@trac3er/oh-my-god 2.2.3 → 2.2.4

package/build/lib/runtime/omg_mcp_server.py

@@ -1,304 +0,0 @@
-from __future__ import annotations
-
-import os
-from collections.abc import AsyncIterator
-from contextlib import asynccontextmanager
-from dataclasses import dataclass
-from pathlib import Path
-from typing import Any
-
-from runtime.asset_loader import resolve_asset
-from runtime.compliance_governor import classify_bash_command_mode
-from runtime.tool_plan_gate import resolve_current_run_id, tool_plan_gate_check
-
-_mcp_import_error: ModuleNotFoundError | None = None
-_FastMCP: Any
-
-try:
-    from fastmcp import FastMCP as _ImportedFastMCP
-    _FastMCP = _ImportedFastMCP
-except ModuleNotFoundError as exc:
-    _mcp_import_error = exc
-
-    def _passthrough_decorator(*_args: Any, **_kwargs: Any):
-        def decorator(func: Any) -> Any:
-            return func
-
-        return decorator
-
-    @dataclass
-    class _StubPrompt:
-        name: str
-        description: str
-        handler: Any
-
-    @dataclass
-    class _StubResource:
-        uri: str
-        name: str
-        description: str
-        mime_type: str
-        handler: Any
-
-    class _StubFastMCP:  # type: ignore[override]
-        def __init__(self, *_args: Any, **_kwargs: Any) -> None:
-            self._import_error = _mcp_import_error
-            self.instructions = str(_kwargs.get("instructions", ""))
-            self._prompts: list[_StubPrompt] = []
-            self._resources: dict[str, _StubResource] = {}
-
-        def tool(self, *_args: Any, **_kwargs: Any):
-            return _passthrough_decorator(*_args, **_kwargs)
-
-        def prompt(self, *, name: str, description: str = ""):
-            def decorator(func: Any) -> Any:
-                self._prompts.append(_StubPrompt(name=name, description=description, handler=func))
-                return func
-
-            return decorator
-
-        def resource(
-            self,
-            uri: str,
-            *,
-            name: str = "",
-            description: str = "",
-            mime_type: str = "text/plain",
-        ):
-            def decorator(func: Any) -> Any:
-                self._resources[uri] = _StubResource(
-                    uri=uri,
-                    name=name,
-                    description=description,
-                    mime_type=mime_type,
-                    handler=func,
-                )
-                return func
-
-            return decorator
-
-        async def list_prompts(self) -> list[_StubPrompt]:
-            return list(self._prompts)
-
-        async def list_resources(self) -> list[_StubResource]:
-            return list(self._resources.values())
-
-        async def read_resource(self, uri: str) -> Any:
-            resource = self._resources[str(uri)]
-            return resource.handler()
-
-        def run(self, *_args: Any, **_kwargs: Any) -> None:
-            raise RuntimeError("fastmcp is required to run the OMG MCP server") from self._import_error
-
-    _StubFastMCP.__module__ = "fastmcp"
-    _FastMCP = _StubFastMCP
-
-FastMCP = _FastMCP
-
-from control_plane.service import ControlPlaneService
-
-
-MCP_INSTRUCTIONS = (
-    "OMG production control plane MCP. Prefer omg-control prompts and resources for "
-    "contract, release-readiness, and governance context before using direct tools."
-)
-
-
-def _root_dir() -> Path:
-    return Path(__file__).resolve().parents[1]
-
-
-@asynccontextmanager
-async def lifespan(_: object) -> AsyncIterator[None]:
-    yield
-
-
-mcp = FastMCP("OMG Control MCP", lifespan=lifespan, instructions=MCP_INSTRUCTIONS)
-
-
-def _service() -> ControlPlaneService:
-    return ControlPlaneService(project_dir=os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd()))
-
-
-def _read_repo_text(rel_path: str) -> str:
-    return resolve_asset(rel_path).read_text(encoding="utf-8")
-
-
-@mcp.tool()
-def omg_policy_evaluate(tool: str, input: dict[str, Any]) -> dict[str, Any]:
-    if tool in {"Write", "Edit", "MultiEdit", "Bash"}:
-        run_id_candidate = input.get("run_id") if isinstance(input, dict) else None
-        run_id: str | None = None
-        if isinstance(run_id_candidate, str) and run_id_candidate.strip():
-            run_id = run_id_candidate.strip()
-        metadata = input.get("metadata") if isinstance(input, dict) else None
-        if not run_id and isinstance(metadata, dict):
-            metadata_run_id = metadata.get("run_id")
-            if isinstance(metadata_run_id, str) and metadata_run_id.strip():
-                run_id = metadata_run_id.strip()
-        if not run_id:
-            run_id = resolve_current_run_id()
-
-        should_gate_tool_plan = tool in {"Write", "Edit", "MultiEdit"}
-        if tool == "Bash":
-            bash_mode = classify_bash_command_mode(str(input.get("command", ""))) if isinstance(input, dict) else "read"
-            should_gate_tool_plan = bash_mode in {"mutation", "external"}
-
-        if should_gate_tool_plan:
-            tool_plan_result = tool_plan_gate_check(_service().project_dir, run_id, tool, tool_input=input)
-            if tool_plan_result.get("status") == "blocked":
-                return tool_plan_result
-
-        lock_id: str | None = None
-        if isinstance(metadata, dict):
-            lock_id_candidate = metadata.get("lock_id")
-            if isinstance(lock_id_candidate, str):
-                lock_id = lock_id_candidate
-        direct_lock_id = input.get("lock_id") if isinstance(input, dict) else None
-        if isinstance(direct_lock_id, str) and direct_lock_id.strip():
-            lock_id = direct_lock_id
-
-        exemption = input.get("exemption") if isinstance(input, dict) else None
-        gate_status, gate_payload = _service().mutation_gate_check(
-            {
-                "tool": tool,
-                "file_path": str(input.get("file_path", "")) if isinstance(input, dict) else "",
-                "lock_id": lock_id,
-                "exemption": exemption,
-                "command": str(input.get("command", "")) if isinstance(input, dict) else "",
-                "run_id": run_id,
-                "metadata": metadata if isinstance(metadata, dict) else None,
-            }
-        )
-        if gate_status == 200 and gate_payload.get("status") == "blocked":
-            return gate_payload
-
-    _status, payload = _service().policy_evaluate({"tool": tool, "input": input})
-    return payload
-
-
-@mcp.tool()
-def omg_trust_review(file_path: str, old_config: dict[str, Any], new_config: dict[str, Any]) -> dict[str, Any]:
-    _status, payload = _service().trust_review({"file_path": file_path, "old_config": old_config, "new_config": new_config})
-    return payload
-
-
-@mcp.tool()
-def omg_evidence_ingest(
-    run_id: str,
-    tests: list[dict[str, Any]],
-    security_scans: list[dict[str, Any]],
-    diff_summary: dict[str, Any],
-    reproducibility: dict[str, Any],
-    unresolved_risks: list[str],
-    provenance: list[dict[str, Any]] | None = None,
-    trust_scores: dict[str, Any] | None = None,
-    api_twin: dict[str, Any] | None = None,
-) -> dict[str, Any]:
-    _status, payload = _service().evidence_ingest(
-        {
-            "run_id": run_id,
-            "tests": tests,
-            "security_scans": security_scans,
-            "diff_summary": diff_summary,
-            "reproducibility": reproducibility,
-            "unresolved_risks": unresolved_risks,
-            "provenance": provenance or [],
-            "trust_scores": trust_scores or {},
-            "api_twin": api_twin or {},
-        }
-    )
-    return payload
-
-
-@mcp.tool()
-def omg_runtime_dispatch(runtime: str, idea: dict[str, Any]) -> dict[str, Any]:
-    _status, payload = _service().runtime_dispatch({"runtime": runtime, "idea": idea})
-    return payload
-
-
-@mcp.tool()
-def omg_security_check(scope: str = ".", include_live_enrichment: bool = False, external_inputs: list[dict[str, Any]] | None = None, waivers: list[str] | None = None) -> dict[str, Any]:
-    _status, payload = _service().security_check({"scope": scope, "include_live_enrichment": include_live_enrichment, "external_inputs": external_inputs, "waivers": waivers})
-    return payload
-
-
-@mcp.tool()
-def omg_claim_judge(claims: list[dict[str, Any]]) -> dict[str, Any]:
-    _status, payload = _service().claim_judge({"claims": claims})
-    return payload
-
-
-@mcp.tool()
-def omg_test_intent_lock(
-    action: str,
-    intent: dict[str, Any] | None = None,
-    lock_id: str | None = None,
-    results: dict[str, Any] | None = None,
-) -> dict[str, Any]:
-    _status, payload = _service().test_intent_lock(
-        {"action": action, "intent": intent, "lock_id": lock_id, "results": results}
-    )
-    return payload
-
-
-@mcp.tool()
-def omg_guide_assert(candidate: str, rules: dict[str, Any]) -> dict[str, Any]:
-    _status, payload = _service().guide_assert({"candidate": candidate, "rules": rules})
-    return payload
-
-
-@mcp.tool()
-def omg_get_session_health(run_id: str | None = None) -> dict[str, Any]:
-    _status, payload = _service().session_health({"run_id": run_id})
-    return payload
-
-
-@mcp.tool()
-def omg_tool_fabric_request(
-    lane_name: str,
-    tool_name: str,
-    run_id: str,
-    context: dict[str, Any] | None = None,
-) -> dict[str, Any]:
-    _status, payload = _service().tool_fabric_request(
-        {
-            "lane_name": lane_name,
-            "tool_name": tool_name,
-            "run_id": run_id,
-            "context": context or {},
-        }
-    )
-    return payload
-
-
-@mcp.prompt(name="omg_contract_summary", description="Summarize the OMG production contract and generated host outputs")
-def omg_contract_summary(channel: str = "public") -> str:
-    return (
-        "Summarize the OMG production control plane contract for channel "
-        f"`{channel}`. Include execution_contract, host_compilation_rules, "
-        "MCP resources, prompts, and release-readiness expectations."
-    )
-
-
-@mcp.resource("resource://omg/contract", name="omg_contract", description="Canonical OMG production contract document", mime_type="text/markdown")
-def omg_contract_resource() -> str:
-    return _read_repo_text("OMG_COMPAT_CONTRACT.md")
-
-
-@mcp.resource(
-    "resource://omg/release-checklist",
-    name="omg_release_checklist",
-    description="Public release checklist for OMG",
-    mime_type="text/markdown",
-)
-def omg_release_checklist_resource() -> str:
-    return _read_repo_text("docs/release-checklist.md")
-
-
-def run_server() -> None:
-    mcp.run(transport="stdio")
-
-
-if __name__ == "__main__":
-    run_server()

package/build/lib/runtime/playwright_adapter.py

@@ -1,39 +0,0 @@
-"""Optional adapter for summarizing Playwright artifacts into proof-chain-friendly payloads."""
-from __future__ import annotations
-
-from pathlib import Path
-from typing import Any
-
-
-def summarize_playwright_artifacts(
-    trace_path: str | None = None,
-    junit_path: str | None = None,
-    screenshots: list[str] | None = None,
-    metadata: dict[str, Any] | None = None,
-) -> dict[str, Any]:
-    """Summarize browser artifacts into a proof-chain-friendly dict.
-    
-    Returns a dict consumable by proof-gate / claim-judge:
-        status     — "ok" or "error"
-        artifacts  — {trace, junit, screenshots} (only provided paths)
-        metadata   — provided metadata or {}
-    """
-    if not trace_path and not junit_path and not screenshots:
-        return {"status": "error", "reason": "no_artifacts_provided"}
-
-    artifacts: dict[str, Any] = {}
-    
-    if trace_path:
-        artifacts["trace"] = str(Path(trace_path))
-        
-    if junit_path:
-        artifacts["junit"] = str(Path(junit_path))
-        
-    if screenshots:
-        artifacts["screenshots"] = [str(Path(s)) for s in screenshots]
-
-    return {
-        "status": "ok",
-        "artifacts": artifacts,
-        "metadata": metadata or {},
-    }

package/build/lib/runtime/playwright_pack.py

@@ -1,253 +0,0 @@
-"""Playwright-based browser evidence pack under isolated execution."""
-from __future__ import annotations
-
-import json
-import shutil
-from datetime import datetime, timezone
-from hashlib import sha256
-from pathlib import Path
-from typing import Any
-
-from runtime.untrusted_content import (
-    TRUST_TIER_CONFIG,
-    TrustTier,
-    get_untrusted_content_state,
-    mark_untrusted_content,
-)
-
-
-class IsolationError(Exception):
-    """Raised when browser execution is attempted without proper isolation or trust tier."""
-    pass
-
-
-class PlaywrightPack:
-    """Canonical browser pack with isolated execution and evidence emission.
-
-    Emits a proof-ready trace pack contract consumed by proof-gate / claim-judge:
-        artifacts  — trace.zip, junit.xml, screenshot paths
-        metadata   — isolated, timestamp, project_dir, trust_tier
-    """
-
-    def __init__(self, project_dir: str | Path = ".", isolated: bool = False):
-        self.project_dir = Path(project_dir).resolve()
-        self.isolated = isolated
-
-    def check_isolation(self) -> None:
-        """Ensure execution is isolated or browser trust tier is active."""
-        if self.isolated:
-            return
-
-        state = get_untrusted_content_state(str(self.project_dir))
-        if not state.get("active"):
-            raise IsolationError("Browser execution requires isolated mode or active BROWSER trust tier")
-
-        last_tier = state.get("last_trust_tier")
-        if last_tier == TrustTier.BROWSER.value:
-            return
-
-        raise IsolationError(f"Browser execution requires BROWSER trust tier, got {last_tier}")
-
-    def _resolve_trust_tier(self) -> str:
-        if self.isolated:
-            return TrustTier.BROWSER.value
-        state = get_untrusted_content_state(str(self.project_dir))
-        return str(state.get("last_trust_tier", TrustTier.BROWSER.value))
-
-    def emit_artifacts(self, output_dir: str | Path) -> dict[str, Any]:
-        """Emit mock Playwright artifacts (trace.zip, screenshots, junit.xml)."""
-        out_path = Path(output_dir)
-        out_path.mkdir(parents=True, exist_ok=True)
-
-        screenshots_dir = out_path / "screenshots"
-        screenshots_dir.mkdir(exist_ok=True)
-
-        trace_path = out_path / "trace.zip"
-        trace_path.write_bytes(b"PK\x03\x04mock_trace_data")
-
-        screenshot_path = screenshots_dir / "smoke_test.png"
-        screenshot_path.write_bytes(b"\x89PNG\r\n\x1a\nmock_png_data")
-
-        junit_path = out_path / "junit.xml"
-        junit_path.write_text(
-            '<?xml version="1.0" encoding="utf-8"?>\n'
-            '<testsuites>\n'
-            '  <testsuite name="browser_smoke" tests="1" failures="0" errors="0">\n'
-            '    <testcase name="smoke_test" classname="PlaywrightPack" time="0.1" />\n'
-            '  </testsuite>\n'
-            '</testsuites>\n',
-            encoding="utf-8",
-        )
-
-        return {
-            "trace": str(trace_path),
-            "screenshots": [str(screenshot_path)],
-            "junit": str(junit_path),
-        }
-
-    def _build_metadata(self, *, timestamp: str | None = None) -> dict[str, Any]:
-        ts = timestamp or datetime.now(timezone.utc).isoformat()
-        trust_tier = self._resolve_trust_tier()
-        tier_config = TRUST_TIER_CONFIG.get(
-            TrustTier(trust_tier),
-            TRUST_TIER_CONFIG[TrustTier.BROWSER],
-        )
-        return {
-            "isolated": self.isolated,
-            "timestamp": ts,
-            "project_dir": str(self.project_dir),
-            "trust_tier": trust_tier,
-            "trust_label": tier_config.label,
-            "trust_score": tier_config.score,
-        }
-
-    def run_smoke(self, fixture_path: str | Path, output_dir: str | Path | None = None) -> dict[str, Any]:
-        """Run smoke test against a local HTML fixture and emit proof-ready artifacts.
-
-        Returns a dict consumable by proof-gate / claim-judge:
-            status     — "success"
-            fixture    — resolved fixture path
-            artifacts  — {trace, junit, screenshots}
-            metadata   — {isolated, timestamp, project_dir, trust_tier, trust_label, trust_score}
-        """
-        self.check_isolation()
-
-        fixture = Path(fixture_path)
-        if not fixture.exists():
-            raise FileNotFoundError(f"Smoke fixture not found: {fixture}")
-
-        if output_dir is None:
-            output_dir = self.project_dir / ".omg" / "evidence" / "browser"
-
-        timestamp = datetime.now(timezone.utc).isoformat()
-
-        mark_untrusted_content(
-            str(self.project_dir),
-            source_type="browser",
-            source_ref=str(fixture),
-            content=json.dumps(
-                {
-                    "event": "playwright_run_smoke",
-                    "fixture": str(fixture),
-                    "isolated": self.isolated,
-                },
-                sort_keys=True,
-                ensure_ascii=True,
-            ),
-            tier=TrustTier.BROWSER,
-        )
-
-        artifacts = self.emit_artifacts(output_dir)
-        metadata = self._build_metadata(timestamp=timestamp)
-
-        evidence_dir = Path(output_dir)
-        _write_browser_evidence(
-            evidence_dir,
-            fixture=fixture,
-            artifacts=artifacts,
-            metadata=metadata,
-        )
-
-        return {
-            "status": "success",
-            "fixture": str(fixture),
-            "artifacts": artifacts,
-            "metadata": metadata,
-        }
-
-    def ingest_external_artifacts(
-        self,
-        *,
-        output_dir: str | Path,
-        trace_path: str | Path | None = None,
-        junit_path: str | Path | None = None,
-        screenshots: list[str | Path] | None = None,
-        metadata: dict[str, Any] | None = None,
-    ) -> dict[str, Any]:
-        """Copy upstream browser artifacts into the OMG evidence layout."""
-        output_root = Path(output_dir)
-        output_root.mkdir(parents=True, exist_ok=True)
-        screenshots_dir = output_root / "screenshots"
-        screenshots_dir.mkdir(exist_ok=True)
-
-        artifacts: dict[str, Any] = {}
-        if trace_path:
-            trace_target = output_root / Path(trace_path).name
-            shutil.copy2(trace_path, trace_target)
-            artifacts["trace"] = str(trace_target)
-
-        if junit_path:
-            junit_target = output_root / Path(junit_path).name
-            shutil.copy2(junit_path, junit_target)
-            artifacts["junit"] = str(junit_target)
-
-        if screenshots:
-            copied_screenshots: list[str] = []
-            for screenshot in screenshots:
-                screenshot_target = screenshots_dir / Path(screenshot).name
-                shutil.copy2(screenshot, screenshot_target)
-                copied_screenshots.append(str(screenshot_target))
-            artifacts["screenshots"] = copied_screenshots
-
-        final_metadata = self._build_metadata()
-        if metadata:
-            final_metadata.update(metadata)
-
-        mark_untrusted_content(
-            str(self.project_dir),
-            source_type="browser",
-            source_ref=str(output_root),
-            content=json.dumps(
-                {
-                    "event": "playwright_ingest_external_artifacts",
-                    "artifacts": sorted(artifacts.keys()),
-                    "metadata": final_metadata,
-                },
-                sort_keys=True,
-                ensure_ascii=True,
-            ),
-            tier=TrustTier.BROWSER,
-        )
-
-        evidence_path = _write_browser_evidence(
-            output_root,
-            fixture=Path(final_metadata.get("fixture", output_root / "playwright-cli")),
-            artifacts=artifacts,
-            metadata=final_metadata,
-        )
-        return {
-            "artifacts": artifacts,
-            "metadata": final_metadata,
-            "evidence_path": evidence_path,
-        }
-
-
-def _write_browser_evidence(
-    output_dir: Path,
-    *,
-    fixture: Path,
-    artifacts: dict[str, Any],
-    metadata: dict[str, Any],
-) -> str:
-    output_dir.mkdir(parents=True, exist_ok=True)
-    evidence_path = output_dir / "browser-evidence.json"
-
-    fixture_bytes = fixture.read_bytes() if fixture.exists() else b""
-    fixture_hash = sha256(fixture_bytes).hexdigest()
-
-    payload = {
-        "schema": "BrowserEvidence",
-        "generated_at": metadata.get("timestamp", ""),
-        "fixture": str(fixture),
-        "fixture_hash": fixture_hash,
-        "artifacts": artifacts,
-        "metadata": metadata,
-        "trust_tier": metadata.get("trust_tier", "browser"),
-        "trust_label": metadata.get("trust_label", "UNTRUSTED_EXTERNAL_CONTENT"),
-        "trust_score": metadata.get("trust_score", 0.0),
-    }
-    evidence_path.write_text(
-        json.dumps(payload, indent=2, ensure_ascii=True) + "\n",
-        encoding="utf-8",
-    )
-    return str(evidence_path)