@defai.digital/automatosx 5.3.5 → 5.4.0

package/CHANGELOG.md

@@ -1,9 +1,152 @@
 # Changelog
 
-All notable changes to AutomatosX will be documented in this file.
+All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+## [5.4.0](https://github.com/defai-digital/automatosx/compare/v5.3.7...v5.4.0) (2025-10-15)
+
+
+### Features
+
+* implement P0 improvements - automated release, provenance, and package optimization ([442ac50](https://github.com/defai-digital/automatosx/commit/442ac5044b5cc653ee0d7039efe0e32207d6a6c1))
+* **release:** enhance pre-release workflow with beta/rc detection ([699b149](https://github.com/defai-digital/automatosx/commit/699b1493fe3c62e4b30c2e6e7a7290c0a052e3a7))
+* **release:** implement P1 release process enhancements ([835d4e0](https://github.com/defai-digital/automatosx/commit/835d4e0880177919162d97563b7b6ed98e19f72a))
+* **release:** setup conventional commits with automated changelog generation ([848f24c](https://github.com/defai-digital/automatosx/commit/848f24c4434f2853993ec99681da11fa50c0b858))
+* **test:** add smoke tests for package verification ([5a8e5b4](https://github.com/defai-digital/automatosx/commit/5a8e5b462797beb553f4fd799441e2ea50350770))
+* **test:** add smoke tests for package verification ([bceee8d](https://github.com/defai-digital/automatosx/commit/bceee8d24c078b79729fd13283246ea68d9f58ae))
+
+
+### Code Refactoring
+
+* **version:** simplify version management using package.json as single source of truth ([0d334ae](https://github.com/defai-digital/automatosx/commit/0d334ae4e0953ea44ed7704d383e47e0b56cb74c))
+
+## [5.3.7] - 2025-10-15
+
+### 🚀 Agent Delegation Optimization + Tooling Improvements
+
+**This release optimizes the multi-agent delegation architecture to reduce manual coordination by 30-40% and introduces several tooling improvements for better maintainability.**
+
+#### Added
+
+- **Tactical Implementer Role** (New agent classification):
+  - Introduced new "Tactical Implementer (Depth 1)" role for Bob and Frank
+  - Enables automatic consultation with specialists (security, design, quality)
+  - Bridges gap between Pure Implementers and Coordinators
+  - **Impact**: Backend/Frontend agents can now auto-delegate to specialists
+
+- **Agent Delegation Enhancements**:
+  - **Bob (Backend)**: Upgraded from depth 0 → 1
+    - Can now consult Steve (Security), Debbee (Design), Queenie (Quality), Wendy (Writer)
+    - Automatic security reviews and design validation
+  - **Frank (Frontend)**: Upgraded from depth 0 → 1
+    - Can now consult Debbee (Design), Steve (Security), Queenie (Quality), Bob (Backend)
+    - Automatic design validation and security reviews
+  - Clear delegation strategies documented in systemPrompts
+
+- **OS Compatibility Badges** (`README.md`):
+  - macOS 26.0 (tested and working)
+  - Windows 10+ (tested and working)
+  - Ubuntu 24.04 (tested and working)
+
+- **Tools Enhancements**:
+  - `tools:check` npm script for shell script validation
+  - Automatic test count updates in `sync-all-versions.js`
+  - Dynamic archive directory naming (date-based) in cleanup scripts
+
+#### Changed
+
+- **Agent Configuration** (`.automatosx/agents/`):
+  - `backend.yaml`: maxDelegationDepth 0 → 1 with delegation strategy
+  - `frontend.yaml`: maxDelegationDepth 0 → 1 with delegation strategy
+  - `data.yaml`: Fixed systemPrompt inconsistency (confirmed depth 0)
+
+- **Documentation** (`examples/AGENTS_INFO.md`):
+  - Reorganized with new "Tactical Implementers" section
+  - Updated agent count: 16 agents (3 Strategic, 6 Tactical, 2 Tactical Implementers, 5 Pure)
+  - Updated team distribution table
+  - Version header updated to v5.3.6
+
+- **Tooling Scripts**:
+  - `cleanup-tmp.sh`: Dynamic archive-YYYY-MM naming (was hardcoded 2025-10)
+  - `cleanup-prd.sh`: Dynamic archive-YYYY-MM naming
+  - `smoke-test.sh`: Dynamic version regex (was hardcoded 4.0.0)
+  - Archived `migrate-agent.sh` to `tools/archive/` (rarely used)
+
+- **Test Count Badge**: Updated from 1,717 → 1,845 tests (all passing)
+
+#### Fixed
+
+- **Daisy Configuration Inconsistency**:
+  - YAML had `maxDelegationDepth: 0` but systemPrompt said `depth: 1`
+  - Fixed systemPrompt to correctly reflect depth 0 as Pure Implementer
+  - Added guidance for cross-domain handoff recommendations
+
+- **Hardcoded Values**:
+  - Archive directory dates no longer hardcoded (now date-based)
+  - Version checks in smoke-test now use regex pattern
+  - All cleanup scripts use dynamic path resolution
+
+#### Documentation
+
+- **Delegation Architecture Reports** (in `tmp/`):
+  - `delegation-optimization-report.md`: Complete 16-agent analysis (55KB)
+  - `delegation-changes-proposal.md`: Detailed implementation plan (44KB)
+  - `delegation-architecture-decision.md`: ADR-003 formal decision record (21KB)
+  - `v5.3.6-implementation-summary.md`: Complete implementation log
+
+- **Bug Analysis** (in `tmp/`):
+  - `bug-analysis-report.md`: Comprehensive code quality review
+  - `fix-summary.md`: P1 minor issues resolution
+  - All 1,813 tests passing (100% pass rate)
+
+#### Technical Details
+
+**Delegation Flow Example (Before vs After)**:
+
+Before (Bob depth 0):
+```
+User → Bob: "Implement JWT auth"
+Bob: "Done, needs security review"
+User → Steve: "Review Bob's code"  ← Manual coordination
+Steve: "3 security issues found"
+User → Bob: "Fix issues"
+```
+
+After (Bob depth 1):
+```
+User → Bob: "Implement JWT auth"
+Bob: "Implementing... consulting Steve for security review"
+  → Steve: "Review in progress..."
+  → Steve: "3 security recommendations"
+Bob: "Applied security fixes, implementation complete!"
+```
+
+**Expected Benefits**:
+- ✅ 30-40% reduction in manual coordination
+- ✅ Improved developer experience
+- ✅ More intelligent automatic collaboration
+- ✅ Better alignment with real-world workflows
+
+**Risk Assessment**:
+- 🟢 Low risk: Full backward compatibility maintained
+- 🟢 Cycle detection: Existing mechanisms prevent loops
+- 🟢 Performance: +10-15s for specialist consultation (acceptable trade-off)
+- 🟢 Testing: All 1,813 tests passing (100% pass rate)
+
+**Quality Metrics**:
+- Code Quality Score: 92/100 (Excellent)
+- Test Pass Rate: 100% (1,813/1,813)
+- TypeScript Errors: 0
+- Critical Bugs: 0
+
+#### Phase 2 Roadmap (v5.4.0)
+
+Planned for future releases based on Phase 1 evaluation:
+- Eric (CEO): Depth 1 → 2 (strategic coordination)
+- Paris (Product): Depth 1 → 2 (complex product workflows - pilot)
+
+**Evaluation Period**: 4 weeks after v5.3.6 release
+
+---
 
 ## [5.3.5] - 2025-10-14
 
@@ -508,7 +651,7 @@ None (infrastructure-only release)
 #### Added
 
 - **Version Synchronization Tool** (`tools/sync-all-versions.js`):
-  - Comprehensive version sync across all project files (package.json, version.json, README.md, CLAUDE.md)
+  - Comprehensive version sync across all project files (package.json, README.md, CLAUDE.md)
   - Automatic month/year formatting (e.g., "October 2025")
   - CHANGELOG.md verification with warnings if entry missing
   - Colorful console output with clear next-step guidance
@@ -614,7 +757,7 @@ None (infrastructure-only release)
 #### Added
 
 - **Version Synchronization Tool** (`tools/sync-all-versions.js`):
-  - Comprehensive version sync across all project files (package.json, version.json, README.md, CLAUDE.md)
+  - Comprehensive version sync across all project files (package.json, README.md, CLAUDE.md)
   - Automatic month/year formatting (e.g., "October 2025")
   - CHANGELOG.md verification with warnings if entry missing
   - Colorful console output with clear next-step guidance

package/README.md

@@ -7,9 +7,12 @@
 [![npm version](https://img.shields.io/npm/v/@defai.digital/automatosx.svg)](https://www.npmjs.com/package/@defai.digital/automatosx)
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
 [![TypeScript](https://img.shields.io/badge/TypeScript-100%25-blue.svg)](https://www.typescriptlang.org/)
-[![Tests](https://img.shields.io/badge/tests-1,717%20passing-brightgreen.svg)](#)
+[![Tests](https://img.shields.io/badge/tests-1,845%20passing-brightgreen.svg)](#)
+[![macOS](https://img.shields.io/badge/macOS-26.0-blue.svg)](https://www.apple.com/macos)
+[![Windows](https://img.shields.io/badge/Windows-10+-blue.svg)](https://www.microsoft.com/windows)
+[![Ubuntu](https://img.shields.io/badge/Ubuntu-24.04-orange.svg)](https://ubuntu.com)
 
-**Status**: ✅ Production Ready · v5.3.5 · October 2025
+**Status**: ✅ Production Ready · v5.4.0 · October 2025
 
 Looking for answers? See the [FAQ](FAQ.md).
 
@@ -765,7 +768,7 @@ I need Daisy to analyze the data    # Need expression
 
 ## 🛠️ Production-Ready
 
-✅ **1,670 tests passing** (100% pass rate)
+✅ **1,845 tests passing** (100% pass rate)
 ✅ **TypeScript strict mode** (zero errors)
 ✅ **~56% test coverage** (comprehensive testing)
 ✅ **458KB bundle** (99.9% smaller than v3.x)
@@ -785,7 +788,7 @@ AutomatosX has been thoroughly tested across multiple operating systems:
 Memory Search: < 1ms (10,000 entries)
 Bundle Size:   458KB (down from 340MB in v3.x)
 Dependencies:  19 packages (down from 589 in v3.x)
-Test Coverage: ~56% (1,259 tests passing, 100% pass rate)
+Test Coverage: ~56% (1,845 tests passing, 100% pass rate)
 Memory Cost:   $0 (no API calls)
 ```
 
@@ -800,6 +803,22 @@ Memory Cost:   $0 (no API calls)
 
 ---
 
+## 🔒 Security
+
+AutomatosX packages are published with [npm provenance](https://docs.npmjs.com/generating-provenance-statements), providing supply chain security and verifying package authenticity.
+
+You can verify the provenance of any version:
+
+```bash
+npm view @defai.digital/automatosx@latest --json | jq .dist
+```
+
+Look for the `attestations` field which confirms the package was built in GitHub Actions.
+
+For more information, see our [Security Policy](SECURITY.md).
+
+---
+
 ## 🚧 Coming Soon
 
 - Enhanced Claude Code integration