@trac3er/oh-my-god 2.1.8 → 2.2.2

package/control_plane/openapi.yaml

@@ -29,6 +29,23 @@ paths:
       responses:
         '200':
           description: Decision result
+  /v2/vision/jobs:
+    post:
+      summary: Submit a vision analysis job
+      responses:
+        '202':
+          description: Accepted
+        '400':
+          description: Invalid vision payload
+  /v1/vision/jobs:
+    post:
+      deprecated: true
+      summary: Deprecated alias of /v2/vision/jobs
+      responses:
+        '202':
+          description: Accepted
+        '400':
+          description: Invalid vision payload
   /v2/trust/review:
     post:
       summary: Review trust-sensitive config changes

package/control_plane/server.py

@@ -36,6 +36,8 @@ def _read_json(handler: BaseHTTPRequestHandler) -> dict[str, Any]:
 _POST_ROUTE_TABLE = {
     "/v2/policy/evaluate": ("policy_evaluate", False),
     "/v1/policy/evaluate": ("policy_evaluate", True),
+    "/v2/vision/jobs": ("vision_jobs", False),
+    "/v1/vision/jobs": ("vision_jobs", True),
     "/v2/trust/review": ("trust_review", False),
     "/v1/trust/review": ("trust_review", True),
     "/v2/evidence/ingest": ("evidence_ingest", False),

package/control_plane/service.py

@@ -24,12 +24,53 @@ from runtime.mutation_gate import check_mutation_allowed
 from runtime.runtime_contracts import read_run_state
 from runtime.security_check import run_security_check
 from runtime.test_intent_lock import lock_intent, verify_intent
+from runtime.tool_fabric import ToolFabric
 
 
 class ControlPlaneService:
     def __init__(self, project_dir: str | None = None):
         self.project_dir = project_dir or os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
 
+    def vision_jobs(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
+        if not isinstance(payload, dict):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": "vision job payload must be an object",
+            }
+
+        mode = str(payload.get("mode", "")).strip()
+        inputs = payload.get("inputs")
+        valid_modes = {"ocr", "compare", "analyze", "batch", "eval"}
+
+        if mode not in valid_modes:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": f"mode must be one of: {', '.join(sorted(valid_modes))}",
+            }
+        if not isinstance(inputs, list) or not inputs or not all(isinstance(item, str) and item.strip() for item in inputs):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": "inputs must be a non-empty list of file paths",
+            }
+
+        missing = [item for item in inputs if not (Path(self.project_dir) / item).exists()]
+        if missing:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_VISION_INPUT",
+                "message": f"input paths do not exist: {', '.join(missing)}",
+            }
+
+        return 202, {
+            "status": "accepted",
+            "job_type": "vision",
+            "mode": mode,
+            "input_count": len(inputs),
+        }
+
     def policy_evaluate(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
         tool = str(payload.get("tool", ""))
         input_data = payload.get("input", {})
@@ -308,6 +349,76 @@ class ControlPlaneService:
         )
         return 200, result
 
+    def tool_fabric_request(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
+        if not isinstance(payload, dict):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "payload must be an object",
+            }
+
+        lane_name = str(payload.get("lane_name", "")).strip()
+        tool_name = str(payload.get("tool_name", "")).strip()
+        run_id = str(payload.get("run_id", "")).strip()
+        context = payload.get("context")
+
+        if not lane_name:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "lane_name is required",
+            }
+        if not tool_name:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "tool_name is required",
+            }
+        if not run_id:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "run_id is required",
+            }
+        if context is not None and not isinstance(context, dict):
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": "context must be an object when provided",
+            }
+
+        fabric = ToolFabric(project_dir=self.project_dir)
+        bundle_map = {
+            "lsp-pack": "registry/bundles/lsp-pack.yaml",
+            "hash-edit": "registry/bundles/hash-edit.yaml",
+            "ast-pack": "registry/bundles/ast-pack.yaml",
+            "terminal-lane": "registry/bundles/terminal-lane.yaml",
+        }
+        for lane, bundle_path in bundle_map.items():
+            fabric.register_lane(lane, bundle_path)
+
+        try:
+            result = fabric.request_tool(
+                lane_name=lane_name,
+                tool_name=tool_name,
+                run_id=run_id,
+                context=context if isinstance(context, dict) else None,
+            )
+        except ValueError as exc:
+            return 400, {
+                "status": "error",
+                "error_code": "INVALID_TOOL_FABRIC_INPUT",
+                "message": str(exc),
+            }
+
+        payload_out = {
+            "status": "allowed" if result.allowed else "blocked",
+            "reason": result.reason,
+            "evidence_path": result.evidence_path,
+            "ledger_entry": result.ledger_entry,
+        }
+        return (200 if result.allowed else 403), payload_out
+
     def session_health(self, payload: dict[str, Any]) -> tuple[int, dict[str, Any]]:
         run_id = payload.get("run_id")
         if isinstance(run_id, str) and run_id.strip():

package/dist/dist/enterprise/bundle/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.7
+version: 2.1.8
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:
@@ -39,46 +39,42 @@ lifecycle_hooks:
     - TaskCompleted
 compiled_hooks:
   SessionStart:
-    - command: python3 "$HOME/.claude/hooks/session-start.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-start.py\""
       timeout: 10
   SessionEnd:
-    - command: python3 "$HOME/.claude/hooks/session-end-capture.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-end-capture.py\""
   PreToolUse:
     - matcher: Bash
-      command: python3 "$HOME/.claude/hooks/firewall.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/firewall.py\""
       timeout: 10
     - matcher: Read|Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/secret-guard.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/secret-guard.py\""
       timeout: 10
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/tdd-gate.py"
-      timeout: 10
-    - matcher: ""
-      command: python3 "$HOME/.claude/hooks/pre-tool-inject.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/pre-tool-inject.py\""
   PostToolUse:
     - matcher: Bash
-      command: python3 "$HOME/.claude/hooks/circuit-breaker.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/circuit-breaker.py\""
       timeout: 10
     - matcher: Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/tool-ledger.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/tool-ledger.py\""
       timeout: 10
     - matcher: Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/test_generator_hook.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/test_generator_hook.py\""
       timeout: 10
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/budget_governor.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/budget_governor.py\""
       timeout: 10
   PostToolUseFailure:
-    - command: python3 "$HOME/.claude/hooks/post-tool-failure.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/post-tool-failure.py\""
   Stop:
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/stop_dispatcher.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/stop_dispatcher.py\""
       timeout: 90
 feature_dependencies:
   defense-state:
     required_for:
       - hook-governor
-      - tdd-gate
 mcp_contract:
   servers:
     - omg-control

package/dist/dist/public/bundle/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.1.7
+version: 2.1.8
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:
@@ -39,46 +39,42 @@ lifecycle_hooks:
     - TaskCompleted
 compiled_hooks:
   SessionStart:
-    - command: python3 "$HOME/.claude/hooks/session-start.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-start.py\""
       timeout: 10
   SessionEnd:
-    - command: python3 "$HOME/.claude/hooks/session-end-capture.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/session-end-capture.py\""
   PreToolUse:
     - matcher: Bash
-      command: python3 "$HOME/.claude/hooks/firewall.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/firewall.py\""
       timeout: 10
     - matcher: Read|Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/secret-guard.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/secret-guard.py\""
       timeout: 10
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/tdd-gate.py"
-      timeout: 10
-    - matcher: ""
-      command: python3 "$HOME/.claude/hooks/pre-tool-inject.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/pre-tool-inject.py\""
   PostToolUse:
     - matcher: Bash
-      command: python3 "$HOME/.claude/hooks/circuit-breaker.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/circuit-breaker.py\""
       timeout: 10
     - matcher: Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/tool-ledger.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/tool-ledger.py\""
       timeout: 10
     - matcher: Write|Edit|MultiEdit
-      command: python3 "$HOME/.claude/hooks/test_generator_hook.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/test_generator_hook.py\""
       timeout: 10
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/budget_governor.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/budget_governor.py\""
       timeout: 10
   PostToolUseFailure:
-    - command: python3 "$HOME/.claude/hooks/post-tool-failure.py"
+    - command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/post-tool-failure.py\""
   Stop:
     - matcher: ""
-      command: python3 "$HOME/.claude/hooks/stop_dispatcher.py"
+      command: "\"$HOME/.claude/omg-runtime/.venv/bin/python\" \"$HOME/.claude/hooks/stop_dispatcher.py\""
       timeout: 90
 feature_dependencies:
   defense-state:
     required_for:
       - hook-governor
-      - tdd-gate
 mcp_contract:
   servers:
     - omg-control

package/dist/enterprise/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-PGpfsjInPBDn3VAlgN7etMrzMWb/S8No41R730SU32fS6DibNY23Yk1v5bxQq8SPCXPnLwIBnHQddY2pOD2jCg==
-trusted comment: type=omg-slsa-v1 keyid=c3386c0cd77a1321 issued_at=2026-03-11T20:10:49.342837+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d
-i/zXAfkH6EkTjXIipeB3dwEWSkeHDMwU/5kuvS0SEK9S6nESHnMsPXU/+wsqhXWDRLSNfevssbvzV/UXqNanAA==
+UH9P7YF20M9YFZZKlvW2XXC5yuUA7OD8B1TifXj5XZ1mzBK/FwqcxLbzaV3hhhOS2gp5JSuJf1b4rrNAoWALBg==
+trusted comment: type=omg-slsa-v1 keyid=f26fd20ab2a5e2b6 issued_at=2026-03-14T04:21:33.069819+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5
+/3fq0t/ZmHbOHwtP8W9km6Ia0gqKry1i+mZhbCtwZ8Y9cABwoq16BFTeaapCKWQ59t7OTA5wKTruHBEUHQ+bCg==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/AGENTS.fragment.md.statement.json

@@ -5,7 +5,7 @@
     {
       "name": "bundle/.agents/skills/omg/AGENTS.fragment.md",
       "digest": {
-        "sha256": "2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d"
+        "sha256": "19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5"
       }
     }
   ],
@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-11T20:10:49.339175+00:00"
+      "timestamp": "2026-03-14T04:21:33.061882+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-11T20:10:49.339175+00:00",
+  "issued_at": "2026-03-14T04:21:33.061882+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "c3386c0cd77a1321",
-    "value": "untrusted comment: signature from omg local signing key\nPGpfsjInPBDn3VAlgN7etMrzMWb/S8No41R730SU32fS6DibNY23Yk1v5bxQq8SPCXPnLwIBnHQddY2pOD2jCg==\ntrusted comment: type=omg-slsa-v1 keyid=c3386c0cd77a1321 issued_at=2026-03-11T20:10:49.342837+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d\ni/zXAfkH6EkTjXIipeB3dwEWSkeHDMwU/5kuvS0SEK9S6nESHnMsPXU/+wsqhXWDRLSNfevssbvzV/UXqNanAA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=c3386c0cd77a1321 issued_at=2026-03-11T20:10:49.342837+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=2cf0340fbea7f8f39660ed6e6f7bd0fc3df6e210302c3328915e871b0ac8606d"
+    "keyid": "f26fd20ab2a5e2b6",
+    "value": "untrusted comment: signature from omg local signing key\nUH9P7YF20M9YFZZKlvW2XXC5yuUA7OD8B1TifXj5XZ1mzBK/FwqcxLbzaV3hhhOS2gp5JSuJf1b4rrNAoWALBg==\ntrusted comment: type=omg-slsa-v1 keyid=f26fd20ab2a5e2b6 issued_at=2026-03-14T04:21:33.069819+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5\n/3fq0t/ZmHbOHwtP8W9km6Ia0gqKry1i+mZhbCtwZ8Y9cABwoq16BFTeaapCKWQ59t7OTA5wKTruHBEUHQ+bCg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=f26fd20ab2a5e2b6 issued_at=2026-03-14T04:21:33.069819+00:00 artifact=bundle/.agents/skills/omg/AGENTS.fragment.md sha256=19234c26a265b0256b44087986992ee8f40591a9b0af603ee7ba4e55f34d3ea5"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-cCxLbAa84mX+uKKFdEV1sVAVZCWPMG+KX51J25PxzHd6oslI2AIhTzRjQ5qH/DcYQBqGQ9tRikF/a+OnQx4yBQ==
-trusted comment: type=omg-slsa-v1 keyid=22a3af6265239673 issued_at=2026-03-11T20:10:49.343855+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d
-v4fan75EBYE/NI57aTw+5S/YrWLHx0J052K0npq2ifz5lz9aIBiLjxX6A8bnZfY8G2gOtNII4XCdmVStNpt9CQ==
+/3OgYCcak5SKFFgxShlynfnmpegcDFexPvkUFRaKrWsob0evcd+2JAzoM3D4HAYbTiISfrnlbVrlDZjpbyLcCg==
+trusted comment: type=omg-slsa-v1 keyid=192fa857b917198e issued_at=2026-03-14T04:21:33.070847+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d
+RzYsVD80BgW6x4ij4sjCdOFsW3/LRcuSDl+lRjnynjCR7yK3RHHdRGLpJbJRlEQpd7KJlZFpSdWEjmCdapP3CA==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/SKILL.md.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-11T20:10:49.343730+00:00"
+      "timestamp": "2026-03-14T04:21:33.070727+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-11T20:10:49.343730+00:00",
+  "issued_at": "2026-03-14T04:21:33.070727+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "22a3af6265239673",
-    "value": "untrusted comment: signature from omg local signing key\ncCxLbAa84mX+uKKFdEV1sVAVZCWPMG+KX51J25PxzHd6oslI2AIhTzRjQ5qH/DcYQBqGQ9tRikF/a+OnQx4yBQ==\ntrusted comment: type=omg-slsa-v1 keyid=22a3af6265239673 issued_at=2026-03-11T20:10:49.343855+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d\nv4fan75EBYE/NI57aTw+5S/YrWLHx0J052K0npq2ifz5lz9aIBiLjxX6A8bnZfY8G2gOtNII4XCdmVStNpt9CQ==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=22a3af6265239673 issued_at=2026-03-11T20:10:49.343855+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d"
+    "keyid": "192fa857b917198e",
+    "value": "untrusted comment: signature from omg local signing key\n/3OgYCcak5SKFFgxShlynfnmpegcDFexPvkUFRaKrWsob0evcd+2JAzoM3D4HAYbTiISfrnlbVrlDZjpbyLcCg==\ntrusted comment: type=omg-slsa-v1 keyid=192fa857b917198e issued_at=2026-03-14T04:21:33.070847+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d\nRzYsVD80BgW6x4ij4sjCdOFsW3/LRcuSDl+lRjnynjCR7yK3RHHdRGLpJbJRlEQpd7KJlZFpSdWEjmCdapP3CA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=192fa857b917198e issued_at=2026-03-14T04:21:33.070847+00:00 artifact=bundle/.agents/skills/omg/algorithms/SKILL.md sha256=9f007935886f168e43cd76b69857e81c579f9cce8174e14f9b6b0173739c337d"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-51ZdZuLckhA0Q1vKNIuwWbS6/5gWNTiWgK1VHr4d2bxflx1J8BNqQQWxB6Ji+DOvok8zMNgV78T5giZvBD0HDA==
-trusted comment: type=omg-slsa-v1 keyid=d3a91e39cda92471 issued_at=2026-03-11T20:10:49.344465+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d
-qhFYa/Q1/Kow3L/jLFBJFecKbDXtIYhPbLZhRE6SHrEUL5Y+zbSyK/fm4Nn74XXrno1jaYx2NlVN2SEEMiedDA==
+nqVIrn+BiIvmepctnHhYQE/b5G7T8s9Jp7DHKLjqgjx4nWwQDWi9Qxf27pzXnFQr3CPku33VnwTuW3blxmM4DA==
+trusted comment: type=omg-slsa-v1 keyid=9fb9a58cf0414ce5 issued_at=2026-03-14T04:21:33.071427+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d
+vhxi4uQdpDSkG4/ioMTpVKa+wb6eSaIXe0qu06ojjjTM+gjLRYfv2+A8a1yR2MhEmUrOOmQ08jVWSOTSAKNvAA==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/algorithms/openai.yaml.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-11T20:10:49.344350+00:00"
+      "timestamp": "2026-03-14T04:21:33.071316+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-11T20:10:49.344350+00:00",
+  "issued_at": "2026-03-14T04:21:33.071316+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "d3a91e39cda92471",
-    "value": "untrusted comment: signature from omg local signing key\n51ZdZuLckhA0Q1vKNIuwWbS6/5gWNTiWgK1VHr4d2bxflx1J8BNqQQWxB6Ji+DOvok8zMNgV78T5giZvBD0HDA==\ntrusted comment: type=omg-slsa-v1 keyid=d3a91e39cda92471 issued_at=2026-03-11T20:10:49.344465+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d\nqhFYa/Q1/Kow3L/jLFBJFecKbDXtIYhPbLZhRE6SHrEUL5Y+zbSyK/fm4Nn74XXrno1jaYx2NlVN2SEEMiedDA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=d3a91e39cda92471 issued_at=2026-03-11T20:10:49.344465+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d"
+    "keyid": "9fb9a58cf0414ce5",
+    "value": "untrusted comment: signature from omg local signing key\nnqVIrn+BiIvmepctnHhYQE/b5G7T8s9Jp7DHKLjqgjx4nWwQDWi9Qxf27pzXnFQr3CPku33VnwTuW3blxmM4DA==\ntrusted comment: type=omg-slsa-v1 keyid=9fb9a58cf0414ce5 issued_at=2026-03-14T04:21:33.071427+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d\nvhxi4uQdpDSkG4/ioMTpVKa+wb6eSaIXe0qu06ojjjTM+gjLRYfv2+A8a1yR2MhEmUrOOmQ08jVWSOTSAKNvAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=9fb9a58cf0414ce5 issued_at=2026-03-14T04:21:33.071427+00:00 artifact=bundle/.agents/skills/omg/algorithms/openai.yaml sha256=879d3b5bcdb3ffa17387eae31634bd5ce7e2695c0e6dd3b478017843a024300d"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-3cySx+M9Xo/uMUEYhcTglUL9TH4a1IoLmm5Izdt0fB0N3oxRQtjWXBQRWbjWnWYP3de6YRRmIVkTjUZbZ0dcBw==
-trusted comment: type=omg-slsa-v1 keyid=2c532da165756849 issued_at=2026-03-11T20:10:49.345052+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef
-DssHCQpC4hjzaQGDPrgdiGiDWbN403OPJmjD9yBVRWbDBUhGpwxhCIsrRDYzdCSwXGQ4IyznDayCuFS5bLOfAw==
+7YMg7F2/gShNLF0yAmYxGrxLcglr/xYiENL0V2BuDPVGNgdY75WO0HHZqEWXJ5Ut8k5gzqiWRLtIHJX7DBApCA==
+trusted comment: type=omg-slsa-v1 keyid=bae0bb93740dc364 issued_at=2026-03-14T04:21:33.072001+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef
+jTKrcJuiQxYHWtK3O6gAvFnUGlxvCPZNZW6fcXKMf+nk4ZIOqwoMgiD/vR9FSHqRNDDcS7T2t3dXNvMUuJldCg==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/SKILL.md.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-11T20:10:49.344939+00:00"
+      "timestamp": "2026-03-14T04:21:33.071892+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-11T20:10:49.344939+00:00",
+  "issued_at": "2026-03-14T04:21:33.071892+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "2c532da165756849",
-    "value": "untrusted comment: signature from omg local signing key\n3cySx+M9Xo/uMUEYhcTglUL9TH4a1IoLmm5Izdt0fB0N3oxRQtjWXBQRWbjWnWYP3de6YRRmIVkTjUZbZ0dcBw==\ntrusted comment: type=omg-slsa-v1 keyid=2c532da165756849 issued_at=2026-03-11T20:10:49.345052+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef\nDssHCQpC4hjzaQGDPrgdiGiDWbN403OPJmjD9yBVRWbDBUhGpwxhCIsrRDYzdCSwXGQ4IyznDayCuFS5bLOfAw==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=2c532da165756849 issued_at=2026-03-11T20:10:49.345052+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef"
+    "keyid": "bae0bb93740dc364",
+    "value": "untrusted comment: signature from omg local signing key\n7YMg7F2/gShNLF0yAmYxGrxLcglr/xYiENL0V2BuDPVGNgdY75WO0HHZqEWXJ5Ut8k5gzqiWRLtIHJX7DBApCA==\ntrusted comment: type=omg-slsa-v1 keyid=bae0bb93740dc364 issued_at=2026-03-14T04:21:33.072001+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef\njTKrcJuiQxYHWtK3O6gAvFnUGlxvCPZNZW6fcXKMf+nk4ZIOqwoMgiD/vR9FSHqRNDDcS7T2t3dXNvMUuJldCg==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=bae0bb93740dc364 issued_at=2026-03-14T04:21:33.072001+00:00 artifact=bundle/.agents/skills/omg/api-twin/SKILL.md sha256=482db7bf01f80d8695f71f3bdbae8e9a179cf05355e736f90c40c1a3c9136fef"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/openai.yaml.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-8Zzp0c73nS1eN0fq9tEUfcthpr957mQ9OIS9iFoiziyJWJoxXN4vaLFkh2XU24Vy3RWRAGGVXowj3J7dkE26CA==
-trusted comment: type=omg-slsa-v1 keyid=a703112c310f38ab issued_at=2026-03-11T20:10:49.345763+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab
-CiAsmPRYgoC9a0YXuPgjJMS8IvRr/P1xAhiZYr+azzSfIdpcX11lOOsZn7yEOHsySUrVJUqCX2nYiY/y0XT2DA==
+84w9bxtae4yM1C5r8FLs5DceBQT01D4n393eW506lWFcxF+Z5lO2hlBnyXSzqzb/iQ4ZO3ywzr7tv3UK4F91Aw==
+trusted comment: type=omg-slsa-v1 keyid=1bc3e069e775d352 issued_at=2026-03-14T04:21:33.072961+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab
+ObGu5pZHqwLklbSjzS3hU7jVPZ3Ccn0u49/u/81egX6ATSfKOjBhNuHHp1+elniETSzebcCqq8tNy3L0lo+fAw==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/api-twin/openai.yaml.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-11T20:10:49.345608+00:00"
+      "timestamp": "2026-03-14T04:21:33.072805+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-11T20:10:49.345608+00:00",
+  "issued_at": "2026-03-14T04:21:33.072805+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "a703112c310f38ab",
-    "value": "untrusted comment: signature from omg local signing key\n8Zzp0c73nS1eN0fq9tEUfcthpr957mQ9OIS9iFoiziyJWJoxXN4vaLFkh2XU24Vy3RWRAGGVXowj3J7dkE26CA==\ntrusted comment: type=omg-slsa-v1 keyid=a703112c310f38ab issued_at=2026-03-11T20:10:49.345763+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab\nCiAsmPRYgoC9a0YXuPgjJMS8IvRr/P1xAhiZYr+azzSfIdpcX11lOOsZn7yEOHsySUrVJUqCX2nYiY/y0XT2DA==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=a703112c310f38ab issued_at=2026-03-11T20:10:49.345763+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab"
+    "keyid": "1bc3e069e775d352",
+    "value": "untrusted comment: signature from omg local signing key\n84w9bxtae4yM1C5r8FLs5DceBQT01D4n393eW506lWFcxF+Z5lO2hlBnyXSzqzb/iQ4ZO3ywzr7tv3UK4F91Aw==\ntrusted comment: type=omg-slsa-v1 keyid=1bc3e069e775d352 issued_at=2026-03-14T04:21:33.072961+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab\nObGu5pZHqwLklbSjzS3hU7jVPZ3Ccn0u49/u/81egX6ATSfKOjBhNuHHp1+elniETSzebcCqq8tNy3L0lo+fAw==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=1bc3e069e775d352 issued_at=2026-03-14T04:21:33.072961+00:00 artifact=bundle/.agents/skills/omg/api-twin/openai.yaml sha256=a6caee113518bda5e2a470ca7d166d18969392bde1470ef2a47f8ead2c0e33ab"
   }
 }

package/dist/enterprise/attestations/bundle/.agents/skills/omg/ast-pack/SKILL.md.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+wnE7vtEgOgDkJ/wjMOVtMXY4vgk0E1/6VXJZynKXvHU0+wlvfgiUi8v+7oFQ3m3DrgcX58vQnRCSr6oCmyH0AA==
+trusted comment: type=omg-slsa-v1 keyid=e47cdd29886982d7 issued_at=2026-03-14T04:21:33.073652+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00
++JFvmQpbZsGAv6yMkBwkvvOBFcTB8SuGfPKbU350/t1FilquR+k2kTbYcONr2kHRFSVYdZSBDJ4eGQTosv+5AQ==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/ast-pack/SKILL.md.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/ast-pack/SKILL.md",
+      "digest": {
+        "sha256": "ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-14T04:21:33.073527+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-14T04:21:33.073527+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "e47cdd29886982d7",
+    "value": "untrusted comment: signature from omg local signing key\nwnE7vtEgOgDkJ/wjMOVtMXY4vgk0E1/6VXJZynKXvHU0+wlvfgiUi8v+7oFQ3m3DrgcX58vQnRCSr6oCmyH0AA==\ntrusted comment: type=omg-slsa-v1 keyid=e47cdd29886982d7 issued_at=2026-03-14T04:21:33.073652+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00\n+JFvmQpbZsGAv6yMkBwkvvOBFcTB8SuGfPKbU350/t1FilquR+k2kTbYcONr2kHRFSVYdZSBDJ4eGQTosv+5AQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=e47cdd29886982d7 issued_at=2026-03-14T04:21:33.073652+00:00 artifact=bundle/.agents/skills/omg/ast-pack/SKILL.md sha256=ba49d5c0230ca97c9511ac3447b8638d7fb02ef6665f30b99bc86ee5dc975a00"
+  }
+}

package/dist/enterprise/attestations/bundle/.agents/skills/omg/ast-pack/openai.yaml.minisig

@@ -0,0 +1,4 @@
+untrusted comment: signature from omg local signing key
+YCV355HiKrESHeAduZJ5hkWg5vbnIRqtqRyKLNp31BxJpmbEuxkI03uHQIUYJ7aUVzicPqO25/BR/YByKItMCA==
+trusted comment: type=omg-slsa-v1 keyid=71fdbb40f84f8e8d issued_at=2026-03-14T04:21:33.074272+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541
+Yl5hPOcTJ01HExMdWhKiVmATmMLzZ5yEQSeDsw6QR+4DbVknC3PMDPzycpM1dEaczhQKdP1IZQ8hmWkpwtNiCQ==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/ast-pack/openai.yaml.statement.json

@@ -0,0 +1,35 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "subject": [
+    {
+      "name": "bundle/.agents/skills/omg/ast-pack/openai.yaml",
+      "digest": {
+        "sha256": "f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541"
+      }
+    }
+  ],
+  "predicate": {
+    "buildType": "https://omg.security/offline-attestation/v1",
+    "metadata": {
+      "signer": {
+        "keyid": "1f5fe64ec2f8c901",
+        "algorithm": "ed25519-minisign",
+        "mode": "local-offline"
+      },
+      "timestamp": "2026-03-14T04:21:33.074160+00:00"
+    }
+  },
+  "signer": {
+    "keyid": "1f5fe64ec2f8c901",
+    "algorithm": "ed25519-minisign",
+    "mode": "local-offline"
+  },
+  "issued_at": "2026-03-14T04:21:33.074160+00:00",
+  "signature": {
+    "alg": "ed25519-minisign",
+    "keyid": "71fdbb40f84f8e8d",
+    "value": "untrusted comment: signature from omg local signing key\nYCV355HiKrESHeAduZJ5hkWg5vbnIRqtqRyKLNp31BxJpmbEuxkI03uHQIUYJ7aUVzicPqO25/BR/YByKItMCA==\ntrusted comment: type=omg-slsa-v1 keyid=71fdbb40f84f8e8d issued_at=2026-03-14T04:21:33.074272+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541\nYl5hPOcTJ01HExMdWhKiVmATmMLzZ5yEQSeDsw6QR+4DbVknC3PMDPzycpM1dEaczhQKdP1IZQ8hmWkpwtNiCQ==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=71fdbb40f84f8e8d issued_at=2026-03-14T04:21:33.074272+00:00 artifact=bundle/.agents/skills/omg/ast-pack/openai.yaml sha256=f5e644f1a337ef6fb2470ad4a7ccc732495c4513062362f4c605cf4f8a609541"
+  }
+}

package/dist/enterprise/attestations/bundle/.agents/skills/omg/claim-judge/SKILL.md.minisig

@@ -1,4 +1,4 @@
 untrusted comment: signature from omg local signing key
-nWqWRvCgHReWSso7lXQp4aikv5Q6w0WTFIsD4d+VVOMddbrp8Fb97heDwsYriOe/ydg12BINlOe9Jc2PcOHRAQ==
-trusted comment: type=omg-slsa-v1 keyid=5f93fd32bc8ba287 issued_at=2026-03-11T20:10:49.346530+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0
-IIOJnh/poWXStZ/zI5rLJU4zX9eE3gyAHzLydGIRSquVtoLPjcMTUGUyjFrzwShtELDfNMpTm9JvYekLBmk2Dg==
+5QZNJSl65isA2eDRmYxLXSG1XCln6sbBZlYMDHqly0TeHUnuXwLLqV22VdJ5LSxZe33SC+56DgNZhl9LQ+eOAQ==
+trusted comment: type=omg-slsa-v1 keyid=6590a13b79c44ce9 issued_at=2026-03-14T04:21:33.074837+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0
+H8SJO40EYcCye+G259cQQahr6IEowQ1sYtygqRYHd5As58qHLzxjIBI7kw/n4ugxQbhRxp0Z6AMz1sC5sq+cAA==

package/dist/enterprise/attestations/bundle/.agents/skills/omg/claim-judge/SKILL.md.statement.json

@@ -17,7 +17,7 @@
         "algorithm": "ed25519-minisign",
         "mode": "local-offline"
       },
-      "timestamp": "2026-03-11T20:10:49.346408+00:00"
+      "timestamp": "2026-03-14T04:21:33.074728+00:00"
     }
   },
   "signer": {
@@ -25,11 +25,11 @@
     "algorithm": "ed25519-minisign",
     "mode": "local-offline"
   },
-  "issued_at": "2026-03-11T20:10:49.346408+00:00",
+  "issued_at": "2026-03-14T04:21:33.074728+00:00",
   "signature": {
     "alg": "ed25519-minisign",
-    "keyid": "5f93fd32bc8ba287",
-    "value": "untrusted comment: signature from omg local signing key\nnWqWRvCgHReWSso7lXQp4aikv5Q6w0WTFIsD4d+VVOMddbrp8Fb97heDwsYriOe/ydg12BINlOe9Jc2PcOHRAQ==\ntrusted comment: type=omg-slsa-v1 keyid=5f93fd32bc8ba287 issued_at=2026-03-11T20:10:49.346530+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0\nIIOJnh/poWXStZ/zI5rLJU4zX9eE3gyAHzLydGIRSquVtoLPjcMTUGUyjFrzwShtELDfNMpTm9JvYekLBmk2Dg==",
-    "trusted_comment": "type=omg-slsa-v1 keyid=5f93fd32bc8ba287 issued_at=2026-03-11T20:10:49.346530+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0"
+    "keyid": "6590a13b79c44ce9",
+    "value": "untrusted comment: signature from omg local signing key\n5QZNJSl65isA2eDRmYxLXSG1XCln6sbBZlYMDHqly0TeHUnuXwLLqV22VdJ5LSxZe33SC+56DgNZhl9LQ+eOAQ==\ntrusted comment: type=omg-slsa-v1 keyid=6590a13b79c44ce9 issued_at=2026-03-14T04:21:33.074837+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0\nH8SJO40EYcCye+G259cQQahr6IEowQ1sYtygqRYHd5As58qHLzxjIBI7kw/n4ugxQbhRxp0Z6AMz1sC5sq+cAA==",
+    "trusted_comment": "type=omg-slsa-v1 keyid=6590a13b79c44ce9 issued_at=2026-03-14T04:21:33.074837+00:00 artifact=bundle/.agents/skills/omg/claim-judge/SKILL.md sha256=12ad7141a9441a3b616b4516d58a5faf6ebb28ed0cece35f5bfda109f0aa0bb0"
   }
 }