@aiwg/cli 2026.7.25 → 2026.8.1

package/dist/src/memory/intake.js

@@ -0,0 +1,118 @@
+import { copyFileSync, existsSync, mkdirSync, readFileSync, realpathSync, renameSync, statSync, writeFileSync, } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { basename, dirname, extname, relative, resolve, sep } from 'node:path';
+function sha256(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+function safeProjectFile(projectRoot, requested) {
+    const root = realpathSync(projectRoot);
+    const candidate = realpathSync(resolve(root, requested));
+    if (candidate !== root && !candidate.startsWith(`${root}${sep}`)) {
+        throw new Error('intake source must resolve inside the project');
+    }
+    const segments = relative(root, candidate).split(sep);
+    if (segments.some(segment => segment === '.env' || segment === '.ssh'
+        || /^(?:credentials?|secrets?|tokens?)(?:\.|$)/i.test(segment))) {
+        throw new Error('protected paths cannot be ingested into ordinary project memory');
+    }
+    return { absolute: candidate, locator: segments.join('/') };
+}
+function kindFor(filePath) {
+    const extension = extname(filePath).toLocaleLowerCase();
+    if (['.jsonl', '.transcript'].includes(extension))
+        return 'session-transcript';
+    if (['.png', '.jpg', '.jpeg', '.gif', '.webp', '.svg'].includes(extension))
+        return 'image';
+    if (extension === '.pdf')
+        return 'pdf';
+    if (['.yaml', '.yml', '.json'].includes(extension))
+        return 'structured';
+    if (['.md', '.txt', '.html', '.htm'].includes(extension))
+        return 'document';
+    return 'artifact';
+}
+function assertFuturePathInsideProject(projectRoot, target) {
+    let ancestor = target;
+    while (!existsSync(ancestor))
+        ancestor = dirname(ancestor);
+    const actual = realpathSync(ancestor);
+    if (actual !== projectRoot && !actual.startsWith(`${projectRoot}${sep}`)) {
+        throw new Error('intake storage cannot traverse a link outside the project');
+    }
+}
+function atomicJson(filePath, value) {
+    mkdirSync(dirname(filePath), { recursive: true });
+    const temporary = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+    writeFileSync(temporary, `${JSON.stringify(value, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
+    renameSync(temporary, filePath);
+}
+export class MemoryIntakeCoordinator {
+    projectRoot;
+    rawRoot;
+    receiptRoot;
+    constructor(projectRoot) {
+        this.projectRoot = realpathSync(projectRoot);
+        this.rawRoot = resolve(this.projectRoot, '.aiwg/wiki/raw');
+        this.receiptRoot = resolve(this.projectRoot, '.aiwg/memory/compound-memory/intake-receipts');
+        assertFuturePathInsideProject(this.projectRoot, this.rawRoot);
+        assertFuturePathInsideProject(this.projectRoot, this.receiptRoot);
+    }
+    preview(requested) {
+        const source = safeProjectFile(this.projectRoot, requested);
+        const stat = statSync(source.absolute);
+        if (!stat.isFile())
+            throw new Error('intake source must be a regular file');
+        const bytes = readFileSync(source.absolute);
+        const digest = sha256(bytes);
+        const kind = kindFor(source.absolute);
+        const safeName = basename(source.absolute).replace(/[^a-zA-Z0-9._-]+/g, '-');
+        const rawLocator = `.aiwg/wiki/raw/${digest.slice(7, 23)}-${safeName}`;
+        const rawPath = resolve(this.projectRoot, rawLocator);
+        const duplicate = existsSync(rawPath) && sha256(readFileSync(rawPath)) === digest;
+        const identity = {
+            source: { locator: source.locator, digest, byteLength: bytes.length, kind },
+            rawLocator,
+            route: kind === 'session-transcript' ? 'sessions' : 'llm-wiki',
+        };
+        return {
+            schemaVersion: 'aiwg.compound-memory.intake-preview.v1',
+            operationId: sha256(JSON.stringify(identity)),
+            ...identity,
+            duplicate,
+            confirmationRequired: true,
+            mutation: { wouldCopyRaw: !duplicate, wouldPromoteKnowledge: false },
+        };
+    }
+    confirm(requested, operationId) {
+        const preview = this.preview(requested);
+        const receiptPath = resolve(this.receiptRoot, `${operationId.replace(':', '_')}.json`);
+        if (existsSync(receiptPath)) {
+            return { ...JSON.parse(readFileSync(receiptPath, 'utf8')), duplicate: true };
+        }
+        if (preview.operationId !== operationId) {
+            throw new Error('intake confirmation requires the exact current preview');
+        }
+        const source = safeProjectFile(this.projectRoot, requested);
+        const rawPath = resolve(this.projectRoot, preview.rawLocator);
+        mkdirSync(this.rawRoot, { recursive: true, mode: 0o700 });
+        if (!preview.duplicate)
+            copyFileSync(source.absolute, rawPath, 1);
+        if (sha256(readFileSync(rawPath)) !== preview.source.digest) {
+            throw new Error('immutable raw copy digest does not match the source preview');
+        }
+        const receipt = {
+            schemaVersion: 'aiwg.compound-memory.intake-receipt.v1',
+            receiptId: sha256(`${operationId}\0${preview.rawLocator}`),
+            operationId,
+            sourceLocator: preview.source.locator,
+            sourceDigest: preview.source.digest,
+            rawLocator: preview.rawLocator,
+            route: preview.route,
+            duplicate: preview.duplicate,
+            registeredAt: new Date().toISOString(),
+        };
+        atomicJson(receiptPath, receipt);
+        return receipt;
+    }
+}
+//# sourceMappingURL=intake.js.map

package/dist/src/providers/capability-matrix.js

@@ -13,6 +13,9 @@ import { resolve, dirname } from 'path';
 import { fileURLToPath } from 'url';
 import { load as loadYaml } from 'js-yaml';
 import { findPackageRoot } from '../cli/find-package-root.js';
+export function isExternalStrategy(strategy) {
+    return strategy === 'external-trigger';
+}
 // ---------------------------------------------------------------------------
 // Loader
 // ---------------------------------------------------------------------------
@@ -257,6 +260,8 @@ export function formatCapabilityTable() {
             if (caps.native_features[f])
                 return padRight('NATIVE', 15);
             const emu = caps.emulation[f];
+            if (isExternalStrategy(emu))
+                return padRight('EXTERNAL', 15);
             if (emu)
                 return padRight(emu, 15);
             return padRight('--', 15);
@@ -264,7 +269,7 @@ export function formatCapabilityTable() {
         lines.push([padRight(caps.display_name, 18), ...cells].join('| '));
     }
     lines.push('');
-    lines.push('Legend: NATIVE = built-in support, aiwg-* = AIWG emulation, -- = unsupported');
+    lines.push('Legend: NATIVE = built-in support, aiwg-* = AIWG emulation, EXTERNAL = host/CI owns the trigger, -- = unsupported');
     return lines.join('\n');
 }
 /**
@@ -287,9 +292,11 @@ export function formatFeatureSupport(feature) {
         const strategy = caps.emulation[feature];
         const status = native
             ? 'NATIVE'
-            : strategy
-                ? `emulated (${strategy})`
-                : 'unsupported';
+            : isExternalStrategy(strategy)
+                ? 'external trigger'
+                : strategy
+                    ? `emulated (${strategy})`
+                    : 'unsupported';
         lines.push(`  ${padRight(caps.display_name, 18)} ${status}`);
     }
     return lines.join('\n');

package/dist/src/providers/capability-matrix.yaml

@@ -16,8 +16,8 @@ providers:
   claude-code:
     display_name: Claude Code
     status: stable
-    daemon_tier: native
-    daemon_pty_adapter: true
+    daemon_tier: unsupported
+    daemon_pty_adapter: false
     artifact_paths:
       agents: .claude/agents/
       commands: .claude/commands/
@@ -31,7 +31,7 @@ providers:
       mcp: true
       behaviors: false
       mission_control: false
-      daemon: true
+      daemon: false
     emulation:
       cron: native
       agent_teams: native
@@ -39,7 +39,7 @@ providers:
       mcp: native
       behaviors: hooks
       mission_control: aiwg-mc
-      daemon: native
+      daemon: null
     hook_wiring:
       at_link_support: true
       hook_file: AIWG.md
@@ -80,8 +80,8 @@ providers:
     aliases:
       - openai
     status: stable
-    daemon_tier: native
-    daemon_pty_adapter: true
+    daemon_tier: unsupported
+    daemon_pty_adapter: false
     artifact_paths:
       agents: .codex/agents/
       commands: "~/.codex/prompts/"
@@ -100,15 +100,15 @@ providers:
       mcp: false
       behaviors: false
       mission_control: false
-      daemon: true
+      daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: external-trigger
       agent_teams: aiwg-mc
       tasks: aiwg-mc
       mcp: null
       behaviors: aiwg-mc
       mission_control: aiwg-mc
-      daemon: native
+      daemon: null
     hook_wiring:
       at_link_support: false
       hook_file: AIWG-codex.md
@@ -164,7 +164,7 @@ providers:
       mission_control: false
       daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: null
       agent_teams: aiwg-mc
       tasks: aiwg-mc
       mcp: null
@@ -183,8 +183,8 @@ providers:
     display_name: Factory AI
     status: stable
     # droid CLI runs headless via `droid exec`; AIWG daemon provides persistence layer
-    daemon_tier: tier1
-    daemon_pty_adapter: true
+    daemon_tier: unsupported
+    daemon_pty_adapter: false
     artifact_paths:
       agents: .factory/droids/
       commands: .factory/commands/
@@ -198,15 +198,15 @@ providers:
       mcp: true               # Native MCP support (stdio + HTTP transports)
       behaviors: false
       mission_control: true   # Factory Missions maps to MC concept
-      daemon: false           # No native persistent daemon; AIWG daemon wraps droid exec
+      daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: null
       agent_teams: null       # native Missions
       tasks: null             # native Task tool
       mcp: null               # native MCP
       behaviors: aiwg-mc
       mission_control: null   # native Missions
-      daemon: aiwg-daemon     # AIWG daemon provides persistence for headless droid exec
+      daemon: null
     hook_wiring:
       at_link_support: false
       hook_file: AIWG-factory.md
@@ -236,7 +236,7 @@ providers:
       mission_control: false
       daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: null
       agent_teams: aiwg-mc
       tasks: aiwg-mc
       mcp: null
@@ -254,7 +254,7 @@ providers:
   opencode:
     display_name: OpenCode
     status: stable
-    daemon_tier: native
+    daemon_tier: unsupported
     daemon_pty_adapter: false
     artifact_paths:
       agents: .opencode/agent/
@@ -269,15 +269,15 @@ providers:
       mcp: false
       behaviors: false
       mission_control: false
-      daemon: true
+      daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: null
       agent_teams: aiwg-mc
       tasks: aiwg-mc
       mcp: null
       behaviors: aiwg-mc
       mission_control: aiwg-mc
-      daemon: native
+      daemon: null
     hook_wiring:
       at_link_support: true
       hook_file: AIWG-opencode.md
@@ -289,7 +289,7 @@ providers:
   warp:
     display_name: Warp Terminal
     status: stable
-    daemon_tier: native
+    daemon_tier: unsupported
     daemon_pty_adapter: false
     artifact_paths:
       agents: .warp/agents/
@@ -305,15 +305,15 @@ providers:
       mcp: false
       behaviors: false
       mission_control: false
-      daemon: true
+      daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: null
       agent_teams: aiwg-mc
       tasks: aiwg-mc
       mcp: null
       behaviors: aiwg-mc
       mission_control: aiwg-mc
-      daemon: native
+      daemon: null
     hook_wiring:
       at_link_support: true
       hook_file: AIWG-warp.md
@@ -344,7 +344,7 @@ providers:
       mission_control: false
       daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: null
       agent_teams: aiwg-mc
       tasks: aiwg-mc
       mcp: null
@@ -362,7 +362,7 @@ providers:
   hermes:
     display_name: Hermes
     status: experimental
-    daemon_tier: native
+    daemon_tier: unsupported
     daemon_pty_adapter: false
     artifact_paths:
       # MCP is OPTIONAL for Hermes (validated v2026.5.13, #1527): it integrates
@@ -382,15 +382,15 @@ providers:
       mcp: true
       behaviors: false
       mission_control: false
-      daemon: true
+      daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: null
       agent_teams: aiwg-mc
       tasks: aiwg-mc
       mcp: native
       behaviors: aiwg-mc
       mission_control: aiwg-mc
-      daemon: native
+      daemon: null
     hook_wiring:
       at_link_support: false
       hook_file: .hermes.md
@@ -402,7 +402,7 @@ providers:
   openclaw:
     display_name: OpenClaw
     status: stable
-    daemon_tier: native
+    daemon_tier: unsupported
     daemon_pty_adapter: false
     artifact_paths:
       agents: "~/.openclaw/agents/"
@@ -417,15 +417,15 @@ providers:
       mcp: true
       behaviors: true
       mission_control: false
-      daemon: true
+      daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: null
       agent_teams: aiwg-mc
       tasks: aiwg-mc
       mcp: native
       behaviors: native
       mission_control: aiwg-mc
-      daemon: native
+      daemon: null
     hook_wiring:
       at_link_support: false
       context_file: "~/.openclaw/config.yaml"
@@ -457,7 +457,7 @@ providers:
       mission_control: false
       daemon: false
     emulation:
-      cron: aiwg-schedule
+      cron: null
       agent_teams: aiwg-mc
       tasks: aiwg-mc
       mcp: null
@@ -477,7 +477,7 @@ features:
     description: Scheduled task execution (recurring triggers)
     native_example: Claude Code CronCreate/CronList/CronDelete tools
     emulation_strategies:
-      aiwg-schedule: AIWG schedule CLI with remote triggers
+      external-trigger: System cron, systemd timers, or CI own time and launch a reviewed provider command
   agent_teams:
     description: Multi-agent orchestration with team coordination
     native_example: Claude Code native agent teams
@@ -505,10 +505,7 @@ features:
       aiwg-mc: AIWG mc start/dispatch/status/watch CLI
   daemon:
     description: >
-      Persistent background process for headless/unattended operation.
-      Tier 1 (native): full daemon support via aiwg daemon start/stop/status.
-      Tier 2 (pty-adapter): PTY bridge for platforms with a TUI but no headless mode.
-      Tier 3 (unsupported): requires a display server or IDE host; daemon not applicable.
-    native_example: aiwg daemon start (Claude Code, OpenCode, Warp, OpenClaw, Codex)
-    emulation_strategies:
-      pty-adapter: node-pty bridge for TUI platforms (Claude Code, Codex secondary mode)
+      Resident AIWG daemon lifecycle. The current production CLI does not expose
+      a daemon command; bundled daemon sources are non-routable development artifacts.
+    native_example: null
+    emulation_strategies: {}

package/dist/src/resources/resolver.js

@@ -117,6 +117,7 @@ export async function resolveAiwgResourceBytes(logicalId, options) {
     const bytes = await fetchVerifiedRawResource(webRelease, parsed.rawPath, {
         baseUrl: options.webReleaseOptions?.baseUrl,
         fetcher: options.webReleaseOptions?.fetcher,
+        credentialProvider: options.webReleaseOptions?.credentialProvider,
         allowInsecureLoopbackHttp: options.webReleaseOptions?.allowInsecureLoopbackHttp,
         offline: options.offline,
     });

package/dist/src/resources/web-release.d.ts

@@ -45,6 +45,8 @@ export interface WebReleaseOptions {
     cacheRoot?: string;
     publicKeyPem?: string | Buffer;
     fetcher?: ResourceFetcher;
+    /** Returns a bearer token at request time. Tokens never participate in URLs or cache keys. */
+    credentialProvider?: () => Promise<string | null>;
     /** Test/development escape hatch. HTTP remains restricted to loopback. */
     allowInsecureLoopbackHttp?: boolean;
 }
@@ -72,7 +74,7 @@ export interface VerifiedWebRelease {
     channelSequence?: number;
     descriptors: ReadonlyMap<string, VerifiedReleaseDescriptor>;
 }
-export interface VerifiedRawResourceOptions extends Pick<WebReleaseOptions, "baseUrl" | "fetcher" | "allowInsecureLoopbackHttp"> {
+export interface VerifiedRawResourceOptions extends Pick<WebReleaseOptions, "baseUrl" | "fetcher" | "credentialProvider" | "allowInsecureLoopbackHttp"> {
     offline?: boolean;
 }
 export declare function verifySignedResourceBytes(bytes: Uint8Array, signatureBytes: Uint8Array, publicKeyPem?: string | Buffer, label?: string): string;

package/dist/src/resources/web-release.js

@@ -297,7 +297,7 @@ function resourceUrl(base, relativePath) {
     url.pathname = `${prefix}/${relativePath}`;
     return url.toString();
 }
-async function fetchBytes(fetcher, url, label, maxBytes) {
+async function fetchBytes(fetcher, url, label, maxBytes, bearerToken) {
     if (!Number.isSafeInteger(maxBytes) || maxBytes < 0)
         throw new Error(`${label} has an invalid network size limit`);
     const controller = new AbortController();
@@ -315,7 +315,10 @@ async function fetchBytes(fetcher, url, label, maxBytes) {
         const response = await Promise.race([
             fetcher(url, {
                 redirect: "error",
-                headers: { "accept-encoding": "identity" },
+                headers: {
+                    "accept-encoding": "identity",
+                    ...(bearerToken ? { authorization: `Bearer ${bearerToken}` } : {}),
+                },
                 signal: controller.signal,
             }),
             timeoutFailure,
@@ -904,16 +907,21 @@ export async function resolveWebRelease(options = {}) {
     const base = normalizeBaseUrl(options.baseUrl ?? DEFAULT_RESOURCE_BASE_URL, options.allowInsecureLoopbackHttp === true);
     // Validate injected trust material before reading cache or making requests.
     loadTrustRoot(publicKeyPem);
+    const bearerToken = options.offline ? null : await options.credentialProvider?.() ?? null;
+    const authorize = async (input, init = {}) => {
+        const headers = { ...(init.headers || {}), ...(bearerToken ? { authorization: `Bearer ${bearerToken}` } : {}) };
+        return (options.fetcher ?? globalThis.fetch)(input, { ...init, headers });
+    };
     if (selector.kind === "exact") {
         if (options.offline)
             return resolveOfflineExact(cacheRoot, selector, selector.value, publicKeyPem, base);
-        const fetcher = options.fetcher ?? globalThis.fetch;
+        const fetcher = authorize;
         if (!fetcher)
             throw new Error("No fetch implementation is available for AIWG web resources");
         return fetchAndCacheRelease(base, fetcher, cacheRoot, selector, selector.value, publicKeyPem);
     }
     if (selector.kind === "range" || selector.kind === "digest") {
-        const fetcher = options.fetcher ?? globalThis.fetch;
+        const fetcher = authorize;
         const index = await resolveVersionIndex(base, fetcher, cacheRoot, publicKeyPem, options.offline);
         const selected = selectVersionFromIndex(index, selector);
         if (options.offline) {
@@ -929,7 +937,7 @@ export async function resolveWebRelease(options = {}) {
             throw new Error(`AIWG resource channel ${selector.value} is not cached; offline mode cannot fetch it`);
         return resolveOfflineExact(cacheRoot, selector, cached.manifest.version, publicKeyPem, base, cached.manifest.releaseManifestSha256, cached.manifest.sequence);
     }
-    const fetcher = options.fetcher ?? globalThis.fetch;
+    const fetcher = authorize;
     if (!fetcher)
         throw new Error("No fetch implementation is available for AIWG web resources");
     const channelPrefix = `resources/channels/${selector.value}`;
@@ -989,7 +997,7 @@ export async function fetchVerifiedRawResource(release, resourcePath, options =
     const fetcher = options.fetcher ?? globalThis.fetch;
     if (!fetcher)
         throw new Error("No fetch implementation is available for AIWG web resources");
-    const bytes = await fetchBytes(fetcher, resourceUrl(base, `resources/${release.version}/${resourcePath}`), `raw resource ${resourcePath}`, Math.min(descriptor.size, MAX_RAW_RESOURCE_BYTES));
+    const bytes = await fetchBytes(fetcher, resourceUrl(base, `resources/${release.version}/${resourcePath}`), `raw resource ${resourcePath}`, Math.min(descriptor.size, MAX_RAW_RESOURCE_BYTES), await options.credentialProvider?.() ?? null);
     verifyDescriptor(bytes, descriptor);
     const stagingRoot = path.join(release.cacheDir, ".raw-staging");
     fs.mkdirSync(stagingRoot, { recursive: true });