@trac3er/oh-my-god 2.1.9 → 2.2.2

package/artifacts/public/plugins/advanced/commands/OMG:ralph-stop.md

@@ -0,0 +1,23 @@
+---
+description: "Stop Ralph autonomous loop — deactivates the state file."
+allowed-tools: Read, Write, Edit, Bash
+argument-hint: ""
+---
+
+# /OMG:ralph-stop — Stop Ralph Autonomous Loop
+
+## Purpose
+Stops an active Ralph loop by deactivating the state file.
+
+## Usage
+```
+/OMG:ralph-stop
+```
+
+## How it Works
+1. Read `.omg/state/ralph-loop.json`
+2. Set `active: false` in the state file (preserve iteration count for review)
+3. Report: "Ralph loop stopped after N iterations. Gomg was: [original_prompt]"
+
+## If No Active Loop
+Report: "No active Ralph loop found. Nothing to stop."

package/artifacts/public/plugins/advanced/commands/OMG:security-review.md

@@ -0,0 +1,16 @@
+---
+description: Deprecated alias to OMG's canonical security-check pipeline.
+allowed-tools: Read, Grep, Glob, Bash(python3:*), Bash(rg:*)
+argument-hint: "[path or '.' for the current project]"
+---
+
+# /OMG:security-review — Deprecated Alias
+
+`/OMG:security-review` remains available only for compatibility.
+
+Use `/OMG:security-check` instead. The canonical pipeline now owns:
+
+- normalized security findings
+- dependency and AST enrichment
+- evidence-ready provenance and trust scores
+- reuse across CLI, compat routing, control plane, MCP, and ship flows

package/artifacts/public/plugins/advanced/commands/OMG:sequential-thinking.md

@@ -0,0 +1,20 @@
+---
+description: Structured multi-step reasoning using sequential-thinking tool for complex debugging and planning.
+allowed-tools: sequential-thinking_sequentialthinking, Read, Grep, Glob
+argument-hint: "[problem statement to reason through]"
+---
+
+# /OMG:sequential-thinking
+
+Use the sequential-thinking tool when the task needs explicit step-by-step reasoning,
+branching, and hypothesis verification.
+
+Execution contract:
+- Start with an initial thought budget
+- Revise or branch when new evidence appears
+- End only when a verified conclusion is reached
+
+Output contract:
+- Return final conclusion
+- Return key assumptions
+- Return verification steps used

package/artifacts/public/plugins/advanced/commands/OMG:ship.md

@@ -0,0 +1,46 @@
+---
+description: Ship pipeline — Idea -> Plan -> Execute -> Evidence -> PR-ready summary
+allowed-tools: Read, Write, Edit, MultiEdit, Grep, Glob, Bash(git:*), Bash(rg:*), Bash(find:*), Bash(cat:*), Bash(python3:*), Bash(pytest:*), Bash(npm test:*), Bash(go test:*), Bash(cargo test:*), Bash(jest:*), Bash(vitest:*)
+argument-hint: "[goal or optional path to .omg/idea.yml]"
+---
+
+# /OMG:ship — Idea -> Evidence -> PR
+
+## Step 1: Load idea contract
+- Prefer `.omg/idea.yml`.
+- If missing, scaffold from `~/.claude/templates/omg/idea.yml` and ask user for minimum fields:
+  - `goal`, `constraints`, `acceptance`, `risk`, `evidence_required`.
+
+## Step 2: Convert idea to execution plan
+- Consume plan artifacts generated by `/OMG:deep-plan`.
+- Require `.omg/plans/deep-plan.md` and `.omg/plans/deep-plan.json` to already encode the business workflow contract.
+- If missing, invoke `/OMG:deep-plan` first and return after those artifacts are created.
+- Use the deep-plan workflow path and task metadata as the execution source of truth.
+
+## Step 3: Execute with Shadow + Evidence discipline
+- Implement changes.
+- Run verification commands.
+- Build an evidence pack at `.omg/evidence/<run-id>.json` containing:
+  - `tests[]`, `security_scans[]`, `diff_summary`, `reproducibility`, `unresolved_risks[]`.
+
+## Step 4: Security and trust checks
+- Run `/OMG:security-check` for auth/payment/database/sensitive changes.
+- If config/hook/MCP changes are involved, ensure trust manifest is updated at `.omg/trust/manifest.lock.json`.
+
+## Step 5: PR-ready output
+Return:
+1. Goal and scope delivered
+2. Files changed
+3. Verification evidence (command + exit code)
+4. Risks/unknowns
+5. Suggested PR title + body
+
+## Full-power sub-agent protocol
+- Prefer parallel background sub-agent launches for independent workstreams.
+- Do not finalize until every launched track is collected via `background_output`.
+- Use `sequential-thinking` to reconcile conflicts and enforce execution order.
+
+## Anti-patterns
+- Do not claim done without evidence.
+- Do not edit tests to hide product bugs.
+- Do not skip trust review for `.claude/.omg` or MCP changes.

package/artifacts/public/plugins/advanced/plugin.json

@@ -0,0 +1,104 @@
+{
+  "name": "omg-advanced",
+  "version": "2.1.9",
+  "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
+  "type": "omg-plugin",
+  "commands": {
+    "deep-plan": {
+      "path": "commands/OMG:deep-plan.md",
+      "description": "Deep strategic planning with domain awareness",
+      "category": "planning"
+    },
+    "learn": {
+      "path": "commands/OMG:learn.md",
+      "description": "Create reusable skills from patterns",
+      "category": "knowledge"
+    },
+    "code-review": {
+      "path": "commands/OMG:code-review.md",
+      "description": "Deep code review with line-by-line analysis",
+      "category": "quality"
+    },
+    "ship": {
+      "path": "commands/OMG:ship.md",
+      "description": "Ship pipeline - idea to PR-ready summary",
+      "category": "delivery"
+    },
+    "handoff": {
+      "path": "commands/OMG:handoff.md",
+      "description": "Intelligent session transfer",
+      "category": "collaboration"
+    },
+    "maintainer": {
+      "path": "commands/OMG:maintainer.md",
+      "description": "Open-source maintainer workflows",
+      "category": "oss"
+    },
+    "sequential-thinking": {
+      "path": "commands/OMG:sequential-thinking.md",
+      "description": "Structured multi-step reasoning",
+      "category": "thinking"
+    },
+    "ralph-start": {
+      "path": "commands/OMG:ralph-start.md",
+      "description": "Start Ralph autonomous loop",
+      "category": "automation"
+    },
+    "ralph-stop": {
+      "path": "commands/OMG:ralph-stop.md",
+      "description": "Stop Ralph autonomous loop",
+      "category": "automation"
+    }
+  },
+  "categories": {
+    "planning": {
+      "description": "Strategic planning and architecture",
+      "commands": [
+        "deep-plan"
+      ]
+    },
+    "quality": {
+      "description": "Code quality and review",
+      "commands": [
+        "code-review"
+      ]
+    },
+    "knowledge": {
+      "description": "Learning and skill creation",
+      "commands": [
+        "learn"
+      ]
+    },
+    "delivery": {
+      "description": "Shipping and release workflows",
+      "commands": [
+        "ship"
+      ]
+    },
+    "collaboration": {
+      "description": "Team collaboration and handoff",
+      "commands": [
+        "handoff"
+      ]
+    },
+    "automation": {
+      "description": "Autonomous execution modes",
+      "commands": [
+        "ralph-start",
+        "ralph-stop"
+      ]
+    },
+    "thinking": {
+      "description": "Structured thinking tools",
+      "commands": [
+        "sequential-thinking"
+      ]
+    },
+    "oss": {
+      "description": "Open source maintainer tools",
+      "commands": [
+        "maintainer"
+      ]
+    }
+  }
+}

package/artifacts/public/registry/bundles/algorithms.yaml

@@ -0,0 +1,45 @@
+id: algorithms
+kind: domain-pack
+version: 2.1.9
+title: OMG Algorithms Pack
+description: Determinism and benchmark attachments for algorithm-heavy work.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/domain_packs.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+    codex:
+      - Read
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evals/latest.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    benchmarks: advisory
+  enterprise:
+    benchmarks: required

package/artifacts/public/registry/bundles/api-twin.yaml

@@ -0,0 +1,48 @@
+id: api-twin
+kind: simulation
+version: 2.1.9
+title: OMG API Twin
+description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/api_twin.py
+    - commands/OMG:api-twin.md
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/state/api_twin.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    fidelity: validated
+  enterprise:
+    fidelity: policy-required

package/artifacts/public/registry/bundles/ast-pack.yaml

@@ -0,0 +1,80 @@
+id: ast-pack
+kind: governance
+version: 2.1.9
+title: OMG AST Pack Lane
+description: Governed AST search and replace lane with canonical approvals and proofs.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/tool_fabric.py
+    - registry/verify_artifact.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Grep
+      - Edit
+    codex:
+      - Grep
+      - Edit
+lifecycle_hooks:
+  native:
+    - PreToolUse
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+    - typescript
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/ast-pack-{run_id}.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+tool_fabric:
+  lane: ast-pack
+  enforcement_order:
+    - tool_selection
+    - approval_state
+    - evidence_requirements
+    - attestation_proof_validation
+    - execution
+  tools:
+    - Grep
+    - Edit
+  semantic_operations:
+    - name: ast_search
+      tool: Grep
+      mutation_capable: false
+      requires_explicit_promotion: false
+    - name: ast_rewrite
+      tool: Edit
+      mutation_capable: true
+      requires_explicit_promotion: true
+  requires_signed_approval: true
+  requires_signed_approval_for_mutation: true
+  requires_attestation: false
+  requires_attestation_for_mutation: true
+  dry_run_first: true
+  require_run_scoped_evidence: true
+  require_fresh_evidence: true
+  evidence_max_age_seconds: 3600
+  required_evidence:
+    - .omg/evidence/ast-pack-{run_id}.json
+channel_overrides:
+  public:
+    posture: advisory
+  enterprise:
+    posture: managed

package/artifacts/public/registry/bundles/claim-judge.yaml

@@ -0,0 +1,49 @@
+id: claim-judge
+kind: proof
+version: 2.1.9
+title: OMG Claim Judge
+description: Evidence-backed claim validator for structured release and completion claims.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/claim_judge.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/claim-judge-*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/artifacts/public/registry/bundles/control-plane.yaml

@@ -0,0 +1,192 @@
+id: control-plane
+kind: skill
+version: 2.1.9
+title: OMG Control Plane
+description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
+hosts:
+  - claude
+  - codex
+  - gemini
+  - kimi
+assets:
+  references:
+    - OMG_COMPAT_CONTRACT.md
+    - docs/release-checklist.md
+invocation_policy:
+  user_invocable: true
+  model_invocable: false
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - SessionStart
+    - PreToolUse
+    - PostToolUse
+  emulated:
+    - PreCompact
+    - WorktreeCreate
+    - WorktreeRemove
+mcp_contract:
+  servers:
+    - omg-control
+    - omg-memory
+  prompts:
+    - omg_contract_summary
+  tools:
+    - omg_tool_fabric_request
+  resources:
+    - resource://omg/contract
+    - resource://omg/release-checklist
+lsp_contract:
+  languages:
+    - python
+    - typescript
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/control-plane-compile.json
+    - .omg/evidence/tool-fabric.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+policy_model:
+  trust_tiers:
+    - name: safe
+      level: 0
+      label: Safe
+      allowed_sources:
+        - local_repo
+        - trusted_registry
+    - name: balanced
+      level: 1
+      label: Balanced
+      allowed_sources:
+        - local_repo
+        - trusted_registry
+        - reviewed_external
+    - name: interop
+      level: 2
+      label: Interop
+      allowed_sources:
+        - local_repo
+        - trusted_registry
+        - reviewed_external
+        - migration_bridge
+    - name: labs
+      level: 3
+      label: Labs
+      allowed_sources:
+        - local_repo
+        - trusted_registry
+        - reviewed_external
+        - experimental
+  tool_policies:
+    - tool_name: Read
+      allowed_tiers: [safe, balanced, interop, labs]
+      requires_approval: false
+    - tool_name: Grep
+      allowed_tiers: [safe, balanced, interop, labs]
+      requires_approval: false
+    - tool_name: Bash(python3:*)
+      allowed_tiers: [balanced, interop, labs]
+      requires_approval: true
+  tool_fabric_contract:
+    enforcement_order:
+      - tool_selection
+      - approval_state
+      - evidence_requirements
+      - attestation_proof_validation
+      - execution
+    lanes:
+      - lsp-pack
+      - hash-edit
+      - ast-pack
+      - terminal-lane
+  protected_paths:
+    - path_pattern: .omg/**
+      required_tier: balanced
+    - path_pattern: .agents/**
+      required_tier: balanced
+    - path_pattern: .codex/**
+      required_tier: balanced
+    - path_pattern: .claude/**
+      required_tier: balanced
+  evidence_contract:
+    timestamp: timestamp
+    executor: executor
+    trace_id: trace_id
+    lineage: lineage
+    attestation_statement: attestation_statement
+    attestation_verifier: attestation_verifier
+    claim_judge_verdict: claim_judge_verdict
+    compliance_verdict: compliance_verdict
+  host_rules:
+    claude:
+      compilation_targets:
+        - .claude-plugin/plugin.json
+        - .claude-plugin/marketplace.json
+        - .mcp.json
+        - settings.json
+      hooks:
+        - SessionStart
+        - PreToolUse
+        - PostToolUse
+        - PreCompact
+      subagents:
+        - local_supervisor
+        - workers
+      skills:
+        - omg/control-plane
+        - omg/hook-governor
+    codex:
+      compilation_targets:
+        - .agents/skills/omg/<bundle>/SKILL.md
+        - .agents/skills/omg/<bundle>/openai.yaml
+        - .agents/skills/omg/AGENTS.fragment.md
+        - .agents/skills/omg/codex-mcp.toml
+      skills:
+        - omg/control-plane
+        - omg/mcp-fabric
+      agents_fragments:
+        - .agents/skills/omg/AGENTS.fragment.md
+      rules:
+        - protected_paths
+        - explicit_invocation
+      automations:
+        - contract-compile
+        - release-readiness
+    gemini:
+      compilation_targets:
+        - .gemini/settings.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
+    kimi:
+      compilation_targets:
+        - .kimi/mcp.json
+      mcp:
+        - omg-control
+      skills:
+        - omg/control-plane
+      automations:
+        - contract-compile
+        - release-readiness
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/artifacts/public/registry/bundles/data-lineage.yaml

@@ -0,0 +1,47 @@
+id: data-lineage
+kind: provenance
+version: 2.1.9
+title: OMG Data Lineage
+description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/data_lineage.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: true
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/lineage/*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    provenance: required
+  enterprise:
+    provenance: required