v1.9.0

## Highlights

**ECC Tools Pro is live.** The GitHub App now has Stripe billing with a Pro tier ($19/seat/month) for private repo analysis, 50 analyses/month, and AgentShield-backed scanning. Free tier remains at 10 analyses/month for public repos. Install at [github.com/apps/ecc-tools](https://github.com/apps/ecc-tools), upgrade at [ecc.tools/pricing](https://ecc.tools/pricing).

**Selective install is here.** Install only what you need with `--with` and `--without` flags. `ecc install --profile developer --with lang:typescript --with agent:security-reviewer --without skill:continuous-learning`. Agent and skill component families are now in the install manifest.

**12 language ecosystems.** C#, Rust, Java, Kotlin, C++, Go, Python, TypeScript, Perl, PyTorch, Nuxt 4, and Flutter now have dedicated rules, agents, or skills.

**AgentShield v1.4.0 ships alongside.** False positive scanning fixed. CVE database with 25+ known MCP vulnerabilities. Supply chain verification. Runtime monitoring. Watch mode. PR security gate. Org-wide policy enforcement.

https://github.com/user-attachments/assets/eece2c76-7eb9-4865-a58b-f11247fd774e

## What's New

### Agents (28 total, +9 new)
- `typescript-reviewer` — TypeScript/JavaScript code review
- `pytorch-build-resolver` — PyTorch build error resolution
- `java-build-resolver` — Maven/Gradle build resolution
- `java-reviewer` — Java code review
- `rust-reviewer` — Rust code review
- `flutter-reviewer` — Flutter/Dart code review
- `harness-optimizer` — Cross-harness optimization
- `kotlin-build-resolver` — Kotlin build resolution
- `kotlin-reviewer` — Kotlin code review

### Skills (116 total, +15 new)
- `pytorch-patterns` — PyTorch best practices
- `nuxt4-patterns` — Nuxt 4 frontend patterns
- `codebase-onboarding` — Onboarding new contributors
- `architecture-decision-records` — ADR workflow
- `agent-eval` — Head-to-head coding agent comparison
- `documentation-lookup` — Doc retrieval patterns
- `bun-runtime` — Bun runtime patterns
- `nextjs-turbopack` — Next.js Turbopack patterns
- Plus 7 more language-specific skills

### Rules (6 new language packs)
- C# (coding-style, patterns, security, testing, hooks)
- Rust, Java, C++, Perl language rules
- Flutter/Dart rules

### Infrastructure
- Selective install with `--with`/`--without` CLI flags
- Agent description compression with lazy loading
- Skill inspection logic for recurring failure pattern detection
- Governance event capture hooks
- MCP health-check hook with auto-reconnect
- SQLite state store for session/skill/decision tracking
- Session adapters for canonical snapshots
- Codex sync merges AGENTS.md instead of replacing

### Bug Fixes
- Windows CI fully green (all 38 matrix jobs passing)
- SessionStart ANSI escape code sanitization
- Observer memory explosion with throttling
- Flaky observer bash test on Windows skipped
- Catalog count validation fixed
- Plugin root auto-detection fallback

### ECC Tools App
- Stripe billing live (Pro $19/seat, Enterprise contact)
- GitHub OAuth checkout flow
- Analyzer quality improvements (7 greptile findings fixed)
- Duplicate PR prevention with idempotency
- Auto-analysis skip list for managed repos
- Push cooldown increased to 7 days

### AgentShield (v1.4.0)
- False positive fix: deny rules and block hooks no longer flagged as threats
- CVE database with 25+ known MCP vulnerabilities
- MCP tool description poisoning detection (5 new rules)
- Continuous scanning with config drift detection (--watch mode)
- Runtime monitoring daemon for tool calls
- Supply chain verification for MCP npm packages
- PR security gate with baseline comparison
- Organization-wide security policy enforcement
- CLAUDE.md filesystem permission check
- 1,609 tests passing

## Stats
- 219 commits since v1.8.0
- 30+ contributors
- 88K+ GitHub stars
- 1,540+ tests passing across all platforms

## Install / Upgrade

```bash
npx claudepluginhub affaan-m/everything-claude-code --plugin everything-claude-code
```

Or install manually in Claude Code.