@trac3er/oh-my-god 2.1.4 → 2.1.7

package/artifacts/release/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/artifacts/release/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/artifacts/release/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.4
+version: 2.1.7
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/artifacts/release/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/artifacts/release/registry/bundles/control-plane.yaml

@@ -1,11 +1,13 @@
 id: control-plane
 kind: skill
-version: 2.1.4
+version: 2.1.7
 title: OMG Control Plane
-description: Canonical production control plane bundle for Claude and Codex.
+description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts:
   - claude
   - codex
+  - gemini
+  - kimi
 assets:
   references:
     - OMG_COMPAT_CONTRACT.md
@@ -109,6 +111,10 @@ policy_model:
     executor: executor
     trace_id: trace_id
     lineage: lineage
+    attestation_statement: attestation_statement
+    attestation_verifier: attestation_verifier
+    claim_judge_verdict: claim_judge_verdict
+    compliance_verdict: compliance_verdict
   host_rules:
     claude:
       compilation_targets:
@@ -144,6 +150,26 @@ policy_model:
       automations:
         - contract-compile
         - release-readiness
+    gemini:
+      compilation_targets:
+        - .gemini/settings.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
+    kimi:
+      compilation_targets:
+        - .kimi/mcp.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
 channel_overrides:
   public:
     posture: self-serve

package/artifacts/release/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.1.4
+version: 2.1.7
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/artifacts/release/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.1.4
+version: 2.1.7
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/artifacts/release/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.1.4
+version: 2.1.7
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/artifacts/release/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/artifacts/release/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.4
+version: 2.1.7
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/artifacts/release/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.1.4
+version: 2.1.7
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/artifacts/release/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.1.4
+version: 2.1.7
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/artifacts/release/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.1.4
+version: 2.1.7
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/artifacts/release/registry/bundles/plan-council.yaml

@@ -1,14 +1,19 @@
 id: plan-council
 kind: planning
-version: 2.1.4
+version: 2.1.7
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:
   - claude
   - codex
+  - gemini
+  - kimi
 assets:
   references:
     - plugins/advanced/commands/OMG:deep-plan.md
+    - commands/OMG:validate.md
+    - commands/OMG:profile-review.md
+    - commands/OMG:release-audit.md
 invocation_policy:
   user_invocable: true
   model_invocable: false

package/artifacts/release/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.1.4
+version: 2.1.7
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/artifacts/release/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/artifacts/release/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.1.4
+version: 2.1.7
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/artifacts/release/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/artifacts/release/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.1.4
+version: 2.1.7
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/artifacts/release/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.1.4
+version: 2.1.7
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/artifacts/release/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/artifacts/release/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.1.4
+version: 2.1.7
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/artifacts/release/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Vision Pack
 description: Vision-specific lineage, drift, and replay attachments.
 hosts:

package/artifacts/release/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "type": "object",
   "required": [
     "id",

package/artifacts/release/settings.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "_comment": "OMG 2.1.4 - project-level config with hook registrations, presets, and feature flags.",
+  "_comment": "OMG 2.1.7 - project-level config with hook registrations, presets, and feature flags.",
   "permissions": {
     "allow": [
       "Agent",
@@ -316,7 +316,7 @@
     ]
   },
   "_omg": {
-    "_version": "2.1.4",
+    "_version": "2.1.7",
     "preset": "safe",
     "omgMode": "focused",
     "default_mode": "ulw+ralph",
@@ -367,10 +367,16 @@
       "TEST_GENERATION": false,
       "DEP_HEALTH": false,
       "CODEBASE_VIZ": false,
-      "CONTEXT_MANAGER": false
+      "CONTEXT_MANAGER": false,
+      "DATA_ENFORCEMENT": false,
+      "WEB_ENFORCEMENT": false,
+      "TERMS_ENFORCEMENT": false,
+      "COUNCIL_ROUTING": false,
+      "FORGE_ALL_DOMAINS": false,
+      "NOTEBOOKLM": false
     },
     "generated": {
-      "contract_version": "2.1.4",
+      "contract_version": "2.1.7",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",
@@ -508,7 +514,11 @@
           "timestamp": "timestamp",
           "executor": "executor",
           "trace_id": "trace_id",
-          "lineage": "lineage"
+          "lineage": "lineage",
+          "attestation_statement": "attestation_statement",
+          "attestation_verifier": "attestation_verifier",
+          "claim_judge_verdict": "claim_judge_verdict",
+          "compliance_verdict": "compliance_verdict"
         },
         "host_rules": {
           "claude": {
@@ -555,6 +565,36 @@
               "contract-compile",
               "release-readiness"
             ]
+          },
+          "gemini": {
+            "compilation_targets": [
+              ".gemini/settings.json"
+            ],
+            "mcp": [
+              "omg-control"
+            ],
+            "skills": [
+              "omg/control-plane"
+            ],
+            "automations": [
+              "contract-compile",
+              "release-readiness"
+            ]
+          },
+          "kimi": {
+            "compilation_targets": [
+              ".kimi/mcp.json"
+            ],
+            "mcp": [
+              "omg-control"
+            ],
+            "skills": [
+              "omg/control-plane"
+            ],
+            "automations": [
+              "contract-compile",
+              "release-readiness"
+            ]
           }
         }
       },
@@ -603,7 +643,32 @@
           "name": "omg/hook-governor",
           "source": ".agents/skills/omg/hook-governor/"
         }
-      ]
+      ],
+      "phase1_release_contract": {
+        "forge_specialist_surfaces": [
+          "forge-profile-review",
+          "forge-release-audit",
+          "forge-validate"
+        ],
+        "release_surfaces": [
+          "OMG:profile-review",
+          "OMG:release-audit",
+          "OMG:validate"
+        ],
+        "attestation_requirements": [
+          "registry.verify_artifact.sign_artifact_statement",
+          "registry.verify_artifact.verify_artifact_statement"
+        ],
+        "compliance_governor_expectations": [
+          "runtime.compliance_governor.evaluate_release_compliance",
+          "runtime.compliance_governor.evaluate_tool_compliance"
+        ],
+        "release_readiness_checks": [
+          "claim_judge",
+          "compliance_governor",
+          "execution_primitives"
+        ]
+      }
     }
   }
 }

package/build/lib/commands/OMG:deep-plan.md

@@ -0,0 +1,18 @@
+---
+description: "Strategic planning via the canonical plan-council bundle."
+allowed-tools: Read, Grep, Glob
+argument-hint: "<planning goal or feature to plan>"
+---
+
+# /OMG:deep-plan
+
+`/OMG:deep-plan` is a compatibility path to the canonical `plan-council` bundle.
+
+Users invoke `/OMG:deep-plan`; the runtime routes to `plan-council` for execution.
+For the full behavior specification, see `plugins/advanced/commands/OMG:deep-plan.md`.
+
+## Compatibility Notes
+
+- This alias exists so users can invoke deep-plan workflows from the root command surface.
+- Runtime behavior resolves to the `plan-council` bundle — same structured deliberation, same artifacts.
+- OMG uses the `plan-council` bundle for canonical planning, dissent, and evidence workflows.

package/build/lib/commands/OMG:diagnose-plugins.md

@@ -0,0 +1,33 @@
+---
+description: Diagnose plugin interoperability and conflict status across OMG-supported hosts
+allowed-tools: Bash(python3:*), Read, Grep, Glob
+---
+
+# /OMG:diagnose-plugins
+
+Run `python3 scripts/omg.py diagnose-plugins --format json` and report the diagnostics result.
+
+## Output Schema
+
+- `schema`: `PluginDiagnosticsResult`
+- `status`: `ok` | `warn` | `error`
+- `records`: discovered plugin records
+- `conflicts`: classified conflict entries
+- `approval_states`: plugin approval states by plugin id
+- `summary`: totals for records, conflicts, and severity buckets
+- `next_actions`: top recommended remediations
+- `elapsed_ms`: total diagnostic runtime
+
+## Commands
+
+```
+python3 scripts/omg.py diagnose-plugins --format json
+python3 scripts/omg.py diagnose-plugins --format text
+python3 scripts/omg.py diagnose-plugins approve --source mcp:filesystem --host claude --reason "trusted" --format json
+```
+
+## Notes
+
+- Base diagnostics command is read-only.
+- Static mode is default; live probing must be explicit via `--live`.
+- `approve` currently returns a pending stub response.

package/build/lib/commands/OMG:forge.md

@@ -31,19 +31,25 @@ Jobs that fail policy checks are blocked with a structured reason before any pip
 ## CLI Usage
 
 ```bash
-# Run a forge job from a JSON file
+# Run a forge job from a JSON file (domain required)
 python3 scripts/omg.py forge run --job path/to/job.json
 
 # Run with explicit preset (default: labs)
 python3 scripts/omg.py forge run --job path/to/job.json --preset labs
+
+# Run inline with domain-aware job JSON
+python3 scripts/omg.py forge run --preset labs --job-json '{"domain":"vision","dataset":{"name":"vision-agent","license":"apache-2.0","source":"internal-curated"},"base_model":{"name":"distill-base-v1","source":"approved-registry","allow_distill":true},"target_metric":0.8,"simulated_metric":0.9,"specialists":["data-curator","training-architect","simulator-engineer"]}'
 ```
 
 ## Job File Format
 
+Every forge job **must** include an explicit `domain` field. Valid canonical domains: `vision`, `robotics`, `algorithms`, `health`, `cybersecurity`. The alias `vision-agent` is accepted and canonicalized to `vision`.
+
 ```json
 {
+  "domain": "vision",
   "dataset": {
-    "name": "my-domain-dataset",
+    "name": "vision-agent",
     "license": "apache-2.0",
     "source": "internal-curated"
   },
@@ -54,13 +60,14 @@ python3 scripts/omg.py forge run --job path/to/job.json --preset labs
   },
   "target_metric": 0.85,
   "simulated_metric": 0.90,
-  "evaluation_notes": "Domain adaptation for robotics control"
+  "specialists": ["data-curator", "training-architect", "simulator-engineer"],
+  "evaluation_notes": "Domain adaptation for vision agent"
 }
 ```
 
 ## Output
 
-Forge returns structured JSON with pipeline results:
+Forge returns structured JSON with pipeline results. Domain-aware jobs with specialists also include a `specialist_dispatch` block:
 
 ```json
 {
@@ -78,6 +85,10 @@ Forge returns structured JSON with pipeline results:
     "metric": 0.90,
     "target_metric": 0.85,
     "passed": true
+  },
+  "specialist_dispatch": {
+    "status": "ok",
+    "specialists_dispatched": ["data-curator", "training-architect", "simulator-engineer"]
   }
 }
 ```

package/build/lib/commands/OMG:setup.md

@@ -1,7 +1,7 @@
 ---
 description: "Native OMG setup and adoption flow for supported hosts"
 allowed-tools: Read, Write, Edit, Bash(python*:*), Bash(ls:*), Bash(grep:*)
-argument-hint: "[optional: --non-interactive, --mode omg-only|coexist, --preset safe|balanced|interop|labs]"
+argument-hint: "[optional: --non-interactive, --mode omg-only|coexist, --preset safe|balanced|interop|labs|plugins-first]"
 ---
 
 # /OMG:setup
@@ -19,6 +19,8 @@ The command keeps migration logic internal and focuses the user on a small adopt
 4. Apply an OMG preset.
 5. Configure MCP and save preferences.
 
+Setup now runs foreign-plugin discovery in `interop` and `coexist` modes, reporting compatibility findings and potential overlaps.
+
 ## Wizard Flow
 
 ```text
@@ -41,6 +43,7 @@ Step 4: Choose preset
   - balanced
   - interop
   - labs
+  - plugins-first (alias for interop)
 
 Step 5: Configure MCP and persist preferences
   - writes .mcp.json

package/build/lib/commands/OMG:validate.md

@@ -36,7 +36,7 @@ python3 scripts/omg.py validate --format json
       "required": true | false
     }
   ],
-  "version": "2.1.4"
+  "version": "2.1.7"
 }
 ```
 

package/build/lib/control_plane/service.py

@@ -208,7 +208,7 @@ class ControlPlaneService:
                 "message": "artifact must be an object",
             }
         decision = verify_artifact(artifact, mode=mode)
-        return 200, decision
+        return (403 if decision.get("action") == "deny" else 200), decision
 
     def lab_jobs(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
         if not isinstance(payload, dict):

package/build/lib/hooks/setup_wizard.py

@@ -37,10 +37,13 @@ from runtime.mcp_config_writers import (  # noqa: E402
 import runtime.providers.codex_provider  # noqa: E402, F401
 import runtime.providers.gemini_provider  # noqa: E402, F401
 import runtime.providers.kimi_provider  # noqa: E402, F401
+from runtime.plugin_interop import discover_host_plugin_state  # noqa: E402
 from runtime.validate import run_validate as _run_post_install_validate  # noqa: E402
 from runtime.adoption import (  # noqa: E402
     CANONICAL_MODE_NAMES,
     CANONICAL_VERSION,
+    PRESET_LEVEL,
+    PRESET_ORDER,
     build_adoption_report,
     get_mode_profile,
     get_preset_features,
@@ -74,8 +77,7 @@ BYPASS_ALL_WARNING = (
     "Do you want to enable bypass-all mode? (y/N): "
 )
 
-PRESET_ORDER: tuple[str, ...] = ("safe", "balanced", "interop", "labs")
-_PRESET_LEVEL: dict[str, int] = {p: i for i, p in enumerate(PRESET_ORDER)}
+_PRESET_LEVEL = PRESET_LEVEL
 
 MCP_CATALOG: list[dict[str, Any]] = [
     {
@@ -659,7 +661,7 @@ def set_preferences(project_dir: str, preferences: dict[str, Any]) -> dict[str,
         "gemini": {"subscription": "free", "max_parallel_agents": 1},
         "kimi": {"subscription": "free", "max_parallel_agents": 1},
     }
-    preset = resolve_preset(cast(str | None, preferences.get("preset")))
+    preset = resolve_preset(cast(str, preferences.get("preset") or "safe"))
     default_config: dict[str, Any] = {
         "version": CANONICAL_VERSION,
         "preset": preset,
@@ -1032,6 +1034,11 @@ def run_setup_wizard(
         preset=selected_preset,
         adopt=adopt,
     )
+    foreign_plugins_discovered = 0
+    if adoption.get("selected_mode") == "coexist" or selected_preset == "interop":
+        host_plugin_state = discover_host_plugin_state(project_dir)
+        foreign_plugins_discovered = len(host_plugin_state.records)
+    adoption["foreign_plugins_discovered"] = foreign_plugins_discovered
 
     clis = detect_clis()
     auth = check_auth()
@@ -1063,7 +1070,7 @@ def run_setup_wizard(
 
     # --- Post-install validation (runs AFTER all setup writes are complete) ---
     try:
-        validation_result = _run_post_install_validate(root_dir=Path(_PROJECT_ROOT))
+        validation_result = _run_post_install_validate(root_dir=Path(project_dir))
     except Exception as exc:
         validation_result = {
             "schema": "ValidateResult",
@@ -1090,9 +1097,11 @@ def run_setup_wizard(
     except OSError:
         artifact_path = ""
 
+    checks = validation_result.get("checks", [])
     blockers = [
-        c for c in validation_result.get("checks", [])
-        if c.get("status") == "blocker"
+        c
+        for c in checks
+        if isinstance(c, dict) and c.get("status") == "blocker"
     ]
 
     result["post_install_validation"] = {

package/build/lib/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/build/lib/plugins/core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-core",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "description": "Core OMG commands - native setup, routing, orchestration, and verification surfaces",
   "type": "omg-plugin",
   "commands": {
@@ -106,6 +106,11 @@
       "description": "Codebase visualization — dependency graphs and architecture diagrams",
       "category": "visualization",
       "feature_flag": "CODEBASE_VIZ"
+    },
+    "validate": {
+      "path": "commands/OMG:validate.md",
+      "description": "Canonical validation — doctor + contract + profile + install checks",
+      "category": "observability"
     }
   },
   "categories": {
@@ -156,7 +161,8 @@
         "cost",
         "stats",
         "deps",
-        "profile-review"
+        "profile-review",
+        "validate"
       ]
     },
     "security": {