chore: v2.8.15 — Oh My Pi login sharing, omp --allow-home, Markdown Preview default, first-login password

- omp-share.js: an admin's switch (S3) runs omp's own auth broker + gateway as
  the host on loopback; a member's omp pane reaches it as a scoped client keyed
  by its pane token (clients file = live omp panes only), runs on
  --model agenthub/<model>, never holds a credential.
- omp catalog: --allow-home, so a workspace at the account's home keeps its
  sessions there (they were recorded under a temp dir and dropped).
- Settings → Appearance → Open Markdown as: Preview (default) or Raw, for
  Files/Changes, the config viewer and a chat's file panel.
- First-login password change and password rules, avatar URLs, Artifacts
  "Mine" includes installed shared skills/plugins, a member's own hook pages.

server/lib/pty-run.js

@@ -302,7 +302,11 @@ function buildCodexArgv({
  * file, and the prompt is one argv element — or, for `after-start`, nothing
  * here: spawnRun pastes it into the pane once the CLI is up.
  */
-function buildCatalogArgv(entry, bin, { model, resumeSessionId, resumeLast, bypass, initialPrompt }) {
+function buildCatalogArgv(
+  entry,
+  bin,
+  { model, resumeSessionId, resumeLast, bypass, initialPrompt }
+) {
   const argv = [bin, ...entry.args];
   if (model && entry.model) argv.push(entry.model.flag, model);
   if (resumeSessionId && entry.resumeById) argv.push(...entry.resumeById, resumeSessionId);
@@ -485,6 +489,16 @@ function spawnRun(args) {
       ? require("./codex-pool").forSpawn(require("./run-as").accountForLane(laneId), laneOwner)
       : null;
   const paneCred = require("./auth").newPaneToken();
+  // A member's omp on the host's shared omp login (omp-share.js): its
+  // models.yml points at the loopback gateway, keyed by this pane's token.
+  const ompShare =
+    tool === "omp"
+      ? require("./omp-share").forSpawn(
+          require("./run-as").accountForLane(laneId),
+          runIdForLane(laneId, slot),
+          paneCred?.hash
+        )
+      : null;
   if (forkSession === true) {
     if (!resumeSessionId) throw makeErr("EBADSESSION", "a fork needs resumeSessionId");
     if (entry.launcher !== "claude") {
@@ -540,7 +554,8 @@ function spawnRun(args) {
       systemPrompt,
       systemPromptFile,
       tool,
-      model,
+      // A shared omp login runs on the gateway's provider (omp-share.js).
+      model: ompShare ? ompShare.model(model) : model,
       permissionMode,
       effort,
       sandbox,
@@ -654,6 +669,7 @@ function spawnRun(args) {
     // this process only. Through tmux `-e`, never typed into the pane.
     ...(poolAccount ? poolAccount.env : {}),
     ...(codexPool ? codexPool.env : {}),
+    ...(ompShare ? ompShare.env : {}),
     // Server mode: the CLI, MCP server and statusline in this pane act as the
     // workspace's owner with it (server/lib/auth.js userFromPaneToken).
     ...(paneCred ? { AGENTHUB_PANE_TOKEN: paneCred.token } : {}),
@@ -688,6 +704,7 @@ function spawnRun(args) {
   const prepareHome = () => {
     codexPool?.place();
     poolAccount?.place();
+    ompShare?.place();
     if (member && entry.launcher === "claude" && (poolAccount || proxyProfile)) {
       require("./run-as").markClaudeOnboarded(member);
     }