@trac3er/oh-my-god 2.1.7 → 2.1.9

package/build/lib/hooks/_common.py

@@ -3,7 +3,9 @@ import json
 import os
 import sys
 import fcntl
+import site
 from datetime import datetime, timezone
+from pathlib import Path
 
 # --- Stop-Block Loop Breaker ---
 _STOP_BLOCK_TRACKER = ".omg/state/ledger/.stop-block-tracker.json"
@@ -19,6 +21,61 @@ PRE_TOOL_INJECT_MAX_MS = 100
 STOP_CHECK_MAX_MS = 15000
 STOP_DISPATCHER_TOTAL_MAX_MS = 90000
 
+
+def _managed_site_packages(runtime_root: Path) -> list[Path]:
+    venv_root = runtime_root / ".venv"
+    if not venv_root.is_dir():
+        return []
+
+    candidates: list[Path] = []
+    for pattern in ("lib/python*/site-packages", "Lib/site-packages"):
+        for path in venv_root.glob(pattern):
+            if path.is_dir():
+                candidates.append(path.resolve())
+    return candidates
+
+
+def bootstrap_runtime_paths(anchor: str | os.PathLike[str] | None = None) -> None:
+    """Add the repo root or portable omg-runtime root to ``sys.path``.
+
+    Installed hooks live under ``~/.claude/hooks`` while the portable runtime is
+    provisioned under ``~/.claude/omg-runtime``. Repo-local execution instead
+    keeps ``hooks/``, ``runtime/``, ``lab/`` and related packages side by side.
+    This helper resolves both layouts and is safe to call repeatedly.
+    """
+    anchor_path = Path(anchor).resolve() if anchor is not None else Path(__file__).resolve()
+    hooks_dir = anchor_path.parent
+    parent_dir = hooks_dir.parent
+
+    candidates: list[Path] = [hooks_dir]
+    for candidate in (
+        parent_dir,
+        parent_dir / "omg-runtime",
+        hooks_dir / "omg-runtime",
+    ):
+        if candidate not in candidates:
+            candidates.append(candidate)
+
+    project_dir = os.environ.get("CLAUDE_PROJECT_DIR", "").strip()
+    if project_dir:
+        project_path = Path(project_dir).resolve()
+        for candidate in (
+            project_path,
+            project_path / "omg-runtime",
+        ):
+            if candidate not in candidates:
+                candidates.append(candidate)
+
+    for candidate in candidates:
+        candidate_str = str(candidate)
+        if candidate.is_dir() and candidate_str not in sys.path:
+            sys.path.insert(0, candidate_str)
+        for site_packages in _managed_site_packages(candidate):
+            site.addsitedir(str(site_packages))
+
+
+bootstrap_runtime_paths()
+
 def json_input():
     """Parse JSON from stdin. Returns dict or exits 0 on parse failure."""
     try:

package/build/lib/hooks/firewall.py

@@ -10,13 +10,16 @@ import sys
 from pathlib import Path
 from typing import Any
 
-HOOKS_DIR = os.path.dirname(__file__)
-PROJECT_ROOT = os.path.dirname(HOOKS_DIR)
-for path in (HOOKS_DIR, PROJECT_ROOT):
+HOOKS_DIR = str(Path(__file__).resolve().parent)
+PROJECT_ROOT = str(Path(HOOKS_DIR).parent)
+PORTABLE_RUNTIME_ROOT = str(Path(PROJECT_ROOT) / "omg-runtime")
+for path in (HOOKS_DIR, PROJECT_ROOT, PORTABLE_RUNTIME_ROOT):
     if path not in sys.path:
         sys.path.insert(0, path)
 
-from _common import setup_crash_handler, json_input, deny_decision, is_bypass_mode, get_project_dir  # pyright: ignore[reportImplicitRelativeImport]
+from _common import bootstrap_runtime_paths, setup_crash_handler, json_input, deny_decision, is_bypass_mode, get_project_dir  # pyright: ignore[reportImplicitRelativeImport]
+
+bootstrap_runtime_paths(__file__)
 
 # Fail-closed: deny on crash (security hook)
 setup_crash_handler("firewall", fail_closed=True)

package/build/lib/hooks/pre-compact.py

@@ -250,20 +250,29 @@ def main():
         resolve_state_file(project_dir, "state/ledger/failure-tracker.json", "ledger/failure-tracker.json"),
         resolve_state_file(project_dir, "state/ralph-loop.json", "ralph-loop.json"),
     ]
-    cached = read_cache(snapshot_files)
     saved = []
     for src in snapshot_files:
-        if cached.get(src) is not None:
+        if os.path.exists(src):
             dst = os.path.join(snapshot_dir, os.path.basename(src))
             if snapshot_file(src, dst, MAX_SNAPSHOT_BYTES):
                 saved.append(os.path.basename(src))
 
-    profile = first_lines(cached.get(resolve_state_file(project_dir, "state/profile.yaml", "profile.yaml")), 20)
-    wm = first_lines(cached.get(resolve_state_file(project_dir, "state/working-memory.md", "working-memory.md")), 15)
-    plan = first_lines(cached.get(resolve_state_file(project_dir, "state/_plan.md", "_plan.md")), 10)
-    checklist = first_lines(cached.get(resolve_state_file(project_dir, "state/_checklist.md", "_checklist.md")), 50)
-    tracker = cached.get(resolve_state_file(project_dir, "state/ledger/failure-tracker.json", "ledger/failure-tracker.json"))
-    ralph_loop = cached.get(resolve_state_file(project_dir, "state/ralph-loop.json", "ralph-loop.json"))
+    summary_files = {
+        "profile": resolve_state_file(project_dir, "state/profile.yaml", "profile.yaml"),
+        "working_memory": resolve_state_file(project_dir, "state/working-memory.md", "working-memory.md"),
+        "plan": resolve_state_file(project_dir, "state/_plan.md", "_plan.md"),
+        "checklist": resolve_state_file(project_dir, "state/_checklist.md", "_checklist.md"),
+        "tracker": resolve_state_file(project_dir, "state/ledger/failure-tracker.json", "ledger/failure-tracker.json"),
+        "ralph_loop": resolve_state_file(project_dir, "state/ralph-loop.json", "ralph-loop.json"),
+    }
+    cached = read_cache(list(summary_files.values()))
+
+    profile = first_lines(cached.get(summary_files["profile"]), 20)
+    wm = first_lines(cached.get(summary_files["working_memory"]), 15)
+    plan = first_lines(cached.get(summary_files["plan"]), 10)
+    checklist = first_lines(cached.get(summary_files["checklist"]), 50)
+    tracker = cached.get(summary_files["tracker"])
+    ralph_loop = cached.get(summary_files["ralph_loop"])
 
     parts = [
         f"# Handoff -- {datetime.now().strftime('%Y-%m-%d %H:%M')}",

package/build/lib/hooks/prompt-enhancer.py

@@ -18,10 +18,19 @@ import hashlib
 import json, sys, os, re, time
 from datetime import datetime, timezone
 import importlib
+from pathlib import Path
 
-HOOKS_DIR = os.path.dirname(__file__)
-if HOOKS_DIR not in sys.path:
-    sys.path.insert(0, HOOKS_DIR)
+HOOKS_DIR = str(Path(__file__).resolve().parent)
+_PROJECT_ROOT = str(Path(HOOKS_DIR).parent)
+_PORTABLE_RUNTIME_ROOT = str(Path(_PROJECT_ROOT) / "omg-runtime")
+for path in (HOOKS_DIR, _PROJECT_ROOT, _PORTABLE_RUNTIME_ROOT):
+    if path not in sys.path:
+        sys.path.insert(0, path)
+
+try:
+    from runtime.complexity_scorer import score_complexity
+except ImportError:
+    score_complexity = None
 
 try:
     from hooks._common import setup_crash_handler, json_input, atomic_json_write, get_feature_flag, _resolve_project_dir
@@ -260,6 +269,7 @@ def _build_intent_gate_state(prompt_text, payload):
         "missing_slots": missing_slots,
         "clarification_prompt": clarification_prompt,
         "source_prompt_hash": source_prompt_hash,
+        "governance": score_complexity(prompt_text).get("governance", {}),
         "updated_at": datetime.now(timezone.utc).isoformat(),
     }
 
@@ -301,6 +311,24 @@ if detected_intent in ("fix", "implement", "refactor"):
         "@verify: After EVERY change run build/lint/test. Show exit code."
     )
 
+_gov_payload: dict[str, object] | None = None
+if score_complexity is not None and detected_intent in (
+    "fix", "implement", "refactor", "plan", "review",
+):
+    try:
+        _gov_raw = score_complexity(prompt).get("governance")
+        if isinstance(_gov_raw, dict):
+            _gov_payload = _gov_raw
+    except Exception:
+        pass
+if _gov_payload and budget_ok():
+    parts.append(
+        f"@governance: read_first={_gov_payload.get('read_first', False)} "
+        f"simplify_only={_gov_payload.get('simplify_only', False)} "
+        f"optimize_only={_gov_payload.get('optimize_only', False)} "
+        f"complexity={_gov_payload.get('complexity', 'low')}"
+    )
+
 if parts and budget_ok():
     add("\n".join(parts))
 
@@ -403,10 +431,21 @@ if not is_crazy and not is_ulw and budget_ok():
     elif word_count > 40:
         complexity_score += 1
 
+    complexity_category = "low"
+    if score_complexity is not None:
+        try:
+            scored = score_complexity(prompt)
+            scored_category = str(scored.get("category", "low")).strip().lower()
+            if scored_category in {"trivial", "low", "medium", "high"}:
+                complexity_category = scored_category
+        except Exception:
+            pass
+
     # HIGH complexity (≥4): auto-trigger CRAZY
     if complexity_score >= 4:
         add(
             "@mode:CRAZY(auto) — Complex task detected (multi-step/multi-component). "
+            f"Complexity label={complexity_category}. "
             "All agents active: Claude=orchestrator, Codex=deep-code, Gemini=UI/UX. "
             "Work through all items systematically. Verify each step."
         )
@@ -414,6 +453,7 @@ if not is_crazy and not is_ulw and budget_ok():
     elif complexity_score >= 2:
         add(
             "@mode:PERSISTENT(auto) — Multi-step task detected. "
+            f"Complexity label={complexity_category}. "
             "Work through ALL items. Skip if blocked, continue others. "
             "Don't stop until checklist complete."
         )

package/build/lib/hooks/secret-guard.py

@@ -6,14 +6,18 @@ Delegates file policy decisions to policy_engine.py.
 import json
 import os
 import sys
+from pathlib import Path
 
-HOOKS_DIR = os.path.dirname(__file__)
-PROJECT_ROOT = os.path.dirname(HOOKS_DIR)
-for path in (HOOKS_DIR, PROJECT_ROOT):
+HOOKS_DIR = str(Path(__file__).resolve().parent)
+PROJECT_ROOT = str(Path(HOOKS_DIR).parent)
+PORTABLE_RUNTIME_ROOT = str(Path(PROJECT_ROOT) / "omg-runtime")
+for path in (HOOKS_DIR, PROJECT_ROOT, PORTABLE_RUNTIME_ROOT):
     if path not in sys.path:
         sys.path.insert(0, path)
 
-from _common import setup_crash_handler, json_input, deny_decision, is_bypass_mode, get_project_dir
+from _common import bootstrap_runtime_paths, setup_crash_handler, json_input, deny_decision, is_bypass_mode, get_project_dir
+
+bootstrap_runtime_paths(__file__)
 
 # Fail-closed: deny on crash (security hook)
 setup_crash_handler("secret-guard", fail_closed=True)

package/build/lib/hooks/session-start.py

@@ -9,17 +9,21 @@ import os
 import sys
 import time as _time
 import re as _re
+from pathlib import Path
 
-HOOKS_DIR = os.path.dirname(__file__)
-PROJECT_ROOT = os.path.dirname(HOOKS_DIR)
-if PROJECT_ROOT not in sys.path:
-    sys.path.insert(0, PROJECT_ROOT)
-if HOOKS_DIR not in sys.path:
-    sys.path.insert(0, HOOKS_DIR)
+HOOKS_DIR = str(Path(__file__).resolve().parent)
+PROJECT_ROOT = str(Path(HOOKS_DIR).parent)
+PORTABLE_RUNTIME_ROOT = str(Path(PROJECT_ROOT) / "omg-runtime")
+for path in (HOOKS_DIR, PROJECT_ROOT, PORTABLE_RUNTIME_ROOT):
+    if path not in sys.path:
+        sys.path.insert(0, path)
 
-from hooks._common import setup_crash_handler, json_input, get_feature_flag, _resolve_project_dir
+from hooks._common import bootstrap_runtime_paths, setup_crash_handler, json_input, get_feature_flag, _resolve_project_dir
 from hooks.state_migration import resolve_state_file, resolve_state_dir
 from hooks._budget import BUDGET_SESSION_TOTAL, BUDGET_SESSION_IDLE
+
+bootstrap_runtime_paths(__file__)
+
 from runtime.context_engine import render_profile_digest_text
 
 setup_crash_handler("session-start", fail_closed=False)

package/build/lib/hooks/setup_wizard.py

@@ -14,12 +14,17 @@ from typing import Any, cast
 
 import yaml
 
-from hooks._common import get_feature_flag
+_HOOKS_DIR = Path(__file__).resolve().parent
+_PROJECT_ROOT = _HOOKS_DIR.parent
+_PORTABLE_RUNTIME_ROOT = _PROJECT_ROOT / "omg-runtime"
+for path in (_HOOKS_DIR, _PROJECT_ROOT, _PORTABLE_RUNTIME_ROOT):
+    path_str = str(path)
+    if path_str not in sys.path:
+        sys.path.insert(0, path_str)
 
-# Ensure project root is on sys.path for runtime imports
-_PROJECT_ROOT = os.path.normpath(os.path.join(os.path.dirname(os.path.abspath(__file__)), ".."))
-if _PROJECT_ROOT not in sys.path:
-    sys.path.insert(0, _PROJECT_ROOT)
+from hooks._common import bootstrap_runtime_paths, get_feature_flag
+
+bootstrap_runtime_paths(__file__)
 
 from runtime.cli_provider import get_provider, list_available_providers  # noqa: E402
 from runtime.mcp_config_writers import (  # noqa: E402
@@ -47,6 +52,7 @@ from runtime.adoption import (  # noqa: E402
     build_adoption_report,
     get_mode_profile,
     get_preset_features,
+    detect_ecosystems,
     resolve_preset,
     write_adoption_report,
 )
@@ -249,12 +255,15 @@ def get_default_mcps_for_preset(preset: str) -> list[str]:
         the requested *preset* level.
     """
     level = _PRESET_LEVEL.get(preset, 0)
-    return [
+    default_ids = [
         m["id"]
         for m in MCP_CATALOG
         if _PRESET_LEVEL.get(m.get("min_preset", ""), -1) <= level
         and m.get("min_preset") is not None
     ]
+    if preset == "buffet" and os.environ.get("OMG_SETUP_ENABLED", "0").strip() != "1":
+        default_ids.append("notebooklm")
+    return default_ids
 
 
 def _normalize_mcp_ids(selected_ids: list[str]) -> list[str]:
@@ -1028,9 +1037,15 @@ def run_setup_wizard(
 
     selected_preset = resolve_preset(preset or ("balanced" if non_interactive else "safe"))
     selected_setup_mode = select_setup_mode(setup_mode)
+    requested_mode = mode
+    if requested_mode is None and non_interactive:
+        detected = detect_ecosystems(project_dir)
+        if not detected:
+            requested_mode = "omg-only"
+
     adoption = build_adoption_report(
         project_dir,
-        requested_mode=mode,
+        requested_mode=requested_mode,
         preset=selected_preset,
         adopt=adopt,
     )
@@ -1110,7 +1125,8 @@ def run_setup_wizard(
         "blockers": [{"name": c["name"], "message": c["message"]} for c in blockers],
     }
 
-    if blockers:
+    has_detected_cli = any(bool(v.get("detected", False)) for v in clis.values() if isinstance(v, dict))
+    if blockers and not non_interactive and not has_detected_cli:
         result["status"] = "validation_failed"
 
     return result

package/build/lib/hooks/stop_dispatcher.py

@@ -9,14 +9,20 @@ import subprocess
 import sys
 import time
 from datetime import datetime, timedelta, timezone
+from pathlib import Path
 import warnings
 
-sys.path.insert(0, os.path.dirname(__file__))
-sys.path.insert(0, os.path.dirname(os.path.dirname(__file__)))
+HOOKS_DIR = str(Path(__file__).resolve().parent)
+PROJECT_ROOT = str(Path(HOOKS_DIR).parent)
+PORTABLE_RUNTIME_ROOT = str(Path(PROJECT_ROOT) / "omg-runtime")
+for path in (HOOKS_DIR, PROJECT_ROOT, PORTABLE_RUNTIME_ROOT):
+    if path not in sys.path:
+        sys.path.insert(0, path)
 
 from hooks._common import (  # noqa: E402
     atomic_json_write,
     block_decision,
+    bootstrap_runtime_paths,
     check_performance_budget,
     get_feature_flag,
     get_project_dir,
@@ -31,6 +37,8 @@ from hooks._common import (  # noqa: E402
 )
 from hooks.state_migration import resolve_state_file  # noqa: E402
 
+bootstrap_runtime_paths(__file__)
+
 from runtime.release_run_coordinator import resolve_current_run_id  # noqa: E402
 from runtime import test_intent_lock  # noqa: E402
 

package/build/lib/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.1.7",
+  "version": "2.1.9",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/build/lib/plugins/core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-core",
-  "version": "2.1.7",
+  "version": "2.1.8",
   "description": "Core OMG commands - native setup, routing, orchestration, and verification surfaces",
   "type": "omg-plugin",
   "commands": {
@@ -74,6 +74,11 @@
       "description": "Set cognitive mode for the session",
       "category": "config"
     },
+    "preset": {
+      "path": "commands/OMG:preset.md",
+      "description": "Inspect or apply the canonical OMG preset for the current project",
+      "category": "config"
+    },
     "domain-init": {
       "path": "commands/OMG:domain-init.md",
       "description": "Alias for domain scaffolding (use init instead)",
@@ -152,7 +157,8 @@
     "config": {
       "description": "Configuration and settings",
       "commands": [
-        "mode"
+        "mode",
+        "preset"
       ]
     },
     "observability": {

package/build/lib/registry/approval_artifact.py

@@ -7,11 +7,10 @@ from dataclasses import asdict, dataclass
 from pathlib import Path
 from typing import Any
 
-from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
-
 from registry.verify_artifact import (
     _canonical_json,
     _key_id_from_public_key,
+    _load_ed25519_backend,
     _load_trusted_signers,
     _parse_minisign_detached,
     _utc_now,
@@ -126,8 +125,11 @@ def verify_approval_artifact(
     if not isinstance(public_key_b64, str) or not public_key_b64:
         return {"valid": False, "reason": "invalid trusted signer public key"}
     try:
+        _, _, Ed25519PublicKey = _load_ed25519_backend()
         public_key_raw = base64.b64decode(public_key_b64, validate=True)
         public_key = Ed25519PublicKey.from_public_bytes(public_key_raw)
+    except ModuleNotFoundError as exc:
+        return {"valid": False, "reason": str(exc)}
     except Exception:
         return {"valid": False, "reason": "invalid trusted signer public key"}
 

package/build/lib/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.1.7
+version: 2.1.9
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/build/lib/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.1.7
+version: 2.1.9
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/build/lib/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.1.7
+version: 2.1.9
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/build/lib/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.1.7
+version: 2.1.9
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts:

package/build/lib/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.1.7
+version: 2.1.9
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/build/lib/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.1.7
+version: 2.1.9
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/build/lib/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.1.7
+version: 2.1.9
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/build/lib/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.1.7
+version: 2.1.9
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/build/lib/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.7
+version: 2.1.9
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:
@@ -39,46 +39,42 @@ lifecycle_hooks:
     - TaskCompleted
 compiled_hooks:
   SessionStart:
-    - command: python3 "$HOME/.claude/hooks/session-start.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-start.py\""
       timeout: 10
   SessionEnd:
-    - command: python3 "$HOME/.claude/hooks/session-end-capture.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-end-capture.py\""
   PreToolUse:
     - matcher: Bash
-      command: python3 "$HOME/.claude/hooks/firewall.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/firewall.py\""
       timeout: 10
     - matcher: Read|Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/secret-guard.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/secret-guard.py\""
       timeout: 10
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/tdd-gate.py"
-      timeout: 10
-    - matcher: ""
-      command: python3 "$HOME/.claude/hooks/pre-tool-inject.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/pre-tool-inject.py\""
   PostToolUse:
     - matcher: Bash
-      command: python3 "$HOME/.claude/hooks/circuit-breaker.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/circuit-breaker.py\""
       timeout: 10
     - matcher: Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/tool-ledger.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/tool-ledger.py\""
       timeout: 10
     - matcher: Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/test_generator_hook.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/test_generator_hook.py\""
       timeout: 10
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/budget_governor.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/budget_governor.py\""
       timeout: 10
   PostToolUseFailure:
-    - command: python3 "$HOME/.claude/hooks/post-tool-failure.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/post-tool-failure.py\""
   Stop:
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/stop_dispatcher.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/stop_dispatcher.py\""
       timeout: 90
 feature_dependencies:
   defense-state:
     required_for:
       - hook-governor
-      - tdd-gate
 mcp_contract:
   servers:
     - omg-control

package/build/lib/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.1.7
+version: 2.1.9
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/build/lib/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.1.7
+version: 2.1.9
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/build/lib/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.1.7
+version: 2.1.9
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/build/lib/registry/bundles/plan-council.yaml

@@ -1,6 +1,6 @@
 id: plan-council
 kind: planning
-version: 2.1.7
+version: 2.1.9
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:

package/build/lib/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.1.7
+version: 2.1.9
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/build/lib/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.1.7
+version: 2.1.9
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/build/lib/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.1.7
+version: 2.1.9
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/build/lib/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.1.7
+version: 2.1.9
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts: