kodelyth-ecc 1.5.9 → 1.7.0

package/README.md

@@ -8,9 +8,10 @@
 ![Antigravity](https://img.shields.io/badge/Antigravity-Ready-00ADD8)
 ![Cursor](https://img.shields.io/badge/Cursor-Ready-3b82f6)
 ![Codex](https://img.shields.io/badge/Codex-Ready-10b981)
-![Version](https://img.shields.io/badge/version-1.5.8-orange)
-![Agents](https://img.shields.io/badge/Agents-62-brightgreen)
-![Skills](https://img.shields.io/badge/Skills-188-brightgreen)
+![Version](https://img.shields.io/badge/version-1.7.0-orange)
+![Agents](https://img.shields.io/badge/Agents-70-brightgreen)
+![Devil Mode](https://img.shields.io/badge/Devil%20Mode-new-red)
+![Skills](https://img.shields.io/badge/Skills-194-brightgreen)
 ![Memory](https://img.shields.io/badge/Local%20Memory-on-blueviolet)
 ![Auto Recall](https://img.shields.io/badge/Auto%20Chat%20Recall-on-blueviolet)
 ![Parallel Agents](https://img.shields.io/badge/Parallel%20Agents-new-red)
@@ -18,17 +19,17 @@
 
 </div>
 
-**Kodelyth ECC** is a production-grade AI coding toolkit — **62 specialist agents, 188 skills, 90 commands**, a god-tier **semantic intent-routing system**, and **local self-learning memory** that gets smarter at helping *you* every session.
+**Kodelyth ECC** is a production-grade AI coding toolkit — **70 specialist agents (incl. an 8-agent devil-mode adversarial crew), 194 skills, 97 commands**, a god-tier **semantic intent-routing system**, local self-learning memory, MCP server, swarm orchestrator, and an observability dashboard — all local, zero telemetry.
 
-Works with **Claude Code**, **Windsurf**, **Cursor**, **Codex CLI**, **Google Antigravity**, and **OpenCode**.
+Works with **Claude Code**, **Windsurf**, **Cursor**, **Codex CLI**, **Google Antigravity**, **OpenCode**, **Cline**, **Roo Code**, **Aider**, **Kimi**, and **Gemini CLI**.
 
-> No dashboard. No telemetry. No cloud. Just rules, agents, skills, and your own private memory store — all on your disk.
+> No telemetry. No cloud. Just rules, agents, skills, MCP server, and your own private memory store — all on your disk. The local dashboard gives you full visibility without sending anything anywhere.
 
 ---
 
-## What Makes ECC Different
+## Why ECC ≠ Another Agent Collection
 
-Most "AI agent kits" are folders of markdown files you have to remember the names of. ECC has **intent routing** baked into the rules layer — you describe your problem in plain words, the AI announces which specialist is taking over, and you get senior-grade help without memorizing a directory.
+Most "AI agent kits" are folders of markdown files you have to remember the names of. **ECC is infrastructure** — a layered system where intent routing, compound memory, parallel orchestration, and quality hooks all reinforce each other.
 
 ```
 You:   "I've been staring at this NullPointerException for two hours,
@@ -42,12 +43,48 @@ AI:    → Routing to debug-detective (your error + frustration matches the bug-
        First, can you share the full stack trace and...
 ```
 
-You never typed `use debug-detective`. You didn't have to.
+You never typed `use debug-detective`. You didn't have to. The toolkit read the intent, picked the specialist, and announced the routing. Next time you can invoke it directly — but you don't have to remember names to get senior-grade help.
+
+### The Layer Stack
+
+| Layer | What it does | Other kits |
+|---|---|---|
+| **Intent routing** | Plain-language → right specialist via 10-tier priority rules | Mostly missing — you memorize names |
+| **70 agents** | Specialists with playbooks, severity calibration, real commands | Often persona-only ("you are a senior engineer...") |
+| **194 skills** | Domain knowledge files agents read on demand | Rarely separated from agents |
+| **97 commands** | Slash workflows (`/tdd`, `/devil-mode`, `/team-review`) | Limited or none |
+| **8 parallel commands** | Fire 3-8 agents simultaneously, aggregate results | Rare |
+| **Compound memory** | BM25 local recall + auto-inject + project lessons | Cloud-only or absent |
+| **22+ hooks** | Quality gates, secret scan, project-DNA detection | Often missing |
+| **12 IDE platforms** | Claude Code, Windsurf, Cursor, Codex, Antigravity, OpenCode, Cline, Roo Code, Aider, Kimi, Gemini CLI (project + home) | 1-2 platforms typical |
+| **Zero telemetry** | Everything stays on your disk; verifiable | Many kits phone home |
+
+### Quick Comparison vs Other Kits
+
+| Feature | **Kodelyth ECC** | `agency-agents` | `awesome-claude-agents` | Generic prompt libs |
+|---|---|---|---|---|
+| Specialist agents | **70** | ~30 | ~20 | Varies |
+| Skills as separate layer | ✅ 194 | ❌ | ❌ | ❌ |
+| Slash commands | ✅ 97 | Some | Some | ❌ |
+| **Parallel multi-agent commands** | ✅ 8 (incl. `/devil-mode`) | ❌ | ❌ | ❌ |
+| **Intent routing (plain language → agent)** | ✅ 10-tier rule | ❌ | ❌ | ❌ |
+| **Local BM25 self-learning memory** | ✅ | ❌ | ❌ | ❌ |
+| **Compound learning from corrections** | ✅ `tasks/lessons.md` | ❌ | ❌ | ❌ |
+| **Adversarial / red-team agents** | ✅ 8 (devil-mode) | ❌ | ❌ | ❌ |
+| Quality hooks | ✅ 22+ | Some | ❌ | ❌ |
+| IDE platforms | **12** (Claude Code, Windsurf, Cursor, Codex, Antigravity, OpenCode, Cline, Roo Code, Aider, Kimi, Gemini CLI) | 1-2 | 1 | Varies |
+| Telemetry | ❌ none | Varies | ❌ | Varies |
+| Test coverage | ✅ 336 tests | ❌ | ❌ | ❌ |
+| Distributed via | `npx`, curl, clone | Manual | Manual | Manual |
 
 ---
 
 ## Install
 
+<div align="center">
+<img src="social/section-install.svg" alt="Install — One command, 12 platforms, any OS" width="900"/>
+</div>
+
 ### Option 1 — npx from npm (recommended, any platform)
 
 ```bash
@@ -58,6 +95,12 @@ npx kodelyth-ecc --target cursor-project      # Cursor IDE
 npx kodelyth-ecc --target codex-home          # Codex CLI
 npx kodelyth-ecc --target antigravity         # Google Antigravity
 npx kodelyth-ecc --target opencode            # OpenCode
+npx kodelyth-ecc --target cline               # Cline (VS Code)
+npx kodelyth-ecc --target roocode             # Roo Code (VS Code)
+npx kodelyth-ecc --target aider               # Aider terminal agent
+npx kodelyth-ecc --target kimi                # Kimi Code
+npx kodelyth-ecc --target gemini-project      # Gemini CLI (project)
+npx kodelyth-ecc --target gemini-home         # Gemini CLI (global)
 ```
 
 Node.js 18+ required. [Download Node](https://nodejs.org) if you don't have it.
@@ -82,6 +125,26 @@ With a target:
 curl -fsSL https://raw.githubusercontent.com/sifxprime/kodelyth-ecc/main/install.sh | bash -s -- --target windsurf-project
 ```
 
+### Power Bundles
+
+Pre-configured for who you actually are:
+
+```bash
+npx kodelyth-ecc --bundle indie-hacker    # Solo founder / SaaS — ship fast, validate, harden
+npx kodelyth-ecc --bundle red-team        # Security engineer — devil-mode + adversarial workflows
+npx kodelyth-ecc --bundle enterprise      # Compliance / audit team — SBOM, license, supply chain
+```
+
+Each bundle installs the full ECC toolkit (all 70 agents, 194 skills, 97 commands, 22+ hooks), adds a `BUNDLE.md` cheat sheet, and biases the AI toward audience-fit workflows on every session.
+
+Combine with any target:
+
+```bash
+npx kodelyth-ecc --bundle red-team --target windsurf-project
+npx kodelyth-ecc --bundle enterprise --target codex-home
+npx kodelyth-ecc --bundle indie-hacker --target antigravity
+```
+
 ### Option 4 — Clone and run
 
 ```bash
@@ -99,8 +162,48 @@ cd kodelyth-ecc
 
 ---
 
+## MCP Server — Universal Adapter
+
+<div align="center">
+<img src="social/section-mcp.svg" alt="MCP Server — universal adapter for any agent framework" width="900"/>
+</div>
+
+Run ECC as a Model Context Protocol server and consume it from Claude Desktop, LangGraph, AutoGen, CrewAI, OpenAI Agents SDK, Cursor, Windsurf — anything that speaks MCP.
+
+```bash
+npx kodelyth-ecc mcp                         # stdio JSON-RPC server
+```
+
+What it exposes (all local, zero telemetry):
+
+- **16 tools** — `route_intent`, `recall_memory`, `capture_memory`, `list_agents`, `get_skill`, `audit_skill_match`, …
+- **6 prompts** — full intent routing rule, agents/skills/commands overviews, handoff chains, devil-mode
+- **365 resources** — every agent, skill, command, rule, and bundle addressable via `kodelyth://...` URIs
+
+Drop into Claude Desktop in 30 seconds:
+
+```jsonc
+// claude_desktop_config.json
+{
+  "mcpServers": {
+    "kodelyth-ecc": {
+      "command": "npx",
+      "args": ["-y", "kodelyth-ecc", "mcp"]
+    }
+  }
+}
+```
+
+Full reference: [`docs/mcp.md`](docs/mcp.md).
+
+---
+
 ## How Intent Routing Works
 
+<div align="center">
+<img src="social/section-routing.svg" alt="Intent routing — plain language to the right specialist agent" width="900"/>
+</div>
+
 The toolkit ships with a single rule file (`rules/common/agent-intent-routing.md`) that the AI loads automatically on every session. It maps **what you say** to **the right specialist agent** across 10 priority tiers.
 
 ### Two activation paths
@@ -167,7 +270,86 @@ See `skills/agent-handoff/SKILL.md` for the full handoff protocol and standard c
 
 ---
 
-## Kodelyth Memory — Local Self-Learning (new in v1.4.0)
+## Parallel Agents — 8 Commands, Minutes Not Hours
+
+<div align="center">
+<img src="social/section-parallel.svg" alt="Parallel agents — fire multiple specialists simultaneously" width="900"/>
+</div>
+
+Eight commands fire multiple specialist agents simultaneously and aggregate their results into a single structured report.
+
+| Command | Agents Fired | Time Saved |
+|---|---|---|
+| `/project-launch` | architect + pair-programmer + security-reviewer + tdd-guide + ux-reviewer | 45 min → 10 min |
+| `/team-review` | code-reviewer + security-reviewer + performance-optimizer + api-guardian | 60 min → 15 min |
+| `/security-audit` | security-reviewer + dependency-doctor + api-guardian | 30 min → 8 min |
+| `/debug-blitz` | debug-detective + silent-failure-hunter + env-debugger | 60 min → 15 min |
+| `/refactor-sprint` | refactor-cleaner + code-simplifier + type-design-analyzer + tdd-guide | 45 min → 12 min |
+| `/pre-release` | release-captain + security-reviewer + code-reviewer | 30 min → 8 min |
+| `/onboard` | code-explorer + architect + doc-updater | 45 min → 12 min |
+| `/devil-mode` | 8 adversarial agents (see below) | Hours → 20 min |
+
+Each command waits for all agents to complete, then returns a single **Team Review Report** with findings bucketed by severity: CRITICAL → HIGH → MEDIUM → LOW.
+
+---
+
+## Devil Mode — 8 Adversarial Agents
+
+<div align="center">
+<img src="social/section-devil.svg" alt="Devil Mode — 8 adversarial agents, red-team your own code" width="900"/>
+</div>
+
+8 adversarial agents that read your codebase the way an attacker would. Fire them in parallel with `/devil-mode`:
+
+```
+/devil-mode --pre-public    # before going open-source — full secret/license/IP sweep
+/devil-mode --pre-launch    # before launch — adds AI red-team + chaos planning
+/devil-mode --all           # all 8 adversarial agents in parallel
+```
+
+The crew: `prompt-injection-hunter`, `supply-chain-auditor`, `secret-hunter`, `license-violation-finder`, `jailbreak-tester`, `code-stealer-detector`, `backdoor-hunter`, `chaos-engineer`. Each ships with real bash-grep patterns, severity calibration, and remediation playbooks — not theatrical personas.
+
+---
+
+## Live Dashboard — Full Visibility, Localhost Only
+
+<div align="center">
+<img src="social/section-dashboard.svg" alt="Dashboard — localhost observability, zero telemetry" width="900"/>
+</div>
+
+**You have a working, real-time dashboard.** One command launches it:
+
+```bash
+npx kodelyth-ecc dashboard
+# Opens http://127.0.0.1:5747 in your browser
+```
+
+What's inside:
+
+| Tab | What you see |
+|---|---|
+| **Overview** | Agent count, memory stats, session count, recent activity |
+| **Memory** | Browse, search, and manage your local BM25 memory store |
+| **Evolve** | Self-improving memory — review AI-proposed refinements |
+| **Catalog** | Full searchable index of all 70 agents, 194 skills, 97 commands |
+| **Sessions** | Browse past session excerpts and exported bundles |
+
+Security design:
+- **GET-only** — no write endpoints accessible from the UI
+- **Localhost-bound** — refuses connections from non-localhost Host headers (DNS rebinding protection)
+- **Hardened headers** — `Content-Security-Policy`, `X-Frame-Options`, `X-Content-Type-Options` on every response
+- **Zero telemetry** — no external network calls ever leave your machine
+- **Max 10 SSE clients** — connection cap prevents resource exhaustion
+
+Full reference: [`docs/dashboard.md`](docs/dashboard.md).
+
+---
+
+## Kodelyth Memory — Local Self-Learning
+
+<div align="center">
+<img src="social/section-memory.svg" alt="Kodelyth Memory — local BM25 self-learning memory" width="900"/>
+</div>
 
 The first time you solve a hard problem, ECC remembers what worked. The next time you hit something similar, your AI surfaces the past solution before you ask.
 
@@ -196,7 +378,7 @@ Session 2 (August, new project):
 | **Storage** | `~/.kodelyth/memory/memories.jsonl` — append-only log on your disk only. Override with `KODELYTH_MEMORY_DIR`. |
 | **Retrieval** | BM25 keyword + tag search. Pure JS, sub-millisecond, no embeddings, no network. |
 | **Session-start injection** | A SessionStart hook builds a cache-friendly context block: stable prefix (your patterns + recent project memories) → variable suffix (relevant to current task). |
-| **Auto chat detection** *(v1.4.1)* | A `UserPromptSubmit` hook watches every message you type, runs BM25 search on it, and injects relevant memories **before the AI responds**. Per-session repeat suppression. Skips trivial / agent-command prompts. |
+| **Auto chat detection** | A `UserPromptSubmit` hook watches every message you type, runs BM25 search on it, and injects relevant memories **before the AI responds**. Per-session repeat suppression. |
 | **Cost win** | The stable prefix sits in the prompt cache. Anthropic charges 10% on cached tokens (5-min TTL); OpenAI auto-caches prefixes ≥1024 tokens. Long sessions become dramatically cheaper. |
 
 ### Privacy
@@ -224,7 +406,11 @@ See `skills/kodelyth-memory/SKILL.md` for the full design + CLI reference.
 
 ---
 
-## Compound Learning System — Self-Improvement Loop (new in v1.5.1)
+## Compound Learning System — Self-Improvement Loop
+
+<div align="center">
+<img src="social/section-learning.svg" alt="Compound learning — every correction stacks, Claude matches your style" width="900"/>
+</div>
 
 Every correction you give Claude gets encoded into your project permanently. The toolkit gets smarter every session without any effort from you.
 
@@ -253,7 +439,7 @@ Month 3:    You try another tool
 |---|---|---|---|
 | **Project Lessons** | `tasks/lessons.md` | Per-project | Hard rules from your corrections. Injected at session start as mandatory context. |
 | **Global Memory** | `~/.kodelyth/memory/` | Cross-project | BM25 fuzzy recall of past solutions. Auto-fires on every prompt you type. |
-| **Intent Routing** | 61 agents | Always-on | Routes your message to the right specialist from the first word. No names needed. |
+| **Intent Routing** | 70 agents | Always-on | Routes your message to the right specialist from the first word. No names needed. |
 
 ### How it works under the hood
 
@@ -261,22 +447,15 @@ Month 3:    You try another tool
 - Scans session JSONL for 12 correction signal patterns (`"no don't"`, `"use X instead"`, `"stop doing Y"`, `"we always"`, `"wrong approach"`, etc.)
 - Extracts them as plain-language rules
 - Appends them to `tasks/lessons.md` with date grouping
-- Creates the file automatically if it doesn't exist
 
 **`read-lessons.js`** — SessionStart hook, fires first before any other hook:
 - Reads `tasks/lessons.md` and formats rules as `PROJECT LESSONS — HARD RULES` block
 - Detects project DNA automatically: Node.js + framework (Next.js, React, NestJS, etc.), Go, Rust, Python, Java/Gradle, package manager (pnpm/bun/yarn/npm), test runner
 - Surfaces open `tasks/todo.md` items into session context
-- All injected as `additionalContext` — Claude sees it before your first message
-
-**`rules/common/self-improvement-workflow.md`** — always-on rule:
-- Boris Cherny's (Claude Code creator) internal team workflow, all 6 patterns
-- Plan Node Default, Subagent Strategy, Self-Improvement Loop, Verification Before Done, Demand Elegance, Autonomous Bug Fixing
-- Extended with ECC's three-layer compound memory protocol
 
 ### `tasks/lessons.md` — your project's rulebook
 
-Edit it freely. Add rules manually. Remove rules that no longer apply. It's a plain markdown file at `tasks/lessons.md` in your project root. The more corrections you give, the more precisely it matches how you work.
+Edit it freely. Add rules manually. Remove rules that no longer apply. It's a plain markdown file at `tasks/lessons.md` in your project root.
 
 ```markdown
 # Claude Lessons
@@ -297,17 +476,22 @@ Project: **my-app**
 
 | Component | Count | Description |
 |---|---|---|
-| Agents | **62** | Specialist subagents — reviewers, planners, debuggers, architects, incident-commander, load-tester, memory, image-architect |
-| Skills | **188** | Domain knowledge — patterns, testing, security, DevOps, intent routing, memory |
-| Commands | **90** | Slash command workflows (`/tdd`, `/plan`, `/memory`, `/doctor`, `/update`, etc.) |
-| Hooks | **20+** | Quality gates, secret scanning, branch checks, memory inject + capture + correction + project DNA |
-| Rules | **17** | Always-on coding standards + intent routing + memory protocol + self-improvement workflow |
+| Agents | **70** | Specialist subagents — reviewers, planners, debuggers, architects, devil-mode adversarial crew, incident-commander, load-tester, memory, image-architect |
+| Skills | **194** | Domain knowledge — patterns, testing, security, DevOps, intent routing, memory |
+| Commands | **97** | Slash command workflows (`/tdd`, `/plan`, `/memory`, `/devil-mode`, `/doctor`, `/update`, etc.) |
+| Parallel commands | **8** | `/devil-mode`, `/team-review`, `/security-audit`, `/debug-blitz`, `/refactor-sprint`, `/pre-release`, `/onboard`, `/project-launch` |
+| Hooks | **22+** | Quality gates, secret scanning, branch checks, memory inject + capture + correction + project DNA |
+| Rules | **14** | Always-on coding standards + intent routing + memory protocol + self-improvement workflow |
 | Memory | **local** | BM25-indexed personal memory at `~/.kodelyth/memory/` (zero deps) |
 
 ---
 
 ## Agent Arsenal
 
+<div align="center">
+<img src="social/section-agents.svg" alt="70 specialist agents — one for every situation" width="900"/>
+</div>
+
 ### Kodelyth Exclusives — The 16 Agents That Make ECC
 
 | Agent | One-line job |
@@ -329,14 +513,6 @@ Project: **my-app**
 | `flake-hunter` | Stabilizes flaky tests — never adds blind retries |
 | `image-architect` | AI image generation — Gemini/DALL-E/fal.ai/SVG, platform-aware |
 
-### Parallel Commands — New in v1.5.2
-
-| Command | What it does | Time saved |
-|---|---|---|
-| `/project-launch` | Fires 5 founding-team agents simultaneously on a new project | 45 min → 10 min |
-| `/team-review` | Fires 4 audit agents simultaneously on existing code | 60 min → 15 min |
-| `/lessons` | Loads project lessons on any platform (cross-platform) | Works everywhere |
-
 ### Agent Categories
 
 | Category | Agents |
@@ -359,14 +535,18 @@ Project: **my-app**
 
 ## Hooks — Always Running in Background
 
+<div align="center">
+<img src="social/section-hooks.svg" alt="22+ automated quality hooks — PreToolUse, PostToolUse, Stop" width="900"/>
+</div>
+
 Once installed (Claude Code target), these hooks run automatically with zero configuration:
 
 | Hook | What it does |
 |---|---|
-| Session start — lessons | Reads `tasks/lessons.md` and injects your hard rules + project DNA as context *(v1.5.1)* |
+| Session start — lessons | Reads `tasks/lessons.md` and injects your hard rules + project DNA as context |
 | Session start — memory | Loads relevant past solutions from global BM25 memory |
 | Auto chat recall | Watches every prompt, injects relevant memories before AI responds |
-| Correction capture | Detects when you correct Claude, encodes the rule to `tasks/lessons.md` *(v1.5.1)* |
+| Correction capture | Detects when you correct Claude, encodes the rule to `tasks/lessons.md` |
 | Pre-commit | Catches `console.log`, secrets, bad commit messages |
 | Quality gate | Runs type checks and formatting after edits |
 | Git push reminder | Prompts review before pushing |
@@ -440,8 +620,8 @@ The intent router will route you to the right one. The AI announces who's taking
 
 | Source | Destination | What it does |
 |---|---|---|
-| `agents/` | `~/.claude/agents/` | All 62 subagents available globally |
-| `skills/` | `~/.claude/skills/` | All 188 skills loadable via commands |
+| `agents/` | `~/.claude/agents/` | All 70 subagents available globally |
+| `skills/` | `~/.claude/skills/` | All 194 skills loadable via commands |
 | `hooks/hooks.json` | `~/.claude/hooks/` | Automated quality gates |
 | `rules/` | `~/.claude/rules/` | Always-on standards + intent routing |
 | `commands/` | `~/.claude/commands/` | Slash commands (`/tdd`, `/plan`, etc.) |
@@ -534,9 +714,9 @@ npx kodelyth-ecc typescript python golang rust java kotlin php swift cpp dart ru
 
 ECC is **100% local files**. No telemetry, no cloud, no account, no tracking. Everything is markdown your AI reads on every session.
 
-- **No dashboard** — we removed it in v1.3.0 because it wasn't giving accurate cross-platform data and added confusion. The toolkit is now leaner.
-- **No phoning home** — install scripts copy files and exit. That's it.
+- **No phoning home** — install scripts copy files and exit. MCP server, dashboard, swarm, and replay all stay on localhost.
 - **You own everything** — fork the repo, edit any agent, write your own.
+- **Verifiable** — `npx kodelyth-ecc verify` checks your install against the sha256 manifest.
 
 ---
 
@@ -552,68 +732,72 @@ See [CONTRIBUTING.md](CONTRIBUTING.md) for templates, checklists, and the full K
 
 ## Changelog
 
-See [CHANGELOG.md](CHANGELOG.md). v1.5.8 highlights:
+See [CHANGELOG.md](CHANGELOG.md). v1.7.0 highlights:
 
-- **zsh inline comment fix** — `npx kodelyth-ecc --target windsurf-home  # comment` no longer crashes. Fixed at two layers: Node.js arg filter + `install.sh` handler.
-- **Dynamic install counts** — agent/skill/command counts in `install.sh` and `install.ps1` are now computed from the filesystem at install time. Never wrong again.
-- **Ruby + Elixir language rules** — coding-style, patterns, testing, security, and hooks for both languages. Install with `npx kodelyth-ecc ruby elixir`.
-- **`/doctor` command** — run a health check on your ECC install without leaving your IDE.
-- **`/update` command** — upgrade to the latest version automatically; reads your install state so you don't have to remember your original flags.
-- **5 new parallel commands** (`/security-audit`, `/pre-release`, `/debug-blitz`, `/refactor-sprint`, `/onboard`) added in v1.5.4.
-- **GitHub contribution templates** — bug report, new agent proposal, and PR checklist now live in `.github/`.
-- **All agent counts and docs corrected** — `rules/common/agents.md` now lists all 62 agents (was 10), README badges and SVGs updated to v1.5.7.
+- **MCP Server** — 16 tools, 6 prompts, 365 resources; stdio JSON-RPC; zero telemetry; works with Claude Desktop, LangGraph, AutoGen, CrewAI, OpenAI Agents SDK
+- **Dashboard hardening** — DNS rebinding protection, shell injection fix (`execFileSync`), CSP on all responses, SSE client cap (max 10), TOCTOU fixes
+- **Devil Mode** — 8 adversarial agents, `--pre-public` / `--pre-launch` / `--all` flags, real bash-grep patterns and remediation playbooks
+- **336 tests** passing across 24 test files
+
+v1.5.8 highlights:
+
+- **zsh inline comment fix** — `npx kodelyth-ecc --target windsurf-home  # comment` no longer crashes.
+- **Dynamic install counts** — agent/skill/command counts computed from filesystem at install time.
+- **Ruby + Elixir language rules** — coding-style, patterns, testing, security, and hooks.
+- **`/doctor` command** — health check on your ECC install without leaving your IDE.
+- **`/update` command** — upgrade to the latest version automatically.
+- **5 new parallel commands** (`/security-audit`, `/pre-release`, `/debug-blitz`, `/refactor-sprint`, `/onboard`).
 
 v1.5.2 highlights:
 
-- **Added:** `image-architect` agent — platform-aware AI image generation. Gemini Imagen 3 on Antigravity, DALL-E 3 on Codex, fal.ai on Claude Code, SVG fallback everywhere
-- **Added:** `/project-launch` — 5 founding-team agents fire in parallel for new projects (45 min → 10 min)
-- **Added:** `/team-review` — 4 audit agents fire in parallel for existing code (60 min → 15 min)
-- **Added:** `/lessons` command — cross-platform lesson loading, works on Windsurf, Cursor, Codex, Antigravity, OpenCode
-- **Updated:** intent routing with image generation, parallel commands, and lessons patterns
+- **Added:** `image-architect` agent — platform-aware AI image generation (Gemini Imagen 3, DALL-E 3, fal.ai, SVG)
+- **Added:** `/project-launch` — 5 founding-team agents fire in parallel (45 min → 10 min)
+- **Added:** `/team-review` — 4 audit agents fire in parallel (60 min → 15 min)
+- **Added:** `/lessons` command — cross-platform lesson loading
 
 v1.5.1 highlights:
 
-- **Added:** `capture-correction.js` Stop hook — detects 12 correction signal patterns in session JSONL, encodes them as hard rules to `tasks/lessons.md` automatically at session end
-- **Added:** `read-lessons.js` SessionStart hook — injects `tasks/lessons.md` rules + project DNA (stack, framework, package manager, open todos) as session context before first message
-- **Added:** `rules/common/self-improvement-workflow.md` — Boris Cherny's internal Claude Code team workflow (6 patterns) + ECC three-layer compound memory architecture
-- **Architecture:** Three-layer compound memory — `tasks/lessons.md` (project-local) + `~/.kodelyth/memory/` (global BM25) + 61 agents (intent routing)
+- **Added:** `capture-correction.js` Stop hook — auto-encodes corrections to `tasks/lessons.md`
+- **Added:** `read-lessons.js` SessionStart hook — injects lessons + project DNA before first message
+- **Added:** `rules/common/self-improvement-workflow.md` — 6-pattern self-improvement loop
 
 v1.5.0 highlights:
 
-- **Added:** `incident-commander` — production incident response (triage, containment, postmortem) — distinct from `debug-detective`
-- **Added:** `load-tester` — load/stress testing with k6, Locust, Artillery — distinct from `performance-optimizer`
-- **Updated:** All 9 social SVGs refreshed for v1.5.0 feature set
-- **Updated:** Complete wiki rewrite (all 7 files) — 6-platform matrix, all 61 agents documented
-- **Updated:** Intent routing with new incident/load patterns and 2 new chains
-
-v1.4.1 highlights:
-
-- **Added:** Auto chat detection — `UserPromptSubmit` hook watches every prompt, auto-injects relevant memories
-- **Added:** Per-session repeat suppression (no memory shown twice in same session)
-- **Added:** 9 new tests (47 total passing)
+- **Added:** `incident-commander` — production incident response
+- **Added:** `load-tester` — load/stress testing with k6, Locust, Artillery
 
 v1.4.0 highlights:
 
 - **Added:** `kodelyth-memory` — local self-learning memory (BM25, zero deps, cache-friendly)
-- **Added:** SessionStart hook injects relevant past memories; Stop hook queues candidates for review
-- **Added:** `/memory` slash command + `kodelyth-memory` agent + `memory-protocol` rule
-- **Added:** 12 new tests (38 total passing)
-- **Honest disclosure:** "Self-learning" means smarter context retrieval, not model fine-tuning
+- **Added:** Auto chat detection hook, SessionStart injection, Stop hook queue
+
+---
 
-v1.3.0 highlights:
+## Author
 
-- **Removed:** Lens dashboard (was inaccurate across cloud-AI platforms)
-- **Added:** God-tier `agent-intent-routing` rule — 10 priority tiers, 50+ patterns
-- **Added:** 5 new agents — `dependency-doctor`, `git-rescue`, `release-captain`, `env-debugger`, `flake-hunter`
-- **Added:** 2 new skills — `intent-routing` (routing system docs), `agent-handoff` (chain protocol)
-- **Improved:** Cross-platform install parity — full Windows support for all targets
+<div align="center">
+<img src="social/section-author.svg" alt="Shofiqul Islam — Creator of Kodelyth ECC" width="900"/>
+</div>
+
+**Kodelyth ECC** is designed and maintained by **Shofiqul Islam** — full-stack engineer and AI tooling builder.
+
+| Platform | Link |
+|---|---|
+| GitHub | [@sifxprime](https://github.com/sifxprime) |
+| X / Twitter | [@sifxprime](https://x.com/sifxprime) |
+| Facebook | [facebook.com/sifxprime](https://facebook.com/sifxprime) |
+| Instagram | [@sifxprime](https://instagram.com/sifxprime) |
+| npm | [npmjs.com/package/kodelyth-ecc](https://www.npmjs.com/package/kodelyth-ecc) |
 
 ---
 
 <div align="center">
 
-Built and maintained by **Kodelyth** — [@sifxprime](https://github.com/sifxprime)
+[![npm](https://img.shields.io/badge/npm-kodelyth--ecc-red.svg)](https://www.npmjs.com/package/kodelyth-ecc)
+[![GitHub](https://img.shields.io/badge/GitHub-sifxprime%2Fkodelyth--ecc-181717.svg)](https://github.com/sifxprime/kodelyth-ecc)
+[![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![Node](https://img.shields.io/badge/Node.js-18%2B-339933.svg)](https://nodejs.org)
 
-Powered by **Kodelyth**.
+Built with craft. Zero telemetry. All yours.
 
 </div>

package/VERSION

@@ -1 +1 @@
-1.5.9
+1.7.0