agentsys 5.0.0

package/SECURITY.md

@@ -0,0 +1,45 @@
+# Security Policy
+
+> **Disclaimer:** This plugin is provided as-is. Usage is entirely at your own responsibility. The maintainers make no guarantees about security or fitness for any particular purpose.
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability:
+
+1. **Do not** open a public issue
+2. Use [GitHub Security Advisories](https://github.com/avifenesh/agentsys/security/advisories) to report privately
+3. Include steps to reproduce and potential impact
+
+## User Responsibility
+
+**You are responsible for:**
+- Reviewing all code changes made by agents before committing
+- Never committing secrets, API keys, or credentials
+- Validating deployments before shipping to production
+- Understanding what commands do before running them
+
+**Commands that modify your repository:**
+- `/ship` - Commits, pushes, creates and merges PRs
+- `/next-task` - Full workflow automation including code changes
+- `/deslop --apply` - Modifies source files
+
+Always review changes with `git status` and `git diff` before running commands that commit or push.
+
+## Security Measures (v3.0.0+)
+
+The plugin includes basic protections:
+
+- **Command Injection Prevention:** Uses `execFileSync` with input validation
+- **Path Traversal Prevention:** Tool names validated with allowlist patterns
+- **Input Validation:** User-provided values sanitized before use
+
+These measures reduce risk but do not guarantee security.
+
+## Scope
+
+This policy covers the AgentSys plugin code only.
+
+**Not covered:**
+- Claude Code itself (report to Anthropic)
+- External tools (gh, git, npm, etc.)
+- Deployment platforms (Railway, Vercel, etc.)

package/adapters/README.md

@@ -0,0 +1,258 @@
+# Multi-Tool Adapters
+
+This directory contains adapters for using agentsys commands with different AI coding tools.
+
+## Supported Tools
+
+### Claude Code (Native)
+The primary target. Install via marketplace:
+```bash
+claude plugin marketplace add avifenesh/agentsys
+# Install specific plugins (e.g., next-task, ship, enhance)
+claude plugin install next-task@agentsys
+claude plugin install ship@agentsys
+```
+
+See main [README.md](../README.md) for details.
+
+---
+
+### Codex CLI
+OpenAI's Codex command-line interface.
+
+**Installation:**
+```bash
+git clone https://github.com/avifenesh/agentsys.git
+cd agentsys
+./adapters/codex/install.sh
+```
+
+**Usage:**
+```bash
+codex
+> /deslop
+> /next-task
+> /ship
+```
+
+**Documentation**: [adapters/codex/README.md](./codex/README.md)
+
+---
+
+### OpenCode
+Open-source AI coding assistant.
+
+**Installation:**
+```bash
+git clone https://github.com/avifenesh/agentsys.git
+cd agentsys
+./adapters/opencode/install.sh
+```
+
+**Usage:**
+```bash
+opencode
+> /deslop
+> /next-task bug
+> /ship --strategy rebase
+```
+
+**Documentation**: [adapters/opencode/README.md](./opencode/README.md)
+
+---
+
+## Architecture
+
+All three tools use **markdown-based slash commands**, making adaptation straightforward:
+
+```
+Source: plugins/*/commands/*.md
+         ↓
+Adapters: Copy + path variable substitution
+         ↓
+Install: Tool-specific command directory
+```
+
+### Path Variable Substitution
+
+Commands reference shared libraries using path variables:
+
+**Claude Code:**
+```bash
+node ${CLAUDE_PLUGIN_ROOT}/lib/platform/detect-platform.js
+```
+
+**Codex CLI:**
+```bash
+node ~/.codex/skills/agentsys/lib/platform/detect-platform.js
+```
+
+**OpenCode:**
+```bash
+node ~/.config/opencode/commands/lib/platform/detect-platform.js
+```
+
+Installers automatically handle these substitutions.
+
+---
+
+## Feature Compatibility
+
+| Feature | Claude Code | Codex CLI | OpenCode |
+|---------|-------------|-----------|----------|
+| Platform Detection | Yes | Yes | Yes |
+| Git Operations | Yes | Yes | Yes |
+| CI/CD Detection | Yes | Yes | Yes |
+| GitHub CLI Integration | Yes | Yes | Yes |
+| Multi-agent Workflows | Yes | Varies | Varies |
+| File Includes | Yes | Yes | Yes (@filename) |
+| Bash Command Output | Yes | Yes | Yes (!command) |
+
+**Legend:**
+- Yes = Full support
+- Varies = Partial support (may vary by tool version)
+- No = Not supported
+
+---
+
+## Commands Compatibility
+
+| Command | Claude Code | Codex CLI | OpenCode | Notes |
+|---------|-------------|-----------|----------|-------|
+| `/deslop` | Yes | Yes | Yes | Pure bash, 100% compatible |
+| `/next-task` | Yes | Yes | Yes | Requires `gh` CLI |
+| `/audit-project` | Yes | Partial | Partial | Multi-agent may differ |
+| `/ship` | Yes | Partial | Partial | CI/CD works, agents may vary |
+
+---
+
+## Installation Comparison
+
+### Claude Code
+```bash
+# Via marketplace (easiest)
+claude plugin marketplace add avifenesh/agentsys
+claude plugin install next-task@agentsys
+```
+
+**Pros:**
+- Official marketplace
+- Automatic updates
+- Per-plugin installation
+
+**Cons:**
+- Claude-only
+
+### Codex CLI
+```bash
+# Via installer script
+./adapters/codex/install.sh
+```
+
+**Pros:**
+- One-command installation
+- All commands at once
+- Easy updates (re-run installer)
+
+**Cons:**
+- Requires git clone first
+- Manual updates
+
+### OpenCode
+```bash
+# Via installer script
+./adapters/opencode/install.sh
+```
+
+**Pros:**
+- One-command installation
+- OpenCode-specific features (@, !)
+- Easy updates (re-run installer)
+
+**Cons:**
+- Requires git clone first
+- Manual updates
+
+---
+
+## Prerequisites
+
+All tools require:
+- **Git** - Version control
+- **Node.js 18+** - For platform detection scripts
+- **GitHub CLI (`gh`)** - For PR-related commands (`/ship`)
+
+Optional (enables additional features):
+- Railway CLI, Vercel CLI, Netlify CLI - For deployment detection
+- Linear integration - For `/next-task`
+
+---
+
+## Updating Commands
+
+### Claude Code
+Automatic via marketplace updates.
+
+### Codex CLI & OpenCode
+```bash
+cd /path/to/agentsys
+git pull origin main
+./adapters/codex/install.sh    # Or ./adapters/opencode/install.sh
+```
+
+---
+
+## Troubleshooting
+
+### Command not found
+**Codex CLI:**
+- Check `~/.codex/skills/*/SKILL.md`
+- Restart Codex CLI
+
+**OpenCode:**
+- Check `~/.config/opencode/commands/`
+- Restart OpenCode TUI
+
+### Path errors in commands
+Re-run the installer to fix path substitutions:
+```bash
+./adapters/[tool]/install.sh
+```
+
+### Node.js errors
+Ensure Node.js 18+ is installed:
+```bash
+node --version  # Should be v18.0.0 or higher
+```
+
+### GitHub CLI errors
+Install and authenticate:
+```bash
+gh auth login
+```
+
+---
+
+## Contributing
+
+Found a bug or want to add support for another tool?
+
+1. Open an issue: https://github.com/avifenesh/agentsys/issues
+2. Submit a PR with:
+   - New adapter directory: `adapters/[tool-name]/`
+   - Installation script: `install.sh`
+   - Documentation: `README.md`
+   - Update this file
+
+---
+
+## Resources
+
+- [Claude Code Documentation](https://code.claude.com/docs)
+- [Codex CLI Documentation](https://developers.openai.com/codex/cli)
+- [OpenCode Documentation](https://opencode.ai/docs)
+- [agentsys Repository](https://github.com/avifenesh/agentsys)
+
+---
+
+Made for the AI coding tools community

package/adapters/codex/README.md

@@ -0,0 +1,273 @@
+# agentsys for Codex CLI
+
+Professional-grade slash commands adapted for OpenAI's Codex CLI.
+
+## Quick Install
+
+```bash
+git clone https://github.com/avifenesh/agentsys.git
+cd agentsys
+./adapters/codex/install.sh
+```
+
+## Prerequisites
+
+- **Codex CLI** - Install from [developers.openai.com/codex/cli](https://developers.openai.com/codex/cli)
+- **Node.js 18+** - Download from [nodejs.org](https://nodejs.org)
+- **Git** - Download from [git-scm.com](https://git-scm.com)
+- **GitHub CLI (`gh`)** - For PR commands (install: `brew install gh` or see [cli.github.com](https://cli.github.com))
+
+## Available Commands
+
+### `/deslop` - AI Slop Cleanup
+
+Remove debugging code, old TODOs, and other AI slop.
+
+```bash
+codex
+> /deslop
+> /deslop apply
+> /deslop apply src/ 10
+```
+
+**What it does:**
+- Scans for console.logs, print statements, old TODOs
+- Generates report or auto-applies fixes
+- Runs verification tests
+- Preserves functionality with minimal diffs
+
+---
+
+### `/next-task` - Intelligent Task Prioritization
+
+Discover what to work on next with AI analysis.
+
+```bash
+codex
+> /next-task
+> /next-task bug
+> /next-task --include-blocked
+```
+
+**What it does:**
+- Analyzes GitHub Issues (required)
+- Validates tasks aren't already implemented
+- Scores by impact, urgency, effort
+- Provides top 5 recommendations with evidence
+
+**Requires:** GitHub CLI (`gh`)
+
+---
+
+### `/audit-project` - Multi-Agent Code Review
+
+Comprehensive review with specialized AI agents.
+
+```bash
+codex
+> /audit-project
+> /audit-project --recent
+> /audit-project --domain security
+> /audit-project --resume
+```
+
+**What it does:**
+- Deploys 10 specialized agents
+- Adapts to your tech stack
+- Finds bugs, security issues, performance problems
+- Iterates until no open issues remain
+
+---
+
+### `/ship` - Complete PR Workflow
+
+Ship from commit to production with validation.
+
+```bash
+codex
+> /ship
+> /ship --strategy rebase
+```
+
+**What it does:**
+1. Commits changes with AI message
+2. Creates PR with description
+3. Waits for CI to pass
+4. Runs quality reviews
+5. Merges to main
+6. Deploys to dev/prod
+7. Validates deployments
+8. Auto-rollback on failure
+
+**Requires:** Git, GitHub CLI (`gh`)
+
+---
+
+## Installation Details
+
+The installer:
+1. Creates `~/.codex/skills/<skill>/SKILL.md` for each skill
+2. Copies command files with path adjustments
+3. Installs shared libraries (platform detection, patterns)
+4. Creates environment setup scripts
+
+### File Structure
+
+```
+~/.codex/skills/
+├── next-task/
+│   ├── deslop.md
+│   ├── next-task.md
+│   ├── audit-project.md
+│   └── ship.md
+├── lib/
+│   ├── platform/
+│   │   ├── detect-platform.js
+│   │   └── verify-tools.js
+│   ├── patterns/
+│   │   ├── review-patterns.js
+│   │   └── slop-patterns.js
+│   └── utils/
+│       └── context-optimizer.js
+├── env.sh
+└── README.md
+```
+
+---
+
+## Usage Examples
+
+### Clean up debugging code
+```bash
+codex
+> /deslop apply
+
+# Changeset 1/5: Remove console.log statements
+# - src/app.js: Removed 3 console.log calls
+# [OK] Tests passed
+#
+# Summary: 5 files changed, 23 lines deleted
+```
+
+### Get next priority task
+```bash
+codex
+> /next-task
+
+# Top 5 Priority Tasks:
+#
+# 1. [High Impact] Fix login timeout on mobile
+#    Score: 9.2/10 (Impact: 10, Urgency: 9, Effort: 3)
+#    Status: not-started (no code found)
+```
+
+### Ship a feature
+```bash
+# Make your changes
+git add .
+
+codex
+> /ship
+
+# [OK] Commits with AI message
+# [OK] Creates PR with context
+# [OK] Waits for CI
+# [OK] Reviews code
+# [OK] Merges to main
+# [OK] Deploys and validates
+```
+
+---
+
+## Codex-Specific Notes
+
+### Custom Prompt Integration
+
+These commands integrate with Codex's custom prompt system. You can also create shortcuts by adding to your Codex config.
+
+### Multi-Agent Differences
+
+Codex CLI may handle multi-agent workflows differently than Claude Code. Commands will adapt to available capabilities.
+
+### Built-in Commands
+
+Use alongside Codex's built-in commands:
+- `/diff` - View Git diff
+- `/review` - Codex's native review
+- `/compact` - Summarize conversation
+- `/model` - Switch models
+
+agentsys commands complement these.
+
+---
+
+## Platform Support
+
+### Auto-Detected CI Platforms
+GitHub Actions · GitLab CI · CircleCI · Jenkins · Travis CI
+
+### Auto-Detected Deployment Platforms
+Railway · Vercel · Netlify · Fly.io · Platform.sh · Render
+
+### Auto-Detected Project Types
+Node.js · Python · Rust · Go · Java
+
+---
+
+## Updating
+
+To update commands:
+
+```bash
+cd /path/to/agentsys
+git pull origin main
+./adapters/codex/install.sh
+```
+
+---
+
+## Troubleshooting
+
+### Commands not showing up
+1. Restart Codex CLI
+2. Check installation: `ls ~/.codex/skills/`
+3. Re-run installer
+
+### Path errors
+Re-run installer to fix path substitutions:
+```bash
+./adapters/codex/install.sh
+```
+
+### Node.js not found
+Ensure Node.js 18+ is installed:
+```bash
+node --version  # Should be v18.0.0 or higher
+```
+
+### GitHub CLI authentication
+```bash
+gh auth login
+gh auth status
+```
+
+---
+
+## Support
+
+- **Repository**: https://github.com/avifenesh/agentsys
+- **Issues**: https://github.com/avifenesh/agentsys/issues
+- **Codex CLI Docs**: https://developers.openai.com/codex/cli
+
+---
+
+## Resources
+
+- [Codex CLI Slash Commands](https://developers.openai.com/codex/cli/slash-commands/)
+- [Custom Prompts](https://developers.openai.com/codex/custom-prompts/)
+- [agentsys Main README](../../README.md)
+- [Multi-Tool Adapters](../README.md)
+
+---
+
+Made for the Codex CLI community