oh-my-opencode 4.19.4 → 5.0.0-beta.2

package/packages/omo-codex/plugin/components/lsp/dist/cli.js

@@ -18,10 +18,10 @@ import { AsyncLocalStorage } from "node:async_hooks";
 import { existsSync, realpathSync, statSync } from "node:fs";
 import { basename, delimiter, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { spawn } from "node:child_process";
-import { closeSync as closeSync2, mkdirSync as mkdirSync2, openSync as openSync2 } from "node:fs";
+import { closeSync as closeSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, openSync as openSync2, writeSync as writeSync2 } from "node:fs";
 import { Socket } from "node:net";
-import { dirname as dirname3 } from "node:path";
-import { execPath } from "node:process";
+import { dirname as dirname3, isAbsolute as isAbsolute3 } from "node:path";
+import { argv0, execPath } from "node:process";
 import {
   chmodSync,
   closeSync,
@@ -42,38 +42,38 @@ import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { statSync as statSync2 } from "node:fs";
 import { isAbsolute as isAbsolute2 } from "node:path";
-import { existsSync as existsSync9, statSync as statSync4 } from "node:fs";
+import { existsSync as existsSync10, statSync as statSync4 } from "node:fs";
 import { dirname as dirname8, join as join4, resolve as resolve7 } from "node:path";
 import { basename as basename2, extname } from "node:path";
 import { resolve as resolve6 } from "node:path";
 import { pathToFileURL as pathToFileURL3 } from "node:url";
 import { pathToFileURL } from "node:url";
 import { spawn as spawn2, spawnSync } from "node:child_process";
-import { existsSync as existsSync2, statSync as statSync3 } from "node:fs";
+import { existsSync as existsSync3, statSync as statSync3 } from "node:fs";
 import { delimiter as delimiter2, join as join2 } from "node:path";
 import { readFileSync as readFileSync2, realpathSync as realpathSync2 } from "node:fs";
 import { relative as relative2, resolve as resolve2 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
-import { existsSync as existsSync4, lstatSync as lstatSync3, renameSync, rmSync, writeFileSync } from "node:fs";
-import { existsSync as existsSync3, lstatSync as lstatSync2, readFileSync as readFileSync3, readdirSync, realpathSync as realpathSync3 } from "node:fs";
-import { dirname as dirname4, isAbsolute as isAbsolute3, relative as relative3, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync5, lstatSync as lstatSync3, renameSync, rmSync, writeFileSync } from "node:fs";
+import { existsSync as existsSync4, lstatSync as lstatSync2, readFileSync as readFileSync3, readdirSync, realpathSync as realpathSync3 } from "node:fs";
+import { dirname as dirname4, isAbsolute as isAbsolute4, relative as relative3, resolve as resolve3 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { createHash as createHash2 } from "node:crypto";
 import { dirname as dirname5, relative as relative4, resolve as resolve4 } from "node:path";
-import { existsSync as existsSync5, lstatSync as lstatSync4, readdirSync as readdirSync2 } from "node:fs";
+import { existsSync as existsSync6, lstatSync as lstatSync4, readdirSync as readdirSync2 } from "node:fs";
 import { dirname as dirname6, resolve as resolve5 } from "node:path";
-import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync4, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync3, readFileSync as readFileSync4, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname7 } from "node:path";
-import { existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
-import { existsSync as existsSync8 } from "node:fs";
+import { existsSync as existsSync8, readFileSync as readFileSync5 } from "node:fs";
+import { existsSync as existsSync9 } from "node:fs";
 import { delimiter as delimiter3, join as join3 } from "node:path";
-import { existsSync as existsSync10, lstatSync as lstatSync5, readdirSync as readdirSync3 } from "node:fs";
+import { existsSync as existsSync11, lstatSync as lstatSync5, readdirSync as readdirSync3 } from "node:fs";
 import { join as join5, resolve as resolve8 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { lstatSync as lstatSync6, readdirSync as readdirSync4 } from "node:fs";
 import { join as join6 } from "node:path";
 import { statSync as statSync5 } from "node:fs";
-import { isAbsolute as isAbsolute4 } from "node:path";
+import { isAbsolute as isAbsolute5 } from "node:path";
 
 class LspRequestContextParseError extends Error {
   code;
@@ -563,15 +563,29 @@ function spawnDaemonProcess(paths) {
   mkdirSync2(dirname3(paths.log), { recursive: true });
   const logFd = openSync2(paths.log, "a");
   try {
-    const child = spawn(execPath, [paths.cliPath, "daemon"], {
+    const child = spawn(resolveDaemonNodeExecutable(), [paths.cliPath, "daemon"], {
       detached: true,
       stdio: ["ignore", logFd, logFd]
     });
+    child.once("spawn", () => closeSync2(logFd));
+    child.once("error", (error) => {
+      writeSync2(logFd, `[lsp-daemon] failed to spawn daemon: ${error.message}
+`);
+      closeSync2(logFd);
+    });
     child.unref();
-  } finally {
+  } catch (error) {
     closeSync2(logFd);
+    throw error;
   }
 }
+function resolveDaemonNodeExecutable(cachedExecPath = execPath, originalArgv0 = argv0, pathExists = existsSync2) {
+  if (pathExists(cachedExecPath))
+    return cachedExecPath;
+  if (isAbsolute3(originalArgv0) && pathExists(originalArgv0))
+    return originalArgv0;
+  return "node";
+}
 function defaultEnsureDaemonDeps() {
   return {
     probe: (paths, signal) => probeDaemon(paths, PROBE_TIMEOUT_MS, signal),
@@ -1085,7 +1099,7 @@ function reportKillError(context, error) {
 }
 function validateCwd(cwd) {
   try {
-    if (!existsSync2(cwd)) {
+    if (!existsSync3(cwd)) {
       return { valid: false, error: `Working directory does not exist: ${cwd}` };
     }
     const stats = statSync3(cwd);
@@ -1173,7 +1187,7 @@ function resolveWindowsCommand(command, env) {
   for (const baseDirectory of baseDirectories) {
     for (const extension of extensions) {
       const candidate = baseDirectory ? join2(baseDirectory, `${command}${extension}`) : `${command}${extension}`;
-      if (existsSync2(candidate))
+      if (existsSync3(candidate))
         return candidate;
     }
   }
@@ -1567,7 +1581,7 @@ class LspClientConnection extends LspClientTransport {
       initializationOptions: this.server.initialization
     }, { timeoutMs: this.initializeTimeoutMs });
     this.setDiagnosticPullSupported(supportsDiagnosticPull(result?.capabilities));
-    await this.sendNotification("initialized");
+    await this.sendNotification("initialized", {});
     await this.sendNotification("workspace/didChangeConfiguration", {
       settings: { json: { validate: { enable: true } } }
     });
@@ -2037,11 +2051,11 @@ class WorkspaceEditPathError extends Error {
 }
 function isPathInsideWorkspace(filePath, workspaceRoot) {
   const relativePath = relative3(workspaceRoot, filePath);
-  return relativePath === "" || !relativePath.startsWith("..") && !isAbsolute3(relativePath);
+  return relativePath === "" || !relativePath.startsWith("..") && !isAbsolute4(relativePath);
 }
 function canonicalizeMissingPath(filePath) {
   let ancestor = filePath;
-  while (!existsSync3(ancestor)) {
+  while (!existsSync4(ancestor)) {
     const parent = dirname4(ancestor);
     if (parent === ancestor)
       throw new WorkspaceEditPathError(filePath, "no existing ancestor");
@@ -2059,7 +2073,7 @@ function canonicalWorkspaceRoot(workspaceRoot) {
       success: true,
       path: canonical,
       requestedPath: resolve3(workspaceRoot),
-      followedSymbolicLink: existsSync3(resolve3(workspaceRoot)) && lstatSync2(resolve3(workspaceRoot)).isSymbolicLink()
+      followedSymbolicLink: existsSync4(resolve3(workspaceRoot)) && lstatSync2(resolve3(workspaceRoot)).isSymbolicLink()
     };
   } catch (error) {
     const detail = error instanceof Error ? error.message : String(error);
@@ -2079,7 +2093,7 @@ function uriToCanonicalWorkspacePath(uri, workspaceRoot) {
     return { success: false, error: `non-file URI ${uri}: ${detail}` };
   }
   try {
-    const canonical = existsSync3(requestedPath) ? realpathSync3(requestedPath) : canonicalizeMissingPath(requestedPath);
+    const canonical = existsSync4(requestedPath) ? realpathSync3(requestedPath) : canonicalizeMissingPath(requestedPath);
     if (!isPathInsideWorkspace(canonical, workspaceRoot)) {
       return { success: false, error: `${requestedPath}: outside workspace ${workspaceRoot}` };
     }
@@ -2087,7 +2101,7 @@ function uriToCanonicalWorkspacePath(uri, workspaceRoot) {
       success: true,
       path: canonical,
       requestedPath,
-      followedSymbolicLink: existsSync3(requestedPath) && lstatSync2(requestedPath).isSymbolicLink()
+      followedSymbolicLink: existsSync4(requestedPath) && lstatSync2(requestedPath).isSymbolicLink()
     };
   } catch (error) {
     const detail = error instanceof Error ? error.message : String(error);
@@ -2095,7 +2109,7 @@ function uriToCanonicalWorkspacePath(uri, workspaceRoot) {
   }
 }
 function snapshotPath(path2, includeChildren) {
-  if (!existsSync3(path2))
+  if (!existsSync4(path2))
     return { kind: "missing" };
   const stats = lstatSync2(path2);
   if (stats.isFile())
@@ -2213,7 +2227,7 @@ function commitOperation(context, operation) {
   }
   if (operation.kind === "rename") {
     if (operation.replaceDestination) {
-      const targetKind = existsSync4(operation.newPath) && lstatSync3(operation.newPath).isDirectory() ? "directory" : "file";
+      const targetKind = existsSync5(operation.newPath) && lstatSync3(operation.newPath).isDirectory() ? "directory" : "file";
       io.remove(operation.newPath, targetKind === "directory");
       accumulator.mutations.push({ kind: "delete", path: operation.newPath, targetKind });
       addModifiedPath(accumulator.filesModified, reportedPath(plan, operation.newPath));
@@ -2841,7 +2855,7 @@ class WorkspaceSnapshotBuilder {
         break;
       candidate = dirname6(candidate);
     }
-    if (!includeChildren || !existsSync5(path2) || !lstatSync4(path2).isDirectory())
+    if (!includeChildren || !existsSync6(path2) || !lstatSync4(path2).isDirectory())
       return;
     for (const child of readdirSync2(path2))
       this.add(resolve5(path2, child), true);
@@ -3597,7 +3611,7 @@ function getInstallDecisionsPath() {
 }
 function loadInstallDecisions() {
   const path2 = getInstallDecisionsPath();
-  if (!existsSync6(path2))
+  if (!existsSync7(path2))
     return {};
   try {
     const parsed = JSON.parse(readFileSync4(path2, "utf8"));
@@ -3788,7 +3802,7 @@ function getUserConfigPath() {
   return lspRequestContext().userConfigPath;
 }
 function loadJsonFile(path2) {
-  if (!existsSync7(path2))
+  if (!existsSync8(path2))
     return null;
   try {
     const parsed = JSON.parse(readFileSync5(path2, "utf-8"));
@@ -3981,7 +3995,7 @@ function isServerInstalled(command, _workingDirectory) {
   if (!cmd)
     return false;
   if (cmd.includes("/") || cmd.includes("\\")) {
-    if (existsSync8(cmd))
+    if (existsSync9(cmd))
       return true;
   }
   const isWindows = process.platform === "win32";
@@ -4002,7 +4016,7 @@ function isServerInstalled(command, _workingDirectory) {
   const paths = pathEnv.split(delimiter3);
   for (const p of paths) {
     for (const suffix of exts) {
-      if (existsSync8(join3(p, cmd + suffix))) {
+      if (existsSync9(join3(p, cmd + suffix))) {
         return true;
       }
     }
@@ -4111,7 +4125,7 @@ function findWorkspaceRoot(filePath) {
   let prevDir = "";
   while (dir !== prevDir) {
     for (const marker of WORKSPACE_MARKERS) {
-      if (existsSync9(join4(dir, marker))) {
+      if (existsSync10(join4(dir, marker))) {
         return dir;
       }
     }
@@ -4391,7 +4405,7 @@ async function aggregateDiagnosticsForDirectory(directory, extension, severity,
     throw new LspInvalidPathError(`Extension must start with a dot (e.g., ".ts", not "${extension}"). Use ".${extension}" instead.`);
   }
   const absDir = resolve8(options.workspaceRoot ?? contextCwd(), directory);
-  if (!existsSync10(absDir)) {
+  if (!existsSync11(absDir)) {
     throw new LspInvalidPathError(`Directory does not exist: ${absDir}`);
   }
   const serverResult = options.server === undefined ? findServerForExtension(extension) : { status: "found", server: options.server };
@@ -5260,12 +5274,12 @@ function resolveDaemonRuntime2(env, defaults) {
     throw new InvalidRuntimeOverrideError2("paired_values_required", `${OMO_LSP_DAEMON_CLI2} and ${OMO_LSP_DAEMON_VERSION2} must be set together`);
   }
   if (!hasCliOverride || !hasVersionOverride) {
-    if (!isAbsolute4(defaults.cliPath)) {
+    if (!isAbsolute5(defaults.cliPath)) {
       throw new InvalidRuntimeOverrideError2("packaged_cli_must_be_absolute", "Packaged LSP daemon CLI path must be absolute");
     }
     return { cliPath: defaults.cliPath, version: validateDaemonVersion2(defaults.version) };
   }
-  if (!isAbsolute4(cliOverride)) {
+  if (!isAbsolute5(cliOverride)) {
     throw new InvalidRuntimeOverrideError2("cli_must_be_absolute", `${OMO_LSP_DAEMON_CLI2} must be an absolute path to an existing regular file`);
   }
   const stat = statSync5(cliOverride, { throwIfNoEntry: false });
@@ -5386,8 +5400,8 @@ function extensionKey(filePath) {
 }
 // ../../../../lsp-core/src/request-context.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-import { existsSync as existsSync11, realpathSync as realpathSync4, statSync as statSync6 } from "node:fs";
-import { basename as basename3, delimiter as delimiter4, dirname as dirname2, isAbsolute as isAbsolute5, join as join7, relative as relative5, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync12, realpathSync as realpathSync4, statSync as statSync6 } from "node:fs";
+import { basename as basename3, delimiter as delimiter4, dirname as dirname2, isAbsolute as isAbsolute6, join as join7, relative as relative5, resolve as resolve9 } from "node:path";
 
 class LspRequestContextParseError2 extends Error {
   code;
@@ -5430,7 +5444,7 @@ function parseLspRequestContext2(value) {
 }
 function canonicalCwd2(cwd) {
   const resolved = resolve9(cwd);
-  if (!existsSync11(resolved) || !statSync6(resolved).isDirectory()) {
+  if (!existsSync12(resolved) || !statSync6(resolved).isDirectory()) {
     throw new LspRequestContextParseError2("invalid_cwd", `LSP request cwd must be an existing directory: ${cwd}`);
   }
   return realpathSync4(resolved);
@@ -5479,14 +5493,14 @@ function stringArrayField2(value, field) {
   return fieldValue;
 }
 function requireAbsolutePath2(path2, field) {
-  if (!isAbsolute5(path2)) {
+  if (!isAbsolute6(path2)) {
     throw new LspRequestContextParseError2("relative_path", `LSP request context.${field} must be absolute: ${path2}`);
   }
 }
 function isPathInside2(parent, child) {
   const childPath = resolve9(child);
   const relativePath = relative5(parent, childPath);
-  return relativePath === "" || !relativePath.startsWith("..") && !isAbsolute5(relativePath);
+  return relativePath === "" || !relativePath.startsWith("..") && !isAbsolute6(relativePath);
 }
 function isMissingPathError2(error) {
   const code = errorCode2(error);
@@ -5509,7 +5523,7 @@ function errorCode2(error) {
 }
 
 // src/daemon-cli-path.ts
-import { existsSync as existsSync13, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync14, readFileSync as readFileSync6 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
 import { dirname as dirname9, join as join9 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
@@ -5533,7 +5547,7 @@ function resolveLspDaemonCli() {
   if (packageCli !== null)
     return resolveConfiguredLspDaemonCli(packageCli);
   const bundledCli = fileURLToPath4(new URL("../../lsp-daemon/dist/cli.js", import.meta.url));
-  if (existsSync13(bundledCli))
+  if (existsSync14(bundledCli))
     return resolveConfiguredLspDaemonCli(bundledCli);
   return resolveConfiguredLspDaemonCli(bundledCli);
 }

package/packages/omo-codex/plugin/components/lsp/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-tool-use",
 						"timeout": 60,
-						"statusMessage": "(OmO 4.19.4) Checking LSP Diagnostics"
+						"statusMessage": "(OmO 5.0.0-beta.2) Checking LSP Diagnostics"
 					}
 				]
 			}
@@ -21,7 +21,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-compact",
 						"timeout": 5,
-						"statusMessage": "(OmO 4.19.4) Resetting LSP Diagnostics Cache"
+						"statusMessage": "(OmO 5.0.0-beta.2) Resetting LSP Diagnostics Cache"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/lsp/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-lsp",
-	"version": "4.19.4",
+	"version": "5.0.0-beta.2",
 	"description": "Codex plugin that exposes Language Server Protocol tools and post-edit diagnostics.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/rules/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook session-start",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Loading Project Rules"
+						"statusMessage": "(OmO 5.0.0-beta.2) Loading Project Rules"
 					}
 				]
 			}
@@ -19,7 +19,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook user-prompt-submit",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Loading Project Rules"
+						"statusMessage": "(OmO 5.0.0-beta.2) Loading Project Rules"
 					}
 				]
 			}
@@ -32,7 +32,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-tool-use",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Matching Project Rules"
+						"statusMessage": "(OmO 5.0.0-beta.2) Matching Project Rules"
 					}
 				]
 			}
@@ -45,7 +45,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-compact",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Resetting Project Rule Cache"
+						"statusMessage": "(OmO 5.0.0-beta.2) Resetting Project Rule Cache"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/rules/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-rules",
-	"version": "4.19.4",
+	"version": "5.0.0-beta.2",
 	"description": "Codex plugin that injects project rule files into model context through lifecycle hooks.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/start-work-continuation/AGENTS.md

@@ -48,4 +48,5 @@ Conventions for human contributors and AI agents working on this repository.
 - Never make a network call from the hook.
 - Keep the directive in `directive.md`. Do not inline it into TypeScript files.
 - The hook only continues sessions listed in `.omo/boulder.json` as `codex:<session_id>`.
+- The hook yields no output when `last_assistant_message` starts with `<start-work-blocked-external>`, or when that marker is the second line immediately after the mandatory `ULTRAWORK MODE ENABLED!` opener, so a conclusive external blocker can end the turn. Reject the marker everywhere else.
 - The hook continues while the plan has a readable top-level checklist (`total > 0`). A fully-checked plan still blocks Stop until the final gate runs and the Boulder work is marked completed; an unreadable or empty checklist yields no output.

package/packages/omo-codex/plugin/components/start-work-continuation/README.md

@@ -8,7 +8,11 @@ It reads `.omo/boulder.json` in the hook payload `cwd`, resolves the active work
 {"decision":"block","reason":"<directive>"}
 ```
 
-The `reason` is loaded from `directive.md` on every invocation and filled with current plan state. The hook returns no output when `stop_hook_active` is `true`, when no active Boulder work exists, when the work is completed, when the active work is not tied to `codex:<session_id>`, or when the plan has no readable top-level checklist. An active plan whose checklist is fully checked still blocks Stop until the final gate runs and Boulder is marked completed.
+The `reason` is loaded from `directive.md` on every invocation and filled with current plan state. The hook returns no output when `stop_hook_active` is `true`, when `last_assistant_message` starts with `<start-work-blocked-external>` (or places it immediately after the mandatory `ULTRAWORK MODE ENABLED!` opener), when no active Boulder work exists, when the work is completed, when the active work is not tied to `codex:<session_id>`, or when the plan has no readable top-level checklist. An active plan whose checklist is fully checked still blocks Stop until the final gate runs and Boulder is marked completed.
+
+## External blocker escape hatch
+
+A plan can stall on something no amount of retrying fixes: a missing credential, missing hardware, a revoked authorization, an unavailable third-party service. `directive.md` instructs the agent to write `<start-work-blocked-external>` as the entire first line of its answer in that case, or as the entire second line when ultrawork's mandatory opener occupies the first. The hook recognizes those structural forms and lets the turn end so the user can act, instead of continuing the same unchanged external-state check forever. Merely discussing the marker later in an answer still continues the plan.
 
 This pairs with the `start-work` skill at `plugin/skills/start-work/SKILL.md`. That skill writes `.omo/boulder.json` with Codex session ids prefixed as `codex:` so the hook can continue only its own active Codex session.
 

package/packages/omo-codex/plugin/components/start-work-continuation/directive.md

@@ -45,7 +45,8 @@ Before completion, satisfy all five `review-work` lanes and a `debugging` runtim
 # Stop conditions for THIS turn
 
 - A top-level checkbox flipped to `- [x]` after the 5-phase QA gate (Phase 1 read, Phase 2 automated, Phase 3 channel scenario, Phase 4 adversarial-class probing, Phase 5 gate decision). Then the Stop hook will re-evaluate; if more checkboxes remain you will be continued again.
-- 3 same-failure cycles on one sub-task → escalate via `multi_agent_v1.spawn_agent({"message":"TASK: act as a rigorous reviewer. DELIVERABLE: diagnose the repeated sub-task failure and recommend the next safe action. VERIFY: cite the failing evidence.","fork_context":false})` and stop dispatch.
+- A conclusive external blocker only the user or external state can clear (missing hardware, credential, authorization, or an unavailable service) → after ONE authoritative check, stop retrying and stop reviewer dispatch. Write `<start-work-blocked-external>` as the entire first line of your answer, then state the exact blocker and the observable condition that resumes the work. If ultrawork requires `ULTRAWORK MODE ENABLED!` as the first line, put the blocker marker alone on the second line instead. The Stop hook recognizes both forms and lets this turn end.
+- 3 same-failure cycles on one agent-controllable sub-task → escalate via `multi_agent_v1.spawn_agent({"message":"TASK: act as a rigorous reviewer. DELIVERABLE: diagnose the repeated sub-task failure and recommend the next safe action. VERIFY: cite the failing evidence.","fork_context":false})` and stop dispatch.
 - Safety boundary (destructive command, secret exfiltration, production write) → stop and surface a safe substitute.
 - All top-level checkboxes `- [x]` AND the Global Review and Debugging Gate passed → print the ORCHESTRATION COMPLETE block and end.
 

package/packages/omo-codex/plugin/components/start-work-continuation/dist/cli.js

@@ -307,6 +307,8 @@ function runStopHook(input, fs) {
     return "";
   if (input.stop_hook_active)
     return "";
+  if (hasAllowedExternalBlockerMarker(input.last_assistant_message))
+    return "";
   if (transcriptHasContextPressureMarker(input.transcript_path, fs))
     return "";
   const state = readContinuationState(input.cwd, input.session_id);
@@ -337,6 +339,22 @@ function renderDirective(state, sessionId) {
   }
   return rendered;
 }
+var EXTERNAL_BLOCKER_MARKER = "<start-work-blocked-external>";
+var ULTRAWORK_OPENER = "ULTRAWORK MODE ENABLED!";
+function hasAllowedExternalBlockerMarker(lastAssistantMessage) {
+  if (lastAssistantMessage === undefined)
+    return false;
+  const lines = lastAssistantMessage.split(String.fromCharCode(10));
+  const [firstLine = "", secondLine = ""] = lines;
+  let markerLineIndex = -1;
+  if (firstLine.trim() === EXTERNAL_BLOCKER_MARKER)
+    markerLineIndex = 0;
+  else if (firstLine.trim() === ULTRAWORK_OPENER && secondLine.trim() === EXTERNAL_BLOCKER_MARKER)
+    markerLineIndex = 1;
+  if (markerLineIndex === -1)
+    return false;
+  return lines.slice(markerLineIndex + 1).some((line) => line.trim() !== "");
+}
 var CONTEXT_PRESSURE_MARKERS = [
   "context compacted",
   "context_length_exceeded",

package/packages/omo-codex/plugin/components/start-work-continuation/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/start-work-continuation/dist/cli.js\" hook stop",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Checking Start-Work Continuation"
+						"statusMessage": "(OmO 5.0.0-beta.2) Checking Start-Work Continuation"
 					}
 				]
 			}
@@ -19,7 +19,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/start-work-continuation/dist/cli.js\" hook subagent-stop",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Checking Start-Work Continuation"
+						"statusMessage": "(OmO 5.0.0-beta.2) Checking Start-Work Continuation"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/start-work-continuation/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-start-work-continuation",
-	"version": "4.19.4",
+	"version": "5.0.0-beta.2",
 	"description": "Codex Stop hook continuation injector for omo-codex start-work plans.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/start-work-continuation/src/codex-hook.ts

@@ -6,6 +6,7 @@ import type { ReadonlyFileSystem, StopHookEventName, StopHookOutput, StopInput }
 export function runStopHook(input: unknown, fs: ReadonlyFileSystem): string {
 	if (!isStopInput(input)) return "";
 	if (input.stop_hook_active) return "";
+	if (hasAllowedExternalBlockerMarker(input.last_assistant_message)) return "";
 	if (transcriptHasContextPressureMarker(input.transcript_path, fs)) return "";
 	const state = readContinuationState(input.cwd, input.session_id);
 	if (state === null) return "";
@@ -39,6 +40,26 @@ function renderDirective(state: ContinuationState, sessionId: string): string {
 	return rendered;
 }
 
+const EXTERNAL_BLOCKER_MARKER = "<start-work-blocked-external>";
+const ULTRAWORK_OPENER = "ULTRAWORK MODE ENABLED!";
+
+// The marker alone is not enough to end the turn. `directive.md` requires the exact blocker and
+// the condition that resumes the work on the following lines, so at least one is required here
+// too. That keeps a bare echo of the marker, whether quoted back from a prompt or produced by
+// untrusted text the agent read, from skipping the continuation guard.
+function hasAllowedExternalBlockerMarker(lastAssistantMessage: string | undefined): boolean {
+	if (lastAssistantMessage === undefined) return false;
+	const lines = lastAssistantMessage.split(String.fromCharCode(10));
+	const [firstLine = "", secondLine = ""] = lines;
+
+	let markerLineIndex = -1;
+	if (firstLine.trim() === EXTERNAL_BLOCKER_MARKER) markerLineIndex = 0;
+	else if (firstLine.trim() === ULTRAWORK_OPENER && secondLine.trim() === EXTERNAL_BLOCKER_MARKER) markerLineIndex = 1;
+	if (markerLineIndex === -1) return false;
+
+	return lines.slice(markerLineIndex + 1).some((line) => line.trim() !== "");
+}
+
 const CONTEXT_PRESSURE_MARKERS = [
 	"context compacted",
 	"context_length_exceeded",

package/packages/omo-codex/plugin/components/start-work-continuation/test/codex-hook.test.ts

@@ -70,6 +70,111 @@ describe("start-work Stop hook", () => {
 		expect(parsed.reason).toContain("- Your session id in boulder.json: `codex:sess_abc`");
 	});
 
+	it("#given active codex work and an external-blocker marker #when hook runs #then returns empty output", () => {
+		// given
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: [
+				"<start-work-blocked-external>",
+				"Blocker: the staging deploy credential is missing.",
+				"Resume when a valid credential is provisioned.",
+			].join("\n"),
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(output).toBe("");
+	});
+
+	it("#given ultrawork opener then external-blocker marker #when hook runs #then returns empty output", () => {
+		// given
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: [
+				"ULTRAWORK MODE ENABLED!",
+				"<start-work-blocked-external>",
+				"Blocker: the staging deploy credential is missing.",
+			].join("\n"),
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(output).toBe("");
+	});
+
+	it("#given the external-blocker marker with no stated blocker #when hook runs #then still returns block JSON", () => {
+		// given: a bare marker, which is what a quoted echo or untrusted text would produce.
+		// directive.md requires the blocker and the resume condition, so the marker alone must not
+		// skip the continuation guard.
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: "<start-work-blocked-external>",
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(output).not.toBe("");
+	});
+
+	it("#given the ultrawork opener and a bare marker #when hook runs #then still returns block JSON", () => {
+		// given
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: ["ULTRAWORK MODE ENABLED!", "<start-work-blocked-external>", "   "].join("\n"),
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(output).not.toBe("");
+	});
+
+	it("#given the external-blocker marker below the first line #when hook runs #then still returns block JSON", () => {
+		// given
+		const workspace = createWorkspace({
+			boulderJson: createBoulderJson({ sessionIds: ["codex:sess_abc"], status: "active" }),
+			planMarkdown: SCAFFOLD_PLAN_MARKDOWN,
+		});
+		const fs = createMemoryFs();
+		const input = {
+			...createStopInput(workspace),
+			last_assistant_message: ["Next turn I may need to emit", "<start-work-blocked-external>"].join("\n"),
+		};
+
+		// when
+		const output = runStopHook(input, fs);
+
+		// then
+		expect(parseBlockOutput(output).decision).toBe("block");
+	});
+
 	it("#given active codex work with zero remaining tasks #when hook runs #then blocks for the final gate", () => {
 		// given
 		const workspace = createWorkspace({

package/packages/omo-codex/plugin/components/teammode/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-tool-use",
 						"timeout": 10,
-						"statusMessage": "(OmO 4.19.4) Checking Thread Title Hygiene"
+						"statusMessage": "(OmO 5.0.0-beta.2) Checking Thread Title Hygiene"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/teammode/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sisyphuslabs/codex-teammode",
-	"version": "4.19.4",
+	"version": "5.0.0-beta.2",
 	"description": "Codex team-mode hook component that keeps background thread titles descriptive after create_thread.",
 	"type": "module",
 	"private": true,