@trac3er/oh-my-god 2.1.8 → 2.2.2

package/artifacts/public/dist/public/bundle/registry/bundles/secure-worktree-pipeline.yaml

@@ -0,0 +1,69 @@
+id: secure-worktree-pipeline
+kind: runtime
+version: 2.1.9
+title: OMG Secure Worktree Pipeline
+description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/exec_kernel.py
+    - runtime/subagent_dispatcher.py
+    - runtime/merge_writer.py
+    - hooks/branch_manager.py
+invocation_policy:
+  user_invocable: false
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: high
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(git:*)
+    codex:
+      - Read
+      - Bash(git:*)
+lifecycle_hooks:
+  native:
+    - SessionStart
+    - Stop
+  emulated:
+    - WorktreeCreate
+    - WorktreeRemove
+    - SubagentStart
+    - SubagentStop
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+merge_writer_policy:
+  lock_path: .omg/state/merge-writer.lock
+  provenance_pattern: .omg/evidence/merge-writer-{run_id}.json
+  readers: concurrent
+  writers: exclusive
+  mutation_requires:
+    - worktree_isolation
+    - merge_writer_lock
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/subagents/*.json
+    - .omg/evidence/merge-writer-*.json
+    - .omg/state/exec-kernel/*.json
+    - .omg/state/merge-writer.lock
+execution_contract:
+  flags:
+    - OMG_EXEC_KERNEL_ENABLED=false
+  modes:
+    - automation
+    - ephemeral_worktree
+    - local_supervisor
+channel_overrides:
+  public:
+    worker_policy: local-only
+  enterprise:
+    worker_policy: managed-local

package/artifacts/public/dist/public/bundle/registry/bundles/security-check.yaml

@@ -0,0 +1,50 @@
+id: security-check
+kind: security
+version: 2.1.9
+title: OMG Security Check
+description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/security_check.py
+    - commands/OMG:security-check.md
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/security-check-*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/artifacts/public/dist/public/bundle/registry/bundles/terminal-lane.yaml

@@ -0,0 +1,61 @@
+id: terminal-lane
+kind: governance
+version: 2.1.9
+title: OMG Terminal Lane
+description: Highest-risk governed terminal execution lane with strict approval and attestation.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/tool_fabric.py
+    - runtime/compliance_governor.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: high
+  allowed_tools:
+    claude:
+      - Bash
+    codex:
+      - Bash
+lifecycle_hooks:
+  native:
+    - PreToolUse
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - bash
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/terminal-lane-{run_id}.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+tool_fabric:
+  lane: terminal-lane
+  enforcement_order:
+    - tool_selection
+    - approval_state
+    - evidence_requirements
+    - attestation_proof_validation
+    - execution
+  tools:
+    - Bash
+  requires_signed_approval: true
+  requires_attestation: true
+  required_evidence:
+    - .omg/evidence/terminal-lane-{run_id}.json
+channel_overrides:
+  public:
+    posture: restricted
+  enterprise:
+    posture: managed

package/artifacts/public/dist/public/bundle/registry/bundles/test-intent-lock.yaml

@@ -0,0 +1,49 @@
+id: test-intent-lock
+kind: proof
+version: 2.1.9
+title: OMG Test Intent Lock
+description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/test_intent_lock.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/test-intent-lock-*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/artifacts/public/dist/public/bundle/registry/bundles/tracebank.yaml

@@ -0,0 +1,47 @@
+id: tracebank
+kind: evidence
+version: 2.1.9
+title: OMG Tracebank
+description: Structured plan-to-patch-to-verify trace capture for OMG routes.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/tracebank.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: true
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/tracebank/events.jsonl
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    retention: project-local
+  enterprise:
+    retention: policy-managed

package/artifacts/public/dist/public/bundle/registry/bundles/vision.yaml

@@ -0,0 +1,45 @@
+id: vision
+kind: domain-pack
+version: 2.1.9
+title: OMG Vision Pack
+description: Vision-specific OCR, comparison, lineage, drift, and replay attachments.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/domain_packs.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+    codex:
+      - Read
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/lineage/*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    drift_checks: advisory
+  enterprise:
+    drift_checks: required

package/artifacts/public/dist/public/bundle/registry/omg-capability.schema.json

@@ -0,0 +1,378 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
+  "title": "OMG Capability Bundle",
+  "version": "2.1.9",
+  "type": "object",
+  "required": [
+    "id",
+    "kind",
+    "version",
+    "title",
+    "description",
+    "hosts",
+    "assets",
+    "invocation_policy",
+    "tool_policy",
+    "lifecycle_hooks",
+    "mcp_contract",
+    "lsp_contract",
+    "evidence_outputs",
+    "execution_contract",
+    "channel_overrides"
+  ],
+  "properties": {
+    "id": {
+      "type": "string"
+    },
+    "kind": {
+      "type": "string"
+    },
+    "version": {
+      "type": "string"
+    },
+    "title": {
+      "type": "string"
+    },
+    "description": {
+      "type": "string"
+    },
+    "hosts": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": [
+          "claude",
+          "codex",
+          "gemini",
+          "kimi"
+        ]
+      },
+      "minItems": 1
+    },
+    "assets": {
+      "type": "object"
+    },
+    "invocation_policy": {
+      "type": "object"
+    },
+    "tool_policy": {
+      "type": "object"
+    },
+    "lifecycle_hooks": {
+      "type": "object"
+    },
+    "mcp_contract": {
+      "type": "object"
+    },
+    "lsp_contract": {
+      "type": "object"
+    },
+    "evidence_outputs": {
+      "type": "object"
+    },
+    "execution_contract": {
+      "type": "object"
+    },
+    "policy_model": {
+      "type": "object",
+      "required": [
+        "trust_tiers",
+        "tool_policies",
+        "protected_paths",
+        "evidence_contract",
+        "host_rules"
+      ],
+      "properties": {
+        "trust_tiers": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "required": [
+              "name",
+              "level",
+              "label",
+              "allowed_sources"
+            ],
+            "properties": {
+              "name": {
+                "type": "string"
+              },
+              "level": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "label": {
+                "type": "string"
+              },
+              "allowed_sources": {
+                "type": "array",
+                "minItems": 1,
+                "items": {
+                  "type": "string"
+                }
+              }
+            },
+            "additionalProperties": true
+          }
+        },
+        "tool_policies": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "required": [
+              "tool_name",
+              "allowed_tiers",
+              "requires_approval"
+            ],
+            "properties": {
+              "tool_name": {
+                "type": "string"
+              },
+              "allowed_tiers": {
+                "type": "array",
+                "minItems": 1,
+                "items": {
+                  "type": "string"
+                }
+              },
+              "requires_approval": {
+                "type": "boolean"
+              }
+            },
+            "additionalProperties": true
+          }
+        },
+        "protected_paths": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "required": [
+              "path_pattern",
+              "required_tier"
+            ],
+            "properties": {
+              "path_pattern": {
+                "type": "string"
+              },
+              "required_tier": {
+                "type": "string"
+              }
+            },
+            "additionalProperties": true
+          }
+        },
+        "evidence_contract": {
+          "type": "object",
+          "required": [
+            "timestamp",
+            "executor",
+            "trace_id",
+            "lineage"
+          ],
+          "properties": {
+            "timestamp": {
+              "type": "string"
+            },
+            "executor": {
+              "type": "string"
+            },
+            "trace_id": {
+              "type": "string"
+            },
+            "lineage": {
+              "type": "string"
+            }
+          },
+          "additionalProperties": true
+        },
+        "host_rules": {
+          "type": "object",
+          "required": [
+            "claude",
+            "codex"
+          ],
+          "properties": {
+            "claude": {
+              "type": "object",
+              "required": [
+                "compilation_targets",
+                "hooks",
+                "subagents",
+                "skills"
+              ],
+              "properties": {
+                "compilation_targets": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "hooks": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "subagents": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "skills": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                }
+              },
+              "additionalProperties": true
+            },
+            "codex": {
+              "type": "object",
+              "required": [
+                "compilation_targets",
+                "skills",
+                "agents_fragments",
+                "rules",
+                "automations"
+              ],
+              "properties": {
+                "compilation_targets": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "skills": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "agents_fragments": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "rules": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "automations": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                }
+              },
+              "additionalProperties": true
+            },
+            "gemini": {
+              "type": "object",
+              "required": [
+                "compilation_targets",
+                "mcp",
+                "skills",
+                "automations"
+              ],
+              "properties": {
+                "compilation_targets": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "mcp": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "skills": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "automations": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                }
+              },
+              "additionalProperties": true
+            },
+            "kimi": {
+              "type": "object",
+              "required": [
+                "compilation_targets",
+                "mcp",
+                "skills",
+                "automations"
+              ],
+              "properties": {
+                "compilation_targets": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "mcp": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "skills": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "automations": {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": {
+                    "type": "string"
+                  }
+                }
+              },
+              "additionalProperties": true
+            }
+          },
+          "additionalProperties": true
+        }
+      },
+      "additionalProperties": true
+    },
+    "channel_overrides": {
+      "type": "object"
+    }
+  },
+  "additionalProperties": true
+}