Tighten omp version gate to exact verified versions; treat a lone omp block as a spec candidate

Review findings: the major-only comparison admitted unverified 18.x minors against OMP-R05's per-minor admission contract, so admission is now an exact verified-version list like the opencode gate; and looks_like_spec now counts an omp driver block as an agent-shaped signal, matching every other provider.

agent-identity: unknown
agent-persona: generalist
agent-supervisor: unavailable
agent-tool: OMP
agent-tool-version: 18.0.3
agent-runtime: OMP 18.0.3
tooling-profile: dotfiles@929dc21

Author: schickling-assistant

crates/agent-spec/src/spec.rs

@@ -956,6 +956,7 @@ impl RawSpec {
             // still be a candidate, whichever provider the block names.
             || self.driver.pi.is_some()
             || self.driver.opencode.is_some()
+            || self.driver.omp.is_some()
             || !self.resource.0.is_empty()
             || !self.pty.is_empty()
             || !self.exec.is_empty()
@@ -1337,7 +1338,7 @@ mod tests {
     /// or path-derived discovery silently skips the seat.
     #[test]
     fn a_lone_driver_block_of_any_provider_is_a_spec_candidate() {
-        for provider in ["claude", "codex", "pi", "opencode"] {
+        for provider in ["claude", "codex", "pi", "opencode", "omp"] {
             let block = format!("[{provider}]\nprompt = \"Start the assigned work.\"");
             let raw: super::RawSpec = toml::from_str(&block).unwrap();
             assert!(raw.looks_like_spec(), "[{provider}] must look like a spec");

docs/vrs/06-omp-driver/.experiments/2026-08-25-omp-harness-integration.md

@@ -92,3 +92,25 @@ presence record read `available`; the harness-state record seeded `idle` under
 `st2-session-start` restored-context block; observed state cycled active → idle
 (transitions 3→5) around the delivery. The model's reply itself failed with a provider-side
 429 weekly usage limit — outside st2's surface.
+
+## Fleet e2e run (dotfiles integration)
+
+The dotfiles side activated the driver on dev3 through the standing
+`dev3.omp-scratch` seat (launched by the production supervisor via
+`st2 driver omp-session`, st2 repinned to this branch). Verified live: the
+seat materialized into the catalog, reached presence `available`, published
+the harness-state record (`harness: "omp"`, seeded idle, fenced by the
+wrapper's session token), and a `st2 message send` from `dev3.cos` landed in
+its live TUI through the channel with observed state cycling active → idle
+(transitions around the delivery). The model's reply was blocked by a
+provider-side 429 weekly usage limit on the opencode-go workspace - the same
+external quota exhaustion visible across the fleet that day; the
+model-acts-on-delivery step is covered by the manual runs above.
+
+Integration findings recorded on the way: Nix standing seats launch through
+the `axe agent launch` carrier, which spawns the raw harness binary - so a
+driver-backed seat that wants the wrapper's machinery must declare the
+`st2 driver <h>-session` argv directly rather than ride the axe carrier; and
+axe's managed path requires a profile account binding plus a fixed-account
+credential availability probe, which omp satisfies with its install-identity
+file since its native OAuth exposes no projectable credential.

src/omp_session.rs

@@ -43,10 +43,11 @@ pub const CHANNEL_SEQ: &str = "ST2_OMP_CHANNEL_SEQ";
 /// harmless either way.
 const OFFLINE_DEFAULTS: [(&str, &str); 2] = [("PI_OFFLINE", "1"), ("PI_SKIP_VERSION_CHECK", "1")];
 
-/// The verified range at introduction (2026-08-25, omp v18.0.3): major 18. A later minor stays
-/// rejected until the admission checks in `docs/vrs/06-omp-driver/spec.md` are repeated against
-/// it.
-const SUPPORTED_MAJOR: u32 = 18;
+/// The versions verified against the admission checks in
+/// `docs/vrs/06-omp-driver/spec.md` (2026-08-25). omp releases near-daily and its
+/// delivery-critical surface is versioned behavior, so admission is per exact version: a later
+/// minor OR patch stays rejected until the checks are repeated against it.
+const SUPPORTED_OMP_VERSIONS: [&str; 1] = ["18.0.3"];
 
 /// What the wrapper hands the provider process: the channel environment plus the launch argv with
 /// the channel extension spliced in.
@@ -167,18 +168,11 @@ fn verify_supported_version(binary: &str) -> Result<()> {
             token.split('.').all(|part| !part.is_empty() && part.chars().all(|c| c.is_ascii_digit()))
         });
     let version = version.with_context(|| format!("{{binary}} --version printed no version: '{printed}'"))?;
-    let digits: Vec<&str> = version.split('.').collect();
     anyhow::ensure!(
-        digits.len() >= 2,
-        "omp version '{version}' is not <major>.<minor>[.<patch>]"
-    );
-    let major: u32 = digits[0]
-        .parse()
-        .with_context(|| format!("parsing omp major version from '{version}'"))?;
-    anyhow::ensure!(
-        major == SUPPORTED_MAJOR,
-        "omp {version} is unverified (admitted majors: {SUPPORTED_MAJOR}); repeat the \
-         docs/vrs/06-omp-driver admission checks before extending the gate"
+        SUPPORTED_OMP_VERSIONS.contains(&version),
+        "omp {version} is unverified (admitted: {}); repeat the docs/vrs/06-omp-driver \
+         admission checks before extending the gate",
+        SUPPORTED_OMP_VERSIONS.join(", ")
     );
     Ok(())
 }
@@ -279,6 +273,17 @@ mod tests {
         assert!(verify_supported_version(fake.to_str().unwrap()).is_ok());
     }
 
+    #[test]
+    fn version_gate_refuses_an_unverified_minor() {
+        let dir = tempfile::tempdir().unwrap();
+        let fake = dir.path().join("omp");
+        std::fs::write(&fake, "#!/bin/sh\nprintf '18.1.0\\n'\n").unwrap();
+        use std::os::unix::fs::PermissionsExt as _;
+        std::fs::set_permissions(&fake, std::fs::Permissions::from_mode(0o755)).unwrap();
+        let error = verify_supported_version(fake.to_str().unwrap()).unwrap_err();
+        assert!(error.to_string().contains("unverified"), "{error}");
+    }
+
     #[test]
     fn version_gate_refuses_an_unverified_major() {
         let dir = tempfile::tempdir().unwrap();