@trac3er/oh-my-god 2.2.3 → 2.3.0

package/registry/bundles/ast-pack.yaml

@@ -1,6 +1,6 @@
 id: ast-pack
 kind: governance
-version: 2.2.3
+version: 2.3.0
 title: OMG AST Pack Lane
 description: Governed AST search and replace lane with canonical approvals and proofs.
 hosts:

package/registry/bundles/claim-judge.yaml

@@ -1,6 +1,6 @@
 id: claim-judge
 kind: proof
-version: 2.2.3
+version: 2.3.0
 title: OMG Claim Judge
 description: Evidence-backed claim validator for structured release and completion claims.
 hosts:

package/registry/bundles/control-plane.yaml

@@ -1,6 +1,6 @@
 id: control-plane
 kind: skill
-version: 2.2.3
+version: 2.3.0
 title: OMG Control Plane
 description: Canonical production control plane bundle for Claude, Codex, Gemini, and Kimi.
 hosts:

package/registry/bundles/data-lineage.yaml

@@ -1,6 +1,6 @@
 id: data-lineage
 kind: provenance
-version: 2.2.3
+version: 2.3.0
 title: OMG Data Lineage
 description: Provenance and privacy tracking for traces, fixtures, examples, and synthetic artifacts.
 hosts:

package/registry/bundles/delta-classifier.yaml

@@ -1,6 +1,6 @@
 id: delta-classifier
 kind: routing
-version: 2.2.3
+version: 2.3.0
 title: OMG Delta Classifier
 description: Change classifier that attaches risk-aware checks, approvals, and packs.
 hosts:

package/registry/bundles/eval-gate.yaml

@@ -1,6 +1,6 @@
 id: eval-gate
 kind: evaluation
-version: 2.2.3
+version: 2.3.0
 title: OMG Eval Gate
 description: Reproducible evaluation gate that blocks regressions before release.
 hosts:

package/registry/bundles/hash-edit.yaml

@@ -1,6 +1,6 @@
 id: hash-edit
 kind: governance
-version: 2.2.3
+version: 2.3.0
 title: OMG Hash Edit Lane
 description: Governed hash-bound edit lane with signed approvals and evidence routing.
 hosts:

package/registry/bundles/health.yaml

@@ -1,6 +1,6 @@
 id: health
 kind: domain-pack
-version: 2.2.3
+version: 2.3.0
 title: OMG Health Pack
 description: Health-sensitive approvals, provenance, and replay attachments.
 hosts:

package/registry/bundles/hook-governor.yaml

@@ -1,6 +1,6 @@
 id: hook-governor
 kind: governance
-version: 2.2.3
+version: 2.3.0
 title: OMG Hook Governor
 description: Canonical hook ordering, policy reinjection, and protected-path governance.
 hosts:

package/registry/bundles/incident-replay.yaml

@@ -1,6 +1,6 @@
 id: incident-replay
 kind: debugging
-version: 2.2.3
+version: 2.3.0
 title: OMG Incident Replay
 description: Replayable bug packs built from logs, failing tests, traces, and diffs.
 hosts:

package/registry/bundles/lsp-pack.yaml

@@ -1,6 +1,6 @@
 id: lsp-pack
 kind: diagnostics
-version: 2.2.3
+version: 2.3.0
 title: OMG LSP Pack
 description: Optional LSP-backed diagnostics and navigation bundle for production verification.
 hosts:

package/registry/bundles/mcp-fabric.yaml

@@ -1,6 +1,6 @@
 id: mcp-fabric
 kind: mcp
-version: 2.2.3
+version: 2.3.0
 title: OMG MCP Fabric
 description: Tools, prompts, resources, and server instructions for the OMG control plane.
 hosts:

package/registry/bundles/plan-council.yaml

@@ -1,6 +1,6 @@
 id: plan-council
 kind: planning
-version: 2.2.3
+version: 2.3.0
 title: OMG Plan Council
 description: Canonical council-style planning bundle for explicit, evidence-backed deep plans.
 hosts:

package/registry/bundles/preflight.yaml

@@ -1,6 +1,6 @@
 id: preflight
 kind: routing
-version: 2.2.3
+version: 2.3.0
 title: OMG Preflight
 description: Repo-aware route selection based on diff, manifests, and classified risk.
 hosts:

package/registry/bundles/proof-gate.yaml

@@ -1,6 +1,6 @@
 id: proof-gate
 kind: proof
-version: 2.2.3
+version: 2.3.0
 title: OMG Proof Gate
 description: Structured release proof gate that binds claims to required evidence artifacts and trace links.
 hosts:

package/registry/bundles/remote-supervisor.yaml

@@ -1,6 +1,6 @@
 id: remote-supervisor
 kind: orchestration
-version: 2.2.3
+version: 2.3.0
 title: OMG Remote Supervisor
 description: Local-only authenticated supervisor sessions for worker orchestration.
 hosts:

package/registry/bundles/robotics.yaml

@@ -1,6 +1,6 @@
 id: robotics
 kind: domain-pack
-version: 2.2.3
+version: 2.3.0
 title: OMG Robotics Pack
 description: Robotics safety policy, replay, and evaluation attachments.
 hosts:

package/registry/bundles/secure-worktree-pipeline.yaml

@@ -1,6 +1,6 @@
 id: secure-worktree-pipeline
 kind: runtime
-version: 2.2.3
+version: 2.3.0
 title: OMG Secure Worktree Pipeline
 description: Ephemeral worktree execution and supervisor-safe worker dispatch for production jobs.
 hosts:

package/registry/bundles/security-check.yaml

@@ -1,6 +1,6 @@
 id: security-check
 kind: security
-version: 2.2.3
+version: 2.3.0
 title: OMG Security Check
 description: Canonical security audit bundle with provenance, trust scoring, and deterministic evidence.
 hosts:

package/registry/bundles/terminal-lane.yaml

@@ -1,6 +1,6 @@
 id: terminal-lane
 kind: governance
-version: 2.2.3
+version: 2.3.0
 title: OMG Terminal Lane
 description: Highest-risk governed terminal execution lane with strict approval and attestation.
 hosts:

package/registry/bundles/test-intent-lock.yaml

@@ -1,6 +1,6 @@
 id: test-intent-lock
 kind: proof
-version: 2.2.3
+version: 2.3.0
 title: OMG Test Intent Lock
 description: Structured test-delta guard that blocks weakened tests unless explicit override evidence is present.
 hosts:

package/registry/bundles/tracebank.yaml

@@ -1,6 +1,6 @@
 id: tracebank
 kind: evidence
-version: 2.2.3
+version: 2.3.0
 title: OMG Tracebank
 description: Structured plan-to-patch-to-verify trace capture for OMG routes.
 hosts:

package/registry/bundles/vision.yaml

@@ -1,6 +1,6 @@
 id: vision
 kind: domain-pack
-version: 2.2.3
+version: 2.3.0
 title: OMG Vision Pack
 description: Vision-specific OCR, comparison, lineage, drift, and replay attachments.
 hosts:

package/registry/omg-capability.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/trac3er00/OMG/registry/omg-capability.schema.json",
   "title": "OMG Capability Bundle",
-  "version": "2.2.3",
+  "version": "2.3.0",
   "type": "object",
   "required": [
     "id",

package/runtime/adoption.py

@@ -13,12 +13,12 @@ CANONICAL_REPO_URL = "https://github.com/trac3er00/OMG"
 CANONICAL_PACKAGE_NAME = "@trac3er/oh-my-god"
 CANONICAL_PLUGIN_ID = "omg"
 CANONICAL_MARKETPLACE_ID = "omg"
-CANONICAL_VERSION = "2.2.3"
+CANONICAL_VERSION = "2.3.0"
 
 VALID_ADOPTION_MODES = ("omg-only", "coexist")
 CANONICAL_MODE_NAMES = ("chill", "focused", "exploratory")
 
-PRESET_ORDER: tuple[str, ...] = ("safe", "balanced", "interop", "labs", "buffet")
+PRESET_ORDER: tuple[str, ...] = ("safe", "balanced", "interop", "labs", "buffet", "production")
 VALID_PRESETS = PRESET_ORDER
 PRESET_LEVEL: dict[str, int] = {p: i for i, p in enumerate(PRESET_ORDER)}
 
@@ -96,6 +96,7 @@ PRESET_FEATURES: dict[str, dict[str, bool]] = {
         **{f: False for f in _BUFFET_ONLY_FLAGS},
     },
     "buffet": {flag: True for flag in MANAGED_PRESET_FLAGS},
+    "production": {flag: True for flag in MANAGED_PRESET_FLAGS},
 }
 
 _SUPERPOWERS_SENTINELS = (

package/runtime/compliance_governor.py

@@ -36,7 +36,7 @@ _EXTERNAL_BASH_PATTERNS = (
     re.compile(r"\bgit\s+(clone|fetch|pull)\b"),
 )
 _MUTATION_BASH_PATTERNS = (
-    r"\b(git\s+(add|commit|push|rebase|cherry-pick|merge|tag))\b",
+    r"\b(git\s+(add|commit|push|rebase|cherry-pick|merge|tag(?!\s+(-l|--list)\b)))\b",
     r"\b(rm|mv|cp|tee|touch|mkdir|rmdir|ln)\b",
     r"\b(sed\s+-i|perl\s+-pi)\b",
     r"\b(chmod|chown)\b",
@@ -430,8 +430,34 @@ def _is_mutation_capable_bash(command: str) -> bool:
     for pattern in _MUTATION_BASH_PATTERNS:
         if re.search(pattern, lowered):
             return True
+    # File-write redirection: only classify as mutation if the command itself
+    # is NOT a known read-only program.  `python3 script.py > out.json` is a
+    # read-only computation that merely saves output; the actual mutation
+    # patterns (git commit, rm, mv, etc.) are already caught above.
     if _FILE_WRITE_REDIRECTION_PATTERN.search(lowered):
-        return True
+        if not _is_read_only_program_with_redirect(normalized_command):
+            return True
+    return False
+
+
+def _is_read_only_program_with_redirect(command: str) -> bool:
+    """Return True when the command before any > redirect is a read-only program."""
+    cmd_portion = re.split(r"(?<!\d)\s*>>?\s+\S+", command)[0].strip()
+    if not cmd_portion:
+        return False
+    lowered = cmd_portion.lower()
+    _read_only_prefixes = (
+        "python", "python3", "node", "ruby", "perl",
+        "jq", "yq",
+        "git log", "git diff", "git status", "git show", "git branch",
+        "gh pr", "gh run", "gh api",
+        "ls", "find", "grep", "rg", "ag", "wc", "sort", "uniq",
+        "head", "tail", "less", "more", "file", "stat", "du", "df",
+        "env", "printenv", "uname", "whoami", "hostname", "date",
+    )
+    for prefix in _read_only_prefixes:
+        if lowered.startswith(prefix):
+            return True
     return False
 
 

package/runtime/context_compiler.py

@@ -0,0 +1,131 @@
+"""Bounded context packet compiler.
+
+Reads the live context_engine_packet.json and emits provenance-only, bounded
+summaries for each canonical host.  Raw transcript and session bodies are never
+written to compiled output.
+"""
+from __future__ import annotations
+import json
+from datetime import datetime, timezone
+from pathlib import Path
+from typing import Any
+
+_PACKET_REL_PATH = Path(".omg") / "state" / "context_engine_packet.json"
+_ALLOWED_PACKET_KEYS = frozenset({
+    "packet_version", "summary", "artifact_pointers", "provenance_pointers",
+    "artifact_handles", "clarification_status", "ambiguity_state",
+    "provenance_only", "governance", "release_metadata", "coordinator_run_id",
+    "profile_digest", "budget", "delta_only", "run_id",
+    "deterministic_contract",
+})
+
+
+def _resolve_root(root_dir) -> Path:
+    return Path(root_dir).resolve() if root_dir else Path.cwd()
+
+
+def _resolve_output_root(root: Path, output_root) -> Path:
+    if output_root:
+        out = Path(output_root).resolve()
+        out.mkdir(parents=True, exist_ok=True)
+        return out
+    return root
+
+
+def _load_packet(root: Path) -> dict[str, Any]:
+    packet_path = root / _PACKET_REL_PATH
+    if packet_path.exists():
+        try:
+            raw = json.loads(packet_path.read_text(encoding="utf-8"))
+            if isinstance(raw, dict):
+                return {k: v for k, v in raw.items() if k in _ALLOWED_PACKET_KEYS}
+        except Exception:
+            pass
+    return {
+        "packet_version": "1.0",
+        "summary": "no active context signals",
+        "artifact_pointers": [],
+        "provenance_pointers": [],
+        "artifact_handles": [],
+        "provenance_only": True,
+        "generated_at": datetime.now(timezone.utc).isoformat(),
+    }
+
+
+def _write_json(path: Path, data: dict[str, Any]) -> None:
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(json.dumps(data, indent=2, ensure_ascii=True) + "\n", encoding="utf-8")
+
+
+def compile_context_packets(
+    *,
+    root_dir=None,
+    output_root=None,
+    hosts=None,
+) -> dict[str, Any]:
+    root = _resolve_root(root_dir)
+    output = _resolve_output_root(root, output_root)
+    selected_hosts = list(hosts or ["claude", "codex", "gemini", "kimi"])
+    packet = _load_packet(root)
+    issued_at = datetime.now(timezone.utc).isoformat()
+
+    packet["context_compile_issued_at"] = issued_at
+    packet["hosts"] = selected_hosts
+
+    packet_path = output / _PACKET_REL_PATH
+    _write_json(packet_path, packet)
+    emitted: list[str] = [str(packet_path.relative_to(output))]
+
+    if "codex" in selected_hosts:
+        frag_src = root / ".agents" / "skills" / "omg" / "AGENTS.fragment.md"
+        frag_dst = output / ".agents" / "skills" / "omg" / "AGENTS.fragment.md"
+        frag_dst.parent.mkdir(parents=True, exist_ok=True)
+        if frag_src.exists():
+            frag_dst.write_bytes(frag_src.read_bytes())
+        else:
+            frag_dst.write_text("# OMG Codex Context\n\n_No context signals available._\n", encoding="utf-8")
+        emitted.append(str(frag_dst.relative_to(output)))
+
+    if "gemini" in selected_hosts:
+        gemini_src = root / ".gemini" / "settings.json"
+        gemini_dst = output / ".gemini" / "settings.json"
+        gemini_dst.parent.mkdir(parents=True, exist_ok=True)
+        if gemini_src.exists():
+            try:
+                gemini_data = json.loads(gemini_src.read_text(encoding="utf-8"))
+            except Exception:
+                gemini_data = {}
+        else:
+            gemini_data = {}
+        gemini_data.setdefault("_omg", {})["context_packet"] = {
+            "summary": packet.get("summary", ""),
+            "issued_at": issued_at,
+        }
+        _write_json(gemini_dst, gemini_data)
+        emitted.append(str(gemini_dst.relative_to(output)))
+
+    if "kimi" in selected_hosts:
+        kimi_src = root / ".kimi" / "mcp.json"
+        kimi_dst = output / ".kimi" / "mcp.json"
+        kimi_dst.parent.mkdir(parents=True, exist_ok=True)
+        if kimi_src.exists():
+            try:
+                kimi_data = json.loads(kimi_src.read_text(encoding="utf-8"))
+            except Exception:
+                kimi_data = {}
+        else:
+            kimi_data = {}
+        kimi_data.setdefault("_omg", {})["context_packet"] = {
+            "summary": packet.get("summary", ""),
+            "issued_at": issued_at,
+        }
+        _write_json(kimi_dst, kimi_data)
+        emitted.append(str(kimi_dst.relative_to(output)))
+
+    return {
+        "schema": "OmgContextCompileResult",
+        "status": "ok",
+        "hosts": selected_hosts,
+        "artifacts": emitted,
+        "packet": str(packet_path.relative_to(output)),
+    }

package/runtime/contract_compiler.py

@@ -96,7 +96,8 @@ def _get_required_advanced_plugin_artifacts(root: Path) -> tuple[str, ...]:
         command_path = command.get("path")
         if not isinstance(command_path, str) or not command_path:
             continue
-        bundled_path = f"bundle/plugins/advanced/{command_path}"
+        safe_command_path = command_path.replace(":", "-")
+        bundled_path = f"bundle/plugins/advanced/{safe_command_path}"
         if bundled_path in seen:
             continue
         required.append(bundled_path)
@@ -140,7 +141,14 @@ REQUIRED_CLAUDE_HOOK_EVENTS = (
     "PostToolUseFailure",
     "InstructionsLoaded",
 )
-REQUIRED_CLAUDE_SUBAGENT_NAMES = ("security-reviewer", "release-manager")
+REQUIRED_CLAUDE_SUBAGENT_NAMES = (
+    "architect-planner",
+    "explorer-indexer",
+    "implementer",
+    "security-reviewer",
+    "verifier",
+    "causal-tracer",
+)
 REQUIRED_CODEX_AGENTS_SECTIONS = (
     "## Build & Test",
     "## Protected Paths",
@@ -646,7 +654,8 @@ def _copy_contract_inputs(root: Path, output_root: Path) -> list[Path]:
 
     advanced_commands = resolve_assets(Path("plugins") / "advanced" / "commands", suffix=".md")
     for src in advanced_commands:
-        rel = Path("plugins") / "advanced" / "commands" / src.name
+        safe_name = src.name.replace(":", "-")
+        rel = Path("plugins") / "advanced" / "commands" / safe_name
         dst = output_root / rel
         _write_text(dst, src.read_text(encoding="utf-8"))
         copied.append(dst)
@@ -848,36 +857,43 @@ def _default_claude_hook_registrations() -> dict[str, list[dict[str, Any]]]:
 
 
 def _build_claude_subagents(protected_paths: list[str]) -> list[dict[str, Any]]:
-    """Build narrow-tool Claude subagent definitions. No bypassPermissions allowed."""
     return [
+        {
+            "name": "architect-planner",
+            "description": "Read-only planning subagent. Analyses structure, proposes plans, produces evidence. No mutations.",
+            "tools": ["Read", "Grep", "Glob", "Bash(git log *)", "Bash(git diff *)", "Bash(python3 scripts/omg.py *)", "WebSearch"],
+            "bypassPermissions": False,
+        },
+        {
+            "name": "explorer-indexer",
+            "description": "Read-only codebase exploration subagent. Searches, indexes, and answers structural questions.",
+            "tools": ["Read", "Grep", "Glob", "Bash(grep *)", "Bash(find *)", "Bash(git log *)", "Bash(git diff *)"],
+            "bypassPermissions": False,
+        },
+        {
+            "name": "implementer",
+            "description": "Write-capable implementation subagent governed by protected-path policy and mutation gate.",
+            "tools": ["Read", "Write", "Edit", "MultiEdit", "Grep", "Glob", "Bash(git *)", "Bash(python3 *)", "Bash(pytest *)"],
+            "bypassPermissions": False,
+            "protectedPaths": protected_paths,
+        },
         {
             "name": "security-reviewer",
             "description": "Read-only security review subagent with scoped tool access.",
-            "tools": [
-                "Read",
-                "Grep",
-                "Glob",
-                "Bash(grep *)",
-                "Bash(find *)",
-                "Bash(git log *)",
-                "Bash(git diff *)",
-            ],
+            "tools": ["Read", "Grep", "Glob", "Bash(grep *)", "Bash(find *)", "Bash(git log *)", "Bash(git diff *)"],
             "bypassPermissions": False,
         },
         {
-            "name": "release-manager",
-            "description": "Release management subagent with write access governed by protected-path policy.",
-            "tools": [
-                "Read",
-                "Write",
-                "Edit",
-                "Grep",
-                "Glob",
-                "Bash(git *)",
-                "Bash(python3 scripts/omg.py *)",
-            ],
+            "name": "verifier",
+            "description": "Read-only verification subagent. Runs tests, lints, and produces evidence without mutations.",
+            "tools": ["Read", "Grep", "Glob", "Bash(python3 -m pytest *)", "Bash(python3 scripts/omg.py *)", "Bash(git diff *)"],
+            "bypassPermissions": False,
+        },
+        {
+            "name": "causal-tracer",
+            "description": "Read-only causal analysis subagent. Traces errors, diffs, and logs to root causes.",
+            "tools": ["Read", "Grep", "Glob", "Bash(git log *)", "Bash(git diff *)", "Bash(git blame *)", "Bash(grep *)"],
             "bypassPermissions": False,
-            "protectedPaths": protected_paths,
         },
     ]
 
@@ -1534,6 +1550,85 @@ def compile_contract_outputs(
     }
 
 
+_METHOD_PHASES = (
+    "deep-interview",
+    "approved-spec",
+    "done-when-contract",
+    "test-lock",
+    "implementation-plan",
+    "review",
+    "release",
+)
+
+
+def compile_method_artifacts(
+    *,
+    root_dir: str | Path | None = None,
+    output_root: str | Path | None = None,
+    hosts: list[str] | tuple[str, ...] | None = None,
+    channel: str = "public",
+) -> dict[str, Any]:
+    root = _resolve_root(root_dir)
+    output = _resolve_output_root(root, output_root)
+    selected_hosts = list(hosts or SUPPORTED_HOSTS)
+    method_dir = output / ".omg" / "evidence" / "method"
+    method_dir.mkdir(parents=True, exist_ok=True)
+    issued_at = datetime.now(timezone.utc).isoformat()
+
+    phase_artifacts: list[str] = []
+    for phase in _METHOD_PHASES:
+        phase_payload: dict[str, Any] = {
+            "schema": "OmgMethodPhase",
+            "phase": phase,
+            "contract_version": CANONICAL_VERSION,
+            "channel": channel,
+            "hosts": selected_hosts,
+            "issued_at": issued_at,
+        }
+        phase_path = method_dir / f"{phase}.json"
+        _write_json(phase_path, phase_payload)
+        raw = json.dumps(phase_payload, sort_keys=True, separators=(",", ":")).encode()
+        digest = hashlib.sha256(raw).hexdigest()
+        try:
+            from registry.verify_artifact import sign_artifact_statement
+            statement = sign_artifact_statement(
+                artifact_path=str(phase_path),
+                subject_digest=digest,
+                trusted_comment=f"omg-method:{phase}:{CANONICAL_VERSION}",
+            )
+        except Exception:
+            statement = {
+                "schema": "OmgMethodPhaseStatement",
+                "phase": phase,
+                "subject_digest": digest,
+                "issued_at": issued_at,
+                "signer": {"keyid": "offline", "algorithm": "sha256-only", "mode": "local-offline"},
+            }
+        stmt_path = method_dir / f"{phase}.statement.json"
+        _write_json(stmt_path, statement)
+        phase_artifacts.append(phase)
+
+    manifest: dict[str, Any] = {
+        "schema": "OmgMethodManifest",
+        "phases": list(_METHOD_PHASES),
+        "contract_version": CANONICAL_VERSION,
+        "channel": channel,
+        "hosts": selected_hosts,
+        "issued_at": issued_at,
+    }
+    manifest_path = method_dir / "manifest.json"
+    _write_json(manifest_path, manifest)
+
+    return {
+        "schema": "OmgMethodCompileResult",
+        "status": "ok",
+        "channel": channel,
+        "hosts": selected_hosts,
+        "phases": phase_artifacts,
+        "manifest": str(manifest_path.relative_to(output)),
+    }
+
+
 def _provider_statuses() -> dict[str, dict[str, Any]]:
     ready_override = {
         item.strip()