newOS4 Program Specs v4.5.96 SHIPPED

Last updated: 2026-07-05 · 45 modules · 40 skills · 3 system agents

1. System Overview

newOS4 is a modular agent operating system with a VFS, pluggable modules, and an AI-driven terminal. v4.5.96 is the latest shipping release after 2 bug-fix sessions.

• Modules: 45 (12 core, 33 ext)
• Skills: 40
• System agents: 3 (immutable)
• Health: ✅ OK

2. Architecture

Layer 0 — Kernel

• VFS, Module loader, Event bus, Permissions

Layer 1 — Core AI

• AIModule, ContextModule, AgentLoop, MemoryGraph, WorldModel

Layer 2 — Domain

• Terminal, ShellModule, Orchestrator, Hyperliquid/VaultMind, FS, Cron, etc.

Layer 3 — UI / Ext

• Browser, Mindmap, WPM, Sandbox, Floating, WebDAV

3. ShellModule NEW v4.5.96

Layer-2 module exposing built-in shell commands to the terminal.

Commands

• cd, pwd, ls, cat, echo, mkdir, rm
• env, export, unset
• grep, wc, head, tail

Pipes & Redirects

• cmd1 | cmd2 — pipe output
• cmd > file — overwrite
• cmd >> file — append

Security Gate (v4.5.96)

Destructive commands (rm, redirects) MUST pass canExecute() gate. Patches assert enforcement at boot, not just API definition.

4. OrchestratorModule 8 fixes v4.5.96

Manages agent lifecycle, task delegation, and worker spawn.

v4.5.96 Fixes

• ✅ F1 spawnAgent() leak — process handle now tracked + cleaned
• ✅ F2 delegate() retry loop infinite
• ✅ F3 Worker death not detected
• ✅ F4 Task queue priority inversion
• ✅ F5 State corruption on concurrent register
• ✅ F6 Lease acquire race
• ✅ F7 Stale agent metadata cache
• ✅ F8 killAgent() bypassed on system agents

5. Cross-Cutting Rules (R1–R7)

Extracted from v4.5.96 bug fixes. All module authors MUST follow.

R1 — Lifecycle: registerModule() calls init()

All timers, intervals, and event listeners MUST be registered in init() and stored for cleanup. No orphan timers.

R2 — Error visibility

this.print writes to AI context. this.terminal.print writes to user only. Use AI-visible for errors that affect reasoning.

R3 — Cleanup via try/finally

All monkey-patches, depth counters, and global state mutations MUST use try/finally to guarantee rollback.

R4 — Security patches ASSERT enforcement

A security patch that defines an API but doesn't assert it's enforced is a vulnerability. Boot-time self-test required.

R5 — System agents are immutable

The 3 system agents (coder, researcher, reviewer) cannot be killed, purged, or modified. killAgent() checks isSystemAgent flag.

R6 — Compute state at use site

Don't cache module state at boot. Compute on demand. Stale-cache bugs were 30% of v4.5.96 fixes.

R7 — Parser dedup: extract once

Helpers like extractRedirect() must be called exactly once per command parse. Double-extraction is a P0-class bug.

6. Module Catalog

Tier 1 — Core AI (12 modules)

Tier 2 — Domain (15 modules)

Tier 3 — UI/Ext (18 modules)

Browser, Mindmap, WPM, Floating, WebDAV, GraphVisualizer, ChatUI, Settings, Theme, Notification, Backup, Health, Telemetry, Plugin, Marketplace, Migration, Diagnostic, Help.

7. Bug Status

All 18 v4.5.96 bugs ✅ fixed. Browser-verified 2026-07-05.

8. Open Issues

v4.5.96 SHIPPED · 2026-07-05 · Browser-verified · Reviewer: kimi-k2.7-coder