OmO के पुराने संस्करण डाउनलोड करें

Release binaries may be up to 210 MiB. The 5.1.67 publish stopped on Linux x64 because its binary measured 209,889,456 bytes, 174,256 bytes over the 200 MiB per-binary budget (5.1.66's was 209,664,176). The budget moves to 210 MiB, about 5% above that size, and still fails any release that goes past it; the 5 MiB headroom warning is unchanged. (#13052) (#13052)
- 8ed3326361 Merge pull request #13052 from code-yeongyu/fix/binary-size-budget-210mib
- 5e5c60b976 docs(changes): add the 13052 release-note fragment
- 957de2b66d fix(release): raise the per-binary size budget to 210 MiB
- 42d5746e72 Merge pull request #13047 from code-yeongyu/release/v5.1.67-source-state
- 3b88a0027f Merge pull request #13005 from code-yeongyu/fix/12989-endpoint-cache-at-resolve
- d26f4d7db4 Merge remote-tracking branch 'origin/dev' into fix/12989-endpoint-cache-at-resolve
- 245869b604 Merge pull request #12993 from code-yeongyu/fix/12989-credential-lock-torn-record
- 8ce72e7a64 Merge remote-tracking branch 'origin/dev' into fix/12989-credential-lock-torn-record
- bb340a0fa2 Merge pull request #12815 from code-yeongyu/fix/12801-file-backed-ps-snapshot
- 7a0e5b3d0c chore(train/omo-2): regenerate bundles at the train top on dev f922d6ac3a (#12944 #12949 #12815)
- 302b797899 Merge #12815 (4f50baaf95) into train/omo-2 (re-cut without #12351)
- 4c32820728 Merge #12949 (e6de1f0ebc) into train/omo-2 (re-cut without #12351)
- a463e158b6 Merge #12944 (e91165d545) into train/omo-2 (re-cut without #12351)
- 2215cc2d2b Merge origin/dev into fix/12989-credential-lock-torn-record
- d985fa7989 Merge pull request #12979 from code-yeongyu/fix/12978-credential-lock-account-home
- a4bdc347ce changes: fragment for #13005
- 60e17c02cd fix(thread): a published-id send reuses only an answered enumeration (#12989)
- 24f897c40c fix(thread): share one endpoint enumeration and start its cache window when it answers (#12989)
- f04cdf1f33 Merge origin/dev into fix/12978-credential-lock-account-home
- fa05c2702c Merge pull request #12975 from code-yeongyu/feat/12886-approval-wait-outcome
- 1acab30a24 changes: fragment for #12993
- 5515951be2 fix(service-auth): reclaim a torn credential lock record instead of holding it forever (#12989)
- 6874054d8f fix(service-auth): keep test CLI children on their own lock and run only System32 tools on Windows (#12978)
- e91165d545 Merge origin/dev into fix/914-tolerant-reply-decoders
- a777a723a8 Merge remote-tracking branch 'origin/dev' (#12953 merged standalone, 04ba4a7081) into train/omo-1
- 04ba4a7081 Merge pull request #12953 from code-yeongyu/feat/claude-fable-5-2
- a66d3d1ce1 fix(knip): export-check device-service-core test/local-api/event-examples.ts
- 0d993cd084 Merge #12953 (dc68e0fca5) into train/omo-1
- 0bb53e3451 Merge #12975 (3f95b9557c) into train/omo-1
- b221a27dde Merge #12954 (ffa66d41c1) into train/omo-1
- 4b35d367d7 Merge #12966 (06241b89e1) into train/omo-1
- 05dc774a1a Merge #12909 (cd21814199) into train/omo-1
- d14bda0040 Merge #12938 (06ebd08171) into train/omo-1
- cac87c0474 fix(service-auth): one credential lock per OS user on Linux, macOS and Windows, with a homedir fallback (#12978)
- 06ebd08171 Merge remote-tracking branch 'origin/dev' into fix/12853-follow-effective-mode
- 01cfed3293 fix(thread): a permission prompt (pendingDialogs) parks the receiver too, and a failed post-admission read keeps the probe's parked state (review MEDIUM + LOW, #12975)
- 5755bb8a52 Merge remote-tracking branch 'origin/dev' (#12922) into feat/12886-approval-wait-outcome
- 86441b3e66 Merge remote-tracking branch 'origin/dev' into feat/claude-fable-5-2
- 40856501af chore(changes): fragment for #12979
- cd21814199 Merge remote-tracking branch 'origin/dev' into fix/12908-canary-user-intervened
- 0763a352ca fix(service-auth): take the credential lock in the OS account's home, not $HOME (#12978)
- 363d0e34cf Merge commit '4543c85d49fab896634507a28fb3a47401521554' into fix/914-tolerant-reply-decoders
- d79bc6cc9a Merge pull request #12922 fro

What changed
omo verifies the device service it downloads against the real release key set. The device service's release key set is now pinned to the minted Ed25519 keys, operational first and recovery second, in packages/device-service-core/src/release/release-key.json (a byte copy of the service's own release-key.json). A release signed by either key installs; one signed by neither, or with a malformed signature, is refused before anything is written. Until now the pin was a placeholder that refused every release. (#12437)
Skills and prompts no longer point at skills, files or agents that do not exist, and CI now refuses any new one. The Native ultrawork directive told sessions to read the bun-1-4 skill, which Senpi renamed to bun; it now names bun. remove-deadcode asked for a typescript-programmer skill, which made OpenCode refuse the whole task call; it now loads programming. frontend and ulw-research no longer load an open-design skill that omo never shipped and instead name the nexu-io/open-design library. The ulw-research assembly worker loads imagegen and ulw-loop only when the session lists them, and frontend loads the browser skill where it asked for OpenCode's playwright. OpenCode now ships the hyperplan skill that its hyperplan mode tells the session to load; until now only this repository's own checkout had it. Seven programming references and one frontend cross-reference that pointed at files in the wrong directory, or at a file that never existed, now open the right file. A new check in the root test suite resolves every skill name, skill-relative path, agent and category in shipped skills and prompts for each edition that ships them, and names the closest real target when one is missing. (#12484)
When omo drops the OpenSSL default certificate file (/etc/ssl/cert.pem on macOS) from the engine's trust store, it now tells you why. omo doctor prints an INFO line naming the file, the cause, the certificate block where reading stopped, and whether the drop trusts fewer certificates than plain Bun would. omo trust ensure --json reports the same facts as defaultFileDrop. It is never a warning or a failure. (#12499, part of #10762)
2026-11-05 - Name the OpenSSL default-file drop (#12499, part of #10762)
Design revision 11, 4.4 item 6. readDefaultFileCandidates takes its narrowing flags from the exported DROP_CAUSE_NARROWING table. On a drop, acquireEngineTrust records one openssl-default-file-malformed entry carrying file, cause, blockIndex and narrowing instead of two plain codes, and returns it as defaultFileDrop. runTrustStage prints it in the trust ensure --json line. trust-diagnostics.ts accepts that structured entry and still accepts the plain code for an unreadable file; it refuses another file name, an unknown cause, a non-integer block index or a narrowing flag that does not match the cause. engine-trust-doctor.ts reads the adopted generation's diagnostics.1.jsonl and diagnostics.jsonl, takes the last import-exec or ensure record of that generation, and gives omo doctor one INFO line: the drop, or default-file: kept / unreadable. A missing or torn log yields no line and never fails doctor.
Native skills no longer point Senpi sessions at OpenCode-only agents, tools and commands. A community audit of the installed skills found 16 more references that exist only in OpenCode or nowhere: refactor consulted an oracle agent and called team_list and team_status, debugging ended a team with team_shutdown_request and team_approve_shutdown, frontend loaded skills through a skill tool and addressed a Prometheus planner, ulw-loop named an explorer agent, a plan agent and a /cancel command, ulw-plan offered a git category, and ultimate-browsing named a web-search tool and Playwright MCP calls. Senpi now gets the deep-high lane in place of oracle, the task_send shutdown handshake and task_output in place of the missing team tools, and explore, the ulw-plan workflow and /goal pause or /goal clear in the Native skills. The shar

Changed
- Built-in reasoning defaults are back to their values before 5.1.59: daily mode runs Claude Opus 5.5 at medium effort again, and every other rung raised to high in 5.1.59 returns to its previous medium or xhigh setting. (#12271) (#12272)
- The architect task category can now implement as well as design. Its description and child prompt name broad debugging across many sources (code, logs, git history, issues, docs, configuration, runtime evidence) as a use case, and the child is told it has the full tool set and should carry a requested change through to a verified result. A caller that wants a design write-up without file edits marks the task advisory-only (#12238). Model routing is unchanged. (#12239)
Fixed
- The native-binary-parity CI check no longer fails when a leftover task-host shard is still running on one side and has already exited on the other: both doctor lines are runtime state. (#12148) (#12153)
- c636c06e5a Merge pull request #12272 from code-yeongyu/revert/12094-reasoning-defaults
- dd69a43616 Merge remote-tracking branch 'origin/dev' into revert/12094-reasoning-defaults
- b5fd542ba4 Merge pull request #12239 from code-yeongyu/fix/architect-writable
- 2821fac395 Merge remote-tracking branch 'origin/dev' into fix/architect-writable
- e0d74870cf Merge pull request #12259 from code-yeongyu/fix/12256-eq-hermetic-mcp
- 5177e6fb9e Revert "Merge pull request #12094 from code-yeongyu/fix/12085-builtin-reasoning-high"
- d7f9c82232 Merge pull request #12153 from code-yeongyu/fix/12148-parity-shard-fold
- 12ec2cd3ea test(qa): re-record EQ E21-E24 linux goldens from the hermetic-MCP harness (#12256)
- f30147198f fix(qa): count a sandbox-disabled remote MCP as settled in the EQ startup wait (#12256)
- a708319a0b fix(qa): keep live third-party MCP instructions out of the EQ observation (#12256)
- a5e1061f11 Merge remote-tracking branch 'origin/dev' into fix/architect-writable
- 72a6bae47e Merge pull request #12212 from code-yeongyu/release/v5.1.59-source-state
- 966fe3d2db Merge remote-tracking branch 'origin/dev' into fix/12148-parity-shard-fold
- f615e62aa1 docs(changes): match the #12239 note to the tightened wording
- 75a5be4306 Merge remote-tracking branch 'origin/dev' into fix/architect-writable
- 11852ded93 docs(changes): note the writable architect category (#12239)
- 7232c70151 fix(qa): fold INFO and WARN shard doctor lines in the binary/npm parity compare
bun add -g omo-ai