oracle, momus and plan-reviewer fall back to Argon before the previous pro model. In all three chains, Argon at high thinking (Google, Vertex or OpenCode) now sits directly ahead of the previous pro rung, which stays in place for Copilot and for engine pins that do not serve Argon yet. The GPT heads keep first place: on 8 consult and plan-review tasks graded blind, Argon beat the previous pro model in all 16 judgments but did not beat the current GPT heads on correctness, and its median answer took 57 s against 15 s. Telemetry now names the Qwen 3.7 Plus rung of explore and librarian instead of reporting it as custom. (#10180, #10263)
omo login, omo logout and omo whoami are switched off until OmO accounts open. OmO accounts aren't open to everyone yet. On every launcher (the npm omo, the compiled omo binary and the OpenCode-edition CLI), running omo login, omo logout or omo whoami, with any options including --help, prints "OmO accounts aren't available yet." and exits 1 without contacting the service or touching the OS credential store. They are gone from the OpenCode-edition CLI's --help command list, where help login, help logout and help whoami refuse the same way, and from the short command list omo --help prints when the engine can't start. Signing in to model providers (/login, omo mcp oauth login) works as before. (#10262, #10264)
omo account keys gives each machine its own device identity and keeps its private keys off the process list. omo account keys init now generates a random device id per machine and stores it with the keys, where every CLI install used to share the id cli. OMO_DEVICE_NAME no longer sets the id. On macOS without Bun.secrets, the Keychain write passes the key record to security -i on stdin; before, it went on the command line, where other processes could read it. The memory sync device keyring signs only RFC 8785 canonical JSON, checked by a full parse and re-serialization. It gains a snapshot signing purpose, and it opens epoch key wraps with the sync-design §8.1 HPKE info and associated data, so a wrap moved to another account, epoch or device does not open. Nothing syncs yet. (#10194)
Internal: an authenticated XPC transport for the desktop engine, not used yet. A hidden --xpc-agent mode serves the existing JSON-RPC over XPC. It accepts only a verified signed controller, gives each connection its own session, and carries no requests over the public discovery channel. No shipped client selects it. (#10207, #10220)
Full access no longer stops on permission prompts, and every session on a shared host can sign in the same way (senpi 2026.10.16). Under the full-access preset a configured ask rule no longer raises a prompt, while a configured deny still refuses and now names the rule and the settings layer it came from. A session opened on the shared task host lists the same sign-in options as a standalone one, so an OAuth provider that an extension registers is no longer missing there. Claude subscription sessions on 1M-window models such as Opus 5.5 no longer fail with "Prompt is too long" past 200k tokens, sessions sharing one credential pool no longer fail with "Credential store is busy", and opening the TUI or running /new without sending a message no longer leaves an empty session in /resume. The built-in Anthropic default is Opus 5.5 and the Xiaomi default is MiMo V2.6 Pro, used only when no model is saved or passed (senpi v2026.10.16, #10260)
A background child aborted by another client no longer reports a failure. Another client's user abort on a shared child session now ends that task as interrupted with whatever partial answer it had produced, instead of error: task_output keeps the partial text, no failure notification fires, and the task stays resumable with task_send. The parent's own abort still ends the task as cancelled, and provider or host-system aborts keep the failure classification (#10095).
Interrupted background tasks recover without crash warnings. Tasks that cannot reconnect resume automatically from their saved conversation and launch instructions within the existing retry budget. If recovery still fails, one notice names the task and its handle, explains why, and gives the corrective action for that cause; technical crash details stay in logs. Finished tasks with undelivered queued messages ask you to resend those messages rather than repeat finished work. Recovery completions retain partial output, the transcript tail, and a file pointer for large results (#10023, #10031).
ulw-research reports always carry visuals. The final-report phase now requires at least one chart drawn from the run's own data, a diagram wherever structure matters, and the topic's screenshots or video with attribution, every one captioned and given alt text. A new playbook says which visual fits which finding and how to render it: data charts with live text, Mermaid diagrams themed to the report, PlotNeuralNet for paper-style reports that describe a model's architecture, and Andrej Karpathy's tips on diagrams, HTML pages and explainer videos. The report checker now flags a report with no rendered visual and an image with no alt text; an empty alt counts as decorative only when the image is also marked role="presentation" or aria-hidden. (#10258, #10261)
- e848094 Merge pull request #10282 from code-yeongyu/fix/audit-allowlist-keystore-label
- 37169e4 test(audit): give literal labels their own allowlist category
- 2332e8f test(audit): categorize the keyring secret-tool label in the agent command string allowlist
- 26537b0 Merge pull request #10275 from code-yeongyu/docs/changelog-5.1.34-links
- 6b8303e docs(changelog): link #10263 and #10220 in their 5.1.34 notes
- e07c7ed Merge pull request #10263 from code-yeongyu/feat/argon-10180-agent-chains
- 0c094fd Merge remote-tracking branch 'origin/dev' into feat/argon-10180-agent-chains
- 6ff93e5 Merge pull request #10264 from code-yeongyu/fix/omo-login-block
- 8db98f6 Merge remote-tracking branch 'origin/dev' into fix/omo-login-block
- 0bf9879 Merge pull request #10194 from code-yeongyu/memsync/device-keyring-port
- e91f1ea docs(changelog): rebuild the Unreleased section from dev plus this PR's one entry (drop a stray merge marker)
- 27a32a2 Merge remote-tracking branch 'origin/dev' into fix/omo-login-block
- 861c29f Merge remote-tracking branch 'origin/dev' into memsync/device-keyring-port
- 787882f Merge pull request #10220 from code-yeongyu/feat/10207-xpc-transport
- c3ffe7d Merge remote-tracking branch 'origin/dev' into memsync/device-keyring-port
- b48a7b4 docs(changelog): drop the duplicated background-child entry left by the dev merge
- 834c44a Merge remote-tracking branch 'origin/dev' into feat/10207-xpc-transport
- 63049ff Merge remote-tracking branch 'origin/dev' into fix/omo-login-block
- 1a8d4db docs(changelog): say where omo login/logout/whoami are hidden and that every launcher refuses them
- ae1159a Merge remote-tracking branch 'origin/dev' into memsync/device-keyring-port
- 7911b7c docs(changelog): link #10095 in its [Unreleased] paragraph
- 480df03 Merge pull request #10031 from code-yeongyu/fix/10023-crash-notices
- 56d4b63 fix(cli): refuse omo help login/logout/whoami while accounts are closed
- 05cae05 Merge pull request #10261 from code-yeongyu/feat/ulw-research-report-visuals
- 728ae33 Merge remote-tracking branch 'origin/dev' into feat/10207-xpc-transport
- 25c0aad Merge remote-tracking branch 'origin/dev' into fix/omo-login-block
- 2bcea89 Merge remote-tracking branch 'origin/dev' into feat/ulw-research-report-visuals
- 478390b docs(changelog): note omo login/logout/whoami switched off until accounts open (#10262)
- 311e84d docs(changelog): ulw-research reports always carry visuals (#10258)
- 0c792a0 Merge remote-tracking branch 'origin/dev' into rpcmac2/10031
- 9af9184 Merge pull request #10095 from code-yeongyu/fix/f10a-interrupted-foreign-abort
- 99af478 test(desktop-engine): hand the crash-test endpoint over a registered port (#10207)
- 8db6280 fix(cli): hide omo login/logout/whoami and refuse them until OmO accounts open
- 671655d fix(ulw-research): decorative images need an explicit marker; only rendered figures count as visuals
- 3956bd2 Merge pull request #10153 from code-yeongyu/fix/cancel-pending-close-budget
- 7a76843 fix(ulw-research): treat an explicit empty alt as decorative in the visual gates
- 871f676 Merge remote-tracking branch 'origin/dev' into rpcmac2/10095
- 8d64de0 Merge remote-tracking branch 'origin/dev' into rpcmac2/10031
- 429bd25 Merge remote-tracking branch 'origin/dev' into memsync/device-keyring-port
- a1f7768 Merge remote-tracking branch 'origin/dev' into feat/10207-xpc-transport
- f4cdb2b feat(ulw-research): every final report carries visuals; gate reports with no visual and images without alt text
- 47f80bb Merge pull request #10241 from code-yeongyu/release/v5.1.34-beta.1-source-state
- e2c6ea6 fix(desktop-engine): test the emergency release at its production budget (#10207)
- 9f8300a Merge pull request #10256 from code-yeongyu/fix/bsk-daemon-recovery-test-windows
- c07af3d fix(memory): keep a proto record key as an own property; bound HPKE expand to one block
- 921e931 test(shared-skills): run the BrowserSkill daemon-recovery tests correctly on Windows
- 19e8f0f Merge remote-tracking branch 'origin/dev' into rpcmac2/10095
- ff19625 Merge remote-tracking branch 'origin/dev' into rpcmac2/10031
- 3ed403b Merge pull request #10255 from code-yeongyu/docs/changelog-5.1.34-beta.1-links-3
- 2be06a9 fix(desktop-engine): prove crash release with a killed client and keep the stop tap bounded (#10207)
- ff1c11e docs(changelog): restore and add PR links for 5.1.34-beta.1 entries; describe the Argon pin without the model id
- 3d74937 Merge pull request #10254 from code-yeongyu/fix/10216-10217-omowright-pin
- f776eda Merge remote-tracking branch 'origin/dev' into fix/10216-10217-omowright-pin
- f2ed231 docs(changelog): note the browser skill daemon recovery and call cancel (#10216, #10217); clear the test's wait timer
- 24d00b3 Merge pull request #10246 from code-yeongyu/fix/static-help-commands
- 0178672 Merge pull request #10195 from code-yeongyu/fix/8187-migrate-noop-no-write
- 461b1c9 fix(browser): pin omowright f87ef4d (BrowserSkill orphan daemon re-adoption and timed-out call cancel)
- ef02cca Merge remote-tracking branch 'origin/dev' into fix/8187-migrate-noop-no-write
- 5e21bf4 Merge remote-tracking branch 'origin/dev' into fix/static-help-commands
- ede7ee6 test(browser): pin BrowserSkill daemon re-adoption and timeout cancel in the pinned omowright (#10216, #10217)
- 183fa86 Merge pull request #10192 from code-yeongyu/feat/argon-tier1-visual-writing
- a627529 Merge remote-tracking branch 'origin/dev' into feat/argon-tier1-visual-writing
- 45ff9d3 test(memory): open the regenerated wraps.json golden vectors (omo-service aaf7bb7954)
- d560e1f Merge pull request #10247 from code-yeongyu/docs/changelog-5.1.34-beta.1-links-2
- 756a157 Merge remote-tracking branch 'origin/dev' into fix/8187-migrate-noop-no-write
- 40d2ae9 docs(changelog): link the #10240 and #10193 entries for 5.1.34-beta.1
- b55d87e Merge pull request #10244 from code-yeongyu/fix/changelog-gate-prerelease-heading
- 96c22df fix(omo-native): the static help under an invalid OMO_EXTRA_CA_CERTIFICATES names the real launcher commands (#10242)
- 0d54eea Merge pull request #10240 from code-yeongyu/fix/10236-ca-trust-followups
- 277ad28 test(memory): gate the wraps.json golden vector on the svc #428 regeneration
- 41b1b04 test(ci): pin the already-released prerelease case
- 5d6bc8e fix(ci): the changelog gate recognizes a prerelease release section (5.1.34-beta.1 release-state PR #10241)
- 2c33942 docs(changelog): note the device keyring review fixes (#10194)
- 8faba3d test(ci): a prerelease heading counts as a release transition in the changelog gate
- 9dbb51c Merge remote-tracking branch 'origin/dev' into feat/argon-tier1-visual-writing
- d396380 Merge remote-tracking branch 'origin/dev' into fix/10236-ca-trust-followups
- 5a964ad Merge remote-tracking branch 'origin/dev' into memsync/device-keyring-port
- bbe7552 fix(memory): close #10194 review findings and spec conformance
- 7033ac4 Merge pull request #10193 from code-yeongyu/memsync/loro-runtime
- ffd3496 Merge remote-tracking branch 'origin/dev' into fix/10236-ca-trust-followups
- 4d1d6f9 Merge remote-tracking branch 'origin/dev' into memsync/loro-runtime
- 99ae049 Merge pull request #10176 from code-yeongyu/fix/10163-test-temp-leak
- 3827bf4 Merge pull request #10223 from code-yeongyu/docs/changelog-5.1.34-beta.1-links
- cdb8fc3 fix(omo-native): answer only the exact --version/--help from static data under an invalid OMO_EXTRA_CA_CERTIFICATES (#10236 review)
- 9f6aa12 docs(changelog): describe the #10212 reinstall step without naming internal tooling
- 8a63edb fix(omo-native): --version/--help answer under an invalid OMO_EXTRA_CA_CERTIFICATES; trust report counts ambient CAs (#10236)
- 1bdf7c9 Merge remote-tracking branch 'origin/dev' into docs/changelog-5.1.34-beta.1-links
- 8c56a63 Merge pull request #10232 from code-yeongyu/fix/telemetry-summary-optout-gate
- 2e97ab3 Merge remote-tracking branch 'origin/dev' into memsync/loro-runtime
- 35edf6c Merge remote-tracking branch 'origin/dev' into fix/telemetry-summary-optout-gate
- 2b1adb6 docs(changelog): note that a telemetry opt-out keeps the session summary off disk (#10229)
- 82a5069 Merge remote-tracking branch 'origin/dev' into feat/10207-xpc-transport
- d764dc4 Merge pull request #10235 from code-yeongyu/fix/10233-team-pane-dir-tmux-format
- ea91dca Merge remote-tracking branch 'origin/dev' into memsync/loro-runtime
- 3af5166 fix(desktop-engine): close XPC sessions on client disconnect, activate rejected peers before release, release held input before persisting the stop (#10207)
- 9e17d19 docs(changelog): Loro CRDT runtime for memory sync (#10178)
- c7d3615 Merge remote-tracking branch 'origin/dev' into feat/argon-tier1-visual-writing
- 7141b06 fix(team-core): keep team pane directories literal for tmux -c
- 548602a test(omo-native): keep the host Bun cache in the setup e2e child
- 0fdd45f Merge remote-tracking branch 'origin/dev' into fix/8187-migrate-noop-no-write
- ecefb47 Merge pull request #10231 from code-yeongyu/fix/10228-tmux-placeholder-quoting
- 2dcafd5 fix(telemetry): an opt-out deletes the persisted summary window at once and recovery re-reads consent for the window's own scope (#10229)
- 47a7f93 Merge remote-tracking branch 'origin/dev' into fix/10228-tmux-placeholder-quoting
- 8ecedb5 test(telemetry): pin that a mid-session opt-out followed by a kill never lets the earlier window be sent (#10229)
- 9aeb69b fix(tmux-core): keep model text literal in subagent pane titles too
- bc57bfa Merge pull request #10219 from code-yeongyu/fix/10215-engine-system-ca
- a52f09a fix(memory): resolve the Loro wasm path through import.meta.url so the loader also runs under Node
- f2cb4a5 Merge remote-tracking branch 'origin/dev' into fix/10215-engine-system-ca
- a1b0028 Merge pull request #10230 from code-yeongyu/fix/10227-exitcode-restore
- 9b46187 fix(tmux-core): quote the placeholder pane banner for both shell levels
- c597a85 fix(telemetry): an opted-out session records no session_summary and nothing it left is ever sent (#10229)
- 522a59d test(omo-native): restore process.exitCode to 0, not undefined, so compile-entry.test.ts exits 0 under Bun (#10227)
- 2cf397c test(telemetry): pin that an opted-out session's session_summary is never recorded or sent (#10229)
- 3bde4d8 Merge pull request #10204 from code-yeongyu/fix/thread-tools-review-cleanup
- 4453f43 Merge remote-tracking branch 'origin/dev' into fix/thread-tools-review-cleanup
- 2d3eb43 docs(changelog): link the remaining 5.1.34-beta.1 entries to their PRs and split two glued paragraphs
- 5cd2ccd Merge remote-tracking branch 'origin/dev' into docs/changelog-5.1.34-beta.1-links
- be3a3d0 Merge remote-tracking branch 'origin/dev' into fix/10215-engine-system-ca
- 16315fb fix(omo-native): drop the leftover diff3 block from CHANGELOG and honor NODE_EXTRA_CA_CERTS for standalone runs (#10215)
- fa6b9e2 Merge pull request #10129 from code-yeongyu/fix/rpc-seam-12-client-message-id
- 9f9d4df Merge remote-tracking branch 'origin/dev' into fix/thread-tools-review-cleanup
- 21f0124 test(omo-native): every line-ending form parses to the identical CA set (#10215)
- 8a61ef7 Merge remote-tracking branch 'origin/dev' into feat/10207-xpc-transport
- 5b344db fix(desktop-engine): persist the global stop latch across agent restarts (#10207)
- d3e4b2e Merge remote-tracking branch 'origin/dev' into fix/rpc-seam-12-client-message-id
- f980125 Merge pull request #10214 from code-yeongyu/feat/10207-xpc-peer-verifier
- 88df2e0 Merge remote-tracking branch 'origin/dev' into fix/thread-tools-review-cleanup
- 86009a3 Merge pull request #10212 from code-yeongyu/fix/10207-engine-self-responsible-gate
- a04d677 Merge remote-tracking branch 'origin/dev' into fix/rpc-seam-12-client-message-id
- 4b980b6 docs(changelog): link every 5.1.34-beta.1 entry and drop the private desktop-repo link
- 66b9f1c Merge remote-tracking branch 'origin/dev' into feat/10207-xpc-peer-verifier
- 006652d Merge remote-tracking branch 'origin/dev' into fix/10215-engine-system-ca
- 523cc37 Merge remote-tracking branch 'origin/dev' into fix/10163-test-temp-leak
- bb9c7b7 Merge remote-tracking branch 'origin/dev' into memsync/loro-runtime
- e37f3b1 Merge remote-tracking branch 'origin/dev' into fix/8187-migrate-noop-no-write
- 0bedd70 Merge remote-tracking branch 'origin/dev' into fix/10207-engine-self-responsible-gate
- b594506 refactor(omo-native): read loro-smoke golden bytes from the shared fixture
- 7970ad3 fix(memory): give the Loro loader bundler-entry parity and a cwd-safe wasm path
- fdd9000 fix(omo-native): normalize every CR form before parsing CA PEM (#10215)
- 9833a66 test(security): allowlist the CA-trust module's node:tls import; it never connects (#10215)
- 3a6b5c8 docs(changelog): compiled engine trusts the OS certificate store (#10215)
- 5470b67 docs(changelog): note the inactive desktop XPC transport (#10207)
- fbf17e8 Merge remote-tracking branch 'origin/feat/10207-xpc-peer-verifier' into feat/10207-xpc-transport
- af4abf4 feat(desktop-engine): authenticated XPC agent transport and per-connection sessions (O2, #10207)
- 49b886f Merge commit '6b1ae607bb' into feat/10207-xpc-transport
- d356581 fix(omo-native): ignore an ambient NODE_EXTRA_CA_CERTS in the compiled engine (#10215)
- ea686a6 fix(omo-native): the compiled engine trusts the OS store and validated extra CAs (#10215)
- 6b1ae60 fix(desktop-xpc): compile the policy only on macOS and use as_chunks for the audit token bytes
- 0738ef4 docs(telemetry): regenerate the schema block after merging dev (#10187)
- 59847b0 Merge remote-tracking branch 'origin/fix/10207-engine-self-responsible-gate' into feat/10207-xpc-transport
- e56978b Merge pull request #10218 from code-yeongyu/fix/10213-session-summary-qa-allowlist
- 25dfb56 Merge remote-tracking branch 'origin/dev' into fix/10163-test-temp-leak
- 38a1189 Merge remote-tracking branch 'origin/dev' into feat/argon-tier1-visual-writing
- 8e59eec fix(qa): state the real reason session_summary is conditional (#10218 review)
- 1362685 fix(desktop-xpc): kernel-only audit tokens, page-protection entitlement, real XPC and signed-fixture proofs (#10207)
- 5c887ec Merge remote-tracking branch 'origin/dev' into fix/8187-migrate-noop-no-write
- 9d38a3d docs(changelog): note the desktop XPC identity verifier (#10207)
- 9995bdc feat(desktop-xpc): message identity verifier and role policy (O1, #10207)
- 5b8815c fix(qa): count session_summary in the OmO Native QA allowlist coverage as a conditional event (#10213)
- af2c2cf fix(desktop-engine): gate every entry mode, including --cursor-overlay
- 4ca3c58 fix(desktop-engine): refuse to run as its own responsible process; daemon modes behind --enable-daemon
- c735931 Merge pull request #10186 from code-yeongyu/ci/workflow-run-fanout-concurrency
- 3e9dea7 docs(thread): drop the stale duplicate session-facts.ts row (#10155 review LOW)
- d2d09ab Merge remote-tracking branch 'origin/dev' into fix/thread-tools-review-cleanup
- b2f04dd Merge pull request #10155 from code-yeongyu/fix/9356-thread-tool-defects
- b53afbb Merge remote-tracking branch 'origin/dev' into fix/9356-thread-tool-defects
- 27bd4c4 Merge remote-tracking branch 'origin/dev' into fix/8187-migrate-noop-no-write
- b3fd227 Merge pull request #10184 from code-yeongyu/feat/telemetry-session-summary
- f96ab97 Merge remote-tracking branch 'origin/dev' into feat/telemetry-session-summary
- 70b674e Merge pull request #10197 from code-yeongyu/test/bundle-budget-session-summary
- 7d32d9e fix(thread): escape & and backticks in thread link labels; drop the unused agentDir tool option (#10157/#10160 review LOWs)
- 58f69e2 Merge remote-tracking branch 'origin/dev' into fix/9356-thread-tool-defects
- fe453f0 Merge pull request #9624 from Dante-dan/refactor/9515-thread-client
- a26cbc1 Merge remote-tracking branch 'origin/dev' into fix/8187-migrate-noop-no-write
- 1c0a055 Merge remote-tracking branch 'origin/dev' into fix/9356-thread-tool-defects
- 8016da1 fix(config): recovery records the backup name before writing, so a second crash names the right file (#8187 review r3)
- 44b9e8d fix(config): a crash between the backup and the target write can no longer wedge migration (#8187 review r2)
- 6013eb4 Merge remote-tracking branch 'origin/dev' into tt/9624
- 642bfa4 fix(config): name the backup after journal recovery and at startup (#8187 review)
- 4798b9e Merge remote-tracking branch 'origin/dev' into feat/telemetry-session-summary
- 38c415a Merge pull request #9508 from code-yeongyu/fix/gateway-extension-lock-scope
- be3af2d Merge remote-tracking branch 'origin/dev' into fix/gateway-extension-lock-scope
- 856c117 Merge remote-tracking branch 'origin/dev' into fix/9356-thread-tool-defects
- d541869 fix(config): config migrate names every backup it wrote; no-op stays a no-op (#8187)
- 8dcaf57 Merge pull request #10157 from code-yeongyu/feat/thread-create-initial-skills
- c996bcb Merge remote-tracking branch 'origin/dev' into memsync/device-keyring-port
- 3f59665 Merge remote-tracking branch 'origin/dev' into memsync/loro-runtime
- 3d72bd3 Merge remote-tracking branch 'origin/dev' into feat/thread-create-initial-skills
- a00979e Merge pull request #10160 from code-yeongyu/feat/1868-thread-links
- d3692af Merge remote-tracking branch 'origin/dev' into feat/1868-thread-links
- 978cc0a Merge pull request #10181 from code-yeongyu/fix/omo-dev-support-route
- 54b5404 Merge remote-tracking branch 'origin/dev' into feat/telemetry-session-summary
- 4a14188 Merge pull request #10130 from spicysharkco/fix/worktree-sweep-from-linked-worktree
- d532796 style(web): prettier-format the support page files (#10179)
- ed5c923 Merge remote-tracking branch 'upstream/dev' into fix/worktree-sweep-from-linked-worktree
- 6c161a1 Merge pull request #10133 from spicysharkco/fix/git-diff-stats-nul-paths
- cbc1769 Merge pull request #10034 from code-yeongyu/fix/qa-mock-declared-tools-from-transcript
- 823f8b9 Merge remote-tracking branch 'upstream/dev' into fix/worktree-sweep-from-linked-worktree
- 78ca1f0 Merge remote-tracking branch 'upstream/dev' into fix/git-diff-stats-nul-paths
- 739b976 Merge remote-tracking branch 'origin/dev' into fix/qa-mock-declared-tools-from-transcript
- d8b8e7e Merge pull request #10190 from code-yeongyu/fix/sck-wire-test-deadline
- 0ed2730 docs(changelog): note the sck wire test deadline fix (#10189)
- 5db2807 test(desktop): give the sck wire tests a test-only deadline that survives a loaded host (#10189)
- 142311b Merge remote-tracking branch 'origin/dev' into feat/telemetry-session-summary
- d7d3ee8 Merge pull request #10048 from code-yeongyu/feat/cu-capture-helper-release
- cac9d24 build: regenerate bundles on Linux after merging dev
- d547fbf Merge remote-tracking branch 'upstream/dev' into fix/git-diff-stats-nul-paths
- f9c7cc0 Merge remote-tracking branch 'origin/dev' into feat/cu-capture-helper-release
- 45e775c Merge remote-tracking branch 'origin/dev' into rpcmac2/10129
- 8f3d39a Merge pull request #10038 from code-yeongyu/feat/cu-b9-sck-worker
- 18a1bc7 Merge remote-tracking branch 'origin/dev' into rpcmac2/10153
- 95ea857 build: regenerate bundles on Linux after merging dev
- 92fcc31 Merge pull request #10113 from code-yeongyu/fix/10033-retired-app-server-followups
- 83e18c0 Merge remote-tracking branch 'origin/dev' into rpcmac2/10095
- 7df1d56 refactor(omo-native): split loro-smoke out of compile-entry for the 250 pure LOC ceiling
- 0c03da0 build: regenerate bundles on Linux after merging dev
- a074036 Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- 3a5ce7a test(desktop): give the stalled-start lock test a warm-up budget that survives a loaded host (#10038)
- 9eb31ef fix(desktop): fail closed when the helper cannot read the window list (#10038)
- 9ee1fab Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- b1d663b Merge remote-tracking branch 'origin/dev' into rpcmac2/10031
- dee82bf fix(desktop): refuse an SCK frame when a live cursor helper is missing from capture content (#10038)
- 0fa1d52 Merge remote-tracking branch 'origin/dev' into feat/cu-b9-sck-worker
- 95db60e docs(changelog): session_summary replaces per-turn usage events (#10182)
- 3dcd187 fix(memory): correct the object signature tag to omo-sync/v1/object-digest
- 40d52ed feat(memory): domain-separate every DeviceKeyring signature
- 4c69b20 feat(omo-native): omo loro-smoke in the compiled CLI
- a1bcf38 feat(memory): Loro runtime loader with golden-bytes encoding pin
- 7f2825a build(memory): pin loro-crdt 1.16.4 in memory-core
- dfb1e03 feat(memory): type DeviceKeyring.sign, never a raw-bytes oracle
- 6b9b5b9 Merge remote-tracking branch 'upstream/dev' into fix/git-diff-stats-nul-paths
- 0518add feat(cli): register omo account keys init|status
- bd7cd26 feat(cli): account keys keystore with OS-encrypted backends only
- c0f1bc5 feat(memory): device keyring port for the sync engine
- 5b3ecdf Merge remote-tracking branch 'origin/dev' into fix/omo-dev-support-route
- 01fd1d1 fix(web): support page review: honest privacy note, emoji-safe caps, per-request render (#10179 review)
- c904358 feat(web): add the omo.dev/support page the desktop Report a problem links to (#10179)
- 6317547 test(omo-native): give the setup e2e child its own Bun home and BUN_TMPDIR (#10176 review)
- d5f33a3 test(omo-native): keep the setup e2e child temp files inside the fixture root (#9766)
- 47fd9a3 Merge remote-tracking branch 'upstream/dev' into fix/git-diff-stats-nul-paths
- eb18209 Merge remote-tracking branch 'origin/dev' into rpcmac2/10153
- c6936c1 build: regenerate bundles on Linux after merging dev
- 723fd2e Merge remote-tracking branch 'origin/dev' into rpcmac2/10095
- e0148b7 build: regenerate bundles on Linux after merging dev
- 6253706 Merge remote-tracking branch 'origin/dev' into rpcmac2/10129
- 9df1d90 build: regenerate bundles on Linux after merging dev
- 12e2a6d Merge remote-tracking branch 'origin/dev' into rpcmac2/10031
- 90ffb23 fix(omo-native): keep the stale engine prefix for retired daemons and share the binary-runtime path pattern (#10033 review)
- af4c178 test(omo-native): a retired app-server daemon keeps the stale engine prefix (#10033 review)
- d36307b test(script): count the new omo doctor mentions in the command-string audit allowlist (#10033)
- 8da2eb0 fix(omo-native): doctor names leftover app-server daemons; retirement review follow-ups (#10033)
- cec15c7 test(omo-native): doctor names leftover app-server daemons (#10033)
- e8a7bcf Merge pull request #10131 from code-yeongyu/fix/rpc-seam-14-task-wake-source
- f5671fc test(thread): drop a stray blank line
- ada112c fix(thread): escape < and > in thread link labels and reject query or fragment in parsed links (#10160 review)
- e6611de Merge pull request #10163 from code-yeongyu/fix/10158-setup-catalog-providers
- 53810bd fix(thread): thread_create checks skill names only; the new session's registry decides what it loads (#10157 review)
- 37d9d7e Merge pull request #9474 from code-yeongyu/dfa/30-download-page
- 4586a02 Merge remote-tracking branch 'origin/dev' into rpcmac2/10153
- b694ad3 Merge remote-tracking branch 'origin/dev' into feat/1868-thread-links
- e0a761b Merge remote-tracking branch 'origin/dev' into feat/thread-create-initial-skills
- e6946fe fix(thread): retry the lazy thread client after a failed load and report it as host_unavailable (#9624 review)
- c819046 Merge remote-tracking branch 'origin/dev' into rpcmac2/10095
- 426dd7d Merge remote-tracking branch 'origin/dev' into fix/10158-setup-catalog-providers
- 6a1fe2e Merge remote-tracking branch 'origin/dev' into rpcmac2/10131
- a3ad559 Merge remote-tracking branch 'origin/dev' into rpcmac2/10129
- 1d0eda3 Merge remote-tracking branch 'origin/dev' into rpcmac2/10031
- 5d8cf15 Merge pull request #10161 from code-yeongyu/fix/9889-overlay-exclusion-race
- 9aaea63 fix(thread): fuzzy handoff without a caller root is caller_context_missing; thread_create checks names through checkNameConflict (#10155 review)
- 5b10264 Merge remote-tracking branch 'origin/dev' into tt/9624
- 26ac413 build: regenerate bundles on Linux after merging dev
- b929fc8 Merge remote-tracking branch 'origin/dev' into feat/1868-thread-links
- c48cd36 Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- efc3d95 Merge remote-tracking branch 'origin/dev' into feat/thread-create-initial-skills
- ece97e9 Merge remote-tracking branch 'origin/dev' into fix/gateway-extension-lock-scope
- 924ff7b Merge remote-tracking branch 'origin/dev' into feat/cu-b9-sck-worker
- ec3bbda Merge remote-tracking branch 'origin/dev' into fix/9356-thread-tool-defects
- a05649b Merge remote-tracking branch 'origin/dev' into rpcmac2/10095
- 283d7d7 Merge remote-tracking branch 'origin/dev' into rpcmac2/10131
- 38b66ff build: regenerate bundles on Linux after merging dev
- 40841df Merge remote-tracking branch 'origin/dev' into rpcmac2/10129
- db21a22 build: regenerate bundles on Linux after merging dev
- 8c4009e Merge remote-tracking branch 'origin/dev' into rpcmac2/10031
- 07a900b Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- 7b9b58d chore(desktop): name the cooldown cause neutrally and note it is per session thread (#10038)
- 78fe863 Merge pull request #10045 from code-yeongyu/fix/10042-nonblocking-task-admission
- 32e72cf Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- 45a8fc4 fix(desktop): cool down the SCK worker after an in-lock timeout too (#10038)
- eb12141 fix(web): one build-time launch flag, a flag-off e2e, cached reads and stricter installer rules (#9473)
- c46a5af Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- 38468db docs(desktop): name the launching app in the quarantine caveat (#10048)
- 9f5f452 fix(desktop): size the SCK in-lock budget from measured captures and fall back on timeout (#10038)
- c64856a docs: CHANGELOG entry for omo setup catalog providers (#10158)
- 88825ff Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- 8546886 fix(desktop): warm the capture helper outside the cursor-exclusion lock (#10038)
- 8f36444 fix(omo-native): a catalog provider routed through its own baseURL still takes the catalog's models (#10158)
- fc80d39 docs(desktop): say TCC charges the responsible process, not the staged capture helper (#10048)
- 754946b fix(omo-native): deep-merge a catalog model override; keep the catalog env key; report a refusal once (#10158)
- ff2cf3e feat(web): /download stays off in production, checks SHA256SUMS and shows what each release lacks (#9473)
- e0a4043 Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- 0fa8845 Merge remote-tracking branch 'origin/dev' into feat/cu-b9-sck-worker
- 32b51f4 Merge remote-tracking branch 'origin/dev' into fix/qa-mock-declared-tools-from-transcript
- edcdef0 docs(changelog): note the fail-closed capture for a live helper missing from SCK content (#10161)
- 24582e2 Merge remote-tracking branch 'origin/dev' into dfa/30-download-page-mac
- fed19b2 Merge remote-tracking branch 'origin/dev' into feat/1868-thread-links
- 6a5f7f8 Merge remote-tracking branch 'origin/dev' into feat/thread-create-initial-skills
- 6a6cc68 Merge remote-tracking branch 'origin/dev' into fix/gateway-extension-lock-scope
- 40a4113 Merge remote-tracking branch 'origin/dev' into fix/9356-thread-tool-defects
- 157553f Merge remote-tracking branch 'origin/dev' into rpcmac2/10131
- f00d937 Merge remote-tracking branch 'origin/dev' into rpcmac2/10095
- 362f38f Merge remote-tracking branch 'origin/dev' into rpcmac2/10031
- 0084a4d docs(changelog): the thread client loads on first use (#9624)
- fc3139b Merge remote-tracking branch 'origin/dev' into tt/9624
- 5520f25 Merge remote-tracking branch 'origin/dev' into rpcmac2/10045
- 603d261 Merge remote-tracking branch 'origin/dev' into rpcmac2/10129
- 2733e20 fix(omo-native): a config block for a catalog provider extends the catalog entry (#10158)
- 2c3481c fix(omo-native): omo setup carries OpenCode catalog providers such as neuralwatt (#10158)
- ec07af5 Merge remote-tracking branch 'origin/dev' into fix/9889-overlay-exclusion-race
- 4123578 Merge pull request #9889 from code-yeongyu/feat/9887-computer-cursor
- 0a96a34 fix(desktop-macos): fail closed when a live cursor helper is missing from capture content
- bc55c33 feat(thread): thread tool results carry a link to the thread
- b1a2c93 feat(thread): declare thread.skills on the create result
- 486964e feat(thread): create a thread with skills it follows from its first turn
- bf85811 Merge remote-tracking branch 'origin/dev' into tt/9624
- 9587041 docs(thread): readDiskSession reads bounded windows
- ed3df67 docs(changelog): thread tool fixes for #9356
- 3695434 Merge remote-tracking branch 'origin/dev' into fix/gateway-extension-lock-scope
- 3cb56dc fix(thread): decode RPC frames as a UTF-8 stream, compare names like addressing, scope fuzzy handoff, read disk listings in bounded windows (#9356)
- d933176 Merge remote-tracking branch 'origin/dev' into rpcmac2/10095
- 5556bfd Merge remote-tracking branch 'origin/dev' into rpcmac2/10129
- cf81789 Merge remote-tracking branch 'origin/dev' into rpcmac2/10131
- e049450 docs(changelog): move the busy-host entry back under Unreleased after the 5.1.32 cut (#10045)
- b4682c1 Merge remote-tracking branch 'origin/dev' into rpcmac2/10031
- 929184d Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- fb36e12 Merge remote-tracking branch 'origin/dev' into rpcmac2/10045
- cfa3184 Merge remote-tracking branch 'origin/dev' into feat/cu-b9-sck-worker
- 56cf8a2 Merge remote-tracking branch 'origin/dev' into feat/9887-computer-cursor
- 63a54b7 Merge remote-tracking branch 'origin/dev' into feat/cu-capture-helper-release
- 80cef4a fix(desktop): sign the release capture helper with the engine identity (#10048)
- 55293d6 Merge pull request #10145 from code-yeongyu/chore/10140-migration-skip-nits
- 10badc8 docs(changelog): note the migration skip bookkeeping cleanup
- c316ad0 Merge remote-tracking branch 'origin/dev' into feat/9887-computer-cursor
- 6d2ca0d Merge remote-tracking branch 'origin/dev' into feat/cu-b9-sck-worker
- eb8f438 refactor(utils): collect migrated sources once and fix the stale skip comment (#10140 review nits)
- 94059cb Merge pull request #10140 from code-yeongyu/fix/opus-default-no-4-8
- 570ce02 fix(utils): key the applied-migration skip by the source model
- 6f5f611 Merge pull request #10142 from code-yeongyu/docs/readme-lang-order-20261014
- c5c6bcb docs(readme): order language switcher English, Chinese, Japanese, Russian, Korean
- 271e345 fix(claude-code-compat-core,utils): keep opus default and migration off Opus 4.8
- 26e3b57 Merge remote-tracking branch 'origin/dev' into rpc-exec/10045
- a048ab9 fix(utils): read git diff stats NUL-separated so renamed and quoted paths keep their counts
- f4dc8e3 Merge remote-tracking branch 'origin/dev' into rpc-exec/10031
- 51fbf59 fix(cli): run worktree-sweep from the main worktree and keep the current one
- 5afa260 Merge remote-tracking branch 'origin/dev' into feat/9887-computer-cursor
- cc948b0 Merge remote-tracking branch 'origin/dev' into feat/cu-capture-helper-release
- 2cf319a Merge remote-tracking branch 'origin/dev' into feat/cu-b9-sck-worker
- cd31c31 Merge pull request #10098 from code-yeongyu/refactor/codex-compat-removal-20261012
- cdf5c32 docs(omo-native): correct the parity-test note in the tracker (#10033)
- 74bb183 fix(desktop-macos): keep windows whose on-screen key is absent
- 27d79cd Merge remote-tracking branch 'origin/dev' into fix/9889-n1-review
- fd61775 fix(desktop-macos): gate cursor overlay on per-frame capture exclusion
- eee591e Merge remote-tracking branch 'origin/dev' into fix/f10a-interrupted-foreign-abort
- 36346ab Merge remote-tracking branch 'origin/dev' into refactor/codex-compat-removal-20261012
- 5275771 Merge pull request #10103 from code-yeongyu/release/v5.1.33-source-state
- 57daf90 Merge remote-tracking branch 'origin/dev' into fix/f10a-interrupted-foreign-abort
- ebf12e9 Merge remote-tracking branch 'origin/dev' into refactor/codex-compat-removal-20261012
- c4418d5 docs(changelog): note the retired omo app-server (#10033)
- 932ce7b test(omo-native): keep excluding the retired app-server from engine routing (#10033)
- a6c51ef Merge remote-tracking branch 'origin/dev' into refactor/codex-compat-removal-20261012
- 49da377 refactor(omo-native): retire the Codex app-server forwarding (#10033)
- af47642 Merge origin/dev into feat/9887-computer-cursor for CI
- 4f3c309 Merge origin/dev into feat/9887-computer-cursor for final regeneration
- ba6b7e1 Merge origin/dev into feat/9887-computer-cursor with pixel diagnostics
- f607f2e Merge origin/dev into feat/9887-computer-cursor for exclusion fix
- 03f538c fix(desktop): exclude concurrent cursor overlays from captures
- 7ec490f Merge origin/dev v5.1.31 into feat/9887-computer-cursor
- 50da9c8 Merge origin/dev atomic observe into feat/9887-computer-cursor
- 622d3fe Merge remote-tracking branch 'origin/dev' into fix/10042-nonblocking-task-admission
- 25b8411 chore(desktop): regenerate a shipped capability template from the engine schema
- 9c84a4a Merge remote-tracking branch 'origin/feat/cu-b9-sck-worker' into feat/cu-capture-helper-release
- 19bc6cb chore(desktop): regenerate the engine schema for the capture protocol
- 90e23db docs(telemetry): list CaptureUnavailable among computer-use engine error codes
- e352bf1 Merge remote-tracking branch 'origin/dev' into fix/10023-crash-notices
- 80054f5 test(#10023): narrow the continuation command before reading its message
- e757828 Merge remote-tracking branch 'origin/dev' into feat/cu-b9-sck-worker
- b7a24b6 fix(desktop): only a helper that writes nothing counts as a start failure
- 471038f fix(desktop): establish SCK startup only after a complete first reply
- c719989 style(desktop): keep the SCK garbage fixture below 100 columns
- 380dbf5 test(desktop): order fake SCK replies after their requests
- c82f323 fix(desktop): preserve DesktopWindow Eq compatibility
- d76df2b fix(desktop): clear legacy startup state when SCK capture recovers
- 645467e test(desktop): cover persistent SCK worker reset and restart
- e5a1a4c fix(desktop): fall back when SCK exits before its first reply
- d48c4a6 fix(desktop): classify SCK transport failures without message matching
- 36b8458 fix(desktop): draw SCK frames as BGRA so red and blue are not swapped
- 940e3ce fix(#10023): keep the parked queue on completion and say it is still queued (review D3)
- 61dd21a docs(desktop): describe signed embedded capture helper packaging
- 96072fe fix(desktop): embed signed capture helper in Darwin releases
- d4c8e98 test(qa): cover a same-message re-add and a null tools field in the declared-tool recorder
- 76dedc5 fix(#10023): never strand a message queued for a respawned child (review D2)
- 54f930c Merge remote-tracking branch 'origin/dev' into fix/10023-crash-notices
- 0f97253 test(#10023): drive the host-close deadline on the recovery clock; all transport-loss cases park, respawn, or end with one notice
- 1d1e0fa fix(desktop): satisfy workspace clippy for B9
- a252579 test(#10023): transport-loss children park for live-parent recovery instead of failing
- 9fe8d36 fix(desktop): keep menu_guard Windows-only, set is_on_screen in the Windows menu fixture, note B9 in the changelog
- 4a25cc0 Merge remote-tracking branch 'origin/dev' into feat/cu-b9-sck-worker
- 453e074 wip: preserve worker progress after host loss
- 2a12313 fix(desktop): keep the frozen wire when capture is not legacy
- 337a6d9 fix(desktop): send CaptureUnavailable data as captureUnavailable on the wire
- 4282765 test(desktop): give the legacy capture fixture a full capture result
- 723637b fix(desktop): capture off-Space windows and refuse only minimized ones
- 39de1e1 fix(desktop): set exclude_window_titles in every CaptureParams literal
- d36df46 fix(desktop): pass the exclusion list through every Backend::capture impl and caller
- c78e225 fix(desktop): import DesktopError in the protocol wire test
- d27bb1e fix(desktop): make the B9 macOS capture tests compile
- 1ddd642 fix(#10023): recover RPC deadlines and bound parked detach
- 44cf13d fix(desktop): match the new is_on_screen field in zoom's window frame check
- bf897d8 chore(desktop): record the macOS backend's serde deps in Cargo.lock
- 725c568 wip(computer-use): materialize the empty helper marker for include_bytes (#9651)
- 41887dd wip(computer-use): live fallback tests for SCK and start-failure reasons (#9651)
- 25da0c6 wip(computer-use): split B9 route, add fallback tests and fake-capture seam (#9651)
- 7055d4c wip(computer-use): B9 SCK worker, routing, and legacyCapture fallback (#9651)
- 07bd37e fix(#10023): retain recovery causes and release parked clients
- d5a1e0b fix(#10023): preserve completion causes and handles
- 10b23a1 feat(computer-use): add CaptureUnavailable error and B9 capture wire fields (#9651)
- 55097e4 fix(#10023): retain partial output in the single recovery notice
- d97fa94 test(#10023): cover unresponsive reattach with an explicit clock signal
- efbc089 wip(#10023): preserve silent crash recovery and actionable notices
- 526a908 fix(computer): wait for cross-session capture exclusion
- 562f29f feat(computer-use): add bounded key and mouse holds
- 2b3d030 Merge remote-tracking branch 'origin/dev' into feat/9887-computer-cursor
- df07b8f merge: sync dev region zoom with computer cursor
- 7d26bd7 merge: sync latest dev Win32 menu support
- 1f3f54b merge: sync dev and regenerate computer cursor bundles
- 767359b fix(computer): exclude cursor overlays across sessions
- f72078d docs: add virtual cursor changelog entry
- 82543a2 merge: sync dev tip for computer cursor
- 512eed9 merge: sync memory and background dev tip
- 6a07bcb merge: sync OAuth dev tip
- 221bfe6 merge: sync isolation-test dev tip
- 2fb0923 merge: sync latest dev into feat/9887-computer-cursor
- 2be8c94 merge: resync dev into feat/9887-computer-cursor
- a153a36 merge: sync dev into feat/9887-computer-cursor
- eaa4321 feat(computer): publish cursor session contract
- d38b76b feat(computer): animate gestures and verify cursor capture isolation
- 1d5dad2 feat(computer): add nonactivating native cursor overlay helper
- 6fa1ad0 feat(computer): resolve default-on cursor overlay setting
- 6001be1 WIP: preserve lazy thread client slice; full thread QA pending
- 5f68228 test(thread): run the resolver test's fake engine on Windows too
- c5d549d fix(thread): shorten the gateway extension write lock and close the savepoint gap
- a9e82c9 fix(changes): drop a leftover diff3 base marker from the download-page entry
- 5526d3a fix(web): verify commands name each system's own installer
- 718a33e feat(web): omo.dev/download with OS detection, checksums and verify steps
- 47c516b feat(web): read the desktop release manifest and pick the visitor's installer
Thank you to 1 community contributor:
- @spicysharkco:
- Merge remote-tracking branch 'upstream/dev' into fix/git-diff-stats-nul-paths
- Merge remote-tracking branch 'upstream/dev' into fix/worktree-sweep-from-linked-worktree
- Merge remote-tracking branch 'upstream/dev' into fix/worktree-sweep-from-linked-worktree
bun add -g omo-ai