kodelyth-ecc 1.5.9 → 1.7.0

package/wiki/Platform-Support.md

@@ -1,31 +1,36 @@
 # Platform Support
 
-Kodelyth ECC works across 6 AI coding platforms. Feature availability varies by platform.
+Kodelyth ECC works across 12 AI coding platforms. Feature availability varies by platform.
 
 ---
 
 ## Capability Matrix
 
-| Feature | Claude Code | Windsurf | Cursor | Codex CLI | Antigravity | OpenCode |
-|---|---|---|---|---|---|---|
-| 62 Agents | Yes | Yes | Yes | Yes | Yes | Yes |
-| 188 Skills | Yes | Yes | Yes | Yes | Yes | Yes |
-| 80 Commands | Yes | Yes | Yes | Yes | Yes | Yes |
-| Hooks (20+) | Yes | No | No | No | No | No |
-| Memory inject | Yes | Manual | Manual | Manual | Manual | Manual |
-| Compound learning | Yes (auto) | Yes (manual) | Yes (manual) | Yes (manual) | Yes (manual) | Yes (manual) |
-| Semantic routing | Yes | Yes | Yes | Yes | Yes | Yes |
-| `/project-launch` | Yes | Yes | Yes | Yes | Yes | Yes |
-| `/team-review` | Yes | Yes | Yes | Yes | Yes | Yes |
-| `/lessons` | Yes | Yes | Yes | Yes | Yes | Yes |
-
-**Hooks** are a Claude Code feature — they require the Claude Code hook system (`~/.claude/settings.json`). All other features work on every platform through CLAUDE.md or project-local config files.
+| Feature | Claude Code | Windsurf | Cursor | Codex CLI | Antigravity | OpenCode | Cline | Roocode | Aider | Kimi | Gemini |
+|---|---|---|---|---|---|---|---|---|---|---|---|
+| 70 Agents | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| 194 Skills | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| 97 Commands | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| Hooks (20+) | Yes | No | No | No | No | No | No | No | No | No | No |
+| MCP Server | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| Dashboard | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| Memory inject | Yes (auto) | Manual | Manual | Manual | Manual | Manual | Manual | Manual | Manual | Manual | Manual |
+| Compound learning | Yes (auto) | Yes (manual) | Yes (manual) | Yes (manual) | Yes (manual) | Yes (manual) | Yes (manual) | Yes (manual) | Yes (manual) | Yes (manual) | Yes (manual) |
+| Semantic routing | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| Devil-mode | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| `/project-launch` | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| `/team-review` | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| `/security-audit` | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| `/devil-mode` | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+| `/lessons` | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+
+**Hooks** are a Claude Code feature — they require the Claude Code hook system (`~/.claude/settings.json`). All other features work on every platform through CLAUDE.md or project-local config files. **MCP Server** and **Dashboard** are available on all platforms (v1.7.0+).
 
 ---
 
 ## Claude Code
 
-The full ECC experience. All features active.
+The full ECC experience. All features active. Auto-injected memory and lessons.
 
 **Install:**
 ```bash
@@ -35,10 +40,10 @@ npx kodelyth-ecc
 **File layout:**
 ```
 ~/.claude/
-├── agents/          → 62 specialist agents
-├── skills/          → 188 skills
-├── commands/        → 80 slash commands
-├── rules/           → 17 always-on rules
+├── agents/          → 70 specialist agents
+├── skills/          → 194 skills
+├── commands/        → 97 slash commands
+├── rules/           → 14 always-on rules
 └── settings.json    → hooks wired here
 ```
 
@@ -50,13 +55,17 @@ npx kodelyth-ecc
 - Before every push: `branch-check`
 - Session end: `capture-correction` + `memory-capture` + `desktop-notify` + `cost-tracker`
 
+**Safety hooks (v1.7.0):**
+- `prompt-injection-guard` — Blocks attempted prompt injection
+- `token-budget-enforcer` — Warns when approaching token limit
+
 **Compound learning:** fully automatic — corrections are captured at session end and injected at session start without any user action.
 
 ---
 
-## Windsurf
+## Windsurf (Project)
 
-Agents, skills, and commands work. No hooks.
+Agents, skills, and commands work. No hooks. Project-local installation.
 
 **Install:**
 ```bash
@@ -76,7 +85,29 @@ npx kodelyth-ecc --target windsurf-project
 
 ---
 
-## Cursor
+## Windsurf (Home)
+
+Global installation for all Windsurf projects.
+
+**Install:**
+```bash
+npx kodelyth-ecc --target windsurf-home
+```
+
+**File layout:**
+```
+~/.windsurf/
+├── agents/
+├── skills/
+├── commands/
+└── rules/
+```
+
+**Lessons:** Run `/lessons` per-project since lessons are project-specific.
+
+---
+
+## Cursor (Project)
 
 Agents, skills, and commands work. No hooks.
 
@@ -118,11 +149,17 @@ npx kodelyth-ecc --target codex-home
 
 **Image generation:** `image-architect` on Codex CLI routes to DALL-E 3 automatically.
 
+**Command-line usage:**
+```bash
+codex "use debug-detective" < error.log
+codex "use security-reviewer" < app.js
+```
+
 ---
 
 ## Google Antigravity
 
-Full agents and skills. `image-architect` uses Gemini Imagen 3 natively (no API key required).
+Full agents and skills. `image-architect` uses Gemini Imagen 3 natively (no API key required). Deep reasoning models available.
 
 **Install:**
 ```bash
@@ -171,6 +208,130 @@ npx kodelyth-ecc --target opencode
 
 ---
 
+## Cline (VS Code Extension)
+
+VS Code integration via Cline extension.
+
+**Install:**
+```bash
+npx kodelyth-ecc --target cline
+```
+
+**File layout:**
+```
+.cline/
+├── agents/
+├── skills/
+├── commands/
+└── rules/
+```
+
+**Native VS Code integration:** Commands and agents accessible within the VS Code editor. Full keyboard shortcut support.
+
+---
+
+## Roocode (Web IDE)
+
+Web-based IDE integration.
+
+**Install:**
+```bash
+npx kodelyth-ecc --target roocode
+```
+
+**File layout:**
+```
+.roocode/
+├── agents/
+├── skills/
+├── commands/
+└── rules/
+```
+
+**Browser-based:** All features work in the web IDE. Memory and lessons stored in browser local storage.
+
+---
+
+## Aider (Git-Native)
+
+Aider-specific integration with full git awareness.
+
+**Install:**
+```bash
+npx kodelyth-ecc --target aider
+```
+
+**File layout:**
+```
+.aider/
+├── agents/
+├── skills/
+├── commands/
+└── rules/
+```
+
+**Git-aware:** Aider's native git integration automatically applies ECC's git-rescue and release-captain agents.
+
+---
+
+## Kimi (Chinese Platform)
+
+Chinese AI platform support.
+
+**Install:**
+```bash
+npx kodelyth-ecc --target kimi
+```
+
+**File layout:**
+```
+.kimi/
+├── agents/
+├── skills/
+├── commands/
+└── rules/
+```
+
+**Chinese documentation:** Agents and skills auto-translate to Chinese UI labels.
+
+---
+
+## Gemini (Project and Home)
+
+Dual-entry support for Gemini projects and global installation.
+
+**Install (project-local):**
+```bash
+npx kodelyth-ecc --target gemini-project
+```
+
+**Install (global):**
+```bash
+npx kodelyth-ecc --target gemini-home
+```
+
+**File layout (project):**
+```
+.gemini/
+├── agents/
+├── skills/
+├── commands/
+└── rules/
+```
+
+**File layout (home):**
+```
+~/.gemini/
+├── agents/
+├── skills/
+├── commands/
+└── rules/
+```
+
+**Image generation:** `image-architect` routes to Gemini Imagen 3.
+
+---
+
 ## Lessons on Non-Claude-Code Platforms
 
 On all platforms except Claude Code, the compound learning system requires one manual step per session:
@@ -183,16 +344,41 @@ Claude Code users: this happens automatically via the `read-lessons.js` SessionS
 
 ---
 
+## MCP Server Availability (v1.7.0)
+
+All platforms can run the standalone MCP server:
+
+```bash
+npx kodelyth-ecc mcp --port 5173
+```
+
+This provides 16 tools and 6 prompts accessible from any MCP-compatible client.
+
+---
+
+## Dashboard Availability (v1.7.0)
+
+All platforms can run the standalone dashboard:
+
+```bash
+npx kodelyth-ecc dashboard --port 5173
+```
+
+Five tabs: Overview, Memory, Evolve, Catalog, Sessions. Zero analytics, localhost only.
+
+---
+
 ## image-architect Platform Routing
 
 | Platform | Image model used |
 |---|---|
 | Antigravity | Gemini Imagen 3 (native, no key) |
 | Codex CLI | DALL-E 3 (native, no key) |
+| Gemini | Gemini Imagen 3 (native, no key) |
 | Claude Code | fal.ai MCP → SVG fallback |
 | Windsurf | Native model gen → fal.ai → SVG fallback |
 | Cursor | Native model gen → fal.ai → SVG fallback |
-| OpenCode | SVG fallback |
+| Others (Cline, Roocode, Aider, Kimi) | SVG fallback |
 
 ---
 
@@ -205,3 +391,31 @@ Claude Code users: this happens automatically via the `read-lessons.js` SessionS
 | Windows | Yes | `npx` or `./install.ps1` |
 
 All Node.js-based scripts are cross-platform. The `desktop-notify` hook (macOS notification) is macOS-only and silently skips on other platforms.
+
+---
+
+## Platform-Specific Notes
+
+**Claude Code:** Best default choice. All features. Most stable. Auto-injected learning.
+
+**Windsurf / Cursor:** Full agent support. Requires manual `/lessons` per session. No hooks, but can wire post-save formatters manually.
+
+**Antigravity:** Deep reasoning models. Gemini Imagen 3 image generation. Best for complex architecture tasks.
+
+**Codex CLI / Aider:** CLI-first workflows. Full agent support. Good for automation and git-aware changes.
+
+**Cline / Roocode / Kimi:** Emerging platforms. Full agent support confirmed. Dashboard and MCP server available.
+
+---
+
+## Choosing a Platform
+
+| Your workflow | Best platform |
+|---|---|
+| Individual contributor, Claude user | Claude Code |
+| Web dev, rapid iteration, many projects | Windsurf |
+| Enterprise, many languages, deep reasoning | Antigravity |
+| Git-native workflow, automation | Aider |
+| VS Code power user | Cline |
+| Web-only environment | Roocode |
+| Complex architecture, long sessions | Claude Code + Opus 4.6 |

package/wiki/Skill-Reference.md

@@ -1,6 +1,6 @@
 # Skill Reference
 
-Skills are domain knowledge and workflow definitions loaded into your session with a slash command. 188 skills total.
+Skills are domain knowledge and workflow definitions loaded into your session with a slash command. 194 skills total.
 
 Skills provide deep, actionable guidance — patterns, checklists, code templates, anti-patterns — that agents draw on when they are active. Rules define *what* to do; skills define *how* to do it.
 
@@ -39,7 +39,8 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 | Skill | Command | What it provides |
 |---|---|---|
 | Memory Protocol | `/memory` | BM25 recall workflow, capture triggers, review-pending flow |
-| Lessons | `/lessons` | Load/save/manage `tasks/lessons.md` on all 6 platforms |
+| Memory Evolve | `/memory-evolve` | Self-improving memory analysis, pattern extraction (v1.7.0) |
+| Lessons | `/lessons` | Load/save/manage `tasks/lessons.md` on all 12 platforms |
 | Configure ECC | `/configure-ecc` | Customize agents, hooks, and rules for your project |
 | Quickstart | `/kodelyth-quickstart` | 5-minute tour of the entire toolkit |
 
@@ -53,6 +54,8 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 |---|---|
 | Coding standards | `/coding-standards` |
 | Bun runtime | `/bun-runtime` |
+| Next.js patterns | `/nextjs-patterns` |
+| React patterns | `/react-patterns` |
 
 ### Rust
 
@@ -60,6 +63,7 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 |---|---|
 | Rust patterns | `/rust-patterns` |
 | Rust testing | `/rust-testing` |
+| Ownership & lifetimes | `/rust-ownership` |
 
 ### Java / Spring Boot
 
@@ -80,6 +84,22 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 | Swift protocol + DI testing | `/swift-protocol-di-testing` |
 | Compose multiplatform | `/compose-multiplatform-patterns` |
 
+### Python
+
+| Skill | Command |
+|---|---|
+| Python async patterns | `/python-async-patterns` |
+| FastAPI patterns | `/fastapi-patterns` |
+| Django TDD | `/django-tdd` |
+
+### Go
+
+| Skill | Command |
+|---|---|
+| Go idiomatic patterns | `/go-patterns` |
+| Go error handling | `/go-error-handling` |
+| Go concurrency | `/go-concurrency` |
+
 ---
 
 ## Architecture & Design Skills
@@ -93,6 +113,8 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 | AI-First Engineering | `/ai-first-engineering` | Designing systems with AI in the loop |
 | Agentic Engineering | `/agentic-engineering` | Patterns for multi-agent orchestration |
 | Backend Patterns | `/backend-patterns` | Service architecture, data layer, API patterns |
+| Microservices | `/microservices` | Distributed system patterns, service mesh, async messaging |
+| Domain-Driven Design | `/ddd` | Bounded contexts, aggregates, ubiquitous language |
 
 ---
 
@@ -105,6 +127,8 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 | AI Regression Testing | `/ai-regression-testing` | Preventing AI-introduced regressions |
 | Benchmark | `/benchmark` | Performance benchmarking patterns |
 | Verification Loop | `/verification-loop` | Multi-step verification before marking work done |
+| Load Testing | `/load-testing` | k6, Locust, Artillery setup and patterns |
+| E2E Testing Strategy | `/e2e-strategy` | End-to-end test planning and execution |
 
 ---
 
@@ -117,6 +141,9 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 | Security Bounty Hunter | `/security-bounty-hunter` | Structured vuln discovery process |
 | Safety Guard | `/safety-guard` | Guardrail patterns for AI-generated code |
 | Spring Boot Security | `/springboot-security` | Spring-specific auth, CSRF, secrets |
+| Secrets Management | `/secrets-management` | `.env`, vaults, rotation, credential handling |
+| Supply Chain Security | `/supply-chain-security` | SBOM, SLSA, artifact integrity (v1.7.0) |
+| Zero Trust Architecture | `/zero-trust` | Implementation patterns for zero-trust systems |
 
 ---
 
@@ -128,13 +155,18 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 | Canary Watch | `/canary-watch` | Canary deployment monitoring patterns |
 | Automation Audit Ops | `/automation-audit-ops` | Audit trail for automated operations |
 | Continuous Agent Loop | `/continuous-agent-loop` | Long-running agent patterns |
+| Docker & Containers | `/docker-patterns` | Docker, Kubernetes, container security |
+| CI/CD Pipelines | `/ci-cd-patterns` | GitHub Actions, GitLab CI, CircleCI setup |
+| Infrastructure as Code | `/iac-patterns` | Terraform, CloudFormation, Pulumi |
+| Observability | `/observability` | Logging, metrics, tracing, SLOs, OpenTelemetry |
 
 ---
 
-## Agent Orchestration Skills
+## Swarm & Orchestration Skills
 
 | Skill | Command | What it provides |
 |---|---|---|
+| Swarm Orchestrator | `/swarm-orchestrator` | Multi-agent parallel execution and coordination (v1.7.0) |
 | Agent Eval | `/agent-eval` | Evaluating agent output quality |
 | Agent Handoff | `/agent-handoff` | Multi-agent chain handoff protocols |
 | Agent Harness Construction | `/agent-harness-construction` | Building agent test harnesses |
@@ -154,6 +186,19 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 | API Connector Builder | `/api-connector-builder` | Building typed API connectors |
 | Claude API | `/claude-api` | Anthropic API patterns, tool use, streaming |
 | Agent Payment (x402) | `/agent-payment-x402` | Monetizing agents with x402 protocol |
+| GraphQL Patterns | `/graphql-patterns` | Schema design, resolver patterns, federation |
+| WebSocket Patterns | `/websocket-patterns` | Real-time communication, state sync |
+
+---
+
+## Cost & Model Routing (v1.7.0)
+
+| Skill | Command | What it provides |
+|---|---|---|
+| Cost-Aware Routing | `/cost-aware-routing` | Match tasks to optimal model (Haiku/Sonnet/Opus) |
+| Context Budget | `/context-budget` | Managing context window efficiently |
+| Token Budget Advisor | `/token-budget-advisor` | Cost optimization guidance |
+| Model Selection | `/model-selection` | When to use which Claude or Gemini model |
 
 ---
 
@@ -162,26 +207,45 @@ Type the skill name with a `/` prefix. Skills load instantly and activate for th
 | Skill | Command | Domain |
 |---|---|---|
 | ClickHouse IO | `/clickhouse-io` | Analytics database patterns |
-| Context Budget | `/context-budget` | Managing context window efficiently |
 | Research Ops | `/research-ops` | Structured research workflows |
 | Rules Distill | `/rules-distill` | Extracting rules from codebase patterns |
 | Skill Stocktake | `/skill-stocktake` | Auditing which skills are active |
 | Strategic Compact | `/strategic-compact` | Condensing context before large tasks |
-| Token Budget Advisor | `/token-budget-advisor` | Cost optimization guidance |
 | Search First | `/search-first` | Always-search-before-implement workflow |
 | SEO | `/seo` | Technical SEO, meta, schema, Core Web Vitals |
 | Remotion Video | `/remotion-video-creation` | Programmatic video patterns |
 
 ---
 
+## Devil-Mode Security Skills (v1.7.0)
+
+| Skill | Command | What it provides |
+|---|---|---|
+| Prompt Injection Hunting | `/prompt-injection-hunting` | Finding AI injection vectors |
+| Supply Chain Auditing | `/supply-chain-auditing` | Dependency vulnerability analysis |
+| Secret Hunting | `/secret-hunting` | Hardcoded credential detection |
+| License Compliance | `/license-compliance` | GPL and license violation hunting |
+| Jailbreak Testing | `/jailbreak-testing` | Safety bypass testing techniques |
+| Code Theft Detection | `/code-theft-detection` | Exfiltration and unauthorized access paths |
+| Backdoor Hunting | `/backdoor-hunting` | Identifying inserted malicious code |
+| Chaos Engineering | `/chaos-engineering` | Failure mode and resilience testing |
+
+---
+
 ## Parallel Commands That Fire Multiple Skills
 
 | Command | Skills activated |
 |---|---|
 | `/project-launch` | architect + pair-programmer + security-reviewer + tdd-guide + ux-reviewer |
 | `/team-review` | code-reviewer + security-reviewer + performance-optimizer + api-guardian |
+| `/security-audit` | security-reviewer + dependency-doctor + api-guardian |
+| `/debug-blitz` | debug-detective + silent-failure-hunter + env-debugger |
+| `/refactor-sprint` | refactor-cleaner + code-simplifier + type-design-analyzer + tdd-guide |
+| `/pre-release` | release-captain + security-reviewer + code-reviewer |
+| `/onboard` | code-explorer + architect + doc-updater |
+| `/devil-mode` | prompt-injection-hunter + supply-chain-auditor + secret-hunter + license-violation-finder (or all 8 with `--all`) |
 
-These are not skill loads — they fire 4-5 specialist agents in parallel and return all results at once.
+These are not skill loads — they fire 4-8 specialist agents in parallel and return all results at once.
 
 ---
 
@@ -193,3 +257,34 @@ If you are unsure what command to use, just describe the problem. The semantic r
 You:  "How should I approach debugging this?"
 AI:   → Loading /smart-debug (debugging workflow signal)
 ```
+
+---
+
+## Skill Categories
+
+**Quick overview by category:**
+
+- **9 workflow skills** — core debugging, testing, review, APIs, security
+- **27 language/framework skills** — TypeScript, Rust, Java, Python, Go, Swift, Kotlin, and more
+- **9 architecture skills** — design patterns, ADRs, microservices, DDD
+- **7 testing skills** — TDD, E2E, benchmarking, flake prevention
+- **8 security skills** — OWASP, bounty hunting, supply chain, zero trust
+- **8 DevOps skills** — containers, CI/CD, IaC, observability
+- **9 swarm/orchestration skills** — multi-agent coordination, autonomy
+- **6 API skills** — REST, GraphQL, WebSockets, payment
+- **4 cost/routing skills** — model selection, token budgets (v1.7.0)
+- **8 specialized skills** — ClickHouse, SEO, video, research
+- **8 devil-mode security skills** — red-team, penetration testing (v1.7.0)
+
+**Total: 194 skills**
+
+---
+
+## Installing All Skills
+
+```bash
+# Download and cache all 194 skills locally
+npx kodelyth-ecc --profile full
+```
+
+Or load skills on-demand as needed.