awrtifact 0.2.2__tar.gz → 0.2.3__tar.gz

{awrtifact-0.2.2 → awrtifact-0.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: awrtifact
-Version: 0.2.2
+Version: 0.2.3
 Summary: Aither World Artifact — deliberately chunk artifacts into GitHub release assets and fetch them back byte-verified. The productized aitherkvcache mirror lane.
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/Aitherium/awrtifact
@@ -20,7 +20,7 @@ Requires-Dist: awseal>=0.1; extra == "seal"
 
 **[Docs](https://aitherium.github.io/awrtifact/)**  ·  [Source](https://github.com/Aitherium/awrtifact)  ·  `pip install awrtifact`  ·  [The Aither World](https://aitherium.github.io/)
 
-> **The Aither World** is an operating system for agents — a Linux you can hand to one, the runtimes it works in, and the tools it works with. [awnix](https://github.com/Aitherium/awnix) is the Linux underneath it; **awrtifact** is one of its 46 bricks — each installs on its own, runs offline, and needs no account.
+> **The Aither World** is an operating system for agents — a Linux you can hand to one, the runtimes it works in, and the tools it works with. [awnix](https://github.com/Aitherium/awnix) is the Linux underneath it; **awrtifact** is one of its 65 bricks — each installs on its own, runs offline, and needs no account.
 >
 > **Start here:** Store one artifact as a versioned GitHub release and fetch it back byte-verified — `awrtifact mirror <URL|FILE> --release TAG`.
 
@@ -190,14 +190,17 @@ Each installs on its own, works offline, and needs no account.
 | [awskills](https://github.com/Aitherium/awskills) | that an agent knows your procedure | the procedure written down, versioned, and loadable by any agent |
 | [awpack](https://github.com/Aitherium/awpack) | that the pack you want shipped inside somebody's SDK, under whatever licence that SDK happens to carry | the pack as its own versioned artifact, with its own licence, that any agent runtime can install |
 | [awm](https://github.com/Aitherium/awm) | that memory stayed in its lane | tenant:user:project scopes, so a write cannot cross a boundary |
+| [awdesk](https://github.com/Aitherium/awdesk) | that the agent is somewhere behind a browser tab | a tray icon, a face on your desktop, and the decision card that pops when it needs you |
 | [awnode](https://github.com/Aitherium/awnode) | a vendor's cloud with every prompt | a local gateway routing to backends you chose |
 | [awgraph](https://github.com/Aitherium/awgraph) | that grep found everything | an AST + tree-sitter call graph an agent can traverse |
 | [awgit](https://github.com/Aitherium/awgit) | that no one else is editing this file | a lease, refused at commit time if you do not hold it |
 | [awdelphi](https://github.com/Aitherium/awdelphi) | one agent's confident take on a decision | the round trace, the anonymity, and who dissents |
+| [awclassify](https://github.com/Aitherium/awclassify) | a filename, a folder, or whoever last touched it | doc_type, visibility, audience and topics, with the evidence lines that decided each |
 | [awtoll](https://github.com/Aitherium/awtoll) | that your tooling is saving you context | the measured token cost of each tool call, and what the alternative cost |
 | [awseal](https://github.com/Aitherium/awseal) | that the artifact came from who you think | an Ed25519 seal — the key that verifies is not the key that forges |
 | [awshare](https://github.com/Aitherium/awshare) | that the download is intact | content-addressed bundles, verified on fetch |
 | [awnest](https://github.com/Aitherium/awnest) | that there is a person on the other end | a verdict with evidence, where "we could not tell" is not "yes" |
+| [awrena](https://github.com/Aitherium/awrena) | a leaderboard someone can edit, and votes nobody counted | a scored duel with both answers kept, and a result bound to them |
 | [awnboard](https://github.com/Aitherium/awnboard) | a share link anyone who sees it can use | an invitation addressed to one person, for one gate, revocable |
 | [awnix](https://github.com/Aitherium/awnix) | that the box is what you left it as | an immutable image you built, with atomic rollback |
 | [awrecover](https://github.com/Aitherium/awrecover) | that the restore worked | a restore that fully lands or does not land at all |
@@ -205,8 +208,14 @@ Each installs on its own, works offline, and needs no account.
 | [awrelay](https://github.com/Aitherium/awrelay) | a SaaS in the middle of your agents | findings, alerts and coordination over your own transport |
 | [awask](https://github.com/Aitherium/awask) | that anyone read the paragraph where you asked | the ask itself, with a button that steers the session that raised it |
 | [awmail](https://github.com/Aitherium/awmail) | a mailbox somebody else can read | mail your agents send and receive over your own server |
+| [awswarm](https://github.com/Aitherium/awswarm) | that a model either fits your GPU or it doesn't run at all | a placement plan and an acquisition-probability estimate before you spend on a run |
 | [awfind](https://github.com/Aitherium/awfind) | one vendor's idea of the web | results from whichever providers you configured |
 | [awbrowse](https://github.com/Aitherium/awbrowse) | that the page said what you were told | the render, the DOM and the requests it made |
+| [awvoice](https://github.com/Aitherium/awvoice) | that a cloud vendor may hold your audio | a transcript and a wav from a service you host |
+| [awvision](https://github.com/Aitherium/awvision) | a filename and a caption somebody wrote | what a model actually reports about the pixels |
+| [awscreen](https://github.com/Aitherium/awscreen) | a selector that was true when the page was written | the elements actually rendered, by what they look like |
+| [awbeads](https://github.com/Aitherium/awbeads) | that a layout your users built survives the next deploy | the arrangement as data you can read back, diff, and hand to another surface |
+| [awbonsai](https://github.com/Aitherium/awbonsai) | that inference always means a request left the machine | a WebGPU model answering on the tab's own GPU, with a consent record logged before it ever loaded |
 | [gawbbonet](https://github.com/Aitherium/gawbbonet) | the model to keep a 300-message campaign coherent by itself | campaign facts recalled from scoped memory you can list and edit |
 | [aitherkvcache](https://github.com/Aitherium/aitherkvcache) | a vendor's quantisation defaults | sub-byte KV cache kernels you can benchmark yourself |
 | **awrtifact** _(you are here)_ | a hand-rolled split script and a hand-edited worker manifest | byte-verified parts in a release, served with Range + CORS, sizes asserted by a live gate |
@@ -216,15 +225,21 @@ Each installs on its own, works offline, and needs no account.
 | [awrecurse](https://github.com/Aitherium/awrecurse) | that everything you pasted in was actually read | which slices it opened, and what it concluded from each |
 | [awprism](https://github.com/Aitherium/awprism) | the first explanation that fits | the ranked alternatives, and the observation that separates them |
 | [awrepl](https://github.com/Aitherium/awrepl) | what the agent believes the value is | the value, printed from the live session |
+| [awreport](https://github.com/Aitherium/awreport) | that the report you pasted carried no token in it | a redacted report, and the duplicate it merged into instead of filing twice |
 | [awresearch](https://github.com/Aitherium/awresearch) | a summary of pages nobody opened | every claim against the source it came from |
 | [awfocus](https://github.com/Aitherium/awfocus) | twelve terminal tabs and a bad memory | one command that names every session, finds any transcript, and opens or steers the one you want |
 | [awgym](https://github.com/Aitherium/awgym) | that a world model learned anything from the games it saw | transitions captured from real play, fed back, and the retrodiction score falling on grids it never saw |
 | [awpredict](https://github.com/Aitherium/awpredict) | a model because it trained without erroring | its prediction against a self-updating lookup, on the rows that are actually novel |
+| [awevolve](https://github.com/Aitherium/awevolve) | that your optimisation loop is finding anything | every version it kept, the score that version earned, and the edit that produced it |
 | [awsh](https://github.com/Aitherium/awsh) | that you already know the name of the command | what it decided your line meant, before it acts on it |
+| [awmine](https://github.com/Aitherium/awmine) | that a session's lesson survived the session | a row per outcome, a candidate per lesson, and the transcript line each one came from |
+| [awrise](https://github.com/Aitherium/awrise) | that a scheduled agent ran at all, and ran exactly once | a durable record of every wake -- fired, skipped, overlapped or timed out -- each with its reason |
 | [awkno](https://github.com/Aitherium/awkno) | that the docs site is up, or that you remember the family | the whole ecosystem in your terminal, with no network at all |
+| [awwall](https://github.com/Aitherium/awwall) | that a service only talks to the hosts you think it talks to | an explicit egress allowlist, where a denial names the rule that denied it |
 | [awembed](https://github.com/Aitherium/awembed) | a general-purpose embedder that has never seen your code | a held-out split of whole directories, scored teacher vs student vs int8 |
 | [awtax](https://github.com/Aitherium/awtax) | a closed tax app's sealed file you can never read again | a plain, provider-neutral schema of every figure, with the page it came from |
 | [awsettings](https://github.com/Aitherium/awsettings) | that you will remember to re-approve the same thing on every box you work from | one profile, unioned rather than overwritten, with the credentials left behind |
+| [awavatar](https://github.com/Aitherium/awavatar) | a cloud 3D vendor's opaque task id | a manifest with a sha256, a licence and a rig-audit verdict per file |
 
 [**awnix**](https://github.com/Aitherium/awnix) is the ground floor — A Linux you can hand to an agent — immutable base, capabilities included.
 
@@ -238,11 +253,13 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awskills](https://github.com/Aitherium/awskills) | Portable agent skills — self-contained procedures an agent loads on demand | [docs](https://aitherium.github.io/awskills/) |
 | [awpack](https://github.com/Aitherium/awpack) | First-party agent packs — the ones we build, versioned and installable on their own | [docs](https://aitherium.github.io/awpack/) |
 | [awm](https://github.com/Aitherium/awm) | A portable, scoped agent memory | [docs](https://aitherium.github.io/awm/) |
+| [awdesk](https://github.com/Aitherium/awdesk) | Aither World Desk -- the desktop body of AitherOS Online: tray, avatars, decision cards, the Living Desktop as an overlay | [docs](https://aitherium.github.io/awdesk/) |
 | [awnode](https://github.com/Aitherium/awnode) | A lightweight local gateway — bridges your apps to the AI backends you chose | [docs](https://aitherium.github.io/awnode/) |
 | [awrun](https://github.com/Aitherium/awrun) | A priority-aware queue and dispatcher for agentic runs and ad-hoc CI builds. It also judges whether the runner pool is big enough for the queue it is draining, and can ask a host to grow it -- reserving capacity is zero-sum, so a saturated pool needs more of it, not a different share of it | [docs](https://aitherium.github.io/awrun/) |
 | [awgraph](https://github.com/Aitherium/awgraph) | A semantic code graph for agents — AST + tree-sitter, call graphs | [docs](https://aitherium.github.io/awgraph/) |
 | [awgit](https://github.com/Aitherium/awgit) | Semantic version control on top of git — edit-ops and leases | [docs](https://aitherium.github.io/awgit/) |
 | [awdelphi](https://github.com/Aitherium/awdelphi) | Anonymous multi-round expert panels — a converged answer with a trace | [docs](https://aitherium.github.io/awdelphi/) |
+| [awclassify](https://github.com/Aitherium/awclassify) | Classify any document -- what it is, who may read it, who it is for, what it is about | — |
 | [awtoll](https://github.com/Aitherium/awtoll) | What every tool call costs you in context, measured from your own transcripts | [docs](https://aitherium.github.io/awtoll/) |
 | [awseal](https://github.com/Aitherium/awseal) | Sign an artifact so a stranger can verify it | [docs](https://aitherium.github.io/awseal/) |
 | [awshare](https://github.com/Aitherium/awshare) | Publish an artifact and fetch it back verified | [docs](https://aitherium.github.io/awshare/) |
@@ -251,6 +268,7 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awiam](https://github.com/Aitherium/awiam) | Who is this caller? A directory and session store that fails honestly | [docs](https://aitherium.github.io/awiam/) |
 | [awtunnel](https://github.com/Aitherium/awtunnel) | Reach a service that has no public address | [docs](https://aitherium.github.io/awtunnel/) |
 | [awnest](https://github.com/Aitherium/awnest) | Prove there is a human before you let them into the nest | [docs](https://aitherium.github.io/awnest/) |
+| [awrena](https://github.com/Aitherium/awrena) | Put two agents head to head and get a verdict you can check | [docs](https://aitherium.github.io/awrena/) |
 | [awnboard](https://github.com/Aitherium/awnboard) | A front gate you can put in front of anything, and hand someone the key to | [docs](https://aitherium.github.io/awnboard/) |
 | [awnix](https://github.com/Aitherium/awnix) | A Linux you can hand to an agent — immutable base, capabilities included | [docs](https://aitherium.github.io/awnix/) |
 | [awrecover](https://github.com/Aitherium/awrecover) | Labelled snapshots with an all-or-nothing restore | [docs](https://aitherium.github.io/awrecover/) |
@@ -259,9 +277,17 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awask](https://github.com/Aitherium/awask) | Your agent asks you a question — and acts on your answer | [docs](https://aitherium.github.io/awask/) |
 | [awmail](https://github.com/Aitherium/awmail) | Give an agent an email address — send, and actually receive | [docs](https://aitherium.github.io/awmail/) |
 | [awnet](https://github.com/Aitherium/awnet) | The agentic web — agents host a mesh, and agents join one | [docs](https://aitherium.github.io/awnet/) |
+| [awswarm](https://github.com/Aitherium/awswarm) | Run one model too big for any single GPU across a pool of small ones | — |
 | [awfind](https://github.com/Aitherium/awfind) | A portable search client — query, results, ranking | [docs](https://aitherium.github.io/awfind/) |
 | [awbrowse](https://github.com/Aitherium/awbrowse) | A portable browser client — navigate, console, network, DOM, screenshot | [docs](https://aitherium.github.io/awbrowse/) |
+| [awvoice](https://github.com/Aitherium/awvoice) | Hear and speak — transcribe audio, synthesize a voice | [docs](https://aitherium.github.io/awvoice/) |
+| [awvision](https://github.com/Aitherium/awvision) | See an image — describe it, ask it a question, compare two | [docs](https://aitherium.github.io/awvision/) |
+| [awscreen](https://github.com/Aitherium/awscreen) | See this machine — what is on screen, and where to click it | [docs](https://aitherium.github.io/awscreen/) |
+| [awkit](https://github.com/Aitherium/awkit) | Render an agent panel from a tool result — one component, any React app | — |
+| [awbeads](https://github.com/Aitherium/awbeads) | A spatial canvas for a page — arrange things, connect them, and keep the arrangement | — |
+| [awbonsai](https://github.com/Aitherium/awbonsai) | Run a real model in the visitor's own browser — no server round trip, no upload | — |
 | [awknowledge](https://github.com/Aitherium/awknowledge) | How to run a coding agent so the result survives — the laws, with evidence | [docs](https://aitherium.github.io/awknowledge/) |
+| [awbrain](https://github.com/Aitherium/awbrain) | Your history as a wiki of linked markdown — claims pinned to the evidence | — |
 | [gawbbonet](https://github.com/Aitherium/gawbbonet) | GobboNet campaigns with a real agent brain — scoped memory, graph recall | [docs](https://aitherium.github.io/gawbbonet/) |
 | [aitherkvcache](https://github.com/Aitherium/aitherkvcache) | Near-optimal KV cache quantization for LLM inference — sub-byte compression | [docs](https://aitherium.github.io/aitherkvcache/) |
 | **awrtifact** _(you are here)_ | Deliberately chunk artifacts into GitHub release assets — the productized aitherkvcache mirror lane | [docs](https://aitherium.github.io/awrtifact/) |
@@ -271,15 +297,23 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awrecurse](https://github.com/Aitherium/awrecurse) | Answer a question over a context far larger than the window — recursively, with the trace kept | [docs](https://aitherium.github.io/awrecurse/) |
 | [awprism](https://github.com/Aitherium/awprism) | Turn a failure into ranked hypotheses — and say what would confirm each one | [docs](https://aitherium.github.io/awprism/) |
 | [awrepl](https://github.com/Aitherium/awrepl) | A REPL an agent can actually use — state that survives between turns | [docs](https://aitherium.github.io/awrepl/) |
+| [awreport](https://github.com/Aitherium/awreport) | File a bug report that has already scrubbed your secrets and collapsed the duplicate | — |
 | [awresearch](https://github.com/Aitherium/awresearch) | Ask a research question, get a cited report you can check | [docs](https://aitherium.github.io/awresearch/) |
 | [awfocus](https://github.com/Aitherium/awfocus) | See, search and steer every Claude session from one command | [docs](https://aitherium.github.io/awfocus/) |
 | [awgym](https://github.com/Aitherium/awgym) | An ARC training gym — a game a world model can watch, and six roles that play through it | [docs](https://aitherium.github.io/awgym/) |
 | [awpredict](https://github.com/Aitherium/awpredict) | Predict what your environment does next, and how surprised you were | [docs](https://aitherium.github.io/awpredict/) |
+| [awevolve](https://github.com/Aitherium/awevolve) | Point an agent at a file and a command that scores it, and let it improve | — |
 | [awsh](https://github.com/Aitherium/awsh) | Your terminal answers you -- type a question where a command would go | [docs](https://aitherium.github.io/awsh/) |
+| [awmine](https://github.com/Aitherium/awmine) | Mine what your agents did -- outcomes, lessons and procedures out of the transcripts they left behind | — |
+| [awrise](https://github.com/Aitherium/awrise) | Wake an agent on a schedule, let it do one thing, and put it back to sleep | [docs](https://aitherium.github.io/awrise/) |
 | [awkno](https://github.com/Aitherium/awkno) | The man page for the Aither World — every brick, stack and law, offline | [docs](https://aitherium.github.io/awkno/) |
+| [awwall](https://github.com/Aitherium/awwall) | Say what a workload may reach, and watch everything else fail closed | [docs](https://aitherium.github.io/awwall/) |
+| [awrouter](https://github.com/Aitherium/awrouter) | OpenRouter for your own fleet: pick a model backend by cost/latency/ capability, fail over, fit the context window, stream. Standalone, OpenAI-compatible, no Aither-specifics required to be valuable | — |
 | [awembed](https://github.com/Aitherium/awembed) | Train an embedding model that knows your corpus, and prove it beats the big one | [docs](https://aitherium.github.io/awembed/) |
 | [awtax](https://github.com/Aitherium/awtax) | Turn any tax PDF -- returns, W-2, 1099, statements, even scans -- into structured data you can check | [docs](https://aitherium.github.io/awtax/) |
+| [awflow](https://github.com/Aitherium/awflow) | A deterministic workflow runtime — chain agent calls with journal replay and budget control | [docs](https://aitherium.github.io/awflow/) |
 | [awsettings](https://github.com/Aitherium/awsettings) | Your agent's permissions and config, following you to the next machine | [docs](https://aitherium.github.io/awsettings/) |
+| [awavatar](https://github.com/Aitherium/awavatar) | One character spec in, a rigged, animated, multi-style avatar pack out | [docs](https://aitherium.github.io/awavatar/) |
 
 <div id="aither-constellation" data-self="awrtifact"></div>
 <script src="aither-constellation.js"></script>

{awrtifact-0.2.2 → awrtifact-0.2.3}/README.md

@@ -4,7 +4,7 @@
 
 **[Docs](https://aitherium.github.io/awrtifact/)**  ·  [Source](https://github.com/Aitherium/awrtifact)  ·  `pip install awrtifact`  ·  [The Aither World](https://aitherium.github.io/)
 
-> **The Aither World** is an operating system for agents — a Linux you can hand to one, the runtimes it works in, and the tools it works with. [awnix](https://github.com/Aitherium/awnix) is the Linux underneath it; **awrtifact** is one of its 46 bricks — each installs on its own, runs offline, and needs no account.
+> **The Aither World** is an operating system for agents — a Linux you can hand to one, the runtimes it works in, and the tools it works with. [awnix](https://github.com/Aitherium/awnix) is the Linux underneath it; **awrtifact** is one of its 65 bricks — each installs on its own, runs offline, and needs no account.
 >
 > **Start here:** Store one artifact as a versioned GitHub release and fetch it back byte-verified — `awrtifact mirror <URL|FILE> --release TAG`.
 
@@ -174,14 +174,17 @@ Each installs on its own, works offline, and needs no account.
 | [awskills](https://github.com/Aitherium/awskills) | that an agent knows your procedure | the procedure written down, versioned, and loadable by any agent |
 | [awpack](https://github.com/Aitherium/awpack) | that the pack you want shipped inside somebody's SDK, under whatever licence that SDK happens to carry | the pack as its own versioned artifact, with its own licence, that any agent runtime can install |
 | [awm](https://github.com/Aitherium/awm) | that memory stayed in its lane | tenant:user:project scopes, so a write cannot cross a boundary |
+| [awdesk](https://github.com/Aitherium/awdesk) | that the agent is somewhere behind a browser tab | a tray icon, a face on your desktop, and the decision card that pops when it needs you |
 | [awnode](https://github.com/Aitherium/awnode) | a vendor's cloud with every prompt | a local gateway routing to backends you chose |
 | [awgraph](https://github.com/Aitherium/awgraph) | that grep found everything | an AST + tree-sitter call graph an agent can traverse |
 | [awgit](https://github.com/Aitherium/awgit) | that no one else is editing this file | a lease, refused at commit time if you do not hold it |
 | [awdelphi](https://github.com/Aitherium/awdelphi) | one agent's confident take on a decision | the round trace, the anonymity, and who dissents |
+| [awclassify](https://github.com/Aitherium/awclassify) | a filename, a folder, or whoever last touched it | doc_type, visibility, audience and topics, with the evidence lines that decided each |
 | [awtoll](https://github.com/Aitherium/awtoll) | that your tooling is saving you context | the measured token cost of each tool call, and what the alternative cost |
 | [awseal](https://github.com/Aitherium/awseal) | that the artifact came from who you think | an Ed25519 seal — the key that verifies is not the key that forges |
 | [awshare](https://github.com/Aitherium/awshare) | that the download is intact | content-addressed bundles, verified on fetch |
 | [awnest](https://github.com/Aitherium/awnest) | that there is a person on the other end | a verdict with evidence, where "we could not tell" is not "yes" |
+| [awrena](https://github.com/Aitherium/awrena) | a leaderboard someone can edit, and votes nobody counted | a scored duel with both answers kept, and a result bound to them |
 | [awnboard](https://github.com/Aitherium/awnboard) | a share link anyone who sees it can use | an invitation addressed to one person, for one gate, revocable |
 | [awnix](https://github.com/Aitherium/awnix) | that the box is what you left it as | an immutable image you built, with atomic rollback |
 | [awrecover](https://github.com/Aitherium/awrecover) | that the restore worked | a restore that fully lands or does not land at all |
@@ -189,8 +192,14 @@ Each installs on its own, works offline, and needs no account.
 | [awrelay](https://github.com/Aitherium/awrelay) | a SaaS in the middle of your agents | findings, alerts and coordination over your own transport |
 | [awask](https://github.com/Aitherium/awask) | that anyone read the paragraph where you asked | the ask itself, with a button that steers the session that raised it |
 | [awmail](https://github.com/Aitherium/awmail) | a mailbox somebody else can read | mail your agents send and receive over your own server |
+| [awswarm](https://github.com/Aitherium/awswarm) | that a model either fits your GPU or it doesn't run at all | a placement plan and an acquisition-probability estimate before you spend on a run |
 | [awfind](https://github.com/Aitherium/awfind) | one vendor's idea of the web | results from whichever providers you configured |
 | [awbrowse](https://github.com/Aitherium/awbrowse) | that the page said what you were told | the render, the DOM and the requests it made |
+| [awvoice](https://github.com/Aitherium/awvoice) | that a cloud vendor may hold your audio | a transcript and a wav from a service you host |
+| [awvision](https://github.com/Aitherium/awvision) | a filename and a caption somebody wrote | what a model actually reports about the pixels |
+| [awscreen](https://github.com/Aitherium/awscreen) | a selector that was true when the page was written | the elements actually rendered, by what they look like |
+| [awbeads](https://github.com/Aitherium/awbeads) | that a layout your users built survives the next deploy | the arrangement as data you can read back, diff, and hand to another surface |
+| [awbonsai](https://github.com/Aitherium/awbonsai) | that inference always means a request left the machine | a WebGPU model answering on the tab's own GPU, with a consent record logged before it ever loaded |
 | [gawbbonet](https://github.com/Aitherium/gawbbonet) | the model to keep a 300-message campaign coherent by itself | campaign facts recalled from scoped memory you can list and edit |
 | [aitherkvcache](https://github.com/Aitherium/aitherkvcache) | a vendor's quantisation defaults | sub-byte KV cache kernels you can benchmark yourself |
 | **awrtifact** _(you are here)_ | a hand-rolled split script and a hand-edited worker manifest | byte-verified parts in a release, served with Range + CORS, sizes asserted by a live gate |
@@ -200,15 +209,21 @@ Each installs on its own, works offline, and needs no account.
 | [awrecurse](https://github.com/Aitherium/awrecurse) | that everything you pasted in was actually read | which slices it opened, and what it concluded from each |
 | [awprism](https://github.com/Aitherium/awprism) | the first explanation that fits | the ranked alternatives, and the observation that separates them |
 | [awrepl](https://github.com/Aitherium/awrepl) | what the agent believes the value is | the value, printed from the live session |
+| [awreport](https://github.com/Aitherium/awreport) | that the report you pasted carried no token in it | a redacted report, and the duplicate it merged into instead of filing twice |
 | [awresearch](https://github.com/Aitherium/awresearch) | a summary of pages nobody opened | every claim against the source it came from |
 | [awfocus](https://github.com/Aitherium/awfocus) | twelve terminal tabs and a bad memory | one command that names every session, finds any transcript, and opens or steers the one you want |
 | [awgym](https://github.com/Aitherium/awgym) | that a world model learned anything from the games it saw | transitions captured from real play, fed back, and the retrodiction score falling on grids it never saw |
 | [awpredict](https://github.com/Aitherium/awpredict) | a model because it trained without erroring | its prediction against a self-updating lookup, on the rows that are actually novel |
+| [awevolve](https://github.com/Aitherium/awevolve) | that your optimisation loop is finding anything | every version it kept, the score that version earned, and the edit that produced it |
 | [awsh](https://github.com/Aitherium/awsh) | that you already know the name of the command | what it decided your line meant, before it acts on it |
+| [awmine](https://github.com/Aitherium/awmine) | that a session's lesson survived the session | a row per outcome, a candidate per lesson, and the transcript line each one came from |
+| [awrise](https://github.com/Aitherium/awrise) | that a scheduled agent ran at all, and ran exactly once | a durable record of every wake -- fired, skipped, overlapped or timed out -- each with its reason |
 | [awkno](https://github.com/Aitherium/awkno) | that the docs site is up, or that you remember the family | the whole ecosystem in your terminal, with no network at all |
+| [awwall](https://github.com/Aitherium/awwall) | that a service only talks to the hosts you think it talks to | an explicit egress allowlist, where a denial names the rule that denied it |
 | [awembed](https://github.com/Aitherium/awembed) | a general-purpose embedder that has never seen your code | a held-out split of whole directories, scored teacher vs student vs int8 |
 | [awtax](https://github.com/Aitherium/awtax) | a closed tax app's sealed file you can never read again | a plain, provider-neutral schema of every figure, with the page it came from |
 | [awsettings](https://github.com/Aitherium/awsettings) | that you will remember to re-approve the same thing on every box you work from | one profile, unioned rather than overwritten, with the credentials left behind |
+| [awavatar](https://github.com/Aitherium/awavatar) | a cloud 3D vendor's opaque task id | a manifest with a sha256, a licence and a rig-audit verdict per file |
 
 [**awnix**](https://github.com/Aitherium/awnix) is the ground floor — A Linux you can hand to an agent — immutable base, capabilities included.
 
@@ -222,11 +237,13 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awskills](https://github.com/Aitherium/awskills) | Portable agent skills — self-contained procedures an agent loads on demand | [docs](https://aitherium.github.io/awskills/) |
 | [awpack](https://github.com/Aitherium/awpack) | First-party agent packs — the ones we build, versioned and installable on their own | [docs](https://aitherium.github.io/awpack/) |
 | [awm](https://github.com/Aitherium/awm) | A portable, scoped agent memory | [docs](https://aitherium.github.io/awm/) |
+| [awdesk](https://github.com/Aitherium/awdesk) | Aither World Desk -- the desktop body of AitherOS Online: tray, avatars, decision cards, the Living Desktop as an overlay | [docs](https://aitherium.github.io/awdesk/) |
 | [awnode](https://github.com/Aitherium/awnode) | A lightweight local gateway — bridges your apps to the AI backends you chose | [docs](https://aitherium.github.io/awnode/) |
 | [awrun](https://github.com/Aitherium/awrun) | A priority-aware queue and dispatcher for agentic runs and ad-hoc CI builds. It also judges whether the runner pool is big enough for the queue it is draining, and can ask a host to grow it -- reserving capacity is zero-sum, so a saturated pool needs more of it, not a different share of it | [docs](https://aitherium.github.io/awrun/) |
 | [awgraph](https://github.com/Aitherium/awgraph) | A semantic code graph for agents — AST + tree-sitter, call graphs | [docs](https://aitherium.github.io/awgraph/) |
 | [awgit](https://github.com/Aitherium/awgit) | Semantic version control on top of git — edit-ops and leases | [docs](https://aitherium.github.io/awgit/) |
 | [awdelphi](https://github.com/Aitherium/awdelphi) | Anonymous multi-round expert panels — a converged answer with a trace | [docs](https://aitherium.github.io/awdelphi/) |
+| [awclassify](https://github.com/Aitherium/awclassify) | Classify any document -- what it is, who may read it, who it is for, what it is about | — |
 | [awtoll](https://github.com/Aitherium/awtoll) | What every tool call costs you in context, measured from your own transcripts | [docs](https://aitherium.github.io/awtoll/) |
 | [awseal](https://github.com/Aitherium/awseal) | Sign an artifact so a stranger can verify it | [docs](https://aitherium.github.io/awseal/) |
 | [awshare](https://github.com/Aitherium/awshare) | Publish an artifact and fetch it back verified | [docs](https://aitherium.github.io/awshare/) |
@@ -235,6 +252,7 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awiam](https://github.com/Aitherium/awiam) | Who is this caller? A directory and session store that fails honestly | [docs](https://aitherium.github.io/awiam/) |
 | [awtunnel](https://github.com/Aitherium/awtunnel) | Reach a service that has no public address | [docs](https://aitherium.github.io/awtunnel/) |
 | [awnest](https://github.com/Aitherium/awnest) | Prove there is a human before you let them into the nest | [docs](https://aitherium.github.io/awnest/) |
+| [awrena](https://github.com/Aitherium/awrena) | Put two agents head to head and get a verdict you can check | [docs](https://aitherium.github.io/awrena/) |
 | [awnboard](https://github.com/Aitherium/awnboard) | A front gate you can put in front of anything, and hand someone the key to | [docs](https://aitherium.github.io/awnboard/) |
 | [awnix](https://github.com/Aitherium/awnix) | A Linux you can hand to an agent — immutable base, capabilities included | [docs](https://aitherium.github.io/awnix/) |
 | [awrecover](https://github.com/Aitherium/awrecover) | Labelled snapshots with an all-or-nothing restore | [docs](https://aitherium.github.io/awrecover/) |
@@ -243,9 +261,17 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awask](https://github.com/Aitherium/awask) | Your agent asks you a question — and acts on your answer | [docs](https://aitherium.github.io/awask/) |
 | [awmail](https://github.com/Aitherium/awmail) | Give an agent an email address — send, and actually receive | [docs](https://aitherium.github.io/awmail/) |
 | [awnet](https://github.com/Aitherium/awnet) | The agentic web — agents host a mesh, and agents join one | [docs](https://aitherium.github.io/awnet/) |
+| [awswarm](https://github.com/Aitherium/awswarm) | Run one model too big for any single GPU across a pool of small ones | — |
 | [awfind](https://github.com/Aitherium/awfind) | A portable search client — query, results, ranking | [docs](https://aitherium.github.io/awfind/) |
 | [awbrowse](https://github.com/Aitherium/awbrowse) | A portable browser client — navigate, console, network, DOM, screenshot | [docs](https://aitherium.github.io/awbrowse/) |
+| [awvoice](https://github.com/Aitherium/awvoice) | Hear and speak — transcribe audio, synthesize a voice | [docs](https://aitherium.github.io/awvoice/) |
+| [awvision](https://github.com/Aitherium/awvision) | See an image — describe it, ask it a question, compare two | [docs](https://aitherium.github.io/awvision/) |
+| [awscreen](https://github.com/Aitherium/awscreen) | See this machine — what is on screen, and where to click it | [docs](https://aitherium.github.io/awscreen/) |
+| [awkit](https://github.com/Aitherium/awkit) | Render an agent panel from a tool result — one component, any React app | — |
+| [awbeads](https://github.com/Aitherium/awbeads) | A spatial canvas for a page — arrange things, connect them, and keep the arrangement | — |
+| [awbonsai](https://github.com/Aitherium/awbonsai) | Run a real model in the visitor's own browser — no server round trip, no upload | — |
 | [awknowledge](https://github.com/Aitherium/awknowledge) | How to run a coding agent so the result survives — the laws, with evidence | [docs](https://aitherium.github.io/awknowledge/) |
+| [awbrain](https://github.com/Aitherium/awbrain) | Your history as a wiki of linked markdown — claims pinned to the evidence | — |
 | [gawbbonet](https://github.com/Aitherium/gawbbonet) | GobboNet campaigns with a real agent brain — scoped memory, graph recall | [docs](https://aitherium.github.io/gawbbonet/) |
 | [aitherkvcache](https://github.com/Aitherium/aitherkvcache) | Near-optimal KV cache quantization for LLM inference — sub-byte compression | [docs](https://aitherium.github.io/aitherkvcache/) |
 | **awrtifact** _(you are here)_ | Deliberately chunk artifacts into GitHub release assets — the productized aitherkvcache mirror lane | [docs](https://aitherium.github.io/awrtifact/) |
@@ -255,15 +281,23 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awrecurse](https://github.com/Aitherium/awrecurse) | Answer a question over a context far larger than the window — recursively, with the trace kept | [docs](https://aitherium.github.io/awrecurse/) |
 | [awprism](https://github.com/Aitherium/awprism) | Turn a failure into ranked hypotheses — and say what would confirm each one | [docs](https://aitherium.github.io/awprism/) |
 | [awrepl](https://github.com/Aitherium/awrepl) | A REPL an agent can actually use — state that survives between turns | [docs](https://aitherium.github.io/awrepl/) |
+| [awreport](https://github.com/Aitherium/awreport) | File a bug report that has already scrubbed your secrets and collapsed the duplicate | — |
 | [awresearch](https://github.com/Aitherium/awresearch) | Ask a research question, get a cited report you can check | [docs](https://aitherium.github.io/awresearch/) |
 | [awfocus](https://github.com/Aitherium/awfocus) | See, search and steer every Claude session from one command | [docs](https://aitherium.github.io/awfocus/) |
 | [awgym](https://github.com/Aitherium/awgym) | An ARC training gym — a game a world model can watch, and six roles that play through it | [docs](https://aitherium.github.io/awgym/) |
 | [awpredict](https://github.com/Aitherium/awpredict) | Predict what your environment does next, and how surprised you were | [docs](https://aitherium.github.io/awpredict/) |
+| [awevolve](https://github.com/Aitherium/awevolve) | Point an agent at a file and a command that scores it, and let it improve | — |
 | [awsh](https://github.com/Aitherium/awsh) | Your terminal answers you -- type a question where a command would go | [docs](https://aitherium.github.io/awsh/) |
+| [awmine](https://github.com/Aitherium/awmine) | Mine what your agents did -- outcomes, lessons and procedures out of the transcripts they left behind | — |
+| [awrise](https://github.com/Aitherium/awrise) | Wake an agent on a schedule, let it do one thing, and put it back to sleep | [docs](https://aitherium.github.io/awrise/) |
 | [awkno](https://github.com/Aitherium/awkno) | The man page for the Aither World — every brick, stack and law, offline | [docs](https://aitherium.github.io/awkno/) |
+| [awwall](https://github.com/Aitherium/awwall) | Say what a workload may reach, and watch everything else fail closed | [docs](https://aitherium.github.io/awwall/) |
+| [awrouter](https://github.com/Aitherium/awrouter) | OpenRouter for your own fleet: pick a model backend by cost/latency/ capability, fail over, fit the context window, stream. Standalone, OpenAI-compatible, no Aither-specifics required to be valuable | — |
 | [awembed](https://github.com/Aitherium/awembed) | Train an embedding model that knows your corpus, and prove it beats the big one | [docs](https://aitherium.github.io/awembed/) |
 | [awtax](https://github.com/Aitherium/awtax) | Turn any tax PDF -- returns, W-2, 1099, statements, even scans -- into structured data you can check | [docs](https://aitherium.github.io/awtax/) |
+| [awflow](https://github.com/Aitherium/awflow) | A deterministic workflow runtime — chain agent calls with journal replay and budget control | [docs](https://aitherium.github.io/awflow/) |
 | [awsettings](https://github.com/Aitherium/awsettings) | Your agent's permissions and config, following you to the next machine | [docs](https://aitherium.github.io/awsettings/) |
+| [awavatar](https://github.com/Aitherium/awavatar) | One character spec in, a rigged, animated, multi-style avatar pack out | [docs](https://aitherium.github.io/awavatar/) |
 
 <div id="aither-constellation" data-self="awrtifact"></div>
 <script src="aither-constellation.js"></script>

{awrtifact-0.2.2 → awrtifact-0.2.3}/awrtifact/__init__.py

@@ -9,4 +9,4 @@ fetched back byte-verified.
 The core is stdlib-only; the spec-shaped commands need PyYAML (extra: `spec`).
 """
 
-__version__ = "0.2.2"
+__version__ = "0.2.3"

{awrtifact-0.2.2 → awrtifact-0.2.3}/awrtifact/_doctor.py

@@ -19,12 +19,12 @@ import os
 import shutil
 import sys
 
-#: Frozen from AitherOS/config/ecosystem.yaml at generation time. A shipped
+#: Frozen from the Aither World registry at generation time. A shipped
 #: package cannot read the registry, and a doctor that guessed at the family
 #: would go stale in silence. Regenerate to update.
 SELF = 'awrtifact'
-FAMILY = ['awask', 'awbac', 'awbrain', 'awbrowse', 'awclassify', 'awdelphi', 'awdit', 'awevolve', 'awfind', 'awfocus', 'awgit', 'awgraph', 'awgym', 'awiam', 'awkno', 'awm', 'awmail', 'awnboard', 'awnest', 'awnet', 'awnode', 'awpool', 'awpredict', 'awprism', 'awreason', 'awrecover', 'awrecurse', 'awrelay', 'awrena', 'awrepl', 'awresearch', 'awrise', 'awrouter', 'awrun', 'awscreen', 'awseal', 'awshare', 'awsprite', 'awswarm', 'awtoll', 'awtunnel', 'awvision', 'awvoice', 'awwall']
-PAIRS_WITH = ['adk', 'awgit', 'awnode', 'awrecover', 'awseal', 'awshare']
+FAMILY = ['awask', 'awavatar', 'awbac', 'awbrain', 'awbrowse', 'awclassify', 'awdecide', 'awdeck', 'awdelphi', 'awdit', 'awembed', 'awevolve', 'awfind', 'awflow', 'awfocus', 'awgit', 'awgraph', 'awgym', 'awiam', 'awkno', 'awm', 'awmail', 'awmine', 'awnboard', 'awnest', 'awnet', 'awnode', 'awpool', 'awpredict', 'awprism', 'awprove', 'awreason', 'awrecover', 'awrecurse', 'awrelay', 'awrena', 'awrepl', 'awreport', 'awresearch', 'awrise', 'awrouter', 'awrun', 'awscreen', 'awseal', 'awsettings', 'awshare', 'awsprite', 'awstorage', 'awswarm', 'awtax', 'awtoll', 'awtunnel', 'awvision', 'awvoice', 'awwall', 'gawbbonet']
+PAIRS_WITH = ['adk', 'awgit', 'awnode', 'awrecover', 'awseal', 'awshare', 'awstorage']
 
 #: This brick's OWN config, read out of its source at generation time.
 #: ENV_REQUIRED is `os.environ["X"]` -- absent, that is a KeyError the moment
@@ -33,7 +33,7 @@ PAIRS_WITH = ['adk', 'awgit', 'awnode', 'awrecover', 'awseal', 'awshare']
 #: platform-wide vars it also touches would be noise, and a doctor that floods
 #: gets ignored.
 ENV_REQUIRED = []
-ENV_OPTIONAL = []
+ENV_OPTIONAL = ['AWRTIFACT_GH_BACKEND']
 
 
 def _installed(mod: str) -> "str | None":
@@ -91,6 +91,7 @@ def report(out=None) -> int:
     local = _local_checks()
     for line in local:
         print(f"  {line}", file=out)
+    problems, unjudged = _local_verdict()
 
     if mine is None:
         print(f"\nverdict: {SELF} itself is not importable. Reinstall it before "
@@ -102,6 +103,17 @@ def report(out=None) -> int:
               f"so the code path that needs them raises rather than degrades.",
               file=out)
         return 1
+    # A measured NO outranks a missing optional pair: awrise printed
+    # "nothing wakes run-due" and still exited 0 because the missing-pairs
+    # branch returned first (measured 2026-09-20).
+    if problems:
+        for p in problems:
+            print(f"\nverdict: {p}", file=out)
+        return 1
+    if unjudged:
+        for u in unjudged:
+            print(f"\nverdict: UNJUDGED -- could not judge: {u}", file=out)
+        return 2
     if missing_pairs:
         print(f"\nverdict: {SELF} works, but pairs with "
               f"{', '.join(sorted(missing_pairs))} which "
@@ -112,6 +124,23 @@ def report(out=None) -> int:
     return 0
 
 
+def _local_verdict() -> tuple:
+    """The brick's OWN verdict, folded into the exit code.
+
+    Without this the local lines are DECORATION. Measured 2026-09-20: awrise
+    printed "hostclock NOT INSTALLED -- nothing wakes run-due" and "last tick
+    never", then exited 0 -- teaching an operator that a doctor exit code
+    carries no information. A brick opts in with `_doctor_local_verdict()`
+    returning (problems, unjudged); a brick without one is unaffected.
+    """
+    try:
+        mod = importlib.import_module(f"{SELF}.doctor_local")
+        problems, unjudged = mod._doctor_local_verdict()
+    except Exception:                              # noqa: BLE001
+        return [], []
+    return list(problems or []), list(unjudged or [])
+
+
 def _local_checks() -> "list[str]":
     """Per-brick checks, if this package defines them.
 

{awrtifact-0.2.2 → awrtifact-0.2.3}/awrtifact/ghapi.py

@@ -1,9 +1,9 @@
 """GitHub REST backend — the same operations `gh.py` shells, over urllib.
 
-Why a second backend exists: the fleet's control plane (the Genesis router,
-`aither-worker`) runs in containers that carry no `gh` binary, and the
-"mirror anything from Hugging Face to any GitHub repo" story has to work
-from there — an MCP tool that can only run on the operator's laptop is not a
+Why a second backend exists: server-side callers (routers, background
+workers) run in containers that carry no `gh` binary, and the "mirror
+anything from Hugging Face to any GitHub repo" story has to work from
+there — a tool that can only run on the operator's laptop is not a
 platform capability. Everything here is keyed on ONE token
 (`GH_TOKEN`, then `GITHUB_TOKEN`, or an explicit `token_override` for a
 server process that must never write into `os.environ`).

{awrtifact-0.2.2 → awrtifact-0.2.3}/awrtifact/serve_spec.py

@@ -31,6 +31,17 @@ def render(spec: dict, spec_path: Path, worker: dict | None = None) -> tuple[str
     """Render (index.js, wrangler.toml) for one worker of a validated spec."""
     worker = worker or spec_mod.workers(spec)[0]
     chunked = spec_mod.chunked_map(spec)
+    share_url = worker.get("share_grant_url")
+    if share_url:
+        if not isinstance(share_url, str) or not share_url.startswith("https://"):
+            raise ValueError(f"worker {worker['name']}: share_grant_url must be an https URL")
+        share_js = worker_template.SHARE_ROUTE_JS.replace(
+            "__SHARE_GRANT_URL_JSON__", json.dumps(share_url))
+        share_dispatch = worker_template.SHARE_ROUTE_DISPATCH
+    else:
+        # Absent = the worker renders exactly as it did before the share route
+        # existed, so the template change alone redeploys nothing.
+        share_js = share_dispatch = ""
     header = (
         "GENERATED by `awrtifact serve-spec` from the awrtifact spec — DO NOT "
         "EDIT BY HAND.\n"
@@ -44,6 +55,8 @@ def render(spec: dict, spec_path: Path, worker: dict | None = None) -> tuple[str
         .replace("__ALLOWED_SRC__", spec.get("allowlist", {}).get("regex", ""))
         .replace("__WHOLE_JSON__", json.dumps(spec_mod.whole_names(spec)))
         .replace("__CHUNKED_JSON__", json.dumps(chunked, indent=2))
+        .replace("__SHARE_ROUTE_JS__", share_js)
+        .replace("__SHARE_ROUTE_DISPATCH__", share_dispatch)
         .replace("__R2_BINDING__", worker.get("r2_binding", "WEIGHTS"))
     )
 

{awrtifact-0.2.2 → awrtifact-0.2.3}/awrtifact/spec.py

@@ -39,10 +39,16 @@ Shape:
         release: bonsai-image-v1         # release tag to serve from
         part_size: 1900000000            # optional; default 1.9 GiB
         parts: []                        # optional explicit sizes; else derived
+        part_names: []                   # optional asset names for `parts` (else .partN)
+        repo: Aitherium/awnix            # optional; else store.repo
 
 An artifact whose total exceeds GitHub's 2 GiB cap is CHUNKED (parts derived
 uniformly: N full slices + one tail). An artifact at or under the cap is
 served WHOLE unless explicit `parts` are given.
+
+`repo` lets one store serve releases from another repo (the awnix ISOs live in
+Aitherium/awnix, not the weights repo), and `part_names` serves a file that some
+OTHER tool split -- awnix's ISO lane names its slices `<iso>.00.part`, not `.partN`.
 """
 
 from __future__ import annotations
@@ -133,6 +139,15 @@ def validate(spec: dict) -> dict:
                 )
             if any(p > GITHUB_ASSET_CAP for p in parts):
                 raise ValueError(f"artifact {name}: a part exceeds the 2 GiB cap")
+            pnames = art.get("part_names") or []
+            if pnames and (len(pnames) != len(parts) or len(set(pnames)) != len(pnames)
+                           or any("/" in n or "\\" in n for n in pnames)):
+                raise ValueError(f"artifact {name}: part_names must be {len(parts)} "
+                                 f"distinct bare filenames, one per part")
+        elif art.get("part_names"):
+            raise ValueError(f"artifact {name}: part_names needs explicit parts sizes")
+        if "repo" in art and (not isinstance(art["repo"], str) or art["repo"].count("/") != 1):
+            raise ValueError(f"artifact {name}: repo must be 'owner/repo'")
         else:
             part_size = art.get("part_size") or DEFAULT_PART_SIZE
             if part_size > GITHUB_ASSET_CAP:
@@ -150,6 +165,11 @@ def artifact_release(spec: dict, art: dict) -> str:
     raise ValueError(f"artifact {art.get('name')}: no release and no upstreams")
 
 
+def artifact_repo(spec: dict, art: dict) -> str:
+    """The owner/repo an artifact's release lives in (artifact wins, else the store)."""
+    return art.get("repo") or spec["store"]["repo"]
+
+
 def upstream_bases(spec: dict) -> list[str]:
     """ALLOWED-lane base URLs, tried in order: distinct release downloads."""
     repo = spec["store"]["repo"]
@@ -160,7 +180,7 @@ def upstream_bases(spec: dict) -> list[str]:
             bases.append(base)
     for art in spec.get("artifacts") or []:
         base = (
-            f"https://github.com/{repo}/releases/download/"
+            f"https://github.com/{artifact_repo(spec, art)}/releases/download/"
             f"{artifact_release(spec, art)}/"
         )
         if base not in bases:
@@ -183,7 +203,7 @@ def path_upstreams(spec: dict) -> dict:
             f"https://github.com/{repo}/releases/download/{up['release']}/")
     for art in spec.get("artifacts") or []:
         rel = artifact_release(spec, art)
-        out[rel] = f"https://github.com/{repo}/releases/download/{rel}/"
+        out[rel] = f"https://github.com/{artifact_repo(spec, art)}/releases/download/{rel}/"
     return out
 
 
@@ -200,7 +220,6 @@ def whole_names(spec: dict) -> list[str]:
 
 def chunked_map(spec: dict) -> dict:
     """name → {"upstream": base-url, "parts": [{name, size}]} for big artifacts."""
-    repo = spec["store"]["repo"]
     out: dict[str, dict] = {}
     for art in spec.get("artifacts") or []:
         name = art["name"]
@@ -210,16 +229,15 @@ def chunked_map(spec: dict) -> dict:
             continue
         if explicit:
             # Explicit parts are SIZES (the spec contract); name them .partN.
-            sizes = [
-                {"name": f"{name}.part{idx}", "size": size}
-                for idx, size in enumerate(explicit)
-            ]
+            names = art.get("part_names") or [f"{name}.part{i}" for i in range(len(explicit))]
+            sizes = [{"name": n, "size": size} for n, size in zip(names, explicit)]
         else:
             sizes = derive_parts(name, total, art.get("part_size")
                                  or DEFAULT_PART_SIZE)
         release = artifact_release(spec, art)
         out[name] = {
-            "upstream": f"https://github.com/{repo}/releases/download/{release}/",
+            "upstream": (f"https://github.com/{artifact_repo(spec, art)}"
+                         f"/releases/download/{release}/"),
             "parts": [{"name": p["name"], "size": p["size"]} for p in sizes],
         }
     return out

{awrtifact-0.2.2 → awrtifact-0.2.3}/awrtifact/worker_template.py

@@ -12,6 +12,8 @@ Sentinel tokens (never valid in generated output):
     __ALLOWED_SRC__        regex source string
     __WHOLE_JSON__         array of whole-file names
     __CHUNKED_JSON__       name → {upstream, parts:[{name,size}]}
+    __SHARE_ROUTE_JS__     the Aither Share byte route, or "" (opt-in per worker)
+    __SHARE_ROUTE_DISPATCH__  its dispatch line in fetch(), or ""
 """
 
 from __future__ import annotations
@@ -44,7 +46,7 @@ const WHOLE = new Set(__WHOLE_JSON__);
 // client asks for by the original filename. Range requests are translated into
 // per-part sub-ranges. The manifest is GENERATED from the awrtifact spec — never
 // hand-edited (a hand-edited entry is exactly how a stale build ships).
-const CHUNKED = __CHUNKED_JSON__;
+const CHUNKED = __CHUNKED_JSON__;__SHARE_ROUTE_JS__
 
 const cors = {
   'Access-Control-Allow-Origin': '*',
@@ -271,7 +273,7 @@ export default {
         status: 200,
         headers: { 'Content-Type': 'application/json', ...cors },
       });
-    }
+    }__SHARE_ROUTE_DISPATCH__
     // Take only the FILENAME, so both surfaces work with one worker:
     //   artifacts.aitherium.com/<name>   (custom route, preferred)
     //   <worker>.<account>.workers.dev/<name> (fallback)
@@ -390,3 +392,111 @@ __ROUTE_BLOCK__
 binding = "__R2_BINDING__"
 bucket_name = "__R2_BUCKET__"
 """
+
+
+#: Aither Share byte route: `/s/<share_id>?t=<ticket>`. Rendered ONLY for a worker
+#: whose spec entry sets `share_grant_url`; every other worker renders byte-for-
+#: byte as before, so adding this template never redeploys a worker by itself.
+#:
+#: What it serves is CIPHERTEXT from R2 (`share/<id>/ciphertext.bin`). The worker
+#: never holds a data key. Every request asks Genesis (through the public grant-
+#: check door) whether the ticket still holds, so a revoke is effective on the
+#: next request: the response is `private, no-store`, and nothing is cached at the
+#: edge that could outlive a revocation.
+SHARE_ROUTE_JS = r"""
+
+// ── Aither Share: /s/<share_id>?t=<ticket> ─────────────────────────────────────
+// GENERATED because this worker's spec sets share_grant_url. Grant-checked on
+// EVERY request (never cached), Range-capable, ciphertext only.
+const SHARE_GRANT_URL = __SHARE_GRANT_URL_JSON__;
+const SHARE_ID = /^shr_[A-Za-z0-9_-]{8,64}$/;
+const shareHeaders = {
+  'Access-Control-Allow-Origin': '*',
+  'Access-Control-Allow-Methods': 'GET, HEAD, OPTIONS',
+  'Access-Control-Allow-Headers': 'Range, X-Share-Ticket',
+  'Access-Control-Expose-Headers': 'Content-Length, Content-Range, Accept-Ranges, X-Share-Sha256',
+  'Cache-Control': 'private, no-store',
+};
+
+function shareRefusal(status, text) {
+  return new Response(text + '\n', { status, headers: shareHeaders });
+}
+
+async function serveShare(request, env, shareId) {
+  if (!SHARE_ID.test(shareId)) return shareRefusal(404, 'not found');
+  const url = new URL(request.url);
+  // TODO(ticket-in-query): `?t=` lands in edge logs and Referer headers, and the
+  // ticket is reusable for its 5-minute life (it unlocks ciphertext only). Accept
+  // it from the X-Share-Ticket header only, or have the grant check spend it.
+  const ticket = request.headers.get('X-Share-Ticket') || url.searchParams.get('t') || '';
+  if (!ticket) return shareRefusal(401, 'this link needs a ticket');
+  const bucket = env && env.__R2_BINDING__;
+  if (!bucket) return shareRefusal(503, 'share storage is not bound');
+
+  let grant;
+  try {
+    const resp = await fetch(SHARE_GRANT_URL, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+      body: JSON.stringify({ share_id: shareId, ticket }),
+    });
+    // 410 = revoked or expired, relayed as-is so the page can say so.
+    if (resp.status === 410) return shareRefusal(410, 'revoked by sender');
+    if (!resp.ok) return shareRefusal(resp.status === 404 ? 404 : 403, 'not allowed');
+    grant = await resp.json();
+  } catch (_e) {
+    // Fail CLOSED: an unreachable grant check never falls through to serving.
+    return shareRefusal(503, 'grant check unavailable');
+  }
+  const prefix = `share/${shareId}/`;
+  if (!grant || grant.ok !== true || typeof grant.object_key !== 'string'
+      || !grant.object_key.startsWith(prefix)) {
+    return shareRefusal(403, 'not allowed');
+  }
+
+  const rangeHeader = request.headers.get('Range');
+  let object;
+  if (rangeHeader) {
+    const m = /^bytes=(\d*)-(\d*)$/.exec(rangeHeader.trim());
+    if (!m || (m[1] === '' && m[2] === '')) return shareRefusal(416, 'bad range');
+    let r;
+    if (m[1] === '') r = { suffix: Number(m[2]) };
+    else if (m[2] === '') r = { offset: Number(m[1]) };
+    else {
+      const start = Number(m[1]);
+      const end = Number(m[2]);
+      if (end < start) return shareRefusal(416, 'range not satisfiable');
+      r = { offset: start, length: end - start + 1 };
+    }
+    object = await bucket.get(grant.object_key, { range: r });
+  } else {
+    object = await bucket.get(grant.object_key);
+  }
+  if (!object) return shareRefusal(404, 'not found');
+
+  const headers = new Headers(shareHeaders);
+  headers.set('Accept-Ranges', 'bytes');
+  headers.set('Content-Type', 'application/octet-stream');
+  if (typeof grant.sha256 === 'string') headers.set('X-Share-Sha256', grant.sha256);
+  if (rangeHeader && object.range && typeof object.range.offset === 'number') {
+    const start = object.range.offset;
+    const len = object.range.length ?? (object.size - start);
+    headers.set('Content-Length', String(len));
+    // Whole-object size, never `*`: a client detects truncation against it.
+    headers.set('Content-Range', `bytes ${start}-${start + len - 1}/${object.size}`);
+    if (request.method === 'HEAD') return new Response(null, { status: 206, headers });
+    return new Response(object.body, { status: 206, headers });
+  }
+  headers.set('Content-Length', String(object.size));
+  if (request.method === 'HEAD') return new Response(null, { status: 200, headers });
+  return new Response(object.body, { status: 200, headers });
+}"""
+
+SHARE_ROUTE_DISPATCH = r"""
+    // Aither Share bytes: grant-checked, never matched by the allowlist below.
+    {
+      const shareSegs = new URL(request.url).pathname.split('/').filter(Boolean);
+      if (shareSegs.length === 2 && shareSegs[0] === 's') {
+        return serveShare(request, env, shareSegs[1]);
+      }
+    }"""

{awrtifact-0.2.2 → awrtifact-0.2.3}/awrtifact.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: awrtifact
-Version: 0.2.2
+Version: 0.2.3
 Summary: Aither World Artifact — deliberately chunk artifacts into GitHub release assets and fetch them back byte-verified. The productized aitherkvcache mirror lane.
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/Aitherium/awrtifact
@@ -20,7 +20,7 @@ Requires-Dist: awseal>=0.1; extra == "seal"
 
 **[Docs](https://aitherium.github.io/awrtifact/)**  ·  [Source](https://github.com/Aitherium/awrtifact)  ·  `pip install awrtifact`  ·  [The Aither World](https://aitherium.github.io/)
 
-> **The Aither World** is an operating system for agents — a Linux you can hand to one, the runtimes it works in, and the tools it works with. [awnix](https://github.com/Aitherium/awnix) is the Linux underneath it; **awrtifact** is one of its 46 bricks — each installs on its own, runs offline, and needs no account.
+> **The Aither World** is an operating system for agents — a Linux you can hand to one, the runtimes it works in, and the tools it works with. [awnix](https://github.com/Aitherium/awnix) is the Linux underneath it; **awrtifact** is one of its 65 bricks — each installs on its own, runs offline, and needs no account.
 >
 > **Start here:** Store one artifact as a versioned GitHub release and fetch it back byte-verified — `awrtifact mirror <URL|FILE> --release TAG`.
 
@@ -190,14 +190,17 @@ Each installs on its own, works offline, and needs no account.
 | [awskills](https://github.com/Aitherium/awskills) | that an agent knows your procedure | the procedure written down, versioned, and loadable by any agent |
 | [awpack](https://github.com/Aitherium/awpack) | that the pack you want shipped inside somebody's SDK, under whatever licence that SDK happens to carry | the pack as its own versioned artifact, with its own licence, that any agent runtime can install |
 | [awm](https://github.com/Aitherium/awm) | that memory stayed in its lane | tenant:user:project scopes, so a write cannot cross a boundary |
+| [awdesk](https://github.com/Aitherium/awdesk) | that the agent is somewhere behind a browser tab | a tray icon, a face on your desktop, and the decision card that pops when it needs you |
 | [awnode](https://github.com/Aitherium/awnode) | a vendor's cloud with every prompt | a local gateway routing to backends you chose |
 | [awgraph](https://github.com/Aitherium/awgraph) | that grep found everything | an AST + tree-sitter call graph an agent can traverse |
 | [awgit](https://github.com/Aitherium/awgit) | that no one else is editing this file | a lease, refused at commit time if you do not hold it |
 | [awdelphi](https://github.com/Aitherium/awdelphi) | one agent's confident take on a decision | the round trace, the anonymity, and who dissents |
+| [awclassify](https://github.com/Aitherium/awclassify) | a filename, a folder, or whoever last touched it | doc_type, visibility, audience and topics, with the evidence lines that decided each |
 | [awtoll](https://github.com/Aitherium/awtoll) | that your tooling is saving you context | the measured token cost of each tool call, and what the alternative cost |
 | [awseal](https://github.com/Aitherium/awseal) | that the artifact came from who you think | an Ed25519 seal — the key that verifies is not the key that forges |
 | [awshare](https://github.com/Aitherium/awshare) | that the download is intact | content-addressed bundles, verified on fetch |
 | [awnest](https://github.com/Aitherium/awnest) | that there is a person on the other end | a verdict with evidence, where "we could not tell" is not "yes" |
+| [awrena](https://github.com/Aitherium/awrena) | a leaderboard someone can edit, and votes nobody counted | a scored duel with both answers kept, and a result bound to them |
 | [awnboard](https://github.com/Aitherium/awnboard) | a share link anyone who sees it can use | an invitation addressed to one person, for one gate, revocable |
 | [awnix](https://github.com/Aitherium/awnix) | that the box is what you left it as | an immutable image you built, with atomic rollback |
 | [awrecover](https://github.com/Aitherium/awrecover) | that the restore worked | a restore that fully lands or does not land at all |
@@ -205,8 +208,14 @@ Each installs on its own, works offline, and needs no account.
 | [awrelay](https://github.com/Aitherium/awrelay) | a SaaS in the middle of your agents | findings, alerts and coordination over your own transport |
 | [awask](https://github.com/Aitherium/awask) | that anyone read the paragraph where you asked | the ask itself, with a button that steers the session that raised it |
 | [awmail](https://github.com/Aitherium/awmail) | a mailbox somebody else can read | mail your agents send and receive over your own server |
+| [awswarm](https://github.com/Aitherium/awswarm) | that a model either fits your GPU or it doesn't run at all | a placement plan and an acquisition-probability estimate before you spend on a run |
 | [awfind](https://github.com/Aitherium/awfind) | one vendor's idea of the web | results from whichever providers you configured |
 | [awbrowse](https://github.com/Aitherium/awbrowse) | that the page said what you were told | the render, the DOM and the requests it made |
+| [awvoice](https://github.com/Aitherium/awvoice) | that a cloud vendor may hold your audio | a transcript and a wav from a service you host |
+| [awvision](https://github.com/Aitherium/awvision) | a filename and a caption somebody wrote | what a model actually reports about the pixels |
+| [awscreen](https://github.com/Aitherium/awscreen) | a selector that was true when the page was written | the elements actually rendered, by what they look like |
+| [awbeads](https://github.com/Aitherium/awbeads) | that a layout your users built survives the next deploy | the arrangement as data you can read back, diff, and hand to another surface |
+| [awbonsai](https://github.com/Aitherium/awbonsai) | that inference always means a request left the machine | a WebGPU model answering on the tab's own GPU, with a consent record logged before it ever loaded |
 | [gawbbonet](https://github.com/Aitherium/gawbbonet) | the model to keep a 300-message campaign coherent by itself | campaign facts recalled from scoped memory you can list and edit |
 | [aitherkvcache](https://github.com/Aitherium/aitherkvcache) | a vendor's quantisation defaults | sub-byte KV cache kernels you can benchmark yourself |
 | **awrtifact** _(you are here)_ | a hand-rolled split script and a hand-edited worker manifest | byte-verified parts in a release, served with Range + CORS, sizes asserted by a live gate |
@@ -216,15 +225,21 @@ Each installs on its own, works offline, and needs no account.
 | [awrecurse](https://github.com/Aitherium/awrecurse) | that everything you pasted in was actually read | which slices it opened, and what it concluded from each |
 | [awprism](https://github.com/Aitherium/awprism) | the first explanation that fits | the ranked alternatives, and the observation that separates them |
 | [awrepl](https://github.com/Aitherium/awrepl) | what the agent believes the value is | the value, printed from the live session |
+| [awreport](https://github.com/Aitherium/awreport) | that the report you pasted carried no token in it | a redacted report, and the duplicate it merged into instead of filing twice |
 | [awresearch](https://github.com/Aitherium/awresearch) | a summary of pages nobody opened | every claim against the source it came from |
 | [awfocus](https://github.com/Aitherium/awfocus) | twelve terminal tabs and a bad memory | one command that names every session, finds any transcript, and opens or steers the one you want |
 | [awgym](https://github.com/Aitherium/awgym) | that a world model learned anything from the games it saw | transitions captured from real play, fed back, and the retrodiction score falling on grids it never saw |
 | [awpredict](https://github.com/Aitherium/awpredict) | a model because it trained without erroring | its prediction against a self-updating lookup, on the rows that are actually novel |
+| [awevolve](https://github.com/Aitherium/awevolve) | that your optimisation loop is finding anything | every version it kept, the score that version earned, and the edit that produced it |
 | [awsh](https://github.com/Aitherium/awsh) | that you already know the name of the command | what it decided your line meant, before it acts on it |
+| [awmine](https://github.com/Aitherium/awmine) | that a session's lesson survived the session | a row per outcome, a candidate per lesson, and the transcript line each one came from |
+| [awrise](https://github.com/Aitherium/awrise) | that a scheduled agent ran at all, and ran exactly once | a durable record of every wake -- fired, skipped, overlapped or timed out -- each with its reason |
 | [awkno](https://github.com/Aitherium/awkno) | that the docs site is up, or that you remember the family | the whole ecosystem in your terminal, with no network at all |
+| [awwall](https://github.com/Aitherium/awwall) | that a service only talks to the hosts you think it talks to | an explicit egress allowlist, where a denial names the rule that denied it |
 | [awembed](https://github.com/Aitherium/awembed) | a general-purpose embedder that has never seen your code | a held-out split of whole directories, scored teacher vs student vs int8 |
 | [awtax](https://github.com/Aitherium/awtax) | a closed tax app's sealed file you can never read again | a plain, provider-neutral schema of every figure, with the page it came from |
 | [awsettings](https://github.com/Aitherium/awsettings) | that you will remember to re-approve the same thing on every box you work from | one profile, unioned rather than overwritten, with the credentials left behind |
+| [awavatar](https://github.com/Aitherium/awavatar) | a cloud 3D vendor's opaque task id | a manifest with a sha256, a licence and a rig-audit verdict per file |
 
 [**awnix**](https://github.com/Aitherium/awnix) is the ground floor — A Linux you can hand to an agent — immutable base, capabilities included.
 
@@ -238,11 +253,13 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awskills](https://github.com/Aitherium/awskills) | Portable agent skills — self-contained procedures an agent loads on demand | [docs](https://aitherium.github.io/awskills/) |
 | [awpack](https://github.com/Aitherium/awpack) | First-party agent packs — the ones we build, versioned and installable on their own | [docs](https://aitherium.github.io/awpack/) |
 | [awm](https://github.com/Aitherium/awm) | A portable, scoped agent memory | [docs](https://aitherium.github.io/awm/) |
+| [awdesk](https://github.com/Aitherium/awdesk) | Aither World Desk -- the desktop body of AitherOS Online: tray, avatars, decision cards, the Living Desktop as an overlay | [docs](https://aitherium.github.io/awdesk/) |
 | [awnode](https://github.com/Aitherium/awnode) | A lightweight local gateway — bridges your apps to the AI backends you chose | [docs](https://aitherium.github.io/awnode/) |
 | [awrun](https://github.com/Aitherium/awrun) | A priority-aware queue and dispatcher for agentic runs and ad-hoc CI builds. It also judges whether the runner pool is big enough for the queue it is draining, and can ask a host to grow it -- reserving capacity is zero-sum, so a saturated pool needs more of it, not a different share of it | [docs](https://aitherium.github.io/awrun/) |
 | [awgraph](https://github.com/Aitherium/awgraph) | A semantic code graph for agents — AST + tree-sitter, call graphs | [docs](https://aitherium.github.io/awgraph/) |
 | [awgit](https://github.com/Aitherium/awgit) | Semantic version control on top of git — edit-ops and leases | [docs](https://aitherium.github.io/awgit/) |
 | [awdelphi](https://github.com/Aitherium/awdelphi) | Anonymous multi-round expert panels — a converged answer with a trace | [docs](https://aitherium.github.io/awdelphi/) |
+| [awclassify](https://github.com/Aitherium/awclassify) | Classify any document -- what it is, who may read it, who it is for, what it is about | — |
 | [awtoll](https://github.com/Aitherium/awtoll) | What every tool call costs you in context, measured from your own transcripts | [docs](https://aitherium.github.io/awtoll/) |
 | [awseal](https://github.com/Aitherium/awseal) | Sign an artifact so a stranger can verify it | [docs](https://aitherium.github.io/awseal/) |
 | [awshare](https://github.com/Aitherium/awshare) | Publish an artifact and fetch it back verified | [docs](https://aitherium.github.io/awshare/) |
@@ -251,6 +268,7 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awiam](https://github.com/Aitherium/awiam) | Who is this caller? A directory and session store that fails honestly | [docs](https://aitherium.github.io/awiam/) |
 | [awtunnel](https://github.com/Aitherium/awtunnel) | Reach a service that has no public address | [docs](https://aitherium.github.io/awtunnel/) |
 | [awnest](https://github.com/Aitherium/awnest) | Prove there is a human before you let them into the nest | [docs](https://aitherium.github.io/awnest/) |
+| [awrena](https://github.com/Aitherium/awrena) | Put two agents head to head and get a verdict you can check | [docs](https://aitherium.github.io/awrena/) |
 | [awnboard](https://github.com/Aitherium/awnboard) | A front gate you can put in front of anything, and hand someone the key to | [docs](https://aitherium.github.io/awnboard/) |
 | [awnix](https://github.com/Aitherium/awnix) | A Linux you can hand to an agent — immutable base, capabilities included | [docs](https://aitherium.github.io/awnix/) |
 | [awrecover](https://github.com/Aitherium/awrecover) | Labelled snapshots with an all-or-nothing restore | [docs](https://aitherium.github.io/awrecover/) |
@@ -259,9 +277,17 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awask](https://github.com/Aitherium/awask) | Your agent asks you a question — and acts on your answer | [docs](https://aitherium.github.io/awask/) |
 | [awmail](https://github.com/Aitherium/awmail) | Give an agent an email address — send, and actually receive | [docs](https://aitherium.github.io/awmail/) |
 | [awnet](https://github.com/Aitherium/awnet) | The agentic web — agents host a mesh, and agents join one | [docs](https://aitherium.github.io/awnet/) |
+| [awswarm](https://github.com/Aitherium/awswarm) | Run one model too big for any single GPU across a pool of small ones | — |
 | [awfind](https://github.com/Aitherium/awfind) | A portable search client — query, results, ranking | [docs](https://aitherium.github.io/awfind/) |
 | [awbrowse](https://github.com/Aitherium/awbrowse) | A portable browser client — navigate, console, network, DOM, screenshot | [docs](https://aitherium.github.io/awbrowse/) |
+| [awvoice](https://github.com/Aitherium/awvoice) | Hear and speak — transcribe audio, synthesize a voice | [docs](https://aitherium.github.io/awvoice/) |
+| [awvision](https://github.com/Aitherium/awvision) | See an image — describe it, ask it a question, compare two | [docs](https://aitherium.github.io/awvision/) |
+| [awscreen](https://github.com/Aitherium/awscreen) | See this machine — what is on screen, and where to click it | [docs](https://aitherium.github.io/awscreen/) |
+| [awkit](https://github.com/Aitherium/awkit) | Render an agent panel from a tool result — one component, any React app | — |
+| [awbeads](https://github.com/Aitherium/awbeads) | A spatial canvas for a page — arrange things, connect them, and keep the arrangement | — |
+| [awbonsai](https://github.com/Aitherium/awbonsai) | Run a real model in the visitor's own browser — no server round trip, no upload | — |
 | [awknowledge](https://github.com/Aitherium/awknowledge) | How to run a coding agent so the result survives — the laws, with evidence | [docs](https://aitherium.github.io/awknowledge/) |
+| [awbrain](https://github.com/Aitherium/awbrain) | Your history as a wiki of linked markdown — claims pinned to the evidence | — |
 | [gawbbonet](https://github.com/Aitherium/gawbbonet) | GobboNet campaigns with a real agent brain — scoped memory, graph recall | [docs](https://aitherium.github.io/gawbbonet/) |
 | [aitherkvcache](https://github.com/Aitherium/aitherkvcache) | Near-optimal KV cache quantization for LLM inference — sub-byte compression | [docs](https://aitherium.github.io/aitherkvcache/) |
 | **awrtifact** _(you are here)_ | Deliberately chunk artifacts into GitHub release assets — the productized aitherkvcache mirror lane | [docs](https://aitherium.github.io/awrtifact/) |
@@ -271,15 +297,23 @@ Every repository here is public. Each publishes an `aither-manifest.json` beside
 | [awrecurse](https://github.com/Aitherium/awrecurse) | Answer a question over a context far larger than the window — recursively, with the trace kept | [docs](https://aitherium.github.io/awrecurse/) |
 | [awprism](https://github.com/Aitherium/awprism) | Turn a failure into ranked hypotheses — and say what would confirm each one | [docs](https://aitherium.github.io/awprism/) |
 | [awrepl](https://github.com/Aitherium/awrepl) | A REPL an agent can actually use — state that survives between turns | [docs](https://aitherium.github.io/awrepl/) |
+| [awreport](https://github.com/Aitherium/awreport) | File a bug report that has already scrubbed your secrets and collapsed the duplicate | — |
 | [awresearch](https://github.com/Aitherium/awresearch) | Ask a research question, get a cited report you can check | [docs](https://aitherium.github.io/awresearch/) |
 | [awfocus](https://github.com/Aitherium/awfocus) | See, search and steer every Claude session from one command | [docs](https://aitherium.github.io/awfocus/) |
 | [awgym](https://github.com/Aitherium/awgym) | An ARC training gym — a game a world model can watch, and six roles that play through it | [docs](https://aitherium.github.io/awgym/) |
 | [awpredict](https://github.com/Aitherium/awpredict) | Predict what your environment does next, and how surprised you were | [docs](https://aitherium.github.io/awpredict/) |
+| [awevolve](https://github.com/Aitherium/awevolve) | Point an agent at a file and a command that scores it, and let it improve | — |
 | [awsh](https://github.com/Aitherium/awsh) | Your terminal answers you -- type a question where a command would go | [docs](https://aitherium.github.io/awsh/) |
+| [awmine](https://github.com/Aitherium/awmine) | Mine what your agents did -- outcomes, lessons and procedures out of the transcripts they left behind | — |
+| [awrise](https://github.com/Aitherium/awrise) | Wake an agent on a schedule, let it do one thing, and put it back to sleep | [docs](https://aitherium.github.io/awrise/) |
 | [awkno](https://github.com/Aitherium/awkno) | The man page for the Aither World — every brick, stack and law, offline | [docs](https://aitherium.github.io/awkno/) |
+| [awwall](https://github.com/Aitherium/awwall) | Say what a workload may reach, and watch everything else fail closed | [docs](https://aitherium.github.io/awwall/) |
+| [awrouter](https://github.com/Aitherium/awrouter) | OpenRouter for your own fleet: pick a model backend by cost/latency/ capability, fail over, fit the context window, stream. Standalone, OpenAI-compatible, no Aither-specifics required to be valuable | — |
 | [awembed](https://github.com/Aitherium/awembed) | Train an embedding model that knows your corpus, and prove it beats the big one | [docs](https://aitherium.github.io/awembed/) |
 | [awtax](https://github.com/Aitherium/awtax) | Turn any tax PDF -- returns, W-2, 1099, statements, even scans -- into structured data you can check | [docs](https://aitherium.github.io/awtax/) |
+| [awflow](https://github.com/Aitherium/awflow) | A deterministic workflow runtime — chain agent calls with journal replay and budget control | [docs](https://aitherium.github.io/awflow/) |
 | [awsettings](https://github.com/Aitherium/awsettings) | Your agent's permissions and config, following you to the next machine | [docs](https://aitherium.github.io/awsettings/) |
+| [awavatar](https://github.com/Aitherium/awavatar) | One character spec in, a rigged, animated, multi-style avatar pack out | [docs](https://aitherium.github.io/awavatar/) |
 
 <div id="aither-constellation" data-self="awrtifact"></div>
 <script src="aither-constellation.js"></script>

{awrtifact-0.2.2 → awrtifact-0.2.3}/awrtifact.egg-info/SOURCES.txt

@@ -47,5 +47,6 @@ tests/test_mirrorset.py
 tests/test_provision.py
 tests/test_sealing.py
 tests/test_serve_spec.py
+tests/test_share_route.py
 tests/test_split_verify.py
 tests/test_upload.py

{awrtifact-0.2.2 → awrtifact-0.2.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "awrtifact"
-version = "0.2.2"
+version = "0.2.3"
 description = "Aither World Artifact — deliberately chunk artifacts into GitHub release assets and fetch them back byte-verified. The productized aitherkvcache mirror lane."
 readme = "README.md"
 requires-python = ">=3.10"

{awrtifact-0.2.2 → awrtifact-0.2.3}/tests/test_serve_spec.py

@@ -170,3 +170,49 @@ def test_prefix_route_is_a_namespace_for_chunked_and_r2():
     text = open(src, encoding="utf-8").read()
     assert "const fromR2 = baseOverride ? null : await serveFromR2(request, env, name);" in text
     assert "CHUNKED[name].upstream === baseOverride" in text
+
+
+def _cross_repo_spec() -> dict:
+    spec = _spec()
+    spec["artifacts"] = [{
+        "id": "awnix-ai-full-iso",
+        "name": "awnix-ai-full-x86_64.iso",
+        "repo": "Aitherium/awnix",
+        "release": "awnix-iso-ai-full-2026.09.22",
+        "total": 300,
+        "parts": [200, 100],
+        "part_names": ["awnix-x86_64.iso.00.part", "awnix-x86_64.iso.01.part"],
+    }]
+    return spec
+
+
+def test_cross_repo_named_parts_reach_the_chunked_map():
+    from awrtifact import spec as spec_mod
+
+    s = _cross_repo_spec()
+    spec_mod.validate(s)
+    entry = spec_mod.chunked_map(s)["awnix-ai-full-x86_64.iso"]
+    assert entry["upstream"] == (
+        "https://github.com/Aitherium/awnix/releases/download/awnix-iso-ai-full-2026.09.22/")
+    assert [p["name"] for p in entry["parts"]] == [
+        "awnix-x86_64.iso.00.part", "awnix-x86_64.iso.01.part"]
+    assert spec_mod.path_upstreams(s)["awnix-iso-ai-full-2026.09.22"].startswith(
+        "https://github.com/Aitherium/awnix/")
+    # the store repo still owns everything that does not say otherwise
+    assert all("aitherkvcache" in b or "awnix" in b for b in spec_mod.upstream_bases(s))
+
+
+@pytest.mark.parametrize("mutate", [
+    lambda a: a.update(part_names=["only-one.part"]),
+    lambda a: a.update(part_names=["x.part", "x.part"]),
+    lambda a: a.update(part_names=["../x", "y"]),
+    lambda a: a.update(repo="not-a-repo"),
+    lambda a: (a.pop("parts"), a.update(total=300)),
+])
+def test_cross_repo_spec_refuses_bad_data(mutate):
+    from awrtifact import spec as spec_mod
+
+    s = _cross_repo_spec()
+    mutate(s["artifacts"][0])
+    with pytest.raises(ValueError):
+        spec_mod.validate(s)

awrtifact-0.2.3/tests/test_share_route.py

@@ -0,0 +1,133 @@
+"""The opt-in `/s/<share>` byte route in the generated worker.
+
+Two properties, both of which a green build would hide if broken:
+
+1. OPT-IN IS BYTE-EXACT. A worker whose spec entry has no `share_grant_url`
+   renders exactly as before the route existed, so shipping the template does
+   not redeploy (or change) any worker by itself.
+2. THE ROUTE FAILS CLOSED. The rendered JS is executed under Node with a fake
+   grant-check and a fake R2 bucket: no ticket is 401, a revoked grant is 410,
+   an unreachable grant check is 503 (never a fall-through to serving), an
+   object key outside the share's own prefix is refused, and a valid ticket
+   streams the ciphertext with Range. Skipped only when Node is absent.
+"""
+
+from __future__ import annotations
+
+import json
+import shutil
+import subprocess
+
+import pytest
+from awrtifact import serve_spec, worker_template
+
+
+def _spec(share_url=None) -> dict:
+    worker = {"name": "awrtifact", "dir": "awrtifact", "route": "artifact.aitherium.com/*",
+              "r2_binding": "WEIGHTS", "r2_bucket": "aither-artifacts"}
+    if share_url:
+        worker["share_grant_url"] = share_url
+    return {"store": {"name": "awrtifact", "repo": "Aitherium/aitherkvcache"},
+            "workers": [worker], "upstreams": [{"release": "artifact-v1"}],
+            "allowlist": {"regex": r"^[A-Za-z0-9._-]+\.gguf$"}, "artifacts": []}
+
+
+def test_absent_share_url_renders_no_share_code(tmp_path, monkeypatch):
+    js, _toml = serve_spec.render(_spec(), tmp_path / "awrtifact.yaml")
+    assert "serveShare" not in js
+    assert "__SHARE" not in js
+    # Byte-exact with the pre-route template (the slots removed outright).
+    legacy = worker_template.JS_TEMPLATE.replace("__SHARE_ROUTE_JS__", "").replace(
+        "__SHARE_ROUTE_DISPATCH__", "")
+    monkeypatch.setattr(worker_template, "JS_TEMPLATE", legacy)
+    js_legacy, _ = serve_spec.render(_spec(), tmp_path / "awrtifact.yaml")
+    assert js == js_legacy
+
+
+def test_present_share_url_renders_the_route(tmp_path):
+    url = "https://api.example.com/api/share/grant-check"
+    js, _ = serve_spec.render(_spec(url), tmp_path / "awrtifact.yaml")
+    assert f"const SHARE_GRANT_URL = {json.dumps(url)};" in js
+    assert "return serveShare(request, env, shareSegs[1]);" in js
+    assert "env && env.WEIGHTS" in js
+    assert "__SHARE" not in js and "__R2_BINDING__" not in js
+
+
+def test_non_https_share_url_is_refused(tmp_path):
+    with pytest.raises(ValueError, match="https"):
+        serve_spec.render(_spec("http://api.example.com/x"), tmp_path / "awrtifact.yaml")
+
+
+_HARNESS = r"""
+import worker from './index.mjs';
+const CT = new Uint8Array(Array.from({length: 100}, (_, i) => i));
+let grantMode = 'ok';
+globalThis.fetch = async (url, init) => {
+  if (grantMode === 'down') throw new Error('unreachable');
+  const body = JSON.parse(init.body);
+  if (grantMode === 'revoked') return new Response('gone', {status: 410});
+  if (body.ticket !== 'good') return new Response('no', {status: 403});
+  const key = grantMode === 'escape' ? 'share/shr_OTHER0000/ciphertext.bin'
+                                     : `share/${body.share_id}/ciphertext.bin`;
+  return new Response(JSON.stringify({ok: true, object_key: key, size: 100, sha256: 'abc'}),
+                      {status: 200, headers: {'Content-Type': 'application/json'}});
+};
+const reads = [];
+const bucket = {
+  async get(key, opts) {
+    reads.push(key);
+    if (!key.startsWith('share/shr_abcdefgh12/')) return null;
+    if (opts && opts.range) {
+      const r = opts.range;
+      const off = r.suffix !== undefined ? 100 - r.suffix : r.offset;
+      const len = r.length !== undefined ? r.length : 100 - off;
+      return {size: 100, range: {offset: off, length: len}, body: CT.slice(off, off + len)};
+    }
+    return {size: 100, body: CT};
+  },
+};
+const env = {WEIGHTS: bucket};
+async function hit(path, headers = {}) {
+  const req = new Request('https://artifact.aitherium.com' + path, {headers});
+  const r = await worker.fetch(req, env);
+  const buf = new Uint8Array(await r.arrayBuffer());
+  return {status: r.status, len: buf.length, first: buf[0], cr: r.headers.get('Content-Range'),
+          cache: r.headers.get('Cache-Control')};
+}
+const out = {};
+out.noTicket = await hit('/s/shr_abcdefgh12');
+out.badTicket = await hit('/s/shr_abcdefgh12?t=bad');
+out.badId = await hit('/s/..%2Fetc?t=good');
+out.whole = await hit('/s/shr_abcdefgh12?t=good');
+out.range = await hit('/s/shr_abcdefgh12', {'X-Share-Ticket': 'good', Range: 'bytes=10-19'});
+grantMode = 'revoked'; out.revoked = await hit('/s/shr_abcdefgh12?t=good');
+grantMode = 'down'; out.down = await hit('/s/shr_abcdefgh12?t=good');
+grantMode = 'escape'; out.escape = await hit('/s/shr_abcdefgh12?t=good');
+out.reads = reads;
+console.log(JSON.stringify(out));
+"""
+
+
+@pytest.mark.skipif(shutil.which("node") is None, reason="node is not installed")
+def test_rendered_share_route_fails_closed_under_node(tmp_path):
+    js, _ = serve_spec.render(_spec("https://api.example.com/api/share/grant-check"),
+                              tmp_path / "awrtifact.yaml")
+    (tmp_path / "index.mjs").write_text(js, encoding="utf-8")
+    (tmp_path / "harness.mjs").write_text(_HARNESS, encoding="utf-8")
+    proc = subprocess.run(["node", "harness.mjs"], cwd=tmp_path, capture_output=True,
+                          text=True, encoding="utf-8", timeout=60)
+    assert proc.returncode == 0, proc.stderr
+    out = json.loads(proc.stdout.strip().splitlines()[-1])
+    assert out["noTicket"]["status"] == 401
+    assert out["badTicket"]["status"] == 403
+    assert out["badId"]["status"] == 404
+    assert out["whole"] == {"status": 200, "len": 100, "first": 0, "cr": None,
+                            "cache": "private, no-store"}
+    assert out["range"]["status"] == 206
+    assert out["range"]["len"] == 10 and out["range"]["first"] == 10
+    assert out["range"]["cr"] == "bytes 10-19/100"
+    assert out["revoked"]["status"] == 410
+    assert out["down"]["status"] == 503
+    assert out["escape"]["status"] == 403
+    # Refusals never touched the bucket: exactly the two served requests read it.
+    assert out["reads"] == ["share/shr_abcdefgh12/ciphertext.bin"] * 2