This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryAdded experimental B2C Correctness Wall extension and Grok OAuth harness integration.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Added experimental B2C Correctness Wall extension under examples/extensions/correctness-wall/ Added experimental B2C Correctness Wall extension under examples/extensions/correctness-wall/ Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Added Grok OAuth harness integration with domain profile and auto-apply for grok-oauth-proxy Added Grok OAuth harness integration with domain profile and auto-apply for grok-oauth-proxy Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Added extension host callMcpTool bind path so extensions can capture live MCP calls at load time Added extension host callMcpTool bind path so extensions can capture live MCP calls at load time Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Added vendored taste-skill pack with thirteen Agent Skills under .omk/skills/taste-skill/ Added vendored taste-skill pack with thirteen Agent Skills under .omk/skills/taste-skill/ Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Added opt-in caveman output-style skill at .omk/skills/caveman/ with brevity on explicit /caveman request Added opt-in caveman output-style skill at .omk/skills/caveman/ with brevity on explicit /caveman request Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Added PATH-gated CodexBar quota CLI (connect/disconnect/status/usage) and ManagedTool support Added PATH-gated CodexBar quota CLI (connect/disconnect/status/usage) and ManagedTool support Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Extended scripts/check-vendored-skills.mjs to enforce taste-skill layout and caveman opt‑in rules Extended scripts/check-vendored-skills.mjs to enforce taste-skill layout and caveman opt‑in rules Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Added governed real‑world generalization gate for v4 reasoning‑effort router with synthetic corpus and calibration helper Added governed real‑world generalization gate for v4 reasoning‑effort router with synthetic corpus and calibration helper Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Changed frontend-ui DOMAIN_PROFILES skills allow‑list to include vendored taste‑skill names (brandkit, imagegen-frontend-web, imagegen-frontend-mobile) Changed frontend-ui DOMAIN_PROFILES skills allow‑list to include vendored taste‑skill names (brandkit, imagegen-frontend-web, imagegen-frontend-mobile) Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixed threshold auto‑compaction compaction_end.willRetry to signal when agent‑level queues remain Fixed threshold auto‑compaction compaction_end.willRetry to signal when agent‑level queues remain Source: llm_adapter@2026-07-16 Confidence: high |
— |
Full changelog
Added
-
Documented the pinned pi.dev package loadout, slash-command map, and skills.sh install flow in the root README, and added the
readmeasset/omkgirl.pnghero asset. -
Added the experimental B2C Correctness Wall extension under
examples/extensions/correctness-wall/with fixture/live OA transport wiring, soft/hard/shadow modes, and regressions018–023; wall evaluation is evidence-gated advisory (not formal correctness proof). -
Added Grok OAuth harness integration:
grok-harnessdomain profile,grok-playbook/grok-harness-dispatchauto-apply forgrok-oauth-proxy, compaction model preference forgrok-4.5, Imagine chat-model rejection on completion paths, and doctor-provider health probe defaults for the local proxy. -
Added extension host
callMcpToolbind path (ExtensionActions.callMcpTool+ loader/runtime) so extensions can capture live MCP call capability at load time. -
Added a vendored taste-skill pack under
.omk/skills/taste-skill/(MIT, pinned upstream commit inSOURCE.md) with thirteen Agent Skills (design-taste-frontend,design-taste-frontend-v1,brandkit,imagegen-frontend-web,imagegen-frontend-mobile, and the rest of the Leonxlnx/taste-skill bundle) for project-local design and image-direction workflows without pulling the pack into core runtime code. -
Added an opt-in caveman output-style skill at
.omk/skills/caveman/(MIT, pin0d95a81,disable-model-invocation: true) so brevity applies only on explicit/cavemanor direct user request; it is excluded from everyDOMAIN_PROFILESskills allow-list and does not alias the builtin/compactcommand. -
Added a PATH-gated CodexBar quota CLI (
omk quota connect|disconnect|status|usagefor targetcodexbar) withcodexbar-connector.jsonopt-in (enabled,privacyAck,connectedAtonly — no credential-shaped keys),tools-managerManagedToolsupport forcodexbar, and adapter-side JSON redaction before printing usage/cost summaries. -
Extended
scripts/check-vendored-skills.mjs(repo root, invoked vianpm run check:vendored-skills) to enforce taste-skill thirteen-skill layout, frontmatter names,SOURCE.mdpin alignment, and caveman opt-in frontmatter/pin rules alongside existingclone-websiteandponytail*vendoring checks; regressionexternal-pack-integration-acceptance.test.tsasserts pin constants matchSOURCE.md. -
Added a governed real-world generalization gate for the v4 reasoning-effort router: a synthetic generalization corpus (420 rows, 60 per class, out-of-vocabulary phrasing distinct from the gold set, zero gold-prompt overlap) with a content-blind train/dev/holdout split (frozen 99-row holdout), a pure calibration helper (ECE/MCE/Brier + per-confidence-band error table + aggregate dev gap cards), and the
017-reasoning-router-v4-generalization-governancetest that prints aggregate-only full-set and frozen-holdout benchmarks and enforces the escalate-only invariant. Unlike the saturated gold set (100%), this corpus discriminates and gives an honest held-out measure of real-world routing accuracy.
Changed
- Changed the frontend-ui
DOMAIN_PROFILESskills allow-list to include vendored taste-skill names (brandkit,imagegen-frontend-web,imagegen-frontend-mobile) for curated activation when domain routing is on; caveman remains absent from all domain gates. - Changed the v4 reasoning-effort classifier to a table-driven intent lexeme/phrase-cluster model with negative controls and evidence-strength confidence, then evolved its feature model beyond literal keywords with a new pure
reasoning-router-v4-normalizemodule (English light-stemming/lemmatization, Korean josa/eomi normalization, seed-to-cluster intent anchors, and a bounded intent-skeleton / temporal-deferral extractor) so it generalizes over real-world phrasing instead of enumerating vocabulary. On the frozen held-out generalization set this lifts micro from ~0.76 to ~0.92 (debug/refactor/plan reach 100% recall) with zero high-confidence errors on the holdout, while the frozen gold set stays at 100% (210/210 incl. 42-row holdout), the 30-case adversarial probe stays 30/30, and no new dependencies were added.
Fixed
- Fixed threshold auto-compaction
compaction_end.willRetryto also signal when agent-level queues remain, so the TUI flush path stays aligned with session resume (compactionEmitWillRetry).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About OMK
Provider-neutral CLI control plane for coding agents: routes runtimes, scopes MCP, runs DAG workers, and verifies evidence before completion. MIT.
Related context
Related tools
Beta — feedback welcome: [email protected]