oh-my-opencode 4.12.0 → 4.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oh-my-opencode",
-  "version": "4.12.0",
+  "version": "4.13.0",
   "description": "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
   "main": "./dist/index.js",
   "types": "dist/index.d.ts",
@@ -81,7 +81,8 @@
     "build:cli-node": "bun run script/build-cli-node.ts",
     "build:codex-install": "bun run script/build-codex-install.ts",
     "build:codex-plugin": "npm --prefix packages/omo-codex/plugin ci && bun run --cwd packages/omo-codex/plugin build",
-    "build:shared-skills-assets": "rm -rf dist/skills && cp -R packages/shared-skills/skills dist/skills",
+    "build:materialize-frontend": "node packages/omo-codex/plugin/scripts/materialize-shared-upstreams.mjs --strict",
+    "build:shared-skills-assets": "bun run build:materialize-frontend && rm -rf dist/skills && cp -R packages/shared-skills/skills dist/skills",
     "build:lsp-tools-mcp": "npm --prefix packages/lsp-tools-mcp ci && npm --prefix packages/lsp-tools-mcp run build",
     "build:lsp-daemon": "npm --prefix packages/lsp-daemon ci && npm --prefix packages/lsp-daemon run build",
     "build:node-require-shim": "bun run script/patch-node-require-shim.ts",
@@ -90,6 +91,7 @@
     "build:schema": "bun run script/build-schema.ts",
     "build:model-capabilities": "bun run script/build-model-capabilities.ts",
     "clean": "rm -rf dist",
+    "prepack": "bun run build:materialize-frontend",
     "prepare": "bun run build",
     "postinstall": "node postinstall.mjs",
     "prepublishOnly": "bun run clean && bun run build:lsp-tools-mcp && bun run build:lsp-daemon && bun run build",
@@ -170,18 +172,18 @@
     "typescript": "^6.0.3"
   },
   "optionalDependencies": {
-    "oh-my-opencode-darwin-arm64": "4.12.0",
-    "oh-my-opencode-darwin-x64": "4.12.0",
-    "oh-my-opencode-darwin-x64-baseline": "4.12.0",
-    "oh-my-opencode-linux-arm64": "4.12.0",
-    "oh-my-opencode-linux-arm64-musl": "4.12.0",
-    "oh-my-opencode-linux-x64": "4.12.0",
-    "oh-my-opencode-linux-x64-baseline": "4.12.0",
-    "oh-my-opencode-linux-x64-musl": "4.12.0",
-    "oh-my-opencode-linux-x64-musl-baseline": "4.12.0",
-    "oh-my-opencode-windows-arm64": "4.12.0",
-    "oh-my-opencode-windows-x64": "4.12.0",
-    "oh-my-opencode-windows-x64-baseline": "4.12.0"
+    "oh-my-opencode-darwin-arm64": "4.13.0",
+    "oh-my-opencode-darwin-x64": "4.13.0",
+    "oh-my-opencode-darwin-x64-baseline": "4.13.0",
+    "oh-my-opencode-linux-arm64": "4.13.0",
+    "oh-my-opencode-linux-arm64-musl": "4.13.0",
+    "oh-my-opencode-linux-x64": "4.13.0",
+    "oh-my-opencode-linux-x64-baseline": "4.13.0",
+    "oh-my-opencode-linux-x64-musl": "4.13.0",
+    "oh-my-opencode-linux-x64-musl-baseline": "4.13.0",
+    "oh-my-opencode-windows-arm64": "4.13.0",
+    "oh-my-opencode-windows-x64": "4.13.0",
+    "oh-my-opencode-windows-x64-baseline": "4.13.0"
   },
   "overrides": {
     "hono": "^4.12.18",

package/packages/omo-codex/THIRD-PARTY-NOTICES.md

@@ -5,12 +5,20 @@ This file enumerates third-party and ported components redistributed by the
 bundle, component workspaces, generated installer scripts, bundled MCP runtime
 payloads, and component NOTICE files.
 
-CodeGraph is documented in the root notice as a planned integration payload.
-It is not currently an omo-codex plugin component in this wave, so it is not
-listed as a shipped codex component here.
-
 ## Components
 
+### @colbymchenry/codegraph@1.0.1
+- License: MIT, from npm package metadata and root third-party notice inspection.
+- Copyright: CodeGraph contributors.
+- Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph
+- Where-bundled: optional runtime dependency of `plugin/components/codegraph`.
+
+### @colbymchenry/codegraph platform bundles@1.0.1
+- License: MIT for CodeGraph package metadata; bundled payloads also include a Node.js v24.16.0 runtime and vendored JavaScript/WASM dependencies. The Codex CodeGraph component ships the Node.js runtime license and bundled third-party license text at `plugin/components/codegraph/NODE-RUNTIME-LICENSES.md`.
+- Copyright: CodeGraph contributors, Node.js contributors, and bundled dependency contributors.
+- Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph
+- Where-bundled: optional platform packages selected by `@colbymchenry/codegraph` for darwin, linux, and win32 on arm64 and x64.
+
 ### @code-yeongyu/comment-checker@0.8.0
 - License: MIT, from package metadata and the root third-party notice.
 - Copyright: Yeongyu Kim and contributors.
@@ -27,6 +35,11 @@ listed as a shipped codex component here.
 - Notice: `plugin/components/lsp/NOTICE`.
 - Where-bundled: Codex LSP hook component and MCP-facing LSP integration.
 
+### @code-yeongyu/codex-lazycodex-executor-verify@4.12.1
+- License: MIT, from component package metadata.
+- Copyright: Yeongyu Kim and contributors.
+- Where-bundled: Codex `SubagentStop` evidence-verifier hook component.
+
 ### @code-yeongyu/codex-rules@4.10.0
 - License: MIT, from `plugin/components/rules/LICENSE`.
 - Notice: `plugin/components/rules/NOTICE`.
@@ -108,11 +121,21 @@ listed as a shipped codex component here.
 - Copyright: Yeongyu Kim and contributors.
 - Where-bundled: Codex `SessionStart` bootstrap provisioning component and reviewed checksum manifests.
 
+### @sisyphuslabs/codex-codegraph@4.12.1
+- License: MIT, from `plugin/components/codegraph/LICENSE`.
+- Notice: `plugin/components/codegraph/NOTICE`.
+- Where-bundled: Codex CodeGraph session bootstrap hooks and MCP wrapper component.
+
 ### @sisyphuslabs/codex-git-bash-hook@4.10.0
 - License: private project component distributed as part of the codex plugin bundle.
 - Copyright: Yeongyu Kim and contributors.
 - Where-bundled: Codex git-bash reminder hook component.
 
+### @sisyphuslabs/codex-teammode@4.12.1
+- License: private project component distributed as part of the codex plugin bundle.
+- Copyright: Yeongyu Kim and contributors.
+- Where-bundled: Codex team-mode helper hook component and bundled team-mode skills.
+
 ### @sisyphuslabs/omo-codex-plugin@4.10.0
 - License: MIT, from `.codex-plugin/plugin.json`.
 - Copyright: Yeongyu Kim and contributors.

package/packages/omo-codex/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omo",
-  "version": "4.12.0",
+  "version": "4.13.0",
   "description": "One Codex plugin namespace for Yeongyu's local Codex components.",
   "author": {
     "name": "Yeongyu Kim",
@@ -32,7 +32,9 @@
     "./hooks/pre-tool-use-enforcing-unlimited-goal-budget.json",
     "./hooks/post-tool-use-checking-comments.json",
     "./hooks/post-tool-use-checking-lsp-diagnostics.json",
+    "./hooks/post-tool-use-checking-codegraph-init-guidance.json",
     "./hooks/post-tool-use-matching-project-rules.json",
+    "./hooks/post-tool-use-checking-thread-title-hygiene.json",
     "./hooks/post-compact-resetting-git-bash-mcp-reminder.json",
     "./hooks/post-compact-resetting-project-rule-cache.json",
     "./hooks/post-compact-resetting-lsp-diagnostics-cache.json",

package/packages/omo-codex/plugin/README.md

@@ -13,7 +13,7 @@ Internally each component remains isolated under `components/`:
 - `components/ulw-loop`
 - `components/telemetry`
 
-The root plugin manifest exports one Codex plugin named `omo`, with aggregate hooks, skills, and plugin-scoped MCP servers for `grep_app`, `context7`, `git_bash`, and `lsp`. AST-aware search ships as the `ast-grep` skill, not as an MCP server.
+The root plugin manifest exports one Codex plugin named `omo`, with aggregate hooks, skills, and plugin-scoped MCP servers for `grep_app`, `context7`, `codegraph`, `git_bash`, and `lsp`. AST-aware search ships as the `ast-grep` skill, not as an MCP server.
 
 ## Telemetry
 

package/packages/omo-codex/plugin/components/bootstrap/dist/cli.js

@@ -1535,6 +1535,7 @@ import { dirname as dirname6 } from "node:path";
 // ../src/install/toml-section-editor.ts
 function findTomlSection(config, header) {
   const headerLine = `[${header}]`;
+  const targetHeaderPath = parseTomlDottedKey(header);
   const lines = config.match(/[^\n]*\n?|$/g) ?? [];
   let offset = 0;
   let start = -1;
@@ -1543,7 +1544,7 @@ function findTomlSection(config, header) {
       break;
     const trimmed = line.trim();
     if (start === -1) {
-      if (trimmed === headerLine)
+      if (tomlTableHeaderMatches(trimmed, headerLine, targetHeaderPath))
         start = offset;
     } else if (trimmed.startsWith("[") && trimmed.endsWith("]")) {
       return { start, end: offset, text: config.slice(start, offset) };
@@ -1599,6 +1600,127 @@ function insertSetting(sectionText, key, value) {
 function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+function tomlTableHeaderMatches(line, headerLine, targetHeaderPath) {
+  if (line === headerLine)
+    return true;
+  if (!targetHeaderPath)
+    return false;
+  const candidateHeaderPath = parseTomlTableHeader(line);
+  if (!candidateHeaderPath || candidateHeaderPath.length !== targetHeaderPath.length)
+    return false;
+  return candidateHeaderPath.every((part, index) => part === targetHeaderPath[index]);
+}
+function parseTomlTableHeader(line) {
+  if (!line.startsWith("[") || !line.endsWith("]") || line.startsWith("[["))
+    return null;
+  return parseTomlDottedKey(line.slice(1, -1).trim());
+}
+function parseTomlDottedKey(input) {
+  const parts = [];
+  let index = 0;
+  while (index < input.length) {
+    index = skipWhitespace(input, index);
+    const parsedKey = parseTomlKeyPart(input, index);
+    if (!parsedKey)
+      return null;
+    parts.push(parsedKey.value);
+    index = skipWhitespace(input, parsedKey.nextIndex);
+    if (index === input.length)
+      return parts;
+    if (input[index] !== ".")
+      return null;
+    index += 1;
+  }
+  return parts.length > 0 ? parts : null;
+}
+function parseTomlKeyPart(input, startIndex) {
+  const quote = input[startIndex];
+  if (quote === "'")
+    return parseLiteralTomlString(input, startIndex);
+  if (quote === '"')
+    return parseBasicTomlString(input, startIndex);
+  return parseBareTomlKey(input, startIndex);
+}
+function parseLiteralTomlString(input, startIndex) {
+  let index = startIndex + 1;
+  let value = "";
+  while (index < input.length) {
+    const char = input[index];
+    if (char === "'")
+      return { value, nextIndex: index + 1 };
+    value += char;
+    index += 1;
+  }
+  return null;
+}
+function parseBasicTomlString(input, startIndex) {
+  let index = startIndex + 1;
+  let value = "";
+  while (index < input.length) {
+    const char = input[index];
+    if (char === '"')
+      return { value, nextIndex: index + 1 };
+    if (char !== "\\") {
+      value += char;
+      index += 1;
+      continue;
+    }
+    const escaped = parseBasicTomlEscape(input, index);
+    if (!escaped)
+      return null;
+    value += escaped.value;
+    index = escaped.nextIndex;
+  }
+  return null;
+}
+function parseBasicTomlEscape(input, backslashIndex) {
+  const escape = input[backslashIndex + 1];
+  if (escape === undefined)
+    return null;
+  if (escape === "b")
+    return { value: "\b", nextIndex: backslashIndex + 2 };
+  if (escape === "t")
+    return { value: "\t", nextIndex: backslashIndex + 2 };
+  if (escape === "n")
+    return { value: `
+`, nextIndex: backslashIndex + 2 };
+  if (escape === "f")
+    return { value: "\f", nextIndex: backslashIndex + 2 };
+  if (escape === "r")
+    return { value: "\r", nextIndex: backslashIndex + 2 };
+  if (escape === '"')
+    return { value: '"', nextIndex: backslashIndex + 2 };
+  if (escape === "\\")
+    return { value: "\\", nextIndex: backslashIndex + 2 };
+  if (escape === "u")
+    return parseUnicodeEscape(input, backslashIndex + 2, 4);
+  if (escape === "U")
+    return parseUnicodeEscape(input, backslashIndex + 2, 8);
+  return null;
+}
+function parseUnicodeEscape(input, digitsStart, digitCount) {
+  const digits = input.slice(digitsStart, digitsStart + digitCount);
+  if (digits.length !== digitCount || !/^[0-9A-Fa-f]+$/.test(digits))
+    return null;
+  const codePoint = Number.parseInt(digits, 16);
+  if (codePoint > 1114111)
+    return null;
+  return { value: String.fromCodePoint(codePoint), nextIndex: digitsStart + digitCount };
+}
+function parseBareTomlKey(input, startIndex) {
+  let index = startIndex;
+  while (index < input.length && /[A-Za-z0-9_-]/.test(input[index]))
+    index += 1;
+  if (index === startIndex)
+    return null;
+  return { value: input.slice(startIndex, index), nextIndex: index };
+}
+function skipWhitespace(input, startIndex) {
+  let index = startIndex;
+  while (index < input.length && /\s/.test(input[index]))
+    index += 1;
+  return index;
+}
 
 // ../src/install/codex-config-toml-sections.ts
 function removeTomlSections(config, shouldRemove) {
@@ -1627,27 +1749,18 @@ function splitTomlSections(config) {
   return sections;
 }
 function parsePluginHeaderKey(header) {
-  const prefix = "plugins.";
-  if (!header.startsWith(prefix))
-    return null;
-  return parseLeadingJsonString2(header.slice(prefix.length));
+  const path = parseTomlDottedKey(header);
+  return path?.[0] === "plugins" ? path[1] ?? null : null;
 }
 function parseAgentHeaderName(header) {
-  const prefix = "agents.";
-  if (!header.startsWith(prefix))
-    return null;
-  const key = header.slice(prefix.length);
-  return key.startsWith('"') ? parseLeadingJsonString2(key) : key;
+  const path = parseTomlDottedKey(header);
+  return path?.[0] === "agents" ? path[1] ?? null : null;
 }
-function parseJsonString2(value) {
-  try {
-    const parsed = JSON.parse(value);
-    return typeof parsed === "string" ? parsed : null;
-  } catch (error) {
-    if (error instanceof Error)
-      return null;
+function parseHookStateHeaderKey(header) {
+  const path = parseTomlDottedKey(header);
+  if (path?.[0] !== "hooks" || path[1] !== "state")
     return null;
-  }
+  return path[2] ?? null;
 }
 function parseTomlHeader2(line) {
   const trimmed = line.trim();
@@ -1655,25 +1768,6 @@ function parseTomlHeader2(line) {
     return null;
   return trimmed.slice(1, -1);
 }
-function parseLeadingJsonString2(value) {
-  if (!value.startsWith('"'))
-    return parseJsonString2(value);
-  let escaped = false;
-  for (let index = 1;index < value.length; index += 1) {
-    const char = value[index];
-    if (escaped) {
-      escaped = false;
-      continue;
-    }
-    if (char === "\\") {
-      escaped = true;
-      continue;
-    }
-    if (char === '"')
-      return parseJsonString2(value.slice(0, index + 1));
-  }
-  return null;
-}
 
 // ../src/install/codex-config-agents.ts
 var LEGACY_MANAGED_CODEX_AGENT_NAMES_TO_PURGE = ["codex-ultrawork-reviewer"];
@@ -1810,10 +1904,7 @@ function removeStaleMarketplacePluginBlocks(config, marketplaceName, keepPluginN
 }
 function removeStaleMarketplaceHookStateBlocks(config, marketplaceName, keepPluginNames) {
   return removeTomlSections(config, (header) => {
-    const prefix = "hooks.state.";
-    if (!header.startsWith(prefix))
-      return false;
-    const hookKey = parseJsonString2(header.slice(prefix.length));
+    const hookKey = parseHookStateHeaderKey(header);
     if (hookKey === null)
       return false;
     const separator = hookKey.indexOf(":");
@@ -1898,9 +1989,10 @@ enabled = true
 function ensureOmoBuiltinMcpPolicies(config, input) {
   if (input.marketplaceName !== "sisyphuslabs" || !input.pluginNames.includes("omo"))
     return config;
+  const codegraphEnabled = input.codegraphMcpEnabled ?? true;
   const gitBashEnabled = (input.platform ?? process.platform) === "win32" && input.gitBashEnabled === true;
   let nextConfig = ensurePluginMcpEnabled(config, "omo@sisyphuslabs", "context7", true);
-  nextConfig = ensurePluginMcpEnabled(nextConfig, "omo@sisyphuslabs", "codegraph", true);
+  nextConfig = ensurePluginMcpEnabled(nextConfig, "omo@sisyphuslabs", "codegraph", codegraphEnabled);
   nextConfig = ensurePluginMcpEnabled(nextConfig, "omo@sisyphuslabs", "git_bash", gitBashEnabled);
   return nextConfig;
 }

package/packages/omo-codex/plugin/components/bootstrap/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sisyphuslabs/codex-bootstrap",
-	"version": "4.12.0",
+	"version": "4.13.0",
 	"description": "Codex SessionStart bootstrap component that provisions LazyCodex runtime dependencies from a detached worker.",
 	"type": "module",
 	"private": true,

package/packages/omo-codex/plugin/components/codegraph/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Yeongyu Kim
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.