@aiwg/cli 2026.9.21 → 2026.10.0

package/tools/agents/providers/factory.mjs

@@ -785,8 +785,16 @@ export function deployFactoryHooks(dryRun) {
       fs.mkdirSync(settingsDir, { recursive: true });
     }
 
-    // Since we've successfully parsed the JSON, safe to write back
-    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n', 'utf8');
+    // Parsed successfully, so the merge is safe to write back. It is written
+    // as canonical JSON, which drops operator comments and formatting, so
+    // keep a timestamped copy of a hand-edited user-global file first.
+    const updatedContent = JSON.stringify(settings, null, 2) + '\n';
+    if (hasExistingFile && originalContent !== JSON.stringify(JSON.parse(stripJsonComments(originalContent)), null, 2) + '\n') {
+      const backupPath = `${settingsPath}.aiwg-backup-${new Date().toISOString().replace(/[:.]/g, '-')}`;
+      fs.copyFileSync(settingsPath, backupPath);
+      console.log(`Backed up ${settingsPath} to ${backupPath} (comments and formatting are not preserved)`);
+    }
+    fs.writeFileSync(settingsPath, updatedContent, 'utf8');
     console.log(`Deployed SessionStart hook to ${settingsPath}`);
     console.log('Hook: aiwg sync --dry-run --quiet (runs on every new Factory session)');
   }

package/tools/agents/providers/muse-hooks.mjs

@@ -53,41 +53,13 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
+import { stripJsonComments } from './base.mjs';
 import { resolveMuseXdgSkillsDir, museXdgSkillsDirRemediation } from './muse-paths.mjs';
 
 // ---------------------------------------------------------------------------
 // Shared JSON helpers
 // ---------------------------------------------------------------------------
 
-/**
- * Strip JSON comments (JSONC) before parsing. Comments are *read* tolerance
- * only: merged files are written back as canonical JSON. The scanner tracks
- * string literals so `//` in a URL or `/*` in a glob matcher is preserved.
- */
-function stripJsonComments(jsonc) {
-  const text = String(jsonc);
-  let out = '';
-  let i = 0;
-  while (i < text.length) {
-    const ch = text[i];
-    if (ch === '"') {
-      let j = i + 1;
-      while (j < text.length && text[j] !== '"') j += text[j] === '\\' ? 2 : 1;
-      out += text.slice(i, j + 1);
-      i = j + 1;
-    } else if (ch === '/' && text[i + 1] === '/') {
-      while (i < text.length && text[i] !== '\n') i++;
-    } else if (ch === '/' && text[i + 1] === '*') {
-      const end = text.indexOf('*/', i + 2);
-      i = end === -1 ? text.length : end + 2;
-    } else {
-      out += ch;
-      i++;
-    }
-  }
-  return out;
-}
-
 /**
  * Parse a JSON/JSONC document, failing closed with a coded error.
  */

package/tools/agents/providers/muse.mjs

@@ -1,5 +1,5 @@
 /**
- * Muse Code provider (experimental).
+ * Muse Code provider (stable).
  *
  * Muse-native skill roots (docs/architecture/adr-muse-provider-target.md):
  *   - Project scope: `<target>/.agents/skills/<id>/SKILL.md`
@@ -221,7 +221,10 @@ function assertSafeAgentsMd(target) {
 }
 
 export async function postDeploy(targetDir, opts = {}) {
-  const fullDeploy = !opts.commandsOnly && !opts.skillsOnly && !opts.rulesOnly;
+  // `aiwg use all` deploys in kernel-only mode, which deploy-agents also
+  // reports as skillsOnly. That is still a whole-provider deploy, so the
+  // bridge, managed hooks, and an opted-in MCP profile must not be skipped.
+  const fullDeploy = !opts.commandsOnly && !opts.rulesOnly && (!opts.skillsOnly || opts.kernelOnly === true);
   if (opts.createAgentsMd || fullDeploy) {
     createAgentsMd(targetDir, opts.srcRoot, opts.dryRun);
   }
@@ -273,7 +276,7 @@ export async function deploy(opts = {}) {
   } = opts;
 
   if (!opts.quiet) {
-    console.log(`\n=== Muse Code Provider (experimental) ===`);
+    console.log(`\n=== Muse Code Provider (stable) ===`);
     console.log(`Target: ${target}`);
     console.log(`Mode: ${mode}`);
     if (opts.dryRun) console.log('Dry-run: no filesystem mutations');