@aiwg/cli 2026.10.5 → 2026.10.6

package/tools/agents/providers/copilot.mjs

@@ -27,6 +27,7 @@ let fs;
 try { const gfs = _require('graceful-fs'); gfs.gracefulify(realFs); fs = realFs; } catch { fs = realFs; }
 import path from 'path';
 import {
+  withRuleDeployment,
   ensureDir,
   listMdFiles,
   listMdFilesRecursive,
@@ -429,6 +430,7 @@ export function deploySkills(skillDirs, targetDir, opts) {
  * Deploy rules to .github/instructions/ as .instructions.md files
  */
 export function deployRules(ruleFiles, targetDir, opts) {
+  if (opts.ruleDelivery) return [];
   const destDir = path.join(targetDir, paths.rules);
   ensureDir(destDir, opts.dryRun);
   cleanupOldRuleFiles(destDir, opts);
@@ -495,8 +497,8 @@ export function createCopilotInstructions(target, srcRoot, dryRun) {
 export async function postDeploy(targetDir, opts) {
   initializeFrameworkWorkspace(targetDir, opts.mode, opts.dryRun, opts.srcRoot);
 
-  // Create copilot-instructions.md
-  createCopilotInstructions(targetDir, opts.srcRoot, opts.dryRun);
+  // copilot-instructions.md is Copilot's context file: --no-context-files leaves it alone.
+  if (opts.contextFiles !== false) createCopilotInstructions(targetDir, opts.srcRoot, opts.dryRun);
 }
 
 // ============================================================================
@@ -517,6 +519,10 @@ export function getFileExtension(type) {
 // ============================================================================
 
 export async function deploy(opts) {
+  return withRuleDeployment(opts, { name, paths, kernelSkillsPath }, deploySelected);
+}
+
+async function deploySelected(opts) {
   const {
     srcRoot,
     target,

package/tools/agents/providers/cursor.mjs

@@ -414,7 +414,7 @@ export async function postDeploy(targetDir, opts) {
   initializeFrameworkWorkspace(targetDir, opts.mode, opts.dryRun, opts.srcRoot);
 
   if (opts.createAgentsMd) {
-    createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
+    if (opts.contextFiles !== false) createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
   }
 
   // PUW-019 (#1120): wire environment.json + worktrees.json templates.

package/tools/agents/providers/deepseek-harness.mjs

@@ -46,7 +46,7 @@ export function deployCordisPatch(target, opts) {
 }
 
 export async function postDeploy(target, opts) {
-  if (opts.createAgentsMd || (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly)) createAgentsMd(target, opts.srcRoot, opts.dryRun);
+  if (opts.contextFiles !== false && (opts.createAgentsMd || (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly))) createAgentsMd(target, opts.srcRoot, opts.dryRun);
   if (!opts.quiet) console.log('DeepSeek Harness: runtime credentials remain environment-only; use a reviewed ephemeral route patch.');
 }
 

package/tools/agents/providers/factory.mjs

@@ -25,6 +25,7 @@ let fs;
 try { const gfs = _require('graceful-fs'); gfs.gracefulify(realFs); fs = realFs; } catch { fs = realFs; }
 import path from 'path';
 import {
+  withRuleDeployment,
   ensureDir,
   listMdFiles,
   listMdFilesRecursive,
@@ -576,6 +577,7 @@ export function deploySkills(skillDirs, targetDir, opts) {
  * Deploy rules to .factory/rules/
  */
 export function deployRules(ruleFiles, targetDir, opts) {
+  if (opts.ruleDelivery) return [];
   const destDir = path.join(targetDir, paths.rules);
   ensureDir(destDir, opts.dryRun);
   cleanupOldRuleFiles(destDir, opts);
@@ -816,7 +818,7 @@ export async function postDeploy(targetDir, opts) {
 
   // Create/update AGENTS.md if requested
   if (opts.createAgentsMd) {
-    createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
+    if (opts.contextFiles !== false) createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
   }
 }
 
@@ -945,6 +947,10 @@ export function getFileExtension(type) {
  * Main deployment function for Factory provider
  */
 export async function deploy(opts) {
+  return withRuleDeployment(opts, { name, paths, kernelSkillsPath, transformSkillMd: transformSkillFrontmatter }, deploySelected);
+}
+
+async function deploySelected(opts) {
   const {
     srcRoot,
     target,

package/tools/agents/providers/grok-build.mjs

@@ -16,6 +16,8 @@ import fs from 'node:fs';
 import { createHash, randomUUID } from 'node:crypto';
 import yaml from 'js-yaml';
 import {
+  withRuleDeployment,
+  replaceBoundRulesBlock,
   createAgentsMdFromTemplate,
   deploySkillsWithKernelRouting,
   collectFrameworkArtifacts,
@@ -224,7 +226,17 @@ function matchesSkillSource(source, target) {
       if (relative.endsWith(path.sep)) return true;
       let content = fs.readFileSync(path.join(source, relative), 'utf8');
       if (relative === 'SKILL.md') content = injectPlatformInContent(content, 'grok-build');
-      return content === fs.readFileSync(path.join(target, relative), 'utf8');
+      const deployed = fs.readFileSync(path.join(target, relative), 'utf8');
+      if (content === deployed) return true;
+      if (relative !== 'SKILL.md' || !deployed.includes('<!-- AIWG:bound-rules:start -->')) return false;
+      // Activation projection appends generated bindings. Verify the complete
+      // deployed bytes against the receipt before comparing the authored body;
+      // an operator edit (including inside the binding block) must survive.
+      const receipt = JSON.parse(fs.readFileSync(path.join(target, '.aiwg-manifest.json'), 'utf8'));
+      const digest = `sha256:${createHash('sha256').update(deployed).digest('hex')}`;
+      return receipt.skillSource === path.resolve(source)
+        && receipt.managed?.[relative]?.hash === digest
+        && replaceBoundRulesBlock(content, []).trimEnd() === replaceBoundRulesBlock(deployed, []).trimEnd();
     });
   } catch { return false; }
 }
@@ -326,7 +338,7 @@ export function uninstall(target, opts = {}) {
 
 export async function postDeploy(target, opts = {}) {
   if (opts.createAgentsMd || (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly)) {
-    createAgentsMd(target, opts.srcRoot, opts.dryRun);
+    if (opts.contextFiles !== false) createAgentsMd(target, opts.srcRoot, opts.dryRun);
   }
   if (!opts.quiet) {
     const home = resolveGrokHome(opts.env || process.env);
@@ -344,6 +356,10 @@ export function getFileExtension() {
 }
 
 export async function deploy(opts) {
+  return withRuleDeployment(opts, { name, paths, kernelSkillsPath }, deploySelected);
+}
+
+async function deploySelected(opts) {
   const mode = normalizeDeploymentMode(opts.mode);
   if (opts.createAgentsMd || (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly)) {
     assertSafeAgentsMd(opts.target);

package/tools/agents/providers/grokbot.mjs

@@ -171,7 +171,7 @@ export async function postDeploy(targetDir, opts = {}) {
     opts.createAgentsMd ||
     (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly)
   ) {
-    createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
+    if (opts.contextFiles !== false) createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
   }
   if (!opts.quiet) {
     const root = resolveGrokbotSkillsDir(opts.env || process.env);

package/tools/agents/providers/hermes.mjs

@@ -224,9 +224,9 @@ export function assertContextBudget(content, name = 'AGENTS.md', rules = []) {
  * priming on every Hermes turn (#1318 / S7; skill-discovery added #1347).
  *
  * The full rule bodies are reachable without MCP via `aiwg discover` and
- * `aiwg show rule <name>`; MCP exposes the same path through `rule-list` and
+ * `aiwg show rule <name> --body`; MCP exposes the same path through `rule-list` and
  * `rule-show` when configured (#1320). The bodies exceed Hermes's 20K context
- * cap if inlined verbatim (anti-laziness alone is 32K chars), so we inline
+ * cap if inlined verbatim (anti-laziness alone was 32K chars; it now ships as a compact core body, #3450), so we inline
  * compressed directives only and point to CLI/MCP for the full text.
  *
  * Selection criteria: rules tagged CRITICAL/HIGH enforcement level whose
@@ -240,7 +240,7 @@ const CRITICAL_RULE_DIRECTIVES = `## CRITICAL Rules (always apply)
 These are the highest-enforcement AIWG rules. Full bodies are reachable without
 MCP:
 - Find rules: \`aiwg discover "rule <topic>" --type rule\`
-- Fetch a rule: \`aiwg show rule <name>\`
+- Fetch a rule: \`aiwg show rule <name> --body\`
 
 If the optional MCP sidecar is configured, the same surface is available through
 \`mcp_aiwg_rule_list\` and \`mcp_aiwg_rule_show\`.
@@ -260,13 +260,6 @@ Never add AI-tool attribution to commits, PRs, code, or docs. No \`Co-Authored-B
 no "Generated with", no "Written by [AI tool]". The AI is a tool; tools don't sign
 their output. Applies to ALL platforms (Claude, Codex, Copilot, Cursor, etc.).
 
-### Rule: anti-laziness
-Never delete tests to make them pass. Never skip/disable tests. Never remove
-features instead of fixing them. Never weaken assertions to be meaningless.
-Never suppress CI/pipeline signals (\`continue-on-error\`, \`|| true\`, \`set +e\`).
-If stuck after 3 honest attempts: escalate with full context, don't shortcut.
-Within scope: leave nothing half-done — code + tests + docs + verification.
-
 ### Rule: citation-policy
 Never fabricate citations, DOIs, URLs, or page numbers. Only cite sources that
 exist in the research corpus (.aiwg/research/sources/). Match claim strength
@@ -331,6 +324,7 @@ function mergeHermesContext(file, generated, kind) {
 }
 
 export function generateAgentsMd(agentCount, skillCount, targetDir, opts) {
+  if (opts.contextFiles === false) return;
   const { dryRun } = opts;
 
   // Startup is reserved for rule contracts. Workflow routing, artifact catalogs,
@@ -339,7 +333,7 @@ export function generateAgentsMd(agentCount, skillCount, targetDir, opts) {
   const header = `# AIWG Integration
 
 Skills: \`$HERMES_HOME/skills/\` (kernel), \`$HERMES_HOME/skills/.aiwg/\` (standard).
-Find: \`aiwg discover "rule <topic>" --type rule\`. Fetch: \`aiwg show rule <name>\`.
+Find: \`aiwg discover "rule <topic>" --type rule\`. Fetch: \`aiwg show rule <name> --body\`.
 MCP is optional; \`mcp_aiwg_rule_show\` exposes the same rule catalog.
 `;
 
@@ -533,7 +527,7 @@ async function deploySelected(opts) {
   // Generate AGENTS.md (with inlined CRITICAL rule priming, #1318/#1532)
   // AND .hermes.md thin pointer (resolves #1319 doc-debt, was claimed in
   // CHANGELOG but not previously implemented).
-  if (!skillsOnly && !opts.commandsOnly && !opts.rulesOnly) {
+  if (opts.contextFiles !== false && !skillsOnly && !opts.commandsOnly && !opts.rulesOnly) {
     const artifacts = collectFrameworkArtifacts(srcRoot, normalizedMode, {
       includeAgents: true,
       includeCommands: false,
@@ -560,7 +554,7 @@ async function deploySelected(opts) {
   if (!opts.quiet) {
     console.log('');
     console.log(`Skills root: ${kernelSkillsPath}`);
-    console.log('Rules are in AGENTS.md as compressed directives; full bodies via `aiwg show rule <name>`.');
+    console.log('Rules are in AGENTS.md as compressed directives; full bodies via `aiwg show rule <name> --body`.');
     console.log('Optional: configure config.yaml to connect AIWG MCP server.');
     console.log('See: docs/integrations/hermes-quickstart.md (optional MCP setup)');
   }

package/tools/agents/providers/muse-hooks.mjs

@@ -43,9 +43,7 @@
  * Servers inherit the operator's process environment; pass `MUSE_SESSION_ID`
  * through at runtime instead of hardcoding a session id into `env`.
  *
- * This module is intentionally dependency-free (node builtins +
- * muse-paths.mjs only) so provider-policy-style import graphs never pull it
- * in transitively.
+ * MCP writes use the shared config writer, resolved for source and packaged installs.
  *
  * @issue #228
  */
@@ -53,9 +51,13 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { importImpl } from '../../_resolve-impl.mjs';
 import { stripJsonComments } from './base.mjs';
 import { resolveMuseXdgSkillsDir, museXdgSkillsDirRemediation } from './muse-paths.mjs';
 
+const { assertConfigDestination, writeConfigAtomic, writeConfigTransaction } = await importImpl(import.meta.url, 'mcp/config-file.mjs');
+
 // ---------------------------------------------------------------------------
 // Shared JSON helpers
 // ---------------------------------------------------------------------------
@@ -631,7 +633,7 @@ export function mergeMcpProfile(existingDoc, opts = {}) {
  * preserving unknown keys, timestamped backup before writing, atomic write,
  * dry-run diff with zero writes, fail closed on unparseable settings.
  */
-export function deployMuseMcp(opts = {}) {
+export async function deployMuseMcp(opts = {}) {
   const { dryRun = false, quiet = false, mcp = false, env = process.env, userHome = os.homedir() } = opts;
   const log = quiet ? () => {} : (msg) => console.log(msg);
 
@@ -642,6 +644,8 @@ export function deployMuseMcp(opts = {}) {
 
   const settingsPath = assertMuseUserSettingsPath(env, userHome);
   const configDir = path.dirname(settingsPath);
+  await assertConfigDestination(settingsPath);
+  await assertConfigDestination(path.join(configDir, MUSE_MCP_SIDECAR_NAME));
   const { doc: existingDoc, raw: existingRaw, existed } = readSettingsDoc(settingsPath);
   const sidecar = readMcpSidecar(configDir);
   const profile = aiwgMcpServerProfile();
@@ -680,14 +684,15 @@ export function deployMuseMcp(opts = {}) {
     return { settingsPath, changed: true, plan, wrote: false, warnings };
   }
 
-  fs.mkdirSync(configDir, { recursive: true });
   let backupPath = null;
   if (existed) {
-    backupPath = `${settingsPath}.aiwg-backup-${new Date().toISOString().replace(/[:.]/g, '-')}`;
-    fs.copyFileSync(settingsPath, backupPath);
+    backupPath = `${settingsPath}.aiwg-backup-${new Date().toISOString().replace(/[:.]/g, '-')}-${randomUUID()}`;
+    await writeConfigAtomic(backupPath, existingRaw, { userScope: true });
   }
-  atomicWrite(settingsPath, afterText);
-  atomicWrite(sidecar.path, canonicalJson({ version: 1, servers: ['aiwg'] }));
+  await writeConfigTransaction([
+    { file: settingsPath, content: afterText, options: { userScope: true } },
+    { file: sidecar.path, content: canonicalJson({ version: 1, servers: ['aiwg'] }), options: { userScope: true } },
+  ]);
 
   log(`Muse MCP: merged AIWG stdio profile into ${settingsPath}`);
   for (const step of plan) log(`  ${step}`);
@@ -700,11 +705,13 @@ export function deployMuseMcp(opts = {}) {
  * Removal path: drop the AIWG-managed `aiwg` server key (only when recorded
  * in the sidecar) and delete the sidecar. Operator servers are never touched.
  */
-export function pruneMuseMcp(opts = {}) {
+export async function pruneMuseMcp(opts = {}) {
   const { dryRun = false, quiet = false, env = process.env, userHome = os.homedir() } = opts;
   const log = quiet ? () => {} : (msg) => console.log(msg);
   const settingsPath = assertMuseUserSettingsPath(env, userHome);
   const configDir = path.dirname(settingsPath);
+  await assertConfigDestination(settingsPath);
+  await assertConfigDestination(path.join(configDir, MUSE_MCP_SIDECAR_NAME));
 
   if (!fs.existsSync(settingsPath)) {
     log(`Muse MCP: no ${settingsPath}; nothing to prune.`);
@@ -731,10 +738,10 @@ export function pruneMuseMcp(opts = {}) {
     return { settingsPath, pruned: true, wrote: false };
   }
 
-  const backupPath = `${settingsPath}.aiwg-backup-${new Date().toISOString().replace(/[:.]/g, '-')}`;
-  fs.copyFileSync(settingsPath, backupPath);
-  atomicWrite(settingsPath, canonicalJson(merged));
-  if (fs.existsSync(sidecar.path)) fs.unlinkSync(sidecar.path);
+  const backupPath = `${settingsPath}.aiwg-backup-${new Date().toISOString().replace(/[:.]/g, '-')}-${randomUUID()}`;
+  await writeConfigAtomic(backupPath, existingRaw, { userScope: true });
+  await writeConfigAtomic(settingsPath, canonicalJson(merged), { userScope: true });
+  if (await assertConfigDestination(sidecar.path)) fs.unlinkSync(sidecar.path);
   log(`Muse MCP: removed mcp_servers.aiwg from ${settingsPath} (backup: ${backupPath}).`);
   return { settingsPath, pruned: true, wrote: true, backupPath };
 }

package/tools/agents/providers/muse.mjs

@@ -35,6 +35,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import {
+  withRuleDeployment,
   collectFrameworkArtifacts,
   createAgentsMdFromTemplate,
   deploySkillsWithKernelRouting,
@@ -226,7 +227,7 @@ export async function postDeploy(targetDir, opts = {}) {
   // bridge, managed hooks, and an opted-in MCP profile must not be skipped.
   const fullDeploy = !opts.commandsOnly && !opts.rulesOnly && (!opts.skillsOnly || opts.kernelOnly === true);
   if (opts.createAgentsMd || fullDeploy) {
-    createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
+    if (opts.contextFiles !== false) createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
   }
 
   // #228 — managed project hooks (.muse/hooks.json). Default on, mirroring
@@ -240,7 +241,7 @@ export async function postDeploy(targetDir, opts = {}) {
   // #228 — optional MCP settings profile. Explicit opt-in only (--mcp);
   // default `aiwg use --provider muse` never touches user settings.
   if (fullDeploy && opts.mcp === true) {
-    deployMuseMcp(opts);
+    await deployMuseMcp(opts);
   }
 
   if (!opts.quiet) {
@@ -265,6 +266,10 @@ export async function postDeploy(targetDir, opts = {}) {
 }
 
 export async function deploy(opts = {}) {
+  return withRuleDeployment(opts, { name, paths, kernelSkillsPath }, deploySelected);
+}
+
+async function deploySelected(opts) {
   const {
     srcRoot,
     target,

package/tools/agents/providers/omp.mjs

@@ -4,7 +4,7 @@ import path from 'node:path';
 import { createHash } from 'node:crypto';
 import YAML from 'yaml';
 import { importImpl } from '../../_resolve-impl.mjs';
-import { collectFrameworkArtifacts, getAddonFiles, isKernelSkill, listMdFiles, listSkillDirs, normalizeDeploymentMode, resolveAiwgRoot } from './base.mjs';
+import { withRuleDeployment, collectFrameworkArtifacts, getAddonFiles, isKernelSkill, listMdFiles, listSkillDirs, normalizeDeploymentMode, resolveAiwgRoot } from './base.mjs';
 export const name = 'omp';
 export const aliases = ['oh-my-pi'];
 export const paths = { agents: '.omp/agents', commands: '.omp/prompts', skills: '.agents/skills', rules: '.omp/rules' };
@@ -131,7 +131,7 @@ function deployType(files, target, opts, type, transform) {
 }
 export const deployAgents = (files, target, opts = {}) => deployType(files, target, opts, 'agents', transformAgent);
 export const deployCommands = (files, target, opts = {}) => deployType(files, target, opts, 'prompts', transformCommand);
-export const deployRules = (files, target, opts = {}) => deployType(files, target, opts, 'rules', transformRule);
+export const deployRules = (files, target, opts = {}) => opts.ruleDelivery ? 0 : deployType(files, target, opts, 'rules', transformRule);
 export function deploySkills(dirs, target, opts = {}) {
   let count = 0; const seen = new Map(); const root = roots(target, opts);
   for (const dir of [...new Set(dirs)]) {
@@ -223,10 +223,20 @@ export function deployExtensionBridge(target, opts = {}) {
   return writeOwned(path.join(roots(target, opts).native, 'extensions/aiwg-bridge.ts'), fs.readFileSync(src, 'utf8'), src, opts, 'omp-extension');
 }
 export async function postDeploy(target, opts) {
-  if (opts.createAgentsMd || (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly)) createAgentsMd(target, opts.srcRoot, opts.dryRun);
+  if (opts.contextFiles !== false && (opts.createAgentsMd || (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly))) createAgentsMd(target, opts.srcRoot, opts.dryRun);
 }
 export const getFileExtension = () => '.md';
 export async function deploy(opts) {
+  return withRuleDeployment(opts, { name, paths, kernelSkillsPath }, async staged => {
+    let count = await deploySelected(staged);
+    for (const srcRoot of staged.additionalSources || []) {
+      count += await deploySelected({ ...staged, srcRoot });
+    }
+    return count;
+  });
+}
+
+async function deploySelected(opts) {
   const mode = normalizeDeploymentMode(opts.mode);
   const include = { includeAgents: true, includeCommands: opts.deployCommands || opts.commandsOnly, includeSkills: opts.deploySkills || opts.skillsOnly, includeRules: opts.deployRules || opts.rulesOnly };
   const directSource = ['agents', 'commands', 'skills', 'rules'].some(type => fs.existsSync(path.join(opts.srcRoot, type)));
@@ -251,7 +261,21 @@ export async function deploy(opts) {
   let count = 0;
   if (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly) count += deployAgents(selected('agents'), opts.target, opts);
   if (include.includeCommands && !opts.skillsOnly && !opts.rulesOnly) count += deployCommands(selected('commands'), opts.target, opts);
-  if (include.includeSkills && !opts.commandsOnly && !opts.rulesOnly) count += deploySkills(selected('skills'), opts.target, opts);
+  if (include.includeSkills && !opts.commandsOnly && !opts.rulesOnly) {
+    // Different frameworks may index same-named standard skills. With copying
+    // disabled they share only a stale-copy cleanup destination, not a native
+    // definition slot. Keep one cleanup pass; retain collision checks for every
+    // kernel skill and for explicitly copied standard skills.
+    const lazyNames = new Set();
+    const skills = selected('skills').filter(dir => {
+      if (opts.copyStandardSkills || isKernelSkill(dir)) return true;
+      const basename = path.basename(dir);
+      if (lazyNames.has(basename)) return false;
+      lazyNames.add(basename);
+      return true;
+    });
+    count += deploySkills(skills, opts.target, opts);
+  }
   if (include.includeRules && !opts.commandsOnly && !opts.skillsOnly) count += deployRules(selected('rules'), opts.target, opts);
   if (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly) count += deployExtensionBridge(opts.target, opts);
   await postDeploy(opts.target, opts); return count;

package/tools/agents/providers/opencode.mjs

@@ -23,7 +23,9 @@ const staticModelCatalog = _require('../../../agentic/code/providers/model-catal
 let fs;
 try { const gfs = _require('graceful-fs'); gfs.gracefulify(realFs); fs = realFs; } catch { fs = realFs; }
 import path from 'path';
+import { importImpl } from '../../_resolve-impl.mjs';
 import {
+  withRuleDeployment,
   ensureDir,
   listMdFiles,
   listMdFilesRecursive,
@@ -50,6 +52,7 @@ import {
   filterCommandsAgainstSkills,
   deploySoulCompanions
 } from './base.mjs';
+const { assertConfigDestination, writeConfigAtomic } = await importImpl(import.meta.url, 'mcp/config-file.mjs');
 const modelCatalog = loadRuntimeModelCatalog(staticModelCatalog);
 
 // ============================================================================
@@ -375,6 +378,7 @@ export function deploySkills(skillDirs, targetDir, opts) {
  * Deploy rules to .opencode/rule/
  */
 export function deployRules(ruleFiles, targetDir, opts) {
+  if (opts.ruleDelivery) return [];
   const destDir = path.join(targetDir, paths.rules);
   ensureDir(destDir, opts.dryRun);
   cleanupOldRuleFiles(destDir, opts);
@@ -394,9 +398,9 @@ export function deployRules(ruleFiles, targetDir, opts) {
  * Non-destructive: a malformed existing opencode.json is left untouched (warn,
  * skip) rather than overwritten.
  *
- * @returns {boolean} true if the config was changed (or would be, in dry-run)
+ * @returns {Promise<boolean>} true if the config was changed (or would be, in dry-run)
  */
-export function mergeOpenCodeInstructions(targetDir, opts = {}) {
+export async function mergeOpenCodeInstructions(targetDir, opts = {}) {
   const RULE_GLOB = `${paths.rules}*.md`; // .opencode/rule/*.md — opencode supports globs in instructions (verified in sst/opencode session/instruction.ts)
   // opencode auto-loads AGENTS.md/CLAUDE.md/CONTEXT.md but NOT AIWG.md, and the
   // generated AGENTS.md is a thin link-index that points to AIWG.md. The
@@ -407,6 +411,7 @@ export function mergeOpenCodeInstructions(targetDir, opts = {}) {
   const AIWG = 'AIWG.md';
   const wanted = [RULE_GLOB, AGENTS, AIWG];
   const configPath = path.join(targetDir, 'opencode.json');
+  await assertConfigDestination(configPath, targetDir);
 
   let config = {};
   if (fs.existsSync(configPath)) {
@@ -433,7 +438,7 @@ export function mergeOpenCodeInstructions(targetDir, opts = {}) {
 
   // Preserve operator-authored entries; append only what's missing, deduped.
   config.instructions = [...existing, ...missing];
-  fs.writeFileSync(configPath, `${JSON.stringify(config, null, 2)}\n`, 'utf8');
+  await writeConfigAtomic(configPath, `${JSON.stringify(config, null, 2)}\n`, { projectRoot: targetDir });
   if (opts.verbose) {
     console.log(`Wired ${missing.length} entr${missing.length === 1 ? 'y' : 'ies'} into opencode.json instructions[]: ${missing.join(', ')}`);
   }
@@ -503,7 +508,7 @@ export async function postDeploy(targetDir, opts) {
   initializeFrameworkWorkspace(targetDir, opts.mode, opts.dryRun, opts.srcRoot);
 
   if (opts.createAgentsMd) {
-    createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
+    if (opts.contextFiles !== false) createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
   }
 
   // PUW-035 (#1136): emit SDLC primary roles as TUI modes.
@@ -527,6 +532,10 @@ export function getFileExtension(type) {
 // ============================================================================
 
 export async function deploy(opts) {
+  return withRuleDeployment(opts, { name, paths, kernelSkillsPath }, deploySelected);
+}
+
+async function deploySelected(opts) {
   const {
     srcRoot,
     target,
@@ -637,7 +646,7 @@ export async function deploy(opts) {
     // #1548: rules on disk are inert unless referenced from opencode.json
     // instructions[]. Wire them so opencode actually loads them.
     try {
-      mergeOpenCodeInstructions(target, opts);
+      await mergeOpenCodeInstructions(target, opts);
     } catch (err) {
       console.warn(`Warning: could not wire opencode.json instructions[]: ${err && err.message ? err.message : err}`);
     }

package/tools/agents/providers/openhuman.mjs

@@ -173,7 +173,7 @@ export async function postDeploy(targetDir, opts) {
     opts.createAgentsMd ||
     (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly)
   ) {
-    createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
+    if (opts.contextFiles !== false) createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
   }
 }
 

package/tools/agents/providers/pi.mjs

@@ -128,7 +128,7 @@ export function createAgentsMd(target, srcRoot, dryRun) {
 
 export async function postDeploy(targetDir, opts) {
   if (opts.createAgentsMd || (!opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly)) {
-    createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
+    if (opts.contextFiles !== false) createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
   }
   if (!opts.quiet && (opts.deployCommands || opts.deploySkills || opts.commandsOnly || opts.skillsOnly)) {
     console.log('Pi project resources are trust-gated; approve the project with `/trust` (restart required) or use `pi --approve` for a reviewed one-shot run.');

package/tools/agents/providers/provider-prepare-coordinator.mjs

@@ -81,6 +81,10 @@ function prepareInChild({ job, attempt, sessionRoot, poolDescriptor, workerPath,
     let outcome;
     let killTimer;
     let timedOut = false;
+    let exited = false;
+    let disconnected = false;
+    let exitCode;
+    let exitSignal;
     const finish = () => {
       if (settled) return;
       settled = true;
@@ -107,19 +111,30 @@ function prepareInChild({ job, attempt, sessionRoot, poolDescriptor, workerPath,
     timer.unref?.();
     child.once('error', error => {
       // A spawn failure has no operating-system child to reap. Every error
-      // after a pid is assigned still waits for the exit event below.
+      // after a pid is assigned still waits for exit and IPC disconnect below.
       if (!child.pid) { outcome = { error }; finish(); }
       else stop(error);
     });
-    // Settle only after the operating system reports process exit. This keeps
-    // every worker in activeChildren until it is confirmed gone, including workers
-    // that send a response and retain an unexpected live handle.
-    child.once('exit', (code, signal) => {
-      if (outcome?.value && (code !== 0 || signal)) {
-        outcome = { error: new Error(`Provider preparation worker exited ${signal || code || 'without status'} after responding for ${job.provider}`) };
+    // Exit confirms termination; disconnect confirms pending IPC messages have
+    // drained. Either event can arrive first. Keep workers active until both,
+    // including workers that respond and retain an unexpected live handle.
+    const finishAfterDisconnectAndExit = () => {
+      if (!exited || !disconnected) return;
+      if (outcome?.value && (exitCode !== 0 || exitSignal)) {
+        outcome = { error: new Error(`Provider preparation worker exited ${exitSignal || exitCode || 'without status'} after responding for ${job.provider}`) };
       }
-      if (!outcome) outcome = { error: new Error(`${timedOut ? 'Provider preparation timed out' : `Provider preparation worker exited ${code ?? 'without status'}`} for ${job.provider}${stderrBytes ? `: ${Buffer.concat(stderr).toString('utf8').trim()}` : ''}`) };
+      if (!outcome) outcome = { error: new Error(`${timedOut ? 'Provider preparation timed out' : `Provider preparation worker exited ${exitCode ?? 'without status'}`} for ${job.provider}${stderrBytes ? `: ${Buffer.concat(stderr).toString('utf8').trim()}` : ''}`) };
       finish();
+    };
+    child.once('exit', (code, signal) => {
+      exited = true;
+      exitCode = code;
+      exitSignal = signal;
+      finishAfterDisconnectAndExit();
+    });
+    child.once('disconnect', () => {
+      disconnected = true;
+      finishAfterDisconnectAndExit();
     });
     child.once('message', response => {
       try {
@@ -137,7 +152,7 @@ function prepareInChild({ job, attempt, sessionRoot, poolDescriptor, workerPath,
         if (response.type !== 'prepared') throw new Error('Invalid provider preparation worker response type');
         outcome = { value: { detached: readPlan(response, expectedPlan), scratch, attempt } };
         // Closing the IPC channel lets the single-request worker exit normally;
-        // the exit handler above confirms termination before exposing its plan.
+        // the exit/disconnect handlers confirm termination and IPC drainage.
         if (child.connected) { try { child.disconnect(); } catch {} }
       } catch (error) { stop(error); }
     });
@@ -200,6 +215,10 @@ export async function prepareProviderDeployments({
     removeSession();
   };
   const prepareOne = async (index, attempt = 0) => {
+    // Never start a worker once the session is closed: it would outlive
+    // cleanup, and anything it writes (e.g. the shared binding-index cache)
+    // would land after its owner removed it.
+    if (closed) throw new Error('Provider preparation session is closed');
     const raw = await prepareInChild({ job: jobs[index], attempt, sessionRoot, poolDescriptor, workerPath, workerEnv, activeChildren, timeoutMs });
     const plan = transaction.adopt(raw.detached, {
       scratch: raw.scratch,
@@ -212,6 +231,7 @@ export async function prepareProviderDeployments({
   try {
     await Promise.all(Array.from({ length: concurrency }, async () => {
       for (;;) {
+        if (closed) return;
         const index = next++;
         if (index >= jobs.length) return;
         prepared[index] = await prepareOne(index);