않습니다.
+
+## CRM 유입 구분과 개인정보 경계
+
+- `utm_source=omk`
+- `utm_campaign=omk-adaptorch-wpl`
+- CLI: `utm_medium=cli`, `utm_content=doctor-{action}`
+- WPL: `utm_medium=library`, `utm_content=wpl-{action}`
+- `{action}`: `plans`, `signup`, `contact`, `claim-boundary`
+
+허용된 값만 사용합니다. 이메일, API 키, 프롬프트, diff, 저장소 경로, 세션 ID,
+run ID를 URL에 추가하지 않습니다. 가격은 코드에 고정하지 않고 웹사이트가 소유합니다.
+
+사이트 운영 측에서는 사용자 동의와 개인정보 처리 정책에 따라 UTM 보존,
+가입 완료·상담 제출·활성화 이벤트를 연결해야 합니다. 이 변경은 해당 서버의
+CRM 저장, 이메일 발송, 결제, 전환율을 구현하거나 검증하지 않습니다.
+단순 링크 생성 횟수를 방문자 수나 가입 전환으로 집계하면 안 됩니다.
+
+## 검증과 관련 문서
+
+- `test/adaptorch-onboarding.test.ts`: 키 미접근, HTTP 미호출, 옵션 순서, JSON 계약
+- `test/adaptorch-doctor-cli.test.ts`: 기존 연결 검사와 종료 코드 회귀
+- `packages/adaptorch-wpl/test/service-links.test.ts`: 공개 export, 고정 목적지·UTM, 임의 입력 거부
+- [Correctness Wall](correctness-wall.md): 적용·제출 게이트
+- [AdaptOrch Preview](adaptorch-preview.md): 계획과 실제 실행 구분
+- [하네스 개선 우선순위](harness-improvements.md): 이번 점검 범위와 후속 과제

package/docs/containerization.md

@@ -22,6 +22,18 @@ There are two general isolation options:
 1. run the whole `omk` process inside an isolated environment, or
 2. run `omk` on the host and route tool execution into an isolated environment.
 
+### Policy composition
+
+`mergeSandboxPolicy(base, override)` keeps the stronger enforcement mode and accepts
+only a root inside the base root. An override cannot silently turn `enforce` into
+`audit`/`off` or move the workspace elsewhere. Broader mode/root changes require the
+trusted caller's explicit `{ allowBroaden: true }`; the flag is not user authentication.
+These pure policy checks do not replace backend enforcement or isolate extension code.
+
+Evidence configuration also fails closed: `FailClosedMergeGate` rejects empty,
+sparse, or invalid gate lists and snapshots the supplied array. Later changes to
+that array cannot remove the checks. This does not authenticate arbitrary gate code.
+
 ## Choose a pattern
 
 | Pattern | What is isolated | Best for | Notes |

package/docs/context-files.md

@@ -0,0 +1,97 @@
+# User context setup
+
+OMK's shared defaults are provider-neutral, editable markdown. They do not ship
+an operator's personal configuration, install skills, or enable external services.
+
+## Initialize an installed OMK
+
+```bash
+omk init --global --dry-run
+omk init --global
+```
+
+The first command previews the operation without creating even the target directory.
+The second creates missing documents in `~/.omk/agent/`. Both are offline and return
+before migrations, settings, credentials, sessions, extensions, and model startup.
+There is no install hook: installing or updating the npm package does not alter
+user instructions, including when installed with `--ignore-scripts`.
+
+Choose another user config directory with the existing environment override:
+
+```bash
+OMK_CODING_AGENT_DIR="/path/to/omk-config" omk init --global --dry-run
+OMK_CODING_AGENT_DIR="/path/to/omk-config" omk init --global
+```
+
+Use the same override when starting OMK. PowerShell users can set
+`$env:OMK_CODING_AGENT_DIR` before running the commands. Paths with spaces and
+non-ASCII characters are supported. The destination must be a real directory,
+not a file or symlink; parent directories should be trusted and user-controlled.
+New files use owner-only permissions on POSIX. Existing directory modes are unchanged.
+
+`--global` is required; `init` without a scope or with unsupported flags exits `2`.
+`--help` exits `0`. Setup and preservation succeed with `0`; file or template errors
+exit `1`. `--offline` is accepted but not needed for this command.
+
+## Documents and loading
+
+| File | Purpose | Loading |
+| --- | --- | --- |
+| `AGENTS.md` | Work, verification, permissions, skills, runtime identity | Preferred global context entry point |
+| `INTERNET.md` | Source selection, freshness, citations, network permissions | Read on demand when web work is needed |
+| `CLAUDE.md` | Thin interoperability entry point referring to `AGENTS.md` | OMK fallback; another host needs explicit configuration |
+
+OMK's entry-point search order within each directory is `AGENTS.md`, `AGENTS.MD`,
+`CLAUDE.md`, then `CLAUDE.MD`; only the first readable file is used. Global context
+loads before ancestor and working-directory context. Markdown links and Claude Code
+`@` imports are not expanded by OMK. `INTERNET.md` and `SOUL.md` are not automatically
+loaded by filename. The starter `AGENTS.md` tells the agent to read `INTERNET.md`
+when relevant, so ordinary coding tasks do not carry the whole web guide.
+
+Existing compatibility files `AGENTS.override.md`, `AGENTS.GODMODE.md`, `GODMODE.md`,
+and `ENI.override.md` are also discovered in global and ancestor directories.
+Setup does not generate, import, modify, or delete them. Review old files yourself
+when migrating: installing a new guide does not retire an old override.
+
+`--no-context-files` disables discovery. Claude models inside OMK omit discovered
+context by default; `OMK_CLAUDE_CONTEXT_FILES=1` restores it. Setup does not change
+that provider behavior or write the environment override. See [Usage](usage.md#context-files)
+and [Environment variables](environment-variables.md).
+
+## Preserve and customize
+
+- No `--force` or automatic overwrite mode is provided. Re-running setup preserves
+  existing files, including symlinks and directories at a document filename.
+- If any case variant of `AGENTS.md` or `CLAUDE.md` already exists, setup skips both
+  entry-point templates. This avoids shadowing a Claude-only or uppercase setup,
+  and avoids a new compatibility import pointing to the wrong filename.
+- A missing `INTERNET.md` can still be created. Any existing case variant is preserved.
+- `settings.json`, authentication, models, MCP configuration, installed packages,
+  skills, shell profiles, other hosts' directories, and project files are untouched.
+- Required templates are read before writing. An I/O failure while writing can leave
+  earlier files created; setup is not a multi-file transaction. Review the output
+  before retrying. Exclusive file creation prevents overwriting a concurrent file.
+
+Back up existing documents before manually merging the defaults. Put project commands
+in the project's `AGENTS.md`, local preferences in your global file or
+`AGENTS.override.md`, and no credentials in either. Keep changes small and reload
+with `/reload` or restart OMK. Already-recorded conversation text is not erased by reload.
+
+For optional user-installed skills and `defaultActiveSkills`, see [Skills](skills.md)
+and [Settings](settings.md). Neither a skill nor a markdown policy grants tool access.
+
+## Distribution and interoperability
+
+The templates live in [`examples/context/`](../examples/context/) inside the package.
+Existing npm `files` and binary asset-copy rules include `examples/`; the initializer
+resolves that directory from the installed package, not from a developer's checkout.
+`OMK_PACKAGE_DIR` retains its documented package-root override.
+
+The same templates can be reviewed and copied manually from a source checkout.
+`CLAUDE.md` uses a sibling `@AGENTS.md` import for Claude Code, but OMK does not install
+it into `~/.claude/`. Opt into sharing from that host with an import to the actual
+file path. Other hosts retain their own tool names, hooks, permission model, and
+configuration; using a Claude model in OMK is not running Claude Code.
+
+Public defaults are authored in the repository. Do not create a distribution by
+copying a maintainer's agent home, credentials, private skills, or session history.

package/docs/correctness-wall.md

@@ -25,6 +25,14 @@ Structured next steps on the verdict card: **Apply**, **Deep Check**, **Regenera
 
 **Can apply** vs **should submit** are separate gates on the verification receipt: mechanical apply safety is not the same as trusting downstream submission.
 
+`shouldSubmit` is fail-closed: it requires `canApply`, non-preview evaluation,
+non-empty run IDs, and `CONFIRMED` outcome adjudication. Missing evidence,
+verifier errors, corroborated failures, and previews never authorize submission.
+If a deep check was requested, it must also complete. Its evidence must carry
+non-blank digest and command values and exit code `0`; completion cannot clear
+an existing policy requirement for human review. Local apply policy is unchanged.
+These are evidence gates, not release, merge, or deployment authorization.
+
 ## Fast wall vs deep wall
 
 - **Fast wall (default):** Pure policy — diff paths, scope globs, secret-shaped lines, preview-only limits (`BATCH1_NO_DOCKER_RUNNER`). No Docker runner in batch 1.

package/docs/custom-provider.md

@@ -238,6 +238,37 @@ For Anthropic-compatible providers using `api: "anthropic-messages"`, set `compa
 > Use `mistral-conversations` for native Mistral models.
 > If you intentionally route Mistral-compatible/custom endpoints through `openai-completions`, set `compat` flags explicitly as needed.
 
+### ChatGPT Web through codex-chatgpt-web
+
+[codex-chatgpt-web](https://github.com/miuuyy/codex-chatgpt-web) runs a loopback Responses bridge (`http://127.0.0.1:17841/v1`) that drives a signed-in ChatGPT Web session from its own launcher. It was written for the Codex CLI, so it refuses a turn that lacks Codex's `client_metadata["x-codex-turn-metadata"]` (`thread_id`, `turn_id`) and the matching `turn_id` on the current user item. Set `compat.sendCodexTurnMetadata: true` on an `openai-responses` provider and OMK sends both: `thread_id` is the OMK session id and `turn_id` is derived from the latest user message, so tool rounds replay the same id and the next prompt starts a new browser turn.
+
+```json
+{
+  "providers": {
+    "codex-chatgpt-web": {
+      "baseUrl": "http://127.0.0.1:17841/v1",
+      "api": "openai-responses",
+      "apiKey": "codex-chatgpt-web",
+      "compat": { "sendCodexTurnMetadata": true },
+      "models": [
+        { "id": "chatgpt-web/high", "name": "ChatGPT Web — High", "reasoning": true, "input": ["text", "image"], "contextWindow": 80000, "maxTokens": 32768 },
+        { "id": "chatgpt-web/pro", "name": "ChatGPT Web — Pro", "reasoning": true, "input": ["text", "image"], "contextWindow": 95000, "maxTokens": 32768, "thinkingLevelMap": { "max": "max" } }
+      ]
+    }
+  }
+}
+```
+
+The bridge ignores the bearer value for `chatgpt-web/*` models (the browser session is the credential), so any placeholder key satisfies OMK's key check. Each `chatgpt-web/*` id pins one ChatGPT mode (`luna`, `think`, `light`, `medium`, `high`, `extra-high`, `pro`, plus `zero-risk` / `zero-risk-pro` for the launcher's manual mode); the bridge fixes the effort per id and ignores the request's `reasoning.effort`, and `pro`/`extra-high` fail explicitly unless the signed-in account exposes them. In the launcher's browser-only mode the model cannot call OMK tools; full mode routes tool calls back through the bridge's MCP connector.
+
+OMK's coding-agent supplies its resolved session cwd as a trusted `workspace-write` Codex environment when this compatibility flag is enabled. Direct `omk-ai` callers must pass an absolute `options.cwd` to enable Full harness tools; an absent or relative cwd deliberately carries no filesystem authority, so Full mode fails closed. Bridge 5.0.x binds that environment to the turn metadata (`sandbox`, `workspaces`) and the adjacent `<environment_context>` item; OMK emits exactly that pair, verified against launcher 5.0.4 in full mode with a tool round trip.
+
+**Keep the rows in step with the launcher.** The bridge's `/v1/models` document is the only account-aware source, and it publishes two numbers per row: `context_window` is the ceiling past which the bridge rejects a turn, and `auto_compact_token_limit` is the budget it expects a client to compact within (Codex's effective window, 85% of the ceiling). OMK's `contextWindow` drives OMK's own compaction policy (`compaction.maxUsageRatio`, default 0.9, plus output reserves), so the row carries the **budget**: `contextWindow: 80000` above is the launcher's Plus High budget under a 90,000 ceiling, `95000` the Pro budget (ceiling 111,193, or 112,193 for `chatgpt-web/pro`), and a Pro account with Bigger Context advertises 285,000 under 333,579 / 336,579. With the budget in place OMK compacts at about 90% of it, comfortably inside what the bridge accepts. `omk provider sync codex-chatgpt-web` reads the document and rewrites the provider's `chatgpt-web/*` rows (`name`, `contextWindow`, `reasoning`, `input`), preserving `maxTokens`, `cost`, `thinkingLevelMap`, other keys, other providers, and the file's indentation, and records where the numbers came from as `bridgeCatalog` on the provider (`bridgeVersion`, `clientVersion`, `syncedAt`, and each row's `contextCeilings`). `--dry-run` reports the drift without writing and `--json` emits one document; a launcher upgrade or a changed ceiling is recorded even when no row moves. The bridge forwards `/v1/models` to the Codex backend, so the command authenticates with OMK's `openai-codex` OAuth (`/login openai-codex`) and sends a `client_version` (`--client-version`, `OMK_CODEX_CLIENT_VERSION`, `codex --version`, then OMK's last verified version): the backend hides models from clients it considers too old. `omk provider doctor codex-chatgpt-web --level 1` reports the `models-endpoint` probe as failed for this bridge because it probes with the placeholder bearer; use `provider sync --dry-run` as the bridge health check instead.
+
+Effort is chosen by the slug, not by OMK's thinking level: `chatgpt-web/pro` runs every turn at ChatGPT's Pro effort (verified on launcher 5.0.4: the browser trace records the effort control switching to a distinct label for medium, high, and pro turns), so pick the `pro` row when you want the maximum. The response length is not capped by OMK either: the bridge accepts `max_output_tokens` but never applies it to a browser turn, so `maxTokens` only sizes OMK's own compaction-summary and context-governor budgets.
+
+When the launcher is not running, a turn on a bridge model fails with a message that names the launcher instead of the SDK's generic connection error.
+
 ### Auth Header
 
 If your provider expects `Authorization: Bearer <key>` but doesn't use a standard API, set `authHeader: true`:
@@ -721,6 +752,10 @@ interface ProviderModelConfig {
     thinkingFormat?: "openai" | "openrouter" | "deepseek" | "together" | "zai" | "qwen" | "qwen-chat-template";
     cacheControlFormat?: "anthropic";
 
+    // openai-responses
+    sendSessionIdHeader?: boolean;
+    sendCodexTurnMetadata?: boolean;
+
     // anthropic-messages
     supportsEagerToolInputStreaming?: boolean;
     supportsLongCacheRetention?: boolean;

package/docs/development.md

@@ -56,11 +56,26 @@ Never use `__dirname` directly for package assets.
 ## Testing
 
 ```bash
-./test.sh                         # Run non-LLM tests (no API keys needed)
-npm test                          # Run all tests
-npm test -- test/specific.test.ts # Run specific test
+./test.sh                         # Run the non-LLM suite when a full run is intended
+# Narrow, offline regression from the repository root:
+LIVE_E2E=0 node node_modules/vitest/dist/cli.js --run packages/coding-agent/test/adaptorch-onboarding.test.ts
 ```
 
+The root `vitest.config.ts` delegates to each package's Vitest project. This
+preserves package-local setup files and source aliases; a root invocation must
+not silently test stale `dist` dependencies. The coding-agent project resolves
+`omk-adaptorch-wpl` to its source entrypoint during tests.
+
+Package-local targeted commands continue to work, for example from
+`packages/coding-agent`:
+
+```bash
+LIVE_E2E=0 node ../../node_modules/vitest/dist/cli.js --run test/adaptorch-onboarding.test.ts
+```
+
+Keep explicit file filters for routine work. A keyless regression pass is not a
+live-provider or release verification, and unfiltered suites may include e2e tests.
+
 ## Project Structure
 
 ```

package/docs/environment-variables.md

@@ -82,6 +82,8 @@ These variables are read by OMK itself. The four built-in harness flags below ar
 | `OMK_SKIP_VERSION_CHECK` | Disable the latest-version request |
 | `OMK_TELEMETRY` | Override install/update telemetry and provider attribution headers: `1`/`true`/`yes` or `0`/`false`/`no` |
 | `OMK_SHARE_VIEWER_URL` | Override the base URL used by `/share` |
+| `PI_DISABLE_INPUT_REDACTION` | Stop masking credentials on the way to the model and the session. Persistence and report boundaries still mask |
+| `OMK_DISABLE_REDACTION` | Alias for the input-redaction opt-out when `PI_DISABLE_INPUT_REDACTION` is unset. Only `1`/`true`/`yes`/`on` enable it. Forced persistence/report redaction remains active; this does not disable masking everywhere |
 | `OMK_HARDWARE_CURSOR` | Set to `1` to show the hardware cursor; see [Terminal setup](terminal-setup.md) |
 | `OMK_CONTEXT_GOVERNOR` | Context Budget V2 process override: `1` forces it on and `0` forces it off; otherwise the global `contextBudget.enabled` setting applies |
 | `OMK_CONTEXT_GOVERNOR_CACHE` | Set to `memory` to keep representations, negative results, and plans in session memory instead of persisting representations per workspace |

package/docs/grok-harness.md

@@ -68,6 +68,10 @@ Do not select `grok-imagine-image`, `grok-imagine-image-quality`, `grok-imagine-
 
 Use the normal OMK lane grant model: grant the smallest skill and MCP surface that matches the task, and keep media exceptions explicit.
 
+For each non-queued native `xai` request started through `AgentSession.prompt()`, OMK calls `selectGrokHarnessSkills()` against the live discovered skill descriptions after ordinary prompt-template expansion. It merges up to three matches with explicit/settings selections and rebuilds that turn's `<active_skills>` marker.
+
+The pure `selectSkills()` scorer uses the task plus independent camelCase-aware path-to-skill-name signals, weak 0.35 / strong 0.7 thresholds, deterministic input-order ties, and first-name-wins deduplication. Explicit-only skills are never auto-selected. `headroom` is added only for lexical pressure cues or the session's measured context-pressure bucket. A task with no signals yields an empty automatic grant rather than the full allowlist. Messages queued through `steer`, `followUp`, or `prompt(..., { streamingBehavior })` retain the active run's system prompt; they do not trigger a second skill-selection rebuild.
+
 | Task class | Skills | MCP |
 | --- | --- | --- |
 | Multi-package or repo-context work | `packages`; add `headroom` only under context pressure | none by default |