lazycodex-ai 4.16.0 → 4.16.1

package/packages/omo-codex/plugin/components/ulw-loop/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## [0.1.0] - unreleased
 
+- **Memory:** steering ledger entries no longer embed the full plan four times (`before`/`after` at both the audit and entry level). Accepted steers now record a compact `UlwLoopSteeringPlanSnapshot` (plan counters + only the goals the mutation touched), shrinking a measured real-world entry from 189KB to 7.8KB (~24x) and ending quadratic `ledger.jsonl` growth over long runs.
+- **Memory:** steering dedup (`--idempotency-key` / `promptSignature`) streams the ledger line-by-line with a substring pre-filter instead of `JSON.parse`-ing every entry into memory; dedup returns strip legacy full-plan `before`/`after` payloads from re-surfaced audits. `readSteeringLedgerEntries` streams too.
+- **Memory:** `withUlwLoopMutationLock` no longer retains the mutation result (full plan/audit) per `(repo, scope)` in its module-level lock map; settled gates self-evict, so long-lived embedders stop accumulating entries.
+- **Fix:** `omo ulw-loop steer --idempotency-key` was parsed but never forwarded into the proposal, so CLI steers never deduped. It is now wired through.
 - Standalone ultrawork injection (`--with-ultrawork`) now emits the same compact bootstrap pointer as the ultrawork component (opener mandate, `create_goal` with `objective` only, read the bundled `ultrawork` skill at a runtime-resolved absolute path), falling back to the full bundled directive when the plugin skills tree is absent. Keeps the injected payload below Codex App's hook-output truncation budget (code-yeongyu/oh-my-openagent#5828).
 - Initial scaffold of codex-ulw-loop plugin.
 - Per-Criterion Cycle: `EXECUTE` is now **EXECUTE-AS-SCENARIO** — the agent must run the Manual-QA channel scenario the criterion named (HTTP call / tmux / browser use / computer use; see new `## Manual-QA channels` section). Inserted a new **CLEAN (PAIRED, NEVER SKIP)** step that tears down every QA-spawned process / `tmux` session / browser context / container / port / temp dir before recording evidence; the cleanup receipt is embedded in the `--evidence` string. Missing receipt → record BLOCKED, not PASS. Added Constraint #13 and a Stop Rule for leftover state.

package/packages/omo-codex/plugin/components/ulw-loop/directive.md

@@ -49,9 +49,10 @@ exercises the surface; capture the artifact.
   1. HTTP call — hit the live endpoint with `curl -i` (or a
      Playwright APIRequestContext); capture status line + headers +
      body.
-  2. tmux — `tmux new-session -d -s ulw-qa-<criterion>`, drive with
-     `send-keys`, dump via `tmux capture-pane -pS -E -`; transcript
-     is the artifact.
+  2. Terminal / TUI - drive a real pty and prove it through the
+     xterm.js web terminal (see the TUI visual QA note below). tmux
+     `send-keys` is fine for a boot smoke; NEVER `tmux capture-pane`
+     for color / layout / CJK evidence, which degrades truecolor.
   3. Browser use — in Codex, use `browser:control-in-app-browser`
      first when available and no authenticated/persistent user browser
      profile is required. Otherwise use Chrome to drive the REAL page;
@@ -79,13 +80,13 @@ channel scenario when the behavior is user-facing. `--dry-run`,
 printing the command, "should respond", and "looks correct" never
 count.
 
-For TUI visual QA, terminal transcripts alone are not enough when a
-visual surface is being evaluated. In this repo, prefer
-`node script/qa/web-terminal-visual-qa.mjs --title "<surface>" --from-file <capture.txt> --evidence-dir <dir>`
-or the helper's `--command` tmux-backed PTY connector when available.
-Outside this repo, capture equivalent browser/computer-use rendered
-terminal evidence: screenshot, plain transcript, rendered HTML or action
-log, and cleanup receipt.
+For TUI visual QA, render the terminal through the real xterm.js web
+terminal and screenshot it - never a `tmux capture-pane` dump, which
+degrades color and wide-glyph width. In this repo:
+`node script/qa/web-terminal-visual-qa.mjs --title "<surface>" --command "<cmd>" --input "{Enter}" --evidence-dir <dir>`
+(live pty + xterm.js in Chrome; `--from-file <capture>` replays a raw
+stream). Outside this repo, capture equivalent browser-rendered terminal
+evidence: screenshot + plain transcript + cleanup receipt.
 
 # Bootstrap (DO ALL FOUR BEFORE ANY OTHER WORK — NO SKIPPING)
 
@@ -287,6 +288,13 @@ evidence for that step. Do not start dependent implementation until the
 audit, research, or review result is integrated or explicitly recorded
 as inconclusive. Do not generate a plan before spawned research lanes
 that feed the plan have returned or been closed as inconclusive.
+Spawn every independent child for the current wave first. After the wave
+is launched, run `multi_agent_v1.wait_agent` for each spawned child until
+each reaches terminal status (`completed`, `failed`, `blocked`, or
+explicitly recorded inconclusive) before any dependent `update_plan`
+transition, `create_goal` continuation, implementation tool call, plan
+drafting, approval-gate work, PR handoff, or final response. A timeout is
+not terminal status.
 Do not write the final answer, PR handoff, or completion summary while
 active child agents remain open. Use short `multi_agent_v1.wait_agent` cycles.
 After two silent waits send `TASK STILL ACTIVE: return <deliverable> or

package/packages/omo-codex/plugin/components/ulw-loop/dist/cli-commands.js

@@ -24,8 +24,8 @@ export async function ulwLoopCommand(argv) {
     const rest = argv.slice(1);
     const repoRoot = process.cwd();
     const json = hasFlag(rest, "--json");
-    const scope = commandScope(rest);
     try {
+        const scope = commandScope(rest);
         if (!isUlwLoopSubcommand(command)) {
             if (json) {
                 printJsonError(new UlwLoopError(`Unknown ulw-loop subcommand: ${command}.`, "ULW_LOOP_SUBCOMMAND_UNKNOWN", {
@@ -79,7 +79,20 @@ export async function ulwLoopCommand(argv) {
 function unhandledSubcommand(command) {
     throw new UlwLoopError(`Unhandled ulw-loop subcommand: ${String(command)}.`, "ULW_LOOP_SUBCOMMAND_UNHANDLED");
 }
+const SESSION_ID_FLAG = "--session-id";
+function sessionIdFlagPresent(argv) {
+    return hasFlag(argv, SESSION_ID_FLAG) || argv.some((arg) => arg.startsWith(`${SESSION_ID_FLAG}=`));
+}
 function commandScope(argv) {
-    const sessionId = readValue(argv, "--session-id") ?? resolveUlwLoopSessionIdFromEnv();
+    if (sessionIdFlagPresent(argv)) {
+        const sessionId = readValue(argv, SESSION_ID_FLAG)?.trim();
+        if (!sessionId) {
+            throw new UlwLoopError(`${SESSION_ID_FLAG} requires a non-empty value.`, "ULW_LOOP_SESSION_ID_REQUIRED", {
+                details: { flag: SESSION_ID_FLAG },
+            });
+        }
+        return { sessionId };
+    }
+    const sessionId = resolveUlwLoopSessionIdFromEnv();
     return sessionId === null ? undefined : { sessionId };
 }

package/packages/omo-codex/plugin/components/ulw-loop/dist/cli-steering.js

@@ -83,7 +83,8 @@ function neverKind(kind) { return fail(`Unsupported steering kind: ${String(kind
 export async function parseSteeringProposal(argv) {
     const kind = parseSteeringKind(argv);
     const source = parseSteeringSource(argv);
-    const base = { kind, source, evidence: required(argv, "--evidence"), rationale: required(argv, "--rationale") };
+    const idempotencyKey = text(readValue(argv, "--idempotency-key"), "--idempotency-key");
+    const base = { kind, source, evidence: required(argv, "--evidence"), rationale: required(argv, "--rationale"), ...(idempotencyKey === undefined ? {} : { idempotencyKey }) };
     switch (kind) {
         case "add_subgoal": return normalizeSteeringProposal({ ...base, title: required(argv, "--title"), objective: required(argv, "--objective") });
         case "split_subgoal": {

package/packages/omo-codex/plugin/components/ulw-loop/dist/cli.js

@@ -521,7 +521,9 @@ function formatCodexGoalReconciliation(reconciliation) {
 }
 
 // components/ulw-loop/src/plan-io.ts
+import { createReadStream } from "node:fs";
 import { appendFile, mkdir, readFile as readFile4, rename, writeFile } from "node:fs/promises";
+import { createInterface } from "node:readline";
 var LEGACY_OBJECTIVE_PREFIX = `Complete all ulw-loop stories in ${ULW_LOOP_DIR}/${ULW_LOOP_GOALS}: `;
 var LEGACY_OBJECTIVE = `Complete all ulw-loop stories listed in ${ULW_LOOP_DIR}/${ULW_LOOP_GOALS}. Use ${ULW_LOOP_DIR}/${ULW_LOOP_LEDGER} as the durable audit trail.`;
 var locks = new Map;
@@ -540,11 +542,18 @@ async function withUlwLoopMutationLock(repoRoot, scopeOrFn, maybeFn) {
   if (fn === undefined)
     throw new UlwLoopError("Missing ulw-loop mutation body.", "ULW_LOOP_LOCK_BODY_MISSING");
   const lockKey = `${repoRoot}\x00${ulwLoopRelativeDir(scope)}`;
-  const prior = locks.get(lockKey) ?? Promise.resolve();
+  const prior = locks.get(lockKey) ?? Promise.resolve(undefined);
   const run = prior.then(fn, fn);
-  locks.set(lockKey, run.catch(() => {
+  const gate = run.then(() => {
     return;
-  }));
+  }, () => {
+    return;
+  });
+  locks.set(lockKey, gate);
+  gate.then(() => {
+    if (locks.get(lockKey) === gate)
+      locks.delete(lockKey);
+  });
   return run;
 }
 async function readUlwLoopPlan(repoRoot, scope) {
@@ -591,22 +600,36 @@ async function appendLedger(repoRoot, entry, scope) {
   await appendFile(ulwLoopLedgerPath(repoRoot, scope), `${JSON.stringify(entry)}
 `, "utf8");
 }
-async function readSteeringLedgerEntries(repoRoot, scope) {
-  let raw;
+async function* ledgerLines(repoRoot, scope) {
+  const stream = createReadStream(ulwLoopLedgerPath(repoRoot, scope), { encoding: "utf8" });
+  const lines = createInterface({ input: stream, crlfDelay: Number.POSITIVE_INFINITY });
   try {
-    raw = await readFile4(ulwLoopLedgerPath(repoRoot, scope), "utf8");
+    for await (const line of lines) {
+      if (line.trim().length > 0)
+        yield line;
+    }
   } catch (error) {
-    if (hasCode(error, "ENOENT"))
-      return [];
-    throw error;
+    if (!hasCode(error, "ENOENT"))
+      throw error;
+  } finally {
+    lines.close();
+    stream.destroy();
   }
-  const entries = [];
-  for (const line of raw.split(/\r?\n/).filter(Boolean)) {
+}
+async function findAcceptedSteeringLedgerEntry(repoRoot, key, scope) {
+  const probe = JSON.stringify(key);
+  for await (const line of ledgerLines(repoRoot, scope)) {
+    if (!line.includes(probe))
+      continue;
     const entry = JSON.parse(line);
-    if (isSteeringKind(entry.kind))
-      entries.push(entry);
+    if (!isSteeringKind(entry.kind))
+      continue;
+    if (entry.steering?.invariant.accepted !== true)
+      continue;
+    if (entry.idempotencyKey === key || entry.steering.idempotencyKey === key || entry.steering.promptSignature === key)
+      return entry;
   }
-  return entries;
+  return;
 }
 
 // components/ulw-loop/src/evidence.ts
@@ -1254,7 +1277,8 @@ function neverKind(kind) {
 async function parseSteeringProposal(argv) {
   const kind = parseSteeringKind(argv);
   const source = parseSteeringSource(argv);
-  const base = { kind, source, evidence: required2(argv, "--evidence"), rationale: required2(argv, "--rationale") };
+  const idempotencyKey = text(readValue(argv, "--idempotency-key"), "--idempotency-key");
+  const base = { kind, source, evidence: required2(argv, "--evidence"), rationale: required2(argv, "--rationale"), ...idempotencyKey === undefined ? {} : { idempotencyKey } };
   switch (kind) {
     case "add_subgoal":
       return normalizeSteeringProposal({ ...base, title: required2(argv, "--title"), objective: required2(argv, "--objective") });
@@ -1725,6 +1749,30 @@ async function recordFinalReviewBlockers(repoRoot, args, scope) {
   });
 }
 
+// components/ulw-loop/src/steering-snapshot.ts
+function buildSteeringPlanSnapshot(plan, changedGoalIds) {
+  const snapshot = {
+    updatedAt: plan.updatedAt,
+    goalCount: plan.goals.length,
+    goalIds: plan.goals.map((goal) => goal.id),
+    goals: plan.goals.filter((goal) => changedGoalIds.has(goal.id))
+  };
+  return plan.activeGoalId === undefined ? snapshot : { ...snapshot, activeGoalId: plan.activeGoalId };
+}
+function changedGoalIdsBetween(before, after) {
+  const beforeById = new Map(before.goals.map((goal) => [goal.id, goal]));
+  const changed = new Set;
+  for (const goal of after.goals) {
+    const prior = beforeById.get(goal.id);
+    if (prior === undefined || JSON.stringify(prior) !== JSON.stringify(goal))
+      changed.add(goal.id);
+    beforeById.delete(goal.id);
+  }
+  for (const id of beforeById.keys())
+    changed.add(id);
+  return changed;
+}
+
 // components/ulw-loop/src/steering.ts
 var SOURCES2 = ["user_prompt_submit", "finding", "cli"];
 var PROTECTED = new Set(["aggregateCompletion", "codexObjective", "codexObjectiveAliases", "originalConstraints", "qualityGate", "status", "completedAt", "completionStatus"]);
@@ -1982,15 +2030,20 @@ async function steerUlwLoop(repoRoot, proposal, scope) {
   return withUlwLoopMutationLock(repoRoot, scope, async () => {
     const plan = await readUlwLoopPlan(repoRoot, scope);
     const key = proposal.idempotencyKey ?? proposal.promptSignature;
-    const prior = key === undefined ? undefined : (await readSteeringLedgerEntries(repoRoot, scope)).find((entry) => entry.steering?.invariant.accepted === true && (entry.idempotencyKey === key || entry.steering.idempotencyKey === key || entry.steering.promptSignature === key));
-    if (prior?.steering !== undefined)
-      return { plan, accepted: true, audit: { ...prior.steering, deduped: true }, rejectedReasons: [], deduped: true };
+    const prior = key === undefined ? undefined : await findAcceptedSteeringLedgerEntry(repoRoot, key, scope);
+    if (prior?.steering !== undefined) {
+      const { before: _before, after: _after, ...compactPrior } = prior.steering;
+      return { plan, accepted: true, audit: { ...compactPrior, deduped: true }, rejectedReasons: [], deduped: true };
+    }
     const audit = validateUlwLoopSteeringProposal(plan, proposal);
     const accepted = audit.invariant.accepted;
     const next = accepted ? applySteeringMutation(plan, proposal, audit) : plan;
-    const finalAudit = { ...audit, before: plan };
-    if (accepted)
-      finalAudit.after = next;
+    const finalAudit = { ...audit };
+    if (accepted) {
+      const changed = changedGoalIdsBetween(plan, next);
+      finalAudit.before = buildSteeringPlanSnapshot(plan, changed);
+      finalAudit.after = buildSteeringPlanSnapshot(next, changed);
+    }
     if (accepted)
       await writePlan(repoRoot, next, scope);
     await appendLedger(repoRoot, ledgerEntry(proposal, finalAudit, proposal.now?.toISOString() ?? iso()), scope);
@@ -2006,10 +2059,6 @@ function ledgerEntry(proposal, audit, at) {
     entry.criterionId = proposal.criterionId;
   if (proposal.idempotencyKey !== undefined)
     entry.idempotencyKey = proposal.idempotencyKey;
-  if (audit.before !== undefined)
-    entry.before = audit.before;
-  if (audit.after !== undefined)
-    entry.after = audit.after;
   return entry;
 }
 
@@ -2205,8 +2254,8 @@ async function ulwLoopCommand(argv) {
   const rest = argv.slice(1);
   const repoRoot = process.cwd();
   const json = hasFlag(rest, "--json");
-  const scope = commandScope(rest);
   try {
+    const scope = commandScope(rest);
     if (!isUlwLoopSubcommand(command)) {
       if (json) {
         printJsonError(new UlwLoopError(`Unknown ulw-loop subcommand: ${command}.`, "ULW_LOOP_SUBCOMMAND_UNKNOWN", {
@@ -2264,8 +2313,21 @@ async function ulwLoopCommand(argv) {
 function unhandledSubcommand(command) {
   throw new UlwLoopError(`Unhandled ulw-loop subcommand: ${String(command)}.`, "ULW_LOOP_SUBCOMMAND_UNHANDLED");
 }
+var SESSION_ID_FLAG = "--session-id";
+function sessionIdFlagPresent(argv) {
+  return hasFlag(argv, SESSION_ID_FLAG) || argv.some((arg) => arg.startsWith(`${SESSION_ID_FLAG}=`));
+}
 function commandScope(argv) {
-  const sessionId = readValue(argv, "--session-id") ?? resolveUlwLoopSessionIdFromEnv();
+  if (sessionIdFlagPresent(argv)) {
+    const sessionId2 = readValue(argv, SESSION_ID_FLAG)?.trim();
+    if (!sessionId2) {
+      throw new UlwLoopError(`${SESSION_ID_FLAG} requires a non-empty value.`, "ULW_LOOP_SESSION_ID_REQUIRED", {
+        details: { flag: SESSION_ID_FLAG }
+      });
+    }
+    return { sessionId: sessionId2 };
+  }
+  const sessionId = resolveUlwLoopSessionIdFromEnv();
   return sessionId === null ? undefined : { sessionId };
 }
 

package/packages/omo-codex/plugin/components/ulw-loop/dist/plan-io.d.ts

@@ -6,3 +6,9 @@ export declare function readUlwLoopPlan(repoRoot: string, scope?: UlwLoopScope):
 export declare function writePlan(repoRoot: string, plan: UlwLoopPlan, scope?: UlwLoopScope): Promise<void>;
 export declare function appendLedger(repoRoot: string, entry: UlwLoopLedgerEntry, scope?: UlwLoopScope): Promise<void>;
 export declare function readSteeringLedgerEntries(repoRoot: string, scope?: UlwLoopScope): Promise<UlwLoopLedgerEntry[]>;
+/**
+ * First accepted steering entry matching an idempotency key/prompt signature.
+ * A cheap substring probe on the raw line skips JSON.parse for the vast
+ * majority of entries, so dedup stays flat even on legacy multi-MB ledgers.
+ */
+export declare function findAcceptedSteeringLedgerEntry(repoRoot: string, key: string, scope?: UlwLoopScope): Promise<UlwLoopLedgerEntry | undefined>;

package/packages/omo-codex/plugin/components/ulw-loop/dist/plan-io.js

@@ -1,4 +1,6 @@
+import { createReadStream } from "node:fs";
 import { appendFile, mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { createInterface } from "node:readline";
 import { aggregateCodexObjectiveForScope } from "./goal-status.js";
 import { repoRelative, ulwLoopDir, ulwLoopGoalsPath, ulwLoopLedgerPath, ulwLoopRelativeDir, } from "./paths.js";
 import { iso, ULW_LOOP_DIR, ULW_LOOP_GOALS, ULW_LOOP_LEDGER, UlwLoopError } from "./types.js";
@@ -20,9 +22,17 @@ export async function withUlwLoopMutationLock(repoRoot, scopeOrFn, maybeFn) {
     if (fn === undefined)
         throw new UlwLoopError("Missing ulw-loop mutation body.", "ULW_LOOP_LOCK_BODY_MISSING");
     const lockKey = `${repoRoot}\0${ulwLoopRelativeDir(scope)}`;
-    const prior = locks.get(lockKey) ?? Promise.resolve();
+    const prior = locks.get(lockKey) ?? Promise.resolve(undefined);
     const run = prior.then(fn, fn);
-    locks.set(lockKey, run.catch(() => undefined));
+    // The stored gate resolves to undefined so the map never retains fn's result
+    // (plans/audits), and it removes itself once no newer waiter replaced it —
+    // otherwise a long-lived host leaks one entry per (repo, scope) forever.
+    const gate = run.then(() => undefined, () => undefined);
+    locks.set(lockKey, gate);
+    void gate.then(() => {
+        if (locks.get(lockKey) === gate)
+            locks.delete(lockKey);
+    });
     return run;
 }
 export async function readUlwLoopPlan(repoRoot, scope) {
@@ -69,21 +79,57 @@ export async function appendLedger(repoRoot, entry, scope) {
     await mkdir(ulwLoopDir(repoRoot, scope), { recursive: true });
     await appendFile(ulwLoopLedgerPath(repoRoot, scope), `${JSON.stringify(entry)}\n`, "utf8");
 }
-export async function readSteeringLedgerEntries(repoRoot, scope) {
-    let raw;
+/**
+ * Streams raw ledger lines without materializing the file. Real ledgers reach
+ * many MB (legacy entries embedded full-plan snapshots), so `readFile` here
+ * ballooned every steer/dedup path; line-at-a-time keeps memory O(longest line).
+ */
+async function* ledgerLines(repoRoot, scope) {
+    const stream = createReadStream(ulwLoopLedgerPath(repoRoot, scope), { encoding: "utf8" });
+    const lines = createInterface({ input: stream, crlfDelay: Number.POSITIVE_INFINITY });
     try {
-        raw = await readFile(ulwLoopLedgerPath(repoRoot, scope), "utf8");
+        for await (const line of lines) {
+            if (line.trim().length > 0)
+                yield line;
+        }
     }
     catch (error) {
-        if (hasCode(error, "ENOENT"))
-            return [];
-        throw error;
+        if (!hasCode(error, "ENOENT"))
+            throw error;
+    }
+    finally {
+        lines.close();
+        stream.destroy();
     }
+}
+export async function readSteeringLedgerEntries(repoRoot, scope) {
     const entries = [];
-    for (const line of raw.split(/\r?\n/).filter(Boolean)) {
+    for await (const line of ledgerLines(repoRoot, scope)) {
         const entry = JSON.parse(line);
         if (isSteeringKind(entry.kind))
             entries.push(entry);
     }
     return entries;
 }
+/**
+ * First accepted steering entry matching an idempotency key/prompt signature.
+ * A cheap substring probe on the raw line skips JSON.parse for the vast
+ * majority of entries, so dedup stays flat even on legacy multi-MB ledgers.
+ */
+export async function findAcceptedSteeringLedgerEntry(repoRoot, key, scope) {
+    const probe = JSON.stringify(key);
+    for await (const line of ledgerLines(repoRoot, scope)) {
+        if (!line.includes(probe))
+            continue;
+        const entry = JSON.parse(line);
+        if (!isSteeringKind(entry.kind))
+            continue;
+        if (entry.steering?.invariant.accepted !== true)
+            continue;
+        if (entry.idempotencyKey === key ||
+            entry.steering.idempotencyKey === key ||
+            entry.steering.promptSignature === key)
+            return entry;
+    }
+    return undefined;
+}

package/packages/omo-codex/plugin/components/ulw-loop/dist/steering-snapshot.d.ts

@@ -0,0 +1,15 @@
+import type { UlwLoopPlan } from "./domain-types.js";
+import type { UlwLoopSteeringPlanSnapshot } from "./steering-types.js";
+/**
+ * Compact before/after snapshots for steering ledger entries.
+ *
+ * Ledger entries used to embed the FULL plan (every goal, criterion, and
+ * evidence string) twice per audit and twice more at the entry top level.
+ * That made each accepted steer O(plan size) on disk, so the ledger grew
+ * quadratically over a run, and every dedup scan re-hydrated all of it into
+ * memory. A snapshot instead records plan-level counters plus only the goals
+ * the mutation actually touched, keeping each entry O(changed goals).
+ */
+export declare function buildSteeringPlanSnapshot(plan: UlwLoopPlan, changedGoalIds: ReadonlySet<string>): UlwLoopSteeringPlanSnapshot;
+/** Ids of goals that differ between two plans, including added or removed goals. */
+export declare function changedGoalIdsBetween(before: UlwLoopPlan, after: UlwLoopPlan): Set<string>;

package/packages/omo-codex/plugin/components/ulw-loop/dist/steering-snapshot.js

@@ -0,0 +1,33 @@
+/**
+ * Compact before/after snapshots for steering ledger entries.
+ *
+ * Ledger entries used to embed the FULL plan (every goal, criterion, and
+ * evidence string) twice per audit and twice more at the entry top level.
+ * That made each accepted steer O(plan size) on disk, so the ledger grew
+ * quadratically over a run, and every dedup scan re-hydrated all of it into
+ * memory. A snapshot instead records plan-level counters plus only the goals
+ * the mutation actually touched, keeping each entry O(changed goals).
+ */
+export function buildSteeringPlanSnapshot(plan, changedGoalIds) {
+    const snapshot = {
+        updatedAt: plan.updatedAt,
+        goalCount: plan.goals.length,
+        goalIds: plan.goals.map((goal) => goal.id),
+        goals: plan.goals.filter((goal) => changedGoalIds.has(goal.id)),
+    };
+    return plan.activeGoalId === undefined ? snapshot : { ...snapshot, activeGoalId: plan.activeGoalId };
+}
+/** Ids of goals that differ between two plans, including added or removed goals. */
+export function changedGoalIdsBetween(before, after) {
+    const beforeById = new Map(before.goals.map((goal) => [goal.id, goal]));
+    const changed = new Set();
+    for (const goal of after.goals) {
+        const prior = beforeById.get(goal.id);
+        if (prior === undefined || JSON.stringify(prior) !== JSON.stringify(goal))
+            changed.add(goal.id);
+        beforeById.delete(goal.id);
+    }
+    for (const id of beforeById.keys())
+        changed.add(id);
+    return changed;
+}

package/packages/omo-codex/plugin/components/ulw-loop/dist/steering-types.d.ts

@@ -1,5 +1,5 @@
 import type { UlwLoopSteeringMutationKind, UlwLoopSteeringSource } from "./constants.js";
-import type { UlwLoopPlan } from "./domain-types.js";
+import type { UlwLoopItem, UlwLoopPlan } from "./domain-types.js";
 export interface UlwLoopSteeringInvariantResult {
     accepted: boolean;
     structuralInvariantAccepted: boolean;
@@ -39,13 +39,20 @@ export interface UlwLoopSteeringProposal {
     idempotencyKey?: string;
     now?: Date;
 }
+export interface UlwLoopSteeringPlanSnapshot {
+    readonly updatedAt: string;
+    readonly activeGoalId?: string;
+    readonly goalCount: number;
+    readonly goalIds: readonly string[];
+    readonly goals: readonly UlwLoopItem[];
+}
 export interface UlwLoopSteeringAudit {
     kind: UlwLoopSteeringMutationKind;
     source: UlwLoopSteeringSource;
     targetGoalIds: string[];
     criterionId?: string;
-    before?: unknown;
-    after?: unknown;
+    before?: UlwLoopSteeringPlanSnapshot;
+    after?: UlwLoopSteeringPlanSnapshot;
     evidence: string;
     rationale: string;
     invariant: UlwLoopSteeringInvariantResult;

package/packages/omo-codex/plugin/components/ulw-loop/dist/steering.js

@@ -1,7 +1,8 @@
 // biome-ignore-all format: compact steering module must stay below the 240 pure-LOC budget
 import { isUlwLoopDone } from "./goal-status.js";
 import { seedDefaultSuccessCriteria } from "./plan-crud.js";
-import { appendLedger, readSteeringLedgerEntries, readUlwLoopPlan, withUlwLoopMutationLock, writePlan } from "./plan-io.js";
+import { appendLedger, findAcceptedSteeringLedgerEntry, readUlwLoopPlan, withUlwLoopMutationLock, writePlan } from "./plan-io.js";
+import { buildSteeringPlanSnapshot, changedGoalIdsBetween } from "./steering-snapshot.js";
 import { iso, ULW_LOOP_STEERING_MUTATION_KINDS, ULW_LOOP_SUCCESS_CRITERION_USER_MODELS } from "./types.js";
 const SOURCES = ["user_prompt_submit", "finding", "cli"];
 const PROTECTED = new Set(["aggregateCompletion", "codexObjective", "codexObjectiveAliases", "originalConstraints", "qualityGate", "status", "completedAt", "completionStatus"]);
@@ -260,15 +261,22 @@ export async function steerUlwLoop(repoRoot, proposal, scope) {
     return withUlwLoopMutationLock(repoRoot, scope, async () => {
         const plan = await readUlwLoopPlan(repoRoot, scope);
         const key = proposal.idempotencyKey ?? proposal.promptSignature;
-        const prior = key === undefined ? undefined : (await readSteeringLedgerEntries(repoRoot, scope)).find((entry) => entry.steering?.invariant.accepted === true && (entry.idempotencyKey === key || entry.steering.idempotencyKey === key || entry.steering.promptSignature === key));
-        if (prior?.steering !== undefined)
-            return { plan, accepted: true, audit: { ...prior.steering, deduped: true }, rejectedReasons: [], deduped: true };
+        const prior = key === undefined ? undefined : await findAcceptedSteeringLedgerEntry(repoRoot, key, scope);
+        if (prior?.steering !== undefined) {
+            // Legacy entries embedded full-plan before/after snapshots; never
+            // re-surface those multi-MB payloads on the dedup path.
+            const { before: _before, after: _after, ...compactPrior } = prior.steering;
+            return { plan, accepted: true, audit: { ...compactPrior, deduped: true }, rejectedReasons: [], deduped: true };
+        }
         const audit = validateUlwLoopSteeringProposal(plan, proposal);
         const accepted = audit.invariant.accepted;
         const next = accepted ? applySteeringMutation(plan, proposal, audit) : plan;
-        const finalAudit = { ...audit, before: plan };
-        if (accepted)
-            finalAudit.after = next;
+        const finalAudit = { ...audit };
+        if (accepted) {
+            const changed = changedGoalIdsBetween(plan, next);
+            finalAudit.before = buildSteeringPlanSnapshot(plan, changed);
+            finalAudit.after = buildSteeringPlanSnapshot(next, changed);
+        }
         if (accepted)
             await writePlan(repoRoot, next, scope);
         await appendLedger(repoRoot, ledgerEntry(proposal, finalAudit, proposal.now?.toISOString() ?? iso()), scope);
@@ -284,9 +292,5 @@ function ledgerEntry(proposal, audit, at) {
         entry.criterionId = proposal.criterionId;
     if (proposal.idempotencyKey !== undefined)
         entry.idempotencyKey = proposal.idempotencyKey;
-    if (audit.before !== undefined)
-        entry.before = audit.before;
-    if (audit.after !== undefined)
-        entry.after = audit.after;
     return entry;
 }

package/packages/omo-codex/plugin/components/ulw-loop/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook user-prompt-submit --with-ultrawork",
 						"timeout": 10,
-						"statusMessage": "(OmO) Checking Ulw-Loop Steering"
+						"statusMessage": "(OmO 4.16.1) Checking Ulw-Loop Steering"
 					}
 				]
 			}
@@ -20,7 +20,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook pre-tool-use",
 						"timeout": 5,
-						"statusMessage": "(OmO) Enforcing Unlimited Ulw-Loop Budget"
+						"statusMessage": "(OmO 4.16.1) Enforcing Unlimited Ulw-Loop Budget"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/ulw-loop/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-ulw-loop",
-	"version": "4.16.0",
+	"version": "4.16.1",
 	"description": "Codex plugin: durable repo-native multi-goal orchestration with embedded success criteria and observable evidence audit.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/ulw-loop/skills/ulw-loop/SKILL.md

@@ -22,7 +22,7 @@ This skill is intentionally compact. The full workflow lives in `references/full
 - Use the ulw-loop CLI state under `.omo/ulw-loop`; do not hand-edit goal state.
 - After any compaction or context loss, re-read brief + goals + ledger FIRST plus `omo ulw-loop status --json`, then resume; never re-plan from scratch.
 - If `omo ulw-loop create-goals` says the existing aggregate is already complete, start unrelated new work with a fresh `--session-id <new-id>` instead of steering or forcing the completed default state. Use `--force` only to intentionally overwrite completed evidence.
-- Every success criterion needs observable evidence from a real surface: a channel (tmux, HTTP, browser, computer-use) or, for CLI- or data-shaped criteria, an auxiliary surface (CLI stdout, DB diff, parsed config dump).
+- Every success criterion needs observable evidence from a real surface: a channel (terminal/TUI via the xterm.js web terminal, HTTP, browser, computer-use) or, for CLI- or data-shaped criteria, an auxiliary surface (CLI stdout, DB diff, parsed config dump).
 - Record evidence through the CLI only after cleanup receipts are available.
 - Delegate code edits, test writes, fixes, and QA execution to right-sized Codex subagents when the workflow requires it.
 - Every `multi_agent_v1.spawn_agent` message starts with `TASK:`, then names `DELIVERABLE`, `SCOPE`, and `VERIFY`; put role and specialty instructions inside `message`; use `fork_context: false` unless full history is truly required.

package/packages/omo-codex/plugin/components/ulw-loop/skills/ulw-loop/references/full-workflow.md

@@ -19,16 +19,16 @@ Audit each pass, fail, block, steering change, and checkpoint in `.omo/ulw-loop/
 Run each criterion's real-surface proof yourself through the channel that faithfully exercises it; capture the artifact before recording PASS.
 
 1. **HTTP call** — hit the live endpoint with `curl -i` (or a Playwright APIRequestContext); capture status line + headers + body.
-2. **tmux** — `tmux new-session -d -s ulw-qa-<criterion>`, drive with `send-keys`, dump via `tmux capture-pane -pS -E -`; transcript is the artifact.
+2. **Terminal / TUI** - prove it through the xterm.js web terminal; tmux `send-keys` is fine for a boot smoke, but NEVER `tmux capture-pane` for color/layout/CJK evidence (it degrades truecolor).
 3. **Browser use** — in Codex, use `browser:control-in-app-browser` first when available and the scenario does not need an authenticated or persistent user browser profile. Otherwise use Chrome to drive the REAL page; if unavailable, use agent-browser. Capture action log + screenshot path. Never downgrade a browser-facing criterion.
 4. **Computer use** — for desktop/GUI apps, drive the running app via OS automation (computer-use, AppleScript, xdotool, etc.); capture action log + screenshot.
 
-For TUI visual QA, pair the tmux transcript with a browser-rendered terminal
-screenshot. In this repo run `node script/qa/web-terminal-visual-qa.mjs
---from-file <capture.txt> --evidence-dir <dir>` and record `terminal.png`,
-`terminal.html`, `terminal.txt`, and `metadata.json` as the visual evidence
-bundle. This is mandatory when a PR or review needs to inspect the terminal
-screen, not just the text.
+For TUI visual QA, render the terminal through the real xterm.js web terminal and
+screenshot it - NEVER a `tmux capture-pane` dump (it degrades color and wide-glyph
+width). In this repo run `node script/qa/web-terminal-visual-qa.mjs --command
+"<cmd>" --input "{Enter}" --evidence-dir <dir>` (live pty + xterm.js in Chrome;
+`--from-file` replays a raw stream) and record `terminal.png`, `terminal.txt`, and
+`metadata.json`. Mandatory when a PR or review must inspect the terminal screen.
 
 Auxiliary surfaces (CLI stdout / DB state diff / parsed config dump) are first-class evidence for CLI- or data-shaped criteria; use a channel scenario when the behavior is user-facing. `--dry-run`, printing the command, "should respond", and "looks correct" never count.
 

package/packages/omo-codex/plugin/components/ulw-loop/src/cli-commands.ts

@@ -39,8 +39,8 @@ export async function ulwLoopCommand(argv: readonly string[]): Promise<number> {
 	const rest = argv.slice(1);
 	const repoRoot = process.cwd();
 	const json = hasFlag(rest, "--json");
-	const scope = commandScope(rest);
 	try {
+		const scope = commandScope(rest);
 		if (!isUlwLoopSubcommand(command)) {
 			if (json) {
 				printJsonError(
@@ -94,7 +94,22 @@ function unhandledSubcommand(command: never): never {
 	throw new UlwLoopError(`Unhandled ulw-loop subcommand: ${String(command)}.`, "ULW_LOOP_SUBCOMMAND_UNHANDLED");
 }
 
+const SESSION_ID_FLAG = "--session-id";
+
+function sessionIdFlagPresent(argv: readonly string[]): boolean {
+	return hasFlag(argv, SESSION_ID_FLAG) || argv.some((arg) => arg.startsWith(`${SESSION_ID_FLAG}=`));
+}
+
 function commandScope(argv: readonly string[]): UlwLoopScope | undefined {
-	const sessionId = readValue(argv, "--session-id") ?? resolveUlwLoopSessionIdFromEnv();
+	if (sessionIdFlagPresent(argv)) {
+		const sessionId = readValue(argv, SESSION_ID_FLAG)?.trim();
+		if (!sessionId) {
+			throw new UlwLoopError(`${SESSION_ID_FLAG} requires a non-empty value.`, "ULW_LOOP_SESSION_ID_REQUIRED", {
+				details: { flag: SESSION_ID_FLAG },
+			});
+		}
+		return { sessionId };
+	}
+	const sessionId = resolveUlwLoopSessionIdFromEnv();
 	return sessionId === null ? undefined : { sessionId };
 }