@aiwg/cli 2026.9.3 → 2026.9.5

package/README.md

@@ -961,6 +961,27 @@ If both `aiwg` and `@aiwg/cli` were installed into the same prefix, the most
 recent install owns the shared executable link. Remove both, then install the
 distribution you intend to use.
 
+### Bundled setup requires the full package
+
+`aiwg use all` and named framework setup such as `aiwg use sdlc` need the
+framework and addon sources included in `aiwg`. The lightweight `@aiwg/cli`
+package supports signed web lookup and external project-local bundle deployment;
+web lookup does not download a complete source tree for bundled setup.
+
+If setup reports that the full package is required, replace the lightweight
+global installation and rerun setup with your provider:
+
+```bash
+npm uninstall -g @aiwg/cli
+npm install -g aiwg
+aiwg use all --provider pi
+```
+
+Older CLI versions can instead report `ENOENT` while scanning
+`@aiwg/cli/agentic/code/addons`. The same recovery applies. Existing project
+files are retained; the prerequisite check now stops before deployment or
+project initialization, including in dry-run mode.
+
 ## Migrating Between Distributions
 
 From full AIWG to the lightweight package:

package/THIRD_PARTY_NOTICES.md

@@ -40,6 +40,22 @@ The schema is vendored unchanged to make UHP fixture and compatibility tests
 offline and version-pinned. AIWG's experimental client does not imply UHP
 server conformance.
 
+## Optional network-analysis tools
+
+The `network-analysis` addon interoperates with separately installed tools. No
+Wireshark, TShark, Capinfos, or Termshark executable or source is copied into the
+AIWG npm archives.
+
+- Wireshark project tools: TShark and Capinfos
+- Upstream: <https://www.wireshark.org/download.html>
+- Upstream license: GNU General Public License version 2 or later
+- Termshark upstream: <https://github.com/gcla/termshark>
+- Termshark license: MIT
+
+Operators install and update these programs independently. AIWG discovers only
+explicit executable paths or trusted search roots and does not change host
+capture permissions.
+
 ## Distribution boundary
 
 The `aiwg` and `@aiwg/cli` npm archives do not copy Fortemi or Bytecask object code into their own tarballs. npm resolves those packages separately during installation. AIWG does, however, intentionally import Fortemi in-process at runtime, so separate archive delivery is not by itself a legal conclusion about whether execution forms a combined work.

package/agentic/code/providers/capability-matrix.yaml

@@ -370,7 +370,7 @@ providers:
       # bridge. The "MCP:" entries below are the optional enrichment path, not a
       # requirement. Broader MCP modernization: #1533.
       agents: AGENTS.md
-      commands: "AGENTS.md bridge + aiwg discover/show (MCP command-run optional)"
+      commands: "Indexed: aiwg discover / aiwg show command (MCP command-run optional)"
       skills: "~/.hermes/skills/"
       skills_cross_agent: "~/.hermes/skills/.aiwg/"
       rules: "AGENTS.md ### Rule sections + aiwg show rule (MCP rule-list/rule-show optional)"
@@ -442,8 +442,8 @@ providers:
     daemon_tier: unsupported
     daemon_pty_adapter: false
     artifact_paths:
-      agents: ".agents/agents/"                          # markdown personas (workspace-scoped — the coding hosts OpenHuman drives); harness TOML is Tier-2 (#1559)
-      commands: "AGENTS.md bridge (no native command surface)"
+      agents: "Indexed: aiwg discover / aiwg show agent"   # native TOML harness agents are opt-in (#1559)
+      commands: "Indexed: aiwg discover / aiwg show command"
       skills: "~/.openhuman/skills/"                      # global/home-dir like OpenClaw — ungated user-scope native scan (ops_discover.rs); same root OpenHuman's own installer writes to (#1553)
       skills_cross_agent: "~/.openhuman/.aiwg/skills/"
       rules: "AGENTS.md ### Rule sections + aiwg show rule"
@@ -515,6 +515,48 @@ providers:
     deploy_target: project
     aggregated_output: false
 
+  deepseek-harness:
+    display_name: DeepSeek Harness
+    aliases:
+      - dsh
+    status: experimental
+    daemon_tier: unsupported
+    daemon_pty_adapter: false
+    artifact_paths:
+      agents: .agents/skills/
+      commands: null
+      skills: .agents/skills/
+      rules: AGENTS.md
+      behaviors: null
+      cordis_patch: .dsh/aiwg.cordis.patch.yml
+    native_features:
+      cron: false
+      agent_teams: true
+      tasks: true
+      mcp: true
+      behaviors: true
+      mission_control: false
+      daemon: false
+    emulation:
+      cron: external-trigger
+      agent_teams: native
+      tasks: native
+      mcp: native
+      behaviors: null
+      mission_control: aiwg-mc
+      daemon: null
+    hook_wiring:
+      at_link_support: false
+      fallback: full-inject
+      context_file: AGENTS.md
+      max_bytes: 65536
+    interaction:
+      structured_questions: none
+      fallback: markdown
+      notes: Headless and SDK profiles do not expose an interactive question UI.
+    deploy_target: project
+    aggregated_output: false
+
   pi:
     display_name: Pi Coding Agent
     aliases:

package/agentic/code/providers/deepseek-harness/README.md

@@ -0,0 +1,8 @@
+# DeepSeek Harness provider resources
+
+AIWG deploys provider-neutral skills to `.agents/skills`, a compact `AGENTS.md`
+bootstrap, and a project-owned Cordis patch at `.dsh/aiwg.cordis.patch.yml`.
+
+The checked-in patch controls only AIWG's safe operational defaults. Runtime
+provider routes and credential environment-variable references belong in a
+separate, ephemeral patch generated by the transport adapter.

package/agentic/code/providers/deepseek-harness/aiwg.cordis.patch.yml

@@ -0,0 +1,10 @@
+# AIWG-owned safe defaults for DeepSeek Harness. No secrets belong here.
+- id: session-persistence-jsonl
+  config:
+    compression: none
+- id: session-telemetry-otel
+  disabled: true
+- id: sandbox-policy
+  config:
+    mode: workspace-write
+    workspaceRoot: !!js process.cwd()

package/agentic/code/providers/model-capabilities.v1.json

@@ -118,6 +118,17 @@
       "verification": "Inspect strict JSONL state and the selected provider/model",
       "sourceUrl": "https://github.com/earendil-works/pi/tree/main/packages/coding-agent#cli-reference", "verifiedAt": "2026-09-04"
     },
+    "deepseek-harness": {
+      "agent": "native", "skill": "inherited", "globalChild": "native",
+      "identifierSyntax": "provider/model passed through the SDK initialize request or agent-default-model Cordis row",
+      "effortValues": ["minimal", "low", "medium", "high", "xhigh"],
+      "inheritance": "Subagents inherit the configured Harness route unless explicitly overridden",
+      "invalidPinFallback": "Explicit unavailable routes or models fail the request",
+      "configTarget": "Ephemeral Cordis route patch and SDK initialize request",
+      "artifactFormat": "agent-default-model config; JSON-RPC initialize params",
+      "verification": "Pinned source contract plus opt-in headless OpenRouter smoke",
+      "sourceUrl": "https://github.com/deepseek-ai/deepseek-harness", "verifiedAt": "2026-09-05"
+    },
     "windsurf": {
       "agent": "unsupported", "skill": "unsupported", "globalChild": "inherited",
       "identifierSyntax": "UI-selected provider model",

package/agentic/code/providers/model-catalog.v1.json

@@ -89,6 +89,14 @@
       },
       "sourceUrl": "https://github.com/earendil-works/pi/tree/main/packages/coding-agent#providers--models", "verifiedAt": "2026-09-04"
     },
+    "deepseek-harness": {
+      "roles": {
+        "reasoning": { "id": "configured/reasoning", "status": "unverified", "observed": false },
+        "coding": { "id": "configured/coding", "status": "unverified", "observed": false },
+        "efficiency": { "id": "configured/efficiency", "status": "unverified", "observed": false }
+      },
+      "sourceUrl": "https://github.com/deepseek-ai/deepseek-harness", "verifiedAt": "2026-09-05"
+    },
     "warp": {
       "roles": {
         "reasoning": { "id": "profile-selected", "status": "unverified", "observed": false },

package/bin/aiwg.mjs

@@ -99,6 +99,7 @@ const FAST_HELP_TEXT = `
 
   WORKSPACE
     status                       Show workspace health and installed frameworks
+    sessions <command>           Manage the normalized session catalog, imports, and analytics
     migrate-workspace            Migrate legacy .aiwg/ to framework-scoped structure
     rollback-workspace           Rollback workspace migration from backup
 

package/dist/src/api/index.d.ts

@@ -20,7 +20,21 @@ export * from '../uhp/index.js';
 export * from '../mission-protocol/index.js';
 export * from '../governance/index.js';
 export * from '../output-modes/index.js';
+export * from '../writing/contextual-diagnostics.js';
 export * from '../schema/index.js';
 export * from '../dataset/index.js';
+export * from '../network-analysis/index.js';
 export { ARTIFACT_TRUST_ROOT_MEDIA_TYPE, ARTIFACT_TRUST_ROOT_SCHEMA_VERSION, ARTIFACT_TRUST_STATE_SCHEMA_VERSION, bootstrapTrustRoot, parseTrustRoot, parseTrustState, readTrustState, validateTrustRoot, validateTrustState, verifyRootTransition, writeTrustState, channelStateKey, canonicalJson, dssePae, publicKeyFingerprint, sha256, type ArtifactTrustRoot, type ArtifactTrustState, type RootBootstrapResult, type RootTransitionResult, type ArtifactTrustPolicySettings, type TrustedChannelState, } from '../security/artifact-trust.js';
+export * from '../writing/writer-profile.js';
+export * from '../writing/writer-profile-store.js';
+export * from '../writing/writer-profile-legacy.js';
+export * from '../writing/exemplar-selection.js';
+export * from '../writing/writing-brief.js';
+export * from '../writing/fidelity.js';
+export * from '../writing/voice-revision.js';
+export * from '../writing/voice-evaluation.js';
+export * from '../writing/writing-consumer.js';
+export * from '../writing/writing-channels.js';
+export * from '../writing/writing-receipt.js';
+export * from '../writing/writer-migration.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/api/index.js

@@ -20,7 +20,21 @@ export * from '../uhp/index.js';
 export * from '../mission-protocol/index.js';
 export * from '../governance/index.js';
 export * from '../output-modes/index.js';
+export * from '../writing/contextual-diagnostics.js';
 export * from '../schema/index.js';
 export * from '../dataset/index.js';
+export * from '../network-analysis/index.js';
 export { ARTIFACT_TRUST_ROOT_MEDIA_TYPE, ARTIFACT_TRUST_ROOT_SCHEMA_VERSION, ARTIFACT_TRUST_STATE_SCHEMA_VERSION, bootstrapTrustRoot, parseTrustRoot, parseTrustState, readTrustState, validateTrustRoot, validateTrustState, verifyRootTransition, writeTrustState, channelStateKey, canonicalJson, dssePae, publicKeyFingerprint, sha256, } from '../security/artifact-trust.js';
+export * from '../writing/writer-profile.js';
+export * from '../writing/writer-profile-store.js';
+export * from '../writing/writer-profile-legacy.js';
+export * from '../writing/exemplar-selection.js';
+export * from '../writing/writing-brief.js';
+export * from '../writing/fidelity.js';
+export * from '../writing/voice-revision.js';
+export * from '../writing/voice-evaluation.js';
+export * from '../writing/writing-consumer.js';
+export * from '../writing/writing-channels.js';
+export * from '../writing/writing-receipt.js';
+export * from '../writing/writer-migration.js';
 //# sourceMappingURL=index.js.map

package/dist/src/artifacts/corpus-tools/source-types.js

@@ -65,6 +65,7 @@ export const DEFAULT_SOURCE_TYPES = {
         audio: { description: 'Audio recording, lecture audio, or direct-hosted audio source.', aliases: ['audio', 'audio-recording', 'lecture-audio', 'recording-audio'], template: 'reference-media', requiredSections: ['Citation', 'Media Profile', 'Summary', 'Key Timestamps', 'Evidence and Transcript Method'], citationFormat: 'timestamp-transcript', acquisition: 'media-curator', storage: 'media/audio', qualityRules: 'media-grade', defaultRadarCadence: 'on-demand' },
         podcast: { description: 'Podcast episode or feed-hosted interview.', aliases: ['podcast', 'podcast-episode', 'episode', 'interview-audio'], template: 'reference-media', requiredSections: ['Citation', 'Media Profile', 'Summary', 'Key Timestamps', 'Evidence and Transcript Method'], citationFormat: 'timestamp-transcript', acquisition: 'media-curator', storage: 'media/audio', qualityRules: 'interview-hedged-grade', defaultRadarCadence: 'on-demand' },
         lecture: { description: 'Institutional lecture, course video, keynote, seminar, or invited talk recording.', aliases: ['lecture', 'course', 'seminar', 'keynote', 'talk', 'invited-talk', 'conference-talk'], template: 'reference-media', requiredSections: ['Citation', 'Media Profile', 'Summary', 'Key Timestamps', 'Evidence and Transcript Method'], citationFormat: 'timestamp-transcript', acquisition: 'media-curator', storage: 'media/video', qualityRules: 'lecture-grade', defaultRadarCadence: 'on-demand' },
+        'packet-evidence': { description: 'Governed observational evidence derived from a saved network packet capture.', aliases: ['packet-evidence', 'packet evidence', 'pcap-evidence', 'network-trace', 'network trace'], template: 'reference-packet-evidence', requiredSections: ['Evidence Citation', 'Collection Context', 'Observed Facts', 'Inferences', 'Limitations', 'Provenance'], citationFormat: 'pcap-digest-frame-stream-time', acquisition: 'governed-evidence-bundle', storage: 'sources/evidence', qualityRules: 'observational-evidence-no-grade', defaultRadarCadence: 'on-demand' },
         'internal-review': { description: 'Internal research note or architecture review (not an external source).', aliases: ['internal-review', 'internal-research', 'internal-architecture-review', 'audit'], template: 'reference-internal', requiredSections: ['Summary', 'Findings'], citationFormat: 'internal-ref', acquisition: 'internal', storage: 'documentation/synthesis', qualityRules: 'internal-note', defaultRadarCadence: 'on-demand' },
     },
 };

package/dist/src/artifacts/index-files.js

@@ -11,6 +11,7 @@ import path from 'path';
 import { DEFAULT_INDEX_EXTENSIONS, GRAPH_CONFIGS, resolveGraphScanDir, } from './types.js';
 import { DEFAULT_PROJECT_AIWG_DIR, resolveProjectAiwgDir, } from '../config/project-artifacts.js';
 import { workspaceLinkedFiles } from '../smiths/context-pipeline/workspace-context.js';
+import { discoverProjectLocalBundles } from '../extensions/project-local-discovery.js';
 function pathContains(parent, child) {
     const relative = path.relative(parent, child);
     return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
@@ -35,7 +36,7 @@ export function findArtifactFiles(dir, extensions = DEFAULT_INDEX_EXTENSIONS) {
     return walkArtifactFiles(dir, extensions, new Set());
 }
 /** Recursively find indexable files, excluding hidden directories such as .index. */
-function walkArtifactFiles(dir, extensions, seenRealDirs) {
+function walkArtifactFiles(dir, extensions, seenRealDirs, boundary) {
     const results = [];
     if (!fs.existsSync(dir))
         return results;
@@ -55,6 +56,8 @@ function walkArtifactFiles(dir, extensions, seenRealDirs) {
         let stat;
         try {
             stat = fs.statSync(fullPath);
+            if (boundary && !pathContains(boundary, fs.realpathSync(fullPath)))
+                continue;
         }
         catch {
             continue;
@@ -62,7 +65,7 @@ function walkArtifactFiles(dir, extensions, seenRealDirs) {
         if (stat.isDirectory()) {
             if (entry.name.startsWith('.'))
                 continue;
-            results.push(...walkArtifactFiles(fullPath, extensions, seenRealDirs));
+            results.push(...walkArtifactFiles(fullPath, extensions, seenRealDirs, boundary));
         }
         else if (stat.isFile() && extensions.some(extension => entry.name.endsWith(extension))) {
             results.push(fullPath);
@@ -86,6 +89,18 @@ export async function collectGraphIndexFiles(cwd, graph) {
             files.add(file);
     }
     if (!graph || graph === 'project') {
+        // Additional search roots authorize bundle payloads, not the surrounding
+        // external corpus. Reuse deployment's validated source resolution, including
+        // plugin payloads, and prevent payload symlinks from escaping that boundary.
+        const { bundles } = await discoverProjectLocalBundles(cwd);
+        for (const bundle of bundles) {
+            if (scanDirs.some(scanDir => pathContains(scanDir, bundle.artifactPath)))
+                continue;
+            const boundary = fs.realpathSync(bundle.artifactPath);
+            for (const file of walkArtifactFiles(bundle.artifactPath, extensions, new Set(), boundary)) {
+                files.add(file);
+            }
+        }
         const workspacePath = path.join(cwd, 'WORKSPACE.md');
         const contextFiles = [
             ...(fs.existsSync(workspacePath) ? [workspacePath] : []),

package/dist/src/artifacts/repair.js

@@ -1,10 +1,30 @@
+import { createHash } from 'node:crypto';
 import { mkdir, readFile, rm, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { PROJECT_CONTROL_PLANE_FILES, auditProjectArtifactHealth, } from '../config/project-artifacts.js';
+async function optionalBytes(filePath) {
+    try {
+        return await readFile(filePath);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+async function writeAndVerify(destination, bytes) {
+    await mkdir(path.dirname(destination), { recursive: true });
+    await writeFile(destination, bytes, { flag: 'wx' });
+    if (!(await readFile(destination)).equals(bytes)) {
+        throw new Error(`Byte verification failed after copying artifact payload: ${destination}`);
+    }
+}
 export async function repairProjectArtifacts(options) {
     const projectDir = path.resolve(options.projectDir);
     const before = auditProjectArtifactHealth(projectDir);
     const copied = [];
+    const migrated = [];
+    const archivedConflicts = [];
     const removed = [];
     if (!before.external_configured) {
         throw new Error('No external AIWG artifact corpus is configured for this project.');
@@ -12,11 +32,8 @@ export async function repairProjectArtifacts(options) {
     if (!before.external_reachable) {
         throw new Error(`External AIWG artifact corpus is unavailable: ${before.artifact_root}`);
     }
-    if (before.divergent_control_files.length || before.divergent_local_corpus_files.length) {
-        throw new Error(`Automatic repair refused because local and external content diverges: ${[
-            ...before.divergent_control_files,
-            ...before.divergent_local_corpus_files,
-        ].join(', ')}`);
+    if (before.divergent_control_files.length) {
+        throw new Error(`Automatic repair refused because local and external control-plane content diverges: ${before.divergent_control_files.join(', ')}`);
     }
     for (const relativePath of before.missing_local_control_files) {
         const source = path.join(before.artifact_root, relativePath);
@@ -31,9 +48,39 @@ export async function repairProjectArtifacts(options) {
         }
     }
     for (const relativePath of before.duplicated_local_corpus_files) {
+        const localPath = path.join(before.local_control_root, relativePath);
+        const externalPath = path.join(before.artifact_root, relativePath);
+        const localBytes = await readFile(localPath);
+        const externalBytes = await optionalBytes(externalPath);
+        if (externalBytes === null) {
+            migrated.push(relativePath);
+            if (options.apply)
+                await writeAndVerify(externalPath, localBytes);
+        }
+        else if (!externalBytes.equals(localBytes)) {
+            const digest = createHash('sha256').update(localBytes).digest('hex').slice(0, 12);
+            const archiveRelative = path.join('archive', 'local-corpus-migration', 'conflicts', 'local', `${relativePath}.${digest}`);
+            archivedConflicts.push(archiveRelative.split(path.sep).join('/'));
+            if (options.apply) {
+                const archivePath = path.join(before.artifact_root, archiveRelative);
+                const archived = await optionalBytes(archivePath);
+                if (archived === null)
+                    await writeAndVerify(archivePath, localBytes);
+                else if (!archived.equals(localBytes))
+                    throw new Error(`Conflict archive path already contains different bytes: ${archivePath}`);
+            }
+        }
         removed.push(relativePath);
         if (options.apply) {
-            await rm(path.join(before.local_control_root, relativePath), { force: false });
+            const preservedPath = externalBytes === null
+                ? externalPath
+                : externalBytes.equals(localBytes)
+                    ? externalPath
+                    : path.join(before.artifact_root, archivedConflicts.at(-1));
+            if (!(await readFile(preservedPath)).equals(localBytes)) {
+                throw new Error(`Refusing to remove local payload before byte verification: ${relativePath}`);
+            }
+            await rm(localPath, { force: false });
         }
     }
     return {
@@ -41,6 +88,8 @@ export async function repairProjectArtifacts(options) {
         before,
         after: options.apply ? auditProjectArtifactHealth(projectDir) : before,
         copied,
+        migrated,
+        archivedConflicts,
         removed,
     };
 }

package/dist/src/catalog/cli.js

@@ -192,6 +192,26 @@ export async function handleCatalogSearch(args) {
     console.log(`Search results for: "${query}"`);
     displayModelsTable(models);
 }
+export function printCatalogHelp() {
+    console.log(`Usage: aiwg catalog <command> [options]
+
+Commands:
+  list             List models with optional filters
+  info <id>        Show detailed model information
+  search <query>   Search models by query
+
+Options (list):
+  --provider <id>     Filter by provider
+  --status <status>   Filter by model status
+  --tag <tag>         Filter by tag
+  --min-context <n>   Minimum context window in tokens
+
+Examples:
+  aiwg catalog list
+  aiwg catalog list --provider anthropic
+  aiwg catalog info claude-opus-4-6
+  aiwg catalog search opus`);
+}
 /**
  * Main catalog command router
  */
@@ -210,13 +230,7 @@ export async function main(args) {
             break;
         case undefined:
             console.error('Error: Catalog subcommand required');
-            console.log('Available: list, info, search');
-            console.log('');
-            console.log('Examples:');
-            console.log('  aiwg catalog list');
-            console.log('  aiwg catalog list --provider anthropic');
-            console.log('  aiwg catalog info claude-opus-4-6');
-            console.log('  aiwg catalog search opus');
+            printCatalogHelp();
             process.exit(1);
             break;
         default:

package/dist/src/catalog/cli.mjs

@@ -249,6 +249,27 @@ export async function handleCatalogSearch(args) {
   displayModelsTable(models);
 }
 
+export function printCatalogHelp() {
+  console.log(`Usage: aiwg catalog <command> [options]
+
+Commands:
+  list             List models with optional filters
+  info <id>        Show detailed model information
+  search <query>   Search models by query
+
+Options (list):
+  --provider <id>     Filter by provider
+  --status <status>   Filter by model status
+  --tag <tag>         Filter by tag
+  --min-context <n>   Minimum context window in tokens
+
+Examples:
+  aiwg catalog list
+  aiwg catalog list --provider anthropic
+  aiwg catalog info claude-opus-4-6
+  aiwg catalog search opus`);
+}
+
 /**
  * Main catalog command router
  */
@@ -271,13 +292,7 @@ export async function main(args) {
 
     case undefined:
       console.error('Error: Catalog subcommand required');
-      console.log('Available: list, info, search');
-      console.log('');
-      console.log('Examples:');
-      console.log('  aiwg catalog list');
-      console.log('  aiwg catalog list --provider anthropic');
-      console.log('  aiwg catalog info claude-opus-4-6');
-      console.log('  aiwg catalog search opus');
+      printCatalogHelp();
       process.exit(1);
       break;
 

package/dist/src/cli/agent-spawn.js

@@ -38,6 +38,12 @@ export const PROVIDER_CONFIGS = {
         dangerousFlag: '--dangerously-bypass-approvals-and-sandbox',
         name: 'OpenAI Codex',
     },
+    'deepseek-harness': {
+        binary: 'dsh',
+        dangerousFlag: null,
+        name: 'DeepSeek Harness',
+        promptPrefix: ['--profile', 'headless'],
+    },
     hermes: {
         // Hermes is a model series (NousResearch), not a confirmed standalone CLI.
         // Treat as IDE/runtime-integrated until a CLI is confirmed.
@@ -157,7 +163,10 @@ export function splitParams(params) {
     return result;
 }
 // ── Provider helpers ──────────────────────────────────────────
-const SPAWN_PROVIDER_ALIASES = { agy: 'antigravity' };
+const SPAWN_PROVIDER_ALIASES = {
+    agy: 'antigravity',
+    dsh: 'deepseek-harness',
+};
 /** Get config for a provider. Unknown values fail closed instead of launching another harness. */
 export function getProviderConfig(provider) {
     const candidate = provider.trim().toLowerCase();

package/dist/src/cli/handlers/artifacts.js

@@ -1,13 +1,13 @@
 import { getProjectDir } from '../../config/aiwg-config.js';
 import { moveProjectArtifacts } from '../../artifacts/move.js';
 import { repairProjectArtifacts } from '../../artifacts/repair.js';
-import { resolveProjectAiwgDir } from '../../config/project-artifacts.js';
+import { isProjectArtifactRootExternal, resolveProjectAiwgDir, resolveProjectAiwgDirForWrite, } from '../../config/project-artifacts.js';
 function usage() {
     return [
         'aiwg artifacts — Manage the project AIWG artifact root',
         '',
         'Usage:',
-        '  aiwg artifacts path [--json]',
+        '  aiwg artifacts path [--json] [--check-write]',
         '  aiwg artifacts move --to <path> [--from <path>] [--dry-run] [--no-reindex] [--no-sync]',
         '  aiwg artifacts attach --to <existing-path> [--dry-run] [--no-reindex] [--no-sync]',
         '  aiwg artifacts repair --dry-run',
@@ -43,6 +43,19 @@ export const artifactsHandler = {
         if (action === 'path') {
             const projectDir = getProjectDir(ctx, ctx.args);
             const artifactRoot = resolveProjectAiwgDir(projectDir);
+            const external = isProjectArtifactRootExternal(projectDir);
+            let writeReady = true;
+            let writeError = null;
+            try {
+                resolveProjectAiwgDirForWrite(projectDir);
+            }
+            catch (error) {
+                writeReady = false;
+                writeError = error instanceof Error ? error.message : String(error);
+            }
+            if (ctx.args.includes('--check-write') && !writeReady) {
+                return { exitCode: 1, message: writeError ?? `Artifact root is unavailable: ${artifactRoot}` };
+            }
             if (ctx.args.includes('--json')) {
                 return {
                     exitCode: 0,
@@ -50,6 +63,10 @@ export const artifactsHandler = {
                         schema: 'aiwg.artifacts.path.v1',
                         project_root: projectDir,
                         artifact_root: artifactRoot,
+                        external,
+                        write_ready: writeReady,
+                        write_error: writeError,
+                        local_control_files: ['AIWG.md', 'aiwg.config', 'frameworks/registry.json'],
                     }, null, 2),
                     rawOutput: true,
                 };
@@ -70,7 +87,9 @@ export const artifactsHandler = {
                         `  Local control plane: ${result.before.local_control_root}`,
                         `  External corpus:    ${result.before.artifact_root}`,
                         `  Copy locally: ${result.copied.length ? result.copied.join(', ') : 'none'}`,
-                        `  Remove local identical corpus copies: ${result.removed.length ? result.removed.join(', ') : 'none'}`,
+                        `  Migrate local-only payload: ${result.migrated.length ? result.migrated.join(', ') : 'none'}`,
+                        `  Archive divergent local variants: ${result.archivedConflicts.length ? result.archivedConflicts.join(', ') : 'none'}`,
+                        `  Remove local payload after verified preservation: ${result.removed.length ? result.removed.join(', ') : 'none'}`,
                         `  Result: ${result.after.classification}`,
                         applied ? '' : 'No files changed. Re-run with --apply after reviewing this plan.',
                     ].filter(Boolean).join('\n'),

package/dist/src/cli/handlers/help.js

@@ -60,6 +60,7 @@ function displayHelp() {
     ]);
     helpGroup('WORKSPACE', [
         ['status', 'Show workspace health and installed frameworks'],
+        ['sessions <command>', 'Manage the normalized session catalog, imports, and analytics'],
         ['migrate-workspace', 'Migrate legacy .aiwg/ to framework-scoped structure'],
         ['rollback-workspace', 'Rollback workspace migration from backup'],
     ]);
@@ -91,6 +92,8 @@ function displayHelp() {
     helpGroup('DISPATCH', [
         ['run skill <name>', 'Execute a script-bearing skill'],
         ['run <script-name>', 'Run a user-defined script from .aiwg/aiwg.config'],
+        ['writing <plan|proofread>', 'Use grounded briefs and authorized proofreading'],
+        ['writer-profile <action>', 'Manage author-controlled writer profile sidecars'],
         ['output-mode <action>', 'Configure composable output language and presentation'],
     ]);
     helpGroup('FEATURES', [

package/dist/src/cli/handlers/index.js

@@ -63,6 +63,8 @@ import { jobHandler } from './job.js';
 import { costReportHandler } from './cost-report.js';
 import { evidenceHandler } from './evidence.js';
 import { artifactVerifyHandler } from './artifact-verify.js';
+import { writingHandler } from './writing.js';
+import { writerProfileHandler } from './writer-profile.js';
 import { outputModeHandler } from './output-mode.js';
 import { installationHandler } from './installation.js';
 import { uhpHandler } from './uhp.js';
@@ -73,7 +75,7 @@ export {
 // Maintenance
 helpHandler, versionHandler, authHandler, doctorHandler, contextFirewallHandler, updateHandler, refreshHandler, regenerateHandler, workspaceContextHandler, 
 // Framework management
-useHandler, listHandler, removeHandler, promoteHandler, installHandler, packagesHandler, marketplaceHandler, initHandler, setupHandler, setupGenerateHandler, setupRunHandler, setupValidateHandler, issueHandler, issueAuditHandler, runHandler, jobHandler, costReportHandler, evidenceHandler, artifactVerifyHandler, outputModeHandler, schemaHandler, datasetHandler, installationHandler, 
+useHandler, listHandler, removeHandler, promoteHandler, installHandler, packagesHandler, marketplaceHandler, initHandler, setupHandler, setupGenerateHandler, setupRunHandler, setupValidateHandler, issueHandler, issueAuditHandler, runHandler, jobHandler, costReportHandler, evidenceHandler, artifactVerifyHandler, outputModeHandler, writerProfileHandler, writingHandler, schemaHandler, datasetHandler, installationHandler, 
 // Project
 newBundleHandler, quickrefHandler, newProjectHandler, sessionHandler, sessionsHandler, 
 // Workspace
@@ -158,6 +160,8 @@ export const allHandlers = [
     evidenceHandler,
     artifactVerifyHandler,
     outputModeHandler,
+    writerProfileHandler,
+    writingHandler,
     schemaHandler,
     datasetHandler,
     // Workspace management

package/dist/src/cli/handlers/models.js

@@ -10,8 +10,8 @@ import { load as loadYaml } from 'js-yaml';
 import { compileModelPolicy, validateCanonicalModelPolicy, validateUserProjectModelConfig, } from '../../models/provider-policy.js';
 const TIERS = new Set(['economy', 'standard', 'premium', 'max-quality']);
 const PROVIDERS = new Set([
-    'antigravity', 'claude', 'codex', 'copilot', 'cursor', 'factory', 'hermes',
-    'opencode', 'openclaw', 'openhuman', 'warp', 'windsurf',
+    'antigravity', 'claude', 'codex', 'copilot', 'cursor', 'deepseek-harness', 'factory', 'hermes',
+    'opencode', 'openclaw', 'openhuman', 'omp', 'pi', 'warp', 'windsurf',
 ]);
 function parseArgs(args) {
     const [subcommand = 'help', ...rest] = args;

package/dist/src/cli/handlers/output-mode.js

@@ -30,7 +30,7 @@ async function execute(ctx) {
         if (resolved.modes.length === 0)
             return { exitCode: 0, rawOutput: true, message: 'Effective output mode: unaltered\nContext cost: 0 tokens\nNo transformations active.' };
         const lines = resolved.modes.map((p, i) => `${i + 1}. ${p.id} [${p.kind}/${p.stage}] source=${p.source} scope=${p.scope} validation=${p.validation.level} context≈${p.contextCost ?? 0}`);
-        return { exitCode: 0, rawOutput: true, message: `Effective ordered stack:\n${lines.join('\n')}\nEstimated context cost: ${resolved.modes.reduce((n, p) => n + (p.contextCost ?? 0), 0)} tokens` };
+        return { exitCode: 0, rawOutput: true, message: `Selected ordered stack (no provider interception):\n${lines.join('\n')}\nDelivered/applied/validated: not observed by this status command.\nEstimated context cost: ${resolved.modes.reduce((n, p) => n + (p.contextCost ?? 0), 0)} tokens` };
     }
     if (!['enable', 'disable', 'clear'].includes(action))
         return { exitCode: 1, message: `Unknown output-mode action '${action}'.` };

package/dist/src/cli/handlers/runtime-info.js

@@ -178,7 +178,7 @@ async function handleRuntimeInfo(args, cwd = process.cwd()) {
                 console.log(`Aggregated output: ${caps.aggregated_output}`);
                 console.log(`\nArtifact paths:`);
                 for (const [type, path] of Object.entries(caps.artifact_paths)) {
-                    console.log(`  ${type}: ${path ?? '(none)'}`);
+                    console.log(`  ${type}: ${path || 'Indexed (aiwg discover / aiwg show)'}`);
                 }
                 console.log(`\nFeatures:`);
                 for (const [feat, native] of Object.entries(caps.native_features)) {