oh-my-opencode 4.19.4 → 5.0.0-beta.10

package/packages/omo-codex/plugin/components/rules/test/hook-output.test.ts

@@ -5,14 +5,14 @@ import { formatAdditionalContextOutput } from "../src/hook-output.js";
 describe("formatAdditionalContextOutput", () => {
 	it("#given context with outer whitespace and CRLF #when serializing hook JSON #then additional context is newline-normalized", () => {
 		// given
-		const context = "\r\n\r\nFirst line\r\nSecond line\rThird line\r\n";
+		const context = "\r\n\r\nA1\r\nB2\rC3\r\n";
 
 		// when
 		const output = formatAdditionalContextOutput("PostToolUse", context);
 		const parsed: unknown = JSON.parse(output);
 
 		// then
-		expect(readAdditionalContext(parsed)).toBe("First line\nSecond line\nThird line");
+		expect(readAdditionalContext(parsed)).toBe("A1\nB2\nC3");
 		expect(output.endsWith("\n")).toBe(true);
 	});
 
@@ -40,7 +40,6 @@ describe("formatAdditionalContextOutput", () => {
 		expect(additionalContext.length).toBeLessThanOrEqual(32_000);
 		expect(additionalContext).toContain("first");
 		expect(additionalContext).not.toContain("last");
-		expect(additionalContext).toContain("[Truncated hook additional context to 32000 chars");
 	});
 });
 

package/packages/omo-codex/plugin/components/rules/test/windows-git-bash-bundled-rule.test.ts

@@ -71,25 +71,11 @@ describe("Windows Git Bash bundled rule content", () => {
 		expect(body).toContain("alwaysApply: true");
 	});
 
-	it('#given the bundled rule #when read #then it NEVER recommends bare shell:"bash"', () => {
-		const body = readWindowsRuleBody();
-
-		expect(body).not.toContain('shell: "bash"');
-	});
-
-	it("#given the bundled rule #when read #then it warns that bare bash often resolves to WSL System32", () => {
-		const body = readWindowsRuleBody();
-
-		expect(body).toMatch(/WSL/i);
-		expect(body).toMatch(/System32/i);
-	});
-
-	it("#given the bundled rule #when read #then it prefers the git_bash MCP and the absolute Git Bash path", () => {
+	it("#given the bundled rule #when read #then it names the Git Bash runtime identifiers", () => {
 		const body = readWindowsRuleBody();
 
 		expect(body).toContain("git_bash");
 		expect(body).toContain("OMO_CODEX_GIT_BASH_PATH");
-		expect(body).toContain("C:\\Program Files\\Git\\bin\\bash.exe");
 	});
 });
 

package/packages/omo-codex/plugin/components/start-work-continuation/AGENTS.md

@@ -31,9 +31,10 @@ Conventions for human contributors and AI agents working on this repository.
 
 ## Layout
 
-- `src/boulder-reader.ts`: reads `.omo/boulder.json`, resolves the active work for the session, re-exports `getPlanChecklist`/`PlanChecklist` from `plan-checklist.ts`. `readContinuationState` returns null only when the plan has no readable top-level checklist (`total === 0`).
+- `src/boulder-reader.ts`: reads `.omo/boulder.json`, resolves the active work for the session, re-exports `getPlanChecklist`/`PlanChecklist` from `plan-checklist.ts`. `readContinuationState` returns null in four cases: `boulder.json` is missing or unparseable, no work matches the session, the work status is not continuable (only `active` and `paused` continue - `completed`/`abandoned` stop), or `checklist.total === 0`.
 - `src/plan-checklist.ts`: `PlanChecklist` (`completed`/`remaining`/`total`/`nextTaskLabel`) and `getPlanChecklist`/`parsePlanChecklist`. Counts structured `## TODOs` rows (`N. <title>`) and `## Final Verification Wave` rows (`F<number>. <title>`); falls back to simple top-level `- [ ]`/`- [x]` checkboxes. Skips fenced blocks and respects `#`/`##` section boundaries.
-- `src/codex-hook.ts`: Stop/SubagentStop hook; fills `REMAINING_COUNT`/`TOTAL_COUNT`/`NEXT_TASK_LABEL` from the checklist into `directive.md`.
+- `src/codex-hook.ts`: Stop/SubagentStop hook; fills nine placeholders into `directive.md` - `PLAN_NAME`, `PLAN_PATH`, `BOULDER_PATH`, `REMAINING_COUNT`, `TOTAL_COUNT`, `NEXT_TASK_LABEL`, `WORKTREE_BLOCK`, `LEDGER_PATH`, `SESSION_ID`. `WORKTREE_BLOCK` renders empty when the work has no worktree. When `remaining === 0`, `nextTaskLabel` is null and renders as "none (final gate pending)".
+- **Context-pressure suppression:** the hook reads `input.transcript_path` through the injected `ReadonlyFileSystem` and returns `""` (no continuation) when the transcript carries any context-pressure marker (`context compacted`, `context_length_exceeded`, `context_too_large`, `codex ran out of room in the model's context window`, and related phrasings). This is the safety valve against an infinite continuation loop once the context window is exhausted; it is pinned by a `#given context-window pressure` test.
 - `directive.md`: directive template with placeholders, applied per invocation.
 
 ## Build and Hooks
@@ -48,4 +49,5 @@ Conventions for human contributors and AI agents working on this repository.
 - Never make a network call from the hook.
 - Keep the directive in `directive.md`. Do not inline it into TypeScript files.
 - The hook only continues sessions listed in `.omo/boulder.json` as `codex:<session_id>`.
+- The hook yields no output when `last_assistant_message` starts with `<start-work-blocked-external>`, or when that marker is the second line immediately after the mandatory `ULTRAWORK MODE ENABLED!` opener, so a conclusive external blocker can end the turn. Reject the marker everywhere else.
 - The hook continues while the plan has a readable top-level checklist (`total > 0`). A fully-checked plan still blocks Stop until the final gate runs and the Boulder work is marked completed; an unreadable or empty checklist yields no output.

package/packages/omo-codex/plugin/components/start-work-continuation/README.md

@@ -8,7 +8,11 @@ It reads `.omo/boulder.json` in the hook payload `cwd`, resolves the active work
 {"decision":"block","reason":"<directive>"}
 ```
 
-The `reason` is loaded from `directive.md` on every invocation and filled with current plan state. The hook returns no output when `stop_hook_active` is `true`, when no active Boulder work exists, when the work is completed, when the active work is not tied to `codex:<session_id>`, or when the plan has no readable top-level checklist. An active plan whose checklist is fully checked still blocks Stop until the final gate runs and Boulder is marked completed.
+The `reason` is loaded from `directive.md` on every invocation and filled with current plan state. The hook returns no output when `stop_hook_active` is `true`, when `last_assistant_message` starts with `<start-work-blocked-external>` (or places it immediately after the mandatory `ULTRAWORK MODE ENABLED!` opener), when no active Boulder work exists, when the work is completed, when the active work is not tied to `codex:<session_id>`, or when the plan has no readable top-level checklist. An active plan whose checklist is fully checked still blocks Stop until the final gate runs and Boulder is marked completed.
+
+## External blocker escape hatch
+
+A plan can stall on something no amount of retrying fixes: a missing credential, missing hardware, a revoked authorization, an unavailable third-party service. `directive.md` instructs the agent to write `<start-work-blocked-external>` as the entire first line of its answer in that case, or as the entire second line when ultrawork's mandatory opener occupies the first. The hook recognizes those structural forms and lets the turn end so the user can act, instead of continuing the same unchanged external-state check forever. Merely discussing the marker later in an answer still continues the plan.
 
 This pairs with the `start-work` skill at `plugin/skills/start-work/SKILL.md`. That skill writes `.omo/boulder.json` with Codex session ids prefixed as `codex:` so the hook can continue only its own active Codex session.
 

package/packages/omo-codex/plugin/components/start-work-continuation/directive.md

@@ -45,7 +45,8 @@ Before completion, satisfy all five `review-work` lanes and a `debugging` runtim
 # Stop conditions for THIS turn
 
 - A top-level checkbox flipped to `- [x]` after the 5-phase QA gate (Phase 1 read, Phase 2 automated, Phase 3 channel scenario, Phase 4 adversarial-class probing, Phase 5 gate decision). Then the Stop hook will re-evaluate; if more checkboxes remain you will be continued again.
-- 3 same-failure cycles on one sub-task → escalate via `multi_agent_v1.spawn_agent({"message":"TASK: act as a rigorous reviewer. DELIVERABLE: diagnose the repeated sub-task failure and recommend the next safe action. VERIFY: cite the failing evidence.","fork_context":false})` and stop dispatch.
+- A conclusive external blocker only the user or external state can clear (missing hardware, credential, authorization, or an unavailable service) → after ONE authoritative check, stop retrying and stop reviewer dispatch. Write `<start-work-blocked-external>` as the entire first line of your answer, then state the exact blocker and the observable condition that resumes the work. If ultrawork requires `ULTRAWORK MODE ENABLED!` as the first line, put the blocker marker alone on the second line instead. The Stop hook recognizes both forms and lets this turn end.
+- 3 same-failure cycles on one agent-controllable sub-task → escalate via `multi_agent_v1.spawn_agent({"message":"TASK: act as a rigorous reviewer. DELIVERABLE: diagnose the repeated sub-task failure and recommend the next safe action. VERIFY: cite the failing evidence.","fork_context":false})` and stop dispatch.
 - Safety boundary (destructive command, secret exfiltration, production write) → stop and surface a safe substitute.
 - All top-level checkboxes `- [x]` AND the Global Review and Debugging Gate passed → print the ORCHESTRATION COMPLETE block and end.
 

package/packages/omo-codex/plugin/components/start-work-continuation/dist/cli.js

@@ -307,6 +307,8 @@ function runStopHook(input, fs) {
     return "";
   if (input.stop_hook_active)
     return "";
+  if (hasAllowedExternalBlockerMarker(input.last_assistant_message))
+    return "";
   if (transcriptHasContextPressureMarker(input.transcript_path, fs))
     return "";
   const state = readContinuationState(input.cwd, input.session_id);
@@ -337,6 +339,22 @@ function renderDirective(state, sessionId) {
   }
   return rendered;
 }
+var EXTERNAL_BLOCKER_MARKER = "<start-work-blocked-external>";
+var ULTRAWORK_OPENER = "ULTRAWORK MODE ENABLED!";
+function hasAllowedExternalBlockerMarker(lastAssistantMessage) {
+  if (lastAssistantMessage === undefined)
+    return false;
+  const lines = lastAssistantMessage.split(String.fromCharCode(10));
+  const [firstLine = "", secondLine = ""] = lines;
+  let markerLineIndex = -1;
+  if (firstLine.trim() === EXTERNAL_BLOCKER_MARKER)
+    markerLineIndex = 0;
+  else if (firstLine.trim() === ULTRAWORK_OPENER && secondLine.trim() === EXTERNAL_BLOCKER_MARKER)
+    markerLineIndex = 1;
+  if (markerLineIndex === -1)
+    return false;
+  return lines.slice(markerLineIndex + 1).some((line) => line.trim() !== "");
+}
 var CONTEXT_PRESSURE_MARKERS = [
   "context compacted",
   "context_length_exceeded",

package/packages/omo-codex/plugin/components/start-work-continuation/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/start-work-continuation/dist/cli.js\" hook stop",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Checking Start-Work Continuation"
+						"statusMessage": "(OmO 5.0.0-beta.10) Checking Start-Work Continuation"
 					}
 				]
 			}
@@ -19,7 +19,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/start-work-continuation/dist/cli.js\" hook subagent-stop",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Checking Start-Work Continuation"
+						"statusMessage": "(OmO 5.0.0-beta.10) Checking Start-Work Continuation"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/start-work-continuation/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-start-work-continuation",
-	"version": "4.19.4",
+	"version": "5.0.0-beta.10",
 	"description": "Codex Stop hook continuation injector for omo-codex start-work plans.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/start-work-continuation/src/codex-hook.ts

@@ -6,6 +6,7 @@ import type { ReadonlyFileSystem, StopHookEventName, StopHookOutput, StopInput }
 export function runStopHook(input: unknown, fs: ReadonlyFileSystem): string {
 	if (!isStopInput(input)) return "";
 	if (input.stop_hook_active) return "";
+	if (hasAllowedExternalBlockerMarker(input.last_assistant_message)) return "";
 	if (transcriptHasContextPressureMarker(input.transcript_path, fs)) return "";
 	const state = readContinuationState(input.cwd, input.session_id);
 	if (state === null) return "";
@@ -39,6 +40,26 @@ function renderDirective(state: ContinuationState, sessionId: string): string {
 	return rendered;
 }
 
+const EXTERNAL_BLOCKER_MARKER = "<start-work-blocked-external>";
+const ULTRAWORK_OPENER = "ULTRAWORK MODE ENABLED!";
+
+// The marker alone is not enough to end the turn. `directive.md` requires the exact blocker and
+// the condition that resumes the work on the following lines, so at least one is required here
+// too. That keeps a bare echo of the marker, whether quoted back from a prompt or produced by
+// untrusted text the agent read, from skipping the continuation guard.
+function hasAllowedExternalBlockerMarker(lastAssistantMessage: string | undefined): boolean {
+	if (lastAssistantMessage === undefined) return false;
+	const lines = lastAssistantMessage.split(String.fromCharCode(10));
+	const [firstLine = "", secondLine = ""] = lines;
+
+	let markerLineIndex = -1;
+	if (firstLine.trim() === EXTERNAL_BLOCKER_MARKER) markerLineIndex = 0;
+	else if (firstLine.trim() === ULTRAWORK_OPENER && secondLine.trim() === EXTERNAL_BLOCKER_MARKER) markerLineIndex = 1;
+	if (markerLineIndex === -1) return false;
+
+	return lines.slice(markerLineIndex + 1).some((line) => line.trim() !== "");
+}
+
 const CONTEXT_PRESSURE_MARKERS = [
 	"context compacted",
 	"context_length_exceeded",

package/packages/omo-codex/plugin/components/start-work-continuation/test/cli.test.ts

@@ -26,9 +26,6 @@ describe("start-work continuation CLI", () => {
 		expect(result.status).toBe(0);
 		const output = parseStopHookOutput(result.stdout);
 		expect(output.decision).toBe("block");
-		expect(output.reason).toContain("Remaining top-level checkboxes: `2` of `4`");
-		expect(output.reason).toContain("Next incomplete task: `1. Implement checklist parser parity`");
-		expect(output.reason).toContain("Your session id in boulder.json: `codex:s1`");
 	});
 
 	it("#given valid SubagentStop stdin #when CLI runs #then stdout contains block JSON", () => {

package/packages/omo-codex/plugin/components/start-work-continuation/test/codex-hook.test.ts

@@ -58,16 +58,112 @@ describe("start-work Stop hook", () => {
 		const output = runStopHook(createStopInput(workspace), fs);
 
 		// then
-		const parsed = parseBlockOutput(output);
-		expect(parsed.decision).toBe("block");
-		expect(parsed.reason).toContain("- Plan: `launch-plan`");
-		expect(parsed.reason).toContain(`- Plan file: \`${join(workspace, ".omo", "plans", "plan.md")}\``);
-		expect(parsed.reason).toContain(`- Boulder state: \`${join(workspace, ".omo", "boulder.json")}\``);
-		expect(parsed.reason).toContain("- Remaining top-level checkboxes: `2` of `4`");
-		expect(parsed.reason).toContain("- Next incomplete task: `1. Implement checklist parser parity`");
-		expect(parsed.reason).toContain("- Worktree: `/tmp/worktree`");
-		expect(parsed.reason).toContain(`- Ledger: \`${join(workspace, ".omo", "start-work", "ledger.jsonl")}\``);
-		expect(parsed.reason).toContain("- Your session id in boulder.json: `codex:sess_abc`");
+		expect(parseBlockOutput(output).decision).toBe("block");
+	});
+
+	it("#given active codex work and an external-blocker marker #when hook runs #then returns empty output", () => {
+		// given
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: [
+				"<start-work-blocked-external>",
+				"Blocker: the staging deploy credential is missing.",
+				"Resume when a valid credential is provisioned.",
+			].join("\n"),
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(output).toBe("");
+	});
+
+	it("#given ultrawork opener then external-blocker marker #when hook runs #then returns empty output", () => {
+		// given
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: [
+				"ULTRAWORK MODE ENABLED!",
+				"<start-work-blocked-external>",
+				"Blocker: the staging deploy credential is missing.",
+			].join("\n"),
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(output).toBe("");
+	});
+
+	it("#given the external-blocker marker with no stated blocker #when hook runs #then still returns block JSON", () => {
+		// given: a bare marker, which is what a quoted echo or untrusted text would produce.
+		// directive.md requires the blocker and the resume condition, so the marker alone must not
+		// skip the continuation guard.
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: "<start-work-blocked-external>",
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(output).not.toBe("");
+	});
+
+	it("#given the ultrawork opener and a bare marker #when hook runs #then still returns block JSON", () => {
+		// given
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: ["ULTRAWORK MODE ENABLED!", "<start-work-blocked-external>", "   "].join("\n"),
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(output).not.toBe("");
+	});
+
+	it("#given the external-blocker marker below the first line #when hook runs #then still returns block JSON", () => {
+		// given
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: ["Next turn I may need to emit", "<start-work-blocked-external>"].join("\n"),
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(parseBlockOutput(output).decision).toBe("block");
 	});
 
 	it("#given active codex work with zero remaining tasks #when hook runs #then blocks for the final gate", () => {
@@ -82,12 +178,7 @@ describe("start-work Stop hook", () => {
 		const output = runStopHook(createStopInput(workspace), fs);
 
 		// then
-		const parsed = parseBlockOutput(output);
-		expect(parsed.decision).toBe("block");
-		expect(parsed.reason).toContain("- Remaining top-level checkboxes: `0` of `1`");
-		expect(parsed.reason).toContain("- Next incomplete task: `none (final gate pending)`");
-		expect(parsed.reason).toContain("When the remaining count is `0`, skip checkbox execution");
-		expect(parsed.reason).toContain("re-read the ledger record and verify the exact lane/SHA pair");
+		expect(parseBlockOutput(output).decision).toBe("block");
 	});
 
 	it("#given context-window pressure in transcript #when hook runs #then it does not inject continuation text", () => {

package/packages/omo-codex/plugin/components/teammode/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-tool-use",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Checking Thread Title Hygiene"
+						"statusMessage": "(OmO 5.0.0-beta.10) Checking Thread Title Hygiene"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/teammode/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sisyphuslabs/codex-teammode",
-	"version": "4.19.4",
+	"version": "5.0.0-beta.10",
 	"description": "Codex team-mode hook component that keeps background thread titles descriptive after create_thread.",
 	"type": "module",
 	"private": true,

package/packages/omo-codex/plugin/components/teammode/test/thread-title-hook.test.ts

@@ -29,9 +29,7 @@ describe("thread title PostToolUse guidance", () => {
 		expect(isHookOutput(parsed)).toBe(true);
 		if (!isHookOutput(parsed)) return;
 		expect(parsed.hookSpecificOutput.hookEventName).toBe("PostToolUse");
-		expect(parsed.hookSpecificOutput.additionalContext).toBe(
-			"THREAD ID thread-123: CALL codex_app.set_thread_title NOW. USE THE REAL TASK/ROLE.",
-		);
+		expect(parsed.hookSpecificOutput.additionalContext).toContain("thread-123");
 	});
 
 	it("#given Codex reports create_thread output as a JSON string #when the hook runs #then it still extracts the thread id", () => {
@@ -59,9 +57,7 @@ describe("thread title PostToolUse guidance", () => {
 		// then
 		expect(isHookOutput(parsed)).toBe(true);
 		if (!isHookOutput(parsed)) return;
-		expect(parsed.hookSpecificOutput.additionalContext).toBe(
-			"THREAD ID 019ef350-ee78-72a3-bd5e-e40cebc3d814: CALL codex_app.set_thread_title NOW. USE THE REAL TASK/ROLE.",
-		);
+		expect(parsed.hookSpecificOutput.additionalContext).toContain("019ef350-ee78-72a3-bd5e-e40cebc3d814");
 	});
 
 	it("#given an unrelated tool completed #when the hook runs #then it stays silent", () => {
@@ -141,9 +137,7 @@ describe("thread title PostToolUse guidance", () => {
 		// then
 		expect(isHookOutput(parsed)).toBe(true);
 		if (!isHookOutput(parsed)) return;
-		expect(parsed.hookSpecificOutput.additionalContext).toBe(
-			"PENDING WORKTREE ID remote-control:env:test-worktree: WORKTREE THREAD IS NOT READY YET. DO NOT bind-thread OR SEND THE MEMBER BOOTSTRAP UNTIL A REAL THREAD ID EXISTS. THEN CALL codex_app.set_thread_title USING THE REAL TASK/ROLE.",
-		);
+		expect(parsed.hookSpecificOutput.additionalContext).toContain("remote-control:env:test-worktree");
 	});
 });
 

package/packages/omo-codex/plugin/components/telemetry/dist/cli.js

@@ -174,6 +174,7 @@ function writePostHogActivityState(stateDir, nextState, diagnostics) {
 // ../../telemetry-core/src/constants.ts
 var DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com";
 var DEFAULT_POSTHOG_API_KEY = "phc_CFJhj5HyvA62QPhvyaUCtaq23aUfznnijg5VaaGkNk74";
+var UNCONFIGURED_POSTHOG_API_KEY = "phc_REPLACE_ME_OMO_NATIVE";
 
 // ../../telemetry-core/src/diagnostics.ts
 import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync2 } from "node:fs";
@@ -310,6 +311,9 @@ function shouldDisableTelemetry(input) {
   const env = input.env ?? process.env;
   const globalPrefix = input.globalEnvPrefix ?? "OMO";
   const prefixes = Array.from(new Set([globalPrefix, input.productEnvPrefix]));
+  if (isDisableFlag(env["DO_NOT_TRACK"])) {
+    return true;
+  }
   for (const prefix of prefixes) {
     if (isDisableFlag(env[`${prefix}_DISABLE_POSTHOG`])) {
       return true;
@@ -323,18 +327,15 @@ function shouldDisableTelemetry(input) {
 function getTelemetryApiKey(env = process.env, defaultApiKey = DEFAULT_POSTHOG_API_KEY) {
   return env["POSTHOG_API_KEY"]?.trim() ?? defaultApiKey;
 }
-function getTelemetryHost(env = process.env, defaultHost = DEFAULT_POSTHOG_HOST) {
-  return env["POSTHOG_HOST"]?.trim() || defaultHost;
+function isConfiguredTelemetryApiKey(apiKey) {
+  const normalized = apiKey.trim();
+  return normalized.length > 0 && normalized !== UNCONFIGURED_POSTHOG_API_KEY;
 }
-
-// ../../telemetry-core/src/machine-id.ts
-import { createHash } from "node:crypto";
-import os2 from "node:os";
-function getDefaultTelemetryOsProvider() {
-  return os2;
+function hasTelemetryApiKey(env, defaultApiKey) {
+  return isConfiguredTelemetryApiKey(getTelemetryApiKey(env, defaultApiKey));
 }
-function getTelemetryDistinctId(machineIdPrefix, osProvider = getDefaultTelemetryOsProvider()) {
-  return createHash("sha256").update(`${machineIdPrefix}${osProvider.hostname()}`).digest("hex");
+function getTelemetryHost(env = process.env, defaultHost = DEFAULT_POSTHOG_HOST) {
+  return env["POSTHOG_HOST"]?.trim() || defaultHost;
 }
 
 // ../../../node_modules/.bun/posthog-node@5.35.12/node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
@@ -5504,6 +5505,16 @@ class PostHog extends PostHogBackendClient {
   }
 }
 
+// ../../telemetry-core/src/machine-id.ts
+import { createHash } from "node:crypto";
+import os2 from "node:os";
+function getDefaultTelemetryOsProvider() {
+  return os2;
+}
+function getTelemetryDistinctId(machineIdPrefix, osProvider = getDefaultTelemetryOsProvider()) {
+  return createHash("sha256").update(`${machineIdPrefix}${osProvider.hostname()}`).digest("hex");
+}
+
 // ../../telemetry-core/src/posthog-client.ts
 var NO_OP_CLIENT = {
   enabled: false,
@@ -5538,7 +5549,7 @@ function createDefaultPostHogTransport(apiKey, options) {
 }
 function isTelemetryClientEnabled(input) {
   const env = input.env ?? process.env;
-  return !shouldDisableTelemetry({ env, productEnvPrefix: input.product.productEnvPrefix }) && getTelemetryApiKey(env, input.product.defaultApiKey).length > 0;
+  return !shouldDisableTelemetry({ env, productEnvPrefix: input.product.productEnvPrefix }) && hasTelemetryApiKey(env, input.product.defaultApiKey);
 }
 function createTelemetryClient(input) {
   if (!isTelemetryClientEnabled(input)) {
@@ -5604,7 +5615,8 @@ function createTransport(input) {
       flushAt: 1,
       flushInterval: 0,
       host: getTelemetryHost(env, input.product.defaultHost),
-      disableGeoip: false
+      disableGeoip: input.product.disableGeoip ?? false,
+      ...input.product.transportOptions
     });
   } catch (error) {
     input.diagnostics?.({

package/packages/omo-codex/plugin/components/telemetry/dist/posthog.js

@@ -170,6 +170,7 @@ function writePostHogActivityState(stateDir, nextState, diagnostics) {
 // ../../../../telemetry-core/src/constants.ts
 var DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com";
 var DEFAULT_POSTHOG_API_KEY = "phc_CFJhj5HyvA62QPhvyaUCtaq23aUfznnijg5VaaGkNk74";
+var UNCONFIGURED_POSTHOG_API_KEY = "phc_REPLACE_ME_OMO_NATIVE";
 
 // ../../../../telemetry-core/src/diagnostics.ts
 import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync2 } from "node:fs";
@@ -306,6 +307,9 @@ function shouldDisableTelemetry(input) {
   const env = input.env ?? process.env;
   const globalPrefix = input.globalEnvPrefix ?? "OMO";
   const prefixes = Array.from(new Set([globalPrefix, input.productEnvPrefix]));
+  if (isDisableFlag(env["DO_NOT_TRACK"])) {
+    return true;
+  }
   for (const prefix of prefixes) {
     if (isDisableFlag(env[`${prefix}_DISABLE_POSTHOG`])) {
       return true;
@@ -319,18 +323,15 @@ function shouldDisableTelemetry(input) {
 function getTelemetryApiKey(env = process.env, defaultApiKey = DEFAULT_POSTHOG_API_KEY) {
   return env["POSTHOG_API_KEY"]?.trim() ?? defaultApiKey;
 }
-function getTelemetryHost(env = process.env, defaultHost = DEFAULT_POSTHOG_HOST) {
-  return env["POSTHOG_HOST"]?.trim() || defaultHost;
+function isConfiguredTelemetryApiKey(apiKey) {
+  const normalized = apiKey.trim();
+  return normalized.length > 0 && normalized !== UNCONFIGURED_POSTHOG_API_KEY;
 }
-
-// ../../../../telemetry-core/src/machine-id.ts
-import { createHash } from "node:crypto";
-import os2 from "node:os";
-function getDefaultTelemetryOsProvider() {
-  return os2;
+function hasTelemetryApiKey(env, defaultApiKey) {
+  return isConfiguredTelemetryApiKey(getTelemetryApiKey(env, defaultApiKey));
 }
-function getTelemetryDistinctId(machineIdPrefix, osProvider = getDefaultTelemetryOsProvider()) {
-  return createHash("sha256").update(`${machineIdPrefix}${osProvider.hostname()}`).digest("hex");
+function getTelemetryHost(env = process.env, defaultHost = DEFAULT_POSTHOG_HOST) {
+  return env["POSTHOG_HOST"]?.trim() || defaultHost;
 }
 
 // ../../../../../node_modules/.bun/posthog-node@5.35.12/node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
@@ -5500,6 +5501,16 @@ class PostHog extends PostHogBackendClient {
   }
 }
 
+// ../../../../telemetry-core/src/machine-id.ts
+import { createHash } from "node:crypto";
+import os2 from "node:os";
+function getDefaultTelemetryOsProvider() {
+  return os2;
+}
+function getTelemetryDistinctId(machineIdPrefix, osProvider = getDefaultTelemetryOsProvider()) {
+  return createHash("sha256").update(`${machineIdPrefix}${osProvider.hostname()}`).digest("hex");
+}
+
 // ../../../../telemetry-core/src/posthog-client.ts
 var NO_OP_CLIENT = {
   enabled: false,
@@ -5534,7 +5545,7 @@ function createDefaultPostHogTransport(apiKey, options) {
 }
 function isTelemetryClientEnabled(input) {
   const env = input.env ?? process.env;
-  return !shouldDisableTelemetry({ env, productEnvPrefix: input.product.productEnvPrefix }) && getTelemetryApiKey(env, input.product.defaultApiKey).length > 0;
+  return !shouldDisableTelemetry({ env, productEnvPrefix: input.product.productEnvPrefix }) && hasTelemetryApiKey(env, input.product.defaultApiKey);
 }
 function createTelemetryClient(input) {
   if (!isTelemetryClientEnabled(input)) {
@@ -5600,7 +5611,8 @@ function createTransport(input) {
       flushAt: 1,
       flushInterval: 0,
       host: getTelemetryHost(env, input.product.defaultHost),
-      disableGeoip: false
+      disableGeoip: input.product.disableGeoip ?? false,
+      ...input.product.transportOptions
     });
   } catch (error) {
     input.diagnostics?.({

package/packages/omo-codex/plugin/components/telemetry/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook session-start",
 						"timeout": 5,
-						"statusMessage": "(OmO 4.19.4) Recording Session Telemetry"
+						"statusMessage": "(OmO 5.0.0-beta.10) Recording Session Telemetry"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/telemetry/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-telemetry",
-	"version": "4.19.4",
+	"version": "5.0.0-beta.10",
 	"description": "Codex plugin component that emits omo-codex anonymous daily-active telemetry on SessionStart.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/ultrawork/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+- Scenario contract is now sized to the change (1-2 scenarios for small single-surface work, 3+ for risky or multi-surface work), and each scenario names the cheapest faithful proof: a test file + test id at a code seam, or the real-surface scenario itself when no seam exists. "Tests are the FLOOR (always required)" is gone — prose, docs, prompt, and visual-only changes take review + real-surface QA, and a test pinning their text is called out as pretend-coverage. The TDD sections across `prompts-core` ultrawork variants (default/gpt/gemini/glm) are scoped to production code changes with a test seam, and the execution-loop PIN step now asks for characterization pins only when refactoring behavior whose regressions the change could hide. Driver: the 2026-08-03 session-corpus investigation that traced contract-test sprawl (22 tests for an HTML/CSS profile page, prose contract tests on docs) to the always-required test floor. `directive.md` re-synced from `prompts-core/ultrawork/codex.md`; 26,555 chars across 470 lines.
+
 - The `ulw`/`ultrawork` trigger now injects a compact bootstrap pointer instead of the full directive: it mandates the `ULTRAWORK MODE ENABLED!` opener, an immediate `create_goal` call with `objective` only, and reading the full directive from the bundled `ultrawork` skill at a runtime-resolved absolute path. Codex App truncates large hook outputs (head plus tail, middle omitted), which silently dropped the `create_goal` bootstrap since v4.14.1; the pointer stays far below the truncation budget so no part of it can be lost (fixes code-yeongyu/oh-my-openagent#5828). When the plugin skills tree is absent (standalone component installs), the hook falls back to emitting the full directive.
 - New `skills/ultrawork/SKILL.md` carries the complete directive body behind skill frontmatter and is regenerated from `@oh-my-opencode/prompts-core` by `scripts/sync-directive.mjs`; `directive-source.test.ts` pins the skill body to `directive.md` byte for byte.
 - Runtime hook migrated from `python3 hooks/ultrawork-detector.py` to the component-standard TypeScript build output `node dist/cli.js hook user-prompt-submit`, removing the Codex runtime dependency on Python.

package/packages/omo-codex/plugin/components/ultrawork/agents/lazycodex-code-reviewer.toml

@@ -17,7 +17,7 @@ Before judging test relevance or maintainability, explicitly load or consult the
 
 Run the `remove-ai-slops` overfit/slop review pass over tests and production code. Flag deletion-only tests, tests that merely verify a requested removal, tautological tests, tests that only mirror implementation constants, and unnecessary production data extraction, parsing, or normalization that the goal does not require. Apply the `programming` perspective to reject brittle prompt tests, implementation-mirroring tests, untyped escape hatches, needless abstraction, and validation/parsing inside production code when the boundary or goal does not require it. Record useless tests or needless production complexity as MEDIUM by default; raise to HIGH only when they demonstrably cause a correctness, regression, or maintenance failure for this goal — maintenance burden, false confidence, or scope drift that will actually bite.
 
-Write your report artifact to `<attemptDir>/<goalId>-code-review.md`, where you read `currentAttemptDir` from `omo ulw-loop status --json` (`.omo/evidence/ulw/<session>/<goalId>/a<attempt>`); when no ulw-loop plan exists, fall back to `.omo/evidence/<goal>-code-review.md`. The report must include findings by severity: CRITICAL, HIGH, MEDIUM, LOW. Include file and line references when a finding is tied to code.
+Write your report artifact to `<attemptDir>/<goalId>-code-review.md`, where you read `currentAttemptDir` from `omo-agent-toolkit ulw-loop status --json` (`.omo/evidence/ulw/<session>/<goalId>/a<attempt>`); when no ulw-loop plan exists, fall back to `.omo/evidence/<goal>-code-review.md`. The report must include findings by severity: CRITICAL, HIGH, MEDIUM, LOW. Include file and line references when a finding is tied to code.
 
 Return:
 - `codeQualityStatus`: CLEAR, WATCH, or BLOCK.

package/packages/omo-codex/plugin/components/ultrawork/agents/lazycodex-gate-reviewer.toml

@@ -15,7 +15,7 @@ Review from the user's perspective: infer what the user originally wanted, what
 
 Before approval, load or consult `remove-ai-slops` and `programming` when available. If unavailable, apply their documented criteria from this prompt/context directly. Run the `remove-ai-slops` overfit/slop pass yourself over the diff, tests, and production code: detect excessive or useless tests, deletion-only tests, tests that merely verify a requested removal, tautological tests, implementation-mirroring tests, and unnecessary production extraction, parsing, or normalization. Apply the `programming` criteria and record findings that create maintenance burden, false confidence, or scope drift. Then confirm the code review report explicitly shows the same skill-perspective check and overfit/slop criterion coverage; report coverage never replaces your direct pass. A finding blocks only when it violates a stated success criterion. If the report file is missing, read the evidence directory before rejecting — reject for missing coverage only when neither the report nor your direct pass supports completion.
 
-Write your report artifact to `<attemptDir>/<goalId>-gate-review.md`, where you read `currentAttemptDir` from `omo ulw-loop status --json` (`.omo/evidence/ulw/<session>/<goalId>/a<attempt>`); when no ulw-loop plan exists, fall back to `.omo/evidence/<goal>-gate-review.md`. Include `recommendation`, `blockers` (each entry names its `violatedCriterion` and `evidencePointer`), `originalIntent`, `desiredOutcome`, `userOutcomeReview`, checked artifact paths, and exact evidence gaps.
+Write your report artifact to `<attemptDir>/<goalId>-gate-review.md`, where you read `currentAttemptDir` from `omo-agent-toolkit ulw-loop status --json` (`.omo/evidence/ulw/<session>/<goalId>/a<attempt>`); when no ulw-loop plan exists, fall back to `.omo/evidence/<goal>-gate-review.md`. Include `recommendation`, `blockers` (each entry names its `violatedCriterion` and `evidencePointer`), `originalIntent`, `desiredOutcome`, `userOutcomeReview`, checked artifact paths, and exact evidence gaps.
 
 Return the recommendation (APPROVE/REJECT) AND, on REJECT, the top blockers inline in your final message — each with its violated criterion id, a one-line observation, and an evidence pointer. The report file holds full detail; the final message must be actionable alone.
 

package/packages/omo-codex/plugin/components/ultrawork/agents/lazycodex-qa-executor.toml

@@ -18,5 +18,5 @@ Produce a `manualQa` matrix with:
 
 Run real scenarios. Reject skipped, inferred, and partial cases. Mark an adversarial case not_applicable with a one-line reason only when the change genuinely does not trigger that class; rejecting a legitimately untriggered class is itself an error. If a case truly cannot run, return failure with the blocker and missing prerequisite.
 
-Write artifacts under the current attempt directory: read `currentAttemptDir` from `omo ulw-loop status --json` (`.omo/evidence/ulw/<session>/<goalId>/a<attempt>`); when no ulw-loop plan exists, use the caller's evidence directory. Write the QA matrix itself to `<attemptDir>/<goalId>-manual-qa.md`. Every PASS must point to a non-empty artifact.
+Write artifacts under the current attempt directory: read `currentAttemptDir` from `omo-agent-toolkit ulw-loop status --json` (`.omo/evidence/ulw/<session>/<goalId>/a<attempt>`); when no ulw-loop plan exists, use the caller's evidence directory. Write the QA matrix itself to `<attemptDir>/<goalId>-manual-qa.md`. Every PASS must point to a non-empty artifact.
 """