v0.5.2

Breaking changes

• omp-web now requires Node.js 24 or newer (the current LTS). ompweb and its service and tray commands (ompweb-systemd, ompweb-launchd, ompweb-tray, ompweb-tray-linux) refuse older versions before doing anything.
• A plaintext web password no longer reaches the server. ompweb --password now stops the launcher at startup, and the server refuses every request while a plaintext password is in its environment. Every omp session inherits omp-web's environment, so an agent running env could print the password into its session file and send it to the model provider. Replace it with OMP_WEB_PASSWORD_HASH: run ompweb hash-password (it reads the password from stdin, so it stays out of shell history and ps) and pass the printed scrypt$… value. As a migration step, ompweb still accepts OMP_WEB_PASSWORD: it hashes the password at startup, keeps it out of the server's environment, and logs a warning with the hash to set as OMP_WEB_PASSWORD_HASH. Switch soon: agents can still read the plaintext from the ompweb launcher process, and each start makes a new hash, so every restart signs all browsers out. Setting both variables stops the launcher. The service installers hash an OMP_WEB_PASSWORD given at install time, so OMP_WEB_PASSWORD='…' ompweb-systemd install still works and now stores only the hash; the Linux tray's Set Web Password… does the same. Existing session cookies are invalidated.

Added

• The Notifications tab keeps its list across reloads, restarts and devices. omp-web now records the notifications you turned on (task finished, waiting for input, run failed, model switched) on the server, including ones sent while no tab was open, and every browser shows the same list and read state. A notification for the session you are looking at is listed as already read. Entries appear in the language of the browser showing them. Notification settings, push subscriptions and keys move into a SQLite store in omp-web's data directory, using the SQLite module built into Node.js 24; the first start imports them from the old notifications.json, so existing push subscriptions keep working.
• Expand thinking blocks by default, an off-by-default switch next to Keep tool calls collapsed in Settings → Interface & Behavior. Turn it on to read the model's reasoning without expanding every block; each block still collapses and expands by hand, and the choice applies to a block that is still streaming as well. Tool-call collapsing is unchanged.
• List every account omp stores for a subscription provider in Settings → API Keys & Providers and disconnect a single account with its Disconnect button; the other accounts stay connected and omp keeps choosing and rotating between them. The sign-in button of a connected provider now reads Add account: signing in with another account adds it, and signing in with a connected account refreshes it. Requires omp 18.7.0 or later (can1357/oh-my-pi#14588); older omp keeps the read-only account list from omp usage and explains how to disconnect from a terminal.
• Add Settings → Notifications: desktop and mobile notifications for a finished task (after the prompt and any background work it started are done; subagents never notify), a question or approval waiting for you, a run that failed after retries and fallbacks, and a model switch omp made on its own (for example Fable falling back to Opus after a refusal, or a usage-limit fallback). Each browser chooses its own events and whether to show an in-app toast or a system notification while you use omp-web in another tab. Nothing is shown for the session you are viewing, and clicking a notification opens its session; an in-app toast opens it from a click or tap anywhere on it, or Enter when it has keyboard focus. Over HTTPS (or on localhost) notifications arrive through Web Push even with no omp-web tab open, including the iPhone/iPad app added to the Home Screen; the push keys and device list live in ~/.omp/agent/omp-web/notifications.json. Notifications are off until you turn them on. This replaces the previous completion notification for the open session, and the agent's notify tool now also works on Android.
• Skip the web password for clients your reverse proxy trusts: the proxy sends a secret in X-Omp-Web-Auth only for trusted address ranges, and omp-web holds only the secret's SHA-256 digest in OMP_WEB_TRUSTED_HEADER_SHA256. Other clients still sign in with the password. The README shows how to generate the secret without it reaching shell history, and an nginx setup, including how to trust the real client address behind Cloudflare, Cloudflare Tunnel or another proxy, and how to guard against DNS rebinding. The service installers preserve the setting, and the digest never reaches child processes.
• Choose Classifier or Vendor default in Settings → AI Model Defaults → Auto Thinking Source when Reasoning is auto. The choice is saved in omp's native config for newly started or restarted agents. Vendor mode prefers the publisher's effort, then omp's per-model default, then normal Auto fallback. Requires an omp release containing can1357/oh-my-pi#14114.
• Show conflicting skill names and deduplicated installations when an OMP session starts, with resolution details, a × button that dismisses the notice for the session until the diagnostic report changes, and a persisted Turn off action that disables startup notices. Inspect a running session manually in Settings → Extensions & Tools → Skills, even when notices are off; inspection never resumes a stopped session. Requires an OMP runtime with the skill-diagnostics RPC commands; older runtimes report live diagnostics as unavailable.
• Ask a side question with /btw <question>: omp answers from the current conversation in a panel above the composer, even while the agent is working, and the question never enters the chat. Cancel a running answer, copy it, or ask follow-ups in the same topic. /btw on its own lists the session's past side questions, including ones asked in the terminal, each expandable to all its turns with Copy and Follow up. Side questions are text-only: with an attachment in the composer, /btw is refused and the draft is kept. An answer that omp lost (for example after its process restarted) shows as Interrupted instead of spinning. Requires an omp with the btw RPC commands; older omp shows "/btw requires a newer omp" instead of sending the text to the model.
• Show omp's Claude usage-limit badge in the composer toolbar, matching the terminal status line during the wrap-up allowance or once /slow low priority takes over. Reset times use the browser's locale and timezone. Requires an omp version whose get_state reports structured usageLimit state.
• Add a Slow toggle next to Fast in the composer toolbar, the equivalent of omp's /slow. On Claude models it turns low priority on or off in your omp settings, so it applies to every session and terminal; on OpenAI and Google models it switches this session to the provider's flex tier. Once the session's omp process runs, the toggle follows omp's get_state (slowModeSupported); before that, including in a new session, it follows the selected model's provider (anthropic, openai, openai-codex, google, google-vertex) and, on Claude, the providers.anthropic.slowMode setting. Clicking it there starts the session's omp process.
• Show the composer's reasoning level with TUI-style icons, alongside its name on desktop and without the name on narrow toolbars. The menu pairs each icon with its level name. Icons use consistent, vertically centered shapes rather than font-dependent Unicode glyphs, with larger mobile controls, smaller desktop controls, and support for high-contrast colors. Keep the model icon visible on phones and reduce unused space between the model and reasoning controls without wrapping the standard toolbar controls. Provider-defined levels retain their names with normal truncation.
• Keep the reasoning menu in one column on phones as well as desktop, with one full-width level per row instead of side-by-side chips.
• Add Paste image to the composer's + menu, with Japanese and Simplified Chinese translations. Requires HTTPS (or localhost), browser support for clipboard image reads, and clipboard permission; the item is hidden where the browser cannot read images from the clipboard. Attaching a file remains available.
• Name web app installations, iOS home-screen titles, and browser tabs after the server's hostname (without port), so multiple servers can be told apart. Localhost and IP addresses keep the generic omp web name; named LAN hosts are preserved. Tabs show workspace - installation name. Existing installations may need to be re-added to pick up the new name.
• Name web app installations, iOS home-screen titles and browser tabs with OMP_WEB_NAME, so multiple servers can be told apart. Unset or blank keeps omp web; url, host or domain (any case) uses the hostname the browser connected to, without port, keeping omp web for localhost and IP addresses; any other value is used as-is. The service installers preserve the setting. Tabs show workspace - name. Existing installations may need to be re-added to pick up a new name.
• Create a workspace by cloning a Git repository: in the Add workspace dialog, enter an https:// or ssh URL and choose Clone here to clone into a new folder under the selected directory, which then becomes the active workspace. Clone progress streams into the dialog; Cancel clone stops git and deletes the partial clone. git never prompts, so private repositories need a credential helper or ssh agent.
• Add a manual refresh button to the sidebar's Provider Usage panel, with the same success feedback as workspace refresh. Manual refresh bypasses omp-web's usage cache and invalidates omp's cached reports before fetching fresh limits; automatic five-minute refresh remains unchanged. Manual refresh requires an omp that supports usage invalidate; an unsupported or failed refresh shows as unavailable instead of reporting success.
• Add an off-by-default Resume running sessions after a restart setting in Settings → System & Updates. When omp-web restarts while agents are working, it restarts those sessions and prompts each with "Session interrupted and resumed. Continue as you would have done without the interruption." Work in progress at the moment of the restart, such as a running command, is lost. Do not also resume those sessions from a terminal while omp-web is down.
• Add Copy and Markdown below user messages and completed assistant replies, with keyboard access and touch-sized controls. Copy only message text, excluding thinking, tool output, and renderer controls; preserve full source for oversized raw-text messages. Shorten message actions to Fork and Read to leave more room on mobile; the speech tooltip and accessible label remain Read aloud.
• Scope Ctrl+A / Cmd+A to the selected message, currently loaded chat, or active file contents instead of the whole page. Message selection includes collapsed extension previews and expanded details without toolbar labels. Newer pane focus takes precedence over retained child selections. Text fields and IME composition retain native behavior; browser-menu commands and embedded viewers remain browser-controlled.
• Add an off-by-default Scope native Select All (experimental) switch in Settings → Interface & Behavior. The per-browser preference narrows whole-page selections from native menus while leaving keyboard scoping independent. Disable it if browser selection handles or menus behave unexpectedly; intentional whole-page selections can also be narrowed.
• Add a Notifications tab, first in the right panel before Explorer and Git, listing the last 100 toasts and system notifications (task completions, agent notify messages). Entries keep their action buttons and can be dismissed one by one or all at once. While notifications are unread, the panel toggle shows their count and opens straight to the tab; entries become read when you leave it or choose Mark all as read. Toasts now stay on screen for 6 seconds, and errors for 10 seconds. On touch screens, swipe a toast or a Notifications entry left or right to dismiss it, as on Android; the swipe can start anywhere on it except its buttons, and it never also moves a sidebar. Changed your mind mid-swipe? Drag it back toward the centre before letting go and it stays. A mostly vertical drag still scrolls the list. A mouse drag now selects text instead of dismissing a toast, and toasts no longer dismiss with a downward swipe. The mobile sidebar swipes also keep working while a toast is on screen.
• Play back a voice recording before transcribing or sending it. Pause keeps a left-side preview control; Stop opens a review deck with play, discard, and transcribe-and-send.
• Link GitHub issue and pull-request references in chat messages. Bare #123 links to the session checkout's GitHub repository (the gh default remote, else upstream, github, then origin); owner/repo#123 links to that repository. Code spans and existing links are left unchanged.
• Show all of an agent's ask-tool questions in one panel, with checkboxes for multi-select, radio buttons for single-select (recommended option marked and preselected), and an Other option per question whose text box is the option itself, submitted together. Typing in it chooses Other; choosing another option keeps the text in place, and choosing Other again uses it. While the questions are open the message box is hidden, so it is clear the answer goes in the panel; Cancel brings the message box back with your draft untouched. Requires an omp that supports set_ask_dialog; older omp keeps the one-question-at-a-time dialog.
• Make agent://<id> subagent handles in chat messages clickable. Bare handles, inline code containing only a handle, and Markdown links open that subagent's result dialog; agent://Parent/Child opens the nested Parent.Child subagent when the roster knows it. A read of an agent:// handle opens the same dialog from its tool row.
• Show the full model name, including its provider (for example anthropic/claude-sonnet-5-5), and the reasoning effort in the subagent result dialog, for running subagents and for finished ones after a reload. Finished background subagents take them from their saved transcript, so they also appear in the composer's subagent chips.
• Attach images and text files while the agent is running, and send them with a steer or a queued follow-up. Attaching through +, paste, or drag and drop now works during a run; with only attachments in the composer, Stop becomes Queue. An image-only message shows as [Image] in the queue. A steer or follow-up that omp refuses returns to the composer with its images, and so does a queued message taken back by Edit or Stop. Getting images back from Edit and Stop requires an omp with abort_and_restore_queue and image-returning remove_queued_message (can1357/oh-my-pi#14179); older omp returns only the text.
• Open file paths that chat messages write as inline code in the file panel, so a screenshot path such as `/var/tmp/shot.webp` shows in the image viewer. Absolute paths with at least two segments, ~/ home paths, Windows drive paths, and workspace-relative paths with a directory and file extension link; a :line[:col] suffix is dropped when opening. Other code, scheme handles (history://, agent://, https://) and fenced code blocks stay unchanged. Files outside the workspace open when the session mentions them, now including ~/ mentions; bare paths in prose are not linked.
• Show omp's passive tool context as one dim ↳ Context: … line on the last tool card of the tool batch it follows, matching omp's terminal, instead of a separate developer-message row. Hover the line for the full text; expanding the card shows the full text as its own section below the output. ANSI codes and control characters are removed and the text is collapsed to one line. Context that follows a non-tool message is not shown, so it never lands on an earlier, unrelated card. In a batch of several tool calls the line sits on the last call's tool row. Copy as Markdown and transcript exports leave it out. Requires an omp release containing can1357/oh-my-pi#13269; with older omp, passive context still shows as a developer-message row.

Fixes & Improvements

• On a phone, the first tap on an option, Submit or Cancel in a question panel now acts on it. It used to only close the keyboard or resize the panel, which moved the target out from under the tap. The message box's keyboard now closes as soon as the question appears (the message box is hidden then anyway), the panel no longer resizes when an option or button takes focus, and while you type in Other a touch or pen tap elsewhere in the panel no longer moves focus first. Choosing an option then closes the keyboard; tapping back into the kept Other text chooses it again. Submit closes the keyboard at once instead of after the server confirms the answer, and collapsing the keyboard while typing in Other no longer makes the next tap raise it again for a moment. A mouse, including one on a touchscreen laptop, keeps its usual behavior.
• On a phone, opening the keyboard at the end of a conversation no longer hides the newest messages under it: the chat stays scrolled to the bottom. The same holds when the message box or a question panel grows. A conversation you scrolled up in stays where it is.
• When the agent finishes a reply, the chat no longer jumps up to the start of the reply and back down. The finished reply used to disappear for a moment until its saved copy was loaded; it now stays on screen and the saved copy replaces it in place.
• Passive tool context shows its wrapper. Context wrapped in a tag such as <system-reminder source="graphify"> now names the tag and every attribute on the tool card's ↳ Context (system-reminder · source=graphify): … line. Expanding the card shows the context as a small nested card with that header and the body below, like developer reminders. Before, the tag name and attribute keys were dropped, so a graphify nudge looked like unlabelled text.
• ompweb hash-password in a terminal finishes when you press Enter. The hidden prompt waited for a newline, but a terminal in raw mode sends Enter as a carriage return, so the prompt never ended.
• The Notifications tab now tells unread notifications from read ones: an unread notification has an accent dot before it and a bold title on a tinted row, and read notifications are dimmed. The tab also lists only the notifications that can also be pushed (task finished, input needed, error, model switch). Confirmations such as "Saved", copy results, update notices and agent notify calls still show as toasts but no longer fill the tab. A session's next notification of the same type is unread again instead of inheriting the earlier one's read state.
• Fit the agent's question panel on a phone. A long question, header or option preview no longer widens the panel past the screen and clips the answer text at the right edge, and previews wrap instead of scrolling sideways.
• A question that arrives while you are composing on a touch device no longer pulls focus into its answer box, which raised the on-screen keyboard and scrolled the unread question away. The panel waits for a tap; on a desktop with a keyboard it focuses its first field as before.
• Reach Submit with the keyboard open: the question panel is now capped to the visible area so its Cancel/Submit footer stays on screen, and the dialog's buttons follow the Touch Targets setting.
• Submitting a message while the agent is working now queues it by default instead of steering, in Settings → Interface & Behavior → Message during active run: steering a long tool or shell command could abort the turn mid-task and left the new message undelivered. A previously saved choice is kept; only an empty setting changes meaning. Sending during omp-web's own !! shell command no longer fails with "Cannot send a prompt while a shell command is running": the message is handed to omp's queue instead of aborting anything, the optimistic bubble is withdrawn, and a notice says it was queued behind the running command.
• Keep omp-web's own secrets out of every child process it starts, not only the omp session processes: plugin install and upgrade, skill install/update/search, update checks and the self-update worker, agent unpack, and the Git commands the file panel runs. A session environment no longer contains the web password hash, so env inside an agent no longer prints anything that grants access to this server. OMP_WEB_* values that are configuration rather than secrets (the omp binary path, port, package dir) keep reaching the processes that need them.
• Sign web sessions with a per-installation random key (created on first start at ~/.omp/agent/omp-web/web-auth-secret.json, mode 0600) mixed with the password hash, instead of the hash itself. Anyone who reads the hash out of a service environment file can no longer forge a session cookie, and changing the password still signs every browser out.
• On Windows, changing or removing the web password hash with setx now takes effect at the next server restart. The tray (native and PowerShell) and the background service read OMP_WEB_PASSWORD_HASH from the user, then system, environment each time they start the server, instead of preferring the copy they captured at logon, so an old password no longer keeps working after you rotate it. The native tray previously did not pass the hash on at all.
• The Notifications tab now lists notifications that appeared as system notifications too, not only in-app toasts, including Web Push notifications that arrive while an omp-web tab is open. Click or tap an entry for a session, or press Enter on it, to open that session; its dismiss button still only removes it. The list is still kept per tab in memory, so pushes that arrive with no omp-web tab open are not listed.
• Opening a notification by clicking or tapping its toast now marks it as read in the Notifications tab, so it no longer counts toward the unread badge. A later notification of the same kind for the same session is unread again, even after the earlier one was read.
• Word-completion ghost text in a scrolled composer now appears right after the caret. When the draft had text after the caret, it used to be drawn lines further down.
• Show a single plus sign on the Add provider buttons in Models settings, and none in the Add provider dialog title. The translated label no longer repeats the button's + icon.
• Links in a Markdown file preview no longer navigate omp-web away. A relative link the file panel cannot open, such as one in a Markdown file outside the workspace, shows as plain text with its target on hover; web links open in a new tab. An image the panel cannot load shows its alt text instead of a broken image.
• The image viewer now opens with the whole image fitted to the screen on every device, instead of at 100%; images smaller than the screen stay at their real size. The zoom percentage is always relative to the image's real pixels, at every Interface Scale. Zoom out goes down to 10%, or further to the fitted size for very large images, in ×1.25 steps. Fit to screen and 1:1 (actual size) replace Reset zoom. Zooming keeps the centre of the view in place, and a zoomed-in image can now be scrolled to every edge; before, the parts outside the starting size were cut off. The viewer covers exactly the window at Compact, Comfortable and Large Interface Scale, and its buttons follow the Touch Targets setting, wrapping on narrow screens instead of being clipped.
• Show images from tool results again after reopening or reloading a session. Since tool-result images were dropped from the initial history load, screenshots and image reads showed only [1 tool result image omitted from initial history payload …], with a wrong byte count. Expanding the tool row now shows a small preview; click it for the full image. Previews are 480px WebP files generated once and kept in omp-web's data folder, and live tool output also arrives as a link instead of inline base64, so many large screenshots no longer slow the chat down or fill browser memory.
• The completion notification omp-web used to show for the open session when its tab was in the background is gone, along with its permission prompt on the first finished run. Turn on Settings → Notifications to get notifications again; they now cover every session, not only the open one.
• Builds no longer fail at random while fetching fonts. Google Fonts sometimes serves Noto Serif SC through links Next.js cannot parse, so omp-web now ships its own copy: a 2.2 MB subset (weights 600–700; GB2312, kana and CJK punctuation), downloaded only when a page shows Chinese or Japanese text in a heading. Characters outside the subset use the system's CJK serif font. The Nix package's local-font patch applies again.
• Balance the composer icons on phones and narrow toolbars with a slightly smaller effort-level icon and a larger Slow-mode snail, while keeping menu icon sizes unchanged.
• Keep the model picker on the left and reasoning effort, Fast, Slow, microphone, and Send/Stop controls in a right-aligned composer group, including wrapped mobile rows.
• The Provider Usage panel now shows each account's email instead of omp's redacted form (an*); accounts without an email show as Account N. Only the email, plan and limits reach the browser.
• The composer's reasoning menu now uses the same borderless rows as the model picker instead of bordered cards.
• The context popover now uses the room above the composer instead of a fixed 380px cap, so it only scrolls when the window is too short for it.
• Fix settings crashes, stalled session catch-up, and failed voice transcription polling in browsers without AbortSignal.timeout, AbortSignal.any, or Promise.withResolvers, including development-mode clients. Client requests now use AbortController timers and ordinary promises while retaining timeouts and cancellation (#196).
• Allow development requests from all RFC1918 private IPv4 ranges, not just 192.168.*.*. Set OMP_WEB_DEV_ORIGIN to allow a tunnel or reverse-proxy hostname without editing next.config.ts; the setting is development-only.
• Fix authenticated app-installation metadata: serve /api/manifest through the existing password guard with one credentialed manifest link and embedded packaged PNG icons, avoiding cookie-free native installer icon downloads. Preserve the app identity and root launch URL/scope, retain private revalidating caching, and remove the obsolete public-manifest exception. Verified in local Chromium with HTTP icon URLs blocked and no installability errors; the owner also confirmed successful installation on a physical phone behind Cloudflare Access.
• Manage Git worktrees from a new Worktrees tab in the file panel, next to Explorer and Git. It lists the active workspace's worktrees and switches, creates, and removes them; removing one with uncommitted changes asks before forcing. The new-session screen also gets a worktree picker under Workspace when the selected workspace has more than one worktree. Switching in either place moves the folder where new sessions start and leaves the open session alone. While a session is open, Explorer, Git, and open files show that session's folder. The workspace list no longer shows a branch selector beside each workspace name.
• Keep the sidebar's action menus inside the screen on phones and at larger interface scales.
• The Agent environment variables editor in Settings → System & Updates now sits below its title and description and follows the page width, instead of sitting beside them and extending past the right edge. The text box also grows with its contents.
• Show queued steers and follow-ups on every device viewing a session. The queue panel now shows omp's own queue (omp 18.4.4 or later) instead of a copy kept by the tab that sent them, so it also stays correct across reloads.
• Stop no longer loses a queued steer or lets the agent run it anyway: as with Esc in omp's terminal, every message still waiting in the queue moves back into the composer. With omp's abort_and_restore_queue (newer omp), omp takes the queue back and aborts in one step, which also covers a steer you just promoted that this page's queue had not caught up with, and one the model already picked up through live steering (for example OpenAI models with providers.openaiLiveSteering). If that request fails, Stop retries it once and warns when the messages may not have come back. Older omp (18.4.4 or later) falls back to removing each message the page lists before the abort; there, a steer the page does not list or the model already took still runs after Stop, and attached images are dropped.
• Long voice transcriptions no longer fail with Unexpected token '<', "<!DOCTYPE "... is not valid JSON behind a reverse proxy. The server now keeps the recording and transcribes it as a background job (up to about 5 minutes) while the browser polls short requests, so proxy timeouts no longer cut off a slow STT endpoint. The job survives the recording browser disconnecting: any browser showing the same session picks it up, can play the recording and retry a failure, and the transcript is inserted in exactly one browser. A Transcribe and send (or queue) choice stays with the job, so the transcript is still sent after you switch sessions and come back; if the agent is running by then it is queued as a follow-up, and a queue choice whose run has ended is sent. Another browser that finishes the job only inserts the text. Transcribe and send from the review deck now sends too. Recordings stay on the server (in memory) for up to an hour or until inserted or discarded. Anyone who can reach the omp-web API can list, play and retry those recordings by session, so set OMP_WEB_PASSWORD when omp-web is reachable by others.
• Sending a message to a live session no longer fails with HTTP 404 when the session's transcript cannot be read. An empty baseline is used instead, so the prompt is still delivered. The previous behavior is what surfaced as Failed to send message: HTTP 404 on sessions created by slash commands.
• The Skills page lists exactly what omp resolves, through omp skill list --json (omp 18.3.3 or later): plugin, custom-directory and registry skills appear, and colliding names show as namespace/name. Skills that live outside omp-web's skill folders, such as plugin installs, show a disabled toggle because an update would undo the edit. Older omp binaries keep the built-in scan.
• On phones, the top bar's ⋯ menu no longer repeats the session name already shown in the title, and its theme and language pickers open fully instead of being cut off at the bar's edge.
• Resume running sessions after a restart no longer resumes sessions that another running omp-web instance (for example a dev server sharing the same agent directory) is still running. Previously the second instance started duplicate agents that ran alongside the originals and wrote to the same session files.
• On phones and tablets, the first time the file panel opens it now takes keyboard focus, closes with Escape, and keeps Tab inside the panel, like every later open. Previously the first open left focus on the toggle button and ignored Escape. Closing the panel after that first open also returns focus to what opened it, such as a file link in the chat, instead of the page body.
• The Git side panel now honors .gitattributes: changed files marked linguist-generated, linguist-vendored, linguist-documentation, or -diff move into a collapsed "files marked in .gitattributes" group below the main list, and the panel previews the first unmarked change. -diff files show that their diff is suppressed, including untracked ones, instead of a generic "Diff unavailable". Files with the binary attribute stay in the main list.
• Stop showing tool paths such as history://…, proc://… and local://… as file links. They are resolved by omp, and clicking them opened an "Access denied" viewer tab. http:// and https:// paths passed to read now open the URL in a new browser tab instead.
• omp-web no longer exits when a browser disconnects in the middle of a POST request, for example when a tab closes while a request is still in flight. A Next.js bug (vercel/next.js#99278) could turn that disconnect into an uncaught Error: aborted, which the crash handler treated as fatal. These disconnects are now logged to diagnostics.log as client-abort and the server keeps running; every other uncaught error still exits.
• When PI_CODING_AGENT_DIR points away from ~/.omp/agent, the crash journal (diagnostics.log) is written to <agent dir>/omp-web/ instead of ~/.omp/omp-web/, so isolated test and development servers no longer write to the real journal.
• Slide the file panel in from the right edge on phones, with the same timing as the left sidebar, instead of popping it open full-screen. The first open slides too, without a Loading… placeholder or a dimmed backdrop flashing over the chat. The panel still covers the whole screen once open, and it opens and closes instantly when reduced motion is enabled.
• On mobile, move the session information control (context ring with stats, tokens, cost, and Compact context) to the top-right of the top bar; desktop keeps it in the composer toolbar. Preserve the ring usage coloring, its popover, and the /session shortcut. Opening the panel moves focus into it; Escape dismisses it before run shortcuts and returns focus to its opener when focus is still within the panel.
• Make the mobile workspace sidebar full-screen without a dimmed backdrop, with a visible top-left close button. Place the file-panel opener inside the upper bar and add a separate top-right close button inside the file panel, with keyboard focus returning to its opener. Keep the session-title pill centered between the header controls.
• Continue the mobile file-panel tab-row border underneath its close-button cell, so the divider spans the full width.
• On mobile, swipe anywhere on the app surface: swipe right to open the left sidebar or close the right one, and swipe left for the opposite action. No device-edge start or perfectly straight movement is required. Recognition follows overall dominant-axis displacement and tolerates curved thumb movement, a brief corrective start, and shorter deliberate drags. Taps, predominantly vertical movement, multi-touch, text editing or selection, native horizontal scrolling, and open popups retain their normal behavior; persistent drawer lists, including Git changes, remain swipeable. Embedded previews retain native input and full width; swipe on their surrounding toolbar to close the sidebar.
• Let the centered session-title pill fit its content and grow for longer names up to the available header space, instead of stretching short names into a fixed-size box.
• Keep Collapse input available after expanding a long user message with Show full input, so the message can be collapsed again.
• Agent host tools (open_url, notify, open_file) no longer fail when you switch to another session mid-run. Any open omp-web tab now answers them, and a URL or file from a session you are not viewing opens only after you confirm it in a dialog.
• Ask before opening links from the agent. Turn on Open agent links without asking in Settings → Interface & Behavior to open links from the session you are viewing right away; links from other sessions always ask.
• An attached ask panel no longer steals focus after it opens. Typing in a question's Other box no longer selects the first option when the text begins with a space, and focus is never pulled back to a radio button once you have moved on.
• Keep every assistant reply visible in the chat. Process details now folds only the activity between replies (thinking, tool calls, notices), so a reply that ended a turn is no longer hidden when a background job or reminder resumes the agent.
• Honor omp's Hide Thinking Blocks setting in the chat, and rename the toggle from Thinking Blocks so its label matches what it does.
• Start system reminders, async job results, and late LSP diagnostics collapsed to their first line. Click the header to expand; reminder headers show their attributes, such as reason and rule.
• Render Nerd Font icons that omp sends when its symbol preset is set to Nerd (for example the multi-select Done selecting check mark) instead of empty boxes. The bundled symbols font (Nerd Fonts Symbols Only, SIL OFL 1.1, about 1.2 MB) applies only to Private Use Area codepoints and is downloaded only when a page shows one of these icons.
• Show late LSP diagnostic notices with their original line breaks, like async results, instead of collapsing them onto one line.
• Unexpected omp process exits now remain visible in the workspace and session sidebar until that session starts again, including the exit code or signal and the last stderr line.
• Show free-text answers to agent questions (the ask tool's "Other" option and other promptStyle editor requests) in the chat font instead of the monospace code font.
• Keep line breaks in agent dialog titles instead of running multi-line titles together on one line.
• Restore the Settings toggle track, which the 44px hit area had squeezed into a dot. Cap Settings dropdowns at half the card width with an ellipsis for long options, and stack them below their label at full card width on narrow screens.
• Give the top-bar theme picker the same padding and icon spacing as the language picker; its icon and arrow were squeezed into a 28px button.
• Improve phone and tablet ergonomics with safe-area-aware top chrome, a focus-trapped mobile workspace drawer, an actionable first-run workspace state, touch-sized sidebar actions, narrow-screen composer wrapping, clearer settings loading/retry states, and quieter streaming announcements.
• Keep the Extensions & Tools settings panel scrollable on desktop and touch layouts, including long MCP server lists.
• Let non-native settings tabs render while the common OMP configuration loads, and show static MCP configuration before live status resolution.
• Give the new-session workspace picker a calmer destination card with a folder badge, stronger focus and hover states, a compact path context line, and touch-friendly spacing while retaining the native accessible select behavior.
• Defer the file panel and its Explorer/Git work until first use, use a fixed overlay for the file panel on tablet widths, increase mobile Explorer row height, enlarge Git touch targets, and keep compact session context available in the mobile overflow menu.
• Move focus into attached extension requests, contain keyboard focus in the custom extension terminal, and add a local retry action when a text file cannot be loaded.
• Add local retry actions and status semantics to Explorer, Git, and text-file failure states so transient workspace errors are recoverable without hunting for a toolbar refresh control.
• Defer Explorer and Git tab work until each tab is first opened, avoiding duplicate status requests and hidden-panel overhead while preserving visited tab state.
• Pause content fetches and file-watch connections for inactive file tabs, then resume them when the tab becomes active to reduce background network and rendering work.
• Defer the command-palette chunk until the first Ctrl/Cmd+K shortcut, reducing initial shell work while preserving the existing keyboard workflow.
• Add a visible command-palette action in the topbar overflow menu with the Ctrl/Cmd+K shortcut exposed to assistive technology, while keeping the palette chunk lazy.
• Replace the generic file-panel loading label with a shape-matched skeleton toolbar and rows, giving desktop and mobile users a stable visual handoff while the deferred panel chunk loads.
• Enlarge mobile file-search controls and add inline refresh actions to sidebar load failures, keeping the primary navigation recoverable without relying on the header icon.
• Keep the full-page Settings header clear of notches and home indicators, and enlarge its search, back, and close controls for touch devices.
• Add a localized Return to latest message control that appears when a long conversation is scrolled away from the bottom, with reduced-motion-aware scrolling and touch-sized mobile controls.
• Replace the sidebar’s generic loading label with shape-matched workspace/session skeleton rows for a calmer first paint on desktop and mobile.
• Clarify the mobile file-panel control by switching from a panel icon to an explicit close icon when the panel is open, while retaining the existing accessible toggle labels.
• Enlarge mobile session-search and composer attachment-remove controls so common mobile cleanup actions meet the same touch-target standard as navigation.
• Make the compact mobile topbar overflow horizontally navigable so the new command action, session context, and existing controls remain reachable instead of overlapping at narrow widths.
• Localize the command palette’s session-loading state instead of leaving English-only copy visible in Chinese and Japanese.
• Localize the workspace login title, password prompt, unlock action, and authentication errors for English, Chinese, and Japanese users.
• Localize composer attachment limits, skipped-file explanations, read failures, and running-agent attachment errors for English, Chinese, and Japanese users.
• Localize composer retry-abort and attachment removal labels so mobile cleanup and recovery actions match the active interface language.
• Close the mobile topbar overflow when launching the command palette from its visible trigger, preventing the menu from remaining open behind the modal.
• Add localized retry actions to image, audio, and document viewer failures so transient file-loading problems can recover without closing the file panel.
• Keep the login card clear of device safe areas, enlarge password and unlock controls for touch use, and retain the shared focus-ring treatment.
• Add localized inline retry recovery to workspace directory-picker failures, so mobile users can recover without closing the picker.
• Enlarge directory-picker profile, launch toggle, and extra-argument controls on touch devices for reliable workspace setup on phones.
• Enlarge mobile Settings navigation tabs and provider segmented controls to 44px targets, keeping the horizontal Settings header easy to traverse on phones.
• Localize the document viewer’s PDF type label so file metadata remains consistent with the selected interface language.
• Localize workspace-picker profile and extra-argument accessible labels for English, Chinese, and Japanese users.
• Enlarge archive-browser search and clear controls on touch devices for reliable session-history filtering on phones.
• Enlarge MCP refresh, server selection, add-server, config fields, and action buttons on touch devices for reliable mobile server setup.
• Localize MCP connection, enabled/disabled, off, and invalid status labels for English, Chinese, and Japanese users.
• Localize agent discovery error, warning, and fallback diagnostic messages for English, Chinese, and Japanese users.
• Announce agent discovery errors with alert semantics while keeping warning-only diagnostics polite, so assistive technology distinguishes failures from informational notices.
• Give the archive search clear action an explicit localized Clear search accessible label instead of reusing the dialog close label.
• Enlarge agent reload, unpack, create, search, list, copy, save, cancel, and remove controls on touch devices for reliable mobile agent management.
• Localize bundled, user, and project agent scope badges so agent metadata remains readable across supported languages.
• Announce MCP configuration load failures with alert semantics while retaining polite status announcements for live-status connectivity notices.
• Expand the Settings switch hit area to 44px while preserving the existing 40×24 visual track and focus behavior.
• Replace the text-file viewer’s generic loading label with shape-matched skeleton lines and semantic busy state for smoother first paint.
• Replace the conversation session-loading label with shape-matched skeleton lines and semantic busy state for a calmer chat first paint.
• Enlarge the conversation session retry action on touch devices so a failed session can be recovered reliably from mobile.
• Expose Explorer directory and search loading state through aria-busy, improving assistive-technology feedback while mobile file navigation remains touch-friendly.
• Replace the initial workspace-validation label with a shape-matched skeleton and semantic busy state for a calmer first paint.
• Show the Ctrl/Cmd+K shortcut in the command-palette toolbar trigger’s tooltip while retaining the existing accessible shortcut metadata.
• Give the archive search input an explicit localized accessible label instead of relying on placeholder text alone.
• Refresh the OMP version shown in new sessions after a CLI update without requiring an omp-web server restart. Reuse results while executable metadata is unchanged, with a five-minute fallback expiry for launchers. Keep the last known version visible between visits and distinguish initial loading from an unavailable runtime.
• Add OMP_WEB_DISABLE_AUTOUPDATE to skip npm/OMP update checks and block in-app self-update actions, preserve the setting in service installers, and show the disabled state in Settings.
• Return browser host-tool and host-URI results as fire-and-forget frames while preserving OMP's original request ID, preventing open_file and clipboard bridge calls from hanging.
• Restore copy-success feedback after React Strict Mode re-runs effect setup.
• Cancel queued messages in OMP before removing their chips or recalling them for editing. Failed or timed-out cancellation leaves the message visible; successful recall survives composer remounts without losing newer typing. Requires native remove_queued_message support.
• Preserve question-dialog answers and selections when an SSE reconnect replays the same pending request or answer submission fails.
• Keep sent-message copy, edit, and fork actions visible without hover or a reveal tap. Also keep file mention/download, Git open-file actions, and sidebar menus visible alongside their metadata; wrap message actions on narrow screens.
• Expand complete tool inputs inline, including multiline code and edit patches, while keeping command previews compact and output visibility unchanged.
• Keep composer controls on one line, with equally sized Send, Stop, and Queue buttons and model names truncating before short effort labels.
• Align the + button and primary action with matching composer insets.
• Recover saved responses before reporting an empty agent reply after returning to a backgrounded page or PWA. Preserve provider errors and distinguish new runs from older answers.
• Catch up missed conversation entries incrementally after reconnecting or returning to the page, including during active runs. Restore quiet partial responses and live tool output without duplicating history or overwriting newer updates.
• Send prompts with image attachments in full again: commands reach OMP as one unchunked JSONL record. Protocol-v2 rpc_chunk framing is outbound-only, so any prompt over 1 MiB was rejected as Unknown command: rpc_chunk and reset the session after the prompt-ack timeout.
• Show the New session fork action below agent replies as well as user prompts, so the newest message in a conversation can fork the session. omp's branch command accepts a user entry only, so each reply forks at the prompt that started its turn; replies with no earlier prompt keep no fork action.
• Count subagents, advisors, /tan clones and extension helper sessions in Settings → Usage. Their model usage lives in transcripts inside each session's artifacts folder, which the Usage page never read. It counted only subagent summaries in task results, and background subagents leave those empty. These transcripts now count toward the session and project that own them. History copied by /tan, /fork or a branch counts once and moves to a remaining copy if the original is deleted, and a task summary counts only when no copy of its subagent's transcript exists. The local:// scratch folder is not scanned. The usage cache rebuilds once on first load; when another omp-web version shares it, files that version synced are re-read.
• Show every tool call as its own row. Collapsing a finished turn's process details no longer merges tool calls from separate assistant messages into a single row, and parallel calls are no longer folded behind a summary header such as "Searched 2 times".

Upgrade

npm install -g @kahme247/ompweb@0.5.2

Full changelog: v0.5.1...v0.5.2