@trac3er/oh-my-god 2.0.3 → 2.0.5

package/settings.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "_comment": "OMG 2.0.3 - project-level config with hook registrations, presets, and feature flags.",
+  "_comment": "OMG 2.0.5 - project-level config with hook registrations, presets, and feature flags.",
   "permissions": {
     "allow": [
       "Agent",
@@ -42,7 +42,6 @@
       "Bash(tree *)",
       "Bash(du *)",
       "Bash(df *)",
-      "Bash(env *)",
       "Bash(type *)",
       "Bash(command *)",
       "Bash(test *)",
@@ -52,17 +51,12 @@
       "Bash(ln *)",
       "Bash(cp *)",
       "Bash(mv *)",
-      "Bash(chmod *)",
-      "Bash(chown *)",
       "Bash(git *)",
       "Bash(npm *)",
       "Bash(npx *)",
       "Bash(yarn *)",
       "Bash(pnpm *)",
       "Bash(bun *)",
-      "Bash(node *)",
-      "Bash(python *)",
-      "Bash(python3 *)",
       "Bash(pip *)",
       "Bash(pip3 *)",
       "Bash(uv *)",
@@ -115,6 +109,12 @@
       "Bash(terraform apply *)",
       "Bash(terraform destroy *)",
       "Bash(terraform import *)",
+      "Bash(env *)",
+      "Bash(node *)",
+      "Bash(python *)",
+      "Bash(python3 *)",
+      "Bash(chmod *)",
+      "Bash(chown *)",
       "Bash(docker *)",
       "Bash(docker-compose *)",
       "Bash(kubectl get *)",
@@ -188,45 +188,66 @@
       }
     ],
     "PreToolUse": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"$HOME/.claude/hooks/firewall.py\"",
+            "timeout": 10
+          }
+        ],
+        "matcher": "Bash"
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"$HOME/.claude/hooks/secret-guard.py\"",
+            "timeout": 10
+          }
+        ],
+        "matcher": "Read|Write|Edit|MultiEdit"
+      },
       {
         "hooks": [
           {
             "type": "command",
             "command": "python3 \"$HOME/.claude/hooks/pre-tool-inject.py\""
           }
-        ]
+        ],
+        "matcher": ""
       }
     ],
     "PostToolUse": [
       {
-        "matcher": "Bash",
         "hooks": [
           {
             "type": "command",
             "command": "python3 \"$HOME/.claude/hooks/circuit-breaker.py\"",
             "timeout": 10
           }
-        ]
+        ],
+        "matcher": "Bash"
       },
       {
-        "matcher": "Write|Edit|MultiEdit",
         "hooks": [
           {
             "type": "command",
             "command": "python3 \"$HOME/.claude/hooks/tool-ledger.py\"",
             "timeout": 10
           }
-        ]
+        ],
+        "matcher": "Write|Edit|MultiEdit"
       },
       {
-        "matcher": "Write|Edit|MultiEdit",
         "hooks": [
           {
             "type": "command",
             "command": "python3 \"$HOME/.claude/hooks/test_generator_hook.py\"",
             "timeout": 10
           }
-        ]
+        ],
+        "matcher": "Write|Edit|MultiEdit"
       },
       {
         "hooks": [
@@ -235,7 +256,8 @@
             "command": "python3 \"$HOME/.claude/hooks/budget_governor.py\"",
             "timeout": 10
           }
-        ]
+        ],
+        "matcher": ""
       }
     ],
     "PostToolUseFailure": [
@@ -250,19 +272,19 @@
     ],
     "Stop": [
       {
-        "matcher": "",
         "hooks": [
           {
             "type": "command",
             "command": "python3 \"$HOME/.claude/hooks/stop_dispatcher.py\"",
             "timeout": 90
           }
-        ]
+        ],
+        "matcher": ""
       }
     ]
   },
   "_omg": {
-    "_version": "2.0.3",
+    "_version": "2.0.5",
     "preset": "safe",
     "default_mode": "ulw+ralph",
     "vision_auto": true,
@@ -313,6 +335,47 @@
       "DEP_HEALTH": false,
       "CODEBASE_VIZ": false,
       "CONTEXT_MANAGER": false
+    },
+    "generated": {
+      "contract_version": "2.0.5",
+      "channel": "enterprise",
+      "required_bundles": [
+        "control-plane",
+        "hook-governor",
+        "mcp-fabric",
+        "lsp-pack",
+        "secure-worktree-pipeline",
+        "security-check",
+        "api-twin",
+        "preflight",
+        "robotics",
+        "vision",
+        "algorithms",
+        "health",
+        "tracebank",
+        "eval-gate",
+        "delta-classifier",
+        "incident-replay",
+        "data-lineage",
+        "remote-supervisor"
+      ],
+      "protected_paths": [
+        ".omg/**",
+        ".agents/**",
+        ".codex/**",
+        ".claude/**",
+        "registry/**",
+        "dist/**"
+      ],
+      "emulated_events": [
+        "PreCompact",
+        "ConfigChange",
+        "WorktreeCreate",
+        "WorktreeRemove",
+        "SubagentStart",
+        "SubagentStop",
+        "TaskCompleted"
+      ]
     }
   }
 }

package/tools/python_repl.py

@@ -25,11 +25,13 @@ from typing import Any, Dict, Generator, List, Optional, Union
 
 _get_feature_flag = None
 _atomic_json_write = None
+_validate_opaque_identifier = None
+_ensure_path_within_dir = None
 
 
 def _ensure_imports():
     """Lazy import feature flag and atomic write from hooks/_common.py."""
-    global _get_feature_flag, _atomic_json_write
+    global _get_feature_flag, _atomic_json_write, _validate_opaque_identifier, _ensure_path_within_dir
     if _get_feature_flag is not None:
         return
     repo_root = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
@@ -38,8 +40,12 @@ def _ensure_imports():
     try:
         from hooks._common import get_feature_flag as _gff
         from hooks._common import atomic_json_write as _ajw
+        from hooks.security_validators import ensure_path_within_dir as _epwd
+        from hooks.security_validators import validate_opaque_identifier as _voi
         _get_feature_flag = _gff
         _atomic_json_write = _ajw
+        _validate_opaque_identifier = _voi
+        _ensure_path_within_dir = _epwd
     except ImportError:
         pass
 
@@ -217,6 +223,23 @@ def _now_iso() -> str:
     return datetime.now(timezone.utc).isoformat()
 
 
+def _validate_session_id(session_id: str) -> str:
+    """Validate a caller-supplied session identifier."""
+    _ensure_imports()
+    if _validate_opaque_identifier is None:
+        raise ValueError("Invalid session_id: validator unavailable")
+    return _validate_opaque_identifier(session_id, "session_id")
+
+
+def _resolve_session_path(session_id: str) -> str:
+    """Resolve the on-disk session path and reject directory escapes."""
+    _ensure_imports()
+    if _ensure_path_within_dir is None:
+        raise ValueError("Invalid session_id: path validator unavailable")
+    state_dir = os.path.abspath(_STATE_DIR)
+    return _ensure_path_within_dir(state_dir, os.path.join(state_dir, f"{session_id}.json"))
+
+
 def _persist_session(session_id: str) -> None:
     """Persist session metadata to disk (best-effort)."""
     if session_id not in _sessions:
@@ -232,10 +255,11 @@ def _persist_session(session_id: str) -> None:
         "exec_count": session["exec_count"],
         "backend": session.get("backend", "stdlib"),
     }
-    path = os.path.join(_STATE_DIR, f"{session_id}.json")
     try:
+        safe_session_id = _validate_session_id(session_id)
+        path = _resolve_session_path(safe_session_id)
         _atomic_json_write(path, meta)
-    except Exception:
+    except (OSError, ValueError):
         pass  # best-effort
 
 
@@ -411,6 +435,12 @@ def start_repl_session(session_id: Optional[str] = None) -> Dict[str, Any]:
     if not _is_enabled():
         return {"error": _DISABLED_MSG}
 
+    if session_id is not None:
+        try:
+            session_id = _validate_session_id(session_id)
+        except ValueError as exc:
+            return {"error": str(exc)}
+
     # Resume existing session
     if session_id and session_id in _sessions:
         session = _sessions[session_id]