oh-my-opencode 5.0.0-beta.8 → 5.0.0-beta.81

package/packages/omo-codex/plugin/components/bootstrap/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"command": "node \"${PLUGIN_ROOT}/components/bootstrap/dist/cli.js\" hook session-start",
 						"commandWindows": "powershell -NoProfile -ExecutionPolicy Bypass -File \"${PLUGIN_ROOT}\\components\\bootstrap\\scripts\\bootstrap.ps1\"",
 						"timeout": 30,
-						"statusMessage": "(OmO 5.0.0-beta.8) Checking Bootstrap Provisioning"
+						"statusMessage": "(OmO 5.0.0-beta.81) Checking Bootstrap Provisioning"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/bootstrap/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sisyphuslabs/codex-bootstrap",
-	"version": "5.0.0-beta.8",
+	"version": "5.0.0-beta.81",
 	"description": "Codex SessionStart bootstrap component that provisions LazyCodex runtime dependencies from a detached worker.",
 	"type": "module",
 	"private": true,

package/packages/omo-codex/plugin/components/bootstrap/src/hook.ts

@@ -81,6 +81,7 @@ function spawnDetachedWorker(invocation: WorkerSpawnInvocation): void {
 		detached: true,
 		env: invocation.env,
 		stdio: "ignore",
+		windowsHide: true,
 	});
 	child.unref();
 }

package/packages/omo-codex/plugin/components/bootstrap/src/setup.ts

@@ -1,5 +1,6 @@
 import { copyFile, mkdir, readFile, readdir, rm, stat } from "node:fs/promises";
 import { join } from "node:path";
+import { readDefaultRoleConfig } from "../../../../src/install/codex-default-role-config.ts";
 
 // These relative imports resolve at BUILD time in the monorepo; esbuild
 // inlines the installer source modules into dist/cli.js so PLUGIN_ROOT ships
@@ -94,16 +95,21 @@ async function linkBundledAgentsStep(options: WorkerSetupOptions): Promise<Agent
 		await stageBundledAgents(options.pluginRoot, stageRoot);
 		const preservedReasoning = await capturePreservedAgentReasoning({ codexHome: options.codexHome });
 		const preservedServiceTier = await capturePreservedAgentServiceTier({ codexHome: options.codexHome });
+		const config = readDefaultRoleConfig({ env: options.env });
 		const linked = await linkCachedPluginAgents({
 			codexHome: options.codexHome,
 			pluginRoot: stageRoot,
 			preservedReasoning,
 			preservedServiceTier,
+			defaultRoleEnabled: config.enabled,
 		});
 		const agentConfigs = linked
 			.map((link) => ({ configFile: `./agents/${link.name}`, name: agentNameFromToml(link.name) }))
 			.sort((left, right) => left.name.localeCompare(right.name));
-		return { agentConfigs, degraded: [] };
+		return {
+			agentConfigs,
+			degraded: config.warnings.map((reason) => ({ component: "agents-config", hint: BOOTSTRAP_DOCTOR_HINT, reason })),
+		};
 	} catch (error) {
 		return {
 			agentConfigs: [],

package/packages/omo-codex/plugin/components/comment-checker/AGENTS.md

@@ -10,6 +10,15 @@ Conventions for human contributors and AI agents working on this repository.
 - Tabs for indentation. Double quotes for strings.
 - Tests use vitest with `#given .. #when .. #then` descriptions or plain `// given / // when / // then` body comments.
 
+## Layout
+
+- `src/core.ts`: parse API — `parseApplyPatchRequests`, `extractCommentCheckRequests`, `toHookInput`, `isToolFailureOutput`, `isRecord`.
+- `src/apply-patch.ts`: `apply_patch` extraction supporting Codex `tool_input.command`, raw patch text, and OMO-compatible metadata.
+- `src/request-extractor.ts` / `src/hook-input.ts` / `src/core-values.ts`: request/input shaping and constants.
+- `src/runner.ts`: spawns the checker binary — `runCommentChecker`, `resolveCommentCheckerBinary`, `spawnProcess`.
+- `src/codex-hook.ts`: `PostToolUse` hook + CLI (`extractCodexCommentCheckRequests`, `runCommentCheckerPostToolUse`, `runCodexHookCli`).
+- `hooks/hooks.json`: registration. Heaviest suite: `test/codex-hook.test.ts` (513 LOC).
+
 ## Commands
 
 - `npm install` - install dependencies.

package/packages/omo-codex/plugin/components/comment-checker/biome.json

@@ -1,9 +1,9 @@
 {
-	"$schema": "https://biomejs.dev/schemas/2.4.15/schema.json",
+	"$schema": "https://biomejs.dev/schemas/2.5.9/schema.json",
 	"linter": {
 		"enabled": true,
 		"rules": {
-			"recommended": true,
+			"preset": "recommended",
 			"style": {
 				"noDefaultExport": "error",
 				"noEnum": "error",

package/packages/omo-codex/plugin/components/comment-checker/dist/cli.js

@@ -416,7 +416,8 @@ function spawnProcess(command, args, stdin, maxOutputBytes = MAX_PROCESS_OUTPUT_
   return new Promise((resolve) => {
     const outputByteLimit = Number.isFinite(maxOutputBytes) && maxOutputBytes > 0 ? Math.floor(maxOutputBytes) : 0;
     const proc = spawn(command, args, {
-      stdio: ["pipe", "pipe", "pipe"]
+      stdio: ["pipe", "pipe", "pipe"],
+      windowsHide: true
     });
     const stdout = { text: "", bytes: 0, truncated: false };
     const stderr = { text: "", bytes: 0, truncated: false };

package/packages/omo-codex/plugin/components/comment-checker/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-tool-use",
 						"timeout": 30,
-						"statusMessage": "(OmO 5.0.0-beta.8) Checking Comments"
+						"statusMessage": "(OmO 5.0.0-beta.81) Checking Comments"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/comment-checker/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/codex-comment-checker",
-	"version": "5.0.0-beta.8",
+	"version": "5.0.0-beta.81",
 	"description": "Codex plugin that runs comment-checker after edit-like PostToolUse hooks.",
 	"type": "module",
 	"packageManager": "npm@11.12.1",
@@ -46,11 +46,12 @@
 		"@code-yeongyu/comment-checker": "^0.8.0"
 	},
 	"devDependencies": {
+		"@vitest/coverage-v8": "5.0.1",
 		"@oh-my-opencode/comment-checker-core": "file:../../../../comment-checker-core",
-		"@biomejs/biome": "2.4.16",
-		"@types/node": "^25.9.3",
-		"typescript": "^6.0.3",
-		"vitest": "^4.1.8"
+		"@biomejs/biome": "2.5.14",
+		"@types/node": "^26.6.2",
+		"typescript": "^7.0.2",
+		"vitest": "5.0.1"
 	},
 	"engines": {
 		"node": ">=20.0.0"

package/packages/omo-codex/plugin/components/comment-checker/src/apply-patch.ts

@@ -1,8 +1,5 @@
-import {
-	extractApplyPatchEdits,
-	getApplyPatchMetadataFiles,
-} from "@oh-my-opencode/comment-checker-core";
 import type { CheckerEdit as CoreApplyPatchEdit } from "@oh-my-opencode/comment-checker-core";
+import { extractApplyPatchEdits, getApplyPatchMetadataFiles } from "@oh-my-opencode/comment-checker-core";
 import type { CommentCheckRequest } from "./types.js";
 
 export function extractApplyPatchRequests(event: {
@@ -27,10 +24,7 @@ function extractApplyPatchMetadataRequests(details: unknown, sourceToolName: str
 	return toCommentCheckRequests(edits, sourceToolName);
 }
 
-function toCommentCheckRequests(
-	edits: readonly CoreApplyPatchEdit[],
-	sourceToolName: string,
-): CommentCheckRequest[] {
+function toCommentCheckRequests(edits: readonly CoreApplyPatchEdit[], sourceToolName: string): CommentCheckRequest[] {
 	const requests: CommentCheckRequest[] = [];
 	for (const edit of edits) {
 		if (edit.before.length === 0) {

package/packages/omo-codex/plugin/components/comment-checker/src/core.ts

@@ -1,6 +1,5 @@
-export { parseApplyPatchRequests } from "@oh-my-opencode/comment-checker-core";
+export { isRecord, parseApplyPatchRequests } from "@oh-my-opencode/comment-checker-core";
 export { toHookInput } from "./hook-input.js";
-export { isRecord } from "@oh-my-opencode/comment-checker-core";
 export { extractCommentCheckRequests, isToolFailureOutput } from "./request-extractor.js";
 export type {
 	CheckerEdit,

package/packages/omo-codex/plugin/components/comment-checker/src/request-extractor.ts

@@ -1,5 +1,5 @@
-import { extractApplyPatchRequests } from "./apply-patch.js";
 import { getString, isRecord } from "@oh-my-opencode/comment-checker-core";
+import { extractApplyPatchRequests } from "./apply-patch.js";
 import type { CheckerEdit, CommentCheckRequest, TextContent, ToolResultContent, ToolResultLike } from "./types.js";
 
 export function extractCommentCheckRequests(event: ToolResultLike): CommentCheckRequest[] {

package/packages/omo-codex/plugin/components/comment-checker/src/runner.ts

@@ -167,6 +167,7 @@ export function spawnProcess(
 		const outputByteLimit = Number.isFinite(maxOutputBytes) && maxOutputBytes > 0 ? Math.floor(maxOutputBytes) : 0;
 		const proc = spawn(command, args, {
 			stdio: ["pipe", "pipe", "pipe"],
+			windowsHide: true,
 		});
 		const stdout: OutputAccumulator = { text: "", bytes: 0, truncated: false };
 		const stderr: OutputAccumulator = { text: "", bytes: 0, truncated: false };

package/packages/omo-codex/plugin/components/git-bash/AGENTS.md

@@ -27,5 +27,5 @@ Component wrapper (`@sisyphuslabs/codex-git-bash-hook`, private, bin `omo-git-ba
 - **Windows detection is env-tolerant** (`isWindowsHost`): `platform === "win32"` OR any of `OS=Windows_NT` / `ComSpec` / `SystemRoot` present, so bash-hosted shells on Windows still count.
 - **Marker path:** `${PLUGIN_DATA:-~/.codex/omo-git-bash}/git-bash-reminder/<session_id>.seen`; session id sanitized to `[A-Za-z0-9._-]`. `PostCompact` removes it with `rmSync(force)`.
 - **Hook must never block the user's Bash call:** the CLI swallows parse/fs errors and exits 0 on both hook paths; malformed or empty stdin yields empty output.
-- **Runtime dep-free Node >=20 ESM.** `@oh-my-opencode/utils` is a devDependency only (`file:` link). Build `tsc -p tsconfig.build.json`; tests run via `bun test test/*.test.ts` (unlike the vitest-based `lsp` component).
+- **Runtime dep-free Node >=20 ESM.** Build `tsc -p tsconfig.build.json`; tests run via `bun test test/*.test.ts` (unlike the vitest-based `lsp` component).
 - **Windows absolute MCP targets are valid:** `isPluginRuntimePathArg` in `packages/omo-opencode/src/cli/doctor/checks/codex-components.ts` and `script/lazycodex-marketplace-validation.ts` gained `isAbsolute(arg)` so a rewritten `C:\...` git_bash/lsp entrypoint passes validation (commit 3b1681ae8).

package/packages/omo-codex/plugin/components/git-bash/dist/cli.js

@@ -5,7 +5,7 @@ import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 var BASH_TOOL_NAME = "Bash";
-var REMINDER = "On Windows, prefer the OMO git_bash MCP for shell commands before using built-in exec_command. Use exec_command only when git_bash is unavailable or for non-shell operations.";
+var REMINDER = "On Windows, prefer the OMO git_bash MCP for shell commands before using built-in exec_command. Use exec_command only when git_bash is unavailable or for non-shell operations. " + "In code mode, these tools may be deferred: inspect ALL_TOOLS with exec to discover the actual git_bash run, diagnose, and which_bash tool names, then invoke the matching entries through the tools object inside exec before treating git_bash as unavailable. Do not issue deferred names as top-level tool calls.";
 function parsePreToolUsePayload(raw) {
   if (raw.trim().length === 0)
     return null;

package/packages/omo-codex/plugin/components/git-bash/dist/codex-hook.js

@@ -2,7 +2,8 @@ import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 const BASH_TOOL_NAME = "Bash";
-const REMINDER = "On Windows, prefer the OMO git_bash MCP for shell commands before using built-in exec_command. Use exec_command only when git_bash is unavailable or for non-shell operations.";
+const REMINDER = "On Windows, prefer the OMO git_bash MCP for shell commands before using built-in exec_command. Use exec_command only when git_bash is unavailable or for non-shell operations. " +
+    "In code mode, these tools may be deferred: inspect ALL_TOOLS with exec to discover the actual git_bash run, diagnose, and which_bash tool names, then invoke the matching entries through the tools object inside exec before treating git_bash as unavailable. Do not issue deferred names as top-level tool calls.";
 export function parsePreToolUsePayload(raw) {
     if (raw.trim().length === 0)
         return null;

package/packages/omo-codex/plugin/components/git-bash/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook pre-tool-use",
 						"timeout": 5,
-						"statusMessage": "(OmO 5.0.0-beta.8) Recommending Git Bash MCP"
+						"statusMessage": "(OmO 5.0.0-beta.81) Recommending Git Bash MCP"
 					}
 				]
 			}
@@ -20,7 +20,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/dist/cli.js\" hook post-compact",
 						"timeout": 5,
-						"statusMessage": "(OmO 5.0.0-beta.8) Resetting Git Bash MCP Reminder"
+						"statusMessage": "(OmO 5.0.0-beta.81) Resetting Git Bash MCP Reminder"
 					}
 				]
 			}

package/packages/omo-codex/plugin/components/git-bash/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sisyphuslabs/codex-git-bash-hook",
-	"version": "5.0.0-beta.8",
+	"version": "5.0.0-beta.81",
 	"description": "Codex hook component that reminds Windows sessions to prefer the OMO git_bash MCP.",
 	"type": "module",
 	"private": true,
@@ -17,9 +17,8 @@
 		"typecheck": "tsc --noEmit"
 	},
 	"devDependencies": {
-		"@oh-my-opencode/utils": "file:../../../../utils",
-		"@types/node": "^25.9.3",
-		"typescript": "^6.0.3"
+		"@types/node": "^26.6.2",
+		"typescript": "^7.0.2"
 	},
 	"engines": {
 		"node": ">=20.0.0"

package/packages/omo-codex/plugin/components/git-bash/src/codex-hook.ts

@@ -37,7 +37,8 @@ interface PreToolUseHookOutput {
 
 const BASH_TOOL_NAME = "Bash";
 const REMINDER =
-	"On Windows, prefer the OMO git_bash MCP for shell commands before using built-in exec_command. Use exec_command only when git_bash is unavailable or for non-shell operations.";
+	"On Windows, prefer the OMO git_bash MCP for shell commands before using built-in exec_command. Use exec_command only when git_bash is unavailable or for non-shell operations. " +
+	"In code mode, these tools may be deferred: inspect ALL_TOOLS with exec to discover the actual git_bash run, diagnose, and which_bash tool names, then invoke the matching entries through the tools object inside exec before treating git_bash as unavailable. Do not issue deferred names as top-level tool calls.";
 
 export function parsePreToolUsePayload(raw: string): PreToolUsePayload | null {
 	if (raw.trim().length === 0) return null;

package/packages/omo-codex/plugin/components/git-bash/test/codex-hook.test.ts

@@ -81,8 +81,7 @@ describe("applyGitBashPreToolUseReminder", () => {
 		const parsed = JSON.parse(output);
 		expect(parsed.hookSpecificOutput).toEqual({
 			hookEventName: "PreToolUse",
-			additionalContext:
-				"On Windows, prefer the OMO git_bash MCP for shell commands before using built-in exec_command. Use exec_command only when git_bash is unavailable or for non-shell operations.",
+			additionalContext: expect.any(String),
 		});
 	});
 
@@ -96,7 +95,7 @@ describe("applyGitBashPreToolUseReminder", () => {
 		const second = applyGitBashPreToolUseReminder(payload, { env: windowsEnv(), platform: "linux", pluginDataRoot });
 
 		// then
-		expect(first).toContain("git_bash");
+		expect(JSON.parse(first).hookSpecificOutput.hookEventName).toBe("PreToolUse");
 		expect(second).toBe("");
 	});
 
@@ -148,9 +147,9 @@ describe("applyGitBashPostCompactReset", () => {
 		});
 
 		// then
-		expect(first).toContain("git_bash");
+		expect(JSON.parse(first).hookSpecificOutput.hookEventName).toBe("PreToolUse");
 		expect(second).toBe("");
-		expect(afterCompact).toContain("git_bash");
+		expect(JSON.parse(afterCompact).hookSpecificOutput.hookEventName).toBe("PreToolUse");
 	});
 });
 
@@ -169,7 +168,7 @@ describe("runGitBashHookCli", () => {
 		});
 
 		// then
-		expect(capture.read()).toContain("git_bash MCP");
+		expect(JSON.parse(capture.read()).hookSpecificOutput.hookEventName).toBe("PreToolUse");
 	});
 
 	it("#given PostCompact stdin #when CLI hook runs #then it resets the one-shot reminder", async () => {
@@ -190,6 +189,6 @@ describe("runGitBashHookCli", () => {
 
 		// then
 		expect(capture.read()).toBe("");
-		expect(afterCompact).toContain("git_bash");
+		expect(JSON.parse(afterCompact).hookSpecificOutput.hookEventName).toBe("PreToolUse");
 	});
 });

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/AGENTS.md

@@ -6,7 +6,7 @@
 
 Codex `SubagentStop` hook component: the evidence gate for the ultrawork implementation workers (`lazycodex-worker-low|medium|high`). When a worker stops without a valid evidence receipt, the hook emits `{"decision": "block", "reason": <directive>}` and Codex sends it back to work. Matcher is `^lazycodex-worker-(low|medium|high)$`; read-only roles like `lazycodex-qa-executor` and `lazycodex-gate-reviewer` (same `ultrawork/agents/` family) are NOT gated by this hook. (The historical `lazycodex-executor` agent was removed; this component keeps its name.)
 
-Valid receipt: `last_assistant_message` contains `EVIDENCE_RECORDED: <path>` where `<path>` resolves to a non-empty regular file strictly inside `<cwd>/.omo/evidence/`. Symlinks and directories rejected; containment checked on realpaths (file inside evidence root inside cwd, traversal-safe). A valid receipt clears attempt state and exits silently.
+Valid receipt: `last_assistant_message` contains `EVIDENCE_RECORDED: <path>` where `<path>` resolves to a regular file strictly inside `<cwd>/.omo/evidence/` with at least 40 characters after trimming whitespace. When `transcript_path` can be stat'ed, the receipt's `mtimeMs` must be at least the transcript's `birthtimeMs` (fallback: `ctimeMs`); an unstatable transcript skips freshness validation. Short or stale receipts are blocked with `placeholder` or `stale` in the reason. Symlinks and directories rejected; containment checked on realpaths (file inside evidence root inside cwd, traversal-safe). A valid receipt clears attempt state and exits silently.
 
 Escape hatches: after 3 blocked attempts (`MAX_ATTEMPTS`) the stop passes and state clears; a transcript containing a context-pressure marker ("context compacted", "context_length_exceeded", ...) passes immediately. Malformed stdin, unknown events, unrelated agents: silent exit 0 (fail-open).
 
@@ -28,7 +28,7 @@ Escape hatches: after 3 blocked attempts (`MAX_ATTEMPTS`) the stop passes and st
 | Task | Location |
 |------|----------|
 | Change the block message | `directive.md`; keep both `{{...}}` placeholders and the literal `EVIDENCE_RECORDED: <path>` final-line contract |
-| Change receipt validation | `src/codex-hook.ts` (`hasValidEvidenceReceipt`, `extractEvidencePath`, `isNonEmptyFileInsideEvidenceRoot`) |
+| Change receipt validation | `src/codex-hook.ts` (`getEvidenceReceiptFailure`, `extractEvidencePath`, `getEvidenceFileFailure`) |
 | Change the retry budget | `src/state.ts` `MAX_ATTEMPTS` |
 | Worker-side contract | `../ultrawork/agents/lazycodex-worker-{low,medium,high}.toml` instruct the final `EVIDENCE_RECORDED: <path>` line this hook parses |
 | Plugin-level wiring | `../../hooks/subagent-stop-verifying-lazycodex-executor-evidence.json` (adds `commandWindows` via `../bootstrap/scripts/node-dispatch.ps1`) |

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/biome.json

@@ -1,9 +1,9 @@
 {
-	"$schema": "https://biomejs.dev/schemas/2.4.16/schema.json",
+	"$schema": "https://biomejs.dev/schemas/2.5.9/schema.json",
 	"linter": {
 		"enabled": true,
 		"rules": {
-			"recommended": true,
+			"preset": "recommended",
 			"style": {
 				"noDefaultExport": "error",
 				"noEnum": "error",

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/directive.md

@@ -4,6 +4,8 @@
 
 직접 검증하라. 관련 명령을 실제로 실행하고, 출력과 판단 근거를 `.omo/evidence/` 아래 파일로 기록하라. 실패한 항목이 있으면 완료했다고 말하지 말고 고쳐라. `stop_hook_active` 상태여도 이 검증은 생략되지 않는다. 반복은 제한되어 있지만, 증거 없는 완료 주장은 막힌다.
 
+증거 파일은 이번 실행 중에 생성하고 실제 명령 출력을 포함해 앞뒤 공백을 제외한 내용이 40자 이상이어야 한다.
+
 마지막 assistant 메시지:
 {{LAST_ASSISTANT_MESSAGE}}
 

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/dist/cli.js

@@ -66,11 +66,7 @@ function isRecord(value) {
 var SUBAGENT_STOP_EVENT = "SubagentStop";
 
 // components/lazycodex-executor-verify/src/codex-hook.ts
-var RECEIPT_ENFORCED_AGENTS = new Set([
-  "lazycodex-worker-low",
-  "lazycodex-worker-medium",
-  "lazycodex-worker-high"
-]);
+var RECEIPT_ENFORCED_AGENTS = new Set(["lazycodex-worker-low", "lazycodex-worker-medium", "lazycodex-worker-high"]);
 function runSubagentStopHook(input, fs) {
   if (!isSubagentStopInput(input))
     return "";
@@ -78,7 +74,8 @@ function runSubagentStopHook(input, fs) {
     return "";
   if (transcriptHasContextPressureMarker(input.transcript_path, fs))
     return "";
-  if (hasValidEvidenceReceipt(input, fs)) {
+  const receiptFailure = getEvidenceReceiptFailure(input, fs);
+  if (receiptFailure === null) {
     clearAttemptState(input.cwd, input.session_id, input.agent_id, fs);
     return "";
   }
@@ -91,7 +88,9 @@ function runSubagentStopHook(input, fs) {
   writeAttemptState(input.cwd, input.session_id, input.agent_id, { attempts }, fs);
   return JSON.stringify({
     decision: "block",
-    reason: renderDirective(attempts, input.last_assistant_message)
+    reason: `Evidence receipt rejected: ${receiptFailure}.
+
+${renderDirective(attempts, input.last_assistant_message)}`
   });
 }
 var CONTEXT_PRESSURE_MARKERS = [
@@ -113,19 +112,19 @@ function transcriptHasContextPressureMarker(transcriptPath, fs) {
     throw error;
   }
 }
-function hasValidEvidenceReceipt(input, fs) {
+function getEvidenceReceiptFailure(input, fs) {
   const receiptPath = extractEvidencePath(input.last_assistant_message);
   if (receiptPath === null)
-    return false;
+    return "invalid";
   const evidenceRoot = resolve(input.cwd, ".omo", "evidence");
   const resolvedPath = isAbsolute(receiptPath) ? resolve(receiptPath) : resolve(input.cwd, receiptPath);
   if (!isPathInsideDirectory(resolvedPath, evidenceRoot))
-    return false;
+    return "invalid";
   try {
-    return isNonEmptyFileInsideEvidenceRoot(resolvedPath, evidenceRoot, input.cwd, fs);
+    return getEvidenceFileFailure(resolvedPath, evidenceRoot, input, fs);
   } catch (error) {
     if (error instanceof Error)
-      return false;
+      return "invalid";
     throw error;
   }
 }
@@ -133,28 +132,36 @@ function isPathInsideDirectory(filePath, directoryPath) {
   const relativePath = relative(directoryPath, filePath);
   return relativePath !== "" && !relativePath.startsWith("..") && !isAbsolute(relativePath);
 }
-function isNonEmptyFileInsideEvidenceRoot(filePath, evidenceRoot, cwd, fs) {
+function getEvidenceFileFailure(filePath, evidenceRoot, input, fs) {
   if (!fs.existsSync(filePath))
-    return false;
-  const realCwd = realPath(cwd, fs);
+    return "invalid";
+  const realCwd = realPath(input.cwd, fs);
   const realEvidenceRoot = realPath(evidenceRoot, fs);
   const realFilePath = realPath(filePath, fs);
   if (!isPathInsideDirectory(realEvidenceRoot, realCwd))
-    return false;
+    return "invalid";
   if (!isPathInsideDirectory(realFilePath, realEvidenceRoot))
-    return false;
-  return isNonEmptyFile(filePath, fs);
-}
-function isNonEmptyFile(filePath, fs) {
-  if (!fs.existsSync(filePath))
-    return false;
+    return "invalid";
   const linkStat = fs.lstatSync?.(filePath) ?? nodeLstatSync(filePath);
   if (linkStat.isSymbolicLink?.() === true)
-    return false;
+    return "invalid";
   const stat = fs.statSync(filePath);
-  if (stat.size <= 0)
-    return false;
-  return stat.isFile?.() ?? true;
+  if (stat.isFile?.() === false)
+    return "invalid";
+  if (stat.size <= 0 || fs.readFileSync(filePath, "utf8").trim().length < 40)
+    return "placeholder";
+  let transcriptStat;
+  try {
+    transcriptStat = fs.statSync(input.transcript_path);
+  } catch (error) {
+    if (error instanceof Error)
+      return null;
+    throw error;
+  }
+  const transcriptStart = transcriptStat.birthtimeMs ?? transcriptStat.ctimeMs;
+  if (transcriptStart !== undefined && (stat.mtimeMs === undefined || stat.mtimeMs < transcriptStart))
+    return "stale";
+  return null;
 }
 function realPath(path, fs) {
   return fs.realpathSync?.(path) ?? nodeRealpathSync(path);
@@ -215,13 +222,13 @@ function parseHookInput(raw) {
   }
 }
 function readStdin() {
-  return new Promise((resolve2) => {
+  return new Promise((resolve) => {
     let data = "";
     processStdin.setEncoding("utf8");
     processStdin.on("data", (chunk) => {
       data += chunk;
     });
-    processStdin.once("error", () => resolve2(data));
-    processStdin.once("end", () => resolve2(data));
+    processStdin.once("error", () => resolve(data));
+    processStdin.once("end", () => resolve(data));
   });
 }

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/dist/codex-hook.js

@@ -3,11 +3,7 @@ import { isAbsolute, relative, resolve } from "node:path";
 import { renderDirective } from "./directive.js";
 import { clearAttemptState, MAX_ATTEMPTS, readAttemptState, writeAttemptState } from "./state.js";
 import { SUBAGENT_STOP_EVENT } from "./types.js";
-const RECEIPT_ENFORCED_AGENTS = new Set([
-    "lazycodex-worker-low",
-    "lazycodex-worker-medium",
-    "lazycodex-worker-high",
-]);
+const RECEIPT_ENFORCED_AGENTS = new Set(["lazycodex-worker-low", "lazycodex-worker-medium", "lazycodex-worker-high"]);
 export function runSubagentStopHook(input, fs) {
     if (!isSubagentStopInput(input))
         return "";
@@ -15,7 +11,8 @@ export function runSubagentStopHook(input, fs) {
         return "";
     if (transcriptHasContextPressureMarker(input.transcript_path, fs))
         return "";
-    if (hasValidEvidenceReceipt(input, fs)) {
+    const receiptFailure = getEvidenceReceiptFailure(input, fs);
+    if (receiptFailure === null) {
         clearAttemptState(input.cwd, input.session_id, input.agent_id, fs);
         return "";
     }
@@ -28,7 +25,7 @@ export function runSubagentStopHook(input, fs) {
     writeAttemptState(input.cwd, input.session_id, input.agent_id, { attempts }, fs);
     return JSON.stringify({
         decision: "block",
-        reason: renderDirective(attempts, input.last_assistant_message),
+        reason: `Evidence receipt rejected: ${receiptFailure}.\n\n${renderDirective(attempts, input.last_assistant_message)}`,
     });
 }
 const CONTEXT_PRESSURE_MARKERS = [
@@ -51,20 +48,20 @@ function transcriptHasContextPressureMarker(transcriptPath, fs) {
         throw error;
     }
 }
-function hasValidEvidenceReceipt(input, fs) {
+function getEvidenceReceiptFailure(input, fs) {
     const receiptPath = extractEvidencePath(input.last_assistant_message);
     if (receiptPath === null)
-        return false;
+        return "invalid";
     const evidenceRoot = resolve(input.cwd, ".omo", "evidence");
     const resolvedPath = isAbsolute(receiptPath) ? resolve(receiptPath) : resolve(input.cwd, receiptPath);
     if (!isPathInsideDirectory(resolvedPath, evidenceRoot))
-        return false;
+        return "invalid";
     try {
-        return isNonEmptyFileInsideEvidenceRoot(resolvedPath, evidenceRoot, input.cwd, fs);
+        return getEvidenceFileFailure(resolvedPath, evidenceRoot, input, fs);
     }
     catch (error) {
         if (error instanceof Error)
-            return false;
+            return "invalid";
         throw error;
     }
 }
@@ -72,28 +69,37 @@ function isPathInsideDirectory(filePath, directoryPath) {
     const relativePath = relative(directoryPath, filePath);
     return relativePath !== "" && !relativePath.startsWith("..") && !isAbsolute(relativePath);
 }
-function isNonEmptyFileInsideEvidenceRoot(filePath, evidenceRoot, cwd, fs) {
+function getEvidenceFileFailure(filePath, evidenceRoot, input, fs) {
     if (!fs.existsSync(filePath))
-        return false;
-    const realCwd = realPath(cwd, fs);
+        return "invalid";
+    const realCwd = realPath(input.cwd, fs);
     const realEvidenceRoot = realPath(evidenceRoot, fs);
     const realFilePath = realPath(filePath, fs);
     if (!isPathInsideDirectory(realEvidenceRoot, realCwd))
-        return false;
+        return "invalid";
     if (!isPathInsideDirectory(realFilePath, realEvidenceRoot))
-        return false;
-    return isNonEmptyFile(filePath, fs);
-}
-function isNonEmptyFile(filePath, fs) {
-    if (!fs.existsSync(filePath))
-        return false;
+        return "invalid";
     const linkStat = fs.lstatSync?.(filePath) ?? nodeLstatSync(filePath);
     if (linkStat.isSymbolicLink?.() === true)
-        return false;
+        return "invalid";
     const stat = fs.statSync(filePath);
-    if (stat.size <= 0)
-        return false;
-    return stat.isFile?.() ?? true;
+    if (stat.isFile?.() === false)
+        return "invalid";
+    if (stat.size <= 0 || fs.readFileSync(filePath, "utf8").trim().length < 40)
+        return "placeholder";
+    let transcriptStat;
+    try {
+        transcriptStat = fs.statSync(input.transcript_path);
+    }
+    catch (error) {
+        if (error instanceof Error)
+            return null;
+        throw error;
+    }
+    const transcriptStart = transcriptStat.birthtimeMs ?? transcriptStat.ctimeMs;
+    if (transcriptStart !== undefined && (stat.mtimeMs === undefined || stat.mtimeMs < transcriptStart))
+        return "stale";
+    return null;
 }
 function realPath(path, fs) {
     return fs.realpathSync?.(path) ?? nodeRealpathSync(path);

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/dist/types.d.ts

@@ -18,6 +18,9 @@ export type StopHookOutput = {
 };
 export type FileStat = {
     readonly size: number;
+    readonly mtimeMs?: number;
+    readonly birthtimeMs?: number;
+    readonly ctimeMs?: number;
     readonly isFile?: () => boolean;
     readonly isSymbolicLink?: () => boolean;
 };

package/packages/omo-codex/plugin/components/lazycodex-executor-verify/hooks/hooks.json

@@ -8,7 +8,7 @@
 						"type": "command",
 						"command": "node \"${PLUGIN_ROOT}/components/lazycodex-executor-verify/dist/cli.js\" hook subagent-stop",
 						"timeout": 10,
-						"statusMessage": "(OmO 5.0.0-beta.8) Verifying LazyCodex Executor Evidence"
+						"statusMessage": "(OmO 5.0.0-beta.81) Verifying LazyCodex Executor Evidence"
 					}
 				]
 			}