@aiwg/cli 2026.10.9 → 2026.10.11

package/dist/src/sessions/repository.js

@@ -2,8 +2,10 @@ import { requireFeaturePackage } from '../features/runtime.js';
 import { CandidateReviewReceiptSchema, DeletionReceiptSchema, IntelligenceCandidateSchema, PromotionDependencyDecisionSchema, PromotionReceiptSchema, SessionContractError, sha256, } from './contracts.js';
 import { coverageFromBatchRun, } from './batch-contracts.js';
 import { redactSessionText, redactSessionValue, sanitizeSessionEvent, sanitizeNativeExtensions } from './policy.js';
+import { extractBatchEventImages, isImageDigest, } from './image-blobs.js';
 import { effectiveSessionLifecycle } from './lifecycle.js';
 import { deriveSessionAnalytics, } from './analytics.js';
+import { HOST_REFERENCE_TABLE_DDL, } from './host-catalog.js';
 const POLICY_PROVIDER_MIGRATION = 'policy-provider-identity:v2';
 const EVENT_ORIGIN_INTENT_MIGRATION = 'event-origin-intent:v1';
 const VISIBLE_SESSION_PREDICATE = `s.lifecycle != 'tombstoned' AND EXISTS (
@@ -114,6 +116,17 @@ export class SessionRepository {
       CREATE TABLE IF NOT EXISTS session_catalog_meta (
         key TEXT PRIMARY KEY, value TEXT NOT NULL
       );
+      -- Content-addressed tool-output image bytes (#3265). One row per
+      -- content hash per catalog: repeat imports of identical images share
+      -- the row (INSERT OR IGNORE). Events reference blobs by digest and
+      -- keep only a bracketed image placeholder (sha256, type, size) in
+      -- searchableText, so image bytes never reach FTS. Pre-#3265 rows with
+      -- inline bytes are left untouched (no destructive migration).
+      CREATE TABLE IF NOT EXISTS session_image_blobs (
+        digest TEXT PRIMARY KEY, media_type TEXT NOT NULL,
+        byte_length INTEGER NOT NULL, source_locator TEXT,
+        source_offset INTEGER, bytes BLOB NOT NULL
+      );
       CREATE TABLE IF NOT EXISTS session_analytics_facts (
         fact_id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL,
         session_id TEXT NOT NULL, event_id TEXT NOT NULL,
@@ -144,6 +157,9 @@ export class SessionRepository {
       -- alignment without reading searchable text or event JSON.
       CREATE INDEX IF NOT EXISTS idx_fts_event_id ON session_event_fts_content(c0);
     `);
+        // Workspace pointers at account-scoped sessions stored in the host
+        // catalog (#3232). References, never copies; legacy copied rows stay.
+        this.db.exec(HOST_REFERENCE_TABLE_DDL);
         const deletionReceiptColumns = this.db.prepare('PRAGMA table_info(deletion_receipts)').all().map((row) => String(row.name));
         if (!deletionReceiptColumns.includes('workspace_id')) {
             this.db.exec('ALTER TABLE deletion_receipts ADD COLUMN workspace_id TEXT');
@@ -479,6 +495,18 @@ export class SessionRepository {
         };
     }
     applyImport(batch, checkpoint, publish = true) {
+        // Lift inline image payloads out of event text before redaction (#3265):
+        // base64 data URLs in text survive redaction and would otherwise be
+        // stored inline. Provider image blocks in extensions keep their existing
+        // redaction to markers; their bytes are not retained.
+        // Idempotent -- placeholder text from an earlier pass matches no image
+        // pattern, so importer-extracted batches and direct writers converge.
+        // Bytes are parked beside the batch: the redaction pass below walks
+        // every value and would flatten Uint8Array into plain objects.
+        const extracted = extractBatchEventImages(batch);
+        const imageBlobs = extracted.imageBlobs;
+        batch = { ...batch, events: extracted.events };
+        delete batch.imageBlobs;
         // Guard callers that submit normalized batches directly as well as adapters.
         batch = redactSessionValue({
             ...batch,
@@ -525,6 +553,17 @@ export class SessionRepository {
                 const merged = mergeSessionAggregate(prior, session);
                 this.db.prepare(`UPDATE sessions SET source_digest=?, lifecycle=?, data=? WHERE session_id=?`).run(merged.sourceDigest, merged.lifecycle, JSON.stringify(merged), merged.sessionId);
             }
+            // Persist image bytes once per content hash per catalog (#3265).
+            // INSERT OR IGNORE keeps the first-seen row when identical images
+            // arrive in later batches or replayed records.
+            const insertImageBlob = this.db.prepare(`INSERT OR IGNORE INTO session_image_blobs
+         (digest, media_type, byte_length, source_locator, source_offset, bytes)
+         VALUES (?, ?, ?, ?, ?, ?)`);
+            for (const image of imageBlobs) {
+                if (!isImageDigest(image.digest))
+                    continue;
+                insertImageBlob.run(image.digest, image.mediaType, image.byteLength, image.locatorClass ?? null, image.offset ?? null, Buffer.from(image.bytes));
+            }
             const insertEvent = this.db.prepare(`INSERT OR IGNORE INTO session_events
          (event_id, session_id, source_id, import_run_id, sequence_no, digest, data)
          VALUES (?, ?, ?, ?, ?, ?, ?)`);
@@ -746,6 +785,49 @@ export class SessionRepository {
     listWorkspaceIds() {
         return this.db.prepare('SELECT DISTINCT workspace_id FROM sessions ORDER BY workspace_id').all().map((row) => String(row.workspace_id));
     }
+    /**
+     * Record a workspace pointer at an account-scoped session stored in the
+     * host catalog (#3232). Non-destructive: existing copied rows are left
+     * untouched and remain readable.
+     */
+    recordHostSessionReference(reference) {
+        this.db.prepare(`INSERT INTO session_host_refs
+         (provider, native_session_id, session_id, source_id, host_catalog)
+       VALUES (?, ?, ?, ?, ?)
+       ON CONFLICT(provider, native_session_id) DO UPDATE SET
+         session_id=excluded.session_id, source_id=excluded.source_id,
+         host_catalog=excluded.host_catalog`).run(reference.provider, reference.nativeSessionId, reference.sessionId, reference.sourceId, reference.hostCatalog);
+    }
+    listHostSessionReferences() {
+        return this.db.prepare(`SELECT provider, native_session_id, session_id, source_id, host_catalog
+       FROM session_host_refs ORDER BY provider, native_session_id`).all().map((row) => ({
+            provider: String(row.provider),
+            nativeSessionId: String(row.native_session_id),
+            sessionId: String(row.session_id),
+            sourceId: String(row.source_id),
+            hostCatalog: String(row.host_catalog),
+        }));
+    }
+    /**
+     * Visible sessions reduced to aggregate identities (plus the internal ids
+     * reference recording needs). Aggregate search/analytics over several
+     * catalogs dedupe on provider + native session so legacy copied rows
+     * count once (#3232).
+     */
+    listSessionIdentities(workspaceId) {
+        const where = workspaceId
+            ? `s.workspace_id=? AND ${VISIBLE_SESSION_PREDICATE}`
+            : VISIBLE_SESSION_PREDICATE;
+        const params = workspaceId ? [workspaceId] : [];
+        return this.db.prepare(`SELECT json_extract(s.data, '$.provider') AS provider, s.native_session_id,
+              s.session_id, s.source_id
+       FROM sessions s WHERE ${where} ORDER BY s.session_id`).all(...params).map((row) => ({
+            provider: String(row.provider),
+            nativeSessionId: String(row.native_session_id),
+            sessionId: String(row.session_id),
+            sourceId: String(row.source_id),
+        }));
+    }
     saveBatchImportRun(run) {
         run = redactSessionValue(run).value;
         const save = this.db.transaction(() => {
@@ -889,6 +971,62 @@ export class SessionRepository {
        ORDER BY e.sequence_no, e.event_id`).all(...(workspaceId ? [sessionId, workspaceId] : [sessionId]))
             .map((row) => JSON.parse(String(row.data)));
     }
+    /**
+     * Distinct image blobs in this catalog. Identical images share one row
+     * per content hash, so this counts unique images, not references (#3265).
+     */
+    countImageBlobs() {
+        return Number(this.db.prepare('SELECT COUNT(*) AS count FROM session_image_blobs').get()?.count ?? 0);
+    }
+    /**
+     * Fetch one image blob by content digest. Returns null when the blob is
+     * unknown or the digest is malformed -- callers report that as an
+     * "unavailable" reference rather than failing the whole read (#3265).
+     * Pre-#3265 rows carry inline bytes instead of references and never reach
+     * this lookup; they load verbatim through `listEvents`.
+     */
+    getImageBlob(digest) {
+        if (!isImageDigest(digest))
+            return null;
+        const row = this.db.prepare(`SELECT digest, media_type, byte_length, source_locator, source_offset, bytes
+       FROM session_image_blobs WHERE digest=?`).get(digest);
+        if (!row)
+            return null;
+        return {
+            digest: String(row.digest),
+            mediaType: String(row.media_type),
+            byteLength: Number(row.byte_length),
+            sourceLocator: row.source_locator === null ? null : String(row.source_locator),
+            sourceOffset: row.source_offset === null ? null : Number(row.source_offset),
+            bytes: Uint8Array.from(row.bytes),
+        };
+    }
+    /**
+     * Resolve an event's image references against the blob store. Entries
+     * whose bytes are present resolve `available`; entries whose blob is
+     * missing (pruned catalog, legacy reference) resolve `unavailable` with
+     * the reference metadata intact so callers can report it (#3265). Events
+     * without references -- including pre-#3265 inline rows -- resolve to [].
+     */
+    resolveEventImages(event) {
+        return (event.imageRefs ?? []).map((ref) => {
+            const stored = this.getImageBlob(ref.digest);
+            if (!stored)
+                return { ...ref, status: 'unavailable' };
+            return {
+                digest: ref.digest,
+                mediaType: stored.mediaType,
+                byteLength: stored.byteLength,
+                ...(ref.locatorClass !== undefined
+                    ? { locatorClass: ref.locatorClass }
+                    : stored.sourceLocator !== null ? { locatorClass: stored.sourceLocator } : {}),
+                ...(ref.offset !== undefined
+                    ? { offset: ref.offset }
+                    : stored.sourceOffset !== null ? { offset: stored.sourceOffset } : {}),
+                status: 'available',
+            };
+        });
+    }
     listTimelineInputs(workspaceId) {
         return this.db.prepare(`SELECT s.data AS session_data, e.data AS event_data
        FROM session_events e
@@ -1168,28 +1306,7 @@ export class SessionRepository {
     }
     analyticsSummary(options) {
         const facts = this.listAnalyticsFacts({ ...options, limit: options.limit ?? 5_000 });
-        const byCategory = countBy(facts, (fact) => fact.category);
-        const byStatus = countBy(facts, (fact) => fact.status);
-        const byProvider = countBy(facts, (fact) => fact.provider);
-        const byTool = countBy(facts.filter((fact) => fact.toolName), (fact) => fact.toolName);
-        return {
-            analyticsVersion: '1.0.0',
-            workspaceId: options.workspaceId,
-            totals: {
-                facts: facts.length,
-                sessions: new Set(facts.map((fact) => fact.sessionId)).size,
-                toolCalls: facts.filter((fact) => fact.category === 'tool-call').length,
-                toolFailures: facts.filter((fact) => fact.category === 'tool-result' && fact.status === 'failed').length,
-                escalations: facts.filter((fact) => fact.category === 'escalation').length,
-                hitlDecisions: facts.filter((fact) => fact.category === 'hitl').length,
-                indicators: facts.filter((fact) => fact.category === 'indicator').length,
-                retryGroups: new Set(facts.map((fact) => fact.retryGroupId).filter(Boolean)).size,
-            },
-            byCategory,
-            byStatus,
-            byProvider,
-            byTool,
-        };
+        return summarizeSessionAnalyticsFacts(facts, options.workspaceId);
     }
     getAnalyticsEvidence(id, workspaceId) {
         const row = this.db.prepare(`SELECT f.data AS fact_data, e.data AS event_data
@@ -1852,6 +1969,31 @@ function canonicalDevinLocator(value) {
         ? `devin-desktop-${value.slice('windsurf-'.length)}`
         : value;
 }
+/**
+ * Summarize analytics facts without touching a catalog, so cross-catalog
+ * merges (workspace facts plus referenced host facts, #3232) report the
+ * same shape as a single-catalog summary.
+ */
+export function summarizeSessionAnalyticsFacts(facts, workspaceId) {
+    return {
+        analyticsVersion: '1.0.0',
+        workspaceId,
+        totals: {
+            facts: facts.length,
+            sessions: new Set(facts.map((fact) => fact.sessionId)).size,
+            toolCalls: facts.filter((fact) => fact.category === 'tool-call').length,
+            toolFailures: facts.filter((fact) => fact.category === 'tool-result' && fact.status === 'failed').length,
+            escalations: facts.filter((fact) => fact.category === 'escalation').length,
+            hitlDecisions: facts.filter((fact) => fact.category === 'hitl').length,
+            indicators: facts.filter((fact) => fact.category === 'indicator').length,
+            retryGroups: new Set(facts.map((fact) => fact.retryGroupId).filter(Boolean)).size,
+        },
+        byCategory: countBy(facts, (fact) => fact.category),
+        byStatus: countBy(facts, (fact) => fact.status),
+        byProvider: countBy(facts, (fact) => fact.provider),
+        byTool: countBy(facts.filter((fact) => fact.toolName), (fact) => fact.toolName),
+    };
+}
 function countBy(items, key) {
     const counts = {};
     for (const item of items) {

package/dist/src/sessions/workspace-discovery.js

@@ -269,10 +269,13 @@ export async function discoverWorkspaceHistories(options) {
                 // old entries, so a content-digest sourceId (the default above)
                 // would churn every re-discovery and break checkpoint continuity.
                 // Key it on the conversation id instead, same rationale as the OMP
-                // override above.
+                // override above. Unlike OMP, the key carries no workspaceId: Grok
+                // Bot conversations are account-scoped (#3232), so the same replica
+                // must resolve to one host-catalog source no matter which workspace
+                // authorizes it; workspace catalogs keep a reference instead of a copy.
                 const conversationId = grokbotConversationIdFromLocator(locator);
                 if (conversationId) {
-                    source.sourceId = sha256(['grokbot-native-source-v1', workspaceId, conversationId].join('\0'));
+                    source.sourceId = sha256(['grokbot-native-source-v1', conversationId].join('\0'));
                 }
             }
             providerSources.push(source);

package/dist/src/smiths/context-pipeline/parallelism-section.js

@@ -87,7 +87,7 @@ export const MAX_SHOWN_GROUPS = 8;
  */
 function excludedMembers(parallelism, group) {
     const excluded = [];
-    for (const member of group.members) {
+    for (const member of (group.members ?? [])) {
         if (member.enabled === false)
             excluded.push(`${member.id} (member disabled)`);
         else if (parallelism?.clis?.[member.cli]?.enabled === false)
@@ -97,15 +97,19 @@ function excludedMembers(parallelism, group) {
 }
 function groupSummaries(entries, parallelism) {
     return entries.map(([id, group]) => {
-        const roles = [...new Set(group.members.flatMap(m => m.roles ?? []))].join('/');
-        const clis = [...new Set(group.members.map(m => m.cli))].join('/');
-        const parts = [`${oneLine(id, 64)} (members: ${group.members.length}`];
+        const roles = [...new Set((group.members ?? []).flatMap(m => m.roles ?? []))].join('/');
+        const clis = [...new Set((group.members ?? []).map(m => m.cli))].join('/');
+        const parts = [`${oneLine(id, 64)} (members: ${(group.members ?? []).length}`];
         if (clis)
             parts.push(`clis: ${oneLine(clis, 96)}`);
         if (roles)
             parts.push(`roles: ${oneLine(roles, 96)}`);
         if (group.maxParallel !== undefined)
             parts.push(`maxParallel: ${group.maxParallel}`);
+        if (group.efforts)
+            parts.push(`efforts: ${oneLine(group.efforts.join('/'), 96)}`);
+        if (group.dataPolicy)
+            parts.push(`dataPolicy: ${oneLine(JSON.stringify(group.dataPolicy), 240)}`);
         if (group.requiredRoles?.length)
             parts.push(`requiredRoles: ${group.requiredRoles.join('/')}`);
         parts.push('configured');
@@ -147,13 +151,13 @@ async function observationSummaries(entries, deps) {
         `Cached model observations read at ${readAt.toISOString()}; catalog fetchedAt: ${stamp(catalog?.discovery?.fetchedAt)}. Ages are measured at this read and grow afterward. This cache may differ from the resolver's current installation observations; no eligibility read is performed by context generation. Missing or ambiguous observations have unknown age.`,
         '',
         ...entries.map(([id, group]) => {
-            const observations = group.members.flatMap(member => {
+            const observations = (group.members ?? []).flatMap(member => {
                 // Mirror the resolver's exact, unambiguous id/API-id lookup per installation.
                 const rows = catalog?.discovery?.instances?.[member.cli]?.models
                     .filter(row => row.id === member.model || row.apiModelId === member.model) ?? [];
                 return rows.length === 1 && rows[0].worker ? [rows[0].worker] : [];
             });
-            return `- ${oneLine(id, 64)} cached observations: ${observations.length}/${group.members.length} members; observedAt: ${range(observations.map(row => row.observedAt))}; verifiedAt: ${range(observations.map(row => row.verifiedAt))}.`;
+            return `- ${oneLine(id, 64)} cached observations: ${observations.length}/${(group.members ?? []).length} members; observedAt: ${range(observations.map(row => row.observedAt))}; verifiedAt: ${range(observations.map(row => row.verifiedAt))}.`;
         }),
         '',
     ];
@@ -313,7 +317,7 @@ export async function buildParallelismSection(projectPath, deps = {}) {
         const hard = healthValue(health, 'hardTimeoutSeconds', 1800);
         lines.push('### Orchestration groups (group dispatch enabled)');
         lines.push('');
-        const entries = Object.entries(cfg.parallelism?.groups ?? {});
+        const entries = Object.entries(resolved.groups ?? {});
         if (entries.length > 0) {
             // Slice before summarizing so at most MAX_SHOWN_GROUPS summaries are built.
             const shown = groupSummaries(entries.slice(0, MAX_SHOWN_GROUPS), cfg.parallelism).join(' | ');
@@ -328,6 +332,14 @@ export async function buildParallelismSection(projectPath, deps = {}) {
         lines.push('');
         lines.push(...await observationSummaries(entries.slice(0, MAX_SHOWN_GROUPS), deps));
         const models = await new ConfigLoader(projectPath, { aiwgHome: resolveAiwgHome() }).load(cfg.parallelism);
+        for (const [pointer, origins] of Object.entries(models.workerPolicyOrigins ?? {})) {
+            if (!pointer.startsWith('/parallelism/groups/') || !pointer.endsWith('/template'))
+                continue;
+            lines.push(`Template expansion ${oneLine(pointer, 160)}: ${origins.map(origin => `${oneLine(origin.source, 240)}#${oneLine(origin.pointer, 160)} (${origin.digest})`).join(' → ')}. Contributions are retained in workerPolicyOrigins; inherited ceilings remain binding.`);
+        }
+        const aliases = Object.entries(models.defaults.workerSelection?.roleGuidance ?? {}).filter(([, guidance]) => guidance.baseRole);
+        for (const [role, guidance] of aliases)
+            lines.push(`Project role ${role} aliases ${guidance.baseRole}; ordered groups: ${guidance.groups.join(', ')}. Resolver eligibility and base-role qualification remain required.`);
         const freshness = models.defaults.workerSelection.freshness;
         lines.push(`Resolver freshness limits from merged model policy: observation warning after ${freshness.warnHours} hours; observation blocked after ${freshness.blockHours} hours; verification blocked after ${freshness.policyDays} days. Future-dated evidence is blocked. Re-resolve before launch; cached ages do not establish eligibility.`);
         lines.push('');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiwg/cli",
-  "version": "2026.10.9",
+  "version": "2026.10.11",
   "description": "Lightweight AIWG CLI for signed, versioned web-backed resources.",
   "type": "module",
   "license": "MIT",
@@ -49,7 +49,17 @@
     "tools/ralph-external/session-launcher.mjs",
     "tools/ralph-external/process-monitor.mjs",
     "tools/ralph-external/lib/session-environment.mjs",
+    "tools/ralph-external/lib/worker-inputs.mjs",
+    "tools/ralph-external/lib/worker-final.mjs",
+    "tools/ralph-external/lib/worker-launch-cli.mjs",
     "tools/ralph-external/lib/worker-isolation.mjs",
+    "tools/ralph-external/lib/worker-native-sandbox.mjs",
+    "tools/ralph-external/lib/worker-isolation-status.mjs",
+    "tools/ralph-external/lib/worker-retry-evidence.mjs",
+    "tools/ralph-external/lib/worker-termination.mjs",
+    "tools/ralph-external/lib/worker-invocation-processes.mjs",
+    "tools/ralph-external/lib/worker-invocation-ancestry.mjs",
+    "tools/ralph-external/lib/worker-context.mjs",
     "tools/ralph-external/lib/systemd-client.mjs",
     "tools/ralph-external/lib/consecutive-failure-circuit-breaker.mjs",
     "tools/ralph-external/lib/launcher-recovery-evidence.mjs",
@@ -57,7 +67,11 @@
     "tools/ralph-external/lib/worker-overflow.mjs",
     "tools/scripts/resource-preflight.mjs",
     "tools/ralph-external/lib/provider-adapter.mjs",
+    "tools/ralph-external/lib/strict-worker-json.mjs",
+    "tools/ralph-external/lib/session-attempt.mjs",
+    "tools/ralph-external/lib/managed-worker-attempt.mjs",
     "tools/ralph-external/lib/worker-health.mjs",
+    "tools/ralph-external/lib/worker-artifacts.mjs",
     "tools/ralph-external/lib/claude-adapter.mjs",
     "tools/ralph-external/lib/codex-adapter.mjs",
     "tools/ralph-external/lib/opencode-adapter.mjs",

package/schemas/mission-v1.schema.json

@@ -1643,6 +1643,7 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
+        "invocationId": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{0,51}(?![\\s\\S])" },
         "isolation": {
           "enum": ["systemd-unit", "native-sandbox"]
         },
@@ -1703,28 +1704,24 @@
           ]
         },
         "artifacts": {
-          "type": "array",
-          "maxItems": 16,
+          "type": "array", "maxItems": 16,
+          "contains": { "type": "object", "required": ["location"], "properties": { "location": { "const": "workspace-relative" } } },
+          "minContains": 0, "maxContains": 1,
           "items": {
-            "type": "object",
-            "additionalProperties": false,
+            "type": "object", "additionalProperties": false,
             "properties": {
-              "name": {
-                "type": "string",
-                "pattern": "^[A-Za-z0-9][A-Za-z0-9_-]{0,63}(?![\\s\\S])"
-              },
-              "content": {
-                "type": "string",
-                "maxLength": 1048576
-              },
-              "location": {
-                "const": "run-directory"
-              }
+              "name": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9_-]{0,63}(?![\\s\\S])" },
+              "content": { "type": "string", "maxLength": 1048576 },
+              "location": { "enum": ["run-directory", "workspace-relative"] },
+              "prefix": { "type": "string", "minLength": 1, "maxLength": 256 },
+              "relativePath": { "type": "string", "minLength": 1, "maxLength": 4096 }
             },
-            "required": [
-              "name",
-              "content"
-            ]
+            "required": ["name", "content"],
+            "allOf": [{
+              "if": { "required": ["location"], "properties": { "location": { "const": "workspace-relative" } } },
+              "then": { "required": ["prefix", "relativePath"] },
+              "else": { "not": { "anyOf": [{ "required": ["prefix"] }, { "required": ["relativePath"] }] } }
+            }]
           }
         },
         "briefPath": {
@@ -1871,6 +1868,10 @@
         "controlEvidence"
       ],
       "allOf": [
+        {
+          "if": { "required": ["artifacts"], "properties": { "artifacts": { "type": "array", "contains": { "type": "object", "required": ["location"], "properties": { "location": { "const": "workspace-relative" } } } } } },
+          "then": { "required": ["invocationId"], "properties": { "transport": { "const": "shell" } } }
+        },
         {
           "if": {
             "properties": {

package/schemas/models/model-config-compatibility.v1.schema.json

@@ -184,6 +184,13 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
+        "baseRole": {
+          "enum": [
+            "efficiency",
+            "coding",
+            "reasoning"
+          ]
+        },
         "groups": {
           "type": "array",
           "items": {
@@ -248,6 +255,15 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
+        "localOnlyPaths": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^(?!.*(?:^|/)\\.{1,2}(?:/|$))[A-Za-z0-9_.@+,-]+(?:/[A-Za-z0-9_.@+,-]+)*$(?![\\s\\S])"
+          },
+          "description": "Literal project-relative local-only files or directory subtrees; deployed conductor guards have limited shell coverage."
+        },
         "allowedProcessing": {
           "type": "array",
           "items": {

package/tools/agents/providers/claude-post-deploy.mjs

@@ -0,0 +1,35 @@
+// Apply project settings and context after provider file deployment.
+import fs from 'node:fs';
+import path from 'node:path';
+import { initializeFrameworkWorkspace, ensureDir } from './base.mjs';
+import { deployHookFile } from './claude.mjs';
+import { deployConductorDataGuard } from './conductor-data-guard.mjs';
+
+export async function postDeploy(targetDir, opts) {
+  initializeFrameworkWorkspace(targetDir, opts.mode, opts.dryRun, opts.srcRoot);
+  await deployConductorDataGuard(targetDir, 'claude', opts);
+
+  // Claude-specific post-deployment (settings.json, etc.)
+  const claudeDir = path.join(targetDir, '.claude');
+  const settingsPath = path.join(claudeDir, 'settings.json');
+
+  // If settings.json doesn't exist, create a minimal one
+  if (!fs.existsSync(settingsPath) && !opts.dryRun) {
+    ensureDir(claudeDir);
+    const settings = {
+      version: '1.0',
+      created: new Date().toISOString(),
+      aiwg: {
+        enabled: true,
+        mode: opts.mode || 'all'
+      }
+    };
+    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2), 'utf8');
+    console.log('Created .claude/settings.json');
+  }
+
+  // Hook file architecture: write AIWG.md and wire @AIWG.md into CLAUDE.md
+  if (opts.srcRoot && opts.contextFiles !== false) {
+    deployHookFile(targetDir, opts);
+  }
+}

package/tools/agents/providers/claude.mjs

@@ -1,3 +1,5 @@
+import { postDeploy } from './claude-post-deploy.mjs';
+export { postDeploy };
 import { importImpl } from '../../_resolve-impl.mjs';
 /**
  * Claude Code Provider
@@ -43,7 +45,6 @@ import {
   pruneStaleAiwgSkills,
   computeAllKernelNames,
   parseFrontmatter,
-  initializeFrameworkWorkspace,
   filterAgentFiles,
   getAddonAgentFiles,
   getAddonCommandFiles,
@@ -395,34 +396,6 @@ export function createAgentsMd(target, srcRoot, dryRun) {
 // Post-Deployment
 // ============================================================================
 
-export async function postDeploy(targetDir, opts) {
-  // Initialize framework workspace structure
-  initializeFrameworkWorkspace(targetDir, opts.mode, opts.dryRun, opts.srcRoot);
-
-  // Claude-specific post-deployment (settings.json, etc.)
-  const claudeDir = path.join(targetDir, '.claude');
-  const settingsPath = path.join(claudeDir, 'settings.json');
-
-  // If settings.json doesn't exist, create a minimal one
-  if (!fs.existsSync(settingsPath) && !opts.dryRun) {
-    ensureDir(claudeDir);
-    const settings = {
-      version: '1.0',
-      created: new Date().toISOString(),
-      aiwg: {
-        enabled: true,
-        mode: opts.mode || 'all'
-      }
-    };
-    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2), 'utf8');
-    console.log('Created .claude/settings.json');
-  }
-
-  // Hook file architecture: write AIWG.md and wire @AIWG.md into CLAUDE.md
-  if (opts.srcRoot && opts.contextFiles !== false) {
-    deployHookFile(targetDir, opts);
-  }
-}
 
 /**
  * Deploy the AIWG.md hook file and add @AIWG.md directive to CLAUDE.md.
@@ -444,7 +417,7 @@ function interpolateHookTokens(content, counts, targetDir) {
   });
 }
 
-function deployHookFile(targetDir, opts) {
+export function deployHookFile(targetDir, opts) {
   const { srcRoot, dryRun, counts } = opts;
   const templatePath = path.join(srcRoot, 'agentic', 'code', 'frameworks', 'sdlc-complete', 'templates', 'project', 'AIWG.md');
   const hookDest = path.join(targetDir, 'AIWG.md');

package/tools/agents/providers/codex-post-deploy.mjs

@@ -0,0 +1,13 @@
+// Apply project settings and context after provider file deployment.
+import { initializeFrameworkWorkspace } from './base.mjs';
+import { createAgentsMd } from './codex.mjs';
+import { deployConductorDataGuard } from './conductor-data-guard.mjs';
+
+export async function postDeploy(targetDir, opts) {
+  initializeFrameworkWorkspace(targetDir, opts.mode, opts.dryRun, opts.srcRoot);
+  await deployConductorDataGuard(targetDir, 'codex', opts);
+
+  if (opts.createAgentsMd) {
+    if (opts.contextFiles !== false) createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
+  }
+}

package/tools/agents/providers/codex.mjs

@@ -1,3 +1,5 @@
+import { postDeploy } from './codex-post-deploy.mjs';
+export { postDeploy };
 import { importImpl } from '../../_resolve-impl.mjs';
 /**
  * OpenAI Codex Provider
@@ -47,7 +49,6 @@ import {
   writeFile,
   deployFiles,
   createAgentsMdFromTemplate,
-  initializeFrameworkWorkspace,
   getAddonAgentFiles,
   getAddonCommandFiles,
   getAddonSkillDirs,
@@ -511,13 +512,6 @@ export function generatePluginBundle(targetDir, opts = {}) {
 // Post-Deployment
 // ============================================================================
 
-export async function postDeploy(targetDir, opts) {
-  initializeFrameworkWorkspace(targetDir, opts.mode, opts.dryRun, opts.srcRoot);
-
-  if (opts.createAgentsMd) {
-    if (opts.contextFiles !== false) createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
-  }
-}
 
 // ============================================================================
 // File Extension