npm - enigma-cli - Versions diffs - 1.35.2 → 1.35.3 - Mend

enigma-cli 1.35.2 → 1.35.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (24) hide show

package/README.md CHANGED Viewed

@@ -68,7 +68,10 @@ Everything in **Minimum**, plus:
 enigma                 Interactive menu: choose features to set up
 enigma install         Install/update agent skills
 enigma security        Set up git security hooks in the current repo
-enigma guard [--all]   Run the commit guard (staged files, or all tracked)
+enigma guard [--all]   Run the commit guard: staged files, --all for all tracked, or
+                       --range <base>..<head> for what a commit range touched (pre-push,
+                       CI). --json emits one document; exits 1 on findings, 2 if it
+                       could not run at all
 enigma config [k v]    Show or set runtime toggles (e.g. config commit-emoji off)
 enigma <tool> [acct]   Launch claude | codex | opencode with an account
                        (resolution: explicit > active profile > tool active);
@@ -81,7 +84,8 @@ enigma compress [file] Compress JSON/logs/text to fewer tokens (reversible via C
                        --clear wipes all dashboard data (stats/history/cache)
 enigma verify          Check that work reported as finished actually is: scans the change for
                        unfinished work and runs your verification command. parity <src> <dst>
-                       compares a codebase against a port of it. Also runs at turn end
+                       compares a codebase against a port of it. --json emits one document;
+                       exits 1 on findings, 2 when the check could not run. Also runs at turn end
 enigma mcp             Run the context-compression MCP server over stdio
 enigma dashboard|dash  Open the local dashboard (manage enigma; see savings) in your browser (http://enigma,
                        or http://localhost:24282 if :80/hosts is unavailable)
@@ -94,6 +98,30 @@ enigma check           Integrity gate: verify skills are well-formed and sealed
 enigma help | version
 ```
+Every command answers `enigma <command> --help` with its own usage, flags and exit codes.
+### Running enigma inside a container or CI runner
+```
+enigma install --hooks <cls>    Which hooks to wire: post-edit, stop | all | none
+enigma install --no-hooks       Wire none of them        --no-statusline  Leave statusLine alone
+enigma install --ref <tag|sha>  Pin the skills ref (the resolved commit is printed)
+enigma install --assets-from <dir>  Install from a staged assets tree (implies --offline)
+enigma install --offline        Make no network call at all
+ENIGMA_AGENT_CLAUDE=<abs path>   Point the gate at an agent installed off PATH
+                                 (also _CODEX, _OPENCODE, _ROVODEV, _PI). The daemon runs
+                                 the pipeline, so set it before the daemon starts
+ENIGMA_BIN_PATH=<abs path>       Use this enigma binary instead of downloading the release
+ENIGMA_SKILLS_REF=<tag|sha>      Default skills ref (install --ref overrides it)
+ENIGMA_OFFLINE=1                 No enigma command reaches the network - the skill check,
+                                 the update notice and the background linter/dashboard
+                                 installs all stand down (install --offline sets it)
+```
+`gh` is needed only by the gate's push, pr and ci steps: `enigma gate axi run --skip
+push,pr,ci` and `enigma gate init` work in an image without it.
 ## Agent skills
 Skills are authored once and deployed to every selected agent (no per-agent
@@ -265,6 +293,13 @@ On every commit the guard, OS-agnostically:
 Each protection is individually toggleable (saved to `.githooks/enigma-guard.json`).
 Bypass once with `git commit --no-verify`.
+`enigma guard` also runs standalone, outside the pre-commit hook, for a pre-push hook or CI
+job where nothing is staged: `enigma guard --range <base>..<head>` scans exactly what a
+commit range touched (a lone ref means `<ref>..HEAD`), reading each file at that range's
+head rather than the working tree, so a secret committed and then edited out is still
+caught. `--json` emits one machine-readable document; exit codes split 0 clean, 1 blocking
+findings, 2 the guard could not run at all (no repository, an unresolvable range).
 ## Multiple accounts and profiles
 Work across separate workflows with different accounts per tool - for example

package/assets/skills/anti-overengineering-policy/skill.json CHANGED Viewed

@@ -7,6 +7,6 @@
     "minimalCode"
   ],
   "updated": "2026-07-17T00:17:02+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "3f0dcc28341bb0407860534f7ce9314cfc91b5e673f8f3d13b89d61851ed75f6"
 }

package/assets/skills/anti-overengineering-review/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "On-demand over-engineering review - diff review, whole-repo audit, and enigma: debt-marker ledger (tags delete/stdlib/native/yagni/shrink, line/dep scoring); lists cuts, applies nothing.",
   "updated": "2026-06-16T11:24:30+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "f742a2be3f328b9ea1ff9a35a449177c2cbec35ad16e46f7054b7a873a2ab017"
 }

package/assets/skills/backend-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Backend/API architecture: controller-service-repository layering, modern TypeScript project configuration (module resolution, strict flags, @/* path alias), API and request optimization (batching, avoiding redundant calls, skipping no-op writes), server-side caching (Redis), and Zod boundary validation.",
   "updated": "2026-08-02T19:59:01+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "652637f818b4ce4f4d5d83fa68fa57fe7842e32fb179523958c5496af54bb938"
 }

package/assets/skills/ciphera-style-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Ciphera code style conventions (formatting, naming, imports incl. namespace imports for wide module surfaces, path-alias specifiers and no file extensions, comments, code-level anti-patterns; TypeScript-first, language-agnostic).",
   "updated": "2026-08-02T19:59:01+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "3beb0383a9cb0331ef8a579308a2517d24d57a8ba33751ad17d16d0a4f66e344"
 }

package/assets/skills/code-review-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Pre-delivery self-review gate, prioritized review dimensions, and change-quality criteria.",
   "updated": "2026-08-02T04:15:47+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "b35f0bb4a29f2346d9a1b00a4bfee9557a9b6a44116d9e6e59abcd945466dbcb"
 }

package/assets/skills/core-engineering-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Core engineering execution policy and harness orchestration (highest-authority rules), including the generalization rule that treats a named example as a class to sweep and fix.",
   "updated": "2026-08-02T04:28:51+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "95091678d4e72e3a9b1ef3ad0514e503a2a631f0d134bf772b4a1b3c66881995"
 }

package/assets/skills/database-expert/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Senior database architecture policy: engine selection (PostgreSQL by default, SQLite only for local-first/embedded stores), ORM selection (Prisma in TypeScript/JavaScript), query optimization, anti-duplication/normalization, scalability, and RGPD/GDPR encryption.",
   "updated": "2026-08-04T18:33:27+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "26fddc14caf697e830448a2cc453ddc470fe83d098d50bd67b278effba63274e"
 }

package/assets/skills/debugging-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Reproduce-isolate-fix debugging methodology with root-cause discipline and regression verification.",
   "updated": "2026-08-02T04:15:47+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "968876bcac9ce6e5a20be05c89ac97191b112c9e08679a8dc506d150c375fec4"
 }

package/assets/skills/dependency-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Dependency and supply-chain security: lockfiles and reproducible installs, version pinning, vulnerability auditing, vetting/minimizing packages, vendoring, and SBOM/provenance.",
   "updated": "2026-06-01T00:45:28+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "6375d835c2aef2c9bd31ce116444dc3d796f510f9970a213aa3ac4696d7e21b9"
 }

package/assets/skills/email-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Transactional email: React Email templates instead of hand-written HTML tables, server-side rendering, one send module behind the provider SDK, plain-text alternatives, idempotent background sending, link safety, and deliverability (SPF/DKIM/DMARC, bounce suppression, unsubscribe).",
   "updated": "2026-07-30T19:29:19+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "c9724fdbcdbeab99573be3fd44d4cdd97c2a394d99f3c4395f118f17356b00ed"
 }

package/assets/skills/frontend-design/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one.",
   "updated": "2026-07-29T01:18:36+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "9e30ee7d8a1a1e8c6e7f4e043857cd01841c68a427752e45bc0cad9ec5cfa279"
 }

package/assets/skills/frontend-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Frontend architecture: reusable components, abstraction thresholds, state management, no-op detection (skip any operation whose result equals current state, not just form saves; dirty means different from the loaded snapshot, not touched), instant first paint (render the shell, load data async, skeletons), perceived performance (prefetch on intent, debounce/throttle, cancel stale requests, avoid waterfalls, lazy widgets), large-list rendering (infinite scroll is the preferred default, pagination the deliberate exception when the design or the user calls for it, virtualization, skeletons, progressive loading), data views that ship their own affordances by default (a log, expense, transaction or history table is not done when the rows render: fuse.js search, the filters its column kinds imply, a date range, sort, filter state in the URL, and an export of the filtered set), every reference to an entity being a way into it (a name, id, project or path in a row links to that record, reveals it in a hover card, or at minimum copies and filters by it, never inert text; machine codes get human labels and raw payloads are never dumped into a cell), optimistic UI with rollback, visual restraint (one card level, spacing before borders, one elevation scale), icon actions (repeated row/card actions are icon-only buttons with aria-label plus title, not text labels), responsive/adaptive layout (fluid units, breakpoints, no overlap/overflow, viewport meta, touch targets), form fields that declare their keyboard and casing (autocapitalize/autocomplete/inputmode per field kind, set once in the shared Input, normalized on blur), variable-length text (min-width:0 in flex/grid, wrap vs truncate, long unbroken strings, worst-case content checks), auth screens (breached-password feedback, strength meter, cookie consent before login/register), and AI chat/agent interfaces via Vercel's AI Elements registry instead of hand-rolled message threads.",
   "updated": "2026-08-04T14:11:26+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "e5fbf094be2e7a00e40d02fd7611b7333b1249d7ac951029b8944e359135aa21"
 }

package/assets/skills/git-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Git & contribution policy (senior engineering standards).",
   "updated": "2026-08-04T20:04:42+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "f55f4ed5474d5c6e7fd0804d88ac38fb3c9c3cd863519645d1415c02f4416db7"
 }

package/assets/skills/logo-sourcing-policy/skill.json CHANGED Viewed

@@ -7,6 +7,6 @@
     "logoColorPolicy"
   ],
   "updated": "2026-07-17T00:17:02+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "09cdbefd98625b02a7d03685e5deed128238ff8454a83fe22279610fe3ef8ddf"
 }

package/assets/skills/security-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Application and AI-agent security: secrets, authn/authz (least privilege), credential flows with breach-checked passwords (Have I Been Pwned), OWASP Top 10, transport/crypto baseline, cookies and consent, secure logging, and agent/MCP/tool-use safety.",
   "updated": "2026-08-02T19:59:01+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "3201b6d41437626eb7bf45648c0d7f8c419dc4de87fbd9d4ca83c5ae3b6b6edf"
 }

package/assets/skills/skill-creator/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Create new skills, modify and improve existing skills, and measure skill performance with evals and benchmarks.",
   "updated": "2026-08-03T00:16:54+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "a49f6166f57d734e0f13487332da37903e925f32257447856af0fbd6a5f1dc84"
 }

package/assets/skills/task-completion-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Exhaustive completion discipline for long/multi-item tasks - inventory, coverage ledger, verified done.",
   "updated": "2026-08-02T04:15:47+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "4c2197954135dd3375f32d839238b82a95c0e93e976ddf5a9cbc4a0cf0146e97"
 }

package/assets/skills/technical-writing-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Concise, realistic technical copy - UI microcopy, descriptions, hints, empty/error states, and README/doc prose that informs without over-explaining or restating the obvious, and never uses a typographic dash.",
   "updated": "2026-07-28T20:30:23+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "a4b792103eb1f9dad93b9d70ea79dc18fe9cbbc318facf5adb47ae5907d842f9"
 }

package/assets/skills/testing-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Test strategy, coverage gates, deterministic tests, mocking discipline, regression-first bug fixing, and test-suite organization (layout by type/domain, mirrored paths, file naming, fixture/helper placement).",
   "updated": "2026-06-16T17:11:49+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "3bdf591057b760f674fb2b1425f63acb426cda2c4f042e1a74c5a5d3807df664"
 }

package/assets/skills/validation-policy/skill.json CHANGED Viewed

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Strict frontend + backend schema validation, normalization before validation (shared normalizers: trim, lowercase email, capitalize names, canonicalize links and handles), schema consistency, and safe client-facing error handling.",
   "updated": "2026-08-01T17:44:16+02:00",
-  "cliVersion": "1.35.2",
+  "cliVersion": "1.35.3",
   "sha": "225e1e26f4a49fac70714b1bebc104ea42143203cc8fcc9e3330b29f05b6e025"
 }

package/bin/checksums.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
-  "enigma-darwin-arm64": "84bcc93dce7cda251631086faf203759217d178c5b23e6fde96468862c17b265",
-  "enigma-linux-arm64": "b7a25feccf7e905ff8be066e7a5b46a5f5605255fb91d70f308c47cab8bca73e",
-  "enigma-linux-x64": "ce632520d5d757146725adf525e90c0c8b7feb6bcec452fad023b9ccc50b36f4",
-  "enigma-win32-x64.exe": "9ef2875ee73bafe45d23928cd18056e815ad28085a0ca8b5f1ab2a15bfcc039c"
+  "enigma-darwin-arm64": "7806087b53324b06105fe76f16191f79e16bb25a00b8c7fbae4c09d2ebcfaa79",
+  "enigma-linux-arm64": "0a34fb5662b3523253d87098b93281be8fd57006e920846840f806a5eb1228cd",
+  "enigma-linux-x64": "c9dfc40e4d568557ae3e91ea54ce71698ce23825406eb34d43183c6d9c75b303",
+  "enigma-win32-x64.exe": "9d1add8d345b8e41f766eb016fa2b2295952e55f65053264a5f5e33bc13e4835"
 }

package/dist/guard.js CHANGED Viewed

Binary file

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "enigma-cli",
-  "version": "1.35.2",
+  "version": "1.35.3",
   "description": "Everything you need to work with a coding agent: install shared policy skills for Claude Code, OpenAI Codex and opencode, and set up portable git security hooks.",
   "type": "module",
   "bin": {