@aperant/framework 0.8.7 → 0.10.0

package/dist/cli/consistency/rules/r5-verdict-consistency.mjs

@@ -3,12 +3,13 @@
  * consistency/rules/r5-verdict-consistency.mjs — R5 (C15).
  *
  * Fails when:
- *   - qa.verdict === 'approved' AND review has >=1 unresolved critical finding
+ *   - qa.verdict === 'approved' or 'approved-with-notes' AND review has >=1
+ *     unresolved critical or major finding
  *   - qa.verdict === 'rejected' AND qa has no findings at all AND review has
  *     zero unresolved findings (rejected-without-evidence)
  *
- * `approved-with-notes` is the escape hatch — passes regardless of unresolved
- * criticals in review.json.
+ * `approved-with-notes` no longer escapes unresolved critical or major
+ * findings (G42 Phase 1). It still passes for lower-severity issues.
  *
  * Severity: error. Stages: verify, ship.
  */
@@ -24,21 +25,22 @@ const rule = {
         }
         const verdict = parsed.qa.verdict ?? 'unknown';
         const reviewFindings = parsed?.review?.findings ?? [];
-        const unresolvedCritical = reviewFindings.filter((f) => f.severity === 'critical' && f.status !== 'fixed');
-        if (verdict === 'approved' && unresolvedCritical.length > 0) {
+        const unresolvedBlocking = reviewFindings.filter((f) => (f.severity === 'critical' || f.severity === 'major') && f.status !== 'fixed');
+        if ((verdict === 'approved' || verdict === 'approved-with-notes') &&
+            unresolvedBlocking.length > 0) {
             return {
                 status: 'fail',
                 drift: [
                     {
                         verdict,
-                        blockers: unresolvedCritical.map((f) => ({
+                        blockers: unresolvedBlocking.map((f) => ({
                             id: f.id,
                             title: f.title,
                         })),
-                        reason: 'approved verdict with unresolved critical finding(s)',
+                        reason: 'approved/approved-with-notes verdict with unresolved critical or major finding(s) (G42 Phase 1)',
                     },
                 ],
-                reason: `approved verdict contradicts ${unresolvedCritical.length} unresolved critical finding(s)`,
+                reason: `approved/approved-with-notes verdict contradicts ${unresolvedBlocking.length} unresolved critical/major finding(s)`,
             };
         }
         if (verdict === 'rejected') {

package/dist/cli/consistency/rules/r5-verdict-consistency.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"r5-verdict-consistency.mjs","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r5-verdict-consistency.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,IAAI,GAAG;IACZ,EAAE,EAAE,wBAAwB;IAC5B,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,wDAAwD;IACrE,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE;QACrB,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAA;QAC5E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,SAAS,CAAA;QAC9C,MAAM,cAAc,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAA;QACrD,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CACxD,CAAA;QACD,IAAI,OAAO,KAAK,UAAU,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE;oBACN;wBACC,OAAO;wBACP,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BACxC,EAAE,EAAE,CAAC,CAAC,EAAE;4BACR,KAAK,EAAE,CAAC,CAAC,KAAK;yBACd,CAAC,CAAC;wBACH,MAAM,EAAE,sDAAsD;qBAC9D;iBACD;gBACD,MAAM,EAAE,gCAAgC,kBAAkB,CAAC,MAAM,iCAAiC;aAClG,CAAA;QACF,CAAC;QACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAA;YAC3C,MAAM,mBAAmB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAA;YAC5E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACrD,OAAO;oBACN,MAAM,EAAE,MAAM;oBACd,KAAK,EAAE;wBACN;4BACC,OAAO;4BACP,QAAQ,EAAE,EAAE;4BACZ,MAAM,EAAE,6CAA6C;yBACrD;qBACD;oBACD,MAAM,EAAE,6CAA6C;iBACrD,CAAA;YACF,CAAC;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,WAAW,OAAO,qCAAqC;SAC/D,CAAA;IACF,CAAC;CACD,CAAA;AAED,YAAY,CAAC,IAAI,CAAC,CAAA;AAClB,eAAe,IAAI,CAAA"}
+{"version":3,"file":"r5-verdict-consistency.mjs","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r5-verdict-consistency.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,IAAI,GAAG;IACZ,EAAE,EAAE,wBAAwB;IAC5B,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,wDAAwD;IACrE,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE;QACrB,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAA;QAC5E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,SAAS,CAAA;QAC9C,MAAM,cAAc,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAA;QACrD,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CACpF,CAAA;QACD,IACC,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,qBAAqB,CAAC;YAC7D,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAC5B,CAAC;YACF,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE;oBACN;wBACC,OAAO;wBACP,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BACxC,EAAE,EAAE,CAAC,CAAC,EAAE;4BACR,KAAK,EAAE,CAAC,CAAC,KAAK;yBACd,CAAC,CAAC;wBACH,MAAM,EACL,iGAAiG;qBAClG;iBACD;gBACD,MAAM,EAAE,oDAAoD,kBAAkB,CAAC,MAAM,uCAAuC;aAC5H,CAAA;QACF,CAAC;QACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAA;YAC3C,MAAM,mBAAmB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAA;YAC5E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACrD,OAAO;oBACN,MAAM,EAAE,MAAM;oBACd,KAAK,EAAE;wBACN;4BACC,OAAO;4BACP,QAAQ,EAAE,EAAE;4BACZ,MAAM,EAAE,6CAA6C;yBACrD;qBACD;oBACD,MAAM,EAAE,6CAA6C;iBACrD,CAAA;YACF,CAAC;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,WAAW,OAAO,qCAAqC;SAC/D,CAAA;IACF,CAAC;CACD,CAAA;AAED,YAAY,CAAC,IAAI,CAAC,CAAA;AAClB,eAAe,IAAI,CAAA"}

package/dist/cli/gate/gates/review-clean.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"review-clean.d.mts","sourceRoot":"","sources":["../../../../src/cli/gate/gates/review-clean.mjs"],"names":[],"mappings":";;;;;;IA4BqB,+CAAwC;IAC5D;;;;;;;;;;;;;;;;OAiDC"}
+{"version":3,"file":"review-clean.d.mts","sourceRoot":"","sources":["../../../../src/cli/gate/gates/review-clean.mjs"],"names":[],"mappings":";;;;;;IA8BqB,+CAAwC;IAC5D;;;;;;;;;;;;;;;;OAiDC"}

package/dist/cli/gate/gates/review-clean.mjs

@@ -8,7 +8,9 @@
  * shapes the reviewer skill writes: `fixed: true`, `resolved: true`,
  * `status: "fixed"` (string), and `status: "deferred-*"` variants
  * (BUG-009). Fails if any post-normalization finding is severity
- * critical|major AND status is neither `fixed` nor `deferred`.
+ * critical|major AND status is not `fixed`. `deferred` no longer clears
+ * blocking findings (G42 Phase 1 — only `--force --reason` override may
+ * bypass blocking severity deferrals).
  */
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
@@ -52,7 +54,7 @@ const gate = {
         // shapes the reviewer skill writes; this delegation closes that
         // hole and picks up `deferred-*` variants for free.
         const { findings: normalized } = parseReview(doc);
-        const unresolved = normalized.filter((f) => POST_NORM_BLOCKING.has(f.severity) && f.status !== 'fixed' && f.status !== 'deferred');
+        const unresolved = normalized.filter((f) => POST_NORM_BLOCKING.has(f.severity) && f.status !== 'fixed');
         if (unresolved.length > 0) {
             return {
                 status: 'fail',

package/dist/cli/gate/gates/review-clean.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"review-clean.mjs","sourceRoot":"","sources":["../../../../src/cli/gate/gates/review-clean.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,uEAAuE;AACvE,oEAAoE;AACpE,aAAa;AACb,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;AAEzD,MAAM,IAAI,GAAG;IACZ,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,2EAA2E;IACxF,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,eAAe;IAC5D,KAAK,CAAC,KAAK,CAAC,GAAG;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,iDAAiD;gBACzD,MAAM;aACN,CAAA;QACF,CAAC;QACD,IAAI,GAAG,CAAA;QACP,IAAI,CAAC;YACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,+BAA+B,GAAG,CAAC,OAAO,EAAE;gBACpD,MAAM;aACN,CAAA;QACF,CAAC;QACD,8DAA8D;QAC9D,6DAA6D;QAC7D,mEAAmE;QACnE,8DAA8D;QAC9D,gEAAgE;QAChE,oDAAoD;QACpD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QACjD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAC5F,CAAA;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,sDAAsD;gBAClF,QAAQ,EAAE;oBACT,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI;wBAChB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;qBACtB,CAAC,CAAC;iBACH;gBACD,MAAM;aACN,CAAA;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,0DAA0D,UAAU,CAAC,MAAM,SAAS;YAC5F,MAAM;SACN,CAAA;IACF,CAAC;CACD,CAAA;AAED,YAAY,CAAC,IAAI,CAAC,CAAA;AAClB,eAAe,IAAI,CAAA"}
+{"version":3,"file":"review-clean.mjs","sourceRoot":"","sources":["../../../../src/cli/gate/gates/review-clean.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,uEAAuE;AACvE,oEAAoE;AACpE,aAAa;AACb,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;AAEzD,MAAM,IAAI,GAAG;IACZ,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,2EAA2E;IACxF,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,eAAe;IAC5D,KAAK,CAAC,KAAK,CAAC,GAAG;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,iDAAiD;gBACzD,MAAM;aACN,CAAA;QACF,CAAC;QACD,IAAI,GAAG,CAAA;QACP,IAAI,CAAC;YACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,+BAA+B,GAAG,CAAC,OAAO,EAAE;gBACpD,MAAM;aACN,CAAA;QACF,CAAC;QACD,8DAA8D;QAC9D,6DAA6D;QAC7D,mEAAmE;QACnE,8DAA8D;QAC9D,gEAAgE;QAChE,oDAAoD;QACpD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QACjD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CACjE,CAAA;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,sDAAsD;gBAClF,QAAQ,EAAE;oBACT,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI;wBAChB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;qBACtB,CAAC,CAAC;iBACH;gBACD,MAAM;aACN,CAAA;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,0DAA0D,UAAU,CAAC,MAAM,SAAS;YAC5F,MAAM;SACN,CAAA;IACF,CAAC;CACD,CAAA;AAED,YAAY,CAAC,IAAI,CAAC,CAAA;AAClB,eAAe,IAAI,CAAA"}

package/dist/cli/install/mcp-provision.d.mts

@@ -0,0 +1,26 @@
+/**
+ * Provision MCP servers + skills for the selected host CLIs.
+ *
+ * @param {Object} opts
+ * @param {string} opts.targetDir — project root being installed into
+ * @param {string[]} opts.selectedRuntimes — the runtimes the user selected
+ * @param {object} opts.config — the effective merged project config
+ * @param {string} opts.frameworkRoot — absolute path to packages/framework (for vendored skill resolution)
+ * @returns {{status: 'ok'|'disabled'|'error', writes?: Array<{host:string, spec_id:string, kind:string, action:string}>, reason?: string}}
+ */
+export function provisionMcpConfig(opts: {
+    targetDir: string;
+    selectedRuntimes: string[];
+    config: object;
+    frameworkRoot: string;
+}): {
+    status: "ok" | "disabled" | "error";
+    writes?: Array<{
+        host: string;
+        spec_id: string;
+        kind: string;
+        action: string;
+    }>;
+    reason?: string;
+};
+//# sourceMappingURL=mcp-provision.d.mts.map

package/dist/cli/install/mcp-provision.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-provision.d.mts","sourceRoot":"","sources":["../../../src/cli/install/mcp-provision.mjs"],"names":[],"mappings":"AAgJA;;;;;;;;;GASG;AACH,yCANG;IAAqB,SAAS,EAAtB,MAAM;IACS,gBAAgB,EAA/B,MAAM,EAAE;IACK,MAAM,EAAnB,MAAM;IACO,aAAa,EAA1B,MAAM;CACd,GAAU;IAAC,MAAM,EAAE,IAAI,GAAC,UAAU,GAAC,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAC,IAAI,EAAC,MAAM,CAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAC,IAAI,EAAC,MAAM,CAAC;QAAC,MAAM,EAAC,MAAM,CAAA;KAAC,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAC,CAmFzI"}

package/dist/cli/install/mcp-provision.mjs

@@ -0,0 +1,281 @@
+/**
+ * install/mcp-provision.mjs — TOFU install-time MCP-server + skill provisioner.
+ *
+ * Called from cmdInit (the only call site — the QUICK fast-path never invokes
+ * init, so the Fast Path Guarantee is structurally untouched). Detects the
+ * project's runtime, then for each selected host CLI that supports the action:
+ *
+ *   - kind 'mcp-server' (electron/tauri) → write the server into the host's
+ *     MCP config (claude → .mcp.json JSON merge; codex → .codex/config.toml
+ *     TOML upsert).
+ *   - kind 'skill' (agent-browser) → copy the vendored SKILL.md into the
+ *     host's skill dir (claude → .claude/skills/; codex → .agents/skills/).
+ *
+ * Every write is TOFU/idempotent (ID-05): if the target server id / table /
+ * skill file already exists, SKIP (never diff/merge/overwrite) — this is the
+ * must-not-clobber invariant for a hand-authored electron
+ * SCREENSHOT_ENCRYPTION_KEY (US-3) and a user-edited agent-browser skill
+ * (US-6). Each action appends one audit line to .aperant/events/{date}.jsonl.
+ *
+ * Gated behind config.verification.provision_mcp (default true) so users can
+ * opt out. Never throws — wraps the body in try/catch → {status:'error'}.
+ */
+import { copyFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { basename, dirname, join, resolve } from 'node:path';
+import { appendJsonl, atomicWriteJson, atomicWriteText } from '../util/atomic-write.mjs';
+import { dailyEventsPath } from '../util/events-path.mjs';
+import { capabilityToProvisionIds, PROVISION_SPECS } from './mcp-server-specs.mjs';
+import { loadRuntimeCapabilities } from './runtime-detect.mjs';
+import { upsertMcpServerToml } from './toml-merge.mjs';
+/**
+ * Per-host writer registry (ID-07, ID-08). v1 = claude + codex. The MCP
+ * config path AND skill dir are EXPLICIT per host — neither is derived from
+ * the runtime's installRoot (Codex's MCP path .codex/config.toml diverges
+ * from its skill dir .agents/skills/). Adding gemini/opencode later = one
+ * entry each.
+ *
+ * @type {Record<string, {mcpFormat: 'json'|'toml', mcpConfigPath: string, skillDir: string}>}
+ */
+const HOST_PROVISION_WRITERS = {
+    claude: { mcpFormat: 'json', mcpConfigPath: '.mcp.json', skillDir: '.claude/skills' },
+    codex: { mcpFormat: 'toml', mcpConfigPath: '.codex/config.toml', skillDir: '.agents/skills' },
+};
+/**
+ * Substitute the per-project socket basename into the tauri launcher
+ * template, deriving uniqueness from the project dir basename.
+ *
+ * @param {string} template
+ * @param {string} targetDir
+ * @returns {string}
+ */
+function renderTauriLauncher(template, targetDir) {
+    const slug = basename(resolve(targetDir))
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '') || 'tauri';
+    return template.replaceAll('{{PROJECT_SOCKET}}', slug);
+}
+/**
+ * Write the electron/tauri MCP server into a Claude `.mcp.json`. JSON merge:
+ * read-or-{}, ensure mcpServers, SKIP if the server id already exists, else
+ * insert {type:'stdio', command, args, env?} preserving all sibling keys.
+ *
+ * TOFU non-clobber (ID-05): if the existing file fails to parse OR parses to
+ * a non-plain-object root (array / null / primitive), do NOT overwrite it —
+ * return `skipped_unsafe` with a reason so the caller can audit it and leave
+ * the file byte-identical. (`typeof [] === 'object'` is why arrays must be
+ * excluded explicitly: a `.mcp.json` containing `[]` would otherwise pass the
+ * object guard, drop the user's content on stringify, and report `written`.)
+ *
+ * @param {string} configPath — absolute path to .mcp.json
+ * @param {string} serverId
+ * @param {import('./mcp-server-specs.mjs').McpServerSpec} spec
+ * @returns {{action: 'written'|'skipped'|'skipped_unsafe', reason?: string}}
+ */
+function writeClaudeMcpServer(configPath, serverId, spec) {
+    let config = {};
+    if (existsSync(configPath)) {
+        try {
+            config = JSON.parse(readFileSync(configPath, 'utf-8'));
+        }
+        catch {
+            // Malformed JSON: overwriting would erase every hand-authored MCP
+            // server. Leave the file untouched and surface it.
+            return { action: 'skipped_unsafe', reason: 'malformed_json' };
+        }
+        if (config === null || typeof config !== 'object' || Array.isArray(config)) {
+            // Non-plain-object root (array / null / primitive): same non-clobber
+            // rule — never overwrite content we cannot safely merge into.
+            return { action: 'skipped_unsafe', reason: 'non_object_root' };
+        }
+    }
+    if (config.mcpServers === null || typeof config.mcpServers !== 'object') {
+        config.mcpServers = {};
+    }
+    // TOFU: never clobber a hand-authored server id.
+    if (Object.hasOwn(config.mcpServers, serverId))
+        return { action: 'skipped' };
+    const entry = { type: 'stdio', command: spec.command, args: spec.args ?? [] };
+    if (spec.env && Object.keys(spec.env).length > 0)
+        entry.env = spec.env;
+    config.mcpServers[serverId] = entry;
+    atomicWriteJson(configPath, config);
+    return { action: 'written' };
+}
+/**
+ * Write the electron/tauri MCP server into a Codex `.codex/config.toml`.
+ *
+ * @param {string} configPath — absolute path to .codex/config.toml
+ * @param {string} serverId
+ * @param {import('./mcp-server-specs.mjs').McpServerSpec} spec
+ * @returns {{action: 'written'|'skipped'}}
+ */
+function writeCodexMcpServer(configPath, serverId, spec) {
+    const existing = existsSync(configPath) ? readFileSync(configPath, 'utf-8') : '';
+    const { content, action } = upsertMcpServerToml(existing, serverId, {
+        command: spec.command,
+        args: spec.args ?? [],
+        ...(spec.env && Object.keys(spec.env).length > 0 ? { env: spec.env } : {}),
+    });
+    if (action === 'written')
+        atomicWriteText(configPath, content);
+    return { action };
+}
+/**
+ * Copy the vendored skill into a host skill dir. TOFU: never overwrite an
+ * existing agent-browser/SKILL.md (a user may have edited it).
+ *
+ * @param {string} skillDestPath — absolute <skillDir>/<skillId>/SKILL.md
+ * @param {string} vendoredSkillPath — absolute source path
+ * @returns {'written'|'skipped'}
+ */
+function copySkill(skillDestPath, vendoredSkillPath) {
+    if (existsSync(skillDestPath))
+        return 'skipped';
+    mkdirSync(dirname(skillDestPath), { recursive: true });
+    // copyFileSync is fine here — atomicWriteText would re-read; the dest is
+    // guaranteed absent (TOFU check above) so there is no clobber risk.
+    copyFileSync(vendoredSkillPath, skillDestPath);
+    return 'written';
+}
+/**
+ * Provision MCP servers + skills for the selected host CLIs.
+ *
+ * @param {Object} opts
+ * @param {string} opts.targetDir — project root being installed into
+ * @param {string[]} opts.selectedRuntimes — the runtimes the user selected
+ * @param {object} opts.config — the effective merged project config
+ * @param {string} opts.frameworkRoot — absolute path to packages/framework (for vendored skill resolution)
+ * @returns {{status: 'ok'|'disabled'|'error', writes?: Array<{host:string, spec_id:string, kind:string, action:string}>, reason?: string}}
+ */
+export function provisionMcpConfig(opts) {
+    const targetDir = resolve(opts.targetDir);
+    const config = opts.config ?? {};
+    const selected = Array.isArray(opts.selectedRuntimes) ? opts.selectedRuntimes : [];
+    const frameworkRoot = opts.frameworkRoot;
+    try {
+        // (1) Opt-out gate (default true).
+        if (config?.verification?.provision_mcp === false) {
+            appendEvent(targetDir, 'mcp-provision.disabled', {
+                reason: 'verification.provision_mcp=false',
+            });
+            return { status: 'disabled' };
+        }
+        // (2) Detect runtime → derive spec ids.
+        const runtimeCaps = loadRuntimeCapabilities(targetDir);
+        const specIds = capabilityToProvisionIds(runtimeCaps);
+        /** @type {Array<{host:string, spec_id:string, kind:string, action:string}>} */
+        const writes = [];
+        // Iterate every (selected host, spec) pair.
+        for (const host of selected) {
+            const writer = HOST_PROVISION_WRITERS[host];
+            if (!writer) {
+                // Selected host with no writer (gemini/opencode/... in v1) — record
+                // once as unsupported_host, no write.
+                writes.push({ host, spec_id: '*', kind: '*', action: 'unsupported_host' });
+                appendEvent(targetDir, 'mcp-provision.unsupported_host', { host });
+                continue;
+            }
+            for (const specId of specIds) {
+                const spec = PROVISION_SPECS[specId];
+                if (!spec)
+                    continue;
+                if (spec.kind === 'mcp-server') {
+                    const configPath = join(targetDir, writer.mcpConfigPath);
+                    const { action, reason } = writer.mcpFormat === 'json'
+                        ? writeClaudeMcpServer(configPath, specId, spec)
+                        : writeCodexMcpServer(configPath, specId, spec);
+                    writes.push({ host, spec_id: specId, kind: 'mcp-server', action });
+                    appendEvent(targetDir, `mcp-provision.${action}`, {
+                        host,
+                        spec_id: specId,
+                        config_path: writer.mcpConfigPath,
+                        ...(reason ? { reason } : {}),
+                    });
+                    // (5) tauri needs its launcher script — only provision it once the
+                    // MCP config entry is actually written, so a TOFU-skipped or
+                    // skipped_unsafe config never leaves an orphan launcher + a
+                    // misleading audit line.
+                    if (spec.requiresLauncherScript && frameworkRoot && action === 'written') {
+                        provisionTauriLauncher(targetDir, frameworkRoot, writes);
+                    }
+                }
+                else if (spec.kind === 'skill') {
+                    if (!frameworkRoot)
+                        continue;
+                    const vendoredSkillPath = resolve(frameworkRoot, spec.vendoredSkillRelPath);
+                    const skillDestPath = join(targetDir, writer.skillDir, spec.skillId, 'SKILL.md');
+                    const action = copySkill(skillDestPath, vendoredSkillPath);
+                    writes.push({ host, spec_id: specId, kind: 'skill', action });
+                    appendEvent(targetDir, `skill-provision.${action}`, {
+                        host,
+                        spec_id: specId,
+                        skill_dir: writer.skillDir,
+                    }, 'skill_provision');
+                }
+            }
+        }
+        return { status: 'ok', writes };
+    }
+    catch (e) {
+        return { status: 'error', reason: e instanceof Error ? e.message : String(e) };
+    }
+}
+/**
+ * Copy the tauri launcher template into the project's scripts/ dir (TOFU).
+ * Records its own audit line; appends to `writes` with a synthetic host.
+ *
+ * @param {string} targetDir
+ * @param {string} frameworkRoot
+ * @param {Array<{host:string, spec_id:string, kind:string, action:string}>} writes
+ */
+function provisionTauriLauncher(targetDir, frameworkRoot, writes) {
+    const destPath = join(targetDir, 'scripts', 'tauri-mcp.sh');
+    // Already recorded a launcher write/skip for this run? Only provision once.
+    if (writes.some((w) => w.kind === 'launcher'))
+        return;
+    if (existsSync(destPath)) {
+        writes.push({ host: '-', spec_id: 'tauri', kind: 'launcher', action: 'skipped' });
+        appendEvent(targetDir, 'mcp-provision.skipped', {
+            host: '-',
+            spec_id: 'tauri',
+            launcher: 'scripts/tauri-mcp.sh',
+        });
+        return;
+    }
+    const templatePath = resolve(frameworkRoot, 'drivers/tauri/scripts/tauri-mcp.sh');
+    const template = readFileSync(templatePath, 'utf-8');
+    atomicWriteText(destPath, renderTauriLauncher(template, targetDir));
+    writes.push({ host: '-', spec_id: 'tauri', kind: 'launcher', action: 'written' });
+    appendEvent(targetDir, 'mcp-provision.written', {
+        host: '-',
+        spec_id: 'tauri',
+        launcher: 'scripts/tauri-mcp.sh',
+    });
+}
+/**
+ * Append one audit line to .aperant/events/{date}.jsonl, mirroring the
+ * daily-events shape. `kind` discriminates the provisioning channel:
+ * `mcp_provision` for MCP-server + launcher events, `skill_provision` for
+ * skill-copy events.
+ *
+ * @param {string} targetDir
+ * @param {string} op — e.g. mcp-provision.written, skill-provision.skipped
+ * @param {Record<string, unknown>} [extra]
+ * @param {string} [kind] — audit channel (default `mcp_provision`)
+ */
+function appendEvent(targetDir, op, extra = {}, kind = 'mcp_provision') {
+    try {
+        const path = dailyEventsPath(targetDir);
+        appendJsonl(path, {
+            ts: new Date().toISOString(),
+            kind,
+            op,
+            ...extra,
+        });
+    }
+    catch {
+        // Audit is best-effort — never fail provisioning on a log write error.
+    }
+}
+//# sourceMappingURL=mcp-provision.mjs.map

package/dist/cli/install/mcp-provision.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-provision.mjs","sourceRoot":"","sources":["../../../src/cli/install/mcp-provision.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC3E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAEtD;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAG;IAC9B,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE;IACrF,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;CAC7F,CAAA;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,QAAQ,EAAE,SAAS;IAC/C,MAAM,IAAI,GACT,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;SAC1B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAA;IACrC,OAAO,QAAQ,CAAC,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,oBAAoB,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI;IACvD,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACR,kEAAkE;YAClE,mDAAmD;YACnD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;QAC9D,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,qEAAqE;YACrE,8DAA8D;YAC9D,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;QAC/D,CAAC;IACF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,CAAC,UAAU,GAAG,EAAE,CAAA;IACvB,CAAC;IACD,iDAAiD;IACjD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAE5E,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAA;IAC7E,IAAI,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IACtE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAA;IACnC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACnC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAChF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE;QACnE,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;QACrB,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC,CAAA;IACF,IAAI,MAAM,KAAK,SAAS;QAAE,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9D,OAAO,EAAE,MAAM,EAAE,CAAA;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,aAAa,EAAE,iBAAiB;IAClD,IAAI,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/C,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtD,yEAAyE;IACzE,oEAAoE;IACpE,YAAY,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAA;IAC9C,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAI;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAA;IAClF,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;IAExC,IAAI,CAAC;QACJ,mCAAmC;QACnC,IAAI,MAAM,EAAE,YAAY,EAAE,aAAa,KAAK,KAAK,EAAE,CAAC;YACnD,WAAW,CAAC,SAAS,EAAE,wBAAwB,EAAE;gBAChD,MAAM,EAAE,kCAAkC;aAC1C,CAAC,CAAA;YACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QAC9B,CAAC;QAED,wCAAwC;QACxC,MAAM,WAAW,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAA;QACtD,MAAM,OAAO,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAA;QAErD,+EAA+E;QAC/E,MAAM,MAAM,GAAG,EAAE,CAAA;QAEjB,4CAA4C;QAC5C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,oEAAoE;gBACpE,sCAAsC;gBACtC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC1E,WAAW,CAAC,SAAS,EAAE,gCAAgC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;gBAClE,SAAQ;YACT,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;gBACpC,IAAI,CAAC,IAAI;oBAAE,SAAQ;gBAEnB,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;oBACxD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GACvB,MAAM,CAAC,SAAS,KAAK,MAAM;wBAC1B,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;wBAChD,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;oBACjD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAA;oBAClE,WAAW,CAAC,SAAS,EAAE,iBAAiB,MAAM,EAAE,EAAE;wBACjD,IAAI;wBACJ,OAAO,EAAE,MAAM;wBACf,WAAW,EAAE,MAAM,CAAC,aAAa;wBACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC7B,CAAC,CAAA;oBACF,mEAAmE;oBACnE,6DAA6D;oBAC7D,4DAA4D;oBAC5D,yBAAyB;oBACzB,IAAI,IAAI,CAAC,sBAAsB,IAAI,aAAa,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBAC1E,sBAAsB,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;oBACzD,CAAC;gBACF,CAAC;qBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAClC,IAAI,CAAC,aAAa;wBAAE,SAAQ;oBAC5B,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAA;oBAC3E,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;oBAChF,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;oBAC1D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;oBAC7D,WAAW,CACV,SAAS,EACT,mBAAmB,MAAM,EAAE,EAC3B;wBACC,IAAI;wBACJ,OAAO,EAAE,MAAM;wBACf,SAAS,EAAE,MAAM,CAAC,QAAQ;qBAC1B,EACD,iBAAiB,CACjB,CAAA;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IAC/E,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;IAC3D,4EAA4E;IAC5E,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;QAAE,OAAM;IACrD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;QACjF,WAAW,CAAC,SAAS,EAAE,uBAAuB,EAAE;YAC/C,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,sBAAsB;SAChC,CAAC,CAAA;QACF,OAAM;IACP,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAA;IACjF,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACpD,eAAe,CAAC,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;IACnE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IACjF,WAAW,CAAC,SAAS,EAAE,uBAAuB,EAAE;QAC/C,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,sBAAsB;KAChC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,IAAI,GAAG,eAAe;IACrE,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;QACvC,WAAW,CAAC,IAAI,EAAE;YACjB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,EAAE;YACF,GAAG,KAAK;SACR,CAAC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACR,uEAAuE;IACxE,CAAC;AACF,CAAC"}

package/dist/cli/install/mcp-server-specs.d.mts

@@ -0,0 +1,80 @@
+/**
+ * Map a project's runtime capabilities to the provision spec ids it
+ * triggers. A multi-surface monorepo (e.g. electron + nextjs) returns
+ * multiple ids.
+ *
+ *   is_electron                          → ['electron']
+ *   is_tauri                             → ['tauri']
+ *   is_web_frontend|is_nextjs|is_nuxt    → ['agent-browser']
+ *
+ * Accepts a partial capability record — only the flags it reads need be
+ * present (the rest default to absent/false).
+ *
+ * @param {Partial<import('../util/runtime-capabilities.mjs').RuntimeCapabilities>} runtimeCaps
+ * @returns {string[]}
+ */
+export function capabilityToProvisionIds(runtimeCaps: Partial<import("../util/runtime-capabilities.mjs").RuntimeCapabilities>): string[];
+/**
+ * install/mcp-server-specs.mjs — single-sourced install-time provision specs.
+ *
+ * One registry, two kinds (ID-03):
+ *   - kind 'mcp-server' (electron, tauri): the {command, args, env?} the
+ *     installer writes into each host CLI's MCP config. Keyed by the SAME
+ *     `transport.mcp_server_id` string the driver manifests carry.
+ *   - kind 'skill' (agent-browser): the vendored SKILL.md the installer
+ *     copies into each host CLI's skill dir. Keyed by the SAME
+ *     `transport.skill_id` the browser driver manifest carries.
+ *
+ * We do NOT derive commands from the driver manifests — manifests are
+ * transport-agnostic by design (ID-01 keeps the verb→tool mapping in the
+ * driver; this is a separate install-only transport/skill concern). We do
+ * NOT add a per-driver mcp-server.json (over-engineering for 3 specs —
+ * CLAUDE.md Simplicity First).
+ *
+ * Pure module — no fs, no exec.
+ */
+/**
+ * @typedef {Object} McpServerSpec
+ * @property {'mcp-server'} kind
+ * @property {string} command
+ * @property {string[]} args
+ * @property {Record<string, string>} [env]
+ * @property {boolean} [requiresLauncherScript] — tauri: copy scripts/tauri-mcp.sh first
+ *
+ * @typedef {Object} SkillSpec
+ * @property {'skill'} kind
+ * @property {string} skillId
+ * @property {string} vendoredSkillRelPath — relative to the framework root
+ *
+ * @typedef {McpServerSpec | SkillSpec} ProvisionSpec
+ */
+/**
+ * The install-time provision specs, keyed by spec id.
+ *
+ * `electron` / `tauri` ids match each driver manifest's
+ * `transport.mcp_server_id`; `agent-browser` matches the browser driver
+ * manifest's `transport.skill_id`.
+ *
+ * @type {Record<string, ProvisionSpec>}
+ */
+export const PROVISION_SPECS: Record<string, ProvisionSpec>;
+export type McpServerSpec = {
+    kind: "mcp-server";
+    command: string;
+    args: string[];
+    env?: Record<string, string> | undefined;
+    /**
+     * — tauri: copy scripts/tauri-mcp.sh first
+     */
+    requiresLauncherScript?: boolean | undefined;
+};
+export type SkillSpec = {
+    kind: "skill";
+    skillId: string;
+    /**
+     * — relative to the framework root
+     */
+    vendoredSkillRelPath: string;
+};
+export type ProvisionSpec = McpServerSpec | SkillSpec;
+//# sourceMappingURL=mcp-server-specs.d.mts.map

package/dist/cli/install/mcp-server-specs.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-specs.d.mts","sourceRoot":"","sources":["../../../src/cli/install/mcp-server-specs.mjs"],"names":[],"mappings":"AA4EA;;;;;;;;;;;;;;GAcG;AACH,sDAHW,OAAO,CAAC,OAAO,kCAAkC,EAAE,mBAAmB,CAAC,GACrE,MAAM,EAAE,CAWpB;AApGD;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AACH,8BAFU,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CA+BtC;;UApDa,YAAY;aACZ,MAAM;UACN,MAAM,EAAE;;;;;;;;UAKR,OAAO;aACP,MAAM;;;;0BACN,MAAM;;4BAEP,aAAa,GAAG,SAAS"}

package/dist/cli/install/mcp-server-specs.mjs

@@ -0,0 +1,102 @@
+/**
+ * install/mcp-server-specs.mjs — single-sourced install-time provision specs.
+ *
+ * One registry, two kinds (ID-03):
+ *   - kind 'mcp-server' (electron, tauri): the {command, args, env?} the
+ *     installer writes into each host CLI's MCP config. Keyed by the SAME
+ *     `transport.mcp_server_id` string the driver manifests carry.
+ *   - kind 'skill' (agent-browser): the vendored SKILL.md the installer
+ *     copies into each host CLI's skill dir. Keyed by the SAME
+ *     `transport.skill_id` the browser driver manifest carries.
+ *
+ * We do NOT derive commands from the driver manifests — manifests are
+ * transport-agnostic by design (ID-01 keeps the verb→tool mapping in the
+ * driver; this is a separate install-only transport/skill concern). We do
+ * NOT add a per-driver mcp-server.json (over-engineering for 3 specs —
+ * CLAUDE.md Simplicity First).
+ *
+ * Pure module — no fs, no exec.
+ */
+/**
+ * @typedef {Object} McpServerSpec
+ * @property {'mcp-server'} kind
+ * @property {string} command
+ * @property {string[]} args
+ * @property {Record<string, string>} [env]
+ * @property {boolean} [requiresLauncherScript] — tauri: copy scripts/tauri-mcp.sh first
+ *
+ * @typedef {Object} SkillSpec
+ * @property {'skill'} kind
+ * @property {string} skillId
+ * @property {string} vendoredSkillRelPath — relative to the framework root
+ *
+ * @typedef {McpServerSpec | SkillSpec} ProvisionSpec
+ */
+/**
+ * The install-time provision specs, keyed by spec id.
+ *
+ * `electron` / `tauri` ids match each driver manifest's
+ * `transport.mcp_server_id`; `agent-browser` matches the browser driver
+ * manifest's `transport.skill_id`.
+ *
+ * @type {Record<string, ProvisionSpec>}
+ */
+export const PROVISION_SPECS = {
+    // kind 'mcp-server'
+    electron: {
+        kind: 'mcp-server',
+        command: 'npx',
+        args: ['-y', 'electron-mcp-server'],
+        // No SCREENSHOT_ENCRYPTION_KEY — left for the user to add per ID-09.
+        env: {},
+    },
+    tauri: {
+        kind: 'mcp-server',
+        // The tauri-plugin-mcp-server npm bin ships without a shebang, so it
+        // cannot be invoked via `npx -y`. We launch it through a generated
+        // scripts/tauri-mcp.sh (ID-04) — the proven racing-ai shape.
+        command: 'bash',
+        args: ['./scripts/tauri-mcp.sh'],
+        requiresLauncherScript: true,
+    },
+    // kind 'skill'
+    'agent-browser': {
+        kind: 'skill',
+        skillId: 'agent-browser',
+        // Vendored UNDER the browser driver (NOT skills/agent-browser/) so the
+        // install pipeline's discoverCanonicalFiles does not auto-install it
+        // into every project unconditionally — that would break the
+        // verification.provision_mcp opt-out (AC7) and the web-frontend runtime
+        // gate. The provisioner (mcp-provision.mjs) is the sole installer.
+        vendoredSkillRelPath: 'drivers/browser/skill/agent-browser/SKILL.md',
+    },
+};
+/**
+ * Map a project's runtime capabilities to the provision spec ids it
+ * triggers. A multi-surface monorepo (e.g. electron + nextjs) returns
+ * multiple ids.
+ *
+ *   is_electron                          → ['electron']
+ *   is_tauri                             → ['tauri']
+ *   is_web_frontend|is_nextjs|is_nuxt    → ['agent-browser']
+ *
+ * Accepts a partial capability record — only the flags it reads need be
+ * present (the rest default to absent/false).
+ *
+ * @param {Partial<import('../util/runtime-capabilities.mjs').RuntimeCapabilities>} runtimeCaps
+ * @returns {string[]}
+ */
+export function capabilityToProvisionIds(runtimeCaps) {
+    const ids = [];
+    if (!runtimeCaps || typeof runtimeCaps !== 'object')
+        return ids;
+    if (runtimeCaps.is_electron)
+        ids.push('electron');
+    if (runtimeCaps.is_tauri)
+        ids.push('tauri');
+    if (runtimeCaps.is_web_frontend || runtimeCaps.is_nextjs || runtimeCaps.is_nuxt) {
+        ids.push('agent-browser');
+    }
+    return ids;
+}
+//# sourceMappingURL=mcp-server-specs.mjs.map

package/dist/cli/install/mcp-server-specs.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-specs.mjs","sourceRoot":"","sources":["../../../src/cli/install/mcp-server-specs.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC9B,oBAAoB;IACpB,QAAQ,EAAE;QACT,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC;QACnC,qEAAqE;QACrE,GAAG,EAAE,EAAE;KACP;IACD,KAAK,EAAE;QACN,IAAI,EAAE,YAAY;QAClB,qEAAqE;QACrE,mEAAmE;QACnE,6DAA6D;QAC7D,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,wBAAwB,CAAC;QAChC,sBAAsB,EAAE,IAAI;KAC5B;IACD,eAAe;IACf,eAAe,EAAE;QAChB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,eAAe;QACxB,uEAAuE;QACvE,qEAAqE;QACrE,4DAA4D;QAC5D,wEAAwE;QACxE,mEAAmE;QACnE,oBAAoB,EAAE,8CAA8C;KACpE;CACD,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAW;IACnD,MAAM,GAAG,GAAG,EAAE,CAAA;IACd,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IAC/D,IAAI,WAAW,CAAC,WAAW;QAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjD,IAAI,WAAW,CAAC,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,WAAW,CAAC,eAAe,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACjF,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC"}