chore(release): 5.0.5 — update pro submodule with 5 new squads

.aiox-core/install-manifest.yaml

@@ -7,8 +7,8 @@
 # - SHA256 hashes for change detection
 # - File types for categorization
 #
-version: 5.0.3
-generated_at: "2026-03-11T15:04:09.395Z"
+version: 5.0.7
+generated_at: "2026-04-15T21:31:44.079Z"
 generator: scripts/generate-install-manifest.js
 file_count: 1090
 files:

.github/workflows/npm-publish.yml

@@ -46,6 +46,9 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PRO_SUBMODULE_TOKEN }}
+          submodules: recursive
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -75,6 +78,9 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PRO_SUBMODULE_TOKEN }}
+          submodules: recursive
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -161,6 +167,9 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PRO_SUBMODULE_TOKEN }}
+          submodules: recursive
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -192,6 +201,8 @@ jobs:
 
       - name: Publish safety gate (INS-4.10)
         run: node bin/utils/validate-publish.js
+        env:
+          AIOX_ENFORCE_PUBLISH_SUBMODULES: 'true'
 
       - name: Check if aiox-core should be published
         id: should-publish
@@ -246,6 +257,9 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PRO_SUBMODULE_TOKEN }}
+          submodules: recursive
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -356,6 +370,9 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PRO_SUBMODULE_TOKEN }}
+          submodules: recursive
 
       - name: Generate release notes
         run: |
@@ -415,4 +432,4 @@ jobs:
               repo: context.repo.repo,
               release_id: context.payload.release.id,
               body: releaseNotes
-            });
+            });

.github/workflows/release.yml

@@ -33,6 +33,9 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PRO_SUBMODULE_TOKEN }}
+          submodules: recursive
 
       - name: Extract version from tag
         id: version
@@ -107,6 +110,9 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PRO_SUBMODULE_TOKEN }}
+          submodules: recursive
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -209,7 +215,7 @@ jobs:
                 owner,
                 repo,
                 workflow_id: 'npm-publish.yml',
-                ref: 'main',
+                ref: '${{ needs.create-release.outputs.tag }}',
                 inputs: {
                   publish_mode: 'stable',
                   packages: 'all'
@@ -234,4 +240,4 @@ jobs:
           else
             echo "❌ Release process encountered issues"
             exit 1
-          fi
+          fi

CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to Synkra AIOX will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.0.5] - 2026-04-12
+
+### Fixed
+
+- Update `pro` submodule pointer from `c90d421` to `8f16e8e` (aiox-pro main at release time).
+- Submodule now includes 12 squads total — adds db-sage, spy, storytelling, claude-code-mastery, aiox-sop.
+- Fixes installation issue where 5 squads were missing after `npx aiox-core install`.
+
 ## [4.2.11] - 2026-02-16
 
 ### Added

bin/utils/validate-publish.js

@@ -24,8 +24,9 @@ const PRO_DIR = path.join(PROJECT_ROOT, 'pro');
 const CRITICAL_FILE = path.join(PRO_DIR, 'license', 'license-api.js');
 const MIN_FILE_COUNT = 50;
 
-// CI environments may not have access to the private pro submodule
+// CI environments may not have access to the private pro submodule unless explicitly enforced.
 const IS_CI = process.env.CI === 'true' || process.env.GITHUB_ACTIONS === 'true';
+const ENFORCE_SUBMODULES = process.env.AIOX_ENFORCE_PUBLISH_SUBMODULES === 'true';
 
 let passed = true;
 let fileCount = 0;
@@ -34,7 +35,7 @@ let fileCount = 0;
 console.log('--- Publish Safety Gate (INS-4.10) ---\n');
 
 if (!fs.existsSync(PRO_DIR)) {
-  if (IS_CI) {
+  if (IS_CI && !ENFORCE_SUBMODULES) {
     console.log('SKIP: pro/ directory not available (CI — private submodule requires separate access token)');
   } else {
     console.error('FAIL: pro/ directory does not exist.');
@@ -44,7 +45,7 @@ if (!fs.existsSync(PRO_DIR)) {
 } else {
   const entries = fs.readdirSync(PRO_DIR).filter(e => e !== '.git');
   if (entries.length === 0) {
-    if (IS_CI) {
+    if (IS_CI && !ENFORCE_SUBMODULES) {
       console.log('SKIP: pro/ submodule empty (CI — private submodule requires separate access token)');
     } else {
       console.error('FAIL: pro/ submodule not initialized (directory is empty).');
@@ -58,7 +59,7 @@ if (!fs.existsSync(PRO_DIR)) {
 
 // Check 2: Critical file exists
 if (!fs.existsSync(CRITICAL_FILE)) {
-  if (IS_CI) {
+  if (IS_CI && !ENFORCE_SUBMODULES) {
     console.log('SKIP: pro/license/license-api.js not available (CI — private submodule)');
   } else {
     console.error('FAIL: pro/license/license-api.js not found.');

package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiox-core",
-  "version": "5.0.3",
+  "version": "5.0.7",
   "description": "Synkra AIOX: AI-Orchestrated System for Full Stack Development - Core Framework",
   "bin": {
     "aiox": "bin/aiox.js",