This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+9 more
Affected surfaces
ReleasePort's take
Moderate signalThe release adds first‑class support for the Kimi K3 model and removes legacy Ralph Loop wiring, introducing an automatic Goal configuration migration.
Why it matters: Removal of Ralph Loop (severity 70) forces all users relying on that wiring to migrate their goal system configurations before upgrade; new Kimi K3 support enables dedicated prompt variants for affected models.
Summary
AI summaryBroad release touches Commit Summary, known-issues, codex, and goal.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Removes legacy Ralph Loop wiring; introduces Goal feature with automatic config migration. Removes legacy Ralph Loop wiring; introduces Goal feature with automatic config migration. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Adds first-class support for Kimi K3 model with dedicated prompt variants. Adds first-class support for Kimi K3 model with dedicated prompt variants. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Adds hyperplan adversarial‑planning skill, Boulder state platform, codegraph MCP registration, and default shared/local skills to omo-senpi. Adds hyperplan adversarial‑planning skill, Boulder state platform, codegraph MCP registration, and default shared/local skills to omo-senpi. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Improves Senpi task engine reliability: residency claims release correctly, TTL cleanup wired, record store caches file descriptors. Improves Senpi task engine reliability: residency claims release correctly, TTL cleanup wired, record store caches file descriptors. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Fixes Codex reliability issues: V2 thread‑cap preservation, stricter ulw‑plan parsing/validation, Playwright MCP custom‑arg support, safer codegraph git‑marker handling. Fixes Codex reliability issues: V2 thread‑cap preservation, stricter ulw‑plan parsing/validation, Playwright MCP custom‑arg support, safer codegraph git‑marker handling. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Low |
Fixes delegate‑task contract by removing duplicate available_skills from non‑plan subagent prompts. Fixes delegate‑task contract by removing duplicate available_skills from non‑plan subagent prompts. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Low |
Validates and rejects ambiguous npm pack manifests during CI packaging. Validates and rejects ambiguous npm pack manifests during CI packaging. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Low |
Enforces canonical checklist grammar and warns on empty plan sections in opencode/plans. Enforces canonical checklist grammar and warns on empty plan sections in opencode/plans. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Low |
Allows users to override @playwright/mcp arguments for sandboxed environments. Allows users to override @playwright/mcp arguments for sandboxed environments. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Low |
Validates redirected Git markers in codegraph to prevent invalid marker modifications. Validates redirected Git markers in codegraph to prevent invalid marker modifications. Source: llm_adapter@2026-07-17 Confidence: high |
— |
Full changelog
🚀 oh-my-openagent v4.19.0 — Open models just took the crown
This release ships with first-class support for Kimi K3, the 2.8-trillion-parameter open-weight frontier model from Moonshot AI that is now beating Claude Fable 5 on the Arena.ai Frontend Code leaderboard. OSS must win — and with K3, it just did.
🤖 Kimi K3 is a first-class citizen
Sisyphus, Sisyphus-Junior, and Atlas now carry dedicated Kimi K3 prompt variants calibrated for K3's reasoning style, plus model-family detection and fallback routing in model-core. Whether you route through OpenRouter or Moonshot's API directly, omo recognizes K3 and picks the right prompts automatically.
🎯 Goals replace Ralph Loop
The legacy Ralph Loop wiring is gone. In its place: a clean Goal feature with state, persistence, parser, config migration, and a /goal command. Existing Ralph Loop configs migrate automatically, so nothing breaks.
🛠️ Senpi task engine gets serious
The Senpi task system received a deep reliability pass: residency claims release correctly when tasks are marked lost, TTL cleanup is wired into session start with proper live-handle guards, the record store caches and reuses file descriptors, and the lead poller scans incrementally. These changes make long-running multi-agent workflows noticeably more stable.
🔌 Senpi platform expansion
omo-senpi now ships with the hyperplan adversarial-planning skill, a Senpi session platform for Boulder state, codegraph MCP registration, and default shared + local skills out of the box. Start-work continuation is also wired for Codex.
🐛 Lazycodex / Codex reliability fixes
Codex users get fixes for V2 thread-cap preservation, stricter ulw-plan parsing and validation, Playwright MCP custom-arg support, and safer codegraph git-marker handling.
🌍 Why this release matters
Kimi K3 is the largest open-weight model ever released, and independent benchmarks place it ahead of Claude Opus 4.8 and GPT-5.5 while trading blows with Claude Fable 5 and GPT-5.6 Sol. The frontier is no longer a closed garden. This release makes sure omo users can ride that wave the moment it hits.
📝 A personal note from the maintainer
Today I did not use Claude Opus 4.8 once. Kimi K3 and the open-weights wave handled the work.
Minor Compatibility and Stability Release
This release carries compatibility-facing behavior changes and operational hardening. Read the summary below before upgrading or publishing.
- Rename transition updates across package detection, plugin/config compatibility, and install surfaces.
- Task and tool behavior updates, including delegate-task contract and runtime registration behavior.
- Install and publish workflow hardening, including safer release sequencing and package/install fixes.
Commit Summary
- 14083b89f Merge pull request #6193 from code-yeongyu/release/v4.19.0-source-state
- b56483fc7 Merge pull request #6192 from code-yeongyu/feat/kimi-k3-junior-atlas-prompts
- 22b91b662 feat(agents): add Kimi K3 prompt variants for Sisyphus-Junior and Atlas
- 9aff020ab Merge pull request #6188 from code-yeongyu/docs/goal-replaces-ralph-docs
- 1b6c47740 docs: replace ralph-loop with goal feature in user docs
- 731bdaef6 Merge pull request #6187 from code-yeongyu/docs/init-deep-refresh-20260717
- cd407ed11 docs: refresh hierarchical AGENTS.md knowledge base to 7d664b96b
- fe1c3dfb1 Merge pull request #5948 from Hungdoan565/codex/docs-known-issue-5850-ulw-native-plan-20260707
- 582e57d58 Merge latest dev into PR 5948 repair
- 7d664b96b Merge pull request #6186 from code-yeongyu/fix/windows-team-wait-commit-order
- 215f92df2 Merge latest dev into PR 5948 repair
- 5459b09d0 Merge pull request #5949 from Hungdoan565/codex/docs-known-issue-5839-oracle-token-20260707
- 58a8c1c60 docs: cover both native plan storage paths
- 22b231e05 Merge origin/dev into codex/docs-known-issue-5839-oracle-token-20260707
- 7676ff474 Merge dev and clarify native plan fallback scope
- 9a1a7da6c Merge pull request #5952 from Hungdoan565/codex/docs-known-issue-5809-cmux-attach-20260707
- f17ad7b3f Merge origin/dev into codex/docs-known-issue-5839-oracle-token-20260707
- e9862bda1 Merge remote-tracking branch 'origin/dev' into HEAD
- d3ba2254c Merge pull request #5957 from Hungdoan565/codex/docs-known-issue-5746-tmux-eager-attach-20260707
- a526042df Merge remote-tracking branch 'origin/dev' into HEAD
- 746ef6348 Merge pull request #6184 from code-yeongyu/feature/goal-replaces-ralph
- f7a293055 Merge dev into codex/docs-known-issue-5809-cmux-attach-20260707
- 900f0688f Merge remote-tracking branch 'origin/dev' into review/pr-5957-head
- a2ce120a1 Merge pull request #5953 from Hungdoan565/codex/docs-known-issue-5806-ulw-followup-20260707
- 2ea9a61dd feat(goal): add ralph_loop config migration tests and fix precedence
- c98cbd506 feat(goal): remove Ralph Loop user-facing wiring and migrate tests
- cc97af58b Merge latest dev into docs-known-issue-5806-ulw-followup
- 0ef32ffe4 Merge pull request #5950 from Hungdoan565/codex/docs-known-issue-5838-visual-qa-20260707
- bbcbd4e42 Merge latest dev into docs-known-issue-5806-ulw-followup
- 1db88ba8d Merge dev into docs-known-issue-5806-ulw-followup
- 9355d9fe6 feat(goal): wire goal hook into plugin and chat flow
- 6af312ded Merge origin/dev into codex/docs-known-issue-5838-visual-qa-20260707
- 1d9cfd152 refactor(omo-opencode)!: drop shared/ skill aliases and protections
- 9a5b2d135 feat(goal): add goal state controller and model tools
- acda5862b Merge remote-tracking branch 'origin/dev' into review/pr-5957-head
- 1d69f8501 Merge remote-tracking branch 'origin/dev' into review/pr-5957-head
- f23c9efdc feat(goal): add goal foundation types, persistence, prompts, parser, config, and /goal command
- 76eef171e Merge pull request #6173 from code-yeongyu/fix/momus-terra-high
- 475149c03 Merge pull request #6178 from code-yeongyu/feature/kimi-k3-sisyphus
- 6f9a1ac7c fix(ulw-research): restore valid YAML frontmatter after alias removal
- b85bf047c Merge remote-tracking branch 'origin/dev' into review/pr-5957-head
- 092efa490 refactor(prompts): migrate shared/ulw-plan → ulw-plan
- 507a5c65b docs: recommend kimi-k3 and update sisyphus model guidance across docs and READMEs
- c216ff236 feat(omo-opencode): add sisyphus kimi-k3 prompt variant with anti-overthinking calibration
- 011fa228c feat(model-core): add isKimiK3Model detector, sisyphus fallback entry, and supplemental capabilities
- c6aca8ff8 refactor(skills-loader-core)!: remove shared/ canonical alias machinery
- 94773b4af refactor(shared-skills): finish ultraresearch→ulw-research rename; move lcx-* to codex
- 7a3103de8 Merge pull request #5959 from Hungdoan565/codex/docs-known-issue-5604-delegation-routing-20260707
- 433e95172 test(momus): fix warm-cache registration for terra high
- eab6b618f docs(momus): reflect gpt-5.6-terra high reviewer default
- 0192c7a1e fix(momus): run Codex reviewer at gpt-5.6-terra high
- 06d9351f1 fix(momus): run OpenCode reviewer at gpt-5.6-terra high
- b35240052 Merge dev and clarify delegation routing gap
- 89cbb391d Merge branch 'dev' into codex/docs-known-issue-5746-tmux-eager-attach-20260707
- 09557b20a Merge pull request #5963 from Hungdoan565/codex/docs-known-issue-5529-reasoning-effort-20260707
- 1a6292a6a docs(known-issues): clarify compatible provider scope
- 0f49ac382 Merge branch 'dev' into codex/docs-known-issue-5529-reasoning-effort-20260707
- 5ef852a32 Merge pull request #6166 from code-yeongyu/code-yeongyu/fix-5976-durable-review-state
- 3fe1edfb8 fix(ulw-plan): bind review launch identity
- eec76390e fix(ulw-plan): harden review lifecycle state
- ab58ff74a fix(ulw-plan): persist reviewer intake state
- 6457ca1da Merge pull request #5973 from waynefeng92/dev
- a5fd5d56c test(boulder-state): cover empty state objects
- 2aa961854 Merge current dev for PR #5973 review
- fb7d4b66f Merge pull request #5984 from EvangelosMoschou/fix/5977-handoff-session-id
- 625c359ee fix(auto-slash-command): substitute runtime placeholders atomically
- 16658f79c Merge pull request #5983 from EZotoff/fix/duplicate-user-args
- 97fafb79f fix(auto-slash-command): preserve unconsumed user args
- 238c65280 Merge pull request #6000 from cpt-sd76vg/fix/dedupe-subagent-skills2
- 7265aeacb Merge remote-tracking branch 'origin/dev' into review/pr-6000-live
- 79004bf85 fix(delegate-task): remove duplicate available_skills from non-plan subagent prompts
- 81180f375 Merge pull request #6023 from alois-tr01/fix/playwright-mcp-custom-args
- 52349d0cc Merge dev into fix/playwright-mcp-custom-args
- 2622e145e Merge pull request #6042 from datell1357/fix/codegraph-invalid-git-marker
- f5561aa4d Merge dev into fix/playwright-mcp-custom-args
- 53384ef27 Merge branch 'dev' into fix/codegraph-invalid-git-marker
- 1ef8be0a6 fix(codegraph): validate redirected git markers
- 4b8b44b9e Merge pull request #6154 from code-yeongyu/code-yeongyu/fix-6094-ulw-plan-contract
- cb573dd51 Merge branch 'dev' into fix/codegraph-invalid-git-marker
- 3b8602219 fix(opencode): validate repeated plan sections
- e59281563 fix(plans): preserve child heading scope
- 6c97bacf5 fix(plans): harden markdown boundaries
- 9733dda9a fix(plans): align task and fence parsing
- 3a1bde438 fix(plans): unify checklist progress parsing
- a2f8c3c95 test(codex): preserve final-gate fixture grammar
- af2741a6d fix(opencode): validate each plan section
- 4c86e5401 fix(plans): enforce canonical checklist grammar
- 066344e2c fix(codex): parse structured plan rows
- f8e715a14 fix(boulder): parse structured plan rows
- 44edbb71b fix(opencode): warn on empty plan sections
- 309b38e8a docs(codex): mirror ulw-plan task grammar
- aa4a8d9e2 docs(skills): define ulw-plan task grammar
- 13e560820 Merge pull request #6153 from code-yeongyu/code-yeongyu/fix-6101-preserve-thread-cap
- c32bca008 fix(codex): preserve semantic V2 thread caps
- 674f1991d test(codex): pin explicit V2 cap preservation
- 84a849f47 fix(codex): default absent V2 thread caps
- e0f365c89 fix(codex): preserve session V2 thread caps
- 2dd05329f Merge pull request #6053 from code-yeongyu/code-yeongyu/fix-broken-test-surface-20260712
- 01411d892 Merge remote-tracking branch 'origin/dev' into sweep/pr-6053-review
- a98df4baf Merge remote-tracking branch 'origin/dev' into sweep/pr-6053-review
- 1dddf271e fix(ci): reject ambiguous pack manifests
- 0d16fd71c Merge branch 'dev' into code-yeongyu/fix-broken-test-surface-20260712
- 804342731 fix(ci): validate npm pack manifest entries
- 57abb3bdd fix(ci): support npm 12 pack manifests
- 718b87e90 fix(codegraph): validate Git worktree root
- cf68ba2eb fix(codegraph): 유효하지 않은 Git 마커 수정 방지
- 4e10e9c08 test(playwright): sync omo-opencode mirror test with the new facade shape
- 822537f33 fix(playwright): let users override @playwright/mcp args for sandboxed envs
- 6336dee6e fix(boulder): treat empty {} as invalid state in readBoulderState
- 46c83da9e docs(known-issues): note GPT reasoning effort conflict
- 5b04a08ec docs(known-issues): note delegation routing failure gap
- dbfff9806 docs(known-issues): note tmux focus attach behavior
- 48d29a6fc docs(known-issues): note ULW follow-up mode gap
- 30afb5017 docs(known-issues): note cmux pane attach gap
- 56fcc122f docs(known-issues): note LazyCodex visual QA gap
- ea35adc4a docs(known-issues): note Oracle verification token gap
- c765d0a9a docs(known-issues): note ULW native plan fallback
Thank you to 3 community contributors:
- @Hungdoan565:
- docs(known-issues): note ULW native plan fallback
- docs(known-issues): note Oracle verification token gap
- docs(known-issues): note LazyCodex visual QA gap
- docs(known-issues): note cmux pane attach gap
- docs(known-issues): note ULW follow-up mode gap
- docs(known-issues): note tmux focus attach behavior
- docs(known-issues): note delegation routing failure gap
- docs(known-issues): note GPT reasoning effort conflict
- @alois-tr01:
- fix(playwright): let users override @playwright/mcp args for sandboxed envs
- test(playwright): sync omo-opencode mirror test with the new facade shape
- @cpt-sd76vg:
- fix(delegate-task): remove duplicate available_skills from non-plan subagent prompts
Breaking Changes
- Removal of legacy Ralph Loop wiring; replaced by new Goal feature with automatic config migration.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
Beta — feedback welcome: [email protected]