oh-my-customcode - npm Package Compare versions

Comparing version 1.1.14 to 1.1.15

package.json

@@ -6,3 +6,3 @@ {
   ],
-  "version": "1.1.14",
+  "version": "1.1.15",
   "description": "Batteries-included agent harness for Claude Code",
@@ -9,0 +9,0 @@ "type": "module",

templates/.claude/agents/mgr-sauron.md

 ---
 name: mgr-sauron
-description: Use when you need automated verification of R017 compliance, executing mandatory multi-round verification (5 manager rounds + 3 deep review rounds) before commits
+description: Use when you need automated verification of R017 compliance, executing mandatory multi-round verification (5 manager rounds + 3 deep review rounds, with rounds 3-4 conditionally skipped when rounds 1-2 return 0 issues) before commits
 model: sonnet
@@ -36,2 +36,3 @@ domain: universal
 11. Generate verification report
+12. Cost-aware verification: skip Round 3-4 re-verification when Round 1-2 found 0 issues; substitute deterministic script results (verify-template-sync.sh, verify-wiki-sync.sh, verify-version-sync.sh, validate-docs.ts) for LLM re-derivation of count/template/wiki checks in Round 5 (R023 shift-left, no loss to verification coverage)
 
@@ -38,0 +39,0 @@ ## Commands

templates/.claude/rules/MUST-agent-design.md

@@ -221,3 +221,3 @@ # [MUST] Agent Design Rules
 
-CC defaults `mode` to `acceptEdits` if not specified — always pass `mode: "bypassPermissions"` explicitly in Agent tool calls (see R010). See guidance details via Read tool.
+> Canonical source for the bypassPermissions requirement: R010 (MUST-orchestrator-coordination.md) "Universal bypassPermissions". CC defaults `mode` to `acceptEdits` if not specified — always pass `mode: "bypassPermissions"` explicitly in Agent tool calls. See R010 for the full requirement, rationale, and self-check.
 
@@ -224,0 +224,0 @@ | Mode | Behavior |

templates/.claude/rules/MUST-agent-identification.md

@@ -50,5 +50,5 @@ # [MUST] Agent Identification Rules
 
+<!-- DETAIL: Common Violations examples (redundant with Skill Invocation Format above)
 ### Common Violations
 
-```
 Incorrect: Skill as separate display
@@ -68,3 +68,3 @@ ┌─ Agent: claude (default)
    └─ Task: aggregate team findings
-```
+-->
 
@@ -90,9 +90,8 @@ ## When to Display
 
+<!-- DETAIL: Common Multi-Turn Violation example (redundant with Short Response Discipline table below)
 ### Common Multi-Turn Violation
 
-```
 턴 1: ┌─ Agent: claude (default) ✓
 턴 2: (헤더 없음, 짧은 답변이라 생략) ✗
 턴 3: 도구 호출 prefix 누락 ✗
-```
 
@@ -102,2 +101,3 @@ 응답 길이/턴 위치 무관. 짧은 답변에도 헤더는 필수.
 Reference issue: #1096.
+-->
 
@@ -125,3 +125,3 @@ ### Short Response Discipline
 
-Reference issues: #1188 item #2, #1198 item #2, #1409.
+<!-- Reference issues: #1188 item #2, #1198 item #2, #1409. -->
 
@@ -140,4 +140,4 @@ ### External-Project / Debugging Session Vigilance
 
-외부 프로젝트 진단 세션(예: #1417 통화녹음 수집 진단)에서 세션 전체에 걸쳐 헤더가 반복 누락되는 재발이 관측되었다 — 진단 몰입 중에도 매 응답 헤더를 고정한다.
-
+<!-- DETAIL: Case history — 외부 프로젝트 진단 세션(예: #1417 통화녹음 수집 진단)에서 세션 전체에 걸쳐 헤더가 반복 누락되는 재발이 관측되었다 — 진단 몰입 중에도 매 응답 헤더를 고정한다.
 Reference issues: #1401, #1417.
+-->

templates/.claude/rules/MUST-orchestrator-coordination.md

@@ -281,2 +281,4 @@ # [MUST] Orchestrator Coordination Rules
 
+> **This section is the canonical single source for the bypassPermissions requirement.** R002 (MUST-permissions.md) and R006 (MUST-agent-design.md) reference this section rather than repeating it.
+
 **ALL Agent tool calls MUST include `mode: "bypassPermissions"`.**
@@ -283,0 +285,0 @@

templates/.claude/rules/MUST-permissions.md

@@ -72,10 +72,2 @@ # [MUST] Permission Rules
 
-When spawning subagents via the Agent tool, always pass `mode: "bypassPermissions"` explicitly. The Agent tool's default mode is `acceptEdits`, which **overrides** the agent frontmatter `permissionMode` field.
-
-| Setting | Effect |
-|---------|--------|
-| Agent frontmatter `permissionMode: bypassPermissions` | Ignored if Agent tool `mode` not set |
-| Agent tool `mode: "bypassPermissions"` | **Required** — actually controls subagent permissions |
-| Agent tool `mode` omitted | Defaults to `acceptEdits` → prompts for Bash, WebFetch |
-
-Skills that spawn agents MUST include `mode: "bypassPermissions"` in their Agent tool call instructions. This applies to all routing skills, pipeline skills, and any skill that delegates work to subagents.
+> Canonical source: R010 (MUST-orchestrator-coordination.md) "Universal bypassPermissions" owns the full requirement, rationale, self-check, and version history. Core rule: always pass `mode: "bypassPermissions"` explicitly on every Agent tool call — the Agent tool's default `mode` (`acceptEdits`) overrides agent frontmatter `permissionMode` and causes prompts during unattended execution. Skills that spawn agents MUST include this in their Agent tool call instructions. See R010 for details.

templates/.claude/rules/MUST-tool-identification.md

@@ -110,7 +110,7 @@ # [MUST] Tool Usage Identification Rules
 
-Reference issue: #1321 (session 113 retrospective, 찐빠 #2 — AskUserQuestion prefix omitted twice).
+<!-- Reference issue: #1321 (session 113 retrospective, 찐빠 #2 — AskUserQuestion prefix omitted twice). -->
 
+<!-- DETAIL: Consolidated Example (redundant with Parallel Spawn Prefix Rule example above)
 ## Example
 
-```
 [mgr-creator][sonnet] → Write: .claude/agents/new-agent.md
@@ -120,9 +120,7 @@ [secretary][opus] → Spawning:
   [2] lang-python-expert:sonnet → Python code review
-```
 
 Parallel spawn description parameter:
-```
 Agent(description: "[1] Go code review", subagent_type: "lang-golang-expert", ...)
 Agent(description: "[2] Python code review", subagent_type: "lang-python-expert", ...)
-```
+-->
 
@@ -139,9 +137,8 @@ ## Multi-Turn Self-Check (MANDATORY)
 
+<!-- DETAIL: Common Multi-Turn Violation example (redundant with Self-Check steps above)
 ### Common Multi-Turn Violation
 
-```
 호출 1 (턴 1): [claude][sonnet] → Tool: Read ✓
 호출 2 (턴 1, 같은 턴 추가 호출): (prefix 없음) ✗
 호출 3 (턴 2 첫 호출): (prefix 없음) ✗
-```
 
@@ -151,2 +148,3 @@ 같은 턴 내 추가 호출, 새 턴 첫 호출 모두 prefix 필수.
 Reference issue: #1096.
+-->
 
@@ -167,3 +165,3 @@ ### Short Response Discipline
 
-Reference issues: #1188 item #3, #1198 item #3.
+<!-- Reference issues: #1188 item #3, #1198 item #3. -->
 
@@ -180,4 +178,4 @@ ### External-Project / Debugging Session Vigilance
 
-외부 프로젝트 진단 세션(#1417)에서 Bash/Edit/Read/Agent 모든 호출에 `[agent][model] → Tool:` prefix가 세션 전체 누락된 재발이 관측되었다 — 도구 호출 직전 prefix 부착을 워크플로에 내재화한다.
-
+<!-- DETAIL: Case history — 외부 프로젝트 진단 세션(#1417)에서 Bash/Edit/Read/Agent 모든 호출에 `[agent][model] → Tool:` prefix가 세션 전체 누락된 재발이 관측되었다 — 도구 호출 직전 prefix 부착을 워크플로에 내재화한다.
 Reference issues: #1401, #1417.
+-->

templates/.claude/skills/sauron-watch/SKILL.md

@@ -29,2 +29,5 @@ ---
 #### Round 3-4: Re-verify + Update
+
+**Conditional skip (R023 shift-left, no loss)**: If Round 1-2 returned **0 issues** (both `mgr-supplier:audit` and `mgr-updater:docs` clean), SKIP Round 3-4 entirely — there is nothing to re-verify. If Round 1-2 found ANY issue (including auto-fixed ones), Round 3-4 MUST run in full to confirm the fix.
+
 ```
@@ -37,7 +40,10 @@ □ mgr-supplier:audit - Re-verify after fixes
 #### Round 5: Final Count Verification
+
+**Deterministic-script substitution (R023 shift-left, no loss)**: The items below marked `[script]` are already covered by existing deterministic scripts (`verify-template-sync.sh`, `verify-wiki-sync.sh`, `verify-version-sync.sh`, `validate-docs.ts`, pre-commit count-coverage hook). For those items, RUN the script and consume its PASS/FAIL result instead of re-deriving the same check via an LLM re-spawn. Items without `[script]` have no deterministic equivalent (semantic/philosophy checks) and MUST still be verified directly.
+
 ```
-□ Agent count matches: CLAUDE.md vs actual .md files
-□ Skill count matches: CLAUDE.md vs actual SKILL.md files
+□ [script] Agent count matches: CLAUDE.md vs actual .md files (pre-commit coverage / validate-docs.ts)
+□ [script] Skill count matches: CLAUDE.md vs actual SKILL.md files (pre-commit coverage / validate-docs.ts)
 □ Memory field distribution correct
-□ Hook/context/guide/rule counts match
+□ [script] Hook/context/guide/rule counts match (validate-docs.ts / verify-version-sync.sh)
 □ All frontmatter valid
@@ -47,4 +53,6 @@ □ All skill refs exist
 □ Routing patterns updated
-□ R006 Context Fork Criteria list matches actual SKILL.md frontmatter
+□ [script] R006 Context Fork Criteria list matches actual SKILL.md frontmatter
   (run `bash .github/scripts/verify-fork-list.sh`)
+□ [script] templates/ mirror byte-identical to source (verify-template-sync.sh)
+□ [script] wiki pages current vs source (verify-wiki-sync.sh)
 ```
@@ -51,0 +59,0 @@

templates/manifest.json

 {
-  "version": "1.1.14",
+  "version": "1.1.15",
   "lastUpdated": "2026-07-14T00:00:00.000Z",
@@ -4,0 +4,0 @@ "omcustomMinClaudeCode": "2.1.121",

Fixed alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Improved metrics

Total package byte prevSize

3657387

0.06%

Number of high supply chain risk alerts

0

-100%

No dependency changes