This release adds 3 notable features for engineering teams evaluating rollout.
Published 16h
AI & Machine Learning
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
agent-orchestration
agent-runtime
ai-coding
claude-code
cli
code-review
+14 more
codex
coding-agent
developer-tools
devtools
evidence
local-first
local-llm
mcp
model-context-protocol
multi-agent
opencode
software-engineering
typescript
workflow-automation
Affected surfaces
auth
rbac
Summary
AI summaryUpdates docs/environment-variables.md, docs/rpc.md, and docs/compaction.md across a mixed release.
Full changelog
Added
- Ported upstream Pi 0.82.0 bash session environment: the LLM-callable bash tool now receives
PI_SESSION_ID,PI_SESSION_FILE,PI_PROVIDER,PI_MODEL, andPI_REASONING_LEVEL(parent-env spoofing is stripped; disable per tool viacreateBashTool(cwd, { exposeSessionEnvironment: false })). See Environment Variables. - Ported upstream Pi 0.82.0
bash_execution_updatesession events: direct RPCbashcommands stream output chunks correlated with the commandid. See RPC. - Ported upstream Pi 0.81.1/0.82.0 summarization resilience: compaction and branch-summary calls now follow
retrysettings with exponential backoff (newsummarization_retry_scheduled/summarization_retry_attempt_start/summarization_retry_finishedsession events, surfaced in TUI and RPC), run with prompt caching disabled, and use fresh routing session IDs. See Compaction. - Ported upstream Pi 0.82.0 abortable provider retries in
omk-ai: SDK-level retries are replaced byretryProviderRequestwith abortable backoff sleeps, retry-after caps now fail fast instead of clamping, and transient DNS/transport errors are classified retryable. - Subagent capability enforcement: agent frontmatter may declare
skills/mcp/hooksplusenforceCapabilities: trueto spawn with--no-skills+ resolved--skillpaths;enforceCapabilitiesnow correctly parses YAML booleans/numbers/strings (parseEnforceFlag), the skill catalog scan skips archived corpus trees (e.g.system-prompts-leaks) so real skill names resolve to their real paths, and the MCP allowlist is synced to the live configured server set. Includes deterministic OMK-native domain profiles for the capability router and 16 coercion unit tests (examples/extensions/subagent/agents.test.ts).
Fixed
- Fixed persisted compaction envelope validation rejecting every session compacted two or more times: the writer attests the kept-window slice from the previous compaction's
firstKeptEntryId, but reopen validation required the full parent branch, so any twice-compacted session crashed on open withInvalid compaction envelope source. Validation now accepts either exact form (tamper-evidence unchanged); regression tests intest/session-file-compaction-window.test.ts. - Ported upstream Pi 0.82.0 clipboard fix: await
wl-copyexit status and fall through to xclip/OSC 52 on failure instead of claiming success fire-and-forget.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About OMK
Provider-neutral CLI control plane for coding agents: routes runtimes, scopes MCP, runs DAG workers, and verifies evidence before completion. MIT.
Related context
Related tools
Beta — feedback welcome: [email protected]