This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+9 more
Affected surfaces
Summary
AI summaryBroad release touches Commit Summary, codex, ultimate-browsing, and shared-skills.
Full changelog
oh-my-opencode v4.13.0 - Insane Search, Ultraresearch, and Keep-Building Stability
This release is centered on making agents better at finding truth on the open web and staying useful when the environment gets hostile: blocked pages, flaky providers, stale session wakes, platform packaging edge cases, and distribution channels that wobble at exactly the wrong moment.
Insane Search / Ultimate Browsing
Ultimate Browsing is now part of the shared skill bundle. It brings a layered Insane Search ladder: API and metadata probes first, archive/cache fallbacks, Jina and RSS routes, Naver and media-specific paths, Playwright escalation, TLS impersonation guidance, WAF profiling, and cookie-aware extraction for pages that ordinary fetches cannot reach.
Ultraresearch / Ultrasearch
Ultraresearch now has a claim-ledger verification gate for non-code research. The point is simple: do not just collect links, make claims auditable. Research work can deduplicate hypotheses, escalate blocked sources through Ultimate Browsing, and keep a clearer trail from source to conclusion.
This release is also a shoutout to fivetaku's insane-research work and the spirit behind it. Ultraresearch's verification gate is inspired by the insane-research idea; no third-party source is vendored.
Stability Under Pressure
The release hardens parent wake recovery, provider-exhaustion fallback, runtime fallback timing, Codex CodeGraph packaging, LazyCodex install/update behavior, Team Mode worktrees, cleanup safety, Windows test reliability, and release packaging. It also fixes the LazyCodex publish payload path so [email protected] can ship cleanly.
Even when accounts get banned or distribution channels wobble, the building continues. Follow the note here: https://x.com/justsisyphus/status/2068835687311536436?s=20
Minor Compatibility and Stability Release
This release carries compatibility-facing behavior changes and operational hardening. Read the summary below before upgrading or publishing.
- Rename transition updates across package detection, plugin/config compatibility, and install surfaces.
- Task and tool behavior updates, including delegate-task contract and runtime registration behavior.
- Install and publish workflow hardening, including safer release sequencing and package/install fixes.
Commit Summary
- 7ea3a0b7e Merge pull request #5515 from code-yeongyu/fix-lazycodex-publish-size-20260622
- 6d1de028f fix(release): keep lazycodex package below npm limit
- c841eb36a Merge pull request #5514 from code-yeongyu/release/v4.13.0-source-state
- 4316044db Merge pull request #5513 from code-yeongyu/code-yeongyu/fix-release-gate-test-slop-20260622
- 95769549e Merge pull request #5512 from code-yeongyu/code-yeongyu/fix-opencode-parent-wake-marker-release-20260622
- 71300901c fix(opencode): release stale parent wake marker
- 552ef2093 Merge pull request #5511 from code-yeongyu/code-yeongyu/fix-codex-teammode-duplicate-member-name-20260622
- 92d3629c1 fix(codex): reject duplicate persisted thread titles
- e46694c68 Merge pull request #5510 from code-yeongyu/code-yeongyu/fix-ultimate-browsing-insane-search-latest
- 8e84e83d2 fix(codex): validate persisted team member names
- 27c0712a6 fix(codex): reject duplicate teammode member names
- b4e91bfb7 shared-skills: update ultimate browsing runtime pins
- 7d6ae829c Merge pull request #5508 from code-yeongyu/code-yeongyu/fix-3886-provider-exhaustion-fallback
- 39f3d45b4 Merge pull request #5359 from 0804sally/fix/sisyphus-runtime-prompt-family-v2
- 582406a4c Merge pull request #5377 from niStee/fix/windows-telemetry-tests
- b2e298c1f Merge pull request #5299 from dongguri-jun/fix/team-delete-approved-active-task
- 40907c76e Merge pull request #5482 from sjawhar/fix/skill-mcp-runtime-config
- f30c3be4a Merge pull request #5485 from MoerAI/fix/docs-kimi-k2.7-code-model-id
- 3b923b00f Merge pull request #5319 from EvangelosMoschou/fix/5301-call-omo-agent-default-model
- 6bb186e1c Merge pull request #5468 from EvangelosMoschou/fix/5465-look-at-empty-array
- 84045d766 fix(opencode): retry background provider exhaustion
- e4ac8c1b8 delegate-task: retry sync poll provider exhaustion
- ce1054b0b model-core: add provider exhaustion fallback policy
- 85627a2a3 Merge pull request #5506 from code-yeongyu/code-yeongyu/fix-ultimate-browsing-cookie-domain
- ae0d20509 Stabilize Codex cache layout test on Windows
- 77b012c0c fix(sisyphus): rebuild whole prompt for runtime model family (#5297)
- 5d3e9dfda Fix Codex Python inventory for cookie domain helper
- c2a4db636 Merge pull request #5501 from code-yeongyu/code-yeongyu/fix-4721-run-json-parent-wake
- fb3aedf3a Remove ultimate browsing Python type suppressions
- 3b326c73e Fix ultimate browsing cookie domain matching
- 991363b82 fix(opencode): refresh run marker after wake requeues
- 48c58e634 Merge pull request #5503 from code-yeongyu/code-yeongyu/fix-ultimate-browsing-template-catches
- 1209335ff Merge pull request #5502 from code-yeongyu/worktree-teammode-worktree-plan-leader
- 3e8e573d4 fix(codex): teammode worktree-add idempotency robust on Windows 8.3 paths
- 45c62eea4 test(codex): classify generated browsing template test
- 1718c5b85 fix(ultimate-browsing): fail closed on forged optional modules
- e88741aa9 test(codex): make teammode worktree tests cross-platform
- 838d1fec9 test(ultimate-browsing): cover template warning fallbacks
- 13638ef5d Merge pull request #5500 from code-yeongyu/code-yeongyu/fix-sparkshell-guidance-misuse
- e6c32c315 fix(codex): teammode integrate surfaces git's real error, not a fake conflict
- 10a702bd5 fix(opencode): refresh run marker after scheduled wakes
- 279e53f93 fix(ultimate-browsing): report template best-effort failures
- 58224675d test(codex): assert sparkshell guidance contracts
- e25b0688e docs(codex): teammode leader orchestrates, plus worktree + ulw-plan guidance
- 7e1fac825 feat(codex): automate teammode worktrees with merge-commit integration
- 4f4b9392c fix(opencode): keep run marker active for parent wakes
- 345681038 fix(codex-ultrawork): make sparkshell-first guidance explicit
- 5b739feb7 fix(codex-rules): clarify sparkshell command guidance
- 8652c6894 Merge pull request #5498 from code-yeongyu/code-yeongyu/fix-ultimate-browsing-cookie-path-types-20260622
- 8a13d9517 fix(shared-skills): type cookie browser metadata
- d89716b9a Backfill verified CLA signature for open PR
- d4dab4a0d Backfill remaining verified CLA signatures
- ea5612e72 Merge pull request #5493 from code-yeongyu/code-yeongyu/fix-codex-hook-state-toml-quoting-20260622
- ef8710361 Merge pull request #5494 from code-yeongyu/code-yeongyu/fix-lazycodex-doctor-routing-20260622
- 2968433b0 Restore CLA signatures and backfill verified signers
- 9f6b2646b Merge pull request #5495 from code-yeongyu/code-yeongyu/fix-lazycodex-cleanup-safety-20260622
- 1ff245c77 Backfill verified CLA signatures from blocked PRs
- 13d833e81 Merge pull request #5497 from code-yeongyu/code-yeongyu/fix-tui-opentui-solid-types-20260622
- 174a6a625 @PaoloC68 has signed the CLA in code-yeongyu/oh-my-openagent#5462
- 9ec555666 Merge pull request #5496 from code-yeongyu/feature/codegraph-cross-platform-bundle
- b63a950e3 fix(codex): clean quoted hook state tables
- e4aafc15e fix(codex): harden lazycodex doctor delegation
- 671b5dfd6 fix(tui): declare optional OpenTUI solid runtime
- 51b23f738 test(codex): smoke codegraph mcp initialize
- cbac5fe89 fix(opencode): report skipped cleanup targets
- 0b86ce5b4 fix(codex): guard cleanup removal targets
- 44211ef25 Merge pull request #5489 from code-yeongyu/feature/codegraph-cross-platform-bundle
- cd5392f07 fix(codex): route lazycodex doctor to lcx
- 8a19722a1 fix(codex): match equivalent TOML hook state headers
- c8a21bcdb Merge pull request #5492 from code-yeongyu/code-yeongyu/fix-ultimate-browsing-release-blockers-20260622
- 154a585de Merge pull request #5491 from code-yeongyu/code-yeongyu/fix-runtime-fallback-timeout-awaiting-20260622
- bf689fc5d Merge pull request #5490 from code-yeongyu/code-yeongyu/fix-release-diff-check-whitespace-20260622
- 54844251c test(codex): relax cache install timeout on windows
- 318b028ac fix(codex): clean codegraph node runtime notice whitespace
- 557ad1e53 fix(codex): ship codegraph node runtime notices
- 4c3f221ba test(codex): split codegraph worker coverage
- bb7da145c test(codex): split codegraph trust boundary coverage
- 4e1db88ce fix(ultimate-browsing): close cookie export review gaps
- 15931c94b fix(codex): harden codegraph runtime packaging
- 4767c2284 Merge pull request #5488 from code-yeongyu/code-yeongyu/fix-subagent-wake-main
- 5bd586448 fix(delegate-task): bound silent parent wake retry
- 7425d8a52 test(codex): inventory ultimate-browsing python split
- a72b60bf0 refactor(ultimate-browsing): split fetch chain modules
- 1c59b01ae fix(ultimate-browsing): harden cookie handling
- deaefafaa fix(runtime-fallback): rearm timeout after blocked escalation
- bb90c46bd fix(shared-skills): remove release diff whitespace
- 6929e9737 docs(ultimate-browsing): clarify stealth and cookie handling
- 9d04ce304 build(codex): refresh codegraph cli bundle
- b00947ff9 fix(codex): share codegraph provisioning locks
- 17984855f fix(codex): ship codegraph runtime metadata
- 6ca34689d fix(codex): keep codegraph mcp handshake alive
- f174c0cf2 fix(delegate-task): requeue parent wake after silent no-output turn
- f7536d75e Merge pull request #5487 from code-yeongyu/feature/teammode-default-frequent-comms
- eec3b8887 test(codex): lock teammode constant-communication protocol contract
- e4eb4cb9d feat(codex): make teammode members push constant updates by default
- e88e4b426 fix(docs): use opencode-go/kimi-k2.7-code in recommended model stacks (fixes #5371)
- c25dc812e fix(skills): resolve skill_mcp servers from runtime config (lazy, no deadlock)
- 14edb82f6 Merge pull request #5477 from code-yeongyu/feature/codex-update-release-notes
- e6d5edaac test(codex): cover update release-note guidance
- 05d538b13 feat(codex): include LazyCodex update release notes
- 541e55fef refactor(codex): add auto-update planning helper
- 70dedf8de Merge pull request #5476 from code-yeongyu/fix/runtime-fallback-dispatch-state
- 0d6828dd8 Merge pull request #5475 from code-yeongyu/fix/codegraph-mcp-handshake
- c619019ac fix(team-core): expand home directory in team paths
- 757f4f4b0 fix(runtime-fallback): gate state on accepted dispatch
- 025ef10f2 docs(codex): list codegraph mcp surfaces
- 77913f033 docs(codex): explain codegraph mcp policy
- 44db9489a test(codex): cover codegraph mcp installer policy
- d3d6594f3 build(codex): regenerate local installer bundle
- 350783b39 fix(codex): disable codegraph mcp on unsupported node
- c48da2edc fix(codex): thread codegraph mcp policy through config
- 4ac547c36 Merge pull request #5473 from code-yeongyu/feature/ulw-loop-research-ultraresearch
- dc3b97668 Merge pull request #5472 from code-yeongyu/feature/frontend-dmca-submodules
- 184546319 chore(ulw-loop): record PR-D pre-push gate + landing evidence
- 3b6118a29 feat(ulw-loop): allow ultraresearch in research work-shape goals
- 51827f60a test(codex-plugin): pin materialize step in aggregate build-chain drift test
- bf69eacb0 chore(dev-env): submodule init + frontend materialize in setup.sh + sync docs/tests
- c536fc5da Merge pull request #5471 from code-yeongyu/feature/ultraresearch-verification-gate
- a62f47218 chore(ultraresearch): record PR-B pre-push gate + landing evidence
- b432c290e docs(ultraresearch): credit fivetaku/insane-research (MIT)
- 895df5213 feat(ultraresearch): escalate blocked sources via ultimate-browsing
- 08a08f515 feat(ultraresearch): non-code claim-ledger verification gate
- 6d9b2ae55 Merge pull request #5469 from code-yeongyu/feature/ultimate-browsing-skill
- a2b260a53 test(shared-skills): DMCA provenance gate (no committed third-party copy)
- b27252b8c feat(shared-skills): materialize frontend refs from submodules + pin SHAs
- ce5e458af chore(ultimate-browsing): record PR-A pre-push gate evidence
- a2ab9086c test(omo-codex): inventory synced ultimate-browsing python files
- 32d454120 fix(look-at): treat empty optional arrays as not provided in validation
- 26f4be4db docs(ultimate-browsing): ATTRIBUTION + finalize tier wiring
- 8cc1b3639 feat(ultimate-browsing): cross-platform cookie extraction + fixtures
- 7f21b1bf9 docs(ultimate-browsing): tier-2 chrome stealth (runtime deps)
- a92751ca8 refactor(frontend): remove committed third-party refs (submodule-sourced)
- de2fff59e test(shared-skills): de-personalization deny-list gate
- 4743199a5 feat(ultimate-browsing): vendor + de-personalize tier-1/1.5 refs
- c6a9fc0e5 chore(shared-skills): add frontend upstream provenance submodules
- a4e4ed797 feat(ultimate-browsing): vendor insane-search engine (junk-excluded)
- 51e620658 feat(shared-skills): scaffold ultimate-browsing skill + register
- 6ca81aef1 Merge pull request #5466 from code-yeongyu/fix/claude-cleanup-hook-cancel
- bba6d45aa fix(dev-env): harden Claude cleanup hook logging
- 1b7c5885c Merge pull request #5467 from code-yeongyu/feature/ulw-loop-research-branch
- a023662b3 feat(ulw-loop): add research work-shape branch with ledger-backed dedup and hypotheses
- d64e6bdd6 fix(dev-env): detach Claude cleanup hook
- 77511bb9a Merge pull request #5464 from code-yeongyu/fix/ulw-plan-announce-intent-routing
- f7a0db823 fix(ulw-plan): announce intent routing decision to user before proceeding
- 48b75223b Merge pull request #5456 from EvangelosMoschou/feat/5434-codegraph-auto-init
- 6c8e58e39 Merge pull request #5455 from EvangelosMoschou/fix/5444-builtin-skill-resolved-path
- 81af65f8e fix(skills): keep dev-browser path node-compatible
- b12f7f120 test(codegraph): make auto_init coverage deterministic
- 9cf80781f fix(skills): preserve builtin skill reference roots
- e0c51df25 fix(5434): move auto_init check before resolveOrProvisionCommand
- 901d41c33 fix(5444): remove broken bun-test.d.ts reference path
- 8975cd18e feat(codegraph): add auto_init config to skip automatic .codegraph creation
- c439d4695 fix(skills): set resolvedPath on built-in skills so the skill tool shows the correct base directory
- 1e48f191a Merge pull request #5453 from code-yeongyu/feature/teammode-per-member-thread-title
- f3c7359dd feat(teammode): per-member thread titles named by role
- 23f9602fd fix(telemetry): bypass posthog module caching for robust testing
- 3b45679ca fix(call-omo-agent): fall back to first fallbackChain entry when no override
- cb5c832b4 fix(team-mode): avoid cancelling approved running tasks
Thank you to 6 community contributors:
- @dongguri-jun:
- fix(team-mode): avoid cancelling approved running tasks
- @EvangelosMoschou:
- fix(call-omo-agent): fall back to first fallbackChain entry when no override
- fix(skills): set resolvedPath on built-in skills so the skill tool shows the correct base directory
- feat(codegraph): add auto_init config to skip automatic .codegraph creation
- fix(5444): remove broken bun-test.d.ts reference path
- fix(5434): move auto_init check before resolveOrProvisionCommand
- fix(look-at): treat empty optional arrays as not provided in validation
- @niStee:
- fix(telemetry): bypass posthog module caching for robust testing
- @sjawhar:
- fix(skills): resolve skill_mcp servers from runtime config (lazy, no deadlock)
- @MoerAI:
- fix(docs): use opencode-go/kimi-k2.7-code in recommended model stacks (fixes #5371)
- Merge pull request #5468 from EvangelosMoschou/fix/5465-look-at-empty-array
- Merge pull request #5319 from EvangelosMoschou/fix/5301-call-omo-agent-default-model
- Merge pull request #5485 from MoerAI/fix/docs-kimi-k2.7-code-model-id
- Merge pull request #5482 from sjawhar/fix/skill-mcp-runtime-config
- Merge pull request #5299 from dongguri-jun/fix/team-delete-approved-active-task
- Merge pull request #5377 from niStee/fix/windows-telemetry-tests
- Merge pull request #5359 from 0804sally/fix/sisyphus-runtime-prompt-family-v2
- @0804sally:
- fix(sisyphus): rebuild whole prompt for runtime model family (#5297)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v4.19.0 Removes legacy Ralph Loop wiring; introduces Goal feature with automatic config migration.
- v4.6.0 Removed broken direct public binary entrypoints from platform launcher packages, keeping them internal.
- v4.6.0 Removed legacy context-window monitor hook path from active hooks and config surfaces.
- v4.4.0 Removes top‑level `lsp` config key; migration required to `.opencode/lsp.json`.
Beta — feedback welcome: [email protected]