oh-my-openagent 4.17.1 → 4.18.0

package/.agents/skills/codex-qa/SKILL.md

@@ -69,6 +69,8 @@ Windows.
 | `scripts/hook-unit-probe.sh` | the `ultrawork` component injects `<ultrawork-mode>` on an `ulw` UserPromptSubmit (also a manual `--component/--event` mode) |
 | `scripts/tui-smoke.sh` | the real codex TUI boots in the isolated home, renders, and survives (no early exit); captures the pane |
 
+To tell a dev dogfood build apart from a published one on a REAL `~/.codex` (NOT the isolated QA home), the repo ships `bun run install:codex-dev`, which stamps the plugin version as `dev` — visible as the `(OmO dev)` hook-status prefix every turn and as a `[DEV]` badge in `omo get-local-version`. Use it to confirm which build is loaded during manual dogfooding; it writes to the real home, so it is NEVER part of the isolated QA flow above.
+
 When TUI visual QA evidence is needed, follow
 `docs/reference/web-terminal-visual-qa.md`: render the TUI through the real
 xterm.js web terminal - NEVER the `tmux capture-pane` frame, which degrades

package/dist/cli/get-local-version/types.d.ts

@@ -5,7 +5,7 @@ export interface VersionInfo {
     isLocalDev: boolean;
     isPinned: boolean;
     pinnedVersion: string | null;
-    status: "up-to-date" | "outdated" | "local-dev" | "pinned" | "pinned-mismatch" | "error" | "unknown";
+    status: "up-to-date" | "outdated" | "local-dev" | "dev" | "pinned" | "pinned-mismatch" | "error" | "unknown";
 }
 export interface GetLocalVersionOptions {
     directory?: string;

package/dist/cli/index.js

@@ -2145,7 +2145,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "oh-my-opencode",
-    version: "4.17.1",
+    version: "4.18.0",
     description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -2252,6 +2252,7 @@ var init_package = __esm(() => {
       build: "bun run script/build.ts",
       "build:cli-node": "bun run script/build-cli-node.ts",
       "build:codex-install": "bun run script/build-codex-install.ts",
+      "install:codex-dev": "bun run script/build-codex-install.ts && bun run script/install-codex-dev.ts",
       "build:codex-plugin": "npm --prefix packages/omo-codex/plugin ci && bun run --cwd packages/omo-codex/plugin build",
       "build:senpi-plugin": "node packages/omo-senpi/plugin/scripts/build-extension.mjs && node packages/omo-senpi/plugin/scripts/sync-skills.mjs && node packages/omo-senpi/plugin/scripts/embed-directive.mjs --check",
       "build:materialize-frontend": "node packages/omo-codex/plugin/scripts/materialize-shared-upstreams.mjs --strict",
@@ -2356,18 +2357,18 @@ var init_package = __esm(() => {
       typescript: "^6.0.3"
     },
     optionalDependencies: {
-      "oh-my-opencode-darwin-arm64": "4.17.1",
-      "oh-my-opencode-darwin-x64": "4.17.1",
-      "oh-my-opencode-darwin-x64-baseline": "4.17.1",
-      "oh-my-opencode-linux-arm64": "4.17.1",
-      "oh-my-opencode-linux-arm64-musl": "4.17.1",
-      "oh-my-opencode-linux-x64": "4.17.1",
-      "oh-my-opencode-linux-x64-baseline": "4.17.1",
-      "oh-my-opencode-linux-x64-musl": "4.17.1",
-      "oh-my-opencode-linux-x64-musl-baseline": "4.17.1",
-      "oh-my-opencode-windows-arm64": "4.17.1",
-      "oh-my-opencode-windows-x64": "4.17.1",
-      "oh-my-opencode-windows-x64-baseline": "4.17.1"
+      "oh-my-opencode-darwin-arm64": "4.18.0",
+      "oh-my-opencode-darwin-x64": "4.18.0",
+      "oh-my-opencode-darwin-x64-baseline": "4.18.0",
+      "oh-my-opencode-linux-arm64": "4.18.0",
+      "oh-my-opencode-linux-arm64-musl": "4.18.0",
+      "oh-my-opencode-linux-x64": "4.18.0",
+      "oh-my-opencode-linux-x64-baseline": "4.18.0",
+      "oh-my-opencode-linux-x64-musl": "4.18.0",
+      "oh-my-opencode-linux-x64-musl-baseline": "4.18.0",
+      "oh-my-opencode-windows-arm64": "4.18.0",
+      "oh-my-opencode-windows-x64": "4.18.0",
+      "oh-my-opencode-windows-x64-baseline": "4.18.0"
     },
     overrides: {
       "@earendil-works/pi-agent-core": "0.80.3",
@@ -72601,7 +72602,7 @@ var package_default2;
 var init_package2 = __esm(() => {
   package_default2 = {
     name: "@oh-my-opencode/omo-codex",
-    version: "4.17.1",
+    version: "4.18.0",
     type: "module",
     private: true,
     description: "Codex harness adapter for oh-my-openagent. Vendored Codex plugin namespace (omo) + TypeScript installer + telemetry.",
@@ -75325,9 +75326,11 @@ function collectCommands(value, commands) {
 
 // packages/omo-codex/src/install/codex-cache-install.ts
 async function installCachedPlugin(input) {
+  const env2 = input.env ?? process.env;
+  const npmInstallEnv = sanitizeNpmInstallEnv(env2);
   if (input.buildSource !== false) {
-    await maybeRunNpmInstall(input.sourcePath, input.runCommand);
-    await maybeRunNpmBuild(input.sourcePath, input.runCommand);
+    await maybeRunNpmInstall(input.sourcePath, input.runCommand, npmInstallEnv);
+    await maybeRunNpmBuild(input.sourcePath, input.runCommand, env2);
   }
   const targetPath = join33(input.codexHome, "plugins", "cache", input.marketplaceName, input.name, input.version);
   const tempPath = createTempSiblingPath(targetPath);
@@ -75337,10 +75340,10 @@ async function installCachedPlugin(input) {
     await rewriteCachedPackageLocalFileDependencies(tempPath, input.sourcePath);
     await copyBundledMcpRuntimeDists({ pluginRoot: tempPath, sourceRoot: input.sourcePath });
     await copyRootRuntimeDists({ pluginRoot: tempPath, sourcePath: input.sourcePath });
-    await maybeRunNpmInstall(tempPath, input.runCommand, ["ci", "--omit=dev"]);
+    await maybeRunNpmInstall(tempPath, input.runCommand, npmInstallEnv, ["ci", "--omit=dev"]);
     await removeCachedManagedNpmBinShims(tempPath);
     if (input.buildSource === false)
-      await maybeRunNpmSyncSkills(tempPath, input.runCommand);
+      await maybeRunNpmSyncSkills(tempPath, input.runCommand, env2);
     await assertNoRemovedSparkshellPromptReferences(tempPath);
     await rewriteCachedMcpManifest(tempPath, input.sourcePath);
     await rewriteCachedManifestRoot(tempPath, tempPath, targetPath);
@@ -75352,12 +75355,12 @@ async function installCachedPlugin(input) {
   }
   return { name: input.name, version: input.version, path: targetPath };
 }
-async function maybeRunNpmInstall(cwd, runCommand, args = ["install"]) {
+async function maybeRunNpmInstall(cwd, runCommand, env2, args = ["install"]) {
   if (!await fileExistsStrict(join33(cwd, "package.json")))
     return;
-  await runCommand("npm", args, { cwd });
+  await runCommand("npm", args, { cwd, env: env2 });
 }
-async function maybeRunNpmBuild(cwd, runCommand) {
+async function maybeRunNpmBuild(cwd, runCommand, env2) {
   if (!await fileExistsStrict(join33(cwd, "package.json")))
     return;
   const packageJson = JSON.parse(await readFile8(join33(cwd, "package.json"), "utf8"));
@@ -75366,9 +75369,9 @@ async function maybeRunNpmBuild(cwd, runCommand) {
   const scripts = packageJson.scripts;
   if (!isPlainRecord3(scripts) || typeof scripts.build !== "string")
     return;
-  await runCommand("npm", ["run", "build"], { cwd });
+  await runCommand("npm", ["run", "build"], { cwd, env: env2 });
 }
-async function maybeRunNpmSyncSkills(cwd, runCommand) {
+async function maybeRunNpmSyncSkills(cwd, runCommand, env2) {
   if (!await fileExistsStrict(join33(cwd, "package.json")))
     return;
   const packageJson = JSON.parse(await readFile8(join33(cwd, "package.json"), "utf8"));
@@ -75377,7 +75380,10 @@ async function maybeRunNpmSyncSkills(cwd, runCommand) {
   const scripts = packageJson.scripts;
   if (!isPlainRecord3(scripts) || typeof scripts["sync:skills"] !== "string")
     return;
-  await runCommand("npm", ["run", "sync:skills"], { cwd });
+  await runCommand("npm", ["run", "sync:skills"], { cwd, env: env2 });
+}
+function sanitizeNpmInstallEnv(env2) {
+  return Object.fromEntries(Object.entries(env2).filter(([key]) => key.toLowerCase() !== "npm_config_allow_scripts"));
 }
 function createTempSiblingPath(targetPath) {
   return join33(dirname13(targetPath), `.tmp-${basename7(targetPath)}-${process.pid}-${Date.now()}`);
@@ -77407,6 +77413,10 @@ async function readDistributionManifest(repoRoot) {
   }
 }
 function resolveLazyCodexPluginVersion(input) {
+  const override = input.versionOverride?.trim();
+  if (override !== undefined && override.length > 0) {
+    return override;
+  }
   if (input.marketplaceName === "sisyphuslabs" && input.pluginName === "omo" && input.distributionManifest !== undefined) {
     return input.distributionManifest.version;
   }
@@ -77957,6 +77967,7 @@ async function runCodexInstaller(options = {}) {
     return;
   });
   const buildSource = await shouldBuildSourcePackages(repoRoot);
+  const versionOverride = env3.LAZYCODEX_DEV_VERSION?.trim() || undefined;
   const gitBashResolution = await prepareGitBashForInstall({
     platform,
     env: env3,
@@ -77983,13 +77994,15 @@ async function runCodexInstaller(options = {}) {
       manifestVersion: manifest.version,
       marketplaceName: marketplace.name,
       pluginName: entry.name,
-      distributionManifest
+      distributionManifest,
+      versionOverride
     });
     validatePathSegment(version2, "plugin version");
     log4(`Building ${entry.name}@${version2}`);
     const plugin = await installCachedPlugin({
       buildSource,
       codexHome,
+      env: env3,
       marketplaceName: marketplace.name,
       name: entry.name,
       runCommand,
@@ -99070,6 +99083,10 @@ function formatVersionOutput(info) {
       lines.push(`  ${SYMBOLS3.dev} ${import_picocolors17.default.cyan("Running in local development mode")}`);
       lines.push(`  ${import_picocolors17.default.dim("Using file:// protocol from config")}`);
       break;
+    case "dev":
+      lines.push(`  ${SYMBOLS3.dev} ${import_picocolors17.default.cyan("Running a local dev build")}`);
+      lines.push(`  ${import_picocolors17.default.dim("Installed from source; update checks are skipped")}`);
+      break;
     case "pinned":
       lines.push(`  ${SYMBOLS3.pin} ${import_picocolors17.default.magenta(`Version pinned to ${info.pinnedVersion}`)}`);
       lines.push(`  ${import_picocolors17.default.dim("Update check skipped for pinned versions")}`);
@@ -99142,6 +99159,19 @@ async function getLocalVersion(options = {}) {
       console.log(options.json ? formatJsonOutput(info2) : formatVersionOutput(info2));
       return 1;
     }
+    if (!/^\d+\.\d+\.\d+/.test(currentVersion)) {
+      const info2 = {
+        currentVersion,
+        latestVersion: null,
+        isUpToDate: false,
+        isLocalDev: true,
+        isPinned: false,
+        pinnedVersion: null,
+        status: "dev"
+      };
+      console.log(options.json ? formatJsonOutput(info2) : formatVersionOutput(info2));
+      return 0;
+    }
     const { extractChannel: extractChannel2 } = await Promise.resolve().then(() => (init_auto_update_checker(), exports_auto_update_checker));
     const channel = extractChannel2(pluginInfo?.pinnedVersion ?? currentVersion);
     const latestVersion = await getLatestVersion(channel);

package/dist/cli-node/index.js

@@ -2146,7 +2146,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "oh-my-opencode",
-    version: "4.17.1",
+    version: "4.18.0",
     description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -2253,6 +2253,7 @@ var init_package = __esm(() => {
       build: "bun run script/build.ts",
       "build:cli-node": "bun run script/build-cli-node.ts",
       "build:codex-install": "bun run script/build-codex-install.ts",
+      "install:codex-dev": "bun run script/build-codex-install.ts && bun run script/install-codex-dev.ts",
       "build:codex-plugin": "npm --prefix packages/omo-codex/plugin ci && bun run --cwd packages/omo-codex/plugin build",
       "build:senpi-plugin": "node packages/omo-senpi/plugin/scripts/build-extension.mjs && node packages/omo-senpi/plugin/scripts/sync-skills.mjs && node packages/omo-senpi/plugin/scripts/embed-directive.mjs --check",
       "build:materialize-frontend": "node packages/omo-codex/plugin/scripts/materialize-shared-upstreams.mjs --strict",
@@ -2357,18 +2358,18 @@ var init_package = __esm(() => {
       typescript: "^6.0.3"
     },
     optionalDependencies: {
-      "oh-my-opencode-darwin-arm64": "4.17.1",
-      "oh-my-opencode-darwin-x64": "4.17.1",
-      "oh-my-opencode-darwin-x64-baseline": "4.17.1",
-      "oh-my-opencode-linux-arm64": "4.17.1",
-      "oh-my-opencode-linux-arm64-musl": "4.17.1",
-      "oh-my-opencode-linux-x64": "4.17.1",
-      "oh-my-opencode-linux-x64-baseline": "4.17.1",
-      "oh-my-opencode-linux-x64-musl": "4.17.1",
-      "oh-my-opencode-linux-x64-musl-baseline": "4.17.1",
-      "oh-my-opencode-windows-arm64": "4.17.1",
-      "oh-my-opencode-windows-x64": "4.17.1",
-      "oh-my-opencode-windows-x64-baseline": "4.17.1"
+      "oh-my-opencode-darwin-arm64": "4.18.0",
+      "oh-my-opencode-darwin-x64": "4.18.0",
+      "oh-my-opencode-darwin-x64-baseline": "4.18.0",
+      "oh-my-opencode-linux-arm64": "4.18.0",
+      "oh-my-opencode-linux-arm64-musl": "4.18.0",
+      "oh-my-opencode-linux-x64": "4.18.0",
+      "oh-my-opencode-linux-x64-baseline": "4.18.0",
+      "oh-my-opencode-linux-x64-musl": "4.18.0",
+      "oh-my-opencode-linux-x64-musl-baseline": "4.18.0",
+      "oh-my-opencode-windows-arm64": "4.18.0",
+      "oh-my-opencode-windows-x64": "4.18.0",
+      "oh-my-opencode-windows-x64-baseline": "4.18.0"
     },
     overrides: {
       "@earendil-works/pi-agent-core": "0.80.3",
@@ -72657,7 +72658,7 @@ var package_default2;
 var init_package2 = __esm(() => {
   package_default2 = {
     name: "@oh-my-opencode/omo-codex",
-    version: "4.17.1",
+    version: "4.18.0",
     type: "module",
     private: true,
     description: "Codex harness adapter for oh-my-openagent. Vendored Codex plugin namespace (omo) + TypeScript installer + telemetry.",
@@ -75381,9 +75382,11 @@ function collectCommands(value, commands) {
 
 // packages/omo-codex/src/install/codex-cache-install.ts
 async function installCachedPlugin(input) {
+  const env2 = input.env ?? process.env;
+  const npmInstallEnv = sanitizeNpmInstallEnv(env2);
   if (input.buildSource !== false) {
-    await maybeRunNpmInstall(input.sourcePath, input.runCommand);
-    await maybeRunNpmBuild(input.sourcePath, input.runCommand);
+    await maybeRunNpmInstall(input.sourcePath, input.runCommand, npmInstallEnv);
+    await maybeRunNpmBuild(input.sourcePath, input.runCommand, env2);
   }
   const targetPath = join33(input.codexHome, "plugins", "cache", input.marketplaceName, input.name, input.version);
   const tempPath = createTempSiblingPath(targetPath);
@@ -75393,10 +75396,10 @@ async function installCachedPlugin(input) {
     await rewriteCachedPackageLocalFileDependencies(tempPath, input.sourcePath);
     await copyBundledMcpRuntimeDists({ pluginRoot: tempPath, sourceRoot: input.sourcePath });
     await copyRootRuntimeDists({ pluginRoot: tempPath, sourcePath: input.sourcePath });
-    await maybeRunNpmInstall(tempPath, input.runCommand, ["ci", "--omit=dev"]);
+    await maybeRunNpmInstall(tempPath, input.runCommand, npmInstallEnv, ["ci", "--omit=dev"]);
     await removeCachedManagedNpmBinShims(tempPath);
     if (input.buildSource === false)
-      await maybeRunNpmSyncSkills(tempPath, input.runCommand);
+      await maybeRunNpmSyncSkills(tempPath, input.runCommand, env2);
     await assertNoRemovedSparkshellPromptReferences(tempPath);
     await rewriteCachedMcpManifest(tempPath, input.sourcePath);
     await rewriteCachedManifestRoot(tempPath, tempPath, targetPath);
@@ -75408,12 +75411,12 @@ async function installCachedPlugin(input) {
   }
   return { name: input.name, version: input.version, path: targetPath };
 }
-async function maybeRunNpmInstall(cwd, runCommand, args = ["install"]) {
+async function maybeRunNpmInstall(cwd, runCommand, env2, args = ["install"]) {
   if (!await fileExistsStrict(join33(cwd, "package.json")))
     return;
-  await runCommand("npm", args, { cwd });
+  await runCommand("npm", args, { cwd, env: env2 });
 }
-async function maybeRunNpmBuild(cwd, runCommand) {
+async function maybeRunNpmBuild(cwd, runCommand, env2) {
   if (!await fileExistsStrict(join33(cwd, "package.json")))
     return;
   const packageJson = JSON.parse(await readFile8(join33(cwd, "package.json"), "utf8"));
@@ -75422,9 +75425,9 @@ async function maybeRunNpmBuild(cwd, runCommand) {
   const scripts = packageJson.scripts;
   if (!isPlainRecord3(scripts) || typeof scripts.build !== "string")
     return;
-  await runCommand("npm", ["run", "build"], { cwd });
+  await runCommand("npm", ["run", "build"], { cwd, env: env2 });
 }
-async function maybeRunNpmSyncSkills(cwd, runCommand) {
+async function maybeRunNpmSyncSkills(cwd, runCommand, env2) {
   if (!await fileExistsStrict(join33(cwd, "package.json")))
     return;
   const packageJson = JSON.parse(await readFile8(join33(cwd, "package.json"), "utf8"));
@@ -75433,7 +75436,10 @@ async function maybeRunNpmSyncSkills(cwd, runCommand) {
   const scripts = packageJson.scripts;
   if (!isPlainRecord3(scripts) || typeof scripts["sync:skills"] !== "string")
     return;
-  await runCommand("npm", ["run", "sync:skills"], { cwd });
+  await runCommand("npm", ["run", "sync:skills"], { cwd, env: env2 });
+}
+function sanitizeNpmInstallEnv(env2) {
+  return Object.fromEntries(Object.entries(env2).filter(([key]) => key.toLowerCase() !== "npm_config_allow_scripts"));
 }
 function createTempSiblingPath(targetPath) {
   return join33(dirname13(targetPath), `.tmp-${basename7(targetPath)}-${process.pid}-${Date.now()}`);
@@ -77463,6 +77469,10 @@ async function readDistributionManifest(repoRoot) {
   }
 }
 function resolveLazyCodexPluginVersion(input) {
+  const override = input.versionOverride?.trim();
+  if (override !== undefined && override.length > 0) {
+    return override;
+  }
   if (input.marketplaceName === "sisyphuslabs" && input.pluginName === "omo" && input.distributionManifest !== undefined) {
     return input.distributionManifest.version;
   }
@@ -78013,6 +78023,7 @@ async function runCodexInstaller(options = {}) {
     return;
   });
   const buildSource = await shouldBuildSourcePackages(repoRoot);
+  const versionOverride = env3.LAZYCODEX_DEV_VERSION?.trim() || undefined;
   const gitBashResolution = await prepareGitBashForInstall({
     platform,
     env: env3,
@@ -78039,13 +78050,15 @@ async function runCodexInstaller(options = {}) {
       manifestVersion: manifest.version,
       marketplaceName: marketplace.name,
       pluginName: entry.name,
-      distributionManifest
+      distributionManifest,
+      versionOverride
     });
     validatePathSegment(version2, "plugin version");
     log4(`Building ${entry.name}@${version2}`);
     const plugin = await installCachedPlugin({
       buildSource,
       codexHome,
+      env: env3,
       marketplaceName: marketplace.name,
       name: entry.name,
       runCommand,
@@ -99126,6 +99139,10 @@ function formatVersionOutput(info) {
       lines.push(`  ${SYMBOLS3.dev} ${import_picocolors17.default.cyan("Running in local development mode")}`);
       lines.push(`  ${import_picocolors17.default.dim("Using file:// protocol from config")}`);
       break;
+    case "dev":
+      lines.push(`  ${SYMBOLS3.dev} ${import_picocolors17.default.cyan("Running a local dev build")}`);
+      lines.push(`  ${import_picocolors17.default.dim("Installed from source; update checks are skipped")}`);
+      break;
     case "pinned":
       lines.push(`  ${SYMBOLS3.pin} ${import_picocolors17.default.magenta(`Version pinned to ${info.pinnedVersion}`)}`);
       lines.push(`  ${import_picocolors17.default.dim("Update check skipped for pinned versions")}`);
@@ -99198,6 +99215,19 @@ async function getLocalVersion(options = {}) {
       console.log(options.json ? formatJsonOutput(info2) : formatVersionOutput(info2));
       return 1;
     }
+    if (!/^\d+\.\d+\.\d+/.test(currentVersion)) {
+      const info2 = {
+        currentVersion,
+        latestVersion: null,
+        isUpToDate: false,
+        isLocalDev: true,
+        isPinned: false,
+        pinnedVersion: null,
+        status: "dev"
+      };
+      console.log(options.json ? formatJsonOutput(info2) : formatVersionOutput(info2));
+      return 0;
+    }
     const { extractChannel: extractChannel2 } = await Promise.resolve().then(() => (init_auto_update_checker(), exports_auto_update_checker));
     const channel = extractChannel2(pluginInfo?.pinnedVersion ?? currentVersion);
     const latestVersion = await getLatestVersion(channel);

package/dist/index.js

@@ -6777,11 +6777,17 @@ function toGitFileStatus(statusToken) {
     return "deleted";
   return "modified";
 }
+function normalizeGitStatusPath(statusToken, filePath) {
+  if (statusToken !== "R" && statusToken !== "C")
+    return filePath;
+  const arrowIndex = filePath.lastIndexOf(" -> ");
+  return arrowIndex === -1 ? filePath : filePath.slice(arrowIndex + 4);
+}
 function parseGitStatusPorcelainLine(line) {
   if (!line)
     return null;
   const statusToken = line.substring(0, 2).trim();
-  const filePath = line.substring(3);
+  const filePath = normalizeGitStatusPath(statusToken, line.substring(3));
   if (!filePath)
     return null;
   return {
@@ -89664,7 +89670,7 @@ function getCachedVersion(options = {}) {
 // package.json
 var package_default = {
   name: "oh-my-opencode",
-  version: "4.17.1",
+  version: "4.18.0",
   description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
   main: "./dist/index.js",
   types: "dist/index.d.ts",
@@ -89771,6 +89777,7 @@ var package_default = {
     build: "bun run script/build.ts",
     "build:cli-node": "bun run script/build-cli-node.ts",
     "build:codex-install": "bun run script/build-codex-install.ts",
+    "install:codex-dev": "bun run script/build-codex-install.ts && bun run script/install-codex-dev.ts",
     "build:codex-plugin": "npm --prefix packages/omo-codex/plugin ci && bun run --cwd packages/omo-codex/plugin build",
     "build:senpi-plugin": "node packages/omo-senpi/plugin/scripts/build-extension.mjs && node packages/omo-senpi/plugin/scripts/sync-skills.mjs && node packages/omo-senpi/plugin/scripts/embed-directive.mjs --check",
     "build:materialize-frontend": "node packages/omo-codex/plugin/scripts/materialize-shared-upstreams.mjs --strict",
@@ -89875,18 +89882,18 @@ var package_default = {
     typescript: "^6.0.3"
   },
   optionalDependencies: {
-    "oh-my-opencode-darwin-arm64": "4.17.1",
-    "oh-my-opencode-darwin-x64": "4.17.1",
-    "oh-my-opencode-darwin-x64-baseline": "4.17.1",
-    "oh-my-opencode-linux-arm64": "4.17.1",
-    "oh-my-opencode-linux-arm64-musl": "4.17.1",
-    "oh-my-opencode-linux-x64": "4.17.1",
-    "oh-my-opencode-linux-x64-baseline": "4.17.1",
-    "oh-my-opencode-linux-x64-musl": "4.17.1",
-    "oh-my-opencode-linux-x64-musl-baseline": "4.17.1",
-    "oh-my-opencode-windows-arm64": "4.17.1",
-    "oh-my-opencode-windows-x64": "4.17.1",
-    "oh-my-opencode-windows-x64-baseline": "4.17.1"
+    "oh-my-opencode-darwin-arm64": "4.18.0",
+    "oh-my-opencode-darwin-x64": "4.18.0",
+    "oh-my-opencode-darwin-x64-baseline": "4.18.0",
+    "oh-my-opencode-linux-arm64": "4.18.0",
+    "oh-my-opencode-linux-arm64-musl": "4.18.0",
+    "oh-my-opencode-linux-x64": "4.18.0",
+    "oh-my-opencode-linux-x64-baseline": "4.18.0",
+    "oh-my-opencode-linux-x64-musl": "4.18.0",
+    "oh-my-opencode-linux-x64-musl-baseline": "4.18.0",
+    "oh-my-opencode-windows-arm64": "4.18.0",
+    "oh-my-opencode-windows-x64": "4.18.0",
+    "oh-my-opencode-windows-x64-baseline": "4.18.0"
   },
   overrides: {
     "@earendil-works/pi-agent-core": "0.80.3",
@@ -117697,9 +117704,8 @@ async function getSdkAllSessions(client3) {
   return sessions.map((session) => session.id);
 }
 async function sdkSessionExists(client3, sessionID) {
-  const response = await fetchSdkResponse(() => client3.session.list());
-  const sessions = normalizeSDKResponse(response, []);
-  return sessions.some((session) => session.id === sessionID);
+  const messages = await getSdkSessionMessages(client3, sessionID);
+  return messages.length > 0;
 }
 async function getSdkSessionMessages(client3, sessionID) {
   const response = await fetchSdkResponse(() => client3.session.messages({ path: { id: sessionID } }));

package/dist/skills/frontend/SKILL.md

@@ -32,7 +32,7 @@ Every implementation must choose one of these branches before UI code changes:
    - **Embedded references:** use `references/design/_INDEX.md` to shortlist 2-3 plausible Layer B references, then read exactly one Layer A style skill and one Layer B reference in full — every line, no partial reads (they are 200-500 lines; a sliced read produces the flattened token set this gate exists to prevent). Log the shortlist, the pick, and why. Use `open-design` only when the curated set has no fit; add `ui-ux-db` lookups for palette/type/domain questions.
    - **Lazyweb real-product screens:** READ `references/design/lazyweb.md` FIRST and run its recipe verbatim — do not improvise curl calls against lazyweb.com; the recipe mints its own anonymous token. Log the queries run, how many screens you actually VIEWED, and the layout grammar harvested — never pixel copies.
    - **Imagen concept drafts:** generate 2-3 imagen concept drafts, each seeded with the loaded Layer A + Layer B tokens (palette, type, material); pick the strongest and treat the chosen draft as the reference-fidelity contract. Log the draft paths and the pick.
-   Synthesize every lane into `DESIGN.md`. Treat sources as source material, not mood labels: extract tokens, layout grammar, component anatomy, interaction states, motion, and taste decisions, then recombine them into project-specific primitives. Never freestyle past the selected references, never copy logos or brand-specific copy. Then run the Primitive Showcase Gate (`references/design/README.md` Phase 0) before any product screen.
+   Synthesize every lane into `DESIGN.md`. Treat sources as source material, not mood labels: extract tokens, layout grammar, component anatomy, interaction states, motion, and taste decisions, then recombine them into project-specific primitives. Before laying out sections, inventory the content blocks and assign each a job — hook, explain, prove, compare, convert, navigate, retain — then order sections by the visitor's decision path, not by visual symmetry. Never freestyle past the selected references, never copy logos or brand-specific copy. Then run the Primitive Showcase Gate (`references/design/README.md` Phase 0) before any product screen.
 3. **Existing project with `DESIGN.md` or a component system:** read it, follow it, and update it before implementation only when the requested work needs a new token, primitive, state, motion rule, accessibility constraint, accepted debt, or reference-fidelity requirement.
 4. **Existing project with UI but no `DESIGN.md` and no reusable component layer:** STOP and ask the user one focused question: should you preserve the current look with copy-nearby styling, or extract a real `DESIGN.md` plus reusable components before continuing? Do not silently choose.
 

package/dist/skills/frontend/references/design/README.md

@@ -169,6 +169,12 @@ Triggers (mid-conversation, not initial): "you keep leaving placeholders", "stop
 
 **Action:** Add `output-skill.md` on top of whatever is currently loaded. This stacks cleanly — it is purely about output completeness, not visual style.
 
+### Step 8 — Is the screen an app shell, not a scroll-the-page site?
+
+Triggers: dashboard, settings, mail/inbox, list-detail, command surface, split panes, fixed sidebar + scrolling body, admin console — or the user reports a layout that breaks when content gets long, empty, or unbroken (panel won't scroll, footer pushed off-screen, horizontal overflow on mobile).
+
+**Action:** Add `layout-skill.md` on top of whatever style skill you selected in Steps 1-2. It carries scroll-ownership doctrine, the two silently-failing CSS contracts (`min-block-size: 0` scroll shells, `minmax(min(…),100%)` grids), the named-primitive vocabulary, container-vs-viewport routing, and the content-stress matrix. It adds no visual direction — the style skill still owns taste. Skip it for pure scroll-the-document marketing pages, where `taste-skill` layout guidance already fits.
+
 ## Stacking rules (read this once, internalize it)
 
 1. **At most one Layer A *style* skill at a time.** A layout cannot be both `minimalist-skill` and `brutalist-skill` simultaneously — they encode opposite spacing and typography philosophies. Pick one.
@@ -177,6 +183,7 @@ Triggers (mid-conversation, not initial): "you keep leaving placeholders", "stop
 4. **`redesign-skill.md` replaces a style-skill** when the task is auditing, not building. Stack a Layer B brand if the user wants a specific direction.
 5. **`image-to-code-skill.md` pairs with one imagegen skill** for the full flow.
 6. **Layer B (brand DESIGN.md) is orthogonal to Layer A.** You can pair any Layer A skill with any Layer B brand. Use Layer B as the source of color/type/component tokens; let Layer A drive the execution discipline.
+7. **`layout-skill.md` stacks on top of any style skill** for app-shell / dashboard / split-pane work. It owns spatial structure and scroll ownership only — no visual direction — so it never conflicts with the style skill you picked.
 
 ## Anti-patterns — do not do these
 
@@ -218,6 +225,8 @@ Once references are loaded, before writing any UI code:
 | "Generate a brand identity board for {company}" | `imagegen-brandkit.md` |
 | "Stop using placeholders" | Add `output-skill.md` to current stack |
 | "Also output a DESIGN.md doc" | Add `stitch-skill.md` to current stack |
+| "Build a dashboard / settings / inbox / app shell" | one style skill (usually `taste-skill.md`) + `layout-skill.md` |
+| "Panel won't scroll / footer pushed off-screen / mobile overflow" | Add `layout-skill.md` to current stack |
 
 ## Phase Final — Design QA (MANDATORY, runs after implementation)
 

package/dist/skills/frontend/references/design/design-system-architecture.md

@@ -116,7 +116,7 @@ All spacing derives from a base of **4px**.
 - Breakpoints: sm 640px, md 768px, lg 1024px, xl 1280px, 2xl 1536px
 
 ### Rules
-- No magic numbers. Every spacing value maps to a token.
+- Tokenize design *intent* — spacing steps, content width, gutters, section gaps, density steps. Keep browser *mechanics* raw: `auto`, `%`, `min-content`, `max-content`, `fit-content`, `clamp()`, viewport/container units, intrinsic sizing. A `clamp(1rem, 4vw, 2rem)` gap or a `minmax(min(16rem, 100%), 1fr)` track is mechanics, not a magic number — do not force it into a token.
 - Asymmetric spacing is intentional, not accidental — document why.
 
 ## 5. Components
@@ -130,6 +130,7 @@ Document reusable patterns before implementation for greenfield work, and as the
 - **States**: default, hover, active, focus, disabled, loading, empty, error
 - **Accessibility**: keyboard, ARIA, contrast
 - **Motion**: entry/exit animations
+- **Layout**: spatial primitive (stack / cluster / sidebar / grid / shell…) and, if the component scrolls or pins anything, its scroll owner
 
 Greenfield starts with the primitives you are about to build, assembled from
 the selected references' component anatomy and adapted to the user's product.
@@ -214,13 +215,14 @@ After every component implementation, check:
 
 - [ ] All colors reference tokens from Section 2. No raw hex outside `DESIGN.md`.
 - [ ] All font sizes match Section 3 scale. No arbitrary sizes.
-- [ ] All spacing values are multiples of `--space-1` (4px). No magic numbers.
+- [ ] Spacing intent maps to a token (Section 4); browser mechanics (`clamp()`, intrinsic sizing, container units) stay raw. No arbitrary px.
 - [ ] Interactive elements have all required states from Section 5 and Section 6.
 - [ ] Depth treatment matches the chosen strategy from Section 7.
 - [ ] Component reused 2+ times? Documented in Section 5.
 - [ ] Motion follows the timing table. No arbitrary durations.
 - [ ] Component visual QA passed for each primitive and required state before product screens were composed.
 - [ ] Section 8 accessibility constraints hold for the new component; any new debt is recorded in Section 8, not silently accepted.
+- [ ] Survives content stress: empty, long label, unbroken string. Reflows to one readable column at 375px with no horizontal scroll of primary content.
 
 ## Memory Management