oh-my-opencode 4.12.1 → 4.14.0

package/packages/omo-codex/plugin/components/bootstrap/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sisyphuslabs/codex-bootstrap",
-	"version": "4.12.1",
+	"version": "4.14.0",
 	"description": "Codex SessionStart bootstrap component that provisions LazyCodex runtime dependencies from a detached worker.",
 	"type": "module",
 	"private": true,

package/packages/omo-codex/plugin/components/bootstrap/scripts/bootstrap.ps1

@@ -1,8 +1,9 @@
+# allow: SIZE_OK - Windows bootstrap hook keeps PowerShell 5.1-compatible resolver/provisioning flow in one audited entrypoint.
 # LazyCodex bootstrap SessionStart hook for native Windows (Windows PowerShell 5.1).
-# Codex runs hooks through %COMSPEC%, so node may be absent from PATH entirely;
-# this script provisions it silently: node on PATH -> common install dirs ->
-# winget OpenJS.NodeJS.LTS -> portable ZIP pinned by manifests/node.json
-# (sha256-verified, extracted under <codexHome>\runtime\node, USER PATH append).
+# Codex runs hooks through %COMSPEC%, so node may be absent from PATH entirely.
+# Resolve Codex-managed Node first, then the portable ZIP pinned by
+# manifests/node.json, then common install dirs and PATH. Never install system
+# dependencies or mutate the user PATH from a hook.
 # Git Bash is prepared best-effort on the provisioning path, then the script
 # delegates to the bundled node hook. It always exits 0: provisioning failures
 # are logged to $env:PLUGIN_DATA\bootstrap\ps-bootstrap.log, never block a session.
@@ -70,62 +71,50 @@ function Get-PortableNodeDirectory {
 	return (Join-Path $runtimeRoot ("node-v" + $Manifest.version + "-win-x64"))
 }
 
+function Resolve-NodeReplNodePath {
+	param([string]$CodexHome)
+	if (-not [string]::IsNullOrWhiteSpace($env:NODE_REPL_NODE_PATH)) {
+		$candidate = $env:NODE_REPL_NODE_PATH.Trim()
+		if (Test-Path -LiteralPath $candidate -PathType Leaf) { return $candidate }
+	}
+	$configPath = Join-Path $CodexHome "config.toml"
+	if (-not (Test-Path -LiteralPath $configPath -PathType Leaf)) { return $null }
+	try {
+		foreach ($line in Get-Content -LiteralPath $configPath) {
+			if ($line -match '^\s*NODE_REPL_NODE_PATH\s*=\s*[''"]([^''"]+)[''"]') {
+				$candidate = $Matches[1]
+				if (Test-Path -LiteralPath $candidate -PathType Leaf) { return $candidate }
+			}
+		}
+	} catch {
+		Write-BootstrapLog ("degraded component=node reason=config-read-failed path=" + $configPath + " error=" + $_.Exception.Message + " hint=" + $script:DoctorHint)
+	}
+	return $null
+}
+
 function Resolve-NodeCommand {
 	param([string]$CodexHome, $Manifest)
-	$onPath = Get-Command node -CommandType Application -ErrorAction SilentlyContinue
-	if ($null -ne $onPath) {
-		return (@($onPath)[0]).Source
-	}
+	$codexNode = Resolve-NodeReplNodePath -CodexHome $CodexHome
+	if ($null -ne $codexNode) { return $codexNode }
 	$candidateDirectories = @()
+	if ($null -ne $Manifest) {
+		$candidateDirectories += (Get-PortableNodeDirectory -CodexHome $CodexHome -Manifest $Manifest)
+	}
 	if (-not [string]::IsNullOrWhiteSpace($env:ProgramFiles)) {
 		$candidateDirectories += (Join-Path $env:ProgramFiles "nodejs")
 	}
 	if (-not [string]::IsNullOrWhiteSpace($env:LOCALAPPDATA)) {
 		$candidateDirectories += (Join-Path $env:LOCALAPPDATA "Programs\nodejs")
 	}
-	if ($null -ne $Manifest) {
-		$candidateDirectories += (Get-PortableNodeDirectory -CodexHome $CodexHome -Manifest $Manifest)
-	}
 	foreach ($directory in $candidateDirectories) {
 		$candidate = Join-Path $directory "node.exe"
 		if (Test-Path -LiteralPath $candidate -PathType Leaf) { return $candidate }
 	}
-	return $null
-}
-
-function Install-NodeWithWinget {
-	$winget = Get-Command winget -ErrorAction SilentlyContinue
-	if ($null -eq $winget) {
-		Write-BootstrapLog "winget unavailable; skipping winget node install"
-		return
-	}
-	Write-BootstrapLog "installing node via: winget install OpenJS.NodeJS.LTS --silent"
-	try {
-		& winget install OpenJS.NodeJS.LTS --silent --accept-package-agreements --accept-source-agreements | Out-Null
-		Write-BootstrapLog ("winget node install finished with exit code " + $LASTEXITCODE)
-	} catch {
-		Write-BootstrapLog ("winget node install failed: " + $_.Exception.Message)
-	}
-}
-
-function Add-UserPathEntry {
-	param([string]$Directory)
-	$normalizedTarget = $Directory.TrimEnd("\")
-	$currentPath = [Environment]::GetEnvironmentVariable("Path", "User")
-	if ($null -eq $currentPath) { $currentPath = "" }
-	foreach ($entry in $currentPath.Split(";")) {
-		if ($entry.Trim().TrimEnd("\") -eq $normalizedTarget) {
-			Write-BootstrapLog ("user PATH already contains " + $Directory + "; leaving it unchanged")
-			return
-		}
-	}
-	if ($currentPath.Trim().Length -eq 0) {
-		$updatedPath = $Directory
-	} else {
-		$updatedPath = $currentPath.TrimEnd(";") + ";" + $Directory
+	$onPath = Get-Command node -CommandType Application -ErrorAction SilentlyContinue
+	if ($null -ne $onPath) {
+		return (@($onPath)[0]).Source
 	}
-	[Environment]::SetEnvironmentVariable("Path", $updatedPath, "User")
-	Write-BootstrapLog ("appended " + $Directory + " to the USER PATH; restart Codex so new sessions can see node")
+	return $null
 }
 
 function Install-PortableNode {
@@ -170,7 +159,6 @@ function Install-PortableNode {
 		return $null
 	}
 	Write-BootstrapLog ("portable node provisioned at " + $nodeExe)
-	Add-UserPathEntry -Directory $nodeDirectory
 	return $nodeExe
 }
 
@@ -220,23 +208,8 @@ function Resolve-GitBash {
 
 function Initialize-GitBash {
 	$resolution = Resolve-GitBash
-	if (($null -eq $resolution) -and ($env:OMO_CODEX_SKIP_GIT_BASH_AUTO_INSTALL -ne "1")) {
-		$winget = Get-Command winget -ErrorAction SilentlyContinue
-		if ($null -ne $winget) {
-			Write-BootstrapLog "installing git bash via: winget install --id Git.Git -e --source winget"
-			try {
-				& winget install --id Git.Git -e --source winget | Out-Null
-				Write-BootstrapLog ("winget git install finished with exit code " + $LASTEXITCODE)
-			} catch {
-				Write-BootstrapLog ("winget git install failed: " + $_.Exception.Message)
-			}
-			$resolution = Resolve-GitBash
-		} else {
-			Write-BootstrapLog "winget unavailable; skipping git bash install"
-		}
-	}
 	if ($null -eq $resolution) {
-		Write-BootstrapLog ("degraded component=git_bash reason=not-found install=winget install --id Git.Git -e --source winget hint=" + $script:DoctorHint)
+		Write-BootstrapLog ("degraded component=git_bash reason=not-found install=Install Git for Windows or set OMO_CODEX_GIT_BASH_PATH hint=" + $script:DoctorHint)
 		return
 	}
 	Write-BootstrapLog ("git bash resolved at " + $resolution.Path + " source=" + $resolution.Source)
@@ -262,7 +235,7 @@ function Invoke-NodeHookDelegate {
 }
 
 function Write-ProvisioningIncompleteNotice {
-	$notice = "LazyCodex bootstrap: Node.js is not available yet. Install Node LTS (winget install OpenJS.NodeJS.LTS), then restart Codex. Diagnose with: " + $script:DoctorHint
+	$notice = "LazyCodex bootstrap: Node.js is not available yet. Rerun LazyCodex install from Codex Desktop or install Node LTS manually, then restart Codex. Diagnose with: " + $script:DoctorHint
 	$payload = @{
 		hookSpecificOutput = @{
 			hookEventName = "SessionStart"
@@ -288,11 +261,7 @@ function Invoke-Bootstrap {
 		Invoke-NodeHookDelegate -NodeExe $nodeExe
 		return
 	}
-	Install-NodeWithWinget
-	$nodeExe = Resolve-NodeCommand -CodexHome $codexHome -Manifest $manifest
-	if ($null -eq $nodeExe) {
 		$nodeExe = Install-PortableNode -CodexHome $codexHome -Manifest $manifest
-	}
 	Initialize-GitBash
 	if ($null -eq $nodeExe) {
 		Write-BootstrapLog ("degraded component=node reason=unresolved hint=" + $script:DoctorHint)

package/packages/omo-codex/plugin/components/bootstrap/scripts/node-dispatch.ps1

@@ -0,0 +1,75 @@
+param(
+	[Parameter(Mandatory = $true, Position = 0)]
+	[string]$Target,
+	[Parameter(ValueFromRemainingArguments = $true, Position = 1)]
+	[string[]]$RemainingArgs
+)
+
+$ErrorActionPreference = "Continue"
+
+function Resolve-CodexHome {
+	if (-not [string]::IsNullOrWhiteSpace($env:CODEX_HOME)) { return $env:CODEX_HOME.Trim() }
+	return (Join-Path $env:USERPROFILE ".codex")
+}
+
+function Resolve-NodeReplNodePath {
+	param([string]$CodexHome)
+	if (-not [string]::IsNullOrWhiteSpace($env:NODE_REPL_NODE_PATH)) {
+		$candidate = $env:NODE_REPL_NODE_PATH.Trim()
+		if (Test-Path -LiteralPath $candidate -PathType Leaf) { return $candidate }
+	}
+	$configPath = Join-Path $CodexHome "config.toml"
+	if (-not (Test-Path -LiteralPath $configPath -PathType Leaf)) { return $null }
+	try {
+		foreach ($line in Get-Content -LiteralPath $configPath) {
+			if ($line -match '^\s*NODE_REPL_NODE_PATH\s*=\s*[''"]([^''"]+)[''"]') {
+				$candidate = $Matches[1]
+				if (Test-Path -LiteralPath $candidate -PathType Leaf) { return $candidate }
+			}
+		}
+	} catch { }
+	return $null
+}
+
+function Resolve-PortableNode {
+	param([string]$CodexHome)
+	$runtimeRoot = Join-Path $CodexHome "runtime\node"
+	if (-not (Test-Path -LiteralPath $runtimeRoot)) { return $null }
+	try {
+		$nodes = @(Get-ChildItem -LiteralPath $runtimeRoot -Recurse -Filter "node.exe" -ErrorAction SilentlyContinue)
+		if ($nodes.Count -gt 0) { return $nodes[0].FullName }
+	} catch { }
+	return $null
+}
+
+function Resolve-NodeCommand {
+	param([string]$CodexHome)
+	$codexNode = Resolve-NodeReplNodePath -CodexHome $CodexHome
+	if ($null -ne $codexNode) { return $codexNode }
+	$portableNode = Resolve-PortableNode -CodexHome $CodexHome
+	if ($null -ne $portableNode) { return $portableNode }
+	$candidateDirectories = @()
+	if (-not [string]::IsNullOrWhiteSpace($env:ProgramFiles)) {
+		$candidateDirectories += (Join-Path $env:ProgramFiles "nodejs")
+	}
+	if (-not [string]::IsNullOrWhiteSpace($env:LOCALAPPDATA)) {
+		$candidateDirectories += (Join-Path $env:LOCALAPPDATA "Programs\nodejs")
+	}
+	foreach ($directory in $candidateDirectories) {
+		$candidate = Join-Path $directory "node.exe"
+		if (Test-Path -LiteralPath $candidate -PathType Leaf) { return $candidate }
+	}
+	$onPath = Get-Command node -CommandType Application -ErrorAction SilentlyContinue
+	if ($null -ne $onPath) { return (@($onPath)[0]).Source }
+	return $null
+}
+
+$codexHome = Resolve-CodexHome
+$nodeExe = Resolve-NodeCommand -CodexHome $codexHome
+if ($null -eq $nodeExe) {
+	Write-Error "LazyCodex hook could not find Node. Rerun LazyCodex install from Codex Desktop or set NODE_REPL_NODE_PATH in Codex config."
+	exit 127
+}
+
+& $nodeExe $Target @RemainingArgs
+exit $LASTEXITCODE

package/packages/omo-codex/plugin/components/bootstrap/src/cli.ts

@@ -38,7 +38,7 @@ export {
 } from "./provision.ts";
 export type { ResolvePreexistingSgOptions, SgProvisionSeams } from "./provision.ts";
 export { GIT_BASH_INSTALL_HINT, runWorkerSetup, SETUP_MARKETPLACE_NAME, SETUP_PLUGIN_NAME } from "./setup.ts";
-export type { SetupRunCommand, WorkerSetupOptions } from "./setup.ts";
+export type { WorkerSetupOptions } from "./setup.ts";
 export type {
 	SessionStartAction,
 	SessionStartHookOptions,

package/packages/omo-codex/plugin/components/bootstrap/src/setup.ts

@@ -1,7 +1,5 @@
-import { execFile } from "node:child_process";
 import { copyFile, mkdir, readdir, rm, stat } from "node:fs/promises";
 import { join } from "node:path";
-import { promisify } from "node:util";
 
 // These relative imports resolve at BUILD time in the monorepo; esbuild
 // inlines the installer source modules into dist/cli.js so PLUGIN_ROOT ships
@@ -25,8 +23,6 @@ export const SETUP_MARKETPLACE_NAME = "sisyphuslabs";
 export const SETUP_PLUGIN_NAME = "omo";
 export const GIT_BASH_INSTALL_HINT = "winget install --id Git.Git -e --source winget";
 
-export type SetupRunCommand = (command: string, args: readonly string[], options: { cwd: string }) => Promise<unknown>;
-
 export interface WorkerSetupOptions {
 	readonly codexHome: string;
 	readonly env: Record<string, string | undefined>;
@@ -35,8 +31,6 @@ export interface WorkerSetupOptions {
 	readonly platform: NodeJS.Platform;
 	/** Timestamp used for bootstrap.log entries; the worker passes its run time. */
 	readonly now?: number;
-	/** Test seam: command runner for the win32 Git Bash auto-install. */
-	readonly runCommand?: SetupRunCommand;
 	/** Test seam: overrides Git Bash discovery (win32 only). */
 	readonly resolveGitBash?: () => GitBashResolution;
 }
@@ -68,10 +62,8 @@ async function resolveGitBashStep(options: WorkerSetupOptions, degraded: Bootstr
 	if (options.platform !== "win32") return false;
 	try {
 		const resolution = await prepareGitBashForInstall({
-			cwd: options.pluginRoot,
 			env: options.env,
 			platform: options.platform,
-			runCommand: options.runCommand ?? defaultRunCommand,
 			...(options.resolveGitBash === undefined ? {} : { resolveGitBash: options.resolveGitBash }),
 		});
 		if (resolution.found) return true;
@@ -211,10 +203,8 @@ async function linkComponentBinsStep(options: WorkerSetupOptions, degraded: Boot
 	await linkRuntimeWrapperStep(options, binDir, degraded);
 }
 
-// The marketplace payload intentionally ships without <pluginRoot>/dist/cli
-// (thin payload), so linkRootRuntimeBin returning null is the expected
-// degraded mode there: record the omo-cli ledger entry and log the same
-// warning install-local.mjs prints instead of leaving a broken `omo` link.
+// Older marketplace payloads may not have <pluginRoot>/dist/cli. Keep that
+// degraded path explicit instead of leaving a broken `omo` link.
 async function linkRuntimeWrapperStep(
 	options: WorkerSetupOptions,
 	binDir: string,
@@ -258,12 +248,6 @@ async function stampGitBashEnvStep(options: WorkerSetupOptions, degraded: Bootst
 	}
 }
 
-const execFileAsync = promisify(execFile);
-
-async function defaultRunCommand(command: string, args: readonly string[], options: { cwd: string }): Promise<unknown> {
-	return execFileAsync(command, [...args], { cwd: options.cwd });
-}
-
 async function directoryNames(root: string): Promise<string[]> {
 	return entryNames(root, (entry) => entry.isDirectory());
 }

package/packages/omo-codex/plugin/components/codegraph/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Yeongyu Kim
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.