oh-my-codex 0.18.13 → 0.18.15

package/src/scripts/run-compiled-ci.ts

@@ -0,0 +1,85 @@
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+
+const SOURCE_CHECKOUT_SENTINELS = [
+  "src/catalog/manifest.json",
+  "docs/troubleshooting.md",
+  ".github/workflows/ci.yml",
+] as const;
+
+const INSTALLED_PACKAGE_TEST_FILES = [
+  "dist/scripts/__tests__/smoke-packed-install.test.js",
+  "dist/cli/__tests__/nested-help-routing.test.js",
+  "dist/cli/__tests__/mcp-parity.test.js",
+] as const;
+
+const INSTALLED_PACKAGE_CLI_SMOKE_COMMANDS = [
+  ["--help"],
+  ["version"],
+  ["api", "--help"],
+  ["sparkshell", "--help"],
+  ["notepad", "--help"],
+  ["project-memory", "--help"],
+  ["trace", "--help"],
+  ["code-intel", "--help"],
+] as const;
+
+function npmBin(): string {
+  return process.platform === "win32" ? "npm.cmd" : "npm";
+}
+
+function run(command: string, args: readonly string[]): void {
+  const result = spawnSync(command, [...args], {
+    cwd: process.cwd(),
+    env: {
+      ...process.env,
+      OMX_AUTO_UPDATE: "0",
+      OMX_NOTIFY_FALLBACK: "0",
+      OMX_HOOK_DERIVED_SIGNALS: "0",
+    },
+    stdio: "inherit",
+  });
+  if (result.error) {
+    throw result.error;
+  }
+  if (result.status !== 0) {
+    throw new Error(`Command failed: ${command} ${args.join(" ")}`);
+  }
+}
+
+function isSourceCheckout(): boolean {
+  return SOURCE_CHECKOUT_SENTINELS.every((sentinel) =>
+    existsSync(join(process.cwd(), sentinel)),
+  );
+}
+
+function runSourceCheckoutGate(): void {
+  run(npmBin(), ["run", "verify:native-agents"]);
+  run(npmBin(), ["run", "verify:plugin-bundle"]);
+  run(npmBin(), ["run", "test:node"]);
+  run(process.execPath, ["dist/scripts/generate-catalog-docs.js", "--check"]);
+}
+
+function runInstalledPackageGate(): void {
+  run(npmBin(), ["run", "verify:native-agents"]);
+  run(npmBin(), ["run", "verify:plugin-bundle"]);
+  run(process.execPath, [
+    "dist/scripts/run-test-files.js",
+    ...INSTALLED_PACKAGE_TEST_FILES,
+  ]);
+  for (const argv of INSTALLED_PACKAGE_CLI_SMOKE_COMMANDS) {
+    run(process.execPath, ["dist/cli/omx.js", ...argv]);
+  }
+}
+
+try {
+  if (isSourceCheckout()) {
+    runSourceCheckoutGate();
+  } else {
+    runInstalledPackageGate();
+  }
+} catch (error) {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exit(1);
+}

package/src/scripts/sync-plugin-mirror.ts

@@ -59,6 +59,7 @@ const SETUP_OWNED_PLUGIN_MANIFEST_FIELDS = [
 ] as const;
 const OMX_PLUGIN_HOOK_COMMAND =
 	'node "${PLUGIN_ROOT}/hooks/codex-native-hook.mjs"';
+// The launcher itself must not shell-wrap node.exe on Windows; see GH #2858.
 const OMX_PLUGIN_HOOK_LAUNCHER_CONTRACT_MARKER =
 	"omx-plugin-hook-launcher:v1";
 // Plugin-scoped Codex hooks intentionally mirror the setup-managed lifecycle

package/templates/AGENTS.md

@@ -157,6 +157,12 @@ When to use what:
 - Use normal Codex repository inspection tools/subagents for repository lookup and implementation context.
 - Use `omx sparkshell --tmux-pane` only as an explicit opt-in operator aid for shell-native tmux evidence or bounded verification; it does not replace raw evidence capture.
 
+Supervisor tmux handoff safety:
+- Never paste from tmux's implicit/current buffer. Load handoff text into a fresh named buffer with `tmux set-buffer -b <name> -- "$message"` or a temp-file-backed `tmux load-buffer -b <name> <file>`; never use `tmux load-buffer -- <message>`.
+- Verify the named buffer with `tmux show-buffer -b <name>` before any paste. A failed load or mismatched buffer is a blocker; do not run `paste-buffer` or submit keys after it.
+- Clear the pane composer with `tmux send-keys -t <pane> C-u` immediately before paste, then use bracketed paste (`tmux paste-buffer -t <pane> -b <name> -p -d`) and submit intentionally.
+- Recapture the pane after paste/Enter and verify the intended turn was accepted rather than leaving stale draft text visible.
+
 Leader vs worker: leaders choose mode, delegate bounded work, integrate, and own verification; workers execute their slice and escalate blockers, scope expansion, shared-file conflicts, or mode mismatch upward. Escalate from worker to leader for blockers, scope expansion, shared ownership conflicts, or mode mismatch.
 
 Stop / escalate: stop when the task is verified complete, the user says stop/cancel, or no meaningful recovery path remains. Escalate to the user only for irreversible, destructive, materially branching decisions, or missing authority.