@trac3er/oh-my-god 2.2.3 → 2.3.0

package/artifacts/release/dist/enterprise/bundle/registry/bundles/control-plane.yaml

@@ -1,192 +0,0 @@
-id: control-plane
-kind: skill
-version: 2.2.3
-title: OMG Control Plane
-description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
-hosts:
-  - claude
-  - codex
-  - gemini
-  - kimi
-assets:
-  references:
-    - OMG_COMPAT_CONTRACT.md
-    - docs/release-checklist.md
-invocation_policy:
-  user_invocable: true
-  model_invocable: false
-  allow_implicit_invocation: false
-tool_policy:
-  side_effect_level: medium
-  allowed_tools:
-    claude:
-      - Read
-      - Grep
-      - Bash(python3:*)
-    codex:
-      - Read
-      - Grep
-      - Bash(python3:*)
-lifecycle_hooks:
-  native:
-    - SessionStart
-    - PreToolUse
-    - PostToolUse
-  emulated:
-    - PreCompact
-    - WorktreeCreate
-    - WorktreeRemove
-mcp_contract:
-  servers:
-    - omg-control
-    - omg-memory
-  prompts:
-    - omg_contract_summary
-  tools:
-    - omg_tool_fabric_request
-  resources:
-    - resource://omg/contract
-    - resource://omg/release-checklist
-lsp_contract:
-  languages:
-    - python
-    - typescript
-evidence_outputs:
-  artifacts:
-    - .omg/evidence/control-plane-compile.json
-    - .omg/evidence/tool-fabric.json
-execution_contract:
-  modes:
-    - embedded
-    - local_supervisor
-policy_model:
-  trust_tiers:
-    - name: safe
-      level: 0
-      label: Safe
-      allowed_sources:
-        - local_repo
-        - trusted_registry
-    - name: balanced
-      level: 1
-      label: Balanced
-      allowed_sources:
-        - local_repo
-        - trusted_registry
-        - reviewed_external
-    - name: interop
-      level: 2
-      label: Interop
-      allowed_sources:
-        - local_repo
-        - trusted_registry
-        - reviewed_external
-        - migration_bridge
-    - name: labs
-      level: 3
-      label: Labs
-      allowed_sources:
-        - local_repo
-        - trusted_registry
-        - reviewed_external
-        - experimental
-  tool_policies:
-    - tool_name: Read
-      allowed_tiers: [safe, balanced, interop, labs]
-      requires_approval: false
-    - tool_name: Grep
-      allowed_tiers: [safe, balanced, interop, labs]
-      requires_approval: false
-    - tool_name: Bash(python3:*)
-      allowed_tiers: [balanced, interop, labs]
-      requires_approval: true
-  tool_fabric_contract:
-    enforcement_order:
-      - tool_selection
-      - approval_state
-      - evidence_requirements
-      - attestation_proof_validation
-      - execution
-    lanes:
-      - lsp-pack
-      - hash-edit
-      - ast-pack
-      - terminal-lane
-  protected_paths:
-    - path_pattern: .omg/**
-      required_tier: balanced
-    - path_pattern: .agents/**
-      required_tier: balanced
-    - path_pattern: .codex/**
-      required_tier: balanced
-    - path_pattern: .claude/**
-      required_tier: balanced
-  evidence_contract:
-    timestamp: timestamp
-    executor: executor
-    trace_id: trace_id
-    lineage: lineage
-    attestation_statement: attestation_statement
-    attestation_verifier: attestation_verifier
-    claim_judge_verdict: claim_judge_verdict
-    compliance_verdict: compliance_verdict
-  host_rules:
-    claude:
-      compilation_targets:
-        - .claude-plugin/plugin.json
-        - .claude-plugin/marketplace.json
-        - .mcp.json
-        - settings.json
-      hooks:
-        - SessionStart
-        - PreToolUse
-        - PostToolUse
-        - PreCompact
-      subagents:
-        - local_supervisor
-        - workers
-      skills:
-        - omg/control-plane
-        - omg/hook-governor
-    codex:
-      compilation_targets:
-        - .agents/skills/omg/<bundle>/SKILL.md
-        - .agents/skills/omg/<bundle>/openai.yaml
-        - .agents/skills/omg/AGENTS.fragment.md
-        - .agents/skills/omg/codex-mcp.toml
-      skills:
-        - omg/control-plane
-        - omg/mcp-fabric
-      agents_fragments:
-        - .agents/skills/omg/AGENTS.fragment.md
-      rules:
-        - protected_paths
-        - explicit_invocation
-      automations:
-        - contract-compile
-        - release-readiness
-    gemini:
-      compilation_targets:
-        - .gemini/settings.json
-      mcp:
-        - omg-control
-      skills:
-        - omg/control-plane
-      automations:
-        - contract-compile
-        - release-readiness
-    kimi:
-      compilation_targets:
-        - .kimi/mcp.json
-      mcp:
-        - omg-control
-      skills:
-        - omg/control-plane
-      automations:
-        - contract-compile
-        - release-readiness
-channel_overrides:
-  public:
-    posture: self-serve
-  enterprise:
-    posture: managed

package/artifacts/release/dist/enterprise/bundle/registry/bundles/data-lineage.yaml

@@ -1,47 +0,0 @@
-id: data-lineage
-kind: provenance
-version: 2.2.3
-title: OMG Data Lineage
-description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
-hosts:
-  - claude
-  - codex
-assets:
-  references:
-    - runtime/data_lineage.py
-invocation_policy:
-  user_invocable: true
-  model_invocable: true
-  allow_implicit_invocation: true
-tool_policy:
-  side_effect_level: medium
-  allowed_tools:
-    claude:
-      - Read
-      - Bash(python3:*)
-    codex:
-      - Read
-      - Bash(python3:*)
-lifecycle_hooks:
-  native:
-    - PostToolUse
-  emulated:
-    - TaskCompleted
-mcp_contract:
-  servers:
-    - omg-control
-lsp_contract:
-  languages:
-    - python
-evidence_outputs:
-  artifacts:
-    - .omg/lineage/*.json
-execution_contract:
-  modes:
-    - embedded
-    - local_supervisor
-channel_overrides:
-  public:
-    provenance: required
-  enterprise:
-    provenance: required

package/artifacts/release/dist/enterprise/bundle/registry/bundles/delta-classifier.yaml

@@ -1,47 +0,0 @@
-id: delta-classifier
-kind: routing
-version: 2.2.3
-title: OMG Delta Classifier
-description: Change classifier that attaches risk-aware checks, approvals, and packs.
-hosts:
-  - claude
-  - codex
-assets:
-  references:
-    - runtime/delta_classifier.py
-invocation_policy:
-  user_invocable: true
-  model_invocable: true
-  allow_implicit_invocation: true
-tool_policy:
-  side_effect_level: low
-  allowed_tools:
-    claude:
-      - Read
-      - Grep
-    codex:
-      - Read
-      - Grep
-lifecycle_hooks:
-  native:
-    - SessionStart
-  emulated:
-    - TaskCompleted
-mcp_contract:
-  servers:
-    - omg-control
-lsp_contract:
-  languages:
-    - python
-evidence_outputs:
-  artifacts:
-    - .omg/tracebank/events.jsonl
-execution_contract:
-  modes:
-    - embedded
-    - local_supervisor
-channel_overrides:
-  public:
-    classification: advisory
-  enterprise:
-    classification: required

package/artifacts/release/dist/enterprise/bundle/registry/bundles/eval-gate.yaml

@@ -1,47 +0,0 @@
-id: eval-gate
-kind: evaluation
-version: 2.2.3
-title: OMG Eval Gate
-description: Reproducible evaluation gate that blocks regressions before release.
-hosts:
-  - claude
-  - codex
-assets:
-  references:
-    - runtime/eval_gate.py
-invocation_policy:
-  user_invocable: true
-  model_invocable: true
-  allow_implicit_invocation: false
-tool_policy:
-  side_effect_level: medium
-  allowed_tools:
-    claude:
-      - Read
-      - Bash(python3:*)
-    codex:
-      - Read
-      - Bash(python3:*)
-lifecycle_hooks:
-  native:
-    - PostToolUse
-  emulated:
-    - TaskCompleted
-mcp_contract:
-  servers:
-    - omg-control
-lsp_contract:
-  languages:
-    - python
-evidence_outputs:
-  artifacts:
-    - .omg/evals/latest.json
-execution_contract:
-  modes:
-    - embedded
-    - local_supervisor
-channel_overrides:
-  public:
-    regressions: block
-  enterprise:
-    regressions: block

package/artifacts/release/dist/enterprise/bundle/registry/bundles/hash-edit.yaml

@@ -1,73 +0,0 @@
-id: hash-edit
-kind: governance
-version: 2.2.3
-title: OMG Hash Edit Lane
-description: Governed hash-bound edit lane with signed approvals and evidence routing.
-hosts:
-  - claude
-  - codex
-assets:
-  references:
-    - runtime/tool_fabric.py
-    - registry/approval_artifact.py
-invocation_policy:
-  user_invocable: true
-  model_invocable: true
-  allow_implicit_invocation: false
-tool_policy:
-  side_effect_level: medium
-  allowed_tools:
-    claude:
-      - Edit
-    codex:
-      - Edit
-lifecycle_hooks:
-  native:
-    - PreToolUse
-    - PostToolUse
-  emulated:
-    - TaskCompleted
-mcp_contract:
-  servers:
-    - omg-control
-lsp_contract:
-  languages:
-    - python
-    - typescript
-evidence_outputs:
-  artifacts:
-    - .omg/evidence/hash-edit-{run_id}.json
-execution_contract:
-  modes:
-    - embedded
-    - local_supervisor
-tool_fabric:
-  lane: hash-edit
-  enforcement_order:
-    - tool_selection
-    - approval_state
-    - evidence_requirements
-    - attestation_proof_validation
-    - execution
-  tools:
-    - Edit
-  semantic_operations:
-    - name: single_file_hash_edit
-      tool: Edit
-      mutation_capable: true
-      requires_explicit_promotion: false
-  requires_signed_approval: true
-  requires_signed_approval_for_mutation: true
-  requires_attestation: false
-  requires_attestation_for_mutation: true
-  single_file_hash_bound: true
-  require_run_scoped_evidence: true
-  require_fresh_evidence: true
-  evidence_max_age_seconds: 3600
-  required_evidence:
-    - .omg/evidence/hash-edit-{run_id}.json
-channel_overrides:
-  public:
-    posture: advisory
-  enterprise:
-    posture: managed

package/artifacts/release/dist/enterprise/bundle/registry/bundles/health.yaml

@@ -1,45 +0,0 @@
-id: health
-kind: domain-pack
-version: 2.2.3
-title: OMG Health Pack
-description: Health-sensitive approvals, provenance, and replay attachments.
-hosts:
-  - claude
-  - codex
-assets:
-  references:
-    - runtime/domain_packs.py
-invocation_policy:
-  user_invocable: true
-  model_invocable: true
-  allow_implicit_invocation: false
-tool_policy:
-  side_effect_level: high
-  allowed_tools:
-    claude:
-      - Read
-    codex:
-      - Read
-lifecycle_hooks:
-  native:
-    - PostToolUse
-  emulated:
-    - TaskCompleted
-mcp_contract:
-  servers:
-    - omg-control
-lsp_contract:
-  languages:
-    - python
-evidence_outputs:
-  artifacts:
-    - .omg/lineage/*.json
-execution_contract:
-  modes:
-    - embedded
-    - local_supervisor
-channel_overrides:
-  public:
-    approvals: required
-  enterprise:
-    approvals: enforced

package/artifacts/release/dist/enterprise/bundle/registry/bundles/hook-governor.yaml

@@ -1,101 +0,0 @@
-id: hook-governor
-kind: governance
-version: 2.2.3
-title: OMG Hook Governor
-description: Canonical hook ordering, policy reinjection, and protected-path governance.
-hosts:
-  - claude
-  - codex
-assets:
-  references:
-    - settings.json
-    - hooks/pre-compact.py
-invocation_policy:
-  user_invocable: false
-  model_invocable: false
-  allow_implicit_invocation: true
-tool_policy:
-  side_effect_level: low
-  allowed_tools:
-    claude:
-      - Read
-    codex:
-      - Read
-lifecycle_hooks:
-  native:
-    - SessionStart
-    - SessionEnd
-    - PreToolUse
-    - PostToolUse
-    - PostToolUseFailure
-    - Stop
-  emulated:
-    - PreCompact
-    - ConfigChange
-    - WorktreeCreate
-    - WorktreeRemove
-    - SubagentStart
-    - SubagentStop
-    - TaskCompleted
-compiled_hooks:
-  SessionStart:
-    - command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/session-start.py"'
-      timeout: 10
-  SessionEnd:
-    - command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/session-end-capture.py"'
-  PreToolUse:
-    - matcher: Bash
-      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/firewall.py"'
-      timeout: 10
-    - matcher: Read|Write|Edit|MultiEdit
-      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/secret-guard.py"'
-      timeout: 10
-    - matcher: ""
-      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/pre-tool-inject.py"'
-  PostToolUse:
-    - matcher: Bash
-      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/circuit-breaker.py"'
-      timeout: 10
-    - matcher: Write|Edit|MultiEdit
-      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/tool-ledger.py"'
-      timeout: 10
-    - matcher: Write|Edit|MultiEdit
-      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/test_generator_hook.py"'
-      timeout: 10
-    - matcher: ""
-      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/budget_governor.py"'
-      timeout: 10
-  PostToolUseFailure:
-    - command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/post-tool-failure.py"'
-  Stop:
-    - matcher: ""
-      command: '"$HOME/.claude/omg-runtime/.venv/bin/python" "$HOME/.claude/hooks/stop_dispatcher.py"'
-      timeout: 90
-feature_dependencies:
-  defense-state:
-    required_for:
-      - hook-governor
-mcp_contract:
-  servers:
-    - omg-control
-lsp_contract:
-  languages:
-    - python
-evidence_outputs:
-  artifacts:
-    - .omg/state/ledger/tool-ledger.jsonl
-execution_contract:
-  modes:
-    - embedded
-    - local_supervisor
-channel_overrides:
-  public:
-    protected_paths:
-      - .omg/**
-      - .agents/**
-  enterprise:
-    protected_paths:
-      - .omg/**
-      - .agents/**
-      - .claude/**
-      - .codex/**

package/artifacts/release/dist/enterprise/bundle/registry/bundles/incident-replay.yaml

@@ -1,47 +0,0 @@
-id: incident-replay
-kind: debugging
-version: 2.2.3
-title: OMG Incident Replay
-description: Replayable bug packs built from logs, failing tests, traces, and diffs.
-hosts:
-  - claude
-  - codex
-assets:
-  references:
-    - runtime/incident_replay.py
-invocation_policy:
-  user_invocable: true
-  model_invocable: true
-  allow_implicit_invocation: false
-tool_policy:
-  side_effect_level: medium
-  allowed_tools:
-    claude:
-      - Read
-      - Bash(python3:*)
-    codex:
-      - Read
-      - Bash(python3:*)
-lifecycle_hooks:
-  native:
-    - PostToolUse
-  emulated:
-    - TaskCompleted
-mcp_contract:
-  servers:
-    - omg-control
-lsp_contract:
-  languages:
-    - python
-evidence_outputs:
-  artifacts:
-    - .omg/incidents/*.json
-execution_contract:
-  modes:
-    - embedded
-    - local_supervisor
-channel_overrides:
-  public:
-    replay: available
-  enterprise:
-    replay: required

package/artifacts/release/dist/enterprise/bundle/registry/bundles/lsp-pack.yaml

@@ -1,80 +0,0 @@
-id: lsp-pack
-kind: diagnostics
-version: 2.2.3
-title: OMG LSP Pack
-description: Optional LSP-backed diagnostics and navigation bundle for production verification.
-hosts:
-  - claude
-  - codex
-assets:
-  references:
-    - config/lsp_languages.yaml
-    - tools/lsp_operations.py
-invocation_policy:
-  user_invocable: true
-  model_invocable: true
-  allow_implicit_invocation: false
-tool_policy:
-  side_effect_level: low
-  allowed_tools:
-    claude:
-      - Read
-      - Edit
-    codex:
-      - Read
-      - Edit
-lifecycle_hooks:
-  native:
-    - PostToolUse
-  emulated:
-    - TaskCompleted
-mcp_contract:
-  servers:
-    - omg-control
-lsp_contract:
-  languages:
-    - python
-    - javascript
-    - typescript
-evidence_outputs:
-  artifacts:
-    - .omg/evidence/lsp-pack-{run_id}.json
-execution_contract:
-  modes:
-    - embedded
-    - local_supervisor
-tool_fabric:
-  lane: lsp-pack
-  enforcement_order:
-    - tool_selection
-    - approval_state
-    - evidence_requirements
-    - attestation_proof_validation
-    - execution
-  tools:
-    - Read
-    - Edit
-  semantic_operations:
-    - name: lsp_read_diagnostics
-      tool: Read
-      mutation_capable: false
-      requires_explicit_promotion: false
-    - name: lsp_promoted_edit
-      tool: Edit
-      mutation_capable: true
-      requires_explicit_promotion: true
-  requires_signed_approval: false
-  requires_signed_approval_for_mutation: true
-  requires_attestation: false
-  requires_attestation_for_mutation: true
-  read_only_by_default: true
-  require_run_scoped_evidence: true
-  require_fresh_evidence: true
-  evidence_max_age_seconds: 3600
-  required_evidence:
-    - .omg/evidence/lsp-pack-{run_id}.json
-channel_overrides:
-  public:
-    diagnostics: advisory
-  enterprise:
-    diagnostics: required