@trac3er/oh-my-god 2.2.2 → 2.2.4

package/artifacts/release/dist/public/bundle/.agents/skills/omg/security-check/openai.yaml

@@ -1,13 +0,0 @@
-name: omg-security-check
-description: "Canonical security audit bundle with provenance, trust scoring, and deterministic evidence."
-allow_implicit_invocation: false
-metadata:
-  channel: public
-  bundle_id: security-check
-  title: "OMG Security Check"
-mcp_servers:
-  - omg-control
-allowed_tools:
-  - "Read"
-  - "Grep"
-  - "Bash(python3:*)"

package/artifacts/release/dist/public/bundle/.agents/skills/omg/terminal-lane/SKILL.md

@@ -1,11 +0,0 @@
----
-name: omg-terminal-lane
-description: "Highest-risk governed terminal execution lane with strict approval and attestation."
----
-
-# OMG Terminal Lane
-
-- Channel: `public`
-- Execution modes: `embedded, local_supervisor`
-- MCP servers: `omg-control`
-- Evidence outputs: `.omg/evidence/terminal-lane-{run_id}.json`

package/artifacts/release/dist/public/bundle/.agents/skills/omg/terminal-lane/openai.yaml

@@ -1,11 +0,0 @@
-name: omg-terminal-lane
-description: "Highest-risk governed terminal execution lane with strict approval and attestation."
-allow_implicit_invocation: false
-metadata:
-  channel: public
-  bundle_id: terminal-lane
-  title: "OMG Terminal Lane"
-mcp_servers:
-  - omg-control
-allowed_tools:
-  - "Bash"

package/artifacts/release/dist/public/bundle/.agents/skills/omg/test-intent-lock/SKILL.md

@@ -1,11 +0,0 @@
----
-name: omg-test-intent-lock
-description: "Structured test-delta guard that blocks weakened tests unless explicit override evidence is present."
----
-
-# OMG Test Intent Lock
-
-- Channel: `public`
-- Execution modes: `embedded, local_supervisor`
-- MCP servers: `omg-control`
-- Evidence outputs: `.omg/evidence/test-intent-lock-*.json`

package/artifacts/release/dist/public/bundle/.agents/skills/omg/test-intent-lock/openai.yaml

@@ -1,13 +0,0 @@
-name: omg-test-intent-lock
-description: "Structured test-delta guard that blocks weakened tests unless explicit override evidence is present."
-allow_implicit_invocation: false
-metadata:
-  channel: public
-  bundle_id: test-intent-lock
-  title: "OMG Test Intent Lock"
-mcp_servers:
-  - omg-control
-allowed_tools:
-  - "Read"
-  - "Grep"
-  - "Bash(python3:*)"

package/artifacts/release/dist/public/bundle/.agents/skills/omg/tracebank/SKILL.md

@@ -1,11 +0,0 @@
----
-name: omg-tracebank
-description: "Structured plan-to-patch-to-verify trace capture for OMG routes."
----
-
-# OMG Tracebank
-
-- Channel: `public`
-- Execution modes: `embedded, local_supervisor`
-- MCP servers: `omg-control`
-- Evidence outputs: `.omg/tracebank/events.jsonl`

package/artifacts/release/dist/public/bundle/.agents/skills/omg/tracebank/openai.yaml

@@ -1,12 +0,0 @@
-name: omg-tracebank
-description: "Structured plan-to-patch-to-verify trace capture for OMG routes."
-allow_implicit_invocation: true
-metadata:
-  channel: public
-  bundle_id: tracebank
-  title: "OMG Tracebank"
-mcp_servers:
-  - omg-control
-allowed_tools:
-  - "Read"
-  - "Bash(python3:*)"

package/artifacts/release/dist/public/bundle/.agents/skills/omg/vision/SKILL.md

@@ -1,11 +0,0 @@
----
-name: omg-vision
-description: "Vision-specific OCR, comparison, lineage, drift, and replay attachments."
----
-
-# OMG Vision Pack
-
-- Channel: `public`
-- Execution modes: `embedded, local_supervisor`
-- MCP servers: `omg-control`
-- Evidence outputs: `.omg/lineage/*.json`

package/artifacts/release/dist/public/bundle/.agents/skills/omg/vision/openai.yaml

@@ -1,11 +0,0 @@
-name: omg-vision
-description: "Vision-specific OCR, comparison, lineage, drift, and replay attachments."
-allow_implicit_invocation: false
-metadata:
-  channel: public
-  bundle_id: vision
-  title: "OMG Vision Pack"
-mcp_servers:
-  - omg-control
-allowed_tools:
-  - "Read"

package/artifacts/release/dist/public/bundle/.claude-plugin/marketplace.json

@@ -1,36 +0,0 @@
-{
-  "name": "omg",
-  "description": "Marketplace metadata for the OMG Claude plugin",
-  "owner": {
-    "name": "trac3er00"
-  },
-  "metadata": {
-    "description": "OMG - Oh-My-God for Claude Code and supported agent hosts",
-    "version": "2.2.2",
-    "homepage": "https://github.com/trac3er00/OMG",
-    "repository": "https://github.com/trac3er00/OMG"
-  },
-  "plugins": [
-    {
-      "name": "omg",
-      "description": "OMG plugin layer for Claude Code and supported agent hosts with native setup, orchestration, and interop.",
-      "version": "2.2.2",
-      "source": "./",
-      "author": {
-        "name": "trac3er00"
-      },
-      "license": "MIT",
-      "category": "productivity",
-      "tags": [
-        "orchestration",
-        "automation",
-        "multi-agent",
-        "omg",
-        "codex",
-        "gemini",
-        "crazy-mode"
-      ]
-    }
-  ],
-  "version": "2.2.2"
-}

package/artifacts/release/dist/public/bundle/.claude-plugin/mcp.json

@@ -1,11 +0,0 @@
-{
-  "mcpServers": {
-    "omg-control": {
-      "command": "python3",
-      "args": [
-        "-m",
-        "runtime.omg_mcp_server"
-      ]
-    }
-  }
-}

package/artifacts/release/dist/public/bundle/.claude-plugin/plugin.json

@@ -1,23 +0,0 @@
-{
-  "name": "omg",
-  "version": "2.2.2",
-  "description": "OMG plugin layer for Claude Code with native setup, orchestration, and interop.",
-  "author": {
-    "name": "trac3er00"
-  },
-  "repository": "https://github.com/trac3er00/OMG",
-  "homepage": "https://github.com/trac3er00/OMG",
-  "license": "MIT",
-  "keywords": [
-    "claude-code",
-    "plugin",
-    "orchestration",
-    "multi-agent",
-    "omg",
-    "codex",
-    "gemini",
-    "crazy-mode",
-    "escalation"
-  ],
-  "mcpServers": "./.claude-plugin/mcp.json"
-}

package/artifacts/release/dist/public/bundle/.gemini/settings.json

@@ -1,72 +0,0 @@
-{
-  "mcpServers": {
-    "omg-control": {
-      "command": "python3",
-      "args": [
-        "-m",
-        "runtime.omg_mcp_server"
-      ]
-    }
-  },
-  "_omg": {
-    "_version": "2.2.2",
-    "generated": {
-      "contract_version": "2.2.2",
-      "channel": "public",
-      "required_bundles": [
-        "control-plane",
-        "plan-council",
-        "claim-judge",
-        "test-intent-lock",
-        "proof-gate",
-        "hook-governor",
-        "mcp-fabric",
-        "lsp-pack",
-        "secure-worktree-pipeline",
-        "security-check",
-        "api-twin",
-        "preflight",
-        "robotics",
-        "vision",
-        "algorithms",
-        "health",
-        "tracebank",
-        "eval-gate",
-        "delta-classifier",
-        "incident-replay",
-        "data-lineage",
-        "remote-supervisor"
-      ],
-      "phase1_release_contract": {
-        "forge_specialist_surfaces": [
-          "forge-profile-review",
-          "forge-release-audit",
-          "forge-validate"
-        ],
-        "release_surfaces": [
-          "OMG:profile-review",
-          "OMG:release-audit",
-          "OMG:validate"
-        ],
-        "attestation_requirements": [
-          "registry.verify_artifact.sign_artifact_statement",
-          "registry.verify_artifact.verify_artifact_statement"
-        ],
-        "compliance_governor_expectations": [
-          "runtime.compliance_governor.evaluate_release_compliance",
-          "runtime.compliance_governor.evaluate_tool_compliance"
-        ],
-        "release_readiness_checks": [
-          "claim_judge",
-          "compliance_governor",
-          "execution_primitives"
-        ],
-        "runtime_behavior_surfaces": [
-          "execution_primitives",
-          "provider_host_parity",
-          "host_semantic_parity"
-        ]
-      }
-    }
-  }
-}

package/artifacts/release/dist/public/bundle/.kimi/mcp.json

@@ -1,72 +0,0 @@
-{
-  "mcpServers": {
-    "omg-control": {
-      "command": "python3",
-      "args": [
-        "-m",
-        "runtime.omg_mcp_server"
-      ]
-    }
-  },
-  "_omg": {
-    "_version": "2.2.2",
-    "generated": {
-      "contract_version": "2.2.2",
-      "channel": "public",
-      "required_bundles": [
-        "control-plane",
-        "plan-council",
-        "claim-judge",
-        "test-intent-lock",
-        "proof-gate",
-        "hook-governor",
-        "mcp-fabric",
-        "lsp-pack",
-        "secure-worktree-pipeline",
-        "security-check",
-        "api-twin",
-        "preflight",
-        "robotics",
-        "vision",
-        "algorithms",
-        "health",
-        "tracebank",
-        "eval-gate",
-        "delta-classifier",
-        "incident-replay",
-        "data-lineage",
-        "remote-supervisor"
-      ],
-      "phase1_release_contract": {
-        "forge_specialist_surfaces": [
-          "forge-profile-review",
-          "forge-release-audit",
-          "forge-validate"
-        ],
-        "release_surfaces": [
-          "OMG:profile-review",
-          "OMG:release-audit",
-          "OMG:validate"
-        ],
-        "attestation_requirements": [
-          "registry.verify_artifact.sign_artifact_statement",
-          "registry.verify_artifact.verify_artifact_statement"
-        ],
-        "compliance_governor_expectations": [
-          "runtime.compliance_governor.evaluate_release_compliance",
-          "runtime.compliance_governor.evaluate_tool_compliance"
-        ],
-        "release_readiness_checks": [
-          "claim_judge",
-          "compliance_governor",
-          "execution_primitives"
-        ],
-        "runtime_behavior_surfaces": [
-          "execution_primitives",
-          "provider_host_parity",
-          "host_semantic_parity"
-        ]
-      }
-    }
-  }
-}

package/artifacts/release/dist/public/bundle/.mcp.json

@@ -1,18 +0,0 @@
-{
-  "mcpServers": {
-    "filesystem": {
-      "command": "npx",
-      "args": [
-        "@modelcontextprotocol/server-filesystem@2026.1.14",
-        "."
-      ]
-    },
-    "omg-control": {
-      "command": "python3",
-      "args": [
-        "-m",
-        "runtime.omg_mcp_server"
-      ]
-    }
-  }
-}

package/artifacts/release/dist/public/bundle/OMG_COMPAT_CONTRACT.md

@@ -1,111 +0,0 @@
----
-title: OMG Production Control Plane
-version: 2.2.2
-canonical_hosts:
-  - claude
-  - codex
-  - gemini
-  - kimi
-compatibility_only_hosts:
-  - opencode
-status: active
----
-
-# OMG Production Control Plane
-
-`OMG_COMPAT_CONTRACT.md` is the normative human-readable contract for OMG capability bundles. Machine-readable manifests in `registry/bundles/` are executable inputs and must remain version-locked to this document.
-
-## provider_tiers
-
-OMG defines four canonical behavior-parity hosts and their host-rule contracts.
-
-- `claude`: requires `compilation_targets`, `hooks`, `subagents`, and `skills`.
-- `codex`: requires `compilation_targets`, `skills`, `agents_fragments`, `rules`, and `automations`.
-- `gemini`: requires `compilation_targets`, `mcp`, `skills`, and `automations`.
-- `kimi`: requires `compilation_targets`, `mcp`, `skills`, and `automations`.
-
-Gemini and Kimi are canonical behavior-parity hosts for contract validation and policy declaration. Their contracts do not require Claude/Codex hook semantics.
-
-OpenCode remains compatibility-only in v2.2.2. It is supported through compatibility MCP wiring and interop diagnostics, but it is not part of the canonical behavior-parity contract set.
-
-## metadata
-
-Every bundle must declare `id`, `kind`, `version`, `title`, `description`, `hosts`, and `assets`.
-
-## invocation_policy
-
-Every bundle must declare whether it is user invocable, model invocable, and whether implicit invocation is allowed. Production bundles default to explicit invocation only.
-
-## tool_policy
-
-Every bundle must declare `side_effect_level` and host-specific allowed tools. Production policy protects `.omg/`, `.agents/`, `.codex/`, and `.claude/` as control-plane state.
-
-## lifecycle_hooks
-
-Canonical OMG events:
-
-- `SessionStart`
-- `SessionEnd`
-- `PreToolUse`
-- `PostToolUse`
-- `PostToolUseFailure`
-- `Stop`
-- `PreCompact`
-- `ConfigChange`
-- `WorktreeCreate`
-- `WorktreeRemove`
-- `SubagentStart`
-- `SubagentStop`
-- `TaskCompleted`
-
-Hosts compile native events where available and emulate the rest with OMG runtime wrappers.
-
-## mcp_contract
-
-Bundles may declare MCP servers, prompts, resources, and server instructions. `omg-control` is the primary stdio server. HTTP control-plane exposure is loopback-only and not a production launch dependency.
-
-## lsp_contract
-
-LSP packs declare supported languages, diagnostics expectations, and evidence outputs for post-edit checks.
-
-## evidence_outputs
-
-Bundles declare reproducible evidence artifacts under `.omg/evidence/` or `.omg/state/`. Release-ready bundles must emit deterministic outputs suitable for CI drift checks.
-
-## execution_contract
-
-Supported execution modes:
-
-- `embedded`
-- `local_supervisor`
-- `automation`
-- `ephemeral_worktree`
-
-`local_supervisor` means a same-machine orchestrator driving Claude and Codex workers through local CLI or stdio MCP integration. Remote multi-tenant control planes are out of scope for this version.
-
-## host_compilation_rules
-
-Claude outputs compile to:
-
-- `.claude-plugin/plugin.json`
-- `.claude-plugin/marketplace.json`
-- `.mcp.json`
-- generated hook configuration consumed by `settings.json`
-
-Codex outputs compile to:
-
-- `.agents/skills/omg/<bundle>/SKILL.md`
-- `.agents/skills/omg/<bundle>/openai.yaml`
-- generated Codex MCP and rule fragments under `.agents/skills/omg/`
-
-Codex compilation must remain compatible with the host's native instruction hierarchy (`AGENTS.md`, `AGENTS.override.md`) and progressive-disclosure skill loading. OMG-generated artifacts document and constrain OMG behavior; they do not replace Codex built-in slash commands.
-
-## roadmap_extensions
-
-The contract reserves compilation anchors for:
-
-- `omg.skill-compiler`
-- `omg.hook-governor`
-- `omg.mcp-fabric`
-- `omg.lsp-pack`
-- `omg.secure-worktree-pipeline`

package/artifacts/release/dist/public/bundle/plugins/advanced/commands/OMG:code-review.md

@@ -1,114 +0,0 @@
----
-description: Deep code review — reads file completely, checks line-by-line for issues, then analyzes whole-file structure. Enforces code hygiene.
-allowed-tools: Read, Bash(cat:*), Bash(grep:*), Bash(wc:*), Bash(head:*), Bash(find:*), Bash(rg:*), Grep, Glob
-argument-hint: "[file path or 'recent' for git-changed files]"
----
-
-# /OMG:code-review — Line-by-Line + Structural Review
-
-## Philosophy
-Two passes: LINE-BY-LINE precision, then WHOLE-FILE understanding.
-Don't just scan — READ and UNDERSTAND every line.
-
-## Step 1: Determine Scope
-
-- If file specified: review that file
-- If "recent" or no argument: review uncommitted changes
-  ```bash
-  git diff --name-only HEAD 2>/dev/null
-  git diff --cached --name-only 2>/dev/null
-  ```
-
-## Step 2: Read the FULL File First
-
-Read the ENTIRE file. Not just the changed part. Not just a function.
-Understanding comes from seeing the whole context.
-
-Note:
-- What does this file DO? (its purpose in the system)
-- What are its DEPENDENCIES? (imports, calls)
-- What does it EXPORT? (public API)
-
-## Step 3: Line-by-Line Scan
-
-For each line, check:
-
-**Correctness:**
-- Logic errors (off-by-one, null checks, type mismatches)
-- Missing error handling (unhandled promises, bare except, no null check)
-- Race conditions (shared state, async without await, unchecked concurrent access)
-
-**Security (if auth/payment/database):**
-- Hardcoded secrets → CRITICAL
-- SQL injection (string concatenation in queries) → CRITICAL
-- XSS (innerHTML, dangerouslySetInnerHTML) → HIGH
-- Missing input validation → MEDIUM
-- Overly permissive CORS/cookies → MEDIUM
-
-**Hygiene:**
-- Dead code (unused imports, variables, unreachable branches)
-- Noise comments ("increment i", "return result", "constructor")
-- console.log/print left in production code
-- TODO/FIXME/HACK without tracking
-- Overly complex functions (>40 lines → suggest extract)
-- Duplicated logic (same pattern in 2+ places → suggest DRY)
-
-## Step 4: Whole-File Structure Analysis
-
-After line-by-line:
-- Does the file do ONE thing well, or is it a dumping ground?
-- Are functions ordered logically? (public first, helpers after, or lifecycle order)
-- Is naming consistent? (camelCase throughout? PascalCase for classes?)
-- Does it follow the project's domain pattern? (check .omg/knowledge/domain-patterns/)
-- Any circular dependencies?
-- Is error handling consistent across all functions?
-
-## Step 5: Report
-
-```
-Code Review — [file]
-━━━━━━━━━━━━━━━━━━━━
-
-Structure: [CLEAN | NEEDS_WORK | MESSY]
-Security:  [SAFE | REVIEW_NEEDED | CRITICAL]
-Hygiene:   [CLEAN | NEEDS_CLEANUP]
-
-Issues:
-  [line:col] CRITICAL: [description]
-  [line:col] HIGH: [description]
-  [line:col] MEDIUM: [description]
-  [line:col] LOW: [description]
-
-Dead Code:
-  [line] unused import: [name]
-  [line] unreachable after return
-
-Noise Comments (remove these):
-  [line] "// increment counter"
-  [line] "// return the value"
-
-Structural:
-  - [function] is [N] lines — consider extracting [suggestion]
-  - [pattern] duplicated at lines [X] and [Y]
-
-Recommendation: [summary of what to fix, in priority order]
-```
-
-## Step 6: For Security-Critical Files
-
-If the file touches auth, payment, or database:
-```
-/OMG:escalate codex "Line-by-line security review of [file]. Check:
-1. Every input validation point
-2. Every database query for injection
-3. Every auth check for bypass
-4. Every secret reference for hardcoding
-Report: line numbers + severity + fix suggestion"
-```
-
-## Anti-patterns
-- DON'T skim and say "looks good" — read every line
-- DON'T only check the diff — read the full file for context
-- DON'T ignore test files — they can have real issues too
-- DON'T add more noise comments as "fixes" — remove them instead
-- DON'T suggest unnecessary code as improvements