This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Summary
AI summaryUpdates Validation, Highlights, and Fixes / compatibility across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Deprecation | Low |
`omx explore` is deprecated but remains available for compatibility. `omx explore` is deprecated but remains available for compatibility. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Ultragoal recovery no longer loops on completed aggregate goals. Ultragoal recovery no longer loops on completed aggregate goals. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Autopilot question flow waits for `omx question` answers before proceeding. Autopilot question flow waits for `omx question` answers before proceeding. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
HUD reconciliation avoids duplicate pane spawns and leader ownership conflicts. HUD reconciliation avoids duplicate pane spawns and leader ownership conflicts. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Plugin native‑agent setup surfaces missing reviewer roles and preserves obsolete agents. Plugin native‑agent setup surfaces missing reviewer roles and preserves obsolete agents. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Project‑local Codex trust sync relaunches no longer corrupt local configuration. Project‑local Codex trust sync relaunches no longer corrupt local configuration. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Ralplan reviewer contracts narrow subagent instructions to keep evidence grounded before handoff. Ralplan reviewer contracts narrow subagent instructions to keep evidence grounded before handoff. Source: llm_adapter@2026-05-26 Confidence: high |
— |
Full changelog
oh-my-codex v0.18.4
0.18.4 is a patch release after 0.18.3 for the runtime-safety and operator-experience fixes that landed on dev. It focuses on Ultragoal recovery, the omx explore deprecation contract, Team/HUD ownership, plugin native-agent setup, project-local Codex trust sync, Autopilot question waiting, and ralplan reviewer handoff quality.
Highlights
- Ultragoal recovery is safer — plain-label checklist sections no longer confuse Ultragoal parsing, and completed aggregate goals no longer trigger unrecoverable Stop recovery loops.
- Explore is deprecated without breaking legacy callers — guidance now points operators away from
omx explorefor new lookup work while preserving compatibility behavior. - Autopilot question flow waits correctly — deep-interview question handling can wait for
omx questionanswers instead of continuing prematurely. - Team and HUD ownership is cleaner — worker UserPromptSubmit paths avoid owning leader HUD reconciliation, and duplicate HUD pane spawn convergence is fixed.
- Plugin native-agent setup is more reliable — doctor/setup paths surface missing reviewer roles, preserve plugin-only obsolete agents, and keep plugin native-agent role CI covered.
- Project-local trust sync is safer — Codex trust sync relaunches no longer corrupt local config.
- Ralplan reviewer contracts are tighter — reviewer subagent instructions are narrowed so review evidence remains grounded before execution handoff.
Fixes / compatibility
omx exploreremains available for compatibility but is deprecated in runtime guidance.- Ultragoal Stop recovery now handles already-completed aggregate goals without looping.
- HUD reconciliation remains leader-owned across worker prompt hooks.
- Plugin-mode native-agent role setup and obsolete-agent preservation are covered by the release train.
Merged PR inventory
#2499, #2501, #2502, #2504, #2507, #2508, #2515, #2519, #2521, #2522, #2524, #2525.
Validation
npm run buildnpm run lintnpm run check:no-unusednpm run verify:native-agentsnpm run sync:pluginnpm run verify:plugin-bundlenode dist/scripts/generate-catalog-docs.js --checkgit diff --checknpm pack --dry-run
The GitHub release workflow remains the authoritative cross-platform native asset and npm publication gate after tag push.
Contributors
Thanks to bellman, @iqdoctor, and @Yeachan-Heo for contributing to this release.
Full Changelog: v0.18.3...v0.18.4
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Oh My Codex
All releases →Related context
Related tools
Earlier breaking changes
- v0.18.5 Ultragoal completion now requires independent reviewer and architect evidence before marking complete.
Beta — feedback welcome: [email protected]