oh-my-customcodex 0.5.15 → 0.5.17

package/README.md

@@ -229,9 +229,9 @@ Key rules: R010 (orchestrator never writes files), R009 (parallel execution mand
 
 ---
 
-### Guides (51)
+### Guides (52)
 
-Reference documentation covering best practices, architecture decisions, and integration patterns. Located in `guides/` at project root, covering topics from agent design to CI/CD to observability.
+Reference documentation covering best practices, architecture decisions, release compatibility, and integration patterns. Located in `guides/` at project root, covering topics from agent design to CI/CD to observability.
 
 ---
 
@@ -289,7 +289,7 @@ your-project/
 │   └── ontology/               # Knowledge graph for RAG
 ├── .agents/
 │   └── skills/                 # 121 installed skill modules
-└── guides/                     # 51 reference documents
+└── guides/                     # 52 reference documents
 ```
 
 ### Source Repository And Compatibility Surfaces

package/dist/cli/index.js

@@ -3091,7 +3091,7 @@ var init_package = __esm(() => {
     workspaces: [
       "packages/*"
     ],
-    version: "0.5.15",
+    version: "0.5.17",
     requiresCC: ">=2.1.121",
     claudeCode: {
       minimumVersion: "2.1.121",
@@ -27574,6 +27574,34 @@ async function checkOmx() {
     fixable: false
   };
 }
+function checkOmxModelRouting() {
+  const frontierModel = process.env.OMX_DEFAULT_FRONTIER_MODEL?.trim() || null;
+  const sparkModel = process.env.OMX_DEFAULT_SPARK_MODEL?.trim() || process.env.OMX_SPARK_MODEL?.trim() || null;
+  const usingLegacySpark = !process.env.OMX_DEFAULT_SPARK_MODEL?.trim() && Boolean(sparkModel);
+  if (!frontierModel && !sparkModel) {
+    return {
+      name: "OMX model lanes",
+      status: "pass",
+      message: "OMX model lane routing uses runtime defaults (no explicit env override)",
+      fixable: false
+    };
+  }
+  const details = [
+    `frontier=${frontierModel ?? "runtime-default"}`,
+    `spark=${sparkModel ?? "runtime-default"}`
+  ];
+  if (usingLegacySpark) {
+    details.push("legacy OMX_SPARK_MODEL detected; prefer OMX_DEFAULT_SPARK_MODEL");
+  }
+  const sameExplicitLane = frontierModel !== null && sparkModel !== null && frontierModel === sparkModel;
+  return {
+    name: "OMX model lanes",
+    status: sameExplicitLane ? "warn" : "pass",
+    message: sameExplicitLane ? `OMX Spark/model lane routing uses the same explicit model for frontier and spark (${frontierModel})` : "OMX Spark/model lane routing overrides detected",
+    fixable: false,
+    details
+  };
+}
 async function checkContexts(targetDir, rootDir = ".codex") {
   const contextsDir = path.join(targetDir, rootDir, "contexts");
   const exists2 = await isDirectory(contextsDir);
@@ -27830,7 +27858,8 @@ async function runAllChecks(targetDir, layout, packageVersion, includeUpdates) {
     checkCustomComponents(targetDir, layout.rootDir),
     checkRtk(),
     checkCodex(),
-    checkOmx()
+    checkOmx(),
+    checkOmxModelRouting()
   ]);
   const frameworkCheck = await checkFrameworkDrift(targetDir, packageVersion);
   const checksWithFramework = frameworkCheck ? [...baseChecks, frameworkCheck] : baseChecks;

package/dist/index.js

@@ -2316,7 +2316,7 @@ var package_default = {
   workspaces: [
     "packages/*"
   ],
-  version: "0.5.15",
+  version: "0.5.17",
   requiresCC: ">=2.1.121",
   claudeCode: {
     minimumVersion: "2.1.121",

package/package.json

@@ -3,7 +3,7 @@
   "workspaces": [
     "packages/*"
   ],
-  "version": "0.5.15",
+  "version": "0.5.17",
   "requiresCC": ">=2.1.121",
   "claudeCode": {
     "minimumVersion": "2.1.121",

package/templates/.claude/rules/MAY-optimization.md

@@ -4,6 +4,8 @@
 
 ## Efficiency
 
+> **Tool availability note**: On first exploration, do not assume a specific tool surface is available without confirming the current session's tool set. Prefer the available native repository inspection tools; fall back to bounded shell `find`/`grep`/`rg` when higher-level glob/search tools are unavailable.
+
 | Strategy | When | Example |
 |----------|------|---------|
 | Parallel | 3+ independent I/O tasks | Read multiple files simultaneously |
@@ -43,6 +45,11 @@ Inspired by [ouroboros PR #353](https://github.com/Q00/ouroboros/pull/353) capab
 
 Readability > Optimization. No optimization without measurement.
 
+
+### Measure-Before-Adopt Gate
+
+For new workflow heuristics, TIDE-style discovery shortcuts, or routing optimizations, measure before adoption. A small proof-of-concept that fails its confidence gate should be recorded as deferred rather than promoted into default guidance. Future adoption needs a broader multi-session corpus or deterministic benchmark evidence, not a single-session impression.
+
 ## Context Optimization via HTML Comments (v2.1.72+)
 
 HTML comments in all auto-injected .md files (AGENTS.md and rules/*.md) are hidden from the model during auto-injection but visible via Read tool.

package/templates/.claude/rules/MUST-agent-design.md

@@ -27,6 +27,10 @@ tools: [Read, Write, ...]  # Allowed tools
 
 Extended context suffix: `[1m]` (e.g., `claude-opus-4-6[1m]`) — enables 1M token context window.
 
+<!-- DETAIL: Fallback Models and Thinking Toggle (Claude Code v2.1.166+)
+Claude compatibility settings can declare up to three `fallbackModel` entries tried in order when the primary Claude model is overloaded or unavailable. `--fallback-model` also applies to interactive Claude sessions. Treat this as platform availability failover, not Codex-native model routing or outcome-based escalation. Claude Code v2.1.166+ also supports disabling default thinking with `MAX_THINKING_TOKENS=0`, `--thinking disabled`, or the per-model thinking toggle. Codex-native agents continue to use the OMX model contract and `reasoning_effort` routing.
+-->
+
 ### Optional Frontmatter
 
 Key optional fields: `memory`, `effort`, `skills`, `soul`, `isolation`, `background`, `maxTurns`, `maxTokens`, `mcpServers`, `hooks`, `permissionMode`, `disallowedTools`, `limitations`, `domain`, `disableSkillShellExecution`. Supported since CC v2.1.63+. See full optional frontmatter via Read tool.
@@ -83,7 +87,7 @@ This Codex port ships `.claude` compatibility templates. When updating those tem
 - v2.1.161: independent parallel tool calls no longer cancel siblings when one Bash call fails; this supports R009 same-message batching for independent work.
 - v2.1.162: `claude agents --json` includes waiting/blocker metadata and explicit `--tools Grep/Glob` behavior is fixed; compatibility prompts may use those fields when diagnosing stuck Claude sessions.
 - v2.1.163: managed `requiredMinimumVersion`/`requiredMaximumVersion`, `/plugin list`, Stop/SubagentStop `hookSpecificOutput.additionalContext`, and skill command literal `\$` escaping are available. Hook/skill template changes should preserve these affordances.
-- v2.1.165: bug-fix/reliability release; no local template change required beyond compatibility confirmation.
+- v2.1.165: bug-fix/reliability release; no local template change required beyond compatibility confirmation. v2.1.166: fallbackModel availability failover and thinking-disable controls are Claude compatibility settings, not Codex/OMX routing. v2.1.167/v2.1.168: bug-fix-only compatibility confirmation.
 -->
 
 ## Hook Event Types

package/templates/.claude/rules/MUST-agent-teams.md

@@ -33,6 +33,10 @@ When enabled and criteria match, Agent Teams is required.
 
 Do not confuse these mechanisms.
 
+<!-- DETAIL: Cross-Session Relay Authority Hardening (Claude Code v2.1.166+)
+Claude Code v2.1.166+ no longer propagates user authority through cross-session relays: permission requests relayed from another session are refused, and auto mode blocks them. A relayed message from session A cannot grant session B permissions the user did not authorize in session B. This hardens `send_message` / peer relay against privilege escalation. Intra-session Agent Teams `SendMessage` is unaffected, but privileged actions still require authority in the receiving session.
+-->
+
 ## Self-Check Before Agent Tool
 
 Quick rule: explicit user preference for plain subagents wins. Otherwise use Teams for 3+ agents, review cycles, shared state, complex debugging, dynamic creation, or multi-issue batches; use Agent Tool for 1-2 simple tasks, sequential scaffolding, or mechanical disjoint-file batches with explicit scopes.

package/templates/.claude/rules/MUST-permissions.md

@@ -42,6 +42,19 @@ Current guidance:
 - For `.claude/**` or `templates/.claude/**`, direct writes are acceptable when the target Claude Code runtime is new enough and the session is running with `bypassPermissions`.
 - Treat the old `/tmp/{skill}-{timestamp}.md` wrapper flow as a historical fallback only for older Claude Code versions, non-bypass sessions, or interactive runs that still surface a protected-path prompt.
 
+
+## Deny Rule Glob Patterns (Claude Code v2.1.166+)
+
+Claude Code compatibility templates may rely on v2.1.166+ deny-rule glob behavior:
+
+| Position | Glob support |
+|----------|-------------|
+| Deny rule tool-name | Supported; `"*"` denies all tools |
+| Allow rule tool-name | MCP tool-name globs only; non-MCP globs are rejected |
+| Unknown tool in deny rule | Startup warning |
+
+Use `"*"` deny rules only for Claude compatibility settings that intentionally enforce deny-by-default, then add explicit allow rules. This is separate from Codex/OMX sandbox policy and the advisory tool-tier table above.
+
 ## Permission Request Format
 
 ```

package/templates/.claude/rules/MUST-safety.md

@@ -37,6 +37,22 @@ Treat these commands as destructive even when they look like routine cleanup:
 
 Advisory hooks may warn on these patterns, but warnings do not replace the approval and preservation requirements.
 
+
+### Pre-Delegation Blast-Radius Enumeration
+
+Before delegating any destructive git command from the table above, enumerate the exact discard targets and present them for explicit approval. Do not delegate destructive operations from a paraphrase such as "discard local changes" without showing what will be lost.
+
+Required evidence before delegation:
+
+| Scope | Command |
+|-------|---------|
+| Modified/staged tracked files | `git status --short` |
+| Uncommitted diff size | `git diff --stat` and `git diff --stat --cached` |
+| Stash contents, when relevant | `git stash show --stat` |
+| Untracked files at risk, for clean | `git clean -nd` |
+
+Prefer non-destructive alternatives such as `git stash` when the user's goal can be met without permanent loss.
+
 ## On Violation
 
 1. Stop all operations

package/templates/.claude/rules/SHOULD-memory-integration.md

@@ -39,6 +39,10 @@ If both backend families are available, warn before writing. Dual-write is accep
 
 -->
 
+<!-- DETAIL: Safety Feedback Memory
+When a session exposes a safety-relevant correction (credential handling, destructive git blast radius, privileged-scope chaining, or permission-boundary mistakes), write the durable lesson with confidence metadata instead of leaving it only in chat. Record what was verified, what behavior should change, and the source issue/session when available. Do not store secrets or raw credential material in memory.
+-->
+
 ## Best Practices
 
 - Consult memory before starting work

package/templates/AGENTS.md.en

@@ -134,9 +134,15 @@ project/
 |   +-- contexts/                # Context files (ecomode)
 +-- .agents/
 |   +-- skills/                  # Installed skills (120 directories)
-+-- guides/                      # Reference docs (51 topics)
++-- guides/                      # Reference docs (52 topics)
 ```
 
+## OMX Command Routing
+
+- `omx explore` is deprecated and must not be recommended for new repository lookup work. Use normal Codex repository inspection tools/subagents for file, symbol, pattern, relationship, and implementation discovery.
+- `USE_OMX_EXPLORE_CMD` is compatibility-only for legacy callers; truthy values do not make `omx explore` preferred.
+- Use `omx sparkshell -- <command>` only when the operator explicitly wants shell-native read-only evidence, bounded verification, or a tmux-pane summary.
+
 ## Orchestration
 
 Orchestration is handled by routing skills in the main conversation:

package/templates/AGENTS.md.ko

@@ -134,9 +134,15 @@ project/
 |   +-- contexts/                # 컨텍스트 파일 (ecomode)
 +-- .agents/
 |   +-- skills/                  # 설치된 스킬 (120 디렉토리)
-+-- guides/                      # 레퍼런스 문서 (51 토픽)
++-- guides/                      # 레퍼런스 문서 (52 토픽)
 ```
 
+## OMX 명령 라우팅
+
+- `omx explore`는 deprecated 상태이며 새 저장소 조회 작업에 권장하지 않습니다. 파일, 심볼, 패턴, 관계, 구현 탐색에는 일반 Codex 저장소 검사 도구/서브에이전트를 사용합니다.
+- `USE_OMX_EXPLORE_CMD`는 레거시 호출자 호환용일 뿐이며 truthy 값이어도 `omx explore`가 선호 경로가 되지 않습니다.
+- `omx sparkshell -- <command>`는 사용자가 shell-native 읽기 전용 근거, 제한된 검증, tmux-pane 요약을 명시적으로 원할 때만 사용합니다.
+
 ## 오케스트레이션
 
 오케스트레이션은 메인 대화의 라우팅 스킬로 처리됩니다:

package/templates/CLAUDE.md

@@ -120,7 +120,7 @@ project/
 |   +-- contexts/                # 컨텍스트 파일 (ecomode)
 +-- .agents/
 |   +-- skills/                  # 스킬 (120 디렉토리)
-+-- guides/                      # 레퍼런스 문서 (51 토픽)
++-- guides/                      # 레퍼런스 문서 (52 토픽)
 ```
 
 ## 오케스트레이션

package/templates/CLAUDE.md.en

@@ -136,7 +136,7 @@ project/
 |   +-- rules/                   # Global rules (22 files)
 |   +-- hooks/                   # Hook scripts (security, validation, HUD)
 |   +-- contexts/                # Context files (4 files)
-+-- guides/                      # Reference docs (51 topics)
++-- guides/                      # Reference docs (52 topics)
 ```
 
 ## Orchestration

package/templates/CLAUDE.md.ko

@@ -136,7 +136,7 @@ project/
 |   +-- rules/                   # 전역 규칙 (22 파일)
 |   +-- hooks/                   # 훅 스크립트 (보안, 검증, HUD)
 |   +-- contexts/                # 컨텍스트 파일 (4 파일)
-+-- guides/                      # 레퍼런스 문서 (51 토픽)
++-- guides/                      # 레퍼런스 문서 (52 토픽)
 ```
 
 ## 오케스트레이션

package/templates/README.md

@@ -52,7 +52,7 @@ templates/
 |   +-- contexts/                     # context files
 |   +-- ontology/                     # ontology and routing metadata
 |   +-- schemas/                      # tool input schemas
-+-- guides/                           # reference docs (51 topics)
++-- guides/                           # reference docs (52 topics)
 ```
 
 ## Components
@@ -77,7 +77,7 @@ Reusable workflow and reference skill modules. During Codex installation these l
 
 Global agent behavior rules. During Codex installation these land under `.codex/rules/`.
 
-### Guides (51)
+### Guides (52)
 
 `templates/guides/*/`
 

package/templates/guides/claude-code/15-version-compatibility.md

@@ -2,6 +2,39 @@
 
 This guide records Claude Code release-note impact that affects the Claude compatibility template. The Codex-native runtime still uses `.codex/**` and OMX as the primary surface.
 
+## v2.1.168
+
+Published: 2026-06-07.
+
+Source: upstream oh-my-customcode #1315, Codex port #1479.
+
+| Change | Impact on oh-my-customcodex | Action |
+|--------|------------------------------|--------|
+| Bug-fix/reliability release after the v2.1.166 compatibility surface | No new repo-owned template, agent, skill, hook, or rule behavior was identified beyond the v2.1.166 notes. | Record as compatibility-confirmed; do not add speculative runtime behavior. |
+
+## v2.1.167
+
+Published: 2026-06-07.
+
+Source: upstream oh-my-customcode #1313, Codex port #1479.
+
+| Change | Impact on oh-my-customcodex | Action |
+|--------|------------------------------|--------|
+| Bug-fix/reliability release after the v2.1.166 compatibility surface | No new repo-owned template, agent, skill, hook, or rule behavior was identified beyond the v2.1.166 notes. | Record as compatibility-confirmed; do not add speculative runtime behavior. |
+
+## v2.1.166
+
+Published: 2026-06-07.
+
+Source: upstream oh-my-customcode #1314/#1316, Codex port #1479.
+
+| Change | Impact on oh-my-customcodex | Action |
+|--------|------------------------------|--------|
+| Deny rules support glob patterns in the tool-name position, including `"*"` to deny all tools; allow-rule globs remain limited to MCP tool-name globs | Relevant to Claude compatibility settings and permission debugging. Codex/OMX sandboxing remains the active runtime boundary for this package. | Port R002 compatibility note; do not treat Claude settings globs as Codex policy. |
+| `fallbackModel` supports up to three ordered fallback models and `--fallback-model` applies to interactive sessions | Useful Claude platform availability failover. It is distinct from per-agent `model:` metadata, the `model-escalation` skill, and Codex-native model routing. | Port R006 note; keep Codex child agents on the OMX model contract and `reasoning_effort`. |
+| `MAX_THINKING_TOKENS=0`, `--thinking disabled`, and per-model thinking toggles can disable default thinking | Claude compatibility sessions can reduce thinking overhead for low-effort work. | Document as Claude-only compatibility; do not infer Codex reasoning behavior. |
+| Cross-session relayed `SendMessage` no longer carries user authority; relayed permission requests are refused and auto mode blocks them | Hardens peer-relay workflows against privilege escalation between Claude sessions. Intra-session Agent Teams are unaffected. | Port R018 note and keep privileged actions scoped to the receiving session. |
+
 ## v2.1.158
 
 Published: 2026-05-30.

package/templates/guides/index.yaml

@@ -20,6 +20,12 @@ guides:
     source:
       type: internal
 
+  - name: openai-codex
+    description: OpenAI Codex release compatibility decisions for Codex/OMX sessions
+    path: ./openai-codex/
+    source:
+      type: internal
+
   # Frontend
   - name: claude-design
     description: Claude Design artifact handoff workflow — connecting Anthropic's conversational design tool outputs to Claude Code's fe-design-expert implementation pipeline

package/templates/guides/openai-codex/01-version-compatibility.md

@@ -0,0 +1,21 @@
+# OpenAI Codex Version Compatibility
+
+This guide records OpenAI Codex release-note impact decisions for oh-my-customcodex. Use it for Codex/OMX runtime compatibility notes; keep Claude-only release notes in `guides/claude-code/15-version-compatibility.md`.
+
+## rust-v0.138.0 / CLI 0.138.0
+
+Source: upstream OpenAI Codex release `rust-v0.138.0`, Codex-port issue #1481.
+
+| Change | Impact on oh-my-customcodex | Action |
+| --- | --- | --- |
+| `/app` can hand off the current CLI thread into Codex Desktop on macOS and native Windows | Useful operator workflow, but not a packaged template contract. | No runtime change. Mention only when documenting Desktop handoff troubleshooting. |
+| Local image attachments and generated images expose saved file paths to the model | Helps visual iteration and image-edit follow-up references. | Keep visual workflows file-path aware; do not store generated image paths as durable release evidence unless explicitly requested. |
+| Reasoning effort shortcuts and model-advertised effort ordering improved | Aligns with OMX guidance to prefer `reasoning_effort` over hardcoded model overrides for child agents. | Preserve repo model-routing guidance; avoid stale frontier model names. |
+| App-server integrations can read account token usage and auth supports v2 personal access tokens | Useful observability/auth signal for app-server deployments, not required by this package. | Track as external runtime capability; no dependency or config change. |
+| Plugin commands gained richer `--json` output and marketplace/source metadata | Can improve future automation around plugin inventory. | Prefer JSON output when automating plugin add/remove/list/detail; keep `omcustomcodex list` as package inventory source. |
+| Workspace instruction loading is more accurate for remote and symlinked workspaces | Reduces false AGENTS.md discovery issues in Codex itself. | Keep nested AGENTS.md guidance intact and continue verifying repo-local instructions directly. |
+| Startup, MCP credential refresh, large stream processing, and TUI/goal fixes are additive stability improvements | Lower operational friction for Codex sessions. | No package change beyond this compatibility record. |
+
+## Compatibility rule
+
+OpenAI Codex release-monitor issues should be closed as no-op only when there is no repo-owned surface to update. If a release changes workflow vocabulary, diagnostics, plugin automation, AGENTS.md loading, or visual iteration evidence, record the decision here and mirror it into templates.

package/templates/guides/openai-codex/index.yaml

@@ -0,0 +1,7 @@
+# OpenAI Codex Guide Index
+
+documents:
+  - name: version-compatibility
+    title: Version compatibility
+    description: OpenAI Codex release-note impact decisions for oh-my-customcodex
+    path: ./01-version-compatibility.md

package/templates/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.5.15",
+  "version": "0.5.17",
   "requiresCC": ">=2.1.121",
   "claudeCode": {
     "minimumVersion": "2.1.121",
@@ -29,7 +29,7 @@
       "name": "guides",
       "path": "guides",
       "description": "Reference documentation",
-      "files": 51
+      "files": 52
     },
     {
       "name": "hooks",

package/templates/workflows/auto-dev.yaml

@@ -151,9 +151,11 @@ steps:
       Required version preflight for npm package releases:
       - Determine NEW_VERSION before creating a release branch, PR, or tag.
       - Update `package.json` and `templates/manifest.json` to NEW_VERSION in the same commit.
+      - Promote `CHANGELOG.md` before the release PR/tag: move non-empty `## [Unreleased]` entries into `## [NEW_VERSION] - YYYY-MM-DD`, then re-create an empty `## [Unreleased]` section above it.
+      - If `CHANGELOG.md` has no user/package-visible entry for NEW_VERSION, add a concise release summary before continuing instead of relying on GitHub auto-generated release notes.
       - Use same-directory temporary files for generated JSON writes; do not write through `/tmp`.
       - Run `bash .github/scripts/verify-version-sync.sh` after the bump and before tag or PR creation.
-      - Commit the bump with `chore(release): bump to v{NEW_VERSION}` before any release tag is created.
+      - Commit the bump and changelog promotion with `chore(release): bump to v{NEW_VERSION}` before any release tag is created.
 
       Before creating `release/v*`, check whether a local branch named exactly
       `release` exists. Git stores refs as files/directories, so