@trac3er/oh-my-god 2.2.3 → 2.3.0

package/build/lib/commands/OMG:theme.md

@@ -1,44 +0,0 @@
----
-description: "Interactive theme selection, preview, and auto-detection."
-usage: "/OMG:theme [--list|--set <name>|--preview <name>|--auto]"
----
-
-# /OMG:theme — Theme Selector
-
-Interactive theme selection, preview, and auto-detection for OMG.
-
-## Usage
-
-```
-/OMG:theme --list
-/OMG:theme --preview catppuccin-mocha
-/OMG:theme --set catppuccin-mocha
-/OMG:theme --auto
-```
-
-## What It Does
-
-1. `--list`: Returns a sorted list of available theme names.
-2. `--preview <name>`: Returns preview info `{name, colors, ansi_preview: str}` without applying.
-3. `--set <name>`: Applies and persists the theme, returns `{success, theme, applied_at}`.
-4. `--auto`: Detects dark/light mode and returns appropriate default theme name.
-
-## Feature Flag
-
-Themes are gated behind `OMG_THEMES_ENABLED` (default: `False`).
-
-Enable via environment variable:
-```bash
-export OMG_THEMES_ENABLED=true
-```
-
-Or in `settings.json`:
-```json
-{
-  "_omg": {
-    "features": {
-      "THEMES": true
-    }
-  }
-}
-```

package/build/lib/commands/OMG:validate.md

@@ -1,59 +0,0 @@
----
-description: Canonical validation — doctor + contract + profile + install checks
-allowed-tools: Bash(python3:*), Bash(ls:*), Bash(cat:*), Bash(grep:*), Bash(git:*), Read, Grep, Glob
----
-
-# /OMG:validate
-
-Run the canonical OMG validation engine that composes all verification surfaces:
-
-1. **Doctor checks**: Python version, fastmcp, omg-control, policy files, metadata drift, compiled bundles, host compatibility, memory, managed runtime
-2. **Contract registry**: Validates contract doc, schema, and bundle integrity
-3. **Profile governor**: Verifies governed preferences structure and pending confirmations
-4. **Install integrity**: Confirms scripts, runtime, commands, and plugins directories exist
-
-## Usage
-
-```bash
-# Human-readable output (default)
-python3 scripts/omg.py validate
-
-# Machine-readable JSON
-python3 scripts/omg.py validate --format json
-```
-
-## Output Schema (JSON)
-
-```json
-{
-  "schema": "ValidateResult",
-  "status": "pass" | "fail",
-  "checks": [
-    {
-      "name": "check_name",
-      "status": "ok" | "blocker" | "warning",
-      "message": "human-readable description",
-      "required": true | false
-    }
-  ],
-  "version": "2.2.3"
-}
-```
-
-## Exit Codes
-
-- `0` — all required checks pass
-- `1` — one or more blockers detected
-
-## Report Format (text)
-
-```
-   PASS python_version: Python 3.12.0
-   PASS fastmcp: fastmcp importable
-BLOCKER omg_control_reachable: omg-control not found in .mcp.json
-   PASS contract_registry: contract registry valid (0 errors)
-   PASS profile_governor: profile governor ok (2 style, 1 safety) (optional)
-   PASS install_integrity: install integrity ok
-
-PASS [5] | WARN [0] | BLOCKER [1]
-```

package/build/lib/commands/__init__.py

@@ -1 +0,0 @@
-"""OMG command package marker for packaging parity."""

package/build/lib/control_plane/__init__.py

@@ -1,2 +0,0 @@
-"""Control plane package for OMG v1."""
-

package/build/lib/control_plane/openapi.yaml

@@ -1,277 +0,0 @@
-openapi: 3.1.0
-info:
-  title: OMG Control Plane API
-  version: 2.0.8
-  description: Policy/trust/evidence/runtime/registry/lab endpoints for OMG v2, with deprecated v1 aliases for one release.
-servers:
-  - url: https://api.omg.local
-paths:
-  /v2/policy/evaluate:
-    post:
-      summary: Evaluate policy decision
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/PolicyInput'
-      responses:
-        '200':
-          description: Decision result
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/PolicyDecision'
-  /v1/policy/evaluate:
-    post:
-      deprecated: true
-      summary: Deprecated alias of /v2/policy/evaluate
-      responses:
-        '200':
-          description: Decision result
-  /v2/vision/jobs:
-    post:
-      summary: Submit a vision analysis job
-      responses:
-        '202':
-          description: Accepted
-        '400':
-          description: Invalid vision payload
-  /v1/vision/jobs:
-    post:
-      deprecated: true
-      summary: Deprecated alias of /v2/vision/jobs
-      responses:
-        '202':
-          description: Accepted
-        '400':
-          description: Invalid vision payload
-  /v2/trust/review:
-    post:
-      summary: Review trust-sensitive config changes
-      responses:
-        '200':
-          description: Trust review report
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/TrustReview'
-  /v1/trust/review:
-    post:
-      deprecated: true
-      summary: Deprecated alias of /v2/trust/review
-      responses:
-        '200':
-          description: Trust review report
-  /v2/evidence/ingest:
-    post:
-      summary: Ingest evidence pack
-      responses:
-        '202':
-          description: Accepted
-  /v1/evidence/ingest:
-    post:
-      deprecated: true
-      summary: Deprecated alias of /v2/evidence/ingest
-      responses:
-        '202':
-          description: Accepted
-  /v2/security/check:
-    post:
-      summary: Run canonical OMG security check
-      requestBody:
-        required: false
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/SecurityCheckInput'
-      responses:
-        '200':
-          description: Security check result
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/SecurityCheckResult'
-  /v1/security/check:
-    post:
-      deprecated: true
-      summary: Deprecated alias of /v2/security/check
-      responses:
-        '200':
-          description: Security check result
-  /v2/guide/assert:
-    post:
-      summary: Assert output against explicit project rules
-      responses:
-        '200':
-          description: Guide assertion result
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/GuideAssertionResult'
-  /v1/guide/assert:
-    post:
-      deprecated: true
-      summary: Deprecated alias of /v2/guide/assert
-      responses:
-        '200':
-          description: Guide assertion result
-  /v2/runtime/dispatch:
-    post:
-      summary: Dispatch job to runtime adapter
-      responses:
-        '200':
-          description: Runtime dispatch result
-  /v1/runtime/dispatch:
-    post:
-      deprecated: true
-      summary: Deprecated alias of /v2/runtime/dispatch
-      responses:
-        '200':
-          description: Runtime dispatch result
-  /v2/registry/verify:
-    post:
-      summary: Verify supply-chain artifact
-      responses:
-        '200':
-          description: Verification decision
-  /v1/registry/verify:
-    post:
-      deprecated: true
-      summary: Deprecated alias of /v2/registry/verify
-      responses:
-        '200':
-          description: Verification decision
-  /v2/lab/jobs:
-    post:
-      summary: Create lab pipeline job
-      responses:
-        '201':
-          description: Created
-  /v1/lab/jobs:
-    post:
-      deprecated: true
-      summary: Deprecated alias of /v2/lab/jobs
-      responses:
-        '201':
-          description: Created
-  /v2/scoreboard/baseline:
-    get:
-      summary: Return baseline scorecard
-      responses:
-        '200':
-          description: KPI baseline snapshot
-  /v1/scoreboard/baseline:
-    get:
-      deprecated: true
-      summary: Deprecated alias of /v2/scoreboard/baseline
-      responses:
-        '200':
-          description: KPI baseline snapshot
-components:
-  schemas:
-    PolicyInput:
-      type: object
-      properties:
-        tool:
-          type: string
-        input:
-          type: object
-      additionalProperties: true
-    PolicyDecision:
-      type: object
-      required: [action, risk_level, reason, controls]
-      properties:
-        action:
-          type: string
-          enum: [allow, ask, deny]
-        risk_level:
-          type: string
-          enum: [low, med, high, critical]
-        reason:
-          type: string
-        controls:
-          type: array
-          items:
-            type: string
-    TrustReview:
-      type: object
-      required: [changed_files, mcp_changes, hook_changes, env_changes, risk_score, verdict]
-      properties:
-        changed_files:
-          type: array
-          items: { type: string }
-        mcp_changes:
-          type: array
-          items: { type: object }
-        hook_changes:
-          type: object
-        env_changes:
-          type: array
-          items: { type: object }
-        risk_score:
-          type: integer
-        verdict:
-          type: string
-    SecurityCheckInput:
-      type: object
-      properties:
-        scope:
-          type: string
-          default: "."
-          description: Directory scope to scan
-        include_live_enrichment:
-          type: boolean
-          default: false
-          description: Whether to include live enrichment data
-        external_inputs:
-          type: array
-          nullable: true
-          items:
-            type: object
-          description: External input sources to include in provenance
-        waivers:
-          type: array
-          nullable: true
-          items:
-            oneOf:
-              - type: string
-              - type: object
-          description: Finding identifiers or waiver objects to suppress matched findings
-      additionalProperties: false
-    SecurityCheckResult:
-      type: object
-      required: [schema, status, scope, findings, summary, provenance, trust_scores]
-      properties:
-        schema:
-          type: string
-        status:
-          type: string
-        scope:
-          type: string
-        findings:
-          type: array
-          items:
-            type: object
-        summary:
-          type: object
-        provenance:
-          type: array
-          items:
-            type: object
-        trust_scores:
-          type: object
-    GuideAssertionResult:
-      type: object
-      required: [schema, verdict, violations, summary]
-      properties:
-        schema:
-          type: string
-        verdict:
-          type: string
-        violations:
-          type: array
-          items:
-            type: object
-        summary:
-          type: object

package/build/lib/control_plane/server.py

@@ -1,155 +0,0 @@
-"""Lightweight HTTP server for OMG control-plane APIs."""
-from __future__ import annotations
-
-import argparse
-import sys
-from http.server import BaseHTTPRequestHandler, HTTPServer
-import json
-from typing import Any
-
-from control_plane.service import ControlPlaneService
-
-
-def _json_response(handler: BaseHTTPRequestHandler, status: int, payload: dict[str, Any]) -> None:
-    body = json.dumps(payload, ensure_ascii=True).encode("utf-8")
-    handler.send_response(status)
-    handler.send_header("Content-Type", "application/json")
-    handler.send_header("Content-Length", str(len(body)))
-    handler.end_headers()
-    handler.wfile.write(body)
-
-
-def _read_json(handler: BaseHTTPRequestHandler) -> dict[str, Any]:
-    length = int(handler.headers.get("Content-Length", "0"))
-    if length <= 0:
-        return {}
-    raw = handler.rfile.read(length)
-    if not raw:
-        return {}
-    try:
-        parsed = json.loads(raw.decode("utf-8"))
-        return parsed if isinstance(parsed, dict) else {}
-    except json.JSONDecodeError:
-        return {}
-
-
-_POST_ROUTE_TABLE = {
-    "/v2/policy/evaluate": ("policy_evaluate", False),
-    "/v1/policy/evaluate": ("policy_evaluate", True),
-    "/v2/vision/jobs": ("vision_jobs", False),
-    "/v1/vision/jobs": ("vision_jobs", True),
-    "/v2/trust/review": ("trust_review", False),
-    "/v1/trust/review": ("trust_review", True),
-    "/v2/evidence/ingest": ("evidence_ingest", False),
-    "/v1/evidence/ingest": ("evidence_ingest", True),
-    "/v2/security/check": ("security_check", False),
-    "/v1/security/check": ("security_check", True),
-    "/v2/guide/assert": ("guide_assert", False),
-    "/v1/guide/assert": ("guide_assert", True),
-    "/v2/runtime/dispatch": ("runtime_dispatch", False),
-    "/v1/runtime/dispatch": ("runtime_dispatch", True),
-    "/v2/registry/verify": ("registry_verify", False),
-    "/v1/registry/verify": ("registry_verify", True),
-    "/v2/lab/jobs": ("lab_jobs", False),
-    "/v1/lab/jobs": ("lab_jobs", True),
-    "/v2/trust/claim-judge": ("claim_judge", False),
-    "/v1/trust/claim-judge": ("claim_judge", True),
-    "/v2/trust/test-intent-lock": ("test_intent_lock", False),
-    "/v1/trust/test-intent-lock": ("test_intent_lock", True),
-    "/v2/trust/mutation-gate": ("mutation_gate_check", False),
-    "/v1/trust/mutation-gate": ("mutation_gate_check", True),
-}
-
-_GET_ROUTE_TABLE = {
-    "/v2/scoreboard/baseline": ("scoreboard_baseline", False),
-    "/v1/scoreboard/baseline": ("scoreboard_baseline", True),
-}
-
-
-def _decorate_payload(payload: dict[str, Any], *, deprecated: bool) -> dict[str, Any]:
-    decorated = dict(payload)
-    decorated["api_version"] = "v2"
-    if deprecated:
-        decorated["deprecated"] = True
-        decorated["deprecated_alias"] = "v1"
-    return decorated
-
-
-def make_handler(service: ControlPlaneService):
-    class Handler(BaseHTTPRequestHandler):
-        def do_GET(self) -> None:  # noqa: N802
-            route = _GET_ROUTE_TABLE.get(self.path)
-            if route is not None:
-                method_name, deprecated = route
-                status, payload = getattr(service, method_name)()
-                _json_response(self, status, _decorate_payload(payload, deprecated=deprecated))
-                return
-            _json_response(self, 404, {"status": "error", "message": "Not found"})
-
-        def do_POST(self) -> None:  # noqa: N802
-            payload = _read_json(self)
-            route = _POST_ROUTE_TABLE.get(self.path)
-            if route is not None:
-                method_name, deprecated = route
-                status, out = getattr(service, method_name)(payload)
-                _json_response(self, status, _decorate_payload(out, deprecated=deprecated))
-                return
-
-            _json_response(self, 404, {"status": "error", "message": "Not found"})
-
-        def log_message(self, format: str, *args: Any) -> None:  # noqa: A003
-            # Quiet default request logs; keep response JSON clean for local usage.
-            return
-
-    return Handler
-
-
-def run_server(host: str = "127.0.0.1", port: int = 8787, project_dir: str | None = None) -> None:
-    service = ControlPlaneService(project_dir=project_dir)
-    handler = make_handler(service)
-    server = HTTPServer((host, port), handler)
-    try:
-        server.serve_forever()
-    finally:
-        server.server_close()
-
-
-_LOOPBACK_HOSTS = frozenset({"127.0.0.1", "localhost", "::1"})
-
-
-def _main() -> int:
-    parser = argparse.ArgumentParser(description="Run OMG control-plane API server")
-    parser.add_argument("--host", default="127.0.0.1")
-    parser.add_argument("--port", type=int, default=8787)
-    parser.add_argument("--project-dir", default=None)
-    parser.add_argument(
-        "--unsafe", action="store_true",
-        help="Allow binding to non-loopback addresses (no auth; use at own risk)",
-    )
-    parser.add_argument(
-        "--dev", action="store_true",
-        help="Development mode — implies --unsafe for non-loopback binding",
-    )
-    args = parser.parse_args()
-
-    if args.host not in _LOOPBACK_HOSTS:
-        if not (args.unsafe or args.dev):
-            print(
-                f"ERROR: Binding to '{args.host}' exposes the control plane to the network.\n"
-                "No authentication is configured. This is blocked by default.\n"
-                "Pass --unsafe or --dev to override.",
-                file=sys.stderr,
-            )
-            return 1
-        print(
-            f"⚠ WARNING: Binding to {args.host} with {'--unsafe' if args.unsafe else '--dev'} flag. "
-            "No authentication is configured.",
-            file=sys.stderr,
-        )
-
-    run_server(args.host, args.port, args.project_dir)
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(_main())