agentsys 5.7.0 → 5.8.1

package/.claude-plugin/marketplace.json

@@ -1,7 +1,7 @@
 {
   "name": "agentsys",
-  "description": "17 specialized plugins for AI workflow automation - task orchestration, PR workflow, slop detection, code review, drift detection, enhancement analysis, documentation sync, unified static analysis, perf investigations, topic research, agent config linting, cross-tool AI consultation, structured AI debate, workflow pattern learning, codebase onboarding, and contributor guidance",
-  "version": "5.7.0",
+  "description": "19 specialized plugins for AI workflow automation - task orchestration, PR workflow, slop detection, code review, drift detection, enhancement analysis, documentation sync, unified static analysis, perf investigations, topic research, agent config linting, cross-tool AI consultation, structured AI debate, workflow pattern learning, codebase onboarding, and contributor guidance",
+  "version": "5.8.1",
   "owner": {
     "name": "Avi Fenesh",
     "url": "https://github.com/avifenesh"
@@ -28,11 +28,33 @@
         "source": "url",
         "url": "https://github.com/agent-sh/next-task.git"
       },
-      "description": "Master workflow orchestrator: autonomous workflow with model optimization (opus/sonnet/haiku), two-file state management, workflow enforcement gates, 14 specialist agents",
-      "version": "1.0.0",
+      "description": "Master workflow orchestrator: autonomous workflow with model optimization (opus/sonnet/haiku), two-file state management, workflow enforcement gates, 8 specialist agents",
+      "version": "1.1.0",
       "category": "productivity",
       "homepage": "https://github.com/agent-sh/next-task"
     },
+    {
+      "name": "prepare-delivery",
+      "source": {
+        "source": "url",
+        "url": "https://github.com/agent-sh/prepare-delivery.git"
+      },
+      "description": "Pre-ship quality gates: deslop, simplify, agnix, enhance, review loop, delivery validation, docs sync",
+      "version": "0.1.0",
+      "category": "productivity",
+      "homepage": "https://github.com/agent-sh/prepare-delivery"
+    },
+    {
+      "name": "gate-and-ship",
+      "source": {
+        "source": "url",
+        "url": "https://github.com/agent-sh/gate-and-ship.git"
+      },
+      "description": "Quality gates then ship - chains /prepare-delivery then /ship in one command",
+      "version": "0.1.0",
+      "category": "productivity",
+      "homepage": "https://github.com/agent-sh/gate-and-ship"
+    },
     {
       "name": "ship",
       "source": {
@@ -106,7 +128,7 @@
         "url": "https://github.com/agent-sh/repo-intel.git"
       },
       "description": "Unified static analysis via agent-analyzer - git history, AST symbols, project metadata, and doc-code sync",
-      "version": "1.0.0",
+      "version": "0.2.0",
       "category": "development",
       "homepage": "https://github.com/agent-sh/repo-intel"
     },
@@ -138,7 +160,7 @@
         "source": "url",
         "url": "https://github.com/agent-sh/agnix.git"
       },
-      "description": "Lint agent configuration files (SKILL.md, CLAUDE.md, hooks, MCP) against 342 rules across 10+ AI tools",
+      "description": "Lint agent configuration files (SKILL.md, CLAUDE.md, hooks, MCP) against 385 rules across 10+ AI tools",
       "version": "1.0.0",
       "category": "development",
       "homepage": "https://github.com/agent-sh/agnix"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentsys",
-  "version": "5.7.0",
+  "version": "5.8.1",
   "description": "Professional-grade slash commands for Claude Code with cross-platform support",
   "keywords": [
     "workflow",

package/AGENTS.md

@@ -94,6 +94,8 @@ bin/cli.js    → npm CLI installer
 
 ### Core Workflow
 - `/next-task` - Master workflow: task → implementation → PR → merge
+- `/prepare-delivery` - Pre-ship quality gates: deslop, review, validation, docs sync
+- `/gate-and-ship` - Quality gates then ship (/prepare-delivery + /ship)
 - `/ship` - PR creation, CI monitoring, merge
 - `/enhance` - Run all enhancement analyzers
 
@@ -150,12 +152,12 @@ agentsys                # Run installer
 <agents>
 ## Agents
 
-35 agents across 15 plugins. Key agents by model:
+47 agents across 19 plugins. Key agents by model:
 
 | Model | Agents | Use Case |
 |-------|--------|----------|
 | **opus** | exploration, planning, implementation, perf-orchestrator, debate-orchestrator, skillers-recommender | Complex reasoning, analysis |
-| **sonnet** | task-discoverer, delivery-validator, ci-fixer, deslop-agent, reporters, learn, release-agent, skillers-compactor | Validation, pattern matching |
+| **sonnet** | task-discoverer, delivery-validator (prepare-delivery), ci-fixer, deslop-agent, reporters, learn, release-agent, skillers-compactor | Validation, pattern matching |
 | **haiku** | worktree-manager, ci-monitor, simple-fixer | Mechanical execution |
 
 See [README.md](./README.md#command-details) and [docs/reference/AGENTS.md](./docs/reference/AGENTS.md) for full agent list.
@@ -164,7 +166,7 @@ See [README.md](./README.md#command-details) and [docs/reference/AGENTS.md](./do
 <skills>
 ## Skills
 
-32 skills across plugins. Agents invoke skills for reusable implementation.
+40 skills across plugins. Agents invoke skills for reusable implementation.
 
 | Category | Key Skills |
 |----------|------------|
@@ -188,7 +190,7 @@ See [README.md](./README.md#skills) for full skill list.
 
 Platform-aware state directory:
 - Claude Code: `.claude/`
-- OpenCode: `config/.opencode/`
+- OpenCode: `.opencode/`
 - Codex: `.codex/`
 - Cursor: `.cursor/`
 - Kiro: `.kiro/`
@@ -201,7 +203,7 @@ Cannot skip in /next-task:
 - `exploration-agent` → before planning
 - `planning-agent` → before implementation
 - **Phase 9 review loop** → MUST use orchestrate-review skill
-- `delivery-validator` → before sync-docs:sync-docs-agent
+- `prepare-delivery:delivery-validator` → before sync-docs:sync-docs-agent
 - `sync-docs:sync-docs-agent` → before /ship
 </workflow-agents>
 

package/CHANGELOG.md

@@ -7,6 +7,23 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [5.8.0] - 2026-03-25
+
+### Added
+- prepare-delivery plugin - pre-ship quality gates (deslop, simplify, agnix, enhance, review loop, validation, docs sync)
+- gate-and-ship plugin - orchestrator that chains /prepare-delivery then /ship
+- /prepare-delivery and /gate-and-ship commands in marketplace, README, and AGENTS.md
+- 9 missing agent sections in docs/reference/AGENTS.md (prepare-delivery, consult, debate, web-ctl, ship, skillers, onboard, can-i-help)
+- Cursor and Kiro platform entries in site/content.json
+
+### Changed
+- Moved orchestrate-review, validate-delivery skills from next-task to prepare-delivery in STATIC_SKILLS
+- Updated plugin count from 17 to 19 across marketplace.json, tests, and docs
+- Comprehensive documentation sync: all command tables, agent counts, skill counts, platform lists updated across 22 files
+- next-task marketplace entry: agent count 14 -> 8 (delivery agents moved to prepare-delivery), version 1.0.0 -> 1.1.0
+
 ## [5.7.0] - 2026-03-23
 
 ### Changed

package/README.md

@@ -19,7 +19,7 @@
 </p>
 
 <p align="center">
-  <b>19 plugins · 47 agents · 39 skills (across all repos) · 30k lines of lib code · 3,583 tests · 5 platforms</b><br>
+  <b>19 plugins · 47 agents · 40 skills (across all repos) · 30k lines of lib code · 3,583 tests · 5 platforms</b><br>
   <em>Plugins distributed as standalone repos under <a href="https://github.com/agent-sh">agent-sh</a> org — agentsys is the marketplace &amp; installer</em>
 </p>
 
@@ -41,11 +41,11 @@
 AI models can write code. That's not the hard part anymore. The hard part is everything around it — task selection, branch management, code review, artifact cleanup, CI, PR comments, deployment. **AgentSys is the runtime that orchestrates agents to handle all of it** — structured pipelines, gated phases, specialized agents, and persistent state that survives session boundaries.
 
 ---
-> Building custom skills, agents, hooks, or MCP tools? [agnix](https://github.com/agent-sh/agnix) is the CLI + LSP linter that catches config errors before they fail silently - real-time IDE validation, auto suggestions, auto-fix, and 342 rules for Claude Code, Codex, OpenCode, Cursor, Kiro, Copilot, Gemini CLI, Cline, Windsurf, Roo Code, Amp, and more.
+> Building custom skills, agents, hooks, or MCP tools? [agnix](https://github.com/agent-sh/agnix) is the CLI + LSP linter that catches config errors before they fail silently - real-time IDE validation, auto suggestions, auto-fix, and 385 rules for Claude Code, Codex, OpenCode, Cursor, Kiro, Copilot, Gemini CLI, Cline, Windsurf, Roo Code, Amp, and more.
 
 ## What This Is
 
-An agent orchestration system — 19 plugins, 47 agents, and 39 skills that compose into structured pipelines for software development. Each plugin lives in its own standalone repo under the [agent-sh](https://github.com/agent-sh) org. agentsys is the marketplace and installer that ties them together.
+An agent orchestration system — 19 plugins, 47 agents, and 40 skills that compose into structured pipelines for software development. Each plugin lives in its own standalone repo under the [agent-sh](https://github.com/agent-sh) org. agentsys is the marketplace and installer that ties them together.
 
 Each agent has a single responsibility, a specific model assignment, and defined inputs/outputs. Pipelines enforce phase gates so agents can't skip steps. State persists across sessions so work survives interruptions.
 
@@ -116,7 +116,9 @@ The investment shifts from model spend to pipeline design. Better prompts, riche
 | Command | What it does |
 |---------|--------------|
 | [`/next-task`](#next-task) | Task workflow: discovery, implementation, PR, merge |
-| [`/agnix`](#agnix) | Lint agent configurations (342 rules) |
+| [`/prepare-delivery`](#prepare-delivery) | Pre-ship quality gates: deslop, review, validation, docs sync |
+| [`/gate-and-ship`](#gate-and-ship) | Quality gates then ship (/prepare-delivery + /ship) |
+| [`/agnix`](#agnix) | Lint agent configurations (385 rules) |
 | [`/ship`](#ship) | PR creation, CI monitoring, merge |
 | [`/deslop`](#deslop) | Clean AI slop patterns |
 | [`/perf`](#perf) | Performance investigation with baselines and profiling |
@@ -140,11 +142,11 @@ Each command works standalone. Together, they compose into end-to-end pipelines.
 
 ## Skills
 
-38 skills included across the plugins:
+40 skills included across the plugins:
 
 | Category | Skills |
 |----------|--------|
-| **Workflow** | `discover-tasks`, `orchestrate-review`, `validate-delivery` |
+| **Workflow** | `discover-tasks`, `prepare-delivery`, `check-test-coverage`, `orchestrate-review`, `validate-delivery` |
 | **Message Queues** | `glide-mq-migrate-bee`, `glide-mq-migrate-bullmq`, `glide-mq` |
 | **Enhancement** | `enhance-agent-prompts`, `enhance-claude-memory`, `enhance-cross-file`, `enhance-docs`, `enhance-hooks`, `enhance-orchestrator`, `enhance-plugins`, `enhance-prompts`, `enhance-skills` |
 | **Performance** | `baseline`, `benchmark`, `code-paths`, `investigation-logger`, `perf-analyzer`, `profile`, `theory-gatherer`, `theory-tester` |
@@ -172,8 +174,8 @@ Skills are the reusable implementation units. Agents invoke skills; commands orc
 |---------|--------------|
 | [The Approach](#the-approach) | Why it's built this way |
 | [Benchmarks](#benchmarks) | Sonnet + agentsys vs raw Opus |
-| [Commands](#commands) | All 19 commands overview |
-| [Skills](#skills) | 39 skills across plugins |
+| [Commands](#commands) | All 20 commands overview |
+| [Skills](#skills) | 40 skills across plugins |
 | [Skill-Only Plugins](#skill-only-plugins) | glide-mq and other non-command plugins |
 | [Command Details](#command-details) | Deep dive into each command |
 | [How Commands Work Together](#how-commands-work-together) | Standalone vs integrated |
@@ -219,7 +221,7 @@ Key features: per-key ordering, group concurrency, runtime group rate limiting (
 5. **Planning** - Designs implementation approach
 6. **User Approval** - You review and approve the plan (last human interaction)
 7. **Implementation** - Executes the plan
-8. **Pre-Review** - Runs [deslop](#deslop)-agent and test-coverage-checker
+8. **Pre-Review** - Runs [deslop](#deslop)-agent and prepare-delivery:test-coverage-checker
 9. **Review Loop** - Multi-agent review iterates until clean
 10. **Delivery Validation** - Verifies tests pass, build passes, requirements met
 11. **Docs Update** - Updates CHANGELOG and related documentation
@@ -236,8 +238,8 @@ Phase 9 uses the `orchestrate-review` skill to spawn parallel reviewers (code qu
 | exploration-agent | sonnet | Deep codebase analysis before planning |
 | planning-agent | opus | Designs step-by-step implementation plan |
 | implementation-agent | opus | Writes the actual code |
-| test-coverage-checker | sonnet | Validates tests exist and are meaningful |
-| delivery-validator | sonnet | Final checks before shipping |
+| prepare-delivery:test-coverage-checker | sonnet | Validates tests exist and are meaningful |
+| prepare-delivery:delivery-validator | sonnet | Final checks before shipping |
 | ci-monitor | haiku | Watches CI status |
 | ci-fixer | sonnet | Fixes CI failures and review comments |
 | simple-fixer | haiku | Executes mechanical edits |
@@ -261,6 +263,49 @@ Phase 9 uses the `orchestrate-review` skill to spawn parallel reviewers (code qu
 
 ---
 
+### /prepare-delivery
+
+**Purpose:** Run all pre-ship quality gates without shipping. Use after completing implementation manually or outside `/next-task`.
+
+**What it runs (in order):**
+
+1. **Pre-review gates** (parallel) - deslop + /simplify + prepare-delivery:test-coverage-checker
+2. **Config lint** (conditional) - agnix + /enhance when changes touch agent/skill/plugin files
+3. **Review loop** - 4 core reviewers + conditional specialists, max 5 iterations
+4. **Delivery validation** - tests pass, build passes, requirements met
+5. **Docs sync** - sync-docs agent updates documentation
+
+```bash
+/prepare-delivery                    # Run all quality gates
+/prepare-delivery --skip-review      # Skip review loop
+/prepare-delivery --skip-docs        # Skip docs sync
+/prepare-delivery --base=develop     # Against a specific base branch
+```
+
+Does NOT create PRs or push - use `/ship` or `/gate-and-ship` after.
+
+---
+
+### /gate-and-ship
+
+**Purpose:** Quality gates then ship in one command. Chains `/prepare-delivery` then `/ship`.
+
+```bash
+/gate-and-ship                       # Full: quality gates + ship
+/gate-and-ship --skip-review         # Skip review, still ship
+/gate-and-ship --base=develop        # Against a specific base branch
+```
+
+**Composability:**
+
+```
+/gate-and-ship = /prepare-delivery + /ship
+```
+
+Each piece runs independently - use `/prepare-delivery` alone to review before deciding to ship, or `/ship` alone if already validated.
+
+---
+
 ### /agnix
 
 **Purpose:** Lint agent configurations before they break your workflow. The first dedicated linter for AI agent configs.
@@ -283,7 +328,7 @@ agnix catches these issues before they cause problems.
 | **Best Practices** | Tool restrictions, model selection, trigger phrase quality |
 | **Cross-Platform** | Compatibility across Claude Code, Codex, OpenCode, Cursor, Kiro, Copilot, Gemini CLI, Cline, Windsurf, Roo Code, Amp, and more |
 
-**342 validation rules** (102 auto-fixable) derived from:
+**385 validation rules** (102 auto-fixable) derived from:
 - Official tool specifications (Claude Code, Codex CLI, OpenCode, Cursor, Kiro, GitHub Copilot, Gemini CLI, Cline, Windsurf, Roo Code, Amp, and more)
 - Research papers on agent reliability and prompt injection
 - Real-world testing across 500+ repositories
@@ -983,11 +1028,22 @@ No per-turn overhead - it reads transcripts that Claude Code already saves.
 ```bash
 /deslop apply          # Just clean up your code
 /sync-docs             # Just check if docs need updates
+/prepare-delivery      # Run all quality gates (no ship)
 /ship                  # Just ship this branch
+/gate-and-ship         # Quality gates + ship in one command
 /audit-project         # Just review the codebase
 ```
 
-**Integrated workflow:**
+**Composable delivery chain:**
+
+```
+/prepare-delivery  = quality gates only (deslop, review, validation, docs)
+/ship              = PR + CI + merge only
+/gate-and-ship     = /prepare-delivery + /ship
+/next-task         = full workflow (discovery → implementation → /prepare-delivery → /ship)
+```
+
+**Full integrated workflow:**
 
 When you run [`/next-task`](#next-task), it orchestrates everything:
 
@@ -996,15 +1052,15 @@ When you run [`/next-task`](#next-task), it orchestrates everything:
     ↓
 implementation-agent writes code
     ↓
-deslop-agent cleans AI artifacts
+deslop-agent + prepare-delivery:test-coverage-checker + /simplify (parallel)
     ↓
-Phase 9 review loop iterates until approved
+review loop iterates until approved
     ↓
-delivery-validator checks requirements
+prepare-delivery:delivery-validator checks requirements
     ↓
 sync-docs-agent syncs documentation
     ↓
-[/ship](#ship) creates PR → monitors CI → merges
+/ship creates PR → monitors CI → merges
 ```
 
 The workflow tracks state so you can resume from any point.

package/lib/collectors/documentation.js

@@ -8,6 +8,7 @@
  */
 
 'use strict';
+const { truncate } = require('../cross-platform');
 
 const fs = require('fs');
 const path = require('path');
@@ -108,7 +109,7 @@ function extractPlans(result, content) {
   for (const pattern of planPatterns) {
     let match;
     while ((match = pattern.exec(content)) !== null && result.plans.length < 15) {
-      const plan = (match[1] || match[0]).slice(0, 100);
+      const plan = truncate(match[1] || match[0], 100);
       result.plans.push(plan);
     }
   }

package/lib/collectors/github.js

@@ -9,6 +9,8 @@
 
 'use strict';
 
+const { truncate } = require('../cross-platform');
+
 const { execFileSync } = require('child_process');
 
 const DEFAULT_OPTIONS = {
@@ -47,7 +49,7 @@ function execGhWithResult(args, options = {}) {
         error: {
           type: 'parse',
           message: `Failed to parse gh output as JSON: ${error.message}`,
-          raw: output.slice(0, 500)
+          raw: truncate(output, 500)
         }
       };
     }
@@ -94,7 +96,7 @@ function summarizeIssue(item) {
     milestone: item.milestone?.title || item.milestone || null,
     createdAt: item.createdAt,
     updatedAt: item.updatedAt,
-    snippet: item.body ? item.body.slice(0, 200).replace(/\n/g, ' ').trim() + (item.body.length > 200 ? '...' : '') : ''
+    snippet: item.body ? truncate(item.body.replace(/\n/g, ' '), 200) : ''
   };
 }
 
@@ -112,7 +114,7 @@ function summarizePR(item) {
     createdAt: item.createdAt,
     updatedAt: item.updatedAt,
     files: item.files || [],
-    snippet: item.body ? item.body.slice(0, 150).replace(/\n/g, ' ').trim() + (item.body.length > 150 ? '...' : '') : ''
+    snippet: item.body ? truncate(item.body.replace(/\n/g, ' '), 150) : ''
   };
 }
 

package/lib/cross-platform/index.js

@@ -310,8 +310,11 @@ function formatSection(title, content) {
  * @returns {string} Truncated text
  */
 function truncate(text, maxLength) {
-  if (text.length <= maxLength) return text;
-  return text.substring(0, maxLength - 3) + '...';
+  // Code-point safe: uses spread operator to avoid splitting surrogate pairs (emoji, flags, CJK).
+  if (maxLength < 0) return text;
+  const chars = [...text];
+  if (chars.length <= maxLength) return text;
+  return chars.slice(0, maxLength - 3).join('') + '...';
 }
 
 /**

package/lib/enhance/cross-file-analyzer.js

@@ -12,6 +12,7 @@ const fs = require('fs');
 const path = require('path');
 const { parseMarkdownFrontmatter } = require('./agent-analyzer');
 const { crossFilePatterns, loadKnownTools } = require('./cross-file-patterns');
+const { truncate } = require('../cross-platform');
 
 // ============================================
 // CONSTANTS
@@ -650,9 +651,9 @@ function analyzePromptConsistency(agents) {
       // Extract action keywords
       let action;
       if (isAlways) {
-        action = line.replace(/.*\bALWAYS\b\s*/i, '').substring(0, ACTION_COMPARISON_LENGTH);
+        action = truncate(line.replace(/.*\bALWAYS\b\s*/i, ''), ACTION_COMPARISON_LENGTH);
       } else {
-        action = line.replace(/.*\b(?:NEVER|DO NOT)\b\s*/i, '').substring(0, ACTION_COMPARISON_LENGTH);
+        action = truncate(line.replace(/.*\b(?:NEVER|DO NOT)\b\s*/i, ''), ACTION_COMPARISON_LENGTH);
       }
 
       // Extract significant keywords from action

package/lib/enhance/cross-file-patterns.js

@@ -11,6 +11,7 @@
 const fs = require('fs');
 const path = require('path');
 const { getStateDir, getPlatformName } = require('../platform/state-dir');
+const { truncate } = require('../cross-platform');
 
 /**
  * Platform-specific default tools
@@ -214,7 +215,7 @@ const crossFilePatterns = {
       if (!instruction || !files || files.length < 2) return null;
 
       return {
-        issue: `Duplicate instruction found in ${files.length} files: "${instruction.substring(0, 50)}..."`,
+        issue: `Duplicate instruction found in ${files.length} files: "${truncate(instruction, 50)}"`,
         fix: `Extract shared instruction to a common include or ensure intentional duplication`
       };
     }
@@ -234,7 +235,7 @@ const crossFilePatterns = {
       if (!rule1 || !rule2) return null;
 
       return {
-        issue: `Contradictory rules: "${rule1.substring(0, 40)}..." vs "${rule2.substring(0, 40)}..."`,
+        issue: `Contradictory rules: "${truncate(rule1, 40)}" vs "${truncate(rule2, 40)}"`,
         fix: `Resolve conflict between ${file1} and ${file2}`
       };
     }

package/lib/enhance/docs-patterns.js

@@ -4,6 +4,8 @@
  * @license MIT
  */
 
+const { truncate } = require('../cross-platform');
+
 function estimateTokens(text) {
   if (!text || typeof text !== 'string') return 0;
   return Math.ceil(text.length / 4);
@@ -159,7 +161,7 @@ const docsPatterns = {
         const tokens = estimateTokens(section);
         if (tokens > 1000) {
           // Get section title (first line)
-          const title = section.split('\n')[0].trim().slice(0, 50);
+          const title = truncate(section.split('\n')[0].trim(), 50);
           longSections.push({ title, tokens });
         }
       }
@@ -371,7 +373,7 @@ const docsPatterns = {
 
           // Check if starts with dangling reference
           if (/^(?:It|This|These|Those|They|The above|As mentioned)\s/i.test(firstLine)) {
-            const title = lines[0].slice(0, 30);
+            const title = truncate(lines[0], 30);
             issues.push(title);
           }
         }
@@ -461,7 +463,7 @@ const docsPatterns = {
         const tokens = estimateTokens(cleanPart);
 
         if (tokens > 500) {
-          const preview = cleanPart.trim().split('\n')[0].slice(0, 50);
+          const preview = truncate(cleanPart.trim().split('\n')[0], 50);
           longBlocks.push({ tokens, preview });
         }
       }
@@ -502,7 +504,7 @@ const docsPatterns = {
       for (let i = lateThreshold; i < totalLines; i++) {
         for (const pattern of criticalKeywords) {
           if (pattern.test(lines[i])) {
-            lateImportantLines.push(lines[i].trim().slice(0, 50));
+            lateImportantLines.push(truncate(lines[i].trim(), 50));
             break;
           }
         }

package/lib/package.json

@@ -4,6 +4,38 @@
   "description": "Core library for AgentSys: platform detection, pattern matching, workflow state, and utilities",
   "main": "index.js",
   "type": "commonjs",
+  "exports": {
+    ".": "./index.js",
+    "./binary": "./binary/index.js",
+    "./collectors": "./collectors/index.js",
+    "./config": "./config/index.js",
+    "./cross-platform": "./cross-platform/index.js",
+    "./discovery": "./discovery/index.js",
+    "./enhance": "./enhance/index.js",
+    "./perf": "./perf/index.js",
+    "./repo-map": "./repo-map/index.js",
+    "./collectors/codebase": "./collectors/codebase.js",
+    "./collectors/docs-patterns": "./collectors/docs-patterns.js",
+    "./collectors/documentation": "./collectors/documentation.js",
+    "./collectors/github": "./collectors/github.js",
+    "./enhance/agent-analyzer": "./enhance/agent-analyzer.js",
+    "./enhance/agent-patterns": "./enhance/agent-patterns.js",
+    "./enhance/cross-file-analyzer": "./enhance/cross-file-analyzer.js",
+    "./enhance/cross-file-patterns": "./enhance/cross-file-patterns.js",
+    "./enhance/fixer": "./enhance/fixer.js",
+    "./enhance/plugin-patterns": "./enhance/plugin-patterns.js",
+    "./enhance/projectmemory-analyzer": "./enhance/projectmemory-analyzer.js",
+    "./enhance/projectmemory-patterns": "./enhance/projectmemory-patterns.js",
+    "./enhance/prompt-analyzer": "./enhance/prompt-analyzer.js",
+    "./enhance/prompt-patterns": "./enhance/prompt-patterns.js",
+    "./enhance/reporter": "./enhance/reporter.js",
+    "./enhance/security-patterns": "./enhance/security-patterns.js",
+    "./enhance/suppression": "./enhance/suppression.js",
+    "./enhance/tool-patterns": "./enhance/tool-patterns.js",
+    "./sources/custom-handler": "./sources/custom-handler.js",
+    "./sources/policy-questions": "./sources/policy-questions.js",
+    "./sources/source-cache": "./sources/source-cache.js"
+  },
   "engines": {
     "node": ">=18.0.0"
   },

package/lib/patterns/cli-enhancers.js

@@ -6,7 +6,11 @@
  * Functions gracefully degrade when tools are not available.
  *
  * Supported languages: javascript, typescript, python, rust, go
- *
+ */
+
+const { truncate } = require('../cross-platform');
+
+/**
  * @module patterns/cli-enhancers
  * @author Avi Fenesh
  * @license MIT
@@ -380,7 +384,7 @@ function runDuplicateDetection(repoPath, options = {}) {
             secondLine: dup.secondFile?.start || 0,
             lines: dup.lines || 0,
             tokens: dup.tokens || 0,
-            fragment: dup.fragment?.substring(0, 100) || ''
+            fragment: truncate(dup.fragment || '', 100)
           });
         }
       }

package/lib/patterns/pipeline.js

@@ -7,7 +7,11 @@
  * - Phase 3 (LLM handoff): certainty-tagged findings for agent review
  *
  * Inherits modes from deslop: report (analyze only) vs apply (fix issues)
- *
+ */
+
+const { truncate } = require('../cross-platform');
+
+/**
  * @module patterns/pipeline
  * @author Avi Fenesh
  * @license MIT
@@ -356,7 +360,7 @@ function runPhase1(repoPath, targetFiles, language, fileContents) {
               certainty: CERTAINTY.HIGH,
               description: pattern.description,
               autoFix: pattern.autoFix,
-              content: line.trim().substring(0, 100),
+              content: truncate(line.trim(), 100),
               phase: 1
             });
           }
@@ -657,7 +661,7 @@ async function runMultiPassAnalyzers(repoPath, targetFiles, fileContents) {
           certainty: CERTAINTY.MEDIUM,
           description: `${shotgunPattern.description}: ${v.files.length} files change together ${v.count} times`,
           autoFix: shotgunPattern.autoFix,
-          content: v.files.join(', ').substring(0, 100),
+          content: truncate(v.files.join(', '), 100),
           phase: 1,
           details: { files: v.files, changeCount: v.count }
         });

package/lib/patterns/slop-analyzers.js

@@ -8,6 +8,8 @@
  * @license MIT
  */
 
+const { truncate } = require('../cross-platform');
+
 /**
  * Analyze JSDoc-to-function ratio to detect excessive documentation
  *
@@ -1879,7 +1881,7 @@ function analyzeDeadCode(content, options = {}) {
         line: j + 1, // 1-indexed
         terminationType: terminationType,
         terminationLine: i + 1,
-        content: nextTrimmed.substring(0, 50) + (nextTrimmed.length > 50 ? '...' : ''),
+        content: truncate(nextTrimmed, 50),
         severity: 'high'
       });
 

package/lib/platform/detect-platform.js

@@ -11,6 +11,7 @@
  */
 
 const fs = require('fs');
+const { truncate } = require('../cross-platform');
 const path = require('path');
 const { exec } = require('child_process');
 const { promisify } = require('util');
@@ -84,7 +85,7 @@ function withTimeout(promise, timeoutMs = DEFAULT_ASYNC_TIMEOUT_MS, operation =
  * @returns {Promise<{stdout: string, stderr: string}>}
  */
 async function execWithTimeout(cmd, options = {}, timeoutMs = DEFAULT_ASYNC_TIMEOUT_MS) {
-  return withTimeout(execAsync(cmd, options), timeoutMs, `exec: ${cmd.substring(0, 50)}`);
+  return withTimeout(execAsync(cmd, options), timeoutMs, `exec: ${truncate(cmd, 50)}`);
 }
 
 // Maximum cached file size constant

package/lib/sources/policy-questions.js

@@ -6,6 +6,7 @@
  */
 
 const sourceCache = require('./source-cache');
+const { truncate } = require('../cross-platform');
 const customHandler = require('./custom-handler');
 
 /**
@@ -42,7 +43,7 @@ function getPolicyQuestions() {
     // Truncate to fit within 30 chars: "X (last used)" where X can be max 17 chars
     const maxBaseLen = 30 - ' (last used)'.length; // 18 chars for base
     const truncatedLabel = cachedLabel.length > maxBaseLen
-      ? cachedLabel.substring(0, maxBaseLen - 1) + '…'
+      ? truncate(cachedLabel, maxBaseLen - 1) + '…'
       : cachedLabel;
 
     sourceOptions.push({
@@ -155,12 +156,12 @@ function parseAndCachePolicy(responses) {
       // Validate and merge follow-up responses
       const rawNum = String(responses.project.number).trim();
       if (!/^[1-9][0-9]*$/.test(rawNum)) {
-        const safeNum = String(responses.project.number).replace(/[^\x20-\x7E]/g, '?').substring(0, 32);
+        const safeNum = truncate(String(responses.project.number).replace(/[^\x20-\x7E]/g, '?'), 32);
         throw new Error(`Invalid project number: "${safeNum}". Must be a positive integer.`);
       }
       const num = Number(rawNum);
       const owner = String(responses.project.owner || '').trim();
-      const safeOwner = String(responses.project.owner || '').replace(/[^\x20-\x7E]/g, '?').substring(0, 64);
+      const safeOwner = truncate(String(responses.project.owner || '').replace(/[^\x20-\x7E]/g, '?'), 64);
       if (!owner || !/^(@me|[a-zA-Z0-9][a-zA-Z0-9_-]*)$/.test(owner)) {
         throw new Error(`Invalid project owner: "${safeOwner}" (use @me or an org/user name)`);
       }