@trac3er/oh-my-god 2.0.3 → 2.0.5

package/runtime/compat.py

@@ -15,12 +15,14 @@ from typing import Any
 
 from hooks.policy_engine import evaluate_bash_command
 from lab.pipeline import run_pipeline
+from runtime.adoption import CANONICAL_VERSION
 from runtime.dispatcher import dispatch_runtime
+from runtime.security_check import run_security_check
 from runtime.team_router import TeamDispatchRequest, dispatch_team
 
 CONTRACT_SNAPSHOT_SCHEMA = "OmgCompatContractSnapshot"
 LEGACY_CONTRACT_SNAPSHOT_SCHEMA = "OmgCompatContractSnapshot"
-CONTRACT_SNAPSHOT_VERSION = "1.0.0"
+CONTRACT_SNAPSHOT_VERSION = CANONICAL_VERSION
 LEGACY_SNAPSHOT_VERSION = "0.9.0"
 GAP_REPORT_SCHEMA = "OmgCompatGapReport"
 LEGACY_GAP_REPORT_SCHEMA = "OmgCompatGapReport"
@@ -103,7 +105,7 @@ LEGACY_SKILL_ROUTES: dict[str, str] = {
     "release": "runtime_ship",
     "review": "review",
     "sci-omg": "maintainer",
-    "security-review": "secure",
+    "security-review": "security_check",
     "skill": "learn",
     "omg-superpowers": "plan",
     "tdd": "plan",
@@ -129,6 +131,7 @@ ROUTE_MATURITY: dict[str, str] = {
     "review": "native",
     "plan": "native",
     "secure": "native",
+    "security_check": "native",
     "learn": "native",
     "maintainer": "native",
     "cancel": "native",
@@ -183,6 +186,7 @@ ROUTE_INPUTS: dict[str, dict[str, Any]] = {
     "review": {"required": ["problem"], "optional": ["context", "files"]},
     "plan": {"required": ["problem"], "optional": ["expected_outcome"]},
     "secure": {"required": ["problem"], "optional": []},
+    "security_check": {"required": [], "optional": ["problem"]},
     "learn": {"required": ["problem"], "optional": ["context"]},
     "maintainer": {"required": ["problem"], "optional": ["context"]},
     "cancel": {"required": [], "optional": []},
@@ -200,6 +204,7 @@ ROUTE_OUTPUTS: dict[str, dict[str, Any]] = {
     "review": {"schema": "TeamDispatchResult"},
     "plan": {"schema": "PlanningArtifacts"},
     "secure": {"schema": "PolicyDecision"},
+    "security_check": {"schema": "SecurityCheckResult"},
     "learn": {"schema": "LearningArtifact"},
     "maintainer": {"schema": "MaintainerCompatArtifact"},
     "cancel": {"schema": "CancelResult"},
@@ -217,6 +222,7 @@ ROUTE_SIDE_EFFECTS: dict[str, list[str]] = {
     "review": [],
     "plan": [".omg/state/_plan.md", ".omg/state/_checklist.md", ".omg/idea.yml"],
     "secure": [],
+    "security_check": [],
     "learn": [".omg/state/working-memory.md"],
     "maintainer": [".omg/evidence/compat-*.json"],
     "cancel": [".omg/shadow/active-run (removed when exists)"],
@@ -268,6 +274,7 @@ SKILL_ROUTE_NOTES: dict[str, str] = {
     "pipeline": "Routes to OMG lab policy+pipeline executor.",
     "release": "Routes to runtime ship and emits release draft artifact.",
     "tdd": "Generates plan/checklist scaffolding for red-green-refactor workflow.",
+    "security-review": "Deprecated alias to the canonical OMG security-check engine.",
     "build-fix": "Creates targeted fix checklist and routes execution to runtime.",
     "analyze": "Writes structured analysis evidence artifact.",
     "trace": "Writes trace evidence artifact for debugging chain.",
@@ -353,7 +360,7 @@ def migrate_contract_snapshot_payload(payload: dict[str, Any]) -> tuple[dict[str
         # v0.9.0 lacked explicit schema/version constraints.
         migrated["schema"] = CONTRACT_SNAPSHOT_SCHEMA
         migrated["contract_version"] = CONTRACT_SNAPSHOT_VERSION
-        migrations.append("migrate-0.9.0-to-1.0.0")
+        migrations.append(f"migrate-0.9.0-to-{CONTRACT_SNAPSHOT_VERSION}")
 
     return migrated, migrations
 
@@ -1177,6 +1184,20 @@ def dispatch_compat_skill(
             result=decision.to_dict(),
         )
 
+    if route == "security_check":
+        check = run_security_check(
+            project_dir=root,
+            scope=msg or ".",
+            include_live_enrichment=False,
+        )
+        return _res(
+            skill=normalized,
+            route=route,
+            findings=["Canonical OMG security check completed."],
+            actions=["Review high-severity findings before ship/release."],
+            result=check,
+        )
+
     if route == "learn":
         if normalized in {"learn-about-omg", "learner", "skill"}:
             learn_path = _write_learning_artifact(root, normalized, msg, context)