kodelyth-ecc 2.14.0 → 2.15.0

package/CHANGELOG.md

@@ -2,6 +2,64 @@
 
 All notable changes to Kodelyth ECC are documented here.
 
+## v2.15.0 — Green CI, and the agents learn what the arena found (September 2026)
+
+### Fixed — CI had been red since v2.8.0
+
+Eight tests asserted POSIX file semantics on the Windows runner. Every release
+from 2.8.0 through 2.14.0 shipped with a failing badge, because `npm test` was
+only ever run on macOS — a green local run beside a red CI is exactly the trap
+this release also teaches `release-captain` to catch.
+
+On Windows `chmod` only toggles the read-only bit, `statSync().mode` is
+synthesized rather than real, `umask` is meaningless, and `symlinkSync` needs
+administrator rights or Developer Mode. The eight tests assert precisely those
+semantics.
+
+They are **skipped there with a stated reason, not deleted** — the behaviour they
+guard (mode preservation, umask independence, `O_EXCL` against planted symlinks)
+is real on Linux and macOS, which is where CI proves it.
+
+```
+tests/lib/safe-fs.test.js      5 guarded
+tests/terse/compress.test.js   3 guarded
+```
+
+All nine CI jobs now pass: Node 18/20/22 across Linux, macOS, and Windows.
+
+### Changed — three agents learned from three arena runs
+
+The arena confirmed the same defects repeatedly, and none of the 70 agents knew
+to look for them. Each addition below is a bug that was actually reproduced, not
+a hypothetical.
+
+**`security-reviewer`** gained three hunt blocks:
+
+- **Lexical-only path containment** — `path.join`/`resolve` normalise `..` but do
+  not resolve symlinks, so a link inside the root passes a `startsWith` check
+  while pointing anywhere on disk. Confirmed four times across three files.
+- **Prototype keys as map keys** — `map['constructor']` returns a truthy
+  function, so `if (!map[k])` never fires. Needs no attacker: one document
+  containing the word "constructor" bricked the memory store.
+- **Truncate-then-write on persistent state** — `writeFileSync` opens with `'w'`.
+  A 6.3 MB store was measured at 0 bytes mid-rewrite, 32 torn reads in 1423
+  samples.
+
+**`code-reviewer`** gained the same three as checklist items under Security.
+
+**`release-captain`** gained **Phase 1.5 — Prove the build is green where it
+actually runs**, with the `gh run list` / `gh run view --log-failed` commands and
+a table of one-platform traps (POSIX modes, umask, symlinks, path separators,
+BSD vs GNU flags). It states plainly: never cut a release on a red CI, and never
+report "all tests passing" when only your own platform is passing.
+
+### Fixed — repository metadata
+
+The GitHub About sidebar still advertised `194 skills · 97 commands`. Corrected
+to 196 / 102, and the arena added to the description.
+
+**572 tests passing on every supported platform.**
+
 ## v2.14.0 — A false recurring class, and five more atomic writes (August 2026)
 
 ### Fixed — the guard proposal was pointing at the wrong thing

package/README.md

@@ -72,7 +72,7 @@ You never typed `use debug-detective`. You didn't have to. The toolkit read the
 |---|---|---|
 | **Intent routing** | Plain-language → right specialist via 10-tier priority rules | Mostly missing — you memorize names |
 | **70 agents** | Specialists with playbooks, severity calibration, real commands | Often persona-only ("you are a senior engineer...") |
-| **194 skills** | Domain knowledge files agents read on demand | Rarely separated from agents |
+| **196 skills** | Domain knowledge files agents read on demand | Rarely separated from agents |
 | **102 commands** | Slash workflows (`/tdd`, `/arena`, `/devil-mode`, `/team-review`) | Limited or none |
 | **8 parallel commands** | Fire 3-8 agents simultaneously, aggregate results | Rare |
 | **Compound memory** | BM25 local recall + auto-inject + project lessons | Cloud-only or absent |
@@ -118,7 +118,7 @@ kodelythecc --target claude-code --codebase-graph
 That's it. This single flow:
 
 1. Installs both binaries (`kodelyth-ecc` and short-form `kodelythecc`) to your PATH
-2. Copies 70 agents + 194 skills + 97 commands + 22 hooks + 14 rules into your AI tool's config dir
+2. Copies 70 agents + 196 skills + 102 commands + 22 hooks + 14 rules into your AI tool's config dir
 3. Auto-installs **RTK** binary and wires its PreToolUse hook (input compression starts on next AI restart)
 4. Installs **Terse mode** skill + `/terse` and `/terse-compress` slash commands (dormant — user types `/terse` to activate)
 5. Auto-installs **codebase-memory-mcp** and registers its MCP entries in your AI tool (with `--codebase-graph`)
@@ -220,7 +220,7 @@ npx kodelyth-ecc --bundle red-team        # Security engineer — devil-mode + a
 npx kodelyth-ecc --bundle enterprise      # Compliance / audit team — SBOM, license, supply chain
 ```
 
-Each bundle installs the full ECC toolkit (all 70 agents, 194 skills, 97 commands, 22+ hooks), adds a `BUNDLE.md` cheat sheet, and biases the AI toward audience-fit workflows on every session.
+Each bundle installs the full ECC toolkit (all 70 agents, 196 skills, 102 commands, 22+ hooks), adds a `BUNDLE.md` cheat sheet, and biases the AI toward audience-fit workflows on every session.
 
 Combine with any target:
 
@@ -417,7 +417,7 @@ What's inside:
 | **Overview** | Agent count, memory stats, session count, recent activity |
 | **Memory** | Browse, search, and manage your local BM25 memory store |
 | **Evolve** | Self-improving memory — review AI-proposed refinements |
-| **Catalog** | Full searchable index of all 70 agents, 194 skills, 97 commands |
+| **Catalog** | Full searchable index of all 70 agents, 196 skills, 102 commands |
 | **Sessions** | **Live IDE activity** (Claude Code, Windsurf, Windsurf-Next, Cursor, Antigravity) + orchestration/swarm sessions |
 
 Real-time:
@@ -888,7 +888,7 @@ The intent router will route you to the right one. The AI announces who's taking
 | Source | Destination | What it does |
 |---|---|---|
 | `agents/` | `~/.claude/agents/` | All 70 subagents available globally |
-| `skills/` | `~/.claude/skills/` | All 194 skills loadable via commands |
+| `skills/` | `~/.claude/skills/` | All 196 skills loadable via commands |
 | `hooks/hooks.json` | `~/.claude/hooks/` | Automated quality gates |
 | `rules/` | `~/.claude/rules/` | Always-on standards + intent routing |
 | `commands/` | `~/.claude/commands/` | Slash commands (`/tdd`, `/plan`, etc.) |

package/VERSION

@@ -1 +1 @@
-2.14.0
+2.15.0

package/agents/code-reviewer.md

@@ -37,6 +37,16 @@ These MUST be flagged — they can cause real damage:
 - **SQL injection** — String concatenation in queries instead of parameterized queries
 - **XSS vulnerabilities** — Unescaped user input rendered in HTML/JSX
 - **Path traversal** — User-controlled file paths without sanitization
+- **Lexical-only containment** — `startsWith(root)` after `path.join` catches `..` but NOT
+  symlinks: `path.resolve` does not resolve them, so a link inside the root passes the check
+  while pointing anywhere on disk. Demand `realpath` on both sides before the comparison.
+- **Prototype keys as map keys** — `map['constructor']` returns a truthy function, so
+  `if (!map[k])` never fires and the next line reads a property off it. Any object keyed by
+  user text (tokens, tags, headers, filenames) must be `Object.create(null)`. Words like
+  "constructor" and "toString" are ordinary vocabulary — this needs no attacker.
+- **Truncate-then-write on state worth keeping** — `fs.writeFileSync` opens with `'w'` and
+  truncates to zero before writing. A crash, a full disk, or a concurrent reader sees an
+  empty file. Config files, registries, ledgers and indexes need temp + rename.
 - **CSRF vulnerabilities** — State-changing endpoints without CSRF protection
 - **Authentication bypasses** — Missing auth checks on protected routes
 - **Insecure dependencies** — Known vulnerable packages

package/agents/release-captain.md

@@ -40,6 +40,31 @@ Read the diff since last tag. Classify each change:
 
 Be **strict** about MAJOR. Most teams under-call breaking changes and lose user trust.
 
+### Phase 1.5 — Prove the build is green where it actually runs
+
+A local `npm test` proves the suite passes **on your machine**. It says nothing
+about the other platforms CI covers, and a green local run beside a red badge is
+how a project ships eight broken releases in a row without noticing.
+
+```bash
+gh run list --workflow=CI --limit 5      # is the badge actually green?
+gh run view <id> --log-failed            # if not, what fails and on which OS?
+```
+
+**Never cut a release on a red CI.** If the failure is platform-specific, fix or
+explicitly guard it — do not delete the test, and do not tell the user "all tests
+passing" when only your platform is passing.
+
+Common one-platform traps:
+
+| Assumption | Breaks on |
+|---|---|
+| `chmod` / `statSync().mode` carry POSIX bits | Windows — only the read-only bit exists |
+| `process.umask()` is meaningful | Windows |
+| `symlinkSync` just works | Windows — needs admin or Developer Mode |
+| Paths use `/` | Windows — compare with `path.sep` |
+| `timeout`, `stat -f`, GNU flags exist | macOS ships BSD variants; Windows ships neither |
+
 ### Phase 2 — Generate the changelog
 
 Group entries by category, in this order:

package/agents/security-reviewer.md

@@ -55,6 +55,30 @@ rg -n 'Math\.random\(\)'                                          # non-CSPRNG f
 
 # ── Unsafe deserialization + prototype pollution (HIGH) ─────────────────────
 rg -n 'pickle\.loads|yaml\.load\(|Marshal\.load|JSON\.parse\([^)]*req\.|_\.merge\(\{\}|Object\.assign\(target'   # yaml.load: confirm it lacks SafeLoader
+
+# ── Lexical-only path containment (HIGH) ────────────────────────────────────
+# path.join/resolve normalise ".." but do NOT resolve symlinks. A link sitting
+# lexically inside the root passes a startsWith() check while its target is
+# anywhere on disk, and the read follows it. Confirmed four times across three
+# unrelated files in this codebase before the guard existed.
+rg -n 'startsWith\(.*(?:ROOT|DIR|BASE|root|base|dir).*sep|startsWith\(.*\+ .?/.?\)'   # then check: is there a realpathSync nearby?
+rg -n 'readFileSync|createReadStream|readdirSync' --context 3 | rg -n 'path\.(join|resolve)'  # read after a lexical check = the bug
+# The fix is realpath on BOTH sides before comparing, or an existing helper.
+
+# ── Prototype keys used as map keys (HIGH) ──────────────────────────────────
+# map['constructor'] returns Object.prototype.constructor — TRUTHY — so an
+# `if (!map[k])` guard never fires and the next line reads a property off a
+# function. "constructor" and "toString" are ordinary vocabulary, so this needs
+# no attacker: one document containing the word is enough.
+rg -n 'if \(!\w+\[\w+\]\)|\w+\[\w+\] = \w+\[\w+\] \|\|'   # any map keyed by user text
+rg -n '= \{\};' --context 2 | rg -n 'token|term|word|tag|key|freq|count'  # should be Object.create(null)
+
+# ── Truncate-then-write on persistent state (HIGH) ──────────────────────────
+# fs.writeFileSync opens with 'w', truncating to zero BEFORE writing. A crash,
+# a full disk, or a concurrent reader sees an empty file. Measured: a 6.3 MB
+# store observed at 0 bytes mid-rewrite, 32 torn reads in 1423 samples.
+rg -n 'writeFileSync\(' | rg -v 'tmp|\.tmp|test'   # then ask: does this file hold state worth keeping?
+# Config files, registries, ledgers, and indexes need temp+rename, not writeFileSync.
 ```
 
 Report every confirmed hit with: file:line, severity, the exact fix, and (for secrets) "rotate immediately."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kodelyth-ecc",
-  "version": "2.14.0",
+  "version": "2.15.0",
   "description": "Production-grade AI coding toolkit — 70 agents (incl. devil-mode adversarial crew), 194 skills, 97 commands, parallel multi-agent commands, semantic intent routing, self-learning memory, and a built-in MCP server (16 tools / 6 prompts / 377 resources) that bridges to Claude Desktop, LangGraph, AutoGen, CrewAI, and OpenAI Agents SDK. Works with Claude Code, Windsurf, Cursor, Codex, Antigravity, OpenCode, Cline, RooCode, Aider, Kimi, and Gemini CLI.",
   "author": "Kodelyth <github.com/sifxprime>",
   "license": "MIT",