From e65f12bf7ea474a6f5ac96991a251673f474b445 Mon Sep 17 00:00:00 2001 From: Affaan Mustafa Date: Tue, 15 Sep 2026 14:22:02 -0400 Subject: [PATCH] release: ecc-universal 2.2.2 --- .agents/plugins/marketplace.json | 2 +- .claude-plugin/marketplace.json | 2 +- .claude-plugin/plugin.json | 2 +- .codex-plugin/plugin.json | 2 +- .opencode/package-lock.json | 4 +-- .opencode/package.json | 2 +- .opencode/plugins/ecc-hooks.ts | 2 +- AGENTS.md | 2 +- CHANGELOG.md | 32 +++++++++++++++++-- README.md | 44 +++++++++++++------------- README.zh-CN.md | 2 +- VERSION | 2 +- agent.yaml | 2 +- docs/SELECTIVE-INSTALL-ARCHITECTURE.md | 2 +- docs/pt-BR/README.md | 2 +- docs/tr/AGENTS.md | 2 +- docs/tr/README.md | 2 +- docs/zh-CN/AGENTS.md | 2 +- docs/zh-CN/README.md | 4 +-- package-lock.json | 4 +-- package.json | 3 +- plugins/ecc/.codex-plugin/plugin.json | 2 +- tests/scripts/build-opencode.test.js | 3 +- 23 files changed, 78 insertions(+), 48 deletions(-) diff --git a/.agents/plugins/marketplace.json b/.agents/plugins/marketplace.json index 6da48b541..e730e4eed 100644 --- a/.agents/plugins/marketplace.json +++ b/.agents/plugins/marketplace.json @@ -6,7 +6,7 @@ "plugins": [ { "name": "ecc", - "version": "2.2.1", + "version": "2.2.2", "source": { "source": "local", "path": "./" diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json index 03b3f9f85..b19c87b8d 100644 --- a/.claude-plugin/marketplace.json +++ b/.claude-plugin/marketplace.json @@ -12,7 +12,7 @@ "name": "ecc", "source": "./", "description": "Harness-native ECC operator layer - 68 agents, 292 skills, 94 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses", - "version": "2.2.1", + "version": "2.2.2", "author": { "name": "Affaan Mustafa", "email": "me@affaanmustafa.com" diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json index 5f1e9a391..072edddfe 100644 --- a/.claude-plugin/plugin.json +++ b/.claude-plugin/plugin.json @@ -1,6 +1,6 @@ { "name": "ecc", - "version": "2.2.1", + "version": "2.2.2", "description": "Harness-native ECC plugin for engineering teams - 68 agents, 292 skills, 94 legacy command shims, reusable hooks, rules, MCP conventions, and operator workflows for Claude Code plus adjacent agent harnesses", "author": { "name": "Affaan Mustafa", diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json index 7ad227cac..c1399c129 100644 --- a/.codex-plugin/plugin.json +++ b/.codex-plugin/plugin.json @@ -1,6 +1,6 @@ { "name": "ecc", - "version": "2.2.1", + "version": "2.2.2", "description": "Harness-native ECC workflows for Codex: shared skills, production-ready MCP configs, and selective-install-aligned conventions for TDD, security scanning, code review, and autonomous development.", "author": { "name": "Affaan Mustafa", diff --git a/.opencode/package-lock.json b/.opencode/package-lock.json index f6c140bdd..1ea48a9d1 100644 --- a/.opencode/package-lock.json +++ b/.opencode/package-lock.json @@ -1,12 +1,12 @@ { "name": "ecc-universal", - "version": "2.2.1", + "version": "2.2.2", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "ecc-universal", - "version": "2.2.1", + "version": "2.2.2", "license": "MIT", "devDependencies": { "@opencode-ai/plugin": "^1.4.3", diff --git a/.opencode/package.json b/.opencode/package.json index 94e8e3f04..e71d5df73 100644 --- a/.opencode/package.json +++ b/.opencode/package.json @@ -1,6 +1,6 @@ { "name": "ecc-universal", - "version": "2.2.1", + "version": "2.2.2", "description": "ECC plugin for OpenCode - agents, commands, hooks, and skills", "main": "dist/index.js", "types": "dist/index.d.ts", diff --git a/.opencode/plugins/ecc-hooks.ts b/.opencode/plugins/ecc-hooks.ts index 22b1132f0..54881ad86 100644 --- a/.opencode/plugins/ecc-hooks.ts +++ b/.opencode/plugins/ecc-hooks.ts @@ -537,7 +537,7 @@ export const ECCHooksPlugin: ECCHooksPluginFn = async ({ const contextBlock = [ "# ECC Context (preserve across compaction)", "", - "## Active Plugin: ECC v2.2.1", + "## Active Plugin: ECC v2.2.2", "- Hooks: file.edited, tool.execute.before/after, session.created/idle/deleted, shell.env, compacting, permission.ask", "- Tools: run-tests, check-coverage, security-audit, format-code, lint-check, git-summary, changed-files", "- Agents: 13 specialized (planner, architect, tdd-guide, code-reviewer, security-reviewer, build-error-resolver, e2e-runner, refactor-cleaner, doc-updater, go-reviewer, go-build-resolver, database-reviewer, python-reviewer)", diff --git a/AGENTS.md b/AGENTS.md index 085342923..bd0f8c3e3 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -2,7 +2,7 @@ This is a **production-ready AI coding plugin** providing 68 specialized agents, 292 skills, 94 commands, and automated hook workflows for software development. -**Version:** 2.2.1 +**Version:** 2.2.2 ## Core Principles diff --git a/CHANGELOG.md b/CHANGELOG.md index c7d71ce43..c89605c39 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,10 +1,38 @@ # Changelog -## Unreleased +## 2.2.2 - 2026-09-15 ### Fixed -- Claude settings updates now tolerate a missing Windows device ID while retaining full-precision inode checks and strict matching when both device IDs are available. +#### Packaging + +- Explicitly include the compiled OpenCode payload in the npm package and verify that packing builds it from a clean state with lifecycle scripts enabled. + +#### Memory and MCP + +- Distinguish incomplete memory reads from missing records and classify directory traversal failures (`90ef62cb`, `8321021c`). +- Accept the reserved `_meta` parameter on memory MCP ping requests (`380f4b35`). + +#### Hooks and Windows compatibility + +- Keep `hooks.json` within Claude Code's schema by moving stable hook metadata into a validated sidecar (`1ac07903`). +- Handle stuck optional values and long-option prefixes in the no-verify guard (`4f373874`). +- Support Windows linter paths and ESLint 9 (`2083c983`). +- Tolerate missing Windows device IDs in settings updates while retaining full-precision inode checks and strict matching when both device IDs are available (`d3af582b`). + +#### Workflow guidance and catalog + +- Filter epic sync issues by label (`3033436d`). +- Remove instructions to auto-merge dependency bumps and synchronize localized merge authority (`22d7ed51`, `678c6dea`). +- Keep common naming and Boolean guidance language-neutral (`072e4684`, `a0ecb793`, `013ed0a8`). +- Distinguish the `prp-pr` command alias (`cc91c24f`). +- Correct Rails skill discovery, invoice tax calculation order, and framework documentation (`b6ddd13a`). +- Remove Serply and Squish catalog entries (`c4904e3f`). + +#### Dependency security + +- Update `lru` to 0.18.2 for RUSTSEC-2026-0253 (`4fc950c4`). +- Update `js-yaml` to 4.3.2 for GHSA-2883-xcg3-v3hh (`549c1469`). ## 2.2.0 - 2026-08-25 diff --git a/README.md b/README.md index 86dba5120..7189e5ca6 100644 --- a/README.md +++ b/README.md @@ -168,7 +168,7 @@ Access to 68 agents, 292 skills, and 94 legacy command shims, plus hooks, rules, For Claude Code plugin setup, updates, scope changes, and hook-profile changes: ```bash -npx ecc-universal@2.2.1 setup +npx ecc-universal@2.2.2 setup ``` If npm reports a version or cache error, confirm the registry version before retrying: @@ -181,12 +181,12 @@ ECC 2.2 supports the same guided setup through modern package runners: | Package runner | Guided setup command | |---|---| -| npm / npx | `npx ecc-universal@2.2.1 setup` | -| pnpm | `pnpm dlx ecc-universal@2.2.1 setup` | -| Yarn 2+ | `yarn dlx ecc-universal@2.2.1 setup` | -| Bun | `bunx ecc-universal@2.2.1 setup` | +| npm / npx | `npx ecc-universal@2.2.2 setup` | +| pnpm | `pnpm dlx ecc-universal@2.2.2 setup` | +| Yarn 2+ | `yarn dlx ecc-universal@2.2.2 setup` | +| Bun | `bunx ecc-universal@2.2.2 setup` | -The examples select [the published ECC 2.2.1 release](https://www.npmjs.com/package/ecc-universal/v/2.2.1), matching this repository's release version. A version pin is not a security audit or an integrity check. Review the release source and registry integrity before running package code; use a reviewed checkout for unreleased changes. +The examples select [the published ECC 2.2.2 release](https://www.npmjs.com/package/ecc-universal/v/2.2.2), matching this repository's release version. A version pin is not a security audit or an integrity check. Review the release source and registry integrity before running package code; use a reviewed checkout for unreleased changes. Yarn Classic 1 does not provide `yarn dlx`; use `npx`, install the package globally, or upgrade Yarn for a temporary one-shot run. @@ -195,7 +195,7 @@ The wizard inventories the official marketplace and every native Claude install To configure more than one coding agent in one reviewed flow, use the multi-harness wizard: ```bash -npx ecc-universal@2.2.1 install --guided +npx ecc-universal@2.2.2 install --guided ``` It lets you select any combination of Claude Code, Codex, and Kimi Code, shows each install channel and destination, preflights every selection before the first write, and asks for one final confirmation. @@ -209,7 +209,7 @@ It lets you select any combination of Claude Code, Codex, and Kimi Code, shows e For automation, make every provider-specific choice explicit: ```bash -npx ecc-universal@2.2.1 install --guided \ +npx ecc-universal@2.2.2 install --guided \ --harness claude --harness codex --harness kimi \ --claude-scope local --claude-hooks standard \ --profile core --yes @@ -218,16 +218,16 @@ npx ecc-universal@2.2.1 install --guided \ Verify the native guided Codex path and managed Kimi path without writing first: ```bash -npx ecc-universal@2.2.1 install --guided --harness codex --dry-run -npx ecc-universal@2.2.1 install --profile core --target kimi --dry-run +npx ecc-universal@2.2.2 install --guided --harness codex --dry-run +npx ecc-universal@2.2.2 install --profile core --target kimi --dry-run ``` Additional package-name commands are also available through the 2.2 alias: ```bash -npx ecc-universal@2.2.1 consult "security reviews" --target claude -npx ecc-universal@2.2.1 install --profile minimal --target claude --with capability:machine-learning -npx ecc-universal@2.2.1 doctor --target kimi +npx ecc-universal@2.2.2 consult "security reviews" --target claude +npx ecc-universal@2.2.2 install --profile minimal --target claude --with capability:machine-learning +npx ecc-universal@2.2.2 doctor --target kimi ``` Do not use `npx ecc-install --profile minimal --target claude`: `ecc-install` is a binary name inside `ecc-universal`, not a separately published npm package. @@ -399,7 +399,7 @@ Deep per-harness notes (feature parity, hook adapters, limitations) live in [Pla Use this when you want ECC's rules, agents, commands, platform config, and core workflows without runtime hooks: ```bash -npx ecc-universal@2.2.1 install --profile minimal --target claude +npx ecc-universal@2.2.2 install --profile minimal --target claude ``` From a source checkout, the equivalent command is: @@ -584,11 +584,11 @@ If you installed from the universal package, run these commands from the same project directory used for installation: ```bash -npx ecc-universal@2.2.1 list-installed -npx ecc-universal@2.2.1 doctor -npx ecc-universal@2.2.1 repair -npx ecc-universal@2.2.1 uninstall --dry-run -npx ecc-universal@2.2.1 uninstall +npx ecc-universal@2.2.2 list-installed +npx ecc-universal@2.2.2 doctor +npx ecc-universal@2.2.2 repair +npx ecc-universal@2.2.2 uninstall --dry-run +npx ecc-universal@2.2.2 uninstall ``` From a source checkout, inspect the managed state before reinstalling: @@ -777,7 +777,7 @@ The `ito-compute-cli` package is currently unpublished. Build it locally from th ## What's New -Current release: **2.2.1** (2026-08-31). Highlights of the 2.2 line: +Current release: **2.2.2** (2026-08-31). Highlights of the 2.2 line: - Guided, manifest-driven setup across Claude Code, Codex, and Kimi Code, with install-state ownership, doctor, repair, and uninstall. - Native Antigravity install, a thin Pi adapter, and the packed-artifact release gate tested on Linux, macOS, and Windows. @@ -1194,7 +1194,7 @@ ECC's Memory Vault gives Claude, Codex, Hermes, OpenClaw, Kimi, and other harnes Skill-only, minimal, manual, and Claude plugin installs do not put the Memory Vault runtime on `PATH`. Install the npm runtime separately before using the CLI or optional MCP server: ```bash -npm install -g ecc-universal@2.2.1 +npm install -g ecc-universal@2.2.2 ecc memory init --scope project ecc memory search "authentication migration" --target-harness codex ecc memory doctor @@ -1589,7 +1589,7 @@ opencode **Option 2: Install as npm package** ```bash -npm install ecc-universal@2.2.1 +npm install ecc-universal@2.2.2 ``` Then add to your `opencode.json`: diff --git a/README.zh-CN.md b/README.zh-CN.md index e01fd54e2..552d69b58 100644 --- a/README.zh-CN.md +++ b/README.zh-CN.md @@ -80,7 +80,7 @@ ## 最新动态 -### v2.2.1 — 引导式多 Harness 安装（2026年8月） +### v2.2.2 — 引导式多 Harness 安装（2026年8月） 新增可审查的 Claude Code、Codex 与 Kimi Code 多 Harness 安装流程，并提供同步的 npm 命令入口。 diff --git a/VERSION b/VERSION index c043eea77..b1b25a5ff 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.2.1 +2.2.2 diff --git a/agent.yaml b/agent.yaml index ac7578d8d..4236f04cc 100644 --- a/agent.yaml +++ b/agent.yaml @@ -1,6 +1,6 @@ spec_version: "0.1.0" name: ecc -version: 2.2.1 +version: 2.2.2 description: "Initial gitagent export surface for ECC's shared skill catalog, governance, and identity. Native agents, commands, and hooks remain authoritative in the repository while manifest coverage expands." author: affaan-m license: MIT diff --git a/docs/SELECTIVE-INSTALL-ARCHITECTURE.md b/docs/SELECTIVE-INSTALL-ARCHITECTURE.md index 63e50f028..cd5e2226d 100644 --- a/docs/SELECTIVE-INSTALL-ARCHITECTURE.md +++ b/docs/SELECTIVE-INSTALL-ARCHITECTURE.md @@ -703,7 +703,7 @@ Suggested payload: "skippedModules": [] }, "source": { - "repoVersion": "2.2.1", + "repoVersion": "2.2.2", "repoCommit": "git-sha", "manifestVersion": 1 }, diff --git a/docs/pt-BR/README.md b/docs/pt-BR/README.md index c0d9203b6..e33eff641 100644 --- a/docs/pt-BR/README.md +++ b/docs/pt-BR/README.md @@ -79,7 +79,7 @@ Este repositório contém apenas o código. Os guias explicam tudo. ## O Que Há de Novo -### v2.2.1 — Instalação Guiada para Múltiplos Harnesses (Ago 2026) +### v2.2.2 — Instalação Guiada para Múltiplos Harnesses (Ago 2026) Adiciona uma instalação revisável para Claude Code, Codex e Kimi Code, com uma entrada de comando npm sincronizada. diff --git a/docs/tr/AGENTS.md b/docs/tr/AGENTS.md index c49b9962a..664ada702 100644 --- a/docs/tr/AGENTS.md +++ b/docs/tr/AGENTS.md @@ -2,7 +2,7 @@ Bu, yazılım geliştirme için 68 özel agent, 292 skill, 94 command ve otomatik hook iş akışları sağlayan **üretime hazır bir AI kodlama eklentisidir**. -**Sürüm:** 2.2.1 +**Sürüm:** 2.2.2 ## Temel İlkeler diff --git a/docs/tr/README.md b/docs/tr/README.md index f7546bed7..1fc5e2f5b 100644 --- a/docs/tr/README.md +++ b/docs/tr/README.md @@ -79,7 +79,7 @@ Bu repository yalnızca ham kodu içerir. Rehberler her şeyi açıklıyor. ## Yenilikler -### v2.2.1 — Rehberli Çoklu Harness Kurulumu (Ağu 2026) +### v2.2.2 — Rehberli Çoklu Harness Kurulumu (Ağu 2026) Claude Code, Codex ve Kimi Code için incelenebilir çoklu harness kurulumu ve eşitlenmiş npm komut girişi eklendi. diff --git a/docs/zh-CN/AGENTS.md b/docs/zh-CN/AGENTS.md index 2f5a18856..208d6a7b1 100644 --- a/docs/zh-CN/AGENTS.md +++ b/docs/zh-CN/AGENTS.md @@ -2,7 +2,7 @@ 这是一个**生产就绪的 AI 编码插件**，提供 68 个专业代理、292 项技能、94 条命令以及自动化钩子工作流，用于软件开发。 -**版本:** 2.2.1 +**版本:** 2.2.2 ## 核心原则 diff --git a/docs/zh-CN/README.md b/docs/zh-CN/README.md index 422f22d5d..3228c6159 100644 --- a/docs/zh-CN/README.md +++ b/docs/zh-CN/README.md @@ -81,7 +81,7 @@ ## 最新动态 -### v2.2.1 — 引导式多 Harness 安装（2026年8月） +### v2.2.2 — 引导式多 Harness 安装（2026年8月） 新增可审查的 Claude Code、Codex 与 Kimi Code 多 Harness 安装流程，并提供同步的 npm 命令入口。 @@ -1292,7 +1292,7 @@ ECC 是**第一个最大化利用每个主要 AI 编码工具的插件**。以 | **上下文文件** | CLAUDE.md + AGENTS.md | AGENTS.md | AGENTS.md | AGENTS.md | | **秘密检测** | 基于钩子 | beforeSubmitPrompt 钩子 | 基于沙箱 | 基于钩子 | | **自动格式化** | PostToolUse 钩子 | afterFileEdit 钩子 | N/A | file.edited 钩子 | -| **版本** | 插件 | 插件 | 参考配置 | 2.2.1 | +| **版本** | 插件 | 插件 | 参考配置 | 2.2.2 | **关键架构决策：** diff --git a/package-lock.json b/package-lock.json index d5b64895a..fff2ca0d0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "ecc-universal", - "version": "2.2.1", + "version": "2.2.2", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "ecc-universal", - "version": "2.2.1", + "version": "2.2.2", "license": "MIT", "dependencies": { "@iarna/toml": "2.2.5", diff --git a/package.json b/package.json index 87487a914..22422f91a 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "ecc-universal", - "version": "2.2.1", + "version": "2.2.2", "description": "Harness-native agent operating system for Codex, OpenCode, Cursor, Gemini, Claude Code, and terminal workflows - skills, hooks, rules, MCP conventions, and operator control-plane patterns", "publishConfig": { "access": "public" @@ -51,6 +51,7 @@ ".hermes/", ".kimi/", ".opencode/", + ".opencode/dist/", ".pi/", ".openclaw/", ".qwen/", diff --git a/plugins/ecc/.codex-plugin/plugin.json b/plugins/ecc/.codex-plugin/plugin.json index ff95de1b4..07f376cd6 100644 --- a/plugins/ecc/.codex-plugin/plugin.json +++ b/plugins/ecc/.codex-plugin/plugin.json @@ -1,6 +1,6 @@ { "name": "ecc", - "version": "2.2.1", + "version": "2.2.2", "description": "Harness-native ECC workflows for Codex: shared skills, production-ready MCP configs, and selective-install-aligned conventions for TDD, security scanning, code review, and autonomous development.", "author": { "name": "Affaan Mustafa", diff --git a/tests/scripts/build-opencode.test.js b/tests/scripts/build-opencode.test.js index 469165883..3f27680af 100644 --- a/tests/scripts/build-opencode.test.js +++ b/tests/scripts/build-opencode.test.js @@ -117,7 +117,8 @@ function main() { assert.strictEqual(result.status, 0, result.stderr) }], ["npm pack includes the compiled OpenCode dist payload", () => { - const result = spawnSync("npm", ["pack", "--dry-run", "--json"], { + fs.rmSync(path.dirname(distEntry), { recursive: true, force: true }) + const result = spawnSync("npm", ["pack", "--dry-run", "--json", "--ignore-scripts=false"], { cwd: repoRoot, encoding: "utf8", shell: process.platform === "win32",