everything-claude-code-harness

$27

git clone https://github.com/affaan-m/everything-claude-code.git

cd everything-claude-code

# Install rules for your language stack

./install.sh typescript

# Multiple languages:

./install.sh typescript python golang swift

# Target a specific IDE:

./install.sh --target cursor typescript

Install Rules (Always Required)

Claude Code plugins cannot auto-distribute rules — install them manually via ./install.sh or copy from rules/ into your project's .claude/rules/ directory.

Directory Structure

everything-claude-code/

├── .claude-plugin/         # Plugin and marketplace manifests

│   ├── plugin.json

│   └── marketplace.json

├── agents/                 # Specialized subagents (planner, architect, etc.)

├── commands/               # Slash commands (/plan, /security-scan, etc.)

├── skills/                 # Reusable skill modules

├── hooks/                  # Lifecycle hooks (SessionStart, Stop, PostEdit, etc.)

├── rules/

│   ├── common/             # Language-agnostic rules

│   ├── typescript/

│   ├── python/

│   ├── golang/

│   └── swift/

├── scripts/                # Setup and utility scripts

└── install.sh              # Interactive installer

Key Commands

After installation, use the namespaced form (plugin install) or short form (manual install):

# Planning & architecture

/everything-claude-code:plan "Add OAuth2 login flow"

/everything-claude-code:architect "Design a multi-tenant SaaS system"

# Research-first development

/everything-claude-code:research "Best approach for rate limiting in Node.js"

# Security

/everything-claude-code:security-scan

/everything-claude-code:harness-audit

# Agent loops and orchestration

/everything-claude-code:loop-start

/everything-claude-code:loop-status

/everything-claude-code:quality-gate

/everything-claude-code:model-route

# Multi-agent workflows

/everything-claude-code:multi-plan

/everything-claude-code:multi-execute

/everything-claude-code:multi-backend

/everything-claude-code:multi-frontend

# Session and memory

/everything-claude-code:sessions

/everything-claude-code:instinct-import

# PM2 orchestration

/everything-claude-code:pm2

# Package manager setup

/everything-claude-code:setup-pm

With manual install, drop the everything-claude-code: prefix: /plan, /sessions, etc.

Hook Runtime Controls

ECC hooks fire at agent lifecycle events. Control strictness at runtime without editing files:

# Set hook strictness profile

export ECC_HOOK_PROFILE=minimal    # Least intrusive

export ECC_HOOK_PROFILE=standard   # Default

export ECC_HOOK_PROFILE=strict     # Maximum enforcement

# Disable specific hooks by ID (comma-separated)

export ECC_DISABLED_HOOKS="pre:bash:tmux-reminder,post:edit:typecheck"

Hook events covered: SessionStart, Stop, PostEdit, PreBash, PostBash, and more.

Package Manager Detection

ECC auto-detects your package manager with this priority chain:

• CLAUDE_PACKAGE_MANAGER environment variable

• .claude/package-manager.json (project-level)

• package.json → packageManager field

• Lock file detection (package-lock.json, yarn.lock, pnpm-lock.yaml, bun.lockb)

• ~/.claude/package-manager.json (global)

• First available manager as fallback

# Set via environment

export CLAUDE_PACKAGE_MANAGER=pnpm

# Set globally

node scripts/setup-package-manager.js --global pnpm

# Set per-project

node scripts/setup-package-manager.js --project bun

# Detect current setting

node scripts/setup-package-manager.js --detect

Skills System

Skills are markdown modules the agent loads to gain domain expertise. Install individually or in bulk.

Using a Skill

# Reference a skill explicitly in your prompt

"Use the search-first skill to find the right caching approach before implementing"

# Or trigger via slash command

/everything-claude-code:research "content hashing strategies for API responses"

Notable Built-in Skills

Skill

Purpose

search-first

Research before coding — avoids hallucinated APIs

cost-aware-llm-pipeline

Optimizes token spend across model calls

content-hash-cache-pattern

Cache invalidation via content hashing

skill-stocktake

Audits which skills are loaded and active

frontend-slides

Zero-dependency HTML presentation builder

configure-ecc

Guided interactive ECC setup wizard

swift-actor-persistence

Swift concurrency + persistence patterns

regex-vs-llm-structured-text

Decides when to use regex vs LLM parsing

Writing a Custom Skill

Create skills/my-skill.md:

---

name: my-skill

description: What this skill does

triggers:

  - "phrase that activates this skill"

---

# My Skill

## When to Use

...

## Pattern

\`\`\`typescript

// concrete example

\`\`\`

## Rules

- Rule one

- Rule two

Instincts System (Continuous Learning)

Instincts are session-extracted patterns saved for reuse. They carry confidence scores and evolve over time.

Export an Instinct

/everything-claude-code:instinct-import

Instinct File Format

---

name: prefer-zod-for-validation

confidence: 0.92

extracted_from: session-2026-02-14

---

# Action

Always use Zod for runtime schema validation in TypeScript projects.

# Evidence

Caught 3 runtime type errors that TypeScript alone missed during session.

# Examples

\`\`\`typescript

import { z } from 'zod'

const UserSchema = z.object({

  id: z.string().uuid(),

  email: z.string().email(),

  role: z.enum(['admin', 'user'])

})

type User = z.infer<typeof UserSchema>

\`\`\`

Rules Architecture

Rules enforce coding standards per language. Install only what your stack needs.

# TypeScript + Python

./install.sh typescript python

# Check what's installed

ls .claude/rules/

Rule Directory Layout

rules/

├── common/         # Applies to all languages

│   ├── research-first.md

│   ├── security-baseline.md

│   └── verification-loops.md

├── typescript/

│   ├── no-any.md

│   ├── zod-validation.md

│   └── strict-mode.md

├── python/

│   ├── type-hints.md

│   └── django-patterns.md

└── golang/

    └── error-wrapping.md

Agents (Subagent Delegation)

Agents are specialized personas the orchestrator delegates to:

# In your prompt, reference an agent explicitly

"Delegate architecture decisions to the architect agent"

"Use the planner agent to break this feature into tasks"

Available agents include: planner, architect, researcher, verifier, security-auditor, and more. Each lives in agents/<name>.md with its own system prompt, tools list, and constraints.

AgentShield Security Scanning

Run security scans directly from Claude Code:

/everything-claude-code:security-scan

This invokes the AgentShield scanner (1282 tests, 102 rules) against your codebase and surfaces:

• Hardcoded secrets

• Injection vulnerabilities

• Insecure dependencies

• Agent prompt injection patterns

Memory Persistence Hooks

ECC hooks automatically save and restore session context:

// hooks/session-start.js — loads prior context on new session

const fs = require('fs')

const path = require('path')

const memoryPath = path.join(process.env.HOME, '.claude', 'session-memory.json')

if (fs.existsSync(memoryPath)) {

  const memory = JSON.parse(fs.readFileSync(memoryPath, 'utf8'))

  console.log('Restored session context:', memory.summary)

}

// hooks/stop.js — saves session summary on exit

const summary = {

  timestamp: new Date().toISOString(),

  summary: process.env.ECC_SESSION_SUMMARY || '',

  skills_used: (process.env.ECC_SKILLS_USED || '').split(',')

}

fs.writeFileSync(memoryPath, JSON.stringify(summary, null, 2))

Cross-Platform Support

Platform

Support

Claude Code

Full (agents, commands, skills, hooks, rules)

Cursor

Full (via --target cursor installer flag)

OpenCode

Full (plugin system, 20+ hook event types, 3 native tools)

Codex CLI

Full (codex.md generated via /codex-setup)

Codex App

Full (AGENTS.md-based)

Antigravity

Full (via --target antigravity installer flag)

Common Patterns

Research-First Development

"Before implementing the payment webhook handler, use the search-first skill to

verify current Stripe webhook verification best practices."

Token Optimization

# Route to cheaper model for simple tasks

/everything-claude-code:model-route "Write a unit test for this pure function"

# Use background processes for long analysis

/everything-claude-code:harness-audit

Parallelization with Git Worktrees

# Create isolated worktrees for parallel agent tasks

git worktree add ../feature-auth -b feature/auth

git worktree add ../feature-payments -b feature/payments

# Each Claude Code session operates in its own worktree

# Merge when both complete

Verification Loop

/everything-claude-code:loop-start    # Begin tracked loop

# ... agent does work ...

/everything-claude-code:loop-status   # Check progress

/everything-claude-code:quality-gate  # Enforce pass criteria before merge

Troubleshooting

Plugin commands not found after install

/plugin list everything-claude-code@everything-claude-code

# If empty, re-run: /plugin install everything-claude-code@everything-claude-code

Rules not applied

# Rules require manual install — plugin system cannot distribute them

cd everything-claude-code && ./install.sh typescript

# Verify:

ls ~/.claude/rules/   # or .claude/rules/ in project root

Hooks not firing

# Check profile setting

echo $ECC_HOOK_PROFILE

# Check disabled list

echo $ECC_DISABLED_HOOKS

# Reset to defaults

unset ECC_HOOK_PROFILE

unset ECC_DISABLED_HOOKS

Instinct import drops content

Ensure you're on v1.4.1+. Earlier versions had a bug where parse_instinct_file() silently dropped Action/Evidence/Examples sections. Pull latest and re-run.

Wrong package manager used

node scripts/setup-package-manager.js --detect

export CLAUDE_PACKAGE_MANAGER=pnpm   # Override explicitly

Resources

• Homepage: https://ecc.tools

• GitHub: https://github.com/affaan-m/everything-claude-code

• GitHub App (Marketplace): https://github.com/marketplace/ecc-tools

• npm (universal): ecc-universal

• npm (security): ecc-agentshield

• Shorthand Guide: https://x.com/affaanmustafa/status/2012378465664745795

• Longform Guide: https://x.com/affaanmustafa/status/2014040193557471352