oh-my-codex v0.21.16

0.21.16 is a patch release for the frozen range v0.21.15..00d06af4cac8663f409e66576f1719da28199ff0 (43 commits, 15 files, +6,158/−267; PRs #3792 and #3813).

Highlights

• Live plugin cache safety (#3792): pin active Codex sessions to the plugin-cache snapshots they use, retain live-pinned snapshots during recovery, and provide scoped repair for verified, managed, unpinned snapshots. Fixes #3790, reported by @spicysharkco.

Compatibility

• The cache recovery change preserves active sessions and fails closed on untrusted pin state. The scoped omx setup --plugin --repair-plugin-cache repair path is additive; existing plugin commands and package layout remain unchanged.
• Back-merging v0.21.15 restores main ancestry in dev (#3813).

Validation evidence

• Frozen candidate 00d06af4cac8663f409e66576f1719da28199ff0: latest-per-name dev CI had 24 successful checks, 1 skipped check, and no failing or incomplete checks.
• Local validation passed: npm run build:full, npm run build:runtime, npm run check:no-unused, npm run lint, cargo metadata --locked --format-version 1 --no-deps, and npm run sync:plugin:check. The 706 targeted Node tests passed: 687 across the 9 test files changed by PR #3792, plus 19 version/release tests. git diff --check passed.
• npm run smoke:packed-install passed; its installed-Codex trust leg was skipped because the Codex executable is absent from this Linux host.

Merged PR inventory

Contributors

Thanks to @clawdbot and @Yeachan-Heo for contributing to this release.

Full Changelog: v0.21.15...v0.21.16

—
[repo owner's gaebal-gajae (clawdbot) 🦞]