omo-ai 5.1.35 → 5.1.38

package/bin/lib/engine-environment.js

@@ -0,0 +1,113 @@
+import { existsSync, realpathSync } from "node:fs"
+import { delimiter, isAbsolute, join, relative, sep } from "node:path"
+import { canonicalAgentDir } from "./agent-dir.js"
+import { HERDR_AGENT_MARKER } from "./herdr-agent-hint.js"
+import { nearestNodeBin, packageManifest, packageRoot, readJson, releaseChannel, updateTarget } from "./package-paths.js"
+
+// Identity the engine adopts for this install: what the user sees, where state lives, which
+// environment prefix is read first, what goes on the wire, and which channel to check for
+// updates. The engine consumes this once and scrubs it, so nested engine processes are
+// unaffected.
+function pluginChangelogSource() {
+  try {
+    const pluginRoot = join(packageRoot, "plugin")
+    const changelogPath = join(pluginRoot, "CHANGELOG.md")
+    if (!existsSync(changelogPath)) return undefined
+    const version = readJson(join(pluginRoot, "package.json")).version
+    return typeof version === "string" && version ? { path: changelogPath, version } : { path: changelogPath }
+  } catch {
+    return undefined
+  }
+}
+
+function brandProfile() {
+  const update = updateTarget()
+  // The changelog source is advisory: a missing plugin manifest or file must disable
+  // startup notes, never fail the launch.
+  const changelog = pluginChangelogSource()
+  return {
+    name: "OmO",
+    command: "omo",
+    displayVersion: packageManifest().version,
+    configDir: ".omo",
+    // Engine state lives at the canonical `~/.omo/agent`, never directly under the config
+    // directory: a flat home would disagree with the directory every omo surface resolves.
+    flatLayout: false,
+    envPrefix: "OMO",
+    userAgent: "omo",
+    originator: "omo",
+    ...(changelog ? { changelog } : {}),
+    update: {
+      packageName: "omo-ai",
+      distTag: releaseChannel(),
+      command: update.command,
+      changelogUrl: "https://github.com/code-yeongyu/oh-my-openagent/releases",
+    },
+  }
+}
+
+function canonicalPath(path) {
+  try {
+    return realpathSync.native(path)
+  } catch {
+    return path
+  }
+}
+
+function containsPath(root, target) {
+  const rel = relative(canonicalPath(root), canonicalPath(target))
+  return rel === "" || (rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel))
+}
+
+// A compiled omo session exports its own payload as the brand-scoped package dir, and every shell it
+// spawns inherits that. The engine reads these names before the legacy PI_PACKAGE_DIR, so a release
+// omo started from such a shell would run on the foreign payload. A deliberate relocation names this
+// install's engine and survives; a root that does not contain the engine belongs to another install.
+function dropForeignPackageDirs(env, senpiRoot) {
+  for (const name of ["OMO_PACKAGE_DIR", "SENPI_PACKAGE_DIR"]) {
+    const root = env[name]
+    if (root && !containsPath(root, senpiRoot)) delete env[name]
+  }
+}
+
+/**
+ * The one environment every engine this launcher starts gets. `overrides` (a host call's own
+ * environment) is merged in here, before the last step, so nothing a caller passes can put back
+ * what this function removes.
+ */
+export function senpiEnvironment(senpiRoot, overrides = {}) {
+  const env = { ...process.env }
+  delete env.OMO_BIN
+  delete env.SENPI_BIN
+  dropForeignPackageDirs(env, senpiRoot)
+  // One directory for every surface. The legacy name travels too, so a bare senpi spawned by a
+  // tool inherits the same state instead of falling back to its own home.
+  const agentDir = canonicalAgentDir(env)
+  env.OMO_CODING_AGENT_DIR = agentDir
+  env.SENPI_CODING_AGENT_DIR = agentDir
+  // senpi's footer reads this marker to show the OmO Native badge for omo-ai installs, which load
+  // the plugin via --extension and therefore never match the settings-packages detection gates.
+  env.OMO_NATIVE = "1"
+  // This launcher already decided which runtime the product runs on, possibly by re-execing itself
+  // under bun. Handing that answer down stops the engine from making its own, conflicting choice.
+  env.SENPI_RUNTIME = process.versions.bun ? "bun" : "node"
+  env.SENPI_BRAND = JSON.stringify(brandProfile())
+  const binDir = nearestNodeBin(senpiRoot)
+  if (binDir) {
+    const pathKey = Object.keys(env).find((key) => key.toLowerCase() === "path") ?? "PATH"
+    const path = env[pathKey]
+    env[pathKey] = path ? `${binDir}${delimiter}${path}` : binDir
+    const shim = join(binDir, process.platform === "win32" ? "senpi.cmd" : "senpi")
+    if (existsSync(shim)) env.SENPI_BIN = shim
+  }
+  // Anything resolving the product by name must re-enter through this launcher, otherwise it
+  // would reach the engine directly and lose the brand.
+  env.OMO_BIN = join(packageRoot, "bin", "omo.js")
+  const merged = { ...env, ...overrides }
+  // Only the interactive launch writes this record of the herdr hint it set (herdr-agent-hint.js),
+  // after this function returns. No engine started here may carry one from the parent environment
+  // or from a caller's overrides: the plugin would treat it as the launcher's and could remove a
+  // HERDR_AGENT the user set (#10448).
+  delete merged[HERDR_AGENT_MARKER]
+  return merged
+}

package/bin/lib/herdr-agent-hint.js

@@ -0,0 +1,29 @@
+// herdr names the agent that owns a pane from the pane's foreground process (#10448). The engine
+// runs as `bun …/cli.js` (or `node …/cli.js`), which herdr cannot place, so `herdr agent prompt`
+// refused every OmO pane. HERDR_AGENT is the hint herdr reads from that process's environment; OmO
+// is a pi-family agent to herdr, which already lists these panes as `pi`.
+//
+// The hint is only for an interactive engine the user sees in the pane: a TTY on stdin and no
+// print or protocol flag before `--`. A HERDR_AGENT the user set is left alone. The launcher also
+// sets OMO_HERDR_AGENT_HINT to the value it wrote, so the plugin releases only a hint the launcher
+// set (packages/omo-senpi/src/extension/herdr-agent-hint.ts). Only this function writes that
+// record: one inherited from the parent environment is dropped first, so it can never vouch for a
+// HERDR_AGENT the user set.
+
+const NON_INTERACTIVE_FLAGS = new Set(["-p", "--print", "--mode"])
+
+export const HERDR_AGENT_LABEL = "pi"
+export const HERDR_AGENT_MARKER = "OMO_HERDR_AGENT_HINT"
+
+export function withHerdrAgentHint(env, args, stdinIsTTY = process.stdin.isTTY === true) {
+  delete env[HERDR_AGENT_MARKER]
+  if (env.HERDR_ENV !== "1") return env
+  if (env.HERDR_AGENT !== undefined && env.HERDR_AGENT !== "") return env
+  if (!stdinIsTTY) return env
+  const end = args.indexOf("--")
+  const flags = end === -1 ? args : args.slice(0, end)
+  if (flags.some((arg) => NON_INTERACTIVE_FLAGS.has(arg) || arg.startsWith("--mode="))) return env
+  env.HERDR_AGENT = HERDR_AGENT_LABEL
+  env[HERDR_AGENT_MARKER] = HERDR_AGENT_LABEL
+  return env
+}

package/bin/lib/launcher.js

@@ -1,6 +1,6 @@
 import { spawnSync } from "node:child_process"
-import { existsSync, realpathSync } from "node:fs"
-import { delimiter, isAbsolute, join, relative, sep } from "node:path"
+import { existsSync } from "node:fs"
+import { join } from "node:path"
 import { isEngineCommand } from "./engine-commands.js"
 import { spawnNode } from "./child-process.js"
 import { doctorCoverageLines } from "./category-coverage.js"
@@ -13,7 +13,9 @@ import { runDoctor } from "./doctor.js"
 import { ensureEnginePrepared, preparePluginLaunchSpec } from "./engine-prepare.js"
 import { migrateLegacyBunGlobalManifest } from "./legacy-bun-global-migration.js"
 import { adoptLegacyFlatState, canonicalAgentDir } from "./agent-dir.js"
-import { nearestNodeBin, packageManifest, packageRoot, readJson, releaseBanner, releaseChannel, resolveSenpi, updateTarget } from "./package-paths.js"
+import { senpiEnvironment } from "./engine-environment.js"
+import { withHerdrAgentHint } from "./herdr-agent-hint.js"
+import { packageManifest, packageRoot, readJson, releaseBanner, resolveSenpi, updateTarget } from "./package-paths.js"
 import { runSelfUpdate } from "./self-update.js"
 import { isSelfUpdate } from "./update-args.js"
 import { detectHarnesses } from "./setup-detect.js"
@@ -21,48 +23,6 @@ import { readSetupSuggestionCache, spawnSetupSuggestionRefresh } from "./setup-d
 import { printSetupReport } from "./setup-report.js"
 import { refuseRetiredCommand } from "./retired-command.js"
 
-// Identity the engine adopts for this install: what the user sees, where state lives, which
-// environment prefix is read first, what goes on the wire, and which channel to check for
-// updates. The engine consumes this once and scrubs it, so nested engine processes are
-// unaffected.
-function pluginChangelogSource() {
-  try {
-    const pluginRoot = join(packageRoot, "plugin")
-    const changelogPath = join(pluginRoot, "CHANGELOG.md")
-    if (!existsSync(changelogPath)) return undefined
-    const version = readJson(join(pluginRoot, "package.json")).version
-    return typeof version === "string" && version ? { path: changelogPath, version } : { path: changelogPath }
-  } catch {
-    return undefined
-  }
-}
-
-function brandProfile() {
-  const update = updateTarget()
-  // The changelog source is advisory: a missing plugin manifest or file must disable
-  // startup notes, never fail the launch.
-  const changelog = pluginChangelogSource()
-  return {
-    name: "OmO",
-    command: "omo",
-    displayVersion: packageManifest().version,
-    configDir: ".omo",
-    // Engine state lives at the canonical `~/.omo/agent`, never directly under the config
-    // directory: a flat home would disagree with the directory every omo surface resolves.
-    flatLayout: false,
-    envPrefix: "OMO",
-    userAgent: "omo",
-    originator: "omo",
-    ...(changelog ? { changelog } : {}),
-    update: {
-      packageName: "omo-ai",
-      distTag: releaseChannel(),
-      command: update.command,
-      changelogUrl: "https://github.com/code-yeongyu/oh-my-openagent/releases",
-    },
-  }
-}
-
 function engineVersion() {
   try {
     return readJson(join(resolveSenpi().packageRoot, "package.json")).version
@@ -71,62 +31,6 @@ function engineVersion() {
   }
 }
 
-function canonicalPath(path) {
-  try {
-    return realpathSync.native(path)
-  } catch {
-    return path
-  }
-}
-
-function containsPath(root, target) {
-  const rel = relative(canonicalPath(root), canonicalPath(target))
-  return rel === "" || (rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel))
-}
-
-// A compiled omo session exports its own payload as the brand-scoped package dir, and every shell it
-// spawns inherits that. The engine reads these names before the legacy PI_PACKAGE_DIR, so a release
-// omo started from such a shell would run on the foreign payload. A deliberate relocation names this
-// install's engine and survives; a root that does not contain the engine belongs to another install.
-function dropForeignPackageDirs(env, senpiRoot) {
-  for (const name of ["OMO_PACKAGE_DIR", "SENPI_PACKAGE_DIR"]) {
-    const root = env[name]
-    if (root && !containsPath(root, senpiRoot)) delete env[name]
-  }
-}
-
-function senpiEnvironment(senpiRoot) {
-  const env = { ...process.env }
-  delete env.OMO_BIN
-  delete env.SENPI_BIN
-  dropForeignPackageDirs(env, senpiRoot)
-  // One directory for every surface. The legacy name travels too, so a bare senpi spawned by a
-  // tool inherits the same state instead of falling back to its own home.
-  const agentDir = canonicalAgentDir(env)
-  env.OMO_CODING_AGENT_DIR = agentDir
-  env.SENPI_CODING_AGENT_DIR = agentDir
-  // senpi's footer reads this marker to show the OmO Native badge for omo-ai installs, which load
-  // the plugin via --extension and therefore never match the settings-packages detection gates.
-  env.OMO_NATIVE = "1"
-  // This launcher already decided which runtime the product runs on, possibly by re-execing itself
-  // under bun. Handing that answer down stops the engine from making its own, conflicting choice.
-  env.SENPI_RUNTIME = process.versions.bun ? "bun" : "node"
-  env.SENPI_BRAND = JSON.stringify(brandProfile())
-
-  const binDir = nearestNodeBin(senpiRoot)
-  if (binDir) {
-    const pathKey = Object.keys(env).find((key) => key.toLowerCase() === "path") ?? "PATH"
-    const path = env[pathKey]
-    env[pathKey] = path ? `${binDir}${delimiter}${path}` : binDir
-    const shim = join(binDir, process.platform === "win32" ? "senpi.cmd" : "senpi")
-    if (existsSync(shim)) env.SENPI_BIN = shim
-  }
-  // Anything resolving the product by name must re-enter through this launcher, otherwise it
-  // would reach the engine directly and lose the brand.
-  env.OMO_BIN = join(packageRoot, "bin", "omo.js")
-  return env
-}
-
 function preparedSenpi() {
   preparePluginLaunchSpec({ pluginRoot: join(packageRoot, "plugin") })
   const senpi = resolveSenpi()
@@ -144,6 +48,7 @@ async function spawnSenpi(args, withExtension) {
     ? ["--extension", join(packageRoot, "plugin"), ...args]
     : args
   const env = senpiEnvironment(senpi.packageRoot)
+  if (withExtension) withHerdrAgentHint(env, args)
   if (process.platform !== "win32" && typeof process.execve === "function") {
     try {
       process.execve(process.execPath, [process.execPath, senpi.cliPath, ...finalArgs], env)
@@ -203,7 +108,7 @@ export function engineHostCall(engineArgs, options) {
   const senpi = preparedSenpi()
   const result = spawnSync(process.execPath, [senpi.cliPath, ...engineArgs], {
     encoding: "utf8",
-    env: { ...senpiEnvironment(senpi.packageRoot), ...options.env },
+    env: senpiEnvironment(senpi.packageRoot, options.env),
     windowsHide: true,
   })
   return { exitCode: result.status ?? 1, stdout: result.stdout ?? "", stderr: result.stderr ?? "" }

package/bin/lib/provider-map.json

@@ -1,5 +1,5 @@
 {
-  "_comment": "Derived from @code-yeongyu/senpi 2026.10.16 builtinProviders(). builtinProviderIds and oauthProviderIds are the engine registry verbatim; providers maps a source harness id onto the omo provider that serves the same endpoint; oauthLogins maps a source OAuth id onto the omo provider to run /login for. Re-derive all four whenever the senpi pin changes.",
+  "_comment": "Derived from @code-yeongyu/senpi 2026.10.19 builtinProviders(). builtinProviderIds and oauthProviderIds are the engine registry verbatim; providers maps a source harness id onto the omo provider that serves the same endpoint; oauthLogins maps a source OAuth id onto the omo provider to run /login for. Re-derive all four whenever the senpi pin changes.",
   "builtinProviderIds": [
     "alibaba-token-plan",
     "amazon-bedrock",

package/bin/lib/setup-assets-import.js

@@ -119,7 +119,8 @@ export function planAssets({ runtime, agentDir }) {
   const notices = [...source.notices]
   const present = source.mcpServers.length > 0 || source.skills.length > 0
   const paths = { mcp: join(agentDir, "mcp.json"), skills: join(agentDir, "skills") }
-  const result = classifyAssets(source, paths, bundledSkillNames(join(packageRoot, "plugin", "skills")))
+  const pluginRoot = runtime.pluginRoot ?? join(packageRoot, "plugin")
+  const result = classifyAssets(source, paths, bundledSkillNames(join(pluginRoot, "skills")))
   if (result.servers.blocked.length > 0) notices.push(`WARN senpi: malformed mcp.json; these servers were not imported: ${result.servers.blocked.join(", ")}`)
   return {
     agentDir,

package/bin/lib/setup-model-choices-import.js

@@ -177,7 +177,11 @@ export async function planModelChoices(stage) {
   if (!hasModelChoices(raw)) return empty
   let registry
   try {
-    registry = await (stage.loadRegistry ?? loadEngineModels)({ agentDir: stage.agentDir, customProviders: stage.customProviders })
+    registry = await (stage.loadRegistry ?? loadEngineModels)({
+      agentDir: stage.agentDir,
+      customProviders: stage.customProviders,
+      loadCatalog: stage.runtime.loadModelCatalog,
+    })
   } catch (error) {
     return { ...empty, notices: [...raw.notices, `WARN senpi: could not read the engine's model list (${error.message}); model choices were not carried`] }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omo-ai",
-  "version": "5.1.35",
+  "version": "5.1.38",
   "type": "module",
   "description": "OmO Native - the standalone omo command with the OMO extension built in: bun add -g omo-ai",
   "bin": {
@@ -17,7 +17,7 @@
     "postinstall": "node bin/senpi-patch.mjs"
   },
   "dependencies": {
-    "@code-yeongyu/senpi": "2026.10.16"
+    "@code-yeongyu/senpi": "2026.10.19"
   },
   "repository": {
     "type": "git",

package/plugin/CHANGELOG.md

@@ -7,6 +7,106 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [5.1.38] - 2026-10-19
+
+5.1.37 was tagged but its publish stopped on Linux (the release binaries outgrew their size budget), so its main packages never reached npm; everything listed for it ships in this release. ([#10566](https://github.com/code-yeongyu/oh-my-openagent/pull/10566))
+
+**Release binaries may be up to 182 MiB.** The per-platform size budget moves from 160 MiB to 182 MiB after measuring what grew: the Bun 1.4.3 runtime adds 9.5 MB to every binary and the senpi update about 1.25 MB, so linux-x64 reached 173.4 MB. Nothing was bundled by mistake. ([#10566](https://github.com/code-yeongyu/oh-my-openagent/pull/10566))
+
+5.1.36 was prepared but never published; everything listed for it ships in this release. ([#10552](https://github.com/code-yeongyu/oh-my-openagent/pull/10552))
+
+**The engine moves to senpi 2026.10.19: a hung extension handler no longer freezes a session, and queued input survives a crash.** An extension handler that never settles on a lifecycle event is named in the session after 60 s and released after 20 min, or at once on Esc or the turn deadline. Input queued with a client id is written to the session file before it is queued and delivered exactly once. The mouse wheel scrolls the transcript again while a question prompt is waiting, Alt+Q restores queued messages on WSL, and the /btw panel no longer repeats a running eval's output in the scrollback. Anthropic requests of 4096+ characters to `api.anthropic.com` are now sent gzip-compressed, as Claude Code does. ([senpi#3650](https://github.com/code-yeongyu/senpi/issues/3650), [senpi#3549](https://github.com/code-yeongyu/senpi/issues/3549), [senpi#3604](https://github.com/code-yeongyu/senpi/issues/3604), [senpi#3628](https://github.com/code-yeongyu/senpi/issues/3628), [senpi#3649](https://github.com/code-yeongyu/senpi/issues/3649), [senpi#3643](https://github.com/code-yeongyu/senpi/issues/3643), [#10552](https://github.com/code-yeongyu/oh-my-openagent/pull/10552))
+
+**Goals keep going while they make progress, and long sessions open and stay light (senpi 2026.10.18-1).** A goal no longer stops after a fixed 150 automatic continuations; it stops only after 60 in a row with no new tool effect, todo change or message from a person, and says why and that any message resumes it. Opening a very large session on a shared host no longer stalls the other sessions, a reopened session keeps only its latest compaction window in memory (four of the largest local transcripts went from 1441 MB to 216 MB of live heap), and reading a very long history over RPC pages instead of dropping the connection. A Claude subscription from `CLAUDE_CODE_OAUTH_TOKEN` or an ambient Claude Code login now shows as a connected subscription, and a host daemon inherits every credential variable the engine reads. Provider accounts can be ordered, and grep starts 5 to 14 `rg` processes where it used to start 63 to 87. ([#10280](https://github.com/code-yeongyu/oh-my-openagent/issues/10280), [#10509](https://github.com/code-yeongyu/oh-my-openagent/pull/10509)) The engine also fixes ChatGPT browser sign-in dead-ending on "State mismatch." when another session holds the callback port ([senpi #3627](https://github.com/code-yeongyu/senpi/pull/3627)), and a compiled engine now finds the Claude Code binary shipped beside its executable instead of failing the lookup ([senpi #3640](https://github.com/code-yeongyu/senpi/pull/3640)).
+
+**A client re-attaching to a retained session gets the full task snapshot again, and can pull it on demand.** The task RPC bridge listens for `session_resumed`, which senpi fires when the first client re-attaches to a still-open session, and re-emits the complete `omo.task.updated` snapshot instead of waiting for the next store change to alter its fingerprint; a new `omo.task.list` request answers the same payload for the parent session it names. ([#10016](https://github.com/code-yeongyu/oh-my-openagent/issues/10016), [#10122](https://github.com/code-yeongyu/oh-my-openagent/pull/10122))
+**Memory recall's search index takes a quarter of the memory it did, and a memory write no longer rebuilds it.** Every session that recalls memory keeps a search index of the whole memory. It stored each note's words as a separate table, so a memory of 6,406 notes cost about 231 MB per session, and each memory write threw the index away and rebuilt it, taking 3 to 11 seconds. Words are now numbered once and each note keeps a compact list of numbers that survives a memory write, so the same memory costs 55 MB and a write updates the index in about 16 ms. The notes found and their order are unchanged. ([#10510](https://github.com/code-yeongyu/oh-my-openagent/issues/10510), [#10512](https://github.com/code-yeongyu/oh-my-openagent/pull/10512))
+
+**A background task child follows its session when another client replaces it.** A raw RPC client that issues `new_session`, `switch_session` or `fork` on a daemon child's routing handle moves that session to a new durable id and transcript; the child now observes the `session_replaced` record, re-stamps its record's session path and durable id, appends a `replaced` task event, and reattaches to the new transcript instead of the abandoned one. When the replacement stops a turn the child was running, the child ends `interrupted` with the reason and a `task_send` action, and the parent is notified because it did not ask for that stop (a parent's own interrupt stays silent); this needs a senpi that names the cause on `agent_end` (senpi#3357), and an older host keeps the previous error. ([#10018](https://github.com/code-yeongyu/oh-my-openagent/issues/10018), [#10112](https://github.com/code-yeongyu/oh-my-openagent/pull/10112))
+**`unspecified-low` tries GLM 5.3 before GPT.** A user with Claude and Z.ai (or OpenCode Go) but no Xiaomi or xAI provider used to fall from Sonnet 5.5 straight to GPT-6.1 Sol once Sonnet was unavailable. The chain now has `glm-5.3` at high thinking right after Grok 4.7 and ahead of the GPT rungs, so the order for users who hold MiMo or Grok is unchanged. ([#10306](https://github.com/code-yeongyu/oh-my-openagent/issues/10306), [#10311](https://github.com/code-yeongyu/oh-my-openagent/pull/10311))
+
+**`omo --help` no longer moves your OpenCode config before you start a session.** On a fresh install `--help` (and `--list-models` / `--list-tips`) loads the omo extension, and its startup migration moved `~/.config/opencode/oh-my-openagent.json` into `~/.omo/migration-backup-*`, so a 4.19.x OpenCode plugin fell back to its defaults. The migration now runs only on launches that can start a session, and `--help` still lists omo's own flags. Thanks to @bluet for the report and @twotnguyen for #10433. ([#10428](https://github.com/code-yeongyu/oh-my-openagent/issues/10428), [#10454](https://github.com/code-yeongyu/oh-my-openagent/pull/10454))
+
+**Built, tested and released on Bun 1.4.3.** CI, the release workflows and the devcontainer move from Bun 1.4.2 to 1.4.3, the current stable release, which fixes CVE-2026-48618 (TLS host names) and idle garbage collection in workers. ([#10432](https://github.com/code-yeongyu/oh-my-openagent/pull/10432))
+
+**OpenCode edition: Sisyphus names GPT-6.1 Sol and GPT-6 Luna as themselves.** On `gpt-6.1-sol` (and its `-fast`, dashed and Venice `gpt-61-sol` ids) and on `gpt-6-luna`, the Sisyphus and Sisyphus-Junior GPT prompts introduced the model as "a GPT-family model"; they now say "GPT-6.1 Sol" and "GPT-6 Luna". ([#10291](https://github.com/code-yeongyu/oh-my-openagent/issues/10291), [#10292](https://github.com/code-yeongyu/oh-my-openagent/pull/10292))
+
+**Memory session shutdown waits for the work it started in the memory directory.** Shutdown now waits, within its existing drain budget, for an in-flight repo maintenance pass and for the status refreshes started at bind and settle, all of which run git inside the identity directory. Before, they could still hold files open after shutdown returned; on Windows the next delete of that directory failed with `EBUSY`/`EFAULT`, which is how the memory pressure-dream test failed intermittently in CI. ([#10154](https://github.com/code-yeongyu/oh-my-openagent/issues/10154), [#10312](https://github.com/code-yeongyu/oh-my-openagent/pull/10312))
+
+**Oh My OpenAgent loads on OpenCode 2.** OpenCode 2 refused the plugin with `Plugin must export a default definition with an id and an effect or setup function`, because both entry points exported only the OpenCode 1.x shape. The server and TUI entries now also export an OpenCode 2 `setup` built with `Plugin.define` from `@opencode/plugin`, next to the OpenCode 1.x `server` and `tui` entries, which keep working as before. Each OpenCode 2 start shows a notice that points to OmO Native, with the install command and guide link. ([#8485](https://github.com/code-yeongyu/oh-my-openagent/issues/8485), [#10439](https://github.com/code-yeongyu/oh-my-openagent/pull/10439))
+
+**The frontend skill keeps coloured edge stripes off rounded cards, and a linter catches the ones that slip through.** A card with a coloured stripe along one edge, its rounded corners bending the stripe, is one of the most recognizable marks of generated UI, and the skill only banned it when the stripe marked a selected or focused item. It now rules the stripe out before drafting, whether it decorates the card or marks state, and offers what to use instead: a tonal surface, a heading in the accent colour, a glyph, or spacing. The new `check-accent-stripes.ts` script finds the pattern in CSS, Tailwind classes, inline styles, and styled-components, and the skill's checklist runs it before visual QA. Focus rings, form validation, neutral dividers, and tables are left alone. ([#10437](https://github.com/code-yeongyu/oh-my-openagent/issues/10437))
+
+**A store extension's `orderBy` can only name columns its statement returns, and its text never reaches the SQL.** `orderBy` used to be pasted into the gateway's ordered read as given, so a `LIMIT`, an `OFFSET` or a column the statement does not select failed as broken SQL (`near "LIMIT": syntax error`, `no such column`). Each comma-separated term must now be one of the statement's own output columns (matched case-insensitively, as SQLite does), optionally with `COLLATE BINARY`/`NOCASE`/`RTRIM`, `ASC`/`DESC` and `NULLS FIRST`/`NULLS LAST`. The ORDER BY is rebuilt from the matched column name and those fixed keywords. Anything else, including quoted or bracketed names, comments, look-alike Unicode letters and unknown columns, is refused with `extension_schema_violation` and a message that names the rule and the columns the statement does return; put a `LIMIT` in the statement itself. ([#9626](https://github.com/code-yeongyu/oh-my-openagent/pull/9626))
+
+**The standalone `omo` binary's `omo setup` carries your OpenCode model choices again.** The release binary printed `could not read the engine's model list (ENOENT ... '/package.json')` and skipped the default model and agent/category picks, and it would have imported a user skill named like a bundled one over the bundled skill. Setup in the binary now reads the provider catalog and bundled skills it ships with; the npm install is unchanged. Thanks to @bluet for the report. ([#10429](https://github.com/code-yeongyu/oh-my-openagent/issues/10429), [#10455](https://github.com/code-yeongyu/oh-my-openagent/pull/10455))
+
+**Only you can stop computer use with the stop chord on macOS and Linux X11.** A chord a program sends (the agent's own key presses, `xdotool`, another app posting key events) used to stop every session, and repeated, could keep computer use stopped; it is now ignored, while a press on a real keyboard still stops every running session at once. Wayland's shortcut portal cannot tell the two apart, and Windows follows in a separate change. ([#10444](https://github.com/code-yeongyu/oh-my-openagent/issues/10444), [#10449](https://github.com/code-yeongyu/oh-my-openagent/pull/10449))
+
+**On Windows every session can now arm the stop chord, and only a key press on a real keyboard triggers it.** The chord used to be a `RegisterHotKey` registration, which only one process can hold: a second session's engine could not arm it, so its computer use refused input with `StopPathUnavailable`; and a chord a program sent (the agent's own key presses or any other app's `SendInput`) stopped computer use like a real press. A low-level keyboard hook now watches the chord in every session, ignores injected key events, and never swallows a key; one physical press stops every running session at once. ([#10444](https://github.com/code-yeongyu/oh-my-openagent/issues/10444), [#10453](https://github.com/code-yeongyu/oh-my-openagent/pull/10453))
+
+**Computer use works on arm64 Linux and Windows.** Each OmO release now carries the desktop engine for Linux arm64 (glibc) and Windows arm64, built on native arm64 machines and checked with its self-test before upload. The compiled OmO binaries for those hosts include the engine, and an npm install downloads it on first use, where it used to report that no engine is built for the host. Musl Linux still has no engine. ([#10440](https://github.com/code-yeongyu/oh-my-openagent/issues/10440), [#10442](https://github.com/code-yeongyu/oh-my-openagent/pull/10442))
+
+**A memory-sync account can be recovered on a new device with a passkey.** memory-core can enroll a dedicated recovery passkey and, on a fresh device, use it to rejoin the account: the device's native bridge derives the recovery keys from the passkey and keeps them in the main process, the device walks the served history from the recovery key's own record and pins it, and only a wrap that record vouches for is opened. A wrap the server made up is refused, whatever the server sends. Nothing syncs to a server yet. ([#10412](https://github.com/code-yeongyu/oh-my-openagent/pull/10412))
+
+**`herdr agent prompt` reaches OmO panes.** herdr only types into a pane whose foreground process it can name, and the OmO engine runs as `bun …/cli.js`, so every OmO pane was refused with `agent_not_ready`. Under herdr, the interactive engine now starts with `HERDR_AGENT=pi`, the label herdr already shows for these panes. OmO drops it from the environment it hands to anything it starts. Thanks to @devswha for the report. ([#10448](https://github.com/code-yeongyu/oh-my-openagent/issues/10448), [#10452](https://github.com/code-yeongyu/oh-my-openagent/pull/10452))
+
+**A memory writer killed mid-commit no longer leaves the next writer stuck on a git lock, and a live commit's lock is never taken.** When a memory writer dies holding a git `index.lock` or ref lock, the writer that takes over its memory-write lock now removes that lock, but only after proving the previous owner dead, seeing no other process still working in the repository (a killed writer's own git command can outlive it), and seeing no process holding the file open. When any of that cannot be proven, including when the open-file check is slow or never answers, the lock stays put and the write fails with an error that names each lock file, says why it was kept, and gives the way out: `/memory unlock <path>` re-checks that one lock, shows what it found, refuses while any live holder, repository user or memory writer is visible, and removes only that file after you confirm (`--force` skips the prompt in a non-interactive session, never a refusal). On Linux desktops and SSH logins where some of your own processes cannot be inspected, the automatic removal does not fire and this command is the way out; [#10322](https://github.com/code-yeongyu/oh-my-openagent/issues/10322) tracks making liveness independent of `/proc`. On Linux this check reads `/proc` directly, so recovery also works on minimal installs and containers without `lsof`. ([#10177](https://github.com/code-yeongyu/oh-my-openagent/issues/10177)) ([#10199](https://github.com/code-yeongyu/oh-my-openagent/pull/10199))
+
+**Synced memory refuses a forged or reordered history on the device, the same way the server does.** memory-core now checks every sync object, the hash chain linking them, and the device keyring folded from it, using the format the service ships. A device rejects a record signed by a key that was rotated out or revoked, a dropped or reordered entry, a recovery join from a removed recovery key, and a batch sealed for another account. It treats the server as untrusted: a device trusts an account history only if it starts from the root it pinned during its own pairing or recovery, so a history the server invents, or a different root that looks valid, is refused before any key is opened. A key wrap opens only from a record of that trusted history, and only through the device's own keyring. A missing or damaged pin is treated as no trust at all, and the device asks to re-pair or recover. A replayed batch, a swapped record body, an unsigned row in a vetoed epoch and a row with fields the format does not define are each refused and counted. Nothing syncs to a server yet. ([#10178](https://github.com/code-yeongyu/oh-my-openagent/issues/10178), [#10298](https://github.com/code-yeongyu/oh-my-openagent/pull/10298))
+
+**A memory that already exists on a device joins its synced space without losing anything.** Each project's synced memory gets one identity that every device computes the same way from the repository, so two devices enabling sync offline land in one space. When local files meet the space's copy, nothing is deleted: body lines are only added, a list keeps every element from both sides, and a frontmatter value that differs keeps both whole values side by side, never spliced together and never a conflict note in the file. Leftover hub conflict copies are folded in and removed only after a read-back proves every line made it. Nothing syncs to a server yet. ([#10206](https://github.com/code-yeongyu/oh-my-openagent/pull/10206))
+
+**`runtime_fallback` moves to the next model when a Cursor pool is spent.** cursor-opencode-provider reports a spent pool as `capacity_limit`, which the fallback classifier did not recognize, so the session ended on the error instead of trying the next rung of the chain. It is now treated like the `resource_exhausted` error it replaces. ([#10170](https://github.com/code-yeongyu/oh-my-openagent/issues/10170), [#10224](https://github.com/code-yeongyu/oh-my-openagent/pull/10224))
+
+## [5.1.37] - 2026-10-19
+
+5.1.36 was prepared but never published; everything listed for it ships in this release. ([#10552](https://github.com/code-yeongyu/oh-my-openagent/pull/10552))
+
+**The engine moves to senpi 2026.10.19: a hung extension handler no longer freezes a session, and queued input survives a crash.** An extension handler that never settles on a lifecycle event is named in the session after 60 s and released after 20 min, or at once on Esc or the turn deadline. Input queued with a client id is written to the session file before it is queued and delivered exactly once. The mouse wheel scrolls the transcript again while a question prompt is waiting, Alt+Q restores queued messages on WSL, and the /btw panel no longer repeats a running eval's output in the scrollback. Anthropic requests of 4096+ characters to `api.anthropic.com` are now sent gzip-compressed, as Claude Code does. ([senpi#3650](https://github.com/code-yeongyu/senpi/issues/3650), [senpi#3549](https://github.com/code-yeongyu/senpi/issues/3549), [senpi#3604](https://github.com/code-yeongyu/senpi/issues/3604), [senpi#3628](https://github.com/code-yeongyu/senpi/issues/3628), [senpi#3649](https://github.com/code-yeongyu/senpi/issues/3649), [senpi#3643](https://github.com/code-yeongyu/senpi/issues/3643), [#10552](https://github.com/code-yeongyu/oh-my-openagent/pull/10552))
+
+**Goals keep going while they make progress, and long sessions open and stay light (senpi 2026.10.18-1).** A goal no longer stops after a fixed 150 automatic continuations; it stops only after 60 in a row with no new tool effect, todo change or message from a person, and says why and that any message resumes it. Opening a very large session on a shared host no longer stalls the other sessions, a reopened session keeps only its latest compaction window in memory (four of the largest local transcripts went from 1441 MB to 216 MB of live heap), and reading a very long history over RPC pages instead of dropping the connection. A Claude subscription from `CLAUDE_CODE_OAUTH_TOKEN` or an ambient Claude Code login now shows as a connected subscription, and a host daemon inherits every credential variable the engine reads. Provider accounts can be ordered, and grep starts 5 to 14 `rg` processes where it used to start 63 to 87. ([#10280](https://github.com/code-yeongyu/oh-my-openagent/issues/10280), [#10509](https://github.com/code-yeongyu/oh-my-openagent/pull/10509)) The engine also fixes ChatGPT browser sign-in dead-ending on "State mismatch." when another session holds the callback port ([senpi #3627](https://github.com/code-yeongyu/senpi/pull/3627)), and a compiled engine now finds the Claude Code binary shipped beside its executable instead of failing the lookup ([senpi #3640](https://github.com/code-yeongyu/senpi/pull/3640)).
+
+**A client re-attaching to a retained session gets the full task snapshot again, and can pull it on demand.** The task RPC bridge listens for `session_resumed`, which senpi fires when the first client re-attaches to a still-open session, and re-emits the complete `omo.task.updated` snapshot instead of waiting for the next store change to alter its fingerprint; a new `omo.task.list` request answers the same payload for the parent session it names. ([#10016](https://github.com/code-yeongyu/oh-my-openagent/issues/10016), [#10122](https://github.com/code-yeongyu/oh-my-openagent/pull/10122))
+**Memory recall's search index takes a quarter of the memory it did, and a memory write no longer rebuilds it.** Every session that recalls memory keeps a search index of the whole memory. It stored each note's words as a separate table, so a memory of 6,406 notes cost about 231 MB per session, and each memory write threw the index away and rebuilt it, taking 3 to 11 seconds. Words are now numbered once and each note keeps a compact list of numbers that survives a memory write, so the same memory costs 55 MB and a write updates the index in about 16 ms. The notes found and their order are unchanged. ([#10510](https://github.com/code-yeongyu/oh-my-openagent/issues/10510), [#10512](https://github.com/code-yeongyu/oh-my-openagent/pull/10512))
+
+**A background task child follows its session when another client replaces it.** A raw RPC client that issues `new_session`, `switch_session` or `fork` on a daemon child's routing handle moves that session to a new durable id and transcript; the child now observes the `session_replaced` record, re-stamps its record's session path and durable id, appends a `replaced` task event, and reattaches to the new transcript instead of the abandoned one. When the replacement stops a turn the child was running, the child ends `interrupted` with the reason and a `task_send` action, and the parent is notified because it did not ask for that stop (a parent's own interrupt stays silent); this needs a senpi that names the cause on `agent_end` (senpi#3357), and an older host keeps the previous error. ([#10018](https://github.com/code-yeongyu/oh-my-openagent/issues/10018), [#10112](https://github.com/code-yeongyu/oh-my-openagent/pull/10112))
+**`unspecified-low` tries GLM 5.3 before GPT.** A user with Claude and Z.ai (or OpenCode Go) but no Xiaomi or xAI provider used to fall from Sonnet 5.5 straight to GPT-6.1 Sol once Sonnet was unavailable. The chain now has `glm-5.3` at high thinking right after Grok 4.7 and ahead of the GPT rungs, so the order for users who hold MiMo or Grok is unchanged. ([#10306](https://github.com/code-yeongyu/oh-my-openagent/issues/10306), [#10311](https://github.com/code-yeongyu/oh-my-openagent/pull/10311))
+
+**`omo --help` no longer moves your OpenCode config before you start a session.** On a fresh install `--help` (and `--list-models` / `--list-tips`) loads the omo extension, and its startup migration moved `~/.config/opencode/oh-my-openagent.json` into `~/.omo/migration-backup-*`, so a 4.19.x OpenCode plugin fell back to its defaults. The migration now runs only on launches that can start a session, and `--help` still lists omo's own flags. Thanks to @bluet for the report and @twotnguyen for #10433. ([#10428](https://github.com/code-yeongyu/oh-my-openagent/issues/10428), [#10454](https://github.com/code-yeongyu/oh-my-openagent/pull/10454))
+
+**Built, tested and released on Bun 1.4.3.** CI, the release workflows and the devcontainer move from Bun 1.4.2 to 1.4.3, the current stable release, which fixes CVE-2026-48618 (TLS host names) and idle garbage collection in workers. ([#10432](https://github.com/code-yeongyu/oh-my-openagent/pull/10432))
+
+**OpenCode edition: Sisyphus names GPT-6.1 Sol and GPT-6 Luna as themselves.** On `gpt-6.1-sol` (and its `-fast`, dashed and Venice `gpt-61-sol` ids) and on `gpt-6-luna`, the Sisyphus and Sisyphus-Junior GPT prompts introduced the model as "a GPT-family model"; they now say "GPT-6.1 Sol" and "GPT-6 Luna". ([#10291](https://github.com/code-yeongyu/oh-my-openagent/issues/10291), [#10292](https://github.com/code-yeongyu/oh-my-openagent/pull/10292))
+
+**Memory session shutdown waits for the work it started in the memory directory.** Shutdown now waits, within its existing drain budget, for an in-flight repo maintenance pass and for the status refreshes started at bind and settle, all of which run git inside the identity directory. Before, they could still hold files open after shutdown returned; on Windows the next delete of that directory failed with `EBUSY`/`EFAULT`, which is how the memory pressure-dream test failed intermittently in CI. ([#10154](https://github.com/code-yeongyu/oh-my-openagent/issues/10154), [#10312](https://github.com/code-yeongyu/oh-my-openagent/pull/10312))
+
+**Oh My OpenAgent loads on OpenCode 2.** OpenCode 2 refused the plugin with `Plugin must export a default definition with an id and an effect or setup function`, because both entry points exported only the OpenCode 1.x shape. The server and TUI entries now also export an OpenCode 2 `setup` built with `Plugin.define` from `@opencode/plugin`, next to the OpenCode 1.x `server` and `tui` entries, which keep working as before. Each OpenCode 2 start shows a notice that points to OmO Native, with the install command and guide link. ([#8485](https://github.com/code-yeongyu/oh-my-openagent/issues/8485), [#10439](https://github.com/code-yeongyu/oh-my-openagent/pull/10439))
+
+**The frontend skill keeps coloured edge stripes off rounded cards, and a linter catches the ones that slip through.** A card with a coloured stripe along one edge, its rounded corners bending the stripe, is one of the most recognizable marks of generated UI, and the skill only banned it when the stripe marked a selected or focused item. It now rules the stripe out before drafting, whether it decorates the card or marks state, and offers what to use instead: a tonal surface, a heading in the accent colour, a glyph, or spacing. The new `check-accent-stripes.ts` script finds the pattern in CSS, Tailwind classes, inline styles, and styled-components, and the skill's checklist runs it before visual QA. Focus rings, form validation, neutral dividers, and tables are left alone. ([#10437](https://github.com/code-yeongyu/oh-my-openagent/issues/10437))
+
+**A store extension's `orderBy` can only name columns its statement returns, and its text never reaches the SQL.** `orderBy` used to be pasted into the gateway's ordered read as given, so a `LIMIT`, an `OFFSET` or a column the statement does not select failed as broken SQL (`near "LIMIT": syntax error`, `no such column`). Each comma-separated term must now be one of the statement's own output columns (matched case-insensitively, as SQLite does), optionally with `COLLATE BINARY`/`NOCASE`/`RTRIM`, `ASC`/`DESC` and `NULLS FIRST`/`NULLS LAST`. The ORDER BY is rebuilt from the matched column name and those fixed keywords. Anything else, including quoted or bracketed names, comments, look-alike Unicode letters and unknown columns, is refused with `extension_schema_violation` and a message that names the rule and the columns the statement does return; put a `LIMIT` in the statement itself. ([#9626](https://github.com/code-yeongyu/oh-my-openagent/pull/9626))
+
+**The standalone `omo` binary's `omo setup` carries your OpenCode model choices again.** The release binary printed `could not read the engine's model list (ENOENT ... '/package.json')` and skipped the default model and agent/category picks, and it would have imported a user skill named like a bundled one over the bundled skill. Setup in the binary now reads the provider catalog and bundled skills it ships with; the npm install is unchanged. Thanks to @bluet for the report. ([#10429](https://github.com/code-yeongyu/oh-my-openagent/issues/10429), [#10455](https://github.com/code-yeongyu/oh-my-openagent/pull/10455))
+
+**Only you can stop computer use with the stop chord on macOS and Linux X11.** A chord a program sends (the agent's own key presses, `xdotool`, another app posting key events) used to stop every session, and repeated, could keep computer use stopped; it is now ignored, while a press on a real keyboard still stops every running session at once. Wayland's shortcut portal cannot tell the two apart, and Windows follows in a separate change. ([#10444](https://github.com/code-yeongyu/oh-my-openagent/issues/10444), [#10449](https://github.com/code-yeongyu/oh-my-openagent/pull/10449))
+
+**On Windows every session can now arm the stop chord, and only a key press on a real keyboard triggers it.** The chord used to be a `RegisterHotKey` registration, which only one process can hold: a second session's engine could not arm it, so its computer use refused input with `StopPathUnavailable`; and a chord a program sent (the agent's own key presses or any other app's `SendInput`) stopped computer use like a real press. A low-level keyboard hook now watches the chord in every session, ignores injected key events, and never swallows a key; one physical press stops every running session at once. ([#10444](https://github.com/code-yeongyu/oh-my-openagent/issues/10444), [#10453](https://github.com/code-yeongyu/oh-my-openagent/pull/10453))
+
+**Computer use works on arm64 Linux and Windows.** Each OmO release now carries the desktop engine for Linux arm64 (glibc) and Windows arm64, built on native arm64 machines and checked with its self-test before upload. The compiled OmO binaries for those hosts include the engine, and an npm install downloads it on first use, where it used to report that no engine is built for the host. Musl Linux still has no engine. ([#10440](https://github.com/code-yeongyu/oh-my-openagent/issues/10440), [#10442](https://github.com/code-yeongyu/oh-my-openagent/pull/10442))
+
+**A memory-sync account can be recovered on a new device with a passkey.** memory-core can enroll a dedicated recovery passkey and, on a fresh device, use it to rejoin the account: the device's native bridge derives the recovery keys from the passkey and keeps them in the main process, the device walks the served history from the recovery key's own record and pins it, and only a wrap that record vouches for is opened. A wrap the server made up is refused, whatever the server sends. Nothing syncs to a server yet. ([#10412](https://github.com/code-yeongyu/oh-my-openagent/pull/10412))
+
+**`herdr agent prompt` reaches OmO panes.** herdr only types into a pane whose foreground process it can name, and the OmO engine runs as `bun …/cli.js`, so every OmO pane was refused with `agent_not_ready`. Under herdr, the interactive engine now starts with `HERDR_AGENT=pi`, the label herdr already shows for these panes. OmO drops it from the environment it hands to anything it starts. Thanks to @devswha for the report. ([#10448](https://github.com/code-yeongyu/oh-my-openagent/issues/10448), [#10452](https://github.com/code-yeongyu/oh-my-openagent/pull/10452))
+
+**A memory writer killed mid-commit no longer leaves the next writer stuck on a git lock, and a live commit's lock is never taken.** When a memory writer dies holding a git `index.lock` or ref lock, the writer that takes over its memory-write lock now removes that lock, but only after proving the previous owner dead, seeing no other process still working in the repository (a killed writer's own git command can outlive it), and seeing no process holding the file open. When any of that cannot be proven, including when the open-file check is slow or never answers, the lock stays put and the write fails with an error that names each lock file, says why it was kept, and gives the way out: `/memory unlock <path>` re-checks that one lock, shows what it found, refuses while any live holder, repository user or memory writer is visible, and removes only that file after you confirm (`--force` skips the prompt in a non-interactive session, never a refusal). On Linux desktops and SSH logins where some of your own processes cannot be inspected, the automatic removal does not fire and this command is the way out; [#10322](https://github.com/code-yeongyu/oh-my-openagent/issues/10322) tracks making liveness independent of `/proc`. On Linux this check reads `/proc` directly, so recovery also works on minimal installs and containers without `lsof`. ([#10177](https://github.com/code-yeongyu/oh-my-openagent/issues/10177)) ([#10199](https://github.com/code-yeongyu/oh-my-openagent/pull/10199))
+
+**Synced memory refuses a forged or reordered history on the device, the same way the server does.** memory-core now checks every sync object, the hash chain linking them, and the device keyring folded from it, using the format the service ships. A device rejects a record signed by a key that was rotated out or revoked, a dropped or reordered entry, a recovery join from a removed recovery key, and a batch sealed for another account. It treats the server as untrusted: a device trusts an account history only if it starts from the root it pinned during its own pairing or recovery, so a history the server invents, or a different root that looks valid, is refused before any key is opened. A key wrap opens only from a record of that trusted history, and only through the device's own keyring. A missing or damaged pin is treated as no trust at all, and the device asks to re-pair or recover. A replayed batch, a swapped record body, an unsigned row in a vetoed epoch and a row with fields the format does not define are each refused and counted. Nothing syncs to a server yet. ([#10178](https://github.com/code-yeongyu/oh-my-openagent/issues/10178), [#10298](https://github.com/code-yeongyu/oh-my-openagent/pull/10298))
+
+**A memory that already exists on a device joins its synced space without losing anything.** Each project's synced memory gets one identity that every device computes the same way from the repository, so two devices enabling sync offline land in one space. When local files meet the space's copy, nothing is deleted: body lines are only added, a list keeps every element from both sides, and a frontmatter value that differs keeps both whole values side by side, never spliced together and never a conflict note in the file. Leftover hub conflict copies are folded in and removed only after a read-back proves every line made it. Nothing syncs to a server yet. ([#10206](https://github.com/code-yeongyu/oh-my-openagent/pull/10206))
+
+**`runtime_fallback` moves to the next model when a Cursor pool is spent.** cursor-opencode-provider reports a spent pool as `capacity_limit`, which the fallback classifier did not recognize, so the session ended on the error instead of trying the next rung of the chain. It is now treated like the `resource_exhausted` error it replaces. ([#10170](https://github.com/code-yeongyu/oh-my-openagent/issues/10170), [#10224](https://github.com/code-yeongyu/oh-my-openagent/pull/10224))
+
 ## [5.1.35] - 2026-10-16
 
 **The omo-senpi typecheck gives the same result wherever the checkout sits.** It used to pick up `@types/node` from folders above the checkout, so a stray older copy there failed the typecheck while CI passed on the same commit. omo-senpi now declares its own `@types/node` and `bun-types` and reads type packages only from its own `node_modules`. ([#10320](https://github.com/code-yeongyu/oh-my-openagent/issues/10320), [#10332](https://github.com/code-yeongyu/oh-my-openagent/pull/10332))

package/plugin/extensions/gateway-rules-extension.mjs

@@ -1,2 +1,2 @@
-// omo:fwMmjRq3LfcfBEqtFEYCGEdg8RljSYFoni0TDAayIMw:5LLt7853QZ0R275mM__hYa8UeDUj-ySee_PqmOY8R7U
+// omo:N7yV2WZOIOdRnwwCEF2QqkFTSVMebOlQ84G7HpOZFBE:5LLt7853QZ0R275mM__hYa8UeDUj-ySee_PqmOY8R7U
 function e(e){return e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;")}function r(r,s){let i=[`<operating-rules version="${e(r).replaceAll('"',"&quot;")}">`];for(let r of s)i.push(`- ${e(r)}`);return i.push("</operating-rules>"),i.join("\n")}function s(e,r){if(null===e||"object"!=typeof e||Array.isArray(e))throw Error(`${r} must be an object`);return e}function i(e,r){let s=e[r];if("string"!=typeof s||0===s.length)throw Error(`${r} must be a non-empty string`);return s}function o(e){let r=s(e,"a rules target"),o=i(r,"session_durable_id"),n=r.binding_id;if(null!=n&&"string"!=typeof n)throw Error("binding_id must be a string");let t=r.behavioral;if(null===t)return{session_durable_id:o,binding_id:n??void 0,behavioral:null};if(!Array.isArray(t)||!t.every(e=>"string"==typeof e))throw Error("behavioral must be an array of rule texts, or null to clear the session's rules");return{session_durable_id:o,binding_id:n??void 0,behavioral:t}}function n(e,r){let o=i(s(r,"blockForSession args"),"session_durable_id"),n=e.one(["version","block"],"SELECT version, block FROM gateway_rules_blocks WHERE session_durable_id = ?",[o]);return void 0===n?null:{version:String(n.version),block:String(n.block)}}function t(e,r){let o=i(s(r,"sessionsWithRules args"),"scope");return{sessions:e.all(["session_durable_id","version"],"SELECT session_durable_id, version FROM gateway_rules_blocks WHERE scope = ?",[o],"session_durable_id").map(e=>({session_durable_id:String(e.session_durable_id),version:String(e.version)}))}}async function l(n,t){let l=s(t,"rulesCommitted args"),a=i(l,"scope"),d=i(l,"version"),u=l.now??Date.now();if("number"!=typeof u||!Number.isFinite(u))throw Error("now must be a finite timestamp");if(!Array.isArray(l.targets))throw Error("targets must be an array");let _=[];for(let s of l.targets){let i=o(s);if(null===i.behavioral){let e=n.exec("DELETE FROM gateway_rules_blocks WHERE session_durable_id = ?",[i.session_durable_id]);_.push({session_durable_id:i.session_durable_id,outcome:e>0?"removed":"absent"});continue}let t=r(d,i.behavioral),l=n.exec("INSERT INTO gateway_rules_blocks (session_durable_id, scope, version, block, updated_at) VALUES (?, ?, ?, ?, ?)\n       ON CONFLICT(session_durable_id) DO UPDATE SET scope = excluded.scope, version = excluded.version, block = excluded.block, updated_at = excluded.updated_at\n       WHERE gateway_rules_blocks.version != excluded.version",[i.session_durable_id,a,d,t,u]);if(void 0===i.binding_id){_.push({session_durable_id:i.session_durable_id,outcome:l>0?"updated":"unchanged"});continue}let c=await n.enqueue({binding_id:i.binding_id,event_id:`rules_changed:${a}:${d}:${i.session_durable_id}`,text:[`<operating-rules-changed scope="${e(a).replaceAll('"',"&quot;")}" version="${e(d).replaceAll('"',"&quot;")}">`,"The operating rules for this gateway scope changed; this session's system prompt carries the new block from its next turn.","</operating-rules-changed>"].join("\n"),mode:"follow_up"});_.push({session_durable_id:i.session_durable_id,outcome:l>0?"updated":"unchanged",delivery:"ok"===c.kind?{kind:"ok",delivery_id:c.delivery_id,deduplicated:!0===c.deduplicated}:{kind:"error",error:c.error}})}return{scope:a,version:d,outcomes:_}}export{n as blockForSession,l as rulesCommitted,t as sessionsWithRules};