New:Socket for Asana Is Now Available.Learn more
Get Started

open-multi-agent-kit

Package Overview
Dependencies
Maintainers
1
Versions
39
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

open-multi-agent-kit

OMK (Open Multi-Agent Kit) coding agent CLI with read, bash, edit, write tools and session management

Source
npmnpm
Version
0.96.2
Version published
Weekly downloads
474
-38.92%
Maintainers
1
Weekly downloads
 
Created
Source

OMK

Provider-neutral terminal coding agent with multi-agent orchestration, scoped tools, replayable sessions, and evidence-backed verification.

OMK supports interactive terminal use, non-interactive output, RPC integration, and an embeddable TypeScript SDK. It works with API-key and subscription providers without making one provider the control plane.

Install

Requires Node.js 22.19 or newer. Built-in local bash also requires sandbox-exec on macOS or bwrap plus unprivileged user namespaces on Linux. Enforcement is enabled by default and fails closed with sandbox.backend_missing; see Containerization.

npm install -g open-multi-agent-kit --ignore-scripts
omk --version
omk

Run without a global install:

npx --ignore-scripts open-multi-agent-kit

The published package name remains open-multi-agent-kit; the command is omk.

Quick Start

Start OMK in a project directory:

cd your-project
omk

Then:

  • Run /login to configure an OAuth subscription or API key.
  • Run /model to choose an available model.
  • Describe the change and the evidence required for completion.
  • Review tool calls, diffs, diagnostics, and test results before accepting the work.

OMK stores user configuration under ~/.omk/agent/ and project configuration under .omk/.

Optional document compiler

Install omk-book-to-skill to compile documents into reusable skills without adding Python extractors to OMK core:

omk install npm:omk-book-to-skill@0.96.2

It provides compile, update, and verification commands plus a local SHA-256 provenance manifest. See Book to Skill.

Providers & Models

OMK includes provider adapters for Anthropic, OpenAI Codex, Google, OpenCode, Kimi, Qwen, ZAI/GLM, native xAI/Grok, and other compatible services. Availability depends on the credentials and endpoints configured on the current machine.

  • /login adds or selects credentials.
  • /logout removes credentials for a selected provider.
  • /model lists models available to the current credential set.
  • NVIDIA NIM's z-ai/glm-5.2 entry transmits reasoning effort, including /think max.
  • Native xai accepts subscription OAuth from /login or XAI_API_KEY for API billing. Only OAuth exposes weekly SuperGrok usage/reset. See Grok harness.
  • The optional status rail shows independent provider quota windows when an official API or passive response signal is available.
  • Missing quota values are shown as unavailable rather than estimated.

OAuth credentials are stored locally in ~/.omk/agent/auth.json. Multi-account providers keep accounts separate and send requests only through the explicitly selected account.

Quota and billing-cycle errors are classified as rate limits and can switch to the first authenticated resilience candidate before retry. See Provider resilience.

See Provider setup for provider-specific authentication, quota behavior, and environment variables.

Kimi For Coding

Configure Kimi through /login or the documented Kimi API-key environment variable. Requests use the fixed provider endpoint selected by the provider adapter.

Hugging Face

Set the documented Hugging Face token and select a compatible model. See the provider guide for current model and endpoint requirements.

Interactive Mode

Type / in the editor to open command completion.

CommandDescription
/login, /logoutManage OAuth or API-key credentials
/modelSelect a model
/thinkSelect a thinking level
/settingsChange interactive settings
/resumeOpen a previous session
/newStart a new session
/sessionShow session path, messages, tokens, and cost
/goal [objective]Show or set the durable goal; supports checkpoint <json>, pause, resume, evidence-gated complete, and clear
/treeNavigate the current session tree
/compact [prompt]Compact context, optionally with custom instructions
/copyCopy the last assistant message
/export [file]Export the session
/reloadReload project and user resources
/hotkeysShow keyboard shortcuts
/starOpen the OMK GitHub repository
/quitExit OMK

Default Harness Safeguards

OMK warns from the third repeated identical tool call and blocks the sixth. It also repairs unmatched tool pairs before provider requests and adds guidance for supported Kimi, GLM, and Grok models. OMK_IDENTICAL_LOOP, OMK_TOOL_PAIR_REPAIR, and OMK_PROMPT_PRESET opt out; OMK_GOAL_CONTROLLER controls /goal and continuation.

See Usage and Keybindings for the complete interactive reference.

Sessions

Sessions are append-only JSONL transcripts stored under ~/.omk/agent/sessions/. OMK can resume, branch, export, and repair sessions without sending the transcript to a separate orchestration service.

Do not publish session files until you have reviewed them for source code, credentials, personal information, and private tool output.

Scripted Session Inspection

omk sdk session status --json
omk sdk session tail [id] --limit 20
omk sdk session inspect [id]
omk sdk session send <id> "message"

These commands inspect or append to stored transcripts. send does not wake or execute an agent.

Context Compaction

Automatic and manual compaction reduce older context while retaining recent conversation state. Cancellation restores queued user input without committing a partial summary.

See Compaction.

Configuration

Context Files

OMK discovers project instructions such as AGENTS.md from the current directory and parent directories. Use --no-context-files when a clean session must not load project context.

Prompt Caching

Provider prompt caching follows provider capabilities and configured retention. Cache metadata is local and bounded; provider-side retention remains subject to the provider's policy.

Environment Variables

Credential, network, model, and runtime variables are documented in Environment variables. Prefer the documented fixed provider endpoints for authenticated requests.

CLI Reference

omk [options] [prompt]
omk --help

Common modes:

omk                         # interactive TUI
omk -p "summarize changes"  # print mode
omk --mode json "task"      # structured event stream
omk --rpc                    # JSONL RPC mode

Other Options

Use omk --help for the authoritative option list for the installed version. Avoid copying options from an unreleased branch into automation.

RPC Mode

RPC mode reads JSON commands from standard input and emits JSON events to standard output. Use it when another process owns the UI or lifecycle.

See RPC.

SDK and Extensions

The TypeScript SDK exposes session creation, provider configuration, tools, event streams, durable-goal reducers, Goal/Core/Verified/Open/Next seam checkpoints, an explicit pass-gated advisory best-of-N judge, and policy helpers for compaction, retries, prompt budgets, cache transitions, and system-prompt assembly. Extensions can add commands, tools, UI components, themes, and resource loaders without patching OMK core.

omk-protocol provides the versioned TaskSpec -> ExecutionAttempt -> Observation -> EvaluationResult -> RuntimeDecision contracts and pure semantic reducers. See Run Protocol v1 for the implemented scope and migration boundaries.

OMK + AdaptOrch

OMK is a local, MIT-licensed coding agent. AdaptOrch is an optional hosted evidence service for reviewing AI-generated patches.

Review AdaptOrch plans →

AdaptOrch is a separate proprietary service. It is not bundled with OMK and requires its own account.

Security and Privacy

  • Tool access is explicit and can be scoped by path or runtime policy.
  • Default OS isolation covers AgentSession's built-in local bash only; it does not isolate other tools, extensions, custom code, or the OMK process.
  • Default tests scrub provider credentials; live provider tests require LIVE_E2E=1.
  • Subscription quota requests use fixed HTTPS provider origins.
  • Passive quota observers do not block model streams.
  • Logs and issue reports must not contain API keys, OAuth tokens, cookies, or full private transcripts.

Report vulnerabilities privately through the repository's GitHub security contact rather than a public issue.

Development

git clone https://github.com/dmae97/omk.git
cd omk
npm ci --ignore-scripts
npm run build
npm run check
npm test

See Development and CONTRIBUTING.md.

Release notes: v0.96.2.

License

MIT. See LICENSE.

Keywords

coding-agent

FAQs

Package last updated on 22 Aug 2026

Related posts