Skip to content

feat(kit): ECC plugin on every machine, auto-update, hooks off - #238

Merged
8syncdev merged 3 commits into
mainfrom
feat/kit-ecc
Oct 27, 2026
Merged

8syncdev merged 3 commits into
mainfrom
feat/kit-ecc

Conversation

@8syncdev

Copy link
Copy Markdown
Contributor

Owner 2026-10-27: "auto cài https://github.com/affaan-m/ECC.git vào harness liên tục" / "sài mạnh cho claude code all máy tôi".

What

  • 8sync ccc kit (also run by 8sync up) writes into ~/.claude/settings.json, insert-only:
    • extraKnownMarketplaces.ecc = github affaan-m/ECC, autoUpdate: true (third-party marketplaces are off by default — code.claude.com/docs/en/discover-plugins)
    • enabledPlugins["ecc@ecc"] = true → 71 agents, 311 skills, 97 commands under ecc:* (namespaced, no clobber of 8sync skills)
    • env.ECC_HOOKS_ENABLED = "false" (ECC scripts/lib/hook-flags.js)
  • Org policy strictKnownMarketplaces allows affaan-m/ECC.

Why hooks off

Read-only audit of ECC main @25278e7d: ~25 hooks; no telemetry, but they log every Bash command to ~/.claude/bash-commands.log with partial redaction, deny the first Edit (stalls /ship-loop, /autopilot), run npx formatters and claude -p --model haiku summaries, and would execute unpinned main on every tool call. Skills/agents/commands stay fully usable.

Owner overrides kept

"ecc@ecc": false, autoUpdate: false, ECC_HOOKS_ENABLED=true are never overwritten.

Checks

  • cargo test -p su-code --bin 8sync -- ecc_plugin lsp_plugins org_policy → 6 passed
  • Gates: /sec clean (gitleaks staged), /rules ALLOWED (ECC already listed in the kit's third-party marketplace section), /aup-audit no BLOCK; WARN: auto-updated third-party prompt text (hooks off).
  • Not verified: ECC skill-listing token cost (311 descriptions vs the 1%-of-context budget) on a live session; macOS/Linux runtime (CI covers build+test).

🤖 Generated with Claude Code

8syncdev and others added 3 commits October 27, 2026 20:08
…CC hooks off

ccc kit writes the affaan-m/ECC marketplace (autoUpdate) and enables ecc@ecc,
insert-only like the LSP plugins; ECC_HOOKS_ENABLED=false keeps ECC's hooks
(bash log, first-edit deny, npx, claude -p) from running on every tool call.
Org policy allowlist gains affaan-m/ECC.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… claude CLI

`claude plugin marketplace add` rewrites the entry without autoUpdate, so the
insert-only merge left ECC un-updated on machines that added it by hand.
CHANGELOG notes the ~47.6k always-on token cost from claude plugin details.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@8syncdev
8syncdev merged commit 3e8a0b6 into main Oct 27, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant