enigma-cli 1.11.2 → 1.12.1

package/README.md

@@ -120,6 +120,35 @@ Auto-sync is deliberately conservative:
   a file you authored or edited is never touched.
 - A sync failure never blocks the launch; the tool starts anyway.
 
+## Auto-lint on edit
+
+Opt-in. When on, enigma autonomously installs [`@enigmax/linter`](../linter) into a
+managed dir (`~/.enigma/linter`, in the background) and wires a post-write hook into
+each agent, so every file an agent writes is linted the moment the edit finishes:
+
+```bash
+enigma config auto-lint on    # installs the linter and wires the hooks
+enigma config auto-lint off   # removes the hooks
+```
+
+The hook is designed for minimum token cost: it auto-fixes the safe formatting rules
+(whitespace, blank lines, final newline) in place, and surfaces **only the unfixable
+findings** (hardcoded secrets, URL imports, style issues that need judgement) back to
+the agent. A clean file produces no output at all - zero added tokens.
+
+- **Claude Code**: a `PostToolUse` hook in `settings.json` (matcher
+  `Edit|Write|MultiEdit|NotebookEdit`). Unfixable findings come back via the hook's
+  stderr, which Claude feeds to the model.
+- **opencode**: an auto-loaded plugin in `~/.config/opencode/plugins/` whose
+  `tool.execute.after` runs the same check and appends the findings to the tool
+  output the model sees.
+
+Both invoke one shared runner (`~/.enigma/hooks/lint-hook.mjs`) that resolves the
+managed linter and no-ops cleanly until the background install lands (self-healing).
+The wiring is mirrored into managed account config dirs on sync, like the other
+managed settings. Default: **off** (it changes agent behavior and installs a
+package, so it stays an explicit choice).
+
 ## Git security hooks
 
 `enigma security` drops a portable, dependency-free commit guard into any repo:

package/assets/skills/backend-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Backend/API architecture: controller-service-repository layering, API and request optimization, server-side caching (Redis), and Zod boundary validation.",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "c442bc9e39a7710cb709ef2abb8d15ecd8aa16ed4f5c8af92b7af6877401cba4"
 }

package/assets/skills/ciphera-style-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.1",
   "provider": "FJRG2007/enigma",
   "description": "Ciphera code style conventions (formatting, naming, imports, comments, code-level anti-patterns; TypeScript-first, language-agnostic).",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "74f638aec13e8c93257fe1ad604c28b07e9a7c456796a4ceefcc99217d9e7039"
 }

package/assets/skills/code-review-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Pre-delivery self-review gate, prioritized review dimensions, and change-quality criteria.",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "3d3bbe0602d5bbb4afe37648fe3c2fa39376b1bcbac5d8c441f01fad1e866ed0"
 }

package/assets/skills/core-engineering-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.4.0",
   "provider": "FJRG2007/enigma",
   "description": "Core engineering execution policy and harness orchestration (highest-authority rules).",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "c9c69c59516794311cb7b306ed4d4ad971824de3689a39c2b86c7669c73f2e8b"
 }

package/assets/skills/database-expert/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.0",
   "provider": "FJRG2007/enigma",
   "description": "Senior database architecture policy: query optimization, anti-duplication/normalization, scalability, and RGPD/GDPR encryption.",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "2883bcecb3202683ae6f81b073c3d6a9cec9c55029e011bdd06ba7ac3537297e"
 }

package/assets/skills/debugging-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Reproduce-isolate-fix debugging methodology with root-cause discipline and regression verification.",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "14b0064c8b33a0dc85e51464b05005cf5801c756b1101789a6924b9548420f6b"
 }

package/assets/skills/dependency-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Dependency and supply-chain security: lockfiles and reproducible installs, version pinning, vulnerability auditing, vetting/minimizing packages, vendoring, and SBOM/provenance.",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "6375d835c2aef2c9bd31ce116444dc3d796f510f9970a213aa3ac4696d7e21b9"
 }

package/assets/skills/frontend-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.2.0",
   "provider": "FJRG2007/enigma",
   "description": "Frontend architecture: reusable components, abstraction thresholds, state management, no-op save detection, and optimistic UI with rollback.",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "3766096616a9177ce66685bfaaaef66f7e8ceb62e2a6542e83dee713b9d1b56f"
 }

package/assets/skills/git-policy/SKILL.md

@@ -25,6 +25,17 @@ description: Commit, branch, and pull request standards - conventional commits,
 
 ---
 
+## Cloning & Fetch Efficiency
+
+- When cloning or pulling a repository, do not fetch the full history unless it is actually needed. A shallow fetch saves disk space, bandwidth, and time.
+- Default to a shallow clone for one-off use (building, inspecting, running, or extracting current files): `git clone --depth=1 <url>`.
+- To narrow further, combine with `--single-branch` (one branch only) and `--no-tags` (skip tag refs).
+- The full history IS required (do not shallow-clone) when the task depends on it: bisecting, blame/log archaeology, rebasing/cherry-picking across many commits, generating changelogs/release notes, or any operation that walks past commits.
+- A shallow clone can be deepened later if history turns out to be needed: `git fetch --unshallow` (full) or `git fetch --depth=<n>` (more commits). Prefer this over re-cloning.
+- For huge repos where you only need part of the tree, consider `--filter=blob:none` (blobless partial clone) or sparse-checkout instead of a full clone.
+
+---
+
 ## Identity & Git Configuration Safety
 
 - Commits and pull requests must be authored SOLELY by the local user's configured Git identity (user.name / user.email). This is non-negotiable.

package/assets/skills/git-policy/skill.json

@@ -1,8 +1,8 @@
 {
   "name": "git-policy",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "provider": "FJRG2007/enigma",
   "description": "Git & contribution policy (senior engineering standards).",
-  "cliVersion": "1.11.2",
-  "sha": "ada4b7eb5bb7e013429e23703c271c0f34b0d76327c059efa148ea2794f96178"
+  "cliVersion": "1.12.1",
+  "sha": "73a978ef11f4def067f9252fc3e2e6aa737a08b6d58ad8a2a45cbcd4b02813f6"
 }

package/assets/skills/security-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Application and AI-agent security: secrets, authn/authz (least privilege), OWASP Top 10, transport/crypto baseline, secure logging, and agent/MCP/tool-use safety.",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "9971e9d9127397d0152e89d24aad3191e2935e55a8483db7fd15f5d4d7a60e7a"
 }

package/assets/skills/testing-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Test strategy, coverage gates, deterministic tests, mocking discipline, and regression-first bug fixing.",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "d19fa8ec7985ed231478be504d3c80360897f555d0bc0624bea19c091f459fb0"
 }

package/assets/skills/validation-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Strict frontend + backend schema validation, schema consistency, and safe client-facing error handling.",
-  "cliVersion": "1.11.2",
+  "cliVersion": "1.12.1",
   "sha": "a33622a2f810ee4cea39824cb1a7ca34b355a917d4224025df50d77dd74f0b3a"
 }

package/bin/checksums.json

@@ -1,6 +1,6 @@
 {
-  "enigma-darwin-arm64": "2d66246bbd6892319555ca9ca347837602a2de8295aae769d61bec75bf38bfcc",
-  "enigma-linux-arm64": "7c0ab4fd650acf09102ac73c9b5226482e1b0252487f8c02265ff7ae98d98d28",
-  "enigma-linux-x64": "683377202629ab7392956a416b9da5230a7f574f33d39892e6d2f81239aa2dd0",
-  "enigma-win32-x64.exe": "4429d23b1ccd2b737be7207d99423502493e6a7f2e4602afc939a7012c60dee6"
+  "enigma-darwin-arm64": "257d739ec4078c81500d54fee46e33b425ccdbba5876915f91fa386c7440f2cd",
+  "enigma-linux-arm64": "32e92ba6137cd1c52f2040c00f01490fdc40d90cea386aad72fa0e6cecc90ac5",
+  "enigma-linux-x64": "95b072841260e37885ceae72d2773c4f15299c68b5a1122698e2198124c88e1f",
+  "enigma-win32-x64.exe": "6a71598f11ee7e8df5325fbc89223190c09b47e84bbe09bc558b95ada8ce2ba3"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "enigma-cli",
-  "version": "1.11.2",
+  "version": "1.12.1",
   "description": "Everything you need to work with a coding agent: install shared policy skills for Claude Code, OpenAI Codex and opencode, and set up portable git security hooks.",
   "type": "module",
   "bin": {