[aurokin]

Public Warcraft Logs reads now use client authentication even when a saved user token is rejected. Exact guide builds can travel from cited Wowhead exports into SimC and into an existing geared profile. Wrapper discovery can query only selected providers and entity kinds.

• Extract output-free services for SimC builds, Wowhead entities/talents, WCL reports, Raider.IO profiles, and Lorrgs reads; replace console capture with bounded composite operation adapters.
• Add explicit WCL endpoint selection, targeted refresh, report revisions, honest cache policy, and bounded event exports with completeness/continuation and atomic artifacts.
• Preserve published Wowhead calculator/build-tag references, citations, parser exclusions, and legacy bundle compatibility.
• Add identity-validated geared-profile build application with collision/actor/override safeguards.
• Replace placeholder discovery with explicit unsupported-operation errors; promote verified Blizzard typed reads to supported and keep CurseForge expansion paused.
• Update consumer docs, roadmap, changelog, and generated command references.

Validation:

• All 19 GitHub checks pass on the final head: 3,749 fast tests, 94.69% coverage, Python 3.12–3.14 installed wheels, independent provider/wrapper installations, Redis integration, security, and static checks. Full local CI parity also passes.
• 21 real SimC binary tests; the geared-profile oracle also proves the selected hash survives hostile talent overrides.
• 109 live journeys verified across focused runs: SimC, Lorrgs, all three guide providers and build handoffs, public WCL reads/event artifacts, wrapper composites, scoped discovery, and changed Blizzard/CurseForge contracts.
• Root release wheel and modular wrapper installation verified outside the checkout with offline contract probes.
• Diffwarden review fixes preserve provider error exits, WCL phase fallback, cursor integrity, and guide provenance; the final complete-branch review has no findings, and all GitHub checks pass.

Remaining external verification limits: the private WCL user endpoint still rejects the saved token with HTTP 401; no current public Raidbots report is available. Public WCL client reads and local SimC handoffs are verified.