@trac3er/oh-my-god 2.0.3 → 2.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.agents/skills/omg/AGENTS.fragment.md +5 -0
- package/.agents/skills/omg/codex-mcp.toml +4 -0
- package/.agents/skills/omg/control-plane/SKILL.md +11 -0
- package/.agents/skills/omg/control-plane/openai.yaml +14 -0
- package/.agents/skills/omg/hook-governor/SKILL.md +11 -0
- package/.agents/skills/omg/hook-governor/openai.yaml +11 -0
- package/.agents/skills/omg/lsp-pack/SKILL.md +11 -0
- package/.agents/skills/omg/lsp-pack/openai.yaml +11 -0
- package/.agents/skills/omg/mcp-fabric/SKILL.md +11 -0
- package/.agents/skills/omg/mcp-fabric/openai.yaml +13 -0
- package/.agents/skills/omg/secure-worktree-pipeline/SKILL.md +11 -0
- package/.agents/skills/omg/secure-worktree-pipeline/openai.yaml +12 -0
- package/.claude-plugin/marketplace.json +3 -3
- package/.claude-plugin/plugin.json +1 -1
- package/.mcp.json +20 -4
- package/CHANGELOG.md +10 -0
- package/OMG-setup.sh +9 -3
- package/OMG_COMPAT_CONTRACT.md +92 -0
- package/README.md +24 -4
- package/SECURITY.md +6 -0
- package/commands/OMG:api-twin.md +22 -0
- package/commands/OMG:preflight.md +26 -0
- package/commands/OMG:security-check.md +28 -0
- package/dist/enterprise/bundle/.agents/skills/omg/AGENTS.fragment.md +5 -0
- package/dist/enterprise/bundle/.agents/skills/omg/codex-mcp.toml +4 -0
- package/dist/enterprise/bundle/.agents/skills/omg/control-plane/SKILL.md +11 -0
- package/dist/enterprise/bundle/.agents/skills/omg/control-plane/openai.yaml +14 -0
- package/dist/enterprise/bundle/.agents/skills/omg/hook-governor/SKILL.md +11 -0
- package/dist/enterprise/bundle/.agents/skills/omg/hook-governor/openai.yaml +11 -0
- package/dist/enterprise/bundle/.agents/skills/omg/lsp-pack/SKILL.md +11 -0
- package/dist/enterprise/bundle/.agents/skills/omg/lsp-pack/openai.yaml +11 -0
- package/dist/enterprise/bundle/.agents/skills/omg/mcp-fabric/SKILL.md +11 -0
- package/dist/enterprise/bundle/.agents/skills/omg/mcp-fabric/openai.yaml +13 -0
- package/dist/enterprise/bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md +11 -0
- package/dist/enterprise/bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml +12 -0
- package/dist/enterprise/bundle/.claude-plugin/marketplace.json +36 -0
- package/dist/enterprise/bundle/.claude-plugin/plugin.json +23 -0
- package/dist/enterprise/bundle/.mcp.json +40 -0
- package/dist/enterprise/bundle/OMG_COMPAT_CONTRACT.md +92 -0
- package/dist/enterprise/bundle/settings.json +366 -0
- package/dist/enterprise/manifest.json +99 -0
- package/dist/public/bundle/.agents/skills/omg/AGENTS.fragment.md +5 -0
- package/dist/public/bundle/.agents/skills/omg/codex-mcp.toml +4 -0
- package/dist/public/bundle/.agents/skills/omg/control-plane/SKILL.md +11 -0
- package/dist/public/bundle/.agents/skills/omg/control-plane/openai.yaml +14 -0
- package/dist/public/bundle/.agents/skills/omg/hook-governor/SKILL.md +11 -0
- package/dist/public/bundle/.agents/skills/omg/hook-governor/openai.yaml +11 -0
- package/dist/public/bundle/.agents/skills/omg/lsp-pack/SKILL.md +11 -0
- package/dist/public/bundle/.agents/skills/omg/lsp-pack/openai.yaml +11 -0
- package/dist/public/bundle/.agents/skills/omg/mcp-fabric/SKILL.md +11 -0
- package/dist/public/bundle/.agents/skills/omg/mcp-fabric/openai.yaml +13 -0
- package/dist/public/bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md +11 -0
- package/dist/public/bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml +12 -0
- package/dist/public/bundle/.claude-plugin/marketplace.json +36 -0
- package/dist/public/bundle/.claude-plugin/plugin.json +23 -0
- package/dist/public/bundle/.mcp.json +40 -0
- package/dist/public/bundle/OMG_COMPAT_CONTRACT.md +92 -0
- package/dist/public/bundle/settings.json +366 -0
- package/dist/public/manifest.json +99 -0
- package/hooks/policy_engine.py +38 -7
- package/hooks/post-write.py +1 -1
- package/hooks/prompt-enhancer.py +1 -1
- package/hooks/security_validators.py +75 -0
- package/hooks/setup_wizard.py +43 -8
- package/hooks/shadow_manager.py +22 -2
- package/package.json +1 -1
- package/plugins/README.md +3 -1
- package/plugins/advanced/commands/OMG:deep-plan.md +1 -1
- package/plugins/advanced/commands/OMG:security-review.md +10 -113
- package/plugins/advanced/commands/OMG:ship.md +1 -1
- package/plugins/advanced/plugin.json +1 -10
- package/plugins/core/plugin.json +25 -2
- package/pyproject.toml +1 -1
- package/runtime/adoption.py +1 -1
- package/runtime/api_twin.py +130 -0
- package/runtime/compat.py +21 -1
- package/runtime/contract_compiler.py +698 -0
- package/runtime/domain_packs.py +34 -0
- package/runtime/guide_assert.py +45 -0
- package/runtime/mcp_config_writers.py +147 -30
- package/runtime/omg_compat_contract_snapshot.json +8 -7
- package/runtime/omg_contract_snapshot.json +8 -7
- package/runtime/omg_mcp_server.py +205 -0
- package/runtime/preflight.py +52 -0
- package/runtime/providers/codex_provider.py +2 -12
- package/runtime/providers/gemini_provider.py +2 -21
- package/runtime/providers/kimi_provider.py +2 -21
- package/runtime/runtime_profile.py +61 -0
- package/runtime/security_check.py +347 -0
- package/runtime/subagent_dispatcher.py +117 -10
- package/runtime/team_router.py +3 -1
- package/runtime/untrusted_content.py +102 -0
- package/scripts/omg.py +174 -1
- package/settings.json +66 -18
- package/tools/python_repl.py +33 -3
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: omg-secure-worktree-pipeline
|
|
3
|
+
description: "Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs."
|
|
4
|
+
---
|
|
5
|
+
|
|
6
|
+
# OMG Secure Worktree Pipeline
|
|
7
|
+
|
|
8
|
+
- Channel: `enterprise`
|
|
9
|
+
- Execution modes: `automation, ephemeral_worktree, local_supervisor`
|
|
10
|
+
- MCP servers: `omg-control`
|
|
11
|
+
- Evidence outputs: `.omg/evidence/subagents/*.json`
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
name: omg-secure-worktree-pipeline
|
|
2
|
+
description: "Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs."
|
|
3
|
+
allow_implicit_invocation: false
|
|
4
|
+
metadata:
|
|
5
|
+
channel: enterprise
|
|
6
|
+
bundle_id: secure-worktree-pipeline
|
|
7
|
+
title: "OMG Secure Worktree Pipeline"
|
|
8
|
+
mcp_servers:
|
|
9
|
+
- omg-control
|
|
10
|
+
allowed_tools:
|
|
11
|
+
- "Read"
|
|
12
|
+
- "Bash(git:*)"
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "omg",
|
|
3
|
+
"description": "Marketplace metadata for the OMG Claude plugin",
|
|
4
|
+
"owner": {
|
|
5
|
+
"name": "trac3er00"
|
|
6
|
+
},
|
|
7
|
+
"metadata": {
|
|
8
|
+
"description": "OMG - Oh-My-God for Claude Code",
|
|
9
|
+
"version": "2.0.4",
|
|
10
|
+
"homepage": "https://github.com/trac3er00/OMG",
|
|
11
|
+
"repository": "https://github.com/trac3er00/OMG"
|
|
12
|
+
},
|
|
13
|
+
"plugins": [
|
|
14
|
+
{
|
|
15
|
+
"name": "omg",
|
|
16
|
+
"description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
|
|
17
|
+
"version": "2.0.4",
|
|
18
|
+
"source": "./",
|
|
19
|
+
"author": {
|
|
20
|
+
"name": "trac3er00"
|
|
21
|
+
},
|
|
22
|
+
"license": "MIT",
|
|
23
|
+
"category": "productivity",
|
|
24
|
+
"tags": [
|
|
25
|
+
"orchestration",
|
|
26
|
+
"automation",
|
|
27
|
+
"multi-agent",
|
|
28
|
+
"omg",
|
|
29
|
+
"codex",
|
|
30
|
+
"gemini",
|
|
31
|
+
"crazy-mode"
|
|
32
|
+
]
|
|
33
|
+
}
|
|
34
|
+
],
|
|
35
|
+
"version": "2.0.4"
|
|
36
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "omg",
|
|
3
|
+
"version": "2.0.4",
|
|
4
|
+
"description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
|
|
5
|
+
"author": {
|
|
6
|
+
"name": "trac3er00"
|
|
7
|
+
},
|
|
8
|
+
"repository": "https://github.com/trac3er00/OMG",
|
|
9
|
+
"homepage": "https://github.com/trac3er00/OMG",
|
|
10
|
+
"license": "MIT",
|
|
11
|
+
"keywords": [
|
|
12
|
+
"claude-code",
|
|
13
|
+
"plugin",
|
|
14
|
+
"orchestration",
|
|
15
|
+
"multi-agent",
|
|
16
|
+
"omg",
|
|
17
|
+
"codex",
|
|
18
|
+
"gemini",
|
|
19
|
+
"crazy-mode",
|
|
20
|
+
"escalation"
|
|
21
|
+
],
|
|
22
|
+
"mcpServers": "./.mcp.json"
|
|
23
|
+
}
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
{
|
|
2
|
+
"mcpServers": {
|
|
3
|
+
"context7": {
|
|
4
|
+
"command": "npx",
|
|
5
|
+
"args": [
|
|
6
|
+
"@upstash/context7-mcp@2.1.3"
|
|
7
|
+
]
|
|
8
|
+
},
|
|
9
|
+
"filesystem": {
|
|
10
|
+
"command": "npx",
|
|
11
|
+
"args": [
|
|
12
|
+
"@modelcontextprotocol/server-filesystem@2026.1.14",
|
|
13
|
+
"."
|
|
14
|
+
]
|
|
15
|
+
},
|
|
16
|
+
"websearch": {
|
|
17
|
+
"command": "npx",
|
|
18
|
+
"args": [
|
|
19
|
+
"@zhafron/mcp-web-search@1.2.2"
|
|
20
|
+
]
|
|
21
|
+
},
|
|
22
|
+
"chrome-devtools": {
|
|
23
|
+
"command": "npx",
|
|
24
|
+
"args": [
|
|
25
|
+
"chrome-devtools-mcp@0.19.0"
|
|
26
|
+
]
|
|
27
|
+
},
|
|
28
|
+
"omg-memory": {
|
|
29
|
+
"type": "http",
|
|
30
|
+
"url": "http://127.0.0.1:8765/mcp"
|
|
31
|
+
},
|
|
32
|
+
"omg-control": {
|
|
33
|
+
"command": "python3",
|
|
34
|
+
"args": [
|
|
35
|
+
"-m",
|
|
36
|
+
"runtime.omg_mcp_server"
|
|
37
|
+
]
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
}
|
|
@@ -0,0 +1,92 @@
|
|
|
1
|
+
---
|
|
2
|
+
title: OMG Production Control Plane
|
|
3
|
+
version: 2.0.4
|
|
4
|
+
canonical_hosts:
|
|
5
|
+
- claude
|
|
6
|
+
- codex
|
|
7
|
+
status: active
|
|
8
|
+
---
|
|
9
|
+
|
|
10
|
+
# OMG Production Control Plane
|
|
11
|
+
|
|
12
|
+
`OMG_COMPAT_CONTRACT.md` is the normative human-readable contract for OMG capability bundles. Machine-readable manifests in `registry/bundles/` are executable inputs and must remain version-locked to this document.
|
|
13
|
+
|
|
14
|
+
## metadata
|
|
15
|
+
|
|
16
|
+
Every bundle must declare `id`, `kind`, `version`, `title`, `description`, `hosts`, and `assets`.
|
|
17
|
+
|
|
18
|
+
## invocation_policy
|
|
19
|
+
|
|
20
|
+
Every bundle must declare whether it is user invocable, model invocable, and whether implicit invocation is allowed. Production bundles default to explicit invocation only.
|
|
21
|
+
|
|
22
|
+
## tool_policy
|
|
23
|
+
|
|
24
|
+
Every bundle must declare `side_effect_level` and host-specific allowed tools. Production policy protects `.omg/`, `.agents/`, `.codex/`, and `.claude/` as control-plane state.
|
|
25
|
+
|
|
26
|
+
## lifecycle_hooks
|
|
27
|
+
|
|
28
|
+
Canonical OMG events:
|
|
29
|
+
|
|
30
|
+
- `SessionStart`
|
|
31
|
+
- `SessionEnd`
|
|
32
|
+
- `PreToolUse`
|
|
33
|
+
- `PostToolUse`
|
|
34
|
+
- `PostToolUseFailure`
|
|
35
|
+
- `Stop`
|
|
36
|
+
- `PreCompact`
|
|
37
|
+
- `ConfigChange`
|
|
38
|
+
- `WorktreeCreate`
|
|
39
|
+
- `WorktreeRemove`
|
|
40
|
+
- `SubagentStart`
|
|
41
|
+
- `SubagentStop`
|
|
42
|
+
- `TaskCompleted`
|
|
43
|
+
|
|
44
|
+
Hosts compile native events where available and emulate the rest with OMG runtime wrappers.
|
|
45
|
+
|
|
46
|
+
## mcp_contract
|
|
47
|
+
|
|
48
|
+
Bundles may declare MCP servers, prompts, resources, and server instructions. `omg-control` is the primary stdio server. HTTP control-plane exposure is loopback-only and not a production launch dependency.
|
|
49
|
+
|
|
50
|
+
## lsp_contract
|
|
51
|
+
|
|
52
|
+
LSP packs declare supported languages, diagnostics expectations, and evidence outputs for post-edit checks.
|
|
53
|
+
|
|
54
|
+
## evidence_outputs
|
|
55
|
+
|
|
56
|
+
Bundles declare reproducible evidence artifacts under `.omg/evidence/` or `.omg/state/`. Release-ready bundles must emit deterministic outputs suitable for CI drift checks.
|
|
57
|
+
|
|
58
|
+
## execution_contract
|
|
59
|
+
|
|
60
|
+
Supported execution modes:
|
|
61
|
+
|
|
62
|
+
- `embedded`
|
|
63
|
+
- `local_supervisor`
|
|
64
|
+
- `automation`
|
|
65
|
+
- `ephemeral_worktree`
|
|
66
|
+
|
|
67
|
+
`local_supervisor` means a same-machine orchestrator driving Claude and Codex workers through local CLI or stdio MCP integration. Remote multi-tenant control planes are out of scope for this version.
|
|
68
|
+
|
|
69
|
+
## host_compilation_rules
|
|
70
|
+
|
|
71
|
+
Claude outputs compile to:
|
|
72
|
+
|
|
73
|
+
- `.claude-plugin/plugin.json`
|
|
74
|
+
- `.claude-plugin/marketplace.json`
|
|
75
|
+
- `.mcp.json`
|
|
76
|
+
- generated hook configuration consumed by `settings.json`
|
|
77
|
+
|
|
78
|
+
Codex outputs compile to:
|
|
79
|
+
|
|
80
|
+
- `.agents/skills/omg/<bundle>/SKILL.md`
|
|
81
|
+
- `.agents/skills/omg/<bundle>/openai.yaml`
|
|
82
|
+
- generated Codex MCP and rule fragments under `.agents/skills/omg/`
|
|
83
|
+
|
|
84
|
+
## roadmap_extensions
|
|
85
|
+
|
|
86
|
+
The contract reserves compilation anchors for:
|
|
87
|
+
|
|
88
|
+
- `omg.skill-compiler`
|
|
89
|
+
- `omg.hook-governor`
|
|
90
|
+
- `omg.mcp-fabric`
|
|
91
|
+
- `omg.lsp-pack`
|
|
92
|
+
- `omg.secure-worktree-pipeline`
|
|
@@ -0,0 +1,366 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json.schemastore.org/claude-code-settings.json",
|
|
3
|
+
"_comment": "OMG 2.0.4 - project-level config with hook registrations, presets, and feature flags.",
|
|
4
|
+
"permissions": {
|
|
5
|
+
"allow": [
|
|
6
|
+
"Agent",
|
|
7
|
+
"Read",
|
|
8
|
+
"Write",
|
|
9
|
+
"Edit",
|
|
10
|
+
"MultiEdit",
|
|
11
|
+
"Grep",
|
|
12
|
+
"Glob",
|
|
13
|
+
"Bash(ls *)",
|
|
14
|
+
"Bash(cat *)",
|
|
15
|
+
"Bash(head *)",
|
|
16
|
+
"Bash(tail *)",
|
|
17
|
+
"Bash(wc *)",
|
|
18
|
+
"Bash(grep *)",
|
|
19
|
+
"Bash(find *)",
|
|
20
|
+
"Bash(which *)",
|
|
21
|
+
"Bash(echo *)",
|
|
22
|
+
"Bash(printf *)",
|
|
23
|
+
"Bash(pwd)",
|
|
24
|
+
"Bash(whoami)",
|
|
25
|
+
"Bash(date *)",
|
|
26
|
+
"Bash(basename *)",
|
|
27
|
+
"Bash(dirname *)",
|
|
28
|
+
"Bash(realpath *)",
|
|
29
|
+
"Bash(stat *)",
|
|
30
|
+
"Bash(file *)",
|
|
31
|
+
"Bash(diff *)",
|
|
32
|
+
"Bash(sort *)",
|
|
33
|
+
"Bash(uniq *)",
|
|
34
|
+
"Bash(awk *)",
|
|
35
|
+
"Bash(sed *)",
|
|
36
|
+
"Bash(tr *)",
|
|
37
|
+
"Bash(cut *)",
|
|
38
|
+
"Bash(tee *)",
|
|
39
|
+
"Bash(xargs *)",
|
|
40
|
+
"Bash(jq *)",
|
|
41
|
+
"Bash(yq *)",
|
|
42
|
+
"Bash(tree *)",
|
|
43
|
+
"Bash(du *)",
|
|
44
|
+
"Bash(df *)",
|
|
45
|
+
"Bash(type *)",
|
|
46
|
+
"Bash(command *)",
|
|
47
|
+
"Bash(test *)",
|
|
48
|
+
"Bash([ *)",
|
|
49
|
+
"Bash(mkdir *)",
|
|
50
|
+
"Bash(touch *)",
|
|
51
|
+
"Bash(ln *)",
|
|
52
|
+
"Bash(cp *)",
|
|
53
|
+
"Bash(mv *)",
|
|
54
|
+
"Bash(git *)",
|
|
55
|
+
"Bash(npm *)",
|
|
56
|
+
"Bash(npx *)",
|
|
57
|
+
"Bash(yarn *)",
|
|
58
|
+
"Bash(pnpm *)",
|
|
59
|
+
"Bash(bun *)",
|
|
60
|
+
"Bash(pip *)",
|
|
61
|
+
"Bash(pip3 *)",
|
|
62
|
+
"Bash(uv *)",
|
|
63
|
+
"Bash(go *)",
|
|
64
|
+
"Bash(cargo *)",
|
|
65
|
+
"Bash(rustc *)",
|
|
66
|
+
"Bash(tsc *)",
|
|
67
|
+
"Bash(eslint *)",
|
|
68
|
+
"Bash(prettier *)",
|
|
69
|
+
"Bash(mypy *)",
|
|
70
|
+
"Bash(ruff *)",
|
|
71
|
+
"Bash(ruff format *)",
|
|
72
|
+
"Bash(pytest *)",
|
|
73
|
+
"Bash(jest *)",
|
|
74
|
+
"Bash(vitest *)",
|
|
75
|
+
"Bash(shellcheck *)",
|
|
76
|
+
"Bash(terraform validate *)",
|
|
77
|
+
"Bash(terraform fmt *)",
|
|
78
|
+
"Bash(terraform plan *)",
|
|
79
|
+
"Bash(terraform show *)",
|
|
80
|
+
"Bash(terraform state list *)",
|
|
81
|
+
"Bash(tmux *)",
|
|
82
|
+
"Bash(zip *)",
|
|
83
|
+
"Bash(unzip *)",
|
|
84
|
+
"Bash(tar *)",
|
|
85
|
+
"Bash(gzip *)",
|
|
86
|
+
"Bash(rg *)",
|
|
87
|
+
"Bash(gh *)"
|
|
88
|
+
],
|
|
89
|
+
"ask": [
|
|
90
|
+
"Bash(curl *)",
|
|
91
|
+
"Bash(wget *)",
|
|
92
|
+
"Bash(ssh *)",
|
|
93
|
+
"Bash(scp *)",
|
|
94
|
+
"Bash(rsync *)",
|
|
95
|
+
"Bash(rm *)",
|
|
96
|
+
"Bash(sudo *)",
|
|
97
|
+
"Bash(kill *)",
|
|
98
|
+
"Bash(pkill *)",
|
|
99
|
+
"Bash(systemctl *)",
|
|
100
|
+
"Bash(reboot)",
|
|
101
|
+
"Bash(shutdown *)",
|
|
102
|
+
"Bash(dd *)",
|
|
103
|
+
"Bash(fdisk *)",
|
|
104
|
+
"Bash(mkfs *)",
|
|
105
|
+
"Bash(mount *)",
|
|
106
|
+
"Bash(umount *)",
|
|
107
|
+
"Bash(iptables *)",
|
|
108
|
+
"Bash(ufw *)",
|
|
109
|
+
"Bash(terraform apply *)",
|
|
110
|
+
"Bash(terraform destroy *)",
|
|
111
|
+
"Bash(terraform import *)",
|
|
112
|
+
"Bash(env *)",
|
|
113
|
+
"Bash(node *)",
|
|
114
|
+
"Bash(python *)",
|
|
115
|
+
"Bash(python3 *)",
|
|
116
|
+
"Bash(chmod *)",
|
|
117
|
+
"Bash(chown *)",
|
|
118
|
+
"Bash(docker *)",
|
|
119
|
+
"Bash(docker-compose *)",
|
|
120
|
+
"Bash(kubectl get *)",
|
|
121
|
+
"Bash(kubectl describe *)",
|
|
122
|
+
"Bash(kubectl logs *)",
|
|
123
|
+
"Bash(kubectl apply *)",
|
|
124
|
+
"Bash(kubectl exec *)",
|
|
125
|
+
"Bash(kubectl edit *)",
|
|
126
|
+
"Bash(kubectl patch *)",
|
|
127
|
+
"Bash(kubectl rollout *)",
|
|
128
|
+
"Bash(kubectl scale *)",
|
|
129
|
+
"Bash(kubectl port-forward *)",
|
|
130
|
+
"Bash(kubectl config *)",
|
|
131
|
+
"Bash(kubectl top *)",
|
|
132
|
+
"Bash(kubectl delete *)"
|
|
133
|
+
],
|
|
134
|
+
"deny": [
|
|
135
|
+
"Bash(rm -rf /)",
|
|
136
|
+
"Bash(rm -rf /*)",
|
|
137
|
+
"Bash(rm -rf ~)",
|
|
138
|
+
"Bash(rm -rf ~/*)",
|
|
139
|
+
"Bash(sudo rm *)",
|
|
140
|
+
"Bash(sudo dd *)",
|
|
141
|
+
"Bash(sudo mkfs *)",
|
|
142
|
+
"Bash(:(){ :|:& };:)",
|
|
143
|
+
"Read(./.env)",
|
|
144
|
+
"Read(./secrets/**)",
|
|
145
|
+
"Read(**/.env)",
|
|
146
|
+
"Read(**/secrets/**)",
|
|
147
|
+
"Read(**/.aws/credentials)",
|
|
148
|
+
"Read(**/.aws/config)",
|
|
149
|
+
"Read(**/.kube/config)",
|
|
150
|
+
"Read(**/.ssh/*)",
|
|
151
|
+
"Read(**/*.pem)",
|
|
152
|
+
"Read(**/*.key)",
|
|
153
|
+
"Read(**/*.p12)",
|
|
154
|
+
"Read(**/*.pfx)",
|
|
155
|
+
"Read(**/.npmrc)",
|
|
156
|
+
"Read(**/.pypirc)",
|
|
157
|
+
"Read(**/.netrc)",
|
|
158
|
+
"Read(**/id_rsa*)",
|
|
159
|
+
"Read(**/id_ed25519*)",
|
|
160
|
+
"Read(**/id_ecdsa*)",
|
|
161
|
+
"Write(./.env)",
|
|
162
|
+
"Read(./.env.*)",
|
|
163
|
+
"Read(**/.env.*)",
|
|
164
|
+
"Write(./.env.*)",
|
|
165
|
+
"Write(./secrets/**)"
|
|
166
|
+
]
|
|
167
|
+
},
|
|
168
|
+
"hooks": {
|
|
169
|
+
"SessionStart": [
|
|
170
|
+
{
|
|
171
|
+
"hooks": [
|
|
172
|
+
{
|
|
173
|
+
"type": "command",
|
|
174
|
+
"command": "python3 \"$HOME/.claude/hooks/session-start.py\"",
|
|
175
|
+
"timeout": 10
|
|
176
|
+
}
|
|
177
|
+
]
|
|
178
|
+
}
|
|
179
|
+
],
|
|
180
|
+
"SessionEnd": [
|
|
181
|
+
{
|
|
182
|
+
"hooks": [
|
|
183
|
+
{
|
|
184
|
+
"type": "command",
|
|
185
|
+
"command": "python3 \"$HOME/.claude/hooks/session-end-capture.py\""
|
|
186
|
+
}
|
|
187
|
+
]
|
|
188
|
+
}
|
|
189
|
+
],
|
|
190
|
+
"PreToolUse": [
|
|
191
|
+
{
|
|
192
|
+
"hooks": [
|
|
193
|
+
{
|
|
194
|
+
"type": "command",
|
|
195
|
+
"command": "python3 \"$HOME/.claude/hooks/firewall.py\"",
|
|
196
|
+
"timeout": 10
|
|
197
|
+
}
|
|
198
|
+
],
|
|
199
|
+
"matcher": "Bash"
|
|
200
|
+
},
|
|
201
|
+
{
|
|
202
|
+
"hooks": [
|
|
203
|
+
{
|
|
204
|
+
"type": "command",
|
|
205
|
+
"command": "python3 \"$HOME/.claude/hooks/secret-guard.py\"",
|
|
206
|
+
"timeout": 10
|
|
207
|
+
}
|
|
208
|
+
],
|
|
209
|
+
"matcher": "Read|Write|Edit|MultiEdit"
|
|
210
|
+
},
|
|
211
|
+
{
|
|
212
|
+
"hooks": [
|
|
213
|
+
{
|
|
214
|
+
"type": "command",
|
|
215
|
+
"command": "python3 \"$HOME/.claude/hooks/pre-tool-inject.py\""
|
|
216
|
+
}
|
|
217
|
+
],
|
|
218
|
+
"matcher": ""
|
|
219
|
+
}
|
|
220
|
+
],
|
|
221
|
+
"PostToolUse": [
|
|
222
|
+
{
|
|
223
|
+
"hooks": [
|
|
224
|
+
{
|
|
225
|
+
"type": "command",
|
|
226
|
+
"command": "python3 \"$HOME/.claude/hooks/circuit-breaker.py\"",
|
|
227
|
+
"timeout": 10
|
|
228
|
+
}
|
|
229
|
+
],
|
|
230
|
+
"matcher": "Bash"
|
|
231
|
+
},
|
|
232
|
+
{
|
|
233
|
+
"hooks": [
|
|
234
|
+
{
|
|
235
|
+
"type": "command",
|
|
236
|
+
"command": "python3 \"$HOME/.claude/hooks/tool-ledger.py\"",
|
|
237
|
+
"timeout": 10
|
|
238
|
+
}
|
|
239
|
+
],
|
|
240
|
+
"matcher": "Write|Edit|MultiEdit"
|
|
241
|
+
},
|
|
242
|
+
{
|
|
243
|
+
"hooks": [
|
|
244
|
+
{
|
|
245
|
+
"type": "command",
|
|
246
|
+
"command": "python3 \"$HOME/.claude/hooks/test_generator_hook.py\"",
|
|
247
|
+
"timeout": 10
|
|
248
|
+
}
|
|
249
|
+
],
|
|
250
|
+
"matcher": "Write|Edit|MultiEdit"
|
|
251
|
+
},
|
|
252
|
+
{
|
|
253
|
+
"hooks": [
|
|
254
|
+
{
|
|
255
|
+
"type": "command",
|
|
256
|
+
"command": "python3 \"$HOME/.claude/hooks/budget_governor.py\"",
|
|
257
|
+
"timeout": 10
|
|
258
|
+
}
|
|
259
|
+
],
|
|
260
|
+
"matcher": ""
|
|
261
|
+
}
|
|
262
|
+
],
|
|
263
|
+
"PostToolUseFailure": [
|
|
264
|
+
{
|
|
265
|
+
"hooks": [
|
|
266
|
+
{
|
|
267
|
+
"type": "command",
|
|
268
|
+
"command": "python3 \"$HOME/.claude/hooks/post-tool-failure.py\""
|
|
269
|
+
}
|
|
270
|
+
]
|
|
271
|
+
}
|
|
272
|
+
],
|
|
273
|
+
"Stop": [
|
|
274
|
+
{
|
|
275
|
+
"hooks": [
|
|
276
|
+
{
|
|
277
|
+
"type": "command",
|
|
278
|
+
"command": "python3 \"$HOME/.claude/hooks/stop_dispatcher.py\"",
|
|
279
|
+
"timeout": 90
|
|
280
|
+
}
|
|
281
|
+
],
|
|
282
|
+
"matcher": ""
|
|
283
|
+
}
|
|
284
|
+
]
|
|
285
|
+
},
|
|
286
|
+
"_omg": {
|
|
287
|
+
"_version": "2.0.4",
|
|
288
|
+
"preset": "safe",
|
|
289
|
+
"default_mode": "ulw+ralph",
|
|
290
|
+
"vision_auto": true,
|
|
291
|
+
"false_fix_detection": true,
|
|
292
|
+
"cost_budget": {
|
|
293
|
+
"session_limit_usd": 5.0,
|
|
294
|
+
"thresholds": [
|
|
295
|
+
50,
|
|
296
|
+
80,
|
|
297
|
+
95
|
|
298
|
+
],
|
|
299
|
+
"pricing": {
|
|
300
|
+
"input_per_mtok": 3.0,
|
|
301
|
+
"output_per_mtok": 15.0
|
|
302
|
+
}
|
|
303
|
+
},
|
|
304
|
+
"context_budget": {
|
|
305
|
+
"session_start_max_chars": 2000,
|
|
306
|
+
"prompt_enhancer_max_chars": 800,
|
|
307
|
+
"prompt_enhancer_max_injections": 10,
|
|
308
|
+
"full_turns": 10,
|
|
309
|
+
"summarize_turns": 50,
|
|
310
|
+
"batch_size": 21
|
|
311
|
+
},
|
|
312
|
+
"credentials": {
|
|
313
|
+
"rotation_schedule_days": 90,
|
|
314
|
+
"expiry_warning_days": 14
|
|
315
|
+
},
|
|
316
|
+
"features": {
|
|
317
|
+
"memory": false,
|
|
318
|
+
"ralph_loop": true,
|
|
319
|
+
"planning_enforcement": true,
|
|
320
|
+
"compound_learning": false,
|
|
321
|
+
"simplifier": true,
|
|
322
|
+
"model_routing": true,
|
|
323
|
+
"agent_registry": true,
|
|
324
|
+
"circuit_breaker_v2": true,
|
|
325
|
+
"cognitive_modes": true,
|
|
326
|
+
"agent_routing": true,
|
|
327
|
+
"SETUP": false,
|
|
328
|
+
"SETUP_WIZARD": false,
|
|
329
|
+
"MEMORY_SERVER": false,
|
|
330
|
+
"MEMORY_AUTOSTART": false,
|
|
331
|
+
"COST_TRACKING": false,
|
|
332
|
+
"GIT_WORKFLOW": false,
|
|
333
|
+
"SESSION_ANALYTICS": false,
|
|
334
|
+
"TEST_GENERATION": false,
|
|
335
|
+
"DEP_HEALTH": false,
|
|
336
|
+
"CODEBASE_VIZ": false,
|
|
337
|
+
"CONTEXT_MANAGER": false
|
|
338
|
+
},
|
|
339
|
+
"generated": {
|
|
340
|
+
"contract_version": "2.0.4",
|
|
341
|
+
"channel": "public",
|
|
342
|
+
"required_bundles": [
|
|
343
|
+
"control-plane",
|
|
344
|
+
"hook-governor",
|
|
345
|
+
"mcp-fabric",
|
|
346
|
+
"lsp-pack",
|
|
347
|
+
"secure-worktree-pipeline"
|
|
348
|
+
],
|
|
349
|
+
"protected_paths": [
|
|
350
|
+
".omg/**",
|
|
351
|
+
".agents/**",
|
|
352
|
+
".codex/**",
|
|
353
|
+
".claude/**"
|
|
354
|
+
],
|
|
355
|
+
"emulated_events": [
|
|
356
|
+
"PreCompact",
|
|
357
|
+
"ConfigChange",
|
|
358
|
+
"WorktreeCreate",
|
|
359
|
+
"WorktreeRemove",
|
|
360
|
+
"SubagentStart",
|
|
361
|
+
"SubagentStop",
|
|
362
|
+
"TaskCompleted"
|
|
363
|
+
]
|
|
364
|
+
}
|
|
365
|
+
}
|
|
366
|
+
}
|
|
@@ -0,0 +1,99 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schema": "OmgCompiledArtifactManifest",
|
|
3
|
+
"channel": "enterprise",
|
|
4
|
+
"contract_version": "2.0.4",
|
|
5
|
+
"artifacts": [
|
|
6
|
+
{
|
|
7
|
+
"path": "bundle/.agents/skills/omg/AGENTS.fragment.md",
|
|
8
|
+
"sha256": "ac0d35aa2a8d27a246627c7e9bbbe8cab5a50b7b25b2a16bb451f4c79f263d7d"
|
|
9
|
+
},
|
|
10
|
+
{
|
|
11
|
+
"path": "bundle/.agents/skills/omg/codex-mcp.toml",
|
|
12
|
+
"sha256": "a56de208a369a2b318d2e66e150eef4cba1fac1ecf32bda6db1a1e4b65db7311"
|
|
13
|
+
},
|
|
14
|
+
{
|
|
15
|
+
"path": "bundle/.agents/skills/omg/control-plane/SKILL.md",
|
|
16
|
+
"sha256": "e3a53f89e15018895691657eb3962f942558475d6faaae760e7d48774ce6a47e"
|
|
17
|
+
},
|
|
18
|
+
{
|
|
19
|
+
"path": "bundle/.agents/skills/omg/control-plane/openai.yaml",
|
|
20
|
+
"sha256": "e7ed793f93c54683ef34e7f43b5c0d9409ad203b77f26cda699a448a13037e6c"
|
|
21
|
+
},
|
|
22
|
+
{
|
|
23
|
+
"path": "bundle/.agents/skills/omg/hook-governor/SKILL.md",
|
|
24
|
+
"sha256": "7c745315ed02595fe0f6c927118dae49ddcb7a412ddff0c06cb0973f1d7b77ca"
|
|
25
|
+
},
|
|
26
|
+
{
|
|
27
|
+
"path": "bundle/.agents/skills/omg/hook-governor/openai.yaml",
|
|
28
|
+
"sha256": "a7c54e5933bcb7eddc1e0e901ca05174f9cd37065f3195d97839733a43bea30b"
|
|
29
|
+
},
|
|
30
|
+
{
|
|
31
|
+
"path": "bundle/.agents/skills/omg/lsp-pack/SKILL.md",
|
|
32
|
+
"sha256": "d5c6773fa614fe6747f205283a82374b2167d1d9b32e7fd75f429072fadb8a3a"
|
|
33
|
+
},
|
|
34
|
+
{
|
|
35
|
+
"path": "bundle/.agents/skills/omg/lsp-pack/openai.yaml",
|
|
36
|
+
"sha256": "6e99216f7b228e300a16ac3cbe4ae4fcbba6082b622387e6087b76a6cb76d3dc"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"path": "bundle/.agents/skills/omg/mcp-fabric/SKILL.md",
|
|
40
|
+
"sha256": "fc17847f79397dba144ddbb40a8ad3207494c3a7f0b2dde1dc55dce2e5b117a9"
|
|
41
|
+
},
|
|
42
|
+
{
|
|
43
|
+
"path": "bundle/.agents/skills/omg/mcp-fabric/openai.yaml",
|
|
44
|
+
"sha256": "2165ff298b110ef7fb6c42b6b539f8397b8772218de3fa2b8c2332fdd8db6d48"
|
|
45
|
+
},
|
|
46
|
+
{
|
|
47
|
+
"path": "bundle/.agents/skills/omg/secure-worktree-pipeline/SKILL.md",
|
|
48
|
+
"sha256": "a11292d0122844f7c185e21943d3a39ef3213cf5348f40f006c8fdc8b62f252f"
|
|
49
|
+
},
|
|
50
|
+
{
|
|
51
|
+
"path": "bundle/.agents/skills/omg/secure-worktree-pipeline/openai.yaml",
|
|
52
|
+
"sha256": "c766a383969893fd29fcd1da712e29e0422709a7b9f665e53e1ca8187c2bd207"
|
|
53
|
+
},
|
|
54
|
+
{
|
|
55
|
+
"path": "bundle/.claude-plugin/marketplace.json",
|
|
56
|
+
"sha256": "cf1a17ce1e8db6814209126a79d5a05d057f354ef3ee49a74da4f18f2ec04597"
|
|
57
|
+
},
|
|
58
|
+
{
|
|
59
|
+
"path": "bundle/.claude-plugin/plugin.json",
|
|
60
|
+
"sha256": "6ad6db257f9e46528d94760ef895b6ffc87c78a8ec5ca05b430a46b46ee3dc08"
|
|
61
|
+
},
|
|
62
|
+
{
|
|
63
|
+
"path": "bundle/.mcp.json",
|
|
64
|
+
"sha256": "d8249fdd26e0df0a9b7cabcb34256d7e33578e1d0e9878cc91d43452a10f7c24"
|
|
65
|
+
},
|
|
66
|
+
{
|
|
67
|
+
"path": "bundle/OMG_COMPAT_CONTRACT.md",
|
|
68
|
+
"sha256": "fa91ec0dbff58d543df5a9e3a86a1fe1629104a383d4e1bd440a36cb5522189c"
|
|
69
|
+
},
|
|
70
|
+
{
|
|
71
|
+
"path": "bundle/registry/bundles/control-plane.yaml",
|
|
72
|
+
"sha256": "bb58e1d21a7f545548da10e7f9b83898d6ece8010a921b66d0f94a08c8ae0d8e"
|
|
73
|
+
},
|
|
74
|
+
{
|
|
75
|
+
"path": "bundle/registry/bundles/hook-governor.yaml",
|
|
76
|
+
"sha256": "93b13ea1e2098328349d33373595144f2f863274548bef47fd266d6cab210260"
|
|
77
|
+
},
|
|
78
|
+
{
|
|
79
|
+
"path": "bundle/registry/bundles/lsp-pack.yaml",
|
|
80
|
+
"sha256": "6c2ca235bdca31635d89c428c48a35a5414250e98c7349cd67ba900870203d9a"
|
|
81
|
+
},
|
|
82
|
+
{
|
|
83
|
+
"path": "bundle/registry/bundles/mcp-fabric.yaml",
|
|
84
|
+
"sha256": "2cb71fc331820b19c60c3275f521fb49d099ed7c31539fab9959a55d29ae0fe9"
|
|
85
|
+
},
|
|
86
|
+
{
|
|
87
|
+
"path": "bundle/registry/bundles/secure-worktree-pipeline.yaml",
|
|
88
|
+
"sha256": "b93e752cef8b5cbc76fb7aa32ebe80d30ce390193183bb0c79dedfa1ce89c4e9"
|
|
89
|
+
},
|
|
90
|
+
{
|
|
91
|
+
"path": "bundle/registry/omg-capability.schema.json",
|
|
92
|
+
"sha256": "b5a52c03c6d42c0ce0297a2d8c22f34ed1075062cc5434d3a85b9f4fa6a0f121"
|
|
93
|
+
},
|
|
94
|
+
{
|
|
95
|
+
"path": "bundle/settings.json",
|
|
96
|
+
"sha256": "60fb4f9e2bedd4d67af41a2e442ef37c9a89cd2077bf6dfe40761eec01586824"
|
|
97
|
+
}
|
|
98
|
+
]
|
|
99
|
+
}
|