oh-my-customcode 0.47.1 → 0.48.0

package/README.md

@@ -13,7 +13,7 @@
 
 **[한국어 문서 (Korean)](./README_ko.md)**
 
-45 agents. 83 skills. 21 rules. One command.
+45 agents. 84 skills. 21 rules. One command.
 
 ```bash
 npm install -g oh-my-customcode && cd your-project && omcustom init
@@ -138,7 +138,7 @@ Each agent declares its tools, model, memory scope, and limitations in YAML fron
 
 ---
 
-### Skills (83)
+### Skills (84)
 
 | Category | Count | Includes |
 |----------|-------|----------|
@@ -272,7 +272,7 @@ your-project/
 ├── CLAUDE.md                   # Entry point
 ├── .claude/
 │   ├── agents/                 # 45 agent definitions
-│   ├── skills/                 # 83 skill modules
+│   ├── skills/                 # 84 skill modules
 │   ├── rules/                  # 21 governance rules (R000-R021)
 │   ├── hooks/                  # 15 lifecycle hook scripts
 │   ├── schemas/                # Tool input validation schemas

package/dist/cli/index.js

@@ -9323,7 +9323,7 @@ var init_package = __esm(() => {
   package_default = {
     name: "oh-my-customcode",
     workspaces: ["packages/*"],
-    version: "0.47.1",
+    version: "0.48.0",
     description: "Batteries-included agent harness for Claude Code",
     type: "module",
     bin: {
@@ -29784,6 +29784,7 @@ function runForeground(projectRoot, port, buildDirOpts) {
 init_package();
 
 // src/core/updater.ts
+init_package();
 init_fs();
 import { join as join14 } from "node:path";
 
@@ -30093,12 +30094,28 @@ async function runFullUpdatePostProcessing(options, result, config) {
     });
   }
 }
+function compareSemver2(a, b) {
+  const pa = a.split(".").map(Number);
+  const pb = b.split(".").map(Number);
+  for (let i = 0;i < 3; i++) {
+    const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
+    if (diff !== 0)
+      return diff;
+  }
+  return 0;
+}
 async function update(options) {
   const result = createUpdateResult();
   try {
     info("update.start", { targetDir: options.targetDir });
     const config = await loadConfig(options.targetDir);
     result.previousVersion = config.version;
+    const cliVersion = package_default.version;
+    if (result.previousVersion !== "0.0.0" && compareSemver2(result.previousVersion, cliVersion) > 0) {
+      result.success = false;
+      result.error = `Downgrade prevented: project has v${result.previousVersion} but CLI is v${cliVersion}. Update the CLI first: npm install -g oh-my-customcode@latest`;
+      return result;
+    }
     const targetPkgPath = join14(options.targetDir, "package.json");
     if (await fileExists(targetPkgPath)) {
       const targetPkg = await readJsonFile(targetPkgPath);
@@ -30449,8 +30466,8 @@ async function updateAllProjects(options) {
       };
       const result = await update(updateOptions);
       if (result.success) {
-        const from = project.version ?? "unknown";
-        const to = currentVersion;
+        const from = result.previousVersion || project.version || "unknown";
+        const to = result.newVersion || currentVersion;
         console.log(i18n.t("cli.update.allProjectUpdated", { from, to }));
         updatedCount++;
       } else {

package/dist/index.js

@@ -1637,8 +1637,98 @@ async function detectProvider(_options = {}) {
   };
 }
 // src/core/updater.ts
-init_fs();
 import { join as join6 } from "node:path";
+// package.json
+var package_default = {
+  name: "oh-my-customcode",
+  workspaces: ["packages/*"],
+  version: "0.48.0",
+  description: "Batteries-included agent harness for Claude Code",
+  type: "module",
+  bin: {
+    omcustom: "./dist/cli/index.js"
+  },
+  main: "./dist/index.js",
+  types: "./dist/index.d.ts",
+  exports: {
+    ".": {
+      import: "./dist/index.js",
+      types: "./dist/index.d.ts"
+    }
+  },
+  files: [
+    "dist",
+    "templates"
+  ],
+  publishConfig: {
+    access: "public",
+    registry: "https://registry.npmjs.org/"
+  },
+  scripts: {
+    dev: "bun run src/cli/index.ts",
+    build: "bun build src/cli/index.ts --outdir dist/cli --target node && bun build src/index.ts --outdir dist --target node && bun run scripts/sync-source-lockfile.ts",
+    test: "bun test",
+    "test:unit": "bun test tests/unit",
+    "test:integration": "bun test tests/integration",
+    "test:e2e": "bun test tests/e2e",
+    "test:coverage": "bun test --coverage",
+    lint: "biome check src/ tests/ scripts/",
+    "lint:fix": "biome check --write src/ tests/ scripts/",
+    format: "biome format --write src/ tests/ scripts/",
+    typecheck: "tsc --noEmit",
+    "docs:dev": "vitepress dev docs",
+    "docs:build": "vitepress build docs",
+    prepare: "sh scripts/setup-hooks.sh || true",
+    "setup:hooks": "sh scripts/setup-hooks.sh",
+    prepublishOnly: "bun run build && bun run test"
+  },
+  dependencies: {
+    "@clack/prompts": "^1.1.0",
+    "@inquirer/prompts": "^8.3.2",
+    commander: "^14.0.2",
+    i18next: "^25.8.0",
+    yaml: "^2.8.2"
+  },
+  devDependencies: {
+    "@anthropic-ai/sdk": "^0.78.0",
+    "@biomejs/biome": "^2.3.12",
+    "@types/bun": "^1.3.6",
+    "@types/js-yaml": "^4.0.9",
+    "@types/nodemailer": "^7.0.9",
+    "js-yaml": "^4.1.0",
+    nodemailer: "^8.0.1",
+    typescript: "^5.7.3",
+    vitepress: "^1.6.4"
+  },
+  keywords: [
+    "claude",
+    "claude-code",
+    "openai",
+    "ai",
+    "agent",
+    "cli"
+  ],
+  author: "baekenough",
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/baekenough/oh-my-customcode.git"
+  },
+  bugs: {
+    url: "https://github.com/baekenough/oh-my-customcode/issues"
+  },
+  homepage: "https://github.com/baekenough/oh-my-customcode#readme",
+  engines: {
+    node: ">=18.0.0"
+  },
+  overrides: {
+    rollup: "^4.59.0",
+    esbuild: "^0.25.0"
+  }
+};
+
+// src/core/updater.ts
+init_fs();
 
 // src/core/entry-merger.ts
 var MANAGED_START = "<!-- omcustom:start -->";
@@ -1946,12 +2036,28 @@ async function runFullUpdatePostProcessing(options, result, config) {
     });
   }
 }
+function compareSemver(a, b) {
+  const pa = a.split(".").map(Number);
+  const pb = b.split(".").map(Number);
+  for (let i = 0;i < 3; i++) {
+    const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
+    if (diff !== 0)
+      return diff;
+  }
+  return 0;
+}
 async function update(options) {
   const result = createUpdateResult();
   try {
     info("update.start", { targetDir: options.targetDir });
     const config = await loadConfig(options.targetDir);
     result.previousVersion = config.version;
+    const cliVersion = package_default.version;
+    if (result.previousVersion !== "0.0.0" && compareSemver(result.previousVersion, cliVersion) > 0) {
+      result.success = false;
+      result.error = `Downgrade prevented: project has v${result.previousVersion} but CLI is v${cliVersion}. Update the CLI first: npm install -g oh-my-customcode@latest`;
+      return result;
+    }
     const targetPkgPath = join6(options.targetDir, "package.json");
     if (await fileExists(targetPkgPath)) {
       const targetPkg = await readJsonFile(targetPkgPath);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "oh-my-customcode",
   "workspaces": ["packages/*"],
-  "version": "0.47.1",
+  "version": "0.48.0",
   "description": "Batteries-included agent harness for Claude Code",
   "type": "module",
   "bin": {

package/templates/.claude/hooks/hooks.json

@@ -139,7 +139,7 @@
           },
           {
             "type": "command",
-            "command": "count_file=\"/tmp/.claude-loop-count-$PPID\"; if [ -f \"$count_file\" ]; then last_mod=$(stat -f%m \"$count_file\" 2>/dev/null || echo 0); now=$(date +%s); if [ $((now - last_mod)) -gt 60 ]; then echo 0 > \"$count_file\"; fi; fi; count=$(cat \"$count_file\" 2>/dev/null || echo 0); count=$((count + 1)); echo \"$count\" > \"$count_file\"; if [ \"$count\" -ge 4 ]; then echo '[AutoContinue] SAFETY: auto-continue limit (3) reached. Pausing.' >&2; fi; cat"
+            "command": "count_file=\"/tmp/.claude-loop-count-$PPID\"; if [ -f \"$count_file\" ]; then last_mod=$(stat -c%Y \"$count_file\" 2>/dev/null || stat -f%m \"$count_file\" 2>/dev/null || echo 0); now=$(date +%s); if [ $((now - last_mod)) -gt 60 ]; then echo 0 > \"$count_file\"; fi; fi; count=$(cat \"$count_file\" 2>/dev/null || echo 0); count=$((count + 1)); echo \"$count\" > \"$count_file\"; if [ \"$count\" -ge 4 ]; then echo '[AutoContinue] SAFETY: auto-continue limit (3) reached. Pausing.' >&2; fi; cat"
           },
           {
             "type": "prompt",

package/templates/.claude/skills/deep-verify/SKILL.md

@@ -0,0 +1,96 @@
+---
+name: deep-verify
+description: Multi-angle release quality verification using parallel expert review teams
+scope: core
+version: 1.0.0
+user-invocable: true
+effort: high
+---
+
+# /deep-verify — Multi-Angle Release Quality Verification
+
+## Purpose
+
+Performs deep cross-iterative verification of code changes before release, using multiple independent review perspectives to catch issues that single-pass review misses.
+
+## Usage
+
+```
+/deep-verify [branch|PR]
+```
+
+If no argument, verifies current branch against its base (usually `develop`).
+
+## Workflow
+
+### Round 1: Baseline Assessment
+- Gather the full diff (`git diff develop...HEAD`)
+- Run test suite, lint, and type check
+- Collect results as baseline
+
+### Round 2: Parallel Expert Review (4 agents)
+Spawn 4 parallel review agents, each with a different focus:
+
+1. **Correctness Reviewer** — Logic errors, edge cases, off-by-one, null handling
+2. **Security Reviewer** — Injection, auth bypass, data exposure, OWASP top 10
+3. **Performance Reviewer** — O(n^2) loops, unbounded queries, memory leaks, missing indexes
+4. **Integration Reviewer** — API contract breaks, migration safety, cross-module side effects
+
+Each agent receives the full diff and returns findings as structured JSON:
+```json
+{
+  "severity": "HIGH|MEDIUM|LOW",
+  "file": "path/to/file",
+  "line": 42,
+  "finding": "description",
+  "suggestion": "fix suggestion"
+}
+```
+
+### Round 3: Cross-Verification
+- Merge all findings from Round 2
+- Deduplicate (same file+line+similar finding = 1 entry)
+- For each HIGH finding: spawn a verification agent to confirm or dismiss as FALSE POSITIVE
+- Evidence-based: each confirmation must include proof (e.g., `toQuery()` output, test result)
+
+### Round 4: FALSE POSITIVE Filter
+- Remove confirmed false positives with evidence
+- Remaining findings are CONFIRMED issues
+
+### Round 5: Fix Application
+- For each CONFIRMED HIGH/MEDIUM finding: spawn fix agent
+- Run tests after fixes
+- If tests fail: revert fix, report as "needs manual review"
+
+### Round 6: Final Verification
+- Re-run full test suite
+- Re-run lint and type check
+- Generate summary report
+
+## Output Format
+
+```
+╔══════════════════════════════════════════════════════╗
+║  Deep Verification Report                            ║
+╠══════════════════════════════════════════════════════╣
+║  Branch: {branch}                                    ║
+║  Commits: {count}                                    ║
+║  Files changed: {count}                              ║
+╠══════════════════════════════════════════════════════╣
+║  Findings:                                           ║
+║    HIGH:   {n} ({confirmed} confirmed, {fp} FP)      ║
+║    MEDIUM: {n} ({confirmed} confirmed, {fp} FP)      ║
+║    LOW:    {n}                                        ║
+╠══════════════════════════════════════════════════════╣
+║  Fixes Applied: {n}                                  ║
+║  Tests: {pass}/{total} passing                       ║
+║  Verdict: READY / NEEDS REVIEW / BLOCKED             ║
+╚══════════════════════════════════════════════════════╝
+```
+
+## Notes
+
+- Round 2 agents use `model: sonnet` for cost efficiency
+- Round 3 verification agents use `model: opus` for reasoning depth
+- FALSE POSITIVE filtering is critical — previous releases showed 80%+ FP rate on automated review
+- This skill replaces ad-hoc cross-verification with a repeatable process

package/templates/CLAUDE.md

@@ -120,6 +120,7 @@ oh-my-customcode로 구동됩니다.
 | `/optimize-report` | 최적화 리포트 생성 |
 | `/research` | 10-team 병렬 딥 분석 및 교차 검증 |
 | `/deep-plan` | 연구 검증 기반 계획 수립 (research → plan → verify) |
+| `/deep-verify` | 다중 관점 릴리즈 품질 검증 |
 | `/omcustom:sauron-watch` | 전체 R017 검증 |
 | `/structured-dev-cycle` | 6단계 구조적 개발 사이클 (Plan → Verify → Implement → Verify → Compound → Done) |
 | `/omcustom:loop` | 백그라운드 에이전트 자동 계속 실행 |
@@ -134,7 +135,7 @@ project/
 +-- CLAUDE.md                    # 진입점
 +-- .claude/
 |   +-- agents/                  # 서브에이전트 정의 (45 파일)
-|   +-- skills/                  # 스킬 (83 디렉토리)
+|   +-- skills/                  # 스킬 (84 디렉토리)
 |   +-- rules/                   # 전역 규칙 (R000-R021)
 |   +-- hooks/                   # 훅 스크립트 (보안, 검증, HUD)
 |   +-- contexts/                # 컨텍스트 파일 (ecomode)

package/templates/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.47.1",
+  "version": "0.48.0",
   "lastUpdated": "2026-03-16T00:00:00.000Z",
   "components": [
     {
@@ -18,7 +18,7 @@
       "name": "skills",
       "path": ".claude/skills",
       "description": "Reusable skill modules (includes slash commands)",
-      "files": 83
+      "files": 84
     },
     {
       "name": "guides",