@cats-inc/cats-platform 0.1.21 → 0.2.8

package/scripts/linux/build-desktop-package.sh

@@ -3,7 +3,7 @@
 # Script: build-desktop-package.sh
 # Description: Build staged desktop packaging outputs for Cats.
 #
-# Usage: ./scripts/linux/build-desktop-package.sh [all|windows|macos|linux] [output-dir]
+# Usage: ./scripts/linux/build-desktop-package.sh [all|windows|macos|linux] [output-dir] [apps-lock]
 #
 # Arguments:
 #   [platform]    Optional platform filter. Defaults to all.
@@ -20,11 +20,11 @@ SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
 PROJECT_ROOT="$(cd -- "${SCRIPT_DIR}/../.." && pwd)"
 PLATFORM="${1:-all}"
 OUTPUT_DIR="${2:-}"
+APPS_LOCK="${3:-}"
 
 cd "${PROJECT_ROOT}"
 npm run build
-if [[ -n "${OUTPUT_DIR}" ]]; then
-  node ./scripts/package-desktop.mjs --platform "${PLATFORM}" --output-dir "${OUTPUT_DIR}"
-else
-  node ./scripts/package-desktop.mjs --platform "${PLATFORM}"
-fi
+package_args=(./scripts/package-desktop.mjs --platform "${PLATFORM}")
+if [[ -n "${OUTPUT_DIR}" ]]; then package_args+=(--output-dir "${OUTPUT_DIR}"); fi
+if [[ -n "${APPS_LOCK}" ]]; then package_args+=(--apps-lock "${APPS_LOCK}"); fi
+node "${package_args[@]}"

package/scripts/linux/install-meta-cli.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=provider-cli-common.sh
+source "$SCRIPT_DIR/provider-cli-common.sh"
+
+run_native_provider_installer 'linux' 'muse' "$@"

package/scripts/linux/provider-cli-common.sh

@@ -52,7 +52,7 @@ provider_display_name() {
     antigravity) printf '%s\n' 'Antigravity CLI' ;;
     grok) printf '%s\n' 'Grok CLI' ;;
     devin) printf '%s\n' 'Devin CLI' ;;
-    aider) printf '%s\n' 'Aider' ;;
+    muse) printf '%s\n' 'Meta Muse CLI' ;;
     claude) printf '%s\n' 'Claude Code CLI' ;;
     cursor) printf '%s\n' 'Cursor Agent CLI' ;;
     goose) printf '%s\n' 'Goose CLI' ;;
@@ -67,7 +67,7 @@ provider_primary_command() {
     antigravity) printf '%s\n' 'agy' ;;
     grok) printf '%s\n' 'grok' ;;
     devin) printf '%s\n' 'devin' ;;
-    aider) printf '%s\n' 'aider' ;;
+    muse) printf '%s\n' 'muse' ;;
     claude) printf '%s\n' 'claude' ;;
     cursor) printf '%s\n' 'cursor-agent' ;;
     goose) printf '%s\n' 'goose' ;;
@@ -98,7 +98,7 @@ provider_install_url() {
     antigravity) printf '%s\n' 'https://antigravity.google/cli/install.sh' ;;
     grok) printf '%s\n' 'https://x.ai/cli/install.sh' ;;
     devin) printf '%s\n' 'https://cli.devin.ai/install.sh' ;;
-    aider) printf '%s\n' 'https://aider.chat/install.sh' ;;
+    muse) printf '%s\n' 'https://dev.meta.ai/install.sh' ;;
     claude) printf '%s\n' 'https://claude.ai/install.sh' ;;
     cursor) printf '%s\n' 'https://cursor.com/install' ;;
     goose) printf '%s\n' 'https://github.com/block/goose/releases/download/stable/download_cli.sh' ;;
@@ -111,6 +111,7 @@ provider_install_url() {
 provider_install_dir() {
   case "$1" in
     grok) printf '%s\n' "$HOME/.grok/bin" ;;
+    muse) muse_install_dir ;;
     *) printf '%s\n' "$HOME/.local/bin" ;;
   esac
 }
@@ -249,12 +250,59 @@ ensure_provider_alias() {
   fi
 }
 
+# muse's install directory holds the launcher, its state files, and one
+# muse-bin-<version> build per version it has downloaded.
+muse_install_dir() {
+  printf '%s\n' "${MUSE_INSTALL_DIR:-$HOME/.local/bin}"
+}
+
+# The version comes from the launcher's own state file, never from running muse.
+# The launcher forwards every argument straight to the agent binary, so a flag
+# that binary does not recognise opens the interactive TUI and hangs an
+# unattended setup run forever.
+muse_installed_version() {
+  local version_file
+  version_file="$(muse_install_dir)/.muse-version"
+  if [ -r "$version_file" ]; then
+    tr -d '\r\n' < "$version_file"
+  fi
+}
+
+# "Installed" means the launcher actually fetched a build. The official
+# installer writes the launcher first and downloads muse-bin-<version> last, so
+# a run that dies in between leaves a launcher with nothing behind it. Treating
+# that as installed would skip the reinstall that repairs it.
+muse_install_complete() {
+  local dir version
+  dir="$(muse_install_dir)"
+  [ -x "$dir/muse" ] || return 1
+  version="$(muse_installed_version)"
+  [ -n "$version" ] || return 1
+  [ -x "$dir/muse-bin-$version" ]
+}
+
 detect_provider_command() {
   local platform="$1"
   local provider="$2"
   local primary_command
   local candidate
 
+  if [ "$provider" = 'muse' ]; then
+    if muse_install_complete; then
+      prepend_path_if_missing "$(muse_install_dir)"
+      printf '%s\n' "$(muse_install_dir)/muse"
+      return 0
+    fi
+    # A muse elsewhere on PATH is someone's own install; report it rather than
+    # claiming the tool is missing, but never treat a half-written install
+    # directory as one.
+    if [ -x "$(muse_install_dir)/muse" ]; then
+      return 1
+    fi
+    command -v muse 2>/dev/null && return 0
+    return 1
+  fi
+
   primary_command="$(provider_primary_command "$provider")"
   if command -v "$primary_command" >/dev/null 2>&1; then
     command -v "$primary_command"
@@ -276,9 +324,36 @@ EOF
 
 provider_version_line() {
   local command_path="$1"
+  local provider="${2:-}"
+
+  # muse is read, never run: see muse_installed_version.
+  if [ "$provider" = 'muse' ]; then
+    muse_installed_version
+    return 0
+  fi
+
   "$command_path" --version 2>&1 | head -1 || true
 }
 
+# `curl ... | bash` returns 0 when the download itself fails, because bash reads
+# empty input and succeeds. Staging the script first is what makes a failed
+# install report as a failure.
+run_downloaded_shell_installer() {
+  local url="$1"
+  local installer_path status=0
+
+  installer_path="$(mktemp)"
+  if ! curl -fsSL "$url" -o "$installer_path"; then
+    rm -f "$installer_path"
+    printf 'Failed to download the installer from %s\n' "$url" >&2
+    return 1
+  fi
+
+  bash "$installer_path" < /dev/null || status=$?
+  rm -f "$installer_path"
+  return "$status"
+}
+
 # Devin's official install.sh ends by launching the interactive `devin setup`
 # wizard. Packaged setup runs non-interactively with no console a prompt can
 # reach, so an unstripped installer would stall the step rather than fail.
@@ -342,8 +417,10 @@ run_remote_pipe_installer() {
     goose)
       curl -fsSL "$url" | env CONFIGURE=false bash
       ;;
-    aider)
-      curl -LsSf "$url" | sh
+    muse)
+      # Download first, then run: with `curl ... | bash` a failed download still
+      # exits 0, because bash reads empty input and succeeds.
+      run_downloaded_shell_installer "$url"
       ;;
     cursor)
       curl "$url" -fsSL | bash
@@ -424,7 +501,9 @@ run_provider_install_action() {
     devin)
       run_devin_installer
       ;;
-    aider)
+    muse)
+      # The official installer always refreshes the launcher and asks it to pull
+      # the newest build, so install, upgrade, and force are the same call.
       run_remote_pipe_installer "$provider"
       ;;
     claude)
@@ -559,28 +638,22 @@ UPNP_EOF
     esac
   fi
 
-  # ~/.local/bin/aider is a uv tool shim, not the tool. Removing only the shim
-  # leaves aider-chat installed in the uv tool environment and the shim
-  # regenerable by any later `uv tool` command, so the tool is uninstalled
-  # through uv first and path removal only mops up what uv left behind.
-  #
-  # The uv binary itself is deliberately left in place: Aider's installer drops
-  # its own uv into ~/.local/bin, users commonly have another, and the helper
-  # cannot tell them apart. Removing a uv the user installed separately is a
-  # destructive false positive, so this warns instead (SPEC-112 PD4).
-  if [ "$provider" = 'aider' ]; then
-    if command -v uv >/dev/null 2>&1; then
-      if [ "$dry_run" = 'true' ]; then
-        __CATS_UNINSTALL_PLANNED+=("uv_tool_uninstall:aider-chat")
-      elif uv tool uninstall aider-chat >/dev/null 2>&1; then
-        __CATS_UNINSTALL_APPLIED+=("uv_tool_uninstalled:aider-chat")
-      else
-        __CATS_UNINSTALL_WARNINGS+=("uv_tool_uninstall_failed:aider-chat")
-      fi
-    else
-      __CATS_UNINSTALL_WARNINGS+=("uv_missing_aider_chat_may_remain")
-    fi
-    __CATS_UNINSTALL_WARNINGS+=("bundled_uv_left_in_place_provenance_unknown")
+  # The muse launcher is not the tool either: every muse-bin-<version> build it
+  # has downloaded, plus its .muse-* state files, sit in the same directory and
+  # survive removing the launcher alone. They are named deterministically, so
+  # they can be removed without guessing at unrelated files in ~/.local/bin.
+  if [ "$provider" = 'muse' ]; then
+    local muse_dir muse_leftover
+    muse_dir="$(muse_install_dir)"
+    for muse_leftover in "$muse_dir"/muse-bin-* "$muse_dir"/.muse-*; do
+      case "$muse_leftover" in
+        "$HOME"/*)
+          if [ -e "$muse_leftover" ] || [ -L "$muse_leftover" ]; then
+            planned_paths+=("$muse_leftover")
+          fi
+          ;;
+      esac
+    done
   fi
 
   for path in "${planned_paths[@]}"; do
@@ -796,7 +869,7 @@ run_native_provider_installer() {
 
   if command_path="$(detect_provider_command "$platform" "$provider")"; then
     initial_installed='true'
-    detected_version="$(provider_version_line "$command_path")"
+    detected_version="$(provider_version_line "$command_path" "$provider")"
     if [ "$check_only" = 'true' ]; then
       if [ "$emit_json" = 'true' ]; then
         printf '{'
@@ -928,7 +1001,7 @@ run_native_provider_installer() {
 
   while [ $attempt -le 3 ]; do
     if command_path="$(detect_provider_command "$platform" "$provider")"; then
-      detected_version="$(provider_version_line "$command_path")"
+      detected_version="$(provider_version_line "$command_path" "$provider")"
       if [ "$emit_json" = 'true' ]; then
         warnings=("Reload your shell if ${display_name} is not visible yet: source ${shell_rc}")
         printf '{'

package/scripts/linux/sync-agent-skills.sh

@@ -76,11 +76,33 @@ if [[ -n "$agent" ]]; then
 fi
 
 skill_dirs=()
-for entry in "$skills_dir"/*; do
-  [[ -d "$entry" ]] || continue
-  [[ -f "$entry/SKILL.md" ]] || continue
-  skill_dirs+=("$entry")
-done
+discover_skills() {
+  local entry skill_name existing existing_name
+  for entry in "$1"/*; do
+    [[ -d "$entry" ]] || continue
+    [[ "$entry" != *.bootstrap ]] || continue
+    if [[ -L "$entry" ]]; then
+      echo "Linked skill directories are not supported: $entry" >&2
+      exit 1
+    fi
+    if [[ -f "$entry/SKILL.md" ]]; then
+      skill_name="$(basename "$entry" | tr '[:upper:]' '[:lower:]')"
+      # macOS Bash 3.2 treats an empty array as unset under nounset.
+      for existing in ${skill_dirs[@]+"${skill_dirs[@]}"}; do
+        existing_name="$(basename "$existing" | tr '[:upper:]' '[:lower:]')"
+        if [[ "$skill_name" == "$existing_name" ]]; then
+          echo "Duplicate skill '$skill_name': $existing and $entry" >&2
+          exit 1
+        fi
+      done
+      skill_dirs+=("$entry")
+      # Resources inside this package are copied intact, never discovered again.
+    else
+      discover_skills "$entry"
+    fi
+  done
+}
+discover_skills "$skills_dir"
 
 if [[ ${#skill_dirs[@]} -eq 0 ]]; then
   echo "No skills found in $skills_dir (no directories with SKILL.md)" >&2

package/scripts/linux/test-linux-package-smoke.sh

@@ -37,10 +37,11 @@ assert_file "${RESOURCES_ROOT}/app-sidecar/build/renderer/index.html" 'bundled c
 assert_file "${RESOURCES_ROOT}/app-sidecar/package.json" 'bundled cats app package manifest'
 assert_file "${RESOURCES_ROOT}/app-sidecar/node_modules/js-yaml/package.json" 'bundled cats app js-yaml dependency marker'
 assert_file "${RESOURCES_ROOT}/app-sidecar/node_modules/argparse/package.json" 'bundled cats app argparse dependency marker'
+assert_file "${RESOURCES_ROOT}/app-sidecar/config/provider-capability-bootstrap.yaml.example" 'bundled cats capability bootstrap example'
 assert_file "${RESOURCES_ROOT}/cats-runtime/build/runtime/index.js" 'bundled cats-runtime entry'
 assert_file "${RESOURCES_ROOT}/cats-runtime/package.json" 'bundled cats-runtime package manifest'
 assert_file "${RESOURCES_ROOT}/cats-runtime/public/provider-setup.html" 'bundled cats-runtime setup UI'
-assert_file "${RESOURCES_ROOT}/cats-runtime/skills/README.md" 'bundled cats-runtime skills catalog root'
+assert_file "${RESOURCES_ROOT}/cats-runtime/runtime-skills/README.md" 'bundled cats-runtime skills catalog root'
 assert_file "${RESOURCES_ROOT}/cats-runtime/config/management.yaml.example" 'bundled cats-runtime management config example'
 assert_file "${RESOURCES_ROOT}/cats-runtime/config/providers.yaml.example" 'bundled cats-runtime provider config example'
 assert_file "${RESOURCES_ROOT}/cats-runtime/config/curated-model-catalogs.yaml.example" 'bundled cats-runtime curated model catalog example'
@@ -53,7 +54,7 @@ assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-antigravity.sh
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-grok.sh" 'bundled Linux Grok installer helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-cline.sh" 'bundled Linux Cline installer helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-devin.sh" 'bundled Linux Devin installer helper'
-assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-aider.sh" 'bundled Linux Aider installer helper'
+assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-meta-cli.sh" 'bundled Linux Meta Muse installer helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-copilot.sh" 'bundled Linux GitHub Copilot installer helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-opencode.sh" 'bundled Linux OpenCode installer helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-kilo.sh" 'bundled Linux Kilo Code installer helper'
@@ -102,7 +103,7 @@ assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-antigravi
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-grok-native-installer-script'), 'Linux target includes the bundled Grok installer asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-cline-native-installer-script'), 'Linux target includes the bundled Cline installer asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-devin-native-installer-script'), 'Linux target includes the bundled Devin installer asset');
-assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-aider-native-installer-script'), 'Linux target includes the bundled Aider installer asset');
+assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-muse-native-installer-script'), 'Linux target includes the bundled Meta Muse installer asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-setup-readiness-audit-script'), 'Linux target includes the bundled readiness audit asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-provider-cli-common-support-script'), 'Linux target includes the Linux provider helper asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-node-cli-common-support-script'), 'Linux target includes the Linux npm helper asset');

package/scripts/linux/upgrade-cli-tools.sh

@@ -35,7 +35,7 @@ while [ $# -gt 0 ]; do
   shift
 done
 
-for script_name in install-claude-code.sh install-antigravity.sh install-cursor-agent.sh install-devin.sh install-aider.sh install-goose.sh install-junie.sh install-kiro-cli.sh install-grok.sh; do
+for script_name in install-claude-code.sh install-antigravity.sh install-cursor-agent.sh install-devin.sh install-meta-cli.sh install-goose.sh install-junie.sh install-kiro-cli.sh install-grok.sh; do
   "$SCRIPT_DIR/$script_name" -Upgrade
 done
 

package/scripts/macos/build-desktop-package.sh

@@ -20,11 +20,11 @@ SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
 PROJECT_ROOT="$(cd -- "${SCRIPT_DIR}/../.." && pwd)"
 PLATFORM="${1:-all}"
 OUTPUT_DIR="${2:-}"
+APPS_LOCK="${3:-}"
 
 cd "${PROJECT_ROOT}"
 npm run build
-if [[ -n "${OUTPUT_DIR}" ]]; then
-  node ./scripts/package-desktop.mjs --platform "${PLATFORM}" --output-dir "${OUTPUT_DIR}"
-else
-  node ./scripts/package-desktop.mjs --platform "${PLATFORM}"
-fi
+package_args=(./scripts/package-desktop.mjs --platform "${PLATFORM}")
+if [[ -n "${OUTPUT_DIR}" ]]; then package_args+=(--output-dir "${OUTPUT_DIR}"); fi
+if [[ -n "${APPS_LOCK}" ]]; then package_args+=(--apps-lock "${APPS_LOCK}"); fi
+node "${package_args[@]}"

package/scripts/macos/install-meta-cli.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=provider-cli-common.sh
+source "$SCRIPT_DIR/provider-cli-common.sh"
+
+run_native_provider_installer 'macos' 'muse' "$@"

package/scripts/macos/provider-cli-common.sh

@@ -52,7 +52,7 @@ provider_display_name() {
     antigravity) printf '%s\n' 'Antigravity CLI' ;;
     grok) printf '%s\n' 'Grok CLI' ;;
     devin) printf '%s\n' 'Devin CLI' ;;
-    aider) printf '%s\n' 'Aider' ;;
+    muse) printf '%s\n' 'Meta Muse CLI' ;;
     claude) printf '%s\n' 'Claude Code CLI' ;;
     cursor) printf '%s\n' 'Cursor Agent CLI' ;;
     goose) printf '%s\n' 'Goose CLI' ;;
@@ -67,7 +67,7 @@ provider_primary_command() {
     antigravity) printf '%s\n' 'agy' ;;
     grok) printf '%s\n' 'grok' ;;
     devin) printf '%s\n' 'devin' ;;
-    aider) printf '%s\n' 'aider' ;;
+    muse) printf '%s\n' 'muse' ;;
     claude) printf '%s\n' 'claude' ;;
     cursor) printf '%s\n' 'cursor-agent' ;;
     goose) printf '%s\n' 'goose' ;;
@@ -98,7 +98,7 @@ provider_install_url() {
     antigravity) printf '%s\n' 'https://antigravity.google/cli/install.sh' ;;
     grok) printf '%s\n' 'https://x.ai/cli/install.sh' ;;
     devin) printf '%s\n' 'https://cli.devin.ai/install.sh' ;;
-    aider) printf '%s\n' 'https://aider.chat/install.sh' ;;
+    muse) printf '%s\n' 'https://dev.meta.ai/install.sh' ;;
     claude) printf '%s\n' 'https://claude.ai/install.sh' ;;
     cursor) printf '%s\n' 'https://cursor.com/install' ;;
     goose) printf '%s\n' 'https://github.com/block/goose/releases/download/stable/download_cli.sh' ;;
@@ -111,6 +111,7 @@ provider_install_url() {
 provider_install_dir() {
   case "$1" in
     grok) printf '%s\n' "$HOME/.grok/bin" ;;
+    muse) muse_install_dir ;;
     *) printf '%s\n' "$HOME/.local/bin" ;;
   esac
 }
@@ -249,12 +250,59 @@ ensure_provider_alias() {
   fi
 }
 
+# muse's install directory holds the launcher, its state files, and one
+# muse-bin-<version> build per version it has downloaded.
+muse_install_dir() {
+  printf '%s\n' "${MUSE_INSTALL_DIR:-$HOME/.local/bin}"
+}
+
+# The version comes from the launcher's own state file, never from running muse.
+# The launcher forwards every argument straight to the agent binary, so a flag
+# that binary does not recognise opens the interactive TUI and hangs an
+# unattended setup run forever.
+muse_installed_version() {
+  local version_file
+  version_file="$(muse_install_dir)/.muse-version"
+  if [ -r "$version_file" ]; then
+    tr -d '\r\n' < "$version_file"
+  fi
+}
+
+# "Installed" means the launcher actually fetched a build. The official
+# installer writes the launcher first and downloads muse-bin-<version> last, so
+# a run that dies in between leaves a launcher with nothing behind it. Treating
+# that as installed would skip the reinstall that repairs it.
+muse_install_complete() {
+  local dir version
+  dir="$(muse_install_dir)"
+  [ -x "$dir/muse" ] || return 1
+  version="$(muse_installed_version)"
+  [ -n "$version" ] || return 1
+  [ -x "$dir/muse-bin-$version" ]
+}
+
 detect_provider_command() {
   local platform="$1"
   local provider="$2"
   local primary_command
   local candidate
 
+  if [ "$provider" = 'muse' ]; then
+    if muse_install_complete; then
+      prepend_path_if_missing "$(muse_install_dir)"
+      printf '%s\n' "$(muse_install_dir)/muse"
+      return 0
+    fi
+    # A muse elsewhere on PATH is someone's own install; report it rather than
+    # claiming the tool is missing, but never treat a half-written install
+    # directory as one.
+    if [ -x "$(muse_install_dir)/muse" ]; then
+      return 1
+    fi
+    command -v muse 2>/dev/null && return 0
+    return 1
+  fi
+
   primary_command="$(provider_primary_command "$provider")"
   if command -v "$primary_command" >/dev/null 2>&1; then
     command -v "$primary_command"
@@ -276,9 +324,36 @@ EOF
 
 provider_version_line() {
   local command_path="$1"
+  local provider="${2:-}"
+
+  # muse is read, never run: see muse_installed_version.
+  if [ "$provider" = 'muse' ]; then
+    muse_installed_version
+    return 0
+  fi
+
   "$command_path" --version 2>&1 | head -1 || true
 }
 
+# `curl ... | bash` returns 0 when the download itself fails, because bash reads
+# empty input and succeeds. Staging the script first is what makes a failed
+# install report as a failure.
+run_downloaded_shell_installer() {
+  local url="$1"
+  local installer_path status=0
+
+  installer_path="$(mktemp)"
+  if ! curl -fsSL "$url" -o "$installer_path"; then
+    rm -f "$installer_path"
+    printf 'Failed to download the installer from %s\n' "$url" >&2
+    return 1
+  fi
+
+  bash "$installer_path" < /dev/null || status=$?
+  rm -f "$installer_path"
+  return "$status"
+}
+
 # Devin's official install.sh ends by launching the interactive `devin setup`
 # wizard. Packaged setup runs non-interactively with no console a prompt can
 # reach, so an unstripped installer would stall the step rather than fail.
@@ -342,8 +417,10 @@ run_remote_pipe_installer() {
     goose)
       curl -fsSL "$url" | env CONFIGURE=false bash
       ;;
-    aider)
-      curl -LsSf "$url" | sh
+    muse)
+      # Download first, then run: with `curl ... | bash` a failed download still
+      # exits 0, because bash reads empty input and succeeds.
+      run_downloaded_shell_installer "$url"
       ;;
     cursor)
       curl "$url" -fsSL | bash
@@ -424,7 +501,9 @@ run_provider_install_action() {
     devin)
       run_devin_installer
       ;;
-    aider)
+    muse)
+      # The official installer always refreshes the launcher and asks it to pull
+      # the newest build, so install, upgrade, and force are the same call.
       run_remote_pipe_installer "$provider"
       ;;
     claude)
@@ -559,28 +638,22 @@ UPNP_EOF
     esac
   fi
 
-  # ~/.local/bin/aider is a uv tool shim, not the tool. Removing only the shim
-  # leaves aider-chat installed in the uv tool environment and the shim
-  # regenerable by any later `uv tool` command, so the tool is uninstalled
-  # through uv first and path removal only mops up what uv left behind.
-  #
-  # The uv binary itself is deliberately left in place: Aider's installer drops
-  # its own uv into ~/.local/bin, users commonly have another, and the helper
-  # cannot tell them apart. Removing a uv the user installed separately is a
-  # destructive false positive, so this warns instead (SPEC-112 PD4).
-  if [ "$provider" = 'aider' ]; then
-    if command -v uv >/dev/null 2>&1; then
-      if [ "$dry_run" = 'true' ]; then
-        __CATS_UNINSTALL_PLANNED+=("uv_tool_uninstall:aider-chat")
-      elif uv tool uninstall aider-chat >/dev/null 2>&1; then
-        __CATS_UNINSTALL_APPLIED+=("uv_tool_uninstalled:aider-chat")
-      else
-        __CATS_UNINSTALL_WARNINGS+=("uv_tool_uninstall_failed:aider-chat")
-      fi
-    else
-      __CATS_UNINSTALL_WARNINGS+=("uv_missing_aider_chat_may_remain")
-    fi
-    __CATS_UNINSTALL_WARNINGS+=("bundled_uv_left_in_place_provenance_unknown")
+  # The muse launcher is not the tool either: every muse-bin-<version> build it
+  # has downloaded, plus its .muse-* state files, sit in the same directory and
+  # survive removing the launcher alone. They are named deterministically, so
+  # they can be removed without guessing at unrelated files in ~/.local/bin.
+  if [ "$provider" = 'muse' ]; then
+    local muse_dir muse_leftover
+    muse_dir="$(muse_install_dir)"
+    for muse_leftover in "$muse_dir"/muse-bin-* "$muse_dir"/.muse-*; do
+      case "$muse_leftover" in
+        "$HOME"/*)
+          if [ -e "$muse_leftover" ] || [ -L "$muse_leftover" ]; then
+            planned_paths+=("$muse_leftover")
+          fi
+          ;;
+      esac
+    done
   fi
 
   for path in "${planned_paths[@]}"; do
@@ -796,7 +869,7 @@ run_native_provider_installer() {
 
   if command_path="$(detect_provider_command "$platform" "$provider")"; then
     initial_installed='true'
-    detected_version="$(provider_version_line "$command_path")"
+    detected_version="$(provider_version_line "$command_path" "$provider")"
     if [ "$check_only" = 'true' ]; then
       if [ "$emit_json" = 'true' ]; then
         printf '{'
@@ -928,7 +1001,7 @@ run_native_provider_installer() {
 
   while [ $attempt -le 3 ]; do
     if command_path="$(detect_provider_command "$platform" "$provider")"; then
-      detected_version="$(provider_version_line "$command_path")"
+      detected_version="$(provider_version_line "$command_path" "$provider")"
       if [ "$emit_json" = 'true' ]; then
         warnings=("Reload your shell if ${display_name} is not visible yet: source ${shell_rc}")
         printf '{'

package/scripts/macos/sync-agent-skills.sh

@@ -76,11 +76,33 @@ if [[ -n "$agent" ]]; then
 fi
 
 skill_dirs=()
-for entry in "$skills_dir"/*; do
-  [[ -d "$entry" ]] || continue
-  [[ -f "$entry/SKILL.md" ]] || continue
-  skill_dirs+=("$entry")
-done
+discover_skills() {
+  local entry skill_name existing existing_name
+  for entry in "$1"/*; do
+    [[ -d "$entry" ]] || continue
+    [[ "$entry" != *.bootstrap ]] || continue
+    if [[ -L "$entry" ]]; then
+      echo "Linked skill directories are not supported: $entry" >&2
+      exit 1
+    fi
+    if [[ -f "$entry/SKILL.md" ]]; then
+      skill_name="$(basename "$entry" | tr '[:upper:]' '[:lower:]')"
+      # macOS Bash 3.2 treats an empty array as unset under nounset.
+      for existing in ${skill_dirs[@]+"${skill_dirs[@]}"}; do
+        existing_name="$(basename "$existing" | tr '[:upper:]' '[:lower:]')"
+        if [[ "$skill_name" == "$existing_name" ]]; then
+          echo "Duplicate skill '$skill_name': $existing and $entry" >&2
+          exit 1
+        fi
+      done
+      skill_dirs+=("$entry")
+      # Resources inside this package are copied intact, never discovered again.
+    else
+      discover_skills "$entry"
+    fi
+  done
+}
+discover_skills "$skills_dir"
 
 if [[ ${#skill_dirs[@]} -eq 0 ]]; then
   echo "No skills found in $skills_dir (no directories with SKILL.md)" >&2