aiwg 2026.8.5 → 2026.8.7

package/agentic/code/plugins/agent-loop/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-loop",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Iterative AI coding loops with automatic recovery - iteration beats perfection",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/agent-persistence/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-persistence",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Human-in-the-loop (HITL) gate definitions for agent operations. Provides reusable YAML gates for destructive-action authorization, false-positive override, and recovery escalation. Loaded by agent loops and orchestrators that need bounded human checkpoints.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/agentic-installer/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-installer",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Structured YAML manifests for reproducible, agent-driven software installation across platforms. Scripts are the primary artifact; agentic instructions handle adaptation and recovery.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/aiwg-dev/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "aiwg-dev",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Developer tooling for building AIWG itself and AIWG addons/frameworks. Not for end users — install explicitly with `aiwg use aiwg-dev`.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/aiwg-evals/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "aiwg-evals",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Automated evaluation framework for agent quality, based on KAMI benchmark methodology and ReAct patterns",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/auto-memory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "auto-memory",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Automatic memory seed templates for AIWG projects",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/browser-control/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "browser-control",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Drive a real, user-installed Chromium-derived browser from an AIWG agent. Wraps @playwright/mcp with a setup wizard, health-check doctor, allow-list enforcement, and an opinionated agent persona that respects authorization and audit boundaries.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/color-palette/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "color-palette",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Color palette selection and review tooling with color theory fundamentals, current trend research, and accessibility analysis.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/compound-memory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "compound-memory",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Governed orchestration across AIWG line memory, semantic memory, and llm-wiki.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/context-curator/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "context-curator",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Context curation and distractor filtering for production-grade agent reliability",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/daemon/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "daemon",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Persistent daemon session capabilities: Concierge front-end, session memory, scheduler integration",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/doc-intelligence/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doc-intelligence",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Documentation intelligence addon for scraping, extraction, and analysis. Coordinates doc-scraper, pdf-extractor, llms-txt-support, source-unifier, and doc-splitter skills.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/droid-bridge/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "droid-bridge",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "MCP server bridging Claude Code to Factory Droid for batch operations and automated fixes",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/forensics/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "forensics",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Digital forensics and incident response framework with 14 specialized agents covering target profiling, evidence acquisition, log/memory/container/cloud analysis, IOC extraction, and reporting.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/guided-implementation/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "guided-implementation",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Bounded iteration control for autonomous issue-to-code implementation",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/hooks/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "hooks",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Claude Code hooks for workflow tracing and observability.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/knowledge-base/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "knowledge-base",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Knowledge-base / wiki framework with skills for ingestion, query, and lint. Build a structured, citable corpus with cross-references and concept pages.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/line-memory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "line-memory",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Bounded, plain-text project memory with least-recently-used retention.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/llm-wiki/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-wiki",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "LLM-maintained markdown wiki that compounds as sources are ingested. Thin topology declaration on the semantic memory kernel — ships schema profiles and page templates, no custom mechanics.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/marketing/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "marketing",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Marketing automation framework with 37 specialized agents for campaign management.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/media-curator/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "media-curator",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Media archive management framework with 7 specialized agents for source discovery, acquisition (yt-dlp / Internet Archive / Bandcamp), quality assessment, metadata tagging, and provenance tracking.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/nlp-prod/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nlp-prod",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Tools, skills, and CLI extensions for designing and productionizing LLM inference pipelines. Pattern-guided, slim by default, eval-first.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/ops/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ops",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Operational infrastructure framework with 12 specialized agents covering incident response, runbook execution, fleet inventory, certificate lifecycle, and disaster recovery planning.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/prose-integration/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "prose-integration",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Tools for reading, parsing, validating, and executing OpenProse programs from AIWG workflows",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/research/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "research",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Research workflow framework with 9 specialized agents for discovery, acquisition, synthesis, citation management, GRADE quality assessment, and OAIS-compliant archival.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/rlm/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rlm",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "RLM-inspired recursive context decomposition for processing arbitrarily large codebases and document corpora through programmatic sub-agent delegation",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/sdlc/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sdlc",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Complete SDLC framework with 180+ specialized agents for software development lifecycle management.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/security-engineering/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "security-engineering",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Applied security framework for cryptographic primitive selection, chain-of-trust design, authentication factor analysis, supply-chain trust, and physical-threat modeling. Complements OWASP-style application audits.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/semantic-memory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "semantic-memory",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Topology-agnostic semantic memory operations: ingest, lint, query-capture, and structured event logging. Consumers declare a memory topology in their manifest.json; kernel skills read that contract to parameterize behavior.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/skill-factory/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skill-factory",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Build, enhance, validate, and package Claude skills end-to-end. Coordinates skill-builder, skill-enhancer, quality-checker, and skill-packager via the skill-architect agent.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/star-prompt/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "star-prompt",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Tasteful prompt to encourage users to star the repository after successful command completion",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/testing-quality/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "testing-quality",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Testing enforcement, quality metrics, and automation skills",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/twelve-factor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "twelve-factor",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Design-time and audit-time workflows for Twelve-Factor and modern 12+ Factor cloud-native application practices.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/uat-mcp/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "uat-mcp",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Agent-executable acceptance testing via MCP connections — generate, execute, and report on UAT plans that validate MCP tool surfaces.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/utils/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "utils",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Core AIWG utilities for context regeneration and workspace management.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/validation-complete/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "validation-complete",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Validation Complete for AIWG",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/verbalized-sampling/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "verbalized-sampling",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Training-free prompting technique that improves output diversity by 1.6-2.1x through verbalized probability distributions, addressing RLHF mode collapse",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/voice/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "voice",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Voice profile system for consistent, authentic writing.",
   "author": {
     "name": "AIWG Contributors",

package/agentic/code/plugins/writing/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "writing",
-  "version": "2026.8.5",
+  "version": "2026.8.7",
   "description": "Writing quality validation and AI pattern detection.",
   "author": {
     "name": "AIWG Contributors",

package/dist/src/artifacts/move.js

@@ -108,21 +108,30 @@ export async function moveProjectArtifacts(options) {
     const source = path.resolve(options.from ? expandProjectArtifactPath(options.from, projectDir) : resolveProjectAiwgDir(projectDir));
     const destination = path.resolve(expandProjectArtifactPath(options.to, projectDir));
     const dryRun = options.dryRun === true;
+    const attach = options.attach === true;
     const reindex = options.reindex !== false;
     const syncFortemi = options.syncFortemi !== false;
-    if (samePath(source, destination)) {
+    if (!attach && samePath(source, destination)) {
         throw new Error(`Source and destination are the same directory: ${source}`);
     }
-    if (!existsSync(source)) {
+    if (!attach && !existsSync(source)) {
         throw new Error(`Source AIWG artifact directory does not exist: ${source}`);
     }
-    if (existsSync(destination) && !(await isEmptyDirectory(destination))) {
+    if (attach) {
+        if (!existsSync(destination) || !(await stat(destination)).isDirectory()) {
+            throw new Error(`Artifact root to attach does not exist or is not a directory: ${destination}`);
+        }
+        if (!existsSync(path.join(destination, 'aiwg.config'))) {
+            throw new Error(`Artifact root to attach has no aiwg.config: ${destination}`);
+        }
+    }
+    else if (existsSync(destination) && !(await isEmptyDirectory(destination))) {
         throw new Error(`Destination already exists and is not empty: ${destination}`);
     }
     const pointerValue = pointerValueFor(projectDir, destination);
     const pointerPath = path.join(projectDir, PROJECT_AIWG_LOCATION_FILE);
     const gitignoreUpdated = await ensureGitignorePointer(projectDir, dryRun);
-    if (!dryRun) {
+    if (!dryRun && !attach) {
         await moveDirectory(source, destination);
     }
     await writePointer(projectDir, pointerValue, dryRun);
@@ -144,7 +153,8 @@ export async function moveProjectArtifacts(options) {
         to: destination,
         pointerPath,
         pointerValue,
-        moved: !dryRun,
+        moved: !dryRun && !attach,
+        attached: attach && !dryRun,
         gitignoreUpdated,
         reindexed,
         fortemiSynced,

package/dist/src/cli/handlers/artifacts.js

@@ -5,9 +5,11 @@ function usage() {
         'aiwg artifacts — Manage the project AIWG artifact root',
         '',
         'Usage:',
-        '  aiwg artifacts move --to <path> [--from <path>] [--dry-run] [--force] [--no-reindex] [--no-sync]',
+        '  aiwg artifacts move --to <path> [--from <path>] [--dry-run] [--no-reindex] [--no-sync]',
+        '  aiwg artifacts attach --to <existing-path> [--dry-run] [--no-reindex] [--no-sync]',
         '',
         'Notes:',
+        '  move relocates a local artifact root; attach adopts an existing populated root.',
         '  --to points at the artifact directory itself, not its parent.',
         '  AIWG_ARTIFACTS_PATH overrides the generated .aiwg-location pointer.',
     ].join('\n');
@@ -30,7 +32,7 @@ export const artifactsHandler = {
         if (action === 'help' || ctx.args.includes('--help') || ctx.args.includes('-h')) {
             return { exitCode: 0, message: usage() };
         }
-        if (action !== 'move') {
+        if (action !== 'move' && action !== 'attach') {
             return { exitCode: 1, message: `Unknown artifacts action: ${action}\n\n${usage()}` };
         }
         const to = valueAfter(ctx.args, '--to');
@@ -42,12 +44,15 @@ export const artifactsHandler = {
                 projectDir: getProjectDir(ctx, ctx.args),
                 from: valueAfter(ctx.args, '--from'),
                 to,
+                attach: action === 'attach',
                 dryRun: ctx.dryRun || ctx.args.includes('--dry-run'),
                 force: ctx.args.includes('--force'),
                 reindex: !ctx.args.includes('--no-reindex'),
                 syncFortemi: !ctx.args.includes('--no-sync'),
             });
-            const verb = result.dryRun ? 'Would move' : 'Moved';
+            const verb = result.dryRun
+                ? (action === 'attach' ? 'Would attach' : 'Would move')
+                : (result.attached ? 'Attached' : 'Moved');
             return {
                 exitCode: 0,
                 message: [

package/dist/src/mcp/cli.mjs

@@ -415,7 +415,7 @@ CORE TOOLS (15, always registered):
   command-run                       Allow-listed CLI dispatch; confirmation-gated when needed
   artifact-read / artifact-write    Project .aiwg/ artifact IO
 
-OPT-IN TOOLSETS (51 additional tools):
+OPT-IN TOOLSETS (60 additional tools):
   flows          flow-list / flow-show / flow-run
   missions       mission-guide / mission-dispatch / mission-status
   memory         memory-* and reflections-* storage operations
@@ -426,9 +426,10 @@ OPT-IN TOOLSETS (51 additional tools):
   ralph          start / status / abort / attach
   mc             start / dispatch / status / stop / list
   ops            status / list / use / push
+  sandbox        fleet inventory / mutation / reconciliation and governed activity
 
 Enable opt-in tools:
-  AIWG_MCP_TOOLSETS=flows,missions,memory,kb,ralph aiwg mcp serve
+  AIWG_MCP_TOOLSETS=flows,missions,memory,kb,ralph,sandbox aiwg mcp serve
   aiwg mcp serve --toolsets=all
 
 RESOURCES:
@@ -451,6 +452,8 @@ TRANSPORTS:
 ENVIRONMENT:
   AIWG_ROOT          Path to AIWG installation (default: ~/.local/share/ai-writing-guide)
   AIWG_MCP_TOOLSETS  Comma-separated opt-in toolsets; use all for every toolset
+  AIWG_SANDBOX_MANAGEMENT_URL         Sandbox management API origin (HTTPS except loopback)
+  AIWG_SANDBOX_MANAGEMENT_TOKEN_FILE  Mode-0600 management bearer file for sandbox tools
 
 Docs:
   docs/integrations/mcp-capability-audit.md

package/dist/src/mcp/server.mjs

@@ -68,7 +68,7 @@ export function createServer() {
   // Opt-in subsystem toolsets (#1322-#1332)
   //
   // Enabled via AIWG_MCP_TOOLSETS env or `aiwg mcp serve --toolsets=`.
-  // Known: flows, missions, memory, kb, research, activity-log, index, ralph, mc, ops, all
+  // Known: flows, missions, memory, kb, research, activity-log, index, ralph, mc, ops, sandbox, all
   // Default: none (core only — discovery + command-run)
   // ============================================
   const requested = parseToolsets(process.env.AIWG_MCP_TOOLSETS || '');