aiwg 2026.10.6 → 2026.10.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (167) hide show
  1. package/agentic/code/plugins/agent-loop/.claude-plugin/plugin.json +1 -1
  2. package/agentic/code/plugins/agent-persistence/.claude-plugin/plugin.json +1 -1
  3. package/agentic/code/plugins/agentic-installer/.claude-plugin/plugin.json +1 -1
  4. package/agentic/code/plugins/aiwg-dev/.claude-plugin/plugin.json +1 -1
  5. package/agentic/code/plugins/aiwg-evals/.claude-plugin/plugin.json +1 -1
  6. package/agentic/code/plugins/auto-memory/.claude-plugin/plugin.json +1 -1
  7. package/agentic/code/plugins/browser-control/.claude-plugin/plugin.json +1 -1
  8. package/agentic/code/plugins/color-palette/.claude-plugin/plugin.json +1 -1
  9. package/agentic/code/plugins/compound-memory/.claude-plugin/plugin.json +1 -1
  10. package/agentic/code/plugins/context-curator/.claude-plugin/plugin.json +1 -1
  11. package/agentic/code/plugins/daemon/.claude-plugin/plugin.json +1 -1
  12. package/agentic/code/plugins/doc-intelligence/.claude-plugin/plugin.json +1 -1
  13. package/agentic/code/plugins/droid-bridge/.claude-plugin/plugin.json +1 -1
  14. package/agentic/code/plugins/forensics/.claude-plugin/plugin.json +1 -1
  15. package/agentic/code/plugins/guided-implementation/.claude-plugin/plugin.json +1 -1
  16. package/agentic/code/plugins/hooks/.claude-plugin/plugin.json +1 -1
  17. package/agentic/code/plugins/knowledge-base/.claude-plugin/plugin.json +1 -1
  18. package/agentic/code/plugins/line-memory/.claude-plugin/plugin.json +1 -1
  19. package/agentic/code/plugins/llm-wiki/.claude-plugin/plugin.json +1 -1
  20. package/agentic/code/plugins/marketing/.claude-plugin/plugin.json +1 -1
  21. package/agentic/code/plugins/media-curator/.claude-plugin/plugin.json +1 -1
  22. package/agentic/code/plugins/nlp-prod/.claude-plugin/plugin.json +1 -1
  23. package/agentic/code/plugins/ops/.claude-plugin/plugin.json +1 -1
  24. package/agentic/code/plugins/prose-integration/.claude-plugin/plugin.json +1 -1
  25. package/agentic/code/plugins/research/.claude-plugin/plugin.json +1 -1
  26. package/agentic/code/plugins/rlm/.claude-plugin/plugin.json +1 -1
  27. package/agentic/code/plugins/sdlc/.claude-plugin/plugin.json +1 -1
  28. package/agentic/code/plugins/security-engineering/.claude-plugin/plugin.json +1 -1
  29. package/agentic/code/plugins/semantic-memory/.claude-plugin/plugin.json +1 -1
  30. package/agentic/code/plugins/skill-factory/.claude-plugin/plugin.json +1 -1
  31. package/agentic/code/plugins/star-prompt/.claude-plugin/plugin.json +1 -1
  32. package/agentic/code/plugins/testing-quality/.claude-plugin/plugin.json +1 -1
  33. package/agentic/code/plugins/twelve-factor/.claude-plugin/plugin.json +1 -1
  34. package/agentic/code/plugins/uat-mcp/.claude-plugin/plugin.json +1 -1
  35. package/agentic/code/plugins/utils/.claude-plugin/plugin.json +1 -1
  36. package/agentic/code/plugins/validation-complete/.claude-plugin/plugin.json +1 -1
  37. package/agentic/code/plugins/verbalized-sampling/.claude-plugin/plugin.json +1 -1
  38. package/agentic/code/plugins/voice/.claude-plugin/plugin.json +1 -1
  39. package/agentic/code/plugins/writing/.claude-plugin/plugin.json +1 -1
  40. package/bin/aiwg.mjs +4 -2
  41. package/dist/src/a2a/agent-card.js +11 -0
  42. package/dist/src/api/index.d.ts +1 -0
  43. package/dist/src/api/index.js +1 -0
  44. package/dist/src/artifacts/fortemi-shard-contract/2.2.0/contract.json +103 -0
  45. package/dist/src/artifacts/fortemi-shard-contract/2.2.0/full-v1-embedding-config.schema.json +212 -0
  46. package/dist/src/artifacts/fortemi-shard-contract/2.2.0/full-v1-embedding-set.schema.json +240 -0
  47. package/dist/src/artifacts/fortemi-shard-contract/2.2.0/full-v1-manifest.schema.json +451 -0
  48. package/dist/src/artifacts/fortemi-shard-export.js +284 -0
  49. package/dist/src/artifacts/index-preparation.js +2 -0
  50. package/dist/src/auth/client.js +5 -1
  51. package/dist/src/auth/credential-store.js +5 -1
  52. package/dist/src/auth/sensitive-input.js +151 -0
  53. package/dist/src/channel/manager.mjs +3 -0
  54. package/dist/src/cli/handlers/agentcard.js +47 -25
  55. package/dist/src/cli/handlers/auth.js +22 -2
  56. package/dist/src/cli/handlers/decision.js +3 -2
  57. package/dist/src/cli/handlers/effect.js +4 -84
  58. package/dist/src/cli/handlers/guided-setup.js +1 -1
  59. package/dist/src/cli/handlers/init.js +1 -1
  60. package/dist/src/cli/handlers/install.js +6 -0
  61. package/dist/src/cli/handlers/marketplace.js +15 -4
  62. package/dist/src/cli/handlers/setup.js +24 -20
  63. package/dist/src/cli/handlers/use.js +57 -15
  64. package/dist/src/cli/prompt-utils.js +73 -0
  65. package/dist/src/config/gitignore.js +4 -0
  66. package/dist/src/config/workspace.js +2 -1
  67. package/dist/src/decision/adapters/jev.d.ts +3 -2
  68. package/dist/src/decision/adapters/jev.js +20 -31
  69. package/dist/src/decision/ask.js +6 -1
  70. package/dist/src/decision/benchmark.d.ts +4 -1
  71. package/dist/src/decision/benchmark.js +19 -6
  72. package/dist/src/decision/qualification/gate-evidence.d.ts +1 -1
  73. package/dist/src/decision/qualification/gate-evidence.js +6 -4
  74. package/dist/src/decision/qualification/load-staged.d.ts +33 -8
  75. package/dist/src/decision/qualification/load-staged.js +47 -10
  76. package/dist/src/decision/qualification/load.d.ts +2 -2
  77. package/dist/src/decision/qualification/runner.js +7 -3
  78. package/dist/src/discovery/interview.js +10 -5
  79. package/dist/src/discovery/plan-apply.js +26 -30
  80. package/dist/src/discovery/plan-validation.js +2 -2
  81. package/dist/src/effects/host.d.ts +53 -0
  82. package/dist/src/effects/host.js +91 -0
  83. package/dist/src/extensions/commands/definitions.js +2 -2
  84. package/dist/src/extensions/project-local-gitignore.js +2 -0
  85. package/dist/src/issues/cli.js +16 -5
  86. package/dist/src/issues/live.js +44 -12
  87. package/dist/src/marketplace/exchange.js +18 -6
  88. package/dist/src/marketplace/provenance.js +3 -2
  89. package/dist/src/mcp/adapters/codex-runtime.js +46 -76
  90. package/dist/src/mcp/cli.mjs +17 -90
  91. package/dist/src/mcp/grok-build-config.mjs +2 -1
  92. package/dist/src/mcp/muse-native-config.mjs +2 -1
  93. package/dist/src/mcp/tools/worker-invoke.mjs +13 -2
  94. package/dist/src/memory/project-registry.js +2 -1
  95. package/dist/src/mission-protocol/worker-status.js +91 -1
  96. package/dist/src/models/worker-installation.d.mts +1 -1
  97. package/dist/src/models/worker-installation.mjs +65 -4
  98. package/dist/src/packages/adapters/git.js +99 -23
  99. package/dist/src/packages/adapters/gitea.js +8 -27
  100. package/dist/src/packages/adapters/github.js +7 -25
  101. package/dist/src/packages/registry.js +4 -4
  102. package/dist/src/process/cli-command.d.mts +5 -0
  103. package/dist/src/process/cli-command.mjs +42 -0
  104. package/dist/src/serve/worker-invocation.js +10 -0
  105. package/dist/src/smiths/context-pipeline/claude-hook.js +9 -9
  106. package/dist/src/smiths/context-pipeline/context-file-safety.js +330 -9
  107. package/dist/src/smiths/context-pipeline/finalization.js +3 -2
  108. package/dist/src/smiths/context-pipeline/generator.js +7 -19
  109. package/dist/src/smiths/context-pipeline/legacy-inject.js +3 -10
  110. package/dist/src/smiths/context-pipeline/managed-hook.js +5 -5
  111. package/dist/src/smiths/context-pipeline/workspace-context.js +4 -12
  112. package/dist/src/tracker/project-inputs.js +2 -0
  113. package/dist/src/update/notifier.mjs +2 -4
  114. package/docs/_manifest.json +8 -0
  115. package/docs/architecture/adr-rule-activation-and-bound-delivery.md +16 -0
  116. package/docs/cli/agent-usage.md +8 -2
  117. package/docs/cli/reference.md +82 -6
  118. package/docs/cli/sensitive-values.md +87 -0
  119. package/docs/cli/web-backed-resources.md +3 -0
  120. package/docs/contributing/release-comparison.md +119 -2
  121. package/docs/contributing/release-validation-procedure.md +2 -2
  122. package/docs/contributing/socket-post-publish-audit.md +14 -6
  123. package/docs/decision/admission-control.md +13 -1
  124. package/docs/decision/jev-quickstart.md +8 -1
  125. package/docs/decision/load-live-preregistration.md +8 -1
  126. package/docs/decision/pricing-and-benchmark.md +50 -5
  127. package/docs/decision/qualification-runner.md +1 -1
  128. package/docs/getting-started/guided-setup.md +8 -2
  129. package/docs/getting-started/worker-dispatch.md +83 -0
  130. package/docs/guides/openrouter-fleet-costs.md +2 -0
  131. package/docs/local-issues.md +13 -4
  132. package/docs/mcp/codex-profiles.md +8 -95
  133. package/docs/mcp/profiles.md +1 -1
  134. package/docs/providers/git-native-marketplace.md +11 -2
  135. package/docs/providers/worker-invocation-packaging.md +7 -0
  136. package/docs/releases/_manifest.json +1 -0
  137. package/docs/releases/v2026.10.7-announcement.md +264 -0
  138. package/docs/uhp-client.md +2 -0
  139. package/package.json +1 -1
  140. package/prebuilt/fortemi-core/framework/aiwg-fortemi-index-v2.json +1 -1
  141. package/prebuilt/fortemi-core/framework/manifest.json +5 -5
  142. package/prebuilt/fortemi-core/framework/source-stats.json +1 -1
  143. package/prebuilt/framework-relations/manifest.json +2 -2
  144. package/schemas/catalog/domains/repository-json-schemas.json +60 -0
  145. package/tools/agents/providers/base.mjs +5 -1
  146. package/tools/agents/providers/claude.mjs +5 -2
  147. package/tools/agents/providers/codex.mjs +4 -1
  148. package/tools/agents/providers/context-write.mjs +28 -0
  149. package/tools/agents/providers/copilot.mjs +5 -2
  150. package/tools/agents/providers/hermes.mjs +5 -2
  151. package/tools/agents/providers/omp.mjs +3 -1
  152. package/tools/agents/providers/rule-delivery.mjs +29 -12
  153. package/tools/agents/providers/warp.mjs +4 -1
  154. package/tools/agents/providers/windsurf.mjs +6 -3
  155. package/tools/cli/config-gitignore.mjs +5 -0
  156. package/tools/cli/worker-qualification.mjs +5 -3
  157. package/tools/decision/benchmark.mjs +65 -31
  158. package/tools/decision/load-qualification.mjs +2 -1
  159. package/tools/ralph-external/lib/consecutive-failure-circuit-breaker.mjs +26 -0
  160. package/tools/ralph-external/lib/launcher-recovery-evidence.mjs +7 -1
  161. package/tools/ralph-external/lib/recovery-probe.mjs +14 -4
  162. package/tools/ralph-external/process-monitor.mjs +42 -4
  163. package/tools/ralph-external/session-launcher.mjs +125 -3
  164. package/tools/rules/codex-evaluation-runtime.mjs +16 -4
  165. package/tools/rules/release-compare-claude.mjs +33 -11
  166. package/tools/rules/release-compare.mjs +145 -19
  167. package/tools/rules/run-rule-probes.mjs +2 -1
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agent-loop",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Iterative AI coding loops with automatic recovery - iteration beats perfection",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agent-persistence",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Human-in-the-loop (HITL) gate definitions for agent operations. Provides reusable YAML gates for destructive-action authorization, false-positive override, and recovery escalation. Loaded by agent loops and orchestrators that need bounded human checkpoints.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agentic-installer",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Structured YAML manifests for reproducible, agent-driven software installation across platforms. Scripts are the primary artifact; agentic instructions handle adaptation and recovery.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "aiwg-dev",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Developer tooling for building AIWG itself and AIWG addons/frameworks. Not for end users — install explicitly with `aiwg use aiwg-dev`.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "aiwg-evals",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Automated evaluation framework for agent quality, based on KAMI benchmark methodology and ReAct patterns",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "auto-memory",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Automatic memory seed templates for AIWG projects",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "browser-control",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Drive a real, user-installed Chromium-derived browser from an AIWG agent. Wraps @playwright/mcp with a setup wizard, health-check doctor, allow-list enforcement, and an opinionated agent persona that respects authorization and audit boundaries.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "color-palette",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Color palette selection and review tooling with color theory fundamentals, current trend research, and accessibility analysis.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "compound-memory",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Governed orchestration across AIWG line memory, semantic memory, and llm-wiki.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "context-curator",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Context curation and distractor filtering for production-grade agent reliability",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "daemon",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Persistent daemon session capabilities: Concierge front-end, session memory, scheduler integration",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "doc-intelligence",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Documentation intelligence addon for scraping, extraction, analysis, and generated-docs auditing.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "droid-bridge",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "MCP server bridging Claude Code to Factory Droid for batch operations and automated fixes",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "forensics",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Digital forensics and incident response framework with 14 specialized agents covering target profiling, evidence acquisition, log/memory/container/cloud analysis, IOC extraction, and reporting.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "guided-implementation",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Bounded iteration control for autonomous issue-to-code implementation",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "hooks",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Claude Code hooks for workflow tracing and observability.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "knowledge-base",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Knowledge-base / wiki framework with skills for ingestion, query, and lint. Build a structured, citable corpus with cross-references and concept pages.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "line-memory",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Bounded, plain-text project memory with least-recently-used retention.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "llm-wiki",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "LLM-maintained markdown wiki that compounds as sources are ingested. Thin topology declaration on the semantic memory kernel — ships schema profiles and page templates, no custom mechanics.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "marketing",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Marketing automation framework with 37 specialized agents for campaign management.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "media-curator",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Media archive management framework with 7 specialized agents for source discovery, acquisition (yt-dlp / Internet Archive / Bandcamp), quality assessment, metadata tagging, and provenance tracking.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "nlp-prod",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Tools, skills, and CLI extensions for designing and productionizing LLM inference pipelines. Pattern-guided, slim by default, eval-first.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "ops",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Operational infrastructure framework with 12 specialized agents covering incident response, runbook execution, fleet inventory, certificate lifecycle, and disaster recovery planning.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "prose-integration",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Tools for reading, parsing, validating, and executing OpenProse programs from AIWG workflows",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "research",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Research workflow framework with 9 specialized agents for discovery, acquisition, synthesis, citation management, GRADE quality assessment, and OAIS-compliant archival.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "rlm",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "RLM-inspired recursive context decomposition for processing arbitrarily large codebases and document corpora through programmatic sub-agent delegation",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sdlc",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Complete SDLC framework with 180+ specialized agents for software development lifecycle management.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "security-engineering",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Applied security framework for cryptographic primitive selection, chain-of-trust design, authentication factor analysis, supply-chain trust, and physical-threat modeling. Complements OWASP-style application audits.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "semantic-memory",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Topology-agnostic semantic memory operations: ingest, lint, query-capture, and structured event logging. Consumers declare a memory topology in their manifest.json; kernel skills read that contract to parameterize behavior.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "skill-factory",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Build, enhance, validate, and package Claude skills end-to-end. Coordinates skill-builder, skill-enhancer, quality-checker, and skill-packager via the skill-architect agent.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "star-prompt",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Tasteful prompt to encourage users to star the repository after successful command completion",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "testing-quality",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Evidence-bound test conformance, platform protocols, normalization transactions and research-guided testing workflows",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "twelve-factor",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Design-time and audit-time workflows for Twelve-Factor and modern 12+ Factor cloud-native application practices.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "uat-mcp",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Agent-executable acceptance testing via MCP connections — generate, execute, and report on UAT plans that validate MCP tool surfaces.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "utils",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Core AIWG utilities for context regeneration and workspace management.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "validation-complete",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Validation Complete for AIWG",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "verbalized-sampling",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Training-free prompting technique that improves output diversity by 1.6-2.1x through verbalized probability distributions, addressing RLHF mode collapse",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "voice",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Voice profile system for consistent, authentic writing.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "writing",
3
- "version": "2026.10.6",
3
+ "version": "2026.10.7",
4
4
  "description": "Writing quality validation and AI pattern detection.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
package/bin/aiwg.mjs CHANGED
@@ -312,8 +312,8 @@ trace('bin:entry');
312
312
  * Qualifying commands, and why:
313
313
  * - `mcp profile login` — reads an API key via `--api-key-env`,
314
314
  * `--api-key-stdin`, or `--api-key-file`.
315
- * - `decision setup jev` — without `--token-stdin`, reads the token
316
- * directly from `JEV_API_KEY`/`AIWG_DECISION_JEV_API_KEY`.
315
+ * - `decision setup jev`, `auth secret` — resolve standard sensitive inputs.
316
+ * - `init` / `setup` — apply saved credential references as well as flags.
317
317
  *
318
318
  * Checked and left out, with reasons (see the go/no-go review response):
319
319
  * - `auth login` — an OAuth device/browser flow; it does not read a
@@ -336,6 +336,8 @@ function isCredentialHandlingCommand(args) {
336
336
  }
337
337
  if (positionals[0] === 'mcp' && positionals[1] === 'profile' && positionals[2] === 'login') return true;
338
338
  if (positionals[0] === 'decision' && positionals[1] === 'setup' && positionals[2] === 'jev') return true;
339
+ if (positionals[0] === 'auth' && positionals[1] === 'secret') return true;
340
+ if (positionals[0] === 'init' || positionals[0] === 'setup') return true;
339
341
  return false;
340
342
  }
341
343
 
@@ -48,6 +48,17 @@ export class AgentCardCache {
48
48
  * Throws on fetch failure or signature mismatch.
49
49
  */
50
50
  export async function fetchAgentCard(host, instanceId, opts = {}) {
51
+ try {
52
+ return await fetchAgentCardImpl(host, instanceId, opts);
53
+ }
54
+ catch (error) {
55
+ // Transport, JSON and signature errors can repeat remote input or headers.
56
+ // Drop the original cause/stack rather than retaining secret-bearing errors.
57
+ const message = error instanceof Error ? error.message : String(error);
58
+ throw new Error(opts.bearer ? message.split(opts.bearer).join('[REDACTED]') : message);
59
+ }
60
+ }
61
+ async function fetchAgentCardImpl(host, instanceId, opts) {
51
62
  const fetchImpl = opts.fetch ?? fetch;
52
63
  const base = host.replace(/\/+$/, '');
53
64
  const encoded = encodeURIComponent(instanceId);
@@ -8,6 +8,7 @@
8
8
  export { run } from '../cli/router.js';
9
9
  export * from '../resources/index.js';
10
10
  export * from '../sessions/index.js';
11
+ export { AIWG_FULL_V1_SHARD_READER_VERSIONS, validateAiwgFortemiKnowledgeShard, importAiwgFortemiKnowledgeShard, exportAiwgFortemiKnowledgeShardWithReport, } from '../artifacts/fortemi-shard-export.js';
11
12
  export * from '../memory/index.js';
12
13
  export * from '../storage/index.js';
13
14
  export * from '../security/threat-assessment-config.js';
@@ -8,6 +8,7 @@
8
8
  export { run } from '../cli/router.js';
9
9
  export * from '../resources/index.js';
10
10
  export * from '../sessions/index.js';
11
+ export { AIWG_FULL_V1_SHARD_READER_VERSIONS, validateAiwgFortemiKnowledgeShard, importAiwgFortemiKnowledgeShard, exportAiwgFortemiKnowledgeShardWithReport, } from '../artifacts/fortemi-shard-export.js';
11
12
  export * from '../memory/index.js';
12
13
  export * from '../storage/index.js';
13
14
  export * from '../security/threat-assessment-config.js';
@@ -0,0 +1,103 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "contractRevision": "23",
4
+ "status": "unreleased-candidate",
5
+ "authority": {
6
+ "repository": "Fortemi/fortemi",
7
+ "issue": "https://git.integrolabs.net/Fortemi/fortemi/issues/1217",
8
+ "adr": "docs/architecture/adr/ADR-102-canonical-knowledge-shard-contract.md"
9
+ },
10
+ "knowledgeShard": {
11
+ "format": "matric-shard",
12
+ "schemaVersion": "2.2.0",
13
+ "minimumReaderVersion": "2.2.0",
14
+ "profile": "full-v1"
15
+ },
16
+ "schemaBundle": {
17
+ "baseAuthority": "contracts/knowledge-shard/2.1.0/contract.json",
18
+ "files": {
19
+ "contracts/knowledge-shard/2.1.0/core-v1/collection.schema.json": "7507e3d8889c298f058246adecfa3fe8cf529f9c54f51a6beeec5a2229e8afff",
20
+ "contracts/knowledge-shard/2.1.0/core-v1/link.schema.json": "e654ca15596d4c3bddd99061f1011ae84085725db7b5b877023491d4c70a55fd",
21
+ "contracts/knowledge-shard/2.1.0/core-v1/note.schema.json": "f43082707710b1222afba6bd4f39ca694868257cdc0f6c3741fea48a48f322b8",
22
+ "contracts/knowledge-shard/2.1.0/core-v1/tag.schema.json": "dba94d9b65ef485667a618594d4e543da3db743b1608073daf340af39c83586f",
23
+ "contracts/knowledge-shard/2.1.0/core-v1/template.schema.json": "45d452c0d0ec82d8d8640d01b4db6ceeb92e8409597986f2d1c2361eccd8a3b6",
24
+ "contracts/knowledge-shard/2.1.0/full-v1/community-assignment.schema.json": "43caae37ff83af794e3b33c5c5a890c29891391c9013894b6a27a368d1d1a1e1",
25
+ "contracts/knowledge-shard/2.1.0/full-v1/community-set.schema.json": "44b5ba4dfafffafca4cd2dcbeb613e84b5eac40b8141ee42b64acdd442fc505c",
26
+ "contracts/knowledge-shard/2.1.0/full-v1/embedding-set-member.schema.json": "c3ec095a34bc679caf5953e103f8ff340def3e7f7d24354f84c0b23a50e685b9",
27
+ "contracts/knowledge-shard/2.1.0/full-v1/embedding.schema.json": "d0062129a58cc963688d8a477d93bb18c2515ebbb7459751540fae3be938866c",
28
+ "contracts/knowledge-shard/2.1.0/full-v1/graph-edge.schema.json": "ec03fd6f149f93ad59f1da43fda9584307c7e3a1d1fa9a66bb532b9d5cb09619",
29
+ "contracts/knowledge-shard/2.1.0/full-v1/graph-source.schema.json": "4df54f110cefad9204af4d5a334b42a865488a256acb3100e71319582c9692dc",
30
+ "contracts/knowledge-shard/2.1.0/full-v1/named-location.schema.json": "4fdacb534ae5d061e930fd3a6e5a248eff9724e106c86013400600ef42dbc860",
31
+ "contracts/knowledge-shard/2.1.0/full-v1/note-original-history.schema.json": "41246036eff831ec9dd3b84868ad089983bb375289eff0886f69ae80fe27760d",
32
+ "contracts/knowledge-shard/2.1.0/full-v1/note-original.schema.json": "85ed82382d951107d508e0628822b5342aa9ec19c1e9231c1f22dcecdd7316fe",
33
+ "contracts/knowledge-shard/2.1.0/full-v1/note-revised-current.schema.json": "506cff36ced7b63b06f4c37341aac2784b8dd20df6c1a0f969584288a11c4e2a",
34
+ "contracts/knowledge-shard/2.1.0/full-v1/note-revision.schema.json": "29366d0d5c5dc738fbb8ae3ad129086b51da1471b00c6fa27827b1d3d70b769f",
35
+ "contracts/knowledge-shard/2.1.0/full-v1/note-skos-tag.schema.json": "9be98ac497399dcc8696db6ba5582e58b3a5c4f57191e5dcf45d666c2954cf42",
36
+ "contracts/knowledge-shard/2.1.0/full-v1/provenance-activity.schema.json": "a91766df21408b770913ffc2f01b0d94c22d22e6282169392758d9a0cc491999",
37
+ "contracts/knowledge-shard/2.1.0/full-v1/provenance-device.schema.json": "b3fbb075bf1b3102d684254ebc9bd7cdb65358bf3fa91c831f8bd307701bb1ee",
38
+ "contracts/knowledge-shard/2.1.0/full-v1/provenance-edge.schema.json": "bb60c4762c410c82879a47f79f75b34f885e8599d3e2f842ea72381c4bf7aba3",
39
+ "contracts/knowledge-shard/2.1.0/full-v1/provenance-location.schema.json": "d497ea4cf761e04966dbd086c6559b975f6f04a36b537e2c994da0b5db7e1bcc",
40
+ "contracts/knowledge-shard/2.1.0/full-v1/provenance-record.schema.json": "4b780451a3beae7557a0af7ae29e07ea7652dc7825acd072adf3c8bd58420c17",
41
+ "contracts/knowledge-shard/2.1.0/full-v1/signature.schema.json": "f3ff9a478f425855716f18f0921aeebcd9992884d6040df72dc397c0e3531f99",
42
+ "contracts/knowledge-shard/2.1.0/full-v1/skos-collection-member.schema.json": "cfcbed164958e27834075be91e7907e386e29089b65f1a79383cc4472890d2e7",
43
+ "contracts/knowledge-shard/2.1.0/full-v1/skos-collection.schema.json": "0820fd02247fb82ee31aee2a77481906b9e82af90f04bb12038ab519c2b39fa5",
44
+ "contracts/knowledge-shard/2.1.0/full-v1/skos-concept.schema.json": "7a352094ece588501dc06960abf781a642e5df82c6a47ff6002b0b2023621b1c",
45
+ "contracts/knowledge-shard/2.1.0/full-v1/skos-label.schema.json": "256d1f370268cdc53cbc3d0fc2dc7fa4872cfbe28c22d8162f0b07bec67565d6",
46
+ "contracts/knowledge-shard/2.1.0/full-v1/skos-mapping-relation.schema.json": "149c978086247bfc6da3b5a655fc6e20958fcd4f11f533eb634f1fb58eb7feac",
47
+ "contracts/knowledge-shard/2.1.0/full-v1/skos-note.schema.json": "87d13a0391ec78b7354af34448083096e8c767fe481d34f05ecab831aa957469",
48
+ "contracts/knowledge-shard/2.1.0/full-v1/skos-relation.schema.json": "5b9fc1004137e5d3d7f1a8b2d74470863b0d708dd28b148456ebf52a16ff2432",
49
+ "contracts/knowledge-shard/2.1.0/full-v1/skos-scheme-membership.schema.json": "7547f5fd19c1012a4045d3415af03d9ddeb9a0997ea229af490169c97730f60e",
50
+ "contracts/knowledge-shard/2.1.0/full-v1/skos-scheme.schema.json": "a0ce0892d56f9a6871282210192f05c97db3a92675c4b9f7c6f8d784f3100d25",
51
+ "contracts/knowledge-shard/2.2.0/full-v1/embedding-config.schema.json": "03476bf53465d3bfba270b3c3f1ede8254b15f4e1b60ec6b361e1edc86c44192",
52
+ "contracts/knowledge-shard/2.2.0/full-v1/embedding-set.schema.json": "303a938ba044960cd9b09cc5438737576afc85ed0e51994b5cabf0fa21d66655",
53
+ "contracts/knowledge-shard/2.2.0/full-v1/manifest.schema.json": "20b4a98c18c53ec3a6c385d886750e77e4d32100f6bb25578f8db296b5edb109"
54
+ }
55
+ },
56
+ "fieldSemantics": {
57
+ "embedding_sets.query_template": {
58
+ "optional": true,
59
+ "nullable": true,
60
+ "absentDefault": null,
61
+ "nullMeaning": "No set query wrapper; use existing provider query behavior.",
62
+ "valueMeaning": "Exactly one {text}, at most 2048 UTF-8 bytes; restore without modification.",
63
+ "exportNull": "Omit; absence and null both denote the legacy no-template default."
64
+ },
65
+ "embedding_sets.vector_source": {
66
+ "optional": true,
67
+ "nullable": true,
68
+ "absentDefault": "internal",
69
+ "nullMeaning": "Internal automatic embedding ownership",
70
+ "valueMeaning": "Preserve internal/external write ownership independently of searchable vector kinds."
71
+ },
72
+ "embedding_configs.provider_dimension": {
73
+ "optional": true,
74
+ "nullable": true,
75
+ "absentDefault": null,
76
+ "nullMeaning": "Legacy provider-native postprocessing.",
77
+ "valueMeaning": "Raw provider output before truncation and L2 normalization; storage dimension <= raw <= 16384."
78
+ }
79
+ },
80
+ "compatibility": {
81
+ "previousReaders": "Continue accepting 1.x, 2.0.0 and 2.1.0; absent query_template/provider_dimension default to NULL and vector_source to internal.",
82
+ "upgrade": "2.1.0 records remain valid 2.2.0 records; no rewriting or migration is required.",
83
+ "downgrade": "Reject older full-v1 exports if query_template, external ownership, or provider_dimension would be discarded.",
84
+ "selection": "Full-v1 exports select 2.2.0 when any of these extended contracts is present."
85
+ },
86
+ "canonicalCorpus": {
87
+ "path": "tests/fixtures/shards/full-v1-query-template-v2.2/embedding_sets.json",
88
+ "sha256": "f279cad22517395194c6a5dc327b4531bd089e151b9141324c94f01e81bacf32",
89
+ "test": "shard_query_template_tests::query_template_schema_2_2_golden_corpus_and_pins"
90
+ },
91
+ "consumerImpact": {
92
+ "fortemi": "Producer/consumer route round trip, legacy NULL default, validation-before-writes tests in shard_query_template_tests.rs.",
93
+ "fortemi-react": "Consumers pinned to earlier schema versions must reject 2.2.0 until their optional query_template mapping is implemented and fixtures pass. Preserve vector_source and provider_dimension under the same qualification gate.",
94
+ "aiwg": "Full-v1 consumers must preserve optional query_template and pass the new fixture before advertising 2.2.0. Preserve vector_source and provider_dimension under the same qualification gate.",
95
+ "HotM": "Consumers supporting full-v1 must negotiate 2.2.0 and preserve query_template before advertising support. Preserve vector_source and provider_dimension under the same qualification gate.",
96
+ "tracking": "Consumer issue/PR reciprocal links and cross-repository pins/results are required before release under Fortemi/fortemi#1217."
97
+ },
98
+ "claimPolicy": "Local implementation and corpus only. No new cross-repository conformance or release claim; existing receipts remain immutable and do not cover 2.2.0.",
99
+ "providerDimensionCorpus": {
100
+ "path": "tests/fixtures/shards/full-v1-query-template-v2.2/embedding_configs.json",
101
+ "sha256": "bc76206df48215d0da7a3c944874d7af5b6e01bb07df8b5849869025b7d25f89"
102
+ }
103
+ }