@trac3er/oh-my-god 2.1.4 → 2.1.7

package/dist/dist/enterprise/bundle/registry/bundles/preflight.yaml

@@ -0,0 +1,48 @@
+id: preflight
+kind: routing
+version: 2.1.7
+title: OMG Preflight
+description: Repo-aware route selection based on diff, manifests, and classified risk.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/preflight.py
+    - runtime/delta_classifier.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: true
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+    codex:
+      - Read
+      - Grep
+lifecycle_hooks:
+  native:
+    - SessionStart
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/tracebank/events.jsonl
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    routing: advisory
+  enterprise:
+    routing: enforced

package/dist/dist/enterprise/bundle/registry/bundles/proof-gate.yaml

@@ -0,0 +1,49 @@
+id: proof-gate
+kind: proof
+version: 2.1.7
+title: OMG Proof Gate
+description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/proof_gate.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/proof-gate-*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/dist/dist/enterprise/bundle/registry/bundles/remote-supervisor.yaml

@@ -0,0 +1,49 @@
+id: remote-supervisor
+kind: orchestration
+version: 2.1.7
+title: OMG Remote Supervisor
+description: Local-only authenticated supervisor sessions for worker orchestration.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/remote_supervisor.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: false
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: high
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - SessionStart
+    - Stop
+  emulated:
+    - SubagentStart
+    - SubagentStop
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/supervisor/sessions/*.json
+execution_contract:
+  modes:
+    - local_supervisor
+channel_overrides:
+  public:
+    remote: disabled
+  enterprise:
+    remote: disabled

package/dist/dist/enterprise/bundle/registry/bundles/robotics.yaml

@@ -0,0 +1,45 @@
+id: robotics
+kind: domain-pack
+version: 2.1.7
+title: OMG Robotics Pack
+description: Robotics safety policy, replay, and evaluation attachments.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/domain_packs.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: high
+  allowed_tools:
+    claude:
+      - Read
+    codex:
+      - Read
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/incidents/*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    approvals: required
+  enterprise:
+    approvals: enforced

package/dist/dist/enterprise/bundle/registry/bundles/secure-worktree-pipeline.yaml

@@ -0,0 +1,54 @@
+id: secure-worktree-pipeline
+kind: runtime
+version: 2.1.7
+title: OMG Secure Worktree Pipeline
+description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/subagent_dispatcher.py
+    - hooks/branch_manager.py
+invocation_policy:
+  user_invocable: false
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: high
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(git:*)
+    codex:
+      - Read
+      - Bash(git:*)
+lifecycle_hooks:
+  native:
+    - SessionStart
+    - Stop
+  emulated:
+    - WorktreeCreate
+    - WorktreeRemove
+    - SubagentStart
+    - SubagentStop
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/subagents/*.json
+execution_contract:
+  modes:
+    - automation
+    - ephemeral_worktree
+    - local_supervisor
+channel_overrides:
+  public:
+    worker_policy: local-only
+  enterprise:
+    worker_policy: managed-local

package/dist/dist/enterprise/bundle/registry/bundles/security-check.yaml

@@ -0,0 +1,50 @@
+id: security-check
+kind: security
+version: 2.1.7
+title: OMG Security Check
+description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/security_check.py
+    - commands/OMG:security-check.md
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/security-check-*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/dist/dist/enterprise/bundle/registry/bundles/test-intent-lock.yaml

@@ -0,0 +1,49 @@
+id: test-intent-lock
+kind: proof
+version: 2.1.7
+title: OMG Test Intent Lock
+description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/test_intent_lock.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/test-intent-lock-*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/dist/dist/enterprise/bundle/registry/bundles/tracebank.yaml

@@ -0,0 +1,47 @@
+id: tracebank
+kind: evidence
+version: 2.1.7
+title: OMG Tracebank
+description: Structured plan-to-patch-to-verify trace capture for OMG routes.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/tracebank.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: true
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/tracebank/events.jsonl
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    retention: project-local
+  enterprise:
+    retention: policy-managed

package/dist/dist/enterprise/bundle/registry/bundles/vision.yaml

@@ -0,0 +1,45 @@
+id: vision
+kind: domain-pack
+version: 2.1.7
+title: OMG Vision Pack
+description: Vision-specific lineage, drift, and replay attachments.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/domain_packs.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+    codex:
+      - Read
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/lineage/*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    drift_checks: advisory
+  enterprise:
+    drift_checks: required