Small core, components everywhere
The agent loop, sessions, the built-in tools and compaction live in oino-core. Providers, commands, panels, permission gates: all of it is WASM components the host loads at startup. A crashing extension cannot take your session down, and every capability it touches is granted in its manifest, nothing more.
# in oino-core
agent loop, sessions, compaction
read write edit bash grep find ls
# loaded as components
providers, commands, panels, gates