AGW Auth And Session

Use the CLI as the source of truth for session state.

Operating Rules

• Inspect current state before opening the companion flow.
• Use agw auth init as the only bootstrap path.
• Treat bootstrap and revoke as explicit-intent actions. Preview with --dry-run; add --execute only after user confirmation.
• Keep runtime wiring in AGW_* env vars or top-level flags, not JSON payloads.
• Parse machine-readable JSON from stdout only.
• Inspect agw schema auth.init, agw schema auth.revoke, agw schema session.status, or agw schema session.doctor when a request or response shape is unclear.

Task Map