agentsys 5.3.6 → 5.4.0

package/.agnix.toml

@@ -25,23 +25,33 @@ mcp = true
 imports = true
 cross_platform = false # Intentional - we document all 3 platform paths
 agents_md = true
-copilot = false # Not targeting Copilot
-cursor = false # Not targeting Cursor
+kiro_agents = false # Kiro agent copies reference agentsys subagents not resolvable from .kiro/
 prompt_engineering = true
 generic_instructions = true
 frontmatter_validation = true
 xml_balance = true
 import_references = true
 disabled_rules = [
-    "XP-003",      # Intentional - we document all 3 platform paths (.claude/, .opencode/, .codex/)
+    "AGM-003",     # docs/reference/AGENTS.md is a comprehensive reference doc
+    "AGM-005",     # Cursor platform examples are reference content in AGENTS.md
+    "AGM-006",     # Intentional - root AGENTS.md (instructions) + docs/reference/AGENTS.md (reference)
+    "AS-012",      # enhance-hooks is a comprehensive hook reference (needs >500 lines)
     "AS-014",      # False positives on regex escape sequences (\n, \s, \d)
     "CC-AG-009",   # False positive - Skill, AskUserQuestion, LSP are valid Claude Code tools
+    "CC-HK-008",   # Hook script path resolution differs on Windows (forward slash prefix)
+    "CC-MEM-005",  # "Be concise" is ecosystem-wide boilerplate
+    "CC-MEM-006",  # Negative instructions (NEVER/Do not) are ecosystem standard critical rules
     "CC-MEM-009",  # Intentional - CLAUDE.md uses structured sections, size is necessary
-    "AGM-006",     # Intentional - root AGENTS.md (instructions) + docs/reference/AGENTS.md (reference)
-    "AGM-003",     # docs/reference/AGENTS.md is a comprehensive reference doc
-    "PE-001",      # Reference docs have structured layout; middle placement is intentional
-    "AS-012",      # enhance-hooks is a comprehensive hook reference (needs >500 lines)
     "CC-SK-009",   # enhance-skills contains example injections for teaching purposes
+    "CC-SK-012",   # Intentional - argument-hint present for UI display
+    "CC-SK-017",   # Intentional - version is a client-specific frontmatter field
+    "CDX-AG-002",  # False positive - "tokens" in ecosystem boilerplate is not a secret
+    "CDX-AG-005",  # Codex agent instruction format - AGENTS.md uses agentsys conventions
+    "KR-SK-001",   # Kiro skill copies use Claude Code frontmatter fields (version, argument-hint)
+    "PE-001",      # Reference docs have structured layout; middle placement is intentional
+    "PE-005",      # Same as CC-MEM-005 for prompt engineering rules
+    "XML-001",     # False positive - <login-url> is a placeholder in examples
+    "XP-003",      # Intentional - we document all 3 platform paths (.claude/, .opencode/, .codex/)
 ]
 
 [tool_versions]

package/.claude-plugin/marketplace.json

@@ -1,7 +1,7 @@
 {
   "name": "agentsys",
-  "description": "14 specialized plugins for AI workflow automation - task orchestration, PR workflow, slop detection, code review, drift detection, enhancement analysis, documentation sync, repo mapping, perf investigations, topic research, agent config linting, cross-tool AI consultation, and structured AI debate",
-  "version": "5.3.6",
+  "description": "15 specialized plugins for AI workflow automation - task orchestration, PR workflow, slop detection, code review, drift detection, enhancement analysis, documentation sync, repo mapping, perf investigations, topic research, agent config linting, cross-tool AI consultation, structured AI debate, and workflow pattern learning",
+  "version": "5.4.0",
   "owner": {
     "name": "Avi Fenesh",
     "url": "https://github.com/avifenesh"
@@ -175,6 +175,17 @@
       "version": "1.0.0",
       "category": "automation",
       "homepage": "https://github.com/agent-sh/web-ctl"
+    },
+    {
+      "name": "skillers",
+      "source": {
+        "source": "url",
+        "url": "https://github.com/agent-sh/skillers.git"
+      },
+      "description": "Learn from workflow patterns across sessions and suggest skills, hooks, and agents to automate repetitive work",
+      "version": "1.0.0",
+      "category": "productivity",
+      "homepage": "https://github.com/agent-sh/skillers"
     }
   ]
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentsys",
-  "version": "5.3.6",
+  "version": "5.4.0",
   "description": "Professional-grade slash commands for Claude Code with cross-platform support",
   "keywords": [
     "workflow",

package/.gitmodules

@@ -0,0 +1,3 @@
+[submodule "agent-knowledge"]
+	path = agent-knowledge
+	url = https://github.com/agent-sh/agent-knowledge.git

package/AGENTS.md

@@ -150,12 +150,12 @@ agentsys                # Run installer
 <agents>
 ## Agents
 
-43 agents across 14 plugins. Key agents by model:
+35 agents across 15 plugins. Key agents by model:
 
 | Model | Agents | Use Case |
 |-------|--------|----------|
-| **opus** | exploration, planning, implementation, perf-orchestrator | Complex reasoning, analysis |
-| **sonnet** | task-discoverer, delivery-validator, ci-fixer, deslop-agent, reporters | Validation, pattern matching |
+| **opus** | exploration, planning, implementation, perf-orchestrator, debate-orchestrator, skillers-recommender | Complex reasoning, analysis |
+| **sonnet** | task-discoverer, delivery-validator, ci-fixer, deslop-agent, reporters, learn, release-agent, skillers-compactor | Validation, pattern matching |
 | **haiku** | worktree-manager, ci-monitor, simple-fixer | Mechanical execution |
 
 See [README.md](./README.md#command-details) and [docs/reference/AGENTS.md](./docs/reference/AGENTS.md) for full agent list.
@@ -164,7 +164,7 @@ See [README.md](./README.md#command-details) and [docs/reference/AGENTS.md](./do
 <skills>
 ## Skills
 
-25 skills across plugins. Agents invoke skills for reusable implementation.
+32 skills across plugins. Agents invoke skills for reusable implementation.
 
 | Category | Key Skills |
 |----------|------------|

package/CHANGELOG.md

@@ -7,6 +7,34 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.4.0] - 2026-03-10
+
+### Added
+
+- **`/release` command** - Discovery-first release workflow that detects how a repo releases before executing. Supports 12+ ecosystems (npm, cargo, python, go, maven, gradle, ruby, nuget, dart, hex, packagist, swift) and 7 release tool configurations (semantic-release, release-it, goreleaser, changesets, cargo-release, lerna, standard-version).
+- **`/skillers` command** - Transcript-based workflow pattern learning. Analyzes Claude Code conversation history, clusters recurring patterns into weighted themes, and suggests skills/hooks/agents to automate repetitive work.
+- **release-agent** (sonnet) - Discovers release method via tool configs, CI workflows, scripts, and manifests before performing the release.
+- **skillers-compactor** (sonnet) - Extracts observations from conversation transcripts and clusters them into knowledge themes.
+- **skillers-recommender** (opus) - Analyzes accumulated knowledge and classifies patterns as hook/skill/agent recommendations.
+- **Agnix CI validation** - All plugins now run agnix lint in CI pipelines.
+- **agent-knowledge submodule** - Research guides available as a git submodule.
+- **Website additions** - How It Works content for consult, debate, web-ctl tabs.
+
+### Fixed
+
+- **Accurate ecosystem counts** - Stats now show 15 plugins, 35 agents, 32 skills, 3,751 tests, 14 commands. Previously showed inflated/stale counts.
+- **Pinned action SHAs** - Updated to latest stable versions for security.
+- **CodeQL regex** - Fixed inefficient regular expression flagged by code scanning.
+- **Go test fixture** - Added go.mod so CodeQL can analyze Go fixtures.
+- **Website CSS** - Reduced commands section bottom padding, removed inline how-it-works paragraphs.
+
+## [5.3.7] - 2026-03-02
+
+### Fixed
+
+- **Website numbers updated** - Stats now show 14 plugins, 43 agents, 30 skills, 3,750 tests, 13 commands. Previously showed stale counts from earlier versions.
+- **Kiro install TDZ bug** - Fixed `steeringMappingsForCleanup` used before initialization in v5.3.6 published code. Variable ordering corrected.
+
 ## [5.3.6] - 2026-03-02
 
 ### Fixed

package/README.md

@@ -21,7 +21,7 @@
 </p>
 
 <p align="center">
-  <b>14 plugins · 43 agents · 30 skills (across all repos) · 26k lines of lib code · 3,357 tests · 5 platforms</b><br>
+  <b>15 plugins · 35 agents · 32 skills (across all repos) · 30k lines of lib code · 3,751 tests · 5 platforms</b><br>
   <em>Plugins distributed as standalone repos under <a href="https://github.com/agent-sh">agent-sh</a> org — agentsys is the marketplace &amp; installer</em>
 </p>
 
@@ -47,7 +47,7 @@ AI models can write code. That's not the hard part anymore. The hard part is eve
 
 ## What This Is
 
-An agent orchestration system — 14 plugins, 43 agents, and 30 skills that compose into structured pipelines for software development. Each plugin lives in its own standalone repo under the [agent-sh](https://github.com/agent-sh) org. agentsys is the marketplace and installer that ties them together.
+An agent orchestration system — 15 plugins, 35 agents, and 32 skills that compose into structured pipelines for software development. Each plugin lives in its own standalone repo under the [agent-sh](https://github.com/agent-sh) org. agentsys is the marketplace and installer that ties them together.
 
 Each agent has a single responsibility, a specific model assignment, and defined inputs/outputs. Pipelines enforce phase gates so agents can't skip steps. State persists across sessions so work survives interruptions.
 
@@ -104,8 +104,8 @@ Skills are the reusable implementation units. Agents invoke skills; commands orc
 | Section | What's there |
 |---------|--------------|
 | [The Approach](#the-approach) | Why it's built this way |
-| [Commands](#commands) | All 13 commands overview |
-| [Skills](#skills) | 30 skills across plugins |
+| [Commands](#commands) | All 14 commands overview |
+| [Skills](#skills) | 32 skills across plugins |
 | [Command Details](#command-details) | Deep dive into each command |
 | [How Commands Work Together](#how-commands-work-together) | Standalone vs integrated |
 | [Design Philosophy](#design-philosophy) | The thinking behind the architecture |
@@ -765,6 +765,47 @@ npx playwright install chromium
 
 **Skills:** web-auth (human-in-the-loop auth), web-browse (headless actions)
 
+### /release
+
+> Versioned release with automatic ecosystem and tooling detection
+
+```bash
+/release                # Patch release (auto-discovers how this repo releases)
+/release minor          # Minor version bump
+/release major --dry-run # Preview what would happen
+```
+
+The release agent discovers how your repo releases before executing:
+
+1. **Checks for release tools** - semantic-release, release-it, goreleaser, changesets, cargo-release
+2. **Checks for scripts** - Makefile `release:` target, npm `release` script, `scripts/release.*`
+3. **Falls back to generic** - Version bump, changelog, tag, push, GitHub release, publish
+
+Supports 12+ ecosystems: npm, cargo, python, go, maven, gradle, ruby, nuget, dart, hex, packagist, swift.
+
+**Agent:** release-agent (sonnet model)
+
+**Skill:** release (generic fallback workflow)
+
+### /skillers
+
+> Learn from your workflow patterns and suggest automations
+
+```bash
+/skillers show              # Display current config and knowledge stats
+/skillers compact           # Analyze recent transcripts, extract patterns
+/skillers compact --days=14 # Analyze older transcripts
+/skillers recommend         # Get automation suggestions from accumulated knowledge
+```
+
+Reads your Claude Code conversation transcripts, identifies recurring patterns (pain points, repeated workflows, wishes), clusters them into weighted themes, and suggests skills, hooks, or agents to automate them.
+
+No per-turn overhead - it reads transcripts that Claude Code already saves.
+
+**Agents:** skillers-compactor (sonnet), skillers-recommender (opus)
+
+**Skills:** compact, recommend
+
 ---
 
 ## How Commands Work Together
@@ -970,7 +1011,7 @@ The system is built on research, not guesswork.
 - Instruction following reliability
 
 **Testing:**
-- 1,818 tests passing
+- 3,751 tests passing
 - Drift-detect validated on 1,000+ repositories
 - E2E workflow testing across all commands
 - Cross-platform validation (Claude Code, OpenCode, Codex CLI, Cursor, Kiro)

package/lib/adapter-transforms.js

@@ -490,7 +490,9 @@ function transformCommandForKiro(content, options) {
   // template literals inside the code as false fence endings.
   content = content.replace(/^```(?:javascript|js)?\n([\s\S]*?)^```$/gm, (fullBlock, codeContent) => {
     if (!codeContent.includes('Promise.all') || !codeContent.includes('Task(')) return fullBlock;
-    const taskMatches = [...codeContent.matchAll(/Task\s*\(\s*\{[\s\S]*?subagent_type:\s*['"](?:[^"':]+:)?([^'"]+)['"][\s\S]*?prompt:\s*`((?:[^`]|\$\{[^}]*\})*)`/gs)];
+    // Use lazy [\s\S]*? for the template literal body: it stops at the first backtick and
+    // naturally matches any character including standalone $ (e.g. $100, $BUDGET).
+    const taskMatches = [...codeContent.matchAll(/Task\s*\(\s*\{[\s\S]*?subagent_type:\s*['"](?:[^"':]+:)?([^'"]+)['"][\s\S]*?prompt:\s*`([\s\S]*?)`/gs)];
     if (taskMatches.length < 2) return fullBlock;
 
     const delegations = taskMatches.map(m => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentsys",
-  "version": "5.3.6",
+  "version": "5.4.0",
   "description": "A modular runtime and orchestration system for AI agents - works with Claude Code, OpenCode, and Codex CLI",
   "main": "lib/platform/detect-platform.js",
   "type": "commonjs",

package/site/assets/css/main.css

@@ -645,7 +645,7 @@
  * COMMANDS SECTION
  * -------------------------------------------------------------------------- */
 .commands {
-  padding: var(--space-24) var(--space-6);
+  padding: var(--space-24) var(--space-6) var(--space-16);
 }
 
 .commands__inner {
@@ -903,6 +903,44 @@
   color: var(--color-text-faint);
 }
 
+/* --------------------------------------------------------------------------
+ * SCROLL CUE
+ * -------------------------------------------------------------------------- */
+.scroll-cue {
+  text-align: center;
+  padding: var(--space-8) 0 var(--space-4);
+}
+
+.scroll-cue__link {
+  display: inline-flex;
+  flex-direction: column;
+  align-items: center;
+  gap: var(--space-2);
+  color: var(--color-text-tertiary);
+  text-decoration: none;
+  transition: color 0.2s ease;
+}
+
+.scroll-cue__link:hover {
+  color: var(--color-text-primary);
+}
+
+.scroll-cue__text {
+  font-size: var(--text-sm);
+  font-weight: 500;
+  letter-spacing: 0.05em;
+  text-transform: uppercase;
+}
+
+.scroll-cue__arrow {
+  animation: scroll-bounce 2s ease-in-out infinite;
+}
+
+@keyframes scroll-bounce {
+  0%, 100% { transform: translateY(0); }
+  50% { transform: translateY(6px); }
+}
+
 /* --------------------------------------------------------------------------
  * HOW IT WORKS
  * -------------------------------------------------------------------------- */

package/site/assets/js/main.js

@@ -658,6 +658,30 @@
           { title: 'Score sources', desc: 'Each source is scored by quality, relevance, and authority. Low-quality sources are filtered out.' },
           { title: 'Create guide', desc: 'Synthesizes a structured learning guide with RAG-optimized index saved for future agent lookups.' }
         ]
+      },
+      11: {
+        subtitle: 'Ask another AI. Get a second opinion.',
+        steps: [
+          { title: 'Detect tools', desc: 'Finds which AI CLI tools are installed on your system. Picks the right model and flags for your effort level.' },
+          { title: 'Run consultation', desc: 'Spawns the tool via ACP (JSON-RPC 2.0 over stdio) or CLI with safe-mode defaults and a 240s timeout.' },
+          { title: 'Return response', desc: 'Parses output, redacts secrets (Shannon entropy > 4.0), and returns the response. Supports session continuations.' }
+        ]
+      },
+      12: {
+        subtitle: 'Two AIs argue. You get the truth.',
+        steps: [
+          { title: 'Set up debate', desc: 'Parses natural language to identify proposer, challenger, topic, rounds, and effort level.' },
+          { title: 'Run rounds', desc: 'Proposer builds a case with evidence. Challenger responds with counterpoints. Each round refines the arguments.' },
+          { title: 'Deliver verdict', desc: 'The orchestrator synthesizes all rounds and picks a winner with reasoning and actionable takeaways.' }
+        ]
+      },
+      13: {
+        subtitle: 'Browser automation. Encrypted sessions.',
+        steps: [
+          { title: 'Start session', desc: 'Creates an encrypted browser profile using AES-256-GCM. No daemon - each action is a single Playwright process.' },
+          { title: 'Authenticate', desc: 'Opens headed Chrome for human login (2FA, CAPTCHAs). Polls for success, then encrypts cookies for reuse.' },
+          { title: 'Run headless', desc: 'Subsequent actions run headless using saved cookies. Snapshot-based element discovery with classified error codes.' }
+        ]
       }
     };
 

package/site/content.json

@@ -1,11 +1,11 @@
 {
   "meta": {
     "title": "agentsys",
-    "description": "A modular runtime and orchestration system for AI agents. 14 plugins, 43 agents, 30 skills — structured pipelines for Claude Code, OpenCode, Codex CLI, Cursor, and Kiro.",
+    "description": "A modular runtime and orchestration system for AI agents. 15 plugins, 35 agents, 32 skills - structured pipelines for Claude Code, OpenCode, Codex CLI, Cursor, and Kiro.",
     "url": "https://agent-sh.github.io/agentsys",
     "repo": "https://github.com/agent-sh/agentsys",
     "npm": "https://www.npmjs.com/package/agentsys",
-    "version": "5.3.6",
+    "version": "5.4.0",
     "author": "Avi Fenesh",
     "author_url": "https://github.com/avifenesh"
   },
@@ -38,12 +38,12 @@
       "suffix": ""
     },
     {
-      "value": "26k",
+      "value": "30k",
       "label": "Lines of Lib Code",
       "suffix": ""
     },
     {
-      "value": "3,709",
+      "value": "3,751",
       "label": "Tests",
       "suffix": ""
     },
@@ -370,39 +370,40 @@
   },
   "recent_releases": [
     {
-      "version": "4.1.0",
-      "date": "2026-02-05",
+      "version": "5.3.7",
+      "date": "2026-03-02",
       "highlights": [
-        "New /agnix plugin -- lint agent configurations with 155 validation rules across 10+ AI tools",
-        "SARIF output for GitHub Code Scanning integration",
-        "Cross-platform validation for Claude Code, Cursor, Copilot, Codex, OpenCode, Gemini CLI, and more"
+        "Kiro platform support -- global install to ~/.kiro/ with agents, prompts, and skills",
+        "ACP (Agent Client Protocol) transport for /consult and /debate",
+        "Combined reviewer agents for Kiro's 4-agent limit",
+        "Cursor global install to ~/.cursor/"
       ]
     },
     {
-      "version": "4.0.0",
-      "date": "2026-02-05",
+      "version": "5.2.0",
+      "date": "2026-02-28",
       "highlights": [
-        "New /learn plugin -- research any topic, create learning guides with RAG index",
-        "Progressive query architecture with source quality scoring",
-        "Agent frontmatter converted to YAML array format for spec compliance"
+        "New /consult plugin -- cross-tool AI consultation via ACP and CLI transports",
+        "New /debate plugin -- structured adversarial debates between AI tools",
+        "User-extensible provider registry for 6 AI tools"
       ]
     },
     {
-      "version": "3.9.0",
-      "date": "2026-02-04",
+      "version": "5.0.0",
+      "date": "2026-02-20",
       "highlights": [
-        "Reduced prompt analyzer false positives from 175 to 0",
-        "Agent Skills Open Standard compliance with automated validation",
-        "Cross-file semantic analysis for /enhance"
+        "New /web-ctl plugin -- browser automation with encrypted session persistence",
+        "Human-in-the-loop auth handoff with CAPTCHA detection",
+        "5 platform support: Claude Code, OpenCode, Codex CLI, Cursor, Kiro"
       ]
     },
     {
-      "version": "3.8.0",
-      "date": "2026-02-02",
+      "version": "4.1.0",
+      "date": "2026-02-05",
       "highlights": [
-        "sync-docs repo-map integration with AST-based symbol detection",
-        "Version bump tool for coordinated releases",
-        "OpenCode config path and plugin fixes"
+        "New /agnix plugin -- lint agent configurations with 230+ validation rules",
+        "SARIF output for GitHub Code Scanning integration",
+        "Cross-platform validation for 10+ AI tools"
       ]
     }
   ],
@@ -462,7 +463,7 @@
   ],
   "research": {
     "knowledge_base": "8,000 lines of curated documentation from Anthropic, OpenAI, Google, and Microsoft",
-    "testing": "3,357 tests passing",
+    "testing": "3,751 tests passing",
     "drift_detect_repos": "1,000+ repositories validated",
     "token_reduction": "77% fewer tokens for drift-detect vs multi-agent approaches"
   },