agentic-workflow-manager 9.5.0 → 9.6.1

package/dist/tests/core/text.test.js

@@ -1,6 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const text_1 = require("../../src/core/text");
+describe('sanitizeDiagnosticText', () => {
+    it.each([
+        ['a\r\nb\rc\nd\te', 'a b c d e'],
+        ['a\x00\x07\x1b[31m\x7f\x85\x9bz', 'a[31mz'],
+        ['a\u2028b\u2029c', 'a b c'],
+        ['plain *markdown* — café', 'plain *markdown* — café'],
+    ])('sanitizes a single diagnostic field: %j', (input, expected) => {
+        expect((0, text_1.sanitizeDiagnosticText)(input)).toBe(expected);
+    });
+});
 describe('stripControlChars', () => {
     it('elimina ESC y demas bytes de control C0', () => {
         expect((0, text_1.stripControlChars)('a\x1b[31mb\x00c\x07d')).toBe('a[31mbcd');

package/dist/tests/integration/context-orchestrators-e2e.test.js

@@ -14,13 +14,13 @@ function seedRegistry() {
     const home = fs_1.default.realpathSync(fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-ctx-e2e-')));
     const awmHome = path_1.default.join(home, '.awm');
     const root = path_1.default.join(awmHome, 'registries', 'test-registry');
-    fs_1.default.mkdirSync(path_1.default.join(root, 'skills', 'using-awm'), { recursive: true });
+    fs_1.default.mkdirSync(path_1.default.join(root, 'skills', 'ejemplo-proceso'), { recursive: true });
     fs_1.default.writeFileSync(path_1.default.join(awmHome, 'registries.json'), JSON.stringify([{ name: 'test-registry', remote: 'https://example.invalid/test.git' }]));
     fs_1.default.writeFileSync(path_1.default.join(root, 'awm-registry.json'), JSON.stringify({
         minCliVersion: '8.5.0',
         orchestrator: { name: 'ejemplo-proceso', appliesWhen: 'cuando hay una tarea sin plan', terminatesTo: 'development-process' },
     }));
-    fs_1.default.writeFileSync(path_1.default.join(root, 'skills', 'using-awm', 'SKILL.md'), '---\nname: using-awm\nversion: "1.0.0"\n---\n\n# using-awm\n');
+    fs_1.default.writeFileSync(path_1.default.join(root, 'skills', 'ejemplo-proceso', 'SKILL.md'), '---\nname: ejemplo-proceso\nversion: "1.0.0"\n---\n\n# ejemplo-proceso\n');
     return home;
 }
 /**
@@ -36,7 +36,7 @@ function seedRealisticRegistry() {
     const home = fs_1.default.realpathSync(fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-ctx-e2e-real-')));
     const awmHome = path_1.default.join(home, '.awm');
     const root = path_1.default.join(awmHome, 'registries', 'test-registry');
-    fs_1.default.mkdirSync(path_1.default.join(root, 'skills', 'using-awm'), { recursive: true });
+    fs_1.default.mkdirSync(path_1.default.join(root, 'skills', 'task_capture_process'), { recursive: true });
     fs_1.default.writeFileSync(path_1.default.join(awmHome, 'registries.json'), JSON.stringify([{ name: 'test-registry', remote: 'https://example.invalid/test.git' }]));
     fs_1.default.writeFileSync(path_1.default.join(root, 'awm-registry.json'), JSON.stringify({
         minCliVersion: '8.5.0',
@@ -46,7 +46,7 @@ function seedRealisticRegistry() {
             terminatesTo: 'development-process',
         },
     }));
-    fs_1.default.writeFileSync(path_1.default.join(root, 'skills', 'using-awm', 'SKILL.md'), '---\nname: using-awm\nversion: "1.0.0"\n---\n\n# using-awm\n');
+    fs_1.default.writeFileSync(path_1.default.join(root, 'skills', 'task_capture_process', 'SKILL.md'), '---\nname: task_capture_process\nversion: "1.0.0"\n---\n\n# task_capture_process\n');
     return home;
 }
 /**
@@ -63,7 +63,7 @@ function seedMixedRegistries() {
     const awmHome = path_1.default.join(home, '.awm');
     const sanoRoot = path_1.default.join(awmHome, 'registries', 'sano-registry');
     const rotoRoot = path_1.default.join(awmHome, 'registries', 'roto-registry');
-    fs_1.default.mkdirSync(path_1.default.join(sanoRoot, 'skills', 'using-awm'), { recursive: true });
+    fs_1.default.mkdirSync(path_1.default.join(sanoRoot, 'skills', 'proceso-sano'), { recursive: true });
     fs_1.default.mkdirSync(path_1.default.join(rotoRoot, 'skills', 'using-awm'), { recursive: true });
     fs_1.default.writeFileSync(path_1.default.join(awmHome, 'registries.json'), JSON.stringify([
         { name: 'sano-registry', remote: 'https://example.invalid/sano.git' },
@@ -79,8 +79,20 @@ function seedMixedRegistries() {
         minCliVersion: '8.5.0',
         orchestrator: { name: 'proceso-roto', appliesWhen: 'cuando algo pasa' },
     }));
-    fs_1.default.writeFileSync(path_1.default.join(sanoRoot, 'skills', 'using-awm', 'SKILL.md'), '---\nname: using-awm\nversion: "1.0.0"\n---\n\n# using-awm\n');
-    fs_1.default.writeFileSync(path_1.default.join(rotoRoot, 'skills', 'using-awm', 'SKILL.md'), '---\nname: using-awm\nversion: "1.0.0"\n---\n\n# using-awm\n');
+    fs_1.default.writeFileSync(path_1.default.join(sanoRoot, 'skills', 'proceso-sano', 'SKILL.md'), '---\nname: proceso-sano\nversion: "1.0.0"\n---\n\n# proceso-sano\n');
+    return home;
+}
+function seedPhantomRegistry() {
+    const home = fs_1.default.realpathSync(fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-ctx-e2e-phantom-')));
+    const awmHome = path_1.default.join(home, '.awm');
+    const root = path_1.default.join(awmHome, 'registries', 'test-registry');
+    fs_1.default.mkdirSync(path_1.default.join(root, 'skills', 'real-skill'), { recursive: true });
+    fs_1.default.writeFileSync(path_1.default.join(awmHome, 'registries.json'), JSON.stringify([{ name: 'test-registry', remote: 'https://example.invalid/test.git' }]));
+    fs_1.default.writeFileSync(path_1.default.join(root, 'awm-registry.json'), JSON.stringify({
+        minCliVersion: '8.5.0',
+        orchestrator: { name: 'phantom-process', appliesWhen: 'cuando hay una tarea sin plan', terminatesTo: 'development-process' },
+    }));
+    fs_1.default.writeFileSync(path_1.default.join(root, 'skills', 'real-skill', 'SKILL.md'), '---\nname: real-skill\nversion: "1.0.0"\n---\n\n# real-skill\n');
     return home;
 }
 function run(home, ...args) {
@@ -142,3 +154,41 @@ describe('awm context orchestrators -- diagnosticos + sanos mezclados (binario r
         expect(r.stderr).toContain('terminatesTo');
     });
 });
+describe('awm context orchestrators -- declaracion phantom (binario real)', () => {
+    let home;
+    beforeAll(() => { home = seedPhantomRegistry(); });
+    afterAll(() => fs_1.default.rmSync(home, { recursive: true, force: true }));
+    it('--verify devuelve 2 y diagnostica una declaracion sin skill resoluble', () => {
+        const r = run(home, 'context', 'orchestrators', '--verify', 'phantom-process');
+        expect(r.status).toBe(2);
+        expect(r.stderr).toMatch(/phantom-process/);
+        expect(r.stderr).toMatch(/declaration dropped|skill/i);
+    });
+});
+describe('awm context orchestrators -- dropped sanitized collision (real binary)', () => {
+    let home;
+    beforeAll(() => {
+        home = seedPhantomRegistry();
+        const awmHome = path_1.default.join(home, '.awm');
+        const phantomRoot = path_1.default.join(awmHome, 'registries', 'test-registry');
+        const retainedRoot = path_1.default.join(awmHome, 'registries', 'retained');
+        fs_1.default.writeFileSync(path_1.default.join(awmHome, 'registries.json'), JSON.stringify([
+            { name: 'test-registry', remote: 'unused' }, { name: 'retained', remote: 'unused' },
+        ]));
+        fs_1.default.writeFileSync(path_1.default.join(phantomRoot, 'awm-registry.json'), JSON.stringify({
+            orchestrator: { name: 'foo_bar', appliesWhen: 'x', terminatesTo: 'none' },
+        }));
+        fs_1.default.mkdirSync(path_1.default.join(retainedRoot, 'skills', 'foobar'), { recursive: true });
+        fs_1.default.writeFileSync(path_1.default.join(retainedRoot, 'skills', 'foobar', 'SKILL.md'), '# foobar\n');
+        fs_1.default.writeFileSync(path_1.default.join(retainedRoot, 'awm-registry.json'), JSON.stringify({
+            orchestrator: { name: 'foobar', appliesWhen: 'x', terminatesTo: 'none' },
+        }));
+    });
+    afterAll(() => fs_1.default.rmSync(home, { recursive: true, force: true }));
+    it('verifies the retained raw name and rejects the dropped raw name', () => {
+        expect(run(home, 'context', 'orchestrators', '--verify', 'foobar').status).toBe(0);
+        const dropped = run(home, 'context', 'orchestrators', '--verify', 'foo_bar');
+        expect(dropped.status).toBe(2);
+        expect(dropped.stderr).toContain('declaration dropped');
+    });
+});

package/dist/tests/integration/sensor-bootstrap.e2e.test.js

@@ -0,0 +1,165 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const crypto_1 = __importDefault(require("crypto"));
+const child_process_1 = require("child_process");
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const materialize_1 = require("../../src/commands/sensors/compatibility/materialize");
+const pack_source_1 = require("../../src/commands/sensors/compatibility/pack-source");
+const safe_file_1 = require("../../src/commands/sensors/compatibility/safe-file");
+const native_bridge_1 = require("../../src/core/secure-fs/native-bridge");
+const cliRoot = path_1.default.resolve(__dirname, '../..');
+const bin = path_1.default.join(cliRoot, 'dist/src/index.js');
+const fixtureRoot = path_1.default.join(cliRoot, 'tests/fixtures/sensor-compatibility');
+function hashTree(root) {
+    const hash = crypto_1.default.createHash('sha256');
+    const walk = (directory) => {
+        for (const entry of fs_1.default.readdirSync(directory, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+            const file = path_1.default.join(directory, entry.name);
+            hash.update(path_1.default.relative(root, file));
+            if (entry.isDirectory())
+                walk(file);
+            else if (entry.isFile())
+                hash.update(fs_1.default.readFileSync(file));
+        }
+    };
+    walk(root);
+    return hash.digest('hex');
+}
+function fixture() {
+    const root = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-bootstrap-e2e-'));
+    const project = path_1.default.join(root, 'project');
+    const awmHome = path_1.default.join(root, 'awm-home');
+    const registryRoot = path_1.default.join(awmHome, 'registries', 'baseline');
+    fs_1.default.cpSync(path_1.default.join(fixtureRoot, 'project'), project, { recursive: true });
+    fs_1.default.mkdirSync(path_1.default.join(project, 'node_modules', 'eslint'), { recursive: true });
+    fs_1.default.copyFileSync(path_1.default.join(project, 'eslint-tool-package.json'), path_1.default.join(project, 'node_modules', 'eslint', 'package.json'));
+    fs_1.default.mkdirSync(path_1.default.dirname(registryRoot), { recursive: true });
+    fs_1.default.cpSync(path_1.default.join(fixtureRoot, 'registry'), registryRoot, { recursive: true });
+    fs_1.default.writeFileSync(path_1.default.join(awmHome, 'registries.json'), JSON.stringify([{ name: 'baseline', remote: 'fixture' }]));
+    return { root, project, awmHome, registryRoot };
+}
+function run(fixture, ...args) {
+    return (0, child_process_1.spawnSync)(process.execPath, [bin, 'sensors', 'bootstrap', ...args], {
+        cwd: fixture.project,
+        encoding: 'utf8',
+        env: { ...process.env, AWM_HOME: fixture.awmHome, AWM_NO_UPDATE_CHECK: '1' },
+    });
+}
+function v2Manifest() {
+    return {
+        schemaVersion: 2,
+        pack: 'js-ts',
+        sensors: {
+            lint: {
+                enabled: true, variantId: 'eslint-10',
+                command: { executable: 'eslint', resolution: 'node-modules-bin', args: ['.'] },
+                assets: ['eslint.fixture.mjs'],
+                initializedCompatibility: {
+                    state: 'certified', reason: 'fixture', variantId: 'eslint-10',
+                    toolVersion: '10.4.1', runtimeVersion: '24.0.0', certifiedRange: '>=10 <11', evidence: [],
+                },
+            },
+        },
+    };
+}
+beforeAll(() => {
+    if (!fs_1.default.existsSync(bin))
+        throw new Error(`Sensor bootstrap E2E requires the compiled CLI at ${bin}; run npm run build before this test.`);
+});
+test('compiled bootstrap creates once and the exact second invocation is a byte-stable no-op', () => {
+    const subject = fixture();
+    try {
+        fs_1.default.rmSync(path_1.default.join(subject.project, '.awm'), { recursive: true, force: true });
+        const machineBefore = hashTree(subject.awmHome);
+        expect(run(subject, '--mode', 'native-gate', '--reason', 'fixture-gate').status).toBe(0);
+        const first = hashTree(subject.project);
+        expect(run(subject, '--mode', 'native-gate', '--reason', 'fixture-gate').status).toBe(0);
+        expect(hashTree(subject.project)).toBe(first);
+        expect(hashTree(subject.awmHome)).toBe(machineBefore);
+        expect(JSON.parse(fs_1.default.readFileSync(path_1.default.join(subject.project, '.awm', 'sensors.json'), 'utf8'))).toEqual({ schemaVersion: 3, mode: 'native-gate', reason: 'fixture-gate' });
+    }
+    finally {
+        fs_1.default.rmSync(subject.root, { recursive: true, force: true });
+    }
+});
+test('compiled project-sensors bootstrap materializes only selected assets and then no-ops', () => {
+    const subject = fixture();
+    try {
+        fs_1.default.rmSync(path_1.default.join(subject.project, '.awm'), { recursive: true, force: true });
+        fs_1.default.copyFileSync(path_1.default.join(subject.registryRoot, 'sensor-packs', 'js-ts', 'eslint.fixture.mjs'), path_1.default.join(subject.project, 'eslint.fixture.mjs'));
+        const machineBefore = hashTree(subject.awmHome);
+        const result = run(subject, '--mode', 'project-sensors');
+        if (result.status !== 0)
+            throw new Error(`project-sensors bootstrap failed: ${result.stdout}\n${result.stderr}`);
+        expect(`${result.stdout}${result.stderr}`).toContain('pack=js-ts');
+        expect(fs_1.default.existsSync(path_1.default.join(subject.project, 'eslint.fixture.mjs'))).toBe(true);
+        expect(fs_1.default.existsSync(path_1.default.join(subject.project, 'pack.json'))).toBe(false);
+        const first = hashTree(subject.project);
+        expect(run(subject, '--mode', 'project-sensors').status).toBe(0);
+        expect(hashTree(subject.project)).toBe(first);
+        expect(hashTree(subject.awmHome)).toBe(machineBefore);
+    }
+    finally {
+        fs_1.default.rmSync(subject.root, { recursive: true, force: true });
+    }
+});
+test('injected manifest publication failure compensates created assets without changing unrelated project or machine bytes', () => {
+    const subject = fixture();
+    try {
+        fs_1.default.rmSync(path_1.default.join(subject.project, '.awm'), { recursive: true, force: true });
+        const beforePackage = fs_1.default.readFileSync(path_1.default.join(subject.project, 'package.json'));
+        const beforeConfig = fs_1.default.readFileSync(path_1.default.join(subject.project, 'eslint.config.mjs'));
+        const beforeMachine = hashTree(subject.awmHome);
+        const source = (0, pack_source_1.resolvePackSource)('js-ts', { registries: [{ name: 'baseline', remote: 'fixture', contentRoot: subject.registryRoot }] });
+        (0, safe_file_1.setSecureFsForTests)({
+            withProjectLease: native_bridge_1.secureFs.withProjectLease,
+            readRegularFile: native_bridge_1.secureFs.readRegularFile,
+            writeProjectTransaction: ((root, destination, content, options) => {
+                if (destination === '.awm/sensors.json')
+                    throw new Error('injected rename failure');
+                native_bridge_1.secureFs.writeProjectTransaction(root, destination, content, options);
+            }),
+            removeObservedProjectFile: native_bridge_1.secureFs.removeObservedProjectFile,
+        });
+        expect(() => (0, materialize_1.materializePortableSensors)({
+            projectRoot: subject.project, pack: 'js-ts', source,
+            sensors: { lint: { enabled: true, variantId: 'eslint-10', command: { executable: 'eslint', resolution: 'node-modules-bin', args: ['.'] }, assets: ['eslint.fixture.mjs'], initializedCompatibility: { state: 'certified', reason: 'fixture', variantId: 'eslint-10', toolVersion: '10.4.1', runtimeVersion: '24.0.0', certifiedRange: '>=10 <11', evidence: [] } } },
+        })).toThrow('injected rename failure');
+        expect(fs_1.default.readFileSync(path_1.default.join(subject.project, 'package.json'))).toEqual(beforePackage);
+        expect(fs_1.default.readFileSync(path_1.default.join(subject.project, 'eslint.config.mjs'))).toEqual(beforeConfig);
+        expect(fs_1.default.existsSync(path_1.default.join(subject.project, 'eslint.fixture.mjs'))).toBe(false);
+        expect(fs_1.default.existsSync(path_1.default.join(subject.project, '.awm', 'sensors.json'))).toBe(false);
+        expect(hashTree(subject.awmHome)).toBe(beforeMachine);
+        expect(fs_1.default.existsSync(path_1.default.join(subject.project, '.awm', 'sensors.json.tmp'))).toBe(false);
+    }
+    finally {
+        (0, safe_file_1.setSecureFsForTests)(undefined);
+        fs_1.default.rmSync(subject.root, { recursive: true, force: true });
+    }
+});
+test('compiled bootstrap migrates v2 once, preserves all non-manifest project bytes, and then no-ops', () => {
+    const subject = fixture();
+    try {
+        const manifest = path_1.default.join(subject.project, '.awm', 'sensors.json');
+        fs_1.default.writeFileSync(manifest, JSON.stringify(v2Manifest(), null, 2) + '\n');
+        const machineBefore = hashTree(subject.awmHome);
+        const assetBefore = fs_1.default.readFileSync(path_1.default.join(subject.project, 'eslint.config.mjs'));
+        expect(run(subject).status).toBe(0);
+        const first = hashTree(subject.project);
+        const migrated = JSON.parse(fs_1.default.readFileSync(manifest, 'utf8'));
+        expect(migrated).toMatchObject({ schemaVersion: 3, mode: 'project-sensors', source: { registry: 'baseline' } });
+        expect(migrated).not.toHaveProperty('registryRoot');
+        expect(fs_1.default.readFileSync(path_1.default.join(subject.project, 'eslint.config.mjs'))).toEqual(assetBefore);
+        expect(run(subject).status).toBe(0);
+        expect(hashTree(subject.project)).toBe(first);
+        expect(hashTree(subject.awmHome)).toBe(machineBefore);
+    }
+    finally {
+        fs_1.default.rmSync(subject.root, { recursive: true, force: true });
+    }
+});

package/dist/tests/integration/sensor-compatibility.e2e.test.js

@@ -42,6 +42,9 @@ function createFixture() {
     fs_1.default.copyFileSync(path_1.default.join(project, 'eslint-tool-package.json'), path_1.default.join(project, 'node_modules', 'eslint', 'package.json'));
     fs_1.default.mkdirSync(path_1.default.dirname(registryRoot), { recursive: true });
     fs_1.default.cpSync(registryFixture, registryRoot, { recursive: true });
+    // The fixture pack's certified probe requires this selected config to be
+    // present before bootstrap can prove compatibility and publish v3.
+    fs_1.default.copyFileSync(path_1.default.join(registryRoot, 'sensor-packs', 'js-ts', 'eslint.fixture.mjs'), path_1.default.join(project, 'eslint.fixture.mjs'));
     fs_1.default.writeFileSync(path_1.default.join(awmHome, 'registries.json'), JSON.stringify([{ name: 'baseline', remote: 'fixture' }]));
     return { root, project, awmHome, registryRoot };
 }
@@ -60,7 +63,8 @@ function runAwm(fixture, ...args) {
     });
 }
 function json(result) {
-    expect(result.status).toBe(0);
+    if (result.status !== 0)
+        throw new Error(`CLI failed: ${result.stdout ?? ''}\n${result.stderr ?? ''}`);
     if (!(result.stdout ?? '').trim())
         throw new Error(`coverage emitted no JSON: stderr=${result.stderr ?? ''}`);
     return JSON.parse(result.stdout ?? '');
@@ -116,6 +120,7 @@ test('compiled sensors run returns nonzero while preserving parseable not_certif
 test('compiled status reports static READY without writing or executing the project sensor (R6, R6.2)', () => {
     const fixture = createFixture();
     try {
+        fs_1.default.rmSync(path_1.default.join(fixture.project, '.awm', 'sensors.json'));
         const localBin = path_1.default.join(fixture.project, 'node_modules', '.bin', 'eslint');
         fs_1.default.mkdirSync(path_1.default.dirname(localBin), { recursive: true });
         fs_1.default.writeFileSync(localBin, 'this fixture must never be executed by status\n');
@@ -143,10 +148,13 @@ test('legacy coverage stays unverified, init migrates explicitly, and version dr
                 id: 'lint-errors', status: 'unverifiable', detectors: expect.arrayContaining([expect.objectContaining({ compatibility: expect.objectContaining({ state: 'compatible-unverified' }) })]),
             })]));
         expect([hashTree(fixture.project), hashTree(fixture.awmHome)]).toEqual(before);
+        // v1 declarations are intentionally preserved; creation is explicitly
+        // restarted once the owner removes the legacy declaration.
+        fs_1.default.rmSync(path_1.default.join(fixture.project, '.awm', 'sensors.json'));
         const migrated = runCli(fixture, 'init', '--registry-root', fixture.registryRoot, '--pack', 'js-ts', '--no-configure');
         expect(migrated.status).toBe(0);
         const manifest = JSON.parse(fs_1.default.readFileSync(path_1.default.join(fixture.project, '.awm', 'sensors.json'), 'utf8'));
-        expect(manifest).toMatchObject({ schemaVersion: 2, pack: 'js-ts', sensors: { lint: { variantId: 'eslint-10' } } });
+        expect(manifest).toMatchObject({ schemaVersion: 3, mode: 'project-sensors', pack: 'js-ts', source: { registry: 'baseline' }, sensors: { lint: { variantId: 'eslint-10' } } });
         const certified = json(runCli(fixture, 'coverage', '--json'));
         expect(certified.static.classes).toEqual(expect.arrayContaining([expect.objectContaining({
                 id: 'lint-errors', status: 'covered', detectors: expect.arrayContaining([expect.objectContaining({ compatibility: expect.objectContaining({ state: 'certified' }) })]),

package/dist/tests/integration/sensor-structured-run.e2e.test.js

@@ -107,8 +107,10 @@ test('compiled sensors run materializes a v2 registry command and passes its lit
         assertSuccessfulCli(initialized, 'init');
         const manifest = JSON.parse(fs_1.default.readFileSync(path_1.default.join(fixture.project, '.awm', 'sensors.json'), 'utf8'));
         expect(manifest).toMatchObject({
-            schemaVersion: 2,
+            schemaVersion: 3,
+            mode: 'project-sensors',
             pack: 'fixture',
+            source: { registry: 'baseline' },
             sensors: { structured: { variantId: 'fixture-v1', command: { executable: 'node', resolution: 'path', args: ['fixture-sensor.mjs', fixture.literal] } } },
         });
         const result = runCli(fixture, 'run', '--fast');

package/dist/tests/structural/native-release-artifacts.test.js

@@ -0,0 +1,22 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const child_process_1 = require("child_process");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const CLI_ROOT = path_1.default.resolve(__dirname, '..', '..');
+const REPO_ROOT = path_1.default.resolve(CLI_ROOT, '..');
+describe('native release artifacts', () => {
+    it('keeps native prebuilds generated instead of versioned source', () => {
+        const gitignore = fs_1.default.readFileSync(path_1.default.join(REPO_ROOT, '.gitignore'), 'utf8');
+        const tracked = (0, child_process_1.execFileSync)('git', ['ls-files', '--', 'cli/prebuilds'], {
+            cwd: REPO_ROOT,
+            encoding: 'utf8',
+        }).trim();
+        expect(gitignore).toContain('cli/prebuilds/');
+        expect(gitignore).toContain('cli/native-artifacts/');
+        expect(tracked).toBe('');
+    });
+});

package/dist/tests/structural/release-flags-are-reachable-from-ci.test.js

@@ -24,6 +24,7 @@ const CLI_ROOT = path_1.default.resolve(__dirname, '..', '..');
 const REPO_ROOT = path_1.default.resolve(CLI_ROOT, '..');
 const RELEASE_ENTRY = path_1.default.join(CLI_ROOT, 'src', 'release', 'index.ts');
 const RELEASE_WORKFLOW = path_1.default.join(REPO_ROOT, '.github', 'workflows', 'release.yml');
+const CI_WORKFLOW = path_1.default.join(REPO_ROOT, '.github', 'workflows', 'ci.yml');
 // Flags deliberadamente NO expuestos a CI, con la razón por la que no lo están. Sacar uno
 // de acá sin exponerlo en el workflow rompe el test a propósito.
 const NOT_FOR_CI = {
@@ -65,3 +66,12 @@ describe('flags del release: implementados <=> alcanzables desde CI', () => {
         expect(workflowSource).toMatch(/--force \{0\}/);
     });
 });
+describe('matriz de compilacion nativa Windows', () => {
+    for (const workflowPath of [CI_WORKFLOW, RELEASE_WORKFLOW]) {
+        it(`${path_1.default.basename(workflowPath)} fija x64 en Windows Server 2022 y conserva ARM64 nativo`, () => {
+            const source = fs_1.default.readFileSync(workflowPath, 'utf8');
+            expect(source).toMatch(/- os: windows-2022\s+target: win32-x64/);
+            expect(source).toMatch(/- os: windows-11-arm\s+target: win32-arm64/);
+        });
+    }
+});

package/dist/tests/structural/release-registry-provenance.test.js

@@ -18,4 +18,8 @@ describe('release registry provenance', () => {
             .toBeLessThan(workflow.indexOf('- name: Release'));
         expect(workflow).toMatch(/REGISTRY_TAG: v3\.4\.0[\s\S]*AWM_PUBLISHED_REGISTRY_TAG: v3\.4\.0/);
     });
+    it('normalizes npm pack JSON from both array and object output formats', () => {
+        expect(workflow).toContain('Array.isArray(packed) ? packed[0] : Object.values(packed)[0]');
+        expect(workflow).toContain('npm pack returned no tarball filename');
+    });
 });

package/dist/tests/structural/sensor-portability-contract.test.js

@@ -0,0 +1,44 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const commander_1 = require("commander");
+jest.mock('@clack/prompts', () => ({ log: { error: jest.fn(), success: jest.fn(), info: jest.fn() } }));
+jest.mock('picocolors', () => ({ green: (value) => value, yellow: (value) => value, red: (value) => value }));
+const sensors_1 = require("../../src/commands/sensors");
+const manifest_1 = require("../../src/commands/sensors/compatibility/manifest");
+const root = path_1.default.resolve(__dirname, '../../..');
+function bootstrapHelp() {
+    const program = new commander_1.Command().name('awm');
+    (0, sensors_1.registerSensorsCommand)(program);
+    const sensors = program.commands.find(command => command.name() === 'sensors');
+    return sensors.commands.find(command => command.name() === 'bootstrap').helpInformation();
+}
+describe('Publication B portable bootstrap contract', () => {
+    it('exposes the exact explicit bootstrap syntax', () => {
+        const help = bootstrapHelp();
+        expect(help).toContain('--mode <mode>');
+        expect(help).toContain('--reason <text>');
+        expect(help).toContain('--dry-run');
+    });
+    it('documents schema v3, explicit migration, dry-run, and environment separation', () => {
+        const reference = fs_1.default.readFileSync(path_1.default.join(root, 'docs/cli-reference.md'), 'utf8');
+        expect(reference).toContain('awm sensors bootstrap [--mode project-sensors|native-gate|opt-out] [--reason <text>] [--dry-run]');
+        expect(reference).toContain('schemaVersion: 3');
+        expect(reference).toContain('never writes');
+        expect(reference).toContain('each environment updates its own AWM installation separately');
+    });
+    it('keeps all documented v3 declarations free of machine registry paths', () => {
+        const reference = fs_1.default.readFileSync(path_1.default.join(root, 'docs/cli-reference.md'), 'utf8');
+        const examples = Array.from(reference.matchAll(/```json\s*\n([\s\S]*?)```/g), match => JSON.parse(match[1]));
+        const v3 = examples.filter(example => example?.schemaVersion === 3);
+        expect(v3.length).toBeGreaterThan(0);
+        v3.forEach(example => {
+            expect(() => (0, manifest_1.parseSensorManifest)(example, 'documented v3 declaration')).not.toThrow();
+            expect(JSON.stringify(example)).not.toMatch(/registryRoot|[A-Za-z]:\\\\|\/(?:Users|home|srv)\//);
+        });
+    });
+});

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "agentic-workflow-manager",
-  "version": "9.5.0",
+  "version": "9.6.1",
   "main": "dist/src/index.js",
   "bin": {
     "awm": "./dist/src/index.js"
   },
   "files": [
-    "dist"
+    "dist",
+    "prebuilds"
   ],
   "repository": {
     "type": "git",
@@ -17,6 +18,8 @@
     "doc": "docs"
   },
   "scripts": {
+    "native:build": "node-gyp rebuild --directory native && node scripts/package-native.js",
+    "native:package-check": "node scripts/assert-native-package.js",
     "build": "tsc && chmod +x dist/src/index.js",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --config eslint.config.awm.mjs --cache --format json",
@@ -59,6 +62,7 @@
     "eslint": "10.8.1",
     "jest": "^30.2.0",
     "js-yaml": "4.1.0",
+    "node-gyp": "^11.5.0",
     "ts-jest": "^29.4.6",
     "ts-node": "^10.9.2",
     "typescript": "^5.9.3"