agentsys 5.0.0

package/.agnix.toml

@@ -0,0 +1,49 @@
+severity = "Warning"
+exclude = [
+    "node_modules/**",
+    ".git/**",
+    "target/**",
+    # Research/reference docs - external content, not our code
+    "agent-docs/**",
+    # Meta skills - reference/example content
+    "meta/**",
+    # Lib copies in plugins (source is lib/, avoid duplicate warnings)
+    "plugins/*/lib/**",
+]
+target = "ClaudeCode"
+tools = []
+locale = "en"
+
+[rules]
+skills = true
+hooks = true
+agents = true
+memory = true
+plugins = true
+xml = true
+mcp = true
+imports = true
+cross_platform = false # Intentional - we document all 3 platform paths
+agents_md = true
+copilot = false # Not targeting Copilot
+cursor = false # Not targeting Cursor
+prompt_engineering = true
+generic_instructions = true
+frontmatter_validation = true
+xml_balance = true
+import_references = true
+disabled_rules = [
+    "XP-003",      # Intentional - we document all 3 platform paths (.claude/, .opencode/, .codex/)
+    "AS-014",      # False positives on regex escape sequences (\n, \s, \d)
+    "CC-AG-009",   # False positive - Skill, AskUserQuestion, LSP are valid Claude Code tools
+    "CC-MEM-009",  # Intentional - CLAUDE.md uses structured sections, size is necessary
+    "AGM-006",     # Intentional - root AGENTS.md (instructions) + docs/reference/AGENTS.md (reference)
+    "AGM-003",     # docs/reference/AGENTS.md is a comprehensive reference doc
+    "PE-001",      # Reference docs have structured layout; middle placement is intentional
+    "AS-012",      # enhance-hooks is a comprehensive hook reference (needs >500 lines)
+    "CC-SK-009",   # enhance-skills contains example injections for teaching purposes
+]
+
+[tool_versions]
+
+[spec_revisions]

package/.claude-plugin/marketplace.json

@@ -0,0 +1,110 @@
+{
+  "name": "agentsys",
+  "description": "12 specialized plugins for AI workflow automation - task orchestration, PR workflow, slop detection, code review, drift detection, enhancement analysis, documentation sync, repo mapping, perf investigations, topic research, agent config linting, and cross-tool AI consultation",
+  "version": "5.0.0",
+  "owner": {
+    "name": "Avi Fenesh",
+    "url": "https://github.com/avifenesh"
+  },
+  "repository": "https://github.com/avifenesh/agentsys",
+  "keywords": [
+    "ai",
+    "llm",
+    "agents",
+    "agentic",
+    "claude-code",
+    "opencode",
+    "codex",
+    "mcp",
+    "automation",
+    "workflow",
+    "code-review",
+    "multi-agent"
+  ],
+  "plugins": [
+    {
+      "name": "next-task",
+      "source": "./plugins/next-task",
+      "description": "Master workflow orchestrator: autonomous workflow with model optimization (opus/sonnet/haiku), two-file state management, workflow enforcement gates, 14 specialist agents",
+      "version": "5.0.0",
+      "category": "productivity"
+    },
+    {
+      "name": "ship",
+      "source": "./plugins/ship",
+      "description": "Complete PR workflow: commit to production, skips review when called from next-task, removes task from registry on cleanup, automatic rollback",
+      "version": "5.0.0",
+      "category": "deployment"
+    },
+    {
+      "name": "deslop",
+      "source": "./plugins/deslop",
+      "description": "3-phase AI slop detection: regex patterns (HIGH), multi-pass analyzers (MEDIUM), CLI tools (LOW)",
+      "version": "5.0.0",
+      "category": "development"
+    },
+    {
+      "name": "audit-project",
+      "source": "./plugins/audit-project",
+      "description": "Multi-agent iterative code review until zero issues remain",
+      "version": "5.0.0",
+      "category": "development"
+    },
+    {
+      "name": "drift-detect",
+      "source": "./plugins/drift-detect",
+      "description": "Deep repository analysis to realign project plans with code reality - detects drift, gaps, and creates prioritized reconstruction plans",
+      "version": "5.0.0",
+      "category": "productivity"
+    },
+    {
+      "name": "enhance",
+      "source": "./plugins/enhance",
+      "description": "Master enhancement orchestrator: parallel analyzer execution for plugins, agents, docs, CLAUDE.md, and prompts with unified reporting",
+      "version": "5.0.0",
+      "category": "development"
+    },
+    {
+      "name": "sync-docs",
+      "source": "./plugins/sync-docs",
+      "description": "Standalone documentation sync: find outdated refs, update CHANGELOG, flag stale examples based on code changes",
+      "version": "5.0.0",
+      "category": "development"
+    },
+    {
+      "name": "repo-map",
+      "source": "./plugins/repo-map",
+      "description": "AST-based repository map generation using ast-grep with incremental updates for faster drift analysis",
+      "version": "5.0.0",
+      "category": "development"
+    },
+    {
+      "name": "perf",
+      "source": "./plugins/perf",
+      "description": "Rigorous performance investigation workflow with baselines, profiling, hypotheses, and evidence-backed decisions",
+      "version": "5.0.0",
+      "category": "development"
+    },
+    {
+      "name": "learn",
+      "source": "./plugins/learn",
+      "description": "Research topics online and create comprehensive learning guides with RAG-optimized indexes",
+      "version": "5.0.0",
+      "category": "productivity"
+    },
+    {
+      "name": "agnix",
+      "source": "./plugins/agnix",
+      "description": "Lint agent configuration files (SKILL.md, CLAUDE.md, hooks, MCP) against 155 rules across 10+ AI tools",
+      "version": "5.0.0",
+      "category": "development"
+    },
+    {
+      "name": "consult",
+      "source": "./plugins/consult",
+      "description": "Cross-tool AI consultation: get second opinions from Gemini CLI, Codex CLI, Claude Code, OpenCode, or Copilot CLI with model and thinking effort control",
+      "version": "5.0.0",
+      "category": "productivity"
+    }
+  ]
+}

package/.claude-plugin/plugin.json

@@ -0,0 +1,20 @@
+{
+  "name": "agentsys",
+  "version": "5.0.0",
+  "description": "Professional-grade slash commands for Claude Code with cross-platform support",
+  "keywords": [
+    "workflow",
+    "automation",
+    "code-review",
+    "ci-cd",
+    "deployment",
+    "slop-detection",
+    "task-management"
+  ],
+  "author": {
+    "name": "Avi Fenesh",
+    "url": "https://github.com/avifenesh"
+  },
+  "repository": "https://github.com/avifenesh/agentsys",
+  "license": "MIT"
+}

package/AGENTS.md

@@ -0,0 +1,260 @@
+# Project Memory: AgentSys
+
+> **Cross-tool compatible**: This file works as CLAUDE.md (Claude Code) and can be copied to AGENTS.md for OpenCode, Codex, and other AI tools.
+
+<project-memory>
+
+<critical-rules>
+## Critical Rules (Priority Order)
+
+1. **Production project** - Real users depend on this. Test thoroughly and verify all edge cases before committing.
+   *WHY: Breaking changes affect all plugin users immediately.*
+
+2. **Plugin for OTHER projects** - Optimize for plugin users, not internal dev convenience.
+   *WHY: Every decision MUST improve the experience for developers using this in their repos.*
+
+3. **Use CHANGELOG.md for completion tracking** - MUST use CHANGELOG.md for release notes. NEVER create `*_AUDIT.md`, `*_SUMMARY.md`, `*_COMPLETION.md` files.
+   *WHY: Summary files clutter repos and add no value. Report completion verbally.*
+
+4. **Unless** it is a very small change of max few lines, or an urgent hotfix, **MUST create PRs for all changes** - No direct pushes to main.
+   *WHY: PRs enable reviews, CI checks, and rollback if needed. Direct pushes are risky.*
+
+5. **PR reviews** - Wait 3 min for auto-reviewers, address ALL comments (Copilot, Claude, Gemini, Codex).
+   *WHY: Skipping comments leads to merged issues. Every comment must be addressed or explained.*
+
+6. **Read checklists BEFORE multi-file changes** - **MUST** read the relevant checklist before starting:
+   - **Cross-platform work → `checklists/cross-platform-compatibility.md`** (MASTER REF)
+   - Release → `checklists/release.md`
+   - New command → `checklists/new-command.md`
+   - New agent → `checklists/new-agent.md`
+   - New skill → `checklists/new-skill.md`
+   - New lib module → `checklists/new-lib-module.md`
+   - OpenCode plugin update → `checklists/update-opencode-plugin.md`
+   - Repo map changes → `checklists/repo-map.md`
+   *WHY: Multi-file changes have hidden dependencies. Checklists prevent missed updates.*
+
+7. **Especially Before release, and when delivering ANY work** - Check the relevant checklist for completion requirements:
+   - Identify which checklist applies to your work (see rule #6)
+   - Go through EVERY item in that checklist and apply it (e.g. run commands, which files to bump versions in, etc)
+   - Run the `/enhance` command on new or modified commands, agents, skills, hooks or prompts
+   - Verify cross-platform compatibility (OpenCode + Codex)
+   - Update `bin/cli.js` mappings if new command/agent added
+   - Only mark complete after ALL checklist items are done
+   *WHY: Checklists exist because we kept missing things. They are the definition of "done".*
+
+8. **Use plain text markers** - MUST use `[OK]`, `[ERROR]`, `[WARN]`, `[CRITICAL]` for status. NEVER use emojis or ASCII art boxes.
+   - Save tokens - conciseness and clarity over decorations
+   - Use markdown formatting instead of decorative borders
+   *WHY: Emojis and ASCII art waste tokens. AI models parse plain text better.*
+
+9. **gh/git on Windows** - Escape `$` as `\$` in GraphQL queries, avoid `!=` in jq (use `== "A" or == "B"`).
+   - `gh pr checks` uses `state` not `conclusion` - returns UPPERCASE: `SUCCESS`, `FAILURE`, `PENDING`
+   - Single quotes unreliable - use double quotes with escaped inner quotes
+   *WHY: Windows shell interprets $ and ! differently. These cause silent failures.*
+
+10. **Always run git hooks** - Run all pre-commit and pre-push hooks. If a hook blocks, fix the reported issue.
+   - Hooks catch problems before they reach the repo
+   - Fix the root cause, then retry
+   *WHY: Hooks are safety nets. Bypassing them defeats their purpose.*
+
+11. **Fix all test failures** - NEVER skip or ignore a failing test because it's "out of scope" or "pre-existing". Always fix it.
+   - If a test fails during your work, fix it before proceeding
+   - No test is someone else's problem
+   *WHY: Skipping failures erodes test trust. Every green run must mean everything works.*
+
+12. **Report script failures before manual fallback** - When any project script fails (npm test/run/build, scripts/*, agentsys-dev, node bin/dev-cli.js), you MUST:
+   - Report the failure with exact error output to the user
+   - Diagnose the root cause of the failure
+   - Fix the script/tooling issue, not work around it manually
+   - NEVER silently fall back to doing the work by hand
+   *WHY: Silent fallbacks mask broken tooling. A failed script needs fixing, not bypassing.*
+</critical-rules>
+
+<architecture>
+## Architecture
+
+<!-- GEN:START:claude-architecture -->
+```
+lib/          → Shared library (vendored to plugins)
+plugins/      → 12 plugins, 41 agents (31 file-based + 10 role-based), 27 skills
+adapters/     → Platform adapters (opencode-plugin/, opencode/, codex/)
+checklists/   → Action checklists (9 files)
+bin/cli.js    → npm CLI installer
+```
+
+| Plugin | Agents | Skills | Purpose |
+|--------|--------|--------|---------|
+| agnix | 1 | 1 | Agent config linting |
+| audit-project | 10 | 0 | Multi-agent code review |
+| consult | 1 | 1 | Cross-tool AI consultation |
+| deslop | 1 | 1 | AI slop cleanup |
+| drift-detect | 1 | 1 | Plan drift detection |
+| enhance | 8 | 9 | Code quality analyzers |
+| learn | 1 | 1 | Topic research and learning guides |
+| next-task | 10 | 3 | Master workflow orchestration |
+| perf | 6 | 8 | Performance investigation |
+| repo-map | 1 | 1 | AST repo mapping |
+| ship | 0 | 0 | PR creation and deployment |
+| sync-docs | 1 | 1 | Documentation sync |
+<!-- GEN:END:claude-architecture -->
+
+**Pattern**: `Command → Agent → Skill` (orchestration → invocation → implementation)
+</architecture>
+
+<commands>
+## Commands
+
+### Core Workflow
+- `/next-task` - Master workflow: task → implementation → PR → merge
+- `/ship` - PR creation, CI monitoring, merge
+- `/enhance` - Run all enhancement analyzers
+
+### Analysis
+- `/audit-project` - Multi-agent code review
+- `/deslop` - Clean AI slop patterns
+- `/drift-detect` - Compare plan vs implementation
+- `/perf` - Performance investigation
+- `/repo-map` - Generate AST-based repo map
+
+### Maintenance
+- `/sync-docs` - Update documentation to match code
+
+### Dev Commands
+```bash
+npx agentsys-dev status           # Project health (version, counts, branch)
+npx agentsys-dev validate         # Run all validators
+npx agentsys-dev validate plugins # Run single validator
+npx agentsys-dev bump <version>   # Bump all version files (e.g., 3.7.3)
+npx agentsys-dev sync-lib         # Sync lib/ to plugins/
+npx agentsys-dev test             # Run test suite
+npx agentsys-dev preflight         # Change-aware checklist enforcement
+npx agentsys-dev preflight --all   # Run all checks
+npx agentsys-dev preflight --release # All checks + release extras
+npx agentsys-dev gen-docs          # Auto-generate doc sections
+npx agentsys-dev gen-docs --check  # Validate docs are fresh (CI)
+npx agentsys-dev new plugin <name>  # Scaffold new plugin
+npx agentsys-dev new agent <name> --plugin=<plugin>  # Scaffold new agent
+npx agentsys-dev new skill <name> --plugin=<plugin>  # Scaffold new skill
+npx agentsys-dev new command <name> --plugin=<plugin>  # Scaffold new command
+npx agentsys-dev --help           # Show all commands
+
+# Or invoke directly:
+node bin/dev-cli.js <command>
+
+# npm aliases still work:
+npm test                     # Run tests (do before commits)
+npm run validate             # All validators via dev-cli
+npm run preflight            # Change-aware preflight checks
+npm run preflight:all        # All preflight checks
+npm run preflight:release    # Release preflight
+npm run gen-docs             # Auto-generate documentation
+npm run gen-docs:check       # Check if docs are stale
+npm run new:plugin           # Scaffold new plugin
+npm run new:agent            # Scaffold new agent
+npm run new:skill            # Scaffold new skill
+npm run new:command          # Scaffold new command
+npm run bump <version>       # Bump versions via dev-cli
+npm pack                     # Build package
+agentsys                # Run installer
+```
+</commands>
+
+<agents>
+## Agents
+
+39 agents across 9 plugins. Key agents by model:
+
+| Model | Agents | Use Case |
+|-------|--------|----------|
+| **opus** | exploration, planning, implementation, perf-orchestrator | Complex reasoning, analysis |
+| **sonnet** | task-discoverer, delivery-validator, ci-fixer, deslop-agent, reporters | Validation, pattern matching |
+| **haiku** | worktree-manager, ci-monitor, simple-fixer | Mechanical execution |
+
+See [README.md](./README.md#command-details) and [docs/reference/AGENTS.md](./docs/reference/AGENTS.md) for full agent list.
+</agents>
+
+<skills>
+## Skills
+
+25 skills across plugins. Agents invoke skills for reusable implementation.
+
+| Category | Key Skills |
+|----------|------------|
+| Workflow | `orchestrate-review`, `discover-tasks`, `validate-delivery` |
+| Enhancement | `enhance-*` (9 skills for plugins, agents, docs, prompts, hooks) |
+| Performance | `baseline`, `benchmark`, `profile`, `theory-tester` |
+| Cleanup | `deslop`, `sync-docs`, `drift-analysis`, `repo-mapping` |
+
+See [README.md](./README.md#skills) for full skill list.
+</skills>
+
+<state-files>
+## State Files
+
+| File | Location | Purpose |
+|------|----------|---------|
+| `tasks.json` | `{stateDir}/` | Active task registry |
+| `flow.json` | `{stateDir}/` (worktree) | Workflow progress |
+| `preference.json` | `{stateDir}/sources/` | Cached task source |
+| `suppressions.json` | `~/.<claude\|opencode\|codex>/enhance/` | Auto-learned suppressions |
+
+Platform-aware state directory:
+- Claude Code: `.claude/`
+- OpenCode: `config/.opencode/`
+- Codex: `.codex/`
+</state-files>
+
+<workflow-agents>
+## Workflow Agents (MUST-CALL)
+
+Cannot skip in /next-task:
+- `exploration-agent` → before planning
+- `planning-agent` → before implementation
+- **Phase 9 review loop** → MUST use orchestrate-review skill
+- `delivery-validator` → before sync-docs:sync-docs-agent
+- `sync-docs:sync-docs-agent` → before /ship
+</workflow-agents>
+
+<pr-auto-review>
+## PR Auto-Review
+
+4 reviewers: Copilot, Claude, Gemini, Codex
+
+1. Wait 3 min after PR creation (initial auto-reviews)
+2. Claude-review may take 10+ min - wait for it
+3. Read ALL comments
+4. Address EVERY comment
+5. Iterate until zero unresolved
+</pr-auto-review>
+
+<model-selection>
+## Model Selection
+
+| Model | When to Use |
+|-------|-------------|
+| **Opus** | Complex reasoning, analysis where imperfection compounds |
+| **Sonnet** | Validation, pattern matching, most agents |
+| **Haiku** | Mechanical execution, no judgment needed |
+</model-selection>
+
+<priorities>
+## Core Priorities
+
+1. User DX (plugin users)
+2. Worry-free automation
+3. Token efficiency
+4. Quality output
+5. Simplicity
+</priorities>
+
+<end-reminder>
+**REMEMBER**:
+- Use CHANGELOG.md for completion tracking (not summary files)
+- BEFORE starting → Read the relevant checklist (`checklists/*.md`)
+- BEFORE delivering any work, especially releases → Go through that checklist item by item
+- 3 platforms: Claude Code + OpenCode + Codex - ALL must work
+- Agent/Skill pattern: Agents invoke skills, skills have implementation
+- Create PRs for non-trivial changes
+</end-reminder>
+
+</project-memory>

package/CHANGELOG.md

@@ -0,0 +1,190 @@
+# Changelog
+
+> **Migration Note:** This project was renamed from `awesome-slash` to `agentsys` in v5.0.0. All npm packages, CLI commands, and GitHub references now use the new name. Previous versions are archived under the old name.
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [4.1.1] - 2025-02-09
+
+### Fixed
+- **Skills $ARGUMENTS parsing** - Added `$ARGUMENTS` parsing to 13 skills that declared `argument-hint` but never consumed the arguments (CC-SK-012)
+- **agnix config** - Migrated `.agnix.toml` `disabled_rules` from deprecated slug format to proper rule IDs (XP-003, AS-014)
+- **Memory file language** - Strengthened imperative language in AGENTS.md/CLAUDE.md (PE-003, CC-MEM-006)
+
+## [Unreleased]
+
+## [4.2.2] - 2026-02-12
+
+### Fixed
+- Added missing frontmatter descriptions to 3 command reference files (`audit-project-agents`, `ship-ci-review-loop`, `ship-deployment`) that caused Codex adapter skills to install with empty descriptions
+- Added build-time validation in `gen-adapters.js` to error on empty Codex skill descriptions
+- Added install-time guard in `bin/cli.js` to skip skills with missing descriptions
+
+## [4.2.1] - 2026-02-11
+
+### Fixed
+- Removed unused `@agentsys/lib` publish job from release workflow
+- Cleaned up all references to lib as a standalone npm package (docs, scripts, tests, configs)
+
+## [4.2.0] - 2026-02-11
+
+### Added
+- **Static adapter generation system** (`scripts/gen-adapters.js`) - generates OpenCode and Codex adapters from plugin source at build time
+- **Shared `lib/adapter-transforms.js` module** - extracted transform logic from `bin/cli.js` and `scripts/dev-install.js`
+- **`gen-adapters` and `gen-adapters --check` dev-cli commands** with npm script aliases
+- **CI validation step for adapter freshness**
+- **Preflight integration for adapter freshness checks**
+- **`/consult` command** - Cross-tool AI consultation: query Gemini CLI, Codex CLI, Claude Code, OpenCode, or Copilot CLI from your current session (#198)
+  - Choose tool, model, and thinking effort (`--effort=low|medium|high|max`)
+  - Context packaging (`--context=diff|file|none`) and session continuity (`--continue`)
+  - Three invocation paths: `/consult` command, `Skill('consult')`, `Task({ subagent_type: 'consult:consult-agent' })`
+  - Provider detection, structured JSON output, and per-provider effort mapping
+- **Plugin scaffolding system** (`scripts/scaffold.js`) - Scaffold new plugins, agents, skills, and commands from templates (#184)
+  - `npx agentsys-dev new plugin <name>` - full plugin directory with plugin.json, default command, and shared lib
+  - `npx agentsys-dev new agent <name> --plugin=<plugin>` - agent .md with YAML frontmatter template
+  - `npx agentsys-dev new skill <name> --plugin=<plugin>` - skill directory with SKILL.md
+  - `npx agentsys-dev new command <name> --plugin=<plugin>` - command .md with frontmatter
+  - Name validation, collision detection, path traversal protection, YAML injection prevention
+  - npm script aliases: `new:plugin`, `new:agent`, `new:skill`, `new:command`
+  - 56 scaffold tests + 11 dev-cli integration tests
+- **Shared agent template system** - Build-time template expansion (`expand-templates` command) with 3 shared snippets, replacing duplicated sections across 6 enhance agents with TEMPLATE markers and CI freshness validation (#187)
+- **Auto-generate documentation** - `gen-docs` command reads plugin metadata, agent frontmatter, and skill frontmatter to auto-generate documentation sections between GEN:START/GEN:END markers
+  - `npx agentsys-dev gen-docs` writes generated sections to README.md, CLAUDE.md, AGENTS.md, docs/reference/AGENTS.md, site/content.json
+  - `npx agentsys-dev gen-docs --check` validates docs are fresh (for CI, exits 1 if stale)
+  - Enhanced `lib/discovery` with YAML array parsing and frontmatter in `discoverAgents()`/`discoverSkills()`
+  - Integrated into preflight as `gap:docs-freshness` check for new-agent, new-skill, new-command, and release checklists
+  - 34 tests for the generation system, 7 new discovery tests
+- **Preflight command** - Unified change-aware checklist enforcement (`npm run preflight`, `preflight --all`, `preflight --release`, `preflight --json`)
+  - Detects changed files and runs only relevant checklist validators
+  - Includes 7 existing validators + 7 new gap checks (CHANGELOG, labels, codex triggers, lib exports, lib sync, test existence, staged files)
+  - Pre-push hook now delegates to preflight for validation
+- **Unified Dev CLI** (`agentsys-dev`) - Single discoverable entry point for all dev scripts
+  - `agentsys-dev validate` runs all 7 validators sequentially
+  - `agentsys-dev validate <sub>` runs individual validators (plugins, cross-platform, consistency, etc.)
+  - `agentsys-dev status` shows project health (version, plugin/agent/skill counts, git branch)
+  - `agentsys-dev bump <version>`, `sync-lib`, `setup-hooks`, `detect`, `verify`, `test`
+  - `agentsys-dev --help` lists all commands with descriptions
+  - All existing `npm run` commands still work (now delegate through dev-cli)
+  - All direct `node scripts/foo.js` invocations still work (require.main guards)
+  - No external CLI framework dependencies - hand-rolled parsing matching bin/cli.js style
+- **Script failure enforcement hooks** - Three-layer system preventing agents from silently falling back to manual work when project scripts fail (#189)
+  - Claude Code PostToolUse hook for context injection on project script execution
+  - OpenCode plugin failure detection enhancement in tool.execute.after
+  - New critical rule #13 in CLAUDE.md/AGENTS.md requiring failure reporting before manual fallback
+
+### Changed
+- **Adapter transform refactoring** - Refactored `bin/cli.js` and `scripts/dev-install.js` to use shared adapter transforms (eliminates duplication)
+- **CHANGELOG Archival** - Moved v1.x-v3.x entries to `changelogs/` directory, reducing CHANGELOG.md from ~92KB to ~10KB (#186)
+- **Version Management** - Single version source of truth via `package.json` with automated stamping (#183)
+  - Created `scripts/stamp-version.js` to stamp all downstream files from package.json
+  - Refactored `scripts/bump-version.js` to delegate to `npm version`
+  - Added npm `version` lifecycle hook for automatic stamping
+  - Fixed `validate-counts.js` plugin.json path resolution bug
+  - Added `package-lock.json` and `site/content.json` to version validation
+  - Fixed stale versions in `site/content.json` and `package-lock.json`
+  - Single command updates all 15+ version locations: `npx agentsys-dev bump X.Y.Z`
+- **Plugin Discovery** - Convention-based filesystem scanning replaces 14+ hardcoded registration lists (#182)
+  - New `lib/discovery/` module auto-discovers plugins, commands, agents, and skills
+  - `bin/cli.js`, `scripts/dev-install.js`, `scripts/bump-version.js` use discovery calls
+  - Adding a new plugin no longer requires updating registration points
+  - Fixed stale lists in `dev-install.js` and `bump-version.js` (missing learn, agnix)
+  - Added `codex-description` frontmatter for Codex trigger phrases
+  - `scripts/sync-lib.sh` reads from generated `plugins.txt` manifest
+  - Deprecated `adapters/opencode/install.sh` and `adapters/codex/install.sh`
+- **README /agnix Documentation** - Expanded agnix section to be on par with other major commands
+  - Added "The problem it solves" section explaining why agent config linting matters
+  - Added "What it validates" table with 5 categories (Structure, Security, Consistency, Best Practices, Cross-Platform)
+  - Added details about 100 validation rules and their sources
+  - Added CI/CD integration example with GitHub Code Scanning SARIF workflow
+  - Added installation instructions (Cargo, Homebrew)
+  - Added "Why use agnix" value proposition section
+  - Prominent link to [agnix CLI project](https://github.com/avifenesh/agnix)
+  - Updated Commands table with more descriptive entry
+  - Updated skill count to 26 across all references
+
+### Security
+- **consult plugin security hardening** (#208) - Shell injection prevention, path traversal protection, and API key redaction
+  - Question text passed via temp files instead of shell interpolation (prevents `$()` and backtick expansion)
+  - File context validation blocks UNC paths, resolves canonical paths, prevents symlink escapes
+  - Output sanitization redacts 12 credential patterns (API keys, tokens, env vars, auth headers)
+  - Fixed 3 pre-existing test regressions in consult-command.test.js
+
+## [4.1.0] - 2026-02-05
+
+### Added
+- **New /agnix Plugin** - Lint agent configurations before they break your workflow
+  - Validates Skills, Hooks, MCP, Memory, Plugins across Claude Code, Cursor, GitHub Copilot, and Codex CLI
+  - 100 validation rules from official specs, research papers, real-world testing
+  - Auto-fix support with `--fix` flag
+  - SARIF output for GitHub Code Scanning integration
+  - Target-specific validation (`--target claude-code|cursor|codex`)
+  - Requires [agnix CLI](https://github.com/avifenesh/agnix) (`cargo install agnix-cli`)
+
+### Changed
+- **Plugin Count** - Now 11 plugins, 40 agents, 26 skills
+- **CLAUDE.md Rule #11** - Added rule about using `[]` not `<>` for argument hints
+
+### Fixed
+- **Prompt Injection** - Sanitize user arguments in agnix command (validate target, strip newlines from path)
+- **Argument Parsing** - Support both `--target=value` and `--target value` forms
+- **enhance-hooks/SKILL.md** - Fixed path example escaping
+
+## [4.0.0] - 2026-02-05
+
+### Added
+- **New /learn Plugin** - Research any topic online and create comprehensive learning guides
+  - Gathers 10-40 online sources based on depth level (brief/medium/deep)
+  - Uses progressive query architecture (funnel approach: broad → specific → deep)
+  - Implements source quality scoring (authority, recency, depth, examples, uniqueness)
+  - Just-in-time retrieval to avoid context rot
+  - Creates topic-specific guides in `agent-knowledge/` directory
+  - Maintains CLAUDE.md/AGENTS.md as master RAG indexes
+  - Self-evaluation step for output quality assessment
+  - Integrates with enhance:enhance-docs and enhance:enhance-prompts
+  - Opus model for high-quality research synthesis
+
+### Changed
+- **Agent Frontmatter Format** - Converted all 29 agents to YAML array format for tools field (Claude Code spec compliance)
+- **Argument Hints** - Aligned all argument-hint fields to official `[placeholder]` format
+- **Plugin Count** - Now 10 plugins total (added learn)
+
+### Fixed
+- **Semver Sorting** - Fixed version comparison so "1.10.0" correctly > "1.9.9"
+- **CodeQL Security** - Escape backslashes in glob pattern matching
+- **Path Traversal** - Use `path.relative()` instead of `startsWith()` for Windows compatibility
+
+## [4.0.0-rc.1] - 2026-02-05
+
+### Added
+- **New /learn Plugin** - Research any topic online and create comprehensive learning guides
+  - Gathers 10-40 online sources based on depth level (brief/medium/deep)
+  - Uses progressive query architecture (funnel approach: broad → specific → deep)
+  - Implements source quality scoring (authority, recency, depth, examples, uniqueness)
+  - Just-in-time retrieval to avoid context rot
+  - Creates topic-specific guides in `agent-knowledge/` directory
+  - Maintains CLAUDE.md/AGENTS.md as master RAG indexes
+  - Self-evaluation step for output quality assessment
+  - Integrates with enhance:enhance-docs and enhance:enhance-prompts
+  - Opus model for high-quality research synthesis
+
+### Changed
+- **Agent Frontmatter Format** - Converted all 29 agents to YAML array format for tools field (Claude Code spec compliance)
+- **Argument Hints** - Aligned all argument-hint fields to official `[placeholder]` format
+- **Plugin Count** - Now 10 plugins total (added learn)
+
+### Fixed
+- **Semver Sorting** - Fixed version comparison so "1.10.0" correctly > "1.9.9"
+- **CodeQL Security** - Escape backslashes in glob pattern matching
+- **Path Traversal** - Use `path.relative()` instead of `startsWith()` for Windows compatibility
+
+
+---
+
+## Previous Releases
+
+- [v3.x Changelog](https://github.com/avifenesh/agentsys/blob/main/changelogs/CHANGELOG-v3.md) (v3.0.0 - v3.9.0)
+- [v2.x Changelog](https://github.com/avifenesh/agentsys/blob/main/changelogs/CHANGELOG-v2.md) (v2.0.0 - v2.10.1)
+- [v1.x Changelog](https://github.com/avifenesh/agentsys/blob/main/changelogs/CHANGELOG-v1.md) (v1.0.0 - v1.1.0)

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Avi Fenesh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.