@ghl-ai/aw 0.1.71-beta.0 → 0.1.71

package/cli.mjs

@@ -153,8 +153,8 @@ function printHelp() {
 
     sec('Upload'),
     cmd('aw push', 'Push all modified files (creates one PR)'),
-    cmd('aw push --aw-docs-only', 'Publish generated .aw_docs companions and print share links'),
     cmd('aw push --aw-docs-only --feature <slug>', 'Publish one .aw_docs feature folder and print share links'),
+    cmd('aw push --aw-docs-only --all', 'Publish ALL .aw_docs feature folders (explicit opt-in; otherwise scope with --feature)'),
     cmd('aw push <path>', 'Push file, folder, or namespace to registry'),
     cmd('aw push-rules [path]', 'Push platform rules to platform-docs'),
     cmd('aw push --dry-run [path]', 'Preview what would be pushed'),
@@ -240,7 +240,11 @@ export async function run(argv) {
     process.exit(0);
   }
 
-  if (args['--help'] && !command) {
+  // Help must short-circuit BEFORE dispatching any command. Otherwise a
+  // command combined with --help (e.g. `aw push --help`) skips this gate and
+  // executes the command — which is how `aw push --help` triggered a real
+  // publish instead of printing help.
+  if (args['--help']) {
     printHelp();
     process.exit(0);
   }

package/commands/doctor.mjs

@@ -1369,7 +1369,8 @@ export async function doctorCommand(args = {}) {
   fmt.note(formatFixPlan(plan), 'Auto-Fix Plan');
 
   if (dryRun) {
-    fmt.outro('⟁  aw doctor auto-fix dry run complete');
+    setDoctorExitCode(report);
+    fmt.outro(`⟁  aw doctor auto-fix dry run complete (${report.status.toUpperCase()})`);
     return;
   }
 

package/commands/push.mjs

@@ -188,6 +188,20 @@ function resolveAwDocsScope(input, featureFlag) {
   return flagScope || inputScope;
 }
 
+// A docs-only publish with no resolved scope would sweep EVERY
+// .aw_docs/features/** folder into the shared docs repo. Require an explicit
+// --all opt-in so an unscoped invocation (or one that lands here accidentally)
+// fails closed instead of mass-publishing unrelated feature folders.
+function assertDocsOnlyScopeOrAll(scope, all) {
+  if (!scope && all !== true) {
+    throw new Error(
+      'Refusing to publish ALL .aw_docs/features/** at once. Pass --feature <slug> ' +
+      '(or a .aw_docs/features/<slug> path) to publish one feature folder, or pass ' +
+      '--all to publish everything intentionally.'
+    );
+  }
+}
+
 function collectProjectAwDocs(cwd, home, scope = null) {
   const projectRoot = getProjectRoot(cwd, home);
   const source = join(projectRoot, AW_DOCS_DIR);
@@ -1284,6 +1298,7 @@ export async function pushCommand(args) {
   if (docsOnly) {
     try {
       const scope = resolveAwDocsScope(input, args['--feature']);
+      assertDocsOnlyScopeOrAll(scope, args['--all'] === true);
       const result = await publishProjectAwDocs(cwd, HOME, dryRun, scope);
       if (!result.hasDocs) {
         fmt.cancel(scope
@@ -1608,3 +1623,10 @@ function groupBy(arr, key) {
   }
   return result;
 }
+
+export const __test__ = {
+  featureScopeFromInput,
+  awDocsFeatureScope,
+  resolveAwDocsScope,
+  assertDocsOnlyScopeOrAll,
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ghl-ai/aw",
-  "version": "0.1.71-beta.0",
+  "version": "0.1.71",
   "description": "Agentic Workspace CLI — pull, push & manage agents, skills and commands from the registry",
   "type": "module",
   "bin": {