cool-workflow 0.2.2 → 0.2.4

package/dist/wiring/capability-table/workflow-apps.js

@@ -6,9 +6,17 @@
 // sed, not retyped).
 Object.defineProperty(exports, "__esModule", { value: true });
 const registry_core_1 = require("./registry-core");
-const io_1 = require("../../cli/io");
-const state_cli_1 = require("../../shell/state-cli");
-const app_run_cli_1 = require("../../shell/app-run-cli");
+const cli_args_1 = require("../../core/util/cli-args");
+// This whole module is required unconditionally at startup for EVERY
+// command (see wiring/capability-table/index.ts) — loading `next`'s and
+// `app.run`'s shell modules lazily, inside the handler that actually
+// calls them, keeps other commands from paying their load cost.
+function loadStateCli() {
+    return require("../../shell/state-cli");
+}
+function loadAppRunCli() {
+    return require("../../shell/app-run-cli");
+}
 // MILESTONE 12 (workflow-apps). Handler BODIES live in
 // shell/workflow-app-loader.ts (impure — they scan apps/*/app.json +
 // workflows/*.workflow.js on disk and `require()` each entrypoint); this
@@ -17,36 +25,43 @@ const app_run_cli_1 = require("../../shell/app-run-cli");
 // (jsonMode "default") even without --json, and its handler sets
 // exitCode 1 on `valid:false` — both the "not found" id case and a
 // structurally-broken manifest case fail this same way.
-const workflow_app_loader_1 = require("../../shell/workflow-app-loader");
+// Loaded lazily so the app.* handlers below pay this module's load cost
+// only when actually invoked, not on every CLI/MCP startup.
+function loadWorkflowAppLoader() {
+    return require("../../shell/workflow-app-loader");
+}
 const help_1 = require("../../core/format/help");
-const man_cli_1 = require("../../shell/man-cli");
+// Loaded lazily so only the `man` handler below pays its load cost.
+function loadManCli() {
+    return require("../../shell/man-cli");
+}
 (0, registry_core_1.attachCliBinding)("app.list", {
     path: ["app", "list"],
     jsonMode: "default",
-    handler: () => ({ json: (0, workflow_app_loader_1.listWorkflowApps)() }),
+    handler: () => ({ json: loadWorkflowAppLoader().listWorkflowApps() }),
 });
-registry_core_1.REGISTRY_BY_CAPABILITY.get("app.list").mcp.handler = () => (0, workflow_app_loader_1.listWorkflowApps)();
+registry_core_1.REGISTRY_BY_CAPABILITY.get("app.list").mcp.handler = () => loadWorkflowAppLoader().listWorkflowApps();
 (0, registry_core_1.attachCliBinding)("app.show", {
     path: ["app", "show"],
     jsonMode: "default",
-    handler: (args) => ({ json: (0, workflow_app_loader_1.showWorkflowApp)((0, io_1.required)(args.positionals[0], "workflow app id")) }),
+    handler: (args) => ({ json: loadWorkflowAppLoader().showWorkflowApp((0, cli_args_1.required)(args.positionals[0], "workflow app id")) }),
 });
-registry_core_1.REGISTRY_BY_CAPABILITY.get("app.show").mcp.handler = (args) => (0, workflow_app_loader_1.showWorkflowApp)((0, io_1.required)((0, io_1.optionalArg)(args.appId), "workflow app id"));
+registry_core_1.REGISTRY_BY_CAPABILITY.get("app.show").mcp.handler = (args) => loadWorkflowAppLoader().showWorkflowApp((0, cli_args_1.required)((0, cli_args_1.optionalArg)(args.appId), "workflow app id"));
 (0, registry_core_1.attachCliBinding)("app.validate", {
     path: ["app", "validate"],
     jsonMode: "default",
     handler: (args) => {
-        const result = (0, workflow_app_loader_1.validateWorkflowAppTarget)((0, io_1.required)(args.positionals[0], "workflow app path or id"));
+        const result = loadWorkflowAppLoader().validateWorkflowAppTarget((0, cli_args_1.required)(args.positionals[0], "workflow app path or id"));
         return { json: result, exitCode: result.valid ? undefined : 1 };
     },
 });
-registry_core_1.REGISTRY_BY_CAPABILITY.get("app.validate").mcp.handler = (args) => (0, workflow_app_loader_1.validateWorkflowAppTarget)((0, io_1.required)((0, io_1.optionalArg)(args.target ?? args.appId), "workflow app path or id"));
+registry_core_1.REGISTRY_BY_CAPABILITY.get("app.validate").mcp.handler = (args) => loadWorkflowAppLoader().validateWorkflowAppTarget((0, cli_args_1.required)((0, cli_args_1.optionalArg)(args.target ?? args.appId), "workflow app path or id"));
 (0, registry_core_1.attachCliBinding)("app.init", {
     path: ["app", "init"],
     jsonMode: "default",
-    handler: (args) => ({ json: (0, workflow_app_loader_1.initWorkflowApp)((0, io_1.required)(args.positionals[0], "app id"), args.options) }),
+    handler: (args) => ({ json: loadWorkflowAppLoader().initWorkflowApp((0, cli_args_1.required)(args.positionals[0], "app id"), args.options) }),
 });
-registry_core_1.REGISTRY_BY_CAPABILITY.get("app.init").mcp.handler = (args) => (0, workflow_app_loader_1.initWorkflowApp)((0, io_1.required)((0, io_1.optionalArg)(args.appId), "app id"), args);
+registry_core_1.REGISTRY_BY_CAPABILITY.get("app.init").mcp.handler = (args) => loadWorkflowAppLoader().initWorkflowApp((0, cli_args_1.required)((0, cli_args_1.optionalArg)(args.appId), "app id"), args);
 // `cw init <id>` — the standalone scaffold verb. v2 folds `init` into
 // `app.init` (the old build's legacy `.workflow.js` scaffold is gone), so
 // both surfaces route through initWorkflowApp, same as `cw app init`. The
@@ -56,15 +71,15 @@ registry_core_1.REGISTRY_BY_CAPABILITY.get("app.init").mcp.handler = (args) => (
 (0, registry_core_1.attachCliBinding)("init", {
     path: ["init"],
     jsonMode: "default",
-    handler: (args) => ({ json: (0, workflow_app_loader_1.initWorkflowApp)((0, io_1.required)((0, io_1.optionalArg)(args.positionals[0]), "workflow id"), args.options) }),
+    handler: (args) => ({ json: loadWorkflowAppLoader().initWorkflowApp((0, cli_args_1.required)((0, cli_args_1.optionalArg)(args.positionals[0]), "workflow id"), args.options) }),
 });
-registry_core_1.REGISTRY_BY_CAPABILITY.get("init").mcp.handler = (args) => (0, workflow_app_loader_1.initWorkflowApp)((0, io_1.required)((0, io_1.optionalArg)(args.workflowId ?? args.appId), "workflow id"), args);
+registry_core_1.REGISTRY_BY_CAPABILITY.get("init").mcp.handler = (args) => loadWorkflowAppLoader().initWorkflowApp((0, cli_args_1.required)((0, cli_args_1.optionalArg)(args.workflowId ?? args.appId), "workflow id"), args);
 (0, registry_core_1.attachCliBinding)("app.package", {
     path: ["app", "package"],
     jsonMode: "default",
-    handler: (args) => ({ json: (0, workflow_app_loader_1.packageWorkflowApp)((0, io_1.required)(args.positionals[0], "app id"), args.options) }),
+    handler: (args) => ({ json: loadWorkflowAppLoader().packageWorkflowApp((0, cli_args_1.required)(args.positionals[0], "app id"), args.options) }),
 });
-registry_core_1.REGISTRY_BY_CAPABILITY.get("app.package").mcp.handler = (args) => (0, workflow_app_loader_1.packageWorkflowApp)((0, io_1.required)((0, io_1.optionalArg)(args.appId), "app id"), args);
+registry_core_1.REGISTRY_BY_CAPABILITY.get("app.package").mcp.handler = (args) => loadWorkflowAppLoader().packageWorkflowApp((0, cli_args_1.required)((0, cli_args_1.optionalArg)(args.appId), "app id"), args);
 // `cw app run <app-id>` — plan+drive+report an app in one call. 2-token
 // cli.path found before the ["app"] usage catch-all; `appRunCli` reads the
 // app id from `appId`, so the first positional after "run" is forwarded as
@@ -72,7 +87,7 @@ registry_core_1.REGISTRY_BY_CAPABILITY.get("app.package").mcp.handler = (args) =
 (0, registry_core_1.attachCliBinding)("app.run", {
     path: ["app", "run"],
     jsonMode: "default",
-    handler: (args) => ({ json: (0, app_run_cli_1.appRunCli)({ ...args.options, appId: (0, io_1.required)(args.positionals[0], "app id") }) }),
+    handler: (args) => ({ json: loadAppRunCli().appRunCli({ ...args.options, appId: (0, cli_args_1.required)(args.positionals[0], "app id") }) }),
 });
 // A 1-token `["app"]` row that exists ONLY to own the fixed usage string
 // for an unrecognized `app` subcommand (`app run` is not yet CLI-wired at
@@ -88,7 +103,7 @@ registry_core_1.REGISTRY_BY_CAPABILITY.get("app.package").mcp.handler = (args) =
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js app list|show|validate|init|package|run [app-id|path]");
+        throw new Error("Usage: cw app list|show|validate|init|package|run [app-id|path]");
     },
 }, "app.usage exists only to own the fixed usage-error text for an unrecognized app subcommand; every real app.* action is its own capability row above.");
 // ---------------------------------------------------------------------
@@ -100,188 +115,188 @@ registry_core_1.REGISTRY_BY_CAPABILITY.get("app.package").mcp.handler = (args) =
 // only ever reached when no 2-token real row for that family matched.
 // `hiddenFromHelp` keeps each off its own `cw help <verb>` line.
 // ---------------------------------------------------------------------
-(0, registry_core_1.addCliOnlyCapability)("sandbox.usage", "cw.js sandbox list|show|validate|choose|resolve [profile-id|profile-file]", {
+(0, registry_core_1.addCliOnlyCapability)("sandbox.usage", "cw sandbox list|show|validate|choose|resolve [profile-id|profile-file]", {
     path: ["sandbox"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js sandbox list|show|validate|choose|resolve [profile-id|profile-file]");
+        throw new Error("Usage: cw sandbox list|show|validate|choose|resolve [profile-id|profile-file]");
     },
 }, "sandbox.usage exists only to own the fixed usage-error text for an unrecognized sandbox subcommand; every real sandbox.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("state.usage", "cw.js state check <run-id> [--state PATH] [--write]", {
+(0, registry_core_1.addCliOnlyCapability)("state.usage", "cw state check <run-id> [--state PATH] [--write]", {
     path: ["state"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js state check <run-id> [--state PATH] [--write]");
+        throw new Error("Usage: cw state check <run-id> [--state PATH] [--write]");
     },
 }, "state.usage exists only to own the fixed usage-error text for an unrecognized state subcommand; every real state.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("audit.usage", "cw.js audit summary|worker|provenance|multi-agent|policy|role|blackboard|judge|attest|decision <run-id> [worker-id|role-id]", {
+(0, registry_core_1.addCliOnlyCapability)("audit.usage", "cw audit summary|worker|provenance|multi-agent|policy|role|blackboard|judge|attest|decision <run-id> [worker-id|role-id]", {
     path: ["audit"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js audit summary|worker|provenance|multi-agent|policy|role|blackboard|judge|attest|decision <run-id> [worker-id|role-id]");
+        throw new Error("Usage: cw audit summary|worker|provenance|multi-agent|policy|role|blackboard|judge|attest|decision <run-id> [worker-id|role-id]");
     },
 }, "audit.usage exists only to own the fixed usage-error text for an unrecognized audit subcommand; every real audit.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("blackboard.usage", "cw.js blackboard summary|summarize|graph|resolve <run-id> | topic create <run-id> | message post|list <run-id> | context put <run-id> | artifact add|list <run-id> | snapshot <run-id>", {
+(0, registry_core_1.addCliOnlyCapability)("blackboard.usage", "cw blackboard summary|summarize|graph|resolve <run-id> | topic create <run-id> | message post|list <run-id> | context put <run-id> | artifact add|list <run-id> | snapshot <run-id>", {
     path: ["blackboard"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js blackboard summary|summarize|graph|resolve <run-id> | topic create <run-id> | message post|list <run-id> | context put <run-id> | artifact add|list <run-id> | snapshot <run-id>");
+        throw new Error("Usage: cw blackboard summary|summarize|graph|resolve <run-id> | topic create <run-id> | message post|list <run-id> | context put <run-id> | artifact add|list <run-id> | snapshot <run-id>");
     },
 }, "blackboard.usage exists only to own the fixed usage-error text for an unrecognized blackboard subcommand; every real blackboard.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("candidate.usage", "cw.js candidate list|show|register|score|rank|select|reject|summary <run-id> [candidate-id]", {
+(0, registry_core_1.addCliOnlyCapability)("candidate.usage", "cw candidate list|show|register|score|rank|select|reject|summary <run-id> [candidate-id]", {
     path: ["candidate"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js candidate list|show|register|score|rank|select|reject|summary <run-id> [candidate-id]");
+        throw new Error("Usage: cw candidate list|show|register|score|rank|select|reject|summary <run-id> [candidate-id]");
     },
 }, "candidate.usage exists only to own the fixed usage-error text for an unrecognized candidate subcommand; every real candidate.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("comment.usage", "cw.js comment add <kind> <run-id> <target-id> --body <text> | comment list <run-id> [--json]", {
+(0, registry_core_1.addCliOnlyCapability)("comment.usage", "cw comment add <kind> <run-id> <target-id> --body <text> | comment list <run-id> [--json]", {
     path: ["comment"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js comment add <kind> <run-id> <target-id> --body <text> | comment list <run-id> [--json]");
+        throw new Error("Usage: cw comment add <kind> <run-id> <target-id> --body <text> | comment list <run-id> [--json]");
     },
 }, "comment.usage exists only to own the fixed usage-error text for an unrecognized comment subcommand; every real comment.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("eval.usage", "cw.js eval snapshot <run-id> --id <snapshot-id> | replay <snapshot-id-or-path> | compare <baseline-id-or-path> <replay-id-or-path> | score <replay-id-or-path> | gate <suite-id-or-path> | report <replay-id-or-path>", {
+(0, registry_core_1.addCliOnlyCapability)("eval.usage", "cw eval snapshot <run-id> --id <snapshot-id> | replay <snapshot-id-or-path> | compare <baseline-id-or-path> <replay-id-or-path> | score <replay-id-or-path> | gate <suite-id-or-path> | report <replay-id-or-path>", {
     path: ["eval"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js eval snapshot <run-id> --id <snapshot-id> | replay <snapshot-id-or-path> | compare <baseline-id-or-path> <replay-id-or-path> | score <replay-id-or-path> | gate <suite-id-or-path> | report <replay-id-or-path>");
+        throw new Error("Usage: cw eval snapshot <run-id> --id <snapshot-id> | replay <snapshot-id-or-path> | compare <baseline-id-or-path> <replay-id-or-path> | score <replay-id-or-path> | gate <suite-id-or-path> | report <replay-id-or-path>");
     },
 }, "eval.usage exists only to own the fixed usage-error text for an unrecognized eval subcommand; every real eval.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("telemetry.usage", "cw.js telemetry verify <run-id> [--pubkey <pem-or-path>] [--json]", {
+(0, registry_core_1.addCliOnlyCapability)("telemetry.usage", "cw telemetry verify <run-id> [--pubkey <pem-or-path>] [--json]", {
     path: ["telemetry"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js telemetry verify <run-id> [--pubkey <pem-or-path>] [--json]");
+        throw new Error("Usage: cw telemetry verify <run-id> [--pubkey <pem-or-path>] [--json]");
     },
 }, "telemetry.usage exists only to own the fixed usage-error text for an unrecognized telemetry subcommand; every real telemetry.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("demo.usage", "cw.js demo tamper|bundle [--json]", {
+(0, registry_core_1.addCliOnlyCapability)("demo.usage", "cw demo tamper|bundle [--json]", {
     path: ["demo"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js demo tamper|bundle [--json]");
+        throw new Error("Usage: cw demo tamper|bundle [--json]");
     },
 }, "demo.usage exists only to own the fixed usage-error text for an unrecognized demo subcommand; every real demo.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("multi-agent.usage", "cw.js multi-agent run|status|step|blackboard|score|select|summary|summarize|graph|dependencies|failures|evidence|reasoning|show|role|group|membership|fanout|fanin <run-id> [id]", {
+(0, registry_core_1.addCliOnlyCapability)("multi-agent.usage", "cw multi-agent run|status|step|blackboard|score|select|summary|summarize|graph|dependencies|failures|evidence|reasoning|show|role|group|membership|fanout|fanin <run-id> [id]", {
     path: ["multi-agent"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js multi-agent run|status|step|blackboard|score|select|summary|summarize|graph|dependencies|failures|evidence|reasoning|show|role|group|membership|fanout|fanin <run-id> [id]");
+        throw new Error("Usage: cw multi-agent run|status|step|blackboard|score|select|summary|summarize|graph|dependencies|failures|evidence|reasoning|show|role|group|membership|fanout|fanin <run-id> [id]");
     },
 }, "multi-agent.usage exists only to own the fixed usage-error text for an unrecognized multi-agent subcommand; every real multi-agent.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("node.usage", "cw.js node list|show|graph|snapshot|diff|replay|verify <run-id> [node-id|snapshot-id|replay-id]", {
+(0, registry_core_1.addCliOnlyCapability)("node.usage", "cw node list|show|graph|snapshot|diff|replay|verify <run-id> [node-id|snapshot-id|replay-id]", {
     path: ["node"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js node list|show|graph|snapshot|diff|replay|verify <run-id> [node-id|snapshot-id|replay-id]");
+        throw new Error("Usage: cw node list|show|graph|snapshot|diff|replay|verify <run-id> [node-id|snapshot-id|replay-id]");
     },
 }, "node.usage exists only to own the fixed usage-error text for an unrecognized node subcommand; every real node.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("backend.usage", "cw.js backend list|show|probe [backend-id]  |  cw.js backend agent config [show|set] [--agent-command ... --agent-endpoint ... --agent-model ...]", {
+(0, registry_core_1.addCliOnlyCapability)("backend.usage", "cw backend list|show|probe [backend-id]  |  cw backend agent config [show|set] [--agent-command ... --agent-endpoint ... --agent-model ...]", {
     path: ["backend"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js backend list|show|probe [backend-id]  |  cw.js backend agent config [show|set] [--agent-command ... --agent-endpoint ... --agent-model ...]");
+        throw new Error("Usage: cw backend list|show|probe [backend-id]  |  cw backend agent config [show|set] [--agent-command ... --agent-endpoint ... --agent-model ...]");
     },
 }, "backend.usage exists only to own the fixed usage-error text for an unrecognized backend subcommand; every real backend.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("contract.usage", "cw.js contract show <run-id> [contract-id]", {
+(0, registry_core_1.addCliOnlyCapability)("contract.usage", "cw contract show <run-id> [contract-id]", {
     path: ["contract"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js contract show <run-id> [contract-id]");
+        throw new Error("Usage: cw contract show <run-id> [contract-id]");
     },
 }, "contract.usage exists only to own the fixed usage-error text for an unrecognized contract subcommand; every real contract.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("migration.usage", "cw.js migration list|check|prove [target] [--contract run-state|workflow-app]", {
+(0, registry_core_1.addCliOnlyCapability)("migration.usage", "cw migration list|check|prove [target] [--contract run-state|workflow-app]", {
     path: ["migration"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js migration list|check|prove [target] [--contract run-state|workflow-app]");
+        throw new Error("Usage: cw migration list|check|prove [target] [--contract run-state|workflow-app]");
     },
 }, "migration.usage exists only to own the fixed usage-error text for an unrecognized migration subcommand; every real migration.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("feedback.usage", "cw.js feedback list|show|summary|collect|task|resolve <run-id> [feedback-id]", {
+(0, registry_core_1.addCliOnlyCapability)("feedback.usage", "cw feedback list|show|summary|collect|task|resolve <run-id> [feedback-id]", {
     path: ["feedback"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js feedback list|show|summary|collect|task|resolve <run-id> [feedback-id]");
+        throw new Error("Usage: cw feedback list|show|summary|collect|task|resolve <run-id> [feedback-id]");
     },
 }, "feedback.usage exists only to own the fixed usage-error text for an unrecognized feedback subcommand; every real feedback.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("metrics.usage", "cw.js metrics show <run-id> | metrics summary [--scope repo|home] [--pricing <path>|default] [--limit N] [--json]", {
+(0, registry_core_1.addCliOnlyCapability)("metrics.usage", "cw metrics show <run-id> | metrics summary [--scope repo|home] [--pricing <path>|default] [--limit N] [--json]", {
     path: ["metrics"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js metrics show <run-id> | metrics summary [--scope repo|home] [--pricing <path>|default] [--limit N] [--json]");
+        throw new Error("Usage: cw metrics show <run-id> | metrics summary [--scope repo|home] [--pricing <path>|default] [--limit N] [--json]");
     },
 }, "metrics.usage exists only to own the fixed usage-error text for an unrecognized metrics subcommand; every real metrics.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("operator.usage", "cw.js operator status|report <run-id> [--json]", {
+(0, registry_core_1.addCliOnlyCapability)("operator.usage", "cw operator status|report <run-id> [--json]", {
     path: ["operator"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js operator status|report <run-id> [--json]");
+        throw new Error("Usage: cw operator status|report <run-id> [--json]");
     },
 }, "operator.usage exists only to own the fixed usage-error text for an unrecognized operator subcommand; every real operator.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("topology.usage", "cw.js topology list|show <topology-id>|show <run-id> <topology-run-id>|validate <topology-id>|apply <run-id> <topology-id>|summary <run-id>|graph <run-id>", {
+(0, registry_core_1.addCliOnlyCapability)("topology.usage", "cw topology list|show <topology-id>|show <run-id> <topology-run-id>|validate <topology-id>|apply <run-id> <topology-id>|summary <run-id>|graph <run-id>", {
     path: ["topology"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js topology list|show <topology-id>|show <run-id> <topology-run-id>|validate <topology-id>|apply <run-id> <topology-id>|summary <run-id>|graph <run-id>");
+        throw new Error("Usage: cw topology list|show <topology-id>|show <run-id> <topology-run-id>|validate <topology-id>|apply <run-id> <topology-id>|summary <run-id>|graph <run-id>");
     },
 }, "topology.usage exists only to own the fixed usage-error text for an unrecognized topology subcommand; every real topology.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("summary.usage", "cw.js summary refresh|show <run-id> [--json]", {
+(0, registry_core_1.addCliOnlyCapability)("summary.usage", "cw summary refresh|show <run-id> [--json]", {
     path: ["summary"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js summary refresh|show <run-id> [--json]");
+        throw new Error("Usage: cw summary refresh|show <run-id> [--json]");
     },
 }, "summary.usage exists only to own the fixed usage-error text for an unrecognized summary subcommand; every real summary.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("workbench.usage", "cw.js workbench serve [--port N] [--once] [--require-token] | view <run-id> [--json]", {
+(0, registry_core_1.addCliOnlyCapability)("workbench.usage", "cw workbench serve [--port N] [--once] [--require-token] | view <run-id> [--json]", {
     path: ["workbench"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js workbench serve [--port N] [--once] [--require-token] | view <run-id> [--json]");
+        throw new Error("Usage: cw workbench serve [--port N] [--once] [--require-token] | view <run-id> [--json]");
     },
 }, "workbench.usage exists only to own the fixed usage-error text for an unrecognized workbench subcommand; every real workbench.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("worker.usage", "cw.js worker list|summary|show|manifest|output|fail|validate <run-id> [worker-id] [result-file]", {
+(0, registry_core_1.addCliOnlyCapability)("worker.usage", "cw worker list|summary|show|manifest|output|fail|validate <run-id> [worker-id] [result-file]", {
     path: ["worker"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js worker list|summary|show|manifest|output|fail|validate <run-id> [worker-id] [result-file]");
+        throw new Error("Usage: cw worker list|summary|show|manifest|output|fail|validate <run-id> [worker-id] [result-file]");
     },
 }, "worker.usage exists only to own the fixed usage-error text for an unrecognized worker subcommand; every real worker.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("review.usage", "cw.js review status <run-id> [--json] | review policy <run-id> --required-approvals N --authorized-roles a,b --applies-to commit,selection", {
+(0, registry_core_1.addCliOnlyCapability)("review.usage", "cw review status <run-id> [--json] | review policy <run-id> --required-approvals N --authorized-roles a,b --applies-to commit,selection", {
     path: ["review"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js review status <run-id> [--json] | review policy <run-id> --required-approvals N --authorized-roles a,b --applies-to commit,selection");
+        throw new Error("Usage: cw review status <run-id> [--json] | review policy <run-id> --required-approvals N --authorized-roles a,b --applies-to commit,selection");
     },
 }, "review.usage exists only to own the fixed usage-error text for an unrecognized review subcommand; every real review.* action is its own capability row above.");
-(0, registry_core_1.addCliOnlyCapability)("coordinator.usage", "cw.js coordinator summary <run-id> | coordinator decision <run-id> --kind <kind> --outcome <outcome> --reason TEXT", {
+(0, registry_core_1.addCliOnlyCapability)("coordinator.usage", "cw coordinator summary <run-id> | coordinator decision <run-id> --kind <kind> --outcome <outcome> --reason TEXT", {
     path: ["coordinator"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js coordinator summary <run-id> | coordinator decision <run-id> --kind <kind> --outcome <outcome> --reason TEXT");
+        throw new Error("Usage: cw coordinator summary <run-id> | coordinator decision <run-id> --kind <kind> --outcome <outcome> --reason TEXT");
     },
 }, "coordinator.usage exists only to own the fixed usage-error text for an unrecognized coordinator subcommand; every real coordinator.* action is its own capability row above.");
 // ---- man (CLI-only; raw manual-page bytes to stdout, no MCP peer) -----
@@ -305,7 +320,7 @@ registry_core_1.REGISTRY_BY_CAPABILITY.get("app.package").mcp.handler = (args) =
         if (!topic) {
             throw new Error("Missing topic.\n  Tip: cw man release-tooling for the release tooling manual.");
         }
-        process.stdout.write((0, man_cli_1.readManPage)(topic));
+        process.stdout.write(loadManCli().readManPage(topic));
         return {};
     },
 }, "man is a CLI-only raw-file reader over docs/; the old build never gave it an MCP peer.");
@@ -314,8 +329,8 @@ registry_core_1.REGISTRY_BY_CAPABILITY.get("app.package").mcp.handler = (args) =
     path: ["info"],
     jsonMode: "flag",
     handler: (args) => {
-        const appId = (0, io_1.required)(args.positionals[0], "workflow app id");
-        const data = (0, workflow_app_loader_1.showWorkflowApp)(appId);
+        const appId = (0, cli_args_1.required)(args.positionals[0], "workflow app id");
+        const data = loadWorkflowAppLoader().showWorkflowApp(appId);
         return { json: data, text: `${(0, help_1.formatInfo)(appId, data)}\n` };
     },
 }, "info is a CLI-only convenience card over app.show; the old build never gave it an MCP peer.");
@@ -336,9 +351,9 @@ registry_core_1.REGISTRY_BY_CAPABILITY.get("app.package").mcp.handler = (args) =
 (0, registry_core_1.attachCliBinding)("next", {
     path: ["next"],
     jsonMode: "default",
-    handler: (args) => ({ json: (0, state_cli_1.nextCli)((0, io_1.required)((0, io_1.optionalArg)(args.positionals[0]), "run id"), args.options) }),
+    handler: (args) => ({ json: loadStateCli().nextCli((0, cli_args_1.required)((0, cli_args_1.optionalArg)(args.positionals[0]), "run id"), args.options) }),
 });
-registry_core_1.REGISTRY_BY_CAPABILITY.get("next").mcp.handler = (args) => (0, state_cli_1.nextCli)((0, io_1.required)((0, io_1.optionalArg)(args.runId), "run id"), args);
+registry_core_1.REGISTRY_BY_CAPABILITY.get("next").mcp.handler = (args) => loadStateCli().nextCli((0, cli_args_1.required)((0, cli_args_1.optionalArg)(args.runId), "run id"), args);
 // `ledger.propose`/`.review`/`.verify`/`.apply`/`.list` are documented
 // payload-probe opt-outs in the old build (each mints a fresh timestamped/
 // digested entry, or reads args that arrive by --file/stdin on the CLI vs

package/docs/agent-delegation-drive.7.md

@@ -419,3 +419,7 @@ The one-command `cw -q` headline now routes the question and defaults the repo t
 0.2.1
 
 0.2.2
+
+0.2.3
+
+0.2.4

package/docs/candidate-scoring.7.md

@@ -80,7 +80,7 @@ Operators can record an unverified selection only with a clear option. That
 records selection state but does not make the candidate into committed state.
 
 Committed state has a harder rule. A candidate can be moved up by
-`cw.js commit --candidate` or `cw.js commit --selection` only when it has score
+`cw commit --candidate` or `cw commit --selection` only when it has score
 evidence, a verified selection, and a linked verifier node with evidence.
 Rejected, failed, unscored, unselected, and unverified candidates are stopped
 and produce ErrorFeedback.

package/docs/canonical-workflow-apps.7.md

@@ -21,7 +21,7 @@ Map out a repository architecture, weigh the risks, check the important
 findings, and put together an evidence-backed verdict.
 
 ```bash
-node scripts/cw.js plan architecture-review \
+cw plan architecture-review \
   --repo /path/to/repo \
   --question "Is this architecture sound?" \
   --invariant "public API stays stable" \
@@ -72,7 +72,7 @@ you can act on, patch when `--mode fix` is allowed, check the outcomes, and
 give a short account with evidence.
 
 ```bash
-node scripts/cw.js plan pr-review-fix-ci \
+cw plan pr-review-fix-ci \
   --repo /path/to/repo \
   --pr 123 \
   --base main \
@@ -86,7 +86,7 @@ Get a release ready with checklist discipline: version checks, changelog, tests,
 packaging, release notes, and a last verification.
 
 ```bash
-node scripts/cw.js plan release-cut \
+cw plan release-cut \
   --repo /path/to/repo \
   --version 0.1.13 \
   --previousVersion 0.1.11 \
@@ -104,7 +104,7 @@ papers — not only a git code repo. The working directory is the corpus,
 so the agent can back its answer with your own files.
 
 ```bash
-node scripts/cw.js plan research-synthesis \
+cw plan research-synthesis \
   --cwd /tmp/research-run \
   --question "What does the evidence support?" \
   --source "official-docs" \
@@ -179,8 +179,8 @@ easy to inspect, and useful.
 Use the Operator UX commands to look at any canonical app run:
 
 ```bash
-node scripts/cw.js status <run-id>
-node scripts/cw.js graph <run-id>
-node scripts/cw.js report <run-id> --summary
+cw status <run-id>
+cw graph <run-id>
+cw report <run-id> --summary
 ```
 0.1.51

package/docs/cli-mcp-parity.7.md

@@ -1,7 +1,7 @@
 # CLI ↔ MCP Parity
 
 CW v0.1.27 adds CLI ↔ MCP Parity. CW has two front doors. The CLI
-(`node scripts/cw.js ...`, `dist/cli.js`) is built for human speed: short,
+(`cw ...`, `dist/cli.js`) is built for human speed: short,
 easy-to-read text with exit codes that have clear sense. The MCP server
 (`cw_*` JSON-RPC tools) is built for machine context: full, fixed, ordered JSON.
 This release makes the two doors two views of one body of data — named, made from
@@ -82,7 +82,7 @@ relationship. `identical` means `cw <cmd> --json` is equal to the `cw_<tool>`
 payload; `projected` means a declared divergence with a reason; `cli-only` marks
 a surface-specific capability with a recorded reason. The matrix is
 <!-- gen:parity:count -->
-machine-complete by design: 239 capabilities, 197 MCP tools.
+machine-complete by design: 241 capabilities, 198 MCP tools.
 <!-- /gen:parity:count -->
 
 <!-- gen:parity:table -->
@@ -172,6 +172,7 @@ machine-complete by design: 239 capabilities, 197 MCP tools.
 | `coordinator.decision` | `cw coordinator decision` | `cw_coordinator_decision` | `coordinator.decision` | both | identical |
 | `audit.summary` | `cw audit summary` | `cw_audit_summary` | `audit.summary` | both | identical |
 | `audit.verify` | `cw audit verify` | `cw_audit_verify` | `audit.verify` | both | identical |
+| `audit.repair` | `cw audit repair` | `cw_audit_repair` | `audit.repair` | both | identical |
 | `audit.worker` | `cw audit worker` | `cw_audit_worker` | `audit.worker` | both | identical |
 | `audit.provenance` | `cw audit provenance` | `cw_audit_provenance` | `audit.provenance` | both | identical |
 | `audit.multi-agent` | `cw audit multi-agent` | `cw_audit_multi_agent` | `audit.multi-agent` | both | identical |
@@ -286,6 +287,7 @@ machine-complete by design: 239 capabilities, 197 MCP tools.
 | `history` | `cw history` | `cw_history` | `history` | both | identical |
 | `audit.head` | `cw audit head` | `cw_audit_head` | `audit.head` | both | identical |
 | `version` | `cw version` | `—` | `version` | cli-only | cli-only |
+| `completion` | `cw completion` | `—` | `completion` | cli-only | cli-only |
 | `search` | `cw search` | `—` | `search` | cli-only | cli-only |
 | `doctor` | `cw doctor` | `—` | `doctor` | cli-only | cli-only |
 | `fix` | `cw fix` | `—` | `fix` | cli-only | cli-only |
@@ -341,9 +343,10 @@ A capability may be on one surface only, but never without word of it — it mus
 carry a recorded reason in the registry.
 
 <!-- gen:parity:cliOnly -->
-42 capabilities are CLI-only:
+43 capabilities are CLI-only:
 
 - `version` — version is a local, no-run-state print; the old build never gave it an MCP peer.
+- `completion` — shell-completion output is a script for the user's OWN shell to source, not data an MCP client could use — CLI-only, same reasoning as doctor/fix.
 - `search` — CLI-only discovery helper over the same real app data cw list shows; no MCP client needs a free-text search tool alongside cw_list's structured output.
 - `doctor` — Environment diagnostics are inherently local to the CLI host — Node version, $PATH, $CW_HOME/cwd writability. An MCP client diagnosing the server process's environment is not meaningful; agents already receive the same readiness facts in their typed results (e.g. status: blocked, agentConfigured). Inspired by `brew doctor`.
 - `fix` — Environment fix commands are local diagnostics, same reasoning as doctor.
@@ -426,19 +429,22 @@ Parity is checked by `scripts/parity-check.js --check`, run by
 the registry, lists the live CLI commands and MCP tools, and fails closed on any
 of the rules above.
 
-The CLI dispatcher (`src/cli/command-surface.ts`) is being decomposed out of one
-large `switch` into per-command handler modules under `src/cli/handlers/`
-(`handle<Group>(args, runner)`), with `command-surface.ts` left as the thin
-router; shared helpers live in `src/cli/io.ts` (arg/JSON) and `src/cli/format.ts`
-(render). Carved so far: `workbench`, `clones`, `audit`, `worker`, `schedule`, `routine`,
-`sched`, `registry`, `queue`, `history`, `report`, `operator`, `graph`,
-`topology`, `summary`, `multi-agent`, `run`, `approve`, `reject`, `comment`,
-`handoff`, `review`, `blackboard`, `coordinator`, `eval`, `node`, `gc`,
-`telemetry`, `demo`, `feedback`, `metrics`, `migration`, `sandbox`, `backend`,
-`contract`, `candidate`. This is a pure code-move
-— the command surface is unchanged — and the parity scanner reads
-`dist/cli/handlers/*` so a subcommand `case` in a handler module still counts as a
-live CLI token.
+The CLI dispatch surface is table-driven, not a hand-kept `switch`. The source
+tree is small: `src/cli/entry.ts` (process entry), `src/cli/parseargv.ts`
+(argv reading), `src/cli/dispatch.ts` (the one dispatcher), and `src/cli/io.ts`
+(output helpers: `printJson`, `styledHelp`). `dispatch(args)` looks the parsed
+command up in the capability table (`src/core/capability-table.ts`, put
+together from the slices under `src/wiring/capability-table/`) and runs that
+row's `cli.handler` — a new capability is a new table row, never a new `case`.
+The shared arg helpers (`required`, `optionalArg`, `wantsJson`) live in
+`src/core/util/cli-args.ts`, a pure module used by the CLI and MCP sides of
+every wiring slice; they were moved out of `cli/io.ts` because the purity
+gate's layer rule says `wiring/` may not take imports from `cli/`. The parity
+scanner works the same way: `cliDispatchTokens()` gets the live token list
+straight from the registry's CLI capabilities (`cli.caseTokens` when a row
+names more than one first token, else `cli.path`), then makes sure each
+declared path resolves through the live dispatcher — there is no grep over
+built dispatch source.
 
 `test/cli-mcp-parity-smoke.js` proves the contract from end to end. It checks
 registry ⇄ CLI ⇄ MCP coverage (every declared capability is found on its declared
@@ -633,3 +639,7 @@ CLI golden-path fixes: `cw -q "…"` routes the question (was read as an app id
 0.2.1
 
 0.2.2
+
+0.2.3
+
+0.2.4

package/docs/contract-migration-tooling.7.md

@@ -179,3 +179,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.1
 
 0.2.2
+
+0.2.3
+
+0.2.4

package/docs/control-plane-scheduling.7.md

@@ -163,3 +163,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.1
 
 0.2.2
+
+0.2.3
+
+0.2.4

package/docs/coordinator-blackboard.7.md

@@ -119,18 +119,18 @@ required role memberships have no blackboard message or artifact refs.
 ## CLI
 
 ```bash
-node scripts/cw.js blackboard summary <run-id>
-node scripts/cw.js blackboard graph <run-id>
-node scripts/cw.js blackboard resolve <run-id> --id bb --title "Shared state"
-node scripts/cw.js blackboard topic create <run-id> --id topic --title "Synthesis"
-node scripts/cw.js blackboard message post <run-id> --topic topic --body "..."
-node scripts/cw.js blackboard message list <run-id> [--topic topic]
-node scripts/cw.js blackboard context put <run-id> --topic topic --kind fact --key k --value v
-node scripts/cw.js blackboard artifact add <run-id> --topic topic --path result.md --kind worker-result
-node scripts/cw.js blackboard artifact list <run-id>
-node scripts/cw.js blackboard snapshot <run-id>
-node scripts/cw.js coordinator summary <run-id>
-node scripts/cw.js coordinator decision <run-id> --kind conflict-resolution --outcome accepted --reason "..."
+cw blackboard summary <run-id>
+cw blackboard graph <run-id>
+cw blackboard resolve <run-id> --id bb --title "Shared state"
+cw blackboard topic create <run-id> --id topic --title "Synthesis"
+cw blackboard message post <run-id> --topic topic --body "..."
+cw blackboard message list <run-id> [--topic topic]
+cw blackboard context put <run-id> --topic topic --kind fact --key k --value v
+cw blackboard artifact add <run-id> --topic topic --path result.md --kind worker-result
+cw blackboard artifact list <run-id>
+cw blackboard snapshot <run-id>
+cw coordinator summary <run-id>
+cw coordinator decision <run-id> --kind conflict-resolution --outcome accepted --reason "..."
 ```
 
 The CLI gives JSON by default for focused blackboard and coordinator
@@ -167,11 +167,11 @@ suggested action.
 Use:
 
 ```bash
-node scripts/cw.js status <run-id>
-node scripts/cw.js graph <run-id>
-node scripts/cw.js report <run-id> --show
-node scripts/cw.js audit summary <run-id>
-node scripts/cw.js audit provenance <run-id>
+cw status <run-id>
+cw graph <run-id>
+cw report <run-id> --show
+cw audit summary <run-id>
+cw audit provenance <run-id>
 ```
 
 ## Migration