enigma-cli 1.15.9 → 1.16.0

package/README.md

@@ -16,14 +16,15 @@ enigma                             # interactive hub: pick what to set up
 ```
 
 Or via the install script (clears the npm cache, installs the latest version, then
-runs `enigma install` for you - handy where npm `postinstall` scripts are disabled):
+runs `enigma install` **interactively** so you choose what to set up - handy where npm
+`postinstall` scripts are disabled):
 
 ```bash
 # macOS / Linux
-curl -fsSL https://raw.githubusercontent.com/FJRG2007/enigma/main/install.sh | sh
+curl -fsSL https://raw.githubusercontent.com/FJRG2007/enigma/main/scripts/install.sh | sh
 
 # Windows (PowerShell)
-irm https://raw.githubusercontent.com/FJRG2007/enigma/main/install.ps1 | iex
+irm https://raw.githubusercontent.com/FJRG2007/enigma/main/scripts/install.ps1 | iex
 ```
 
 Or one-shot, no global install, no prompts - deploy the skills to every supported
@@ -138,8 +139,7 @@ have not changed is left untouched; auto-sync keeps it current on every launch.
 ### `/improve`
 
 Two modes in one command. **Implement mode** edits a focused area directly;
-**Advisor mode** (adapted from [shadcn/improve](https://github.com/shadcn/improve),
-MIT) is strictly read-only and writes self-contained implementation plans into
+**Advisor mode** is strictly read-only and writes self-contained implementation plans into
 `plans/` for another (cheaper) agent to execute.
 
 The mode is resolved from the arguments: an advisor keyword (`audit`, `quick`,
@@ -490,10 +490,45 @@ table, and reversible-cache (CCR) stats. It runs only while open; `enigma config
 dashboard always` keeps a lightweight background daemon, and `enigma compress --clear`
 resets the data.
 
+The dashboard is fully modular - if you don't want it (e.g. on a server), you never need
+it, and you can add or remove it at any time. Its browser UI (the page plus a ~196 KB chart
+library) is **not** bundled in `enigma-cli`: it ships as a separate package,
+[`@enigmax/dashboard`](https://www.npmjs.com/package/@enigmax/dashboard), that enigma fetches
+on demand the first time you open or enable the dashboard, into `~/.enigma/dashboard`. enigma
+keeps it current on `enigma update`, so it is enigma's dependency to maintain, not yours. If
+you never use the dashboard, that bundle is never downloaded. `enigma config dashboard off`
+is a complete teardown: it stops any background daemon **and** removes the `enigma` hosts-file
+entry, so nothing is left behind. Re-enable it whenever you like with `on-demand` or `always`.
+
+You can also configure enigma **from the dashboard itself**: the **Enigma Settings** panel
+exposes the same options as the terminal UI (`enigma config`), editable in the browser.
+Writes apply immediately at global scope; memory-affecting toggles prompt for an agent
+restart. The settings write endpoint is loopback-only and origin-guarded (cross-site and
+DNS-rebinding requests are refused), and the server never binds anything but 127.0.0.1.
+
 The money figure is an estimate: enigma isn't a proxy, so it can't see the model -
 it prices saved tokens per source with sensible defaults. Override the rate with
 `enigma config token-price <usd-per-1M-input-tokens>` (0 restores the defaults).
 
+The time figure is likewise an estimate: it converts saved input tokens into saved
+prefill time at a default model speed. Override it with `enigma config token-speed
+<tokens-per-second>` (0 restores the default rate).
+
+#### Real tool-usage stats (opt-in)
+
+`enigma config usage-stats on` adds a **Real Tool Usage** panel that reads your own
+Claude Code session transcripts (`~/.claude/projects/.../*.jsonl`) to report **measured**
+token consumption and the **real prompt-cache savings** the tool already achieved -
+input/output tokens, cache reads, per-model breakdown. It is read-only and loopback-only;
+nothing is sent anywhere. It is off by default because it reads your session logs, which
+are broader than enigma's own compression data.
+
+Honesty note: this reports only what the transcripts actually record. It deliberately does
+**not** attribute savings to skills or to token-efficient output, because a transcript has
+no counterfactual baseline (what a session would have cost *without* them), so any such
+figure would be invented. Only Claude Code is read today; Codex/OpenCode use absent or
+undocumented local session stores and are not guessed.
+
 ### As an MCP server
 
 `enigma mcp` runs a stdio MCP server exposing three tools - `enigma_compress`,

package/assets/commands/improve.md

@@ -347,7 +347,3 @@ The flag is the user's authorization - never create issues without it. (1) Prefl
 ## Advisor output
 
 You are advising, not selling. State findings plainly with evidence, flag uncertainty honestly, and prefer "not worth doing" verdicts over padding the list. A short list of high-confidence, high-leverage plans beats a long one. Report concisely what was audited, what was not, the findings table, the plans written (paths), and the recommended execution order.
-
----
-
-Advisor mode adapted from shadcn/improve (https://github.com/shadcn/improve), MIT-licensed.

package/assets/skills/anti-overengineering-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.0",
   "provider": "FJRG2007/enigma",
   "description": "Minimal-code discipline - YAGNI ladder, deletion over addition, no unrequested abstractions, and the enigma: shortcut-marking convention; intensity via the minimal-code setting.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "3469a7e554b63a5ae3b1a4a127a0765d760649511fa9dfa9cdbcb04b4431fd64"
 }

package/assets/skills/anti-overengineering-review/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "On-demand over-engineering review - diff review, whole-repo audit, and enigma: debt-marker ledger (tags delete/stdlib/native/yagni/shrink, line/dep scoring); lists cuts, applies nothing.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "f742a2be3f328b9ea1ff9a35a449177c2cbec35ad16e46f7054b7a873a2ab017"
 }

package/assets/skills/backend-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.0",
   "provider": "FJRG2007/enigma",
   "description": "Backend/API architecture: controller-service-repository layering, API and request optimization, server-side caching (Redis), and Zod boundary validation.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "a46c3cd00aa5f47adb1e7907f1d2bc6f5562f7a272890dee9b1121976ac04ae1"
 }

package/assets/skills/ciphera-style-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.1",
   "provider": "FJRG2007/enigma",
   "description": "Ciphera code style conventions (formatting, naming, imports, comments, code-level anti-patterns; TypeScript-first, language-agnostic).",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "74f638aec13e8c93257fe1ad604c28b07e9a7c456796a4ceefcc99217d9e7039"
 }

package/assets/skills/code-review-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Pre-delivery self-review gate, prioritized review dimensions, and change-quality criteria.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "3d3bbe0602d5bbb4afe37648fe3c2fa39376b1bcbac5d8c441f01fad1e866ed0"
 }

package/assets/skills/core-engineering-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.9.0",
   "provider": "FJRG2007/enigma",
   "description": "Core engineering execution policy and harness orchestration (highest-authority rules).",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "82d246faa4770248a36f143926fbf06bd3ffc082959014184548b57193770fab"
 }

package/assets/skills/database-expert/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.0",
   "provider": "FJRG2007/enigma",
   "description": "Senior database architecture policy: query optimization, anti-duplication/normalization, scalability, and RGPD/GDPR encryption.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "2883bcecb3202683ae6f81b073c3d6a9cec9c55029e011bdd06ba7ac3537297e"
 }

package/assets/skills/debugging-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Reproduce-isolate-fix debugging methodology with root-cause discipline and regression verification.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "14b0064c8b33a0dc85e51464b05005cf5801c756b1101789a6924b9548420f6b"
 }

package/assets/skills/dependency-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Dependency and supply-chain security: lockfiles and reproducible installs, version pinning, vulnerability auditing, vetting/minimizing packages, vendoring, and SBOM/provenance.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "6375d835c2aef2c9bd31ce116444dc3d796f510f9970a213aa3ac4696d7e21b9"
 }

package/assets/skills/frontend-design/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "431645565aec8a4ab4cd17247139f78c377a9bcfcfc4ee1d6f252199c332d86f"
 }

package/assets/skills/frontend-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.3.0",
   "provider": "FJRG2007/enigma",
   "description": "Frontend architecture: reusable components, abstraction thresholds, state management, no-op save detection, large-list rendering (infinite scroll/pagination, virtualization, skeletons, progressive loading), and optimistic UI with rollback.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "26962db5a8b607e95098a6d88977aee59a10bd14e03afe97245f2b013fd21a9a"
 }

package/assets/skills/git-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.3.0",
   "provider": "FJRG2007/enigma",
   "description": "Git & contribution policy (senior engineering standards).",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "73a978ef11f4def067f9252fc3e2e6aa737a08b6d58ad8a2a45cbcd4b02813f6"
 }

package/assets/skills/security-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Application and AI-agent security: secrets, authn/authz (least privilege), OWASP Top 10, transport/crypto baseline, secure logging, and agent/MCP/tool-use safety.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "9971e9d9127397d0152e89d24aad3191e2935e55a8483db7fd15f5d4d7a60e7a"
 }

package/assets/skills/skill-creator/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Create new skills, modify and improve existing skills, and measure skill performance with evals and benchmarks.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "699586cce82ec0a5458288b598ee7e5ebdddb3dfcf19db354d8bc5e85e47c1c7"
 }

package/assets/skills/task-completion-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.1.0",
   "provider": "FJRG2007/enigma",
   "description": "Exhaustive completion discipline for long/multi-item tasks - inventory, coverage ledger, verified done.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "6e3facba307eb2b55cefbab2e4b2a346a2b82f93c3ef47e11ebeb78c3c9453a8"
 }

package/assets/skills/testing-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.2.0",
   "provider": "FJRG2007/enigma",
   "description": "Test strategy, coverage gates, deterministic tests, mocking discipline, regression-first bug fixing, and test-suite organization (layout by type/domain, mirrored paths, file naming, fixture/helper placement).",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "3bdf591057b760f674fb2b1425f63acb426cda2c4f042e1a74c5a5d3807df664"
 }

package/assets/skills/validation-policy/skill.json

@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "provider": "FJRG2007/enigma",
   "description": "Strict frontend + backend schema validation, schema consistency, and safe client-facing error handling.",
-  "cliVersion": "1.15.9",
+  "cliVersion": "1.16.0",
   "sha": "a33622a2f810ee4cea39824cb1a7ca34b355a917d4224025df50d77dd74f0b3a"
 }

package/bin/checksums.json

@@ -1,6 +1,6 @@
 {
-  "enigma-darwin-arm64": "500c3c44723b5b545d3174ac7cb8c47cd4faa01fb794fe331e0e1e5a5b09930c",
-  "enigma-linux-arm64": "b47ebfeb8acd6c6636107d26a71e81f1041993e670935a86bb0a1f0ac4b011c5",
-  "enigma-linux-x64": "a0a0bd7f418124fc4868b66423cf552a1c1df78c200722dd3e6c1fc910c6ab86",
-  "enigma-win32-x64.exe": "917a4fe077b3897f9f128a384c955452717df9ab394b8280fd59ef2449befcdf"
+  "enigma-darwin-arm64": "1c308cfc47cd98f0de61a1c2da87180fedec484b47249801cda52e46c10034ac",
+  "enigma-linux-arm64": "e3c1e7257c2aa2cc6d22dc7b91c4805c5e5eab1f3c9372e7f31b8d5a4c42a197",
+  "enigma-linux-x64": "bd7bbce91b5d0fdc55dd5b26348568fc2784e4ac2bdf728d5e0baa4860eb528f",
+  "enigma-win32-x64.exe": "70ffbf9461731b205c9306c29ec7b22080614b2d046deedfdb4002bcb869dbe4"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "enigma-cli",
-  "version": "1.15.9",
+  "version": "1.16.0",
   "description": "Everything you need to work with a coding agent: install shared policy skills for Claude Code, OpenAI Codex and opencode, and set up portable git security hooks.",
   "type": "module",
   "bin": {