@trac3er/oh-my-god 2.1.8 → 2.2.2

package/artifacts/release/settings.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "_comment": "OMG 2.1.8 - project-level config with hook registrations, presets, and feature flags.",
+  "_comment": "OMG 2.2.2 - project-level config with hook registrations, presets, and feature flags.",
   "permissions": {
     "allow": [
       "Agent",
@@ -171,7 +171,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/session-start.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-start.py\"",
             "timeout": 10
           }
         ]
@@ -182,7 +182,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/session-end-capture.py\""
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-end-capture.py\""
           }
         ]
       }
@@ -192,7 +192,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/firewall.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/firewall.py\"",
             "timeout": 10
           }
         ],
@@ -202,7 +202,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/secret-guard.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/secret-guard.py\"",
             "timeout": 10
           }
         ],
@@ -212,17 +212,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/tdd-gate.py\"",
-            "timeout": 10
-          }
-        ],
-        "matcher": ""
-      },
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/pre-tool-inject.py\""
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/pre-tool-inject.py\""
           }
         ],
         "matcher": ""
@@ -233,7 +223,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/circuit-breaker.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/circuit-breaker.py\"",
             "timeout": 10
           }
         ],
@@ -243,7 +233,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/tool-ledger.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/tool-ledger.py\"",
             "timeout": 10
           }
         ],
@@ -253,7 +243,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/test_generator_hook.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/test_generator_hook.py\"",
             "timeout": 10
           }
         ],
@@ -263,7 +253,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/budget_governor.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/budget_governor.py\"",
             "timeout": 10
           }
         ],
@@ -275,7 +265,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/post-tool-failure.py\""
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/post-tool-failure.py\""
           }
         ]
       }
@@ -285,7 +275,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/stop_dispatcher.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/stop_dispatcher.py\"",
             "timeout": 90
           }
         ],
@@ -297,7 +287,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/user-prompt-submit.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/user-prompt-submit.py\"",
             "timeout": 10
           }
         ]
@@ -308,7 +298,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"$HOME/.claude/hooks/instructions-loaded.py\"",
+            "command": "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/instructions-loaded.py\"",
             "timeout": 10
           }
         ]
@@ -316,7 +306,7 @@
     ]
   },
   "_omg": {
-    "_version": "2.1.8",
+    "_version": "2.2.2",
     "preset": "safe",
     "omgMode": "focused",
     "default_mode": "ulw+ralph",
@@ -376,7 +366,7 @@
       "NOTEBOOKLM": false
     },
     "generated": {
-      "contract_version": "2.1.8",
+      "contract_version": "2.2.2",
       "channel": "enterprise",
       "required_bundles": [
         "control-plane",
@@ -492,6 +482,21 @@
             "requires_approval": true
           }
         ],
+        "tool_fabric_contract": {
+          "enforcement_order": [
+            "tool_selection",
+            "approval_state",
+            "evidence_requirements",
+            "attestation_proof_validation",
+            "execution"
+          ],
+          "lanes": [
+            "lsp-pack",
+            "hash-edit",
+            "ast-pack",
+            "terminal-lane"
+          ]
+        },
         "protected_paths": [
           {
             "path_pattern": ".omg/**",
@@ -667,8 +672,23 @@
           "claim_judge",
           "compliance_governor",
           "execution_primitives"
+        ],
+        "runtime_behavior_surfaces": [
+          "execution_primitives",
+          "provider_host_parity",
+          "host_semantic_parity"
         ]
       }
-    }
+    },
+    "plugin_allowlist": [
+      "oh-my-openagent",
+      "oh-my-opencode",
+      "oh-my-codex",
+      "oh-my-claudecode"
+    ]
+  },
+  "enabledPlugins": {
+    "oh-my-opencode@omg": true,
+    "oh-my-opencode": true
   }
 }

package/build/lib/commands/OMG:health-check.md

@@ -24,7 +24,10 @@ Run all checks silently, report only issues:
 
 5. **Tools**: Hooks installed? OMG team aliases available? MCP servers listed?
    - Check ~/.claude/hooks/.omg-version exists.
-   - Check if `~/.claude/commands/OMG:teams.md` and `OMG:ccg.md` exist (WARN if missing, not FAIL).
+   - Check if Claude sees OMG through plugin-managed skills/surfaces rather than legacy `~/.claude/commands/` files:
+     - `~/.claude/plugins/known_marketplaces.json` contains `omg`
+     - `~/.claude/plugins/cache/omg/omg/<version>/.claude-plugin/plugin.json` exists
+     - WARN if only legacy command files exist without the plugin-managed surface
    - List MCP servers from .mcp.json (informational).
 
 6. **Failures**: Stale failure patterns in failure-tracker.json?

package/build/lib/commands/OMG:issue.md

@@ -0,0 +1,56 @@
+---
+description: "Active red-team diagnostics and simulation surface for ranked issue triage."
+allowed-tools: Read, Grep, Glob, Bash(python3 scripts/omg.py issue:*), Bash(pytest:*)
+argument-hint: "[optional: --surfaces <csv> --simulate-surface <name> --simulate-scenario <name>]"
+---
+
+# /OMG:issue
+
+Run active, read-only diagnostics across live and governed OMG surfaces, then emit ranked machine-readable issues.
+
+## Command Roles
+
+- `/OMG:issue` is the diagnostic and red-team simulation surface.
+- `omg fix --issue` remains the issue-driven fix surface.
+- Both share the same backend: `runtime/issue_surface.py`.
+- `/OMG:issue` does not mutate targets.
+
+## Surfaces Scanned
+
+- `live_session`
+- `forge_runs`
+- `hooks`
+- `skills`
+- `mcps`
+- `plugin_interop`
+- `governed_tools`
+- `domain_pipelines`
+
+## Severity and Approval
+
+- Severities: `critical`, `high`, `medium`, `low`, `info`
+- High/critical issues must declare signed-approval requirements before fix execution.
+- Output includes fix guidance plus evidence links for replay and audit.
+
+## Usage
+
+```text
+/OMG:issue
+/OMG:issue --surfaces plugin_interop,governed_tools
+/OMG:issue --simulate-surface hooks --simulate-scenario "delete protected lock"
+```
+
+## Backend Output
+
+- Evidence file: `.omg/evidence/issues/<run_id>.json`
+- Report schema: `IssueReport`
+- Each issue includes:
+  - `id`
+  - `severity`
+  - `surface`
+  - `title`
+  - `description`
+  - `fix_guidance`
+  - `evidence_links`
+  - `approval_required`
+  - `approval_reason`

package/build/lib/commands/OMG:preset.md

@@ -0,0 +1,49 @@
+---
+description: "Inspect or apply the canonical OMG preset for the current project."
+allowed-tools: Read, Write, Edit, Bash(python*:*), Bash(ls:*), Bash(grep:*)
+argument-hint: "[safe|balanced|interop|labs|buffet|plugins-first]"
+---
+
+# /OMG:preset
+
+Inspect or apply the canonical OMG preset for the current project.
+
+## Usage
+
+```text
+/OMG:preset
+/OMG:preset safe
+/OMG:preset balanced
+/OMG:preset interop
+/OMG:preset labs
+/OMG:preset buffet
+/OMG:preset plugins-first
+```
+
+## Presets
+
+- `safe`: minimum managed OMG surface
+- `balanced`: safe defaults plus extra productivity MCPs
+- `interop`: coexistence and shared-memory oriented setup
+- `labs`: enables experimental and browser-heavy surfaces
+- `buffet`: full preset; enables every managed preset flag
+- `plugins-first`: compatibility alias for `interop`
+
+## Behavior
+
+When a preset is supplied:
+
+1. Resolve the requested preset through `runtime.adoption.resolve_preset`.
+2. Persist the canonical preset via `hooks.setup_wizard.set_preferences(...)`.
+3. Update project preset metadata in `.omg/state/cli-config.yaml` and project `settings.json` when present.
+4. Report the resolved preset, enabled features, and selected MCP defaults.
+
+When no preset is supplied:
+
+1. Read the current project preset from `.omg/state/cli-config.yaml` or project `settings.json`.
+2. Report the resolved preset and its managed feature flags.
+
+## Notes
+
+- `buffet` is the top-tier preset and should be treated as a superset of `labs`.
+- If the host install also needs updating, rerun `/OMG:setup` with the same preset so the host-level command and MCP surfaces stay aligned.

package/build/lib/commands/OMG:profile-review.md

@@ -34,6 +34,20 @@ python3 scripts/omg.py profile-review [--format json|text]
 }
 ```
 
+## Auto-action routing
+
+Session health auto-actions may route to this command when governed profile
+state becomes risky. When `evaluate_auto_actions()` in `runtime/session_health.py`
+returns `require-review`, the agent is directed here to inspect risk before
+proceeding. This command remains strictly read-only — it never mutates
+`profile.yaml` or applies autonomous fixes.
+
+Bounded auto-actions that may trigger this route:
+
+- **pause** — session blocked due to high contamination or overthinking; destructive preferences escalate to require-review
+- **require-review** — profile risk detected (destructive preferences or pending confirmations)
+- **warn** — verification errors combined with profile risk
+
 ## Report sections
 
 1. **Style preferences** — governed style entries with source, learned_at, decay metadata
@@ -41,3 +55,4 @@ python3 scripts/omg.py profile-review [--format json|text]
 3. **Pending confirmations** — entries marked `pending_confirmation` (destructive signals awaiting user approval)
 4. **Decay candidates** — style entries with `decay_score > 0` that may be stale
 5. **Provenance summary** — recent profile update events from `profile_provenance.recent_updates`
+6. **Risk assessment** — overall risk level, destructive entries, and review requirement

package/build/lib/commands/OMG:setup.md

@@ -1,7 +1,7 @@
 ---
 description: "Native OMG setup and adoption flow for supported hosts"
 allowed-tools: Read, Write, Edit, Bash(python*:*), Bash(ls:*), Bash(grep:*)
-argument-hint: "[optional: --non-interactive, --mode omg-only|coexist, --preset safe|balanced|interop|labs|plugins-first]"
+argument-hint: "[optional: --non-interactive, --mode omg-only|coexist, --preset safe|balanced|interop|labs|buffet|plugins-first]"
 ---
 
 # /OMG:setup
@@ -43,6 +43,7 @@ Step 4: Choose preset
   - balanced
   - interop
   - labs
+  - buffet
   - plugins-first (alias for interop)
 
 Step 5: Configure MCP and persist preferences

package/build/lib/commands/OMG:teams.md

@@ -1,11 +1,14 @@
 ---
-description: OMG internal team routing (standalone). Standalone team routing.
+description: OMG internal staged team routing (standalone). /OMG:team canonical, /OMG:teams compatibility alias.
 allowed-tools: Read, Grep, Glob, Bash(git:*), Bash(rg:*), Bash(find:*), Bash(cat:*), Bash(python3:*)
 argument-hint: "[codex|gemini|ccg|auto] 'problem statement'"
 ---
 
 # /OMG:teams — Standalone Internal Router
 
+Canonical alias: `/OMG:team`
+Compatibility alias: `/OMG:teams`
+
 Use OMG's internal router using internal routing.
 
 ## Input contract
@@ -16,20 +19,32 @@ Use OMG's internal router using internal routing.
 - expected_outcome: optional acceptance target
 
 ## Execution
-Use internal CLI router:
+Use internal CLI router (canonical):
 
 ```bash
 OMG_CLI="${OMG_CLI_PATH:-$HOME/.claude/omg-runtime/scripts/omg.py}"
 if [ ! -f "$OMG_CLI" ] && [ -f "scripts/omg.py" ]; then OMG_CLI="scripts/omg.py"; fi
+python3 "$OMG_CLI" team --target auto --problem "[problem]"
+```
+
+Compatibility alias (legacy):
+
+```bash
 python3 "$OMG_CLI" teams --target auto --problem "[problem]"
 ```
 
 For explicit target:
 
 ```bash
-python3 "$OMG_CLI" teams --target codex --problem "[problem]"
+python3 "$OMG_CLI" team --target codex --problem "[problem]"
 ```
 
+## Staged flow
+- `team-plan`: resolve context packet and clarification/council gate before dispatch
+- `team-exec`: launch workers only when context is resolved
+- `team-verify`: run verification and critic synthesis
+- `team-fix`: surface blockers/next actions for follow-up iteration
+
 ## Output schema
 `TeamDispatchResult { status, findings[], actions[], evidence{} }`
 

package/build/lib/commands/OMG:validate.md

@@ -36,7 +36,7 @@ python3 scripts/omg.py validate --format json
       "required": true | false
     }
   ],
-  "version": "2.1.8"
+  "version": "2.2.2"
 }
 ```
 

package/build/lib/control_plane/openapi.yaml

@@ -29,6 +29,23 @@ paths:
       responses:
         '200':
           description: Decision result
+  /v2/vision/jobs:
+    post:
+      summary: Submit a vision analysis job
+      responses:
+        '202':
+          description: Accepted
+        '400':
+          description: Invalid vision payload
+  /v1/vision/jobs:
+    post:
+      deprecated: true
+      summary: Deprecated alias of /v2/vision/jobs
+      responses:
+        '202':
+          description: Accepted
+        '400':
+          description: Invalid vision payload
   /v2/trust/review:
     post:
       summary: Review trust-sensitive config changes

package/build/lib/control_plane/server.py

@@ -36,6 +36,8 @@ def _read_json(handler: BaseHTTPRequestHandler) -> dict[str, Any]:
 _POST_ROUTE_TABLE = {
     "/v2/policy/evaluate": ("policy_evaluate", False),
     "/v1/policy/evaluate": ("policy_evaluate", True),
+    "/v2/vision/jobs": ("vision_jobs", False),
+    "/v1/vision/jobs": ("vision_jobs", True),
     "/v2/trust/review": ("trust_review", False),
     "/v1/trust/review": ("trust_review", True),
     "/v2/evidence/ingest": ("evidence_ingest", False),

package/build/lib/control_plane/service.py

@@ -24,12 +24,53 @@ from runtime.mutation_gate import check_mutation_allowed
 from runtime.runtime_contracts import read_run_state
 from runtime.security_check import run_security_check
 from runtime.test_intent_lock import lock_intent, verify_intent
+from runtime.tool_fabric import ToolFabric
 
 
 class ControlPlaneService:
     def __init__(self, project_dir: str | None = None):
         self.project_dir = project_dir or os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
 
+    def vision_jobs(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
+        if not isinstance(payload, dict):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": "vision job payload must be an object",
+            }
+
+        mode = str(payload.get("mode", "")).strip()
+        inputs = payload.get("inputs")
+        valid_modes = {"ocr", "compare", "analyze", "batch", "eval"}
+
+        if mode not in valid_modes:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": f"mode must be one of: {', '.join(sorted(valid_modes))}",
+            }
+        if not isinstance(inputs, list) or not inputs or not all(isinstance(item, str) and item.strip() for item in inputs):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": "inputs must be a non-empty list of file paths",
+            }
+
+        missing = [item for item in inputs if not (Path(self.project_dir) / item).exists()]
+        if missing:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": f"input paths do not exist: {', '.join(missing)}",
+            }
+
+        return 202, {
+            "status": "accepted",
+            "job_type": "vision",
+            "mode": mode,
+            "input_count": len(inputs),
+        }
+
     def policy_evaluate(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
         tool = str(payload.get("tool", ""))
         input_data = payload.get("input", {})
@@ -308,6 +349,76 @@ class ControlPlaneService:
         )
         return 200, result
 
+    def tool_fabric_request(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
+        if not isinstance(payload, dict):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "payload must be an object",
+            }
+
+        lane_name = str(payload.get("lane_name", "")).strip()
+        tool_name = str(payload.get("tool_name", "")).strip()
+        run_id = str(payload.get("run_id", "")).strip()
+        context = payload.get("context")
+
+        if not lane_name:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "lane_name is required",
+            }
+        if not tool_name:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "tool_name is required",
+            }
+        if not run_id:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "run_id is required",
+            }
+        if context is not None and not isinstance(context, dict):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "context must be an object when provided",
+            }
+
+        fabric = ToolFabric(project_dir=self.project_dir)
+        bundle_map = {
+            "lsp-pack": "registry/bundles/lsp-pack.yaml",
+            "hash-edit": "registry/bundles/hash-edit.yaml",
+            "ast-pack": "registry/bundles/ast-pack.yaml",
+            "terminal-lane": "registry/bundles/terminal-lane.yaml",
+        }
+        for lane, bundle_path in bundle_map.items():
+            fabric.register_lane(lane, bundle_path)
+
+        try:
+            result = fabric.request_tool(
+                lane_name=lane_name,
+                tool_name=tool_name,
+                run_id=run_id,
+                context=context if isinstance(context, dict) else None,
+            )
+        except ValueError as exc:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": str(exc),
+            }
+
+        payload_out = {
+            "status": "allowed" if result.allowed else "blocked",
+            "reason": result.reason,
+            "evidence_path": result.evidence_path,
+            "ledger_entry": result.ledger_entry,
+        }
+        return (200 if result.allowed else 403), payload_out
+
     def session_health(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
         run_id = payload.get("run_id")
         if isinstance(run_id, str) and run_id.strip():