@trac3er/oh-my-god 2.1.0 → 2.1.4

package/runtime/plugin_interop.py

@@ -0,0 +1,1007 @@
+from __future__ import annotations
+
+import json
+import os
+import re
+import subprocess
+import time
+from collections.abc import Mapping
+from dataclasses import dataclass, field
+from enum import Enum
+from pathlib import Path
+from typing import cast
+import yaml
+
+from runtime.hook_governor import validate_order
+
+
+class Layer(str, Enum):
+    AUTHORED = "authored"
+    COMPILED = "compiled"
+    LIVE = "live"
+    DISCOVERED = "discovered"
+
+
+class Source(str, Enum):
+    PLUGIN_MANIFEST = "plugin_manifest"
+    MCP_JSON = "mcp_json"
+    COMPILED_BUNDLE = "compiled_bundle"
+    SKILL_REGISTRY = "skill_registry"
+    HOST_CONFIG = "host_config"
+    PLUGIN_DIR = "plugin_dir"
+
+
+class ConflictCode(str, Enum):
+    MCP_NAME_COLLISION = "mcp_name_collision"
+    COMMAND_COLLISION = "command_collision"
+    HOOK_ORDER_VIOLATION = "hook_order_violation"
+    PRESET_ESCALATION = "preset_escalation"
+    IDENTITY_DRIFT = "identity_drift"
+    UNSUPPORTED_HOST = "unsupported_host"
+    STALE_COMPILED_ARTIFACT = "stale_compiled_artifact"
+    PARTIAL_INSTALL = "partial_install"
+    HOST_PRECEDENCE_OVERLAP = "host_precedence_overlap"
+
+
+class ConflictSeverity(str, Enum):
+    BLOCKER = "blocker"
+    WARNING = "warning"
+    INFO = "info"
+
+
+CONFLICT_SEVERITY_MAP: dict[ConflictCode, ConflictSeverity] = {
+    ConflictCode.MCP_NAME_COLLISION: ConflictSeverity.BLOCKER,
+    ConflictCode.HOOK_ORDER_VIOLATION: ConflictSeverity.BLOCKER,
+    ConflictCode.COMMAND_COLLISION: ConflictSeverity.BLOCKER,
+    ConflictCode.PRESET_ESCALATION: ConflictSeverity.WARNING,
+    ConflictCode.IDENTITY_DRIFT: ConflictSeverity.WARNING,
+    ConflictCode.UNSUPPORTED_HOST: ConflictSeverity.WARNING,
+    ConflictCode.STALE_COMPILED_ARTIFACT: ConflictSeverity.INFO,
+    ConflictCode.PARTIAL_INSTALL: ConflictSeverity.INFO,
+    ConflictCode.HOST_PRECEDENCE_OVERLAP: ConflictSeverity.INFO,
+}
+
+SUPPORTED_HOSTS: set[str] = {"claude", "codex", "gemini", "kimi", "opencode"}
+SECURITY_PRETOOL_PLUGINS: tuple[str, ...] = ("firewall", "secret-guard")
+PRESET_ORDER: tuple[str, ...] = ("safe", "balanced", "interop", "labs")
+_PRESET_ORDER_INDEX: dict[str, int] = {name: idx for idx, name in enumerate(PRESET_ORDER)}
+_SEVERITY_RANK: dict[str, int] = {
+    ConflictSeverity.BLOCKER.value: 0,
+    ConflictSeverity.WARNING.value: 1,
+    ConflictSeverity.INFO.value: 2,
+}
+
+
+@dataclass(slots=True)
+class PluginInteropRecord:
+    plugin_id: str
+    layer: str
+    host: str
+    source: str
+    commands: list[str] = field(default_factory=list)
+    hook_events: list[str] = field(default_factory=list)
+    mcp_servers: list[str] = field(default_factory=list)
+    preset_floor: str | None = None
+    enabled: bool = True
+    source_path: str | None = None
+    metadata: dict[str, object] = field(default_factory=dict)
+
+    def __post_init__(self) -> None:
+        valid_layers = {member.value for member in Layer}
+        valid_sources = {member.value for member in Source}
+        if self.layer not in valid_layers:
+            raise ValueError(f"Invalid layer: {self.layer}. Expected one of {sorted(valid_layers)}")
+        if self.source not in valid_sources:
+            raise ValueError(f"Invalid source: {self.source}. Expected one of {sorted(valid_sources)}")
+
+    def to_dict(self) -> dict[str, object]:
+        return {
+            "plugin_id": self.plugin_id,
+            "layer": self.layer,
+            "host": self.host,
+            "source": self.source,
+            "commands": list(self.commands),
+            "hook_events": list(self.hook_events),
+            "mcp_servers": list(self.mcp_servers),
+            "preset_floor": self.preset_floor,
+            "enabled": self.enabled,
+            "source_path": self.source_path,
+            "metadata": dict(self.metadata),
+        }
+
+    @classmethod
+    def from_dict(cls, payload: Mapping[str, object]) -> PluginInteropRecord:
+        commands = _to_str_list(payload.get("commands"), "commands")
+        hook_events = _to_str_list(payload.get("hook_events"), "hook_events")
+        mcp_servers = _to_str_list(payload.get("mcp_servers"), "mcp_servers")
+        metadata = _to_str_object_dict(payload.get("metadata"), "metadata")
+        return cls(
+            plugin_id=_to_str_required(payload, "plugin_id"),
+            layer=_to_str_required(payload, "layer"),
+            host=_to_str_required(payload, "host"),
+            source=_to_str_required(payload, "source"),
+            commands=commands,
+            hook_events=hook_events,
+            mcp_servers=mcp_servers,
+            preset_floor=_to_optional_str(payload.get("preset_floor"), "preset_floor"),
+            enabled=_to_bool(payload.get("enabled", True), "enabled"),
+            source_path=_to_optional_str(payload.get("source_path"), "source_path"),
+            metadata=metadata,
+        )
+
+
+@dataclass(slots=True)
+class ConflictResult:
+    code: str
+    severity: str
+    affected_plugin_ids: list[str]
+    affected_hosts: list[str]
+    detail: str
+    next_action: str
+
+
+@dataclass(slots=True)
+class PluginAllowlistEntry:
+    source: str
+    host: str
+    resource_type: str
+    reason: str
+    scope: str = "project"
+    timestamp: str | None = None
+    approver: str | None = None
+
+    def to_dict(self) -> dict[str, object]:
+        return {
+            "source": self.source,
+            "host": self.host,
+            "resource_type": self.resource_type,
+            "reason": self.reason,
+            "scope": self.scope,
+            "timestamp": self.timestamp,
+            "approver": self.approver,
+        }
+
+
+def validate_plugin_allowlist_entry(payload: Mapping[str, object]) -> None:
+    source = payload.get("source")
+    host = payload.get("host")
+    resource_type = payload.get("resource_type")
+    reason = payload.get("reason")
+    scope = payload.get("scope", "project")
+    timestamp = payload.get("timestamp")
+    approver = payload.get("approver")
+
+    if not isinstance(source, str) or not source:
+        raise ValueError("source must be a non-empty string")
+    if not isinstance(host, str) or host not in SUPPORTED_HOSTS:
+        raise ValueError(f"host must be one of {sorted(SUPPORTED_HOSTS)}")
+    if not isinstance(resource_type, str) or resource_type not in {"mcp_server", "skill", "plugin"}:
+        raise ValueError("resource_type must be one of: mcp_server, skill, plugin")
+    if not isinstance(reason, str) or not reason.strip():
+        raise ValueError("reason must be a non-empty string")
+    if not isinstance(scope, str) or scope not in {"project", "user"}:
+        raise ValueError("scope must be 'project' or 'user'")
+    if timestamp is not None and not isinstance(timestamp, str):
+        raise ValueError("timestamp must be a string or None")
+    if approver is not None and not isinstance(approver, str):
+        raise ValueError("approver must be a string or None")
+
+    source_prefix, _, _ = source.partition(":")
+    expected_resource_by_prefix = {
+        "mcp": "mcp_server",
+        "skill": "skill",
+        "plugin": "plugin",
+    }
+    expected_resource = expected_resource_by_prefix.get(source_prefix)
+    if expected_resource is None:
+        raise ValueError("source must start with one of: mcp:, skill:, plugin:")
+    if resource_type != expected_resource:
+        raise ValueError(f"resource_type '{resource_type}' does not match source prefix '{source_prefix}:'")
+
+
+def load_plugin_allowlist(root: str | None = None) -> list[PluginAllowlistEntry]:
+    root_path = Path(root or ".").resolve()
+    allowlist_path = root_path / ".omg" / "state" / "plugins-allowlist.yaml"
+    try:
+        raw = allowlist_path.read_text(encoding="utf-8")
+    except OSError:
+        return []
+
+    parsed_obj = cast(object, yaml.safe_load(raw))
+    if not isinstance(parsed_obj, list):
+        return []
+
+    entries: list[PluginAllowlistEntry] = []
+    for item in cast(list[object], parsed_obj):
+        if not isinstance(item, dict):
+            continue
+        payload = cast(dict[str, object], item)
+        try:
+            validate_plugin_allowlist_entry(payload)
+        except ValueError:
+            continue
+        entries.append(
+            PluginAllowlistEntry(
+                source=cast(str, payload["source"]),
+                host=cast(str, payload["host"]),
+                resource_type=cast(str, payload["resource_type"]),
+                reason=cast(str, payload["reason"]),
+                scope=cast(str, payload.get("scope", "project")),
+                timestamp=cast(str | None, payload.get("timestamp")),
+                approver=cast(str | None, payload.get("approver")),
+            )
+        )
+    return entries
+
+
+def save_plugin_allowlist(entries: list[PluginAllowlistEntry], root: str | None = None) -> str:
+    root_path = Path(root or ".").resolve()
+    state_dir = root_path / ".omg" / "state"
+    state_dir.mkdir(parents=True, exist_ok=True)
+    allowlist_path = state_dir / "plugins-allowlist.yaml"
+
+    serializable: list[dict[str, object]] = []
+    for entry in entries:
+        payload = entry.to_dict()
+        validate_plugin_allowlist_entry(payload)
+        serializable.append(payload)
+
+    dumped = yaml.safe_dump(serializable, sort_keys=False)
+    if not isinstance(dumped, str):
+        raise ValueError("plugins allowlist serialization failed")
+    _ = allowlist_path.write_text(cast(str, dumped), encoding="utf-8")
+    return str(allowlist_path)
+
+
+@dataclass(slots=True)
+class HookChainPlan:
+    event: str
+    chain: list[str]
+    status: str
+    blockers: list[str]
+
+
+def plan_hook_chain(event: str, foreign_hook_names: list[str]) -> HookChainPlan:
+    proposed_chain: list[str]
+    blockers: list[str] = []
+
+    if event == "PreToolUse":
+        for hook_name in foreign_hook_names:
+            if hook_name in SECURITY_PRETOOL_PLUGINS:
+                blockers.append(
+                    f"foreign hook '{hook_name}' must not appear before immovable security hooks"
+                )
+
+        non_security_hooks = [name for name in foreign_hook_names if name not in SECURITY_PRETOOL_PLUGINS]
+        cleanup_hooks = [name for name in non_security_hooks if "cleanup" in name.lower()]
+        standard_hooks = [name for name in non_security_hooks if "cleanup" not in name.lower()]
+        proposed_chain = [*SECURITY_PRETOOL_PLUGINS, *standard_hooks, *cleanup_hooks]
+    else:
+        proposed_chain = list(foreign_hook_names)
+
+    validation = validate_order(event, proposed_chain)
+    validation_blockers = list(validation.get("blockers", []))
+    no_canonical_order = validation_blockers == [f"no canonical hook order for event {event}"]
+    if not (event != "PreToolUse" and no_canonical_order):
+        blockers.extend(validation_blockers)
+
+    status = "blocked" if blockers else "ok"
+    return HookChainPlan(event=event, chain=proposed_chain, status=status, blockers=blockers)
+
+
+def classify_conflicts(records: list[PluginInteropRecord]) -> list[ConflictResult]:
+    if not records:
+        return []
+
+    conflicts: list[ConflictResult] = []
+    seen_signatures: set[tuple[str, tuple[str, ...], tuple[str, ...], str]] = set()
+
+    def add_conflict(
+        code: ConflictCode,
+        plugin_ids: list[str],
+        hosts: list[str],
+        detail: str,
+        next_action: str,
+    ) -> None:
+        normalized_plugins = sorted(set(plugin_ids))
+        normalized_hosts = sorted(set(hosts))
+        signature = (code.value, tuple(normalized_plugins), tuple(normalized_hosts), detail)
+        if signature in seen_signatures:
+            return
+        seen_signatures.add(signature)
+        conflicts.append(
+            ConflictResult(
+                code=code.value,
+                severity=CONFLICT_SEVERITY_MAP[code].value,
+                affected_plugin_ids=normalized_plugins,
+                affected_hosts=normalized_hosts,
+                detail=detail,
+                next_action=next_action,
+            )
+        )
+
+    records_by_host_mcp: dict[tuple[str, str], list[PluginInteropRecord]] = {}
+    records_by_host_command: dict[tuple[str, str], list[PluginInteropRecord]] = {}
+    records_by_mcp_name: dict[str, list[PluginInteropRecord]] = {}
+    records_by_plugin_id: dict[str, list[PluginInteropRecord]] = {}
+
+    security_indices: dict[str, int] = {}
+    for idx, record in enumerate(records):
+        records_by_plugin_id.setdefault(record.plugin_id, []).append(record)
+        if "PreToolUse" in record.hook_events and record.plugin_id in SECURITY_PRETOOL_PLUGINS:
+            if record.plugin_id not in security_indices:
+                security_indices[record.plugin_id] = idx
+
+        for mcp_server in record.mcp_servers:
+            records_by_host_mcp.setdefault((record.host, mcp_server), []).append(record)
+            records_by_mcp_name.setdefault(mcp_server, []).append(record)
+
+        for command in record.commands:
+            records_by_host_command.setdefault((record.host, command), []).append(record)
+
+    for (host, mcp_server), owner_records in sorted(records_by_host_mcp.items()):
+        if len(owner_records) < 2:
+            continue
+        add_conflict(
+            ConflictCode.MCP_NAME_COLLISION,
+            [record.plugin_id for record in owner_records],
+            [host],
+            f"Multiple plugins on host '{host}' declare MCP server '{mcp_server}'.",
+            "Keep one owner per host/MCP name and rename or remove conflicting declarations.",
+        )
+
+    for (host, command), owner_records in sorted(records_by_host_command.items()):
+        if len(owner_records) < 2:
+            continue
+        add_conflict(
+            ConflictCode.COMMAND_COLLISION,
+            [record.plugin_id for record in owner_records],
+            [host],
+            f"Multiple plugins on host '{host}' declare command '{command}'.",
+            "Assign command ownership to one plugin per host or rename conflicting commands.",
+        )
+
+    firewall_index = security_indices.get("firewall")
+    secret_guard_index = security_indices.get("secret-guard")
+    for idx, record in enumerate(records):
+        if "PreToolUse" not in record.hook_events or record.plugin_id in SECURITY_PRETOOL_PLUGINS:
+            continue
+        before_firewall = firewall_index is not None and idx < firewall_index
+        before_secret_guard = secret_guard_index is not None and idx < secret_guard_index
+        if before_firewall or before_secret_guard:
+            add_conflict(
+                ConflictCode.HOOK_ORDER_VIOLATION,
+                [record.plugin_id] + list(SECURITY_PRETOOL_PLUGINS),
+                [record.host],
+                f"Plugin '{record.plugin_id}' registers PreToolUse before required security hooks.",
+                "Move firewall and secret-guard ahead of all non-security PreToolUse hooks.",
+            )
+
+    for record in records:
+        preset_floor = record.preset_floor
+        if preset_floor is None:
+            continue
+        preset_index = _PRESET_ORDER_INDEX.get(preset_floor)
+        safe_index = _PRESET_ORDER_INDEX["safe"]
+        if preset_index is not None and preset_index > safe_index:
+            add_conflict(
+                ConflictCode.PRESET_ESCALATION,
+                [record.plugin_id],
+                [record.host],
+                f"Plugin '{record.plugin_id}' raises preset floor to '{preset_floor}'.",
+                "Keep preset_floor at safe unless the higher floor is explicitly approved.",
+            )
+
+    for plugin_id, plugin_records in sorted(records_by_plugin_id.items()):
+        layers = sorted({record.layer for record in plugin_records})
+        if len(layers) > 1:
+            add_conflict(
+                ConflictCode.IDENTITY_DRIFT,
+                [plugin_id],
+                [record.host for record in plugin_records],
+                f"Plugin '{plugin_id}' appears with inconsistent layers: {', '.join(layers)}.",
+                "Align authored/compiled/live ownership metadata to a single layer identity.",
+            )
+
+    for record in records:
+        if record.host not in SUPPORTED_HOSTS:
+            add_conflict(
+                ConflictCode.UNSUPPORTED_HOST,
+                [record.plugin_id],
+                [record.host],
+                f"Plugin '{record.plugin_id}' targets unsupported host '{record.host}'.",
+                "Use one of the supported hosts: claude, codex, gemini, kimi, opencode.",
+            )
+
+    for record in records:
+        if record.layer == Layer.COMPILED.value and not record.enabled:
+            add_conflict(
+                ConflictCode.STALE_COMPILED_ARTIFACT,
+                [record.plugin_id],
+                [record.host],
+                f"Compiled artifact for plugin '{record.plugin_id}' is disabled.",
+                "Rebuild artifacts or remove stale compiled entries that are no longer active.",
+            )
+
+    for record in records:
+        if record.layer != Layer.AUTHORED.value:
+            continue
+        if record.commands or record.mcp_servers or record.hook_events:
+            continue
+        add_conflict(
+            ConflictCode.PARTIAL_INSTALL,
+            [record.plugin_id],
+            [record.host],
+            f"Authored plugin '{record.plugin_id}' has no commands, MCP servers, or hook events.",
+            "Finish installation wiring or remove placeholder authored plugin entries.",
+        )
+
+    for mcp_server, owner_records in sorted(records_by_mcp_name.items()):
+        hosts = sorted({record.host for record in owner_records})
+        if len(hosts) < 2:
+            continue
+        add_conflict(
+            ConflictCode.HOST_PRECEDENCE_OVERLAP,
+            [record.plugin_id for record in owner_records],
+            hosts,
+            f"MCP server '{mcp_server}' is declared across multiple hosts.",
+            "Validate intended host precedence and keep cross-host ownership explicit.",
+        )
+
+    return sorted(
+        conflicts,
+        key=lambda conflict: (
+            _SEVERITY_RANK.get(conflict.severity, 99),
+            conflict.code,
+            conflict.detail,
+            tuple(conflict.affected_plugin_ids),
+            tuple(conflict.affected_hosts),
+        ),
+    )
+
+
+def approval_status_for_record(record: PluginInteropRecord, approvals: list[PluginAllowlistEntry]) -> str:
+    if record.host not in SUPPORTED_HOSTS:
+        return "blocked"
+
+    record_conflicts = classify_conflicts([record])
+    if any(conflict.severity == ConflictSeverity.BLOCKER.value for conflict in record_conflicts):
+        return "blocked"
+
+    approved_sources = _approval_sources_for_record(record)
+    for entry in approvals:
+        if entry.host == record.host and entry.source in approved_sources:
+            return "approved"
+
+    return "discoverable"
+
+
+def get_approval_status_for_all(
+    records: list[PluginInteropRecord], approvals: list[PluginAllowlistEntry]
+) -> dict[str, str]:
+    return {record.plugin_id: approval_status_for_record(record, approvals) for record in records}
+
+
+def _approval_sources_for_record(record: PluginInteropRecord) -> set[str]:
+    source_ids: set[str] = set()
+    for server_name in record.mcp_servers:
+        source_ids.add(f"mcp:{server_name}")
+
+    if record.source == Source.SKILL_REGISTRY.value:
+        source_ids.add(f"skill:{record.plugin_id}")
+    else:
+        source_ids.add(f"plugin:{record.plugin_id}")
+
+    return source_ids
+
+
+@dataclass(slots=True)
+class PluginInteropPayload:
+    records: list[PluginInteropRecord]
+    elapsed_ms: float
+    root: str
+
+
+INTEROP_RECORD_SCHEMA: dict[str, object] = {
+    "type": "object",
+    "additionalProperties": False,
+    "required": ["plugin_id", "layer", "host", "source"],
+    "properties": {
+        "plugin_id": {"type": "string"},
+        "layer": {"type": "string", "enum": [member.value for member in Layer]},
+        "host": {"type": "string"},
+        "source": {"type": "string", "enum": [member.value for member in Source]},
+        "commands": {"type": "array", "items": {"type": "string"}, "default": []},
+        "hook_events": {"type": "array", "items": {"type": "string"}, "default": []},
+        "mcp_servers": {"type": "array", "items": {"type": "string"}, "default": []},
+        "preset_floor": {"type": ["string", "null"], "default": None},
+        "enabled": {"type": "boolean", "default": True},
+        "source_path": {"type": ["string", "null"], "default": None},
+        "metadata": {"type": "object", "default": {}},
+    },
+}
+
+
+def _to_str_required(payload: Mapping[str, object], key: str) -> str:
+    value = payload.get(key)
+    if not isinstance(value, str):
+        raise ValueError(f"{key} must be a string")
+    return value
+
+
+def _to_optional_str(value: object, key: str) -> str | None:
+    if value is None:
+        return None
+    if isinstance(value, str):
+        return value
+    raise ValueError(f"{key} must be a string or None")
+
+
+def _to_bool(value: object, key: str) -> bool:
+    if isinstance(value, bool):
+        return value
+    raise ValueError(f"{key} must be a boolean")
+
+
+def _to_str_list(value: object, key: str) -> list[str]:
+    if value is None:
+        return []
+    if not isinstance(value, list):
+        raise ValueError(f"{key} must be a list of strings")
+    result: list[str] = []
+    for item in cast(list[object], value):
+        if not isinstance(item, str):
+            raise ValueError(f"{key} must be a list of strings")
+        result.append(item)
+    return result
+
+
+def _to_str_object_dict(value: object, key: str) -> dict[str, object]:
+    if value is None:
+        return {}
+    if not isinstance(value, dict):
+        raise ValueError(f"{key} must be an object")
+    result: dict[str, object] = {}
+    for candidate_key, candidate_value in cast(dict[object, object], value).items():
+        if not isinstance(candidate_key, str):
+            raise ValueError(f"{key} keys must be strings")
+        result[candidate_key] = candidate_value
+    return result
+
+
+def discover_omg_plugin_state(root: str | None = None) -> PluginInteropPayload:
+    started = time.monotonic()
+    root_path = Path(root or ".").resolve()
+    records: list[PluginInteropRecord] = []
+
+    for manifest_path in root_path.glob("plugins/*/plugin.json"):
+        _append_plugin_manifest_record(records, manifest_path, layer=Layer.AUTHORED)
+
+    _append_plugin_manifest_record(records, root_path / ".claude-plugin" / "plugin.json", layer=Layer.AUTHORED)
+
+    for mcp_path in (root_path / ".claude-plugin" / "mcp.json", root_path / ".mcp.json"):
+        records.extend(_records_from_mcp_config(mcp_path))
+
+    records.extend(_records_from_skill_registry(root_path / ".omg" / "state" / "skill_registry" / "compact.json"))
+
+    build_lib_dir = root_path / "build" / "lib"
+    if build_lib_dir.is_dir():
+        for compiled_manifest_path in build_lib_dir.rglob("plugin.json"):
+            _append_plugin_manifest_record(records, compiled_manifest_path, layer=Layer.COMPILED)
+
+    elapsed_ms = (time.monotonic() - started) * 1000.0
+    return PluginInteropPayload(records=records, elapsed_ms=elapsed_ms, root=str(root_path))
+
+
+def discover_host_plugin_state(root: str | None = None) -> PluginInteropPayload:
+    started = time.monotonic()
+    root_path = Path(root or ".").resolve()
+    home_path = Path.home()
+    records: list[PluginInteropRecord] = []
+
+    records.extend(_records_from_codex_config(home_path / ".codex" / "config.toml"))
+    records.extend(_records_from_host_json_config(home_path / ".gemini" / "settings.json", host="gemini", mcp_key="mcpServers"))
+    records.extend(_records_from_host_json_config(home_path / ".kimi" / "mcp.json", host="kimi", mcp_key="mcpServers"))
+    records.extend(
+        _records_from_host_json_config(
+            home_path / ".config" / "opencode" / "opencode.json",
+            host="opencode",
+            mcp_key="mcp",
+        )
+    )
+    records.extend(_records_from_host_json_config(root_path / "opencode.json", host="opencode", mcp_key="mcp"))
+    records.extend(_records_from_opencode_plugin_dir(root_path / ".opencode" / "plugins"))
+
+    elapsed_ms = (time.monotonic() - started) * 1000.0
+    return PluginInteropPayload(records=records, elapsed_ms=elapsed_ms, root=str(root_path))
+
+
+def _append_plugin_manifest_record(
+    records: list[PluginInteropRecord],
+    manifest_path: Path,
+    *,
+    layer: Layer,
+) -> None:
+    manifest = _read_json_dict(manifest_path)
+    if manifest is None:
+        return
+
+    commands = _extract_omg_commands(manifest)
+    plugin_name = manifest.get("name")
+    plugin_id = plugin_name if isinstance(plugin_name, str) and plugin_name else manifest_path.parent.name
+    records.append(
+        PluginInteropRecord(
+            plugin_id=plugin_id,
+            layer=layer.value,
+            host="claude",
+            source=Source.PLUGIN_MANIFEST.value if layer is Layer.AUTHORED else Source.COMPILED_BUNDLE.value,
+            commands=commands,
+            source_path=str(manifest_path),
+        )
+    )
+
+
+def _records_from_mcp_config(mcp_path: Path) -> list[PluginInteropRecord]:
+    mcp_config = _read_json_dict(mcp_path)
+    if mcp_config is None:
+        return []
+
+    mcp_servers = mcp_config.get("mcpServers")
+    if not isinstance(mcp_servers, dict):
+        return []
+
+    server_names = [name for name in cast(dict[object, object], mcp_servers).keys() if isinstance(name, str)]
+    records: list[PluginInteropRecord] = []
+    for server_name in server_names:
+        records.append(
+            PluginInteropRecord(
+                plugin_id=server_name,
+                layer=Layer.LIVE.value,
+                host="claude",
+                source=Source.MCP_JSON.value,
+                mcp_servers=[server_name],
+                source_path=str(mcp_path),
+            )
+        )
+    return records
+
+
+def _records_from_skill_registry(registry_path: Path) -> list[PluginInteropRecord]:
+    payload = _read_json_dict(registry_path)
+    if payload is None:
+        return []
+
+    skill_ids = _extract_skill_ids(payload)
+    return [
+        PluginInteropRecord(
+            plugin_id=skill_id,
+            layer=Layer.COMPILED.value,
+            host="claude",
+            source=Source.SKILL_REGISTRY.value,
+            source_path=str(registry_path),
+        )
+        for skill_id in skill_ids
+    ]
+
+
+def _records_from_codex_config(config_path: Path) -> list[PluginInteropRecord]:
+    try:
+        lines = config_path.read_text(encoding="utf-8").splitlines()
+    except OSError:
+        return []
+
+    discovered: dict[str, bool] = {}
+    active_section: str | None = None
+    section_server: str | None = None
+
+    for raw_line in lines:
+        line = raw_line.strip()
+        if not line or line.startswith("#"):
+            continue
+        if "#" in line:
+            line = line.split("#", 1)[0].strip()
+        if not line:
+            continue
+
+        if line.startswith("[") and line.endswith("]"):
+            active_section = line[1:-1].strip()
+            section_server = _codex_server_from_section(active_section)
+            if section_server is not None:
+                _ = discovered.setdefault(section_server, True)
+            continue
+
+        if active_section == "mcp_servers" and "=" in line:
+            key, value = line.split("=", 1)
+            candidate = _unquote_toml_key(key.strip())
+            if candidate:
+                _ = discovered.setdefault(candidate, True)
+                inline_enabled = _extract_enabled_from_toml_value(value)
+                if inline_enabled is not None:
+                    discovered[candidate] = inline_enabled
+            continue
+
+        if section_server is not None and "=" in line:
+            key, value = line.split("=", 1)
+            if key.strip() == "enabled":
+                enabled = _parse_toml_bool(value)
+                if enabled is not None:
+                    discovered[section_server] = enabled
+
+    return [
+        PluginInteropRecord(
+            plugin_id=server_name,
+            layer=Layer.LIVE.value,
+            host="codex",
+            source=Source.HOST_CONFIG.value,
+            mcp_servers=[server_name],
+            enabled=enabled,
+            source_path=str(config_path),
+        )
+        for server_name, enabled in discovered.items()
+    ]
+
+
+def _records_from_host_json_config(config_path: Path, *, host: str, mcp_key: str) -> list[PluginInteropRecord]:
+    payload = _read_json_dict(config_path)
+    if payload is None:
+        return []
+
+    mcp_obj = payload.get(mcp_key)
+    if not isinstance(mcp_obj, dict):
+        return []
+
+    records: list[PluginInteropRecord] = []
+    for server_name, server_payload in cast(dict[object, object], mcp_obj).items():
+        if not isinstance(server_name, str):
+            continue
+        records.append(
+            PluginInteropRecord(
+                plugin_id=server_name,
+                layer=Layer.LIVE.value,
+                host=host,
+                source=Source.HOST_CONFIG.value,
+                mcp_servers=[server_name],
+                enabled=_extract_enabled_from_json_payload(server_payload),
+                source_path=str(config_path),
+            )
+        )
+    return records
+
+
+def _records_from_opencode_plugin_dir(plugin_dir: Path) -> list[PluginInteropRecord]:
+    try:
+        entries = sorted(plugin_dir.iterdir(), key=lambda item: item.name)
+    except OSError:
+        return []
+
+    return [
+        PluginInteropRecord(
+            plugin_id=entry.name,
+            layer=Layer.DISCOVERED.value,
+            host="opencode",
+            source=Source.PLUGIN_DIR.value,
+            source_path=str(entry),
+        )
+        for entry in entries
+    ]
+
+
+def _codex_server_from_section(section_name: str) -> str | None:
+    if not section_name.startswith("mcp_servers."):
+        return None
+    return _unquote_toml_key(section_name[len("mcp_servers.") :].strip())
+
+
+def _unquote_toml_key(value: str) -> str:
+    if len(value) >= 2 and value[0] == '"' and value[-1] == '"':
+        return value[1:-1]
+    return value
+
+
+def _parse_toml_bool(value: str) -> bool | None:
+    normalized = value.strip().lower()
+    if normalized == "true":
+        return True
+    if normalized == "false":
+        return False
+    return None
+
+
+def _extract_enabled_from_toml_value(value: str) -> bool | None:
+    match = re.search(r"\benabled\s*=\s*(true|false)\b", value, flags=re.IGNORECASE)
+    if match is None:
+        return None
+    return match.group(1).lower() == "true"
+
+
+def _extract_enabled_from_json_payload(payload: object) -> bool:
+    if isinstance(payload, bool):
+        return payload
+    if isinstance(payload, dict):
+        enabled = cast(dict[object, object], payload).get("enabled")
+        if isinstance(enabled, bool):
+            return enabled
+    return True
+
+
+def _extract_omg_commands(payload: Mapping[str, object]) -> list[str]:
+    commands = payload.get("commands")
+    if not isinstance(commands, dict):
+        return []
+    return [
+        key
+        for key in cast(dict[object, object], commands).keys()
+        if isinstance(key, str) and key.startswith("/OMG:")
+    ]
+
+
+def _extract_skill_ids(payload: Mapping[str, object]) -> list[str]:
+    discovered: list[str] = []
+
+    skills = payload.get("skills")
+    if isinstance(skills, list):
+        for entry in cast(list[object], skills):
+            if isinstance(entry, str):
+                discovered.append(entry)
+            elif isinstance(entry, dict):
+                candidate = cast(dict[object, object], entry).get("id")
+                if isinstance(candidate, str):
+                    discovered.append(candidate)
+    elif isinstance(skills, dict):
+        discovered.extend(key for key in cast(dict[object, object], skills).keys() if isinstance(key, str))
+
+    discovered.extend(key for key in payload if key not in {"skills", "schema", "version"})
+
+    deduped: list[str] = []
+    seen: set[str] = set()
+    for skill_id in discovered:
+        if skill_id not in seen:
+            seen.add(skill_id)
+            deduped.append(skill_id)
+    return deduped
+
+
+def _read_json_dict(path: Path) -> dict[str, object] | None:
+    try:
+        raw_text = path.read_text(encoding="utf-8")
+    except OSError:
+        return None
+
+    try:
+        payload_obj = cast(object, json.loads(raw_text))
+    except json.JSONDecodeError:
+        return None
+
+    if not isinstance(payload_obj, dict):
+        return None
+    return cast(dict[str, object], payload_obj)
+
+
+_SAFE_ENV_KEYS: frozenset[str] = frozenset({"PATH", "HOME", "TMPDIR"})
+
+
+def probe_mcp_server_live(
+    server_name: str,
+    command: list[str],
+    timeout_ms: int = 1500,
+) -> dict[str, object]:
+    """Spawn an MCP server subprocess and send a JSON-RPC initialize request.
+
+    Returns a dict with ``server``, ``status`` (``ok`` | ``timeout`` | ``error``),
+    and ``elapsed_ms``.  Only ``PATH``, ``HOME``, and ``TMPDIR`` are forwarded
+    from the current environment — no secrets leak to the child process.
+    """
+    sanitized_env: dict[str, str] = {
+        key: os.environ[key] for key in _SAFE_ENV_KEYS if key in os.environ
+    }
+
+    initialize_request = json.dumps(
+        {
+            "jsonrpc": "2.0",
+            "id": 1,
+            "method": "initialize",
+            "params": {
+                "protocolVersion": "2024-11-05",
+                "capabilities": {},
+                "clientInfo": {"name": "omg-probe", "version": "0.1.0"},
+            },
+        }
+    ) + "\n"
+
+    started = time.monotonic()
+    try:
+        process = subprocess.Popen(
+            command,
+            stdin=subprocess.PIPE,
+            stdout=subprocess.PIPE,
+            stderr=subprocess.PIPE,
+            env=sanitized_env,
+        )
+    except Exception as exc:
+        elapsed = (time.monotonic() - started) * 1000.0
+        return {
+            "server": server_name,
+            "status": "error",
+            "error": str(exc),
+            "elapsed_ms": elapsed,
+        }
+
+    try:
+        stdout_bytes, _ = process.communicate(
+            input=initialize_request.encode("utf-8"),
+            timeout=timeout_ms / 1000.0,
+        )
+    except subprocess.TimeoutExpired:
+        process.kill()
+        try:
+            process.communicate(timeout=2)
+        except Exception:
+            pass
+        elapsed = (time.monotonic() - started) * 1000.0
+        return {
+            "server": server_name,
+            "status": "timeout",
+            "elapsed_ms": elapsed,
+        }
+    except Exception as exc:
+        elapsed = (time.monotonic() - started) * 1000.0
+        try:
+            process.kill()
+            process.communicate(timeout=2)
+        except Exception:
+            pass
+        return {
+            "server": server_name,
+            "status": "error",
+            "error": str(exc),
+            "elapsed_ms": elapsed,
+        }
+
+    elapsed = (time.monotonic() - started) * 1000.0
+
+    tools: list[str] = []
+    try:
+        response = json.loads(stdout_bytes.decode("utf-8", errors="replace").strip())
+        if isinstance(response, dict):
+            caps = response.get("result", {})
+            if isinstance(caps, dict):
+                tool_list = caps.get("capabilities", {}).get("tools", [])
+                if isinstance(tool_list, list):
+                    tools = [
+                        t.get("name", "") for t in tool_list
+                        if isinstance(t, dict) and isinstance(t.get("name"), str)
+                    ]
+    except (json.JSONDecodeError, UnicodeDecodeError):
+        pass
+
+    return {
+        "server": server_name,
+        "status": "ok",
+        "tools": tools,
+        "elapsed_ms": elapsed,
+    }
+
+
+__all__ = [
+    "CONFLICT_SEVERITY_MAP",
+    "ConflictResult",
+    "PluginAllowlistEntry",
+    "INTEROP_RECORD_SCHEMA",
+    "ConflictCode",
+    "ConflictSeverity",
+    "HookChainPlan",
+    "Layer",
+    "PluginInteropPayload",
+    "PluginInteropRecord",
+    "Source",
+    "approval_status_for_record",
+    "classify_conflicts",
+    "discover_host_plugin_state",
+    "discover_omg_plugin_state",
+    "get_approval_status_for_all",
+    "load_plugin_allowlist",
+    "plan_hook_chain",
+    "save_plugin_allowlist",
+    "probe_mcp_server_live",
+    "validate_plugin_allowlist_entry",
+]