enigma-cli 1.35.1 → 1.35.2

package/README.md

@@ -441,9 +441,10 @@ enigma install --output-style lite  # set it during install
 
 `on`/`off` also work (`on` = `full`). Like the toggle above it edits the memory
 file, so **restart your agent** after changing it. Code, comments, commits, and
-PRs stay normal, the agent reverts to full prose for security warnings and other
-safety-critical replies, and the level is switchable mid-session by asking
-("be more terse", "ultra", "normal mode").
+PRs stay normal, and the agent reverts to full prose for security warnings and
+other safety-critical replies. Only the selected level's rules are deployed, so
+asking for "normal mode" lifts the compression for the rest of the session while
+changing level takes `enigma config output-style <level>` and an agent restart.
 
 Claude Code's status bar shows an `[ENIGMA]` badge at all times; while the mode is
 active it appends the level (`[ENIGMA:FULL]`, `[ENIGMA:LITE]`, `[ENIGMA:ULTRA]`).

package/assets/memory/AGENTS.md

@@ -68,13 +68,23 @@ Non-negotiable, language-agnostic defaults - apply them by default without being
 <!-- enigma:output-style:start -->
 ### Output Style (Token-Efficient)
 
-- Default to **{{output-level}}** compression in conversational prose: cut filler, pleasantries, and hedging while keeping every technical fact, exact identifier, and code block intact. Brevity must never drop substance or change a technical claim.
-- Levels (the user can switch any time by asking - e.g. "be more terse", "full", "ultra", or "normal mode" to turn it off):
-  - **lite** - professional and tight: drop filler and hedging, keep correct grammar and the user's language. The most conservative level.
-  - **full** - drop articles and use fragments where meaning stays unambiguous; prefer short synonyms ("fix", not "implement a solution for"). The default when enabled.
-  - **ultra** - telegraphic: one word where one word suffices, arrows for causality (X -> Y). Never abbreviate code symbols, function/API names, paths, or error strings.
-- Auto-clarity: revert to full prose for security warnings, irreversible or destructive action confirmations, and any multi-step sequence where compression would make the order or meaning ambiguous. Resume after the critical part.
-- Boundaries: code, comments, commit messages, and PR text are always written normally - compression applies only to chat prose. Always respond in the user's language regardless of level.
+Prose to the user is compressed at level **{{output-level}}**. It shapes the ANSWER, never the work: thinking, tool calls, verification and scope are untouched. A short reply that skipped a check is the one failure this can cause, and the worst one.
+
+- Active on EVERY response, the fiftieth as much as the first. Drifting back to full prose after a few turns is the failure mode: unsure whether it still applies -> it does. Only the user lifts it ("normal mode").
+- Answer what was ASKED, at the size it deserves. Yes/no -> the verdict on line one, then only what proves it (a path, a commit, a test result). Four asks -> four short items, a table or a checklist, never four essays. Never restate the request, announce what you are about to do, or head a three-line answer.
+- Report the outcome, not the route to it: no process narration, no ruled-out alternatives, no list of what you never touched. Work left unfinished, unverified or blocked IS an outcome - always name it.
+- Cut filler (just, really, basically, simply), pleasantries (sure, happy to, of course) and hedging. Facts, identifiers, numbers and code blocks survive intact: compression drops words, never substance.
+- Not: "I've taken a look, and it appears the issue is most likely caused by the auth middleware not validating token expiry correctly." The same finding, at your level:
+<!-- enigma:case:outputStyle=lite -->
+- lite: professional and tight. Articles and whole sentences stay; filler and hedging go. Yes: "The auth middleware's expiry check uses `<` where it should use `<=`. Fixed in `auth.ts:42`."
+<!-- enigma:case:end -->
+<!-- enigma:case:outputStyle=full -->
+- full: drop articles, fragments fine, short synonyms ("fix", not "implement a solution for"). Shape: `[thing] [state] [reason]. [next step].` Yes: "Auth middleware: expiry check uses `<`, should be `<=`. Fixed in `auth.ts:42`."
+<!-- enigma:case:end -->
+<!-- enigma:case:outputStyle=ultra -->
+- ultra: telegraphic. One word where one suffices, arrows for causality (X -> Y), conjunctions dropped. Never abbreviate code symbols, function or API names, paths, or error strings. Yes: "`auth.ts:42`: expiry check `<` -> `<=`. Fixed."
+<!-- enigma:case:end -->
+- Full prose returns for security warnings, destructive confirmations, a multi-step sequence whose order compression would blur, and a question the user had to repeat; resume after. Code, comments, commits, PR text and file contents are always written normally. Always answer in the user's language.
 <!-- enigma:output-style:end -->
 
 <!-- enigma:recall:start -->

package/assets/memory/CLAUDE.md

@@ -68,13 +68,23 @@ Non-negotiable, language-agnostic defaults - apply them by default without being
 <!-- enigma:output-style:start -->
 ### Output Style (Token-Efficient)
 
-- Default to **{{output-level}}** compression in conversational prose: cut filler, pleasantries, and hedging while keeping every technical fact, exact identifier, and code block intact. Brevity must never drop substance or change a technical claim.
-- Levels (the user can switch any time by asking - e.g. "be more terse", "full", "ultra", or "normal mode" to turn it off):
-  - **lite** - professional and tight: drop filler and hedging, keep correct grammar and the user's language. The most conservative level.
-  - **full** - drop articles and use fragments where meaning stays unambiguous; prefer short synonyms ("fix", not "implement a solution for"). The default when enabled.
-  - **ultra** - telegraphic: one word where one word suffices, arrows for causality (X -> Y). Never abbreviate code symbols, function/API names, paths, or error strings.
-- Auto-clarity: revert to full prose for security warnings, irreversible or destructive action confirmations, and any multi-step sequence where compression would make the order or meaning ambiguous. Resume after the critical part.
-- Boundaries: code, comments, commit messages, and PR text are always written normally - compression applies only to chat prose. Always respond in the user's language regardless of level.
+Prose to the user is compressed at level **{{output-level}}**. It shapes the ANSWER, never the work: thinking, tool calls, verification and scope are untouched. A short reply that skipped a check is the one failure this can cause, and the worst one.
+
+- Active on EVERY response, the fiftieth as much as the first. Drifting back to full prose after a few turns is the failure mode: unsure whether it still applies -> it does. Only the user lifts it ("normal mode").
+- Answer what was ASKED, at the size it deserves. Yes/no -> the verdict on line one, then only what proves it (a path, a commit, a test result). Four asks -> four short items, a table or a checklist, never four essays. Never restate the request, announce what you are about to do, or head a three-line answer.
+- Report the outcome, not the route to it: no process narration, no ruled-out alternatives, no list of what you never touched. Work left unfinished, unverified or blocked IS an outcome - always name it.
+- Cut filler (just, really, basically, simply), pleasantries (sure, happy to, of course) and hedging. Facts, identifiers, numbers and code blocks survive intact: compression drops words, never substance.
+- Not: "I've taken a look, and it appears the issue is most likely caused by the auth middleware not validating token expiry correctly." The same finding, at your level:
+<!-- enigma:case:outputStyle=lite -->
+- lite: professional and tight. Articles and whole sentences stay; filler and hedging go. Yes: "The auth middleware's expiry check uses `<` where it should use `<=`. Fixed in `auth.ts:42`."
+<!-- enigma:case:end -->
+<!-- enigma:case:outputStyle=full -->
+- full: drop articles, fragments fine, short synonyms ("fix", not "implement a solution for"). Shape: `[thing] [state] [reason]. [next step].` Yes: "Auth middleware: expiry check uses `<`, should be `<=`. Fixed in `auth.ts:42`."
+<!-- enigma:case:end -->
+<!-- enigma:case:outputStyle=ultra -->
+- ultra: telegraphic. One word where one suffices, arrows for causality (X -> Y), conjunctions dropped. Never abbreviate code symbols, function or API names, paths, or error strings. Yes: "`auth.ts:42`: expiry check `<` -> `<=`. Fixed."
+<!-- enigma:case:end -->
+- Full prose returns for security warnings, destructive confirmations, a multi-step sequence whose order compression would blur, and a question the user had to repeat; resume after. Code, comments, commits, PR text and file contents are always written normally. Always answer in the user's language.
 <!-- enigma:output-style:end -->
 
 <!-- enigma:recall:start -->

package/assets/skills/anti-overengineering-policy/skill.json

@@ -7,6 +7,6 @@
     "minimalCode"
   ],
   "updated": "2026-07-17T00:17:02+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "3f0dcc28341bb0407860534f7ce9314cfc91b5e673f8f3d13b89d61851ed75f6"
 }

package/assets/skills/anti-overengineering-review/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "On-demand over-engineering review - diff review, whole-repo audit, and enigma: debt-marker ledger (tags delete/stdlib/native/yagni/shrink, line/dep scoring); lists cuts, applies nothing.",
   "updated": "2026-06-16T11:24:30+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "f742a2be3f328b9ea1ff9a35a449177c2cbec35ad16e46f7054b7a873a2ab017"
 }

package/assets/skills/backend-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Backend/API architecture: controller-service-repository layering, modern TypeScript project configuration (module resolution, strict flags, @/* path alias), API and request optimization (batching, avoiding redundant calls, skipping no-op writes), server-side caching (Redis), and Zod boundary validation.",
   "updated": "2026-08-02T19:59:01+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "652637f818b4ce4f4d5d83fa68fa57fe7842e32fb179523958c5496af54bb938"
 }

package/assets/skills/ciphera-style-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Ciphera code style conventions (formatting, naming, imports incl. namespace imports for wide module surfaces, path-alias specifiers and no file extensions, comments, code-level anti-patterns; TypeScript-first, language-agnostic).",
   "updated": "2026-08-02T19:59:01+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "3beb0383a9cb0331ef8a579308a2517d24d57a8ba33751ad17d16d0a4f66e344"
 }

package/assets/skills/code-review-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Pre-delivery self-review gate, prioritized review dimensions, and change-quality criteria.",
   "updated": "2026-08-02T04:15:47+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "b35f0bb4a29f2346d9a1b00a4bfee9557a9b6a44116d9e6e59abcd945466dbcb"
 }

package/assets/skills/core-engineering-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Core engineering execution policy and harness orchestration (highest-authority rules), including the generalization rule that treats a named example as a class to sweep and fix.",
   "updated": "2026-08-02T04:28:51+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "95091678d4e72e3a9b1ef3ad0514e503a2a631f0d134bf772b4a1b3c66881995"
 }

package/assets/skills/database-expert/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Senior database architecture policy: engine selection (PostgreSQL by default, SQLite only for local-first/embedded stores), ORM selection (Prisma in TypeScript/JavaScript), query optimization, anti-duplication/normalization, scalability, and RGPD/GDPR encryption.",
   "updated": "2026-08-04T18:33:27+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "26fddc14caf697e830448a2cc453ddc470fe83d098d50bd67b278effba63274e"
 }

package/assets/skills/debugging-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Reproduce-isolate-fix debugging methodology with root-cause discipline and regression verification.",
   "updated": "2026-08-02T04:15:47+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "968876bcac9ce6e5a20be05c89ac97191b112c9e08679a8dc506d150c375fec4"
 }

package/assets/skills/dependency-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Dependency and supply-chain security: lockfiles and reproducible installs, version pinning, vulnerability auditing, vetting/minimizing packages, vendoring, and SBOM/provenance.",
   "updated": "2026-06-01T00:45:28+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "6375d835c2aef2c9bd31ce116444dc3d796f510f9970a213aa3ac4696d7e21b9"
 }

package/assets/skills/email-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Transactional email: React Email templates instead of hand-written HTML tables, server-side rendering, one send module behind the provider SDK, plain-text alternatives, idempotent background sending, link safety, and deliverability (SPF/DKIM/DMARC, bounce suppression, unsubscribe).",
   "updated": "2026-07-30T19:29:19+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "c9724fdbcdbeab99573be3fd44d4cdd97c2a394d99f3c4395f118f17356b00ed"
 }

package/assets/skills/frontend-design/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one.",
   "updated": "2026-07-29T01:18:36+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "9e30ee7d8a1a1e8c6e7f4e043857cd01841c68a427752e45bc0cad9ec5cfa279"
 }

package/assets/skills/frontend-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Frontend architecture: reusable components, abstraction thresholds, state management, no-op detection (skip any operation whose result equals current state, not just form saves; dirty means different from the loaded snapshot, not touched), instant first paint (render the shell, load data async, skeletons), perceived performance (prefetch on intent, debounce/throttle, cancel stale requests, avoid waterfalls, lazy widgets), large-list rendering (infinite scroll is the preferred default, pagination the deliberate exception when the design or the user calls for it, virtualization, skeletons, progressive loading), data views that ship their own affordances by default (a log, expense, transaction or history table is not done when the rows render: fuse.js search, the filters its column kinds imply, a date range, sort, filter state in the URL, and an export of the filtered set), every reference to an entity being a way into it (a name, id, project or path in a row links to that record, reveals it in a hover card, or at minimum copies and filters by it, never inert text; machine codes get human labels and raw payloads are never dumped into a cell), optimistic UI with rollback, visual restraint (one card level, spacing before borders, one elevation scale), icon actions (repeated row/card actions are icon-only buttons with aria-label plus title, not text labels), responsive/adaptive layout (fluid units, breakpoints, no overlap/overflow, viewport meta, touch targets), form fields that declare their keyboard and casing (autocapitalize/autocomplete/inputmode per field kind, set once in the shared Input, normalized on blur), variable-length text (min-width:0 in flex/grid, wrap vs truncate, long unbroken strings, worst-case content checks), auth screens (breached-password feedback, strength meter, cookie consent before login/register), and AI chat/agent interfaces via Vercel's AI Elements registry instead of hand-rolled message threads.",
   "updated": "2026-08-04T14:11:26+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "e5fbf094be2e7a00e40d02fd7611b7333b1249d7ac951029b8944e359135aa21"
 }

package/assets/skills/git-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Git & contribution policy (senior engineering standards).",
   "updated": "2026-08-04T20:04:42+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "f55f4ed5474d5c6e7fd0804d88ac38fb3c9c3cd863519645d1415c02f4416db7"
 }

package/assets/skills/logo-sourcing-policy/skill.json

@@ -7,6 +7,6 @@
     "logoColorPolicy"
   ],
   "updated": "2026-07-17T00:17:02+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "09cdbefd98625b02a7d03685e5deed128238ff8454a83fe22279610fe3ef8ddf"
 }

package/assets/skills/security-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Application and AI-agent security: secrets, authn/authz (least privilege), credential flows with breach-checked passwords (Have I Been Pwned), OWASP Top 10, transport/crypto baseline, cookies and consent, secure logging, and agent/MCP/tool-use safety.",
   "updated": "2026-08-02T19:59:01+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "3201b6d41437626eb7bf45648c0d7f8c419dc4de87fbd9d4ca83c5ae3b6b6edf"
 }

package/assets/skills/skill-creator/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Create new skills, modify and improve existing skills, and measure skill performance with evals and benchmarks.",
   "updated": "2026-08-03T00:16:54+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "a49f6166f57d734e0f13487332da37903e925f32257447856af0fbd6a5f1dc84"
 }

package/assets/skills/task-completion-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Exhaustive completion discipline for long/multi-item tasks - inventory, coverage ledger, verified done.",
   "updated": "2026-08-02T04:15:47+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "4c2197954135dd3375f32d839238b82a95c0e93e976ddf5a9cbc4a0cf0146e97"
 }

package/assets/skills/technical-writing-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Concise, realistic technical copy - UI microcopy, descriptions, hints, empty/error states, and README/doc prose that informs without over-explaining or restating the obvious, and never uses a typographic dash.",
   "updated": "2026-07-28T20:30:23+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "a4b792103eb1f9dad93b9d70ea79dc18fe9cbbc318facf5adb47ae5907d842f9"
 }

package/assets/skills/testing-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Test strategy, coverage gates, deterministic tests, mocking discipline, regression-first bug fixing, and test-suite organization (layout by type/domain, mirrored paths, file naming, fixture/helper placement).",
   "updated": "2026-06-16T17:11:49+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "3bdf591057b760f674fb2b1425f63acb426cda2c4f042e1a74c5a5d3807df664"
 }

package/assets/skills/validation-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Strict frontend + backend schema validation, normalization before validation (shared normalizers: trim, lowercase email, capitalize names, canonicalize links and handles), schema consistency, and safe client-facing error handling.",
   "updated": "2026-08-01T17:44:16+02:00",
-  "cliVersion": "1.35.1",
+  "cliVersion": "1.35.2",
   "sha": "225e1e26f4a49fac70714b1bebc104ea42143203cc8fcc9e3330b29f05b6e025"
 }

package/bin/checksums.json

@@ -1,6 +1,6 @@
 {
-  "enigma-darwin-arm64": "f54b09af03c95df904ae57543d4ffb0b9d3d3165a561de4a81e2fcb9271f152d",
-  "enigma-linux-arm64": "712f04659e37d77d2593e0c5a66135a690b76fbd37f3b48582063742a367c69f",
-  "enigma-linux-x64": "98afcea630f221f10e1eb9850e6df64036a3375a28bacd8276ec3b6559bd8b0a",
-  "enigma-win32-x64.exe": "0f52ef8da10adf303756785bc9f30c6470662840c21e0f27110bebc3159f4726"
+  "enigma-darwin-arm64": "84bcc93dce7cda251631086faf203759217d178c5b23e6fde96468862c17b265",
+  "enigma-linux-arm64": "b7a25feccf7e905ff8be066e7a5b46a5f5605255fb91d70f308c47cab8bca73e",
+  "enigma-linux-x64": "ce632520d5d757146725adf525e90c0c8b7feb6bcec452fad023b9ccc50b36f4",
+  "enigma-win32-x64.exe": "9ef2875ee73bafe45d23928cd18056e815ad28085a0ca8b5f1ab2a15bfcc039c"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "enigma-cli",
-  "version": "1.35.1",
+  "version": "1.35.2",
   "description": "Everything you need to work with a coding agent: install shared policy skills for Claude Code, OpenAI Codex and opencode, and set up portable git security hooks.",
   "type": "module",
   "bin": {