Tier-1380 OMEGA Protocol

Quick Commands

# Registry & Versioning
bun run omega:registry:check          # Check registry health
bun run omega:registry:version        # Get current version
bun run omega:registry:bump patch     # Bump version

# Cloudflare Pipeline
bun run omega:deploy:check            # Pre-deploy checks
bun run omega:deploy:staging          # Deploy to staging
bun run omega:deploy:production       # Deploy to production
bun run omega:deploy:rollback         # Rollback last deploy

# Tier-1380 Color System
bun run tier1380:color generate       # Generate team palette
bun run tier1380:team list            # List team members
bun run tier1380:profile show <id>    # Show member profile
bun run tier1380:metrics              # Show color metrics

# Tier-1380 Audit (Col-89 Compliance)
bun run tier1380:audit check <file>   # Col-89 violation scan
bun run tier1380:audit css <file>     # LightningCSS minification
bun run tier1380:audit rss [url]      # RSS feed audit
bun run tier1380:audit scan           # Security scan for bad extensions
bun run tier1380:audit dashboard      # Launch dashboard on :1380
bun run tier1380:audit db             # View violation database

# Tier-1380 Secure Executor (bunx wrapper)
bun run tier1380:exec <pkg> [args]    # Execute with security verification
bun run tier1380:exec --bun <pkg>     # Force Bun runtime
bun run tier1380:exec -p <pkg> <cmd>  # Package mapping
bun run tier1380:exec:stats           # Show execution statistics
bun run tier1380:exec:log             # Show audit log
bun run tier1380:exec:packages        # Show package history

# OpenClaw Integration
bun run matrix:openclaw:status        # Check OpenClaw status
bun run openclaw:health               # OpenClaw health check
ocwatch                               # Live monitoring

# Core Operations
bun run blast:all                     # Run full BLAST suite
bun run tension:live                  # Start WebSocket bridge
bun test tests/chrome-state/phase39-apex.test.ts
bun test workers/__tests__/tier1380-color-system.test.ts

Registry Versioning System

Version Storage (KV)

// config/pipeline.ts - Registry operations
import { getVersion, bumpVersion, rollbackVersion } from "./config/pipeline";

// Get current
const v = await getVersion();  // { major: 3, minor: 26, patch: 4, build: "abc123" }

// Bump
await bumpVersion("patch");    // 3.26.4 -> 3.26.5

// Rollback
await rollbackVersion();       // Revert to previous

Version File

// config/acp-tier1380-omega.json
{
  "version": "3.26.4",
  "tier": 1380,
  "registry": {
    "kv_namespace": "OMEGA_REGISTRY",
    "key": "version:current",
    "history_key": "version:history"
  },
  "deployments": {
    "staging": "omega-staging.factory-wager.com",
    "production": "omega.factory-wager.com"
  }
}

Cloudflare Pipeline

Architecture

Git Push → Build → Registry Bump → Deploy Staging → E2E Test → Deploy Production
                ↓                    ↓                      ↓
           KV Version          Worker Deploy          Purge CDN

Pipeline Commands

# Manual pipeline
bun run omega:pipeline            # Full pipeline
bun run omega:pipeline:build      # Build only
bun run omega:pipeline:deploy     # Deploy only

# Wrangler direct
wrangler deploy --config config/wrangler.toml --env production

Deploy Checklist

# 1. Registry check
bun run omega:deploy:check
# ✓ Version: 3.26.4
# ✓ KV: Connected
# ✓ R2: Accessible
# ✓ Secrets: Injected

# 2. Staging
bun run omega:deploy:staging
# ✓ Worker: Deployed
# ✓ Routes: Updated
# ✓ Health: 200 OK

# 3. Production (after staging passes)
bun run omega:deploy:production
# ✓ Canary: 10% traffic
# ✓ Metrics: < 50ms p99
# ✓ Full rollout

Core Modules

Phase 3.9 Apex (Cols 72-75)

import { getEntropyVectorPayload } from "./chrome-state/entropy";
import { megaSeal } from "./chrome-state/vault";
import { getSecurityScorePayload } from "./chrome-state/guard";

// Pipeline integration
const pipeline = {
  col_72: getEntropyVectorPayload(state).col_72_entropy_vector,
  col_73: (await megaSeal(state)).ms,
  col_74: getSecurityScorePayload(state).col_74_security_score,
  col_75: calculateOmegaStatus(/* ... */)
};

Tier-1380 Color System

Production-grade color management with Bun-native APIs, team profiles, and accessibility validation.

// lib/cli.ts - Core color utilities
import { Tier1380Colors, PALETTE, color, HEX } from "./lib/cli";

// Generate team-specific palette with member variation
const palette = Tier1380Colors.generateTeamPalette("quantum", "alice");
// Returns: { team, member, primary: {hex, ansi}, secondary: {hex, ansi}, accent: {hex, ansi} }

// Access domain palettes
const statusColors = PALETTE.status;     // success, warning, error, info
const terminalColors = PALETTE.terminal; // bg, text, prompt, output
const quantumColors = PALETTE.quantum;   // primary, secondary, accent, seal

// Color manipulation utilities
const darker = color.darken("#82589f", 20);     // Darken by 20%
const lighter = color.lighten("#82589f", 20);   // Lighten by 20%
const hex = color.hslToHex(270, 50, 50);        // HSL to hex

Color System Architecture

Workers & Durable Objects

// Performance Guard with rate limiting and team tracking
import { ShellKimiPerformanceGuard } from "./workers/shell-kimi-performance-guard";

const guard = new ShellKimiPerformanceGuard({
  maxRequestsPerMinute: 120,
  circuitBreakerThreshold: 50,
  maxConcurrentRequests: 10,
});

// WebSocket Hub for real-time color sync
import { ColorWebSocketHub } from "./workers/color-websocket";

// In Durable Object fetch handler:
const hub = new ColorWebSocketHub(state);
hub.broadcastThemeUpdate(teamId, profileId, palette);

// RSS Activity Feed
import { RSSTeamActivityFeed } from "./workers/rss-team-activity";
// Uses Bun.escapeHTML() for SIMD-accelerated XML escaping

Bun-Native APIs for Colors

Tier-1380 Startup Guard

// Run at startup to enforce version and Col-89 compliance
const MIN_BUN = ">=1.3.7";

if (!Bun.semver.satisfies(Bun.version, MIN_BUN)) {
  console.error(`[TIER-1380] Bun ${Bun.version} < ${MIN_BUN}`);
  process.exit(1);
}

function assertCol89Safe(text: string, context = "unknown"): void {
  // Bun >=1.3.7: GB9c support for Indic conjuncts (क्ष, क्‍ष, etc.)
  const w = Bun.stringWidth(text, { countAnsiEscapeCodes: false });
  if (w > 89) {
    console.warn(`[COL-89 VIOLATION] ${context} width=${w}`);
  }
}

Bun BLAST Suite

bun run blast:cookie-semver check
bun run blast:heap-index
bun run blast:release:check
bun run blast:atomic:hot

MCP/ACP Cloudflare

# Deploy MCP Gateway
bun run mcp:deploy

# Deploy ACP Bridge  
bun run acp:deploy

# Health check
bun run omega:health

Environment

# Required
CLOUDFLARE_API_TOKEN=xxx
CLOUDFLARE_ACCOUNT_ID=xxx

# Optional
OMEGA_LOG_LEVEL=debug
OMEGA_REGISTRY_KV=xxx
R2_ENDPOINT=xxx
R2_BUCKET=xxx

Health Monitoring

# Health check
bun run omega:health:check           # Text output
bun run omega:health:json            # JSON output

# Continuous monitoring
bun run omega:monitor                # Staging monitor
bun run omega:monitor:prod           # Production monitor

# View logs
bun run omega:logs                   # Staging logs
bun run omega:logs:prod              # Production logs

Backup & Restore

# Create backup
bun run omega:backup                 # Full system backup

# List backups
bun run omega:backup:list

# Restore from backup
bun run omega:restore ./backups/omega-backup-xxx.tar.gz

# Dry run (no actual changes)
bun run omega:restore ./backups/xxx.tar.gz --dry-run

Secrets Management

# Rotate secrets
bun run omega:secrets:rotate staging
bun run omega:secrets:rotate production

# Backup before rotation is automatic
# Stored in: ./secrets-backups/

API Documentation

# View OpenAPI spec
bun run omega:docs:api

# Or visit: https://omega.factory-wager.com/docs

CI/CD (GitHub Actions)

Automatic pipeline on push to main:

Validate → Test → Build → Deploy Staging → Health Check → Deploy Production

Workflow file: .github/workflows/omega-pipeline.yml

File Structure

~/.kimi/skills/tier1380-omega/
├── SKILL.md                      # This file
├── config/
│   ├── pipeline.ts               # Registry & deploy logic
│   ├── acp-tier1380-omega.json   # Version manifest
│   ├── wrangler.omega.toml       # Workers config
│   ├── openapi.yml               # API documentation
│   └── rate-limits.yml           # Rate limiting config
├── scripts/
│   ├── deploy-omega.sh           # Full deploy script
│   ├── validate-env.sh           # Env validation
│   ├── monitor-omega.sh          # Live monitoring
│   ├── backup-omega.sh           # System backup
│   ├── restore-omega.sh          # System restore
│   └── rotate-secrets.sh         # Secrets rotation
├── chrome-state/
│   └── health.ts                 # Health endpoint
└── color-system/                 # Tier-1380 Color System
    ├── lib/cli.ts                # Core color utilities
    ├── workers/
    │   ├── shell-kimi-performance-guard.ts  # Rate limiting & profiles
    │   ├── color-palette-storage.ts         # R2 persistence
    │   ├── color-accessibility.ts           # WCAG validation
    │   ├── terminal-color-injector.ts       # ANSI output
    │   ├── color-websocket.ts               # Real-time sync
    │   └── rss-team-activity.ts             # RSS feeds
    ├── bin/tier1380.ts           # CLI tool
    ├── dashboard/                # React dashboard
    │   └── tier1380-dashboard.tsx
    └── __tests__/                # Test suite (150+ tests)
        ├── tier1380-color-system.test.ts
        ├── tier1380-cli.test.ts
        └── color-websocket.test.ts

Quick Reference

Unified CLI (bin/omega)

# Install to PATH
export PATH="$PWD/bin:$PATH"

# Usage
omega registry bump patch
omega deploy staging
omega health check
omega backup create
omega secrets rotate production
omega monitor start

Deployment Script

# Full deployment with all checks
./scripts/deploy-omega.sh staging
./scripts/deploy-omega.sh production

# Dry run
./scripts/deploy-omega.sh staging --dry-run

# Or via bun
bun run omega:deploy:staging
bun run omega:deploy:production

Agent Workflow with Semver & Unicode Awareness

Enhanced agent initialization with automatic version checking and Unicode/Col-89 compliance.

Quick Start

# Initialize agent with full validation
bun ~/.kimi/skills/tier1380-omega/scripts/agent-workflow.ts init

# Check Bun version compatibility
bun ~/.kimi/skills/tier1380-omega/scripts/agent-workflow.ts check-version

# Verify Unicode/Col-89 support
bun ~/.kimi/skills/tier1380-omega/scripts/agent-workflow.ts check-unicode

# Check Col-89 compliance for text
bun ~/.kimi/skills/tier1380-omega/scripts/agent-workflow.ts col89 "Your text here"

# Get Unicode-aware string width
bun ~/.kimi/skills/tier1380-omega/scripts/agent-workflow.ts width "Hello 🦊 क्षत्रिय"

# Wrap text to 89 columns
bun ~/.kimi/skills/tier1380-omega/scripts/agent-workflow.ts wrap "Very long text..."

Semver Awareness

The agent automatically checks Bun version on startup:

import { checkSemver, MIN_BUN_VERSION } from "./scripts/agent-workflow";

const result = checkSemver();
// Returns:
// {
//   valid: true,
//   current: "1.3.7",
//   required: ">=1.3.7",
//   features: ["GB9c_grapheme_breaking", "stringWidth_indic_support", "wrapAnsi_stable"],
//   warnings: []
// }

Minimum Version: >=1.3.7 (for GB9c Indic script support)

Refined Version Gate Pattern:

const MIN_FOR_INDIC_ACCURACY = ">=1.3.7";
if (!Bun.semver.satisfies(Bun.version, MIN_FOR_INDIC_ACCURACY)) {
  console.warn(
    `Bun ${Bun.version} < ${MIN_FOR_INDIC_ACCURACY} — Indic conjuncts may have inaccurate widths in stringWidth(). ` +
    `Upgrade for GB9c + ~27% smaller grapheme table.`
  );
}

Unicode Awareness

Full GB9c grapheme breaking support for Indic scripts:

import { checkUnicode, checkCol89, getStringWidth } from "./scripts/agent-workflow";

// Check Unicode capabilities
const unicode = checkUnicode();
// Returns:
// {
//   valid: true,
//   gb9c_support: true,
//   col89_enforcement: true,
//   indic_scripts: ["Devanagari", "Bengali", ...],
//   test_results: { devanagari: true, emoji_zwj: true, col89_wrap: true }
// }

// Check Col-89 compliance
const col89 = checkCol89("Your text here");
// Returns: { text, width, compliant, wrapped? }

// Get Unicode-aware width
const width = getStringWidth("Hello 🦊 क्षत्रिय");  // → 17

Col-89 Enforcement

The agent enforces 89-column maximum width with Unicode awareness:

// Automatic wrapping for long lines
function assertCol89Safe(text: string, context = "unknown"): void {
  // Bun >=1.3.7: GB9c support for Indic conjuncts (क्ष, क्‍ष, etc.)
  const w = Bun.stringWidth(text, { countAnsiEscapeCodes: false });
  if (w > 89) {
    console.warn(`[COL-89 VIOLATION] ${context} width=${w}`);
    // Auto-wrap with Bun.wrapAnsi
    const wrapped = Bun.wrapAnsi(text, 89, { wordWrap: true, trim: true });
  }
}

Configuration

Agent workflow settings in config/tier1380-omega.toml:

[tier1380_omega.semver]
min_bun_version = ">=1.3.7"
check_on_startup = true
auto_warn = true

[tier1380_omega.unicode]
enabled = true
gb9c_support = true
col_89_max_width = 89
count_ansi_escape_codes = false
ambiguous_is_narrow = true
indic_scripts = ["Devanagari", "Bengali", "Gurmukhi", "Gujarati", "Oriya", "Tamil", "Telugu", "Kannada", "Malayalam"]

[tier1380_omega.agent_workflow]
init_script = "~/.kimi/skills/tier1380-omega/scripts/agent-workflow.ts"
auto_check_version = true
auto_check_unicode = true

Test Commands

# Devanagari conjunct (GB9c)
bun -e 'console.log(Bun.stringWidth("क्ष"))'           # → 2
bun -e 'console.log(Bun.stringWidth("क्‍ष"))'          # → 2

# Emoji with ZWJ
bun -e 'console.log(Bun.stringWidth("👨‍👩‍👧‍👦"))'     # → 2

# Col-89 wrap
bun -e 'console.log(Bun.wrapAnsi("A ".repeat(100), 89, {wordWrap:true}))'

stringWidth() Evolution

Gains Quantified

Master Utils Table

Tier-1380 API Matrix v1.3.7

See skills/stubs/bun-v137-api-matrix.md and skills/stubs/bun-v137-api-matrix-profiler.md for complete performance matrix:

R2 Integration

Store audit logs and version checks in R2 buckets:

# Upload Col-89 violations to R2
bun agent-workflow.ts enforce --upload

# Upload version check report
bun agent-workflow.ts upload-version

# R2 integration standalone commands
bun agent-r2-integration.ts upload-col89
bun agent-r2-integration.ts upload-version
bun agent-r2-integration.ts list
bun agent-r2-integration.ts summary 30

R2 Storage Structure:

fw-audit-logs/
├── agent-workflow/
│   ├── col89/2026-01-31/audit-123456.json
│   ├── version/2026-01-31/version-789012.json

Audit Report Schema:

interface StoredAuditReport {
  id: string;
  timestamp: string;
  bun_version: string;
  agent_version: string;
  results: {
    semver_check: boolean;
    unicode_check: boolean;
    col89_violations: number;
  };
  entries: Col89AuditEntry[];
  metadata: FactoryWagerMetadata;
}

Agent Workflow v1.3.0 – Semver, Unicode & R2 Aware

Documentation Resources

Error Codes Reference

Complete exit code documentation in ERROR-CODES.md:

cat ERROR-CODES.md  # View all error codes and recovery steps

Key Exit Codes:

Benchmarks

Performance benchmarks in BENCHMARKS.md and BENCHMARKS-MASTER.md:

# Quick benchmark one-liners
bun -e 'console.time("ns");for(let i=0;i<1e3;++i)Bun.nanoseconds();console.timeEnd("ns")'
# → ~8ns

bun -e 'console.time("which");for(let i=0;i<1e3;++i)Bun.which("ls");console.timeEnd("which")'
# → ~1.47ms/1k

bun -e 'let s="a".repeat(500);console.time("sw");for(let i=0;i<1e3;++i)Bun.stringWidth(s);console.timeEnd("sw")'
# → ~37ns (6,756x faster than npm)

Performance Wins:

• stringWidth(): 6,756x - 10,000x faster than Node
• which(): 5-7x faster
• nanoseconds(): 2x faster than hrtime

Cloudflare Infrastructure

Domain Setup

Root Domain: factory-wager.com

Subdomains:

R2 Buckets

# List buckets
wrangler r2 bucket list

# 6 buckets configured:
# - fw-artifacts (CDN enabled)
# - fw-staging (CDN enabled)
# - fw-profiles
# - fw-audit-logs
# - fw-backups
# - rssfeedmaster (CDN enabled)

Secrets (Bun.secrets)

Service: com.factory-wager.matrix

# Set secrets
bun secrets set com.factory-wager.matrix cf-token YOUR_TOKEN
bun secrets set com.factory-wager.matrix api-key $(openssl rand -hex 32)

# Or use environment fallback
export FW_MATRIX_CF_TOKEN="..."
export FW_MATRIX_API_KEY="..."

Required Secrets:

• api-key - General API auth
• kimi-token - Kimi CLI token
• cf-token - Cloudflare API token
• r2-access-key - R2 access
• r2-secret-key - R2 secret
• webhook-secret - Webhook signing

MCP Tools

Bun Docs MCP

Location: mcp/bun-docs/

# Run MCP server
bun run mcp:bun-docs

# Or directly
bun run mcp/bun-docs/index.ts

Features:

• Search Bun documentation
• Get doc entries
• Build doc URLs
• Suggest terms
• RSS integration

Cookie & Session Management

Fast Cookie Parsing

// Parse cookie header to Map (23ns - 74x faster than Node)
const parseCookieMap = (header: string): Map<string,string> => 
  new Map(decodeURIComponent(header).split(';').map(p => p.trim().split('=')));

// Usage
const cookies = parseCookieMap(req.headers.get('cookie') || '');
const sessionId = cookies.get('session');

A/B Variant Cookies (Build-Time)

Define in bunfig.toml:

[define]
AB_VARIANT_A = "\"enabled\""
AB_VARIANT_B = "\"disabled\""
AB_VARIANT_POOL_A = "5"

Fallback Chain:

1. Cookie: ab-variant-a=enabled
2. Define: ABVARIANTA (build-time literal)
3. Default: "control"

Recent Additions

Files Added

• ERROR-CODES.md - Comprehensive exit code docs
• BENCHMARKS.md - Performance benchmarks
• BENCHMARKS-MASTER.md - One-liner benchmarks
• SECRETS-SETUP.md - Bun.secrets setup guide
• .env.cloudflare - Cloudflare env template
• mcp/bun-docs/ - Bun docs MCP server
• config/wrangler.omega-full.toml - Full wrangler config
• lib/cloudflare/ - R2 client & DNS manager
• workers/omega-entry.ts - Main worker entry

Scripts Added

• scripts/setup-secrets.sh - Interactive secret setup
• metrics/factory-wager/monitor.sh - Endpoint monitoring

Related Skills

Cross-Skill Commands

# OpenClaw + Omega
bun run matrix:openclaw:status && bun run omega:health:check

# Infrastructure + Omega
infra status && omega registry check

# Full stack check
ocstatus && omega deploy:check && infra health

Updated: 2026-01-31 | Tier-1380 OMEGA v1380.0.0