@trac3er/oh-my-god 2.0.7 → 2.0.8

package/artifacts/release/registry/bundles/plan-council.yaml

@@ -0,0 +1,51 @@
+id: plan-council
+kind: planning
+version: 2.0.8
+title: OMG Plan Council
+description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - plugins/advanced/commands/OMG:deep-plan.md
+invocation_policy:
+  user_invocable: true
+  model_invocable: false
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+    codex:
+      - Read
+      - Grep
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - markdown
+    - json
+evidence_outputs:
+  artifacts:
+    - .omg/plans/deep-plan.md
+    - .omg/plans/deep-plan.json
+    - .omg/plans/dissent.json
+    - .omg/evidence/plan-council.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/artifacts/release/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.0.5
+version: 2.0.8
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/artifacts/release/registry/bundles/proof-gate.yaml

@@ -0,0 +1,49 @@
+id: proof-gate
+kind: proof
+version: 2.0.8
+title: OMG Proof Gate
+description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/proof_gate.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/proof-gate-*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/artifacts/release/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.0.5
+version: 2.0.8
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/artifacts/release/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.0.5
+version: 2.0.8
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/artifacts/release/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.0.5
+version: 2.0.8
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/artifacts/release/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.0.5
+version: 2.0.8
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/artifacts/release/registry/bundles/test-intent-lock.yaml

@@ -0,0 +1,49 @@
+id: test-intent-lock
+kind: proof
+version: 2.0.8
+title: OMG Test Intent Lock
+description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/test_intent_lock.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/test-intent-lock-*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/artifacts/release/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.0.5
+version: 2.0.8
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/artifacts/release/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.0.5
+version: 2.0.8
 title: OMG Vision Pack
 description: Vision-specific lineage, drift, and replay attachments.
 hosts:

package/artifacts/release/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.0.5",
+  "version": "2.0.8",
   "type": "object",
   "required": [
     "id",

package/artifacts/release/settings.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "_comment": "OMG 2.0.5 - project-level config with hook registrations, presets, and feature flags.",
+  "_comment": "OMG 2.0.8 - project-level config with hook registrations, presets, and feature flags.",
   "permissions": {
     "allow": [
       "Agent",
@@ -306,7 +306,7 @@
     ]
   },
   "_omg": {
-    "_version": "2.0.5",
+    "_version": "2.0.8",
     "preset": "safe",
     "default_mode": "ulw+ralph",
     "vision_auto": true,
@@ -359,10 +359,14 @@
       "CONTEXT_MANAGER": false
     },
     "generated": {
-      "contract_version": "2.0.5",
+      "contract_version": "2.0.8",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",
+        "plan-council",
+        "claim-judge",
+        "test-intent-lock",
+        "proof-gate",
         "hook-governor",
         "mcp-fabric",
         "lsp-pack",

package/build/lib/control_plane/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: OMG Control Plane API
-  version: 2.0.7
+  version: 2.0.8
   description: Policy/trust/evidence/runtime/registry/lab endpoints for OMG v2, with deprecated v1 aliases for one release.
 servers:
   - url: https://api.omg.local

package/build/lib/plugins/README.md

@@ -28,7 +28,7 @@ OMG exposes a small native front door and keeps the rest of the surface availabl
 
 | Command | Category | Description |
 |---------|----------|-------------|
-| `/OMG:deep-plan` | Planning | Strategic planning with domain awareness (routes to `plan-council`) |
+| `/OMG:deep-plan` | Planning | Strategic planning with domain awareness (compatibility path to `plan-council`) |
 | `/OMG:learn` | Knowledge | Convert patterns into OMG-native instincts and skills |
 | `/OMG:code-review` | Quality | Deep review flow |
 | `/OMG:ship` | Delivery | Idea to evidence to release |

package/build/lib/plugins/advanced/commands/OMG:deep-plan.md

@@ -10,7 +10,8 @@ argument-hint: "[feature or goal to plan]"
 Regular planning = "what steps to take."
 Deep planning = "understand WHY the user wants this, WHAT direction they're heading, and HOW it fits the bigger picture."
 
-This command is the compatibility front door to the canonical `plan-council` bundle.
+This command is the public compatibility path to the canonical `plan-council` bundle.
+Users invoke `/OMG:deep-plan`; the runtime routes to `plan-council` for execution.
 
 ## Step 1: Direction Discovery (MANDATORY)
 

package/build/lib/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.0.7",
+  "version": "2.0.8",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/build/lib/plugins/core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-core",
-  "version": "2.0.7",
+  "version": "2.0.8",
   "description": "Core OMG commands - native setup, routing, orchestration, and verification surfaces",
   "type": "omg-plugin",
   "commands": {

package/build/lib/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.0.7
+version: 2.0.8
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/build/lib/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.0.7
+version: 2.0.8
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/build/lib/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.0.7
+version: 2.0.8
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/build/lib/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.0.7
+version: 2.0.8
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude and Codex.
 hosts:

package/build/lib/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.0.7
+version: 2.0.8
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/build/lib/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.0.7
+version: 2.0.8
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/build/lib/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.0.7
+version: 2.0.8
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/build/lib/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.0.7
+version: 2.0.8
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/build/lib/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.0.7
+version: 2.0.8
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/build/lib/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.0.7
+version: 2.0.8
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/build/lib/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.0.7
+version: 2.0.8
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/build/lib/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.0.7
+version: 2.0.8
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/build/lib/registry/bundles/plan-council.yaml

@@ -1,6 +1,6 @@
 id: plan-council
 kind: planning
-version: 2.0.7
+version: 2.0.8
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:
@@ -8,7 +8,7 @@ hosts:
   - codex
 assets:
   references:
-    - commands/OMG:deep-plan.md
+    - plugins/advanced/commands/OMG:deep-plan.md
 invocation_policy:
   user_invocable: true
   model_invocable: false

package/build/lib/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.0.7
+version: 2.0.8
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/build/lib/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.0.7
+version: 2.0.8
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/build/lib/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.0.7
+version: 2.0.8
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/build/lib/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.0.7
+version: 2.0.8
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/build/lib/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.0.7
+version: 2.0.8
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/build/lib/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.0.7
+version: 2.0.8
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/build/lib/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.0.7
+version: 2.0.8
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/build/lib/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.0.7
+version: 2.0.8
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/build/lib/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.0.7
+version: 2.0.8
 title: OMG Vision Pack
 description: Vision-specific lineage, drift, and replay attachments.
 hosts:

package/build/lib/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.0.7",
+  "version": "2.0.8",
   "type": "object",
   "required": [
     "id",

package/build/lib/runtime/adoption.py

@@ -11,7 +11,7 @@ CANONICAL_REPO_URL = "https://github.com/trac3er00/OMG"
 CANONICAL_PACKAGE_NAME = "@trac3er/oh-my-god"
 CANONICAL_PLUGIN_ID = "omg"
 CANONICAL_MARKETPLACE_ID = "omg"
-CANONICAL_VERSION = "2.0.7"
+CANONICAL_VERSION = "2.0.8"
 
 VALID_ADOPTION_MODES = ("omg-only", "coexist")
 VALID_PRESETS = ("safe", "balanced", "interop", "labs")

package/build/lib/runtime/api_twin.py

@@ -353,15 +353,15 @@ def _state_path(project_dir: str) -> Path:
 def _load_state(project_dir: str) -> dict[str, Any]:
     path = _state_path(project_dir)
     if not path.exists():
-        return {"schema": "ApiTwinState", "version": "2.0.7", "contracts": {}, "fixtures": {}}
+        return {"schema": "ApiTwinState", "version": "2.0.8", "contracts": {}, "fixtures": {}}
     try:
         payload = json.loads(path.read_text(encoding="utf-8"))
     except (OSError, json.JSONDecodeError):
-        return {"schema": "ApiTwinState", "version": "2.0.7", "contracts": {}, "fixtures": {}}
+        return {"schema": "ApiTwinState", "version": "2.0.8", "contracts": {}, "fixtures": {}}
     if not isinstance(payload, dict):
-        return {"schema": "ApiTwinState", "version": "2.0.7", "contracts": {}, "fixtures": {}}
+        return {"schema": "ApiTwinState", "version": "2.0.8", "contracts": {}, "fixtures": {}}
     payload.setdefault("schema", "ApiTwinState")
-    payload.setdefault("version", "2.0.7")
+    payload.setdefault("version", "2.0.8")
     payload.setdefault("contracts", {})
     payload.setdefault("fixtures", {})
     return payload

package/build/lib/runtime/contract_compiler.py

@@ -57,6 +57,12 @@ DEFAULT_REQUIRED_BUNDLES = (
     "data-lineage",
     "remote-supervisor",
 )
+TRUTH_COUNCIL_BUNDLES = (
+    "plan-council",
+    "claim-judge",
+    "test-intent-lock",
+    "proof-gate",
+)
 REQUIRED_ADVANCED_PLUGIN_ARTIFACTS = (
     "bundle/plugins/advanced/plugin.json",
     "bundle/plugins/advanced/commands/OMG:deep-plan.md",
@@ -1725,6 +1731,11 @@ def build_release_readiness(
     checks["version_identity_drift"] = version_drift_check
     blockers.extend(version_drift_check.get("blockers", []))
 
+    if channel == "dual":
+        bundle_promotion_parity = _check_bundle_promotion_parity(root, output)
+        checks["bundle_promotion_parity"] = bundle_promotion_parity
+        blockers.extend(bundle_promotion_parity.get("blockers", []))
+
     providers = _provider_statuses()
     checks["providers"] = providers
     for provider_name, status in providers.items():
@@ -1882,6 +1893,62 @@ def _check_proof_chain(output_root: Path) -> dict[str, Any]:
     }
 
 
+def _check_bundle_promotion_parity(root: Path, output_root: Path) -> dict[str, Any]:
+    missing_settings_required_bundles: list[str] = []
+    missing_dist_public: list[str] = []
+    missing_dist_enterprise: list[str] = []
+    missing_pyproject_data_files: list[str] = []
+
+    settings_path = output_root / "settings.json"
+    if settings_path.exists():
+        settings = _load_json(settings_path)
+        required_bundles = settings.get("_omg", {}).get("generated", {}).get("required_bundles", [])
+        if not isinstance(required_bundles, list):
+            required_bundles = []
+        required_bundle_set = {str(item) for item in required_bundles}
+        missing_settings_required_bundles = [
+            bundle_id for bundle_id in TRUTH_COUNCIL_BUNDLES if bundle_id not in required_bundle_set
+        ]
+    else:
+        missing_settings_required_bundles = list(TRUTH_COUNCIL_BUNDLES)
+
+    for bundle_id in TRUTH_COUNCIL_BUNDLES:
+        public_skill = output_root / "dist" / "public" / "bundle" / ".agents" / "skills" / "omg" / bundle_id / "SKILL.md"
+        if not public_skill.exists():
+            missing_dist_public.append(str(public_skill.relative_to(output_root)))
+
+        enterprise_skill = output_root / "dist" / "enterprise" / "bundle" / ".agents" / "skills" / "omg" / bundle_id / "SKILL.md"
+        if not enterprise_skill.exists():
+            missing_dist_enterprise.append(str(enterprise_skill.relative_to(output_root)))
+
+    pyproject_path = root / "pyproject.toml"
+    if pyproject_path.exists():
+        pyproject_content = pyproject_path.read_text(encoding="utf-8")
+        for bundle_id in TRUTH_COUNCIL_BUNDLES:
+            data_file_key = f'".agents/skills/omg/{bundle_id}" = '
+            if data_file_key not in pyproject_content:
+                missing_pyproject_data_files.append(bundle_id)
+    else:
+        missing_pyproject_data_files = list(TRUTH_COUNCIL_BUNDLES)
+
+    failed = any(
+        (
+            missing_settings_required_bundles,
+            missing_dist_public,
+            missing_dist_enterprise,
+            missing_pyproject_data_files,
+        )
+    )
+    return {
+        "status": "ok" if not failed else "error",
+        "blockers": ["bundle_promotion_parity"] if failed else [],
+        "missing_settings_required_bundles": missing_settings_required_bundles,
+        "missing_dist_public": missing_dist_public,
+        "missing_dist_enterprise": missing_dist_enterprise,
+        "missing_pyproject_data_files": missing_pyproject_data_files,
+    }
+
+
 def _check_packaged_install_smoke(root: Path) -> dict[str, Any]:
     blockers: list[str] = []
     with tempfile.TemporaryDirectory(prefix="omg-wheel-") as tmp_dir:
@@ -1911,6 +1978,10 @@ def _check_packaged_install_smoke(root: Path) -> dict[str, Any]:
             "plugins/dephealth/cve_scanner.py",
             "OMG_COMPAT_CONTRACT.md",
             ".agents/skills/omg/security-check/SKILL.md",
+            ".agents/skills/omg/plan-council/SKILL.md",
+            ".agents/skills/omg/claim-judge/SKILL.md",
+            ".agents/skills/omg/test-intent-lock/SKILL.md",
+            ".agents/skills/omg/proof-gate/SKILL.md",
         )
         for suffix in required_suffixes:
             if not any(name.endswith(suffix) for name in names):