@defai.digital/automatosx 5.1.2 → 5.2.0

package/dist/version.json

@@ -1,6 +1,6 @@
 {
-  "version": "5.1.2",
-  "releaseDate": "2025-10-11",
+  "version": "5.2.0",
+  "releaseDate": "2025-10-12",
   "codename": "Code Quality Improvements",
   "phase": "Phase 2.1 Complete"
 }

package/examples/abilities/our-architecture-decisions.md

@@ -59,18 +59,18 @@
 
 ## ADR-004: Three-Layer Security Model
 
-**Decision:** Implement path validation, workspace isolation, and input sanitization
+**Decision:** Implement path validation, workspace access control, and input sanitization
 
 **Layers:**
 
 1. **Path Resolution:** All file access through PathResolver
-2. **Workspace Isolation:** Agent-specific workspaces with restricted permissions (700)
+2. **Workspace Access Control:** Shared workspaces with path validation (v5.2+)
 3. **Input Validation:** Sanitize all user inputs
 
 **Impact:**
 
 - ✅ Prevents path traversal attacks
-- ✅ Agent isolation
+- ✅ Controlled workspace access with validation
 - ✅ No privilege escalation
 - ⚠️ Slightly more complex file operations
 

package/examples/abilities/our-code-review-checklist.md

@@ -21,9 +21,9 @@
 
 ### Security
 
-- [ ] **Path validation** - All file access through PathResolver
+- [ ] **Path validation** - All file access through PathResolver or WorkspaceManager
 - [ ] **Input sanitization** - User inputs sanitized before use
-- [ ] **Workspace isolation** - Writes only to agent workspace
+- [ ] **Workspace boundaries** - Writes only to automatosx/PRD or automatosx/tmp (v5.2+)
 - [ ] **File size limits** - Check file sizes to prevent DoS
 - [ ] **No hardcoded secrets** - Use environment variables
 
@@ -145,5 +145,5 @@ logger.info('Profile loaded', {
 
 ---
 
-**Last Updated:** 2025-10-10
-**For:** AutomatosX v5.0+
+**Last Updated:** 2025-10-11
+**For:** AutomatosX v5.2+

package/examples/abilities/our-project-structure.md

@@ -36,7 +36,11 @@ automatosx/
 │   ├── abilities/            # User's custom abilities
 │   ├── memory/               # SQLite database (memory.db)
 │   ├── sessions/             # Session persistence
-│   └── workspaces/           # Agent workspaces (isolated)
+│   └── logs/                 # Application logs
+│
+├── automatosx/               # Workspace directory (v5.2+)
+│   ├── PRD/                  # Planning documents (permanent)
+│   └── tmp/                  # Temporary files (auto-cleanup)
 │
 └── tmp/                      # Temporary files (gitignored)
 ```
@@ -135,12 +139,14 @@ import type { Provider } from '../types/provider.js';
 
 **Bundle target:** ESM, Node 20+, <250KB target
 
-## Workspace Structure
+## Workspace Structure (v5.2.0)
+
+**Shared workspaces:**
 
-**Agent workspaces:** `.automatosx/workspaces/{agent-name}/`
+- `automatosx/PRD/` - Planning documents, feature designs, proposals (permanent)
+- `automatosx/tmp/` - Test scripts, analysis tools, temporary reports (auto-cleanup)
 
-- Isolated workspace for file operations
-- Permissions: 700 (owner only on Unix)
+**All agents** have equal read/write access to both directories.
 
 **Memory storage:** `.automatosx/memory/memory.db`
 
@@ -161,15 +167,17 @@ import type { Provider } from '../types/provider.js';
 
 **Allowed writes:**
 
-- `.automatosx/workspaces/{agent-name}/**/*` only
+- `automatosx/PRD/**/*` - Planning documents
+- `automatosx/tmp/**/*` - Temporary files
 
 **Forbidden:**
 
+- Empty paths or current directory (`''`, `'.'`)
 - Path traversal (`../../../etc/passwd`)
 - Symbolic links outside project
-- Writing outside workspace
+- Absolute paths
 
 ---
 
-**Last Updated:** 2025-10-10
-**For:** AutomatosX v5.0+
+**Last Updated:** 2025-10-11
+**For:** AutomatosX v5.2+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@defai.digital/automatosx",
-  "version": "5.1.2",
+  "version": "5.2.0",
   "description": "AI Agent Orchestration Platform",
   "type": "module",
   "bin": {

package/version.json

@@ -1,6 +1,6 @@
 {
-  "version": "5.1.2",
-  "releaseDate": "2025-10-11",
+  "version": "5.2.0",
+  "releaseDate": "2025-10-12",
   "codename": "Code Quality Improvements",
   "phase": "Phase 2.1 Complete"
 }