awesome-slash 2.4.4 → 2.5.1

package/.claude-plugin/marketplace.json

@@ -1,7 +1,7 @@
 {
   "name": "awesome-slash",
   "description": "Professional-grade slash commands for Claude Code with cross-platform support (OpenCode, Codex CLI)",
-  "version": "2.4.2",
+  "version": "2.5.1",
   "owner": {
     "name": "Avi Fenesh",
     "url": "https://github.com/avifenesh"
@@ -13,35 +13,35 @@
       "name": "next-task",
       "source": "./plugins/next-task",
       "description": "Master workflow orchestrator: autonomous workflow with model optimization (opus/sonnet/haiku), two-file state management, workflow enforcement gates, 14 specialist agents",
-      "version": "2.3.1",
+      "version": "2.5.1",
       "category": "productivity"
     },
     {
       "name": "ship",
       "source": "./plugins/ship",
       "description": "Complete PR workflow: commit to production, skips review when called from next-task, removes task from registry on cleanup, automatic rollback",
-      "version": "2.3.1",
+      "version": "2.5.1",
       "category": "deployment"
     },
     {
       "name": "deslop-around",
       "source": "./plugins/deslop-around",
       "description": "AI slop cleanup with minimal diffs and behavior preservation",
-      "version": "2.3.1",
+      "version": "2.5.1",
       "category": "development"
     },
     {
       "name": "project-review",
       "source": "./plugins/project-review",
       "description": "Multi-agent iterative code review until zero issues remain",
-      "version": "2.3.1",
+      "version": "2.5.1",
       "category": "development"
     },
     {
       "name": "reality-check",
       "source": "./plugins/reality-check",
       "description": "Deep repository analysis to realign project plans with code reality - detects drift, gaps, and creates prioritized reconstruction plans",
-      "version": "1.0.0",
+      "version": "2.5.1",
       "category": "productivity"
     }
   ],

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "awesome-slash",
-  "version": "2.4.2",
+  "version": "2.5.1",
   "description": "Professional-grade slash commands for Claude Code with cross-platform support",
   "author": {
     "name": "Avi Fenesh",

package/CHANGELOG.md

@@ -7,6 +7,127 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+No unreleased changes documented.
+
+## [2.5.1] - 2026-01-19
+
+### Added
+- **Platform-Aware State Directories** - State files now stored in platform-specific directories
+  - Claude Code: `.claude/`
+  - OpenCode: `.opencode/`
+  - Codex CLI: `.codex/`
+  - Override with `AI_STATE_DIR` environment variable
+- **New lib/platform/state-dir.js** - Centralized platform detection module
+
+### Fixed
+- **OpenCode Installer** - Fixed config format (uses `mcp` key, `type: local`)
+- **Codex Installer** - Fixed to use `config.toml` with Windows-style paths
+- **MCP Server Bugs** - Fixed `state.workflow.id` → `state.task.id` references
+- **MCP Resume Logic** - Fixed `checkpoints.canResume` to use correct state fields
+
+### Changed
+- **Codex Skills** - Added explicit instructions to get files from git diff or ask user
+- **OpenCode Commands** - Added "CRITICAL: Always Ask User First" sections
+- **Documentation** - Added note that Codex uses `$` prefix instead of `/` for commands
+
+## [2.5.0] - 2026-01-19
+
+### Added
+- **Multi-Source Task Discovery** - Support for GitHub, GitLab, local files, custom CLI tools
+- **Source Preference Caching** - Last-used source cached in `sources/preference.json`
+- **Large Backlog Handling** - Pagination and priority filtering for repos with many issues
+
+### Changed
+- **Streamlined Policy Selection** - Direct questions from orchestrator, removed separate agent
+
+### Security
+- **Command Injection** - Fixed shell command injection vulnerabilities
+- **Path Traversal** - Fixed path traversal in source-cache.js
+
+## [2.4.7] - 2026-01-18
+
+### Changed
+- **Simplified State Management** - Rewrote workflow-state.js (#90)
+  - Reduced from 922 to ~520 lines
+  - Removed overengineered config system (~10,000 lines deleted)
+  - Removed 13 unused JSON schema files
+  - Replaced complex nested state with simple two-file system:
+    - `tasks.json` in main project: tracks active worktree/task
+    - `flow.json` in worktree: tracks workflow progress
+  - Removed arbitrary maxReviewIterations (now runs until approved)
+  - Removed unused mergeStrategy option
+- **Tasks Lifecycle Wiring** - tasks.json now auto-registers/clears with workflow lifecycle
+  - `createFlow()` automatically registers task in tasks.json
+  - `completeWorkflow()` and `abortWorkflow()` automatically clear active task
+- **Agent Model Updates** - task-discoverer and code-explorer upgraded to opus
+- **Project Philosophy** - Added development guidelines to CLAUDE.md
+  - Core priorities: User DX > worry-free automation > minimal tokens > quality > simplicity
+  - Plugin purpose clarification: for OTHER projects, not internal tooling
+
+### Fixed
+- **Path Validation** - Added path validation to prevent traversal attacks in workflow-state.js
+- **Error Logging** - Added critical error logging for corrupted JSON files
+- **hasActiveTask** - Fixed false positive with legacy format (uses `!= null` instead of truthiness)
+- **writeFlow** - Fixed mutation issues by cloning before modification
+- **updateFlow** - Fixed null handling logic
+- **completePhase** - Fixed to use updateFlow pattern consistently
+
+## [2.4.6] - 2026-01-18
+
+### Fixed
+- **Documentation Accuracy** - Fixed all documentation inconsistencies (#91)
+  - Fixed config file name: `.claude.config.json` → `.awesomeslashrc.json` in INSTALLATION.md
+  - Fixed phase counts: Updated to 18 phases in USAGE.md, CROSS_PLATFORM.md
+  - Removed all time estimates from user-facing docs (policy compliance)
+  - Updated planning-agent tools in CLAUDE.md and CROSS_PLATFORM.md
+  - Fixed non-existent script references in migration guides
+- **Auto-Resume Prevention** - Added mandatory gates to prevent automatic task resumption (#92)
+  - Added ⛔ NO AUTO-RESUME gate in next-task.md
+  - Added mandatory existing task check in policy-selector.md (Phase 1.5)
+  - User must explicitly choose: start new, resume, abort, or view status
+  - Warning for active tasks (< 1 hour old) that may be running elsewhere
+  - Default behavior: "Start New Task (Recommended)"
+
+### Changed
+- **Planning Flow Architecture** - Improved planning workflow separation (#93)
+  - planning-agent now outputs structured JSON instead of entering plan mode
+  - Orchestrator receives JSON, formats to markdown, enters plan mode
+  - Context-efficient: JSON with `=== PLAN_START ===` markers
+  - Clean separation: agent creates, orchestrator presents
+  - Removed EnterPlanMode tool from planning-agent
+- **Work Guidelines** - Added "No Summary Files" policy to CLAUDE.md
+  - Prohibited: `*_FIXES_APPLIED.md`, `*_AUDIT.md`, `*_SUMMARY.md`
+  - Summary info goes in CHANGELOG.md or commit messages only
+  - Focus on work, not documentation about work
+
+## [2.4.5] - 2026-01-18
+
+### Fixed
+- **Agent Tool Enforcement** - Critical fixes for agent tool usage (#88)
+  - Fixed policy-selector agent not showing checkbox UI - Added AskUserQuestion to tools
+  - Fixed task-discoverer agent not showing task selection as checkboxes
+  - Fixed planning-agent not entering plan mode after creating plans
+  - Added CRITICAL REQUIREMENT sections to enforce proper tool usage
+- **Schema Validator** - Fixed validation bugs
+  - Added string constraints (minLength, maxLength, pattern) to main validate() method
+  - Fixed null type checking to handle null separately from object type
+  - Added array constraints (minItems, maxItems, uniqueItems) to main validate() method
+- **Cache Management** - Migrated to CacheManager abstraction
+  - Fixed unbounded state cache growth in workflow-state.js
+  - Replaced plain Map with CacheManager (maxSize: 50, ttl: 200ms)
+  - Removed custom cache management code for consistency
+
+### Changed
+- **Documentation** - Simplified and clarified user-facing docs
+  - Streamlined MANUAL_TESTING.md - removed verbose explanations
+  - Made README.md more concise and professional
+  - Removed excessive formatting and emoji icons
+
+### Tests
+- Fixed cache-manager test maxSize conflicts
+- Skipped 3 MCP server integration tests (mocking complexity)
+- All core tests passing: 513/516 passed, 3 skipped
+
 ## [2.4.4] - 2026-01-18
 
 ### Added
@@ -225,7 +346,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 - **Master Workflow Orchestrator** - Complete task-to-production automation
-- **State Management** - `.claude/.workflow-state.json` for workflow persistence
+- **State Management** - `.claude/workflow-state.json` for workflow persistence
 - **8 Specialist Agents** - Opus for complex tasks, Sonnet for operations
 - **Cross-Platform MCP Server** - Integration with OpenCode and Codex CLI
 - **Resume Capability** - `--status`, `--resume`, `--abort` flags
@@ -291,3 +412,4 @@ Initial release with full feature set.
 - MIT License
 - Security policy
 - Contributing guidelines
+