oh-my-opencode 4.16.3 → 4.17.1

package/packages/omo-codex/plugin/components/bootstrap/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"command": "node \"${PLUGIN_ROOT}/components/bootstrap/dist/cli.js\" hook session-start",
 						"commandWindows": "powershell -NoProfile -ExecutionPolicy Bypass -File \"${PLUGIN_ROOT}\\components\\bootstrap\\scripts\\bootstrap.ps1\"",
 						"timeout": 30,
-						"statusMessage": "(OmO 4.16.3) Checking Bootstrap Provisioning"
+						"statusMessage": "(OmO 4.17.1) Checking Bootstrap Provisioning"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/bootstrap/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sisyphuslabs/codex-bootstrap",
-	"version": "4.16.3",
+	"version": "4.17.1",
 	"description": "Codex SessionStart bootstrap component that provisions LazyCodex runtime dependencies from a detached worker.",
 	"type": "module",
 	"private": true,

package/packages/omo-codex/plugin/components/codegraph/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sisyphuslabs/codex-codegraph",
-	"version": "4.16.3",
+	"version": "4.17.1",
 	"description": "Codex plugin MCP wrapper for CodeGraph.",
 	"type": "module",
 	"private": true,

package/packages/omo-codex/plugin/components/comment-checker/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-tool-use",
 						"timeout": 30,
-						"statusMessage": "(OmO 4.16.3) Checking Comments"
+						"statusMessage": "(OmO 4.17.1) Checking Comments"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/comment-checker/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-comment-checker",
-	"version": "4.16.3",
+	"version": "4.17.1",
 	"description": "Codex plugin that runs comment-checker after edit-like PostToolUse hooks.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/git-bash/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook pre-tool-use",
 						"timeout": 5,
-						"statusMessage": "(OmO 4.16.3) Recommending Git Bash MCP"
+						"statusMessage": "(OmO 4.17.1) Recommending Git Bash MCP"
 					}
 				]
 			}
@@ -20,7 +20,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-compact",
 						"timeout": 5,
-						"statusMessage": "(OmO 4.16.3) Resetting Git Bash MCP Reminder"
+						"statusMessage": "(OmO 4.17.1) Resetting Git Bash MCP Reminder"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/git-bash/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sisyphuslabs/codex-git-bash-hook",
-	"version": "4.16.3",
+	"version": "4.17.1",
 	"description": "Codex hook component that reminds Windows sessions to prefer the OMO git_bash MCP.",
 	"type": "module",
 	"private": true,

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/AGENTS.md

@@ -4,7 +4,7 @@
 
 ## OVERVIEW
 
-Codex `SubagentStop` hook component: the evidence gate for the `lazycodex-executor` subagent (ultrawork implementation executor). When the executor stops without a valid evidence receipt, the hook emits `{"decision": "block", "reason": <directive>}` and Codex sends it back to work. Matcher is `^lazycodex-executor$` only; `lazycodex-qa-executor` and `lazycodex-gate-reviewer` (same `ultrawork/agents/` family) are NOT gated by this hook.
+Codex `SubagentStop` hook component: the evidence gate for the ultrawork implementation workers (`lazycodex-worker-low|medium|high`). When a worker stops without a valid evidence receipt, the hook emits `{"decision": "block", "reason": <directive>}` and Codex sends it back to work. Matcher is `^lazycodex-worker-(low|medium|high)$`; read-only roles like `lazycodex-qa-executor` and `lazycodex-gate-reviewer` (same `ultrawork/agents/` family) are NOT gated by this hook. (The historical `lazycodex-executor` agent was removed; this component keeps its name.)
 
 Valid receipt: `last_assistant_message` contains `EVIDENCE_RECORDED: <path>` where `<path>` resolves to a non-empty regular file strictly inside `<cwd>/.omo/evidence/`. Symlinks and directories rejected; containment checked on realpaths (file inside evidence root inside cwd, traversal-safe). A valid receipt clears attempt state and exits silently.
 
@@ -30,7 +30,7 @@ Escape hatches: after 3 blocked attempts (`MAX_ATTEMPTS`) the stop passes and st
 | Change the block message | `directive.md`; keep both `{{...}}` placeholders and the literal `EVIDENCE_RECORDED: <path>` final-line contract |
 | Change receipt validation | `src/codex-hook.ts` (`hasValidEvidenceReceipt`, `extractEvidencePath`, `isNonEmptyFileInsideEvidenceRoot`) |
 | Change the retry budget | `src/state.ts` `MAX_ATTEMPTS` |
-| Executor-side contract | `../ultrawork/agents/lazycodex-executor.toml` instructs the final `EVIDENCE_RECORDED: <path>` line this hook parses |
+| Worker-side contract | `../ultrawork/agents/lazycodex-worker-{low,medium,high}.toml` instruct the final `EVIDENCE_RECORDED: <path>` line this hook parses |
 | Plugin-level wiring | `../../hooks/subagent-stop-verifying-lazycodex-executor-evidence.json` (adds `commandWindows` via `../bootstrap/scripts/node-dispatch.ps1`) |
 | Wiring + contract tests | `../../test/aggregate-hooks.test.mjs`, `../../test/component-hook-contract-cases.mjs`, `../../test/hook-status-message.test.mjs`, `../../test/component-bundled-cli.test.mjs` |
 

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/dist/cli.js

@@ -66,11 +66,15 @@ function isRecord(value) {
 var SUBAGENT_STOP_EVENT = "SubagentStop";
 
 // components/lazycodex-executor-verify/src/codex-hook.ts
-var LAZYCODEX_EXECUTOR_AGENT = "lazycodex-executor";
+var RECEIPT_ENFORCED_AGENTS = new Set([
+  "lazycodex-worker-low",
+  "lazycodex-worker-medium",
+  "lazycodex-worker-high"
+]);
 function runSubagentStopHook(input, fs) {
   if (!isSubagentStopInput(input))
     return "";
-  if (input.agent_type !== LAZYCODEX_EXECUTOR_AGENT)
+  if (!RECEIPT_ENFORCED_AGENTS.has(input.agent_type))
     return "";
   if (transcriptHasContextPressureMarker(input.transcript_path, fs))
     return "";

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/dist/codex-hook.js

@@ -3,11 +3,15 @@ import { isAbsolute, relative, resolve } from "node:path";
 import { renderDirective } from "./directive.js";
 import { clearAttemptState, MAX_ATTEMPTS, readAttemptState, writeAttemptState } from "./state.js";
 import { SUBAGENT_STOP_EVENT } from "./types.js";
-const LAZYCODEX_EXECUTOR_AGENT = "lazycodex-executor";
+const RECEIPT_ENFORCED_AGENTS = new Set([
+    "lazycodex-worker-low",
+    "lazycodex-worker-medium",
+    "lazycodex-worker-high",
+]);
 export function runSubagentStopHook(input, fs) {
     if (!isSubagentStopInput(input))
         return "";
-    if (input.agent_type !== LAZYCODEX_EXECUTOR_AGENT)
+    if (!RECEIPT_ENFORCED_AGENTS.has(input.agent_type))
         return "";
     if (transcriptHasContextPressureMarker(input.transcript_path, fs))
         return "";

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/hooks/hooks.json

@@ -2,13 +2,13 @@
 	"hooks": {
 		"SubagentStop": [
 			{
-				"matcher": "^lazycodex-executor$",
+				"matcher": "^lazycodex-worker-(low|medium|high)$",
 				"hooks": [
 					{
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/lazycodex-executor-verify/dist/cli.js\" hook subagent-stop",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.16.3) Verifying LazyCodex Executor Evidence"
+						"statusMessage": "(OmO 4.17.1) Verifying LazyCodex Executor Evidence"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-lazycodex-executor-verify",
-	"version": "4.16.3",
+	"version": "4.17.1",
 	"description": "Codex SubagentStop evidence verifier for LazyCodex executor completions.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/src/codex-hook.ts

@@ -6,11 +6,15 @@ import { clearAttemptState, MAX_ATTEMPTS, readAttemptState, writeAttemptState }
 import type { HookFileSystem, StopHookOutput, SubagentStopInput } from "./types.js";
 import { SUBAGENT_STOP_EVENT } from "./types.js";
 
-const LAZYCODEX_EXECUTOR_AGENT = "lazycodex-executor";
+const RECEIPT_ENFORCED_AGENTS = new Set([
+	"lazycodex-worker-low",
+	"lazycodex-worker-medium",
+	"lazycodex-worker-high",
+]);
 
 export function runSubagentStopHook(input: unknown, fs: HookFileSystem): string {
 	if (!isSubagentStopInput(input)) return "";
-	if (input.agent_type !== LAZYCODEX_EXECUTOR_AGENT) return "";
+	if (!RECEIPT_ENFORCED_AGENTS.has(input.agent_type)) return "";
 	if (transcriptHasContextPressureMarker(input.transcript_path, fs)) return "";
 	if (hasValidEvidenceReceipt(input, fs)) {
 		clearAttemptState(input.cwd, input.session_id, input.agent_id, fs);

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/test/cli.test.ts

@@ -110,7 +110,7 @@ function createPayload(
 ): Record<string, string | boolean> {
 	return {
 		hook_event_name: "SubagentStop",
-		agent_type: "lazycodex-executor",
+		agent_type: "lazycodex-worker-medium",
 		agent_id: "agent_1",
 		session_id: "sess.1",
 		cwd,

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/test/codex-hook.test.ts

@@ -299,7 +299,7 @@ function existingReceiptTargetOutsideEvidenceRoot(): string {
 function createInput(cwd: string, overrides: Partial<SubagentStopInput> = {}): SubagentStopInput {
 	return {
 		hook_event_name: "SubagentStop",
-		agent_type: "lazycodex-executor",
+		agent_type: "lazycodex-worker-medium",
 		agent_id: "agent_1",
 		session_id: "sess.1",
 		cwd,
@@ -315,7 +315,7 @@ function createInput(cwd: string, overrides: Partial<SubagentStopInput> = {}): S
 function createUnknownEventInput(cwd: string): Record<string, string | boolean> {
 	return {
 		hook_event_name: "Stop",
-		agent_type: "lazycodex-executor",
+		agent_type: "lazycodex-worker-medium",
 		agent_id: "agent_1",
 		session_id: "sess.1",
 		cwd,
@@ -344,3 +344,68 @@ function isBlockOutput(value: unknown): value is BlockOutput {
 		typeof value.reason === "string"
 	);
 }
+
+describe("tier worker receipt enforcement", () => {
+	// given the matcher set now covers the difficulty-tier workers
+	const workerTypes = ["lazycodex-worker-low", "lazycodex-worker-medium", "lazycodex-worker-high"] as const;
+
+	for (const agentType of workerTypes) {
+		it(`#given no evidence receipt #when a ${agentType} child stops #then blocks`, () => {
+			// given
+			const cwd = createWorkspace();
+
+			// when
+			const output = runSubagentStopHook(createInput(cwd, { agent_type: agentType }), nodeFileSystem);
+
+			// then
+			expect(parseBlockOutput(output).decision).toBe("block");
+		});
+	}
+
+	it("#given no evidence receipt #when an explorer child stops #then no-ops", () => {
+		// given
+		const cwd = createWorkspace();
+
+		// when
+		const output = runSubagentStopHook(createInput(cwd, { agent_type: "explorer" }), nodeFileSystem);
+
+		// then
+		expect(output).toBe("");
+	});
+
+	it("#given both hook manifests #when their matchers are applied #then enforced agents match and read-only roles do not", () => {
+		// given
+		const componentManifest = JSON.parse(
+			readFileSync(new URL("../hooks/hooks.json", import.meta.url), "utf8"),
+		);
+		const rootManifest = JSON.parse(
+			readFileSync(
+				new URL("../../../hooks/subagent-stop-verifying-lazycodex-executor-evidence.json", import.meta.url),
+				"utf8",
+			),
+		);
+		for (const manifest of [componentManifest, rootManifest]) {
+			const matcher = new RegExp(manifest.hooks.SubagentStop[0].matcher);
+
+			// then
+			for (const name of workerTypes) expect(matcher.test(name)).toBe(true);
+			expect(matcher.test("lazycodex-executor")).toBe(false);
+			expect(matcher.test("explorer")).toBe(false);
+			expect(matcher.test("lazycodex-gate-reviewer")).toBe(false);
+		}
+	});
+
+	it("#given the tier worker TOMLs #when inspected #then each instructs the EVIDENCE_RECORDED receipt line", () => {
+		for (const tier of ["low", "medium", "high"]) {
+			// when
+			const toml = readFileSync(
+				new URL(`../../ultrawork/agents/lazycodex-worker-${tier}.toml`, import.meta.url),
+				"utf8",
+			);
+
+			// then
+			expect(toml).toContain("EVIDENCE_RECORDED: <path>");
+		}
+	});
+});
+

package/packages/omo-codex/plugin/components/lsp/dist/cli.js

@@ -1423,6 +1423,9 @@ async function disposeDefaultLspManager() {
     await m.stopAll();
   }
 }
+function isPlainRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 function isProcessAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0)
     return false;
@@ -3313,10 +3316,10 @@ function sendToolCall(socketPath, name, args, timeoutMs) {
   });
 }
 function toToolResult(message) {
-  if (!isRecord6(message) || message["id"] !== REQUEST_ID)
+  if (!isPlainRecord(message) || message["id"] !== REQUEST_ID)
     return null;
   const result = message["result"];
-  if (!isRecord6(result) || !Array.isArray(result["content"]))
+  if (!isPlainRecord(result) || !Array.isArray(result["content"]))
     return null;
   return {
     content: result["content"],
@@ -3324,9 +3327,6 @@ function toToolResult(message) {
     details: result["details"]
   };
 }
-function isRecord6(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function errorText(error) {
   return error instanceof Error ? error.message : String(error);
 }
@@ -3450,7 +3450,7 @@ function readSessionState(path) {
       return parsed;
     return emptyState();
   } catch (error) {
-    if (error instanceof SyntaxError || isRecord7(error) && error["code"] === "ENOENT")
+    if (error instanceof SyntaxError || isRecord6(error) && error["code"] === "ENOENT")
       return emptyState();
     throw error;
   }
@@ -3471,12 +3471,12 @@ function safePathSegment(value) {
   return value.replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 120) || "unknown-session";
 }
 function isLspSessionState(value) {
-  if (!isRecord7(value) || !Array.isArray(value["unavailableExtensions"]))
+  if (!isRecord6(value) || !Array.isArray(value["unavailableExtensions"]))
     return false;
   const postCompactProbePending = value["postCompactProbePending"];
   return value["unavailableExtensions"].every((item) => typeof item === "string") && (postCompactProbePending === undefined || typeof postCompactProbePending === "boolean");
 }
-function isRecord7(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -3487,7 +3487,7 @@ function extractMutatedFilePaths(input) {
     return [];
   if (isFailedToolResponse(input.tool_response))
     return [];
-  const toolInput = isRecord9(input.tool_input) ? input.tool_input : {};
+  const toolInput = isRecord7(input.tool_input) ? input.tool_input : {};
   const paths = new Set;
   addStringValue(paths, toolInput["path"]);
   addStringValue(paths, toolInput["filePath"]);
@@ -3506,7 +3506,7 @@ function isMutationTool(value) {
   return MUTATION_TOOL_NAMES.has(value.toLowerCase());
 }
 function isFailedToolResponse(value) {
-  if (!isRecord9(value))
+  if (!isRecord7(value))
     return false;
   return value["isError"] === true || value["is_error"] === true || value["error"] === true || value["status"] === "error";
 }
@@ -3549,7 +3549,7 @@ function addPatchFiles(paths, value) {
   if (!Array.isArray(value))
     return;
   for (const item of value) {
-    if (!isRecord9(item))
+    if (!isRecord7(item))
       continue;
     addStringValue(paths, item["path"]);
     addStringValue(paths, item["filePath"]);
@@ -3558,7 +3558,7 @@ function addPatchFiles(paths, value) {
     addStringValue(paths, item["move_path"]);
   }
 }
-function isRecord9(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -3742,7 +3742,7 @@ function limitHookText(text2, maxChars) {
 function isCleanDiagnostics(diagnostics) {
   return diagnostics.length === 0 || diagnostics === CLEAN_DIAGNOSTICS_TEXT || diagnostics.startsWith(UNSUPPORTED_EXTENSION_TEXT);
 }
-function isRecord10(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -3759,7 +3759,7 @@ async function runHookCli(runHook, stdin) {
     if (!raw.trim())
       return;
     const parsed = JSON.parse(raw);
-    const input = isRecord10(parsed) ? parsed : {};
+    const input = isRecord8(parsed) ? parsed : {};
     const output = await runHook(input);
     if (output)
       process.stdout.write(output);

package/packages/omo-codex/plugin/components/lsp/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-tool-use",
 						"timeout": 60,
-						"statusMessage": "(OmO 4.16.3) Checking LSP Diagnostics"
+						"statusMessage": "(OmO 4.17.1) Checking LSP Diagnostics"
 					}
 				]
 			}
@@ -21,7 +21,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-compact",
 						"timeout": 5,
-						"statusMessage": "(OmO 4.16.3) Resetting LSP Diagnostics Cache"
+						"statusMessage": "(OmO 4.17.1) Resetting LSP Diagnostics Cache"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/lsp/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-lsp",
-	"version": "4.16.3",
+	"version": "4.17.1",
 	"description": "Codex plugin that exposes Language Server Protocol tools and post-edit diagnostics.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/lsp/test/package-smoke.test.ts

@@ -56,17 +56,4 @@ describe("plugin package metadata", () => {
 		expect(codexHookSource).not.toContain("../../../../../lsp-daemon");
 		expect(sourceFiles.filter((name) => name.startsWith("lazy-mcp") || name === "lazy-lsp-mcp.ts")).toEqual([]);
 	});
-
-	it("#given LSP skill guidance #when validating MCP tool instructions #then tool names are not framed as shell commands", () => {
-		// given
-		const skill = readTextFile("skills/lsp/SKILL.md");
-
-		// when
-		const mentionsToolInterface = skill.includes("through the tool interface");
-		const rejectsShellExecution = skill.includes("not shell commands");
-
-		// then
-		expect(mentionsToolInterface).toBe(true);
-		expect(rejectsShellExecution).toBe(true);
-	});
 });

package/packages/omo-codex/plugin/components/rules/bundled-rules/hephaestus/gpt-5.5.md

@@ -45,7 +45,7 @@ Read-only Codex subagent roles live in `CODEX_HOME/agents/`. Spawn: `multi_agent
 
 - `explorer` - codebase search
 - `librarian` - external docs, OSS code, API contracts
-- `plan` - planning for ambiguous, multi-module work
+- `plan` - planning when design is still open after discovery; never for a known checklist or for work being delegated onward
 - `lazycodex-gate-reviewer` - final verification of a finished change
 
 Spawn subagents in parallel for independent investigations; do non-overlapping prep while they run, integrate on return. Never duplicate a running search or poll without a completion signal. While children run, post brief status updates (active subagent count, latest `WORKING:` phase).
@@ -74,7 +74,7 @@ Diagnostics catch type errors, not logic bugs; tests cover only what their autho
 
 # Global Review and Debugging Gate
 
-Before declaring significant work or a PR handoff complete, run `review-work` plus a `debugging` runtime audit; record three debugging hypotheses with runtime evidence each. Timeout, missing deliverable, ack-only, `BLOCKED:`, or inconclusive lanes fail the gate. Redact secrets, tokens, and PII from ledgers, PR bodies, and handoffs.
+Run `review-work` plus a `debugging` runtime audit only before a PR handoff or when the user asks for a review; lane pass/fail semantics live in those skills. For everything else, the gate above is the whole gate: once you have personally observed the artifact working, report your evidence. Redact secrets, tokens, and PII from ledgers, PR bodies, and handoffs.
 
 # Failure Recovery
 

package/packages/omo-codex/plugin/components/rules/bundled-rules/hephaestus/gpt-5.6.md

@@ -19,7 +19,7 @@ Status requests are not stop signals: give the update, keep working. Honor every
 
 # Discovery
 
-Never speculate about code you have not read: verify with tools and re-read on every hand-off. Start broad once: independent reads, searches, and doc lookups in parallel before the first edit. Retrieve again only when the core question is open, a needed fact is missing, or a second-order question (callers, error paths, ownership) changes the design. Stop when you can act. Prefer the root fix over the symptom fix.
+Never speculate about code you have not read: verify with tools and re-read on every hand-off. Start broad once - and WIDE: tool calls run as JavaScript through `exec`, so write programs, not single calls. Batch EVERY independent read, search, and doc lookup into ONE `exec` script via `Promise.all` over the `tools` object before the first edit; filter and reduce results in-script so only what you need returns to context. NEVER await independent calls one at a time - sequence only when one result feeds the next. Retrieve again only when the core question is open, a needed fact is missing, or a second-order question (callers, error paths, ownership) changes the design. Stop when you can act. Prefer the root fix over the symptom fix.
 
 # Operating Loop
 
@@ -33,7 +33,7 @@ Read-only Codex subagent roles live in `CODEX_HOME/agents/`. Spawn: `multi_agent
 
 - `explorer` - codebase search
 - `librarian` - external docs, OSS code, API contracts
-- `plan` - planning for ambiguous, multi-module work
+- `plan` - planning when design is still open after discovery; never for a known checklist or for work being delegated onward
 - `lazycodex-gate-reviewer` - final verification of a finished change
 
 Spawn in parallel for independent investigations; do non-overlapping prep while they run, integrate on return. Never duplicate a running search or poll without a completion signal; post brief status updates while children run (active subagent count, latest `WORKING:` phase).
@@ -50,7 +50,7 @@ Diagnostics catch type errors, not logic bugs; tests cover only what their autho
 
 "This should work" from reading source does not pass. A defect found in usage is yours to fix this turn.
 
-Before declaring significant work or a PR handoff complete, run `review-work` plus a `debugging` runtime audit; record three debugging hypotheses with runtime evidence each. Timeout, missing deliverable, ack-only, `BLOCKED:`, or inconclusive lanes fail the gate. Redact secrets, tokens, and PII from ledgers, PR bodies, and handoffs.
+Run `review-work` plus a `debugging` runtime audit only before a PR handoff or when the user asks for a review; lane pass/fail semantics live in those skills. For everything else, the gate above is the whole gate: once you have personally observed the artifact working, report your evidence. Redact secrets, tokens, and PII from ledgers, PR bodies, and handoffs.
 
 # Failure Recovery
 

package/packages/omo-codex/plugin/components/rules/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook session-start",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.16.3) Loading Project Rules"
+						"statusMessage": "(OmO 4.17.1) Loading Project Rules"
 					}
 				]
 			}
@@ -19,7 +19,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook user-prompt-submit",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.16.3) Loading Project Rules"
+						"statusMessage": "(OmO 4.17.1) Loading Project Rules"
 					}
 				]
 			}
@@ -32,7 +32,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-tool-use",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.16.3) Matching Project Rules"
+						"statusMessage": "(OmO 4.17.1) Matching Project Rules"
 					}
 				]
 			}
@@ -45,7 +45,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-compact",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.16.3) Resetting Project Rule Cache"
+						"statusMessage": "(OmO 4.17.1) Resetting Project Rule Cache"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/rules/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-rules",
-	"version": "4.16.3",
+	"version": "4.17.1",
 	"description": "Codex plugin that injects project rule files into model context through lifecycle hooks.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/start-work-continuation/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/start-work-continuation/dist/cli.js\" hook stop",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.16.3) Checking Start-Work Continuation"
+						"statusMessage": "(OmO 4.17.1) Checking Start-Work Continuation"
 					}
 				]
 			}
@@ -19,7 +19,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/start-work-continuation/dist/cli.js\" hook subagent-stop",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.16.3) Checking Start-Work Continuation"
+						"statusMessage": "(OmO 4.17.1) Checking Start-Work Continuation"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/start-work-continuation/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-start-work-continuation",
-	"version": "4.16.3",
+	"version": "4.17.1",
 	"description": "Codex Stop hook continuation injector for omo-codex start-work plans.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/start-work-continuation/test/codex-hook.test.ts

@@ -1,4 +1,4 @@
-import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, describe, expect, it } from "vitest";
@@ -96,84 +96,6 @@ describe("start-work Stop hook", () => {
 		expect(output).toBe("");
 	});
 
-	it("#given active codex work #when continuation directive is emitted #then subagent guidance is reliable", () => {
-		// given
-		const workspace = createWorkspace({
-			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
-			planMarkdown: ["# Plan", "", "## TODOs", "- [ ] First"].join("\n"),
-		});
-		const fs = createMemoryFs();
-
-		// when
-		const output = runStopHook(createStopInput(workspace), fs);
-
-		// then
-		const parsed = parseBlockOutput(output);
-		expect(parsed.reason).toMatch(/TASK:/);
-		expect(parsed.reason).toMatch(/fork_context:\s*false/);
-		expect(parsed.reason).toMatch(/wait_agent.*mailbox signals/);
-		expect(parsed.reason).toMatch(/TASK STILL ACTIVE/);
-		expect(parsed.reason).toMatch(/respawn.*smaller/);
-		expect(parsed.reason).toMatch(/WORKING:/);
-	});
-
-	it("#given active codex work #when continuation directive is emitted #then QA weight is tier-scoped without echo bloat", () => {
-		// given
-		const workspace = createWorkspace({
-			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
-			planMarkdown: ["# Plan", "", "## TODOs", "- [ ] First"].join("\n"),
-		});
-		const fs = createMemoryFs();
-
-		// when
-		const output = runStopHook(createStopInput(workspace), fs);
-
-		// then
-		const parsed = parseBlockOutput(output);
-		expect(parsed.reason).toMatch(/LIGHT/);
-		expect(parsed.reason).toMatch(/HEAVY/);
-		expect(parsed.reason).toMatch(/When unsure[^.]{0,30}HEAVY/);
-		expect(parsed.reason).toMatch(/mirrors its implementation/);
-		expect((parsed.reason.match(/malformed input, prompt injection/g) ?? []).length).toBe(1);
-		expect(parsed.reason.split(/\s+/).filter(Boolean).length).toBeLessThanOrEqual(1135);
-	});
-
-	it("#given active codex work #when continuation directive is emitted #then PR lifecycle stays worktree-bound", () => {
-		// given
-		const workspace = createWorkspace({
-			boulderJson: createBoulderJson({
-				sessionIds: ["codex:sess_abc"],
-				status: "active",
-				worktreePath: "/tmp/worktree",
-			}),
-			planMarkdown: ["# Plan", "", "## TODOs", "- [ ] First"].join("\n"),
-		});
-		const fs = createMemoryFs();
-
-		// when
-		const output = runStopHook(createStopInput(workspace), fs);
-
-		// then
-		const parsed = parseBlockOutput(output);
-		expect(parsed.reason).toContain("PR or branch implementation/review/merge work requires a task-owned git worktree");
-		expect(parsed.reason).toContain("Treat the main worktree as read-only context");
-		expect(parsed.reason).toContain("create/update the PR, wait for CI/review/Cubic gates, merge by default");
-		expect(parsed.reason).toContain("Do not create a PR, PR handoff, branch handoff, merge");
-	});
-
-	it("#given stop hook source #when inspected #then it remains Boulder-only without planning bootstrap logic", () => {
-		// given
-		const hook = readFileSync(new URL("../src/codex-hook.ts", import.meta.url), "utf8");
-
-		// then
-		expect(hook).toMatch(/readContinuationState/);
-		expect(hook).toMatch(/START_WORK_CONTINUATION_DIRECTIVE/);
-		expect(hook).toMatch(/decision:\s*"block"/);
-		expect(hook).not.toMatch(
-			/\bulw-plan\b|\bspawn_agent\b|\brequest_user_input\b|bootstrap|selectable plan|Phase 1|Create or update Boulder state/i,
-		);
-	});
-
 	it("#given active work belongs to another harness #when hook runs #then returns empty output", () => {
 		// given
 		const workspace = createWorkspace({