@trac3er/oh-my-god 2.1.4 → 2.1.7

package/registry/approval_artifact.py

@@ -0,0 +1,184 @@
+"""Signed approval artifacts binding approvals to artifact digests via Ed25519/minisign."""
+from __future__ import annotations
+
+import base64
+import json
+from dataclasses import asdict, dataclass
+from pathlib import Path
+from typing import Any
+
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
+
+from registry.verify_artifact import (
+    _canonical_json,
+    _key_id_from_public_key,
+    _load_trusted_signers,
+    _parse_minisign_detached,
+    _utc_now,
+    sign_artifact,
+)
+
+_APPROVAL_TYPE = "omg-approval-artifact-v1"
+
+
+@dataclass
+class ApprovalArtifact:
+    artifact_digest: str
+    action: str
+    scope: str
+    reason: str
+    signer_key_id: str
+    issued_at: str
+    signature: str
+
+
+def _approval_signing_payload(approval: ApprovalArtifact) -> dict[str, object]:
+    # Security-critical: signature field excluded from signing payload
+    return {
+        "artifact_digest": approval.artifact_digest,
+        "action": approval.action,
+        "scope": approval.scope,
+        "reason": approval.reason,
+        "signer_key_id": approval.signer_key_id,
+        "issued_at": approval.issued_at,
+        "type": _APPROVAL_TYPE,
+    }
+
+
+def create_approval_artifact(
+    artifact_digest: str,
+    action: str,
+    scope: str,
+    reason: str,
+    signer_key_id: str,
+    signer_private_key: str,
+) -> ApprovalArtifact:
+
+    clean_digest = str(artifact_digest).strip().lower()
+    if len(clean_digest) != 64 or any(ch not in "0123456789abcdef" for ch in clean_digest):
+        raise ValueError("artifact_digest_must_be_sha256_hex")
+    if not str(action).strip():
+        raise ValueError("action_required")
+    if not str(scope).strip():
+        raise ValueError("scope_required")
+    if not signer_private_key:
+        raise ValueError("signer_private_key_required")
+
+    issued_at = _utc_now()
+
+    approval = ApprovalArtifact(
+        artifact_digest=clean_digest,
+        action=str(action).strip(),
+        scope=str(scope).strip(),
+        reason=str(reason).strip(),
+        signer_key_id=signer_key_id,
+        issued_at=issued_at,
+        signature="",
+    )
+
+    sig_result = sign_artifact(
+        artifact_path=f"approval:{clean_digest}",
+        subject_digest=clean_digest,
+        signer_key_id=signer_key_id,
+        signer_private_key=signer_private_key,
+        trusted_comment=(
+            f"type={_APPROVAL_TYPE} keyid={signer_key_id} "
+            f"issued_at={issued_at} digest={clean_digest}"
+        ),
+        signing_payload=_approval_signing_payload(approval),
+    )
+
+    approval.signature = sig_result["signature"]
+    return approval
+
+
+def verify_approval_artifact(
+    approval: ApprovalArtifact | dict[str, Any],
+    expected_artifact_digest: str,
+) -> dict[str, Any]:
+
+    if isinstance(approval, ApprovalArtifact):
+        data = asdict(approval)
+    elif isinstance(approval, dict):
+        data = dict(approval)
+    else:
+        return {"valid": False, "reason": "invalid approval artifact type"}
+
+    required = ("artifact_digest", "action", "scope", "reason", "signer_key_id", "issued_at", "signature")
+    for field in required:
+        if not isinstance(data.get(field), str) or not data[field].strip():
+            return {"valid": False, "reason": f"missing or empty field: {field}"}
+
+    clean_expected = str(expected_artifact_digest).strip().lower()
+    clean_actual = str(data["artifact_digest"]).strip().lower()
+    if clean_actual != clean_expected:
+        return {"valid": False, "reason": "artifact digest mismatch"}
+
+    key_id = data["signer_key_id"]
+    trusted_signers = _load_trusted_signers()
+    signer = trusted_signers.get(key_id)
+    if signer is None:
+        return {"valid": False, "reason": "unknown signer key id"}
+    if str(signer.get("algorithm", "")) != "ed25519-minisign":
+        return {"valid": False, "reason": "algorithm mismatch for trusted signer"}
+
+    public_key_b64 = signer.get("public_key")
+    if not isinstance(public_key_b64, str) or not public_key_b64:
+        return {"valid": False, "reason": "invalid trusted signer public key"}
+    try:
+        public_key_raw = base64.b64decode(public_key_b64, validate=True)
+        public_key = Ed25519PublicKey.from_public_bytes(public_key_raw)
+    except Exception:
+        return {"valid": False, "reason": "invalid trusted signer public key"}
+
+    if _key_id_from_public_key(public_key_raw) != key_id:
+        return {"valid": False, "reason": "trusted signer key id mismatch"}
+
+    signature_value = data["signature"]
+    try:
+        detached_sig, _trusted_comment, _tc_sig = _parse_minisign_detached(signature_value, None)
+    except ValueError as exc:
+        return {"valid": False, "reason": str(exc)}
+
+    temp_approval = ApprovalArtifact(
+        artifact_digest=clean_actual,
+        action=data["action"],
+        scope=data["scope"],
+        reason=data["reason"],
+        signer_key_id=key_id,
+        issued_at=data["issued_at"],
+        signature="",
+    )
+    payload = _approval_signing_payload(temp_approval)
+
+    try:
+        public_key.verify(detached_sig, _canonical_json(payload))
+    except Exception:
+        return {"valid": False, "reason": "invalid approval signature"}
+
+    return {"valid": True, "reason": "verified"}
+
+
+def load_approval_artifact_from_path(
+    path: str | Path,
+    expected_artifact_digest: str,
+) -> dict[str, Any]:
+
+    file_path = Path(path)
+    if not file_path.is_file():
+        return {"valid": False, "reason": f"file not found: {path}", "approval": None}
+
+    try:
+        data = json.loads(file_path.read_text(encoding="utf-8"))
+    except Exception:
+        return {"valid": False, "reason": "invalid JSON in approval artifact file", "approval": None}
+
+    if not isinstance(data, dict):
+        return {"valid": False, "reason": "approval artifact must be a JSON object", "approval": None}
+
+    result = verify_approval_artifact(data, expected_artifact_digest)
+    return {
+        "valid": result["valid"],
+        "reason": result["reason"],
+        "approval": data if result["valid"] else None,
+    }

package/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.4
+version: 2.1.7
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/registry/bundles/control-plane.yaml

@@ -1,11 +1,13 @@
 id: control-plane
 kind: skill
-version: 2.1.4
+version: 2.1.7
 title: OMG Control Plane
-description: Canonical production control plane bundle for Claude and Codex.
+description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts:
   - claude
   - codex
+  - gemini
+  - kimi
 assets:
   references:
     - OMG_COMPAT_CONTRACT.md
@@ -109,6 +111,10 @@ policy_model:
     executor: executor
     trace_id: trace_id
     lineage: lineage
+    attestation_statement: attestation_statement
+    attestation_verifier: attestation_verifier
+    claim_judge_verdict: claim_judge_verdict
+    compliance_verdict: compliance_verdict
   host_rules:
     claude:
       compilation_targets:
@@ -144,6 +150,26 @@ policy_model:
       automations:
         - contract-compile
         - release-readiness
+    gemini:
+      compilation_targets:
+        - .gemini/settings.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
+    kimi:
+      compilation_targets:
+        - .kimi/mcp.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
 channel_overrides:
   public:
     posture: self-serve

package/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.1.4
+version: 2.1.7
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.1.4
+version: 2.1.7
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.1.4
+version: 2.1.7
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.4
+version: 2.1.7
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.1.4
+version: 2.1.7
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.1.4
+version: 2.1.7
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.1.4
+version: 2.1.7
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/registry/bundles/plan-council.yaml

@@ -1,14 +1,19 @@
 id: plan-council
 kind: planning
-version: 2.1.4
+version: 2.1.7
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:
   - claude
   - codex
+  - gemini
+  - kimi
 assets:
   references:
     - plugins/advanced/commands/OMG:deep-plan.md
+    - commands/OMG:validate.md
+    - commands/OMG:profile-review.md
+    - commands/OMG:release-audit.md
 invocation_policy:
   user_invocable: true
   model_invocable: false

package/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.1.4
+version: 2.1.7
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.1.4
+version: 2.1.7
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.1.4
+version: 2.1.7
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.1.4
+version: 2.1.7
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.1.4
+version: 2.1.7
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.1.4
+version: 2.1.7
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.1.4
+version: 2.1.7
 title: OMG Vision Pack
 description: Vision-specific lineage, drift, and replay attachments.
 hosts:

package/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.1.4",
+  "version": "2.1.7",
   "type": "object",
   "required": [
     "id",

package/registry/trusted_signers.json

@@ -0,0 +1,19 @@
+{
+  "version": 1,
+  "generated_by": "phase-0-immediate-fixes-t2",
+  "signers": [
+    {
+      "key_id": "1f5fe64ec2f8c901",
+      "algorithm": "ed25519-minisign",
+      "public_key": "QwRr/kCSs+lJlOraFdzCDYqqB7ZY/TlU644O+4vcpd4=",
+      "status": "active",
+      "usage": [
+        "dev",
+        "test",
+        "offline-attestation"
+      ],
+      "owner": "omg-local",
+      "notes": "Pinned local trust root for repository verification tests"
+    }
+  ]
+}