sOMP

Changelog

From the repo commit log (git log --oneline). One line per change, newest first.

Self-sufficient installer + Claude subscription path

  • Installer bootstraps omp from omp.sh/install if missing; auth presence check (stored credential blocks)
  • Proven live: --model opencode-go/muse-spark-1.3-contributor through the wrapper; omp update --check clean
  • Skills/MCP stance documented: allow-list, nothing auto-enabled

Root README + rewrite/idempotency fixes

  • Repo-root README with one-liner, usage table, levels, update story
  • Resume-hint rewrite idempotent (UUID-shaped ids only) + install.sh --prefix DIR fix

Bare TUI + exact update gate + level runtimes

  • Bare somp opens the governed TUI; somp tui -- <args> passthrough
  • Exact-match update origin gate; level→runtime mapping (strict=firecracker, standard=docker)
  • Print-mode /somp-status + /somp-level via stdout fallback

Update refuses foreign origins

  • somp update refuses upstream / non-somp origins fail-closed, unit-tested + proven live

Operator-repo updates

  • somp update pulls from the operator repo, never upstream omp/npm

Governed resume reminder

  • Shutdown reminder: somp-omp --resume, not omp --resume

Security levels + TUI badge

  • strict|standard|off setting, status-bar badge, somp level CLI, OFF fail-closed gates

Non-interfering installer

  • No ambient extension link; opt-in somp-omp wrapper; plain omp provably untouched

Bug-hunt batches

  • Diff scrub at print boundary, file-spec split fix, port-0 reject, kvm-open probe, ext unlink

AIec-box proof + findings

  • In-box logic-equivalence proof; worker TLS/destroy defects recorded

Public hygiene + scaffold

  • NUC identity redacted; governed omp-on-AIec scaffold (secrets deny+scrub, JEV design, guest+srt, bench)