open-multi-agent-kit 0.96.2 → 0.97.0

package/CHANGELOG.md

@@ -2,9 +2,25 @@
 
 ## [Unreleased]
 
+## [0.97.0] - 2026-08-24
+
 ### Added
 
+- Added the repository-understanding default: a generated `openwiki/` evidence index with grounded, staleness-tracked claims, OpenWiki managed blocks in root `AGENTS.md`/`CLAUDE.md`, a scheduled `openwiki-update` GitHub Actions workflow (Gemini provider by default), and a README section describing the local-wiki protocol for fresh sessions. The vendored `oh-my-pi` tree was removed; README now acknowledges pi (badlogic/pi-mono) and oh-my-pi as upstream origins.
 - Added global-only `defaultActiveSkills` so operator-selected, user-scoped skill names can stay active in every prompt while full instructions remain on-demand.
+- The model registry now keeps a bounded audit trail of every successfully loaded `models.json` (last 10 snapshots) and warns when model entries disappear between loads, so silent config rewrites by other sessions surface immediately instead of losing custom models.
+- Images pasted or dragged into the interactive editor now attach as preview chips above the input through a bounded in-memory attachment store instead of per-paste temp files. Attachments are released exactly when their prompt is accepted and stay attached for retry when the turn fails before acceptance.
+- Compaction summarization now walks the configured resilience failover chain once when the summarization model hits quota/billing exhaustion; if every candidate is also quota-blocked it fails with a new non-retryable `compaction.quota_exhausted` termination cause whose guidance points at `/model`, `compaction.model`, or waiting for reset.
+- Upstream availability failures (gateway 5xx passthroughs, streams ending without a finish reason) are classified as network errors, and the retry path first rotates to another authenticated route serving the same underlying model family before falling back to the standard retry/failover chain.
+
+### Changed
+
+- YOLO mode (`OMK_YOLO` / `OMK_COMMAND_SAFETY=0` / `OMK_DISABLE_COMMAND_SAFETY`) is now evaluated in one place, the shared command-safety gate decision engine: every verdict — including block-tier commands and privilege prompts — runs without prompting, and the RPC headless bash safety floor honors the same opt-out.
+- Refreshed the bundled model catalog (new DeepSeek V4 Flash Vision experimental routes and Thinking Machines Inkling free routes; removed dead free-tier aliases).
+
+### Security
+
+- The bash command-safety classifier now extracts command substitutions (`$(...)`, backticks, `<(...)`/`>(...)`) with quote-aware matching and recursively classifies their bodies up to a bounded depth, merging every risk signal by severity instead of returning on the first hit, so a destructive body such as `echo $(rm -rf ~)` can no longer ride behind a benign-looking outer command.
 
 ### Fixed
 

package/README.md

@@ -4,6 +4,8 @@ Provider-neutral terminal coding agent with multi-agent orchestration, scoped to
 
 OMK supports interactive terminal use, non-interactive output, RPC integration, and an embeddable TypeScript SDK. It works with API-key and subscription providers without making one provider the control plane.
 
+OMK targets state-of-the-art quality as a CLI coding-agent harness; it does not currently claim verified SOTA status. Comparative claims follow the same-model, reproducible protocol in [Turn metrics and harness evaluation](https://github.com/dmae97/omk/blob/main/packages/coding-agent/docs/metrics.md).
+
 ## Install
 
 Requires Node.js 22.19 or newer. Built-in local bash also requires `sandbox-exec` on macOS or `bwrap` plus unprivileged user namespaces on Linux. Enforcement is enabled by default and fails closed with `sandbox.backend_missing`; see [Containerization](https://github.com/dmae97/omk/blob/main/packages/coding-agent/docs/containerization.md).
@@ -45,7 +47,7 @@ OMK stores user configuration under `~/.omk/agent/` and project configuration un
 Install `omk-book-to-skill` to compile documents into reusable skills without adding Python extractors to OMK core:
 
 ```bash
-omk install npm:omk-book-to-skill@0.96.2
+omk install npm:omk-book-to-skill@0.97.0
 ```
 
 It provides compile, update, and verification commands plus a local SHA-256 provenance manifest. See [Book to Skill](https://github.com/dmae97/omk/blob/main/packages/coding-agent/docs/book-to-skill.md).
@@ -213,7 +215,7 @@ npm test
 
 See [Development](https://github.com/dmae97/omk/blob/main/packages/coding-agent/docs/development.md) and [CONTRIBUTING.md](https://github.com/dmae97/omk/blob/main/CONTRIBUTING.md).
 
-Release notes: [v0.96.2](https://github.com/dmae97/omk/blob/main/.github/RELEASE_NOTES_v0.96.2.md).
+Release notes: [v0.97.0](https://github.com/dmae97/omk/blob/main/.github/RELEASE_NOTES_v0.97.0.md).
 
 ## License
 

package/dist/core/agent-session.d.ts

@@ -803,6 +803,13 @@ export declare class AgentSession {
     private _runThresholdCompaction;
     private _recordCompactionCommitForHysteresis;
     private _resolveCompactionModel;
+    /**
+     * Authenticated failover candidates for compaction summarization, in
+     * resilience-chain order, excluding the primary compaction model itself.
+     * Used when the primary model's quota is exhausted (same-model retry is
+     * useless until reset; another provider can still save the compaction).
+     */
+    private _compactionFailoverModels;
     /**
      * Manually compact the session context.
      * Aborts current agent operation first.
@@ -822,7 +829,7 @@ export declare class AgentSession {
     /**
      * Effective context window for the upcoming turn.
      * Image-bearing turns with a text-only session model are auto-routed to the
-     * vision model (gpt-5.6-luna, 400K) — that window is the real limit. Text-only
+     * vision model (gpt-5.6-luna, 1M) — that window is the real limit. Text-only
      * turns keep the session model's (typically much larger) window.
      */
     private _effectiveTurnContextWindow;
@@ -885,6 +892,7 @@ export declare class AgentSession {
      */
     private _summarizationRetryCallbacks;
     private _ejectStickySafetyModelIfNeeded;
+    private _maybeRotateModelRoutes;
     private _maybeFailoverFromSafetyStop;
     private _prepareRetry;
     /**