oh-my-opencode 5.0.0-beta.33 → 5.0.0-beta.35

package/.agents/skills/codex-qa/scripts/lsp-e2e.sh

@@ -1752,7 +1752,7 @@ rewrite_codex_mcp_config() {
 import { readFileSync, writeFileSync } from "node:fs";
 const path = process.argv[2];
 let text = readFileSync(path, "utf8");
-for (const name of ["context7", "codegraph"]) {
+for (const name of ["context7"]) {
   const header = `[plugins."omo@sisyphuslabs".mcp_servers.${name}]`;
   const start = text.indexOf(header);
   if (start < 0) throw new Error(`missing ${header}`);
@@ -1790,7 +1790,6 @@ const path = process.argv[2];
 const disabled = new Set([
   "session-start-checking-auto-update.json",
   "session-start-checking-bootstrap-provisioning.json",
-  "session-start-checking-codegraph-bootstrap.json",
 ]);
 const manifest = JSON.parse(readFileSync(path, "utf8"));
 if (!Array.isArray(manifest.hooks)) throw new Error("installed plugin hook list is missing");
@@ -2635,7 +2634,6 @@ const result = {
   disabledSideEffectHooks: [
     "session-start-checking-auto-update.json",
     "session-start-checking-bootstrap-provisioning.json",
-    "session-start-checking-codegraph-bootstrap.json",
   ],
   hookStarted: app.hookStarted === true,
   hookCompleted: app.hookCompleted === true,

package/.agents/skills/opencode-qa/scripts/lsp-e2e.sh

@@ -1485,7 +1485,7 @@ const opencode = {
   permission: permissions,
 };
 const omo = {
-  disabled_mcps: ["websearch", "context7", "grep_app", "codegraph"],
+  disabled_mcps: ["websearch", "context7", "grep_app"],
   disabled_hooks: ["auto-update-checker"],
 };
 writeFileSync(opencodePath, `${JSON.stringify(opencode, null, 2)}\n`);

package/.agents/skills/tech-debt-audit/SKILL.md

@@ -1,24 +1,11 @@
 ---
 name: tech-debt-audit
-description: "Thorough, file-cited technical debt audit across 9 dimensions using AST-grep (tree-sitter), grep, language-native tooling, and optionally CodeGraph knowledge graph. Produces TECH_DEBT_AUDIT.md with severity, effort estimates, and prioritized fixes. Use when asked for codebase health check, tech debt audit, architecture review, code quality assessment, or cleanup planning. Triggers: 'tech debt', 'technical debt', 'debt audit', 'code health', 'technical debt audit', 'codebase health check', 'find tech debt', 'debt analysis', 'audit code quality'."
+description: "Thorough, file-cited technical debt audit across 9 dimensions using AST-grep (tree-sitter), grep, LSP, and language-native tooling. Produces TECH_DEBT_AUDIT.md with severity, effort estimates, and prioritized fixes. Use when asked for codebase health check, tech debt audit, architecture review, code quality assessment, or cleanup planning. Triggers: 'tech debt', 'technical debt', 'debt audit', 'code health', 'technical debt audit', 'codebase health check', 'find tech debt', 'debt analysis', 'audit code quality'."
 ---
 
 # Tech Debt Audit Protocol
 
-Model-agnostic technical debt audit for oh-my-openagent (OMO). Uses OMO's built-in tools (`grep`, `glob`, `bash` with `sg`, `read`, `lsp_diagnostics`, `task`) plus **optional CodeGraph MCP** for enhanced code graph analysis when available. Produces a grounded, citable `TECH_DEBT_AUDIT.md` artifact.
-
-## CodeGraph Enhancement (Optional)
-
-If you have [CodeGraph](https://github.com/colbymchenry/codegraph) installed (check with `codegraph status`), its MCP tools (`codegraph_search`, `codegraph_callers`, `codegraph_callees`, `codegraph_impact`, `codegraph_explore`, etc.) can supersede or augment the standard tool searches in the dimensions marked below. CodeGraph gives you:
-- **Symbol search** — instant by-name lookup via FTS5
-- **Call graph analysis** — callers/callees for any function
-- **Impact analysis** — blast radius before changing any symbol
-- **Smart context building** — entry points, related symbols, and snippets in one call
-- **Framework-aware routes** — URL patterns linked to their handlers
-
-To use CodeGraph, ensure the `codegraph` MCP server is configured in your project's `.mcp.json` or global MCP config. The skill will auto-detect CodeGraph by checking if `codegraph` MCP tools are available. Sub-agents spawned via `task()` cannot use CodeGraph — they use the standard tool fallback.
-
----
+Model-agnostic technical debt audit for oh-my-openagent (OMO). Uses OMO's built-in tools (`grep`, `glob`, `bash` with `sg`, `read`, `lsp_diagnostics`, `task`). Produces a grounded, citable `TECH_DEBT_AUDIT.md` artifact.
 
 ## Output
 
@@ -42,19 +29,6 @@ Write results to `TECH_DEBT_AUDIT.md` in the repo root with:
 5. Cross-reference high-churn + large = debt hot zones
 6. Write the mental model paragraph in your own working context
 
-### CodeGraph Enhancement (if available)
-Instead of guessing module boundaries, query the code graph:
-
-```
-codegraph_explore(query="architecture overview and main modules")
-```
-This returns symbol relationships and source grouped by file. Use the structure as your architectural mental model instead of hand-inferring it from directory names.
-
-```
-codegraph_explore(query="main entry points and execution flow")
-```
-This surfaces entry points and call chains. Use these to understand how the code actually flows vs how the directory layout suggests it flows.
-
 ## Phase 1: Audit Across 9 Dimensions
 
 Use OMO tools for each dimension. Run parallel tool calls within each dimension. Every finding MUST cite `file:line:col`.
@@ -68,33 +42,12 @@ Use OMO tools for each dimension. Run parallel tool calls within each dimension.
 - `grep("async|await")` on sync-looking files — misplaced async boundaries
 - `bash("wc -l <file>")` on each large file found in Phase 0
 
-#### CodeGraph Enhancement (if available)
-
-**Dead code detection:**
-```
-codegraph_callers(symbol="<suspected-dead-function>")
-codegraph_callers(symbol="<suspected-dead-class>")
-```
-Run `codegraph_callers` on suspected dead exports found via grep/glob. If the result shows zero callers (excluding test files), it's dead code.
-
-**Circular dependency detection:**
-```
-codegraph_impact(target="<module-or-file>", direction="upstream")
-```
-Use `codegraph_impact` on key modules to trace their dependents. If A depends on B and B depends on A, that's a cycle.
-
-**Architecture boundaries:**
-```
-codegraph_explore(query="module dependencies and architecture boundaries")
-```
-Use `codegraph_explore` to survey actual module structure.
-
 #### What to flag
 - Files > 500 LOC (god files)
 - Functions > 80 LOC or > 4 nesting levels
 - Classes with > 15 methods or > 400 LOC
 - Import cycles (A → B → A)
-- Dead exports: function/class defined but never imported elsewhere (CodeGraph: `codegraph_callers`)
+- Dead exports: function/class defined but never imported elsewhere (confirm with `lsp_find_references`)
 - Commented-out code blocks (>3 consecutive consecutive lines)
 
 ### 2. Consistency Rot
@@ -148,14 +101,6 @@ Use `codegraph_explore` to survey actual module structure.
 - `grep(".env|process.env|Bun.env")` — env var usage
 - `grep("API_KEY|SECRET|PASSWORD|TOKEN")` in non-config files — hardcoded config
 
-#### CodeGraph Enhancement (if available)
-
-**Blast radius of core dependencies:**
-```
-codegraph_impact(target="<core-utility-function>", direction="upstream")
-```
-Run this on a few key internal modules (logger, config loader, HTTP client) to see how widely they're used. A widely-depended-on module with poor error handling or type safety is a high-priority refactor target because changes to it ripple everywhere.
-
 #### What to flag
 - Outdated major-version deps
 - Dependencies that do the same thing (duplicate libraries)
@@ -184,21 +129,6 @@ Run this on a few key internal modules (logger, config loader, HTTP client) to s
 - `grep("console.error|logger\\.error|log\\.error")` — actual error logging
 - `bash("sg -p \"throw new $ERR($$$)\" -l ts .")` — error types used
 
-#### CodeGraph Enhancement (if available)
-
-**Trace error propagation through call chains:**
-```
-codegraph_callers(symbol="<key-error-handler-or-middleware>")
-codegraph_explore(query="how errors propagate through <key-error-handler>")
-```
-Use `codegraph_callers` to find who calls your error handlers. If errors are caught and swallowed at multiple levels, that's a finding.
-
-**Impact of changing error types:**
-```
-codegraph_impact(target="<error-class-or-interface>", direction="upstream")
-```
-Check the blast radius of custom error classes. If changing an error type would break 20+ consumers, the error contract is too tight.
-
 #### What to flag
 - Empty catch blocks (worst offense)
 - Generic `catch (e) { console.error(e) }` without recovery
@@ -237,18 +167,18 @@ Check the blast radius of custom error classes. If changing an error type would
 
 ## Phase 2: Deeper Dives (Parallel Sub-Agents)
 
-For large codebases (>50k LOC), delegate heavy dimensions to parallel sub-agents. Sub-agents CANNOT use CodeGraph — they use standard tools only:
+For large codebases (>50k LOC), delegate heavy dimensions to parallel sub-agents. Each sub-agent runs the standard tool passes for its dimensions:
 
 ```
 task(category="unspecified-low", run_in_background=true, load_skills=[], prompt="[CONTEXT] Tech debt audit. [GOAL] Audit dimensions 1 (Architecture) and 2 (Consistency). [REQUEST] Run ast_grep and grep searches for dimensions 1-2 from the tech-debt-audit skill. Report every finding with file:line:col. Tag severity: Critical/High/Medium/Low.")
 task(category="unspecified-low", run_in_background=true, load_skills=[], prompt="[CONTEXT] Tech debt audit. [GOAL] Audit dimensions 3 (Type debt) and 7 (Error handling). [REQUEST] Run searches for dimensions 3 and 7 from the tech-debt-audit skill. Report every finding with file:line:col. Tag severity.")
 ```
 
-Spawn 2-3 sub-agents for the heaviest dimensions, collect results in parallel, then synthesize. The main agent handles CodeGraph queries itself while sub-agents run the standard tool passes.
+Spawn 2-3 sub-agents for the heaviest dimensions, collect results in parallel, then synthesize.
 
 ## Phase 3: Synthesize & Deliver
 
-1. Collect all findings from direct tool calls, CodeGraph queries (if available), and sub-agent results
+1. Collect all findings from direct tool calls and sub-agent results
 2. Deduplicate — same issue mentioned by multiple dimensions
 3. Classify severity:
    - **Critical** — Causes incorrect behavior, data loss, or security vulnerability

package/README.ja.md

@@ -133,7 +133,7 @@ curl -s https://raw.githubusercontent.com/code-yeongyu/oh-my-openagent/refs/head
 
 匿名のテレメトリは、アクティブなインストール数(DAU/WAU/MAU)の集計のためにデフォルトで有効になっています。マシン1台につきUTC日あたり最大1回イベントが送信され、ハッシュ化されたインストール識別子を使用し、生のホスト名は使用せず、PostHog person profile も作成されません。無効化するには `OMO_SEND_ANONYMOUS_TELEMETRY=0` または `OMO_DISABLE_POSTHOG=1` を設定してください。[プライバシーポリシー](docs/legal/privacy-policy.md)と[利用規約](docs/legal/terms-of-service.md)をご覧ください。
 
-**Ultimate と Light:** oh-my-openagent は同じ製品の 2 つのエディションとして提供されます。**Ultimate エディション**（`bunx oh-my-openagent install` または `--platform=opencode`、デフォルト）は OpenCode 上のフル機能で、11 エージェント、54+ フック、Team Mode、すべての MCP、スラッシュコマンド、IntentGate モードを提供します。**Light エディション**（`npx lazycodex-ai install` または `bunx oh-my-openagent install --platform=codex`）は OpenAI Codex CLI のプラグインシステムへ綺麗に移植できるコアコンポーネント（`rules`、`comment-checker`、`git-bash`、`lsp`、`ultrawork`、`ulw-loop`、`ulw-execute-continuation`、`telemetry`）に加え、`teammode` と補助コンポーネント（`bootstrap`、`codegraph`、`lcx` など）を提供し、Codex エージェントの TOML を `~/.codex/agents/` にインストールします。両方を同時にインストールするには `--platform=both`。Codex 専用テレメトリは `OMO_CODEX_DISABLE_POSTHOG=1` または `OMO_CODEX_SEND_ANONYMOUS_TELEMETRY=0` で無効化できます。
+**Ultimate と Light:** oh-my-openagent は同じ製品の 2 つのエディションとして提供されます。**Ultimate エディション**（`bunx oh-my-openagent install` または `--platform=opencode`、デフォルト）は OpenCode 上のフル機能で、11 エージェント、54+ フック、Team Mode、すべての MCP、スラッシュコマンド、IntentGate モードを提供します。**Light エディション**（`npx lazycodex-ai install` または `bunx oh-my-openagent install --platform=codex`）は OpenAI Codex CLI のプラグインシステムへ綺麗に移植できるコアコンポーネント（`rules`、`comment-checker`、`git-bash`、`lsp`、`ultrawork`、`ulw-loop`、`ulw-execute-continuation`、`telemetry`）に加え、`teammode` と補助コンポーネント（`bootstrap`、`lcx` など）を提供し、Codex エージェントの TOML を `~/.codex/agents/` にインストールします。両方を同時にインストールするには `--platform=both`。Codex 専用テレメトリは `OMO_CODEX_DISABLE_POSTHOG=1` または `OMO_CODEX_SEND_ANONYMOUS_TELEMETRY=0` で無効化できます。
 
 ---
 

package/README.ko.md

@@ -134,7 +134,7 @@ curl -s https://raw.githubusercontent.com/code-yeongyu/oh-my-openagent/refs/head
 
 익명 텔레메트리는 활성 설치 수(DAU/WAU/MAU) 집계를 위해 기본적으로 활성화되어 있습니다. 머신당 UTC 하루에 최대 1회만 이벤트가 전송되며, 해시된 설치 식별자를 사용하고 원시 호스트명은 절대 사용하지 않으며 PostHog person profile은 생성되지 않습니다. `OMO_SEND_ANONYMOUS_TELEMETRY=0` 또는 `OMO_DISABLE_POSTHOG=1`로 비활성화할 수 있습니다. [개인정보처리방침](docs/legal/privacy-policy.md)과 [서비스 이용약관](docs/legal/terms-of-service.md)을 참조하세요.
 
-**Ultimate vs Light:** oh-my-openagent는 같은 제품의 두 에디션으로 출시됩니다. **Ultimate 에디션**(`bunx oh-my-openagent install` 또는 `--platform=opencode`, 기본값)은 OpenCode 위에서 풀 기능 — 11 agent, 54+ hook, Team Mode, 모든 MCP, 슬래시 명령, IntentGate 모드 — 을 제공합니다. **Light 에디션**(`npx lazycodex-ai install` 또는 `bunx oh-my-openagent install --platform=codex`)은 OpenAI Codex CLI의 플러그인 시스템에 깔끔히 포팅되는 핵심 컴포넌트(`rules`, `comment-checker`, `git-bash`, `lsp`, `ultrawork`, `ulw-loop`, `ulw-execute-continuation`, `telemetry`)에 더해 `teammode`와 지원 컴포넌트(`bootstrap`, `codegraph`, `lcx` 등)를 제공하고, Codex 에이전트 TOML을 `~/.codex/agents/`에 설치합니다. 둘 다 설치하려면 `--platform=both`. Codex 전용 텔레메트리는 `OMO_CODEX_DISABLE_POSTHOG=1` 또는 `OMO_CODEX_SEND_ANONYMOUS_TELEMETRY=0`으로 비활성화할 수 있습니다.
+**Ultimate vs Light:** oh-my-openagent는 같은 제품의 두 에디션으로 출시됩니다. **Ultimate 에디션**(`bunx oh-my-openagent install` 또는 `--platform=opencode`, 기본값)은 OpenCode 위에서 풀 기능 — 11 agent, 54+ hook, Team Mode, 모든 MCP, 슬래시 명령, IntentGate 모드 — 을 제공합니다. **Light 에디션**(`npx lazycodex-ai install` 또는 `bunx oh-my-openagent install --platform=codex`)은 OpenAI Codex CLI의 플러그인 시스템에 깔끔히 포팅되는 핵심 컴포넌트(`rules`, `comment-checker`, `git-bash`, `lsp`, `ultrawork`, `ulw-loop`, `ulw-execute-continuation`, `telemetry`)에 더해 `teammode`와 지원 컴포넌트(`bootstrap`, `lcx` 등)를 제공하고, Codex 에이전트 TOML을 `~/.codex/agents/`에 설치합니다. 둘 다 설치하려면 `--platform=both`. Codex 전용 텔레메트리는 `OMO_CODEX_DISABLE_POSTHOG=1` 또는 `OMO_CODEX_SEND_ANONYMOUS_TELEMETRY=0`으로 비활성화할 수 있습니다.
 
 ---
 

package/README.md

@@ -114,7 +114,7 @@ Install oh-my-openagent. Type `ultrawork`. Done.
 oh-my-openagent ships in three editions of the same product: two plugins that load into a host you already run, plus one standalone edition.
 
 - **Ultimate Edition (omo for OpenCode)** — full omo. 11 agents, 54+ lifecycle hooks, 5 built-in MCPs, all slash commands, Team Mode, `/goal`, ultrawork — everything. Hashline edits are opt-in (`hashline_edit: true`).
-- **Light Edition (omo for Codex CLI)** — the portable components that fit Codex's plugin system: `rules`, `comment-checker`, `git-bash`, `lsp`, `ultrawork`, `ulw-loop`, `ulw-execute-continuation`, and `telemetry` at the core, plus `teammode` and supporting components (`bootstrap`, `codegraph`, `lcx`, and more), plugin-scoped MCPs for `grep_app`, `context7`, `codegraph`, `git_bash`, and `lsp`, and the shared `ast-grep` skill. It installs Codex agent TOMLs into `~/.codex/agents/`. No OpenCode `team_*` tools — Codex CLI's own spawn/collaboration surface does that work.
+- **Light Edition (omo for Codex CLI)** — the portable components that fit Codex's plugin system: `rules`, `comment-checker`, `git-bash`, `lsp`, `ultrawork`, `ulw-loop`, `ulw-execute-continuation`, and `telemetry` at the core, plus `teammode` and supporting components (`bootstrap`, `lcx`, and more), plugin-scoped MCPs for `grep_app`, `context7`, `git_bash`, and `lsp`, and the shared `ast-grep` skill. It installs Codex agent TOMLs into `~/.codex/agents/`. No OpenCode `team_*` tools — Codex CLI's own spawn/collaboration surface does that work.
 - **Senpi Edition (standalone, beta)** — the native `omo` command with the OMO extension built in. It installs from `omo-ai@beta` rather than loading into OpenCode or Codex.
 
 Pick the edition(s) you want.

package/README.ru.md

@@ -131,7 +131,7 @@ curl -s https://raw.githubusercontent.com/code-yeongyu/oh-my-openagent/refs/head
 
 Анонимная телеметрия включена по умолчанию для подсчёта активных установок (DAU/WAU/MAU). Не более одного события на машину за UTC-сутки, использует хешированный идентификатор установки, никогда не использует исходное имя хоста, и не создаёт PostHog person profile. Можно отключить через `OMO_SEND_ANONYMOUS_TELEMETRY=0` или `OMO_DISABLE_POSTHOG=1`. См. [Политику конфиденциальности](docs/legal/privacy-policy.md) и [Условия обслуживания](docs/legal/terms-of-service.md).
 
-**Ultimate и Light:** oh-my-openagent поставляется в двух редакциях одного продукта. **Ultimate** (`bunx oh-my-openagent install` или `--platform=opencode`, по умолчанию) — полнофункциональная редакция поверх OpenCode: 11 агентов, 54+ хука, Team Mode, все MCP, все слэш-команды, режимы IntentGate. **Light** (`npx lazycodex-ai install` или `bunx oh-my-openagent install --platform=codex`) — портируемые компоненты omo для системы плагинов OpenAI Codex CLI: ядро (`rules`, `comment-checker`, `git-bash`, `lsp`, `ultrawork`, `ulw-loop`, `ulw-execute-continuation`, `telemetry`), а также `teammode` и вспомогательные компоненты (`bootstrap`, `codegraph`, `lcx` и другие); TOML-файлы Codex-агентов устанавливаются в `~/.codex/agents/`. Чтобы установить обе редакции одной командой, используйте `--platform=both`. Телеметрию только для Codex можно отключить через `OMO_CODEX_DISABLE_POSTHOG=1` или `OMO_CODEX_SEND_ANONYMOUS_TELEMETRY=0`.
+**Ultimate и Light:** oh-my-openagent поставляется в двух редакциях одного продукта. **Ultimate** (`bunx oh-my-openagent install` или `--platform=opencode`, по умолчанию) — полнофункциональная редакция поверх OpenCode: 11 агентов, 54+ хука, Team Mode, все MCP, все слэш-команды, режимы IntentGate. **Light** (`npx lazycodex-ai install` или `bunx oh-my-openagent install --platform=codex`) — портируемые компоненты omo для системы плагинов OpenAI Codex CLI: ядро (`rules`, `comment-checker`, `git-bash`, `lsp`, `ultrawork`, `ulw-loop`, `ulw-execute-continuation`, `telemetry`), а также `teammode` и вспомогательные компоненты (`bootstrap`, `lcx` и другие); TOML-файлы Codex-агентов устанавливаются в `~/.codex/agents/`. Чтобы установить обе редакции одной командой, используйте `--platform=both`. Телеметрию только для Codex можно отключить через `OMO_CODEX_DISABLE_POSTHOG=1` или `OMO_CODEX_SEND_ANONYMOUS_TELEMETRY=0`.
 
 ------
 

package/README.zh-cn.md

@@ -133,7 +133,7 @@ curl -s https://raw.githubusercontent.com/code-yeongyu/oh-my-openagent/refs/head
 
 匿名遥测默认开启，用于统计活跃安装数(DAU/WAU/MAU)。每台机器每个 UTC 日最多发送一次事件,使用哈希化的安装标识符,绝不会使用原始主机名,且不会创建 PostHog person profile。可通过 `OMO_SEND_ANONYMOUS_TELEMETRY=0` 或 `OMO_DISABLE_POSTHOG=1` 禁用。详见 [隐私政策](docs/legal/privacy-policy.md) 和 [服务条款](docs/legal/terms-of-service.md)。
 
-**Ultimate 与 Light:** oh-my-openagent 以同一产品的两个版本发布。**Ultimate 版本**（`bunx oh-my-openagent install` 或 `--platform=opencode`，默认值）在 OpenCode 上提供完整功能 —— 11 个智能体、54+ 个生命周期钩子、Team Mode、所有 MCP、所有斜杠命令、IntentGate 模式。**Light 版本**（`npx lazycodex-ai install` 或 `bunx oh-my-openagent install --platform=codex`）提供能够干净地移植到 OpenAI Codex CLI 插件系统的 核心组件（`rules`、`comment-checker`、`git-bash`、`lsp`、`ultrawork`、`ulw-loop`、`ulw-execute-continuation`、`telemetry`），外加 `teammode` 和配套组件（`bootstrap`、`codegraph`、`lcx` 等），并会把 Codex 智能体 TOML 安装到 `~/.codex/agents/`。要同时安装两个版本，使用 `--platform=both`。Codex 专用遥测可通过 `OMO_CODEX_DISABLE_POSTHOG=1` 或 `OMO_CODEX_SEND_ANONYMOUS_TELEMETRY=0` 禁用。
+**Ultimate 与 Light:** oh-my-openagent 以同一产品的两个版本发布。**Ultimate 版本**（`bunx oh-my-openagent install` 或 `--platform=opencode`，默认值）在 OpenCode 上提供完整功能 —— 11 个智能体、54+ 个生命周期钩子、Team Mode、所有 MCP、所有斜杠命令、IntentGate 模式。**Light 版本**（`npx lazycodex-ai install` 或 `bunx oh-my-openagent install --platform=codex`）提供能够干净地移植到 OpenAI Codex CLI 插件系统的 核心组件（`rules`、`comment-checker`、`git-bash`、`lsp`、`ultrawork`、`ulw-loop`、`ulw-execute-continuation`、`telemetry`），外加 `teammode` 和配套组件（`bootstrap`、`lcx` 等），并会把 Codex 智能体 TOML 安装到 `~/.codex/agents/`。要同时安装两个版本，使用 `--platform=both`。Codex 专用遥测可通过 `OMO_CODEX_DISABLE_POSTHOG=1` 或 `OMO_CODEX_SEND_ANONYMOUS_TELEMETRY=0` 禁用。
 
 ---
 

package/THIRD-PARTY-NOTICES.md

@@ -1,22 +1,16 @@
 # Third Party Notices
 
-This file enumerates third-party components redistributed by the root `oh-my-opencode` package surface from `package.json` `files[]`, root production dependencies, bundled MCP/runtime payloads, and the planned pinned CodeGraph provisioning payload for the CodeGraph OMO integration.
+This file enumerates third-party components redistributed by the root `oh-my-opencode` package surface from `package.json` `files[]`, root production dependencies, and bundled MCP/runtime payloads.
 
 Generator/checker note: update this file with the audited component list, then run `node scripts/check-third-party-notices.mjs`. Task 11 owns tarball ship verification.
 
 ## Components
 
-### @clack/core@1.3.0
-- License: MIT, from CodeGraph platform bundle `lib/node_modules/@clack/core/LICENSE`.
-- Copyright: Copyright (c) Nate Moore.
-- Upstream URL: https://github.com/bombshell-dev/clack
-- Where-bundled: CodeGraph platform bundle vendored dependency.
-
 ### @clack/prompts@1.5.0
 - License: MIT, from `node_modules/@clack/prompts/LICENSE`.
 - Copyright: Copyright (c) Nate Moore.
 - Upstream URL: https://github.com/bombshell-dev/clack
-- Where-bundled: root production dependency; CodeGraph platform bundles also vendor `@clack/prompts@1.3.0`.
+- Where-bundled: root production dependency.
 
 ### @code-yeongyu/comment-checker@0.8.0
 - License: MIT, from package metadata. The inspected package did not include a separate LICENSE file.
@@ -24,48 +18,6 @@ Generator/checker note: update this file with the audited component list, then r
 - Upstream URL: https://github.com/code-yeongyu/go-claude-code-comment-checker
 - Where-bundled: root production dependency and vendored checker binary payload under `vendor/<platform>/`.
 
-### @colbymchenry/codegraph@1.5.0
-- License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file.
-- Copyright: CodeGraph contributors.
-- Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph
-- Where-bundled: pinned CodeGraph provisioning payload for the CodeGraph OMO integration.
-
-### @colbymchenry/codegraph-darwin-arm64@1.5.0
-- License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file.
-- Copyright: CodeGraph contributors.
-- Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-darwin-arm64
-- Where-bundled: optional CodeGraph platform bundle for darwin arm64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets.
-
-### @colbymchenry/codegraph-darwin-x64@1.5.0
-- License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file.
-- Copyright: CodeGraph contributors.
-- Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-darwin-x64
-- Where-bundled: optional CodeGraph platform bundle for darwin x64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets.
-
-### @colbymchenry/codegraph-linux-arm64@1.5.0
-- License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file.
-- Copyright: CodeGraph contributors.
-- Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-linux-arm64
-- Where-bundled: optional CodeGraph platform bundle for linux arm64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets.
-
-### @colbymchenry/codegraph-linux-x64@1.5.0
-- License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file.
-- Copyright: CodeGraph contributors.
-- Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-linux-x64
-- Where-bundled: optional CodeGraph platform bundle for linux x64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets.
-
-### @colbymchenry/codegraph-win32-arm64@1.5.0
-- License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file.
-- Copyright: CodeGraph contributors.
-- Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-win32-arm64
-- Where-bundled: optional CodeGraph platform bundle for win32 arm64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets.
-
-### @colbymchenry/codegraph-win32-x64@1.5.0
-- License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file.
-- Copyright: CodeGraph contributors.
-- Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-win32-x64
-- Where-bundled: optional CodeGraph platform bundle for win32 x64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets.
-
 ### @modelcontextprotocol/sdk@1.29.0
 - License: MIT, from `node_modules/@modelcontextprotocol/sdk/LICENSE`.
 - Copyright: Copyright (c) 2024 Anthropic, PBC.
@@ -84,17 +36,29 @@ Generator/checker note: update this file with the audited component list, then r
 - Upstream URL: https://www.npmjs.com/package/@opencode-ai/sdk
 - Where-bundled: root production dependency for OpenCode API access.
 
-### CodeGraph bundled Node.js runtime
-- License: Node.js MIT license plus bundled third-party licenses for runtime components such as OpenSSL and V8. The inspected CodeGraph platform tarballs include the Node.js binary but no separate Node LICENSE or NOTICE files; the Codex CodeGraph component therefore ships Node.js v24.16.0 license text at `packages/omo-codex/plugin/components/codegraph/NODE-RUNTIME-LICENSES.md`.
-- Copyright: Node.js contributors, OpenSSL Software Foundation, V8 authors, and other Node.js third-party contributors.
-- Upstream URL: https://nodejs.org/
-- Where-bundled: each `@colbymchenry/codegraph-*` platform bundle includes `node` or `node.exe`.
+### @opentui/core@0.5.8
+- License: MIT, from `node_modules/@opentui/core/LICENSE`.
+- Copyright: Copyright (c) 2025 opentui.
+- Upstream URL: https://www.npmjs.com/package/@opentui/core
+- Where-bundled: root production dependency.
+
+### @opentui/keymap@0.5.8
+- License: MIT, from `node_modules/@opentui/keymap/LICENSE`.
+- Copyright: Copyright (c) 2025 opentui.
+- Upstream URL: https://www.npmjs.com/package/@opentui/keymap
+- Where-bundled: root production dependency.
+
+### @opentui/solid@0.5.8
+- License: MIT, from `node_modules/@opentui/solid/LICENSE`.
+- Copyright: Copyright (c) 2025 opentui.
+- Upstream URL: https://www.npmjs.com/package/@opentui/solid
+- Where-bundled: root production dependency.
 
 ### commander@14.0.3
 - License: MIT, from `node_modules/commander/LICENSE`.
 - Copyright: Copyright (c) 2011 TJ Holowaychuk.
 - Upstream URL: https://github.com/tj/commander.js
-- Where-bundled: root production dependency; CodeGraph platform bundles also vendor commander.
+- Where-bundled: root production dependency.
 
 ### detect-libc@2.1.2
 - License: Apache-2.0, from `node_modules/detect-libc/LICENSE`.
@@ -108,30 +72,6 @@ Generator/checker note: update this file with the audited component list, then r
 - Upstream URL: https://github.com/kpdecker/jsdiff
 - Where-bundled: root production dependency used by diff rendering and patch helpers.
 
-### fast-string-truncated-width@3.0.3
-- License: MIT, from CodeGraph platform bundle `lib/node_modules/fast-string-truncated-width/license`.
-- Copyright: Fabio Spampinato and contributors.
-- Upstream URL: https://github.com/fabiospampinato/fast-string-truncated-width
-- Where-bundled: CodeGraph platform bundle vendored dependency.
-
-### fast-string-width@3.0.2
-- License: MIT, from CodeGraph platform bundle `lib/node_modules/fast-string-width/license`.
-- Copyright: Fabio Spampinato and contributors.
-- Upstream URL: https://github.com/fabiospampinato/fast-string-width
-- Where-bundled: CodeGraph platform bundle vendored dependency.
-
-### fast-wrap-ansi@0.2.0
-- License: MIT, from CodeGraph platform bundle `lib/node_modules/fast-wrap-ansi/LICENSE`.
-- Copyright: James Garbutt and contributors.
-- Upstream URL: https://github.com/43081j/fast-wrap-ansi
-- Where-bundled: CodeGraph platform bundle vendored dependency.
-
-### ignore@7.0.5
-- License: MIT, from CodeGraph platform bundle `lib/node_modules/ignore/LICENSE-MIT`.
-- Copyright: ignore contributors.
-- Upstream URL: https://github.com/kaelzhang/node-ignore
-- Where-bundled: CodeGraph platform bundle vendored dependency.
-
 ### js-yaml@4.2.0
 - License: MIT, from `node_modules/js-yaml/LICENSE`.
 - Copyright: Copyright (C) 2011-2015 Vitaly Puzrin.
@@ -142,7 +82,7 @@ Generator/checker note: update this file with the audited component list, then r
 - License: MIT, from `node_modules/jsonc-parser/LICENSE.md`.
 - Copyright: Copyright (c) Microsoft.
 - Upstream URL: https://github.com/microsoft/node-jsonc-parser
-- Where-bundled: root production dependency and CodeGraph platform bundle vendored dependency.
+- Where-bundled: root production dependency.
 
 ### pi-comment-checker
 - License: MIT, from `packages/omo-codex/plugin/components/comment-checker/LICENSE` and component NOTICE.
@@ -172,7 +112,7 @@ Generator/checker note: update this file with the audited component list, then r
 - License: MIT, from `node_modules/picomatch/LICENSE`.
 - Copyright: Copyright (c) 2017-present, Jon Schlinkert.
 - Upstream URL: https://github.com/micromatch/picomatch
-- Where-bundled: root production dependency; CodeGraph platform bundles also vendor `picomatch@4.0.3`.
+- Where-bundled: root production dependency.
 
 ### posthog-node@5.35.12
 - License: Apache-2.0 text in `node_modules/posthog-node/LICENSE`; package metadata declares MIT.
@@ -180,26 +120,14 @@ Generator/checker note: update this file with the audited component list, then r
 - Upstream URL: https://github.com/PostHog/posthog-js
 - Where-bundled: root production dependency for anonymous telemetry.
 
-### sisteransi@1.0.5
-- License: MIT, from CodeGraph platform bundle `lib/node_modules/sisteransi/license`.
-- Copyright: Terkel Gjervig and contributors.
-- Upstream URL: https://github.com/terkelg/sisteransi
-- Where-bundled: CodeGraph platform bundle vendored dependency.
-
-### tree-sitter-wasms@0.1.13
-- License: Unlicense, from CodeGraph platform bundle `lib/node_modules/tree-sitter-wasms/LICENSE`.
-- Copyright: Gregor, Menci, and grammar contributors.
-- Upstream URL: https://github.com/Gregoor/tree-sitter-wasms
-- Where-bundled: CodeGraph platform bundle vendored dependency and bundled language grammar WASM files.
-
 ### vscode-jsonrpc@8.2.1
 - License: MIT, from `node_modules/vscode-jsonrpc/License.txt`.
 - Copyright: Copyright (c) Microsoft Corporation.
 - Upstream URL: https://github.com/microsoft/vscode-languageserver-node
 - Where-bundled: root production dependency for LSP JSON-RPC transport.
 
-### web-tree-sitter@0.25.10
-- License: MIT, from CodeGraph platform bundle `lib/node_modules/web-tree-sitter/LICENSE`.
-- Copyright: Max Brunsfeld and tree-sitter contributors.
-- Upstream URL: https://github.com/tree-sitter/tree-sitter
-- Where-bundled: CodeGraph platform bundle vendored dependency and bundled WebAssembly tree-sitter runtime.
+### zod@4.4.3
+- License: MIT, from `node_modules/zod/LICENSE`.
+- Copyright: Copyright (c) 2025 Colin McDonnell.
+- Upstream URL: https://zod.dev
+- Where-bundled: root production dependency.