@tritard/waterbrother 0.5.0 → 0.5.5

package/README.md

@@ -110,13 +110,15 @@ It is Vercel-ready via `vercel.json` (clean URLs, no build step required).
 
 ## Quick start
 
-User install (after the npm package is published):
+User install:
 
 ```bash
 npm install -g @tritard/waterbrother
 waterbrother
 ```
 
+Partners and maintainers ship updates through GitHub Actions, not from personal laptops. The package publish workflow runs on version tags and uses the repository `NPM_TOKEN` secret.
+
 Source install for contributors:
 
 ```bash
@@ -184,6 +186,35 @@ waterbrother "Search the web for the latest xAI API docs about vision support an
 /open 1
 ```
 
+## Release flow
+
+Partners should ship updates by pushing a version tag, not by running `npm publish` locally.
+
+1. Add an npm publish token as the repository secret `NPM_TOKEN`. The token must be able to publish `@tritard/waterbrother`.
+2. Bump the package version locally:
+
+```bash
+npm version patch
+```
+
+Use `minor` or `major` when appropriate.
+
+3. Push `main` and the new tag:
+
+```bash
+git push origin main --tags
+```
+
+4. GitHub Actions runs `.github/workflows/publish.yml` and publishes the package after `npm ci`, `npm run check`, and `npm run smoke` pass.
+
+5. Users update with:
+
+```bash
+npm install -g @tritard/waterbrother@latest
+```
+
+This lets partners such as Umair and Austin ship releases without using the publisher's local machine or Touch ID.
+
 Long-running session controls:
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tritard/waterbrother",
-  "version": "0.5.0",
+  "version": "0.5.5",
   "description": "Waterbrother: Grok-powered coding CLI with local tools, sessions, operator modes, and approval controls",
   "type": "module",
   "bin": {