awesome-slash 3.8.1 → 3.8.2

package/.claude-plugin/marketplace.json

@@ -1,7 +1,7 @@
 {
   "name": "awesome-slash",
   "description": "9 specialized plugins for AI workflow automation - task orchestration, PR workflow, slop detection, code review, drift detection, enhancement analysis, documentation sync, repo mapping, and perf investigations",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "owner": {
     "name": "Avi Fenesh",
     "url": "https://github.com/avifenesh"
@@ -26,63 +26,63 @@
       "name": "next-task",
       "source": "./plugins/next-task",
       "description": "Master workflow orchestrator: autonomous workflow with model optimization (opus/sonnet/haiku), two-file state management, workflow enforcement gates, 14 specialist agents",
-      "version": "3.8.1",
+      "version": "3.8.2",
       "category": "productivity"
     },
     {
       "name": "ship",
       "source": "./plugins/ship",
       "description": "Complete PR workflow: commit to production, skips review when called from next-task, removes task from registry on cleanup, automatic rollback",
-      "version": "3.8.1",
+      "version": "3.8.2",
       "category": "deployment"
     },
     {
       "name": "deslop",
       "source": "./plugins/deslop",
       "description": "3-phase AI slop detection: regex patterns (HIGH), multi-pass analyzers (MEDIUM), CLI tools (LOW)",
-      "version": "3.8.1",
+      "version": "3.8.2",
       "category": "development"
     },
     {
       "name": "audit-project",
       "source": "./plugins/audit-project",
       "description": "Multi-agent iterative code review until zero issues remain",
-      "version": "3.8.1",
+      "version": "3.8.2",
       "category": "development"
     },
     {
       "name": "drift-detect",
       "source": "./plugins/drift-detect",
       "description": "Deep repository analysis to realign project plans with code reality - detects drift, gaps, and creates prioritized reconstruction plans",
-      "version": "3.8.1",
+      "version": "3.8.2",
       "category": "productivity"
     },
     {
       "name": "enhance",
       "source": "./plugins/enhance",
       "description": "Master enhancement orchestrator: parallel analyzer execution for plugins, agents, docs, CLAUDE.md, and prompts with unified reporting",
-      "version": "3.8.1",
+      "version": "3.8.2",
       "category": "development"
     },
     {
       "name": "sync-docs",
       "source": "./plugins/sync-docs",
       "description": "Standalone documentation sync: find outdated refs, update CHANGELOG, flag stale examples based on code changes",
-      "version": "3.8.1",
+      "version": "3.8.2",
       "category": "development"
     },
     {
       "name": "repo-map",
       "source": "./plugins/repo-map",
       "description": "AST-based repository map generation using ast-grep with incremental updates for faster drift analysis",
-      "version": "3.8.1",
+      "version": "3.8.2",
       "category": "development"
     },
     {
       "name": "perf",
       "source": "./plugins/perf",
       "description": "Rigorous performance investigation workflow with baselines, profiling, hypotheses, and evidence-backed decisions",
-      "version": "3.8.1",
+      "version": "3.8.2",
       "category": "development"
     }
   ]

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "awesome-slash",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "Professional-grade slash commands for Claude Code with cross-platform support",
   "keywords": [
     "workflow",

package/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.8.2] - 2026-02-04
+
+### Fixed
+- **Policy Questions Enforcement** - /next-task Phase 1 now explicitly requires all 3 policy questions (Source, Priority, Stop Point) with table and forbidden actions
+- **Codex CLI Installer** - Fixed undefined `configPath` variable (should be `configDir`)
+
+### Changed
+- **XML Tag Consistency** - All 12 workflow phases now wrapped in consistent `<phase-N>` tags
+- **Constructive Language** - Replaced "you are wrong" with guidance pointing to consequences table
+- **Redundancy Reduction** - Consolidated duplicate forbidden actions lists
+
 ## [3.8.1] - 2026-02-04
 
 ### Fixed

package/adapters/opencode/install.sh

@@ -12,10 +12,22 @@ REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
 
 # Use $HOME which works correctly on all platforms including Git Bash on Windows
 # (Git Bash sets HOME to Unix-style path like /c/Users/username)
-OPENCODE_CONFIG_DIR="${HOME}/.opencode"
-OPENCODE_COMMANDS_DIR="${OPENCODE_CONFIG_DIR}/commands/awesome-slash"
+# OpenCode global config follows XDG Base Directory Specification:
+# - Default: ~/.config/opencode/
+# - Override: $XDG_CONFIG_HOME/opencode/ (if XDG_CONFIG_HOME is set and not empty/whitespace)
+# Note: Must match logic in scripts/dev-install.js getOpenCodeConfigDir()
+if [[ -n "${XDG_CONFIG_HOME}" && "${XDG_CONFIG_HOME}" =~ [^[:space:]] ]]; then
+  OPENCODE_CONFIG_DIR="${XDG_CONFIG_HOME}/opencode"
+else
+  OPENCODE_CONFIG_DIR="${HOME}/.config/opencode"
+fi
+# OpenCode expects commands directly in commands/, not a subdirectory
+OPENCODE_COMMANDS_DIR="${OPENCODE_CONFIG_DIR}/commands"
 LIB_DIR="${OPENCODE_COMMANDS_DIR}/lib"
 
+# Legacy path for cleanup (incorrect, pre-XDG location)
+LEGACY_OPENCODE_DIR="${HOME}/.opencode"
+
 # Detect OS for platform-specific notes
 if [[ "$OSTYPE" == "msys" || "$OSTYPE" == "win32" || "$OSTYPE" == "cygwin" ]]; then
   IS_WINDOWS=true
@@ -235,17 +247,64 @@ else
 fi
 echo
 
+# Clean up legacy paths (~/.opencode/ - incorrect, pre-XDG location)
+echo "[CLEANUP] Checking for legacy installations..."
+LEGACY_COMMANDS_DIR="${LEGACY_OPENCODE_DIR}/commands/awesome-slash"
+LEGACY_PLUGINS_DIR="${LEGACY_OPENCODE_DIR}/plugins/awesome-slash"
+LEGACY_AGENTS_DIR="${LEGACY_OPENCODE_DIR}/agents"
+
+cleaned_legacy=false
+if [ -d "$LEGACY_COMMANDS_DIR" ]; then
+  rm -rf "$LEGACY_COMMANDS_DIR"
+  echo "  [DEL] Removed legacy ~/.opencode/commands/awesome-slash"
+  cleaned_legacy=true
+fi
+if [ -d "$LEGACY_PLUGINS_DIR" ]; then
+  rm -rf "$LEGACY_PLUGINS_DIR"
+  echo "  [DEL] Removed legacy ~/.opencode/plugins/awesome-slash"
+  cleaned_legacy=true
+fi
+if [ -d "$LEGACY_AGENTS_DIR" ]; then
+  # Only remove known agent files, not the whole directory
+  # Must match list in scripts/dev-install.js knownAgents array
+  # Generated from: ls plugins/*/agents/*.md | xargs basename | sort -u
+  known_agents=(
+    'agent-enhancer.md' 'ci-fixer.md' 'ci-monitor.md' 'claudemd-enhancer.md'
+    'delivery-validator.md' 'deslop-agent.md' 'docs-enhancer.md' 'enhancement-orchestrator.md'
+    'enhancement-reporter.md' 'exploration-agent.md' 'hooks-enhancer.md' 'implementation-agent.md'
+    'map-validator.md' 'perf-analyzer.md' 'perf-code-paths.md' 'perf-investigation-logger.md'
+    'perf-orchestrator.md' 'perf-theory-gatherer.md' 'perf-theory-tester.md' 'plan-synthesizer.md'
+    'planning-agent.md' 'plugin-enhancer.md' 'prompt-enhancer.md' 'simple-fixer.md'
+    'skills-enhancer.md' 'sync-docs-agent.md' 'task-discoverer.md' 'test-coverage-checker.md'
+    'worktree-manager.md'
+  )
+  for agent in "${known_agents[@]}"; do
+    if [ -f "$LEGACY_AGENTS_DIR/$agent" ]; then
+      rm "$LEGACY_AGENTS_DIR/$agent"
+      cleaned_legacy=true
+    fi
+  done
+  if [ "$cleaned_legacy" = true ]; then
+    echo "  [DEL] Removed legacy agent files from ~/.opencode/agents"
+  fi
+fi
+if [ "$cleaned_legacy" = false ]; then
+  echo "  [OK] No legacy installations found"
+fi
+echo
+
 # Success message
 echo "[OK] Installation complete!"
 echo
 echo "[LIST] Installed Commands:"
-for cmd in "${COMMANDS[@]}"; do
+for mapping in "${COMMAND_MAPPINGS[@]}"; do
+  IFS=':' read -r cmd _ _ <<< "$mapping"
   echo "  • /$cmd"
 done
 echo
 echo "[NEXT] Next Steps:"
 echo "  1. Start OpenCode TUI: opencode"
-echo "  2. Use commands: /$cmd"
+echo "  2. Use commands: /next-task, /ship, etc."
 echo "  3. See help: cat $OPENCODE_COMMANDS_DIR/README.md"
 echo
 echo "[TIP] OpenCode Pro Tips:"

package/bin/cli.js

@@ -797,7 +797,7 @@ function installForCodex(installDir) {
   }
 
   console.log('\n[OK] Codex CLI installation complete!');
-  console.log(`   Config: ${configPath}`);
+  console.log(`   Config: ${configDir}`);
   console.log(`   Skills: ${skillsDir}`);
   console.log('   Access via: $next-task, $ship, $deslop, etc.\n');
   return true;

package/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "awesome-slash",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "9 specialized plugins for AI workflow automation (drift detection + AST repo maps) - works with Claude Code, OpenCode, and Codex CLI",
   "main": "lib/platform/detect-platform.js",
   "type": "commonjs",

package/plugins/audit-project/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-project",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "Multi-agent iterative code review until zero issues remain",
   "author": {
     "name": "Avi Fenesh",

package/plugins/audit-project/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/plugins/deslop/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "deslop",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "AI slop cleanup with minimal diffs and behavior preservation",
   "author": {
     "name": "Avi Fenesh",

package/plugins/deslop/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/plugins/deslop/references/slop-categories.md

@@ -14,6 +14,21 @@ Detailed reference for all slop patterns detected by the pipeline.
 
 **Excludes**: Test files, CLI entry points, config files
 
+### Unsafe Error Handling (Rust)
+
+| Pattern | Severity | Better Alternatives |
+|---------|----------|---------------------|
+| `.unwrap()` | medium | `.expect("msg")`, `.unwrap_or(default)`, `?` operator |
+
+Bare `.unwrap()` calls can cause panics in production. Prefer:
+- `.expect("descriptive message")` - panic with context
+- `.unwrap_or(default)` / `.unwrap_or_default()` - provide fallback
+- `.unwrap_or_else(\|\| ...)` - lazy fallback computation
+- `?` operator - propagate errors to caller
+- `.ok()` / `.map()` / `.and_then()` - transform Result/Option
+
+**Excludes**: Test files, examples, benchmarks
+
 ### Placeholder Code
 
 | Pattern | Language | Severity |

package/plugins/drift-detect/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "drift-detect",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "Deep repository analysis to realign project plans with actual code reality - discovers drift, gaps, and produces prioritized reconstruction plans",
   "author": {
     "name": "Avi Fenesh",

package/plugins/drift-detect/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/plugins/enhance/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "enhance",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "Plugin structure and tool use analyzer - validates plugin.json, MCP tools, and security patterns",
   "author": {
     "name": "Avi Fenesh",

package/plugins/enhance/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/plugins/next-task/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "next-task",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "Master workflow orchestrator with autonomous task-to-production automation, quality gates, and multi-agent review",
   "author": {
     "name": "Avi Fenesh",

package/plugins/next-task/commands/next-task.md

@@ -27,16 +27,13 @@ This workflow exists because each step serves a purpose. Taking shortcuts defeat
 1. Every step is mandatory - not suggestions, not guidelines, requirements
 2. Use the specified agents - do not substitute with manual commands
 3. Output verification blocks - prove each step completed
-4. If you think a step is unnecessary, you are wrong
+4. If you think a step is unnecessary, review the "What Happens If Skipped" column above
 
-### Forbidden Actions
+### Forbidden Shortcuts
 
-- Using `git checkout -b` instead of `worktree-manager` agent
-- Skipping review loop iterations
-- Checking CI once and moving to merge
-- Skipping the 3-minute wait for auto-reviewers
-- Leaving PR comments unaddressed
-- Rationalizing shortcuts ("it's faster", "not needed this time")
+- `git checkout -b` or `git branch` instead of `worktree-manager` agent
+- Single CI check instead of monitoring loop
+- Rationalizing skips ("it's faster", "not needed this time")
 </no-shortcuts-policy>
 
 ---
@@ -79,11 +76,8 @@ Each phase must complete before the next starts:
 | Ship | Explicit /ship invocation (not hook-only) |
 
 **Forbidden actions for agents:**
-- No agent may create PRs (only /ship)
-- No agent may push to remote (only /ship)
-- No agent may skip Phase 9 review loop
-- No agent may skip delivery-validator
-- No agent may skip docs update (sync-docs-agent)
+- No agent may create PRs or push to remote (only /ship)
+- No agent may skip Phase 9, delivery-validator, or docs update
 </workflow-gates>
 
 ## Arguments
@@ -170,18 +164,36 @@ if (args.includes('--resume')) {
 }
 ```
 
+<phase-1>
 ## Phase 1: Policy Selection
 
-No agent needed. Use `lib/sources/policy-questions.js`:
+No agent needed. Use AskUserQuestion tool with ALL 3 questions from `lib/sources/policy-questions.js`.
+
+**MANDATORY - Ask ALL 3 Questions:**
+
+| # | Header | Question | Options |
+|---|--------|----------|---------|
+| 1 | Source | Where should I look for tasks? | GitHub Issues, GitLab Issues, Local tasks.md, Custom, Other (+ cached if exists) |
+| 2 | Priority | What type of tasks to prioritize? | All, Bugs, Security, Features |
+| 3 | Stop Point | How far should I take this task? | Merged, PR Created, Implemented, Deployed, Production |
+
+**Forbidden Actions:**
+- Skipping any of the 3 questions
+- Inventing your own questions instead of using the exact ones above
+- Proceeding to Phase 2 without all 3 answers
 
 ```javascript
+// Reference implementation - use ALL questions
 const { sources } = require(path.join(pluginRoot, 'lib'));
 const { questions, cachedPreference } = sources.getPolicyQuestions();
-AskUserQuestion({ questions });
+// questions array contains all 3 questions above
+AskUserQuestion({ questions }); // Pass all 3 questions
 const policy = sources.parseAndCachePolicy(responses);
 workflowState.updateFlow({ policy, phase: 'task-discovery' });
 ```
+</phase-1>
 
+<phase-2>
 ## Phase 2: Task Discovery
 
 **Agent**: `next-task:task-discoverer` (sonnet)
@@ -193,6 +205,7 @@ await Task({
   prompt: `Discover tasks from source: ${JSON.stringify(policy.taskSource)}. Filter: ${policy.priorityFilter}. Present top 5 for selection.`
 });
 ```
+</phase-2>
 
 <phase-3>
 ## Phase 3: Worktree Setup
@@ -224,6 +237,7 @@ console.log(`[VERIFIED] Worktree: ${worktreeResult.worktreePath}`);
 - Skipping worktree "because branching is faster"
 </phase-3>
 
+<phase-4>
 ## Phase 4: Exploration
 
 **Agent**: `next-task:exploration-agent` (opus)
@@ -236,7 +250,9 @@ await Task({
   prompt: `Deep codebase analysis for task #${state.task.id}. Find key files, patterns, dependencies.`
 });
 ```
+</phase-4>
 
+<phase-5>
 ## Phase 5: Planning
 
 **Agent**: `next-task:planning-agent` (opus)
@@ -249,7 +265,9 @@ const planOutput = await Task({
   prompt: `Design implementation plan for task #${state.task.id}. Output structured JSON between === PLAN_START === and === PLAN_END === markers.`
 });
 ```
+</phase-5>
 
+<phase-6>
 ## Phase 6: User Approval (Plan Mode)
 
 **Last human interaction point.** Present plan via EnterPlanMode/ExitPlanMode.
@@ -259,7 +277,9 @@ EnterPlanMode();
 // User reviews and approves via ExitPlanMode
 workflowState.completePhase({ planApproved: true, plan });
 ```
+</phase-6>
 
+<phase-7>
 ## Phase 7: Implementation
 
 **Agent**: `next-task:implementation-agent` (opus)
@@ -273,7 +293,9 @@ await Task({
 });
 // → SubagentStop hook triggers pre-review gates
 ```
+</phase-7>
 
+<phase-8>
 ## Phase 8: Pre-Review Gates
 
 **Agents** (parallel): `deslop:deslop-agent` + `next-task:test-coverage-checker` (sonnet)
@@ -318,6 +340,7 @@ Use Edit tool to apply. Commit message: "fix: clean up AI slop"`
   });
 }
 ```
+</phase-8>
 
 <phase-9>
 ## Phase 9: Review Loop
@@ -416,6 +439,7 @@ After review loop completes, output:
 ```
 </phase-9>
 
+<phase-10>
 ## Phase 10: Delivery Validation
 
 **Agent**: `next-task:delivery-validator` (sonnet)
@@ -431,7 +455,9 @@ if (!result.approved) {
   return; // Retries from implementation
 }
 ```
+</phase-10>
 
+<phase-11>
 ## Phase 11: Docs Update
 
 **Agent**: `sync-docs:sync-docs-agent` (sonnet)
@@ -474,9 +500,10 @@ Use the Edit tool to apply each fix. Commit message: "docs: sync documentation w
 
 workflowState.completePhase({ docsUpdated: true, fixesApplied: result.fixes?.length || 0 });
 ```
+</phase-11>
 
-<ship-handoff>
-## Handoff to /ship
+<phase-12>
+## Phase 12: Handoff to /ship
 
 After docs update (sync-docs-agent) completes, invoke /ship explicitly:
 
@@ -491,7 +518,7 @@ await Task({ subagent_type: "ship:ship", prompt: `Ship the task. State file: ${s
 - Monitor CI and review comments
 - Merge when approved
 - Cleanup worktree and tasks.json
-</ship-handoff>
+</phase-12>
 
 ## Error Handling
 

package/plugins/next-task/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/plugins/perf/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "perf",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "Rigorous performance investigation workflow with baselines, profiling, and evidence-backed decisions",
   "author": {
     "name": "Avi Fenesh",

package/plugins/perf/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/plugins/repo-map/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "repo-map",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "AST-based repository map generator using ast-grep for symbol and import extraction with incremental updates",
   "author": {
     "name": "Avi Fenesh",

package/plugins/repo-map/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/plugins/ship/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ship",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "Complete PR workflow from commit to production with validation",
   "author": {
     "name": "Avi Fenesh",

package/plugins/ship/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/plugins/sync-docs/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sync-docs",
-  "version": "3.8.1",
+  "version": "3.8.2",
   "description": "Sync documentation with code changes. Find outdated refs, update CHANGELOG, flag stale examples.",
   "author": {
     "name": "Avi Fenesh",

package/plugins/sync-docs/lib/patterns/slop-patterns.js

@@ -275,6 +275,24 @@ const slopPatterns = {
     description: 'Rust panic!("TODO: ...") placeholder'
   },
 
+  /**
+   * Rust: Bare .unwrap() calls without error context
+   * Can cause panics in production - prefer:
+   * - .unwrap_or(default) / .unwrap_or_else(|| ...)
+   * - .unwrap_or_default()
+   * - .expect("descriptive message")
+   * - ? operator for propagation
+   * - .ok() / .map() / .and_then() for transformation
+   */
+  rust_bare_unwrap: {
+    pattern: /\.unwrap\(\s*\)(?!\s*\.)/,
+    exclude: ['*_test.rs', '*_tests.rs', '**/tests/**', '**/examples/**', '**/benches/**'],
+    severity: 'medium',
+    autoFix: 'flag',
+    language: 'rust',
+    description: 'Bare .unwrap() can panic - use .expect(), .unwrap_or(), or ? operator'
+  },
+
   /**
    * Python: raise NotImplementedError
    */

package/scripts/dev-install.js

@@ -30,8 +30,22 @@ const VERSION = require(path.join(SOURCE_DIR, 'package.json')).version;
 // Target directories
 const HOME = process.env.HOME || process.env.USERPROFILE;
 const CLAUDE_PLUGINS_DIR = path.join(HOME, '.claude', 'plugins');
-const OPENCODE_DIR = path.join(HOME, '.opencode');
-const OPENCODE_CONFIG_DIR = path.join(HOME, '.config', 'opencode');
+
+/**
+ * Get OpenCode config directory following XDG Base Directory Specification.
+ * OpenCode uses ~/.config/opencode/ by default, or $XDG_CONFIG_HOME/opencode if set.
+ */
+function getOpenCodeConfigDir() {
+  const xdgConfigHome = process.env.XDG_CONFIG_HOME;
+  if (xdgConfigHome && xdgConfigHome.trim()) {
+    return path.join(xdgConfigHome, 'opencode');
+  }
+  return path.join(HOME, '.config', 'opencode');
+}
+
+const OPENCODE_CONFIG_DIR = getOpenCodeConfigDir();
+// Legacy path - kept for cleanup of old installations
+const LEGACY_OPENCODE_DIR = path.join(HOME, '.opencode');
 const CODEX_DIR = path.join(HOME, '.codex');
 const AWESOME_SLASH_DIR = path.join(HOME, '.awesome-slash');
 
@@ -66,33 +80,63 @@ function cleanAll() {
     }
   }
 
-  // Clean OpenCode
-  const opencodeCommandsDir = path.join(OPENCODE_DIR, 'commands', 'awesome-slash');
-  const opencodePluginDir = path.join(OPENCODE_DIR, 'plugins', 'awesome-slash');
-  const opencodeAgentsDir = path.join(OPENCODE_DIR, 'agents');
+  // Clean OpenCode (correct XDG path: ~/.config/opencode/)
+  // OpenCode expects commands directly in commands/, not a subdirectory
+  const opencodeCommandsDir = path.join(OPENCODE_CONFIG_DIR, 'commands');
+  const opencodePluginDir = path.join(OPENCODE_CONFIG_DIR, 'plugins');
+  const opencodeAgentsDir = path.join(OPENCODE_CONFIG_DIR, 'agents');
+  // Note: Skills cleanup not implemented yet - would need skill list similar to agents
+
+  // List of agent filenames we install (from plugins/*/agents/*.md)
+  // Generated from: ls plugins/*/agents/*.md | xargs basename | sort -u
+  const knownAgents = [
+    'agent-enhancer.md', 'ci-fixer.md', 'ci-monitor.md', 'claudemd-enhancer.md',
+    'delivery-validator.md', 'deslop-agent.md', 'docs-enhancer.md', 'enhancement-orchestrator.md',
+    'enhancement-reporter.md', 'exploration-agent.md', 'hooks-enhancer.md', 'implementation-agent.md',
+    'map-validator.md', 'perf-analyzer.md', 'perf-code-paths.md', 'perf-investigation-logger.md',
+    'perf-orchestrator.md', 'perf-theory-gatherer.md', 'perf-theory-tester.md', 'plan-synthesizer.md',
+    'planning-agent.md', 'plugin-enhancer.md', 'prompt-enhancer.md', 'simple-fixer.md',
+    'skills-enhancer.md', 'sync-docs-agent.md', 'task-discoverer.md', 'test-coverage-checker.md',
+    'worktree-manager.md'
+  ];
 
+  // Known commands we install
+  const knownCommands = [
+    'deslop.md', 'enhance.md', 'next-task.md', 'delivery-approval.md',
+    'sync-docs.md', 'audit-project.md', 'ship.md', 'drift-detect.md',
+    'repo-map.md', 'perf.md'
+  ];
+
+  // Clean commands (remove our files, not the whole directory)
   if (fs.existsSync(opencodeCommandsDir)) {
-    fs.rmSync(opencodeCommandsDir, { recursive: true, force: true });
-    log('  Removed OpenCode commands');
+    let removedCount = 0;
+    for (const file of knownCommands) {
+      const filePath = path.join(opencodeCommandsDir, file);
+      if (fs.existsSync(filePath)) {
+        fs.unlinkSync(filePath);
+        removedCount++;
+      }
+    }
+    // Also clean lib directory we install
+    const libDir = path.join(opencodeCommandsDir, 'lib');
+    if (fs.existsSync(libDir)) {
+      fs.rmSync(libDir, { recursive: true, force: true });
+      removedCount++;
+    }
+    if (removedCount > 0) {
+      log(`  Removed ${removedCount} OpenCode commands/lib`);
+    }
   }
-  if (fs.existsSync(opencodePluginDir)) {
-    fs.rmSync(opencodePluginDir, { recursive: true, force: true });
+
+  // Clean plugin file
+  const pluginFile = path.join(opencodePluginDir, 'awesome-slash.ts');
+  if (fs.existsSync(pluginFile)) {
+    fs.unlinkSync(pluginFile);
     log('  Removed OpenCode plugin');
   }
+
   // Clean agent files installed by us - only known awesome-slash agents
   if (fs.existsSync(opencodeAgentsDir)) {
-    // List of agent filenames we install (from plugins/*/agents/*.md)
-    const knownAgents = [
-      'plan-synthesizer.md', 'enhancement-reporter.md', 'ci-fixer.md',
-      'deslop-work.md', 'simple-fixer.md', 'perf-analyzer.md', 'perf-code-paths.md',
-      'perf-investigation-logger.md', 'perf-theory-gatherer.md', 'perf-theory-tester.md',
-      'map-validator.md', 'exploration-agent.md', 'perf-orchestrator.md', 'ci-monitor.md',
-      'implementation-agent.md', 'planning-agent.md', 'test-coverage-checker.md',
-      'plugin-enhancer.md', 'agent-enhancer.md', 'docs-enhancer.md', 'claudemd-enhancer.md',
-      'prompt-enhancer.md', 'hooks-enhancer.md', 'skills-enhancer.md', 'enhancement-orchestrator.md',
-      'task-discoverer.md', 'delivery-validator.md', 'docs-updater.md', 'worktree-manager.md',
-      'deslop-analyzer.md', 'docs-analyzer.md', 'docs-validator.md'
-    ];
     let removedCount = 0;
     for (const file of knownAgents) {
       const filePath = path.join(opencodeAgentsDir, file);
@@ -106,6 +150,33 @@ function cleanAll() {
     }
   }
 
+  // Clean legacy OpenCode paths (~/.opencode/ - incorrect, pre-XDG)
+  const legacyCommandsDir = path.join(LEGACY_OPENCODE_DIR, 'commands', 'awesome-slash');
+  const legacyPluginDir = path.join(LEGACY_OPENCODE_DIR, 'plugins', 'awesome-slash');
+  const legacyAgentsDir = path.join(LEGACY_OPENCODE_DIR, 'agents');
+
+  if (fs.existsSync(legacyCommandsDir)) {
+    fs.rmSync(legacyCommandsDir, { recursive: true, force: true });
+    log('  Removed legacy ~/.opencode/commands/awesome-slash');
+  }
+  if (fs.existsSync(legacyPluginDir)) {
+    fs.rmSync(legacyPluginDir, { recursive: true, force: true });
+    log('  Removed legacy ~/.opencode/plugins/awesome-slash');
+  }
+  if (fs.existsSync(legacyAgentsDir)) {
+    let removedCount = 0;
+    for (const file of knownAgents) {
+      const filePath = path.join(legacyAgentsDir, file);
+      if (fs.existsSync(filePath)) {
+        fs.unlinkSync(filePath);
+        removedCount++;
+      }
+    }
+    if (removedCount > 0) {
+      log(`  Removed ${removedCount} legacy OpenCode agents from ~/.opencode/`);
+    }
+  }
+
   // Clean Codex
   const codexSkillsDir = path.join(CODEX_DIR, 'skills');
   if (fs.existsSync(codexSkillsDir)) {
@@ -219,29 +290,40 @@ function installClaude() {
 function installOpenCode() {
   log('Installing for OpenCode...');
 
-  // Create directories
-  const commandsDir = path.join(OPENCODE_DIR, 'commands', 'awesome-slash');
-  const pluginDir = path.join(OPENCODE_DIR, 'plugins', 'awesome-slash');
-  const agentsDir = path.join(OPENCODE_DIR, 'agents');
+  // Create directories in correct XDG location (~/.config/opencode/)
+  // OpenCode expects commands directly in commands/, not a subdirectory
+  const commandsDir = path.join(OPENCODE_CONFIG_DIR, 'commands');
+  const pluginDir = path.join(OPENCODE_CONFIG_DIR, 'plugins');
+  const agentsDir = path.join(OPENCODE_CONFIG_DIR, 'agents');
 
   fs.mkdirSync(commandsDir, { recursive: true });
   fs.mkdirSync(pluginDir, { recursive: true });
   fs.mkdirSync(agentsDir, { recursive: true });
 
+  // Clean up legacy paths (~/.opencode/) if they exist
+  const legacyCommandsDir = path.join(LEGACY_OPENCODE_DIR, 'commands', 'awesome-slash');
+  const legacyPluginDir = path.join(LEGACY_OPENCODE_DIR, 'plugins', 'awesome-slash');
+  if (fs.existsSync(legacyCommandsDir)) {
+    fs.rmSync(legacyCommandsDir, { recursive: true, force: true });
+    log('  Cleaned up legacy ~/.opencode/commands/awesome-slash');
+  }
+  if (fs.existsSync(legacyPluginDir)) {
+    fs.rmSync(legacyPluginDir, { recursive: true, force: true });
+    log('  Cleaned up legacy ~/.opencode/plugins/awesome-slash');
+  }
+
   // Copy to ~/.awesome-slash first (OpenCode needs local files)
   copyToAwesomeSlash();
 
-  // Copy native plugin
+  // Copy native plugin (OpenCode expects plugins as single .ts files in ~/.config/opencode/plugins/)
   const pluginSrcDir = path.join(SOURCE_DIR, 'adapters', 'opencode-plugin');
   if (fs.existsSync(pluginSrcDir)) {
-    for (const file of ['index.ts', 'package.json']) {
-      const srcPath = path.join(pluginSrcDir, file);
-      const destPath = path.join(pluginDir, file);
-      if (fs.existsSync(srcPath)) {
-        fs.copyFileSync(srcPath, destPath);
-      }
+    const srcPath = path.join(pluginSrcDir, 'index.ts');
+    const destPath = path.join(pluginDir, 'awesome-slash.ts');
+    if (fs.existsSync(srcPath)) {
+      fs.copyFileSync(srcPath, destPath);
+      log('  [OK] Native plugin');
     }
-    log('  [OK] Native plugin');
   }
 
   // Transform helpers

package/scripts/validate-opencode-install.js

@@ -14,7 +14,20 @@ const fs = require('fs');
 const path = require('path');
 
 const home = process.env.HOME || process.env.USERPROFILE;
-const OPENCODE_DIR = path.join(home, '.opencode');
+
+/**
+ * Get OpenCode config directory following XDG Base Directory Specification.
+ * OpenCode uses ~/.config/opencode/ by default, or $XDG_CONFIG_HOME/opencode if set.
+ */
+function getOpenCodeConfigDir() {
+  const xdgConfigHome = process.env.XDG_CONFIG_HOME;
+  if (xdgConfigHome && xdgConfigHome.trim()) {
+    return path.join(xdgConfigHome, 'opencode');
+  }
+  return path.join(home, '.config', 'opencode');
+}
+
+const OPENCODE_DIR = getOpenCodeConfigDir();
 
 const issues = [];
 
@@ -119,7 +132,8 @@ console.log('Validating OpenCode Installation...\n');
 console.log(`OpenCode directory: ${OPENCODE_DIR}\n`);
 
 // Validate each type
-validateDirectory(path.join(OPENCODE_DIR, 'commands', 'awesome-slash'), 'commands');
+// OpenCode expects commands directly in commands/, not a subdirectory
+validateDirectory(path.join(OPENCODE_DIR, 'commands'), 'commands');
 validateDirectory(path.join(OPENCODE_DIR, 'agents'), 'agents');
 validateDirectory(path.join(OPENCODE_DIR, 'skills'), 'skills');