@aiwg/cli 2026.9.3 → 2026.9.4

package/README.md

@@ -961,6 +961,27 @@ If both `aiwg` and `@aiwg/cli` were installed into the same prefix, the most
 recent install owns the shared executable link. Remove both, then install the
 distribution you intend to use.
 
+### Bundled setup requires the full package
+
+`aiwg use all` and named framework setup such as `aiwg use sdlc` need the
+framework and addon sources included in `aiwg`. The lightweight `@aiwg/cli`
+package supports signed web lookup and external project-local bundle deployment;
+web lookup does not download a complete source tree for bundled setup.
+
+If setup reports that the full package is required, replace the lightweight
+global installation and rerun setup with your provider:
+
+```bash
+npm uninstall -g @aiwg/cli
+npm install -g aiwg
+aiwg use all --provider pi
+```
+
+Older CLI versions can instead report `ENOENT` while scanning
+`@aiwg/cli/agentic/code/addons`. The same recovery applies. Existing project
+files are retained; the prerequisite check now stops before deployment or
+project initialization, including in dry-run mode.
+
 ## Migrating Between Distributions
 
 From full AIWG to the lightweight package:

package/dist/src/cli/handlers/use.js

@@ -249,6 +249,36 @@ function resolveFrameworkDir(framework) {
  * aiwg-dev is contributor-only tooling — not for end users.
  */
 export const USE_ALL_DISALLOW = new Set(['aiwg-dev']);
+/** Full-framework setup requires the corpus omitted by the lightweight CLI. */
+async function bundledSetupPrerequisiteMessage(frameworkRoot) {
+    let packageName;
+    try {
+        packageName = JSON.parse(await fs.readFile(path.join(frameworkRoot, 'package.json'), 'utf8')).name;
+    }
+    catch {
+        // Embedded callers and source fixtures need not have package metadata.
+        return undefined;
+    }
+    if (packageName !== '@aiwg/cli')
+        return undefined;
+    const hasCorpus = (await Promise.all(['frameworks', 'addons'].map(async (kind) => {
+        try {
+            return (await fs.stat(path.join(frameworkRoot, 'agentic/code', kind))).isDirectory();
+        }
+        catch {
+            return false;
+        }
+    }))).every(Boolean);
+    if (hasCorpus)
+        return undefined;
+    return [
+        'Bundled framework setup requires the full aiwg package. This @aiwg/cli installation does not include framework and addon sources.',
+        'Replace the lightweight global package, then rerun your setup command:',
+        '  npm uninstall -g @aiwg/cli',
+        '  npm install -g aiwg',
+        '@aiwg/cli can still query signed web resources and deploy external project-local bundles.',
+    ].join('\n');
+}
 /**
  * Discover all addon names from the filesystem, minus the disallow list.
  */
@@ -2306,6 +2336,13 @@ export class UseHandler {
         if (framework === 'cockpit') {
             return installCockpit(ctx, remainingArgs);
         }
+        // Check before auto-init, global staging, or deployment can alter a project.
+        // Web lookup does not materialize the corpus required by bundled setup.
+        if (VALID_FRAMEWORKS.includes(framework)) {
+            const prerequisite = await bundledSetupPrerequisiteMessage(ctx.frameworkRoot || await getFrameworkRoot());
+            if (prerequisite)
+                return { exitCode: 1, message: prerequisite };
+        }
         // Structured logger for this invocation. Records go to both stderr (if
         // verbose level) and ~/.aiwg/logs/aiwg-YYYY-MM-DD.jsonl with full
         // provenance (invocation_id, aiwg_version, git_sha, etc.). #925.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiwg/cli",
-  "version": "2026.9.3",
+  "version": "2026.9.4",
   "description": "Lightweight AIWG CLI for signed, versioned web-backed resources.",
   "type": "module",
   "license": "MIT",