@aperant/framework 0.9.0 → 0.11.0

package/src/cli/git/default-branch.mjs

@@ -0,0 +1,250 @@
+/**
+ * git/default-branch.mjs — local default-branch resolution + merged-PR parsing
+ * for the Team-Change Digest (LD-03/04/05).
+ *
+ * Pure git helpers (no .aperant IO). Every git call uses the no-throw
+ * execFileSync pattern from git/remote.mjs (stdio ['ignore','pipe','ignore'])
+ * so a non-git dir / unresolvable ref returns null instead of throwing.
+ *
+ * The resolver reads the LOCAL default-branch ref only — it NEVER calls
+ * `git fetch`. The digest surfaces work the user has actually pulled, not
+ * unfetched server state (ADR Consequences ¶1).
+ *
+ * @internal
+ */
+
+import { execFileSync } from 'node:child_process'
+
+/**
+ * Run a git command, returning trimmed stdout or null on any error.
+ * @param {string} targetDir
+ * @param {string[]} args
+ * @returns {string|null}
+ */
+function git(targetDir, args) {
+	try {
+		return execFileSync('git', args, {
+			cwd: targetDir,
+			encoding: 'utf-8',
+			stdio: ['ignore', 'pipe', 'ignore'],
+		}).trim()
+	} catch {
+		return null
+	}
+}
+
+/**
+ * Resolve the local default-branch ref, with its current sha. Resolution order:
+ *   1. `git symbolic-ref refs/remotes/origin/HEAD` (strip the
+ *      'refs/remotes/origin/' prefix);
+ *   2. `git config init.defaultBranch`;
+ *   3. existence check of `main` then `master` via `git rev-parse --verify`.
+ *
+ * NEVER fetches. Returns null outside a git repo or when nothing resolves.
+ *
+ * @param {string} targetDir
+ * @returns {{ branch: string, sha: string }|null}
+ */
+export function resolveLocalDefaultBranch(targetDir) {
+	// Fast bail when not a git repo.
+	if (git(targetDir, ['rev-parse', '--git-dir']) === null) return null
+
+	let branch = null
+
+	// (1) origin/HEAD symbolic-ref — the authoritative "what main points at".
+	const originHead = git(targetDir, ['symbolic-ref', 'refs/remotes/origin/HEAD'])
+	if (originHead?.startsWith('refs/remotes/origin/')) {
+		branch = originHead.slice('refs/remotes/origin/'.length)
+	}
+
+	// (2) init.defaultBranch config.
+	if (!branch) {
+		const configured = git(targetDir, ['config', 'init.defaultBranch'])
+		if (configured) branch = configured
+	}
+
+	// (3) existence check main → master.
+	if (!branch) {
+		for (const candidate of ['main', 'master']) {
+			if (git(targetDir, ['rev-parse', '--verify', '--quiet', candidate]) !== null) {
+				branch = candidate
+				break
+			}
+		}
+	}
+
+	if (!branch) return null
+
+	const sha = git(targetDir, ['rev-parse', branch])
+	if (!sha) return null
+
+	return { branch, sha }
+}
+
+/**
+ * Parse a PR number + title from a merge-commit subject/body.
+ *
+ * GitHub merge-commit format:
+ *   subject: "Merge pull request #N from owner/branch"
+ *   body:    "<PR title>"  (first non-empty body line)
+ * Squash-merge format:
+ *   subject: "<PR title> (#N)"
+ *
+ * @param {string} subject
+ * @param {string} body
+ * @returns {{ number: number, title: string }|null}
+ */
+function parsePullRequest(subject, body) {
+	const mergeMatch = subject.match(/^Merge pull request #(\d+) from /)
+	if (mergeMatch) {
+		const number = Number(mergeMatch[1])
+		const firstBodyLine = (body || '')
+			.split('\n')
+			.map((l) => l.trim())
+			.find((l) => l.length > 0)
+		return { number, title: firstBodyLine || subject }
+	}
+
+	// GitHub squash-merge convention: greedy `(.*)` captures the longest prefix
+	// so titles with parentheses (e.g. "feat(core): ...") are handled correctly.
+	const squashMatch = subject.match(/^(.*)\s\(#(\d+)\)\s*$/)
+	if (squashMatch) {
+		return { number: Number(squashMatch[2]), title: squashMatch[1].trim() }
+	}
+
+	return null
+}
+
+/**
+ * Resolve both the introduced-commit author emails (LD-05) and a display name
+ * from a single `git log` call per merge. Replaces the former separate
+ * `introducedAuthorEmails` + `pickAuthorName` pair (PRF-002).
+ *
+ * @param {string} targetDir
+ * @param {string[]} parents          parent shas of the merge commit
+ * @param {string} authorEmail        the merge commit's own author email
+ * @param {string} currentUserEmail   the user's git email (for name picking)
+ * @param {string} fallbackName       merge/commit author name when no better pick
+ * @returns {{ emails: string[], authorName: string }}
+ */
+function resolveIntroducedAuthors(targetDir, parents, authorEmail, currentUserEmail, fallbackName) {
+	if (parents.length >= 2) {
+		const raw = git(targetDir, ['log', `${parents[0]}..${parents[1]}`, '--format=%ae%x1f%an'])
+		if (raw) {
+			const emails = new Set()
+			let pickedName = null
+			for (const line of raw.split('\n')) {
+				const [email, name] = line.split('\x1f')
+				if (!email) continue
+				const normEmail = email.trim().toLowerCase()
+				if (normEmail.length > 0) emails.add(normEmail)
+				if (!pickedName && normEmail !== currentUserEmail) {
+					pickedName = (name || fallbackName).trim()
+				}
+			}
+			if (emails.size > 0) {
+				return { emails: [...emails], authorName: pickedName || fallbackName.trim() }
+			}
+		}
+	}
+	const own = authorEmail.trim().toLowerCase()
+	return {
+		emails: own.length > 0 ? [own] : [],
+		authorName: fallbackName.trim(),
+	}
+}
+
+/**
+ * List merged PRs on the local default branch since `sinceSha`, attributed to
+ * whoever actually wrote the work (LD-04/05).
+ *
+ * Walks `git log --first-parent <sinceSha>..<defaultBranch>`. Each commit that
+ * parses as a PR (merge-commit or squash form) becomes one entry, attributed
+ * via its introduced-commit author emails. An entry is excluded only when ALL
+ * its introduced emails equal `currentUserEmail` (the user's own work) — so a
+ * PR the user merged but a teammate authored still appears.
+ *
+ * The scan is bounded (R3): at most `maxEntries * SCAN_MULTIPLIER` commits are
+ * inspected, so a stale marker can't enumerate an unbounded history.
+ *
+ * @param {string} targetDir
+ * @param {object} opts
+ * @param {string} opts.sinceSha            baseline sha (exclusive lower bound)
+ * @param {string} [opts.defaultBranch]     branch to walk to (default: resolved)
+ * @param {string} opts.currentUserEmail    the user's git email (own-work filter)
+ * @param {number} [opts.maxEntries=7]      cap on returned entries
+ * @returns {{ entries: Array<{ number: number, title: string, author: string }>, more_count: number }}
+ */
+export function listMergedPullRequests(targetDir, opts = {}) {
+	const empty = { entries: [], more_count: 0, more_capped: false }
+	const sinceSha = opts.sinceSha
+	const maxEntries = Number.isInteger(opts.maxEntries) && opts.maxEntries > 0 ? opts.maxEntries : 7
+	const currentUserEmail = (opts.currentUserEmail || '').trim().toLowerCase()
+
+	let defaultBranch = opts.defaultBranch
+	if (!defaultBranch) {
+		const resolved = resolveLocalDefaultBranch(targetDir)
+		if (!resolved) return empty
+		defaultBranch = resolved.branch
+	}
+	if (!sinceSha) return empty
+	if (!/^[0-9a-f]{7,40}$/i.test(sinceSha)) return empty
+
+	const SCAN_MULTIPLIER = 4
+	const scanCap = maxEntries * SCAN_MULTIPLIER
+
+	// One commit per record, fields separated by \x1f, records by \x1e.
+	// %H sha · %P parents · %an author name · %ae author email · %s subject · %b body
+	const FIELD = '\x1f'
+	const RECORD = '\x1e'
+	const format = `%H${FIELD}%P${FIELD}%an${FIELD}%ae${FIELD}%s${FIELD}%b${RECORD}`
+	const raw = git(targetDir, [
+		'log',
+		'--first-parent',
+		`--max-count=${scanCap}`,
+		`--format=${format}`,
+		`${sinceSha}..${defaultBranch}`,
+	])
+	if (!raw) return empty
+
+	const records = raw
+		.split(RECORD)
+		.map((r) => r.replace(/^\n+/, ''))
+		.filter((r) => r.trim().length > 0)
+
+	const matched = []
+	for (const rec of records) {
+		const [sha, parentsRaw, authorName, authorEmail, subject, body] = rec.split(FIELD)
+		if (!sha) continue
+		const pr = parsePullRequest(subject || '', body || '')
+		if (!pr) continue
+
+		const parents = (parentsRaw || '').trim().split(/\s+/).filter(Boolean)
+		const { emails, authorName: resolvedAuthor } = resolveIntroducedAuthors(
+			targetDir,
+			parents,
+			authorEmail || '',
+			currentUserEmail,
+			authorName || 'unknown',
+		)
+
+		// Exclude only when EVERY introduced commit is the current user's own.
+		const allOwn =
+			currentUserEmail.length > 0 &&
+			emails.length > 0 &&
+			emails.every((e) => e === currentUserEmail)
+		if (allOwn) continue
+
+		matched.push({ number: pr.number, title: pr.title, author: resolvedAuthor })
+	}
+
+	const more_capped = records.length >= scanCap
+	if (matched.length <= maxEntries) {
+		return { entries: matched, more_count: 0, more_capped }
+	}
+	return {
+		entries: matched.slice(0, maxEntries),
+		more_count: matched.length - maxEntries,
+		more_capped,
+	}
+}

package/src/cli/git/identity.mjs

@@ -4,10 +4,15 @@
 
 import { execSync } from 'node:child_process'
 
+const _identityCache = new Map()
+
 /**
  * Auto-detect the current user's git identity. Returns null if git config is unset.
+ * Memoized per targetDir for the process lifetime (git identity is stable within a CLI invocation).
  */
 export function getGitIdentity(targetDir) {
+	if (_identityCache.has(targetDir)) return _identityCache.get(targetDir)
+	let result = null
 	try {
 		const name = execSync('git config user.name 2>/dev/null', {
 			cwd: targetDir,
@@ -17,11 +22,12 @@ export function getGitIdentity(targetDir) {
 			cwd: targetDir,
 			encoding: 'utf-8',
 		}).trim()
-		if (!name || !email) return null
-		return { name, email }
+		if (name && email) result = { name, email }
 	} catch {
-		return null
+		/* no git config — result stays null */
 	}
+	_identityCache.set(targetDir, result)
+	return result
 }
 
 /**

package/src/cli/install/legacy-paths.mjs

@@ -88,6 +88,7 @@ export const LEGACY_INSTALL_PATHS = Object.freeze({
 			'agents/apt.md',
 			'agents/apt-author-skill.md',
 			'agents/apt-bootstrap.md',
+			'agents/apt-catch-up.md',
 			'agents/apt-caveman.md',
 			'agents/apt-classify.md',
 			'agents/apt-close-task.md',
@@ -131,6 +132,7 @@ export const LEGACY_INSTALL_PATHS = Object.freeze({
 			'commands/apt.md',
 			'commands/apt-author-skill.md',
 			'commands/apt-bootstrap.md',
+			'commands/apt-catch-up.md',
 			'commands/apt-caveman.md',
 			'commands/apt-classify.md',
 			'commands/apt-close-task.md',

package/src/cli/install/mcp-provision.mjs

@@ -0,0 +1,293 @@
+/**
+ * install/mcp-provision.mjs — TOFU install-time MCP-server + skill provisioner.
+ *
+ * Called from cmdInit (the only call site — the QUICK fast-path never invokes
+ * init, so the Fast Path Guarantee is structurally untouched). Detects the
+ * project's runtime, then for each selected host CLI that supports the action:
+ *
+ *   - kind 'mcp-server' (electron/tauri) → write the server into the host's
+ *     MCP config (claude → .mcp.json JSON merge; codex → .codex/config.toml
+ *     TOML upsert).
+ *   - kind 'skill' (agent-browser) → copy the vendored SKILL.md into the
+ *     host's skill dir (claude → .claude/skills/; codex → .agents/skills/).
+ *
+ * Every write is TOFU/idempotent (ID-05): if the target server id / table /
+ * skill file already exists, SKIP (never diff/merge/overwrite) — this is the
+ * must-not-clobber invariant for a hand-authored electron
+ * SCREENSHOT_ENCRYPTION_KEY (US-3) and a user-edited agent-browser skill
+ * (US-6). Each action appends one audit line to .aperant/events/{date}.jsonl.
+ *
+ * Gated behind config.verification.provision_mcp (default true) so users can
+ * opt out. Never throws — wraps the body in try/catch → {status:'error'}.
+ */
+
+import { copyFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs'
+import { basename, dirname, join, resolve } from 'node:path'
+import { appendJsonl, atomicWriteJson, atomicWriteText } from '../util/atomic-write.mjs'
+import { dailyEventsPath } from '../util/events-path.mjs'
+import { capabilityToProvisionIds, PROVISION_SPECS } from './mcp-server-specs.mjs'
+import { loadRuntimeCapabilities } from './runtime-detect.mjs'
+import { upsertMcpServerToml } from './toml-merge.mjs'
+
+/**
+ * Per-host writer registry (ID-07, ID-08). v1 = claude + codex. The MCP
+ * config path AND skill dir are EXPLICIT per host — neither is derived from
+ * the runtime's installRoot (Codex's MCP path .codex/config.toml diverges
+ * from its skill dir .agents/skills/). Adding gemini/opencode later = one
+ * entry each.
+ *
+ * @type {Record<string, {mcpFormat: 'json'|'toml', mcpConfigPath: string, skillDir: string}>}
+ */
+const HOST_PROVISION_WRITERS = {
+	claude: { mcpFormat: 'json', mcpConfigPath: '.mcp.json', skillDir: '.claude/skills' },
+	codex: { mcpFormat: 'toml', mcpConfigPath: '.codex/config.toml', skillDir: '.agents/skills' },
+}
+
+/**
+ * Substitute the per-project socket basename into the tauri launcher
+ * template, deriving uniqueness from the project dir basename.
+ *
+ * @param {string} template
+ * @param {string} targetDir
+ * @returns {string}
+ */
+function renderTauriLauncher(template, targetDir) {
+	const slug =
+		basename(resolve(targetDir))
+			.toLowerCase()
+			.replace(/[^a-z0-9]+/g, '-')
+			.replace(/^-+|-+$/g, '') || 'tauri'
+	return template.replaceAll('{{PROJECT_SOCKET}}', slug)
+}
+
+/**
+ * Write the electron/tauri MCP server into a Claude `.mcp.json`. JSON merge:
+ * read-or-{}, ensure mcpServers, SKIP if the server id already exists, else
+ * insert {type:'stdio', command, args, env?} preserving all sibling keys.
+ *
+ * TOFU non-clobber (ID-05): if the existing file fails to parse OR parses to
+ * a non-plain-object root (array / null / primitive), do NOT overwrite it —
+ * return `skipped_unsafe` with a reason so the caller can audit it and leave
+ * the file byte-identical. (`typeof [] === 'object'` is why arrays must be
+ * excluded explicitly: a `.mcp.json` containing `[]` would otherwise pass the
+ * object guard, drop the user's content on stringify, and report `written`.)
+ *
+ * @param {string} configPath — absolute path to .mcp.json
+ * @param {string} serverId
+ * @param {import('./mcp-server-specs.mjs').McpServerSpec} spec
+ * @returns {{action: 'written'|'skipped'|'skipped_unsafe', reason?: string}}
+ */
+function writeClaudeMcpServer(configPath, serverId, spec) {
+	let config = {}
+	if (existsSync(configPath)) {
+		try {
+			config = JSON.parse(readFileSync(configPath, 'utf-8'))
+		} catch {
+			// Malformed JSON: overwriting would erase every hand-authored MCP
+			// server. Leave the file untouched and surface it.
+			return { action: 'skipped_unsafe', reason: 'malformed_json' }
+		}
+		if (config === null || typeof config !== 'object' || Array.isArray(config)) {
+			// Non-plain-object root (array / null / primitive): same non-clobber
+			// rule — never overwrite content we cannot safely merge into.
+			return { action: 'skipped_unsafe', reason: 'non_object_root' }
+		}
+	}
+	if (config.mcpServers === null || typeof config.mcpServers !== 'object') {
+		config.mcpServers = {}
+	}
+	// TOFU: never clobber a hand-authored server id.
+	if (Object.hasOwn(config.mcpServers, serverId)) return { action: 'skipped' }
+
+	const entry = { type: 'stdio', command: spec.command, args: spec.args ?? [] }
+	if (spec.env && Object.keys(spec.env).length > 0) entry.env = spec.env
+	config.mcpServers[serverId] = entry
+	atomicWriteJson(configPath, config)
+	return { action: 'written' }
+}
+
+/**
+ * Write the electron/tauri MCP server into a Codex `.codex/config.toml`.
+ *
+ * @param {string} configPath — absolute path to .codex/config.toml
+ * @param {string} serverId
+ * @param {import('./mcp-server-specs.mjs').McpServerSpec} spec
+ * @returns {{action: 'written'|'skipped'}}
+ */
+function writeCodexMcpServer(configPath, serverId, spec) {
+	const existing = existsSync(configPath) ? readFileSync(configPath, 'utf-8') : ''
+	const { content, action } = upsertMcpServerToml(existing, serverId, {
+		command: spec.command,
+		args: spec.args ?? [],
+		...(spec.env && Object.keys(spec.env).length > 0 ? { env: spec.env } : {}),
+	})
+	if (action === 'written') atomicWriteText(configPath, content)
+	return { action }
+}
+
+/**
+ * Copy the vendored skill into a host skill dir. TOFU: never overwrite an
+ * existing agent-browser/SKILL.md (a user may have edited it).
+ *
+ * @param {string} skillDestPath — absolute <skillDir>/<skillId>/SKILL.md
+ * @param {string} vendoredSkillPath — absolute source path
+ * @returns {'written'|'skipped'}
+ */
+function copySkill(skillDestPath, vendoredSkillPath) {
+	if (existsSync(skillDestPath)) return 'skipped'
+	mkdirSync(dirname(skillDestPath), { recursive: true })
+	// copyFileSync is fine here — atomicWriteText would re-read; the dest is
+	// guaranteed absent (TOFU check above) so there is no clobber risk.
+	copyFileSync(vendoredSkillPath, skillDestPath)
+	return 'written'
+}
+
+/**
+ * Provision MCP servers + skills for the selected host CLIs.
+ *
+ * @param {Object} opts
+ * @param {string} opts.targetDir — project root being installed into
+ * @param {string[]} opts.selectedRuntimes — the runtimes the user selected
+ * @param {object} opts.config — the effective merged project config
+ * @param {string} opts.frameworkRoot — absolute path to packages/framework (for vendored skill resolution)
+ * @returns {{status: 'ok'|'disabled'|'error', writes?: Array<{host:string, spec_id:string, kind:string, action:string}>, reason?: string}}
+ */
+export function provisionMcpConfig(opts) {
+	const targetDir = resolve(opts.targetDir)
+	const config = opts.config ?? {}
+	const selected = Array.isArray(opts.selectedRuntimes) ? opts.selectedRuntimes : []
+	const frameworkRoot = opts.frameworkRoot
+
+	try {
+		// (1) Opt-out gate (default true).
+		if (config?.verification?.provision_mcp === false) {
+			appendEvent(targetDir, 'mcp-provision.disabled', {
+				reason: 'verification.provision_mcp=false',
+			})
+			return { status: 'disabled' }
+		}
+
+		// (2) Detect runtime → derive spec ids.
+		const runtimeCaps = loadRuntimeCapabilities(targetDir)
+		const specIds = capabilityToProvisionIds(runtimeCaps)
+
+		/** @type {Array<{host:string, spec_id:string, kind:string, action:string}>} */
+		const writes = []
+
+		// Iterate every (selected host, spec) pair.
+		for (const host of selected) {
+			const writer = HOST_PROVISION_WRITERS[host]
+			if (!writer) {
+				// Selected host with no writer (gemini/opencode/... in v1) — record
+				// once as unsupported_host, no write.
+				writes.push({ host, spec_id: '*', kind: '*', action: 'unsupported_host' })
+				appendEvent(targetDir, 'mcp-provision.unsupported_host', { host })
+				continue
+			}
+
+			for (const specId of specIds) {
+				const spec = PROVISION_SPECS[specId]
+				if (!spec) continue
+
+				if (spec.kind === 'mcp-server') {
+					const configPath = join(targetDir, writer.mcpConfigPath)
+					const { action, reason } =
+						writer.mcpFormat === 'json'
+							? writeClaudeMcpServer(configPath, specId, spec)
+							: writeCodexMcpServer(configPath, specId, spec)
+					writes.push({ host, spec_id: specId, kind: 'mcp-server', action })
+					appendEvent(targetDir, `mcp-provision.${action}`, {
+						host,
+						spec_id: specId,
+						config_path: writer.mcpConfigPath,
+						...(reason ? { reason } : {}),
+					})
+					// (5) tauri needs its launcher script — only provision it once the
+					// MCP config entry is actually written, so a TOFU-skipped or
+					// skipped_unsafe config never leaves an orphan launcher + a
+					// misleading audit line.
+					if (spec.requiresLauncherScript && frameworkRoot && action === 'written') {
+						provisionTauriLauncher(targetDir, frameworkRoot, writes)
+					}
+				} else if (spec.kind === 'skill') {
+					if (!frameworkRoot) continue
+					const vendoredSkillPath = resolve(frameworkRoot, spec.vendoredSkillRelPath)
+					const skillDestPath = join(targetDir, writer.skillDir, spec.skillId, 'SKILL.md')
+					const action = copySkill(skillDestPath, vendoredSkillPath)
+					writes.push({ host, spec_id: specId, kind: 'skill', action })
+					appendEvent(
+						targetDir,
+						`skill-provision.${action}`,
+						{
+							host,
+							spec_id: specId,
+							skill_dir: writer.skillDir,
+						},
+						'skill_provision',
+					)
+				}
+			}
+		}
+
+		return { status: 'ok', writes }
+	} catch (e) {
+		return { status: 'error', reason: e instanceof Error ? e.message : String(e) }
+	}
+}
+
+/**
+ * Copy the tauri launcher template into the project's scripts/ dir (TOFU).
+ * Records its own audit line; appends to `writes` with a synthetic host.
+ *
+ * @param {string} targetDir
+ * @param {string} frameworkRoot
+ * @param {Array<{host:string, spec_id:string, kind:string, action:string}>} writes
+ */
+function provisionTauriLauncher(targetDir, frameworkRoot, writes) {
+	const destPath = join(targetDir, 'scripts', 'tauri-mcp.sh')
+	// Already recorded a launcher write/skip for this run? Only provision once.
+	if (writes.some((w) => w.kind === 'launcher')) return
+	if (existsSync(destPath)) {
+		writes.push({ host: '-', spec_id: 'tauri', kind: 'launcher', action: 'skipped' })
+		appendEvent(targetDir, 'mcp-provision.skipped', {
+			host: '-',
+			spec_id: 'tauri',
+			launcher: 'scripts/tauri-mcp.sh',
+		})
+		return
+	}
+	const templatePath = resolve(frameworkRoot, 'drivers/tauri/scripts/tauri-mcp.sh')
+	const template = readFileSync(templatePath, 'utf-8')
+	atomicWriteText(destPath, renderTauriLauncher(template, targetDir))
+	writes.push({ host: '-', spec_id: 'tauri', kind: 'launcher', action: 'written' })
+	appendEvent(targetDir, 'mcp-provision.written', {
+		host: '-',
+		spec_id: 'tauri',
+		launcher: 'scripts/tauri-mcp.sh',
+	})
+}
+
+/**
+ * Append one audit line to .aperant/events/{date}.jsonl, mirroring the
+ * daily-events shape. `kind` discriminates the provisioning channel:
+ * `mcp_provision` for MCP-server + launcher events, `skill_provision` for
+ * skill-copy events.
+ *
+ * @param {string} targetDir
+ * @param {string} op — e.g. mcp-provision.written, skill-provision.skipped
+ * @param {Record<string, unknown>} [extra]
+ * @param {string} [kind] — audit channel (default `mcp_provision`)
+ */
+function appendEvent(targetDir, op, extra = {}, kind = 'mcp_provision') {
+	try {
+		const path = dailyEventsPath(targetDir)
+		appendJsonl(path, {
+			ts: new Date().toISOString(),
+			kind,
+			op,
+			...extra,
+		})
+	} catch {
+		// Audit is best-effort — never fail provisioning on a log write error.
+	}
+}

package/src/cli/install/mcp-server-specs.mjs

@@ -0,0 +1,101 @@
+/**
+ * install/mcp-server-specs.mjs — single-sourced install-time provision specs.
+ *
+ * One registry, two kinds (ID-03):
+ *   - kind 'mcp-server' (electron, tauri): the {command, args, env?} the
+ *     installer writes into each host CLI's MCP config. Keyed by the SAME
+ *     `transport.mcp_server_id` string the driver manifests carry.
+ *   - kind 'skill' (agent-browser): the vendored SKILL.md the installer
+ *     copies into each host CLI's skill dir. Keyed by the SAME
+ *     `transport.skill_id` the browser driver manifest carries.
+ *
+ * We do NOT derive commands from the driver manifests — manifests are
+ * transport-agnostic by design (ID-01 keeps the verb→tool mapping in the
+ * driver; this is a separate install-only transport/skill concern). We do
+ * NOT add a per-driver mcp-server.json (over-engineering for 3 specs —
+ * CLAUDE.md Simplicity First).
+ *
+ * Pure module — no fs, no exec.
+ */
+
+/**
+ * @typedef {Object} McpServerSpec
+ * @property {'mcp-server'} kind
+ * @property {string} command
+ * @property {string[]} args
+ * @property {Record<string, string>} [env]
+ * @property {boolean} [requiresLauncherScript] — tauri: copy scripts/tauri-mcp.sh first
+ *
+ * @typedef {Object} SkillSpec
+ * @property {'skill'} kind
+ * @property {string} skillId
+ * @property {string} vendoredSkillRelPath — relative to the framework root
+ *
+ * @typedef {McpServerSpec | SkillSpec} ProvisionSpec
+ */
+
+/**
+ * The install-time provision specs, keyed by spec id.
+ *
+ * `electron` / `tauri` ids match each driver manifest's
+ * `transport.mcp_server_id`; `agent-browser` matches the browser driver
+ * manifest's `transport.skill_id`.
+ *
+ * @type {Record<string, ProvisionSpec>}
+ */
+export const PROVISION_SPECS = {
+	// kind 'mcp-server'
+	electron: {
+		kind: 'mcp-server',
+		command: 'npx',
+		args: ['-y', 'electron-mcp-server'],
+		// No SCREENSHOT_ENCRYPTION_KEY — left for the user to add per ID-09.
+		env: {},
+	},
+	tauri: {
+		kind: 'mcp-server',
+		// The tauri-plugin-mcp-server npm bin ships without a shebang, so it
+		// cannot be invoked via `npx -y`. We launch it through a generated
+		// scripts/tauri-mcp.sh (ID-04) — the proven racing-ai shape.
+		command: 'bash',
+		args: ['./scripts/tauri-mcp.sh'],
+		requiresLauncherScript: true,
+	},
+	// kind 'skill'
+	'agent-browser': {
+		kind: 'skill',
+		skillId: 'agent-browser',
+		// Vendored UNDER the browser driver (NOT skills/agent-browser/) so the
+		// install pipeline's discoverCanonicalFiles does not auto-install it
+		// into every project unconditionally — that would break the
+		// verification.provision_mcp opt-out (AC7) and the web-frontend runtime
+		// gate. The provisioner (mcp-provision.mjs) is the sole installer.
+		vendoredSkillRelPath: 'drivers/browser/skill/agent-browser/SKILL.md',
+	},
+}
+
+/**
+ * Map a project's runtime capabilities to the provision spec ids it
+ * triggers. A multi-surface monorepo (e.g. electron + nextjs) returns
+ * multiple ids.
+ *
+ *   is_electron                          → ['electron']
+ *   is_tauri                             → ['tauri']
+ *   is_web_frontend|is_nextjs|is_nuxt    → ['agent-browser']
+ *
+ * Accepts a partial capability record — only the flags it reads need be
+ * present (the rest default to absent/false).
+ *
+ * @param {Partial<import('../util/runtime-capabilities.mjs').RuntimeCapabilities>} runtimeCaps
+ * @returns {string[]}
+ */
+export function capabilityToProvisionIds(runtimeCaps) {
+	const ids = []
+	if (!runtimeCaps || typeof runtimeCaps !== 'object') return ids
+	if (runtimeCaps.is_electron) ids.push('electron')
+	if (runtimeCaps.is_tauri) ids.push('tauri')
+	if (runtimeCaps.is_web_frontend || runtimeCaps.is_nextjs || runtimeCaps.is_nuxt) {
+		ids.push('agent-browser')
+	}
+	return ids
+}