aiwg 2026.10.7 → 2026.10.8

package/agentic/code/plugins/agent-loop/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-loop",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Iterative AI coding loops with automatic recovery - iteration beats perfection",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/agent-persistence/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-persistence",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Human-in-the-loop (HITL) gate definitions for agent operations. Provides reusable YAML gates for destructive-action authorization, false-positive override, and recovery escalation. Loaded by agent loops and orchestrators that need bounded human checkpoints.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/agentic-installer/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-installer",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Structured YAML manifests for reproducible, agent-driven software installation across platforms. Scripts are the primary artifact; agentic instructions handle adaptation and recovery.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/aiwg-dev/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "aiwg-dev",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Developer tooling for building AIWG itself and AIWG addons/frameworks. Not for end users — install explicitly with `aiwg use aiwg-dev`.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/aiwg-evals/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "aiwg-evals",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Automated evaluation framework for agent quality, based on KAMI benchmark methodology and ReAct patterns",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/auto-memory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "auto-memory",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Automatic memory seed templates for AIWG projects",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/browser-control/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "browser-control",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Drive a real, user-installed Chromium-derived browser from an AIWG agent. Wraps @playwright/mcp with a setup wizard, health-check doctor, allow-list enforcement, and an opinionated agent persona that respects authorization and audit boundaries.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/color-palette/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "color-palette",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Color palette selection and review tooling with color theory fundamentals, current trend research, and accessibility analysis.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/compound-memory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "compound-memory",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Governed orchestration across AIWG line memory, semantic memory, and llm-wiki.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/context-curator/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "context-curator",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Context curation and distractor filtering for production-grade agent reliability",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/daemon/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "daemon",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Persistent daemon session capabilities: Concierge front-end, session memory, scheduler integration",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/doc-intelligence/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doc-intelligence",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Documentation intelligence addon for scraping, extraction, analysis, and generated-docs auditing.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/droid-bridge/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "droid-bridge",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "MCP server bridging Claude Code to Factory Droid for batch operations and automated fixes",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/forensics/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "forensics",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Digital forensics and incident response framework with 14 specialized agents covering target profiling, evidence acquisition, log/memory/container/cloud analysis, IOC extraction, and reporting.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/guided-implementation/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "guided-implementation",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Bounded iteration control for autonomous issue-to-code implementation",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/hooks/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "hooks",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Claude Code hooks for workflow tracing and observability.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/knowledge-base/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "knowledge-base",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Knowledge-base / wiki framework with skills for ingestion, query, and lint. Build a structured, citable corpus with cross-references and concept pages.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/line-memory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "line-memory",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Bounded, plain-text project memory with least-recently-used retention.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/llm-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-wiki",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "LLM-maintained markdown wiki that compounds as sources are ingested. Thin topology declaration on the semantic memory kernel — ships schema profiles and page templates, no custom mechanics.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/marketing/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "marketing",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Marketing automation framework with 37 specialized agents for campaign management.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/media-curator/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "media-curator",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Media archive management framework with 7 specialized agents for source discovery, acquisition (yt-dlp / Internet Archive / Bandcamp), quality assessment, metadata tagging, and provenance tracking.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/nlp-prod/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nlp-prod",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Tools, skills, and CLI extensions for designing and productionizing LLM inference pipelines. Pattern-guided, slim by default, eval-first.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/ops/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ops",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Operational infrastructure framework with 12 specialized agents covering incident response, runbook execution, fleet inventory, certificate lifecycle, and disaster recovery planning.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/prose-integration/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "prose-integration",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Tools for reading, parsing, validating, and executing OpenProse programs from AIWG workflows",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/research/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "research",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Research workflow framework with 9 specialized agents for discovery, acquisition, synthesis, citation management, GRADE quality assessment, and OAIS-compliant archival.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/rlm/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rlm",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "RLM-inspired recursive context decomposition for processing arbitrarily large codebases and document corpora through programmatic sub-agent delegation",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/sdlc/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sdlc",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Complete SDLC framework with 180+ specialized agents for software development lifecycle management.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/security-engineering/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "security-engineering",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Applied security framework for cryptographic primitive selection, chain-of-trust design, authentication factor analysis, supply-chain trust, and physical-threat modeling. Complements OWASP-style application audits.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/semantic-memory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "semantic-memory",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Topology-agnostic semantic memory operations: ingest, lint, query-capture, and structured event logging. Consumers declare a memory topology in their manifest.json; kernel skills read that contract to parameterize behavior.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/skill-factory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skill-factory",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Build, enhance, validate, and package Claude skills end-to-end. Coordinates skill-builder, skill-enhancer, quality-checker, and skill-packager via the skill-architect agent.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/star-prompt/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "star-prompt",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Tasteful prompt to encourage users to star the repository after successful command completion",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/testing-quality/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "testing-quality",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Evidence-bound test conformance, platform protocols, normalization transactions and research-guided testing workflows",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/twelve-factor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "twelve-factor",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Design-time and audit-time workflows for Twelve-Factor and modern 12+ Factor cloud-native application practices.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/uat-mcp/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "uat-mcp",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Agent-executable acceptance testing via MCP connections — generate, execute, and report on UAT plans that validate MCP tool surfaces.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/utils/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "utils",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Core AIWG utilities for context regeneration and workspace management.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/validation-complete/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "validation-complete",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Validation Complete for AIWG",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/verbalized-sampling/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "verbalized-sampling",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Training-free prompting technique that improves output diversity by 1.6-2.1x through verbalized probability distributions, addressing RLHF mode collapse",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/voice/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "voice",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Voice profile system for consistent, authentic writing.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/writing/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "writing",
-  "version": "2026.10.7",
+  "version": "2026.10.8",
   "description": "Writing quality validation and AI pattern detection.",
   "author": {
     "name": "AIWG Contributors",

package/dist/src/cli/handlers/cost-report.js

@@ -1,6 +1,7 @@
 /** OpenRouter fleet cost-report CLI handler. @issue #1187 */
 import os from 'node:os';
 import path from 'node:path';
+import { sensitiveInputOptions } from '../../auth/sensitive-input.js';
 import { FleetConfigMissingError, formatFleetSpendReport, generateFleetSpendReport, } from '../../cost/fleet-report.js';
 function option(args, name) {
     const index = args.indexOf(name);
@@ -9,10 +10,11 @@ function option(args, name) {
 }
 function usage() {
     return [
-        'Usage: aiwg cost-report (--fleet | --key <key_ref>) [--source openrouter] [--config <fleet.yaml>] [--json]',
+        'Usage: aiwg cost-report (--fleet | --key <key_ref> [--key-store <name>]) [--source openrouter] [--config <fleet.yaml>] [--json]',
         '',
         'Reads bot-to-key references from ~/.config/aiwg/fleet.yaml and credentials from',
         '~/.config/aiwg/keys/<key_ref> or AIWG_OPENROUTER_KEY_<KEY_REF>.',
+        'Use --key-store <name> for one key, or per-entry key_store references in fleet YAML.',
         '',
         'AIWG observes and correlates spend; OpenRouter enforces all key limits and caps.',
     ].join('\n');
@@ -40,6 +42,9 @@ export const costReportHandler = {
             ? path.resolve(ctx.cwd, configuredPath)
             : path.join(os.homedir(), '.config', 'aiwg', 'fleet.yaml');
         try {
+            const keyStore = sensitiveInputOptions(ctx.args, 'key').store;
+            if (keyStore !== undefined && !keyRef)
+                return { exitCode: 2, message: '--key-store requires --key <key_ref>; use per-entry key_store references for --fleet.' };
             const capValue = option(ctx.args, '--monthly-cap');
             const cap = capValue === undefined ? 0 : Number(capValue);
             if (!Number.isFinite(cap) || cap < 0)
@@ -53,6 +58,7 @@ export const costReportHandler = {
                             bot: option(ctx.args, '--bot') ?? keyRef,
                             machine: option(ctx.args, '--machine') ?? os.hostname(),
                             key_ref: keyRef,
+                            ...(keyStore !== undefined ? { key_store: keyStore } : {}),
                             monthly_cap: cap,
                         }],
                 } : {}),

package/dist/src/cli/handlers/decision.js

@@ -1,12 +1,12 @@
 import { resolveSensitiveInput, sensitiveInputOptions } from '../../auth/sensitive-input.js';
 import { decisionPricing } from '../../decision/pricing.js';
-import { ATTRIBUTION_FIELD_PATTERN, DecisionAskUsageError, decisionCapabilities, DecisionLedgerSinceError, decisionLedgerHistory, decisionLedgerStats, evaluateRequestPath, listPatterns, livePlan, MAX_ATTRIBUTION_FIELD_LENGTH, materializeSyntheticClassificationSetup, parseDecisionLedgerSince, readDecisionContextFile, runDecisionOffloadCheckpoint, runOfflinePattern, setupJev, showPattern, syntheticClassificationSetup, validateDecisionInput, } from '../../decision/driver.js';
+import { ATTRIBUTION_FIELD_PATTERN, DecisionAskUsageError, decisionCapabilities, DecisionLedgerSinceError, decisionLedgerHistory, decisionLedgerStats, rotateDecisionLedger, parseDecisionLedgerRetention, evaluateRequestPath, listPatterns, livePlan, MAX_ATTRIBUTION_FIELD_LENGTH, materializeSyntheticClassificationSetup, parseDecisionLedgerSince, readDecisionContextFile, runDecisionOffloadCheckpoint, runOfflinePattern, setupJev, showPattern, syntheticClassificationSetup, validateDecisionInput, } from '../../decision/driver.js';
 function jsonResult(value, exitCode = 0) {
     return { exitCode, message: JSON.stringify(value, null, 2), rawOutput: true };
 }
 function usage() {
     return [
-        'Usage: aiwg decision <capabilities|status|patterns|validate|evaluate|setup|history|stats|pricing> [options]',
+        'Usage: aiwg decision <capabilities|status|patterns|validate|evaluate|setup|history|stats|rotate|pricing> [options]',
         '       aiwg decision ask --question "<q>" (--yes-no | --choices a,b,c | --scale 1-5) [--context <text> | --context-file <path> | --context-stdin] [--threshold 0.8] [--timeout-ms 15000] [--passes N] [--escalation-passes N] [--provider <id>] [--session <id>] [--caller <tag>] [--record-text] [--json]',
         '',
         'Commands:',
@@ -20,9 +20,10 @@ function usage() {
         '  setup synthetic-classification [--output-dir <dir>]',
         '  setup jev [--token-interactive | --token-stdin | --token-file <path> | --token-store <name> | --token-env <name>] [--region <r>] [--endpoint <url>] [--verify] [--remove]',
         '  ask --question "<q>" (--yes-no | --choices a,b,c | --scale 1-5) [--provider <id>] [--session <id>] [--caller <tag>] [--record-text]',
-        '  history [--since <date>] [--provider <id>] [--session <id>] [--kind yes-no|choices|scale] [--status answered|fallback] [--caller <tag>|<prefix>* | --no-caller] [--json]',
+        '  history [--since <date>] [--provider <id>] [--session <id>] [--kind yes-no|choices|scale] [--status answered|fallback] [--caller <tag>|<prefix>* | --no-caller] [--include-archives] [--json]',
         '  pricing [--refresh --model jev-X.Y.Z] [--dry-run] [--offline | --allow-snapshot] [--json]',
-        '  stats [--since <date>] [--provider <id>] [--session <id>] [--kind yes-no|choices|scale] [--status answered|fallback] [--caller <tag>|<prefix>* | --no-caller] [--group-by provider|session|kind|caller|passes|escalation] [--json]',
+        '  stats [--since <date>] [--provider <id>] [--session <id>] [--kind yes-no|choices|scale] [--status answered|fallback] [--caller <tag>|<prefix>* | --no-caller] [--group-by provider|session|kind|caller|passes|escalation] [--include-archives] [--json]',
+        '  rotate [--keep-last <Nd|N> | --all] [--to <path>] [--json]',
         '',
         'Notes:',
         '  Every COMPLETED `ask` call (CLI and MCP) appends one record to the decision',
@@ -42,9 +43,13 @@ function usage() {
         `  --session and --caller must match ${ATTRIBUTION_FIELD_PATTERN.source} (<= ${MAX_ATTRIBUTION_FIELD_LENGTH} characters).`,
         '  `history`/`stats` accept `--caller <tag>` (exact), `--caller \'<prefix>*\'` (prefix; the only wildcard), or `--no-caller` (records with no tag; not combinable with `--caller`).',
         '  `history`/`stats` reject unknown flags and positional arguments with exit 2.',
-        '  The ledger has no built-in retention: it grows without bound and the',
-        '  operator may truncate or delete it at any time; readers tolerate a missing',
-        '  file. The ledger trusts only the local filesystem under the project',
+        '  `rotate` keeps the last 90 days by default; --keep-last accepts days or a',
+        '  positive count. Rotating everything requires --all. Malformed lines stay',
+        '  inline unless --all is used. Archives are private .jsonl files beneath',
+        '  archive/decision/ in the resolved artifact root; --to must stay there.',
+        '  `history`/`stats` optionally read archives with --include-archives, offline.',
+        '  Appenders, rotation and readers share one cross-process lock.',
+        '  The ledger trusts only the local filesystem under the project',
         '  artifact root, owned by the same user running aiwg — it is not a defense',
         '  against a hostile process already running as that user.',
     ].join('\n');
@@ -207,7 +212,7 @@ function parseGroupBy(value) {
     return value;
 }
 const HISTORY_VALUE_FLAGS = ['--since', '--provider', '--session', '--kind', '--status', '--caller'];
-const HISTORY_BOOL_FLAGS = ['--json', '--no-caller'];
+const HISTORY_BOOL_FLAGS = ['--json', '--no-caller', '--include-archives'];
 const STATS_VALUE_FLAGS = [...HISTORY_VALUE_FLAGS, '--group-by'];
 const STATS_BOOL_FLAGS = HISTORY_BOOL_FLAGS;
 /**
@@ -269,6 +274,7 @@ function parseLedgerFilters(args) {
         kind: parseKindFilter(takeOption(args, '--kind')),
         status: parseStatusFilter(takeOption(args, '--status')),
         ...parseCallerFilter(args),
+        ...(args.includes('--include-archives') ? { includeArchives: true } : {}),
     };
 }
 /** One header line stating the caller filter, shown only when one is set. */
@@ -323,6 +329,23 @@ async function decisionStats(ctx) {
     ]);
     return { exitCode: 0, message: [...header, ...lines].join('\n'), rawOutput: true };
 }
+async function decisionRotate(ctx) {
+    const args = ctx.args.slice(1);
+    assertLedgerArgs(args, ['--keep-last', '--to'], ['--all', '--json']);
+    const keepLast = args.includes('--keep-last') ? takeRequiredOption(args, '--keep-last') : undefined;
+    const all = args.includes('--all');
+    try {
+        parseDecisionLedgerRetention(keepLast, all);
+    }
+    catch (error) {
+        throw new DecisionAskUsageError('invalid-retention', error instanceof Error ? error.message : String(error));
+    }
+    const result = await rotateDecisionLedger({ projectRoot: ctx.cwd, keepLast, all,
+        to: args.includes('--to') ? takeRequiredOption(args, '--to') : undefined });
+    if (args.includes('--json'))
+        return jsonResult(result);
+    return { exitCode: 0, rawOutput: true, message: `Archived ${result.archived} line(s)${result.archivePath ? ` to ${result.archivePath}` : ''}; retained ${result.retained} line(s) inline (${result.malformed} malformed).` };
+}
 async function executeDecision(ctx) {
     const [command, subcommand, ...rest] = ctx.args;
     const options = { cwd: ctx.cwd, frameworkRoot: ctx.frameworkRoot, env: process.env };
@@ -335,6 +358,8 @@ async function executeDecision(ctx) {
             return await decisionAsk(ctx);
         if (command === 'history')
             return await decisionHistory(ctx);
+        if (command === 'rotate')
+            return await decisionRotate(ctx);
         if (command === 'pricing') {
             const args = ctx.args.slice(1);
             assertLedgerArgs(args, ['--model'], ['--refresh', '--dry-run', '--offline', '--allow-snapshot', '--json']);

package/dist/src/cli/handlers/local-executor.js

@@ -21,9 +21,22 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
 import { createHash, randomUUID } from 'crypto';
 import { pathToFileURL } from 'node:url';
 import { projectAiwgPath } from '../../config/project-artifacts.js';
+import { resolveSensitiveInput, sensitiveInputOptions } from '../../auth/sensitive-input.js';
 const DEFAULT_PORT = 8200;
 const DEFAULT_BIND = '127.0.0.1';
 const DEFAULT_AIWG_SERVE = 'http://127.0.0.1:7337';
+/** Optional input: no source keeps registration/cache behavior, even at a terminal. */
+export async function resolveLocalExecutorToken(args, dependencies = {}) {
+    const source = sensitiveInputOptions(args, 'token');
+    const environment = dependencies.environment ?? process.env;
+    const explicit = source.interactive || source.stdin || source.file !== undefined || source.store !== undefined || source.env !== undefined;
+    if (!explicit) {
+        if (!environment.AIWG_EXECUTOR_TOKEN)
+            return undefined;
+        source.env = 'AIWG_EXECUTOR_TOKEN';
+    }
+    return resolveSensitiveInput(source, { ...dependencies, environment });
+}
 /**
  * Resolve or generate-once the executor identity.
  * Written to `.aiwg/local-executor/identity.json` so restarts reuse the same
@@ -122,6 +135,14 @@ export const localExecutorServeHandler = {
         // The subcommand is: `aiwg local-executor serve [flags]`
         // ctx.args[0] === 'serve' (consumed by router) or flags directly
         const flagArgs = ctx.args[0] === 'serve' ? ctx.args.slice(1) : ctx.args;
+        let preexistingToken;
+        try {
+            preexistingToken = await resolveLocalExecutorToken(flagArgs);
+        }
+        catch (error) {
+            return { exitCode: 1, message: error.message };
+        }
+        const redact = (message) => preexistingToken ? message.split(preexistingToken).join('[REDACTED]') : message;
         const opts = parseLocalExecutorArgs(flagArgs);
         warnIfNonLoopback(opts.bind);
         // ── Dynamic imports (same pattern as serve.ts) ──────────────────────────
@@ -138,7 +159,7 @@ export const localExecutorServeHandler = {
         }
         catch (err) {
             return {
-                message: `Failed to load executor-shim: ${err.message}`,
+                message: `Failed to load executor-shim: ${redact(err.message)}`,
                 exitCode: 1,
             };
         }
@@ -148,7 +169,7 @@ export const localExecutorServeHandler = {
         }
         catch (err) {
             return {
-                message: `Failed to load DaemonSupervisor: ${err.message}`,
+                message: `Failed to load DaemonSupervisor: ${redact(err.message)}`,
                 exitCode: 1,
             };
         }
@@ -208,7 +229,7 @@ export const localExecutorServeHandler = {
             restBase,
             wsBase,
             aiwgServeUrl: opts.aiwgServe,
-            token: process.env['AIWG_EXECUTOR_TOKEN'],
+            token: preexistingToken,
             tokenPath: projectAiwgPath(process.cwd(), 'local-executor', 'tokens', `${createHash('sha256').update(`${opts.aiwgServe}\0${opts.executorId}`).digest('hex')}.json`),
         });
         // Register with aiwg-serve
@@ -218,7 +239,7 @@ export const localExecutorServeHandler = {
         }
         catch (err) {
             return {
-                message: `Failed to register with aiwg-serve at ${opts.aiwgServe}: ${err.message}\n` +
+                message: `Failed to register with aiwg-serve at ${opts.aiwgServe}: ${redact(err.message)}\n` +
                     'Is aiwg serve running? Start it with: aiwg serve --no-open',
                 exitCode: 1,
             };
@@ -235,7 +256,7 @@ export const localExecutorServeHandler = {
         catch (err) {
             await shim.deregister();
             return {
-                message: `Failed to start executor server: ${err.message}`,
+                message: `Failed to start executor server: ${redact(err.message).split(token).join('[REDACTED]')}`,
                 exitCode: 1,
             };
         }
@@ -304,9 +325,15 @@ export const localExecutorHandler = {
                 '  --aiwg-serve <url>      Registration target (default: http://127.0.0.1:7337)\n' +
                 '  --max-concurrency <n>   Max concurrent missions (default: 4)\n' +
                 '  --executor-id <uuid>    Override stable executor ID\n' +
+                '  --token-interactive     Read optional existing bearer without echo\n' +
+                '  --token-stdin           Read optional existing bearer from stdin\n' +
+                '  --token-file <path>     Read optional existing bearer from a private file\n' +
+                '  --token-store <name>    Read optional existing bearer from the OS store\n' +
+                '  --token-env <NAME>      Read optional existing bearer from a named variable\n' +
                 '\n' +
                 'Environment:\n' +
-                '  AIWG_SERVE_ENDPOINT     Override --aiwg-serve default\n');
+                '  AIWG_SERVE_ENDPOINT     Override --aiwg-serve default\n' +
+                '  AIWG_EXECUTOR_TOKEN     Optional preexisting executor bearer\n');
             return { exitCode: 0 };
         }
         return {