oh-my-opencode 4.8.1 → 4.9.1

package/packages/omo-codex/plugin/components/start-work-continuation/directive.md

@@ -1,6 +1,6 @@
 <start-work-continuation>
 
-You are mid-flight on a Prometheus work plan. The turn just ended without finishing the plan. This is an automatic continuation — keep going. Do NOT ask the user whether to continue; the contract is auto-continue until every top-level checkbox is `- [x]`.
+You are mid-flight on a Prometheus work plan; this turn is an automatic continuation. Do NOT ask whether to continue — the contract is auto-continue until every top-level checkbox is `- [x]`.
 
 # State
 
@@ -15,23 +15,24 @@ You are mid-flight on a Prometheus work plan. The turn just ended without finish
 
 # What to do this turn
 
-1. Read `{{PLAN_PATH}}` AND `{{LEDGER_PATH}}` first — ground truth for what remains and what evidence has already been recorded. The plan checkbox and the ledger are the only sources of truth; do not trust your own memory of prior turns.
+1. Read `{{PLAN_PATH}}` AND `{{LEDGER_PATH}}` first — they are the only sources of truth for what remains and what evidence exists; do not trust your memory of prior turns.
 2. Pick the FIRST unchecked top-level checkbox in `## TODOs` or `## Final Verification Wave`. Ignore nested checkboxes under Acceptance Criteria / Evidence / Definition of Done.
 3. Follow the `start-work` skill in full. The skill is already loaded from your earlier turn — re-read its file at `packages/omo-codex/plugin/skills/start-work/SKILL.md` if you have lost context.
-4. Decompose the checkbox into atomic sub-tasks. Dispatch them in PARALLEL via `spawn_agent` calls in this same response unless a sub-task has a NAMED blocking dependency (input from another sub-task or shared file). Prefer `fork_turns: "none"` unless full history is truly required. Put role and specialty instructions inside `message`; the Codex tool schema only accepts `task_name`, `message`, and `fork_turns`.
-5. Every sub-task message MUST be self-contained and start with `TASK: <imperative assignment>`, then name `DELIVERABLE`, `SCOPE`, and `VERIFY`. State that it is an executable assignment, not a context handoff. It must include all 7 sections and name one Manual-QA channel with its exact tool and exact invocation (the literal `curl` / `send-keys` / `page.click` with concrete inputs and the binary PASS/FAIL observable), plus the applicable ultraqa adversarial classes, a captured artifact, and a cleanup receipt. Channels: HTTP call (`curl -i`); tmux (`send-keys` + `capture-pane`); browser use — use Chrome to drive the page, else download and use agent-browser (https://github.com/vercel-labs/agent-browser); computer use — OS-level GUI automation for a desktop app. Tests are the floor; the channel artifact plus probed adversarial classes are the ceiling. All are required.
-6. Treat every worker DoneClaim as untrusted input. Run independent AdversarialVerify before any checkbox can become FullyDone; `confirmed` is the only pass verdict, while `false-positive`, `needs-fix`, and `needs-human-review` loop back to the executor with exact feedback.
-7. Use `wait_agent` for mailbox signals, not proof of completion. For sub-tasks likely to exceed one wait cycle, require `WORKING: <task> - <current phase>` before long passes and `BLOCKED: <reason>` only when progress stops. A timeout only means no new mailbox update arrived; after a timeout, run a single `list_agents` check for the named child when you need reassurance. If it is running or its latest message is `WORKING:`, treat it as alive. Do not use `list_agents` as a polling loop. Send `TASK STILL ACTIVE: return <deliverable> or BLOCKED: <reason>` only when the child is completed without the deliverable, ack-only, or no longer running. If that followup is still silent or ack-only, record inconclusive, do not count it as pass/review approval, close if safe, and respawn a smaller `fork_turns: "none"` task with the missing deliverable.
-8. After verification of ALL sub-tasks under this checkbox: `apply_patch` the plan to change `- [ ]` → `- [x]`, re-read the plan to confirm the count decreased, append a `task-completed` line to the ledger, then continue.
-9. Do not start fresh on a sub-agent failure. Re-dispatch the same `task_name` with a fix-message: `FAILED: <exact error>` + `Diagnosis: <observation>` + `Fix: <instruction>`.
+4. Apply the checkbox's tier from its ledger entry, or classify it now per the start-work skill: LIGHT (default — a narrow change inside existing layers) needs one real-surface proof of the deliverable, with auxiliary surfaces first-class for CLI- or data-shaped work, and only trigger-mapped adversarial classes; HEAVY (new module/abstraction, auth/security, external integration, schema/migration, concurrency, cross-domain refactor, care signals) takes the full per-criterion regime. When unsure, take HEAVY; never downgrade.
+5. Decompose the checkbox into atomic sub-tasks. Dispatch them in PARALLEL via `multi_agent_v1.spawn_agent` calls in this same response unless a sub-task has a NAMED blocking dependency (input from another sub-task or shared file). Use `fork_context: false` unless full history is truly required. Put role and specialty instructions inside `message`.
+6. Every sub-task message MUST be self-contained, an executable assignment rather than a context handoff: start with `TASK: <imperative assignment>`, then name `DELIVERABLE`, `SCOPE`, and `VERIFY`. It must include all 7 sections and name one Manual-QA channel with its exact tool and exact invocation (the literal `curl` / `send-keys` / `page.click` with concrete inputs and the binary PASS/FAIL observable), plus the applicable ultraqa adversarial classes, a captured artifact, and a cleanup receipt. Channels: HTTP call (`curl -i`); tmux (`send-keys` + `capture-pane`); browser use — use Chrome to drive the page, else download and use agent-browser (https://github.com/vercel-labs/agent-browser); computer use — OS-level GUI automation for a desktop app.
+7. Treat every worker DoneClaim as untrusted input. Run independent AdversarialVerify before any checkbox can become FullyDone; `confirmed` is the only pass verdict, while `false-positive`, `needs-fix`, and `needs-human-review` loop back to the executor with exact feedback.
+8. Use `multi_agent_v1.wait_agent` for mailbox signals, not proof of completion — a timeout only means no new mailbox update arrived; a running child is alive. For sub-tasks likely to exceed one wait cycle, require `WORKING: <task> - <current phase>` before long passes and `BLOCKED: <reason>` only when progress stops. Send `TASK STILL ACTIVE: return <deliverable> or BLOCKED: <reason>` only when the child is completed without the deliverable, ack-only, or no longer running. If that followup is still silent or ack-only, record inconclusive, do not count it as pass/review approval, close if safe, and respawn a smaller `fork_context: false` task with the missing deliverable.
+9. After verification of ALL sub-tasks under this checkbox: `apply_patch` the plan to change `- [ ]` → `- [x]`, re-read the plan to confirm the count decreased, append a `task-completed` line to the ledger, then continue.
+10. Do not start fresh on a sub-agent failure. Re-dispatch with a fix-message: `FAILED: <exact error>` + `Diagnosis: <observation>` + `Fix: <instruction>`.
 
 # Hard constraints
 
-- No production code before a failing test exists. When the change touches existing behavior, PIN it first: write a baseline characterization test that passes on the unchanged code, with exact inputs, exact observable, and exact assertion. PIN → RED → GREEN → SURFACE.
+- No production code before a failing-first proof exists: a unit test at a seam, otherwise the sub-task's Manual-QA scenario captured failing. A test that mirrors its implementation (mock-call assertions, pinned constants) is not evidence. When the change touches existing behavior, PIN it first: a baseline characterization test that passes on the unchanged code, with exact inputs, exact observable, and exact assertion. PIN → RED → GREEN → SURFACE.
 - No `--dry-run` as evidence. No "should work". No "tests pass" as completion proof.
 - No `as any` / `@ts-ignore` / `@ts-expect-error`. No deleting failing tests.
-- Probe every applicable ultraqa adversarial class (malformed input, prompt injection, cancel/resume, stale state, dirty worktree, hung or long commands, flaky tests, misleading success output, repeated interruptions) and capture the observable for each. A clean happy-path artifact alone is NOT a PASS when an applicable class went unprobed; record skipped classes with a one-line not-applicable reason.
-- Cleanup receipt is mandatory. Register each QA resource teardown (scripts, tmux assets, browser / agent-browser sessions, PIDs, ports, containers, temp dirs) as its own todo the moment it spawns, then execute it. Leftover PIDs / `tmux` sessions / browser contexts / bound ports / containers / temp dirs = BLOCKED, not PASS.
+- Probe every ultraqa adversarial class whose trigger fact holds (malformed input, prompt injection, cancel/resume, stale state, dirty worktree, hung or long commands, flaky tests, misleading success output, repeated interruptions — trigger map in the start-work skill) and capture the observable for each. A clean happy-path artifact alone is NOT a PASS when an applicable class went unprobed; record skipped classes with a one-line not-applicable reason.
+- Cleanup receipt is mandatory. Register each QA resource teardown (scripts, tmux sessions, browser contexts, PIDs, ports, containers, temp dirs) as its own todo the moment it spawns, then execute it. Leftover QA state = BLOCKED, not PASS.
 - The worktree path (if set in boulder.json) governs every file edit and command. Do not stray into the main repo.
 - session_ids you write to boulder.json MUST be prefixed `codex:`. Bare ids on read are legacy `opencode:`.
 
@@ -44,15 +45,14 @@ Do not print `ORCHESTRATION COMPLETE`. Do not create a PR, PR handoff, or branch
 # Stop conditions for THIS turn
 
 - A top-level checkbox flipped to `- [x]` after the 5-phase QA gate (Phase 1 read, Phase 2 automated, Phase 3 channel scenario, Phase 4 adversarial-class probing, Phase 5 gate decision). Then the Stop hook will re-evaluate; if more checkboxes remain you will be continued again.
-- 3 same-failure cycles on one sub-task → escalate via `spawn_agent({"task_name":"failure_escalation_review","message":"TASK: act as a rigorous reviewer. DELIVERABLE: diagnose the repeated sub-task failure and recommend the next safe action. VERIFY: cite the failing evidence.","fork_turns":"none"})` and stop dispatch.
+- 3 same-failure cycles on one sub-task → escalate via `multi_agent_v1.spawn_agent({"message":"TASK: act as a rigorous reviewer. DELIVERABLE: diagnose the repeated sub-task failure and recommend the next safe action. VERIFY: cite the failing evidence.","fork_context":false})` and stop dispatch.
 - Safety boundary (destructive command, secret exfiltration, production write) → stop and surface a safe substitute.
 - All top-level checkboxes `- [x]` AND the Global Review and Debugging Gate passed → print the ORCHESTRATION COMPLETE block and end.
 
 # Output discipline
 
-- Surface only state changes: sub-agent dispatched, channel scenario PASS/FAIL with artifact path, checkbox marked, evidence appended to ledger.
-- Do NOT print "Should I continue?" — the Stop hook handles continuation.
-- Do NOT restate the full plan. Do NOT recap prior turns. The ledger and the plan file are the durable record.
+- Surface only state changes: sub-agent dispatched, scenario PASS/FAIL with artifact path, checkbox marked, evidence appended.
+- Do NOT print "Should I continue?", restate the plan, or recap prior turns — the Stop hook continues you; the ledger and plan are the durable record.
 
 Begin now. Pick the next checkbox, dispatch the parallel sub-agents, verify, mark, continue.
 

package/packages/omo-codex/plugin/components/start-work-continuation/dist/boulder-reader.d.ts

@@ -0,0 +1,16 @@
+import type { ReadonlyFileSystem } from "./types.js";
+export type PlanChecklist = {
+    readonly remaining: number;
+    readonly total: number;
+    readonly nextTaskLabel: string | null;
+};
+export type ContinuationState = {
+    readonly planName: string;
+    readonly planPath: string;
+    readonly boulderPath: string;
+    readonly ledgerPath: string;
+    readonly worktreePath: string | null;
+    readonly checklist: PlanChecklist;
+};
+export declare function parsePlanChecklist(markdown: string): PlanChecklist;
+export declare function readContinuationState(cwd: string, sessionId: string, fs: ReadonlyFileSystem): ContinuationState | null;

package/packages/omo-codex/plugin/components/start-work-continuation/dist/boulder-reader.js

@@ -0,0 +1,146 @@
+import { isAbsolute, join, resolve } from "node:path";
+const CHECKBOX_PATTERN = /^- \[[ xX]\] /;
+const UNCHECKED_PATTERN = /^- \[ \] /;
+const TODO_HEADING = "TODOs";
+const FINAL_VERIFICATION_HEADING = "Final Verification Wave";
+export function parsePlanChecklist(markdown) {
+    const lines = markdown.split(/\r?\n/);
+    const hasCountedSections = lines.some(hasCountedSectionHeading);
+    let remaining = 0;
+    let total = 0;
+    let nextTaskLabel = null;
+    let isCountedSection = !hasCountedSections;
+    for (const line of lines) {
+        const heading = parseLevelTwoHeading(line);
+        if (heading !== null)
+            isCountedSection = isCountedHeading(heading);
+        if (!isCountedSection)
+            continue;
+        if (!CHECKBOX_PATTERN.test(line))
+            continue;
+        total += 1;
+        if (!UNCHECKED_PATTERN.test(line))
+            continue;
+        remaining += 1;
+        if (nextTaskLabel === null)
+            nextTaskLabel = line.slice("- [ ] ".length);
+    }
+    return { remaining, total, nextTaskLabel };
+}
+function hasCountedSectionHeading(line) {
+    const heading = parseLevelTwoHeading(line);
+    return heading !== null && isCountedHeading(heading);
+}
+export function readContinuationState(cwd, sessionId, fs) {
+    const boulderPath = join(cwd, ".omo", "boulder.json");
+    const boulderText = readTextFile(fs, boulderPath);
+    if (boulderText === null)
+        return null;
+    const parsed = parseJsonObject(boulderText);
+    if (parsed === null)
+        return null;
+    const work = findMatchingWork(parsed, `codex:${sessionId}`);
+    if (work === null)
+        return null;
+    const planPath = resolvePlanPath(cwd, work.activePlan);
+    const planText = readTextFile(fs, planPath);
+    if (planText === null)
+        return null;
+    const checklist = parsePlanChecklist(planText);
+    if (checklist.remaining === 0)
+        return null;
+    return {
+        planName: work.planName,
+        planPath,
+        boulderPath,
+        ledgerPath: join(cwd, ".omo", "start-work", "ledger.jsonl"),
+        worktreePath: work.worktreePath,
+        checklist,
+    };
+}
+function findMatchingWork(state, prefixedSessionId) {
+    const worksValue = state["works"];
+    const candidates = isRecord(worksValue) ? Object.values(worksValue) : [state];
+    for (const candidate of candidates) {
+        const work = parseBoulderWork(candidate);
+        if (work === null)
+            continue;
+        if (!isContinuableStatus(work.status))
+            continue;
+        if (work.sessionIds.includes(prefixedSessionId))
+            return work;
+    }
+    return null;
+}
+function parseBoulderWork(value) {
+    if (!isRecord(value))
+        return null;
+    const activePlan = value["active_plan"];
+    const planName = value["plan_name"];
+    const status = parseWorkStatus(value["status"]);
+    const sessionIds = value["session_ids"];
+    const worktreePath = value["worktree_path"];
+    if (typeof activePlan !== "string")
+        return null;
+    if (typeof planName !== "string")
+        return null;
+    if (status === null)
+        return null;
+    if (!isStringArray(sessionIds))
+        return null;
+    return {
+        activePlan,
+        planName,
+        status,
+        sessionIds,
+        worktreePath: typeof worktreePath === "string" ? worktreePath : null,
+    };
+}
+function parseWorkStatus(value) {
+    if (value === "active" || value === "completed" || value === "paused" || value === "abandoned")
+        return value;
+    return null;
+}
+function isContinuableStatus(status) {
+    return status === "active" || status === "paused";
+}
+function parseLevelTwoHeading(line) {
+    if (!line.startsWith("## "))
+        return null;
+    if (line.startsWith("### "))
+        return null;
+    return line.slice("## ".length).trim();
+}
+function isCountedHeading(heading) {
+    return heading === TODO_HEADING || heading === FINAL_VERIFICATION_HEADING;
+}
+function resolvePlanPath(cwd, activePlan) {
+    return isAbsolute(activePlan) ? activePlan : resolve(cwd, activePlan);
+}
+function readTextFile(fs, path) {
+    try {
+        return fs.readFileSync(path, "utf8");
+    }
+    catch (error) {
+        if (error instanceof Error)
+            return null;
+        throw error;
+    }
+}
+function parseJsonObject(json) {
+    try {
+        const parsed = JSON.parse(json);
+        return isRecord(parsed) ? parsed : null;
+    }
+    catch (error) {
+        if (error instanceof SyntaxError)
+            return null;
+        throw error;
+    }
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/packages/omo-codex/plugin/components/start-work-continuation/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/packages/omo-codex/plugin/components/start-work-continuation/dist/cli.js

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { stdin as processStdin, stdout as processStdout } from "node:process";
+import { runStopHook } from "./codex-hook.js";
+const nodeFileSystem = {
+    readFileSync(path, encoding) {
+        return readFileSync(path, encoding);
+    },
+};
+const command = process.argv[2];
+const subcommand = process.argv[3];
+if (command === "hook" && (subcommand === "stop" || subcommand === "subagent-stop")) {
+    await runHookCli();
+}
+else {
+    process.stderr.write("Usage: omo-start-work-continuation hook <stop|subagent-stop>\n");
+    process.exitCode = 1;
+}
+async function runHookCli() {
+    const raw = await readStdin();
+    if (raw.trim().length === 0)
+        return;
+    const parsed = parseHookInput(raw);
+    const output = runStopHook(parsed, nodeFileSystem);
+    if (output.length > 0)
+        processStdout.write(output);
+}
+function parseHookInput(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed;
+    }
+    catch (error) {
+        if (error instanceof SyntaxError)
+            return undefined;
+        throw error;
+    }
+}
+function readStdin() {
+    return new Promise((resolve) => {
+        let data = "";
+        processStdin.setEncoding("utf8");
+        processStdin.on("data", (chunk) => {
+            data += chunk;
+        });
+        processStdin.once("error", () => resolve(data));
+        processStdin.once("end", () => resolve(data));
+    });
+}

package/packages/omo-codex/plugin/components/start-work-continuation/dist/codex-hook.d.ts

@@ -0,0 +1,2 @@
+import type { ReadonlyFileSystem } from "./types.js";
+export declare function runStopHook(input: unknown, fs: ReadonlyFileSystem): string;

package/packages/omo-codex/plugin/components/start-work-continuation/dist/codex-hook.js

@@ -0,0 +1,80 @@
+import { readContinuationState } from "./boulder-reader.js";
+import { START_WORK_CONTINUATION_DIRECTIVE } from "./directive.js";
+export function runStopHook(input, fs) {
+    if (!isStopInput(input))
+        return "";
+    if (input.stop_hook_active)
+        return "";
+    if (transcriptHasContextPressureMarker(input.transcript_path, fs))
+        return "";
+    const state = readContinuationState(input.cwd, input.session_id, fs);
+    if (state === null)
+        return "";
+    return JSON.stringify({
+        decision: "block",
+        reason: renderDirective(state, input.session_id),
+    });
+}
+function renderDirective(state, sessionId) {
+    const lineBreak = String.fromCharCode(10);
+    const worktreeBlock = state.worktreePath === null
+        ? ""
+        : `${lineBreak}- Worktree: \`${state.worktreePath}\` (all edits, tests, and commands run inside this directory)`;
+    const replacements = {
+        PLAN_NAME: state.planName,
+        PLAN_PATH: state.planPath,
+        BOULDER_PATH: state.boulderPath,
+        REMAINING_COUNT: String(state.checklist.remaining),
+        TOTAL_COUNT: String(state.checklist.total),
+        NEXT_TASK_LABEL: state.checklist.nextTaskLabel ?? "",
+        WORKTREE_BLOCK: worktreeBlock,
+        LEDGER_PATH: state.ledgerPath,
+        SESSION_ID: sessionId,
+    };
+    let rendered = START_WORK_CONTINUATION_DIRECTIVE;
+    for (const [placeholder, value] of Object.entries(replacements)) {
+        rendered = rendered.replaceAll(`{{${placeholder}}}`, value);
+    }
+    return rendered;
+}
+const CONTEXT_PRESSURE_MARKERS = [
+    "context compacted",
+    "context_length_exceeded",
+    "skill descriptions were shortened",
+    "context_too_large",
+    "codex ran out of room in the model's context window",
+    "your input exceeds the context window",
+    "long threads and multiple compactions",
+];
+function transcriptHasContextPressureMarker(transcriptPath, fs) {
+    try {
+        const transcript = fs.readFileSync(transcriptPath, "utf8").toLowerCase();
+        return CONTEXT_PRESSURE_MARKERS.some((marker) => transcript.includes(marker));
+    }
+    catch (error) {
+        if (error instanceof Error)
+            return false;
+        throw error;
+    }
+}
+function isStopInput(value) {
+    return (isRecord(value) &&
+        isStopHookEventName(value["hook_event_name"]) &&
+        typeof value["session_id"] === "string" &&
+        typeof value["turn_id"] === "string" &&
+        typeof value["transcript_path"] === "string" &&
+        typeof value["cwd"] === "string" &&
+        typeof value["model"] === "string" &&
+        typeof value["permission_mode"] === "string" &&
+        typeof value["stop_hook_active"] === "boolean" &&
+        optionalString(value["last_assistant_message"]));
+}
+function isStopHookEventName(value) {
+    return value === "Stop" || value === "SubagentStop";
+}
+function optionalString(value) {
+    return value === undefined || typeof value === "string";
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/packages/omo-codex/plugin/components/start-work-continuation/dist/directive.d.ts

@@ -0,0 +1 @@
+export declare const START_WORK_CONTINUATION_DIRECTIVE: string;

package/packages/omo-codex/plugin/components/start-work-continuation/dist/directive.js

@@ -0,0 +1,2 @@
+import { readFileSync } from "node:fs";
+export const START_WORK_CONTINUATION_DIRECTIVE = readFileSync(new URL("../directive.md", import.meta.url), "utf8");

package/packages/omo-codex/plugin/components/start-work-continuation/dist/index.d.ts

@@ -0,0 +1,5 @@
+export type { ContinuationState, PlanChecklist } from "./boulder-reader.js";
+export { parsePlanChecklist, readContinuationState } from "./boulder-reader.js";
+export { runStopHook } from "./codex-hook.js";
+export { START_WORK_CONTINUATION_DIRECTIVE } from "./directive.js";
+export type { ReadonlyFileSystem, StopHookEventName, StopHookOutput, StopInput } from "./types.js";

package/packages/omo-codex/plugin/components/start-work-continuation/dist/index.js

@@ -0,0 +1,3 @@
+export { parsePlanChecklist, readContinuationState } from "./boulder-reader.js";
+export { runStopHook } from "./codex-hook.js";
+export { START_WORK_CONTINUATION_DIRECTIVE } from "./directive.js";

package/packages/omo-codex/plugin/components/start-work-continuation/dist/types.d.ts

@@ -0,0 +1,20 @@
+export declare const STOP_HOOK_EVENTS: readonly ["Stop", "SubagentStop"];
+export type StopHookEventName = (typeof STOP_HOOK_EVENTS)[number];
+export type StopInput = {
+    readonly hook_event_name: StopHookEventName;
+    readonly session_id: string;
+    readonly turn_id: string;
+    readonly transcript_path: string;
+    readonly cwd: string;
+    readonly model: string;
+    readonly permission_mode: string;
+    readonly stop_hook_active: boolean;
+    readonly last_assistant_message?: string;
+};
+export type StopHookOutput = {
+    readonly decision: "block";
+    readonly reason: string;
+};
+export type ReadonlyFileSystem = {
+    readFileSync(path: string, encoding: "utf8"): string;
+};

package/packages/omo-codex/plugin/components/start-work-continuation/dist/types.js

@@ -0,0 +1 @@
+export const STOP_HOOK_EVENTS = ["Stop", "SubagentStop"];

package/packages/omo-codex/plugin/components/start-work-continuation/hooks/hooks.json

@@ -7,7 +7,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/start-work-continuation/dist/cli.js\" hook stop",
 						"timeout": 10,
-						"statusMessage": "LazyCodex(0.1.0): Checking Start-Work Continuation"
+						"statusMessage": "LazyCodex(4.9.1): Checking Start-Work Continuation"
 					}
 				]
 			}
@@ -19,7 +19,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/start-work-continuation/dist/cli.js\" hook subagent-stop",
 						"timeout": 10,
-						"statusMessage": "LazyCodex(0.1.0): Checking Start-Work Continuation"
+						"statusMessage": "LazyCodex(4.9.1): Checking Start-Work Continuation"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/start-work-continuation/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-start-work-continuation",
-	"version": "0.1.0",
+	"version": "4.9.1",
 	"description": "Codex Stop hook continuation injector for omo-codex start-work plans.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",

package/packages/omo-codex/plugin/components/start-work-continuation/test/codex-hook.test.ts

@@ -112,12 +112,34 @@ describe("start-work Stop hook", () => {
 		// then
 		const parsed = parseBlockOutput(output);
 		expect(parsed.reason).toMatch(/TASK:/);
-		expect(parsed.reason).toMatch(/fork_turns:\s*"none"/);
+		expect(parsed.reason).toMatch(/fork_context:\s*false/);
 		expect(parsed.reason).toMatch(/wait_agent.*mailbox signals/);
 		expect(parsed.reason).toMatch(/TASK STILL ACTIVE/);
 		expect(parsed.reason).toMatch(/respawn.*smaller/);
 		expect(parsed.reason).toMatch(/WORKING:/);
-		expect(parsed.reason).toMatch(/single `list_agents`/);
+	});
+
+	it("#given active codex work #when continuation directive is emitted #then QA weight is tier-scoped without echo bloat", () => {
+		// given
+		const fs = createMemoryFs({
+			[BOULDER_PATH]: createBoulderJson({
+				sessionIds: ["codex:sess_abc"],
+				status: "active",
+			}),
+			[PLAN_PATH]: ["# Plan", "", "## TODOs", "- [ ] First"].join("\n"),
+		});
+
+		// when
+		const output = runStopHook(createStopInput(), fs);
+
+		// then
+		const parsed = parseBlockOutput(output);
+		expect(parsed.reason).toMatch(/LIGHT/);
+		expect(parsed.reason).toMatch(/HEAVY/);
+		expect(parsed.reason).toMatch(/When unsure[^.]{0,30}HEAVY/);
+		expect(parsed.reason).toMatch(/mirrors its implementation/);
+		expect((parsed.reason.match(/malformed input, prompt injection/g) ?? []).length).toBe(1);
+		expect(parsed.reason.split(/\s+/).filter(Boolean).length).toBeLessThanOrEqual(1100);
 	});
 
 	it("#given active work belongs to another harness #when hook runs #then returns empty output", () => {

package/packages/omo-codex/plugin/components/telemetry/dist/atomic-write.d.ts

@@ -0,0 +1 @@
+export declare function writeFileAtomically(filePath: string, content: string): void;

package/packages/omo-codex/plugin/components/telemetry/dist/atomic-write.js

@@ -0,0 +1,18 @@
+import { renameSync, unlinkSync, writeFileSync } from "node:fs";
+export function writeFileAtomically(filePath, content) {
+    const tempPath = `${filePath}.tmp`;
+    writeFileSync(tempPath, content, "utf-8");
+    try {
+        renameSync(tempPath, filePath);
+    }
+    catch (error) {
+        const isPermissionError = error instanceof Error &&
+            (error.message.includes("EPERM") || error.message.includes("EACCES"));
+        if (process.platform === "win32" && isPermissionError) {
+            unlinkSync(filePath);
+            renameSync(tempPath, filePath);
+            return;
+        }
+        throw error;
+    }
+}

package/packages/omo-codex/plugin/components/telemetry/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/packages/omo-codex/plugin/components/telemetry/dist/cli.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { stdin as processStdin, stdout as processStdout } from "node:process";
+import { runSessionStartHook } from "./codex-hook.js";
+const command = process.argv[2];
+const subcommand = process.argv[3];
+if (command === "hook" && subcommand === "session-start") {
+    await runHookCli();
+}
+else {
+    process.stderr.write("Usage: omo-telemetry hook session-start\n");
+    process.exitCode = 1;
+}
+async function runHookCli() {
+    const raw = await readStdin();
+    if (raw.trim().length === 0)
+        return;
+    const parsed = parseHookInput(raw);
+    if (!isCodexSessionStartInput(parsed))
+        return;
+    const output = await runSessionStartHook(parsed);
+    if (output.length > 0) {
+        processStdout.write(output);
+    }
+}
+function parseHookInput(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isCodexSessionStartInput(value) {
+    return (isRecord(value) &&
+        value["hook_event_name"] === "SessionStart" &&
+        typeof value["session_id"] === "string" &&
+        isStringOrNull(value["transcript_path"]) &&
+        typeof value["cwd"] === "string" &&
+        typeof value["model"] === "string" &&
+        typeof value["permission_mode"] === "string" &&
+        typeof value["source"] === "string");
+}
+function isStringOrNull(value) {
+    return typeof value === "string" || value === null;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function readStdin() {
+    return new Promise((resolve, reject) => {
+        let data = "";
+        processStdin.setEncoding("utf8");
+        processStdin.on("data", (chunk) => {
+            data += chunk;
+        });
+        processStdin.once("error", reject);
+        processStdin.once("end", () => {
+            resolve(data);
+        });
+    });
+}

package/packages/omo-codex/plugin/components/telemetry/dist/codex-hook.d.ts

@@ -0,0 +1,15 @@
+import { type PostHogClient } from "./posthog.js";
+export type CodexSessionStartInput = {
+    session_id: string;
+    transcript_path: string | null;
+    cwd: string;
+    hook_event_name: "SessionStart";
+    model: string;
+    permission_mode: string;
+    source: "startup" | "resume" | "clear";
+};
+export type CodexTelemetryHookOptions = {
+    createClient?: () => PostHogClient | Promise<PostHogClient>;
+    getDistinctId?: () => string;
+};
+export declare function runSessionStartHook(_input: CodexSessionStartInput, options?: CodexTelemetryHookOptions): Promise<string>;

package/packages/omo-codex/plugin/components/telemetry/dist/codex-hook.js

@@ -0,0 +1,42 @@
+import { writeTelemetryDiagnostic, } from "./diagnostics.js";
+import { createPluginPostHog, getPostHogDistinctId, } from "./posthog.js";
+const SESSION_START_REASON = "session_start";
+function writeHookDiagnostic(event, error, errorKind) {
+    writeTelemetryDiagnostic({
+        event,
+        source: "plugin",
+        error,
+        errorKind,
+    });
+}
+export async function runSessionStartHook(_input, options = {}) {
+    const createClient = options.createClient ?? createPluginPostHog;
+    const getDistinctId = options.getDistinctId ?? getPostHogDistinctId;
+    let client;
+    try {
+        client = await createClient();
+    }
+    catch (error) {
+        writeHookDiagnostic("telemetry_posthog_init_failed", error, error instanceof Error ? "error" : "non_error");
+        return "";
+    }
+    try {
+        client.trackActive(getDistinctId(), SESSION_START_REASON);
+    }
+    catch (error) {
+        writeHookDiagnostic("telemetry_capture_failed", error, error instanceof Error ? "error" : "non_error");
+        await safeShutdown(client);
+        return "";
+    }
+    await safeShutdown(client);
+    return "";
+}
+async function safeShutdown(client) {
+    try {
+        await client.shutdown();
+    }
+    catch (error) {
+        writeHookDiagnostic("telemetry_shutdown_failed", error, error instanceof Error ? "error" : "non_error");
+        return;
+    }
+}