@trac3er/oh-my-god 2.1.0 → 2.1.4

package/build/lib/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.1.0",
+  "version": "2.1.4",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {
@@ -53,35 +53,52 @@
   "categories": {
     "planning": {
       "description": "Strategic planning and architecture",
-      "commands": ["deep-plan"]
+      "commands": [
+        "deep-plan"
+      ]
     },
     "quality": {
       "description": "Code quality and review",
-      "commands": ["code-review"]
+      "commands": [
+        "code-review"
+      ]
     },
     "knowledge": {
       "description": "Learning and skill creation",
-      "commands": ["learn"]
+      "commands": [
+        "learn"
+      ]
     },
     "delivery": {
       "description": "Shipping and release workflows",
-      "commands": ["ship"]
+      "commands": [
+        "ship"
+      ]
     },
     "collaboration": {
       "description": "Team collaboration and handoff",
-      "commands": ["handoff"]
+      "commands": [
+        "handoff"
+      ]
     },
     "automation": {
       "description": "Autonomous execution modes",
-      "commands": ["ralph-start", "ralph-stop"]
+      "commands": [
+        "ralph-start",
+        "ralph-stop"
+      ]
     },
     "thinking": {
       "description": "Structured thinking tools",
-      "commands": ["sequential-thinking"]
+      "commands": [
+        "sequential-thinking"
+      ]
     },
     "oss": {
       "description": "Open source maintainer tools",
-      "commands": ["maintainer"]
+      "commands": [
+        "maintainer"
+      ]
     }
   }
 }

package/build/lib/plugins/core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-core",
-  "version": "2.1.0",
+  "version": "2.1.4",
   "description": "Core OMG commands - native setup, routing, orchestration, and verification surfaces",
   "type": "omg-plugin",
   "commands": {
@@ -64,6 +64,11 @@
       "description": "Verify project setup and tool integration",
       "category": "setup"
     },
+    "profile-review": {
+      "path": "commands/OMG:profile-review.md",
+      "description": "Review governed profile state — preferences, confirmations, decay, provenance",
+      "category": "observability"
+    },
     "mode": {
       "path": "commands/OMG:mode.md",
       "description": "Set cognitive mode for the session",
@@ -106,43 +111,71 @@
   "categories": {
     "setup": {
       "description": "Project initialization and setup",
-      "commands": ["setup", "init", "health-check"]
+      "commands": [
+        "setup",
+        "init",
+        "health-check"
+      ]
     },
     "routing": {
       "description": "Model routing and escalation",
-      "commands": ["escalate", "teams", "ccg", "preflight"]
+      "commands": [
+        "escalate",
+        "teams",
+        "ccg",
+        "preflight"
+      ]
     },
     "verification": {
       "description": "Verification flows with normalized evidence",
-      "commands": ["browser"]
+      "commands": [
+        "browser"
+      ]
     },
     "orchestration": {
       "description": "Multi-agent orchestration modes",
-      "commands": ["crazy"]
+      "commands": [
+        "crazy"
+      ]
     },
     "compatibility": {
       "description": "Legacy compatibility",
-      "commands": ["compat"]
+      "commands": [
+        "compat"
+      ]
     },
     "config": {
       "description": "Configuration and settings",
-      "commands": ["mode"]
+      "commands": [
+        "mode"
+      ]
     },
     "observability": {
       "description": "Cost tracking and session observability",
-      "commands": ["cost", "stats", "deps"]
+      "commands": [
+        "cost",
+        "stats",
+        "deps",
+        "profile-review"
+      ]
     },
     "security": {
       "description": "Canonical security and trust checks",
-      "commands": ["security-check"]
+      "commands": [
+        "security-check"
+      ]
     },
     "contracts": {
       "description": "Contract replay and API simulation",
-      "commands": ["api-twin"]
+      "commands": [
+        "api-twin"
+      ]
     },
     "visualization": {
       "description": "Codebase visualization and architecture diagrams",
-      "commands": ["arch"]
+      "commands": [
+        "arch"
+      ]
     }
   },
   "roles": {

package/build/lib/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/build/lib/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.0
+version: 2.1.4
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/build/lib/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.0
+version: 2.1.4
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/build/lib/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.1.0
+version: 2.1.4
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude and Codex.
 hosts:

package/build/lib/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.1.0
+version: 2.1.4
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/build/lib/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.1.0
+version: 2.1.4
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/build/lib/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.1.0
+version: 2.1.4
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/build/lib/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/build/lib/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.0
+version: 2.1.4
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/build/lib/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.1.0
+version: 2.1.4
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/build/lib/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.1.0
+version: 2.1.4
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/build/lib/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.1.0
+version: 2.1.4
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/build/lib/registry/bundles/plan-council.yaml

@@ -1,6 +1,6 @@
 id: plan-council
 kind: planning
-version: 2.1.0
+version: 2.1.4
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:

package/build/lib/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.1.0
+version: 2.1.4
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/build/lib/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.1.0
+version: 2.1.4
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/build/lib/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.1.0
+version: 2.1.4
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/build/lib/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/build/lib/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.1.0
+version: 2.1.4
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/build/lib/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.1.0
+version: 2.1.4
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/build/lib/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.1.0
+version: 2.1.4
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/build/lib/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.1.0
+version: 2.1.4
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/build/lib/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.1.0
+version: 2.1.4
 title: OMG Vision Pack
 description: Vision-specific lineage, drift, and replay attachments.
 hosts:

package/build/lib/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.1.0",
+  "version": "2.1.4",
   "type": "object",
   "required": [
     "id",

package/build/lib/runtime/adoption.py

@@ -11,7 +11,7 @@ CANONICAL_REPO_URL = "https://github.com/trac3er00/OMG"
 CANONICAL_PACKAGE_NAME = "@trac3er/oh-my-god"
 CANONICAL_PLUGIN_ID = "omg"
 CANONICAL_MARKETPLACE_ID = "omg"
-CANONICAL_VERSION = "2.1.0"
+CANONICAL_VERSION = "2.1.4"
 
 VALID_ADOPTION_MODES = ("omg-only", "coexist")
 VALID_PRESETS = ("safe", "balanced", "interop", "labs")

package/build/lib/runtime/background_verification.py

@@ -46,3 +46,65 @@ def read_verification_state(project_dir: str) -> dict[str, Any] | None:
     except (json.JSONDecodeError, OSError):
         pass
     return None
+
+
+# --- Task 10: Smart validation skipping + timeout gates ---
+
+# Profiles that must NEVER skip any validation stage.
+_NEVER_SKIP_PROFILES: frozenset[str] = frozenset({"release", "security-audit"})
+
+
+def should_skip_validation(evidence_profile: str | None, stage: str) -> bool:
+    """Return True if *stage* can be skipped for the given evidence profile.
+
+    Uses the central requirement registry from ``runtime.evidence_requirements``
+    so profile names and requirement lists are never hardcoded here.
+
+    Rules:
+    - ``release`` and ``security-audit`` profiles NEVER skip any stage.
+    - ``None``, empty, or unknown profiles fall back to FULL_REQUIREMENTS (no skip).
+    - For other profiles, a stage is skipped when it is NOT in that profile's
+      requirement list.
+    """
+    from runtime.evidence_requirements import requirements_for_profile
+
+    profile = (evidence_profile or "").strip()
+
+    # Never-skip profiles: full requirements, nothing skippable
+    if profile in _NEVER_SKIP_PROFILES:
+        return False
+
+    required = requirements_for_profile(profile if profile else None)
+    return stage not in required
+
+
+def skipped_stages_for_profile(evidence_profile: str | None) -> list[str]:
+    """Return the list of stages that WOULD be skipped for a given profile.
+
+    Useful for logging and HUD state.
+    """
+    from runtime.evidence_requirements import FULL_REQUIREMENTS
+
+    return [stage for stage in FULL_REQUIREMENTS if should_skip_validation(evidence_profile, stage)]
+
+
+def run_validation_with_timeout(
+    fn: object,
+    timeout_seconds: float = 60.0,
+) -> dict[str, Any]:
+    """Execute a validation callable with a timeout gate.
+
+    Returns a dict with ``status`` (the callable's return or ``"timeout"``)
+    and ``timed_out`` bool.  The callable must be a zero-arg function
+    returning a string status.
+    """
+    import concurrent.futures
+
+    with concurrent.futures.ThreadPoolExecutor(max_workers=1) as pool:
+        future = pool.submit(fn)  # type: ignore[arg-type]
+        try:
+            result = future.result(timeout=timeout_seconds)
+            return {"status": result, "timed_out": False}
+        except concurrent.futures.TimeoutError:
+            future.cancel()
+            return {"status": "timeout", "timed_out": True}