Distrusted intermediate certificates under an allowed root are not yet blocked; tracked upstream. (#11956)
Engines started by the OmO desktop app, or by an OmO server you start yourself, no longer read SSL_CERT_FILE or SSL_CERT_DIR. If your root certificate is only in such a file, install it in your operating system's certificate store, or add it in the desktop app under Settings, Extra CA certificates. A server you start yourself also keeps honoring NODE_EXTRA_CA_CERTS. (#11956)
On Linux, OmO now trusts only your distribution's generated certificate bundle. A root placed directly in /etc/ssl/certs or /etc/ssl/cert.pem without running update-ca-certificates or update-ca-trust is no longer trusted; install it with that tool. If OmO cannot read your operating system's certificates, the failed request says why and what to do. (#11956)
The last sentence describes the completed rollout; its transport-error explanation is a later increment and is not enabled by this launcher-only change. (#11956)
Fixed
- Memory git hooks no longer initialize unrelated supervisor modules before checking staged notes, preserving validation. The startup cut applies to the source runtime (tests and dev), where one pre-commit hook took about 3.7 s; the packaged plugin bundle already deferred module initialisation, and its hook-mode time was measured unchanged (about 133-151 ms before and after). (#11957) (#12037)
- Completed-turn memory journal counters are delivered before
agent_settledandagent_idle, even when the bounded maintenance observer expires. Journal delivery does not wait for full snapshots, git reads, journal writes or reflection recovery. Late full snapshots preserve newer journal accounting, and unreadable transcripts fall back to durable counters. (#11935) (#12037) - A foreground
taskspawn's running progress updates wait for launch settlement and carry the model the child actually started on (and a start-time fallback's route), instead of publishing incomplete model facts when the launch exceeds 250 ms. Foreground batch rows wait the same way and carry the launched run epoch and route (batch rows do not reporteffective_model). A launch that fails releases the held updates instead of freezing them; pending slot reports remain immediate (#11693, fixes #11691, #11827). (#12037)
Changed
- Memory command tests avoid redundant hook checks while seeding trusted fixtures, while retaining real hooks for later writes. (#11954) (#12037)
Added
-
Add the engine CA importer's launcher trust stage: verify and adopt an inherited generation, or acquire a private generation and exec once with an independent hop bound. A failed import keeps only explicit extras and leaves implicit default inputs closed; child environments regain their original values. This is the launcher increment of the staged rollout, not the transport-error, background-refresh, trust CLI or desktop integration. (#11956, part of #10762)
-
c35c148 chore(release): regenerate service-auth bundle for 5.1.56 (#12046)
-
ebaf17c Merge pull request #12037 from code-yeongyu/train/bh-omo-train
-
69de56e chore(bundles): regenerate generated bundles for the train top
-
017b6e2 Merge remote-tracking branch 'origin/dev' into train/bh-omo-train
-
a94c81e Merge pull request #12034 from code-yeongyu/fix/11704-release-pr-marker-gate
-
73faaa0 Merge remote-tracking branch 'origin/dev' into train/bh-omo-train
-
f7bd153 Merge pull request #11956 from code-yeongyu/feat/10762-trust-stage
-
a4cca95 Merge remote-tracking branch 'origin/dev' into fix/11704-release-pr-marker-gate-s30b
-
394eb9d Merge remote-tracking branch 'origin/dev' into train/bh-omo-train
-
6385b29 Merge pull request #12045 from code-yeongyu/release/v5.1.55-source-state
-
9370fba Merge pull request #12039 from code-yeongyu/fix/ci-qa-password-literal
-
5a1162b Merge remote-tracking branch 'origin/dev' into feat/10762-trust-stage
-
5b2d0dc Merge remote-tracking branch 'origin/dev' into fix/ci-qa-password-literal
-
30618b7 chore(bundles): regenerate generated bundles for the train top
-
5923de4 Merge commit '8bda141bcd' into feat/10762-trust-stage
-
f8bb976 Merge remote-tracking branch 'origin/dev' into fix/ci-qa-password-literal
-
bad0ad9 Merge remote-tracking branch 'origin/dev' into train/bh-omo-train
-
e6a1262 Merge remote-tracking branch 'origin/dev' into train/bh-omo-train
-
892555d Merge remote-tracking branch 'origin/dev' into train/bh-omo-train
-
12876bd chore(changes): fold the train cars fragments into 12037
-
7c22dae Merge remote-tracking branch 'origin/dev' into feat/10762-trust-stage
-
a13407f chore(bundles): regenerate generated bundles for the train top
-
cbbaf20 Merge remote-tracking branch 'origin/dev' into s30-merge-dev-1793488697
-
42ee417 Merge remote-tracking branch 'origin/dev' into train/bh-omo-train
-
65916bf Merge remote-tracking branch 'origin/dev' into train/bh-omo-train
-
95c3302 Merge branch 'm/11693' into train/bh-omo-train
-
066450c Merge branch 'm/11921' into train/bh-omo-train
-
036b495 Merge branch 'm/11935' into train/bh-omo-train
-
cee3498 Merge branch 'm/11986' into train/bh-omo-train
-
51ce5c3 Merge branch 'm/11985' into train/bh-omo-train
-
daae564 chore(bundles): regenerate generated bundles after merging dev
-
44269af chore(bundles): regenerate generated bundles after merging dev
-
1f4c563 chore(bundles): regenerate generated bundles after merging dev
-
e2a427b chore(bundles): regenerate generated bundles after merging dev
-
53b120f Merge remote-tracking branch 'origin/dev' into m/11693
-
84bbe2b Merge remote-tracking branch 'origin/dev' into m/11921
-
5771bf8 Merge remote-tracking branch 'origin/dev' into m/11935
-
4691551 Merge remote-tracking branch 'origin/dev' into m/11986
-
7325f10 Merge remote-tracking branch 'origin/dev' into m/11985
-
b188af2 Merge branch 'm/11954' into m/11957
-
91bedd8 Merge remote-tracking branch 'origin/dev' into m/11954
-
a204954 fix(changelog-gate): identify the release-state PR by its marker, not its author
-
746ce4f Merge remote-tracking branch 'origin/dev' into feat/10762-trust-stage
-
1827438 Merge remote-tracking branch 'origin/dev' into feat/10762-trust-stage
-
db43d0f fix(desktop-toolkit): check the host tool request without zod
-
5458411 chore(knip): drop the moved readMemoryRpcJournalState from snapshot-state's pre-existing exports
-
679d04c fix(omo-native): make trust-stage tests hold on macOS and Windows and clear the non-null ratchet (#10762)
-
e2f9222 Merge #11954 (synced with origin/dev 543f135) into fix/11953-memory-hook-startup
-
2e27ba8 Merge remote-tracking branch 'origin/dev' into HEAD
-
875393f Merge remote-tracking branch 'origin/dev' into HEAD
-
ec8f7ed Merge remote-tracking branch 'origin/dev' into feat/10762-trust-stage
-
7d39a3b Merge remote-tracking branch 'origin/dev' into HEAD
-
f1588f3 test(security): bound the whole-tree raw TLS scan explicitly (#10762)
-
da22158 fix(omo-native): keep closed account commands static and register trust-stage scan entries (#10762)
-
d00f3fa docs(changes): scope #11957 startup claim to the source runtime
-
121ab3f docs(changes): place the #11956 release sentences as paragraphs (#10762)
-
d9f9b92 docs(changelog): record isolated memory-hook startup
-
c971899 perf(memory): isolate hook-mode supervisor imports
-
aa9e7c1 feat(omo-native): add bounded launcher trust stage (#10762)
-
4fe1171 docs(changelog): record command fixture setup optimization
-
090956c test(memory): defer hooks until command fixtures are seeded
-
3b040c5 fix(memory): unblock required journal delivery
-
7bb95e0 Merge origin/dev into feat/tools-mcp1-toolkit
-
11e7b48 docs(changelog): record ordered memory delivery fix
-
e0cf9d3 fix(memory): keep turn delivery journal-only after initial snapshot
-
f40a4ea fix(memory): deliver post-turn memory status before settle
-
7f6d009 Merge origin/dev and make foreground task partials wait for launch facts
-
9f1d7ce Merge origin/dev into fix/task-partials-effective-model-restamp
-
0210feb Merge remote-tracking branch 'origin/dev' into fix/task-partials-effective-model-restamp
-
a848159 Merge remote-tracking branch 'origin/dev' into fix/task-partials-effective-model-restamp
bun add -g omo-ai