everything-claude-code

docs: record rc1 publication dry-run evidence (#1822 )

Affaan Mustafa · 2026-05-12 16:27:52 -04:00

bfacf37715

feat: salvage frontend design guidance (#1816 )

Affaan Mustafa · 2026-05-12 14:44:17 -04:00

ab0f0187de

feat: salvage cost tracking and skill scout (#1815 )

Affaan Mustafa · 2026-05-12 14:23:46 -04:00

65c1502ecd

docs: add data-backed harness adapter scorecard (#1785 )

* docs: add data-backed harness adapter scorecard

* fix: normalize adapter matrix line endings

* test: avoid doubled CRLF simulation

Affaan Mustafa · 2026-05-12 02:59:52 -04:00

cdf1b03779

docs: salvage agent and motion workflow skills

Affaan Mustafa · 2026-05-11 22:16:11 -04:00

629d4c0c61

docs: salvage Quarkus framework skills

Affaan Mustafa · 2026-05-11 21:58:52 -04:00

60782502d5

docs: salvage F# agent and language guidance

Affaan Mustafa · 2026-05-11 21:43:17 -04:00

fd9453f6ee

feat: salvage Angular developer skill

Affaan Mustafa · 2026-05-11 19:38:21 -04:00

456bbd12e5

feat: salvage windows desktop e2e skill

Reintroduce the Windows desktop E2E testing skill from stale PR #1334 with current manifest wiring, package publish coverage, catalog counts, and sanitized environment-path guidance.

Affaan Mustafa · 2026-05-11 19:15:02 -04:00

14816289ba

feat: add observability readiness gate

Affaan Mustafa · 2026-05-11 18:33:14 -04:00

8aa8c32d2a

feat: add machine learning engineering workflow

(cherry picked from commit 4b0eeacd66)

Divyesh Thirukonda · 2026-05-11 17:55:50 -04:00

240d52d27f

docs: salvage homelab network readiness skill

Rebuild the useful homelab VLAN, DNS, and VPN planning surface from stale PR #1413 as a safety-first readiness checklist instead of raw router/firewall commands.

Sync the catalog count from 202 to 203 skills and include the skill in the devops-infra install module and npm publish surface.

Affaan Mustafa · 2026-05-11 13:24:05 -04:00

de217ef910

feat: add work items CLI

Affaan Mustafa · 2026-05-11 12:24:12 -04:00

b1e67788f7

docs: salvage USPTO and gget skills

Affaan Mustafa · 2026-05-11 11:43:35 -04:00

579284c9be

feat: add Qwen install target

Affaan Mustafa · 2026-05-11 11:27:46 -04:00

e70ef4a2ff

feat: salvage mysql patterns skill (#1733 )

- add a maintainer-reviewed MySQL/MariaDB production patterns skill based on PR #1727

- register the skill in database install module and npm publish allowlist

- sync catalog counts to 53 agents, 200 skills, and 69 commands

Affaan Mustafa · 2026-05-11 09:14:33 -04:00

b17f8ef6a4

feat: salvage production audit skill (#1732 )

Affaan Mustafa · 2026-05-11 08:57:53 -04:00

6c699df182

feat: salvage network diagnostics skills (#1731 )

Affaan Mustafa · 2026-05-11 08:33:00 -04:00

d2ade249f6

docs: salvage scientific research skills

Affaan Mustafa · 2026-05-11 08:16:35 -04:00

df32d6bea8

docs: salvage network operations patterns

Affaan Mustafa · 2026-05-11 08:00:24 -04:00

0e12267ff2

docs: salvage FastAPI review patterns

Affaan Mustafa · 2026-05-11 07:44:26 -04:00

d52cdccb0d

docs: salvage ui-to-vue skill

Affaan Mustafa · 2026-05-11 06:07:46 -04:00

1c06ad9524

feat: add ECC consult command

Affaan Mustafa · 2026-04-30 07:19:43 -04:00

9a3f72712b

feat: add loop status transcript inspector

Affaan Mustafa · 2026-04-30 06:35:37 -04:00

b8452dc108

fix: remove canonical Anthropic skill duplicates

Affaan Mustafa · 2026-04-30 00:21:13 -04:00

95ce9eaaeb

fix: publish auto-update runtime script

Affaan Mustafa · 2026-04-29 21:01:27 -04:00

2006d2ee77

feat(ecc2): finalize rc1 release surface

Affaan Mustafa · 2026-04-28 22:10:04 -04:00

0a87323eda

fix: publish npm releases and clarify install identifiers

Affaan Mustafa · 2026-04-14 20:42:28 -07:00

34380326c8

Merge pull request #1377 from Anish29801/feat/dashboard-gui

Feat/dashboard gui

Affaan Mustafa · 2026-04-13 01:04:14 -07:00

5eedc8adb4

fix: keep runtime schemas in npm package

Affaan Mustafa · 2026-04-12 23:56:58 -07:00

c826305060

fix: narrow npm publish surface to the module graph

Affaan Mustafa · 2026-04-12 23:48:53 -07:00

bd2aec48ed

fix: harden release surface version and packaging sync (#1388 )

* fix: keep ecc release surfaces version-synced

* fix: keep lockfile release version in sync

* fix: remove release version drift from locks and tests

* fix: keep root release metadata version-synced

* fix: keep codex marketplace metadata version-synced

* fix: gate release workflows on full metadata sync

* fix: ship all versioned release metadata

* fix: harden manual release path

* fix: keep localized release docs version-synced

* fix: sync install architecture version examples

* test: cover shipped plugin metadata in npm pack

* fix: verify final npm payload in release script

* fix: ship opencode lockfile in npm package

* docs: sync localized release highlights

* fix: stabilize windows ci portability

* fix: tighten release script version sync

* fix: prefer repo-relative hook file paths

* fix: make npm pack test shell-safe on windows

Affaan Mustafa · 2026-04-12 22:33:32 -07:00

28edd197c2

Small changes

Anish · 2026-04-12 12:34:45 +05:30

d39a8a049a

feat: add gemini agent adapter

Affaan Mustafa · 2026-04-08 15:38:49 -07:00

e226772a72

feat: add council decision workflow

Affaan Mustafa · 2026-04-05 15:27:54 -07:00

753da37743

fix: ship built opencode plugin assets

Affaan Mustafa · 2026-04-05 14:09:10 -07:00

db6d52e4af

chore: ship v1.10.0 release surface refresh

Affaan Mustafa · 2026-04-05 13:20:18 -07:00

846ffb75da

feat: sync the codex baseline and agent roles

Affaan Mustafa · 2026-04-01 16:08:03 -07:00

9a6080f2e1

docs: shift repo guidance to skills-first workflows

Affaan Mustafa · 2026-04-01 02:11:24 -07:00

f3db349984

fix: harden install planning and sync tracked catalogs

Affaan Mustafa · 2026-03-31 22:57:48 -07:00

e1bc08fa6e

chore(deps-dev): bump c8 from 10.1.3 to 11.0.0 (#1065 )

Bumps [c8](https://github.com/bcoe/c8) from 10.1.3 to 11.0.0.
- [Release notes](https://github.com/bcoe/c8/releases)
- [Changelog](https://github.com/bcoe/c8/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bcoe/c8/compare/v10.1.3...v11.0.0)

---
updated-dependencies:
- dependency-name: c8
  dependency-version: 11.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2026-03-31 14:07:10 -07:00

6b82abeaf1

fix: CI fixes, security audit, remotion skill, lead-intelligence, npm audit (#1039 )

* fix(ci): resolve cross-platform test failures

- Sanity check script (check-codex-global-state.sh) now falls back to
  grep -E when ripgrep is not available, fixing the codex-hooks sync
  test on all CI platforms. Patterns converted to POSIX ERE for
  portability.
- Unicode safety test accepts both / and \ path separators so the
  executable-file assertion passes on Windows.
- Gacha test sets PYTHONUTF8=1 so Python uses UTF-8 stdout encoding on
  Windows instead of cp1252, preventing UnicodeEncodeError on box-drawing
  characters.
- Quoted-hook-path test skipped on Windows where NTFS disallows
  double-quote characters in filenames.

* feat: port remotion-video-creation skill (29 rules), restore missing files

New skill:
- remotion-video-creation: 29 domain-specific Remotion rules covering 3D/Three.js,
  animations, audio, captions, charts, compositions, fonts, GIFs, Lottie,
  measuring, sequencing, tailwind, text animations, timing, transitions,
  trimming, and video embedding. Ported from personal skills.

Restored:
- autonomous-agent-harness/SKILL.md (was in commit but missing from worktree)
- lead-intelligence/ (full directory restored from branch commit)

Updated:
- manifests/install-modules.json: added remotion-video-creation to media-generation
- README.md + AGENTS.md: synced counts to 139 skills

Catalog validates: 30 agents, 60 commands, 139 skills.

* fix(security): pin MCP server versions, add dependabot, pin github-script SHA

Critical:
- Pin all npx -y MCP server packages to specific versions in .mcp.json
  to prevent supply chain attacks via version hijacking:
  - @modelcontextprotocol/server-github@2025.4.8
  - @modelcontextprotocol/server-memory@2026.1.26
  - @modelcontextprotocol/server-sequential-thinking@2025.12.18
  - @playwright/mcp@0.0.69 (was 0.0.68)

Medium:
- Add .github/dependabot.yml for weekly npm + github-actions updates
  with grouped minor/patch PRs
- Pin actions/github-script to SHA (was @v7 tag, now pinned to commit)

* feat: add social-graph-ranker skill — weighted network proximity scoring

New skill: social-graph-ranker
- Weighted social graph traversal with exponential decay across hops
- Bridge Score: B(m) = Σ w(t) · λ^(d(m,t)-1) ranks mutuals by target proximity
- Extended Score incorporates 2nd-order network (mutual-of-mutual connections)
- Final ranking includes engagement bonus for responsive connections
- Runs in parallel with lead-intelligence skill for combined warm+cold outreach
- Supports X API + LinkedIn CSV for graph harvesting
- Outputs tiered action list: warm intros, direct outreach, network gap analysis

Added to business-content install module. Catalog validates: 30/60/140.

* fix(security): npm audit fix — resolve all dependency vulnerabilities

Applied npm audit fix --force to resolve:
- minimatch ReDoS (3 vulnerabilities, HIGH)
- smol-toml DoS (MODERATE)
- brace-expansion memory exhaustion (MODERATE)
- markdownlint-cli upgraded from 0.47.0 to 0.48.0

npm audit now reports 0 vulnerabilities.

* fix: resolve markdown lint and yarn lockfile sync

- MD047: ensure single trailing newline on all remotion rule files
- MD012: remove consecutive blank lines in lottie, measuring-dom-nodes, trimming
- MD034: wrap bare URLs in angle brackets (tailwind, transcribe-captions)
- yarn.lock: regenerated to sync with npm audit changes in package.json

* fix: replace unicode arrows in lead-intelligence (CI unicode safety check)

Affaan Mustafa · 2026-03-31 15:08:55 -04:00

6cc85ef2ed

fix: harden unicode safety checks

Affaan Mustafa · 2026-03-29 21:21:18 -04:00

866d9ebb53

feat(codex): add Codex native plugin manifest and fix Claude plugin.json

- Add .codex-plugin/plugin.json — Codex-native plugin manifest with
  skills reference and MCP server config pointer
- Add .codex-plugin/.mcp.json — standalone MCP server config bundle
  (github, context7, exa, memory, playwright, sequential-thinking)
- Add .codex-plugin/README.md — installation guide and server reference
- Fix .claude-plugin/plugin.json — add missing agents[] (28 explicit
  file paths per validator rules), skills[], and commands[] arrays;
  remove hooks field (auto-loaded by Claude Code v2.1+ convention)
- Add tests/plugin-manifest.test.js — 16 CI tests enforcing
  PLUGIN_SCHEMA_NOTES.md rules (no hooks, arrays throughout, explicit
  agent paths, version required, .mcp.json structural checks)
- Update package.json: add .codex-plugin/ to files[], add plugin
  manifest test to npm test chain

Refs: .claude-plugin/PLUGIN_SCHEMA_NOTES.md

senoldogann · 2026-03-28 20:06:42 -04:00

d473cf87e6

fix: move ajv to dependencies and add .yarnrc.yml for node-modules linker

ajv was in devDependencies but required at runtime by scripts/lib/install/config.js,
causing 'Cannot find module ajv' when running ./install.sh. Also adds .yarnrc.yml
with nodeLinker: node-modules so plain `node` can resolve packages without PnP.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

tae1344 · 2026-03-27 12:18:44 +09:00

fe6a6fc106

fix: safe Codex config sync — merge AGENTS.md + add-only MCP servers (#723 )

* fix: replace bash TOML surgery with Node add-only MCP merge

The old sync script used awk/sed to remove and re-append MCP server
sections in config.toml, causing credential extraction races, duplicate
TOML tables, and 3 fragile code paths with 9 remove_section_inplace
calls each.

Replace with a Node script (scripts/codex/merge-mcp-config.js) that
uses @iarna/toml to parse the config, then appends only missing ECC
servers — preserving all existing content byte-for-byte. Warns on
config drift, supports legacy aliases (context7 → context7-mcp), and
adds --update-mcp flag for explicit refresh.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>

* fix: address PR #723 review findings for Codex MCP merge

- Use package-manager abstraction (scripts/lib/package-manager.js)
  instead of hardcoding pnpm — respects CLAUDE_PACKAGE_MANAGER,
  lock files, and project config
- Add Yarn 1.x fallback to npx (yarn dlx unsupported in classic)
- Add missing exa server to match .codex/config.toml baseline
- Wire up findSubSections for --update-mcp nested subtable removal
  (fixes Greptile P1: Object.keys only returned top-level keys)
- Fix resolvedLabel to prefer canonical entry over legacy alias
  when both exist (fixes context7/context7-mcp spurious warning)
- Fix removeSectionFromText to handle inline TOML comments
- Fix dry-run + --update-mcp to show removals before early return
- Update README parity table: 4 → 7 servers, TOML-parser-based
- Add non-npm install variants to README Codex quick start
- Update package-lock.json for @iarna/toml

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>

* fix: address PR #723 review comments (preflight, marker validation)

- Add Node.js and merge-mcp-config.js to preflight checks so the
  script fails fast before partial writes (CodeRabbit)
- Validate marker counts: require exactly 1 BEGIN + 1 END in correct
  order for clean replacement (CodeRabbit)
- Corrupted markers: strip all marker lines and re-append fresh block,
  preserving user content outside markers instead of overwriting
- Move MCP_MERGE_SCRIPT to preflight section, remove duplicate

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>

---------

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Happy <yesreply@happy.engineering>

Chris Yau · 2026-03-22 15:39:46 -07:00

09efd68228

chore: prepare v1.9.0 release (#666 )

- Bump version to 1.9.0 in package.json, package-lock.json, .opencode/package.json
- Add v1.9.0 changelog with 212 commits covering selective install architecture,
  6 new agents, 15+ new skills, session/state infrastructure, observer fixes,
  12 language ecosystems, and community contributions
- Update README with v1.9.0 release notes and complete agents tree (27 agents)
- Add pytorch-build-resolver to AGENTS.md agent table
- Update documentation counts to 27 agents, 109 skills, 57 commands
- Update version references in zh-CN README
- All 1421 tests passing, catalog counts verified

Affaan Mustafa · 2026-03-20 00:29:20 -07:00

29277ac273

fix(ci): enforce catalog count integrity (#525 )

* fix(ci): enforce catalog count integrity

* test: harden catalog structure parsing

Justin Philpott · 2026-03-16 13:37:51 -07:00

01ed1b3b03

Add PowerShell installer wrapper and update documentation (#532 )

* Add install.ps1 PowerShell wrapper and tests

Add a Windows-native PowerShell wrapper (install.ps1) that resolves symlinks and delegates to the Node-based installer runtime. Update README with PowerShell usage examples and cross-platform npx entrypoint guidance. Point the ecc-install bin to the Node installer (scripts/install-apply.js) in package.json (and refresh package-lock), include install.ps1 in package files, and add tests: a new install-ps1.test.js and a tweak to install-sh.test.js to skip on Windows. These changes provide native Windows installer support while keeping npm-compatible cross-platform invocation.

* Improve tests for Windows HOME/USERPROFILE

Make tests more cross-platform by ensuring HOME and USERPROFILE are kept in sync and by normalizing test file paths for display.

- tests/lib/session-adapters.test.js: set USERPROFILE when temporarily setting HOME and restore previous USERPROFILE on teardown.
- tests/run-all.js: use a normalized displayPath (forward-slash separated) for logging and error messages so output is consistent across platforms.
- tests/scripts/ecc.test.js & tests/scripts/session-inspect.test.js: build envOverrides from options.env and add HOME <-> USERPROFILE fallbacks so spawned child processes receive both variables when only one is provided.

These changes prevent test failures and inconsistent logs on Windows where USERPROFILE is used instead of HOME.

* Fix Windows paths and test flakiness

Improve cross-platform behavior and test stability.

- Remove unused createLegacyInstallPlan import from install-lifecycle.js.
- Change resolveInstallConfigPath to use path.normalize(path.join(cwd, configPath)) to produce normalized relative paths.
- Tests: add toBashPath and normalizedRelativePath helpers to normalize Windows paths for bash and comparisons.
- Make cleanupTestDir retry rmSync on transient Windows errors (EPERM/EBUSY/ENOTEMPTY) with short backoff using sleepMs.
- Ensure spawned test processes receive USERPROFILE and convert repo/detect paths to bash format when invoking bash.

These changes reduce Windows-specific failures and flakiness in the test suite and tidy up a small unused import.

Fredrik Hallerös · 2026-03-16 13:35:17 -07:00

17a6ef4edb

fix(harness-audit): make scoring deterministic with scripted rubric (#524 )

Chandan Semwal · 2026-03-16 13:34:30 -07:00

0ff1b594d0

69 Commits