@trac3er/oh-my-god 2.1.9 → 2.2.2

package/artifacts/public/registry/bundles/delta-classifier.yaml

@@ -0,0 +1,47 @@
+id: delta-classifier
+kind: routing
+version: 2.1.9
+title: OMG Delta Classifier
+description: Change classifier that attaches risk-aware checks, approvals, and packs.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/delta_classifier.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: true
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+    codex:
+      - Read
+      - Grep
+lifecycle_hooks:
+  native:
+    - SessionStart
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/tracebank/events.jsonl
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    classification: advisory
+  enterprise:
+    classification: required

package/artifacts/public/registry/bundles/eval-gate.yaml

@@ -0,0 +1,47 @@
+id: eval-gate
+kind: evaluation
+version: 2.1.9
+title: OMG Eval Gate
+description: Reproducible evaluation gate that blocks regressions before release.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/eval_gate.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evals/latest.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    regressions: block
+  enterprise:
+    regressions: block

package/artifacts/public/registry/bundles/hash-edit.yaml

@@ -0,0 +1,73 @@
+id: hash-edit
+kind: governance
+version: 2.1.9
+title: OMG Hash Edit Lane
+description: Governed hash-bound edit lane with signed approvals and evidence routing.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/tool_fabric.py
+    - registry/approval_artifact.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Edit
+    codex:
+      - Edit
+lifecycle_hooks:
+  native:
+    - PreToolUse
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+    - typescript
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/hash-edit-{run_id}.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+tool_fabric:
+  lane: hash-edit
+  enforcement_order:
+    - tool_selection
+    - approval_state
+    - evidence_requirements
+    - attestation_proof_validation
+    - execution
+  tools:
+    - Edit
+  semantic_operations:
+    - name: single_file_hash_edit
+      tool: Edit
+      mutation_capable: true
+      requires_explicit_promotion: false
+  requires_signed_approval: true
+  requires_signed_approval_for_mutation: true
+  requires_attestation: false
+  requires_attestation_for_mutation: true
+  single_file_hash_bound: true
+  require_run_scoped_evidence: true
+  require_fresh_evidence: true
+  evidence_max_age_seconds: 3600
+  required_evidence:
+    - .omg/evidence/hash-edit-{run_id}.json
+channel_overrides:
+  public:
+    posture: advisory
+  enterprise:
+    posture: managed

package/artifacts/public/registry/bundles/health.yaml

@@ -0,0 +1,45 @@
+id: health
+kind: domain-pack
+version: 2.1.9
+title: OMG Health Pack
+description: Health-sensitive approvals, provenance, and replay attachments.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/domain_packs.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: high
+  allowed_tools:
+    claude:
+      - Read
+    codex:
+      - Read
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/lineage/*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    approvals: required
+  enterprise:
+    approvals: enforced

package/artifacts/public/registry/bundles/hook-governor.yaml

@@ -0,0 +1,101 @@
+id: hook-governor
+kind: governance
+version: 2.1.9
+title: OMG Hook Governor
+description: Canonical hook ordering, policy reinjection, and protected-path governance.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - settings.json
+    - hooks/pre-compact.py
+invocation_policy:
+  user_invocable: false
+  model_invocable: false
+  allow_implicit_invocation: true
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+    codex:
+      - Read
+lifecycle_hooks:
+  native:
+    - SessionStart
+    - SessionEnd
+    - PreToolUse
+    - PostToolUse
+    - PostToolUseFailure
+    - Stop
+  emulated:
+    - PreCompact
+    - ConfigChange
+    - WorktreeCreate
+    - WorktreeRemove
+    - SubagentStart
+    - SubagentStop
+    - TaskCompleted
+compiled_hooks:
+  SessionStart:
+    - command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/session-start.py"'
+      timeout: 10
+  SessionEnd:
+    - command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/session-end-capture.py"'
+  PreToolUse:
+    - matcher: Bash
+      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/firewall.py"'
+      timeout: 10
+    - matcher: Read|Write|Edit|MultiEdit
+      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/secret-guard.py"'
+      timeout: 10
+    - matcher: ""
+      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/pre-tool-inject.py"'
+  PostToolUse:
+    - matcher: Bash
+      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/circuit-breaker.py"'
+      timeout: 10
+    - matcher: Write|Edit|MultiEdit
+      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/tool-ledger.py"'
+      timeout: 10
+    - matcher: Write|Edit|MultiEdit
+      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/test_generator_hook.py"'
+      timeout: 10
+    - matcher: ""
+      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/budget_governor.py"'
+      timeout: 10
+  PostToolUseFailure:
+    - command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/post-tool-failure.py"'
+  Stop:
+    - matcher: ""
+      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/stop_dispatcher.py"'
+      timeout: 90
+feature_dependencies:
+  defense-state:
+    required_for:
+      - hook-governor
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/state/ledger/tool-ledger.jsonl
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    protected_paths:
+      - .omg/**
+      - .agents/**
+  enterprise:
+    protected_paths:
+      - .omg/**
+      - .agents/**
+      - .claude/**
+      - .codex/**

package/artifacts/public/registry/bundles/incident-replay.yaml

@@ -0,0 +1,47 @@
+id: incident-replay
+kind: debugging
+version: 2.1.9
+title: OMG Incident Replay
+description: Replayable bug packs built from logs, failing tests, traces, and diffs.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/incident_replay.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/incidents/*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    replay: available
+  enterprise:
+    replay: required

package/artifacts/public/registry/bundles/lsp-pack.yaml

@@ -0,0 +1,80 @@
+id: lsp-pack
+kind: diagnostics
+version: 2.1.9
+title: OMG LSP Pack
+description: Optional LSP-backed diagnostics and navigation bundle for production verification.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - config/lsp_languages.yaml
+    - tools/lsp_operations.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Edit
+    codex:
+      - Read
+      - Edit
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+    - javascript
+    - typescript
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/lsp-pack-{run_id}.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+tool_fabric:
+  lane: lsp-pack
+  enforcement_order:
+    - tool_selection
+    - approval_state
+    - evidence_requirements
+    - attestation_proof_validation
+    - execution
+  tools:
+    - Read
+    - Edit
+  semantic_operations:
+    - name: lsp_read_diagnostics
+      tool: Read
+      mutation_capable: false
+      requires_explicit_promotion: false
+    - name: lsp_promoted_edit
+      tool: Edit
+      mutation_capable: true
+      requires_explicit_promotion: true
+  requires_signed_approval: false
+  requires_signed_approval_for_mutation: true
+  requires_attestation: false
+  requires_attestation_for_mutation: true
+  read_only_by_default: true
+  require_run_scoped_evidence: true
+  require_fresh_evidence: true
+  evidence_max_age_seconds: 3600
+  required_evidence:
+    - .omg/evidence/lsp-pack-{run_id}.json
+channel_overrides:
+  public:
+    diagnostics: advisory
+  enterprise:
+    diagnostics: required

package/artifacts/public/registry/bundles/mcp-fabric.yaml

@@ -0,0 +1,53 @@
+id: mcp-fabric
+kind: mcp
+version: 2.1.9
+title: OMG MCP Fabric
+description: Tools, prompts, resources, and server instructions for the OMG control plane.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/omg_mcp_server.py
+invocation_policy:
+  user_invocable: false
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: medium
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - SessionStart
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+    - omg-memory
+  prompts:
+    - omg_contract_summary
+  resources:
+    - resource://omg/contract
+    - resource://omg/release-checklist
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/mcp-fabric.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    transport: stdio
+  enterprise:
+    transport: stdio

package/artifacts/public/registry/bundles/plan-council.yaml

@@ -0,0 +1,56 @@
+id: plan-council
+kind: planning
+version: 2.1.9
+title: OMG Plan Council
+description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
+hosts:
+  - claude
+  - codex
+  - gemini
+  - kimi
+assets:
+  references:
+    - plugins/advanced/commands/OMG:deep-plan.md
+    - commands/OMG:validate.md
+    - commands/OMG:profile-review.md
+    - commands/OMG:release-audit.md
+invocation_policy:
+  user_invocable: true
+  model_invocable: false
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+    codex:
+      - Read
+      - Grep
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - markdown
+    - json
+evidence_outputs:
+  artifacts:
+    - .omg/plans/deep-plan.md
+    - .omg/plans/deep-plan.json
+    - .omg/plans/dissent.json
+    - .omg/evidence/plan-council.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/artifacts/public/registry/bundles/preflight.yaml

@@ -0,0 +1,48 @@
+id: preflight
+kind: routing
+version: 2.1.9
+title: OMG Preflight
+description: Repo-aware route selection based on diff, manifests, and classified risk.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/preflight.py
+    - runtime/delta_classifier.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: true
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+    codex:
+      - Read
+      - Grep
+lifecycle_hooks:
+  native:
+    - SessionStart
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/tracebank/events.jsonl
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    routing: advisory
+  enterprise:
+    routing: enforced

package/artifacts/public/registry/bundles/proof-gate.yaml

@@ -0,0 +1,49 @@
+id: proof-gate
+kind: proof
+version: 2.1.9
+title: OMG Proof Gate
+description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/proof_gate.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: true
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: low
+  allowed_tools:
+    claude:
+      - Read
+      - Grep
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Grep
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - PostToolUse
+  emulated:
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/evidence/proof-gate-*.json
+execution_contract:
+  modes:
+    - embedded
+    - local_supervisor
+channel_overrides:
+  public:
+    posture: self-serve
+  enterprise:
+    posture: managed

package/artifacts/public/registry/bundles/remote-supervisor.yaml

@@ -0,0 +1,49 @@
+id: remote-supervisor
+kind: orchestration
+version: 2.1.9
+title: OMG Remote Supervisor
+description: Local-only authenticated supervisor sessions for worker orchestration.
+hosts:
+  - claude
+  - codex
+assets:
+  references:
+    - runtime/remote_supervisor.py
+invocation_policy:
+  user_invocable: true
+  model_invocable: false
+  allow_implicit_invocation: false
+tool_policy:
+  side_effect_level: high
+  allowed_tools:
+    claude:
+      - Read
+      - Bash(python3:*)
+    codex:
+      - Read
+      - Bash(python3:*)
+lifecycle_hooks:
+  native:
+    - SessionStart
+    - Stop
+  emulated:
+    - SubagentStart
+    - SubagentStop
+    - TaskCompleted
+mcp_contract:
+  servers:
+    - omg-control
+lsp_contract:
+  languages:
+    - python
+evidence_outputs:
+  artifacts:
+    - .omg/supervisor/sessions/*.json
+execution_contract:
+  modes:
+    - local_supervisor
+channel_overrides:
+  public:
+    remote: disabled
+  enterprise:
+    remote: disabled