@aiwg/cli 2026.10.10 → 2026.10.12

package/agentic/code/providers/model-capabilities.v1.json

@@ -4,6 +4,9 @@
   "verifiedAt": "2026-07-20",
   "providers": {
     "antigravity": {
+      "sessionEnvAllowlist": [
+        "GEMINI_API_KEY"
+      ],
       "agent": "native",
       "skill": "native",
       "globalChild": "inherited",
@@ -19,7 +22,7 @@
       "invalidPinFallback": "Provider validation/error; never assume fallback",
       "configTarget": "agy launch arguments; custom-agent model tiers are not projected from generic AIWG model ids",
       "artifactFormat": "YAML frontmatter plus Markdown; runtime --model and --effort flags",
-      "verification": "Pinned offline contract (--help/--version only); authenticated model selection was not executed",
+      "verification": "Pinned offline contract (--help/--version only); authenticated model selection was not executed. Session credential evidence: $AIWG_ROOT/docs/cli/sensitive-values.md#provider-recipient-exceptions (#3624).",
       "sourceUrl": "https://antigravity.google/docs/cli/subagents/",
       "verifiedAt": "2026-09-04",
       "workerHealthAdapter": {
@@ -154,7 +157,7 @@
               "Native MCP/client, MSP/ACP, gateway and conversation capabilities do not establish worker authority.",
               "--dangerously-skip-permissions and --remote-control are never part of the direct profile; neither was ever shipped as a new argv-prompt path.",
               "A soft-denied tool permission request (exit 0, stderr notice naming the allow-rule needed) is NOT the same as success; its exact stderr wording is not evidenced from help or changelog, so this is an open, honestly-marked detection gap rather than an invented check (tools/ralph-external/lib/antigravity-adapter.mjs ANTIGRAVITY_SOFT_DENY_RISK_NOTE).",
-              "GEMINI_API_KEY in envAllowlist is a strings-sourced GUESS, not confirmed to authenticate this CLI. Live fix-round-1 probes (D/E, no login present) show a bare run stops at \"Error: authentication required. Run 'agy' to log in, then retry.\" — this is an interactive Google-account login, not a documented env-key or OpenRouter-style flag. The manual smoke run is BLOCKED until an operator completes an interactive `agy` login on the target host.",
+              "GEMINI_API_KEY is documented at https://antigravity.google/docs/install/ (reviewed 2026-10-26): settings.json must also set modelProvider to gemini; the key alone has no effect. Earlier 1.3.3 probes only exercised missing account login. This documentation confirms the credential name, not authenticated execution or qualification of this version-bound worker profile.",
               "The 1.3.3 --effort enum (low|medium|high|xhigh|max) supersedes the stale 1.1.26-pinned three-value set in tools/providers/antigravity-transport.mjs (a separate, unedited legacy transport used by the MCP/doctor bridge, not this direct-shell profile).",
               "Flag validation happens BEFORE auth: live probe F, `agy --print=x --input-format bogus --output-format stream-json`, returned \"Error: unknown --input-format \\\"bogus\\\" (want text or stream-json)\" without reaching the auth stop, confirming --input-format is validated against exactly {text, stream-json} independent of login state.",
               "The brief reaches agy through adapter-frame: the installed buildWorkerStdinFrame hook supplies exactly one NDJSON user message and EOF. The stdin control stays unqualified pending one authenticated smoke run."
@@ -865,6 +868,9 @@
       }
     },
     "cursor": {
+      "sessionEnvAllowlist": [
+        "CURSOR_API_KEY"
+      ],
       "agent": "native",
       "skill": "unsupported",
       "globalChild": "inherited",
@@ -873,7 +879,7 @@
       "invalidPinFallback": "Plan/admin fallback may apply; record observed result",
       "configTarget": ".cursor/agents/*.md",
       "artifactFormat": "YAML frontmatter plus Markdown",
-      "verification": "Schema fixture and entitled Cursor invocation",
+      "verification": "Schema fixture and entitled Cursor invocation. Session credential evidence: $AIWG_ROOT/docs/cli/sensitive-values.md#provider-recipient-exceptions (#3624).",
       "sourceUrl": "https://cursor.com/docs/subagents",
       "verifiedAt": "2026-07-20",
       "workerHealthAdapter": {
@@ -1465,6 +1471,9 @@
       }
     },
     "warp": {
+      "sessionEnvAllowlist": [
+        "WARP_API_KEY"
+      ],
       "agent": "global-only",
       "skill": "unsupported",
       "globalChild": "native",
@@ -1473,7 +1482,7 @@
       "invalidPinFallback": "Profile availability dependent",
       "configTarget": "Warp agent profile or run configuration",
       "artifactFormat": "Saved profile / run control plane",
-      "verification": "Inspect active profile and run metadata",
+      "verification": "Inspect active profile and run metadata. Session credential evidence: $AIWG_ROOT/docs/cli/sensitive-values.md#provider-recipient-exceptions (#3624).",
       "sourceUrl": "https://docs.warp.dev/agent-platform/capabilities/agent-profiles-permissions",
       "verifiedAt": "2026-07-20",
       "workerHealthAdapter": {
@@ -2284,6 +2293,7 @@
       }
     },
     "windsurf": {
+      "sessionEnvAllowlist": [],
       "agent": "unsupported",
       "skill": "unsupported",
       "globalChild": "inherited",
@@ -2292,7 +2302,7 @@
       "invalidPinFallback": "No portable custom-child selector",
       "configTarget": "No supported portable artifact field",
       "artifactFormat": "Informational policy only",
-      "verification": "Assert unsupported fields are omitted",
+      "verification": "Assert unsupported fields are omitted. Session environment is explicitly empty: desktop/cloud login owns authentication; no CLI credential variable is evidenced. Coverage-only: no worker execution or qualified worker adapter. See $AIWG_ROOT/docs/cli/sensitive-values.md#provider-recipient-exceptions (#3624).",
       "sourceUrl": "https://docs.devin.ai/desktop/cascade/skills",
       "verifiedAt": "2026-07-20",
       "workerHealthCoverage": {
@@ -2312,6 +2322,22 @@
       }
     },
     "openclaw": {
+      "sessionEnvAllowlist": [
+        "OPENAI_API_KEY",
+        "ANTHROPIC_API_KEY",
+        "ANTHROPIC_OAUTH_TOKEN",
+        "GEMINI_API_KEY",
+        "GOOGLE_API_KEY",
+        "OPENROUTER_API_KEY",
+        "MISTRAL_API_KEY",
+        "XAI_API_KEY",
+        "OPENCLAW_HOME",
+        "OPENCLAW_STATE_DIR",
+        "OPENCLAW_CONFIG_PATH",
+        "OPENCLAW_GATEWAY_URL",
+        "OPENCLAW_GATEWAY_TOKEN",
+        "OPENCLAW_GATEWAY_PASSWORD"
+      ],
       "agent": "native",
       "skill": "unsupported",
       "globalChild": "native",
@@ -2320,7 +2346,7 @@
       "invalidPinFallback": "Provider/account fallback must be observed",
       "configTarget": "OpenClaw subagent configuration",
       "artifactFormat": "JSON/JSONC runtime configuration",
-      "verification": "Inspect resolved subagent metadata",
+      "verification": "Inspect resolved subagent metadata. Session credential evidence: $AIWG_ROOT/docs/cli/sensitive-values.md#provider-recipient-exceptions (#3624).",
       "sourceUrl": "https://docs.openclaw.ai/tools/subagents",
       "verifiedAt": "2026-07-20",
       "workerHealthAdapter": {
@@ -2508,6 +2534,7 @@
       }
     },
     "grokbot": {
+      "sessionEnvAllowlist": [],
       "agent": "unsupported",
       "skill": "unsupported",
       "globalChild": "informational",
@@ -2516,7 +2543,7 @@
       "invalidPinFallback": "Report unsupported; do not fabricate xAI/Grok model pins as native",
       "configTarget": "Grok Bot has no verified AIWG-owned model config path",
       "artifactFormat": "Informational only",
-      "verification": "Confirm steward models --route --provider grokbot emits unsupported/informational",
+      "verification": "Confirm steward models --route --provider grokbot emits unsupported/informational. Session environment is explicitly empty: desktop/cloud login owns authentication; no CLI credential variable is evidenced. Coverage-only: no worker execution or qualified worker adapter. See $AIWG_ROOT/docs/cli/sensitive-values.md#provider-recipient-exceptions (#3624).",
       "sourceUrl": "https://github.com/jmagly/aiwg/blob/main/docs/architecture/adr-grokbot-provider-target.md",
       "verifiedAt": "2026-09-15",
       "workerHealthCoverage": {
@@ -2536,6 +2563,10 @@
       }
     },
     "grok-build": {
+      "sessionEnvAllowlist": [
+        "XAI_API_KEY",
+        "GROK_HOME"
+      ],
       "agent": "inherited",
       "skill": "inherited",
       "globalChild": "native",
@@ -2544,7 +2575,7 @@
       "invalidPinFallback": "Report the unavailable alias; use the sole discovered model only when exactly one is available",
       "configTarget": "$GROK_HOME/config.toml [models] and [model.<alias>] (read-only discovery)",
       "artifactFormat": "Grok Build model alias",
-      "verification": "grok inspect --json plus bounded parsing of model fields from reported config layers",
+      "verification": "grok inspect --json plus bounded parsing of model fields from reported config layers. Session credential evidence: $AIWG_ROOT/docs/cli/sensitive-values.md#provider-recipient-exceptions (#3624).",
       "sourceUrl": "https://docs.x.ai/build/settings",
       "verifiedAt": "2026-09-21",
       "workerHealthAdapter": {
@@ -2736,6 +2767,25 @@
       }
     },
     "hermes": {
+      "sessionEnvAllowlist": [
+        "OPENAI_API_KEY",
+        "ANTHROPIC_API_KEY",
+        "ANTHROPIC_TOKEN",
+        "CLAUDE_CODE_OAUTH_TOKEN",
+        "GEMINI_API_KEY",
+        "GOOGLE_API_KEY",
+        "OPENROUTER_API_KEY",
+        "GROQ_API_KEY",
+        "MISTRAL_API_KEY",
+        "XAI_API_KEY",
+        "DEEPSEEK_API_KEY",
+        "OPENAI_BASE_URL",
+        "ANTHROPIC_BASE_URL",
+        "OPENROUTER_BASE_URL",
+        "CUSTOM_BASE_URL",
+        "HERMES_HOME",
+        "HERMES_INFERENCE_PROVIDER"
+      ],
       "agent": "global-only",
       "skill": "unsupported",
       "globalChild": "native",
@@ -2744,7 +2794,7 @@
       "invalidPinFallback": "Provider resolution is global; report actual model",
       "configTarget": "Hermes delegation configuration",
       "artifactFormat": "Global CLI/config setting",
-      "verification": "Inspect Hermes delegation configuration",
+      "verification": "Inspect Hermes delegation configuration. Session credential evidence: $AIWG_ROOT/docs/cli/sensitive-values.md#provider-recipient-exceptions (#3624).",
       "sourceUrl": "https://hermes-agent.nousresearch.com/docs/user-guide/features/delegation",
       "verifiedAt": "2026-07-20",
       "workerHealthAdapter": {
@@ -2927,6 +2977,19 @@
       }
     },
     "openhuman": {
+      "sessionEnvAllowlist": [
+        "OPENHUMAN_CORE_TOKEN",
+        "OPENHUMAN_CORE_RPC_URL",
+        "OPENHUMAN_CORE_HOST",
+        "OPENHUMAN_CORE_PORT",
+        "OPENHUMAN_WORKSPACE",
+        "OPENHUMAN_DOTENV_PATH",
+        "OPENHUMAN_KEYRING_MASTER_KEY",
+        "OPENHUMAN_KEYRING_MASTER_KEY_FILE",
+        "OPENHUMAN_APP_ENV",
+        "BACKEND_URL",
+        "OPENHUMAN_MODEL"
+      ],
       "agent": "compiled",
       "skill": "unsupported",
       "globalChild": "inherited",
@@ -2935,7 +2998,7 @@
       "invalidPinFallback": "Exact pins validate; semantic hints route dynamically",
       "configTarget": "OpenHuman agent TOML",
       "artifactFormat": "Standalone TOML agent definition",
-      "verification": "Parse against OpenHuman definition schema",
+      "verification": "Parse against OpenHuman definition schema. Session credential evidence: $AIWG_ROOT/docs/cli/sensitive-values.md#provider-recipient-exceptions (#3624).",
       "sourceUrl": "https://github.com/tinyhumansai/openhuman/blob/main/src/openhuman/agent/harness/definition.rs",
       "verifiedAt": "2026-07-20",
       "workerHealthAdapter": {
@@ -3154,6 +3217,7 @@
             "${effort}",
             "--workspace",
             "${workspace}",
+            "--trust-workspace",
             "--approval-mode",
             "never",
             "--approval-judge",
@@ -3246,8 +3310,8 @@
               },
               "trust": {
                 "support": "unqualified",
-                "mapping": "[]",
-                "evidence": "Installed muse exec --help (Muse Code 1.4.12, 2026-10-23); bounded renderer checked on operator qualification; no backend attestation."
+                "mapping": "[\"--trust-workspace\"]",
+                "evidence": "Installed muse exec --help (Muse Code 1.4.12, 2026-10-23); bounded renderer checked on operator qualification; no backend attestation. Tier 0 workspaces are conductor-prepared worker trees the conductor owns, so the profile binds --trust-workspace by default (#3685: untrusted Muse loads project_sources=0 with user skills only and empty hook admission; trusted loads project_sources=1, project skills and hooks)."
               },
               "children": {
                 "support": "unqualified",
@@ -3268,13 +3332,13 @@
               "Live qualification is an open S1 blocker; installed help and synthetic/echo mechanics are not paid inference qualification.",
               "Configured-model events provide runtime-configured identity only, never backend attestation.",
               "Contributor data policy is explicit; shared policy denies contributor models and never silently selects the CLI default.",
-              "Workspace trust defaults off; only a host-qualified trust mapping may load rules/skills. Approval-mode never and approval-judge off retain the sandbox. Muse requires a qualified external boundary.",
+              "Workspace trust is bound on for conductor-prepared worker trees (the conductor owns the worktree), so project rules/skills/hooks load; only a host-qualified trust mapping may change it. Approval-mode never and approval-judge off retain the sandbox. Muse requires a qualified external boundary.",
               "Host qualification must bind an absolute output-schema mapping and include that schema in runtimeFiles.",
               "Muse JSONL strict normalization needs the shared strict-parser hook; the MCP bridge must consume the selected provider parser. MSP is not MCP.",
               "Semantic step/tool completion grammar and native session-log layout remain unavailable; unrelated logs, deltas and CPU cannot establish progress.",
               "Shared version gate: installation requires the raw trimmed banner Muse Code 1.4.4 (1.4.4-R5419.1), but semver selection requires 1.4.4-R5419.1. No normalization exists; keep unqualified until the shared owner binds raw and normalized versions.",
               "Operator qualification approves the installed direct renderer, not authenticated inference or backend model identity.",
-              "Workspace trust defaults off. Only never approval is supported. Explicit unsupported controls block dispatch.",
+              "Workspace trust is on for conductor-prepared worker trees. Only never approval is supported. Explicit unsupported controls block dispatch.",
               "Self-delegation must be explicitly allowed by policy; no native child-denial flag is assumed."
             ],
             "health": {

package/agentic/code/providers/model-catalog.v1.json

@@ -1,7 +1,7 @@
 {
   "$schema": "../../../schemas/models/model-catalog.v1.schema.json",
   "version": "1.0.0",
-  "refreshedAt": "2026-09-21",
+  "refreshedAt": "2026-10-27",
   "staleAfterDays": 90,
   "providers": {
     "antigravity": {
@@ -28,44 +28,94 @@
     "claude": {
       "roles": {
         "reasoning": {
-          "id": "claude-opus-5",
+          "id": "claude-opus-5-5",
           "status": "active",
-          "observed": false
+          "observed": true
         },
         "coding": {
-          "id": "claude-sonnet-5",
+          "id": "claude-sonnet-5-5",
           "status": "active",
-          "observed": false
+          "observed": true
         },
         "efficiency": {
-          "id": "claude-haiku-4-5",
+          "id": "claude-haiku-5-5",
           "status": "active",
-          "observed": false
+          "observed": true
         }
       },
       "sourceUrl": "https://platform.claude.com/docs/en/about-claude/models/overview",
-      "verifiedAt": "2026-09-21"
+      "verifiedAt": "2026-10-27",
+      "tiers": {
+        "flagship": {
+          "id": "claude-fable-5-1",
+          "status": "active",
+          "observed": true,
+          "selection": "user-elected"
+        },
+        "premium": {
+          "id": "claude-opus-5-5",
+          "status": "active",
+          "observed": true
+        },
+        "standard": {
+          "id": "claude-sonnet-5-5",
+          "status": "active",
+          "observed": true
+        },
+        "economy": {
+          "id": "claude-haiku-5-5",
+          "status": "active",
+          "observed": true
+        }
+      },
+      "verified_at": "2026-10-27",
+      "evidence": "Conductor-verified Claude Code harness current model list, 2026-10-27."
     },
     "codex": {
       "roles": {
         "reasoning": {
-          "id": "gpt-5.6-sol",
+          "id": "gpt-6.1-sol",
           "status": "active",
           "observed": true
         },
         "coding": {
-          "id": "gpt-5.6-terra",
+          "id": "gpt-6.1-terra",
           "status": "active",
           "observed": true
         },
         "efficiency": {
-          "id": "gpt-5.6-luna",
+          "id": "gpt-6-luna",
           "status": "active",
           "observed": true
         }
       },
       "sourceUrl": "https://learn.chatgpt.com/docs/models",
-      "verifiedAt": "2026-09-21"
+      "verifiedAt": "2026-10-27",
+      "tiers": {
+        "flagship": {
+          "id": "gpt-6-astra",
+          "status": "active",
+          "observed": true,
+          "selection": "user-elected"
+        },
+        "premium": {
+          "id": "gpt-6.1-sol",
+          "status": "active",
+          "observed": true
+        },
+        "standard": {
+          "id": "gpt-6.1-terra",
+          "status": "active",
+          "observed": true
+        },
+        "economy": {
+          "id": "gpt-6-luna",
+          "status": "active",
+          "observed": true
+        }
+      },
+      "verified_at": "2026-10-27",
+      "evidence": "Conductor-verified Codex CLI local model cache on titan (codex-cli 0.165.0), plus ~/.cache/aiwg/model-catalog.v1.json, 2026-10-27; no network verification by this worker."
     },
     "copilot": {
       "roles": {

package/dist/src/artifacts/binding-target-identity.js

@@ -0,0 +1,51 @@
+/** Resolve source aliases and bundle ownership before rule-target precedence. */
+import fs from 'node:fs';
+import path from 'node:path';
+function realpath(file) {
+    try {
+        return fs.realpathSync(file);
+    }
+    catch {
+        return path.resolve(file);
+    }
+}
+function sourcePath(file, options) {
+    const normalized = file.replace(/\\/g, '/');
+    const anchor = normalized.startsWith('agentic/code/') ? options.packageRoot : options.cwd;
+    return path.resolve(anchor ?? process.cwd(), normalized);
+}
+function identity(file, options) {
+    const absolute = sourcePath(file, options);
+    // Realpath handles symlinks; the supplied mapping handles materialized copies.
+    return realpath(options.logicalPath?.(realpath(absolute)) ?? absolute);
+}
+function inside(root, file) {
+    const relative = path.relative(root, file);
+    return relative === '' || (!path.isAbsolute(relative) && relative !== '..' && !relative.startsWith(`..${path.sep}`));
+}
+export function selectBindingTargetIdentities(entries, options = {}) {
+    const bundle = options.bundleRoot && identity(options.bundleRoot, options);
+    const snapshot = options.bundleRoot && sourcePath(options.bundleRoot, options);
+    const preferred = bundle && snapshot ? entries.filter(entry => inside(snapshot, sourcePath(entry.path, options)) || inside(bundle, identity(entry.path, options))) : [];
+    const candidates = preferred.length ? preferred : entries;
+    const unique = new Map();
+    for (const entry of candidates) {
+        const key = `${entry.type}:${identity(entry.path, options)}`;
+        const previous = unique.get(key);
+        // The projector must receive the entry in the bundle's current snapshot.
+        const inSnapshot = snapshot && inside(snapshot, sourcePath(entry.path, options));
+        if (!previous || inSnapshot)
+            unique.set(key, entry);
+    }
+    return [...unique.values()];
+}
+/** Retain the existing preference for canonical sources over packaged mirrors. */
+export function preferCanonicalBindingTargets(matches) {
+    if (matches.length > 1) {
+        const canonical = matches.filter(entry => !/(^|\/)agentic\/code\/plugins\//.test(entry.path.replace(/\\/g, '/')));
+        if (canonical.length === 1)
+            return canonical;
+    }
+    return matches;
+}
+//# sourceMappingURL=binding-target-identity.js.map

package/dist/src/artifacts/checksum-manifest.js

@@ -89,4 +89,16 @@ export function pruneManifest(manifest, cwd) {
     }
     return removed;
 }
+/** Format change-detection diagnostics from the same counters returned to callers. */
+export function formatManifestStats(stats) {
+    if (stats.checked === 0)
+        return [];
+    const messages = [
+        `  Change detection: ${stats.checked} checked, ${stats.statSkipped} skipped via stat, ${stats.checked - stats.statSkipped} content-read, ${stats.reindexed} re-indexed`,
+    ];
+    if (stats.pruned > 0) {
+        messages.push(`  Pruned ${stats.pruned} stale manifest entries (files no longer on disk)`);
+    }
+    return messages;
+}
 //# sourceMappingURL=checksum-manifest.js.map

package/dist/src/artifacts/index-builder.js

@@ -19,7 +19,7 @@ import { validateGateDocument } from '../gates/schema.js';
 import { INDEX_EXTRACTOR_VERSION, INDEX_VERSION, INDEX_DIR, OPERATIONAL_DISCOVERY_TYPES, PHASE_DIRECTORIES, GRAPH_CONFIGS, TEMPLATE_INDEX_EXTENSIONS, resolveGraphScanDir, loadUserGraphConfigs, loadGlobalGraphConfigs, resolveGraphBackendType, } from './types.js';
 import { parseCitationSidecar, citationResultToEdges, buildRefToPathMap } from './citation-parser.js';
 import { writeIndexFile, resolveIndexDir, loadGraphIndexFile, publishIndexFiles } from './index-reader.js';
-import { loadManifest, writeManifest, statMatches, makeEntry } from './checksum-manifest.js';
+import { loadManifest, writeManifest, statMatches, makeEntry, formatManifestStats } from './checksum-manifest.js';
 import { FRAMEWORK_RELATIONS_REVISION } from './framework-source-digest.js';
 import { normalizeOperationalState } from './operational-state.js';
 import { DEFAULT_PROJECT_AIWG_DIR, resolveProjectAiwgDir, } from '../config/project-artifacts.js';
@@ -963,6 +963,7 @@ function extractIndexArtifact(job, bindingOnly, warnings = []) {
     };
     return { checksum, entry };
 }
+/** Return change-detection counts for artifact builds; skipped/source builds return void. */
 export async function buildIndex(cwd, options = {}) {
     loadUserGraphConfigs(cwd);
     loadGlobalGraphConfigs();
@@ -993,7 +994,7 @@ export async function buildIndex(cwd, options = {}) {
             fs.mkdirSync(directory, { recursive: true });
             return staging ??= fs.mkdtempSync(path.join(directory, '.build-'));
         };
-        await buildIndexSnapshot(cwd, options, preparePublication, owned ? observation : undefined);
+        const stats = await buildIndexSnapshot(cwd, options, preparePublication, owned ? observation : undefined);
         // A receipt hit verifies the existing snapshot directly against the scan's
         // stats. There is no extraction interval to recheck. Real builds still probe
         // again after preparation so concurrent source changes remain pending.
@@ -1004,6 +1005,7 @@ export async function buildIndex(cwd, options = {}) {
             recordIndexVerification(owned, cwd, { before: observation.before, after, wallMs: Date.now() - start }, staging);
         if (staging)
             publishIndexFiles(staging, directory);
+        return stats;
     }
     catch (error) {
         if (owned) {
@@ -1141,14 +1143,9 @@ async function buildIndexSnapshot(cwd, options, preparePublication, observation)
         log(`Artifact index built in ${buildTimeMs}ms`);
         log(`  Indexed ${newCount} new, updated ${updatedCount}, unchanged ${unchangedCount}`);
         log(`  Total: ${total} artifacts`);
-        if (!force && manifestStats.checked > 0) {
-            const fastPath = manifestStats.statSkipped;
-            const slowPath = manifestStats.checked - manifestStats.statSkipped;
-            log(`  Change detection: ${manifestStats.checked} checked, ${fastPath} skipped via stat, ${slowPath} content-read, ${manifestStats.reindexed} re-indexed`);
-            if (manifestStats.pruned > 0) {
-                log(`  Pruned ${manifestStats.pruned} stale manifest entries (files no longer on disk)`);
-            }
-        }
+        if (!force)
+            for (const message of formatManifestStats(manifestStats))
+                log(message);
         const displayDir = graph ? indexOutputDir : `${INDEX_DIR}/`;
         log(`  Output: ${displayDir}`);
     };
@@ -1211,7 +1208,7 @@ async function buildIndexSnapshot(cwd, options, preparePublication, observation)
             if (observation)
                 observation.unchanged = true;
             reportBuild(buildTimeMs, files.length);
-            return;
+            return manifestStats;
         }
     }
     const publicationDir = preparePublication();
@@ -1245,6 +1242,7 @@ async function buildIndexSnapshot(cwd, options, preparePublication, observation)
                 ...(!force && existingEntries[relativePath] ? { existingChecksum: existingEntries[relativePath].checksum } : {}) });
         }
     const preparation = await runIndexPreparation(jobs, prepareIndexArtifact, import.meta.url, workers, options.onDiagnostic ?? (message => console.warn(`Index preparation: ${message}`)));
+    manifestStats.reindexed = preparation.results.filter(result => result.entry !== undefined).length;
     for (const result of preparation.results)
         for (const warning of result.warnings ?? []) {
             (options.onDiagnostic ?? (message => console.warn(`Index preparation: ${message}`)))(warning);
@@ -1313,7 +1311,6 @@ async function buildIndexSnapshot(cwd, options, preparePublication, observation)
                     log(`  unchanged (checksum): ${relativePath}`);
                 continue;
             }
-            manifestStats.reindexed++;
             nextManifestEntries[relativePath] = makeEntry(checksum, stat);
             entry = prepared.entry;
         }
@@ -1363,7 +1360,7 @@ async function buildIndexSnapshot(cwd, options, preparePublication, observation)
             if (manifestStats.checksumSkipped > 0 || projectionNeedsRepair)
                 writeBuildManifest(nextManifestEntries);
             reportBuild(buildTimeMs, total);
-            return;
+            return manifestStats;
         }
     }
     // Apply metadata supplements if configured (enriches filename-metadata nodes from sidecars)
@@ -1563,5 +1560,6 @@ async function buildIndexSnapshot(cwd, options, preparePublication, observation)
     writeBuildManifest(nextManifestEntries);
     // Report
     reportBuild(buildTimeMs, total);
+    return manifestStats;
 }
 //# sourceMappingURL=index-builder.js.map

package/dist/src/artifacts/query-engine.js

@@ -12,6 +12,7 @@ import { refreshFrameworkCapabilities, resolveFrameworkCorpusRoot, isCorpusBundl
 import { resolveFrameworkIndexRoot } from './framework-index-paths.js';
 import { ensureRelations, selectPrebuiltRelations, emptyRuleStats } from './relations.js';
 import { minimatch } from 'minimatch';
+import { selectBindingTargetIdentities, preferCanonicalBindingTargets } from './binding-target-identity.js';
 import { inferRuleActivation } from '../rules/activation.mjs';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
@@ -1624,7 +1625,7 @@ function findShowMatches(entries, types, needle) {
     return matches;
 }
 /** Preselect exact candidates once; the canonical resolver still owns precedence and ambiguity. */
-export function createRuleBindingTargetResolver(entries) {
+export function createRuleBindingTargetResolver(entries, options = {}) {
     const candidates = new Map();
     for (const entry of entries) {
         if (!['skill', 'agent', 'flow'].includes(entry.type))
@@ -1643,13 +1644,13 @@ export function createRuleBindingTargetResolver(entries) {
             candidates.set(key, selected);
         }
     }
-    return (type, id) => resolveRuleBindingTarget(candidates.get(`${type}\0${id}`) ?? [], type, id);
+    return (type, id, bundleRoot = options.bundleRoot) => resolveRuleBindingTarget(candidates.get(`${type}\0${id}`) ?? [], type, id, { ...options, bundleRoot });
 }
 /** Resolve exact rule binding IDs using the same precedence and ambiguity as show.
  * Canonical layout slugs remain valid when frontmatter names are display names.
  * Titles and filesystem paths are deliberately excluded (#2938).
  */
-export function resolveRuleBindingTarget(entries, type, id) {
+export function resolveRuleBindingTarget(entries, type, id, options = {}) {
     const exact = entries.filter(entry => {
         if (entry.type !== type)
             return false;
@@ -1660,14 +1661,7 @@ export function resolveRuleBindingTarget(entries, type, id) {
             : basename.replace(/\.[^.]+$/, '');
         return entry.name === id || discoveryIdForEntry(entry) === id || slug === id;
     });
-    let matches = findShowMatches(exact, [type], id);
-    // Generated plugin copies (agentic/code/plugins/*) mirror canonical framework
-    // and addon artifacts. Prefer the canonical source when it is unambiguous.
-    if (matches.length > 1) {
-        const canonical = matches.filter(entry => !/(^|\/)agentic\/code\/plugins\//.test(normalizeIndexedPath(entry.path)));
-        if (canonical.length === 1)
-            matches = canonical;
-    }
+    const matches = preferCanonicalBindingTargets(findShowMatches(selectBindingTargetIdentities(exact, options), [type], id));
     if (matches.length === 0)
         throw new Error(`Missing ${type} binding target: ${id}`);
     if (matches.length > 1)

package/dist/src/cli/handlers/doctor-help.js

@@ -0,0 +1,32 @@
+// Public doctor options and exit-status contract.
+export const DOCTOR_HELP = `aiwg doctor — check AIWG installation health
+
+Usage:
+  aiwg doctor [options]
+  aiwg -doctor [options]
+  aiwg --doctor [options]
+
+Options:
+  --deployment          Verify configured provider deployments
+  --provider <name>     Limit deployment verification to one provider
+  --bundle <name>       Limit deployment verification to one bundle
+  --scope <scope>       Verification scope: project or user
+  --user                Alias for --scope user
+  --qualify             With --probe-workers, record installation and configured model/role approval
+  --yes                 Confirm worker qualification without a terminal
+  --dry-run             With --probe-workers, preview qualification without writes
+  --cli NAME            Limit worker probes/qualification to one configured CLI
+  --decision-offload    Show offline advisory decision readiness and adoption report
+  --probe-workers       Run bounded worker CLI version probes (default: config-only, no subprocess)
+  --project-local       Include project-local artifact diagnostics
+  --json                Emit machine-readable output (with --probe-workers: one worker-probe record per CLI; with --deployment: deployment verification; with --decision-offload: offline snapshot)
+  --verbose, -v         Include verbose diagnostics
+  --help, -h            Show this help
+
+Exit status:
+  0  Checks completed; ordinary doctor warnings are advisory.
+  1  Diagnostic errors, failed or partial explicit worker qualification, or blocked recorded invocations.
+  2  Invalid usage.
+  --qualify uses the same exit status in text and JSON output.
+`;
+//# sourceMappingURL=doctor-help.js.map