@techwavedev/agi-agent-kit 1.3.6 → 1.5.0

package/CHANGELOG.md

@@ -5,6 +5,114 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.5.0] - 2026-02-20
+
+### Added
+
+- **Smart Init Wizard** — Complete overhaul of `npx init` with a guided, step-by-step setup experience:
+  - **Existing install detection** — Reads `.agi-version` stamp; offers `Update` (preserve `.env`), `Reinstall` (full overwrite), or `Cancel`. Shows installed vs incoming version with downgrade warning.
+  - **Install scope prompt** — Choose between project-local (current dir) or global (`~/.agent` + platform symlinks) with a compatibility table and pitfalls disclaimer.
+  - **Smart backup** — Scans files that would be overwritten before touching anything. For global installs, also detects real platform dirs that would be replaced by symlinks. Saves timestamped backup.
+  - **Custom domain pack selection** — New `4. custom` option shows all 15 skill domains with ■ professional and ■ community skill counts, supports comma/range multi-select (`1,3,7-9`, `all`).
+  - **Service-aware memory setup** — Detects Ollama, Docker, and Qdrant before asking. If a service is missing, asks whether it's not installed yet (shows install link) or running on a custom URL (prompts for URL + API key, verifies connectivity).
+  - **Agent Teams prompt** — Explicit opt-in to `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS` with explanation and safe merge into `.claude/settings.json`.
+  - **Uninstall script** — Global installs generate `~/.agent/uninstall-agi.sh`, a ready-to-run script that removes all symlinks and the install directory.
+  - **Version stamp** — Writes `.agi-version` after every install/update.
+  - **Configurable final summary** — Shows exactly what was configured (memory, Agent Teams, MCP) and what manual steps remain (plugins, MCP servers).
+
+### Changed
+
+- **`verifyMemorySetup()`** — Now returns `true`/`false` so the final message correctly shows "Memory is READY" vs "start services" only when relevant.
+- **`writeEnvFile()`** — Now writes the actual Qdrant URL, Ollama URL, and API key entered during setup instead of always defaulting to localhost.
+- **`copySkills()`** — Refactored to share a helper. Custom pack installs core first then resolves each selected domain from both `knowledge/` and `extended/` tiers.
+- **Platform setup** (`runPlatformSetup`) — Now runs _after_ the new `promptPlatformFeatures` step so user intent is captured before platform scripts apply settings.
+
+### Fixed
+
+- **Next steps message** — No longer suggests starting services when they were already verified during install.
+- **`memoryVerified` bug** — Was referenced but never assigned; `verifyMemorySetup()` return value is now captured.
+
+## [1.4.2]
+
+- **Fixed README links** — ./skills/SKILLS_CATALOG.md updated to ./templates/skills/SKILLS_CATALOG.md (closes #15)
+- **Removed Stitch Nested Duplicates** — Removed nested design-md/design-md, react-components/react-components, stitch-loop/stitch-loop (closes #16) - 2026-02-20
+
+### Added
+
+- **Workflow Engine** — `execution/workflow_engine.py` — executes multi-skill playbooks from `data/workflows.json` with state persistence, progress tracking, and branching logic (closes #13)
+- **Playbook Protocol in AGENTS.md** — Agents now know how to discover, start, and step through playbooks via the `/playbook` command
+- **4 Missing Slash Commands** — Created `setup.md`, `setup-memory.md`, `update.md`, `checkup.md` workflow files (closes #8)
+- **All 19 Agent Personas Documented** — README now lists all 19 agents instead of only 8 (closes #9)
+
+### Fixed
+
+- **README Skill Counts** — 853→878 (was stale since v1.3.7); breakdown: 4 core + 89 knowledge + 785 extended (closes #6)
+- **README Platform Counts** — Fixed inconsistencies (4/8/9) to consistent 9 platforms everywhere (closes #10)
+- **README Trigger Keywords** — Fixed ghost skill names (`aws`→`aws-skills`, `aws-terraform`→`terraform-skill`, removed `consul`/`opensearch` EC-scoped refs) (closes #11)
+- **10 Skills Missing AGI Framework Integration** — Added `🧠 AGI Framework Integration` section to 10 knowledge skills that lacked it (closes #7)
+- **init.js Skill Counts** — Updated 793→785 to match actual after removals
+- **SKILLS_CATALOG.md Header** — Updated 886→878 to match actual
+
+### Removed
+
+- **8 Duplicate Skills** — Finally removed 8 skills that v1.3.7 CHANGELOG claimed were removed but still existed (closes #12):
+  - `pptx-official`, `docx-official` (duplicates of `pptx`, `docx`)
+  - `brand-guidelines-community`, `brand-guidelines-anthropic` (merged into `brand-guidelines`)
+  - `internal-comms-community`, `internal-comms-anthropic` (merged into `internal-comms`)
+  - `mcp-builder-ms`, `skill-creator-ms` (merged into `mcp-builder`, `skill-creator`)
+- **Skill Count** — 886→878 (net -8 duplicates)
+
+## [1.4.1] - 2026-02-20
+
+### Added
+
+- **11 New Upstream Skills** — Imported and adapted from `antigravity-awesome-skills` latest:
+  - `crypto-bd-agent` — Autonomous crypto business development patterns
+  - `dbos-golang`, `dbos-python`, `dbos-typescript` — DBOS durable workflow SDKs
+  - `ddd-context-mapping`, `ddd-strategic-design`, `ddd-tactical-patterns`, `domain-driven-design` — Domain-Driven Design suite
+  - `laravel-expert`, `laravel-security-audit` — Laravel development and security
+  - `react-flow-architect` — ReactFlow interactive graph applications
+- **Release Gate UX** — Added progress indicators to secret scanning and syntax checking
+
+### Fixed
+
+- **Skill Count Update** — Total skills 875→886, Extended 782→793
+
+## [1.4.0] - 2026-02-20
+
+### Added
+
+- **Workflows Metadata** — Added `data/workflows.json` with 4 guided multi-skill playbooks:
+  - `ship-saas-mvp` — 5-step SaaS delivery
+  - `security-audit-web-app` — 4-step AppSec review
+  - `build-ai-agent-system` — 4-step AI agent design
+  - `qa-browser-automation` — 3-step E2E testing
+
+### Fixed
+
+- **Skill Count Correction** — Updated SKILLS_CATALOG.md and init.js from stale 862/76 to actual 875/89. Core: 4, Knowledge (Medium): 89, Extended (Full): 782.
+
+## [1.3.8] - 2026-02-20
+
+### Fixed
+
+- **Memory System Path Resolution** — Fixed `ModuleNotFoundError` for `embedding_utils` in `memory_manager.py` and `session_init.py` by implementing an adaptive multi-candidate path approach. This ensures correct script initialization inside natively customized workspaces and `npx`-bootstrapped agent projects.
+
+## [1.3.7] - 2026-02-17
+
+### Fixed
+
+- **Skill Conflict Resolution** — Resolved 8 conflicting skill pairs detected in Gemini CLI:
+  - **6 duplicates removed**: `xlsx-official`, `pdf-official`, `pptx-official`, `docx-official`, `brand-guidelines-community`, `internal-comms-community` (identical SKILL.md content, only `__pycache__` differed)
+  - **2 MS-specialized skills merged**: `mcp-builder-ms` → `mcp-builder` (added C#/.NET SDK, Azure MCP ecosystem, Foundry remote MCP), `skill-creator-ms` → `skill-creator` (added Azure SDK Appendix with auth patterns, verb patterns, product categories)
+  - **2 skills renamed**: `brand-guidelines-anthropic` → `brand-guidelines`, `internal-comms-anthropic` → `internal-comms`
+
+### Changed
+
+- **Skill count**: 861 → 853 (8 redundant skill directories removed, 0 content lost)
+- **`mcp-builder`**: Now includes Microsoft MCP ecosystem section (Azure MCP Server, Foundry MCP, Fabric MCP), C#/.NET language support, and transport selection tables
+- **`skill-creator`**: Now includes Azure SDK Skill Patterns appendix with DefaultAzureCredential patterns, standard verb patterns, and product area categories
+
 ## [1.3.6] - 2026-02-16
 
 ### Security

package/README.md

@@ -24,7 +24,7 @@ Most AI coding setups give you a prompt and hope for the best. AGI Agent Kit giv
 
 - 🧠 **Hybrid Memory** — Qdrant vectors + BM25 keywords: semantic similarity for concepts, exact matching for error codes and IDs (90-100% token savings)
 - 🎯 **19 Specialist Agents** — Domain-bounded experts (Frontend, Backend, Security, Mobile, Game Dev...) with enforced file ownership
-- ⚡ **861 Curated Skills** — 4 core + 75 professional + 782 community skills across 16 domain categories
+- ⚡ **878 Curated Skills** — 4 core + 89 professional + 785 community skills across 16 domain categories
 - 🔒 **Verification Gates** — No task completes without evidence. TDD enforcement. Two-stage code review.
 - 🌐 **9 Platforms, One Config** — Write once, run on Claude Code, Gemini CLI, Codex CLI, Cursor, Copilot, OpenCode, AdaL CLI, Antigravity IDE, OpenClaw
 
@@ -42,29 +42,34 @@ Scaffold a new agent workspace in seconds:
 
 ```bash
 npx @techwavedev/agi-agent-kit init
-```
-
-You'll be prompted to choose a pack:
-
-- **core** — 4 essential skills (webcrawler, pdf-reader, qdrant-memory, documentation)
-- **medium** — Core + 75 specialized skills in 16 categories + `.agent/` structure (API, Security, Design, Architecture)
-- **full** — Complete suite: Medium + 782 community skills from [antigravity-awesome-skills](https://github.com/sickn33/antigravity-awesome-skills) (861 total)
-
-After installation, run the **one-shot setup wizard** to auto-configure your environment:
 
-```bash
-python3 skills/plugin-discovery/scripts/platform_setup.py --project-dir .
+# Or install globally to ~/.agent to share skills across projects
+npx @techwavedev/agi-agent-kit init --global
 ```
 
-This detects your platform, scans the project stack, and configures everything with a single confirmation.
+You'll be guided through an interactive wizard:
+
+1. **Existing install check** — detects a prior install and offers Update / Reinstall / Cancel
+2. **Install scope** — project-local (current dir) or global (`~/.agent` shared across projects)
+3. **Smart backup** — scans files at risk and creates a timestamped backup before touching anything
+4. **Pack selection** — choose skills to install:
+   - **core** — 4 essential skills (webcrawler, pdf-reader, qdrant-memory, documentation)
+   - **medium** — Core + 89 professional skills in 16 categories + `.agent/` structure
+   - **full** — Everything: Medium + 785 community skills (878 total)
+   - **custom** — Core + you pick specific domains (AI Agents, DevOps, Security, Frontend, etc.)
+5. **Memory setup** — detects Ollama/Docker/Qdrant; if missing, asks whether to install locally or use a custom URL (supports Qdrant Cloud, remote servers)
+6. **Agent Teams** — opt-in to parallel multi-agent execution (writes `.claude/settings.json`)
+7. **Summary** — shows exactly what was configured vs what needs manual action
 
-Then **boot the memory system** for automatic token savings:
+After installation the wizard shows your next steps, including:
 
 ```bash
+# Boot the memory system (verifies Qdrant + Ollama, auto-fixes issues)
 python3 execution/session_boot.py --auto-fix
-```
 
-This checks Qdrant, Ollama, embedding models, and collections — auto-fixing any issues.
+# Run the platform setup wizard (auto-configures your AI platform)
+python3 skills/plugin-discovery/scripts/platform_setup.py --project-dir .
+```
 
 ---
 
@@ -73,7 +78,7 @@ This checks Qdrant, Ollama, embedding models, and collections — auto-fixing an
 | Feature                       | Description                                                                                   |
 | ----------------------------- | --------------------------------------------------------------------------------------------- |
 | **Deterministic Execution**   | Separates business logic (Python scripts) from AI reasoning (Directives)                      |
-| **Modular Skill System**      | 861 plug-and-play skills across 3 tiers, organized in 16 domain categories                    |
+| **Modular Skill System**      | 878 plug-and-play skills across 3 tiers, organized in 16 domain categories                    |
 | **Structured Plan Execution** | Batch or subagent-driven execution with two-stage review (spec + quality)                     |
 | **TDD Enforcement**           | Iron-law RED-GREEN-REFACTOR cycle — no production code without failing test                   |
 | **Verification Gates**        | Evidence before claims — no completion without fresh verification output                      |
@@ -96,15 +101,15 @@ The agi framework adopts all best patterns from [obra/superpowers](https://githu
 | Systematic Debugging         |        ✅        | ✅ Adapted + `debugger` agent  |
 | Verification Gates           |        ✅        | ✅ Adapted + 12 audit scripts  |
 | Two-Stage Code Review        |        ✅        |  ✅ Adapted into orchestrator  |
-| Multi-Platform Orchestration |  ❌ Claude only  |         ✅ 4 platforms         |
+| Multi-Platform Orchestration |  ❌ Claude only  |         ✅ 9 platforms         |
 | Semantic Memory (Qdrant)     |        ❌        |    ✅ 90-100% token savings    |
 | 19 Specialist Agents         |        ❌        |      ✅ Domain boundaries      |
 | Agent Boundary Enforcement   |        ❌        |     ✅ File-type ownership     |
 | Dynamic Question Generation  |        ❌        |   ✅ Trade-offs + priorities   |
 | Memory-First Protocol        |        ❌        |       ✅ Auto cache-hit        |
-| Skill Creator + Catalog      |        ❌        |    ✅ 861 composable skills    |
+| Skill Creator + Catalog      |        ❌        |    ✅ 878 composable skills    |
 | Platform Setup Wizard        |        ❌        |       ✅ One-shot config       |
-| Multi-Platform Symlinks      |  ❌ Claude only  |         ✅ 8 platforms         |
+| Multi-Platform Symlinks      |  ❌ Claude only  |         ✅ 9 platforms         |
 
 ---
 
@@ -220,10 +225,10 @@ your-project/
 ├── CLAUDE.md → AGENTS.md
 ├── OPENCODE.md → AGENTS.md
 ├── COPILOT.md → AGENTS.md
-├── skills/                # Up to 861 skills (depends on pack)
+├── skills/                # Up to 878 skills (depends on pack)
 │   ├── webcrawler/        # Documentation harvesting
 │   ├── qdrant-memory/     # Semantic caching & memory
-│   └── ...                # 860 more skills in full pack
+│   └── ...                # 877 more skills in full pack
 ├── .claude/skills → skills/   # Platform-specific symlinks
 ├── .gemini/skills → skills/
 ├── .codex/skills → skills/
@@ -341,6 +346,8 @@ If you need to reinstall or update dependencies:
 
 ```bash
 npx @techwavedev/agi-agent-kit init --pack=full
+# To install globally instead of per-project:
+npx @techwavedev/agi-agent-kit init --pack=full --global
 ```
 
 ### Auto-detect platform and configure environment
@@ -408,43 +415,54 @@ Use these keywords, commands, and phrases to trigger specific capabilities:
 
 ### Agent Mentions (`@agent`)
 
-| Mention                | Specialist              | When To Use                               |
-| ---------------------- | ----------------------- | ----------------------------------------- |
-| `@orchestrator`        | Multi-agent coordinator | Complex multi-domain tasks                |
-| `@project-planner`     | Planning specialist     | Roadmaps, task breakdowns, phase planning |
-| `@frontend-specialist` | UI/UX architect         | Web interfaces, React, Next.js            |
-| `@mobile-developer`    | Mobile specialist       | iOS, Android, React Native, Flutter       |
-| `@backend-specialist`  | API/DB engineer         | Server-side, databases, APIs              |
-| `@security-auditor`    | Security expert         | Vulnerability scanning, audits, hardening |
-| `@debugger`            | Debug specialist        | Complex bug investigation                 |
-| `@game-developer`      | Game dev specialist     | 2D/3D games, multiplayer, VR/AR           |
+| Mention                   | Specialist              | When To Use                                |
+| ------------------------- | ----------------------- | ------------------------------------------ |
+| `@orchestrator`           | Multi-agent coordinator | Complex multi-domain tasks                 |
+| `@project-planner`        | Planning specialist     | Roadmaps, task breakdowns, phase planning  |
+| `@frontend-specialist`    | UI/UX architect         | Web interfaces, React, Next.js             |
+| `@backend-specialist`     | API/DB engineer         | Server-side, databases, APIs               |
+| `@mobile-developer`       | Mobile specialist       | iOS, Android, React Native, Flutter        |
+| `@security-auditor`       | Security expert         | Vulnerability scanning, audits, hardening  |
+| `@debugger`               | Debug specialist        | Complex bug investigation                  |
+| `@game-developer`         | Game dev specialist     | 2D/3D games, multiplayer, VR/AR            |
+| `@devops-engineer`        | DevOps specialist       | CI/CD, containers, cloud infrastructure    |
+| `@database-architect`     | Database specialist     | Schema design, migrations, optimization    |
+| `@documentation-writer`   | Docs specialist         | Technical writing, API docs, READMEs       |
+| `@test-engineer`          | Testing specialist      | Test strategy, automation, coverage        |
+| `@qa-automation-engineer` | QA specialist           | E2E testing, regression, quality gates     |
+| `@performance-optimizer`  | Performance specialist  | Profiling, bottlenecks, optimization       |
+| `@seo-specialist`         | SEO specialist          | Search optimization, meta tags, rankings   |
+| `@penetration-tester`     | Pen testing specialist  | Red team exercises, exploit verification   |
+| `@product-manager`        | Product specialist      | Requirements, user stories, prioritization |
+| `@code-archaeologist`     | Legacy code specialist  | Understanding old codebases, migrations    |
+| `@explorer-agent`         | Discovery specialist    | Codebase exploration, dependency mapping   |
 
 ### Skill Trigger Keywords (Natural Language)
 
-| Category           | Trigger Words / Phrases                                                | Skill Activated                     |
-| ------------------ | ---------------------------------------------------------------------- | ----------------------------------- |
-| **Memory**         | "don't use cache", "no cache", "skip memory", "fresh"                  | Memory opt-out                      |
-| **Research**       | "research my docs", "check my notebooks", "deep search", "@notebooklm" | `notebooklm-rag`                    |
-| **Documentation**  | "update docs", "regenerate catalog", "sync documentation"              | `documentation`                     |
-| **Quality**        | "lint", "format", "check", "validate", "static analysis"               | `lint-and-validate`                 |
-| **Testing**        | "write tests", "run tests", "TDD", "test coverage"                     | `testing-patterns` / `tdd-workflow` |
-| **TDD**            | "test first", "red green refactor", "failing test"                     | `test-driven-development`           |
-| **Plan Execution** | "execute plan", "run the plan", "batch execution"                      | `executing-plans`                   |
-| **Verification**   | "verify", "prove it works", "evidence", "show me the output"           | `verification-before-completion`    |
-| **Debugging**      | "debug", "root cause", "investigate", "why is this failing"            | `systematic-debugging`              |
-| **Architecture**   | "design system", "architecture decision", "ADR", "trade-off"           | `architecture`                      |
-| **Security**       | "security scan", "vulnerability", "audit", "OWASP"                     | `red-team-tactics`                  |
-| **Performance**    | "lighthouse", "bundle size", "core web vitals", "profiling"            | `performance-profiling`             |
-| **Design**         | "design UI", "color scheme", "typography", "layout"                    | `frontend-design`                   |
-| **Deployment**     | "deploy", "rollback", "release", "CI/CD"                               | `deployment-procedures`             |
-| **API**            | "REST API", "GraphQL", "tRPC", "API design"                            | `api-patterns`                      |
-| **Database**       | "schema design", "migration", "query optimization"                     | `database-design`                   |
-| **Planning**       | "plan this", "break down", "task list", "requirements"                 | `plan-writing`                      |
-| **Brainstorming**  | "explore options", "what are the approaches", "pros and cons"          | `brainstorming`                     |
-| **Code Review**    | "review this", "code quality", "best practices"                        | `code-review-checklist`             |
-| **i18n**           | "translate", "localization", "RTL", "locale"                           | `i18n-localization`                 |
-| **AWS**            | "terraform", "EKS", "Lambda", "S3", "CloudFront"                       | `aws` / `aws-terraform`             |
-| **Infrastructure** | "Consul", "service mesh", "OpenSearch"                                 | `consul` / `opensearch`             |
+| Category           | Trigger Words / Phrases                                                | Skill Activated                       |
+| ------------------ | ---------------------------------------------------------------------- | ------------------------------------- |
+| **Memory**         | "don't use cache", "no cache", "skip memory", "fresh"                  | Memory opt-out                        |
+| **Research**       | "research my docs", "check my notebooks", "deep search", "@notebooklm" | `notebooklm-rag`                      |
+| **Documentation**  | "update docs", "regenerate catalog", "sync documentation"              | `documentation`                       |
+| **Quality**        | "lint", "format", "check", "validate", "static analysis"               | `lint-and-validate`                   |
+| **Testing**        | "write tests", "run tests", "TDD", "test coverage"                     | `testing-patterns` / `tdd-workflow`   |
+| **TDD**            | "test first", "red green refactor", "failing test"                     | `test-driven-development`             |
+| **Plan Execution** | "execute plan", "run the plan", "batch execution"                      | `executing-plans`                     |
+| **Verification**   | "verify", "prove it works", "evidence", "show me the output"           | `verification-before-completion`      |
+| **Debugging**      | "debug", "root cause", "investigate", "why is this failing"            | `systematic-debugging`                |
+| **Architecture**   | "design system", "architecture decision", "ADR", "trade-off"           | `architecture`                        |
+| **Security**       | "security scan", "vulnerability", "audit", "OWASP"                     | `red-team-tactics`                    |
+| **Performance**    | "lighthouse", "bundle size", "core web vitals", "profiling"            | `performance-profiling`               |
+| **Design**         | "design UI", "color scheme", "typography", "layout"                    | `frontend-design`                     |
+| **Deployment**     | "deploy", "rollback", "release", "CI/CD"                               | `deployment-procedures`               |
+| **API**            | "REST API", "GraphQL", "tRPC", "API design"                            | `api-patterns`                        |
+| **Database**       | "schema design", "migration", "query optimization"                     | `database-design`                     |
+| **Planning**       | "plan this", "break down", "task list", "requirements"                 | `plan-writing`                        |
+| **Brainstorming**  | "explore options", "what are the approaches", "pros and cons"          | `brainstorming`                       |
+| **Code Review**    | "review this", "code quality", "best practices"                        | `code-review-checklist`               |
+| **i18n**           | "translate", "localization", "RTL", "locale"                           | `i18n-localization`                   |
+| **AWS**            | "terraform", "EKS", "Lambda", "S3", "CloudFront"                       | `aws-skills` / `terraform-skill`      |
+| **Infrastructure** | "service mesh", "Kubernetes", "Helm"                                   | `docker-expert` / `server-management` |
 
 ### Memory System Commands
 
@@ -462,7 +480,7 @@ Use these keywords, commands, and phrases to trigger specific capabilities:
 ## 📚 Documentation
 
 - **[AGENTS.md](./AGENTS.md)** — Complete architecture and operating principles
-- **[skills/SKILLS_CATALOG.md](./skills/SKILLS_CATALOG.md)** — Skill catalog
+- **[skills/SKILLS_CATALOG.md](./templates/skills/SKILLS_CATALOG.md)** — Skill catalog
 - **[CHANGELOG.md](./CHANGELOG.md)** — Version history
 - **[THIRD-PARTY-LICENSES.md](./THIRD-PARTY-LICENSES.md)** — Third-party attributions
 
@@ -470,7 +488,7 @@ Use these keywords, commands, and phrases to trigger specific capabilities:
 
 ## 🤝 Community Skills & Credits
 
-The **Full** tier includes 782 community skills adapted from the [Antigravity Awesome Skills](https://github.com/sickn33/antigravity-awesome-skills) project (v5.4.0) by [@sickn33](https://github.com/sickn33), distributed under the MIT License.
+The **Full** tier includes 774 community skills adapted from the [Antigravity Awesome Skills](https://github.com/sickn33/antigravity-awesome-skills) project (v5.4.0) by [@sickn33](https://github.com/sickn33), distributed under the MIT License.
 
 This collection aggregates skills from 50+ open-source contributors and organizations including Anthropic, Microsoft, Vercel Labs, Supabase, Trail of Bits, Expo, Sentry, Neon, fal.ai, and many more. For the complete attribution ledger, see [SOURCES.md](https://github.com/sickn33/antigravity-awesome-skills/blob/main/docs/SOURCES.md).
 
@@ -484,7 +502,18 @@ If these community skills help you, consider [starring the original repo](https:
 
 ---
 
-## 🛡️ Security
+## �️ Roadmap
+
+| Feature                             | Status     | Description                                                                                                                                                                                                                                                           |
+| ----------------------------------- | ---------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **Federated Agent Memory**          | 🔬 Design  | Cross-agent knowledge sharing via project-scoped Qdrant collections. Agents working on the same project read each other's decisions, errors, and patterns — building collective intelligence across sessions and platforms.                                           |
+| **Blockchain-Authenticated Memory** | 🔬 Design  | Cryptographic trust layer for shared memory using enterprise blockchains (Hyperledger Fabric, MultiChain, or Quorum) — self-hosted, no fees, no cryptocurrency. Agent writes are signed, content hashes are anchored on-chain, and access is token-gated per project. |
+| **Event-Driven Agent Streaming**    | 🔬 Design  | Real-time agent communication via Kafka/Flink. Agents publish decisions and observations to topics, enabling reactive workflows — e.g., a security agent triggers remediation when a vulnerability scan agent publishes findings.                                     |
+| **Workflow Engine**                 | 📋 Planned | Execute `data/workflows.json` playbooks as guided multi-skill sequences with progress tracking and branching logic.                                                                                                                                                   |
+
+---
+
+## �🛡️ Security
 
 This package includes a pre-flight security scanner that checks for private terms before publishing. All templates are sanitized for public use.