@trac3er/oh-my-god 2.1.7 → 2.1.9

package/.agents/skills/omg/AGENTS.fragment.md

@@ -70,4 +70,6 @@ Council planning skills are protected and explicit-invocation only:
 
 - Rules: `protected_paths, explicit_invocation`
 - Automations: `contract-compile, release-readiness`
+- Defer to the repo's `AGENTS.md` / `AGENTS.override.md` instruction hierarchy before OMG-specific guidance.
+- Do not mirror or override Codex built-in slash commands; OMG guidance applies through MCP, skills, and generated rules.
 - Require explicit invocation for protected production planning skills.

package/.agents/skills/omg/codex-rules.md

@@ -18,6 +18,11 @@
 - `omg/control-plane`
 - `omg/mcp-fabric`
 
+## Host Interop
+
+- Respect the repo `AGENTS.md` / `AGENTS.override.md` chain before applying OMG-specific rules.
+- Keep OMG guidance separate from Codex built-in slash commands.
+
 ## Protected Planning Surface
 
 - `omg/plan-council` (explicit invocation only)

package/.agents/skills/omg/vision/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: omg-vision
-description: "Vision-specific lineage, drift, and replay attachments."
+description: "Vision-specific OCR, comparison, lineage, drift, and replay attachments."
 ---
 
 # OMG Vision Pack

package/.agents/skills/omg/vision/openai.yaml

@@ -1,5 +1,5 @@
 name: omg-vision
-description: "Vision-specific lineage, drift, and replay attachments."
+description: "Vision-specific OCR, comparison, lineage, drift, and replay attachments."
 allow_implicit_invocation: false
 metadata:
   channel: enterprise

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.1.7",
+    "version": "2.1.9",
     "homepage": "https://github.com/trac3er00/OMG",
     "repository": "https://github.com/trac3er00/OMG"
   },
@@ -14,7 +14,7 @@
     {
       "name": "omg",
       "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.1.7",
+      "version": "2.1.9",
       "source": "./",
       "author": {
         "name": "trac3er00"
@@ -32,5 +32,5 @@
       ]
     }
   ],
-  "version": "2.1.7"
+  "version": "2.1.9"
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg",
-  "version": "2.1.7",
+  "version": "2.1.9",
   "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
   "author": {
     "name": "trac3er00"

package/.claude-plugin/scripts/install.sh

@@ -0,0 +1,49 @@
+#!/bin/bash
+# OMG Plugin Install Script
+# This script is called by Claude Code when user installs the plugin
+
+set -e
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m'
+
+info() { echo -e "${BLUE}ℹ${NC} $1"; }
+success() { echo -e "${GREEN}✓${NC} $1"; }
+warning() { echo -e "${YELLOW}⚠${NC} $1"; }
+error() { echo -e "${RED}✗${NC} $1"; }
+
+echo ""
+echo -e "${BLUE}╔═══════════════════════════════════════════════════════════════╗${NC}"
+echo -e "${BLUE}║                                                               ║${NC}"
+echo -e "${BLUE}║              OMG Plugin Installer v2.1.9                     ║${NC}"
+echo -e "${BLUE}║                                                               ║${NC}"
+echo -e "${BLUE}╚═══════════════════════════════════════════════════════════════╝${NC}"
+echo ""
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PLUGIN_DIR="$(dirname "$SCRIPT_DIR")"
+OMG_ROOT="$(dirname "$PLUGIN_DIR")"
+
+# Check if OMG-setup.sh exists
+if [ -f "$OMG_ROOT/OMG-setup.sh" ]; then
+    info "Found OMG-setup.sh, running installation..."
+    echo ""
+    bash "$OMG_ROOT/OMG-setup.sh" install --install-as-plugin --non-interactive
+else
+    error "OMG-setup.sh not found at: $OMG_ROOT/OMG-setup.sh"
+    error "Plugin installation requires the OMG setup script"
+    exit 1
+fi
+
+echo ""
+success "OMG Plugin installed successfully!"
+echo ""
+info "Getting started:"
+echo "  1. Run /OMG:setup in Claude Code"
+echo "  2. Run /OMG:crazy <goal> for the native OMG flow"
+echo "  3. Use codex/gemini/kimi mcp list to verify cross-CLI MCP wiring"
+echo ""

package/.claude-plugin/scripts/update.sh

@@ -6,12 +6,69 @@ set -e
 
 echo "Updating OMG plugin..."
 
-# Find OMG root - prioritize git repo if we're in one
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PLUGIN_DIR="$(dirname "$SCRIPT_DIR")"
 OMG_ROOT="$(dirname "$PLUGIN_DIR")"
+PKG_NAME="@trac3er/oh-my-god"
+CURRENT_VERSION=""
+LATEST_VERSION=""
+TMP_DIR=""
+
+cleanup() {
+    if [ -n "$TMP_DIR" ] && [ -d "$TMP_DIR" ]; then
+        rm -rf "$TMP_DIR"
+    fi
+}
+trap cleanup EXIT
+
+if [ -f "$OMG_ROOT/.claude-plugin/plugin.json" ]; then
+    CURRENT_VERSION="$(python3 - "$OMG_ROOT/.claude-plugin/plugin.json" <<'PY'
+import json
+import sys
+from pathlib import Path
+
+path = Path(sys.argv[1])
+try:
+    data = json.loads(path.read_text(encoding='utf-8'))
+except Exception:
+    print("")
+    raise SystemExit(0)
+
+version = data.get('version') if isinstance(data, dict) else ''
+print(str(version).strip() if version is not None else '')
+PY
+)"
+fi
+
+if command -v npm >/dev/null 2>&1; then
+    LATEST_VERSION="$(npm view "$PKG_NAME" version --silent 2>/dev/null | tr -d '[:space:]')"
+fi
+
+if [ -n "$LATEST_VERSION" ] && [ "$LATEST_VERSION" != "$CURRENT_VERSION" ]; then
+    echo "Found newer npm release: ${CURRENT_VERSION:-unknown} -> $LATEST_VERSION"
+    TMP_DIR="$(mktemp -d)"
+    npm install --prefix "$TMP_DIR" "$PKG_NAME@$LATEST_VERSION" --silent --no-audit --no-fund
+
+    UPDATE_ROOT="$TMP_DIR/node_modules/@trac3er/oh-my-god"
+    if [ -f "$UPDATE_ROOT/OMG-setup.sh" ]; then
+        echo "Running update from npm release package..."
+        bash "$UPDATE_ROOT/OMG-setup.sh" update --install-as-plugin --non-interactive
+        echo ""
+        echo "✓ OMG updated successfully"
+        echo "  Restart Claude Code if you see new commands"
+        exit 0
+    fi
+
+    echo "ERROR: npm package missing OMG-setup.sh"
+    exit 1
+fi
+
+if [ -n "$LATEST_VERSION" ]; then
+    echo "Already on latest npm release: $LATEST_VERSION"
+else
+    echo "Could not determine latest npm release; using local update path"
+fi
 
-# Check if running from source git repo
 if [ -d "$OMG_ROOT/.git" ]; then
     echo "Found git repository at: $OMG_ROOT"
     cd "$OMG_ROOT"
@@ -35,44 +92,17 @@ if [ -d "$OMG_ROOT/.git" ]; then
         git stash pop || echo "Warning: Could not restore stashed changes. Run 'git stash pop' manually."
     fi
 
-    NEW_VERSION=$(git describe --tags --abbrev=0 2>/dev/null | sed 's/^v//' || echo "")
-    if [ -n "$NEW_VERSION" ]; then
-        python3 - "$NEW_VERSION" <<'PY'
-import json
-import sys
-from pathlib import Path
-
-new_version = sys.argv[1]
-plugin_path = Path('.claude-plugin/plugin.json')
-marketplace_path = Path('.claude-plugin/marketplace.json')
-
-plugin = json.loads(plugin_path.read_text(encoding='utf-8'))
-plugin['version'] = new_version
-plugin_path.write_text(json.dumps(plugin, indent=2) + '\n', encoding='utf-8')
-
-marketplace = json.loads(marketplace_path.read_text(encoding='utf-8'))
-marketplace['version'] = new_version
-if isinstance(marketplace.get('metadata'), dict):
-    marketplace['metadata']['version'] = new_version
-plugins = marketplace.get('plugins')
-if isinstance(plugins, list) and plugins:
-    if isinstance(plugins[0], dict):
-        plugins[0]['version'] = new_version
-marketplace_path.write_text(json.dumps(marketplace, indent=2) + '\n', encoding='utf-8')
-PY
-        echo "Synced manifest versions to $NEW_VERSION"
+    if [ -f "$OMG_ROOT/OMG-setup.sh" ]; then
+        echo "Running OMG-setup.sh update (plugin bundle mode)..."
+        bash "$OMG_ROOT/OMG-setup.sh" update --install-as-plugin --non-interactive
     else
-        echo "Skipped manifest version sync (no git tag found)"
+        echo "ERROR: Could not find OMG-setup.sh"
+        exit 1
     fi
-
-    echo "Update complete!"
-    echo ""
-    echo "Note: Changes are immediately active (symlinked installation)"
 else
-    # Running from cache - run OMG-setup.sh
     if [ -f "$OMG_ROOT/OMG-setup.sh" ]; then
         echo "Running OMG-setup.sh update..."
-        bash "$OMG_ROOT/OMG-setup.sh" update
+        bash "$OMG_ROOT/OMG-setup.sh" update --install-as-plugin --non-interactive
     else
         echo "ERROR: Could not find OMG-setup.sh"
         exit 1

package/.gemini/settings.json

@@ -9,9 +9,9 @@
     }
   },
   "_omg": {
-    "_version": "2.1.7",
+      "_version": "2.1.9",
     "generated": {
-      "contract_version": "2.1.7",
+        "contract_version": "2.1.9",
       "channel": "public",
       "required_bundles": [
         "control-plane",

package/.kimi/mcp.json

@@ -9,9 +9,9 @@
     }
   },
   "_omg": {
-    "_version": "2.1.7",
+      "_version": "2.1.9",
     "generated": {
-      "contract_version": "2.1.7",
+        "contract_version": "2.1.9",
       "channel": "public",
       "required_bundles": [
         "control-plane",

package/CHANGELOG.md

@@ -2,7 +2,7 @@
 
 ## Unreleased
 
-## 2.1.7 - 2026-03-11
+## 2.1.9 - 2026-03-11
 
 - fixed `/OMG:deep-plan` 404 by adding missing root compatibility stub routing to canonical plan-council bundle
 - added manifest-driven release readiness gate that audits plugin command source paths against manifests and fails fast on missing files

package/CLI-ADAPTER-MAP.md

@@ -162,7 +162,7 @@ OMG supports 4 canonical CLI targets with dedicated provider implementations and
   - `~/.claude/settings.json` → `enabledPlugins[plugin_ref] = true`
   - `~/.claude/plugins/installed_plugins.json` → Plugin metadata with installed path, version, timestamp
 - **Plugin Ref Format:** `omg@omg` (name@marketplace_id)
-- **Version:** `2.1.7` (from package.json)
+- **Version:** `2.1.9` (from package.json)
 
 #### C. Plugin Unregistration (Lines 631-669)
 - **Function:** `unregister_plugin_from_registry(plugin_ref)`
@@ -206,7 +206,7 @@ OMG supports 4 canonical CLI targets with dedicated provider implementations and
 ```json
 {
   "name": "@trac3er/oh-my-god",
-  "version": "2.1.7",
+  "version": "2.1.9",
   "scripts": {
     "postinstall": "./OMG-setup.sh install --non-interactive",
     "update": "./OMG-setup.sh update",
@@ -238,7 +238,7 @@ CANONICAL_REPO_URL = "https://github.com/trac3er00/OMG"
 CANONICAL_PACKAGE_NAME = "@trac3er/oh-my-god"
 CANONICAL_PLUGIN_ID = "omg"
 CANONICAL_MARKETPLACE_ID = "omg"
-CANONICAL_VERSION = "2.1.7"
+CANONICAL_VERSION = "2.1.9"
 ```
 
 ---
@@ -267,7 +267,7 @@ Actions:
 Key Options:
   --install-as-plugin   Install as plugin bundle (Claude plugin system)
   --mode=omg-only|coexist  Adoption mode
-  --preset=safe|balanced|interop|labs  Feature set
+  --preset=safe|balanced|interop|labs|buffet  Feature set
   --merge-policy=ask|apply|skip  Settings merge behavior
 ```
 
@@ -377,4 +377,3 @@ Key Options:
 | `OMG_COMPAT_CONTRACT.md` | Host compilation rules contract | 105 |
 | `docs/install/claude-code.md` | Claude Code install guide | 31 |
 | `docs/install/codex.md` | Codex install guide | 29 |
-

package/OMG-setup.sh

@@ -5,7 +5,7 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 CLAUDE_DIR="${CLAUDE_CONFIG_DIR:-$HOME/.claude}"
 BACKUP_TS="$(date +%Y%m%d_%H%M%S)"
 BACKUP_DIR="$CLAUDE_DIR/.omg-backup-$BACKUP_TS"
-VERSION="2.1.7"
+VERSION="2.1.9"
 
 PLUGIN_NAME="omg"
 PLUGIN_MARKETPLACE="omg"
@@ -85,7 +85,7 @@ Options:
   --mode=omg-only|coexist
                      Native OMG adoption mode for overlapping ecosystems
   --adopt=auto       Detect OMG-adjacent ecosystems during install/update
-  --preset=safe|balanced|interop|labs
+  --preset=safe|balanced|interop|labs|buffet
                      User-facing preset for managed OMG features
   --enable-browser   Enable optional OMG browser capability metadata and guidance
   -h, --help         Show this help
@@ -265,7 +265,10 @@ parse_args() {
     esac
 
     case "$OMG_PRESET" in
-        safe|balanced|interop|labs) ;;
+        plugins-first)
+            OMG_PRESET="interop"
+            ;;
+        safe|balanced|interop|labs|buffet) ;;
         *)
             echo "Unknown OMG preset: $OMG_PRESET"
             exit 1
@@ -1811,13 +1814,21 @@ run_install_like() {
             [[ "$CLAUDE_DIR/omg-runtime/hooks" == "$CLAUDE_DIR"* ]] || { echo "ERROR: symlink target outside expected directory: $CLAUDE_DIR/omg-runtime/hooks" >&2; exit 1; }
             [[ "$CLAUDE_DIR/omg-runtime/lab" == "$CLAUDE_DIR"* ]] || { echo "ERROR: symlink target outside expected directory: $CLAUDE_DIR/omg-runtime/lab" >&2; exit 1; }
             [[ "$CLAUDE_DIR/omg-runtime/plugins" == "$CLAUDE_DIR"* ]] || { echo "ERROR: symlink target outside expected directory: $CLAUDE_DIR/omg-runtime/plugins" >&2; exit 1; }
+            [[ "$CLAUDE_DIR/omg-runtime/registry" == "$CLAUDE_DIR"* ]] || { echo "ERROR: symlink target outside expected directory: $CLAUDE_DIR/omg-runtime/registry" >&2; exit 1; }
+            [[ "$CLAUDE_DIR/omg-runtime/tools" == "$CLAUDE_DIR"* ]] || { echo "ERROR: symlink target outside expected directory: $CLAUDE_DIR/omg-runtime/tools" >&2; exit 1; }
+            [[ "$CLAUDE_DIR/omg-runtime/control_plane" == "$CLAUDE_DIR"* ]] || { echo "ERROR: symlink target outside expected directory: $CLAUDE_DIR/omg-runtime/control_plane" >&2; exit 1; }
+            [[ "$CLAUDE_DIR/omg-runtime/omg_natives" == "$CLAUDE_DIR"* ]] || { echo "ERROR: symlink target outside expected directory: $CLAUDE_DIR/omg-runtime/omg_natives" >&2; exit 1; }
             [[ "$CLAUDE_DIR/omg-runtime/yaml.py" == "$CLAUDE_DIR"* ]] || { echo "ERROR: symlink target outside expected directory: $CLAUDE_DIR/omg-runtime/yaml.py" >&2; exit 1; }
             
-            rm -rf "$CLAUDE_DIR/omg-runtime/runtime" "$CLAUDE_DIR/omg-runtime/hooks" "$CLAUDE_DIR/omg-runtime/lab" "$CLAUDE_DIR/omg-runtime/plugins" "$CLAUDE_DIR/omg-runtime/yaml.py"
+            rm -rf "$CLAUDE_DIR/omg-runtime/runtime" "$CLAUDE_DIR/omg-runtime/hooks" "$CLAUDE_DIR/omg-runtime/lab" "$CLAUDE_DIR/omg-runtime/plugins" "$CLAUDE_DIR/omg-runtime/registry" "$CLAUDE_DIR/omg-runtime/tools" "$CLAUDE_DIR/omg-runtime/control_plane" "$CLAUDE_DIR/omg-runtime/omg_natives" "$CLAUDE_DIR/omg-runtime/yaml.py"
             ln -s "$SCRIPT_DIR/runtime" "$CLAUDE_DIR/omg-runtime/runtime"
             ln -s "$SCRIPT_DIR/hooks" "$CLAUDE_DIR/omg-runtime/hooks"
             ln -s "$SCRIPT_DIR/lab" "$CLAUDE_DIR/omg-runtime/lab"
             ln -s "$SCRIPT_DIR/plugins" "$CLAUDE_DIR/omg-runtime/plugins"
+            ln -s "$SCRIPT_DIR/registry" "$CLAUDE_DIR/omg-runtime/registry"
+            ln -s "$SCRIPT_DIR/tools" "$CLAUDE_DIR/omg-runtime/tools"
+            ln -s "$SCRIPT_DIR/control_plane" "$CLAUDE_DIR/omg-runtime/control_plane"
+            ln -s "$SCRIPT_DIR/omg_natives" "$CLAUDE_DIR/omg-runtime/omg_natives"
             ln -s "$SCRIPT_DIR/yaml.py" "$CLAUDE_DIR/omg-runtime/yaml.py"
             
             [[ "$CLAUDE_DIR/omg-runtime" == "$CLAUDE_DIR"* ]] || { echo "ERROR: rm -rf target outside expected directory: $CLAUDE_DIR/omg-runtime" >&2; exit 1; }
@@ -1828,11 +1839,15 @@ run_install_like() {
             mkdir -p "$CLAUDE_DIR/omg-runtime/scripts"
             cp "$SCRIPT_DIR/scripts/omg.py" "$CLAUDE_DIR/omg-runtime/scripts/omg.py"
             [[ "$CLAUDE_DIR/omg-runtime/runtime" == "$CLAUDE_DIR"* ]] || { echo "ERROR: rm -rf target outside expected directory: $CLAUDE_DIR/omg-runtime/runtime" >&2; exit 1; }
-            rm -rf "$CLAUDE_DIR/omg-runtime/runtime" "$CLAUDE_DIR/omg-runtime/hooks" "$CLAUDE_DIR/omg-runtime/lab" "$CLAUDE_DIR/omg-runtime/plugins" "$CLAUDE_DIR/omg-runtime/yaml.py"
+            rm -rf "$CLAUDE_DIR/omg-runtime/runtime" "$CLAUDE_DIR/omg-runtime/hooks" "$CLAUDE_DIR/omg-runtime/lab" "$CLAUDE_DIR/omg-runtime/plugins" "$CLAUDE_DIR/omg-runtime/registry" "$CLAUDE_DIR/omg-runtime/tools" "$CLAUDE_DIR/omg-runtime/control_plane" "$CLAUDE_DIR/omg-runtime/omg_natives" "$CLAUDE_DIR/omg-runtime/yaml.py"
             cp -R "$SCRIPT_DIR/runtime" "$CLAUDE_DIR/omg-runtime/"
             cp -R "$SCRIPT_DIR/hooks" "$CLAUDE_DIR/omg-runtime/"
             cp -R "$SCRIPT_DIR/lab" "$CLAUDE_DIR/omg-runtime/"
             cp -R "$SCRIPT_DIR/plugins" "$CLAUDE_DIR/omg-runtime/"
+            cp -R "$SCRIPT_DIR/registry" "$CLAUDE_DIR/omg-runtime/"
+            cp -R "$SCRIPT_DIR/tools" "$CLAUDE_DIR/omg-runtime/"
+            cp -R "$SCRIPT_DIR/control_plane" "$CLAUDE_DIR/omg-runtime/"
+            cp -R "$SCRIPT_DIR/omg_natives" "$CLAUDE_DIR/omg-runtime/"
             cp "$SCRIPT_DIR/yaml.py" "$CLAUDE_DIR/omg-runtime/yaml.py"
             [[ "$CLAUDE_DIR/omg-runtime" == "$CLAUDE_DIR"* ]] || { echo "ERROR: rm -rf target outside expected directory: $CLAUDE_DIR/omg-runtime" >&2; exit 1; }
             find "$CLAUDE_DIR/omg-runtime" -name "__pycache__" -type d -exec rm -rf {} + 2>/dev/null || true

package/OMG_COMPAT_CONTRACT.md

@@ -1,6 +1,6 @@
 ---
 title: OMG Production Control Plane
-version: 2.1.7
+version: 2.1.9
 canonical_hosts:
   - claude
   - codex
@@ -94,6 +94,8 @@ Codex outputs compile to:
 - `.agents/skills/omg/<bundle>/openai.yaml`
 - generated Codex MCP and rule fragments under `.agents/skills/omg/`
 
+Codex compilation must remain compatible with the host's native instruction hierarchy (`AGENTS.md`, `AGENTS.override.md`) and progressive-disclosure skill loading. OMG-generated artifacts document and constrain OMG behavior; they do not replace Codex built-in slash commands.
+
 ## roadmap_extensions
 
 The contract reserves compilation anchors for:

package/README.md

@@ -12,7 +12,7 @@ Agent hosts like Claude Code and Codex are powerful but lack governance, mutatio
 
 ## The Solution
 
-OMG (Oh My OpenCode) provides a governance and orchestration layer that sits on top of existing agent hosts. It introduces:
+OMG (Oh My God) provides a governance and orchestration layer that sits on top of existing agent hosts. It introduces:
 
 - **Hooks**: Pre-tool and post-tool execution gates for security and validation.
 - **Governance Payload**: Structured metadata for every action.

package/RELEASING.md

@@ -0,0 +1,83 @@
+# Releasing OMG
+
+This document covers the release procedure and golden rules for publishing new versions of OMG.
+
+## Golden Rules
+
+1. **Never delete a published GitHub release.** GitHub marks deleted releases as immutable ghosts. The tag name becomes permanently locked — you cannot re-create a release or tag with the same name. If you delete a release by accident, you must bump the version number and release under the new version.
+
+2. **Always run `pre-release-check.sh` before releasing.** This script verifies that the target tag name is not locked by an immutable release ghost and that no conflicting tag already exists on the remote.
+
+   ```bash
+   ./scripts/pre-release-check.sh <version> [repo]
+   # Example:
+   ./scripts/pre-release-check.sh 2.1.8 trac3er00/OMG
+   ```
+
+3. **If a tag is locked by an immutable release**, you have two options:
+   - **Bump the version** — increment the patch (or minor/major) version and release under the new number. This is the recommended and fastest path.
+   - **Contact GitHub Support** at https://support.github.com — they may be able to clear the immutable lock, but this can take days and is not guaranteed.
+
+## Release Procedure
+
+### 1. Bump version surfaces
+
+Edit the canonical version source and propagate to all surfaces:
+
+```bash
+# 1. Edit runtime/adoption.py — update CANONICAL_VERSION
+# 2. Edit package.json — update "version"
+
+# 3. Sync all authored surfaces
+python3 scripts/sync-release-identity.py
+
+# 4. Compile derived manifests
+python3 scripts/omg.py contract compile --host claude --host codex --channel public
+python3 scripts/omg.py contract compile --host claude --host codex --channel enterprise
+python3 scripts/omg.py contract compile --host claude --host codex --channel public --output-root artifacts/release
+python3 scripts/omg.py contract compile --host claude --host codex --channel enterprise --output-root artifacts/release
+
+# 5. Rebuild Python package
+python3 -m build --wheel
+
+# 6. Manually update .gemini/settings.json and .kimi/mcp.json
+#    Set _omg._version and _omg.generated.contract_version to the new version
+```
+
+> **WARNING:** Do NOT pass `--output-root dist` to the compile command — it creates `dist/dist/` double-nesting. Only use `--output-root artifacts/release` for release artifact outputs.
+
+### 2. Validate
+
+```bash
+python3 scripts/validate-release-identity.py --scope all
+pytest tests/test_version_gate.py -v
+```
+
+Both must exit 0 before proceeding.
+
+### 3. Pre-release safety check
+
+```bash
+./scripts/pre-release-check.sh <version>
+```
+
+### 4. Commit and push
+
+```bash
+git add -A
+git commit -m "chore(release): bump to v<version> and sync all surfaces"
+git push origin main
+```
+
+### 5. Publish
+
+Trigger the `Publish to npm` workflow via GitHub Actions workflow dispatch, or push a `v*.*.*` tag. The workflow includes an automatic pre-release tag safety check that will fail fast if the tag is locked.
+
+## Troubleshooting
+
+| Problem | Solution |
+|---------|----------|
+| `tag_name was used by an immutable release` | Bump the version number. The old tag is permanently locked. |
+| `validate-release-identity.py` fails | Run the fix sequence shown in the error output. |
+| `dist/dist/` double-nesting | You passed `--output-root dist`. Re-run without that flag. |
+| `.gemini` or `.kimi` version mismatch | These are not tracked by `sync-release-identity.py` — update manually. |

package/artifacts/release/.agents/skills/omg/AGENTS.fragment.md

@@ -70,4 +70,6 @@ Council planning skills are protected and explicit-invocation only:
 
 - Rules: `protected_paths, explicit_invocation`
 - Automations: `contract-compile, release-readiness`
+- Defer to the repo's `AGENTS.md` / `AGENTS.override.md` instruction hierarchy before OMG-specific guidance.
+- Do not mirror or override Codex built-in slash commands; OMG guidance applies through MCP, skills, and generated rules.
 - Require explicit invocation for protected production planning skills.

package/artifacts/release/.agents/skills/omg/codex-rules.md

@@ -18,6 +18,11 @@
 - `omg/control-plane`
 - `omg/mcp-fabric`
 
+## Host Interop
+
+- Respect the repo `AGENTS.md` / `AGENTS.override.md` chain before applying OMG-specific rules.
+- Keep OMG guidance separate from Codex built-in slash commands.
+
 ## Protected Planning Surface
 
 - `omg/plan-council` (explicit invocation only)

package/artifacts/release/.agents/skills/omg/vision/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: omg-vision
-description: "Vision-specific lineage, drift, and replay attachments."
+description: "Vision-specific OCR, comparison, lineage, drift, and replay attachments."
 ---
 
 # OMG Vision Pack

package/artifacts/release/.agents/skills/omg/vision/openai.yaml

@@ -1,5 +1,5 @@
 name: omg-vision
-description: "Vision-specific lineage, drift, and replay attachments."
+description: "Vision-specific OCR, comparison, lineage, drift, and replay attachments."
 allow_implicit_invocation: false
 metadata:
   channel: enterprise

package/artifacts/release/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.1.7",
+    "version": "2.1.9",
     "homepage": "https://github.com/trac3er00/OMG",
     "repository": "https://github.com/trac3er00/OMG"
   },
@@ -14,7 +14,7 @@
     {
       "name": "omg",
       "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.1.7",
+      "version": "2.1.9",
       "source": "./",
       "author": {
         "name": "trac3er00"
@@ -32,5 +32,5 @@
       ]
     }
   ],
-  "version": "2.1.7"
+  "version": "2.1.9"
 }

package/artifacts/release/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg",
-  "version": "2.1.7",
+  "version": "2.1.9",
   "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
   "author": {
     "name": "trac3er00"

package/artifacts/release/OMG_COMPAT_CONTRACT.md

@@ -1,6 +1,6 @@
 ---
 title: OMG Production Control Plane
-version: 2.1.7
+version: 2.1.9
 canonical_hosts:
   - claude
   - codex
@@ -94,6 +94,8 @@ Codex outputs compile to:
 - `.agents/skills/omg/<bundle>/openai.yaml`
 - generated Codex MCP and rule fragments under `.agents/skills/omg/`
 
+Codex compilation must remain compatible with the host's native instruction hierarchy (`AGENTS.md`, `AGENTS.override.md`) and progressive-disclosure skill loading. OMG-generated artifacts document and constrain OMG behavior; they do not replace Codex built-in slash commands.
+
 ## roadmap_extensions
 
 The contract reserves compilation anchors for:

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-81Vm7DjjC4dt6ljx0IYG61FmkQ9MaVzcdJywTOmdoO0InAVkOzg4COya+2BzYCJfpv3pIBpJ5DfQ/ktDfNOIDg==
-trusted comment: type=omg-slsa-v1 keyid=2641892c2a7be6d7 issued_at=2026-03-11T19:41:24.705880+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d
-cEJcndx8faPrn1yLJ6R9JJxQtvrEIgTmgvGjQqkAjOO81OXp/I7WsGd15K2XOdhI+a8sEgkqAcXs3NvaJJczBw==
+A/xx7O9VVnJhRTj/ceJu5igmTDS645JzXk8wmeaW+V72vMkuWbRfhHVO5ZRz6z7q2/iYSVNxmhz2Cofn6UpJCA==
+trusted comment: type=omg-slsa-v1 keyid=64402ec4e8d46fc1 issued_at=2026-03-13T00:09:45.282316+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5
+WPmQabgmHkRe7vzjy90s0udcgl0ncGb9utft1N+OpXZ+5/hFAWFYx+92hJFvmbgPlNhgerQb+NYO20huzIMiDQ==

package/artifacts/release/dist/enterprise/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/.agents/skills/omg/AGENTS.fragment.md",
       "digest": {
-        "sha256": "2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d"
+        "sha256": "19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-11T19:41:24.701856+00:00"
+      "timestamp": "2026-03-13T00:09:45.275012+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-11T19:41:24.701856+00:00",
+  "issued_at": "2026-03-13T00:09:45.275012+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "2641892c2a7be6d7",
-    "value": "untrusted comment: signature from omg local signing key\n81Vm7DjjC4dt6ljx0IYG61FmkQ9MaVzcdJywTOmdoO0InAVkOzg4COya+2BzYCJfpv3pIBpJ5DfQ/ktDfNOIDg==\ntrusted comment: type=omg-slsa-v1 keyid=2641892c2a7be6d7 issued_at=2026-03-11T19:41:24.705880+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d\ncEJcndx8faPrn1yLJ6R9JJxQtvrEIgTmgvGjQqkAjOO81OXp/I7WsGd15K2XOdhI+a8sEgkqAcXs3NvaJJczBw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=2641892c2a7be6d7 issued_at=2026-03-11T19:41:24.705880+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d"
+    "keyid": "64402ec4e8d46fc1",
+    "value": "untrusted comment: signature from omg local signing key\nA/xx7O9VVnJhRTj/ceJu5igmTDS645JzXk8wmeaW+V72vMkuWbRfhHVO5ZRz6z7q2/iYSVNxmhz2Cofn6UpJCA==\ntrusted comment: type=omg-slsa-v1 keyid=64402ec4e8d46fc1 issued_at=2026-03-13T00:09:45.282316+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5\nWPmQabgmHkRe7vzjy90s0udcgl0ncGb9utft1N+OpXZ+5/hFAWFYx+92hJFvmbgPlNhgerQb+NYO20huzIMiDQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=64402ec4e8d46fc1 issued_at=2026-03-13T00:09:45.282316+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5"
   }
 }