feat(omnio): tool_search core-listing, per-child delegation completion, session delegations endpoint, forced-sync flag

[ppazosp]

Stacked on #63 (ppp/omnio-subagent-wake). Four commits, each independently reviewable:

1 · fix(tool-search) — never defer Omnio's own product tools

The tiered-disclosure change (upstream 0986ac393) puts Omnia's six plugin tools behind tool_search, but the agent's operating docs and skills name them directly — a deferred tool reads as unavailable and the model substitutes a weaker built-in (observed live: wanted web_read, used web_extract). New _OMNIO_ALWAYS_LOAD_TOOLS frozenset unioned into _core_tool_names(); _HERMES_CORE_TOOLS untouched (it doubles as the cli/cron/telegram tools: payload). Also open standalone as #68 — whichever lands first, the other rebases clean.

2 · feat(delegation) — per-child completion tick

A batch delegation's children finish at different times, but the progress sampler only reported running until the batch's single completion event. _run_single_child's finally sets a per-child finished flag, carried as the 5th element of the progress token; _progress_report_payload emits status: completed for that child exactly once (_claim_child_completions), and _flush_child_completions at finalize rescues the last child whose flip lands inside the sweep interval.

3 · feat(api-server) — GET /api/sessions/{session_id}/delegations

Filters the process-wide async-delegation registry by origin_session_id, exposing children_activity (+ per-child finished) so an external UI can rebuild what a session is still waiting on from the process that owns the children. This is the snapshot source for omnia NousResearch#4079's conversation-events SSE.

4 · feat(delegation) — honour delegation_sync_only

/v1/runs accepts an optional delegation_sync_only flag, threaded into session context as HERMES_DELEGATION_SYNC_ONLY (excluded from the session snapshot at both sites, like every _VAR_MAP name). When set, delegate_task forces synchronous execution unconditionally — defeating the wake-session re-enable rather than skipping it — so a headless caller (trigger.dev run, cron) that can never consume a background wake gets its result inside the turn. Fixes the proactive-run stall.

Tests

Per-file (this repo's multi-dir pytest gives false failures): test_tool_search 57 · test_async_delegation 50 · test_delegate 162 · test_delegate_apiserver_background 14 · test_async_delivery_capability 27 · test_api_server_session_delegations 5 (new) · test_api_server_omnio_turn_event_log 47 · test_session_env 16 · test_snapshot_session_id_leak 4. Ruff clean. (test_base_environment has one pre-existing failure, identical on main.)

Backward compatibility

Backward compatible. All four changes are inert without a counterparty: the always-load set only widens what one surface sees; the finished token element degrades on shorter tuples by design; the delegations endpoint is new (old proxies never call it; new proxies treat its absence as unknown); delegation_sync_only defaults false and old callers never send it. Hermes and the proxy ship together per sprite via reprovision — no intra-sandbox mixed pairing exists.

🤖 Generated with Claude Code