oh-my-opencode 4.15.0 → 4.16.0

package/packages/omo-codex/plugin/scripts/auto-update-plan.mjs

@@ -1,6 +1,7 @@
 import { spawn, spawnSync } from "node:child_process";
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { existsSync, lstatSync, readFileSync, readdirSync, readlinkSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 import { detectInstallFlow, resolveInstallSnapshotPath } from "./install-flow.mjs";
@@ -9,6 +10,23 @@ import { resolveSpawnInvocation } from "./spawn-command.mjs";
 const DEFAULT_UPDATE_COMMAND = "npx";
 const DEFAULT_UPDATE_ARGS = ["--yes", "lazycodex-ai@latest", "install", "--no-tui", "--codex-autonomous"];
 const DEFAULT_LATEST_VERSION_TIMEOUT_MS = 1_500;
+const SISYPHUS_MARKETPLACE_NAME = "sisyphuslabs";
+const OMO_PLUGIN_NAME = "omo";
+const COMMAND_SHIM_MARKER = ":: generated by oh-my-openagent Codex installer";
+const MANAGED_COMPONENT_BIN_NAMES = new Set([
+	"lazycodex-executor-verify",
+	"omo-codegraph",
+	"omo-comment-checker",
+	"omo-git-bash-hook",
+	"omo-lsp",
+	"omo-rules",
+	"omo-start-work-continuation",
+	"omo-telemetry",
+	"omo-ultrawork",
+	"omo-ulw-loop",
+	"ulw",
+	"ulw-loop",
+]);
 
 export function resolveLazyCodexUpdatePlan({ currentVersion, latestVersion, command = DEFAULT_UPDATE_COMMAND, args = DEFAULT_UPDATE_ARGS } = {}) {
 	const current = parseVersion(currentVersion);
@@ -38,6 +56,16 @@ export function detectAutoUpdateInstallFlow(env) {
 	return detectInstallFlow({ pluginRoot: resolveAutoUpdatePluginRoot(env), env });
 }
 
+export function detectMarketplaceLocalRepair(env = {}) {
+	const codexHome = resolveCodexHome(env);
+	const marketplaceRoot = join(codexHome, "plugins", "cache", SISYPHUS_MARKETPLACE_NAME);
+	const reasons = [
+		...missingCachedMarketplaceSources(marketplaceRoot),
+		...missingManagedBinTargets({ env, marketplaceRoot }),
+	];
+	return { needsRepair: reasons.length > 0, reasons };
+}
+
 export function resolveCurrentVersion(env) {
 	if (env.LAZYCODEX_CURRENT_VERSION?.trim()) return env.LAZYCODEX_CURRENT_VERSION.trim();
 	const pluginRoot = dirname(dirname(fileURLToPath(import.meta.url)));
@@ -120,6 +148,109 @@ function resolveAutoUpdatePluginRoot(env) {
 	return dirname(dirname(fileURLToPath(import.meta.url)));
 }
 
+function resolveCodexHome(env) {
+	return resolve(env.CODEX_HOME?.trim() || join(resolveHome(env), ".codex"));
+}
+
+function resolveHome(env) {
+	return env.HOME?.trim() || homedir();
+}
+
+function resolveInstallerBinDir(env, codexHome) {
+	if (env.CODEX_LOCAL_BIN_DIR?.trim()) return resolve(env.CODEX_LOCAL_BIN_DIR.trim());
+	const home = resolveHome(env);
+	const defaultCodexHome = resolve(home, ".codex");
+	const resolvedCodexHome = resolve(codexHome);
+	return resolvedCodexHome === defaultCodexHome ? resolve(home, ".local", "bin") : join(resolvedCodexHome, "bin");
+}
+
+function missingCachedMarketplaceSources(marketplaceRoot) {
+	const manifest = readJsonObject(join(marketplaceRoot, ".agents", "plugins", "marketplace.json"));
+	if (manifest === undefined || !Array.isArray(manifest.plugins)) return [];
+	const reasons = [];
+	for (const plugin of manifest.plugins) {
+		if (!isPlainRecord(plugin) || plugin.name !== OMO_PLUGIN_NAME) continue;
+		const localPath = localMarketplaceSourcePath(plugin.source);
+		if (localPath === undefined) continue;
+		const resolvedPath = resolve(marketplaceRoot, localPath);
+		if (!isPathInside(resolvedPath, marketplaceRoot)) {
+			reasons.push({ kind: "invalid-marketplace-payload" });
+			continue;
+		}
+		if (!existsSync(resolvedPath)) {
+			reasons.push({ kind: "missing-marketplace-payload" });
+		}
+	}
+	return reasons;
+}
+
+function missingManagedBinTargets({ env, marketplaceRoot }) {
+	const binDir = resolveInstallerBinDir(env, resolveCodexHome(env));
+	let names;
+	try {
+		names = readdirSync(binDir);
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return [];
+		throw error;
+	}
+	const reasons = [];
+	for (const name of names) {
+		const binName = managedBinNameForEntry(name);
+		if (binName === undefined) continue;
+		const linkPath = join(binDir, name);
+		let target;
+		try {
+			target = readManagedBinTarget(linkPath);
+		} catch (error) {
+			if (error instanceof Error && "code" in error && error.code === "ENOENT") continue;
+			throw error;
+		}
+		if (target === undefined) continue;
+		if (!isManagedCachedComponentTarget(target, marketplaceRoot) || existsSync(target)) continue;
+		reasons.push({ kind: "dangling-managed-bin", binName });
+	}
+	return reasons;
+}
+
+function managedBinNameForEntry(name) {
+	const candidate = name.endsWith(".cmd") ? name.slice(0, -4) : name;
+	return MANAGED_COMPONENT_BIN_NAMES.has(candidate) ? candidate : undefined;
+}
+
+function readManagedBinTarget(linkPath) {
+	const linkStat = lstatSync(linkPath);
+	if (linkStat.isSymbolicLink()) {
+		const linkTarget = readlinkSync(linkPath);
+		return isAbsolute(linkTarget) ? linkTarget : resolve(dirname(linkPath), linkTarget);
+	}
+	if (!linkStat.isFile()) return undefined;
+	const content = readFileSync(linkPath, "utf8");
+	if (!content.includes(COMMAND_SHIM_MARKER)) return undefined;
+	return extractCommandShimTarget(content);
+}
+
+function extractCommandShimTarget(content) {
+	const match = /"([^"\r\n]+components[\\/][^"\r\n]+[\\/]dist[\\/]cli\.js)" %\*/.exec(content);
+	return match?.[1];
+}
+
+function localMarketplaceSourcePath(source) {
+	if (!isPlainRecord(source)) return undefined;
+	return source.source === "local" && typeof source.path === "string" ? source.path : undefined;
+}
+
+function isManagedCachedComponentTarget(target, marketplaceRoot) {
+	if (!isPathInside(target, marketplaceRoot)) return false;
+	const parts = target.split(/[\\/]+/);
+	const suffix = parts.slice(-4);
+	return suffix[0] === "components" && suffix[2] === "dist" && suffix[3] === "cli.js";
+}
+
+function isPathInside(path, root) {
+	const relativePath = relative(resolve(root), resolve(path));
+	return relativePath === "" || (!relativePath.startsWith("..") && !isAbsolute(relativePath));
+}
+
 function readVersionManifest(path) {
 	try {
 		const parsed = JSON.parse(readFileSync(path, "utf8"));
@@ -131,3 +262,17 @@ function readVersionManifest(path) {
 		throw error;
 	}
 }
+
+function readJsonObject(path) {
+	try {
+		const parsed = JSON.parse(readFileSync(path, "utf8"));
+		return isPlainRecord(parsed) ? parsed : undefined;
+	} catch (error) {
+		if (error instanceof Error) return undefined;
+		throw error;
+	}
+}
+
+function isPlainRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/packages/omo-codex/plugin/scripts/auto-update-release-notes.mjs

@@ -25,6 +25,35 @@ export function formatMarketplaceFlowNotice({ updateContext, releaseNotes }) {
 	].join(" ");
 }
 
+export function formatMarketplaceRepairStartedNotice({ pendingNotice, releaseNotes, repairReasons = [] }) {
+	const reasons = formatRepairReasons(repairReasons);
+	return [
+		`[LazyCodex] Auto-update repair started in the background: v${pendingNotice.fromVersion} -> v${pendingNotice.toVersion}.`,
+		`Detected stale local LazyCodex cache/bin state: ${reasons}.`,
+		"LazyCodex started its bundled reinstall repair. Tell the user, in the user's preferred tone, that LazyCodex found a broken local cache or command link and started a repair; recommend starting a new Codex session after it completes.",
+		formatReleaseNotesForNotice({ version: pendingNotice.toVersion, releaseNotes }),
+	].join(" ");
+}
+
+function formatRepairReasons(repairReasons) {
+	if (repairReasons.length === 0) return "stale local cache state was detected";
+	return [...new Set(repairReasons.map(formatRepairReason))].join("; ");
+}
+
+function formatRepairReason(reason) {
+	if (!isPlainRecord(reason)) return "stale local cache state";
+	if (reason.kind === "missing-marketplace-payload") return "missing marketplace payload";
+	if (reason.kind === "invalid-marketplace-payload") return "invalid marketplace payload";
+	if (reason.kind === "dangling-managed-bin" && typeof reason.binName === "string") {
+		return `dangling managed command link: ${sanitizeBinName(reason.binName)}`;
+	}
+	return "stale local cache state";
+}
+
+function sanitizeBinName(binName) {
+	return /^[a-z0-9][a-z0-9._-]{0,80}$/i.test(binName) ? binName : "managed command";
+}
+
 export async function resolveReleaseNotes({ env, latestVersion }) {
 	const override = env.LAZYCODEX_RELEASE_NOTES?.trim();
 	if (override) return truncateReleaseNotes(override);
@@ -133,3 +162,7 @@ function parsePositiveInteger(value, fallback) {
 	const parsed = Number.parseInt(value, 10);
 	return Number.isFinite(parsed) && parsed >= 0 ? parsed : fallback;
 }
+
+function isPlainRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/packages/omo-codex/plugin/scripts/auto-update.mjs

@@ -14,6 +14,7 @@ import {
 import {
 	compareVersions,
 	defaultRunCommandForManualUpdate,
+	detectMarketplaceLocalRepair,
 	detectAutoUpdateInstallFlow,
 	parsePositiveInteger,
 	parseVersion,
@@ -23,7 +24,12 @@ import {
 	resolveLatestVersion,
 	resolveLazyCodexUpdatePlan,
 } from "./auto-update-plan.mjs";
-import { formatMarketplaceFlowNotice, formatUpdateStartedNotice, resolveReleaseNotes } from "./auto-update-release-notes.mjs";
+import {
+	formatMarketplaceFlowNotice,
+	formatMarketplaceRepairStartedNotice,
+	formatUpdateStartedNotice,
+	resolveReleaseNotes,
+} from "./auto-update-release-notes.mjs";
 import { migrateCodexConfig } from "./migrate-codex-config.mjs";
 import { migrateOmoSotConfig } from "./migrate-omo-sot.mjs";
 import { resolveSpawnInvocation } from "./spawn-command.mjs";
@@ -38,9 +44,11 @@ export function resolveAutoUpdatePlan({ env = process.env, now = Date.now(), las
 		return { shouldRun: false, reason: "disabled" };
 	}
 
+	const flow = installFlow ?? detectAutoUpdateInstallFlow(env).flow;
+	const marketplaceRepair = flow === "marketplace" ? detectMarketplaceLocalRepair(env) : undefined;
 	const intervalMs = parsePositiveInteger(env.LAZYCODEX_AUTO_UPDATE_INTERVAL_MS, DEFAULT_INTERVAL_MS);
 	const successStatus = lastStatus === undefined || lastStatus === "success";
-	if (successStatus && typeof lastCheckedAt === "number" && intervalMs > 0 && now - lastCheckedAt < intervalMs) {
+	if (marketplaceRepair?.needsRepair !== true && successStatus && typeof lastCheckedAt === "number" && intervalMs > 0 && now - lastCheckedAt < intervalMs) {
 		return { shouldRun: false, reason: "throttled" };
 	}
 	const retryIntervalMs = parsePositiveInteger(env.LAZYCODEX_AUTO_UPDATE_RETRY_INTERVAL_MS, DEFAULT_RETRY_INTERVAL_MS);
@@ -48,8 +56,26 @@ export function resolveAutoUpdatePlan({ env = process.env, now = Date.now(), las
 		return { shouldRun: false, reason: "retry-throttled" };
 	}
 
-	const flow = installFlow ?? detectAutoUpdateInstallFlow(env).flow;
-	if (flow === "marketplace") return { shouldRun: false, reason: "marketplace-flow" };
+	if (flow === "marketplace") {
+		const repair = marketplaceRepair ?? detectMarketplaceLocalRepair(env);
+		if (!repair.needsRepair) return { shouldRun: false, reason: "marketplace-flow" };
+		const currentVersion = resolveCurrentVersion(env) ?? "unknown";
+		const latestVersion = resolveLatestVersion(env) ?? currentVersion ?? "latest";
+		return {
+			shouldRun: true,
+			kind: "marketplace-local-repair",
+			repairReasons: repair.reasons,
+			command: resolveCommand(env),
+			args: resolveArgs(env),
+			currentVersion,
+			latestVersion,
+			env: {
+				...env,
+				LAZYCODEX_AUTO_UPDATE_DISABLED: "1",
+				OMO_CODEX_AUTO_UPDATE_DISABLED: "1",
+			},
+		};
+	}
 
 	const currentVersion = resolveCurrentVersion(env);
 	const latestVersion = resolveLatestVersion(env);
@@ -142,7 +168,13 @@ export async function runAutoUpdateCheck({ env = process.env, now = Date.now() }
 		return { started: false, reason: "locked", notices };
 	}
 	try {
-		await appendUpdateLog(env, now, "started", { command: plan.command, args: plan.args });
+		await appendUpdateLog(env, now, "started", plan.kind === "marketplace-local-repair"
+			? { kind: plan.kind, repairReasons: plan.repairReasons ?? [] }
+			: {
+				command: plan.command,
+				args: plan.args,
+				...(plan.kind === undefined ? {} : { kind: plan.kind }),
+			});
 		const pendingNotice = { fromVersion: plan.currentVersion, toVersion: plan.latestVersion, startedAt: now };
 		const releaseNotes = await resolveReleaseNotes({ env, latestVersion: plan.latestVersion });
 		if (env.LAZYCODEX_AUTO_UPDATE_WAIT === "1") {
@@ -155,7 +187,7 @@ export async function runAutoUpdateCheck({ env = process.env, now = Date.now() }
 			await appendUpdateLog(env, now, "finished", { status });
 			if (status === 0) {
 				await writeState(statePath, { lastCheckedAt: now, lastAttemptedAt: now, lastStatus: "success", pendingNotice });
-				await recordUpdateStartedNotice({ env, now, notices, pendingNotice, releaseNotes });
+				await recordUpdateStartedNotice({ env, now, notices, pendingNotice, releaseNotes, plan });
 			} else {
 				await writeState(statePath, { lastAttemptedAt: now, lastStatus: "failed" });
 			}
@@ -169,7 +201,7 @@ export async function runAutoUpdateCheck({ env = process.env, now = Date.now() }
 			detached: true,
 		});
 		await writeState(statePath, { lastAttemptedAt: now, lastStatus: "started", pendingNotice });
-		await recordUpdateStartedNotice({ env, now, notices, pendingNotice, releaseNotes });
+		await recordUpdateStartedNotice({ env, now, notices, pendingNotice, releaseNotes, plan });
 		child.unref();
 		return { started: true, notices };
 	} finally {
@@ -197,10 +229,16 @@ async function settlePendingNotice({ env, now, statePath, state, notices }) {
 	return nextState;
 }
 
-async function recordUpdateStartedNotice({ env, now, notices, pendingNotice, releaseNotes }) {
-	notices.push(formatUpdateStartedNotice({ pendingNotice, releaseNotes }));
+async function recordUpdateStartedNotice({ env, now, notices, pendingNotice, releaseNotes, plan }) {
+	notices.push(plan.kind === "marketplace-local-repair"
+		? formatMarketplaceRepairStartedNotice({
+			pendingNotice,
+			releaseNotes,
+			repairReasons: plan.repairReasons ?? [],
+		})
+		: formatUpdateStartedNotice({ pendingNotice, releaseNotes }));
 	await appendUpdateLog(env, now, "notified", {
-		kind: "update-started",
+		kind: plan.kind === "marketplace-local-repair" ? "marketplace-local-repair-started" : "update-started",
 		fromVersion: pendingNotice.fromVersion,
 		toVersion: pendingNotice.toVersion,
 	});

package/packages/omo-codex/plugin/scripts/build-components.mjs

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
-import { spawnSync } from "node:child_process";
+import { spawn } from "node:child_process";
+import { availableParallelism } from "node:os";
 import { readdir, readFile, writeFile } from "node:fs/promises";
 import { builtinModules } from "node:module";
 import { dirname, join } from "node:path";
@@ -11,22 +12,50 @@ const workspaces = Array.isArray(packageJson.workspaces) ? packageJson.workspace
 const workspaceSet = new Set(workspaces);
 const builtinModuleNames = new Set(builtinModules.filter((moduleName) => !moduleName.startsWith("_")));
 
+const workspaceComponents = [];
 for (const workspace of workspaces) {
 	if (typeof workspace !== "string" || !workspace.startsWith("components/")) continue;
 	if (!(await hasBuildScript(workspace))) continue;
-
-	console.log(`Building ${workspace}`);
-	run("npm", ["run", "--workspace", workspace, "build"], root);
-	await bundleCli(workspace);
+	workspaceComponents.push({
+		componentPath: workspace,
+		buildCommand: "npm",
+		buildArgs: ["run", "--workspace", workspace, "build"],
+		buildCwd: root,
+	});
 }
 
+const standaloneComponents = [];
 for (const componentName of await readStandaloneComponentNames()) {
 	const componentPath = `components/${componentName}`;
 	if (!(await hasBuildScript(componentPath))) continue;
+	standaloneComponents.push({
+		componentPath,
+		buildCommand: "npm",
+		buildArgs: ["run", "build"],
+		buildCwd: join(root, componentPath),
+	});
+}
+
+const tasks = [...workspaceComponents, ...standaloneComponents];
+const concurrency = Math.max(1, Math.min(tasks.length, availableParallelism()));
+await runTasksWithConcurrency(tasks, concurrency);
+
+async function runTasksWithConcurrency(items, limit) {
+	let nextIndex = 0;
+	const workers = Array.from({ length: Math.min(limit, items.length) }, async () => {
+		while (true) {
+			const index = nextIndex;
+			nextIndex += 1;
+			if (index >= items.length) return;
+			await buildComponent(items[index]);
+		}
+	});
+	await Promise.all(workers);
+}
 
-	console.log(`Building ${componentPath} (standalone)`);
-	run("npm", ["run", "build"], join(root, componentPath));
-	await bundleCli(componentPath);
+async function buildComponent(task) {
+	await runCaptured(task.buildCommand, task.buildArgs, task.buildCwd, `Building ${task.componentPath}`);
+	await bundleCli(task.componentPath);
 }
 
 async function readStandaloneComponentNames() {
@@ -51,19 +80,36 @@ async function hasBuildScript(relativePath) {
 async function bundleCli(workspace) {
 	const entry = join(root, workspace, "src", "cli.ts");
 	const output = join(root, workspace, "dist", "cli.js");
-	console.log(`Bundling ${workspace}/dist/cli.js`);
-	run("bun", ["build", entry, "--target", "node", "--format", "esm", "--outfile", output], root);
+	await runCaptured("bun", ["build", entry, "--target", "node", "--format", "esm", "--outfile", output], root, `Bundling ${workspace}/dist/cli.js`);
 	await normalizeBuiltinImports(output);
 }
 
-function run(command, args, cwd) {
-	const result = spawnSync(command, args, {
-		cwd,
-		shell: process.platform === "win32",
-		stdio: "inherit",
+// Buffers each child's stdout/stderr and flushes it as one contiguous block so
+// concurrent builds never interleave, keeping a failing component's output readable.
+function runCaptured(command, args, cwd, label) {
+	return new Promise((resolve, reject) => {
+		const child = spawn(command, args, {
+			cwd,
+			shell: process.platform === "win32",
+			stdio: ["ignore", "pipe", "pipe"],
+		});
+		const chunks = [];
+		child.stdout.on("data", (chunk) => chunks.push(chunk));
+		child.stderr.on("data", (chunk) => chunks.push(chunk));
+		child.on("error", (error) => reject(error));
+		child.on("close", (status, signal) => {
+			const output = Buffer.concat(chunks).toString("utf8");
+			process.stdout.write(`${label}\n${output}`);
+			if (status === 0) {
+				resolve();
+				return;
+			}
+			const reason = signal ? `signal ${signal}` : `exit code ${status}`;
+			const error = new Error(`${label} failed with ${reason}`);
+			error.exitCode = status ?? 1;
+			reject(error);
+		});
 	});
-	if (result.error !== undefined) throw result.error;
-	if (result.status !== 0) process.exit(result.status ?? 1);
 }
 
 async function normalizeBuiltinImports(output) {

package/packages/omo-codex/plugin/scripts/materialize-shared-upstreams.mjs

@@ -36,7 +36,14 @@ export async function materializeSharedUpstreams({ strict }) {
 }
 
 if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
-	const strict = process.env.OMO_MATERIALIZE_STRICT === "1" || process.argv.includes("--strict");
-	const result = await materializeSharedUpstreams({ strict });
-	if (result.skipped && strict) process.exit(1);
+	// The root build materializes once up front and sets this so downstream codex-plugin
+	// builds in the same run do not re-run it; concurrent runs would contend on git's
+	// submodule index.lock and race writes into packages/shared-skills/skills.
+	if (process.env.OMO_SKIP_MATERIALIZE === "1") {
+		process.stdout.write("[materialize] skipped (OMO_SKIP_MATERIALIZE=1)\n");
+	} else {
+		const strict = process.env.OMO_MATERIALIZE_STRICT === "1" || process.argv.includes("--strict");
+		const result = await materializeSharedUpstreams({ strict });
+		if (result.skipped && strict) process.exit(1);
+	}
 }

package/packages/omo-codex/plugin/scripts/sync-skills.mjs

@@ -17,8 +17,10 @@ const skillSources = [
 	["teammode", "components/teammode/skills/teammode"],
 	["ulw-loop", "components/ulw-loop/skills/ulw-loop"],
 	["ulw-plan", "components/ultrawork/skills/ulw-plan"],
+	["ultrawork", "components/ultrawork/skills/ultrawork"],
 ];
 const componentSkillNames = new Set(skillSources.map(([name]) => name));
+const codexHiddenSharedSkillNames = new Set(["ultraresearch"]);
 const skillDisplayPrefix = "(OmO) ";
 
 function shouldCopySkillSource(source) {
@@ -164,6 +166,22 @@ prefixes when identity is needed.
 `;
 
 function applyCodexSkillOverlays(skillName, content) {
+	if (skillName === "ulw-research") {
+		return content
+			.replace(
+				", the legacy alias 'ultraresearch', any 'ulw' research wording,",
+				", any 'ulw' research wording,",
+			)
+			.replace(
+				'the legacy alias "ultraresearch" (also `/ultraresearch`, `$ultraresearch`), ',
+				"",
+			)
+			.replace(
+				"answer those normally, and mention that `ulw-research` is available (legacy alias: `ultraresearch`) when a question would clearly benefit from it.",
+				"answer those normally, and mention that `ulw-research` is available when a question would clearly benefit from it.",
+			)
+			.replace("# Ultraresearch Synthesis: <query>", "# ULW-Research Synthesis: <query>");
+	}
 	if (skillName === "start-work") {
 		return content
 			.replace(startWorkOriginalCompletion, startWorkCodexCompletion)
@@ -236,6 +254,7 @@ async function syncSkills() {
 
 	for (const skillName of sharedSkillNames) {
 		if (componentSkillNames.has(skillName)) continue;
+		if (codexHiddenSharedSkillNames.has(skillName)) continue;
 		await cp(join(sharedSkillsRoot, skillName), join(skillsRoot, skillName), {
 			filter: shouldCopySkillSource,
 			recursive: true,

package/packages/omo-codex/plugin/shared/test/config-loader.test.ts

@@ -67,6 +67,24 @@ describe("getCodexOmoConfig", () => {
 		expect(result.trustedCodegraphInstallDir).toBe("/global-codegraph")
 	})
 
+	it("#given codex SOT sets CodeGraph excluded roots #when loading config #then roots are returned to hooks", () => {
+		// given
+		const homeDir = createTemporaryDirectory("omo-codex-shared-excluded-home-")
+		const cwd = createTemporaryDirectory("omo-codex-shared-excluded-project-")
+		writeOmoConfig(
+			homeDir,
+			JSON.stringify({
+				"[codex]": { codegraph: { excluded_roots: ["/tmp/omo-research", "/private/tmp/omo-research"] } },
+			}),
+		)
+
+		// when
+		const result = getCodexOmoConfig({ cwd, homeDir, env: {} })
+
+		// then
+		expect(result.codegraph?.excluded_roots).toEqual(["/tmp/omo-research", "/private/tmp/omo-research"])
+	})
+
 	it("#given legacy env override and SOT value #when loading config #then env wins over the SOT", () => {
 		// given
 		const homeDir = createTemporaryDirectory("omo-codex-shared-env-")

package/packages/omo-codex/plugin/skills/debugging/references/methodology/06-fix.md

@@ -98,6 +98,12 @@ Run the full test suite for the affected package (not just the one new test). Ex
 
 If they don't, your "fix" broke something else. Back to Phase 6 with the new failure as evidence — usually it means the mechanism you thought you fixed was load-bearing for some other code path you didn't know about, and the "broken" test is actually pointing at a better understanding of the system.
 
+### 5. Close the observability gap
+
+If diagnosis burned extra rounds *because state was invisible* — no log line told you which branch ran, what the value was, whether the fallback engaged — that invisibility is a defect adjacent to the bug, and this is the one moment where adding a log line is NOT "just in case": this session is the evidence that the line earns its place. Ship the fix WITH that line, written to the standard of the `programming` skill's `references/logging.md` — level chosen by consumer, placed at the decision point, data in fields not interpolation, through the project's designated logger. If the project deliberately does not log, respect that and skip this step.
+
+This does not soften the artifact rule: every temporary `print` / `dbg!` / `console.log` planted *during* diagnosis stays journaled and gets scrubbed in Phase 9. The triage is the consumer test — a line whose ongoing consumer you can name is part of the fix; a line that only served today's session is an artifact.
+
 ### Update the journal
 
 ```markdown

package/packages/omo-codex/plugin/skills/frontend/ATTRIBUTION.md

@@ -68,12 +68,15 @@ The taste-skill files and image-generation skills under `frontend/references/des
 `imagegen-brandkit.md`) are path-mapped copies of the per-skill `SKILL.md` files from the
 taste-skill project (each `skills/<name>/SKILL.md` is renamed to
 `references/design/<name>.md`; `imagegen-brandkit.md` maps from `skills/brandkit/SKILL.md`).
+`stitch-design-example.md` is a path-mapped verbatim copy of `skills/stitch-skill/DESIGN.md`,
+the worked example of the design-system document that the stitch skill exports.
 They are not committed here; the build materializes them from the pinned submodule under
 `packages/shared-skills/upstreams/taste-skill`. Only the allowed frontmatter description
 quoting normalization described above may alter these materialized `SKILL.md` files.
 
 - Source: https://github.com/Leonxlnx/taste-skill
-- Pinned upstream commit: 06d6028b5c623016c59ce8536f578e5a1127b499
+- Official site: https://www.tasteskill.dev/
+- Pinned upstream commit: b17742737e796305d829b3ad39eda3add0d79060
 
 ```
 MIT License
@@ -150,10 +153,11 @@ path-mapped from the designpowers project. It is not committed here; the build
 materializes the selected files from the pinned submodule under
 `packages/shared-skills/upstreams/designpowers`. The materialized set includes the
 upstream `LICENSE`, ten `agents/*.md` role-reference files, and selected
-`skills/*/SKILL.md` files. Bridge/state/router integration skills are intentionally
+`skills/*/SKILL.md` files renamed to `vendor/skills/*/reference.md` so they remain
+reference documents instead of nested skill entrypoints. Bridge/state/router integration skills are intentionally
 excluded; see `frontend/references/designpowers/UPSTREAM.md` for the allowlist and
 exclusion list. Only the allowed frontmatter description quoting normalization described
-above may alter these materialized `SKILL.md` files.
+above may alter these materialized `reference.md` files.
 
 - Source: https://github.com/Owl-Listener/designpowers
 - Pinned upstream commit: cb00757da9d554591fa78d27aa1854d60a05c4f7
@@ -200,6 +204,12 @@ capture evidence and a local reconnaissance run following the MIT-licensed
 template. Aside names, trademarks, product text, and visual assets remain the property of
 their respective owners and are referenced only for descriptive design-analysis purposes.
 
+`frontend/references/design/lazyweb.md` is a project-original, curl-only operating guide
+for the Lazyweb (lazyweb.com) design-research API, written from live endpoint verification;
+no Lazyweb source, documentation text, or screenshot content is vendored. Lazyweb names
+remain the property of their owner, and the guide grants no license to ship, trace, or
+commit reference screenshots harvested through it.
+
 `frontend/references/design/clone-from-url.md` is a project-original runtime-extraction
 workflow guide. Its browser + `getComputedStyle` clone approach follows the same
 MIT-licensed `JCodesMore/ai-website-cloner-template` clone-website workflow that `aside.md`

package/packages/omo-codex/plugin/skills/frontend/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: frontend
-description: "MUST USE for frontend/web UI/UX/visual work: building, styling, redesigning pages/components, React setup, performance audits, visual QA, taste, and polish. Routes four rulesets: design taste router and brand references; perfection for Playwright/Chromium Lighthouse/Core Web Vitals; ui-ux-db palettes/fonts/guidelines; designpowers personas/accessibility/critique/handoff. Triggers: frontend, UI, UX, design, redesign, styling, layout, animation, motion, premium, luxury, minimal, brutalist, Awwwards, DESIGN.md, mockup, React, Lighthouse, accessibility, WCAG, Core Web Vitals, looks generic, make it pretty, like X brand."
+description: "MUST USE for frontend/web UI/UX/visual work: building, styling, redesigning pages/components, React setup, performance audits, visual QA, taste, and polish. Routes four rulesets: design taste router and brand references; perfection for Playwright/Chromium Lighthouse/Core Web Vitals; ui-ux-db palettes/fonts/guidelines; designpowers personas/accessibility/critique/handoff; plus curl-only lazyweb real-app-screen research for design direction. Triggers: frontend, UI, UX, design, redesign, styling, layout, animation, motion, premium, luxury, minimal, brutalist, Awwwards, DESIGN.md, mockup, React, Lighthouse, accessibility, WCAG, Core Web Vitals, looks generic, make it pretty, like X brand, lazyweb, design research."
 ---
 
 # Frontend
@@ -28,7 +28,11 @@ Every implementation must choose one of these branches before UI code changes:
    - **Static visual reference** (screenshot, generated mockup, Stitch/Imagen output, Figma export, overview, or annotated packet): load `references/design/image-to-code-skill.md` plus the relevant design/perfection files, extract the reference's exact tokens, layout geometry, copy, spacing, states, and responsive intent into `DESIGN.md`, then implement reusable primitives against that contract.
    - **Live site or URL reference** (the user names a site to clone or gives a URL): load `references/design/clone-from-url.md`. Drive a real browser and extract the runtime truth via `getComputedStyle` — tokens, layout geometry, default/hover/focus/active states, transitions and keyframes, and downloaded assets — into `DESIGN.md`, then clone-code reusable primitives against that contract.
    Final QA for both runs `/visual-qa` in reference-fidelity mode: compare the actual UI against the reference pixel-by-pixel and verify the code is an extensible design-system implementation, not a screenshot-matched one-off.
-2. **Greenfield or fresh setup:** if the user gave no concrete visual reference, use `references/design/_INDEX.md` to shortlist 2-3 plausible Layer B references, then deeply load exactly one Layer A style skill and one Layer B brand/design-system reference; use `open-design` only when the curated set has no fit. Treat those references as source material, not mood labels: extract tokens, layout grammar, component anatomy, interaction states, motion, and taste decisions into `DESIGN.md`, then recombine them into project-specific primitives — never freestyle past the selected references, never copy logos or brand-specific copy. For an expressive brief (glossy, premium, wow, brand-grade), default to generating 2-3 imagen concept drafts, each seeded with the loaded Layer A + Layer B tokens (palette, type, material); pick the strongest and treat the chosen draft as the reference-fidelity contract. Define Section 5 primitives and their default/hover/active/focus/disabled/loading/empty/error states before code, and pass each through mobile/tablet/desktop visual QA before product screens.
+2. **Greenfield or fresh setup:** if the user gave no concrete visual reference, design direction is a research deliverable, not a vibe. Fire every available research lane IN PARALLEL before `DESIGN.md` is written; skip a lane only when its tool or network is genuinely unavailable, and name the skip in `DESIGN.md`:
+   - **Embedded references:** use `references/design/_INDEX.md` to shortlist 2-3 plausible Layer B references, then deeply load exactly one Layer A style skill and one Layer B brand/design-system reference; use `open-design` only when the curated set has no fit; add `ui-ux-db` lookups for palette/type/domain questions.
+   - **Lazyweb real-product screens:** run the curl-only recipe in `references/design/lazyweb.md` to see how shipped products in the target domain actually look; harvest layout grammar and component patterns, never pixel copies.
+   - **Imagen concept drafts:** generate 2-3 imagen concept drafts, each seeded with the loaded Layer A + Layer B tokens (palette, type, material); pick the strongest and treat the chosen draft as the reference-fidelity contract.
+   Synthesize every lane into `DESIGN.md`. Treat sources as source material, not mood labels: extract tokens, layout grammar, component anatomy, interaction states, motion, and taste decisions, then recombine them into project-specific primitives. Never freestyle past the selected references, never copy logos or brand-specific copy. Define Section 5 primitives and their default/hover/active/focus/disabled/loading/empty/error states before code, and pass each through mobile/tablet/desktop visual QA before product screens.
 3. **Existing project with `DESIGN.md` or a component system:** read it, follow it, and update it before implementation only when the requested work needs a new token, primitive, state, motion rule, accessibility constraint, accepted debt, or reference-fidelity requirement.
 4. **Existing project with UI but no `DESIGN.md` and no reusable component layer:** STOP and ask the user one focused question: should you preserve the current look with copy-nearby styling, or extract a real `DESIGN.md` plus reusable components before continuing? Do not silently choose.
 
@@ -56,7 +60,7 @@ The reference library has one architecture file, 12 taste skills (Layer A — *h
 | `redesign-skill.md` | Improving EXISTING UI — "this looks bad", "fix the design". Audit-first workflow; never use on greenfield. |
 | `image-to-code-skill.md` | "Generate the design first, then code it." Pair with one imagegen file below. |
 | `output-skill.md` | Stacks on any style skill when output is incomplete — placeholders, `// TODO`, half-done components. |
-| `stitch-skill.md` | Stacks on any style skill for Google Stitch compatibility or a `DESIGN.md` doc export. |
+| `stitch-skill.md` | Stacks on any style skill for Google Stitch compatibility or a `DESIGN.md` doc export. A complete worked export ships as `stitch-design-example.md`. |
 | `imagegen-frontend-web.md` / `imagegen-frontend-mobile.md` / `imagegen-brandkit.md` | Image-only output (mockup, app-screen concepts, brand board). These NEVER write code — switch to `image-to-code-skill.md` if code is wanted. |
 
 ### Layer B — brand design systems (orthogonal to Layer A; stack freely)
@@ -113,6 +117,7 @@ Domains: `product` `style` `typography` `color` `landing` `chart` `ux` `react` `
 | "Audit my site" / "make this page faster" | `perfection/README.md` (+ `perfection/react-perf-tooling.md` if React) |
 | "Mockup image of a fintech app" — no code | `design/imagegen-frontend-mobile.md` (+ a Layer B brand if named) |
 | "What palette/fonts fit a wellness brand?" | `ui-ux-db/README.md` → search CLI |
+| "What do shipped apps in this space look like?" / design-direction research | `design/lazyweb.md` (curl-only) + `design/_INDEX.md` shortlist |
 | "Set up this React project" | `design/README.md` + `design/react-dev-tooling-skill.md` |
 | "Use designpowers", "make the design workflow stronger", "add personas/accessibility/debt/handoff" | `design/README.md` + `designpowers/README.md` (+ `perfection/README.md` if implementation or audit follows) |
 

package/packages/omo-codex/plugin/skills/frontend/references/design/README.md

@@ -157,7 +157,7 @@ Triggers: "generate a mockup image", "create a brand kit board", "design referen
 
 Triggers: "Google Stitch", "compatible with Stitch", "also write a DESIGN.md", "give me the design as a doc".
 
-**Action:** Add `stitch-skill.md` on top of whatever you loaded in Steps 1–4.
+**Action:** Add `stitch-skill.md` on top of whatever you loaded in Steps 1–4. For the shape of a finished export, see the worked example in `stitch-design-example.md`.
 
 ### Step 7 — The agent has been lazy