@ted-galago/wave-cli 0.1.20 → 0.1.22

package/README.md

@@ -133,6 +133,8 @@ wave osmd wiki read log.md
 wave osmd wiki init
 wave osmd wiki create index.md --content "# Agent Wiki"
 wave osmd wiki update "Agent Wiki/index.md" --file ./agent-wiki-index.md
+wave osmd wiki create "concepts/customer-health.md" --content "# Customer Health"
+wave osmd wiki update "decisions/use-agent-wiki.md" --content "# Use Agent Wiki"
 wave osmd wiki append-log --content "Observed durable event"
 wave find "Ted"
 wave open "Ted Martinez"
@@ -345,10 +347,11 @@ Path and permission rules:
 - `.agent` first slice supports only `notes.md`.
 - `osmd agent init <parent-ref>` is idempotent for default `.agent` files.
 - Agent Wiki index paths may be `index.md` or `Agent Wiki/index.md`; the CLI normalizes these to `Agent Wiki/index.md`.
+- Controlled Agent Wiki page paths may be `concepts/<name>.md`, `playbooks/<name>.md`, `decisions/<name>.md`, `org-summaries/<name>.md`, or the same forms prefixed with `Agent Wiki/`.
 - Agent Wiki log paths may be `log.md` or `Agent Wiki/log.md`; the CLI normalizes these to `Agent Wiki/log.md`.
-- Agent Wiki first-slice agents should use `index.md` for broad writable wiki memory and `log.md` for append-only event memory.
+- Agent Wiki agents should use `index.md` for broad writable wiki memory, controlled folders for durable typed pages, and `log.md` for append-only event memory.
 - Agent Wiki `init` initializes backend-owned system files, including append-only `log.md`, through `initAgentMarkdown` at path `Agent Wiki`.
-- Agent Wiki `create` and `update` support only `index.md`; `log.md` cannot be overwritten.
+- Agent Wiki `create` and `update` support `index.md`, `concepts/*.md`, `playbooks/*.md`, `decisions/*.md`, and `org-summaries/*.md`; `log.md` cannot be created or overwritten by these commands.
 - Agent Wiki `append-log` supports only `log.md` and calls status first before appending.
 - The CLI uses backend GraphQL metadata directly and does not derive S3 paths, SHA paths, or backend storage conventions.
 - Atlas should inspect `path`, `source`, `access`, `owner`, `parentRef`, `exists`, `canCreate`, `canUpdate`, `canAppend`, `wikiRole`, `formatVersion`, `suggestedAction`, and `errorCode`.
@@ -361,6 +364,7 @@ Path and permission rules:
 - `append-log` fails unless status reports `exists: true`, `access: "append_only"`, and `canAppend: true`.
 - When `Agent Wiki/log.md` is missing and status reports `suggestedAction: "init"`, `append-log` returns a JSON error telling Atlas to run `wave osmd wiki init`.
 - Missing `Agent Wiki/index.md` is create-ready when status returns `exists: false`, `canCreate: true`, `canUpdate: false`, and `suggestedAction: "create"`.
+- Missing controlled pages are create-ready when backend status returns `exists: false`, `canCreate: true`, `canUpdate: false`, and `suggestedAction: "create"`.
 
 Atlas Agent Wiki log flow:
 
@@ -382,6 +386,22 @@ wave osmd wiki read index.md
 wave osmd wiki update index.md --content "# Agent Wiki\n\n## Entity Notes\n\n- directory/Wave Tools Team -> .agent/notes.md"
 ```
 
+Create or update controlled Agent Wiki pages. Atlas should call `status` first, then choose `create` or `update` from backend `canCreate`, `canUpdate`, and `suggestedAction`:
+
+```bash
+wave osmd wiki status concepts/customer-health.md
+wave osmd wiki create concepts/customer-health.md --content "# Customer Health\n\nDurable definition and usage notes."
+
+wave osmd wiki status decisions/use-agent-wiki.md
+wave osmd wiki update decisions/use-agent-wiki.md --content "# Use Agent Wiki\n\nDecision: store broad agent memory in controlled Agent Wiki pages."
+
+wave osmd wiki status playbooks/customer-review.md
+wave osmd wiki create playbooks/customer-review.md --content "# Customer Review\n\n1. Read the customer summary.\n2. Review recent notes.\n3. Append the maintenance log."
+
+wave osmd wiki status org-summaries/galago.md
+wave osmd wiki update org-summaries/galago.md --content "# Galago\n\nCurrent durable organization summary."
+```
+
 Append a parseable log entry. Use a stable fenced block so Atlas or backend jobs can parse the chronology later:
 
 ````bash
@@ -529,7 +549,7 @@ Use `wave osmd search "<query>" --scope combined` when Atlas needs merged canoni
 
 - `--scope os-only` searches canonical OSMD only.
 - `--scope agent-overlay-only` searches entity-specific `.agent` files.
-- `--scope agent-wiki-only` searches broad Agent Wiki files, including `index.md` and append-only `log.md`.
+- `--scope agent-wiki-only` searches broad Agent Wiki files, including `index.md`, controlled pages, and append-only `log.md`.
 - `--scope combined` searches the backend merged OSMD surface.
 
 Ambiguity contract:

package/dist/index.cjs

@@ -6147,6 +6147,15 @@ var positiveInt = import_zod16.z.coerce.number().int().min(1);
 var supportedAgentOverlayFile = "notes.md";
 var supportedWikiIndexFile = "index.md";
 var supportedWikiLogFile = "log.md";
+var supportedWikiControlledFolders = [
+  "concepts",
+  "playbooks",
+  "decisions",
+  "org-summaries"
+];
+var supportedWikiControlledPatterns = supportedWikiControlledFolders.map(
+  (folder) => `${folder}/*.md`
+);
 var agentOverlayFileSchema = import_zod16.z.enum([supportedAgentOverlayFile]);
 var osmdSearchScopeSchema = import_zod16.z.enum([
   "os-only",
@@ -6540,41 +6549,113 @@ function normalizeAgentFilePath(file) {
   }
   return `.agent/${parsed.data}`;
 }
-function supportedWikiFilesMessage(files) {
-  return `Agent Wiki file commands support only ${files.join(" and ")} in this CLI slice.`;
+function formatHumanList(items) {
+  if (items.length <= 1) {
+    return items[0] ?? "";
+  }
+  if (items.length === 2) {
+    return `${items[0]} and ${items[1]}`;
+  }
+  return `${items.slice(0, -1).join(", ")}, and ${items[items.length - 1]}`;
+}
+function supportedWikiPathsMessage(options = {}) {
+  const allowed = allowedWikiPathLabels(options);
+  return `Agent Wiki file commands support only ${formatHumanList(allowed)} in this CLI slice.`;
+}
+function allowedWikiPathLabels(options = {}) {
+  const allowIndex = options.allowIndex ?? true;
+  const allowLog = options.allowLog ?? true;
+  const allowControlledPages = options.allowControlledPages ?? true;
+  const labels = [];
+  if (options.allowRoot) {
+    labels.push("Agent Wiki");
+  }
+  if (allowIndex) {
+    labels.push(supportedWikiIndexFile);
+  }
+  if (allowLog) {
+    labels.push(supportedWikiLogFile);
+  }
+  if (allowControlledPages) {
+    labels.push(...supportedWikiControlledPatterns);
+  }
+  if (options.allowControlledFolders) {
+    labels.push(...supportedWikiControlledFolders);
+  }
+  return labels;
+}
+function rejectUnsupportedWikiPath(options) {
+  throw new CliError({
+    message: supportedWikiPathsMessage(options),
+    kind: "invalid_args",
+    status: 400,
+    exitCode: EXIT_CODES.invalidArgs,
+    details: { supportedPaths: allowedWikiPathLabels(options) }
+  });
+}
+function isControlledWikiFolder(value) {
+  return supportedWikiControlledFolders.includes(
+    value
+  );
+}
+function isMarkdownLeafFileName(value) {
+  return value.endsWith(".md") && value.length > ".md".length;
 }
 function normalizeWikiPath(path, options = {}) {
-  const supportedFiles = options.supportedFiles ?? [supportedWikiIndexFile, supportedWikiLogFile];
+  const normalizedOptions = {
+    allowIndex: options.allowIndex ?? true,
+    allowLog: options.allowLog ?? true,
+    allowControlledPages: options.allowControlledPages ?? true,
+    allowRoot: options.allowRoot ?? false,
+    allowControlledFolders: options.allowControlledFolders ?? false
+  };
   const trimmed = nonEmptyString3.parse(path).trim().replace(/^\/+/, "");
   if (trimmed.localeCompare("Agent Wiki", void 0, { sensitivity: "accent" }) === 0) {
-    if (options.allowRoot) {
+    if (normalizedOptions.allowRoot) {
       return "Agent Wiki";
     }
-    throw new CliError({
-      message: supportedWikiFilesMessage(supportedFiles),
-      kind: "invalid_args",
-      status: 400,
-      exitCode: EXIT_CODES.invalidArgs,
-      details: { supportedFiles }
-    });
+    return rejectUnsupportedWikiPath(normalizedOptions);
   }
   const fileName = trimmed.toLowerCase().startsWith("agent wiki/") ? trimmed.slice("Agent Wiki/".length) : trimmed;
-  if (!supportedFiles.includes(fileName)) {
-    throw new CliError({
-      message: supportedWikiFilesMessage(supportedFiles),
-      kind: "invalid_args",
-      status: 400,
-      exitCode: EXIT_CODES.invalidArgs,
-      details: { supportedFiles }
-    });
+  if (fileName.includes("\\") || fileName.split("/").some((segment) => segment === "" || segment === "." || segment === "..")) {
+    return rejectUnsupportedWikiPath(normalizedOptions);
+  }
+  if (fileName === supportedWikiIndexFile) {
+    if (normalizedOptions.allowIndex) {
+      return `Agent Wiki/${fileName}`;
+    }
+    return rejectUnsupportedWikiPath(normalizedOptions);
+  }
+  if (fileName === supportedWikiLogFile) {
+    if (normalizedOptions.allowLog) {
+      return `Agent Wiki/${fileName}`;
+    }
+    return rejectUnsupportedWikiPath(normalizedOptions);
   }
-  return `Agent Wiki/${fileName}`;
+  if (isControlledWikiFolder(fileName)) {
+    if (normalizedOptions.allowControlledFolders) {
+      return `Agent Wiki/${fileName}`;
+    }
+    return rejectUnsupportedWikiPath(normalizedOptions);
+  }
+  const parts = fileName.split("/");
+  if (parts.length === 2 && isControlledWikiFolder(parts[0] ?? "") && isMarkdownLeafFileName(parts[1] ?? "")) {
+    if (normalizedOptions.allowControlledPages) {
+      return `Agent Wiki/${fileName}`;
+    }
+    return rejectUnsupportedWikiPath(normalizedOptions);
+  }
+  return rejectUnsupportedWikiPath(normalizedOptions);
 }
-function normalizeWikiIndexPath(path) {
-  return normalizeWikiPath(path, { supportedFiles: [supportedWikiIndexFile] });
+function normalizeWikiWritablePath(path) {
+  return normalizeWikiPath(path, { allowLog: false });
 }
 function normalizeWikiLogPath(path = supportedWikiLogFile) {
-  return normalizeWikiPath(path, { supportedFiles: [supportedWikiLogFile] });
+  return normalizeWikiPath(path, {
+    allowIndex: false,
+    allowLog: true,
+    allowControlledPages: false
+  });
 }
 function parseOptionalParentRef(value) {
   return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
@@ -7049,7 +7130,7 @@ function registerOsmdCommands(program) {
       });
     }
   );
-  const wiki = osmd.command("wiki").description("Agent Wiki files writable by agents; supports index.md and append-only log.md");
+  const wiki = osmd.command("wiki").description("Agent Wiki files writable by agents; supports index.md, controlled pages, and append-only log.md");
   wiki.command("init").description("Idempotently initialize Agent Wiki system files").action(async function() {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(this);
     return runAgentMarkdownMutation({
@@ -7063,7 +7144,7 @@ function registerOsmdCommands(program) {
       }
     });
   });
-  wiki.command("status <path>").description("Show Agent Wiki index.md or log.md metadata without creating files").action(async (path, _opts, cmd) => {
+  wiki.command("status <path>").description("Show Agent Wiki index.md, log.md, or controlled page metadata without creating files").action(async (path, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
     const result = await requestAgentMarkdownStatus({
       command: "osmd.wiki.status",
@@ -7080,7 +7161,7 @@ function registerOsmdCommands(program) {
       })
     });
   });
-  wiki.command("read <path>").description("Read Agent Wiki index.md or log.md without creating files").action(async (path, _opts, cmd) => {
+  wiki.command("read <path>").description("Read Agent Wiki index.md, log.md, or controlled pages without creating files").action(async (path, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
     const result = await requestAgentMarkdownFile({
       command: "osmd.wiki.read",
@@ -7103,7 +7184,7 @@ function registerOsmdCommands(program) {
       command: "osmd.wiki.children",
       runtimeOptions,
       organizationId,
-      path: typeof path === "string" && path.trim() !== "" ? normalizeWikiPath(path, { allowRoot: true }) : "Agent Wiki",
+      path: typeof path === "string" && path.trim() !== "" ? normalizeWikiPath(path, { allowRoot: true, allowControlledFolders: true }) : "Agent Wiki",
       source: "agent_wiki"
     });
     return printEnvelopeAndExit({
@@ -7116,7 +7197,7 @@ function registerOsmdCommands(program) {
     });
   });
   addContentOptions(
-    wiki.command("create <path>").description("Create Agent Wiki index.md after status/permission preflight")
+    wiki.command("create <path>").description("Create Agent Wiki index.md or controlled pages after status/permission preflight")
   ).action(async (path, opts, cmd) => {
     const globals = cmd.optsWithGlobals();
     const content = await resolveContentInput(opts, globals);
@@ -7126,12 +7207,12 @@ function registerOsmdCommands(program) {
       action: "create",
       runtimeOptions,
       organizationId,
-      path: normalizeWikiIndexPath(path),
+      path: normalizeWikiWritablePath(path),
       content
     });
   });
   addContentOptions(
-    wiki.command("update <path>").description("Update Agent Wiki index.md after status/permission preflight")
+    wiki.command("update <path>").description("Update Agent Wiki index.md or controlled pages after status/permission preflight")
   ).action(async (path, opts, cmd) => {
     const globals = cmd.optsWithGlobals();
     const content = await resolveContentInput(opts, globals);
@@ -7141,7 +7222,7 @@ function registerOsmdCommands(program) {
       action: "update",
       runtimeOptions,
       organizationId,
-      path: normalizeWikiIndexPath(path),
+      path: normalizeWikiWritablePath(path),
       content
     });
   });

package/dist/index.js

@@ -6146,6 +6146,15 @@ var positiveInt = z16.coerce.number().int().min(1);
 var supportedAgentOverlayFile = "notes.md";
 var supportedWikiIndexFile = "index.md";
 var supportedWikiLogFile = "log.md";
+var supportedWikiControlledFolders = [
+  "concepts",
+  "playbooks",
+  "decisions",
+  "org-summaries"
+];
+var supportedWikiControlledPatterns = supportedWikiControlledFolders.map(
+  (folder) => `${folder}/*.md`
+);
 var agentOverlayFileSchema = z16.enum([supportedAgentOverlayFile]);
 var osmdSearchScopeSchema = z16.enum([
   "os-only",
@@ -6539,41 +6548,113 @@ function normalizeAgentFilePath(file) {
   }
   return `.agent/${parsed.data}`;
 }
-function supportedWikiFilesMessage(files) {
-  return `Agent Wiki file commands support only ${files.join(" and ")} in this CLI slice.`;
+function formatHumanList(items) {
+  if (items.length <= 1) {
+    return items[0] ?? "";
+  }
+  if (items.length === 2) {
+    return `${items[0]} and ${items[1]}`;
+  }
+  return `${items.slice(0, -1).join(", ")}, and ${items[items.length - 1]}`;
+}
+function supportedWikiPathsMessage(options = {}) {
+  const allowed = allowedWikiPathLabels(options);
+  return `Agent Wiki file commands support only ${formatHumanList(allowed)} in this CLI slice.`;
+}
+function allowedWikiPathLabels(options = {}) {
+  const allowIndex = options.allowIndex ?? true;
+  const allowLog = options.allowLog ?? true;
+  const allowControlledPages = options.allowControlledPages ?? true;
+  const labels = [];
+  if (options.allowRoot) {
+    labels.push("Agent Wiki");
+  }
+  if (allowIndex) {
+    labels.push(supportedWikiIndexFile);
+  }
+  if (allowLog) {
+    labels.push(supportedWikiLogFile);
+  }
+  if (allowControlledPages) {
+    labels.push(...supportedWikiControlledPatterns);
+  }
+  if (options.allowControlledFolders) {
+    labels.push(...supportedWikiControlledFolders);
+  }
+  return labels;
+}
+function rejectUnsupportedWikiPath(options) {
+  throw new CliError({
+    message: supportedWikiPathsMessage(options),
+    kind: "invalid_args",
+    status: 400,
+    exitCode: EXIT_CODES.invalidArgs,
+    details: { supportedPaths: allowedWikiPathLabels(options) }
+  });
+}
+function isControlledWikiFolder(value) {
+  return supportedWikiControlledFolders.includes(
+    value
+  );
+}
+function isMarkdownLeafFileName(value) {
+  return value.endsWith(".md") && value.length > ".md".length;
 }
 function normalizeWikiPath(path, options = {}) {
-  const supportedFiles = options.supportedFiles ?? [supportedWikiIndexFile, supportedWikiLogFile];
+  const normalizedOptions = {
+    allowIndex: options.allowIndex ?? true,
+    allowLog: options.allowLog ?? true,
+    allowControlledPages: options.allowControlledPages ?? true,
+    allowRoot: options.allowRoot ?? false,
+    allowControlledFolders: options.allowControlledFolders ?? false
+  };
   const trimmed = nonEmptyString3.parse(path).trim().replace(/^\/+/, "");
   if (trimmed.localeCompare("Agent Wiki", void 0, { sensitivity: "accent" }) === 0) {
-    if (options.allowRoot) {
+    if (normalizedOptions.allowRoot) {
       return "Agent Wiki";
     }
-    throw new CliError({
-      message: supportedWikiFilesMessage(supportedFiles),
-      kind: "invalid_args",
-      status: 400,
-      exitCode: EXIT_CODES.invalidArgs,
-      details: { supportedFiles }
-    });
+    return rejectUnsupportedWikiPath(normalizedOptions);
   }
   const fileName = trimmed.toLowerCase().startsWith("agent wiki/") ? trimmed.slice("Agent Wiki/".length) : trimmed;
-  if (!supportedFiles.includes(fileName)) {
-    throw new CliError({
-      message: supportedWikiFilesMessage(supportedFiles),
-      kind: "invalid_args",
-      status: 400,
-      exitCode: EXIT_CODES.invalidArgs,
-      details: { supportedFiles }
-    });
+  if (fileName.includes("\\") || fileName.split("/").some((segment) => segment === "" || segment === "." || segment === "..")) {
+    return rejectUnsupportedWikiPath(normalizedOptions);
+  }
+  if (fileName === supportedWikiIndexFile) {
+    if (normalizedOptions.allowIndex) {
+      return `Agent Wiki/${fileName}`;
+    }
+    return rejectUnsupportedWikiPath(normalizedOptions);
+  }
+  if (fileName === supportedWikiLogFile) {
+    if (normalizedOptions.allowLog) {
+      return `Agent Wiki/${fileName}`;
+    }
+    return rejectUnsupportedWikiPath(normalizedOptions);
   }
-  return `Agent Wiki/${fileName}`;
+  if (isControlledWikiFolder(fileName)) {
+    if (normalizedOptions.allowControlledFolders) {
+      return `Agent Wiki/${fileName}`;
+    }
+    return rejectUnsupportedWikiPath(normalizedOptions);
+  }
+  const parts = fileName.split("/");
+  if (parts.length === 2 && isControlledWikiFolder(parts[0] ?? "") && isMarkdownLeafFileName(parts[1] ?? "")) {
+    if (normalizedOptions.allowControlledPages) {
+      return `Agent Wiki/${fileName}`;
+    }
+    return rejectUnsupportedWikiPath(normalizedOptions);
+  }
+  return rejectUnsupportedWikiPath(normalizedOptions);
 }
-function normalizeWikiIndexPath(path) {
-  return normalizeWikiPath(path, { supportedFiles: [supportedWikiIndexFile] });
+function normalizeWikiWritablePath(path) {
+  return normalizeWikiPath(path, { allowLog: false });
 }
 function normalizeWikiLogPath(path = supportedWikiLogFile) {
-  return normalizeWikiPath(path, { supportedFiles: [supportedWikiLogFile] });
+  return normalizeWikiPath(path, {
+    allowIndex: false,
+    allowLog: true,
+    allowControlledPages: false
+  });
 }
 function parseOptionalParentRef(value) {
   return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
@@ -7048,7 +7129,7 @@ function registerOsmdCommands(program) {
       });
     }
   );
-  const wiki = osmd.command("wiki").description("Agent Wiki files writable by agents; supports index.md and append-only log.md");
+  const wiki = osmd.command("wiki").description("Agent Wiki files writable by agents; supports index.md, controlled pages, and append-only log.md");
   wiki.command("init").description("Idempotently initialize Agent Wiki system files").action(async function() {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(this);
     return runAgentMarkdownMutation({
@@ -7062,7 +7143,7 @@ function registerOsmdCommands(program) {
       }
     });
   });
-  wiki.command("status <path>").description("Show Agent Wiki index.md or log.md metadata without creating files").action(async (path, _opts, cmd) => {
+  wiki.command("status <path>").description("Show Agent Wiki index.md, log.md, or controlled page metadata without creating files").action(async (path, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
     const result = await requestAgentMarkdownStatus({
       command: "osmd.wiki.status",
@@ -7079,7 +7160,7 @@ function registerOsmdCommands(program) {
       })
     });
   });
-  wiki.command("read <path>").description("Read Agent Wiki index.md or log.md without creating files").action(async (path, _opts, cmd) => {
+  wiki.command("read <path>").description("Read Agent Wiki index.md, log.md, or controlled pages without creating files").action(async (path, _opts, cmd) => {
     const { organizationId, runtimeOptions } = await resolveOsmdContext(cmd);
     const result = await requestAgentMarkdownFile({
       command: "osmd.wiki.read",
@@ -7102,7 +7183,7 @@ function registerOsmdCommands(program) {
       command: "osmd.wiki.children",
       runtimeOptions,
       organizationId,
-      path: typeof path === "string" && path.trim() !== "" ? normalizeWikiPath(path, { allowRoot: true }) : "Agent Wiki",
+      path: typeof path === "string" && path.trim() !== "" ? normalizeWikiPath(path, { allowRoot: true, allowControlledFolders: true }) : "Agent Wiki",
       source: "agent_wiki"
     });
     return printEnvelopeAndExit({
@@ -7115,7 +7196,7 @@ function registerOsmdCommands(program) {
     });
   });
   addContentOptions(
-    wiki.command("create <path>").description("Create Agent Wiki index.md after status/permission preflight")
+    wiki.command("create <path>").description("Create Agent Wiki index.md or controlled pages after status/permission preflight")
   ).action(async (path, opts, cmd) => {
     const globals = cmd.optsWithGlobals();
     const content = await resolveContentInput(opts, globals);
@@ -7125,12 +7206,12 @@ function registerOsmdCommands(program) {
       action: "create",
       runtimeOptions,
       organizationId,
-      path: normalizeWikiIndexPath(path),
+      path: normalizeWikiWritablePath(path),
       content
     });
   });
   addContentOptions(
-    wiki.command("update <path>").description("Update Agent Wiki index.md after status/permission preflight")
+    wiki.command("update <path>").description("Update Agent Wiki index.md or controlled pages after status/permission preflight")
   ).action(async (path, opts, cmd) => {
     const globals = cmd.optsWithGlobals();
     const content = await resolveContentInput(opts, globals);
@@ -7140,7 +7221,7 @@ function registerOsmdCommands(program) {
       action: "update",
       runtimeOptions,
       organizationId,
-      path: normalizeWikiIndexPath(path),
+      path: normalizeWikiWritablePath(path),
       content
     });
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ted-galago/wave-cli",
-  "version": "0.1.20",
+  "version": "0.1.22",
   "type": "module",
   "bin": {
     "wave": "dist/index.js"

package/scripts/verify-dev-api.mjs

@@ -1330,6 +1330,124 @@ function runOsmdLiveVerification() {
     );
   }
 
+  const controlledWikiSearchTerm = `CLI live controlled wiki ${verifyStamp}`;
+  const controlledWikiPages = [
+    {
+      path: `concepts/cli-live-concept-${verifyStamp}.md`,
+      fullPath: `Agent Wiki/concepts/cli-live-concept-${verifyStamp}.md`,
+      wikiRole: "concept",
+      title: "concept"
+    },
+    {
+      path: `playbooks/cli-live-playbook-${verifyStamp}.md`,
+      fullPath: `Agent Wiki/playbooks/cli-live-playbook-${verifyStamp}.md`,
+      wikiRole: "playbook",
+      title: "playbook"
+    },
+    {
+      path: `decisions/cli-live-decision-${verifyStamp}.md`,
+      fullPath: `Agent Wiki/decisions/cli-live-decision-${verifyStamp}.md`,
+      wikiRole: "decision",
+      title: "decision"
+    },
+    {
+      path: `org-summaries/cli-live-org-summary-${verifyStamp}.md`,
+      fullPath: `Agent Wiki/org-summaries/cli-live-org-summary-${verifyStamp}.md`,
+      wikiRole: "org_summary",
+      title: "org_summary"
+    }
+  ];
+
+  for (const page of controlledWikiPages) {
+    const controlledStatus = runWave(["osmd", "wiki", "status", page.path], env);
+    results.push(controlledStatus);
+    osmdVerificationFailures += recordExactCheck({
+      lines: osmdVerificationLines,
+      label: `osmd.wiki status controlled ${page.title}`,
+      result: controlledStatus,
+      ok:
+        controlledStatus.parsed?.ok === true &&
+        controlledStatus.parsed?.data?.path === page.fullPath &&
+        controlledStatus.parsed?.data?.source === "agent_wiki" &&
+        controlledStatus.parsed?.data?.access === "read_write" &&
+        controlledStatus.parsed?.data?.wikiRole === page.wikiRole &&
+        controlledStatus.parsed?.data?.formatVersion === "agent_markdown_v1" &&
+        controlledStatus.parsed?.data?.exists === false &&
+        controlledStatus.parsed?.data?.canCreate === true &&
+        controlledStatus.parsed?.data?.canUpdate === false &&
+        controlledStatus.parsed?.data?.canAppend === false &&
+        controlledStatus.parsed?.data?.suggestedAction === "create",
+      reason: "agent_wiki_controlled_status"
+    });
+
+    const createContent = `# CLI Live ${page.title}\n\n${controlledWikiSearchTerm} create ${page.title}`;
+    const controlledCreate = runWave(["osmd", "wiki", "create", page.path, "--content", createContent], env);
+    results.push(controlledCreate);
+    osmdVerificationFailures += recordExactCheck({
+      lines: osmdVerificationLines,
+      label: `osmd.wiki create controlled ${page.title}`,
+      result: controlledCreate,
+      ok:
+        controlledCreate.parsed?.ok === true &&
+        controlledCreate.parsed?.data?.path === page.fullPath &&
+        controlledCreate.parsed?.data?.source === "agent_wiki" &&
+        controlledCreate.parsed?.data?.wikiRole === page.wikiRole &&
+        controlledCreate.parsed?.data?.formatVersion === "agent_markdown_v1" &&
+        controlledCreate.parsed?.data?.exists === true &&
+        controlledCreate.parsed?.data?.canUpdate === true &&
+        controlledCreate.parsed?.data?.canAppend === false &&
+        controlledCreate.parsed?.data?.content === createContent,
+      reason: "agent_wiki_controlled_create"
+    });
+
+    const updateContent = `# CLI Live ${page.title}\n\n${controlledWikiSearchTerm} update ${page.title}`;
+    const controlledUpdate = runWave(["osmd", "wiki", "update", page.path, "--content", updateContent], env);
+    results.push(controlledUpdate);
+    osmdVerificationFailures += recordExactCheck({
+      lines: osmdVerificationLines,
+      label: `osmd.wiki update controlled ${page.title}`,
+      result: controlledUpdate,
+      ok:
+        controlledUpdate.parsed?.ok === true &&
+        controlledUpdate.parsed?.data?.path === page.fullPath &&
+        controlledUpdate.parsed?.data?.source === "agent_wiki" &&
+        controlledUpdate.parsed?.data?.wikiRole === page.wikiRole &&
+        controlledUpdate.parsed?.data?.formatVersion === "agent_markdown_v1" &&
+        controlledUpdate.parsed?.data?.exists === true &&
+        controlledUpdate.parsed?.data?.canUpdate === true &&
+        controlledUpdate.parsed?.data?.canAppend === false &&
+        controlledUpdate.parsed?.data?.content === updateContent,
+      reason: "agent_wiki_controlled_update"
+    });
+  }
+
+  const logUpdateRejected = runWave(["osmd", "wiki", "update", "log.md", "--content", "verify forbidden"], env);
+  osmdVerificationFailures += recordExactCheck({
+    lines: osmdVerificationLines,
+    label: "osmd.wiki update rejects log locally",
+    result: logUpdateRejected,
+    ok:
+      logUpdateRejected.parsed?.ok === false &&
+      logUpdateRejected.parsed?.status === 400 &&
+      logUpdateRejected.parsed?.error?.code === "invalid_args",
+    reason: "agent_wiki_log_update_local_reject"
+  });
+
+  const arbitraryWikiRejected = runWave(
+    ["osmd", "wiki", "create", "random/cli-live-random.md", "--content", "verify forbidden"],
+    env
+  );
+  osmdVerificationFailures += recordExactCheck({
+    lines: osmdVerificationLines,
+    label: "osmd.wiki create rejects arbitrary wiki path locally",
+    result: arbitraryWikiRejected,
+    ok:
+      arbitraryWikiRejected.parsed?.ok === false &&
+      arbitraryWikiRejected.parsed?.status === 400 &&
+      arbitraryWikiRejected.parsed?.error?.code === "invalid_args",
+    reason: "agent_wiki_arbitrary_path_local_reject"
+  });
+
   const parentRef = resolveOsmdAgentParentRef();
   if (!parentRef) {
     osmdVerificationLines.push(
@@ -1452,6 +1570,55 @@ function runOsmdLiveVerification() {
     reason: "osmd_search_agent_wiki"
   });
 
+  const controlledWikiSearch = runWave(
+    ["osmd", "search", controlledWikiSearchTerm, "--scope", "agent-wiki-only", "--limit", "10"],
+    env
+  );
+  results.push(controlledWikiSearch);
+  const controlledWikiSearchCandidates = searchCandidates(controlledWikiSearch);
+  osmdVerificationFailures += recordExactCheck({
+    lines: osmdVerificationLines,
+    label: "osmd.search Agent Wiki controlled pages",
+    result: controlledWikiSearch,
+    ok:
+      controlledWikiSearch.parsed?.ok === true &&
+      controlledWikiSearch.parsed?.data?.scope === "agent_wiki" &&
+      controlledWikiPages.every((page) =>
+        controlledWikiSearchCandidates.some(
+          (candidate) =>
+            hasSearchMetadata(candidate, "agent_wiki") &&
+            candidate.path === page.fullPath &&
+            candidate.wikiRole === page.wikiRole &&
+            candidate.access === "read_write"
+        )
+      ),
+    reason: "osmd_search_agent_wiki_controlled_pages"
+  });
+
+  const controlledCombinedSearch = runWave(
+    ["osmd", "search", controlledWikiSearchTerm, "--scope", "combined", "--limit", "10"],
+    env
+  );
+  results.push(controlledCombinedSearch);
+  const controlledCombinedSearchCandidates = searchCandidates(controlledCombinedSearch);
+  osmdVerificationFailures += recordExactCheck({
+    lines: osmdVerificationLines,
+    label: "osmd.search combined includes controlled Agent Wiki pages",
+    result: controlledCombinedSearch,
+    ok:
+      controlledCombinedSearch.parsed?.ok === true &&
+      controlledCombinedSearch.parsed?.data?.scope === "combined" &&
+      controlledWikiPages.some((page) =>
+        controlledCombinedSearchCandidates.some(
+          (candidate) =>
+            hasSearchMetadata(candidate, "agent_wiki") &&
+            candidate.path === page.fullPath &&
+            candidate.wikiRole === page.wikiRole
+        )
+      ),
+    reason: "osmd_search_combined_controlled_pages"
+  });
+
   const logSearch = runWave(
     ["osmd", "search", `CLI live verify log ${verifyStamp}`, "--scope", "agent-wiki-only", "--limit", "5"],
     env