@aiwg/cli 2026.9.20 → 2026.9.24

package/agentic/code/providers/capability-matrix.yaml

@@ -405,11 +405,18 @@ providers:
     display_name: Grok Build
     status: experimental
     # xAI Grok Build CLI/TUI. Distinct from Grok Bot (`grokbot`).
-    # Wave 1 (#2575): native kernel skills + AGENTS.md. Agents/rules writers deferred #2577.
+    # #2577: fixture-backed native subagents and background tasks; see
+    # test/unit/providers/grok-build-provider.test.ts and
+    # test/unit/providers/grok-build-dispatch.test.ts. MCP is independently
+    # covered by test/unit/providers/grok-build-native-integration.test.ts.
+    # Headless and ACP protocol contracts are tested in grok-build-headless.test.ts
+    # and grok-build-acp.test.ts. ACP does not establish a daemon lifecycle.
+    # No fixture supports native cron, multi-agent teams, mission control,
+    # or AIWG behavior registration; those claims remain false.
     daemon_tier: unsupported
     daemon_pty_adapter: false
     artifact_paths:
-      agents: "Indexed: aiwg discover / aiwg show agent (native .grok/agents writer deferred #2577)"
+      agents: .grok/agents/  # qualified AIWG model workers only
       commands: null
       skills: .grok/skills/
       skills_cross_agent: .grok/.aiwg/skills/  # --copy-all opt-in mirror
@@ -417,16 +424,16 @@ providers:
       behaviors: null
     native_features:
       cron: false
-      agent_teams: false
-      tasks: false
+      agent_teams: false # independent subagents do not imply native team orchestration
+      tasks: true        # native background subagents/tasks
       mcp: true
       behaviors: false
       mission_control: false
       daemon: false
     emulation:
       cron: null
-      agent_teams: null
-      tasks: aiwg-mc
+      agent_teams: aiwg-mc
+      tasks: native
       mcp: null
       behaviors: aiwg-mc
       mission_control: aiwg-mc
@@ -479,6 +486,51 @@ providers:
     deploy_target: mixed
     aggregated_output: true
 
+  muse:
+    display_name: Muse Code
+    status: experimental
+    # Meta's terminal/CI coding agent (Muse Spark-powered). Explicitly not a
+    # model-API surface: Glimmer/Image/Voice are out of scope.
+    # Skill writer (.agents/skills + XDG user root), discover-first AGENTS.md
+    # bridge, managed .muse/hooks.json, and opt-in MCP settings profile.
+    # ADR: docs/architecture/adr-muse-provider-target.md · epic #223.
+    daemon_tier: unsupported
+    daemon_pty_adapter: false
+    artifact_paths:
+      agents: "Indexed: aiwg discover / aiwg show agent (native writer deferred)"
+      commands: null
+      # Project root is fixed; the user root resolves at deploy time from
+      # XDG_CONFIG_HOME (default ~/.config/muse/skills when unset). Never
+      # advertise ~/.muse as a skill root, and never silently mirror into
+      # ~/.agents/skills (#226).
+      skills: .agents/skills/
+      skills_cross_agent: null
+      rules: "Indexed: aiwg show rule + AGENTS.md discover-first bridge"
+      behaviors: null
+    native_features:
+      cron: false
+      agent_teams: false
+      tasks: false
+      mcp: true
+      behaviors: false
+      mission_control: false
+      daemon: false
+    emulation:
+      cron: null
+      agent_teams: null
+      tasks: aiwg-mc
+      mcp: null
+      behaviors: aiwg-mc
+      mission_control: aiwg-mc
+      daemon: null
+    hook_wiring:
+      at_link_support: false
+      hook_file: .muse/hooks.json
+      fallback: full-inject
+      context_file: AGENTS.md
+    deploy_target: mixed
+    aggregated_output: false
+
   openclaw:
     display_name: OpenClaw
     status: stable

package/agentic/code/providers/model-capabilities.v1.json

@@ -228,6 +228,19 @@
       "sourceUrl": "https://github.com/jmagly/aiwg/blob/main/docs/architecture/adr-grokbot-provider-target.md",
       "verifiedAt": "2026-09-15"
     },
+    "grok-build": {
+      "agent": "inherited",
+      "skill": "inherited",
+      "globalChild": "native",
+      "identifierSyntax": "Provider-local alias from grok inspect and $GROK_HOME config; distinct from API model id",
+      "inheritance": "Agent and skill roles resolve through the session model unless a validated Grok Build alias is selected",
+      "invalidPinFallback": "Report the unavailable alias; use the sole discovered model only when exactly one is available",
+      "configTarget": "$GROK_HOME/config.toml [models] and [model.<alias>] (read-only discovery)",
+      "artifactFormat": "Grok Build model alias",
+      "verification": "grok inspect --json plus bounded parsing of model fields from reported config layers",
+      "sourceUrl": "https://docs.x.ai/build/settings",
+      "verifiedAt": "2026-09-21"
+    },
     "hermes": {
       "agent": "global-only",
       "skill": "unsupported",
@@ -253,6 +266,27 @@
       "verification": "Parse against OpenHuman definition schema",
       "sourceUrl": "https://github.com/tinyhumansai/openhuman/blob/main/src/openhuman/agent/harness/definition.rs",
       "verifiedAt": "2026-07-20"
+    },
+    "muse": {
+      "agent": "unsupported",
+      "skill": "unsupported",
+      "globalChild": "informational",
+      "identifierSyntax": "Meta provider catalog model_id (Muse Code 1.4.0: muse-spark-1.3 current, muse-spark-1.3-contributor default, muse-spark-1.2, muse-spark-1.2-contributor), passed as muse exec --model",
+      "inheritance": "The session model comes from --model, else settings.json `model`, else the provider catalog default; per-agent and per-skill pins are not verified",
+      "invalidPinFallback": "muse exits 1 with run.terminal.failed (\"model `<id>` does not exist or you lack access\"); never falls back to another model",
+      "configTarget": "$XDG_CONFIG_HOME/muse/settings.json `model` (read-only; AIWG never writes it)",
+      "artifactFormat": "Meta provider model id (session-level only)",
+      "verification": "muse exec --json --model <id> emits run.model.configured with model_id; observed muse-spark-1.3 and muse-spark-1.3-contributor in native session logs on Muse Code 1.4.0",
+      "sourceUrl": "https://github.com/jmagly/aiwg/blob/main/docs/architecture/adr-muse-provider-target.md",
+      "verifiedAt": "2026-09-25",
+      "effortValues": [
+        "minimal",
+        "low",
+        "medium",
+        "high",
+        "xhigh",
+        "max"
+      ]
     }
   }
 }

package/agentic/code/providers/model-catalog.v1.json

@@ -1,7 +1,7 @@
 {
   "$schema": "../../../schemas/models/model-catalog.v1.schema.json",
   "version": "1.0.0",
-  "refreshedAt": "2026-07-20",
+  "refreshedAt": "2026-09-21",
   "staleAfterDays": 90,
   "providers": {
     "antigravity": {
@@ -28,12 +28,12 @@
     "claude": {
       "roles": {
         "reasoning": {
-          "id": "claude-opus-4-7",
+          "id": "claude-opus-5",
           "status": "active",
           "observed": false
         },
         "coding": {
-          "id": "claude-sonnet-4-6",
+          "id": "claude-sonnet-5",
           "status": "active",
           "observed": false
         },
@@ -43,29 +43,29 @@
           "observed": false
         }
       },
-      "sourceUrl": "https://docs.anthropic.com/en/docs/about-claude/models/overview",
-      "verifiedAt": "2026-07-20"
+      "sourceUrl": "https://platform.claude.com/docs/en/about-claude/models/overview",
+      "verifiedAt": "2026-09-21"
     },
     "codex": {
       "roles": {
         "reasoning": {
-          "id": "gpt-5.4",
+          "id": "gpt-5.6-sol",
           "status": "active",
           "observed": true
         },
         "coding": {
-          "id": "gpt-5.5",
+          "id": "gpt-5.6-terra",
           "status": "active",
           "observed": true
         },
         "efficiency": {
-          "id": "gpt-5.4-mini",
+          "id": "gpt-5.6-luna",
           "status": "active",
           "observed": true
         }
       },
-      "sourceUrl": "https://learn.chatgpt.com/docs/agent-configuration/subagents",
-      "verifiedAt": "2026-07-20"
+      "sourceUrl": "https://learn.chatgpt.com/docs/models",
+      "verifiedAt": "2026-09-21"
     },
     "copilot": {
       "roles": {
@@ -133,12 +133,12 @@
     "opencode": {
       "roles": {
         "reasoning": {
-          "id": "anthropic/claude-opus-4-7",
+          "id": "anthropic/claude-opus-5",
           "status": "unverified",
           "observed": false
         },
         "coding": {
-          "id": "anthropic/claude-sonnet-4-6",
+          "id": "anthropic/claude-sonnet-5",
           "status": "unverified",
           "observed": false
         },
@@ -149,7 +149,7 @@
         }
       },
       "sourceUrl": "https://opencode.ai/docs/models",
-      "verifiedAt": "2026-07-20"
+      "verifiedAt": "2026-09-21"
     },
     "omp": {
       "roles": {
@@ -298,6 +298,27 @@
       "sourceUrl": "https://github.com/jmagly/aiwg/blob/main/docs/architecture/adr-grokbot-provider-target.md",
       "verifiedAt": "2026-09-15"
     },
+    "grok-build": {
+      "roles": {
+        "reasoning": {
+          "id": "configured/reasoning",
+          "status": "unverified",
+          "observed": false
+        },
+        "coding": {
+          "id": "configured/coding",
+          "status": "unverified",
+          "observed": false
+        },
+        "efficiency": {
+          "id": "configured/efficiency",
+          "status": "unverified",
+          "observed": false
+        }
+      },
+      "sourceUrl": "https://docs.x.ai/build/settings",
+      "verifiedAt": "2026-09-21"
+    },
     "hermes": {
       "roles": {
         "reasoning": {
@@ -339,6 +360,27 @@
       },
       "sourceUrl": "https://github.com/tinyhumansai/openhuman/blob/main/src/openhuman/agent/harness/definition.rs",
       "verifiedAt": "2026-07-20"
+    },
+    "muse": {
+      "roles": {
+        "reasoning": {
+          "id": "muse-spark-1.3",
+          "status": "active",
+          "observed": true
+        },
+        "coding": {
+          "id": "muse-spark-1.3",
+          "status": "active",
+          "observed": true
+        },
+        "efficiency": {
+          "id": "muse-spark-1.3",
+          "status": "active",
+          "observed": true
+        }
+      },
+      "sourceUrl": "https://dev.meta.ai/docs/models",
+      "verifiedAt": "2026-09-25"
     }
   }
 }

package/bin/aiwg.mjs

@@ -149,6 +149,8 @@ const FAST_HELP_TEXT = `
   EVIDENCE
     evidence export --output <dir> Package portable activity, report, source, eval, and provenance evidence
     evidence verify <bundle>     Verify every member hash and the bundle checkpoint
+    effect record|lookup|reconcile Record, look up or reconcile a side effect in the signed effect ledger
+    effect verify|checkpoint|keys Verify the effect ledger, checkpoint it, or manage its signing key
 
   SCAFFOLDING
     new-bundle <name>            Create project-local bundle (--type extension|addon|framework|plugin|provider, --starter skill|rule|agent|minimal, --dry-run)

package/dist/src/api/index.d.ts

@@ -25,6 +25,7 @@ export * from '../schema/index.js';
 export * from '../dataset/index.js';
 export * from '../network-analysis/index.js';
 export * from '../decision/index.js';
+export * from '../effects/index.js';
 export { ARTIFACT_TRUST_ROOT_MEDIA_TYPE, ARTIFACT_TRUST_ROOT_SCHEMA_VERSION, ARTIFACT_TRUST_STATE_SCHEMA_VERSION, bootstrapTrustRoot, parseTrustRoot, parseTrustState, readTrustState, validateTrustRoot, validateTrustState, verifyRootTransition, writeTrustState, channelStateKey, canonicalJson, dssePae, publicKeyFingerprint, sha256, type ArtifactTrustRoot, type ArtifactTrustState, type RootBootstrapResult, type RootTransitionResult, type ArtifactTrustPolicySettings, type TrustedChannelState, } from '../security/artifact-trust.js';
 export * from '../writing/writer-profile.js';
 export * from '../writing/writer-profile-store.js';

package/dist/src/api/index.js

@@ -25,6 +25,7 @@ export * from '../schema/index.js';
 export * from '../dataset/index.js';
 export * from '../network-analysis/index.js';
 export * from '../decision/index.js';
+export * from '../effects/index.js';
 export { ARTIFACT_TRUST_ROOT_MEDIA_TYPE, ARTIFACT_TRUST_ROOT_SCHEMA_VERSION, ARTIFACT_TRUST_STATE_SCHEMA_VERSION, bootstrapTrustRoot, parseTrustRoot, parseTrustState, readTrustState, validateTrustRoot, validateTrustState, verifyRootTransition, writeTrustState, channelStateKey, canonicalJson, dssePae, publicKeyFingerprint, sha256, } from '../security/artifact-trust.js';
 export * from '../writing/writer-profile.js';
 export * from '../writing/writer-profile-store.js';

package/dist/src/artifacts/cli.js

@@ -526,22 +526,21 @@ async function handleBuild(args) {
     loadUserGraphConfigs(cwd);
     loadGlobalGraphConfigs();
     let jsonBuilt = false;
-    let projectGraphBuilt = false;
+    const builtGraphs = new Set();
     if (graph) {
         // --graph X: build the JSON graph if X is one; otherwise X may be a
         // research-corpus markdown view, rendered below.
         if (graph in GRAPH_CONFIGS) {
             await buildIndex(cwd, { force, verbose, scope, graph, explicit: true });
             jsonBuilt = true;
-            projectGraphBuilt = graph === 'project';
+            builtGraphs.add(graph);
         }
     }
     else if (all) {
         // Build all known graphs — user asked for everything, but don't hard-error on missing dirs
         for (const [name] of orderedGraphEntries(Object.entries(GRAPH_CONFIGS))) {
             await buildIndex(cwd, { force, verbose, graph: name, explicit: false });
-            if (name === 'project')
-                projectGraphBuilt = true;
+            builtGraphs.add(name);
         }
         jsonBuilt = true;
     }
@@ -550,8 +549,7 @@ async function handleBuild(args) {
         for (const [name, config] of orderedGraphEntries(Object.entries(GRAPH_CONFIGS))) {
             if (config.defaultBuild) {
                 await buildIndex(cwd, { force, verbose, scope: name === Object.keys(GRAPH_CONFIGS)[0] ? scope : undefined, graph: name, explicit: false });
-                if (name === 'project')
-                    projectGraphBuilt = true;
+                builtGraphs.add(name);
             }
         }
         jsonBuilt = true;
@@ -583,21 +581,28 @@ async function handleBuild(args) {
     if (viewResults.some((r) => r.status === 'unsupported')) {
         process.exit(1);
     }
-    if (projectGraphBuilt) {
-        await syncProjectFortemiCoreCacheAfterBuild(cwd, verbose);
+    if (builtGraphs.size > 0) {
+        await syncFortemiCoreCachesAfterBuild(cwd, builtGraphs, verbose);
     }
 }
-async function syncProjectFortemiCoreCacheAfterBuild(cwd, verbose) {
-    try {
-        const { syncFortemiCoreIndex } = await import('./fortemi-core-sync.js');
-        const manifest = syncFortemiCoreIndex(cwd, { graph: 'project' });
-        if (verbose) {
-            console.log(`Fortemi Core project sync: ${manifest.status}, ${manifest.item_count} item(s) → ${manifest.export_path}`);
+async function syncFortemiCoreCachesAfterBuild(cwd, graphs, verbose) {
+    const { syncFortemiCoreIndex } = await import('./fortemi-core-sync.js');
+    const { loadGraphIndexFile } = await import('./index-reader.js');
+    for (const graph of graphs) {
+        // Some default-build graphs skip cleanly when their scan roots are absent.
+        // Only materialize a cache when this build left an actual source index.
+        if (!loadGraphIndexFile(cwd, 'metadata.json', graph))
+            continue;
+        try {
+            const manifest = syncFortemiCoreIndex(cwd, { graph });
+            if (verbose) {
+                console.log(`Fortemi Core ${graph} sync: ${manifest.status}, ${manifest.item_count} item(s) → ${manifest.export_path}`);
+            }
+        }
+        catch (err) {
+            console.error(`Warning: Fortemi Core ${graph} sync failed: ${err instanceof Error ? err.message : String(err)}`);
+            console.error(`Run \`aiwg index sync --graph ${graph}\` before using Fortemi-backed commands for '${graph}' artifacts.`);
         }
-    }
-    catch (err) {
-        console.error(`Warning: Fortemi Core project sync failed: ${err instanceof Error ? err.message : String(err)}`);
-        console.error('Run `aiwg index sync --graph project` before using Fortemi-backed `aiwg discover` or `aiwg show` for project-local artifacts.');
     }
 }
 /**

package/dist/src/artifacts/enrichment/cli.js

@@ -187,7 +187,7 @@ function handleUsingRlm(args) {
             inputs: [{ artifactId: f, contentHash }],
             query: ENRICHMENT_PROMPT,
             subPrompt: ENRICHMENT_PROMPT,
-            model: 'claude-sonnet-4-6',
+            model: 'claude-sonnet-5',
             aggregateStrategy: 'json-merge',
         });
         plans.push({

package/dist/src/artifacts/fortemi-core-query-adapter.js

@@ -168,7 +168,11 @@ export function loadFortemiCoreExport(cwd, graph = "project", sourcePaths) {
         }
     }
     let status = getFortemiCoreSyncStatus(cwd, graph);
-    if ((!status.optedIn || !status.built || status.stale) && graph === "framework") {
+    // The packaged framework index is a bootstrap fallback for an absent shared
+    // cache. Once a shared cache exists, its stale state proves that the local
+    // source index is newer; silently replacing it with an older packaged index
+    // would hide newly authored capabilities.
+    if ((!status.optedIn || !status.built) && !status.stale && graph === "framework") {
         const prebuilt = getFortemiCorePrebuiltStatus(graph);
         if (prebuilt.optedIn && prebuilt.built && !prebuilt.stale) {
             status = prebuilt;
@@ -182,7 +186,7 @@ export function loadFortemiCoreExport(cwd, graph = "project", sourcePaths) {
     if (!status.built || status.stale) {
         return {
             reason: `${status.reason ??
-                `Fortemi Core static index for graph '${graph}' is stale or incomplete`}. Re-run 'aiwg index sync' or pass '--backend local' to use the legacy local index.`,
+                `Fortemi Core static index for graph '${graph}' is stale or incomplete`}. Re-run 'aiwg index sync${graph === "project" ? "" : ` --graph ${graph}`}' or pass '--backend local' to use the legacy local index.`,
         };
     }
     try {

package/dist/src/artifacts/query-engine.js

@@ -949,8 +949,12 @@ export async function discoverCapability(cwd, params) {
                     continue;
                 }
             }
-            if (loaded.reason)
+            if (loaded.reason) {
                 unavailableReason ??= loaded.reason;
+                if (graph === 'framework' && !params.graph) {
+                    console.error(`Warning: framework capabilities are unavailable: ${loaded.reason}`);
+                }
+            }
             entries.push(...loaded.entries.map((entry) => withIndexProvenance(entry, graph)));
             const discovered = await queryFortemiCoreAiwgDiscovery(cwd, {
                 graph,
@@ -1171,7 +1175,7 @@ export async function discoverCapability(cwd, params) {
     // broader phrase / type filter, and a capability refresh via `aiwg use`.
     const emptyResultHint = scored.length === 0
         ? backend === 'fortemi-core'
-            ? `No capability matched "${params.phrase}" among ${entries.length} Fortemi Core static-cache capabilities. Try a broader phrase or a \`--type\` filter. If the local index changed, refresh the cache with \`aiwg index sync\`, or pass \`--backend local\` to use the legacy local index.`
+            ? `No capability matched "${params.phrase}" among ${entries.length} Fortemi Core static-cache capabilities. Try a broader phrase or a \`--type\` filter. If the local index changed, refresh the cache with \`aiwg index sync ${params.graph ? `--graph ${params.graph}` : '--all'}\`, or pass \`--backend local\` to use the legacy local index.`
             : `No capability matched "${params.phrase}" among ${entries.length} indexed capabilities. Try a broader phrase or a \`--type\` filter. If you just installed or authored capabilities, refresh discovery with \`aiwg use <framework>\` (or \`aiwg index build\`).`
         : null;
     const includePaths = params.includePaths ?? true;
@@ -1272,7 +1276,9 @@ export async function discoverCapability(cwd, params) {
     }
     if (scored.length === 0) {
         console.log(`No discovery matches for "${params.phrase}" in types: ${types.join(',')}.`);
-        console.log('Try a broader phrase or a `--type` filter. If capabilities were just added, refresh with `aiwg use <framework>` (or `aiwg index build`).');
+        console.log(backend === 'fortemi-core'
+            ? emptyResultHint
+            : 'Try a broader phrase or a `--type` filter. If capabilities were just added, refresh with `aiwg use <framework>` (or `aiwg index build`).');
         return;
     }
     const relaxedNote = relaxed ? ' — relaxed match (verbose query)' : '';
@@ -1410,8 +1416,12 @@ async function loadShowEntries(cwd, params) {
                     continue;
                 }
             }
-            if (loaded.reason)
+            if (loaded.reason) {
                 unavailableReason ??= loaded.reason;
+                if (graph === 'framework' && !params.graph) {
+                    console.error(`Warning: framework capabilities are unavailable: ${loaded.reason}`);
+                }
+            }
             entries.push(...loaded.entries.map((entry) => withIndexProvenance(entry, graph)));
         }
         if (entries.length === 0 && unavailableReason) {

package/dist/src/artifacts/views/cli.js

@@ -222,7 +222,7 @@ function handleBuild(args) {
             ],
             query: def.prompt,
             subPrompt: def.prompt,
-            model: 'claude-sonnet-4-6',
+            model: 'claude-sonnet-5',
             aggregateStrategy: def.aggregate,
         });
         plans.push({

package/dist/src/audit/operator-decision.js

@@ -154,6 +154,16 @@ function validateInput(input) {
 function hashRecord(value) {
     return `sha256:${createHash('sha256').update(canonicalJson(value)).digest('hex')}`;
 }
+/**
+ * Deterministic JSON for decision hashes. This is deliberately NOT the RFC 8785
+ * canonicalizer (`security/artifact-trust.canonicalJson`): keys are ordered with
+ * `localeCompare` rather than by UTF-16 code unit, and `undefined` members are
+ * dropped. The two agree when no sibling keys differ in case or punctuation
+ * order, but not in general (for example `{"B","_c","a"}` orders as
+ * `_c,a,B` here and `B,_c,a` under RFC 8785). Existing record_hash and
+ * context_digest values in stored decision chains depend on this ordering, so
+ * it is kept; test/unit/security/canonical-json-parity.test.ts pins it.
+ */
 function canonicalJson(value) {
     if (Array.isArray(value))
         return `[${value.map(canonicalJson).join(',')}]`;