Versioned, integrity-checked system-prompt deployment for Oh My Pi.

omp-keysmith is an OMP Extension that manages prompt versions in a plugin-owned content-addressed store and appends the selected prompt during before_agent_start. It does not rewrite OMP configuration or prompt files.

• Appends the active prompt as a real system-prompt block on every agent turn.
• Preserves OMP's existing system prompt, project context, tools, skills, rules, and other chained Extension changes.
• Uses the bundled codex-keysmith prompt when --file is omitted.
• Supports external UTF-8 prompt files and safe logical names.
• Provides preview, deploy, enable, disable, layered uninstall, recovery, and garbage-collection commands.
• Stores immutable prompt blobs by SHA-256 and verifies the active blob before injection.
• Rejects symbolic links, invalid UTF-8, abnormal filesystem nodes, malformed state, and integrity drift.
• Uses private filesystem permissions, atomic publication, and a cross-process write lock.

• OMP 17.0.7 or later with Extension support.
• Bun is only required for local development; OMP loads the TypeScript Extension directly.

omp plugin install github:ParticleG/omp-keysmith

If OMP was already running during the initial installation, restart that OMP process once so it discovers the new Extension. Prompt deployment and enable/disable changes apply on the next agent turn without another restart.

Verify installation:

omp plugin list
omp plugin doctor

Inside OMP:

/keysmith status
/keysmith preview
/keysmith deploy

Interactive OMP asks for confirmation before a mutation. In a non-interactive UI, pass --yes explicitly:

/keysmith deploy --yes

When --file is omitted, preview and deploy use the bundled BUILTIN_GPT_UNRESTRICTED_MD prompt described below.

rollback is accepted as an alias for uninstall, and dry-run is accepted as an alias for preview.

Keysmith has three separate kinds of state:

1. Persistent switch — enable and disable decide whether the selected prompt is injected. The value is stored in state.json and survives future turns and OMP restarts.
2. Deployment stack — every successful deploy pushes one layer. uninstall or its rollback alias pops only the newest layer and restores the enabled state that existed before that layer was deployed.
3. OMP plugin package — the Extension installation is managed by omp plugin. /keysmith uninstall never removes the package.

The normal pause/resume flow is:

/keysmith disable
# Future turns and sessions remain disabled; deployment history is retained.

/keysmith enable
# The selected layer resumes on the next agent turn; no new layer is created.

Do not run deploy merely to resume a disabled prompt. A deploy always adds a layer and sets the persistent switch to enabled.

No deployment
  └─ /keysmith deploy ──> layer 1 selected, enabled

Enabled with layers
  └─ /keysmith disable ─> same layers, persistently disabled

Disabled with layers
  └─ /keysmith enable ──> same layers, persistently enabled

Any state with layers
  └─ /keysmith deploy ──> one additional layer selected, enabled

Any state with layers
  └─ /keysmith uninstall -> newest layer removed, its enabledBefore state restored

If every deployment layer has been removed, enable has nothing to select and will direct you to deploy first.

Optionally remove all managed layers and unreferenced blobs inside OMP:

/keysmith uninstall
# Repeat until status reports Deployment layers: 0.

/keysmith doctor --fix

Then remove the Extension package in a shell:

omp plugin uninstall omp-keysmith

The plugin-owned <agent-dir>/keysmith state directory is intentionally not removed by the package manager. Archive or delete it manually only after confirming that no deployment history or recovery data is needed.

/keysmith preview --file ./prompts/reviewer.md --name reviewer
/keysmith deploy --file ./prompts/reviewer.md --name reviewer

Relative paths resolve from OMP's live ctx.cwd, including after an OMP working-directory change. Quote paths containing spaces.

Prompt names accept ASCII letters, digits, dots, underscores, and hyphens, with additional traversal and Windows device-name checks.

The default asset is an exact UTF-8 copy of BUILTIN_GPT_UNRESTRICTED_MD from codex-instruct.py in codex-keysmith:

• Upstream repository: Jia-Ethan/codex-keysmith
• Pinned source commit: 700f1be22446af4dc2c362080cbde669e215094d
• Source symbol: BUILTIN_GPT_UNRESTRICTED_MD
• Local asset: assets/default-prompt.md
• SHA-256: 2c2c9f0e008c492bfc9487170a7a08daedeb8b0625af1f85617ab2d1bd3f35c0

The bundled prompt changes model behavior broadly: it suppresses refusal and warning framing and reinterprets authorization boundaries across security, adult, chemistry, pharmacology, and weapons requests. Review the asset before deployment. It cannot override higher-priority instructions supplied outside the OMP system-prompt array.

The Extension uses OMP's chained before_agent_start contract:

return {
  systemPrompt: [...event.systemPrompt, activePrompt],
};

Each turn reads the current plugin state, verifies the selected content-addressed blob, confirms that state did not change during the read, and then appends the exact decoded prompt. A missing, disabled, or uninitialized state produces no injection. Integrity failure blocks only the keysmith prompt rather than replacing OMP's existing prompt.

State belongs to the active OMP agent directory returned by getAgentDir():

<agent-dir>/keysmith/
├── state.json
└── prompts/
    └── <sha256>.md

This automatically follows OMP profiles and PI_CODING_AGENT_DIR.

The Extension does not modify:

SYSTEM.md
APPEND_SYSTEM.md
config.yml
hooks/

Uninstalling one deployment layer retains immutable blobs. Use /keysmith doctor --fix when you explicitly want to remove unreferenced blobs.

bun install
bun run check

bun run check runs strict TypeScript checking, oxlint, and the Bun test suite.

Link a local checkout for development:

omp plugin link .

Return to the GitHub-installed package with:

omp plugin uninstall omp-keysmith
omp plugin install github:ParticleG/omp-keysmith

This project adapts the prompt deployment and integrity ideas from Jia-Ethan/codex-keysmith, created by Jia-Ethan. The bundled default prompt is copied from its BUILTIN_GPT_UNRESTRICTED_MD value at the pinned commit above. The upstream project and copied material are distributed under the MIT License; its copyright notice is retained in LICENSE.

The OMP integration is independently implemented as a TypeScript Extension using turn-level system-prompt chaining and a plugin-owned content-addressed store. It does not reuse codex-keysmith's Codex config.toml or hook-isolation machinery.

MIT. See LICENSE.