@trac3er/oh-my-god 2.0.3 → 2.0.5

package/hooks/security_validators.py

@@ -0,0 +1,75 @@
+"""Shared validation helpers for security-sensitive filesystem and config writes."""
+from __future__ import annotations
+
+import re
+from pathlib import Path
+from urllib.parse import urlparse
+
+
+_OPAQUE_IDENTIFIER_RE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]*$")
+_SERVER_NAME_RE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9_-]*$")
+
+
+def validate_opaque_identifier(value: str, field_name: str, max_length: int = 64) -> str:
+    """Validate an opaque identifier used in filenames or paths."""
+    if not isinstance(value, str):
+        raise ValueError(f"Invalid {field_name}: must be a string")
+
+    normalized = value.strip()
+    if not normalized:
+        raise ValueError(f"Invalid {field_name}: value is required")
+    if len(normalized) > max_length:
+        raise ValueError(f"Invalid {field_name}: exceeds {max_length} characters")
+    if ".." in normalized or not _OPAQUE_IDENTIFIER_RE.fullmatch(normalized):
+        raise ValueError(
+            f"Invalid {field_name}: use only ASCII letters, numbers, dot, underscore, and dash"
+        )
+    return normalized
+
+
+def ensure_path_within_dir(base_dir: str | Path, candidate_path: str | Path) -> str:
+    """Return a resolved path and reject traversal outside the intended base directory."""
+    base = Path(base_dir).resolve(strict=False)
+    candidate = Path(candidate_path).resolve(strict=False)
+    try:
+        candidate.relative_to(base)
+    except ValueError as exc:
+        raise ValueError(f"Resolved path escapes base directory: {candidate}") from exc
+    return str(candidate)
+
+
+def validate_server_name(server_name: str, max_length: int = 64) -> str:
+    """Validate an MCP server identifier suitable for JSON keys and TOML table names."""
+    if not isinstance(server_name, str):
+        raise ValueError("Invalid server_name: must be a string")
+
+    normalized = server_name.strip()
+    if not normalized:
+        raise ValueError("Invalid server_name: value is required")
+    if len(normalized) > max_length:
+        raise ValueError(f"Invalid server_name: exceeds {max_length} characters")
+    if not _SERVER_NAME_RE.fullmatch(normalized):
+        raise ValueError("Invalid server_name: use only ASCII letters, numbers, underscore, and dash")
+    return normalized
+
+
+def validate_server_url(server_url: str) -> str:
+    """Validate an MCP server URL and reject newline/control injection."""
+    if not isinstance(server_url, str):
+        raise ValueError("Invalid server_url: must be a string")
+
+    normalized = server_url.strip()
+    if not normalized:
+        raise ValueError("Invalid server_url: value is required")
+    if "\n" in normalized or "\r" in normalized:
+        raise ValueError("Invalid server_url: newline characters are not allowed")
+
+    parsed = urlparse(normalized)
+    if parsed.scheme not in {"http", "https"} or not parsed.netloc:
+        raise ValueError("Invalid server_url: must be an http or https URL")
+    return normalized
+
+
+def toml_quote_string(value: str) -> str:
+    """Escape TOML basic string content."""
+    return value.replace("\\", "\\\\").replace('"', '\\"')

package/hooks/setup_wizard.py

@@ -22,9 +22,13 @@ if _PROJECT_ROOT not in sys.path:
 from runtime.cli_provider import get_provider, list_available_providers  # noqa: E402
 from runtime.mcp_config_writers import (  # noqa: E402
     write_claude_mcp_config,
+    write_claude_mcp_stdio_config,
     write_codex_mcp_config,
+    write_codex_mcp_stdio_config,
     write_gemini_mcp_config,
+    write_gemini_mcp_stdio_config,
     write_kimi_mcp_config,
+    write_kimi_mcp_stdio_config,
 )
 
 # Trigger provider auto-registration on import
@@ -41,6 +45,10 @@ from runtime.adoption import (  # noqa: E402
 
 _logger = logging.getLogger(__name__)
 
+OMG_CONTROL_COMMAND = "python3"
+OMG_CONTROL_ARGS = ["-m", "runtime.omg_mcp_server"]
+OMG_CONTROL_SERVER_NAME = "omg-control"
+
 _INSTALL_HINTS: dict[str, str] = {
     "codex": "npm install -g @openai/codex",
     "gemini": "npm install -g @google/gemini-cli",
@@ -109,6 +117,15 @@ MCP_CATALOG: list[dict[str, Any]] = [
         "default": True,
         "category": "memory",
     },
+    {
+        "id": OMG_CONTROL_SERVER_NAME,
+        "name": "OMG Control",
+        "description": "OMG control plane MCP server via stdio",
+        "command": OMG_CONTROL_COMMAND,
+        "args": OMG_CONTROL_ARGS,
+        "default": True,
+        "category": "control",
+    },
     {
         "id": "github",
         "name": "GitHub",
@@ -371,8 +388,11 @@ def configure_mcp(
     detected_clis: dict[str, Any],
     server_url: str = "http://127.0.0.1:8765/mcp",
     server_name: str = "omg-memory",
+    control_command: str = OMG_CONTROL_COMMAND,
+    control_args: list[str] | None = None,
+    control_server_name: str = OMG_CONTROL_SERVER_NAME,
 ) -> dict[str, Any]:
-    """Configure MCP memory server for authenticated CLIs.
+    """Configure OMG MCP servers for authenticated CLIs.
 
     For each CLI in detected_clis where detected_clis[cli]["detected"] == True,
     calls the appropriate writer from runtime.mcp_config_writers.
@@ -382,6 +402,9 @@ def configure_mcp(
         detected_clis: Dict of CLI detection results from detect_clis().
         server_url: MCP server URL (default: http://127.0.0.1:8765/mcp).
         server_name: MCP server name (default: omg-memory).
+        control_command: stdio command for the OMG control MCP server.
+        control_args: stdio args for the OMG control MCP server.
+        control_server_name: MCP server name for the OMG control surface.
 
     Returns:
         Dict with keys:
@@ -391,28 +414,40 @@ def configure_mcp(
     """
     configured: list[str] = []
     errors: dict[str, str] = {}
+    resolved_control_args = list(control_args or OMG_CONTROL_ARGS)
 
-    # Always write Claude config
+    # Always write Claude project config for both memory and control surfaces.
     try:
         write_claude_mcp_config(project_dir, server_url, server_name)
+        write_claude_mcp_stdio_config(
+            project_dir,
+            command=control_command,
+            args=resolved_control_args,
+            server_name=control_server_name,
+        )
     except Exception as exc:
         _logger.warning("Failed to write Claude MCP config: %s", exc)
         errors["claude"] = str(exc)
 
-    # Write configs for detected CLIs
+    # Write both memory and control surfaces for detected external CLIs.
     cli_writers = {
-        "codex": write_codex_mcp_config,
-        "gemini": write_gemini_mcp_config,
-        "kimi": write_kimi_mcp_config,
+        "codex": (write_codex_mcp_config, write_codex_mcp_stdio_config),
+        "gemini": (write_gemini_mcp_config, write_gemini_mcp_stdio_config),
+        "kimi": (write_kimi_mcp_config, write_kimi_mcp_stdio_config),
     }
 
-    for cli_name, writer_func in cli_writers.items():
+    for cli_name, (http_writer, stdio_writer) in cli_writers.items():
         cli_info = detected_clis.get(cli_name, {})
         if not cli_info.get("detected", False):
             continue
 
         try:
-            writer_func(server_url, server_name)
+            http_writer(server_url, server_name)
+            stdio_writer(
+                command=control_command,
+                args=resolved_control_args,
+                server_name=control_server_name,
+            )
             configured.append(cli_name)
         except Exception as exc:
             _logger.warning("Failed to write %s MCP config: %s", cli_name, exc)

package/hooks/shadow_manager.py

@@ -17,6 +17,7 @@ HOOKS_DIR = os.path.dirname(__file__)
 if HOOKS_DIR not in sys.path:
     sys.path.insert(0, HOOKS_DIR)
 from _common import _resolve_project_dir
+from security_validators import ensure_path_within_dir, validate_opaque_identifier
 
 
 def _project_dir() -> str:
@@ -43,6 +44,10 @@ def _new_run_id() -> str:
     return datetime.now(timezone.utc).strftime("%Y%m%dT%H%M%S%fZ")
 
 
+def _validated_run_id(run_id: str) -> str:
+    return validate_opaque_identifier(run_id, "run_id")
+
+
 def _hash_file(path: str) -> str:
     h = hashlib.sha256()
     with open(path, "rb") as f:
@@ -61,6 +66,7 @@ def ensure_shadow_dirs(project_dir: str) -> None:
 
 def set_active_run_id(project_dir: str, run_id: str) -> None:
     ensure_shadow_dirs(project_dir)
+    run_id = _validated_run_id(run_id)
     with open(_active_run_path(project_dir), "w", encoding="utf-8") as f:
         f.write(run_id)
 
@@ -81,7 +87,7 @@ def get_active_run_id(project_dir: str) -> str | None:
 
 
 def begin_shadow_run(project_dir: str, metadata: dict[str, Any] | None = None) -> str:
-    run_id = get_active_run_id(project_dir) or _new_run_id()
+    run_id = _validated_run_id(get_active_run_id(project_dir) or _new_run_id())
     run_dir = os.path.join(_shadow_root(project_dir), run_id)
     os.makedirs(run_dir, exist_ok=True)
 
@@ -124,12 +130,14 @@ def _save_manifest(run_dir: str, manifest: dict[str, Any]) -> None:
 
 
 def map_shadow_path(project_dir: str, run_id: str, file_path: str) -> str:
+    run_id = _validated_run_id(run_id)
     rel = os.path.relpath(os.path.abspath(file_path), os.path.abspath(project_dir))
     rel = rel.replace("..", "_up_")
     return os.path.join(_shadow_root(project_dir), run_id, "overlay", rel)
 
 
 def record_shadow_write(project_dir: str, run_id: str, file_path: str, source: str = "tool") -> dict[str, Any]:
+    run_id = _validated_run_id(run_id)
     run_dir = os.path.join(_shadow_root(project_dir), run_id)
     os.makedirs(run_dir, exist_ok=True)
 
@@ -171,8 +179,15 @@ def create_evidence_pack(
     diff_summary: dict[str, Any] | None = None,
     reproducibility: dict[str, Any] | None = None,
     unresolved_risks: list[str] | None = None,
+    provenance: list[dict[str, Any]] | None = None,
+    trust_scores: dict[str, Any] | None = None,
+    api_twin: dict[str, Any] | None = None,
+    route_metadata: dict[str, Any] | None = None,
+    trace_ids: list[str] | None = None,
+    lineage: dict[str, Any] | None = None,
 ) -> str:
     ensure_shadow_dirs(project_dir)
+    run_id = _validated_run_id(run_id)
     evidence = {
         "schema": "EvidencePack",
         "run_id": run_id,
@@ -182,8 +197,17 @@ def create_evidence_pack(
         "diff_summary": diff_summary or {},
         "reproducibility": reproducibility or {},
         "unresolved_risks": unresolved_risks or [],
+        "provenance": provenance or [],
+        "trust_scores": trust_scores or {},
+        "api_twin": api_twin or {},
+        "route_metadata": route_metadata or {},
+        "trace_ids": trace_ids or [],
+        "lineage": lineage or {},
     }
-    evidence_path = os.path.join(_evidence_root(project_dir), f"{run_id}.json")
+    evidence_path = ensure_path_within_dir(
+        _evidence_root(project_dir),
+        os.path.join(_evidence_root(project_dir), f"{run_id}.json"),
+    )
     with open(evidence_path, "w", encoding="utf-8") as f:
         json.dump(evidence, f, indent=2)
     return evidence_path
@@ -211,6 +235,7 @@ def has_recent_evidence(project_dir: str, hours: int = 24) -> bool:
 
 
 def apply_shadow(project_dir: str, run_id: str) -> dict[str, Any]:
+    run_id = _validated_run_id(run_id)
     run_dir = os.path.join(_shadow_root(project_dir), run_id)
     manifest = _load_manifest(run_dir)
     applied = []
@@ -236,6 +261,7 @@ def apply_shadow(project_dir: str, run_id: str) -> dict[str, Any]:
 
 
 def drop_shadow(project_dir: str, run_id: str) -> dict[str, Any]:
+    run_id = _validated_run_id(run_id)
     run_dir = os.path.join(_shadow_root(project_dir), run_id)
     if os.path.isdir(run_dir):
         print(f"[OMG] Deleting: {run_dir}", file=sys.stderr)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trac3er/oh-my-god",
-  "version": "2.0.3",
+  "version": "2.0.5",
   "description": "OMG (Oh My God) — Multi-agent orchestration, intelligent model routing, and durable session state for Claude Code",
   "main": "OMG-setup.sh",
   "scripts": {

package/plugins/README.md

@@ -17,6 +17,9 @@ OMG exposes a small native front door and keeps the rest of the surface availabl
 | `/OMG:escalate` | Route to Codex, Gemini, or CCG |
 | `/OMG:teams` | Team routing for internal OMG execution |
 | `/OMG:ccg` | Tri-track synthesis |
+| `/OMG:security-check` | Canonical security pipeline |
+| `/OMG:api-twin` | Contract replay and fixture-based API simulation |
+| `/OMG:preflight` | Structured route selection and evidence planning |
 | `/OMG:compat` | Legacy compatibility routing |
 | `/OMG:health-check` | Verify setup and tool integration |
 | `/OMG:mode` | Set cognitive mode for the session |
@@ -28,7 +31,6 @@ OMG exposes a small native front door and keeps the rest of the surface availabl
 | `/OMG:deep-plan` | Planning | Strategic planning with domain awareness |
 | `/OMG:learn` | Knowledge | Convert patterns into OMG-native instincts and skills |
 | `/OMG:code-review` | Quality | Deep review flow |
-| `/OMG:security-review` | Security | Security-focused review |
 | `/OMG:ship` | Delivery | Idea to evidence to release |
 | `/OMG:handoff` | Collaboration | Session transfer and continuity |
 

package/plugins/__init__.py

@@ -0,0 +1 @@
+"""OMG plugin packages."""

package/plugins/advanced/commands/OMG:deep-plan.md

@@ -87,7 +87,7 @@ Key interfaces: [list the interfaces/types this touches]
 
 ### Phase 3: Integration + Security [N files, ~M lines]
 5. [ ] [specific action]
-6. [ ] Security review: /OMG:security-review [affected files]
+6. [ ] Security review: /OMG:security-check [affected files]
 
 ### Phase 4: Verification
 7. [ ] Tests: [what to test, how]

package/plugins/advanced/commands/OMG:security-review.md

@@ -1,119 +1,16 @@
 ---
-description: Deep security review — scans for vulnerabilities, hardcoded secrets, auth issues, and injection risks. Escalates to Codex for deep line-by-line analysis.
-allowed-tools: Read, Bash(grep:*), Bash(find:*), Bash(cat:*), Bash(git:*), Bash(rg:*), Grep, Glob
-argument-hint: "[file or directory to review, or 'all' for full scan]"
+description: Deprecated alias to OMG's canonical security-check pipeline.
+allowed-tools: Read, Grep, Glob, Bash(python3:*), Bash(rg:*)
+argument-hint: "[path or '.' for the current project]"
 ---
 
-# /OMG:security-review — Vulnerability Scanner + Deep Review
+# /OMG:security-review — Deprecated Alias
 
-## Step 1: Scope Detection
+`/OMG:security-review` remains available only for compatibility.
 
-Determine what to scan:
-- If argument is a file: scan that file deeply
-- If argument is a directory: scan all source files in it
-- If "all" or no argument: scan git-tracked source files
+Use `/OMG:security-check` instead. The canonical pipeline now owns:
 
-Identify security-critical files automatically:
-```bash
-# Auth/session
-find . -type f \( -name "*.ts" -o -name "*.js" -o -name "*.py" -o -name "*.go" -o -name "*.rs" \) | xargs grep -li "auth\|login\|session\|token\|password\|jwt\|oauth" 2>/dev/null
-
-# Payment
-find . -type f -name "*.{ts,js,py,go}" | xargs grep -li "payment\|billing\|stripe\|checkout\|card\|price" 2>/dev/null
-
-# Database
-find . -type f -name "*.{ts,js,py,go}" | xargs grep -li "query\|SELECT\|INSERT\|UPDATE\|DELETE\|migration\|schema" 2>/dev/null
-```
-
-## Step 2: Automated Vulnerability Scan
-
-For each security-critical file, check LINE-BY-LINE:
-
-**2a. Hardcoded Secrets**
-```bash
-grep -rn "AKIA\|sk_live\|sk_test\|ghp_\|github_pat\|xoxb-\|xoxp-\|eyJ.*\.eyJ" [files]
-grep -rn "api[_-]key.*=.*['\"][A-Za-z0-9]" [files]
-grep -rn "password.*=.*['\"]" [files] | grep -v "test\|mock\|example\|placeholder"
-```
-
-**2b. SQL Injection**
-```bash
-grep -rn "f\".*SELECT\|f\".*INSERT\|f\".*UPDATE\|f\".*DELETE" [files]
-grep -rn "\\.format.*SELECT\|%s.*SELECT\|\\+.*SELECT" [files]
-grep -rn "query.*\\$\\{" [files]  # template literal SQL
-```
-
-**2c. XSS / Injection**
-```bash
-grep -rn "innerHTML\|dangerouslySetInnerHTML\|v-html\|\\|safe\b" [files]
-grep -rn "eval(\|exec(\|subprocess.*shell=True" [files]
-grep -rn "document\\.write\|document\\.location" [files]
-```
-
-**2d. Auth/Session Issues**
-```bash
-grep -rn "jwt\\.decode.*verify.*false\|verify.*False" [files]
-grep -rn "cors.*\\*\|origin.*\\*" [files]
-grep -rn "httpOnly.*false\|secure.*false\|sameSite.*none" [files]
-```
-
-**2e. Path Traversal**
-```bash
-grep -rn "req\\.params\|req\\.query\|req\\.body" [files] | grep -i "path\|file\|dir"
-grep -rn "\\.\\./\|\\.\\.\\\\" [files]
-```
-
-**2f. Sensitive Data Exposure**
-```bash
-grep -rn "console\\.log.*password\|console\\.log.*token\|console\\.log.*secret" [files]
-grep -rn "log\\.info.*password\|logger.*token\|print.*secret" [files]
-```
-
-## Step 3: Codex Deep Review (for high-risk files)
-
-For files with auth, payment, or database logic:
-
-```
-/OMG:escalate codex "Security deep review of [file]:
-1. Read every line. Flag any: hardcoded secrets, SQL injection, XSS, CSRF, auth bypass, privilege escalation, insecure deserialization, SSRF.
-2. Check auth flow completeness: does every protected route validate the token? Are permissions checked?
-3. Check payment flow: is card data handled safely? Are amounts validated server-side?
-4. Check database queries: all parameterized? Any raw string concatenation?
-5. Rate this file: SAFE / NEEDS_FIX / CRITICAL with specific line numbers."
-```
-
-## Step 4: Report
-
-```
-Security Review — [scope]
-━━━━━━━━━━━━━━━━━━━━━━━━━━
-
-Files scanned: [N]
-Security-critical files: [N]
-
-CRITICAL [N]:
-  [file:line] Hardcoded API key: [type]
-  [file:line] SQL injection: unparameterized query
-
-HIGH [N]:
-  [file:line] Missing auth check on protected route
-  [file:line] CORS wildcard in production config
-
-MEDIUM [N]:
-  [file:line] Sensitive data in console.log
-  [file:line] httpOnly not set on session cookie
-
-LOW [N]:
-  [file:line] Missing rate limiting on login endpoint
-
-Codex Deep Review:
-  [file]: [SAFE|NEEDS_FIX|CRITICAL] — [summary]
-
-Fix priority: [ordered list of what to fix first]
-```
-
-## Anti-patterns
-- Don't just grep and dump raw output — analyze each finding
-- Don't skip test files entirely (they can leak real credentials)
-- Don't claim "looks secure" without running ALL checks above
-- Don't treat this as optional for auth/payment/database changes
+- normalized security findings
+- dependency and AST enrichment
+- evidence-ready provenance and trust scores
+- reuse across CLI, compat routing, control plane, MCP, and ship flows

package/plugins/advanced/commands/OMG:ship.md

@@ -24,7 +24,7 @@ argument-hint: "[goal or optional path to .omg/idea.yml]"
   - `tests[]`, `security_scans[]`, `diff_summary`, `reproducibility`, `unresolved_risks[]`.
 
 ## Step 4: Security and trust checks
-- Run `/OMG:security-review` for auth/payment/database/sensitive changes.
+- Run `/OMG:security-check` for auth/payment/database/sensitive changes.
 - If config/hook/MCP changes are involved, ensure trust manifest is updated at `.omg/trust/manifest.lock.json`.
 
 ## Step 5: PR-ready output

package/plugins/advanced/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "omg-advanced",
   "version": "1.0.5",
-  "description": "Advanced OMG commands - deep planning, learning, code review, security review, and specialized workflows",
+  "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {
     "deep-plan": {
@@ -19,11 +19,6 @@
       "description": "Deep code review with line-by-line analysis",
       "category": "quality"
     },
-    "security-review": {
-      "path": "commands/OMG:security-review.md",
-      "description": "Security vulnerability scanning",
-      "category": "security"
-    },
     "ship": {
       "path": "commands/OMG:ship.md",
       "description": "Ship pipeline - idea to PR-ready summary",
@@ -69,10 +64,6 @@
       "description": "Code quality and review",
       "commands": ["code-review"]
     },
-    "security": {
-      "description": "Security analysis and review",
-      "commands": ["security-review"]
-    },
     "knowledge": {
       "description": "Learning and skill creation",
       "commands": ["learn"]

package/plugins/core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-core",
-  "version": "2.0.3",
+  "version": "2.0.5",
   "description": "Core OMG commands - native setup, routing, orchestration, and verification surfaces",
   "type": "omg-plugin",
   "commands": {
@@ -39,6 +39,21 @@
       "description": "Legacy skill compatibility dispatcher",
       "category": "compatibility"
     },
+    "security-check": {
+      "path": "commands/OMG:security-check.md",
+      "description": "Canonical security pipeline with normalized findings and evidence",
+      "category": "security"
+    },
+    "api-twin": {
+      "path": "commands/OMG:api-twin.md",
+      "description": "Contract replay and fixture-based API simulation",
+      "category": "contracts"
+    },
+    "preflight": {
+      "path": "commands/OMG:preflight.md",
+      "description": "Structured routing and evidence planning before execution",
+      "category": "routing"
+    },
     "health-check": {
       "path": "commands/OMG:health-check.md",
       "description": "Verify project setup and tool integration",
@@ -90,7 +105,7 @@
     },
     "routing": {
       "description": "Model routing and escalation",
-      "commands": ["escalate", "teams", "ccg"]
+      "commands": ["escalate", "teams", "ccg", "preflight"]
     },
     "orchestration": {
       "description": "Multi-agent orchestration modes",
@@ -108,6 +123,14 @@
       "description": "Cost tracking and session observability",
       "commands": ["cost", "stats", "deps"]
     },
+    "security": {
+      "description": "Canonical security and trust checks",
+      "commands": ["security-check"]
+    },
+    "contracts": {
+      "description": "Contract replay and API simulation",
+      "commands": ["api-twin"]
+    },
     "visualization": {
       "description": "Codebase visualization and architecture diagrams",
       "commands": ["arch"]

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "oh-my-god"
-version = "2.0.0b1"
+version = "2.0.5"
 description = "OMG (Oh My God) — Multi-agent orchestration, intelligent model routing, and durable session state for Claude Code"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -42,7 +42,43 @@ Repository = "https://github.com/trac3er00/OMG.git"
 Issues = "https://github.com/trac3er00/OMG/issues"
 
 [tool.setuptools]
-packages = ["hooks", "runtime", "agents", "commands"]
+include-package-data = true
+
+[tool.setuptools.packages.find]
+where = ["."]
+include = ["agents*", "commands*", "control_plane*", "hooks*", "plugins*", "registry*", "runtime*"]
+
+[tool.setuptools.package-data]
+agents = ["*.md"]
+commands = ["*.md"]
+control_plane = ["*.yaml"]
+plugins = ["**/*.json", "**/*.md"]
+registry = ["*.json", "bundles/*.yaml"]
+runtime = ["*.json"]
+
+[tool.setuptools.data-files]
+"." = ["OMG_COMPAT_CONTRACT.md", "settings.json", ".mcp.json"]
+".claude-plugin" = [".claude-plugin/plugin.json", ".claude-plugin/marketplace.json"]
+"docs" = ["docs/release-checklist.md"]
+".agents/skills/omg" = [".agents/skills/omg/AGENTS.fragment.md", ".agents/skills/omg/codex-mcp.toml"]
+".agents/skills/omg/control-plane" = [".agents/skills/omg/control-plane/SKILL.md", ".agents/skills/omg/control-plane/openai.yaml"]
+".agents/skills/omg/hook-governor" = [".agents/skills/omg/hook-governor/SKILL.md", ".agents/skills/omg/hook-governor/openai.yaml"]
+".agents/skills/omg/lsp-pack" = [".agents/skills/omg/lsp-pack/SKILL.md", ".agents/skills/omg/lsp-pack/openai.yaml"]
+".agents/skills/omg/mcp-fabric" = [".agents/skills/omg/mcp-fabric/SKILL.md", ".agents/skills/omg/mcp-fabric/openai.yaml"]
+".agents/skills/omg/secure-worktree-pipeline" = [".agents/skills/omg/secure-worktree-pipeline/SKILL.md", ".agents/skills/omg/secure-worktree-pipeline/openai.yaml"]
+".agents/skills/omg/security-check" = [".agents/skills/omg/security-check/SKILL.md", ".agents/skills/omg/security-check/openai.yaml"]
+".agents/skills/omg/api-twin" = [".agents/skills/omg/api-twin/SKILL.md", ".agents/skills/omg/api-twin/openai.yaml"]
+".agents/skills/omg/preflight" = [".agents/skills/omg/preflight/SKILL.md", ".agents/skills/omg/preflight/openai.yaml"]
+".agents/skills/omg/robotics" = [".agents/skills/omg/robotics/SKILL.md", ".agents/skills/omg/robotics/openai.yaml"]
+".agents/skills/omg/vision" = [".agents/skills/omg/vision/SKILL.md", ".agents/skills/omg/vision/openai.yaml"]
+".agents/skills/omg/algorithms" = [".agents/skills/omg/algorithms/SKILL.md", ".agents/skills/omg/algorithms/openai.yaml"]
+".agents/skills/omg/health" = [".agents/skills/omg/health/SKILL.md", ".agents/skills/omg/health/openai.yaml"]
+".agents/skills/omg/tracebank" = [".agents/skills/omg/tracebank/SKILL.md", ".agents/skills/omg/tracebank/openai.yaml"]
+".agents/skills/omg/eval-gate" = [".agents/skills/omg/eval-gate/SKILL.md", ".agents/skills/omg/eval-gate/openai.yaml"]
+".agents/skills/omg/delta-classifier" = [".agents/skills/omg/delta-classifier/SKILL.md", ".agents/skills/omg/delta-classifier/openai.yaml"]
+".agents/skills/omg/incident-replay" = [".agents/skills/omg/incident-replay/SKILL.md", ".agents/skills/omg/incident-replay/openai.yaml"]
+".agents/skills/omg/data-lineage" = [".agents/skills/omg/data-lineage/SKILL.md", ".agents/skills/omg/data-lineage/openai.yaml"]
+".agents/skills/omg/remote-supervisor" = [".agents/skills/omg/remote-supervisor/SKILL.md", ".agents/skills/omg/remote-supervisor/openai.yaml"]
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]

package/registry/__init__.py

@@ -0,0 +1 @@
+"""Registry package for OMG."""

package/registry/bundles/algorithms.yaml

@@ -0,0 +1,45 @@
+id: algorithms
+kind: domain-pack
+version: 2.0.5
+title: OMG Algorithms Pack
+description: Determinism and benchmark attachments for algorithm-heavy work.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/domain_packs.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+    codex:
+      - Read
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evals/latest.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    benchmarks: advisory
+  enterprise:
+    benchmarks: required