@trac3er/oh-my-god 2.1.0 → 2.1.4

package/plugins/core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-core",
-  "version": "2.1.0",
+  "version": "2.1.4",
   "description": "Core OMG commands - native setup, routing, orchestration, and verification surfaces",
   "type": "omg-plugin",
   "commands": {
@@ -64,6 +64,11 @@
       "description": "Verify project setup and tool integration",
       "category": "setup"
     },
+    "profile-review": {
+      "path": "commands/OMG:profile-review.md",
+      "description": "Review governed profile state \u2014 preferences, confirmations, decay, provenance",
+      "category": "observability"
+    },
     "mode": {
       "path": "commands/OMG:mode.md",
       "description": "Set cognitive mode for the session",
@@ -98,51 +103,85 @@
     },
     "arch": {
       "path": "commands/OMG:arch.md",
-      "description": "Codebase visualization — dependency graphs and architecture diagrams",
+      "description": "Codebase visualization \u2014 dependency graphs and architecture diagrams",
       "category": "visualization",
       "feature_flag": "CODEBASE_VIZ"
+    },
+    "validate": {
+      "path": "commands/OMG:validate.md",
+      "description": "Canonical validation \u2014 doctor + contract + profile + install checks",
+      "category": "observability"
     }
   },
   "categories": {
     "setup": {
       "description": "Project initialization and setup",
-      "commands": ["setup", "init", "health-check"]
+      "commands": [
+        "setup",
+        "init",
+        "health-check"
+      ]
     },
     "routing": {
       "description": "Model routing and escalation",
-      "commands": ["escalate", "teams", "ccg", "preflight"]
+      "commands": [
+        "escalate",
+        "teams",
+        "ccg",
+        "preflight"
+      ]
     },
     "verification": {
       "description": "Verification flows with normalized evidence",
-      "commands": ["browser"]
+      "commands": [
+        "browser"
+      ]
     },
     "orchestration": {
       "description": "Multi-agent orchestration modes",
-      "commands": ["crazy"]
+      "commands": [
+        "crazy"
+      ]
     },
     "compatibility": {
       "description": "Legacy compatibility",
-      "commands": ["compat"]
+      "commands": [
+        "compat"
+      ]
     },
     "config": {
       "description": "Configuration and settings",
-      "commands": ["mode"]
+      "commands": [
+        "mode"
+      ]
     },
     "observability": {
       "description": "Cost tracking and session observability",
-      "commands": ["cost", "stats", "deps"]
+      "commands": [
+        "cost",
+        "stats",
+        "deps",
+        "profile-review",
+        "validate"
+      ]
     },
     "security": {
       "description": "Canonical security and trust checks",
-      "commands": ["security-check"]
+      "commands": [
+        "security-check"
+      ]
     },
     "contracts": {
       "description": "Contract replay and API simulation",
-      "commands": ["api-twin"]
+      "commands": [
+        "api-twin"
+      ]
     },
     "visualization": {
       "description": "Codebase visualization and architecture diagrams",
-      "commands": ["arch"]
+      "commands": [
+        "arch"
+      ]
     }
   },
   "roles": {

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "oh-my-god"
-version = "2.1.0"
+version = "2.1.4"
 description = "OMG (Oh My God) — Multi-agent orchestration, evidence-backed verification, and durable session state for Claude Code, Codex, and supported agent hosts"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -31,6 +31,8 @@ dependencies = [
 test = [
     "pytest>=7.0",
     "pytest-cov>=4.0",
+    "pytest-xdist>=3.0",
+    "pytest-timeout>=2.0",
 ]
 mcp = [
     "fastmcp>=2.0",
@@ -91,13 +93,19 @@ python_classes = ["Test*"]
 python_functions = ["test_*"]
 addopts = [
     "--strict-markers",
+    "-n",
+    "auto",
+    "--dist",
+    "loadgroup",
+    "--timeout=30",
     "--cov=.",
     "--cov-report=term-missing",
     "--cov-report=html",
 ]
 markers = [
     "slow: marks tests as slow",
-    "integration: marks tests as integration tests",
+    "e2e: marks tests as end-to-end tests (heavy)",
+    "integration: marks tests as integration tests (heavy)",
     "unit: marks tests as unit tests",
 ]
 

package/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.0
+version: 2.1.4
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.0
+version: 2.1.4
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.1.0
+version: 2.1.4
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude and Codex.
 hosts:

package/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.1.0
+version: 2.1.4
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.1.0
+version: 2.1.4
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.1.0
+version: 2.1.4
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.0
+version: 2.1.4
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.1.0
+version: 2.1.4
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.1.0
+version: 2.1.4
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.1.0
+version: 2.1.4
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/registry/bundles/plan-council.yaml

@@ -1,6 +1,6 @@
 id: plan-council
 kind: planning
-version: 2.1.0
+version: 2.1.4
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:

package/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.1.0
+version: 2.1.4
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.1.0
+version: 2.1.4
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.1.0
+version: 2.1.4
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.1.0
+version: 2.1.4
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.1.0
+version: 2.1.4
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.1.0
+version: 2.1.4
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.1.0
+version: 2.1.4
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Vision Pack
 description: Vision-specific lineage, drift, and replay attachments.
 hosts:

package/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.1.0",
+  "version": "2.1.4",
   "type": "object",
   "required": [
     "id",

package/runtime/adoption.py

@@ -11,7 +11,7 @@ CANONICAL_REPO_URL = "https://github.com/trac3er00/OMG"
 CANONICAL_PACKAGE_NAME = "@trac3er/oh-my-god"
 CANONICAL_PLUGIN_ID = "omg"
 CANONICAL_MARKETPLACE_ID = "omg"
-CANONICAL_VERSION = "2.1.0"
+CANONICAL_VERSION = "2.1.4"
 
 VALID_ADOPTION_MODES = ("omg-only", "coexist")
 VALID_PRESETS = ("safe", "balanced", "interop", "labs")
@@ -82,14 +82,16 @@ _SUPERPOWERS_SENTINELS = (
 )
 
 
-def resolve_preset(preset: str | None) -> str:
+def resolve_preset(preset: str) -> str:
+    if preset == "plugins-first":
+        return "interop"
     if preset in VALID_PRESETS:
         return preset
-    return "safe"
+    raise ValueError(f"Unknown preset: {preset}")
 
 
 def get_preset_features(preset: str | None) -> dict[str, bool]:
-    resolved = resolve_preset(preset)
+    resolved = resolve_preset(preset or "safe")
     return dict(PRESET_FEATURES[resolved])
 
 
@@ -192,7 +194,7 @@ def build_adoption_report(
     detected_ecosystems = detect_ecosystems(project_dir) if adopt == "auto" else []
     recommended_mode = recommend_mode(detected_ecosystems)
     selected_mode = requested_mode if requested_mode in VALID_ADOPTION_MODES else recommended_mode
-    resolved_preset = resolve_preset(preset)
+    resolved_preset = resolve_preset(preset or "safe")
 
     return {
         "schema": "OmgAdoptionReport",

package/runtime/background_verification.py

@@ -46,3 +46,65 @@ def read_verification_state(project_dir: str) -> dict[str, Any] | None:
     except (json.JSONDecodeError, OSError):
         pass
     return None
+
+
+# --- Task 10: Smart validation skipping + timeout gates ---
+
+# Profiles that must NEVER skip any validation stage.
+_NEVER_SKIP_PROFILES: frozenset[str] = frozenset({"release", "security-audit"})
+
+
+def should_skip_validation(evidence_profile: str | None, stage: str) -> bool:
+    """Return True if *stage* can be skipped for the given evidence profile.
+
+    Uses the central requirement registry from ``runtime.evidence_requirements``
+    so profile names and requirement lists are never hardcoded here.
+
+    Rules:
+    - ``release`` and ``security-audit`` profiles NEVER skip any stage.
+    - ``None``, empty, or unknown profiles fall back to FULL_REQUIREMENTS (no skip).
+    - For other profiles, a stage is skipped when it is NOT in that profile's
+      requirement list.
+    """
+    from runtime.evidence_requirements import requirements_for_profile
+
+    profile = (evidence_profile or "").strip()
+
+    # Never-skip profiles: full requirements, nothing skippable
+    if profile in _NEVER_SKIP_PROFILES:
+        return False
+
+    required = requirements_for_profile(profile if profile else None)
+    return stage not in required
+
+
+def skipped_stages_for_profile(evidence_profile: str | None) -> list[str]:
+    """Return the list of stages that WOULD be skipped for a given profile.
+
+    Useful for logging and HUD state.
+    """
+    from runtime.evidence_requirements import FULL_REQUIREMENTS
+
+    return [stage for stage in FULL_REQUIREMENTS if should_skip_validation(evidence_profile, stage)]
+
+
+def run_validation_with_timeout(
+    fn: object,
+    timeout_seconds: float = 60.0,
+) -> dict[str, Any]:
+    """Execute a validation callable with a timeout gate.
+
+    Returns a dict with ``status`` (the callable's return or ``"timeout"``)
+    and ``timed_out`` bool.  The callable must be a zero-arg function
+    returning a string status.
+    """
+    import concurrent.futures
+
+    with concurrent.futures.ThreadPoolExecutor(max_workers=1) as pool:
+        future = pool.submit(fn)  # type: ignore[arg-type]
+        try:
+            result = future.result(timeout=timeout_seconds)
+            return {"status": result, "timed_out": False}
+        except concurrent.futures.TimeoutError:
+            future.cancel()
+            return {"status": "timeout", "timed_out": True}