[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
can1357/oh-my-pi	minor	18.12.6 → 18.13.1

---

Release Notes

can1357/oh-my-pi

v18.13.1

Compare Source

@​oh-my-pi/pi-agent-core

Added

• Hosts can distinguish safely paused agents from turns still draining with Agent.isPaused (#​17073 by @​anatoli-tsinovoy).

@​oh-my-pi/pi-ai

Fixed

• Codex accounts whose spend cap is used up are no longer picked through credit overage or from usage cached before the upgrade (#​16973 by @​DusKing1)
• Fixed Codex capacity 429s (turn_rate_limit_exceeded, "Codex is at capacity") reporting "Try again in ~N min" from the plan's usage-window reset, which made retries wait hours instead of the response's Retry-After (#​17087 by @​H4vC)

@​oh-my-pi/pi-catalog

Added

• Added GPT-6.1 Terra: openai/gpt-6.1-terra ships bundled ($1/$5, $0.05 cached, >272K long-context tier, 1.05M window), and Codex-discovered gpt-6.1-terra/-wm get API-equivalent pricing, the 922K extended-context maximum, and routing to Plus-or-higher accounts.
• Added Kimi K3.1 Pro and K3.1 Pro Highspeed support on Kimi Code (k3.1-pro, k3.1-pro-highspeed) and the Moonshot API (kimi-k3.1-pro, kimi-k3.1-pro-highspeed): official pricing ($2/$10 and $4/$20 per MTok), a 131K output cap, and K3's reasoning and wire contract (#​16901 by @​eggpeat)

@​oh-my-pi/pi-coding-agent

Added

• Added tools.restrictedFolders: every action on a listed folder (the folder and everything below it) asks for an explicit Approve/Deny in every approval mode, yolo included, and no remembered grant, session approval, or ACP "Always allow" covers it; recursive searches rooted above a restricted folder ask too, commands are matched by the directory they run in, and a deny policy still denies (#​16049 by @​Peribunt)
• /pause shows draining turns and running jobs across the main agent's subagent tree, without waiting on finished turns, safely parked agents, or suspended advisor reviews (#​17073 by @​anatoli-tsinovoy).

Changed

• Reduced redraws during background subagent progress while keeping elapsed previews and native checklists current (#​17131 by @​iliaal, based on #​16647 by @​Komzpa).
• Restoring a session with many subagents refreshes the running-subagent badge and lists once per burst instead of once per agent (#​16642 by @​Komzpa)
• ask answers now name the option a note is on (m: [X, Y] (note on Y: …), User added note on Y: …) (#​17126 by @​H4vC)

Fixed

• Fixed advisors dropping their review and showing a rate-limit error when the provider returns a timed 429 such as Codex's turn_rate_limit_exceeded; the advisor now waits out the Retry-After (within retry.maxDelayMs) and retries like the main agent (#​17087 by @​H4vC)
• Fixed a hashline PUT being refused with "would hold one more copy of line N … than the range did" when its body restates the line next to the range, fills the range, and adds a new line equal to that neighbour (a second @property or #[test], or a break; above a new case); it applies again, dropping only the restated line (#​17028)
• Fixed task subagents receiving AGENTS.md files, including the user-level ~/.omp/agent/AGENTS.md, when the session has additional workspace roots (--add-dir, /add-dir, workspace.additionalDirectories)
• Fixed an ask note added right after picking an answer landing on the next question's answer, in Tern and the TUI; Note now goes to the answer just picked until the next question gets other input (#​17126 by @​H4vC)

@​oh-my-pi/pi-tui

Added

• ANSI and TSP /pause screens show unsettled turns and jobs, hide settled counters, and preserve counts and resume controls on short terminals (#​17073 by @​anatoli-tsinovoy).
• Added noteOption to ExtensionAskDialogResultItem and QuestionResult: the label of the option an ask note is on (unset for a note on the custom answer) (#​17126 by @​H4vC)

Changed

• StatusLineComponent.setRunningSubagents() and setSubagentTreeCost() now report whether their state changed, allowing callers to skip redundant redraws (#​17131 by @​iliaal).

Fixed

• Fixed the ask dialog's Note (button or n) right after a pick moved to the next question annotating that question's highlighted row instead of the answer just picked (#​17126 by @​H4vC)
• Fixed the ask dialog's Next button reopening the custom-answer editor after Other was cancelled instead of moving on to the next question or Review tab

@​oh-my-pi/pi-utils

Added

• Added an optional maxFractionDigits to formatNumber() that caps decimals on values below 1,000 (#​16973 by @​DusKing1)

What's Changed

• fix(ai): report Codex spend-cap credits for credit-billed workspace seats by @​DusKing1 in #​16973
• fix(advisor): wait out timed Codex capacity 429s instead of dropping reviews by @​H4vC in #​17087
• feat: show live pause settlement status in TUI and Tern by @​anatoli-tsinovoy in #​17073
• fix(ask): keep a note on the answer just picked and name the noted option by @​H4vC in #​17126
• perf(tui): coalesce running-subagent badge refreshes on registry bursts by @​Komzpa in #​16642
• perf(tui): skip redundant subagent redraws without stale previews by @​iliaal in #​17131
• feat(catalog): add Kimi K3.1 Pro pricing and K3 contract on Kimi Code and Moonshot by @​eggpeat in #​16901

Full Changelog: can1357/oh-my-pi@v18.13.0...v18.13.1

v18.13.0

Compare Source

@​oh-my-pi/pi-agent-core

Added

• Added SummaryOptions.remotePromptCacheKey and remoteCompactionPolicyModel() so remote compaction can carry a cache key gated against the request it actually sends (#​16988 by @​rafalopilowski1)

Changed

• Remote compaction now sends cache and session headers for the endpoint and model the request actually uses, so a configured compaction override no longer inherits the live turn's routing (#​16988 by @​rafalopilowski1)
• Aside providers (AgentLoopConfig.getAsideMessages, Agent.setAsideMessageProvider) now receive which boundary is polled, "work" after tool calls or "stop" at the end of a turn, so they can keep a message out of a finished turn (#​16583 by @​will-bogusz)

Fixed

• Fixed --max-time values above about 596 hours (such as 600h) aborting the first turn with "Deadline exceeded" right away (#​17054 by @​trukhinyuri)
• Fixed repeated compaction on small or provider-capped context windows: compaction keeps only as much recent history as fits under the configured trigger, and no longer counts stale pre-compaction usage (#​16904 by @​eggpeat)
• Fixed native compaction token estimates counting opaque encrypted-state bytes as conversation text (#​16904 by @​eggpeat)
• Fixed split-turn compaction leaving session.compacting context out of the turn-prefix summary (#​16707 by @​integrITsolutions)
• Fixed compaction failing as a whole, and discarding the completed summary, when the optional short summary fails or returns no answer; the compaction now completes without a short summary, and cancellation still cancels it (#​16942 by @​Mouriya-Emma)

@​oh-my-pi/pi-ai

Breaking Changes

• OpenAIRequestSetupModel now requires the catalog-policy fields (api, reasoning), so callers building a reduced model for resolveOpenAIRequestSetup must pass them (#​16988 by @​rafalopilowski1)

Added

• Added PI_ANTHROPIC_API_VERSION=2026-10-21 to send Anthropic API version 2026-10-21 to the official Anthropic API; sampling parameters are omitted under that version, which rejects them (#​16706 by @​H4vC)
• OpenCode Go requests on lanes that opt into shared prompt caching send an explicit prompt-cache key as x-opencode-session, so Task siblings, forks and their parent reuse one gateway cache; custom providers declaring providerType: "opencode-go" get the same OpenCode headers (#​16988 by @​rafalopilowski1)

Changed

• Reduced the CPU spent preparing tool schemas on every model call, so requests with many tools start faster (#​16780 by @​yuzu-octopus)
• Fixed tool schema normalization modifying the caller's schema in place, which added the folded const value to a tool's own enum array (#​16780 by @​yuzu-octopus)
• Google Antigravity requests now carry the same request labels as the official 2.26.0 client (cascade_id, root_cascade_id, request_id, used_non_gemini_model), and image model lookup sends the account's project (#​17012 by @​apoc)
• Google Antigravity requests now send each model tier's own model_enum label, output cap and thinking setting from the serving account's model list, as the official client does: Claude 5.5 and Gemini 4 Argon tiers send a thinking level, Gemini 3.8 Flash tiers the tier's thinking budget (#​17012 by @​apoc)
• Google Antigravity requests now number conversation steps like the official client (the first request is step 1, and each model turn and tool result adds one), send Accept-Encoding: gzip without an explicit Accept, and no longer send the Claude thinking beta header to Claude 5.5 (#​17012 by @​apoc)

Fixed

• Anthropic-compatible endpoints that require a thinking block on every turn of the current turn no longer replay a 400 when the history holds a turn an upstream answered without reasoning; the serializer pads those turns (#​16739 by @​lz37)
• Fixed an Anthropic stream that a gateway or proxy cuts after message_start, substituting an in-band error frame, being reported as a completed-turn provider failure instead of a retryable stream truncation (#​16990 by @​Maziar123)
• Fixed Kimi Code, Z.AI, and ClinePass usage polls logging a warning every poll for accounts without a metered plan (#​17057 by @​trukhinyuri)
• Fixed Codex usage showing no limits for credit-billed ChatGPT Business/Enterprise seats: /wham/usage returns rate_limit: null for them, and their per-user credit cap (spend_control.individual_limit) is now reported as a Spend cap (credits) limit that also gates chat requests when no plan windows exist (#​16973 by @​DusKing1)
• Fixed overlapping OpenAI Codex requests in the same session (e.g. concurrent auth-gateway requests) closing the WebSocket another request was still streaming on; the later request now goes over SSE (#​16812 by @​Abelo9996)
• Fixed Codex WebSocket turns dying with unsupported_native_inflight_message when the native turn lane was still busy; the turn is now retried as an independent full-context request instead of surfacing the error (#​17065 by @​AgileInnov8tor)
• Fixed OpenRouter native failures appearing as successful empty stops and malformed Responses being replayed before corrective recovery; metadata permission/rate-limit failures no longer trigger malformed-response recovery (#​17063 by @​martijnberger)
• Fixed Xiaomi MiMo API-key login failing with Unsupported model mimo-v2.5 after the V2.5 retirement (#​16727 by @​LiPu-jpg)
• Fixed Xiaomi MiMo login rejecting ttp- Token Plan keys with 401 Invalid API Key; they now validate against the regional Token Plan hosts like tp- keys (#​17045)
• Fixed Xiaomi MiMo Token Plan login reporting 401 Invalid API Key when the key's own region rejected the probe for another reason; that region's actual error is now shown (#​17045)
• Fixed non-streaming requests reporting a missing API key when the credential resolver actually failed, hiding auth broker, OAuth and network outages behind "No API key" (#​16655 by @​adi-IL)
• Fixed Claude subagents with large structured output schemas failing with Schemas contains too many optional parameters (#​16887 by @​alphastorm)
• Fixed auth-gateway requests failing when a client requests an unsupported thinking effort; the gateway now uses the nearest supported tier (#​16671 by @​codyw912)
• Fixed Codex requests failing with array schema must define items when a tool or a task's outputSchema declares an array without items (#​16886 by @​alphastorm)
• Fixed Anthropic tools whose parameters are a root anyOf/oneOf/allOf of objects being sent as an empty closed object that only accepts {}; variant properties now fold into the root input_schema (#​16630)
• Fixed OAuth logins failing with invalid_grant after a token refresh took longer than 10 seconds: the refresh now finishes in the background and saves the provider's new refresh token (#​16291 by @​will-bogusz)
• Fixed a tool call from a Claude model that declined mid-response still running after its server-side fallback model took over (#​16250 by @​will-bogusz)
• Added 1h prompt caching on Factory Droid's Claude models (Anthropic, Vertex, Bedrock and Azure upstreams) when you set cache retention to long, and cache warming plus cache-timed idle compaction on those models (#​16296 by @​will-bogusz)
• Fixed Factory Droid accounts whose login token lacks an organization getting 401 "User not affiliated with an organization" on every request: omp now resolves the account's organization at login and refresh (#​14061) (#​16257 by @​will-bogusz)
• Added image generation and editing through a Factory Droid login: generate_image runs Factory's GPT Image 2.5, GPT Image 2.5 Flare and Gemini 3 Pro Image, with up to 16 reference images for GPT Image edits (#​16316 by @​will-bogusz)
• Fixed OpenAI-compatible chat completions with Anthropic-style prompt caching (cacheControlFormat: "anthropic", e.g. OpenRouter Claude) re-sending a turn's tool calls and results uncached on every tool-loop request; the cache breakpoint now advances onto the latest tool result (#​16845)
• Fixed native Google (google-generative-ai, google-vertex) requests failing with The operation timed out. after ~5 minutes of slow prefill even when providers.streamFirstEventTimeoutSeconds allowed longer (#​16991)
• Fixed model.loopGuard settings being ignored for providers routed through the shared option mapping, such as openai-responses models from models.yml (#​11129, #​16963 by @​SipgateSteffenPaul)
• Fixed Google Antigravity's Gemini 4 Argon weekly bucket sharing the generic "Gemini" label with the shared Gemini weekly bucket, leaving usage rows indistinguishable; the Argon bucket now reads "Gemini (Argon)" (#​16790)
• Fixed Anthropic API-key requests with thinking off failing with 400 "context_management: Extra inputs are not permitted" on Claude Opus 5.5 and Fable 5.1, and on Claude Haiku 5.5 after an effort change (for example a retry fallback from a model without reasoning) (#​17047 by @​sjawhar)
• Fixed every GitLab Duo Agent request failing with 4400 "Flow configuration failed security validation" when a context file (such as an AGENTS.md) contains an HTML comment (#​17044 by @​trukhinyuri)
• Fixed a GitLab Duo Agent session that GitLab rejects on close (WebSocket 4000–4999) ending as an empty answer that was silently retried three times; it now ends with an error naming GitLab's reason and HTTP status (#​17044 by @​trukhinyuri)
• Fixed Cursor GitHub and Google logins never getting an account email (#​17048 by @​trukhinyuri)
• Fixed Cursor X Subscription usage treating the weekly Grok/Composer pool as third-party budget; third-party models are now metered by prepaid credit (#​17048 by @​trukhinyuri)
• Fixed Google models (google-generative-ai, google-vertex, google-gemini-cli/Antigravity) running out of output on small maxTokens requests with reasoning on, ending with thinking only and no answer; the requested maxTokens now leaves room for thinking on top, as on other providers (#​16943 by @​Mouriya-Emma)

@​oh-my-pi/browser-relay

Added

• The extension reports the omp version that installed it, and reloads itself when the relay updates its files after an omp upgrade (#​15105 by @​will-bogusz)

@​oh-my-pi/pi-catalog

Breaking Changes

• Renamed the task-sibling-prompt-cache axis to shared-prompt-cache (catalog field sharedPromptCache); it now also covers forks and explicit prompt-cache keys (#​16988 by @​rafalopilowski1)

Added

• Added the requiresThinkingPresence model compat (KDL requires-thinking-presence) for Anthropic-compatible endpoints that reject a thinking-mode request whose current turn has an assistant message without a thinking block (#​16739 by @​lz37)
• Added resolveAnthropicApiVersion(): Anthropic model discovery sends API version 2026-10-21 to the official API when PI_ANTHROPIC_API_VERSION=2026-10-21 is set (#​16706 by @​H4vC)
• OpenCode Go muse-spark-1.3-contributor, muse-spark-1.2-contributor, gpt-5.6-luna, gpt-6-luna, grok-4.6 (Responses) and deepseek-v4-pro, omen-alpha (Completions) opt into shared prompt caching; lanes that warmed under any key stay off (#​16988 by @​rafalopilowski1)
• Added CatalogPolicyInputs so catalog-policy lookups accept a reduced model view (#​16988 by @​rafalopilowski1)
• Added a catalog conformance test that fails the build when a bundle="always" seed row is missing from the bundled models.json, so a stale-snapshot regeneration can no longer silently drop an engine the way web/deepseek was lost in 18.12.2 (#​16610, #​17053 by @​ouyangjiahong26)

Changed

• llama.cpp login instructions now list both default local base URLs (http://127.0.0.1:8080, then http://127.0.0.1:9931) (#​16675 by @​bartbroere)
• Devin requests now identify as Devin CLI 3000.11.205, the current stable release, instead of 3000.11.3 (#​16906 by @​will-bogusz)
• Google Antigravity login now uses PKCE and requests the aicode scope like the official client; existing logins keep working, and the new scope applies at the next /login (#​17012 by @​apoc)
• Antigravity requests identify as client 2.26.0 when the release manifest is unreachable (previously 2.19.1), and model discovery sends the account's project like the official client (#​17012 by @​apoc)
• Antigravity's User-Agent now reports the native Antigravity build for the host OS (Linux linux/amd64, Windows windows/amd64) instead of always claiming macOS darwin/arm64 (#​17012 by @​apoc)
• Antigravity model discovery now keeps each account's per-tier model_enum, output cap and thinking level or budget, and the bundled Antigravity models carry them for offline use; cached Antigravity model lists are refreshed once so they pick them up (#​17012 by @​apoc)

Fixed

• Fixed OpenCode Go gemini-4-argon requests failing with an unsupported protocol; discovered models now use native Gemini routing and low, medium, or high thinking (#​17031)
• Fixed DeepSeek V4 Pro cost estimates using Flash rates after September 14 despite Pro billing remaining unchanged (#​16875).
• Anthropic refusal fallbacks from Claude Opus 5.5, Opus 5 and Sonnet 5.5 to their documented target models (Opus 4.8 and Opus 5, Opus 4.8, and Sonnet 5) now redeem fallback credit: the retry is no longer billed as a full cache write, and it is no longer skipped when the conversation holds signed thinking (#​17034 by @​sjawhar)
• Fixed Step 5 Preview reasoning choices on OpenCode Go and Zen to offer only low, medium, and high (#​14987, #​16669 by @​SheetHappiness)
• Fixed GPT-6 Sol/Luna API and MiniMax-M3 long-context usage estimates above their published input thresholds (#​16711)
• Fixed Xiaomi Token Plan login and default model selection after the V2.5 retirement by using MiMo V2.6 Flash (#​16727 by @​LiPu-jpg)
• Fixed Xiaomi model discovery sending ttp- Token Plan keys to the pay-as-you-go host, which rejects them (#​17045)
• Fixed GPT-5.6 Sol requests over 272K input tokens (openai and openai-codex) being priced at the retired $10/$45 long-context card instead of $8/$30 (#​16742)
• Fixed DeepSeek's official vision requests being held to the 5-image unknown-host floor: the catalog endpoint now carries DeepSeek's documented 600-image and 40 MiB inline-image budgets, while a custom baseUrl keeps the conservative floor (vision limits; #​16737 by @​Fun10165)
• Fixed Devin model discovery falling back to the two SWE-1.6 seed models when the catalog takes longer than 5s to respond; it now waits up to 15s (#​16668 by @​DusKing1)
• Fixed Go Task keeping stale prompt-cache affinity after a model's wire model changed (#​16988 by @​rafalopilowski1)
• Fixed Devin models all showing a 200K context window: each model now reports its own (1M for Claude Opus 5.5 and the -1m lanes, 262K for SWE-2), and GPT and Grok models with a long-context price tier start at that tier's threshold, with /extended-context on opening their full window (#​16905 by @​will-bogusz)
• Added the extended-cache-ttl-beta compat axis so a route can opt out of the extended-cache-ttl-2025-04-11 beta (Factory Droid does), and prompt-cache lifetimes and long-retention support for Factory Droid's Claude models (#​16296 by @​will-bogusz)
• Added Factory Droid's image models (GPT Image 2.5, GPT Image 2.5 Flare, Gemini 3 Pro Image) to the image role's choices, listed only while your Factory organization allows image generation and that model (#​16316 by @​will-bogusz)
• Fixed LiteLLM model groups with mode: decisions being listed as chat models; they now route to openai-decisions as judge models (#​16939)
• Removed retired Anthropic models (Claude 3.x, Opus 4/4.1, Sonnet 4) from the bundled catalog and discovery (#​16755)
• Fixed Kimi Code K3 and K3 256K (k3, k3-256k) pricing to include Kimi's $3/MTok cache-write rate, matching the Moonshot API kimi-k3 card (#​16508, #​16903 by @​eggpeat)
• Fixed Cursor Auto (cursor/default) being metered against the third-party ("Other Models") pool instead of the Cursor Models pool it bills to (#​17048 by @​trukhinyuri)

@​oh-my-pi/pi-coding-agent

Breaking Changes

• snapshotJobs no longer accepts includeResults, and buildJobResult accepts only the "wait" and "cancel" ops; the "jobs" op has had no caller since wait and proc:// replaced the hub tool (#​16763 by @​will-bogusz)

Added

• Added omp -p --wait-async (setting async.printWake): print mode waits for the background jobs it started and wakes the same session with each result before exiting, instead of cancelling them (#​10363, #​16690 by @​trukhinyuri)
• File slash commands with side: true frontmatter (including Codex and OpenCode command directories) run as /btw side questions in the TUI, with or without arguments: they answer off the transcript and never steer a running turn. The panel and /btw history title them by the typed command (/sitrep); the title is kept in an entry-<id>.title sidecar so older builds can still read the history. Other modes expand them as ordinary prompts (#​16815 by @​wolfiesch)
• Added compat.requiresThinkingPresence to models.yml overrides, so a gateway model group whose strict member validates thinking replay can pad a turn a lax member answered without reasoning (#​16739 by @​lz37)
• Anthropic web search and Files API uploads follow PI_ANTHROPIC_API_VERSION=2026-10-21; web search omits temperature under that version (#​16706 by @​H4vC)
• llama.cpp auto-discovery now also finds local servers on llama-server's new default port 9931 when nothing answers on 8080 (#​16675 by @​bartbroere)
• /local (or Alt+G, remappable as app.local.open) opens a picker of the session's local:// files and edits the chosen one in place in $VISUAL/$EDITOR; /local <name> opens a file directly with name completion (#​16873 by @​Shadorain)
• Added --no-context-files to start a session without AGENTS.md, CLAUDE.md or other context files, including those of --add-dir roots and in subagents (#​16768 by @​will-bogusz)

Changed

• Clarified how RPC and RPC-UI clients discover and invoke mounted MCP tools through xd:// devices rather than relying on dumpTools (#​16864 by @​michaeltrefry)
• The note read adds to a PDF whose pages have no extractable text (a scan) now points at the :page<N>.png selector, which returns the page as an image, instead of the browser prelude (#​16585 by @​will-bogusz)
• read doc.pdf:page<N>.png renders the page in a square 874x874 tab instead of the default landscape one, so a letter page comes back at 668x865 instead of 441x568 and a landscape page at 864x669 instead of 736x567 (#​16585 by @​will-bogusz)
• Added --warn-cost and --max-cost (session.warnCost / session.maxCost): omp warns once at the first spend and stops sending model requests at the second, subagents included; capped print runs exit 3 (#​7802; first written by @​zhang17-24) (#​16803 by @​will-bogusz)
• /session (and RPC get_session_stats, as editRejections) lists your failed edits by why they were refused (unseen lines, stale tag, parse error, …), and each failed edit records that reason as details.errorKind in the session file (#​16608 by @​will-bogusz)
• Added exclusions to grep: a path entry starting with ! leaves matching files and folders out of the search (src;!*.test.ts, !vendor;!gen), where before it was taken as a path and found nothing (#​16920 by @​will-bogusz)
• wait and read proc:// now show a running subagent's run time, request count, cost, context fill and stage, so a subagent that is looping is visible without opening its transcript (#​16863 by @​KimToehler)
• Google Antigravity web search sends the same transport headers as the official client (Accept-Encoding: gzip, no explicit Accept) (#​17012 by @​apoc)
• A subagent's result up to 11,500 characters now reaches its parent whole, instead of as a 5,000-character preview the parent had to re-read through agent://<id> or act on without its ending (#​16599 by @​will-bogusz)
• Fixed a subagent's final report or yield reaching its parent and agent:// as its short reply to a peer message or agent://all broadcast (the parent's included) that arrived as it finished; such messages now get a turn of their own after the result, and a peer that wrote directly still receives the reply (#​16583 by @​will-bogusz)
• Fixed the built-in ts-set-map rule stalling tool-call streaming on a long single-line Set value (5 s at 20,000 characters) and firing when the literal array only feeds a computed argument such as new Set(["a", "b"].map(normalize)); ts-import-type no longer fires on import("x").then written with a non-breaking space or line separator before the call (#​16556 by @​will-bogusz)
• Fixed a subagent woken after it was parked losing the tools an extension registers at its first prompt (such as HexRays ida-mcp's ida_* tools), which also made its first request after waking miss the prompt cache; extensions see the revive as a before_agent_start with the new reason: "revive" (#​16597 by @​will-bogusz)
• read shows HEIC, HEIF and AVIF photos (such as iPhone pictures) as images instead of refusing them as binary, decoding them with ffmpeg 8.1 or newer; text-only models get their metadata, and without such an ffmpeg the error says how to convert the file (#​16612 by @​will-bogusz)
• Fixed read of web pages with tables, code or pricing lists (API references, specs, pricing pages) returning a shorter trafilatura or Jina rendering that leaves out much of the page, and noting the page "appears to require JavaScript or is mostly navigation" (#​16596 by @​will-bogusz)
• omp usage --json now includes each policy-routed account's priority, reserve and routing state (eligible, inside-reserve, exhausted or unknown) as a policy object, matching the policy line in the text view (#​16581 by @​will-bogusz)
• Added prompt-cache warming for Factory Droid's Claude models: replays follow the 5m entry, or the 1h entry once a response reports writing one (#​16296 by @​will-bogusz)
• generate_image can now run Factory Droid's image models (GPT Image 2.5, GPT Image 2.5 Flare, Gemini 3 Pro Image) when one is chosen for the image role (#​16316 by @​will-bogusz)
• On macOS, asking the agent to open a file, folder or URL, or to show a file in Finder, now takes one computer.apps.open(path, { app?, reveal? }) call instead of a dozen steps driving Finder by hand (#​16403 by @​will-bogusz)
• Added in-place updates of the browser relay's Chrome extension after an omp upgrade: an older extension loaded from ~/.omp/browser-relay/extension is rewritten and reloads itself once no omp session is using the relay (#​15105 by @​will-bogusz)
• Added a note to relay browser.open results when the Chrome extension was installed by an older omp, naming omp browser-relay install and a reload (#​15105 by @​will-bogusz)
• Fixed images attached with an @path file mention reaching a text-only model as [image omitted: …] with images.describeForTextModels enabled; they now get the vision role description like pasted images (#​16853)
• Fixed browser.open({ ignore_https_errors: true }) still failing with certificate errors such as net::ERR_CERT_AUTHORITY_INVALID on the shared Chromium and on app.cdp_url browsers; the override now lasts until the tab is closed (#​16930)
• ignore_https_errors through the Chrome relay now fails up front, explaining that Chrome's extension debugger API cannot ignore certificate errors and pointing to app.relay: false, instead of failing with Security.setIgnoreCertificateErrors wasn't found (#​16930)
• Fixed a parent follow-up consumed while a kept-alive subagent resumes from queued steering or an async completion leaving agent:// on the previous result instead of delivering the fresh answer (#​16746)
• Fixed a long streamed answer ending the collab room for every guest with "collab send backlog exceeded its limit"; the host now sends guests only the latest state of a streaming message, and guests still speak the full answer when speech is on (#​16956)
• Fixed read proc://<agent> and write proc://<agent>/kill answering "not found" for a subagent that a message woke while its new turn runs as job <agent>-2; they now reach that job, and reading the agent's finished first job names the job it is running as (#​17020 by @​sjawhar)
• Fixed the agent reading a fallback engine's web_search results as the preferred provider's: the tool result now notes which provider answered and why the earlier ones failed (#​16948 by @​BAKocska)
• Fixed a turn that ended with background jobs still running looking stuck: the working row now says it is waiting for those jobs and names them instead of repeating the last tool call, and Esc ends the wait, so the jobs keep running and their results land in context for your next prompt instead of starting a new turn (#​17032 by @​sjawhar)
• The power.sleepPrevention setting now says it keeps the machine awake only while the agent is running a turn, not for as long as a session is open (#​16762 by @​will-bogusz)
• The advisor docs now say a quota-paused advisor resumes only when its runtime is reset or rebuilt (compaction, a session switch, /advisor, a config reload or a restart), not after a cooldown (#​16766 by @​will-bogusz)
• Fixed the computer tool's computer.window({ app }) failing for an app with no open window without saying what to do; the error now names the computer.apps.open(…) call that launches it (on macOS it also shows a window of a running app that has none), and computer.window() with no argument asks for a window id or filter instead of listing windows that "match undefined" (#​16912 by @​will-bogusz)
• Fixed the computer tool prompt leaving el.selectText out of the element helpers; it now says a following el.type on that element replaces the selection (#​16769 by @​will-bogusz)

Fixed

• Honored display_name, context_window, and input_modalities when a model list nests them under metadata, so codex-lb-style gateways surface the advertised name, window, and image input instead of the raw id and defaults. (#​17010 by @​adi-IL)
• Recovered spilled tool output in sessions without an artifacts directory: the artifact:// link the truncation footer advertises now reads the in-memory copy instead of failing with "No session - artifacts unavailable". (#​17009 by @​adi-IL)
• Fixed the compiled omp binaries trusting certificates from the compromised eMudhra intermediate CAs (CVE-2026-91403) and carrying the Brotli decoder out-of-bounds write (CVE-2026-111497); release binaries now build on Bun 1.4.4 (#​16822, #​16865 by @​bse-ai)
• Fixed computer runs in subagents and omp -p stopping at their first control.acquire: they now keep working through background window input and report only a step that needs foreground control (#​16909 by @​will-bogusz)
• With bash.gitGuard on, a repository that once finished a conflicted rebase no longer counts as mid-conflict forever, which had let git checkout, switch and restore through; branch switches such as git checkout -B <branch> <commit> stay refused during a real merge or rebase too, abbreviated options such as git reset --ha are refused like the full ones, and git stash create is allowed (#​16919 by @​will-bogusz)
• Fixed browser calls right after a click that navigates (headless, connected and relay Chrome) reaching the page being left: reads and screenshots returned the old page or failed with Execution context was destroyed or Cannot find context with specified id, and a fill could land on the old form; they now wait for the new page (#​16907 by @​will-bogusz)
• LSP diagnostics now reflect external edits to already-open dependencies when checking an importer, including after Write/Edit (#​16836).
• Fixed URL read line selectors using different coordinates from URL grep when the response includes transport headers (#​16877).
• Fixed write to a SQLite row ignoring the database's declared foreign keys: orphan inserts and updates now fail, ON DELETE RESTRICT blocks the delete, and ON DELETE CASCADE removes dependent rows (#​16999)
• Fixed pasting a server URL into the /mcp add wizard putting it in the hidden chat draft instead of the URL field (#​16975).
• omp --from-claude keeps the last real model when Claude records a synthetic API error, and does not try to restore a synthetic-only placeholder (#​16785).
• Fixed skill-list previews of long CJK descriptions collapsing to the few characters before an early ASCII space (e.g. 用户点名…); they now keep the full preview budget (#​17070)
• Browser clicks on a shadow-root button no longer fail with blocked: covered by naming the button's own slotted content; real overlays are still refused (#​16958)
• Fixed reading .xlsx files rewriting numeric-looking text cells: long IDs like 12345678901234567890 no longer round (and collide), and text such as 00123 keeps its leading zeros (#​16831)
• Fixed rc-file aliases for core tools (e.g. alias ls='eza --icons') leaking into the bash tool; ls, cat, grep and the other core tools now run the real binaries (#​17067)
• Fixed a collab room staying half alive after its session moved to a new file because it was open in another omp process (or replaced/contested on disk): guests now get room-closed, the registry entry is withdrawn, and collab.autoStart shares the moved session (#​16935)
• Fixed skill-description compression ignoring the configured default model when modelRoles.smol is unset and sending background requests to the built-in smol chain (e.g. claude-haiku-5-5) instead of the model /models shows for SMOL (#​16970)
• Fixed models.yml discovery providers with an apiKey (and no authHeader: true) showing 0 models in /models and ctrl+p right after startup despite a cached catalog; cached models now load immediately (#​16965)
• Anthropic web search no longer sends unsupported temperature to Claude Haiku 5.5, avoiding HTTP 400 failures (#​16986)
• Fixed pages in the managed headless browser hitting "Maximum call stack size exceeded" in canvas fillText after calling canvas.getContext("2d") repeatedly (#​16879)
• Fixed LSP references and rename previews still listing a file that was open and then deleted (via edit, or outside OMP before a rename) until the language server restarted (#​16880)
• Fixed omp plugin upgrade failing on Windows with EPERM: operation not permitted, symlink when the installed plugin was replaced by omp plugin link; a failed upgrade now restores the link as a junction (#​16844)
• omp plugin upgrade a@m b@m c@m now upgrades every specified plugin instead of silently skipping targets after the first (#​16826)
• Browser tab.fill()/tab.type() (and frame.fill()/frame.type()) that time out on long text now stop typing instead of finishing it behind the rejected call, and the timeout reports how many characters were typed instead of claiming the element was hidden or covered (#​16833)
• Concurrent archive member writes now preserve both updates across sessions and directory symlinks; canceled writes waiting for the archive no longer publish later (#​17000).
• Fixed a tools.approval.<tool>: prompt policy on a tool mounted as an xd:// device asking the same approval question twice for one write xd://<tool> call (#​17039)
• ACP cancellation now waits through Python kernel interrupt escalation before closing a session; prompts sent after a closed session return ResourceNotFound so clients can offer session/load recovery (#​16889).
• Google Antigravity, Google, and Google Vertex now keep append-only context by default, preserving cached prompts across long-running agent turns (#​16979).
• Fixed LiteLLM mode: decisions model groups being offered as chat models instead of judge models, including for custom discovery.type: litellm providers (#​16939)
• ACP: instructions returned by MCP servers declared in session/new now reach the model under "## MCP Server Instructions", as they do for .mcp.json servers (#​16882)
• Fixed the Windows tab title (e.g. in Tern) sticking at omp instead of the session title after a JS eval worker or omp browser-relay ran in the same console; omp no longer retitles the console from child processes and reclaims the title when another process replaces it ([#​16842](https://redirect.github.com/can135

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.