oh-my-opencode 4.11.1 → 4.12.0

package/packages/omo-codex/plugin/components/teammode/skills/teammode/scripts/team-state.mjs

@@ -0,0 +1,250 @@
+// team-state.mjs - the teammode state model + atomic, symlink-guarded persistence.
+//
+// Zero external dependencies (node builtins only) so it runs byte-identically under
+// `node` and `bun` on macOS, Linux, and Windows with no install step, no POSIX shell,
+// and no python3 precondition. This is the SINGLE source of the team-state shape: the
+// model never hand-writes team.json - it calls these helpers through scripts/team.mjs.
+//
+// Rendering (the member field manual + bootstrap trigger) lives in team-guide.mjs so
+// this file stays the state concern only.
+
+import { randomUUID } from "node:crypto";
+import { lstat, mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+
+export const LENSES = ["area", "ownership", "perspective"];
+export const MEMBER_STATUSES = ["pending", "active", "reported", "blocked", "archived"];
+// A team is never a single member: two or more distinct slices is the minimum. One isolated
+// job is a subagent, not a team.
+export const MIN_MEMBERS = 2;
+
+export function isUnderstaffed(team) {
+	return team.members.length < MIN_MEMBERS;
+}
+// A team dir is a single child of .omo/teams. This pattern alone blocks "/", "\", and a
+// leading "." so ".." and "a/b" can never name a team dir (the escape guard).
+const SESSION_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+
+function isoNow(now) {
+	return now ?? new Date().toISOString();
+}
+
+export function buildTeam({ teamName, sessionName, sessionId = null, dir = null, worktreeEnabled = false, baseBranch = "dev", now }) {
+	if (!teamName?.trim()) throw new Error("team name is required");
+	if (!sessionName?.trim()) throw new Error("session name is required");
+	const ts = isoNow(now);
+	return {
+		schemaVersion: 2,
+		teamId: randomUUID(),
+		teamName: teamName.trim(),
+		sessionName: sessionName.trim(),
+		sessionId,
+		threadTitleConvention: `[${teamName.trim()}] ${sessionName.trim()}`,
+		status: "active",
+		createdAt: ts,
+		updatedAt: ts,
+		archivedAt: null,
+		leader: { kind: "main-session", sessionId },
+		communication: { memberLanguage: "english", replyToUserInUserLanguage: true },
+		worktree: { enabled: Boolean(worktreeEnabled), baseBranch, root: dir ? join(dir, "worktrees") : null },
+		paths: dir
+			? { dir, team: join(dir, "team.json"), guide: join(dir, "guide.md"), artifacts: join(dir, "artifacts") }
+			: null,
+		members: [],
+		log: [{ ts, event: "created", detail: `team ${teamName.trim()}` }],
+	};
+}
+
+function touch(team, event, detail) {
+	const ts = isoNow();
+	team.updatedAt = ts;
+	team.log.push({ ts, event, detail });
+	return team;
+}
+
+function memberById(team, id) {
+	const found = team.members.find((m) => m.id === id);
+	if (!found) throw new Error(`no member with id "${id}"`);
+	return found;
+}
+
+function normalizedFocus(focus) {
+	return focus.trim().replace(/\s+/g, " ").toLowerCase();
+}
+
+function assertUniqueMemberFocus(team) {
+	const seen = new Map();
+	for (const member of team.members) {
+		const key = normalizedFocus(member.focus ?? "");
+		const previous = seen.get(key);
+		if (previous) {
+			throw new Error(`member focus "${member.focus}" duplicates "${previous.focus}" (no two members may own the same thing)`);
+		}
+		seen.set(key, member);
+	}
+}
+
+function assertTeamReadyForThreadBinding(team) {
+	if (isUnderstaffed(team)) {
+		throw new Error(
+			`cannot bind member threads until the team has at least ${MIN_MEMBERS} distinct members; current count is ${team.members.length}`,
+		);
+	}
+	assertUniqueMemberFocus(team);
+}
+
+export function addMember(team, { id, focus, lens, deliverable = "", branch = null }) {
+	if (!id?.trim()) throw new Error("member id is required");
+	if (!focus?.trim()) throw new Error("member focus is required - a concrete part, ownership area, or perspective");
+	if (!LENSES.includes(lens)) throw new Error(`invalid lens "${lens}" - use one of: ${LENSES.join(", ")}`);
+	const memberId = id.trim();
+	const memberFocus = focus.trim();
+	if (team.members.some((m) => m.id === memberId)) throw new Error(`member id "${memberId}" already exists (duplicate)`);
+	const duplicate = team.members.find((m) => normalizedFocus(m.focus) === normalizedFocus(memberFocus));
+	if (duplicate) throw new Error(`member focus "${memberFocus}" duplicates "${duplicate.focus}" (no two members may own the same thing)`);
+	team.members.push({
+		id: memberId,
+		focus: memberFocus,
+		lens,
+		deliverable: deliverable.trim(),
+		threadId: null,
+		threadTitle: team.threadTitleConvention,
+		cwd: null,
+		worktree: { path: null, branch: branch ?? null },
+		status: "pending",
+	});
+	return touch(team, "add-member", `member ${memberId} (${lens}): ${memberFocus}`);
+}
+
+export function bindThread(team, { id, threadId, cwd = null, worktreePath = null }) {
+	if (!threadId?.trim()) throw new Error("thread id is required");
+	assertTeamReadyForThreadBinding(team);
+	const m = memberById(team, id);
+	m.threadId = threadId.trim();
+	m.status = "active";
+	if (cwd) m.cwd = cwd;
+	if (team.worktree.enabled) m.worktree.path = worktreePath ?? cwd ?? m.worktree.path;
+	return touch(team, "bind-thread", `member ${id} -> thread ${threadId.trim()}`);
+}
+
+export function setMemberStatus(team, { id, status, note = "" }) {
+	if (!MEMBER_STATUSES.includes(status)) throw new Error(`invalid status "${status}" - use one of: ${MEMBER_STATUSES.join(", ")}`);
+	memberById(team, id).status = status;
+	return touch(team, "set-status", `member ${id} -> ${status}${note ? `: ${note}` : ""}`);
+}
+
+export function archive(team, { id = null, note = "" } = {}) {
+	if (id) {
+		memberById(team, id).status = "archived";
+		return touch(team, "archive-member", `member ${id}${note ? `: ${note}` : ""}`);
+	}
+	for (const m of team.members) m.status = "archived";
+	team.status = "archived";
+	team.archivedAt = isoNow();
+	return touch(team, "archive", note || "team archived; all members closed");
+}
+
+export function validateTeam(team) {
+	if (team?.schemaVersion !== 2) throw new Error("invalid team: schemaVersion must be 2");
+	if (!team.teamId || !team.teamName) throw new Error("invalid team: teamId and teamName are required");
+	if (team.leader?.kind !== "main-session") throw new Error("invalid team: leader.kind must be main-session");
+	if (!Array.isArray(team.members)) throw new Error("invalid team: members must be an array");
+	assertUniqueMemberFocus(team);
+	return team;
+}
+
+// Resolve (and confine) a team dir to a single child of <cwd>/.omo/teams.
+export function resolveTeamDir(cwd, sessionId) {
+	if (!SESSION_ID_PATTERN.test(sessionId ?? "")) throw new Error(`invalid or unsafe session id "${sessionId}"`);
+	return resolve(cwd, ".omo", "teams", sessionId);
+}
+
+async function lstatOrNull(p) {
+	return lstat(p).catch((error) => {
+		if (error && error.code === "ENOENT") return null;
+		throw error;
+	});
+}
+
+// Create a directory chain refusing any symlinked component, so team state can never be
+// written through a symlink that escapes the workspace.
+async function mkdirNoSymlink(dir, stopAt) {
+	if (dir === stopAt) return;
+	const rel = relative(stopAt, dir);
+	if (rel.startsWith("..") || isAbsolute(rel)) throw new Error(`refused: path escapes ${stopAt}: ${dir}`);
+	await mkdirNoSymlink(dirname(dir), stopAt);
+	const st = await lstatOrNull(dir);
+	if (st) {
+		if (st.isSymbolicLink()) throw new Error(`refused: path component is a symlink: ${dir}`);
+		if (!st.isDirectory()) throw new Error(`refused: path component is not a directory: ${dir}`);
+		return;
+	}
+	await mkdir(dir);
+}
+
+async function assertNoSymlinkComponents(dir, stopAt) {
+	if (dir === stopAt) return;
+	const rel = relative(stopAt, dir);
+	if (rel.startsWith("..") || isAbsolute(rel)) throw new Error(`refused: path escapes ${stopAt}: ${dir}`);
+	await assertNoSymlinkComponents(dirname(dir), stopAt);
+	const st = await lstatOrNull(dir);
+	if (st?.isSymbolicLink()) throw new Error(`refused: path component is a symlink: ${dir}`);
+}
+
+export async function ensureTeamDir(cwd, sessionId) {
+	const workspaceRoot = resolve(cwd);
+	const teamsRoot = resolve(cwd, ".omo", "teams");
+	const dir = resolveTeamDir(cwd, sessionId);
+	await mkdirNoSymlink(teamsRoot, workspaceRoot);
+	await mkdirNoSymlink(dir, teamsRoot);
+	await mkdirNoSymlink(join(dir, "artifacts"), dir);
+	return dir;
+}
+
+export async function assertSafeTeamDir(cwd, sessionId) {
+	const workspaceRoot = resolve(cwd);
+	const teamsRoot = resolve(cwd, ".omo", "teams");
+	const dir = resolveTeamDir(cwd, sessionId);
+	await assertNoSymlinkComponents(teamsRoot, workspaceRoot);
+	await assertNoSymlinkComponents(dir, teamsRoot);
+	return dir;
+}
+
+export async function readTeam(dir) {
+	return validateTeam(JSON.parse(await readFile(join(dir, "team.json"), "utf8")));
+}
+
+export async function teamExists(dir) {
+	return (await lstatOrNull(join(dir, "team.json"))) !== null;
+}
+
+async function persistedFileTarget(team, pathKey, fileName, expectedDir) {
+	validateTeam(team);
+	if (!team.paths?.dir || !team.paths?.[pathKey]) throw new Error(`invalid team: paths.${pathKey} is required`);
+	const dir = resolve(expectedDir);
+	if (resolve(team.paths.dir) !== dir) throw new Error(`refused: persisted team dir does not match trusted team dir: ${team.paths.dir}`);
+	const target = resolve(team.paths[pathKey]);
+	if (target !== resolve(dir, fileName)) throw new Error(`refused: ${fileName} persist target escapes team dir: ${team.paths[pathKey]}`);
+	const dirStat = await lstatOrNull(dir);
+	if (dirStat?.isSymbolicLink()) throw new Error(`refused: team dir is a symlink: ${dir}`);
+	const st = await lstatOrNull(target);
+	if (st?.isSymbolicLink()) throw new Error(`refused: ${fileName} is a symlink: ${target}`);
+	if (st && !st.isFile()) throw new Error(`refused: ${fileName} is not a file: ${target}`);
+	return target;
+}
+
+async function writePersistedFileAtomic(team, pathKey, fileName, content, expectedDir) {
+	const target = await persistedFileTarget(team, pathKey, fileName, expectedDir);
+	const tmp = `${target}.tmp-${process.pid}-${randomUUID()}`;
+	await writeFile(tmp, content, { encoding: "utf8", flag: "wx" });
+	await rename(tmp, target);
+	return team;
+}
+
+export async function writeTeamAtomic(team, expectedDir) {
+	return writePersistedFileAtomic(team, "team", "team.json", `${JSON.stringify(team, null, 2)}\n`, expectedDir);
+}
+
+export async function writeGuideAtomic(team, content, expectedDir) {
+	return writePersistedFileAtomic(team, "guide", "guide.md", content, expectedDir);
+}

package/packages/omo-codex/plugin/components/teammode/skills/teammode/scripts/team.mjs

@@ -0,0 +1,220 @@
+#!/usr/bin/env node
+// team.mjs - the teammode controller CLI. Thin argv dispatch over team-state.mjs (the
+// state model) and team-guide.mjs (the member field manual). It replaces hand-written
+// team.json / guide.md so the model never has to author those files by hand.
+//
+// Zero external dependencies (node builtins only): runs identically under node and bun on
+// macOS, Linux, and Windows.
+//
+//   node "<skill-root>/scripts/team.mjs" init        --name "<team>" --session-name "<sess>" [--session <id>] [--worktree] [--base-branch dev]
+//   node "<skill-root>/scripts/team.mjs" add-member  --team <id> --id A --focus "<part/ownership/perspective>" --lens area|ownership|perspective --deliverable "<...>" [--branch <b>]
+//   node "<skill-root>/scripts/team.mjs" bind-thread  --team <id> --id A --thread <thread-id> [--cwd <path>]
+//   node "<skill-root>/scripts/team.mjs" member-prompt --team <id> --id A
+//   node "<skill-root>/scripts/team.mjs" set-status   --team <id> --id A --status reported|blocked|active|archived [--note "<...>"]
+//   node "<skill-root>/scripts/team.mjs" archive      --team <id> [--id A] [--note "<...>"]
+//   node "<skill-root>/scripts/team.mjs" delete       --team <id> [--force]
+//   node "<skill-root>/scripts/team.mjs" status       --team <id>
+//   node "<skill-root>/scripts/team.mjs" guide        --team <id>
+
+import { randomUUID } from "node:crypto";
+import { realpathSync } from "node:fs";
+import { rm } from "node:fs/promises";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { buildGuide, buildMemberPrompt } from "./team-guide.mjs";
+import {
+	addMember,
+	archive,
+	assertSafeTeamDir,
+	bindThread,
+	buildTeam,
+	ensureTeamDir,
+	isUnderstaffed,
+	MIN_MEMBERS,
+	readTeam,
+	resolveTeamDir,
+	setMemberStatus,
+	teamExists,
+	writeGuideAtomic,
+	writeTeamAtomic,
+} from "./team-state.mjs";
+
+function parseFlags(args) {
+	const flags = { _: [] };
+	for (let i = 0; i < args.length; i++) {
+		const arg = args[i];
+		if (!arg.startsWith("--")) {
+			flags._.push(arg);
+			continue;
+		}
+		const key = arg.slice(2);
+		const next = args[i + 1];
+		if (next === undefined || next.startsWith("--")) {
+			flags[key] = true;
+		} else {
+			flags[key] = next;
+			i++;
+		}
+	}
+	return flags;
+}
+
+function requireFlag(flags, name) {
+	const value = flags[name];
+	if (value === undefined || value === true) throw new Error(`missing required flag --${name}`);
+	return value;
+}
+
+async function loadTeam(cwd, sessionId) {
+	const dir = await assertSafeTeamDir(cwd, sessionId);
+	return { dir, team: await readTeam(dir) };
+}
+
+async function persist(team, dir) {
+	await writeTeamAtomic(team, dir);
+	await writeGuideAtomic(team, buildGuide(team), dir);
+}
+
+const handlers = {
+	async init(cwd, flags) {
+		const teamName = requireFlag(flags, "name");
+		const sessionName = requireFlag(flags, "session-name");
+		const sessionId = typeof flags.session === "string" ? flags.session : `team-${randomUUID().slice(0, 8)}`;
+		const dir = await ensureTeamDir(cwd, sessionId);
+		if (await teamExists(dir)) {
+			process.stdout.write(`exists: ${dir} (left untouched; re-init is a safe no-op)\n`);
+			return;
+		}
+		const team = buildTeam({
+			teamName,
+			sessionName,
+			sessionId,
+			dir,
+			worktreeEnabled: flags.worktree === true,
+			baseBranch: typeof flags["base-branch"] === "string" ? flags["base-branch"] : "dev",
+		});
+		await persist(team, dir);
+		process.stdout.write(`created: ${dir}\n`);
+		process.stdout.write(`team.json + guide.md written; artifacts/ ready. session id: ${sessionId}\n`);
+		process.stdout.write(`next: add-member --team ${sessionId} --id A --focus "<part/ownership/perspective>" --lens area|ownership|perspective --deliverable "<...>"\n`);
+	},
+
+	async "add-member"(cwd, flags) {
+		const sessionId = requireFlag(flags, "team");
+		const { dir, team } = await loadTeam(cwd, sessionId);
+		const memberId = requireFlag(flags, "id").trim();
+		addMember(team, {
+			id: memberId,
+			focus: requireFlag(flags, "focus"),
+			lens: requireFlag(flags, "lens"),
+			deliverable: typeof flags.deliverable === "string" ? flags.deliverable : "",
+			branch: typeof flags.branch === "string" ? flags.branch : null,
+		});
+		await persist(team, dir);
+		process.stdout.write(`added member ${memberId} to team ${sessionId}.\n\nSend this as the new thread's first message (title it "${team.threadTitleConvention}"):\n---\n${buildMemberPrompt(team, memberId)}\n---\n`);
+	},
+
+	async "bind-thread"(cwd, flags) {
+		const sessionId = requireFlag(flags, "team");
+		const { dir, team } = await loadTeam(cwd, sessionId);
+		bindThread(team, {
+			id: requireFlag(flags, "id"),
+			threadId: requireFlag(flags, "thread"),
+			cwd: typeof flags.cwd === "string" ? flags.cwd : null,
+			worktreePath: typeof flags["worktree-path"] === "string" ? flags["worktree-path"] : null,
+		});
+		await persist(team, dir);
+		process.stdout.write(`bound member ${flags.id} to thread ${flags.thread}.\n`);
+	},
+
+	async "member-prompt"(cwd, flags) {
+		const sessionId = requireFlag(flags, "team");
+		const { team } = await loadTeam(cwd, sessionId);
+		process.stdout.write(`${buildMemberPrompt(team, requireFlag(flags, "id"))}\n`);
+	},
+
+	async "set-status"(cwd, flags) {
+		const sessionId = requireFlag(flags, "team");
+		const { dir, team } = await loadTeam(cwd, sessionId);
+		setMemberStatus(team, {
+			id: requireFlag(flags, "id"),
+			status: requireFlag(flags, "status"),
+			note: typeof flags.note === "string" ? flags.note : "",
+		});
+		await persist(team, dir);
+		process.stdout.write(`member ${flags.id} -> ${flags.status}\n`);
+	},
+
+	async archive(cwd, flags) {
+		const sessionId = requireFlag(flags, "team");
+		const { dir, team } = await loadTeam(cwd, sessionId);
+		archive(team, {
+			id: typeof flags.id === "string" ? flags.id : null,
+			note: typeof flags.note === "string" ? flags.note : "",
+		});
+		await persist(team, dir);
+		process.stdout.write(flags.id ? `archived member ${flags.id}\n` : `archived team ${sessionId} and closed all members\n`);
+	},
+
+	async delete(cwd, flags) {
+		const sessionId = requireFlag(flags, "team");
+		const { dir, team } = await loadTeam(cwd, sessionId);
+		const active = team.members.filter((m) => m.status !== "archived");
+		if (flags.force !== true && (team.status !== "archived" || active.length > 0)) {
+			throw new Error(
+				`refused: team "${sessionId}" is not archived or still has ${active.length} active member(s). Archive first, or pass --force to delete anyway.`,
+			);
+		}
+		await rm(dir, { recursive: true, force: true });
+		process.stdout.write(`deleted team state: ${dir}\n`);
+	},
+
+	async status(cwd, flags) {
+		const sessionId = requireFlag(flags, "team");
+		const { team } = await loadTeam(cwd, sessionId);
+		process.stdout.write(`Team ${team.teamName} [${team.status}] - leader: main session - ${team.members.length} member(s)\n`);
+		for (const m of team.members) {
+			process.stdout.write(`  ${m.id} (${m.lens}) ${m.focus} -> ${m.deliverable || "(no deliverable)"} [${m.status}]${m.threadId ? ` thread=${m.threadId}` : ""}${m.cwd ? ` cwd=${m.cwd}` : ""}\n`);
+		}
+		if (isUnderstaffed(team)) {
+			process.stdout.write(
+				`WARNING: a team needs at least ${MIN_MEMBERS} members; this team has ${team.members.length}. A single-member team is not a team - add another distinct slice or use a subagent.\n`,
+			);
+		}
+	},
+
+	async guide(cwd, flags) {
+		const sessionId = requireFlag(flags, "team");
+		const { dir, team } = await loadTeam(cwd, sessionId);
+		await writeGuideAtomic(team, buildGuide(team), dir);
+		process.stdout.write(`${team.paths.guide}\n`);
+	},
+};
+
+async function main() {
+	const [subcommand, ...rest] = process.argv.slice(2);
+	const handler = handlers[subcommand];
+	if (!handler) {
+		throw new Error(`unknown subcommand "${subcommand ?? ""}" - expected one of: ${Object.keys(handlers).join(", ")}`);
+	}
+	await handler(process.cwd(), parseFlags(rest));
+}
+
+// Symlink-robust main-module check: a symlinked install invokes this file through a symlink
+// path while node resolves import.meta.url to the realpath, so compare the resolved real paths
+// (falling back to the literal url comparison if a path cannot be resolved).
+function isInvokedAsScript() {
+	const entry = process.argv[1];
+	if (!entry) return false;
+	try {
+		return realpathSync(fileURLToPath(import.meta.url)) === realpathSync(entry);
+	} catch {
+		return import.meta.url === pathToFileURL(entry).href;
+	}
+}
+
+if (isInvokedAsScript()) {
+	await main().catch((error) => {
+		process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+		process.exit(1);
+	});
+}

package/packages/omo-codex/plugin/components/telemetry/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook session-start",
 						"timeout": 5,
-						"statusMessage": "LazyCodex(4.11.1): Recording Session Telemetry"
+						"statusMessage": "(OmO) Recording Session Telemetry"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/telemetry/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-telemetry",
-	"version": "4.11.1",
+	"version": "4.12.0",
 	"description": "Codex plugin component that emits omo-codex anonymous daily-active telemetry on SessionStart.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/test-support/package-smoke-fixture.ts

@@ -0,0 +1,158 @@
+/// <reference path="../../node_modules/@types/node/index.d.ts" />
+
+import { readdirSync, readFileSync } from "node:fs";
+
+export type ComponentPackageJson = {
+	readonly version?: string;
+	readonly type: string;
+	readonly packageManager: string;
+	readonly bin: Readonly<Record<string, string>>;
+	readonly dependencies?: Readonly<Record<string, string>>;
+	readonly optionalDependencies?: Readonly<Record<string, string>>;
+	readonly scripts?: Readonly<Record<string, string>>;
+	readonly files?: readonly string[];
+};
+
+export type HookCommand = {
+	readonly command: string;
+};
+
+export type HookEntry = {
+	readonly matcher?: string;
+	readonly hooks: readonly HookCommand[];
+};
+
+export type HooksJson = {
+	readonly hooks: Record<string, readonly HookEntry[]>;
+};
+
+export type McpServer = {
+	readonly command: string;
+	readonly args: readonly string[];
+};
+
+export type McpJson = {
+	readonly mcpServers: Record<string, McpServer>;
+};
+
+export type PluginJson = {
+	readonly hooks: string;
+};
+
+export function readPackageJson(path: string): ComponentPackageJson {
+	const parsed = readJsonFile(path);
+	if (!isComponentPackageJson(parsed)) throw new TypeError(`Invalid package metadata: ${path}`);
+	return parsed;
+}
+
+export function readHooksJson(path: string): HooksJson {
+	const parsed = readJsonFile(path);
+	if (!isHooksJson(parsed)) throw new TypeError(`Invalid hooks metadata: ${path}`);
+	return parsed;
+}
+
+export function readMcpJson(path: string): McpJson {
+	const parsed = readJsonFile(path);
+	if (!isMcpJson(parsed)) throw new TypeError(`Invalid MCP metadata: ${path}`);
+	return parsed;
+}
+
+export function readPluginJson(path: string): PluginJson {
+	const parsed = readJsonFile(path);
+	if (!isPluginJson(parsed)) throw new TypeError(`Invalid plugin metadata: ${path}`);
+	return parsed;
+}
+
+export function readJsonFile(path: string): unknown {
+	return JSON.parse(readFileSync(path, "utf8"));
+}
+
+export function readTextFile(path: string): string {
+	return readFileSync(path, "utf8");
+}
+
+export function listDirectoryEntries(path: string): readonly string[] {
+	return readdirSync(path);
+}
+
+export function requireFiles(packageJson: ComponentPackageJson, path: string): readonly string[] {
+	if (packageJson.files === undefined) throw new TypeError(`Package metadata missing files: ${path}`);
+	return packageJson.files;
+}
+
+export function requireScripts(packageJson: ComponentPackageJson, path: string): Readonly<Record<string, string>> {
+	if (packageJson.scripts === undefined) throw new TypeError(`Package metadata missing scripts: ${path}`);
+	return packageJson.scripts;
+}
+
+export function collectHookCommandsFromValue(value: unknown): readonly string[] {
+	if (typeof value === "string") return [];
+	if (Array.isArray(value)) return value.flatMap(collectHookCommandsFromValue);
+	if (!isRecord(value)) return [];
+	const ownCommand = typeof value["command"] === "string" ? [value["command"]] : [];
+	return [...ownCommand, ...Object.values(value).flatMap(collectHookCommandsFromValue)];
+}
+
+function isComponentPackageJson(value: unknown): value is ComponentPackageJson {
+	if (!isRecord(value)) return false;
+	const dependencies = value["dependencies"];
+	const optionalDependencies = value["optionalDependencies"];
+	const scripts = value["scripts"];
+	const files = value["files"];
+	return (
+		value["type"] === "module" &&
+		value["packageManager"] === "npm@11.12.1" &&
+		isStringRecord(value["bin"]) &&
+		(dependencies === undefined || isStringRecord(dependencies)) &&
+		(optionalDependencies === undefined || isStringRecord(optionalDependencies)) &&
+		(scripts === undefined || isStringRecord(scripts)) &&
+		(files === undefined || isStringArray(files))
+	);
+}
+
+function isHooksJson(value: unknown): value is HooksJson {
+	if (!isRecord(value) || !isRecord(value["hooks"])) return false;
+	return Object.values(value["hooks"]).every(isHookEntries);
+}
+
+function isHookEntries(value: unknown): value is readonly HookEntry[] {
+	return Array.isArray(value) && value.every(isHookEntry);
+}
+
+function isHookEntry(value: unknown): value is HookEntry {
+	return isRecord(value) && Array.isArray(value["hooks"]) && value["hooks"].every(isHookCommand);
+}
+
+function isHookCommand(value: unknown): value is HookCommand {
+	return isRecord(value) && typeof value["command"] === "string";
+}
+
+function isMcpJson(value: unknown): value is McpJson {
+	if (!isRecord(value) || !isRecord(value["mcpServers"])) return false;
+	return Object.values(value["mcpServers"]).every(isMcpServer);
+}
+
+function isMcpServer(value: unknown): value is McpServer {
+	return (
+		isRecord(value) &&
+		typeof value["command"] === "string" &&
+		Array.isArray(value["args"]) &&
+		value["args"].every((item) => typeof item === "string")
+	);
+}
+
+function isPluginJson(value: unknown): value is PluginJson {
+	return isRecord(value) && typeof value["hooks"] === "string";
+}
+
+function isStringArray(value: unknown): value is readonly string[] {
+	return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+
+function isStringRecord(value: unknown): value is Record<string, string> {
+	return isRecord(value) && Object.values(value).every((item) => typeof item === "string");
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/packages/omo-codex/plugin/components/ultrawork/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook user-prompt-submit",
 						"timeout": 5,
-						"statusMessage": "LazyCodex(4.11.1): Checking Ultrawork Trigger"
+						"statusMessage": "(OmO) Checking Ultrawork Trigger"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/ultrawork/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-ultrawork",
-	"version": "4.11.1",
+	"version": "4.12.0",
 	"description": "Codex plugin that injects the ultrawork orchestration directive and ships LazyCodex planning, review, QA, and gate agent roles.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",