@trac3er/oh-my-god 2.1.7 → 2.1.9

package/artifacts/release/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.1.7",
+  "version": "2.1.9",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/artifacts/release/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.7
+version: 2.1.9
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/artifacts/release/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.7
+version: 2.1.9
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/artifacts/release/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.7
+version: 2.1.9
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/artifacts/release/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.1.7
+version: 2.1.9
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts:

package/artifacts/release/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.1.7
+version: 2.1.9
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/artifacts/release/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.1.7
+version: 2.1.9
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/artifacts/release/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.1.7
+version: 2.1.9
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/artifacts/release/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.1.7
+version: 2.1.9
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/artifacts/release/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.7
+version: 2.1.9
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:
@@ -39,46 +39,42 @@ lifecycle_hooks:
     - TaskCompleted
 compiled_hooks:
   SessionStart:
-    - command: python3 "$HOME/.claude/hooks/session-start.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-start.py\""
       timeout: 10
   SessionEnd:
-    - command: python3 "$HOME/.claude/hooks/session-end-capture.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-end-capture.py\""
   PreToolUse:
     - matcher: Bash
-      command: python3 "$HOME/.claude/hooks/firewall.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/firewall.py\""
       timeout: 10
     - matcher: Read|Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/secret-guard.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/secret-guard.py\""
       timeout: 10
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/tdd-gate.py"
-      timeout: 10
-    - matcher: ""
-      command: python3 "$HOME/.claude/hooks/pre-tool-inject.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/pre-tool-inject.py\""
   PostToolUse:
     - matcher: Bash
-      command: python3 "$HOME/.claude/hooks/circuit-breaker.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/circuit-breaker.py\""
       timeout: 10
     - matcher: Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/tool-ledger.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/tool-ledger.py\""
       timeout: 10
     - matcher: Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/test_generator_hook.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/test_generator_hook.py\""
       timeout: 10
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/budget_governor.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/budget_governor.py\""
       timeout: 10
   PostToolUseFailure:
-    - command: python3 "$HOME/.claude/hooks/post-tool-failure.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/post-tool-failure.py\""
   Stop:
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/stop_dispatcher.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/stop_dispatcher.py\""
       timeout: 90
 feature_dependencies:
   defense-state:
     required_for:
       - hook-governor
-      - tdd-gate
 mcp_contract:
   servers:
     - omg-control

package/artifacts/release/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.1.7
+version: 2.1.9
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/artifacts/release/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.1.7
+version: 2.1.9
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/artifacts/release/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.1.7
+version: 2.1.9
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/artifacts/release/registry/bundles/plan-council.yaml

@@ -1,6 +1,6 @@
 id: plan-council
 kind: planning
-version: 2.1.7
+version: 2.1.9
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:

package/artifacts/release/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.1.7
+version: 2.1.9
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/artifacts/release/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.1.7
+version: 2.1.9
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/artifacts/release/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.1.7
+version: 2.1.9
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/artifacts/release/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.1.7
+version: 2.1.9
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/artifacts/release/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.1.7
+version: 2.1.9
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/artifacts/release/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.1.7
+version: 2.1.9
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/artifacts/release/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.1.7
+version: 2.1.9
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/artifacts/release/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.1.7
+version: 2.1.9
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/artifacts/release/registry/bundles/vision.yaml

@@ -1,8 +1,8 @@
 id: vision
 kind: domain-pack
-version: 2.1.7
+version: 2.1.9
 title: OMG Vision Pack
-description: Vision-specific lineage, drift, and replay attachments.
+description: Vision-specific OCR, comparison, lineage, drift, and replay attachments.
 hosts:
   - claude
   - codex

package/artifacts/release/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.1.7",
+  "version": "2.1.9",
   "type": "object",
   "required": [
     "id",

package/artifacts/release/settings.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "_comment": "OMG 2.1.7 - project-level config with hook registrations, presets, and feature flags.",
+  "_comment": "OMG 2.1.9 - project-level config with hook registrations, presets, and feature flags.",
   "permissions": {
     "allow": [
       "Agent",
@@ -171,7 +171,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/session-start.py\"",
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/session-start.py\\\"",
             "timeout": 10
           }
         ]
@@ -182,7 +182,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/session-end-capture.py\""
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/session-end-capture.py\\\""
           }
         ]
       }
@@ -192,7 +192,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/firewall.py\"",
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/firewall.py\\\"",
             "timeout": 10
           }
         ],
@@ -202,7 +202,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/secret-guard.py\"",
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/secret-guard.py\\\"",
             "timeout": 10
           }
         ],
@@ -212,17 +212,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/tdd-gate.py\"",
-            "timeout": 10
-          }
-        ],
-        "matcher": ""
-      },
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/pre-tool-inject.py\""
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/pre-tool-inject.py\\\""
           }
         ],
         "matcher": ""
@@ -233,7 +223,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/circuit-breaker.py\"",
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/circuit-breaker.py\\\"",
             "timeout": 10
           }
         ],
@@ -243,7 +233,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/tool-ledger.py\"",
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/tool-ledger.py\\\"",
             "timeout": 10
           }
         ],
@@ -253,7 +243,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/test_generator_hook.py\"",
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/test_generator_hook.py\\\"",
             "timeout": 10
           }
         ],
@@ -263,7 +253,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/budget_governor.py\"",
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/budget_governor.py\\\"",
             "timeout": 10
           }
         ],
@@ -275,7 +265,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/post-tool-failure.py\""
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/post-tool-failure.py\\\""
           }
         ]
       }
@@ -285,7 +275,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/stop_dispatcher.py\"",
+            "command": "\\\"$HOME/.claude/omg-runtime/.venv/bin/python\\\" \\\"$HOME/.claude/hooks/stop_dispatcher.py\\\"",
             "timeout": 90
           }
         ],
@@ -297,7 +287,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/user-prompt-submit.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/user-prompt-submit.py\"",
             "timeout": 10
           }
         ]
@@ -308,7 +298,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/instructions-loaded.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/instructions-loaded.py\"",
             "timeout": 10
           }
         ]
@@ -316,7 +306,7 @@
     ]
   },
   "_omg": {
-    "_version": "2.1.7",
+    "_version": "2.1.9",
     "preset": "safe",
     "omgMode": "focused",
     "default_mode": "ulw+ralph",
@@ -376,7 +366,7 @@
       "NOTEBOOKLM": false
     },
     "generated": {
-      "contract_version": "2.1.7",
+      "contract_version": "2.1.9",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",
@@ -669,6 +659,16 @@
           "execution_primitives"
         ]
       }
-    }
+    },
+    "plugin_allowlist": [
+      "oh-my-openagent",
+      "oh-my-opencode",
+      "oh-my-codex",
+      "oh-my-claudecode"
+    ]
+  },
+  "enabledPlugins": {
+    "oh-my-opencode@omg": true,
+    "oh-my-opencode": true
   }
 }

package/build/lib/commands/OMG:health-check.md

@@ -24,7 +24,10 @@ Run all checks silently, report only issues:
 
 5. **Tools**: Hooks installed? OMG team aliases available? MCP servers listed?
    - Check ~/.claude/hooks/.omg-version exists.
-   - Check if `~/.claude/commands/OMG:teams.md` and `OMG:ccg.md` exist (WARN if missing, not FAIL).
+   - Check if Claude sees OMG through plugin-managed skills/surfaces rather than legacy `~/.claude/commands/` files:
+     - `~/.claude/plugins/known_marketplaces.json` contains `omg`
+     - `~/.claude/plugins/cache/omg/omg/<version>/.claude-plugin/plugin.json` exists
+     - WARN if only legacy command files exist without the plugin-managed surface
    - List MCP servers from .mcp.json (informational).
 
 6. **Failures**: Stale failure patterns in failure-tracker.json?

package/build/lib/commands/OMG:preset.md

@@ -0,0 +1,49 @@
+---
+description: "Inspect or apply the canonical OMG preset for the current project."
+allowed-tools: Read, Write, Edit, Bash(python*:*), Bash(ls:*), Bash(grep:*)
+argument-hint: "[safe|balanced|interop|labs|buffet|plugins-first]"
+---
+
+# /OMG:preset
+
+Inspect or apply the canonical OMG preset for the current project.
+
+## Usage
+
+```text
+/OMG:preset
+/OMG:preset safe
+/OMG:preset balanced
+/OMG:preset interop
+/OMG:preset labs
+/OMG:preset buffet
+/OMG:preset plugins-first
+```
+
+## Presets
+
+- `safe`: minimum managed OMG surface
+- `balanced`: safe defaults plus extra productivity MCPs
+- `interop`: coexistence and shared-memory oriented setup
+- `labs`: enables experimental and browser-heavy surfaces
+- `buffet`: full preset; enables every managed preset flag
+- `plugins-first`: compatibility alias for `interop`
+
+## Behavior
+
+When a preset is supplied:
+
+1. Resolve the requested preset through `runtime.adoption.resolve_preset`.
+2. Persist the canonical preset via `hooks.setup_wizard.set_preferences(...)`.
+3. Update project preset metadata in `.omg/state/cli-config.yaml` and project `settings.json` when present.
+4. Report the resolved preset, enabled features, and selected MCP defaults.
+
+When no preset is supplied:
+
+1. Read the current project preset from `.omg/state/cli-config.yaml` or project `settings.json`.
+2. Report the resolved preset and its managed feature flags.
+
+## Notes
+
+- `buffet` is the top-tier preset and should be treated as a superset of `labs`.
+- If the host install also needs updating, rerun `/OMG:setup` with the same preset so the host-level command and MCP surfaces stay aligned.

package/build/lib/commands/OMG:profile-review.md

@@ -34,6 +34,20 @@ python3 scripts/omg.py profile-review [--format json|text]
 }
 ```
 
+## Auto-action routing
+
+Session health auto-actions may route to this command when governed profile
+state becomes risky. When `evaluate_auto_actions()` in `runtime/session_health.py`
+returns `require-review`, the agent is directed here to inspect risk before
+proceeding. This command remains strictly read-only — it never mutates
+`profile.yaml` or applies autonomous fixes.
+
+Bounded auto-actions that may trigger this route:
+
+- **pause** — session blocked due to high contamination or overthinking; destructive preferences escalate to require-review
+- **require-review** — profile risk detected (destructive preferences or pending confirmations)
+- **warn** — verification errors combined with profile risk
+
 ## Report sections
 
 1. **Style preferences** — governed style entries with source, learned_at, decay metadata
@@ -41,3 +55,4 @@ python3 scripts/omg.py profile-review [--format json|text]
 3. **Pending confirmations** — entries marked `pending_confirmation` (destructive signals awaiting user approval)
 4. **Decay candidates** — style entries with `decay_score > 0` that may be stale
 5. **Provenance summary** — recent profile update events from `profile_provenance.recent_updates`
+6. **Risk assessment** — overall risk level, destructive entries, and review requirement

package/build/lib/commands/OMG:setup.md

@@ -1,7 +1,7 @@
 ---
 description: "Native OMG setup and adoption flow for supported hosts"
 allowed-tools: Read, Write, Edit, Bash(python*:*), Bash(ls:*), Bash(grep:*)
-argument-hint: "[optional: --non-interactive, --mode omg-only|coexist, --preset safe|balanced|interop|labs|plugins-first]"
+argument-hint: "[optional: --non-interactive, --mode omg-only|coexist, --preset safe|balanced|interop|labs|buffet|plugins-first]"
 ---
 
 # /OMG:setup
@@ -43,6 +43,7 @@ Step 4: Choose preset
   - balanced
   - interop
   - labs
+  - buffet
   - plugins-first (alias for interop)
 
 Step 5: Configure MCP and persist preferences

package/build/lib/commands/OMG:validate.md

@@ -36,7 +36,7 @@ python3 scripts/omg.py validate --format json
       "required": true | false
     }
   ],
-  "version": "2.1.7"
+  "version": "2.1.9"
 }
 ```
 

package/build/lib/control_plane/openapi.yaml

@@ -29,6 +29,23 @@ paths:
       responses:
         '200':
           description: Decision result
+  /v2/vision/jobs:
+    post:
+      summary: Submit a vision analysis job
+      responses:
+        '202':
+          description: Accepted
+        '400':
+          description: Invalid vision payload
+  /v1/vision/jobs:
+    post:
+      deprecated: true
+      summary: Deprecated alias of /v2/vision/jobs
+      responses:
+        '202':
+          description: Accepted
+        '400':
+          description: Invalid vision payload
   /v2/trust/review:
     post:
       summary: Review trust-sensitive config changes

package/build/lib/control_plane/server.py

@@ -36,6 +36,8 @@ def _read_json(handler: BaseHTTPRequestHandler) -> dict[str, Any]:
 _POST_ROUTE_TABLE = {
     "/v2/policy/evaluate": ("policy_evaluate", False),
     "/v1/policy/evaluate": ("policy_evaluate", True),
+    "/v2/vision/jobs": ("vision_jobs", False),
+    "/v1/vision/jobs": ("vision_jobs", True),
     "/v2/trust/review": ("trust_review", False),
     "/v1/trust/review": ("trust_review", True),
     "/v2/evidence/ingest": ("evidence_ingest", False),

package/build/lib/control_plane/service.py

@@ -30,6 +30,46 @@ class ControlPlaneService:
     def __init__(self, project_dir: str | None = None):
         self.project_dir = project_dir or os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
 
+    def vision_jobs(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
+        if not isinstance(payload, dict):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": "vision job payload must be an object",
+            }
+
+        mode = str(payload.get("mode", "")).strip()
+        inputs = payload.get("inputs")
+        valid_modes = {"ocr", "compare", "analyze", "batch", "eval"}
+
+        if mode not in valid_modes:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": f"mode must be one of: {', '.join(sorted(valid_modes))}",
+            }
+        if not isinstance(inputs, list) or not inputs or not all(isinstance(item, str) and item.strip() for item in inputs):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": "inputs must be a non-empty list of file paths",
+            }
+
+        missing = [item for item in inputs if not (Path(self.project_dir) / item).exists()]
+        if missing:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": f"input paths do not exist: {', '.join(missing)}",
+            }
+
+        return 202, {
+            "status": "accepted",
+            "job_type": "vision",
+            "mode": mode,
+            "input_count": len(inputs),
+        }
+
     def policy_evaluate(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
         tool = str(payload.get("tool", ""))
         input_data = payload.get("input", {})