@agentikos/omega-os 0.19.7 → 0.19.9

package/bootstrap/lib/common.sh

@@ -234,23 +234,28 @@ ask() {
 
 if [ -t 1 ]; then
   C_BOLD=$'\033[1m'
-  C_DIM=$'\033[2m'
-  # Claude-Code brand orange (#D97757) in 24-bit truecolor. Every modern
-  # macOS/Linux terminal (iTerm2, Termius, kitty, alacritty, gnome-terminal,
-  # WezTerm) supports truecolor. We expose the legacy C_CYAN/etc names
-  # below for back-compat — the banner + boxes use C_ORANGE.
-  C_ORANGE=$'\033[38;2;217;119;87m'
-  C_CYAN="$C_ORANGE"
-  C_GREEN=$'\033[32m'
-  C_YELLOW=$'\033[33m'
-  C_RED=$'\033[31m'
-  C_MAGENTA=$'\033[35m'
-  C_BLUE=$'\033[34m'
+  # Claude Code light theme — derived from tweakcn.com/r/themes/claude.json.
+  # All truecolor (24-bit) — every modern terminal (iTerm2, Termius, kitty,
+  # alacritty, gnome-terminal, WezTerm) supports it.
+  C_ORANGE=$'\033[38;2;217;119;87m'   # #D97757 — Claude primary (brand)
+  C_MUTED=$'\033[38;2;136;131;122m'   # #88837A — warm gray (muted-foreground)
+  C_BORDER=$'\033[38;2;168;162;158m'  # #A8A29E — soft border line
+  C_INK=$'\033[38;2;61;57;41m'        # #3D3929 — body text (used sparingly,
+                                       # only on light terminals; on dark BG
+                                       # we fall back to default fg)
+  C_DIM="$C_MUTED"                    # alias — "dim" now means warm gray
+  C_CYAN="$C_ORANGE"                  # back-compat alias for old printf calls
+  C_GREEN=$'\033[38;2;132;161;130m'   # muted sage — used only for "ok"
+  C_YELLOW=$'\033[38;2;201;161;91m'   # muted amber — used only for "warn"
+  C_RED=$'\033[38;2;188;102;88m'      # muted brick — used only for "err"
+  C_MAGENTA=$'\033[38;2;156;120;162m'
+  C_BLUE=$'\033[38;2;120;142;168m'
 else
   # Non-TTY (CI, --non-interactive, pipe) — make every colour var safe
   # to reference. Without these the install.sh plan-mode block crashes
   # on `set -u` when running headless.
-  C_BOLD=''; C_DIM=''; C_ORANGE=''; C_CYAN=''; C_GREEN=''; C_YELLOW=''
+  C_BOLD=''; C_DIM=''; C_MUTED=''; C_BORDER=''; C_INK=''
+  C_ORANGE=''; C_CYAN=''; C_GREEN=''; C_YELLOW=''
   C_RED=''; C_MAGENTA=''; C_BLUE=''
 fi
 

package/bootstrap/lib/steps.sh

@@ -32,6 +32,47 @@ step_system_deps() {
     brew) brew install $pkgs newt 2>/dev/null || true ;;
     *)    err "install manually: $pkgs (and whiptail/newt for the menu)"; return 1 ;;
   esac
+
+  # PyYAML — required by every install-side helper that reads the manifest
+  # or audit YAMLs (bootstrap/lib/llm-clis.py, manifest-helpers.py, audit
+  # generator). apt/dnf already deliver it via the system package above.
+  #
+  # macOS Tahoe / Sonoma ship externally-managed Pythons (PEP 668) AND
+  # often deny `pip install --user --break-system-packages` for security
+  # policy reasons. The 100% reliable path is a dedicated venv that we
+  # own, isolated from system Python rules.
+  #
+  # We prepend the venv's bin/ to PATH so every subsequent `python3 ...`
+  # call (37 sites across steps.sh) automatically uses this isolated
+  # Python WITHOUT touching the user's system Python or site-packages.
+  local installer_venv="$STATE_DIR/installer-venv"
+  if ! python3 -c "import yaml" 2>/dev/null; then
+    info "creating dedicated installer venv (PEP-668 / Tahoe-safe path)"
+    if [ ! -f "$installer_venv/bin/python3" ]; then
+      if ! python3 -m venv "$installer_venv" 2>>"$LOG_FILE"; then
+        err "python3 -m venv failed — see $LOG_FILE"
+        err "manual fix:  ensure 'ensurepip' is available in your python3"
+        return 1
+      fi
+    fi
+    if ! "$installer_venv/bin/pip" install --quiet pyyaml 2>>"$LOG_FILE"; then
+      err "pip install pyyaml inside venv failed — see $LOG_FILE"
+      err "diagnose:   $installer_venv/bin/pip install pyyaml"
+      return 1
+    fi
+    ok "installer venv ready: $installer_venv (python3 + pyyaml)"
+  fi
+  # PATH prepend — persists for the rest of install.sh because steps are
+  # called as bash functions in the SAME shell. We do this on every run,
+  # not only when we just created the venv, so a resumed install with a
+  # pre-existing venv still gets `python3 -c "import yaml"` resolving here.
+  if [ -x "$installer_venv/bin/python3" ]; then
+    export PATH="$installer_venv/bin:$PATH"
+    if ! python3 -c "import yaml" 2>/dev/null; then
+      err "venv python3 on PATH but yaml not importable — corrupted venv?"
+      return 1
+    fi
+  fi
   # age (optional, non-fatal) — powers the encrypted vault. If missing, the
   # vault transparently falls back to chmod 600 plaintext and the doctor
   # flags it.

package/install.sh

@@ -86,6 +86,14 @@ STATE_FILE="$STATE_DIR/.install-state"
 LOG_FILE="$STATE_DIR/logs/install.log"
 mkdir -p "$STATE_DIR/logs"
 
+# Installer-venv guard — if a previous run created the PEP-668-safe venv,
+# prepend it to PATH NOW so subsequent steps that get skipped as
+# "already done" (step 10) still pick up its python3 with pyyaml. Without
+# this, a resumed install skips step 10 → step 15 hits "no module yaml".
+if [ -x "$STATE_DIR/installer-venv/bin/python3" ]; then
+  export PATH="$STATE_DIR/installer-venv/bin:$PATH"
+fi
+
 # Bundled version — used to detect state drift across upgrades. We read it
 # from the SSOT VERSION file shipped in the package, falling back to the
 # engine's pyproject.toml so a partially-installed system still works.

package/omega/Agentik_Engine/omega_engine/__init__.py

@@ -188,7 +188,7 @@ from omega_engine.genesis import (
 )
 from omega_engine import plan as plan_v7
 
-__version__ = "0.19.7"
+__version__ = "0.19.9"
 
 __all__ = [
     "__version__",

package/omega/Agentik_Engine/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "omega-engine"
-version = "0.19.7"
+version = "0.19.9"
 description = "The Omega OS orchestration engine — event-sourced, verified-completion agent graphs."
 readme = "README.md"
 requires-python = ">=3.11"

package/omega/Agentik_SSOT/VERSION

@@ -1 +1 @@
-0.19.7
+0.19.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentikos/omega-os",
-  "version": "0.19.7",
+  "version": "0.19.9",
   "description": "Omega OS — installable agentic operating system with verified-completion orchestration. Event-sourced engine, 8-block rack, autonomous agents, MCP.",
   "bin": {
     "omega-os": "bin/omega-os.js"