@cats-inc/cats-platform 0.1.7 → 0.1.9

package/scripts/linux/provider-cli-common.sh

@@ -50,6 +50,9 @@ platform_label() {
 provider_display_name() {
   case "$1" in
     antigravity) printf '%s\n' 'Antigravity CLI' ;;
+    grok) printf '%s\n' 'Grok CLI' ;;
+    devin) printf '%s\n' 'Devin CLI' ;;
+    aider) printf '%s\n' 'Aider' ;;
     claude) printf '%s\n' 'Claude Code CLI' ;;
     cursor) printf '%s\n' 'Cursor Agent CLI' ;;
     goose) printf '%s\n' 'Goose CLI' ;;
@@ -62,6 +65,9 @@ provider_display_name() {
 provider_primary_command() {
   case "$1" in
     antigravity) printf '%s\n' 'agy' ;;
+    grok) printf '%s\n' 'grok' ;;
+    devin) printf '%s\n' 'devin' ;;
+    aider) printf '%s\n' 'aider' ;;
     claude) printf '%s\n' 'claude' ;;
     cursor) printf '%s\n' 'cursor-agent' ;;
     goose) printf '%s\n' 'goose' ;;
@@ -90,6 +96,9 @@ provider_alias_target() {
 provider_install_url() {
   case "$1" in
     antigravity) printf '%s\n' 'https://antigravity.google/cli/install.sh' ;;
+    grok) printf '%s\n' 'https://x.ai/cli/install.sh' ;;
+    devin) printf '%s\n' 'https://cli.devin.ai/install.sh' ;;
+    aider) printf '%s\n' 'https://aider.chat/install.sh' ;;
     claude) printf '%s\n' 'https://claude.ai/install.sh' ;;
     cursor) printf '%s\n' 'https://cursor.com/install' ;;
     goose) printf '%s\n' 'https://github.com/block/goose/releases/download/stable/download_cli.sh' ;;
@@ -99,28 +108,25 @@ provider_install_url() {
   esac
 }
 
+provider_install_dir() {
+  case "$1" in
+    grok) printf '%s\n' "$HOME/.grok/bin" ;;
+    *) printf '%s\n' "$HOME/.local/bin" ;;
+  esac
+}
+
 provider_binary_candidates() {
   local platform="$1"
   local provider="$2"
+  local install_dir
+  local primary_command
+
+  install_dir="$(provider_install_dir "$provider")"
+  primary_command="$(provider_primary_command "$provider")"
+  printf '%s\n' "$install_dir/$primary_command"
 
   case "$provider" in
-    antigravity)
-      printf '%s\n' "$HOME/.local/bin/agy"
-      ;;
-    claude)
-      printf '%s\n' "$HOME/.local/bin/claude"
-      ;;
-    cursor)
-      printf '%s\n' "$HOME/.local/bin/cursor-agent"
-      ;;
-    goose)
-      printf '%s\n' "$HOME/.local/bin/goose"
-      ;;
-    junie)
-      printf '%s\n' "$HOME/.local/bin/junie"
-      ;;
     kiro)
-      printf '%s\n' "$HOME/.local/bin/kiro-cli"
       printf '%s\n' '/usr/local/bin/kiro-cli'
       printf '%s\n' '/opt/homebrew/bin/kiro-cli'
       if [ "$platform" = 'macos' ]; then
@@ -169,11 +175,21 @@ prepend_path_if_missing() {
   fi
 }
 
-ensure_local_bin_path_export() {
+ensure_provider_bin_path_export() {
   local shell_rc="$1"
+  local provider="$2"
+  local install_dir
+  local path_export
+
+  install_dir="$(provider_install_dir "$provider")"
+  if [ "$provider" = 'grok' ]; then
+    path_export='export PATH="$HOME/.grok/bin:$PATH"'
+  else
+    path_export='export PATH="$HOME/.local/bin:$PATH"'
+  fi
   append_line_if_missing "$shell_rc" '# Added by cats-platform self-hosted provider helpers' '# Added by cats-platform self-hosted provider helpers'
-  append_line_if_missing "$shell_rc" 'export PATH="$HOME/.local/bin:$PATH"' 'export PATH="$HOME/.local/bin:$PATH"'
-  prepend_path_if_missing "$HOME/.local/bin"
+  append_line_if_missing "$shell_rc" "$path_export" "$path_export"
+  prepend_path_if_missing "$install_dir"
 }
 
 rewrite_alias_line() {
@@ -263,6 +279,56 @@ provider_version_line() {
   "$command_path" --version 2>&1 | head -1 || true
 }
 
+# Devin's official install.sh ends by launching the interactive `devin setup`
+# wizard. Packaged setup runs non-interactively with no console a prompt can
+# reach, so an unstripped installer would stall the step rather than fail.
+#
+# Verified against https://cli.devin.ai/install.sh on 2026-08-09: the file is
+# 286 lines and its final line is
+#   "$VERSION_DIR/bin/$COMPILED_BIN_NAME" setup
+# which is also the only line in the file ending in " setup".
+#
+# The helper neutralises exactly that line and refuses to run the script when
+# the shape does not match, rather than executing an unrecognised installer on
+# a guess. stdin from /dev/null stays as insurance for any prompt added earlier
+# in the script.
+run_devin_installer() {
+  local installer_path=''
+  local patched_path=''
+  local trailing_matches=0
+  local status=0
+
+  installer_path="$(mktemp)"
+  patched_path="$(mktemp)"
+
+  if ! curl -fsSL "$(provider_install_url devin)" -o "$installer_path"; then
+    rm -f "$installer_path" "$patched_path"
+    printf 'Failed to download the Devin installer.\n' >&2
+    return 1
+  fi
+
+  trailing_matches="$(grep -cE ' setup$' "$installer_path" || true)"
+  if [ "$trailing_matches" != '1' ]; then
+    rm -f "$installer_path" "$patched_path"
+    printf 'Refusing to run the Devin installer: expected exactly one interactive setup invocation, found %s. Install Devin with the upstream installer and report this.\n' \
+      "$trailing_matches" >&2
+    return 1
+  fi
+
+  # Restrict the edit to the final line so an unrelated match elsewhere can
+  # never be silently rewritten.
+  sed -e '$ s|^.* setup$|: skipped interactive devin setup|' "$installer_path" > "$patched_path"
+  if cmp -s "$installer_path" "$patched_path"; then
+    rm -f "$installer_path" "$patched_path"
+    printf 'Refusing to run the Devin installer: the interactive setup invocation is no longer the final line.\n' >&2
+    return 1
+  fi
+
+  bash "$patched_path" < /dev/null || status=$?
+  rm -f "$installer_path" "$patched_path"
+  return "$status"
+}
+
 run_remote_pipe_installer() {
   local provider="$1"
   shift
@@ -270,12 +336,15 @@ run_remote_pipe_installer() {
   url="$(provider_install_url "$provider")"
 
   case "$provider" in
-    antigravity)
+    antigravity|grok)
       curl -fsSL "$url" | bash
       ;;
     goose)
       curl -fsSL "$url" | env CONFIGURE=false bash
       ;;
+    aider)
+      curl -LsSf "$url" | sh
+      ;;
     cursor)
       curl "$url" -fsSL | bash
       ;;
@@ -349,6 +418,15 @@ run_provider_install_action() {
         run_remote_pipe_installer "$provider"
       fi
       ;;
+    grok)
+      run_remote_pipe_installer "$provider"
+      ;;
+    devin)
+      run_devin_installer
+      ;;
+    aider)
+      run_remote_pipe_installer "$provider"
+      ;;
     claude)
       if [ "$action" = 'upgrade' ] && current_command="$(detect_provider_command "$platform" "$provider")"; then
         "$current_command" update || true
@@ -399,6 +477,20 @@ __CATS_UNINSTALL_APPLIED=()
 __CATS_UNINSTALL_WARNINGS=()
 __CATS_UNINSTALL_REMAINING=''
 
+# Steps the helper cannot perform for the user. Packaged Devin installs strip
+# the installer's trailing interactive wizard, so authentication is always still
+# owed after a successful install; a "ready" result must not imply otherwise.
+provider_manual_steps() {
+  case "$1" in
+    devin)
+      printf '%s\n' 'Run devin auth login once to authenticate; packaged setup skips the interactive wizard. Check with devin auth status.'
+      ;;
+    *)
+      :
+      ;;
+  esac
+}
+
 uninstall_provider_native_paths() {
   local platform="$1"
   local provider="$2"
@@ -413,7 +505,7 @@ uninstall_provider_native_paths() {
   local planned_paths=()
 
   primary_command="$(provider_primary_command "$provider")"
-  if primary_path="$(command -v "$primary_command" 2>/dev/null)"; then
+  if [ "$provider" != 'grok' ] && primary_path="$(command -v "$primary_command" 2>/dev/null)"; then
     case "$primary_path" in
       "$HOME"/*) planned_paths+=("$primary_path") ;;
     esac
@@ -447,6 +539,50 @@ UPNP_EOF
     fi
   fi
 
+  if [ "$provider" = 'grok' ]; then
+    extra="$(provider_install_dir "$provider")/agent"
+    if [ -e "$extra" ] || [ -L "$extra" ]; then
+      planned_paths+=("$extra")
+    fi
+  fi
+
+  # Devin's shim in ~/.local/bin points at a versioned tree; removing only the
+  # shim would leave every installed version behind.
+  if [ "$provider" = 'devin' ]; then
+    extra="${XDG_DATA_HOME:-$HOME/.local/share}/devin/cli"
+    case "$extra" in
+      "$HOME"/*)
+        if [ -d "$extra" ]; then
+          planned_paths+=("$extra")
+        fi
+        ;;
+    esac
+  fi
+
+  # ~/.local/bin/aider is a uv tool shim, not the tool. Removing only the shim
+  # leaves aider-chat installed in the uv tool environment and the shim
+  # regenerable by any later `uv tool` command, so the tool is uninstalled
+  # through uv first and path removal only mops up what uv left behind.
+  #
+  # The uv binary itself is deliberately left in place: Aider's installer drops
+  # its own uv into ~/.local/bin, users commonly have another, and the helper
+  # cannot tell them apart. Removing a uv the user installed separately is a
+  # destructive false positive, so this warns instead (SPEC-112 PD4).
+  if [ "$provider" = 'aider' ]; then
+    if command -v uv >/dev/null 2>&1; then
+      if [ "$dry_run" = 'true' ]; then
+        __CATS_UNINSTALL_PLANNED+=("uv_tool_uninstall:aider-chat")
+      elif uv tool uninstall aider-chat >/dev/null 2>&1; then
+        __CATS_UNINSTALL_APPLIED+=("uv_tool_uninstalled:aider-chat")
+      else
+        __CATS_UNINSTALL_WARNINGS+=("uv_tool_uninstall_failed:aider-chat")
+      fi
+    else
+      __CATS_UNINSTALL_WARNINGS+=("uv_missing_aider_chat_may_remain")
+    fi
+    __CATS_UNINSTALL_WARNINGS+=("bundled_uv_left_in_place_provenance_unknown")
+  fi
+
   for path in "${planned_paths[@]}"; do
     __CATS_UNINSTALL_PLANNED+=("remove:$path")
   done
@@ -683,7 +819,7 @@ run_native_provider_installer() {
     fi
 
     if [ "$force" = 'false' ] && [ "$upgrade" = 'false' ]; then
-      ensure_local_bin_path_export "$shell_rc"
+      ensure_provider_bin_path_export "$shell_rc" "$provider"
       ensure_provider_alias "$shell_rc" "$provider"
       if [ "$emit_json" = 'true' ]; then
         printf '{'
@@ -787,7 +923,7 @@ run_native_provider_installer() {
   fi
   applied_changes=("${planned_actions[@]}")
 
-  ensure_local_bin_path_export "$shell_rc"
+  ensure_provider_bin_path_export "$shell_rc" "$provider"
   ensure_provider_alias "$shell_rc" "$provider"
 
   while [ $attempt -le 3 ]; do
@@ -811,7 +947,9 @@ run_native_provider_installer() {
         printf '"warnings":'
         json_string_array "${warnings[@]}"
         printf ','
-        printf '"manualSteps":[],'
+        printf '"manualSteps":'
+        json_string_array "$(provider_manual_steps "$provider")"
+        printf ','
         printf '"interruptions":[]'
         printf '}\n'
       else

package/scripts/linux/test-linux-package-smoke.sh

@@ -50,6 +50,10 @@ assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-github-cli.sh"
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/setup-node-global-prefix.sh" 'bundled Linux npm prefix helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-codex.sh" 'bundled Linux OpenAI Codex installer helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-antigravity.sh" 'bundled Linux Antigravity installer helper'
+assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-grok.sh" 'bundled Linux Grok installer helper'
+assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-cline.sh" 'bundled Linux Cline installer helper'
+assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-devin.sh" 'bundled Linux Devin installer helper'
+assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-aider.sh" 'bundled Linux Aider installer helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-copilot.sh" 'bundled Linux GitHub Copilot installer helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-opencode.sh" 'bundled Linux OpenCode installer helper'
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/install-kilo.sh" 'bundled Linux Kilo Code installer helper'
@@ -66,6 +70,12 @@ assert_file "${RESOURCES_ROOT}/desktop/setup-assets/linux/node-cli-common.sh" 'b
 assert_file "${RESOURCES_ROOT}/desktop/setup-assets/manifest.json" 'bundled setup-assets manifest'
 assert_file "${PLAN_PATH}" 'bundled desktop packaging plan'
 
+GROK_HELPER="${RESOURCES_ROOT}/desktop/setup-assets/linux/install-grok.sh"
+bash "${GROK_HELPER}" --check --json >/dev/null
+pass 'bundled Linux Grok helper check mode completed'
+bash "${GROK_HELPER}" --force --dry-run --json >/dev/null
+pass 'bundled Linux Grok helper dry-run mode completed'
+
 node - <<'NODE' "${PLAN_PATH}"
 const fs = require('node:fs');
 
@@ -89,10 +99,16 @@ assert(linuxTarget.installerFormats.includes('deb'), 'Linux target includes deb
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-opencode-native-installer-script'), 'Linux target includes the bundled OpenCode installer asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-codex-native-installer-script'), 'Linux target includes the bundled OpenAI Codex installer asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-antigravity-native-installer-script'), 'Linux target includes the bundled Antigravity installer asset');
+assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-grok-native-installer-script'), 'Linux target includes the bundled Grok installer asset');
+assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-cline-native-installer-script'), 'Linux target includes the bundled Cline installer asset');
+assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-devin-native-installer-script'), 'Linux target includes the bundled Devin installer asset');
+assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-aider-native-installer-script'), 'Linux target includes the bundled Aider installer asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-setup-readiness-audit-script'), 'Linux target includes the bundled readiness audit asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-provider-cli-common-support-script'), 'Linux target includes the Linux provider helper asset');
 assert(linuxTarget.artifacts.some((artifact) => artifact.id === 'linux-node-cli-common-support-script'), 'Linux target includes the Linux npm helper asset');
 assert(plan.installer.providerSetup.localProviders.some((provider) => provider.id === 'kiro' && provider.platform === 'linux'), 'installer contract keeps Kiro in the Linux bundled local-provider rollout');
+assert(plan.installer.providerSetup.localProviders.some((provider) => provider.id === 'grok' && provider.platform === 'linux'), 'installer contract keeps Grok in the Linux bundled local-provider rollout');
+assert(plan.installer.providerSetup.localProviders.some((provider) => provider.id === 'cline' && provider.platform === 'linux'), 'installer contract keeps Cline in the Linux bundled local-provider rollout');
 assert(plan.installer.providerSetup.helperCatalog.some((helper) => helper.id === 'linux-install-readiness-audit'), 'installer contract includes Linux readiness helper metadata');
 assert(!plan.installer.providerSetup.helperCatalog.some((helper) => helper.id === 'windows-install-readiness-audit'), 'installer contract omits Windows-only helper metadata from the Linux package');
 NODE

package/scripts/linux/upgrade-cli-tools.sh

@@ -35,12 +35,12 @@ while [ $# -gt 0 ]; do
   shift
 done
 
-for script_name in install-claude-code.sh install-antigravity.sh install-cursor-agent.sh install-goose.sh install-junie.sh install-kiro-cli.sh; do
+for script_name in install-claude-code.sh install-antigravity.sh install-cursor-agent.sh install-devin.sh install-aider.sh install-goose.sh install-junie.sh install-kiro-cli.sh install-grok.sh; do
   "$SCRIPT_DIR/$script_name" -Upgrade
 done
 
 if [ "$skip_node" = 'false' ]; then
-  for script_name in install-codex.sh install-copilot.sh install-opencode.sh install-kilo.sh install-auggie.sh install-pi.sh; do
+  for script_name in install-codex.sh install-copilot.sh install-opencode.sh install-kilo.sh install-auggie.sh install-pi.sh install-cline.sh; do
     "$SCRIPT_DIR/$script_name" -upgrade
   done
 fi

package/scripts/macos/install-aider.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=provider-cli-common.sh
+. "$SCRIPT_DIR/provider-cli-common.sh"
+
+run_native_provider_installer 'macos' 'aider' "$@"

package/scripts/macos/install-cline.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=node-cli-common.sh
+. "$SCRIPT_DIR/node-cli-common.sh"
+
+run_npm_cli_provider 'macos' 'cline' 'cline' 'cline' 'Cline CLI' "$@"

package/scripts/macos/install-devin.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=provider-cli-common.sh
+. "$SCRIPT_DIR/provider-cli-common.sh"
+
+run_native_provider_installer 'macos' 'devin' "$@"

package/scripts/macos/install-grok.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=provider-cli-common.sh
+source "$SCRIPT_DIR/provider-cli-common.sh"
+
+run_native_provider_installer 'macos' 'grok' "$@"

package/scripts/macos/install-pi.sh

@@ -5,4 +5,4 @@ SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 # shellcheck source=node-cli-common.sh
 . "$SCRIPT_DIR/node-cli-common.sh"
 
-run_npm_cli_provider 'macos' 'pi' '@mariozechner/pi-coding-agent' 'pi' 'Pi Coding Agent' "$@"
+run_npm_cli_provider 'macos' 'pi' '@earendil-works/pi-coding-agent' 'pi' 'Pi Coding Agent' "$@"

package/scripts/macos/node-cli-common.sh

@@ -316,6 +316,37 @@ run_node_prefix_setup() {
   printf 'Reload your shell if PATH is stale: source %s\n' "$shell_rc"
 }
 
+# Packages whose npm name changed upstream. npm resolves an abandoned name to its
+# final published version and reports it as current forever, so `npm outdated -g`
+# never flags it and every upgrade path silently skips it. Two packages shipping
+# the same bin also fight over the shim, which resolves to whichever installed
+# last. The superseded package is therefore removed before its replacement is
+# installed, matching environment-bootstrap cfe7785.
+node_cli_superseded_packages() {
+  case "$1" in
+    '@earendil-works/pi-coding-agent')
+      printf '%s\n' '@mariozechner/pi-coding-agent'
+      ;;
+    *)
+      :
+      ;;
+  esac
+}
+
+remove_superseded_npm_packages() {
+  local package_name="$1"
+  local legacy=''
+
+  while IFS= read -r legacy; do
+    [ -n "$legacy" ] || continue
+    npm list -g "$legacy" --depth=0 >/dev/null 2>&1 || continue
+    printf 'Removing superseded package %s (replaced by %s).\n' "$legacy" "$package_name"
+    npm uninstall -g "$legacy" >/dev/null 2>&1 || true
+  done <<EOF
+$(node_cli_superseded_packages "$package_name")
+EOF
+}
+
 node_cli_package_rows() {
   cat <<'EOF'
 codex|codex|@openai/codex|OpenAI Codex
@@ -323,7 +354,8 @@ copilot|copilot|@github/copilot|GitHub Copilot CLI
 opencode|opencode|opencode-ai|OpenCode
 kilo|kilo|@kilocode/cli|Kilo Code CLI
 auggie|auggie|@augmentcode/auggie|Auggie CLI
-pi|pi|@mariozechner/pi-coding-agent|Pi CLI
+pi|pi|@earendil-works/pi-coding-agent|Pi CLI
+cline|cline|cline|Cline CLI
 EOF
 }
 
@@ -569,6 +601,10 @@ EOF
       is_outdated='true'
     fi
 
+    if [ "$check_only" != 'true' ]; then
+      remove_superseded_npm_packages "$package_name"
+    fi
+
     if [ "$check_only" = 'true' ]; then
       if [ "$installed" = 'true' ]; then
         printf '%s installed.\n' "$display_name"
@@ -918,7 +954,7 @@ EOF
   fi
 
   if [ "$collection_mode" = 'serial' ]; then
-    for provider in claude antigravity cursor goose junie kiro; do
+    for provider in claude antigravity cursor goose junie kiro grok; do
       if command_path="$(detect_provider_command "$platform" "$provider")"; then
         handle_audited_check_result "$provider" "$(provider_display_name "$provider")" 'true' 'native' 'host' 'ready'
         unset command_path
@@ -951,7 +987,7 @@ EOF
       fi
     fi
   else
-    for provider in claude antigravity cursor goose junie kiro; do
+    for provider in claude antigravity cursor goose junie kiro grok; do
       async_file="$(mktemp)"
       async_files+=("$async_file")
       (
@@ -1118,6 +1154,10 @@ run_npm_cli_provider() {
     shift
   done
 
+  if [ "$check_only" != 'true' ] && [ "$uninstall" != 'true' ]; then
+    remove_superseded_npm_packages "$package_name"
+  fi
+
   if [ "$force" = 'true' ]; then
     upgrade='false'
   fi