@trac3er/oh-my-god 2.1.0 → 2.1.4

package/commands/OMG:profile-review.md

@@ -0,0 +1,43 @@
+---
+description: Review governed profile state — preferences, confirmations, decay, and provenance
+allowed-tools: Bash(python3:*), Read, Grep, Glob
+---
+
+# /OMG:profile-review
+
+Read-only inspection of the governed user profile. Reports active style and
+safety preferences, pending destructive confirmations, stale/decay candidates,
+and provenance summaries.
+
+**This command never mutates `profile.yaml`.**
+
+## Usage
+
+```
+python3 scripts/omg.py profile-review [--format json|text]
+```
+
+- `--format json` — machine-readable JSON (default)
+- `--format text` — human-readable summary
+
+## JSON output shape
+
+```json
+{
+  "schema": "ProfileReview",
+  "style": [ { "field": "...", "value": "...", "confirmation_state": "...", ... } ],
+  "safety": [ { "field": "...", "value": "...", "confirmation_state": "...", ... } ],
+  "pending_confirmations": [ { "field": "...", "value": "...", "section": "..." } ],
+  "decay_candidates": [ { "field": "...", "decay_score": 0.3, ... } ],
+  "provenance_summary": [ { "run_id": "...", "source": "...", "field": "...", "updated_at": "..." } ],
+  "profile_version": "sha256..."
+}
+```
+
+## Report sections
+
+1. **Style preferences** — governed style entries with source, learned_at, decay metadata
+2. **Safety preferences** — governed safety entries (decay-immune)
+3. **Pending confirmations** — entries marked `pending_confirmation` (destructive signals awaiting user approval)
+4. **Decay candidates** — style entries with `decay_score > 0` that may be stale
+5. **Provenance summary** — recent profile update events from `profile_provenance.recent_updates`

package/commands/OMG:setup.md

@@ -1,7 +1,7 @@
 ---
 description: "Native OMG setup and adoption flow for supported hosts"
 allowed-tools: Read, Write, Edit, Bash(python*:*), Bash(ls:*), Bash(grep:*)
-argument-hint: "[optional: --non-interactive, --mode omg-only|coexist, --preset safe|balanced|interop|labs]"
+argument-hint: "[optional: --non-interactive, --mode omg-only|coexist, --preset safe|balanced|interop|labs|plugins-first]"
 ---
 
 # /OMG:setup
@@ -19,6 +19,8 @@ The command keeps migration logic internal and focuses the user on a small adopt
 4. Apply an OMG preset.
 5. Configure MCP and save preferences.
 
+Setup now runs foreign-plugin discovery in `interop` and `coexist` modes, reporting compatibility findings and potential overlaps.
+
 ## Wizard Flow
 
 ```text
@@ -41,6 +43,7 @@ Step 4: Choose preset
   - balanced
   - interop
   - labs
+  - plugins-first (alias for interop)
 
 Step 5: Configure MCP and persist preferences
   - writes .mcp.json

package/commands/OMG:validate.md

@@ -0,0 +1,59 @@
+---
+description: Canonical validation — doctor + contract + profile + install checks
+allowed-tools: Bash(python3:*), Bash(ls:*), Bash(cat:*), Bash(grep:*), Bash(git:*), Read, Grep, Glob
+---
+
+# /OMG:validate
+
+Run the canonical OMG validation engine that composes all verification surfaces:
+
+1. **Doctor checks**: Python version, fastmcp, omg-control, policy files, metadata drift, compiled bundles, host compatibility, memory, managed runtime
+2. **Contract registry**: Validates contract doc, schema, and bundle integrity
+3. **Profile governor**: Verifies governed preferences structure and pending confirmations
+4. **Install integrity**: Confirms scripts, runtime, commands, and plugins directories exist
+
+## Usage
+
+```bash
+# Human-readable output (default)
+python3 scripts/omg.py validate
+
+# Machine-readable JSON
+python3 scripts/omg.py validate --format json
+```
+
+## Output Schema (JSON)
+
+```json
+{
+  "schema": "ValidateResult",
+  "status": "pass" | "fail",
+  "checks": [
+    {
+      "name": "check_name",
+      "status": "ok" | "blocker" | "warning",
+      "message": "human-readable description",
+      "required": true | false
+    }
+  ],
+  "version": "2.1.4"
+}
+```
+
+## Exit Codes
+
+- `0` — all required checks pass
+- `1` — one or more blockers detected
+
+## Report Format (text)
+
+```
+   PASS python_version: Python 3.12.0
+   PASS fastmcp: fastmcp importable
+BLOCKER omg_control_reachable: omg-control not found in .mcp.json
+   PASS contract_registry: contract registry valid (0 errors)
+   PASS profile_governor: profile governor ok (2 style, 1 safety) (optional)
+   PASS install_integrity: install integrity ok
+
+PASS [5] | WARN [0] | BLOCKER [1]
+```

package/control_plane/service.py

@@ -4,6 +4,7 @@ from __future__ import annotations
 
 from datetime import datetime, timezone
 import os
+from pathlib import Path
 from typing import Any
 
 from hooks.policy_engine import (
@@ -20,6 +21,7 @@ from runtime.guide_assert import guide_assert
 from runtime.dispatcher import dispatch_runtime
 from runtime.claim_judge import judge_claims
 from runtime.mutation_gate import check_mutation_allowed
+from runtime.runtime_contracts import read_run_state
 from runtime.security_check import run_security_check
 from runtime.test_intent_lock import lock_intent, verify_intent
 
@@ -275,15 +277,24 @@ class ControlPlaneService:
         file_path = payload.get("file_path")
         lock_id = payload.get("lock_id")
         exemption = payload.get("exemption")
+        command = payload.get("command")
+        run_id = payload.get("run_id")
+        metadata = payload.get("metadata")
 
         if not isinstance(tool, str) or not tool.strip():
             raise ValueError("tool is required")
-        if not isinstance(file_path, str) or not file_path.strip():
+        if not isinstance(file_path, str) or (tool != "Bash" and not file_path.strip()):
             raise ValueError("file_path is required")
         if lock_id is not None and not isinstance(lock_id, str):
             raise ValueError("lock_id must be a string when provided")
         if exemption is not None and not isinstance(exemption, str):
             raise ValueError("exemption must be a string when provided")
+        if command is not None and not isinstance(command, str):
+            raise ValueError("command must be a string when provided")
+        if run_id is not None and not isinstance(run_id, str):
+            raise ValueError("run_id must be a string when provided")
+        if metadata is not None and not isinstance(metadata, dict):
+            raise ValueError("metadata must be an object when provided")
 
         result = check_mutation_allowed(
             tool=tool,
@@ -291,9 +302,37 @@ class ControlPlaneService:
             project_dir=self.project_dir,
             lock_id=lock_id,
             exemption=exemption,
+            command=command,
+            run_id=run_id,
+            metadata=metadata,
         )
         return 200, result
 
+    def session_health(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
+        run_id = payload.get("run_id")
+        if isinstance(run_id, str) and run_id.strip():
+            state = read_run_state(self.project_dir, "session_health", run_id.strip())
+            if state is None:
+                return 404, {"status": "error", "message": f"No session health for run_id: {run_id}"}
+            return 200, dict(state)
+
+        health_dir = Path(self.project_dir) / ".omg" / "state" / "session_health"
+        if not health_dir.exists():
+            return 404, {"status": "error", "message": "No session health state found"}
+
+        candidates = sorted(
+            (f for f in health_dir.iterdir() if f.suffix == ".json" and not f.name.endswith(".tmp")),
+            key=lambda p: p.stat().st_mtime,
+        )
+        if not candidates:
+            return 404, {"status": "error", "message": "No session health state found"}
+
+        latest_run_id = candidates[-1].stem
+        state = read_run_state(self.project_dir, "session_health", latest_run_id)
+        if state is None:
+            return 404, {"status": "error", "message": "Failed to read session health state"}
+        return 200, dict(state)
+
     def scoreboard_baseline(self) -> tuple[int, dict[str, Any]]:
         return 200, {
             "generated_at": datetime.now(timezone.utc).isoformat(),

package/dist/enterprise/bundle/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.1.0",
+    "version": "2.1.4",
     "homepage": "https://github.com/trac3er00/OMG",
     "repository": "https://github.com/trac3er00/OMG"
   },
@@ -14,7 +14,7 @@
     {
       "name": "omg",
       "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.1.0",
+      "version": "2.1.4",
       "source": "./",
       "author": {
         "name": "trac3er00"
@@ -32,5 +32,5 @@
       ]
     }
   ],
-  "version": "2.1.0"
+  "version": "2.1.4"
 }

package/dist/enterprise/bundle/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg",
-  "version": "2.1.0",
+  "version": "2.1.4",
   "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
   "author": {
     "name": "trac3er00"

package/dist/enterprise/bundle/OMG_COMPAT_CONTRACT.md

@@ -1,6 +1,6 @@
 ---
 title: OMG Production Control Plane
-version: 2.1.0
+version: 2.1.4
 canonical_hosts:
   - claude
   - codex

package/dist/enterprise/bundle/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.1.0",
+  "version": "2.1.4",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {
@@ -53,35 +53,52 @@
   "categories": {
     "planning": {
       "description": "Strategic planning and architecture",
-      "commands": ["deep-plan"]
+      "commands": [
+        "deep-plan"
+      ]
     },
     "quality": {
       "description": "Code quality and review",
-      "commands": ["code-review"]
+      "commands": [
+        "code-review"
+      ]
     },
     "knowledge": {
       "description": "Learning and skill creation",
-      "commands": ["learn"]
+      "commands": [
+        "learn"
+      ]
     },
     "delivery": {
       "description": "Shipping and release workflows",
-      "commands": ["ship"]
+      "commands": [
+        "ship"
+      ]
     },
     "collaboration": {
       "description": "Team collaboration and handoff",
-      "commands": ["handoff"]
+      "commands": [
+        "handoff"
+      ]
     },
     "automation": {
       "description": "Autonomous execution modes",
-      "commands": ["ralph-start", "ralph-stop"]
+      "commands": [
+        "ralph-start",
+        "ralph-stop"
+      ]
     },
     "thinking": {
       "description": "Structured thinking tools",
-      "commands": ["sequential-thinking"]
+      "commands": [
+        "sequential-thinking"
+      ]
     },
     "oss": {
       "description": "Open source maintainer tools",
-      "commands": ["maintainer"]
+      "commands": [
+        "maintainer"
+      ]
     }
   }
 }

package/dist/enterprise/bundle/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/dist/enterprise/bundle/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.0
+version: 2.1.4
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/dist/enterprise/bundle/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.0
+version: 2.1.4
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/dist/enterprise/bundle/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.1.0
+version: 2.1.4
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude and Codex.
 hosts:

package/dist/enterprise/bundle/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.1.0
+version: 2.1.4
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/dist/enterprise/bundle/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.1.0
+version: 2.1.4
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.1.0
+version: 2.1.4
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/dist/enterprise/bundle/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/dist/enterprise/bundle/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.0
+version: 2.1.4
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/dist/enterprise/bundle/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.1.0
+version: 2.1.4
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.1.0
+version: 2.1.4
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/dist/enterprise/bundle/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.1.0
+version: 2.1.4
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/dist/enterprise/bundle/registry/bundles/plan-council.yaml

@@ -1,6 +1,6 @@
 id: plan-council
 kind: planning
-version: 2.1.0
+version: 2.1.4
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:

package/dist/enterprise/bundle/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.1.0
+version: 2.1.4
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/dist/enterprise/bundle/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.1.0
+version: 2.1.4
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/dist/enterprise/bundle/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.1.0
+version: 2.1.4
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/dist/enterprise/bundle/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/dist/enterprise/bundle/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.1.0
+version: 2.1.4
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/dist/enterprise/bundle/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.1.0
+version: 2.1.4
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/dist/enterprise/bundle/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.1.0
+version: 2.1.4
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/dist/enterprise/bundle/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.1.0
+version: 2.1.4
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/dist/enterprise/bundle/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Vision Pack
 description: Vision-specific lineage, drift, and replay attachments.
 hosts:

package/dist/enterprise/bundle/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.1.0",
+  "version": "2.1.4",
   "type": "object",
   "required": [
     "id",

package/dist/enterprise/bundle/settings.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "_comment": "OMG 2.1.0 - project-level config with hook registrations, presets, and feature flags.",
+  "_comment": "OMG 2.1.4 - project-level config with hook registrations, presets, and feature flags.",
   "permissions": {
     "allow": [
       "Agent",
@@ -316,7 +316,7 @@
     ]
   },
   "_omg": {
-    "_version": "2.1.0",
+    "_version": "2.1.4",
     "preset": "safe",
     "omgMode": "focused",
     "default_mode": "ulw+ralph",
@@ -370,7 +370,7 @@
       "CONTEXT_MANAGER": false
     },
     "generated": {
-      "contract_version": "2.1.0",
+      "contract_version": "2.1.4",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",