awesome-slash 2.5.0 → 2.5.1

package/.claude-plugin/marketplace.json

@@ -1,7 +1,7 @@
 {
   "name": "awesome-slash",
   "description": "Professional-grade slash commands for Claude Code with cross-platform support (OpenCode, Codex CLI)",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "owner": {
     "name": "Avi Fenesh",
     "url": "https://github.com/avifenesh"
@@ -13,35 +13,35 @@
       "name": "next-task",
       "source": "./plugins/next-task",
       "description": "Master workflow orchestrator: autonomous workflow with model optimization (opus/sonnet/haiku), two-file state management, workflow enforcement gates, 14 specialist agents",
-      "version": "2.5.0",
+      "version": "2.5.1",
       "category": "productivity"
     },
     {
       "name": "ship",
       "source": "./plugins/ship",
       "description": "Complete PR workflow: commit to production, skips review when called from next-task, removes task from registry on cleanup, automatic rollback",
-      "version": "2.5.0",
+      "version": "2.5.1",
       "category": "deployment"
     },
     {
       "name": "deslop-around",
       "source": "./plugins/deslop-around",
       "description": "AI slop cleanup with minimal diffs and behavior preservation",
-      "version": "2.5.0",
+      "version": "2.5.1",
       "category": "development"
     },
     {
       "name": "project-review",
       "source": "./plugins/project-review",
       "description": "Multi-agent iterative code review until zero issues remain",
-      "version": "2.5.0",
+      "version": "2.5.1",
       "category": "development"
     },
     {
       "name": "reality-check",
       "source": "./plugins/reality-check",
       "description": "Deep repository analysis to realign project plans with code reality - detects drift, gaps, and creates prioritized reconstruction plans",
-      "version": "2.5.0",
+      "version": "2.5.1",
       "category": "productivity"
     }
   ],

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "awesome-slash",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "description": "Professional-grade slash commands for Claude Code with cross-platform support",
   "author": {
     "name": "Avi Fenesh",

package/CHANGELOG.md

@@ -9,6 +9,41 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 No unreleased changes documented.
 
+## [2.5.1] - 2026-01-19
+
+### Added
+- **Platform-Aware State Directories** - State files now stored in platform-specific directories
+  - Claude Code: `.claude/`
+  - OpenCode: `.opencode/`
+  - Codex CLI: `.codex/`
+  - Override with `AI_STATE_DIR` environment variable
+- **New lib/platform/state-dir.js** - Centralized platform detection module
+
+### Fixed
+- **OpenCode Installer** - Fixed config format (uses `mcp` key, `type: local`)
+- **Codex Installer** - Fixed to use `config.toml` with Windows-style paths
+- **MCP Server Bugs** - Fixed `state.workflow.id` → `state.task.id` references
+- **MCP Resume Logic** - Fixed `checkpoints.canResume` to use correct state fields
+
+### Changed
+- **Codex Skills** - Added explicit instructions to get files from git diff or ask user
+- **OpenCode Commands** - Added "CRITICAL: Always Ask User First" sections
+- **Documentation** - Added note that Codex uses `$` prefix instead of `/` for commands
+
+## [2.5.0] - 2026-01-19
+
+### Added
+- **Multi-Source Task Discovery** - Support for GitHub, GitLab, local files, custom CLI tools
+- **Source Preference Caching** - Last-used source cached in `sources/preference.json`
+- **Large Backlog Handling** - Pagination and priority filtering for repos with many issues
+
+### Changed
+- **Streamlined Policy Selection** - Direct questions from orchestrator, removed separate agent
+
+### Security
+- **Command Injection** - Fixed shell command injection vulnerabilities
+- **Path Traversal** - Fixed path traversal in source-cache.js
+
 ## [2.4.7] - 2026-01-18
 
 ### Changed

package/README.md

@@ -6,7 +6,7 @@ A cross-platform plugin providing powerful, zero-configuration slash commands fo
 
 [![npm](https://img.shields.io/npm/v/awesome-slash?color=red)](https://www.npmjs.com/package/awesome-slash)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-2.5.0-blue)](https://github.com/avifenesh/awesome-slash/releases)
+[![Version](https://img.shields.io/badge/version-2.5.1-blue)](https://github.com/avifenesh/awesome-slash/releases)
 [![GitHub stars](https://img.shields.io/github/stars/avifenesh/awesome-slash?style=flat&color=yellow)](https://github.com/avifenesh/awesome-slash/stargazers)
 [![Claude Code](https://img.shields.io/badge/Claude-Code%20Plugin-blue)](https://docs.anthropic.com/en/docs/claude-code)
 [![Codex CLI](https://img.shields.io/badge/Codex-CLI%20Compatible-green)](https://developers.openai.com/codex/cli)
@@ -16,13 +16,18 @@ A cross-platform plugin providing powerful, zero-configuration slash commands fo
 
 > **💡 Model Recommendation**: Using **Opus** as the main agent model produces significantly better results and follows workflow phases more tightly. While Sonnet works for simpler tasks, Opus is recommended for complex multi-step workflows.
 
+## What's New in v2.5.1
+
+- **Platform-Aware State Directories** - State now stored in `.opencode/` for OpenCode, `.codex/` for Codex
+- **Fixed OpenCode/Codex Installers** - Correct config formats and Windows path handling
+- **MCP Server Bug Fixes** - Fixed workflow state references and resume logic
+- **Documentation Updates** - Added note that Codex uses `$` prefix instead of `/`
+
 ## What's New in v2.5.0
 
-- **Multi-Source Task Discovery** - Support for GitHub, GitLab, local files, custom CLI tools, and ad-hoc sources
+- **Multi-Source Task Discovery** - Support for GitHub, GitLab, local files, custom CLI tools
 - **Source Preference Caching** - Your last-used source appears first on subsequent runs
 - **Security Hardening** - Fixed command injection and path traversal vulnerabilities
-- **Large Backlog Handling** - Intelligent pagination and priority filtering for repos with many issues
-- **Streamlined Policy Selection** - Direct questions from orchestrator, removed separate agent
 
 ## What's New in v2.4.7
 
@@ -54,6 +59,8 @@ git clone https://github.com/avifenesh/awesome-slash.git
 
 ## Available Commands
 
+> **Platform Note:** Commands use `/` prefix in Claude Code and OpenCode, but `$` prefix in Codex CLI (e.g., `$next-task` instead of `/next-task`).
+
 ### `/next-task` - Master Workflow Orchestrator
 
 Complete task-to-production automation with state management and resume capability.
@@ -243,9 +250,17 @@ See [docs/CROSS_PLATFORM.md](./docs/CROSS_PLATFORM.md) for details.
 
 ### State Management
 
-Simple state tracking with three locations:
+Simple state tracking with platform-aware directories:
+
+| Platform | State Directory |
+|----------|-----------------|
+| Claude Code | `.claude/` |
+| OpenCode | `.opencode/` |
+| Codex CLI | `.codex/` |
+
+Override with `AI_STATE_DIR` environment variable.
 
-**Main project: `.claude/tasks.json`** - Tracks active worktree/task:
+**Main project: `{state-dir}/tasks.json`** - Tracks active worktree/task:
 ```json
 {
   "active": {
@@ -257,7 +272,7 @@ Simple state tracking with three locations:
 }
 ```
 
-**Worktree: `.claude/flow.json`** - Tracks workflow progress:
+**Worktree: `{state-dir}/flow.json`** - Tracks workflow progress:
 ```json
 {
   "task": { "id": "123", "title": "Fix auth timeout" },
@@ -270,7 +285,7 @@ Simple state tracking with three locations:
 }
 ```
 
-**Source Preferences: `.claude/sources/preference.json`** - Caches task source selection:
+**Source Preferences: `{state-dir}/sources/preference.json`** - Caches task source selection:
 ```json
 {
   "source": "custom",

package/lib/platform/state-dir.js

@@ -0,0 +1,122 @@
+/**
+ * Platform-aware state directory detection
+ *
+ * Determines the appropriate state directory based on the AI coding assistant
+ * being used (Claude Code, OpenCode, or Codex CLI).
+ *
+ * @module lib/platform/state-dir
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+/**
+ * Cached state directory name (relative, without leading dot handling)
+ * @type {string|null}
+ */
+let _cachedStateDir = null;
+
+/**
+ * Detect which AI coding assistant is running and return appropriate state directory
+ *
+ * Detection order:
+ * 1. AI_STATE_DIR env var (user override)
+ * 2. OpenCode detection (OPENCODE_CONFIG env or .opencode/ exists)
+ * 3. Codex detection (CODEX_HOME env or .codex/ exists)
+ * 4. Default to .claude (Claude Code or unknown)
+ *
+ * @param {string} [basePath=process.cwd()] - Base path to check for project directories
+ * @returns {string} State directory name (e.g., '.claude', '.opencode', '.codex')
+ */
+function getStateDir(basePath = process.cwd()) {
+  // Check user override first
+  if (process.env.AI_STATE_DIR) {
+    return process.env.AI_STATE_DIR;
+  }
+
+  // Return cached value if available
+  if (_cachedStateDir) {
+    return _cachedStateDir;
+  }
+
+  // OpenCode detection
+  if (process.env.OPENCODE_CONFIG || process.env.OPENCODE_CONFIG_DIR) {
+    _cachedStateDir = '.opencode';
+    return _cachedStateDir;
+  }
+
+  // Check for .opencode directory in project
+  try {
+    const opencodePath = path.join(basePath, '.opencode');
+    if (fs.existsSync(opencodePath) && fs.statSync(opencodePath).isDirectory()) {
+      _cachedStateDir = '.opencode';
+      return _cachedStateDir;
+    }
+  } catch {
+    // Ignore errors, continue detection
+  }
+
+  // Codex detection
+  if (process.env.CODEX_HOME) {
+    _cachedStateDir = '.codex';
+    return _cachedStateDir;
+  }
+
+  // Check for .codex directory in project
+  try {
+    const codexPath = path.join(basePath, '.codex');
+    if (fs.existsSync(codexPath) && fs.statSync(codexPath).isDirectory()) {
+      _cachedStateDir = '.codex';
+      return _cachedStateDir;
+    }
+  } catch {
+    // Ignore errors, continue detection
+  }
+
+  // Default to Claude Code
+  _cachedStateDir = '.claude';
+  return _cachedStateDir;
+}
+
+/**
+ * Get the full path to the state directory
+ * @param {string} [basePath=process.cwd()] - Base path
+ * @returns {string} Full path to state directory
+ */
+function getStateDirPath(basePath = process.cwd()) {
+  return path.join(basePath, getStateDir(basePath));
+}
+
+/**
+ * Get the detected platform name
+ * @param {string} [basePath=process.cwd()] - Base path
+ * @returns {string} Platform name ('claude', 'opencode', 'codex', or 'custom')
+ */
+function getPlatformName(basePath = process.cwd()) {
+  const stateDir = getStateDir(basePath);
+
+  if (process.env.AI_STATE_DIR) {
+    return 'custom';
+  }
+
+  switch (stateDir) {
+    case '.opencode': return 'opencode';
+    case '.codex': return 'codex';
+    case '.claude': return 'claude';
+    default: return 'unknown';
+  }
+}
+
+/**
+ * Clear the cached state directory (useful for testing)
+ */
+function clearCache() {
+  _cachedStateDir = null;
+}
+
+module.exports = {
+  getStateDir,
+  getStateDirPath,
+  getPlatformName,
+  clearCache
+};

package/lib/sources/source-cache.js

@@ -2,15 +2,28 @@
  * Source Cache
  * File-based persistence for task source preferences
  *
+ * State directory is platform-aware:
+ * - Claude Code: .claude/sources/
+ * - OpenCode: .opencode/sources/
+ * - Codex CLI: .codex/sources/
+ *
  * @module lib/sources/source-cache
  */
 
 const fs = require('fs');
 const path = require('path');
+const { getStateDir } = require('../platform/state-dir');
 
-const SOURCES_DIR = '.claude/sources';
 const PREFERENCE_FILE = 'preference.json';
 
+/**
+ * Get the sources directory path (platform-aware)
+ * @returns {string} Path to sources directory
+ */
+function getSourcesDir() {
+  return path.join(getStateDir(), 'sources');
+}
+
 /**
  * Validate tool name to prevent path traversal
  * @param {string} toolName - Tool name to validate
@@ -26,10 +39,11 @@ function isValidToolName(toolName) {
  * @returns {string} Path to sources directory
  */
 function ensureDir() {
-  if (!fs.existsSync(SOURCES_DIR)) {
-    fs.mkdirSync(SOURCES_DIR, { recursive: true });
+  const sourcesDir = getSourcesDir();
+  if (!fs.existsSync(sourcesDir)) {
+    fs.mkdirSync(sourcesDir, { recursive: true });
   }
-  return SOURCES_DIR;
+  return sourcesDir;
 }
 
 /**
@@ -40,7 +54,7 @@ function ensureDir() {
  * // Or: { source: 'custom', type: 'cli', tool: 'tea' }
  */
 function getPreference() {
-  const filePath = path.join(SOURCES_DIR, PREFERENCE_FILE);
+  const filePath = path.join(getSourcesDir(), PREFERENCE_FILE);
   if (!fs.existsSync(filePath)) {
     return null;
   }
@@ -62,7 +76,7 @@ function getPreference() {
  */
 function savePreference(preference) {
   ensureDir();
-  const filePath = path.join(SOURCES_DIR, PREFERENCE_FILE);
+  const filePath = path.join(getSourcesDir(), PREFERENCE_FILE);
   fs.writeFileSync(filePath, JSON.stringify({
     ...preference,
     savedAt: new Date().toISOString()
@@ -80,7 +94,7 @@ function getToolCapabilities(toolName) {
     console.error(`Invalid tool name: ${toolName}`);
     return null;
   }
-  const filePath = path.join(SOURCES_DIR, `${toolName}.json`);
+  const filePath = path.join(getSourcesDir(), `${toolName}.json`);
   if (!fs.existsSync(filePath)) {
     return null;
   }
@@ -106,7 +120,7 @@ function saveToolCapabilities(toolName, capabilities) {
     return;
   }
   ensureDir();
-  const filePath = path.join(SOURCES_DIR, `${toolName}.json`);
+  const filePath = path.join(getSourcesDir(), `${toolName}.json`);
   fs.writeFileSync(filePath, JSON.stringify({
     ...capabilities,
     discoveredAt: new Date().toISOString()
@@ -117,10 +131,11 @@ function saveToolCapabilities(toolName, capabilities) {
  * Clear all cached preferences
  */
 function clearCache() {
-  if (fs.existsSync(SOURCES_DIR)) {
-    const files = fs.readdirSync(SOURCES_DIR);
+  const sourcesDir = getSourcesDir();
+  if (fs.existsSync(sourcesDir)) {
+    const files = fs.readdirSync(sourcesDir);
     for (const file of files) {
-      const filePath = path.join(SOURCES_DIR, file);
+      const filePath = path.join(sourcesDir, file);
       const stats = fs.statSync(filePath);
       if (stats.isFile()) {
         fs.unlinkSync(filePath);

package/lib/state/workflow-state.js

@@ -2,16 +2,21 @@
  * Simplified workflow state management
  *
  * Two files:
- * - Main project: .claude/tasks.json (tracks active worktree/task)
- * - Worktree: .claude/flow.json (tracks workflow progress)
+ * - Main project: {stateDir}/tasks.json (tracks active worktree/task)
+ * - Worktree: {stateDir}/flow.json (tracks workflow progress)
+ *
+ * State directory is platform-aware:
+ * - Claude Code: .claude/
+ * - OpenCode: .opencode/
+ * - Codex CLI: .codex/
  */
 
 const fs = require('fs');
 const path = require('path');
 const crypto = require('crypto');
+const { getStateDir } = require('../platform/state-dir');
 
 // File paths
-const CLAUDE_DIR = '.claude';
 const TASKS_FILE = 'tasks.json';
 const FLOW_FILE = 'flow.json';
 
@@ -74,14 +79,14 @@ const PHASES = [
 ];
 
 /**
- * Ensure .claude directory exists
+ * Ensure state directory exists (platform-aware)
  */
-function ensureClaudeDir(basePath) {
-  const claudeDir = path.join(basePath, CLAUDE_DIR);
-  if (!fs.existsSync(claudeDir)) {
-    fs.mkdirSync(claudeDir, { recursive: true });
+function ensureStateDir(basePath) {
+  const stateDir = path.join(basePath, getStateDir(basePath));
+  if (!fs.existsSync(stateDir)) {
+    fs.mkdirSync(stateDir, { recursive: true });
   }
-  return claudeDir;
+  return stateDir;
 }
 
 // =============================================================================
@@ -93,7 +98,7 @@ function ensureClaudeDir(basePath) {
  */
 function getTasksPath(projectPath = process.cwd()) {
   const validatedBase = validatePath(projectPath);
-  const tasksPath = path.join(validatedBase, CLAUDE_DIR, TASKS_FILE);
+  const tasksPath = path.join(validatedBase, getStateDir(projectPath), TASKS_FILE);
   validatePathWithinBase(tasksPath, validatedBase);
   return tasksPath;
 }
@@ -125,7 +130,7 @@ function readTasks(projectPath = process.cwd()) {
  * Write tasks.json to main project
  */
 function writeTasks(tasks, projectPath = process.cwd()) {
-  ensureClaudeDir(projectPath);
+  ensureStateDir(projectPath);
   const tasksPath = getTasksPath(projectPath);
   fs.writeFileSync(tasksPath, JSON.stringify(tasks, null, 2), 'utf8');
   return true;
@@ -170,7 +175,7 @@ function hasActiveTask(projectPath = process.cwd()) {
  */
 function getFlowPath(worktreePath = process.cwd()) {
   const validatedBase = validatePath(worktreePath);
-  const flowPath = path.join(validatedBase, CLAUDE_DIR, FLOW_FILE);
+  const flowPath = path.join(validatedBase, getStateDir(worktreePath), FLOW_FILE);
   validatePathWithinBase(flowPath, validatedBase);
   return flowPath;
 }
@@ -198,7 +203,7 @@ function readFlow(worktreePath = process.cwd()) {
  * Creates a copy to avoid mutating the original object
  */
 function writeFlow(flow, worktreePath = process.cwd()) {
-  ensureClaudeDir(worktreePath);
+  ensureStateDir(worktreePath);
   // Clone to avoid mutating the original object
   const flowCopy = JSON.parse(JSON.stringify(flow));
   flowCopy.lastUpdate = new Date().toISOString();

package/mcp-server/index.js

@@ -178,7 +178,7 @@ const toolHandlers = {
     return {
       content: [{
         type: 'text',
-        text: `Workflow started: ${state.workflow.id}\nPolicy: ${JSON.stringify(policy, null, 2)}`
+        text: `Workflow started: ${state.task.id}\nPolicy: ${JSON.stringify(policy, null, 2)}`
       }]
     };
   },
@@ -199,7 +199,7 @@ const toolHandlers = {
       };
     }
 
-    if (!state.checkpoints?.canResume) {
+    if (state.status !== 'in_progress' || state.phase === 'complete') {
       return {
         content: [{ type: 'text', text: 'Workflow cannot be resumed from current state.' }],
         isError: true
@@ -209,7 +209,7 @@ const toolHandlers = {
     return {
       content: [{
         type: 'text',
-        text: `Resuming workflow ${state.workflow.id} from phase: ${state.checkpoints.resumeFrom}`
+        text: `Resuming workflow ${state.task.id} from phase: ${state.phase}`
       }]
     };
   },
@@ -234,7 +234,7 @@ const toolHandlers = {
     return {
       content: [{
         type: 'text',
-        text: `Workflow ${state.workflow.id} aborted. Cleanup: worktree and branches should be removed manually.`
+        text: `Workflow ${state.task.id} aborted. Cleanup: worktree and branches should be removed manually.`
       }]
     };
   },
@@ -383,8 +383,7 @@ const toolHandlers = {
             foundFile = file;
             break;
           } catch (e) {
-            // Log error for debugging but continue checking other files
-            console.error(`Could not read ${file}: ${e.message}`);
+            // File doesn't exist, try next one
           }
         }
 
@@ -430,10 +429,7 @@ const toolHandlers = {
 
         // Validate file path - prevent path traversal
         const normalizedPath = path.normalize(customFile);
-        if (normalizedPath.includes('..') || path.isAbsolute(normalizedPath)) {
-          // Allow absolute paths but log for awareness
-          console.error(`Custom task file: ${normalizedPath}`);
-        }
+        // Note: absolute paths and '..' are allowed but monitored via file access
 
         try {
           const content = await fs.readFile(customFile, 'utf-8');
@@ -669,7 +665,7 @@ async function main() {
   const server = new Server(
     {
       name: 'awesome-slash',
-      version: '2.4.7',
+      version: '2.5.1',
     },
     {
       capabilities: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "awesome-slash",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "description": "Professional-grade slash commands for Claude Code that work across any project",
   "main": "lib/platform/detect-platform.js",
   "type": "commonjs",

package/plugins/deslop-around/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "deslop-around",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "description": "AI slop cleanup with minimal diffs and behavior preservation",
   "author": {
     "name": "Avi Fenesh",

package/plugins/deslop-around/lib/patterns/slop-patterns.js

@@ -644,9 +644,8 @@ function isFileExcluded(filePath, excludePatterns) {
   const cacheKey = JSON.stringify([filePath, excludePatterns]);
 
   // Check cache first (O(1) lookup)
-  if (_excludeResultCache.has(cacheKey)) {
-    return _excludeResultCache.get(cacheKey);
-  }
+  const cached = _excludeResultCache.get(cacheKey);
+  if (cached !== undefined) return cached;
 
   // Compute result
   const result = excludePatterns.some(pattern => {