@trac3er/oh-my-god 2.2.3 → 2.3.0

package/build/lib/commands/OMG:crazy.md

@@ -1,125 +0,0 @@
----
-description: "CRAZY mode — maximum multi-agent orchestration. Claude orchestrates, Codex deep-codes, Gemini designs. Anti-hallucination + error-loop prevention."
-allowed-tools: Read, Write, Edit, MultiEdit, Bash, Grep, Glob, Task
-argument-hint: "[task description]"
----
-
-# /OMG:crazy — All-Agent Maximum Orchestration
-
-## Phase 1: Intent Classification (BEFORE acting)
-
-STOP. Before doing ANYTHING, say out loud:
-"I understand you want me to [INTENT]: [specific goal]."
-
-| Signal | Intent | Action |
-|--------|--------|--------|
-| fix/bug/error | **FIX** | Debug → patch source → verify |
-| build/create/add | **IMPLEMENT** | Plan → code → test |
-| refactor/clean | **REFACTOR** | Preserve behavior, verify before+after |
-| review/check | **REVIEW** | Read ALL → report → don't change |
-
-If the user hasn't confirmed, ASK. Don't assume.
-
-## Phase 1.5: Brainstorm Merge (AUTOMATIC)
-
-CRAZY mode now includes brainstorming by default. Do not run a separate brainstorm command.
-
-- Generate 2-3 viable approaches quickly
-- Compare trade-offs (risk, effort, reversibility)
-- Pick one approach and proceed immediately
-
-## Phase 2: Agent Dispatch (Parallel Sub-Agent Required)
-
-CRAZY mode must use parallel sub-agent dispatch for worker tracks.
-
-### Mandatory parallel launch pattern
-
-```python
-task(subagent_type="explore", run_in_background=true, load_skills=[], description="Architect track", prompt="...")
-task(subagent_type="explore", run_in_background=true, load_skills=[], description="Backend track", prompt="...")
-task(subagent_type="explore", run_in_background=true, load_skills=[], description="Frontend track", prompt="...")
-task(subagent_type="explore", run_in_background=true, load_skills=[], description="Security track", prompt="...")
-task(subagent_type="explore", run_in_background=true, load_skills=[], description="Verification track", prompt="...")
-```
-
-Then:
-- collect each task with `background_output(task_id="...")`
-- run a `sequential-thinking` synthesis pass to merge contradictions and produce one dependency-ordered checklist
-- only then start implementation
-
-### Claude (You — Orchestrator)
-- Break task into parallel subtasks
-- Delegate to specialists
-- Synthesize results
-- Make architecture decisions
-- Run a sequential-thinking merge before implementation
-
-### Codex — Deep Worker + Code Reviewer
-**Codex=deep-code: backend logic, security, debugging, algorithms, performance, root cause analysis**
-Use for: complex multi-file changes, security audits, root cause analysis, backend architecture
-```
-/OMG:escalate codex "
-Task: [specific implementation task]
-Context: [file paths, patterns to follow]
-Verify: [how to confirm correctness]
-"
-```
-
-### Mandatory Post-Plan Codex Validation
-After any planning step inside CRAZY mode, run a Codex validation pass before implementation:
-
-```bash
-/OMG:escalate codex "Validate this plan for gaps, ordering risks, hidden edge cases, and missing verification. Return only actionable corrections."
-```
-
-### Gemini — UI/UX + Visual Design
-**Gemini=UI/UX: frontend, visual, accessibility, responsive design, CSS, component styling**
-Use for: frontend components, styling, visual review, accessibility, responsive layouts
-```
-/OMG:escalate gemini "
-Task: [UI/design task]
-Context: [component paths, design system]
-"
-```
-
-## Phase 3: Anti-Hallucination Protocol
-
-After EVERY implementation step:
-1. **Run it** — show build/test output with exit code
-2. **Never claim "looks correct"** — evidence or it didn't happen
-3. **Never edit tests to match bugs** — fix the SOURCE code
-4. **Never change only configs/scripts** — verify source files changed
-
-## Phase 4: Error Loop Prevention
-
-```
-IF same_error >= 3:
-    STOP. Do not retry.
-    OPTIONS:
-    1. /OMG:escalate codex "debug: [error] in [file]"
-    2. Completely different approach
-    3. Ask user for guidance
-    NEVER retry the same thing a 4th time.
-```
-
-## Phase 5: Completion Gate
-
-Don't stop until ALL verified:
-- [ ] Changes compile/build (exit 0)
-- [ ] Tests pass (exit 0)
-- [ ] Security check on auth/payment/database code
-- [ ] No TODO/FIXME left in new code
-- [ ] Diff is surgical (minimal, no unnecessary changes)
-
-## Phase 6: Report
-```
-CRAZY Mode — Complete
-━━━━━━━━━━━━━━━━━━━━
-Intent: [what was requested]
-Result: [what was delivered]
-Claude: [orchestration decisions]
-Codex: [deep work done]
-Gemini: [visual work done]
-Verified: [build ✅ | test ✅ | lint ✅]
-Files: [N files, M lines changed]
-```

package/build/lib/commands/OMG:create-agent.md

@@ -1,183 +0,0 @@
----
-description: "Wizard command for creating new custom agents in ~/.omg/agents/ or .omg/agents/."
-allowed-tools: Read, Write, Edit, Bash
-argument-hint: "[agent-name]"
----
-
-# /OMG:create-agent — Custom Agent Creation Wizard
-
-Create a custom agent for your project or user-level configuration.
-
-## Prerequisites
-
-Enable the custom agents feature:
-
-```bash
-export OMG_CUSTOM_AGENTS_ENABLED=1
-```
-
-Or add to your project's `settings.json`:
-
-```json
-{
-  "_omg": {
-    "features": {
-      "CUSTOM_AGENTS": true
-    }
-  }
-}
-```
-
-## Agent Locations
-
-- **User-level**: `~/.omg/agents/<name>.md` — available in all projects
-- **Project-level**: `.omg/agents/<name>.md` — available in this project only
-
-Project-level agents override user-level agents with the same name.
-
-## Quick Start
-
-1. Create the agents directory:
-
-```bash
-# For project-level agents:
-mkdir -p .omg/agents
-
-# For user-level agents:
-mkdir -p ~/.omg/agents
-```
-
-2. Create your agent file (e.g., `.omg/agents/my-agent.md`):
-
-```markdown
----
-name: my-agent
-description: Brief description of what this agent does
-model: claude-sonnet-4-5
-tools: Read, Grep, Glob, Edit, Write
-bundled: false
----
-
-# Agent: My Agent
-
-## Role
-
-Describe the agent's primary role and responsibilities here.
-This should be a clear, concise statement of what the agent does.
-
-## Model
-
-`default` (claude-sonnet-4-5) — general-purpose model for this agent.
-
-Available roles: `smol` (haiku, fast), `default` (sonnet), `slow` (opus, deep reasoning).
-
-## Capabilities
-
-- List specific capabilities here
-- What tools does this agent use?
-- What domains does it specialize in?
-
-## Instructions
-
-Detailed behavioral instructions for the agent.
-
-**Core rules:**
-- Rule 1
-- Rule 2
-- Rule 3
-
-**Strategy:**
-1. Step 1
-2. Step 2
-3. Step 3
-
-## Example Prompts
-
-- "Example prompt 1"
-- "Example prompt 2"
-- "Example prompt 3"
-```
-
-## Required Sections
-
-Your agent **must** include these sections to pass validation:
-
-| Section | Required | Description |
-|---------|----------|-------------|
-| `# Agent: <name>` | ✅ Yes | Agent header with name |
-| `## Role` | ✅ Yes | Primary role description |
-| `## Model` | Optional | Model preference (smol/default/slow) |
-| `## Capabilities` | Optional | List of capabilities |
-| `## Instructions` | Optional | Behavioral instructions |
-
-## Validation
-
-Custom agents are validated on load. Invalid agents (missing required sections) are skipped with warnings.
-
-To verify your agent is valid:
-
-```bash
-export OMG_CUSTOM_AGENTS_ENABLED=1
-python3 -c "
-from runtime.custom_agent_loader import load_custom_agents
-agents = load_custom_agents('.')
-for a in agents:
-    status = '✅' if a['validated'] else '❌'
-    print(f\"{status} {a['name']} ({a['level']}) — {a['description'][:60]}\")
-    if a.get('issues'):
-        for issue in a['issues']:
-            print(f\"   ⚠️  {issue}\")
-"
-```
-
-## Examples
-
-### Minimal Valid Agent
-
-```markdown
-# Agent: Greeter
-
-## Role
-
-Simple greeting agent that welcomes users.
-```
-
-### Full Agent with All Sections
-
-See the template in Quick Start above.
-
-### Specialized Domain Agent
-
-```markdown
-# Agent: Data Pipeline
-
-## Role
-
-ETL pipeline specialist. Designs and optimizes data transformation workflows.
-
-## Model
-
-`slow` (claude-opus-4-5) — deep reasoning for complex pipeline design.
-
-## Capabilities
-
-- Design ETL pipelines with error handling and retry logic
-- Optimize SQL queries for large datasets
-- Schema migration planning
-- Data quality validation rules
-
-## Instructions
-
-You are a data engineering specialist.
-
-**Core rules:**
-- Always consider idempotency in pipeline design
-- Prefer incremental processing over full reloads
-- Include monitoring and alerting in every pipeline
-
-**Strategy:**
-1. Understand the data sources and sinks
-2. Design the transformation logic
-3. Add error handling and retry mechanisms
-4. Plan for monitoring and observability
-```

package/build/lib/commands/OMG:deep-plan.md

@@ -1,18 +0,0 @@
----
-description: "Strategic planning via the canonical plan-council bundle."
-allowed-tools: Read, Grep, Glob
-argument-hint: "<planning goal or feature to plan>"
----
-
-# /OMG:deep-plan
-
-`/OMG:deep-plan` is a compatibility path to the canonical `plan-council` bundle.
-
-Users invoke `/OMG:deep-plan`; the runtime routes to `plan-council` for execution.
-For the full behavior specification, see `plugins/advanced/commands/OMG:deep-plan.md`.
-
-## Compatibility Notes
-
-- This alias exists so users can invoke deep-plan workflows from the root command surface.
-- Runtime behavior resolves to the `plan-council` bundle — same structured deliberation, same artifacts.
-- OMG uses the `plan-council` bundle for canonical planning, dissent, and evidence workflows.

package/build/lib/commands/OMG:deps.md

@@ -1,248 +0,0 @@
----
-description: "Scan project dependencies for CVEs, license issues, and outdated packages."
-allowed-tools: Read, Bash(python*:*), Grep
-argument-hint: "[cves|licenses|outdated]"
----
-
-# /OMG:deps — Dependency Health
-
-Scan project dependencies for CVEs, license compatibility issues, and outdated packages.
-
-## Usage
-
-```
-/OMG:deps
-/OMG:deps cves
-/OMG:deps licenses
-/OMG:deps outdated
-```
-
-## Sub-Commands
-
-### `/OMG:deps` (default)
-
-Full dependency health report combining CVE scan, license check, and outdated package detection.
-
-Detects manifest files (package.json, requirements.txt, Cargo.toml, go.mod, Gemfile, pyproject.toml), then runs all three checks and prints a unified summary.
-
-```python
-from plugins.dephealth.manifest_detector import detect_manifests
-from plugins.dephealth.cve_scanner import scan_for_cves
-from plugins.dephealth.license_checker import check_license_compatibility
-from plugins.dephealth.vuln_analyzer import analyze_reachability
-
-deps = detect_manifests(".")
-dep_dicts = [{"name": p.name, "version": p.version, "ecosystem": p.ecosystem} for p in deps.packages]
-
-# CVE scan
-cve_result = scan_for_cves(dep_dicts, ".")
-reachability = analyze_reachability(cve_result, ".")
-
-# License check
-license_result = check_license_compatibility(dep_dicts, ".")
-
-# Summary
-print(f"Manifests:     {len(deps.manifests)} detected")
-print(f"Packages:      {len(deps.packages)} total")
-print(f"CVEs found:    {cve_result.get('total_vulns', 0)}")
-print(f"  Critical:    {cve_result.get('by_severity', {}).get('CRITICAL', 0)}")
-print(f"  High:        {cve_result.get('by_severity', {}).get('HIGH', 0)}")
-print(f"Reachable:     {sum(1 for v in reachability.get('results', []) if v.get('reachability') == 'direct')}")
-print(f"License issues: {license_result.get('issue_count', 0)}")
-```
-
-### `/OMG:deps cves`
-
-CVE scan results only. Queries the OSV batch API for known vulnerabilities in project dependencies.
-
-Results include severity classification (CRITICAL/HIGH/MODERATE/LOW) and reachability analysis showing whether vulnerable code paths are actually imported.
-
-```python
-from plugins.dephealth.manifest_detector import detect_manifests
-from plugins.dephealth.cve_scanner import scan_for_cves
-from plugins.dephealth.vuln_analyzer import analyze_reachability
-
-deps = detect_manifests(".")
-dep_dicts = [{"name": p.name, "version": p.version, "ecosystem": p.ecosystem} for p in deps.packages]
-
-cve_result = scan_for_cves(dep_dicts, ".")
-reachability = analyze_reachability(cve_result, ".")
-
-print(f"Packages scanned: {len(dep_dicts)}")
-print(f"Vulnerabilities:  {cve_result.get('total_vulns', 0)}")
-print()
-
-for vuln in cve_result.get("vulnerabilities", []):
-    reach = next((r for r in reachability.get("results", []) if r.get("cve_id") == vuln.get("id")), {})
-    reach_label = reach.get("reachability", "unknown")
-    risk = reach.get("risk", "unknown")
-    print(f"  [{vuln.get('severity', 'UNKNOWN')}] {vuln.get('id')}")
-    print(f"    Package:      {vuln.get('package')}")
-    print(f"    Fixed in:     {vuln.get('fixed_version', 'N/A')}")
-    print(f"    Reachability: {reach_label}")
-    print(f"    Risk:         {risk}")
-    if reach.get("recommendation"):
-        print(f"    Action:       {reach['recommendation']}")
-    print()
-```
-
-### `/OMG:deps licenses`
-
-License compatibility report only. Checks each dependency's license against a tiered compatibility model.
-
-Tiers: permissive (MIT, Apache-2.0, BSD) > weak-copyleft (LGPL, MPL) > copyleft (GPL, AGPL). Flags packages with copyleft or unknown licenses.
-
-```python
-from plugins.dephealth.manifest_detector import detect_manifests
-from plugins.dephealth.license_checker import check_license_compatibility
-
-deps = detect_manifests(".")
-dep_dicts = [{"name": p.name, "version": p.version, "ecosystem": p.ecosystem} for p in deps.packages]
-
-result = check_license_compatibility(dep_dicts, ".")
-
-print(f"Packages checked: {len(dep_dicts)}")
-print(f"License issues:   {result.get('issue_count', 0)}")
-print()
-
-for pkg in result.get("packages", []):
-    tier = pkg.get("tier", "unknown")
-    marker = "!!" if tier in ("copyleft", "unknown") else "  "
-    print(f"  {marker} {pkg.get('name')}: {pkg.get('license', 'UNKNOWN')} ({tier})")
-
-if result.get("issues"):
-    print()
-    print("Issues:")
-    for issue in result["issues"]:
-        print(f"  - {issue}")
-```
-
-### `/OMG:deps outdated`
-
-List packages with newer versions available. Compares locked versions against latest published versions.
-
-```python
-from plugins.dephealth.manifest_detector import detect_manifests
-
-deps = detect_manifests(".")
-
-print(f"Manifests: {len(deps.manifests)}")
-print(f"Packages:  {len(deps.packages)}")
-print()
-
-print(f"{'Package':<40} {'Current':>12} {'Ecosystem':<12}")
-print("-" * 66)
-for pkg in deps.packages:
-    version = pkg.version or "unpinned"
-    print(f"  {pkg.name:<38} {version:>12} {pkg.ecosystem:<12}")
-
-print()
-print("Note: Outdated detection requires network access to registry APIs.")
-print("Packages listed above are from detected manifests.")
-```
-
-## Feature Flag
-
-- **Flag name**: `OMG_DEP_HEALTH_ENABLED`
-- **Default**: `False` (disabled)
-- **Enable**: `export OMG_DEP_HEALTH_ENABLED=1`
-
-Or set in `settings.json`:
-
-```json
-{
-  "_omg": {
-    "features": {
-      "DEP_HEALTH": true
-    }
-  }
-}
-```
-
-## Output Example
-
-```
-============================================================
-  OMG Dependency Health Report
-============================================================
-
-  Manifests:      3 detected
-    - package.json (npm)
-    - requirements.txt (pip)
-    - pyproject.toml (pip)
-
-  Packages:       87 total
-
-  CVEs found:     4
-    Critical:     1
-    High:         2
-    Moderate:     1
-    Low:          0
-
-  Reachable:      2 of 4 (direct import detected)
-
-  License issues: 1
-    !! node-ipc: UNKNOWN (unknown)
-
-============================================================
-
-  [CRITICAL] GHSA-xxxx-yyyy-zzzz
-    Package:      lodash@4.17.20
-    Fixed in:     4.17.21
-    Reachability: direct
-    Risk:         high
-    Action:       Upgrade lodash to >=4.17.21
-
-  [HIGH] GHSA-aaaa-bbbb-cccc
-    Package:      requests@2.25.0
-    Fixed in:     2.31.0
-    Reachability: transitive
-    Risk:         medium
-    Action:       Upgrade requests to >=2.31.0
-
-============================================================
-```
-
-## Supported Manifests
-
-| Manifest | Ecosystem | Parser |
-|----------|-----------|--------|
-| `package.json` | npm | JSON dependencies + devDependencies |
-| `requirements.txt` | pip | PEP 508 lines |
-| `pyproject.toml` | pip | `[project.dependencies]` + `[tool.poetry.dependencies]` |
-| `Cargo.toml` | crates.io | `[dependencies]` + `[dev-dependencies]` |
-| `go.mod` | Go | `require` directives |
-| `Gemfile` | RubyGems | `gem` declarations |
-
-## Safety
-
-- **Read-only**: All sub-commands only read manifest files and query external APIs
-- **Feature-gated**: Requires `DEP_HEALTH` flag enabled
-- **No mutations**: Never modifies dependency files, lock files, or project code
-- **Crash-isolated**: All operations exit 0 on failure (graceful error handling)
-- **Cache**: CVE scan results cached to `.omg/state/dephealth/cve-cache.json` (1-hour TTL)
-- **Network**: `/deps cves` requires internet access for OSV API queries
-
-## API
-
-```python
-from plugins.dephealth.manifest_detector import detect_manifests, DependencyList
-from plugins.dephealth.cve_scanner import scan_for_cves
-from plugins.dephealth.license_checker import check_license_compatibility
-from plugins.dephealth.vuln_analyzer import analyze_reachability
-
-# Detect all manifest files and parse dependencies
-deps: DependencyList = detect_manifests(".")
-
-# Convert to dicts for scanner/checker APIs
-dep_dicts = [{"name": p.name, "version": p.version, "ecosystem": p.ecosystem} for p in deps.packages]
-
-# CVE scan via OSV batch API
-cve_result = scan_for_cves(dep_dicts, ".")
-
-# Reachability analysis (import tracing)
-reachability = analyze_reachability(cve_result, ".")
-
-# License compatibility check
-license_result = check_license_compatibility(dep_dicts, ".")
-```

package/build/lib/commands/OMG:diagnose-plugins.md

@@ -1,33 +0,0 @@
----
-description: Diagnose plugin interoperability and conflict status across OMG-supported hosts
-allowed-tools: Bash(python3:*), Read, Grep, Glob
----
-
-# /OMG:diagnose-plugins
-
-Run `python3 scripts/omg.py diagnose-plugins --format json` and report the diagnostics result.
-
-## Output Schema
-
-- `schema`: `PluginDiagnosticsResult`
-- `status`: `ok` | `warn` | `error`
-- `records`: discovered plugin records
-- `conflicts`: classified conflict entries
-- `approval_states`: plugin approval states by plugin id
-- `summary`: totals for records, conflicts, and severity buckets
-- `next_actions`: top recommended remediations
-- `elapsed_ms`: total diagnostic runtime
-
-## Commands
-
-```
-python3 scripts/omg.py diagnose-plugins --format json
-python3 scripts/omg.py diagnose-plugins --format text
-python3 scripts/omg.py diagnose-plugins approve --source mcp:filesystem --host claude --reason "trusted" --format json
-```
-
-## Notes
-
-- Base diagnostics command is read-only.
-- Static mode is default; live probing must be explicit via `--live`.
-- `approve` currently returns a pending stub response.

package/build/lib/commands/OMG:doctor.md

@@ -1,37 +0,0 @@
----
-description: Canonical install and runtime verification for OMG
-allowed-tools: Bash(python3:*), Read, Grep, Glob
----
-
-# /OMG:doctor
-
-Run `python3 scripts/omg.py doctor --format json` and report results.
-
-## Required Checks
-
-1. **python_version**: Python >= 3.10 installed and active.
-2. **fastmcp**: `fastmcp` package importable (needed for MCP server).
-3. **omg_control_reachable**: `.mcp.json` contains `omg-control` with stdio transport.
-4. **policy_files**: `commands/` directory or `.omg/policy.yaml` exists.
-5. **metadata_drift**: All public version surfaces match `CANONICAL_VERSION`.
-
-## Optional Checks
-
-6. **compiled_bundles**: `dist/` contains compiled channel bundles.
-7. **host_compatibility**: Host config directory (e.g. `~/.claude`) exists.
-8. **memory_reachable**: HTTP `omg-memory` configured (never required).
-9. **managed_runtime**: Managed venv at `$CLAUDE_DIR/omg-runtime/.venv` exists.
-
-## Output
-
-Each check reports `name`, `status` (`ok` | `blocker` | `warning`), and `message`.
-
-Exit code 0 when all **required** checks pass. Non-zero otherwise.
-
-```
-python3 scripts/omg.py doctor --format json
-```
-
-## Legacy Compat
-
-`omg compat run --skill omg-doctor` routes to the same engine.

package/build/lib/commands/OMG:domain-init.md

@@ -1,11 +0,0 @@
----
-description: "Alias for /OMG:init [domain-name]. Use /OMG:init instead."
-allowed-tools: Read, Write, Edit, MultiEdit, Bash(mkdir:*), Bash(cat:*), Bash(find:*), Bash(ls:*), Bash(head:*), Bash(grep:*), Bash(tree:*), Bash(node:*), Bash(python*:*), Bash(tee:*), Grep, Glob
-argument-hint: "[domain name, e.g. 'payment' or 'user-profile']"
----
-
-# /OMG:domain-init → Redirects to /OMG:init [domain]
-
-This command is now part of `/OMG:init`. Execute `/OMG:init [domain-name]` (domain scaffolding mode).
-
-Follow the **MODE B: DOMAIN INIT** instructions in /OMG:init.