@trac3er/oh-my-god 2.2.2 → 2.2.4

package/docs/install/github-app.md

@@ -0,0 +1,81 @@
+# GitHub App Setup
+
+The PR Reviewer Bot uses a GitHub App to securely interact with your repositories. This method is preferred over personal access tokens as it provides fine-grained permissions and short-lived installation tokens.
+
+## Setup
+
+### 1. Create the GitHub App
+1. Navigate to **Settings** -> **Developer settings** -> **GitHub Apps** -> **New GitHub App**.
+2. **GitHub App name**: Choose a unique name (e.g., `OMG-Reviewer-Bot`).
+3. **Homepage URL**: Use your repository URL.
+4. **Webhook**: Uncheck **Active** unless you are using a custom webhook listener.
+5. **Permissions**: Grant the following minimum repository permissions:
+   - **Pull requests**: Read & write (to post reviews and comments)
+   - **Checks**: Read & write (to create check runs)
+   - **Contents**: Read-only (to analyze code)
+6. **Where can this GitHub App be installed?**: Select **Only on this account** or **Any account** based on your needs.
+7. Click **Create GitHub App**.
+
+### 2. Generate Private Key and Installation ID
+1. After creation, scroll down to the **Private keys** section and click **Generate a private key**. A `.pem` file will download.
+2. Note the **App ID** displayed at the top of the app settings page.
+3. Navigate to **Install App** in the sidebar and install it on your target repository or organization.
+4. After installation, the URL will look like `https://github.com/settings/installations/12345678`. The number at the end is your `GITHUB_INSTALLATION_ID`.
+
+### 3. Configure Environment Variables
+The bot requires three configuration variables.
+
+| Variable | Type | Description |
+| :--- | :--- | :--- |
+| `OMG_APP_ID` | Config Variable | The App ID from your GitHub App settings. |
+| `OMG_APP_PRIVATE_KEY` | Secret | The full content of the downloaded `.pem` file. |
+| `OMG_APP_INSTALLATION_ID` | Config Variable | The ID from the installation URL. |
+
+#### Local Development
+Store the private key in a file and load it:
+```bash
+export GITHUB_APP_ID="123456"
+export GITHUB_INSTALLATION_ID="78901234"
+export GITHUB_APP_PRIVATE_KEY="$(cat path/to/your-app.private-key.pem)"
+```
+
+#### GitHub Actions
+Add the App ID and Installation ID as **Variables** and the Private Key as a **Secret**.
+GitHub Actions forbids secret names starting with `GITHUB_`, so we use the `OMG_` prefix for stored values and map them to the `GITHUB_`-prefixed env vars the runtime expects:
+```yaml
+env:
+  GITHUB_APP_ID: ${{ vars.OMG_APP_ID }}
+  GITHUB_INSTALLATION_ID: ${{ vars.OMG_APP_INSTALLATION_ID }}
+  GITHUB_APP_PRIVATE_KEY: ${{ secrets.OMG_APP_PRIVATE_KEY }}
+```
+
+## Security Hardening
+
+### Secret Management
+- **GITHUB_APP_ID**: This is non-sensitive. Store it as a repository or organization configuration variable.
+- **GITHUB_APP_PRIVATE_KEY**: This is highly sensitive. Store it as an encrypted secret. Never commit this key to version control.
+- **Rotation**: Regularly rotate your private keys in the GitHub App settings and delete old, unused keys.
+
+### Execution Safety
+- **Untrusted PRs**: Never expose `GITHUB_APP_PRIVATE_KEY` to `pull_request` event jobs that check out untrusted code. Secrets are unavailable to forks by default, but you must ensure your workflow does not manually bypass this.
+- **Workflow Triggers**: Avoid using `pull_request_target` with an explicit checkout of the PR head if you are using app secrets. This combination can allow malicious PRs to exfiltrate your secrets.
+- **Token Expiry**: The bot caches installation access tokens in memory for the duration of their 1-hour TTL and regenerates automatically when they expire. Do not persist tokens to disk or share them across processes.
+
+## Verify
+
+Confirm your setup with this checklist:
+- [ ] **Token Generation**: Run the bot locally or in a test workflow. It should successfully exchange the JWT for an installation token.
+- [ ] **Review Posting**: Create a test PR. The bot should post a review or comment.
+- [ ] **Stale Review Dismissal**: Push a new commit to the test PR. The bot should dismiss or update its prior approval.
+- [ ] **Permissions**: Verify the bot can only access the repositories it was explicitly installed on.
+
+## Troubleshooting
+
+| Error Code | Cause | Resolution |
+| :--- | :--- | :--- |
+| `GITHUB_CREDENTIALS_MISSING` | One or more env vars are empty. | Check that `GITHUB_APP_ID`, `GITHUB_APP_PRIVATE_KEY`, and `GITHUB_INSTALLATION_ID` are set. |
+| `GITHUB_APP_PRIVATE_KEY_INVALID` | The PEM key is malformed or not RSA. | Ensure the secret contains the full `-----BEGIN RSA PRIVATE KEY-----` block and no extra whitespace. |
+| `GITHUB_JWT_SIGNING_FAILED` | Cryptography error during signing. | Verify your environment has the required dependencies installed. |
+| `GITHUB_TOKEN_REQUEST_FAILED` | Network error or GitHub API downtime. | Check your internet connection and GitHub Status. |
+| `GITHUB_TOKEN_REQUEST_REJECTED` | 403/404 error from GitHub. | Verify the `GITHUB_INSTALLATION_ID` is correct and the app is installed on the repo. |
+| `GITHUB_TOKEN_RESPONSE_INVALID` | Unexpected response from GitHub. | Check if GitHub API versions have changed or if there is a proxy interference. |

package/hooks/_common.py

@@ -249,7 +249,7 @@ def atomic_json_write(path, data):
 
 # Feature flags cache — read settings.json once per hook invocation
 _FEATURE_CACHE = {}
-_SETTINGS_PRESET = None
+_settings_preset = None
 _MANAGED_PRESET_FLAGS = {
     "SETUP",
     "SETUP_WIZARD",
@@ -262,6 +262,12 @@ _MANAGED_PRESET_FLAGS = {
     "TEST_GENERATION",
     "DEP_HEALTH",
     "CODEBASE_VIZ",
+    "DATA_ENFORCEMENT",
+    "WEB_ENFORCEMENT",
+    "TERMS_ENFORCEMENT",
+    "COUNCIL_ROUTING",
+    "FORGE_ALL_DOMAINS",
+    "NOTEBOOKLM",
 }
 _PRESET_FEATURES = {
     "safe": {flag: False for flag in _MANAGED_PRESET_FLAGS},
@@ -303,7 +309,15 @@ _PRESET_FEATURES = {
         "TEST_GENERATION": True,
         "DEP_HEALTH": True,
         "CODEBASE_VIZ": True,
+        "DATA_ENFORCEMENT": False,
+        "WEB_ENFORCEMENT": False,
+        "TERMS_ENFORCEMENT": False,
+        "COUNCIL_ROUTING": False,
+        "FORGE_ALL_DOMAINS": False,
+        "NOTEBOOKLM": False,
     },
+    "buffet": {flag: True for flag in _MANAGED_PRESET_FLAGS},
+    "production": {flag: True for flag in _MANAGED_PRESET_FLAGS},
 }
 _FEATURE_ALIASES = {
     "SETUP": ("SETUP", "SETUP_WIZARD"),
@@ -313,10 +327,10 @@ _FEATURE_ALIASES = {
 
 def _load_feature_settings():
     """Populate feature cache from settings.json and return the configured preset."""
-    global _SETTINGS_PRESET
+    global _settings_preset
 
     _FEATURE_CACHE.clear()
-    _SETTINGS_PRESET = None
+    _settings_preset = None
     try:
         settings_path = os.path.join(get_project_dir(), "settings.json")
         if os.path.exists(settings_path):
@@ -329,7 +343,7 @@ def _load_feature_settings():
                     _FEATURE_CACHE.update(features)
                 preset = omg.get("preset")
                 if isinstance(preset, str) and preset in _PRESET_FEATURES:
-                    _SETTINGS_PRESET = preset
+                    _settings_preset = preset
     except Exception:
         pass
 
@@ -367,10 +381,10 @@ def get_feature_flag(flag_name, default=True):
         if name in _FEATURE_CACHE:
             return _FEATURE_CACHE[name]
 
-    if _SETTINGS_PRESET in _PRESET_FEATURES:
+    if _settings_preset in _PRESET_FEATURES:
         for name in lookup_names:
             if name in _MANAGED_PRESET_FLAGS:
-                return _PRESET_FEATURES[_SETTINGS_PRESET].get(name, default)
+                return _PRESET_FEATURES[_settings_preset].get(name, default)
 
     return default
 

package/hooks/context_pressure.py

@@ -13,11 +13,6 @@ except Exception:
 
 
 def _detect_model_id(context_packet=None):
-    for key in ("CLAUDE_MODEL", "OMG_MODEL_ID", "OPENAI_MODEL"):
-        value = os.environ.get(key, "").strip()
-        if value:
-            return value
-
     if isinstance(context_packet, dict):
         model = context_packet.get("model")
         if isinstance(model, dict):
@@ -27,6 +22,22 @@ def _detect_model_id(context_packet=None):
                     return value
         elif isinstance(model, str) and model.strip():
             return model.strip()
+
+        context = context_packet.get("context")
+        if isinstance(context, dict):
+            nested_model = context.get("model")
+            if isinstance(nested_model, dict):
+                for key in ("id", "display_name", "name"):
+                    value = str(nested_model.get(key, "") or "").strip()
+                    if value:
+                        return value
+            elif isinstance(nested_model, str) and nested_model.strip():
+                return nested_model.strip()
+
+    for key in ("CLAUDE_MODEL", "OMG_MODEL_ID", "OPENAI_MODEL"):
+        value = os.environ.get(key, "").strip()
+        if value:
+            return value
     return ""
 
 
@@ -38,20 +49,21 @@ def _host_aware_threshold(context_packet=None):
 
 
 def estimate_context_pressure(project_dir, context_packet=None):
-    threshold, model_id, limits = _host_aware_threshold(context_packet)
+    threshold_tokens, model_id, limits = _host_aware_threshold(context_packet)
     try:
         settings_path = os.path.join(project_dir, "settings.json")
         if os.path.exists(settings_path):
             with open(settings_path, "r", encoding="utf-8") as settings_file:
                 settings = json.load(settings_file)
             configured = settings.get("_omg", {}).get("context_budget", {}).get(
-                "pressure_threshold", threshold
+                "pressure_threshold", threshold_tokens
             )
-            threshold = int(configured)
+            threshold_tokens = int(configured)
     except Exception:
         pass
 
     tool_count = 0
+    estimated_tokens = 0
     ledger_path = os.path.join(project_dir, ".omg", "state", "ledger", "tool-ledger.jsonl")
     if os.path.exists(ledger_path):
         try:
@@ -59,10 +71,11 @@ def estimate_context_pressure(project_dir, context_packet=None):
                 for line in ledger_file:
                     if line.strip():
                         tool_count += 1
+                        estimated_tokens += _estimate_entry_tokens(line)
         except Exception:
             pass
 
-    is_high = tool_count >= threshold
+    is_high = estimated_tokens >= threshold_tokens if threshold_tokens > 0 else False
 
     try:
         pressure_path = os.path.join(project_dir, ".omg", "state", ".context-pressure.json")
@@ -71,7 +84,9 @@ def estimate_context_pressure(project_dir, context_packet=None):
             json.dump(
                 {
                     "tool_count": tool_count,
-                    "threshold": threshold,
+                    "estimated_tokens": estimated_tokens,
+                    "threshold": threshold_tokens,
+                    "threshold_tokens": threshold_tokens,
                     "model_id": model_id,
                     "class_label": limits.get("class_label", "128k-class"),
                     "is_high": is_high,
@@ -82,4 +97,23 @@ def estimate_context_pressure(project_dir, context_packet=None):
     except Exception:
         pass
 
-    return tool_count, threshold, is_high
+    return tool_count, threshold_tokens, is_high
+
+
+def _estimate_entry_tokens(line: str) -> int:
+    baseline = max(1, len(line) // 4)
+    try:
+        entry = json.loads(line)
+    except Exception:
+        return baseline
+
+    if not isinstance(entry, dict):
+        return baseline
+
+    command_chars = len(str(entry.get("command", "")))
+    stdout_chars = len(str(entry.get("stdout_snippet", "")))
+    file_chars = len(str(entry.get("file", "")))
+    metadata_chars = len(str(entry.get("tool", ""))) + len(str(entry.get("governed_tool", "")))
+    char_total = command_chars + stdout_chars + file_chars + metadata_chars
+    estimated = max(baseline, char_total // 4)
+    return max(1, estimated)

package/hooks/pre-compact.py

@@ -232,32 +232,32 @@ def _load_context_budget_config(project_dir):
 
 
 def _detect_model_id(data):
+    if isinstance(data, dict):
+        model = data.get("model")
+        if isinstance(model, dict):
+            for key in ("id", "display_name", "name"):
+                value = str(model.get(key, "") or "").strip()
+                if value:
+                    return value
+        elif isinstance(model, str) and model.strip():
+            return model.strip()
+
+        context = data.get("context")
+        if isinstance(context, dict):
+            nested_model = context.get("model")
+            if isinstance(nested_model, dict):
+                for key in ("id", "display_name", "name"):
+                    value = str(nested_model.get(key, "") or "").strip()
+                    if value:
+                        return value
+            elif isinstance(nested_model, str) and nested_model.strip():
+                return nested_model.strip()
+
     for key in ("CLAUDE_MODEL", "OMG_MODEL_ID", "OPENAI_MODEL"):
         value = os.environ.get(key, "").strip()
         if value:
             return value
 
-    if not isinstance(data, dict):
-        return ""
-
-    model = data.get("model")
-    if isinstance(model, dict):
-        for key in ("id", "display_name", "name"):
-            value = str(model.get(key, "") or "").strip()
-            if value:
-                return value
-    elif isinstance(model, str) and model.strip():
-        return model.strip()
-
-    context = data.get("context")
-    if isinstance(context, dict):
-        nested_model = context.get("model")
-        if isinstance(nested_model, dict):
-            for key in ("id", "display_name", "name"):
-                value = str(nested_model.get(key, "") or "").strip()
-                if value:
-                    return value
-
     return ""
 
 

package/hooks/secret-guard.py

@@ -23,7 +23,7 @@ bootstrap_runtime_paths(__file__)
 setup_crash_handler("secret-guard", fail_closed=True)
 
 try:
-    from policy_engine import evaluate_file_access, to_pretool_hook_output
+    from policy_engine import evaluate_file_access, load_allowlist, to_pretool_hook_output
     from secret_audit import log_secret_access
     from runtime.mutation_gate import check_mutation_allowed
 except Exception as _import_err:
@@ -72,7 +72,8 @@ if tool in ("Write", "Edit", "MultiEdit"):
         deny_decision(deny_reason)
         sys.exit(0)
 
-decision = evaluate_file_access(tool, file_path)
+allowlist = load_allowlist(get_project_dir())
+decision = evaluate_file_access(tool, file_path, allowlist=allowlist)
 
 # Audit log: record every secret access decision
 try:

package/hooks/stop_dispatcher.py

@@ -428,6 +428,25 @@ def check_recent_failures(data, project_dir):
     return blocks
 
 
+_TEST_DIR_NAMES = frozenset({"tests", "test", "__tests__"})
+_SKIP_DIR_SEGMENTS = frozenset({"build", "dist", "node_modules", ".git"})
+
+
+def _is_test_file_path(rel_path):
+    parts = rel_path.replace("\\", "/").split("/")
+    if any(seg in _SKIP_DIR_SEGMENTS for seg in parts[:-1]):
+        return False
+    basename = parts[-1].lower() if parts else ""
+    if any(p in basename for p in (".test.", ".spec.", "_test.", ".tests.")):
+        return True
+    if "__tests__" in rel_path:
+        return True
+    if basename.startswith("test_"):
+        parent_dirs = {p.lower() for p in parts[:-1]}
+        return not parent_dirs or bool(parent_dirs & _TEST_DIR_NAMES)
+    return False
+
+
 def check_test_execution(data, project_dir):
     if not get_feature_flag("test_execution", True):
         return []
@@ -444,8 +463,7 @@ def check_test_execution(data, project_dir):
         test_files_modified = False
         try:
             for file_path in changed_files:
-                fl = file_path.lower()
-                if any(p in fl for p in ["test", "spec", "__tests__", ".test.", ".spec.", "_test."]):
+                if _is_test_file_path(file_path):
                     test_files_modified = True
                     break
         except Exception as e:  # security: test execution check

package/hooks/terms-guard.py

@@ -0,0 +1,96 @@
+#!/usr/bin/env python3
+import re
+import sys
+from pathlib import Path
+
+HOOKS_DIR = str(Path(__file__).resolve().parent)
+PROJECT_ROOT = str(Path(HOOKS_DIR).parent)
+PORTABLE_RUNTIME_ROOT = str(Path(PROJECT_ROOT) / "omg-runtime")
+for path in (HOOKS_DIR, PROJECT_ROOT, PORTABLE_RUNTIME_ROOT):
+    if path not in sys.path:
+        sys.path.insert(0, path)
+
+from hooks._common import bootstrap_runtime_paths, setup_crash_handler, json_input, deny_decision, get_feature_flag
+
+bootstrap_runtime_paths(__file__)
+setup_crash_handler("terms-guard", fail_closed=True)
+
+MODEL_TOKENS = ("claude", "codex", "gemini", "kimi", "gpt", "openai", "anthropic")
+
+
+def _collect_mutation_text(tool_name: str, tool_input: object) -> str:
+    if tool_name not in {"Write", "Edit", "MultiEdit"}:
+        return ""
+    if not isinstance(tool_input, dict):
+        return ""
+
+    parts: list[str] = []
+    for key in ("content", "new_string", "old_string", "insert_text", "text"):
+        value = tool_input.get(key)
+        if isinstance(value, str) and value:
+            parts.append(value)
+
+    edits = tool_input.get("edits")
+    if isinstance(edits, list):
+        for item in edits:
+            if not isinstance(item, dict):
+                continue
+            for key in ("newText", "oldText", "new_string", "old_string", "content"):
+                value = item.get(key)
+                if isinstance(value, str) and value:
+                    parts.append(value)
+
+    return "\n".join(parts)
+
+
+def _model_mentions(text: str) -> int:
+    seen = {token for token in MODEL_TOKENS if re.search(rf"\b{re.escape(token)}\b", text, flags=re.IGNORECASE)}
+    return len(seen)
+
+
+def _detect_violation_reason(text: str) -> str | None:
+    lowered = text.lower()
+    has_star = re.search(r"\b(star|starring|upvote)\b", lowered) is not None
+    has_share = re.search(r"\b(share|forward|broadcast|cross-model|cross model|copy this prompt|paste this prompt)\b", lowered) is not None
+    if has_star and has_share and _model_mentions(lowered) >= 2:
+        return "promotion_star_cross_model"
+
+    has_switching = re.search(r"\b(route|switch|proxy|forward|delegate)\b", lowered) is not None
+    has_identity_claim = re.search(
+        r"\b(tell\s+the\s+user|claim|pretend|masquerade|say\s+this\s+came\s+from|present\s+as)\b",
+        lowered,
+    ) is not None
+    has_hidden = re.search(
+        r"\b(hidden|hide\s+this|secretly|without\s+disclos(?:ing|ure)|do\s+not\s+disclose|don['’]?t\s+disclose|undisclosed)\b",
+        lowered,
+    ) is not None
+    if has_switching and has_identity_claim and has_hidden and _model_mentions(lowered) >= 2:
+        return "hidden_model_identity_switch"
+
+    has_third_party = re.search(r"\b(third[- ]party|external\s+(?:api|service|vendor)|analytics\s+(?:api|service))\b", lowered) is not None
+    has_data = re.search(r"\b(logs?|conversation|prompt|chat\s*history|transcript|user\s*data)\b", lowered) is not None
+    has_no_disclosure = re.search(
+        r"\b(without\s+(?:user\s+)?disclos(?:ing|ure)|without\s+consent|undisclosed|do\s+not\s+disclose|don['’]?t\s+disclose)\b",
+        lowered,
+    ) is not None
+    if has_third_party and has_data and has_no_disclosure:
+        return "undisclosed_third_party_sharing"
+
+    return None
+
+
+data = json_input()
+if not get_feature_flag("TERMS_ENFORCEMENT", default=False):
+    sys.exit(0)
+
+tool_name = data.get("tool_name", "") if isinstance(data, dict) else ""
+tool_input = data.get("tool_input", {}) if isinstance(data, dict) else {}
+mutation_text = _collect_mutation_text(tool_name, tool_input)
+if not mutation_text:
+    sys.exit(0)
+
+reason = _detect_violation_reason(mutation_text)
+if reason is not None:
+    deny_decision(f"terms_guard:{reason}")
+
+sys.exit(0)

package/hooks/test-validator.py

@@ -38,6 +38,13 @@ _BUILTIN_FUNCS = frozenset({
     "assert_equal", "assertEqual", "patch", "mock", "Mock", "MagicMock",
     "expect", "require", "import", "open", "super", "getattr", "setattr",
     "hasattr", "sorted", "enumerate", "zip", "map", "filter", "min", "max",
+    "get", "append", "extend", "insert", "pop", "remove", "update", "add",
+    "setdefault", "keys", "values", "items", "join", "split", "strip",
+    "replace", "format", "encode", "decode", "startswith", "endswith",
+    "write", "read", "write_text", "read_text", "mkdir", "exists",
+    "param", "parametrize", "mark", "fixture", "yield_fixture",
+    "setenv", "delenv", "monkeypatch", "chdir",
+    "dumps", "loads", "dump", "load",
 })
 _MUTATION_TOOLS = frozenset({"write", "edit", "multiedit", "bash"})
 _SKIP_DIR_SEGMENTS = frozenset({"build", "dist", "node_modules", ".git"})
@@ -221,11 +228,10 @@ def _detect_parameterized_gap(content, issues):
             call_groups.setdefault(func, set()).add(arg)
 
     for func, args in call_groups.items():
-        if len(args) >= 3:
+        if len(args) >= 6:
             issues.append(
                 f"PARAMETERIZED: '{func}' called with {len(args)} different "
-                f"literal values — consider @pytest.mark.parametrize or "
-                f"@pytest.mark.parametrize")
+                f"literal values — consider @pytest.mark.parametrize")
 
 
 def persist_metrics(project_dir, analysis):
@@ -374,6 +380,23 @@ def check_test_quality(data, project_dir):
     return []
 
 
+def _is_mutation_capable_bash_for_methodology(command):
+    """Check if a bash command is truly mutation-capable for methodology enforcement.
+    File-write redirections of read-only commands are excluded."""
+    import re as _re
+    lowered = command.strip().lower()
+    _m_patterns = (
+        r"\b(git\s+(add|commit|push|rebase|cherry-pick|merge|tag(?!\s+(-l|--list)\b)))\b",
+        r"\b(rm|mv|cp|tee|touch|mkdir|rmdir|ln)\b",
+        r"\b(sed\s+-i|perl\s+-pi)\b",
+        r"\b(chmod|chown)\b",
+    )
+    for pattern in _m_patterns:
+        if _re.search(pattern, lowered):
+            return True
+    return False
+
+
 def check_methodology_contract(data):
     if not isinstance(data, dict):
         return []
@@ -382,6 +405,15 @@ def check_methodology_contract(data):
     if tool_name not in _MUTATION_TOOLS:
         return []
 
+    # For Bash tools, only enforce methodology on actually mutation-capable commands.
+    # Read-only commands (git status, ls, python3 script.py) and commands that only
+    # redirect output (python3 script.py > file.json) should not require done_when.
+    if tool_name == "bash":
+        tool_input_raw = data.get("tool_input")
+        cmd = str((tool_input_raw or {}).get("command", "")).strip() if isinstance(tool_input_raw, dict) else ""
+        if not cmd or not _is_mutation_capable_bash_for_methodology(cmd):
+            return []
+
     tool_input = data.get("tool_input")
     if not isinstance(tool_input, dict):
         return ["METHODOLOGY: mutation-capable flow requires metadata with done_when criteria"]
@@ -392,7 +424,7 @@ def check_methodology_contract(data):
 
     metadata = tool_input.get("metadata")
     if not isinstance(metadata, dict):
-        return ["METHODOLOGY: mutation-capable flow requires metadata with done_when criteria"]
+        return []  # No metadata provided -- do not block; firewall handles actual mutation gates
 
     done_when = metadata.get("done_when")
     if isinstance(done_when, str) and done_when.strip():

package/hud/omg-hud.mjs

@@ -87,7 +87,7 @@ function readOmgVersion() {
     // fall through to static fallback
   }
 
-  return "2.2.2";
+  return "2.2.4";
 }
 
 const OMG_VERSION = readOmgVersion();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trac3er/oh-my-god",
-  "version": "2.2.2",
+  "version": "2.2.4",
   "description": "OMG (Oh My God) — Multi-agent orchestration, evidence-backed verification, and durable session state for Claude Code, Codex, and supported agent hosts",
   "main": "OMG-setup.sh",
   "scripts": {

package/plugins/advanced/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-advanced",
-  "version": "2.2.2",
+  "version": "2.2.4",
   "description": "Advanced OMG commands - deep planning, learning, code review, and specialized workflows",
   "type": "omg-plugin",
   "commands": {

package/plugins/core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "omg-core",
-  "version": "2.2.2",
+  "version": "2.2.4",
   "description": "Core OMG commands - native setup, routing, orchestration, and verification surfaces",
   "type": "omg-plugin",
   "commands": {

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "oh-my-god"
-version = "2.2.2"
+version = "2.2.4"
 description = "OMG (Oh My God) — Multi-agent orchestration, evidence-backed verification, and durable session state for Claude Code, Codex, and supported agent hosts"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -26,6 +26,7 @@ classifiers = [
 dependencies = [
     "cryptography>=44.0",
     "fastmcp>=2.0",
+    "requests>=2.28",
 ]
 
 [project.optional-dependencies]
@@ -50,7 +51,7 @@ include-package-data = true
 
 [tool.setuptools.packages.find]
 where = ["."]
-include = ["agents*", "commands*", "control_plane*", "hooks*", "plugins*", "registry*", "runtime*"]
+include = ["agents*", "commands*", "control_plane*", "hooks*", "lab*", "plugins*", "registry*", "runtime*"]
 
 [tool.setuptools.package-data]
 agents = ["*.md"]
@@ -87,6 +88,9 @@ runtime = ["*.json"]
 ".agents/skills/omg/claim-judge" = [".agents/skills/omg/claim-judge/SKILL.md", ".agents/skills/omg/claim-judge/openai.yaml"]
 ".agents/skills/omg/test-intent-lock" = [".agents/skills/omg/test-intent-lock/SKILL.md", ".agents/skills/omg/test-intent-lock/openai.yaml"]
 ".agents/skills/omg/proof-gate" = [".agents/skills/omg/proof-gate/SKILL.md", ".agents/skills/omg/proof-gate/openai.yaml"]
+".agents/skills/omg/hash-edit" = [".agents/skills/omg/hash-edit/SKILL.md", ".agents/skills/omg/hash-edit/openai.yaml"]
+".agents/skills/omg/ast-pack" = [".agents/skills/omg/ast-pack/SKILL.md", ".agents/skills/omg/ast-pack/openai.yaml"]
+".agents/skills/omg/terminal-lane" = [".agents/skills/omg/terminal-lane/SKILL.md", ".agents/skills/omg/terminal-lane/openai.yaml"]
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]

package/registry/bundles/algorithms.yaml

@@ -1,6 +1,6 @@
 id: algorithms
 kind: domain-pack
-version: 2.2.2
+version: 2.2.4
 title: OMG Algorithms Pack
 description: Determinism and benchmark attachments for algorithm-heavy work.
 hosts:

package/registry/bundles/api-twin.yaml

@@ -1,6 +1,6 @@
 id: api-twin
 kind: simulation
-version: 2.2.2
+version: 2.2.4
 title: OMG API Twin
 description: Versioned endpoint cassette replay with latency, drift, and cost reporting.
 hosts:

package/registry/bundles/ast-pack.yaml

@@ -1,6 +1,6 @@
 id: ast-pack
 kind: governance
-version: 2.2.2
+version: 2.2.4
 title: OMG AST Pack Lane
 description: Governed AST search and replace lane with canonical approvals and proofs.
 hosts:

package/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.2.2
+version: 2.2.4
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.2.2
+version: 2.2.4
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts: