@ijfw/install 1.2.5 → 1.2.7

package/CHANGELOG.md

@@ -1,5 +1,62 @@
 # Changelog
 
+## [1.2.6] -- 2026-05-01
+
+**Token sandbox + parallel workflow dispatch + DeepSeek frontier upgrade.** A new `ijfw_run` MCP tool keeps large command output out of your context window entirely -- builds, test suites, grep runs, and log tails are sandboxed to disk and summarized in a few lines instead of flooding thousands of tokens. The `ijfw-workflow` execution engine gains a formal Wave Table that makes parallel agent dispatch deterministic rather than inferred. DeepSeek moves to `deepseek-v4-pro` -- the actual frontier model -- so the Trident gets Frontier AI checking Frontier AI.
+
+### `ijfw_run` -- command output sandbox
+
+Large shell commands (builds, test suites, `grep -r`, log tails) routinely produce hundreds or thousands of lines that consume a disproportionate share of the context window. `ijfw_run` solves this at the tool level: run the command via `child_process.spawn` (never `exec` -- no RAM buffer ceiling), stream output to `~/.ijfw/session-sandbox/`, and return a domain-aware summary to context instead of the raw flood.
+
+**Domain-aware summarizers** detect output type by pattern and extract only what matters:
+- **Test runner** (Jest/Vitest/pytest/go test/cargo test): pass/fail counts + failing test names only
+- **Build** (tsc/cargo/webpack/vite/rollup): error lines only + exit code
+- **Grep**: match count + top file paths
+- **Log**: ERROR/WARN lines + counts
+- **Raw fallback**: first 15 + last 10 lines + "N lines omitted"
+
+Every summary appends the last 10 raw lines as a reliability backstop (catches segfaults, OOM kills, and non-standard failures that heuristics miss), and includes the command, exit code, duration, and a retrieval label. Commands at or under 40 lines / 50 KB return inline with zero overhead -- `ijfw_run` only sandboxes when it pays off.
+
+**Retrieval**: full output is indexed to `~/.ijfw/session-sandbox/{label}.txt` with a `.json` metadata sidecar. Retrieve with `ijfw_memory_search({ scope: "sandbox", label: "..." })` or list all current sandbox entries with `ijfw_memory_search({ scope: "sandbox" })`. Sandbox files auto-purge after 24 hours (TTL sweep runs on every `ijfw_run` call).
+
+**Security**: all labels are sanitized before becoming filenames; sandbox files are written at mode `0o600` (user-read-only); all SQLite interactions use parameterized queries; ANSI escape codes are stripped before heuristic detection and before content is returned to the LLM context.
+
+**Routing rule**: `ijfw-core` SKILL.md now carries the one-line routing rule -- large-output commands → `ijfw_run`; git, navigation, and quick ops → Bash directly.
+
+**`ijfw_memory_status` retired** to free the MCP tool slot. The case handler is preserved for backward compatibility; the tool no longer appears in `tools/list`. Status information remains available via `ijfw_memory_prelude`.
+
+**New `sanitizeForSandbox()`** in `sanitizer.js`: a sandbox-specific sanitizer that preserves newlines (unlike `sanitizeContent` which collapses to `" | "`), strips ANSI codes, defangs structural markdown elements (`#` headings, fenced code delimiters, `<system>/<prompt>/<assistant>` tags), and truncates lines over 2000 characters. Used for all LLM-facing sandbox output.
+
+**`sandbox-nudge.sh` PreToolUse hook**: registered alongside the existing `pre-tool-use.sh`, this advisory hook pattern-matches known large-output command prefixes (`npm test`, `jest`, `vitest`, `pytest`, `cargo build`, `cargo test`, `make`, `gradle`, `mvn`, `go test`, `node --test`, `tsc --`, `webpack`, `vite build`, `rollup`, `grep -r`, `find /`) and emits a one-line nudge. Advisory only -- never blocks.
+
+Files: `mcp-server/src/sandbox.js` (new), `mcp-server/src/server.js`, `mcp-server/src/sanitizer.js`, `mcp-server/test-sandbox.js` (new, 32 tests), `mcp-server/test.js` (slot-swap update), `claude/skills/ijfw-core/SKILL.md`, `claude/hooks/hooks.json`, `claude/hooks/scripts/sandbox-nudge.sh` (new).
+
+### Parallel workflow dispatch -- Wave Table
+
+The `ijfw-workflow` execution engine had a structural gap: Step 5 (Plan) described dependency relationships in prose, which meant Step 6 (Execute) had to re-infer parallelism at dispatch time. Re-inference defaults to sequential to avoid mistakes. The result: agents that could run concurrently ran one-by-one.
+
+**Step 5 now emits a Wave Table** as the first section of `plan.md`:
+
+```
+| Wave | Tasks     | Mode       | Depends on | Reason              |
+|------|-----------|------------|------------|---------------------|
+| W1   | t1, t2, t3 | PARALLEL  | --          | independent files   |
+| W2   | t4         | SEQUENTIAL | W1         | needs t2 output     |
+| W3   | t5, t6     | PARALLEL   | W2         | independent of each |
+```
+
+Wave mode is determined by a four-question dependency test before the table is written: (a) shared file writes? (b) one reads what the other writes? (c) output dependency? (d) otherwise → PARALLEL. The Wave Table is the execution contract -- decided once at plan time.
+
+**Step 6 reads the Wave Table directly**: PARALLEL waves → all tasks dispatched as Agent tool calls in a single response (they run concurrently); SEQUENTIAL waves → one Agent call, wait for result, advance. If `plan.md` has no Wave Table (legacy plans, quick-mode tasks), Step 6 builds one on the spot using the same four-question test before dispatching anything. The instruction is now unambiguous: parallel waves produce multiple tool calls in one response block, not one-by-one messages.
+
+Files: `claude/skills/ijfw-workflow/SKILL.md`.
+
+### DeepSeek Trident auditor upgraded to `deepseek-v4-pro`
+
+The 1.2.5 DeepSeek roster entry used `deepseek-v4-flash` as the API model ID -- a model that does not exist on DeepSeek Platform. Calls returned 4xx errors that surfaced as apparent timeouts. The entry is corrected to `deepseek-v4-pro`: DeepSeek's 1.6T-parameter frontier model (49B activated), supporting 1M context and dual thinking/non-thinking modes. `deepseek-chat` and `deepseek-reasoner` -- the previous canonical aliases -- are deprecated aliases for V4-Flash non-thinking and thinking modes respectively, scheduled for removal 2026-07-24. `deepseek-v4-pro` is the correct Trident-grade choice: Frontier AI checking Frontier AI.
+
+Files: `mcp-server/src/audit-roster.js`.
+
 ## [1.2.5] -- 2026-04-30
 
 **Trident roster opens to the community + actionable auditor errors + Obsidian-friendly memory + audit-cleanup pass.** A one-page contribution playbook plus two new worked examples ship the auditor roster from "what Sean ships" to "what the community can grow." DeepSeek and Kimi land as openai-compat API entries. The 1.2.4 visibility surface gets a translation layer that tells you exactly how to fix a stalled auditor. Memory layer reaffirmed as Obsidian-vault-compatible with a walkthrough. Six surfaces from a full-system Trident audit land alongside as polish. Plus a routine dev-dependency bump.

package/README.md

@@ -1,6 +1,6 @@
 # @ijfw/install
 
-One-command installer for [IJFW](https://github.com/TheRealSeanDonahoe/ijfw) -- the AI
+One-command installer for [IJFW](https://gitlab.com/therealseandonahoe/ijfw) -- the AI
 efficiency layer for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot.
 
 ## Install
@@ -43,7 +43,7 @@ Requires `node >=18`, `git`, `bash`. On native Windows use the PowerShell
 installer (PS 5.1+), which shells Git Bash under the hood -- no WSL required:
 
 ```powershell
-iwr https://raw.githubusercontent.com/TheRealSeanDonahoe/ijfw/main/installer/src/install.ps1 -OutFile install.ps1
+iwr https://gitlab.com/therealseandonahoe/ijfw/-/raw/main/installer/src/install.ps1 -OutFile install.ps1
 .\install.ps1 -Dir $env:USERPROFILE\.ijfw
 ```
 

package/dist/ijfw.js

@@ -736,7 +736,8 @@ async function run10(ctx) {
   const build = spawnSync10("npm", ["run", "build"], {
     encoding: "utf8",
     cwd: installerDir,
-    timeout: 6e4
+    timeout: 6e4,
+    shell: process.platform === "win32"
   });
   if (build.status !== 0) {
     return {
@@ -750,7 +751,8 @@ async function run10(ctx) {
   const pack = spawnSync10("npm", ["pack", "--silent"], {
     encoding: "utf8",
     cwd: installerDir,
-    timeout: 3e4
+    timeout: 3e4,
+    shell: process.platform === "win32"
   });
   if (pack.status !== 0) {
     return {
@@ -783,7 +785,8 @@ async function run10(ctx) {
       encoding: "utf8",
       cwd: installDir,
       timeout: 6e4,
-      env: { ...process.env, HOME: fakeHome, npm_config_prefix: fakeHome }
+      env: { ...process.env, HOME: fakeHome, npm_config_prefix: fakeHome },
+      shell: process.platform === "win32"
     });
     if (install.status !== 0) {
       return {
@@ -889,7 +892,8 @@ async function run11(ctx) {
   const build = spawnSync11("npm", ["run", "build"], {
     encoding: "utf8",
     cwd: installerDir,
-    timeout: 6e4
+    timeout: 6e4,
+    shell: process.platform === "win32"
   });
   if (build.status !== 0) {
     return {
@@ -903,7 +907,8 @@ async function run11(ctx) {
   const pack = spawnSync11("npm", ["pack", "--silent"], {
     encoding: "utf8",
     cwd: installerDir,
-    timeout: 3e4
+    timeout: 3e4,
+    shell: process.platform === "win32"
   });
   if (pack.status !== 0) {
     return {
@@ -929,7 +934,8 @@ async function run11(ctx) {
       encoding: "utf8",
       cwd: installDir,
       timeout: 6e4,
-      env: { ...process.env, HOME: fakeHome, npm_config_prefix: fakeHome }
+      env: { ...process.env, HOME: fakeHome, npm_config_prefix: fakeHome },
+      shell: process.platform === "win32"
     });
     if (install.status !== 0) {
       return {
@@ -2584,7 +2590,7 @@ async function main() {
       ];
       const guidePath = candidates.find((p) => existsSync3(p));
       if (!guidePath) {
-        console.error("[ijfw] Guide not found. Run `ijfw install` to fetch the full guide, or visit https://github.com/TheRealSeanDonahoe/ijfw/blob/main/docs/GUIDE.md");
+        console.error("[ijfw] Guide not found. Run `ijfw install` to fetch the full guide, or visit https://gitlab.com/therealseandonahoe/ijfw/-/blob/main/docs/GUIDE.md");
         process.exit(1);
       }
       if (wantsBrowser) {

package/dist/install.js

@@ -3,17 +3,22 @@
 // src/install.js
 import { spawnSync } from "node:child_process";
 import { existsSync as existsSync2, rmSync, mkdirSync as mkdirSync2, realpathSync, renameSync as renameSync2 } from "node:fs";
-import { resolve, join as join2, dirname as dirname2 } from "node:path";
+import { resolve as resolve2, join as join2, dirname as dirname2 } from "node:path";
 import { homedir as homedir2, platform } from "node:os";
 import { fileURLToPath } from "node:url";
 
 // src/marketplace.js
 import { readFileSync, writeFileSync, renameSync, existsSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { homedir } from "node:os";
 function claudeSettingsPath() {
   return join(homedir(), ".claude", "settings.json");
 }
+function pluginInstallPath(rootDir) {
+  if (rootDir) return resolve(rootDir, "claude");
+  if (process.env.IJFW_HOME) return resolve(process.env.IJFW_HOME, "claude");
+  return join(homedir(), ".ijfw", "claude");
+}
 function stripJsoncComments(raw) {
   if (raw.charCodeAt(0) === 65279) raw = raw.slice(1);
   let out = "";
@@ -69,7 +74,7 @@ function tolerantJsonParse(raw, filepath) {
     throw err;
   }
 }
-function mergeMarketplace(settingsPath = claudeSettingsPath()) {
+function mergeMarketplace(settingsPath = claudeSettingsPath(), options = {}) {
   let settings = {};
   if (existsSync(settingsPath)) {
     const raw = readFileSync(settingsPath, "utf8");
@@ -77,9 +82,10 @@ function mergeMarketplace(settingsPath = claudeSettingsPath()) {
   } else {
     mkdirSync(dirname(settingsPath), { recursive: true });
   }
+  const pluginPath = options.pluginPath || pluginInstallPath(options.rootDir);
   settings.extraKnownMarketplaces = settings.extraKnownMarketplaces || {};
   settings.extraKnownMarketplaces.ijfw = {
-    source: { source: "github", repo: "TheRealSeanDonahoe/ijfw" }
+    source: { source: "directory", path: pluginPath }
   };
   settings.enabledPlugins = settings.enabledPlugins || {};
   if ("ijfw-core@ijfw" in settings.enabledPlugins) {
@@ -93,7 +99,7 @@ function mergeMarketplace(settingsPath = claudeSettingsPath()) {
 }
 
 // src/install.js
-var DEFAULT_REPO = "https://github.com/TheRealSeanDonahoe/ijfw.git";
+var DEFAULT_REPO = "https://gitlab.com/therealseandonahoe/ijfw.git";
 var DEFAULT_BRANCH = "main";
 function parseArgs(argv) {
   const out = { yes: false, dir: null, noMarketplace: false, branch: DEFAULT_BRANCH, branchExplicit: false, purge: false };
@@ -202,8 +208,8 @@ function findBash() {
   return null;
 }
 function resolveTarget(opt) {
-  if (opt.dir) return resolve(opt.dir);
-  if (process.env.IJFW_HOME) return resolve(process.env.IJFW_HOME);
+  if (opt.dir) return resolve2(opt.dir);
+  if (process.env.IJFW_HOME) return resolve2(process.env.IJFW_HOME);
   return join2(homedir2(), ".ijfw");
 }
 function runCheck(cmd, args, opts) {
@@ -253,7 +259,7 @@ function runInstallScript(dir) {
   const script = join2(dir, "scripts", "install.sh");
   if (!existsSync2(script)) throw new Error(`IJFW install script not found at ${script} -- re-run the installer to restore it.`);
   const canonicalDir = join2(homedir2(), ".ijfw");
-  const isCustomDir = resolve(dir) !== canonicalDir ? "1" : "0";
+  const isCustomDir = resolve2(dir) !== canonicalDir ? "1" : "0";
   const env = {
     ...process.env,
     IJFW_NONINTERACTIVE: process.env.CI ? "1" : process.env.IJFW_NONINTERACTIVE ?? "",
@@ -296,7 +302,7 @@ async function main() {
   console.log("  platform configs applied");
   if (!opts.noMarketplace) {
     const settingsPath = claudeSettingsPath();
-    mergeMarketplace(settingsPath);
+    mergeMarketplace(settingsPath, { rootDir: target });
     console.log(`  marketplace registered in ${settingsPath}`);
   }
   console.log("");

package/dist/uninstall.js

@@ -2,13 +2,13 @@
 
 // src/uninstall.js
 import { existsSync as existsSync2, rmSync, cpSync, mkdtempSync, readFileSync as readFileSync2, writeFileSync as writeFileSync2, readdirSync } from "node:fs";
-import { resolve, join as join2 } from "node:path";
+import { resolve as resolve2, join as join2 } from "node:path";
 import { homedir as homedir2, tmpdir } from "node:os";
 import { spawnSync } from "node:child_process";
 
 // src/marketplace.js
 import { readFileSync, writeFileSync, renameSync, existsSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { homedir } from "node:os";
 function claudeSettingsPath() {
   return join(homedir(), ".claude", "settings.json");
@@ -291,8 +291,8 @@ function cleanPlatforms() {
   return removed;
 }
 function resolveTarget(opt) {
-  if (opt.dir) return resolve(opt.dir);
-  if (process.env.IJFW_HOME) return resolve(process.env.IJFW_HOME);
+  if (opt.dir) return resolve2(opt.dir);
+  if (process.env.IJFW_HOME) return resolve2(process.env.IJFW_HOME);
   return join2(homedir2(), ".ijfw");
 }
 async function main() {

package/docs/GUIDE.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <img src="https://github.com/TheRealSeanDonahoe/ijfw/releases/download/v1.1.1/ijfw-hero.png" alt="IJFW" width="100%"/>
+  <img src="https://gitlab.com/therealseandonahoe/ijfw/releases/download/v1.1.1/ijfw-hero.png" alt="IJFW" width="100%"/>
 </p>
 
 # The IJFW Guide
@@ -503,7 +503,7 @@ cat ~/.ijfw/dashboard.port
 
 ### Still stuck
 
-Every install writes a log to `~/.ijfw/install.log`. Every session writes observations to `~/.ijfw/observations.jsonl`. Open an issue at [github.com/TheRealSeanDonahoe/ijfw/issues](https://github.com/TheRealSeanDonahoe/ijfw/issues) with both files redacted and attached.
+Every install writes a log to `~/.ijfw/install.log`. Every session writes observations to `~/.ijfw/observations.jsonl`. Open an issue at [gitlab.com/therealseandonahoe/ijfw/-/issues](https://gitlab.com/therealseandonahoe/ijfw/-/issues) with both files redacted and attached.
 
 ---
 
@@ -546,7 +546,7 @@ Yes. `.ijfw/team/` is git-committed by default. Decisions, patterns, and stack c
 </p>
 
 <p align="center">
-<a href="https://github.com/TheRealSeanDonahoe/ijfw">github.com/TheRealSeanDonahoe/ijfw</a>
+<a href="https://gitlab.com/therealseandonahoe/ijfw">gitlab.com/therealseandonahoe/ijfw</a>
 &nbsp;|&nbsp;
 <a href="https://www.npmjs.com/package/@ijfw/install">npm</a>
 &nbsp;|&nbsp;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ijfw/install",
-  "version": "1.2.5",
+  "version": "1.2.7",
   "description": "One-command installer for IJFW -- the AI efficiency layer. One install, every AI coding agent, zero config.",
   "type": "module",
   "bin": {
@@ -46,13 +46,13 @@
   ],
   "license": "MIT",
   "author": "Sean Donahoe",
-  "homepage": "https://github.com/TheRealSeanDonahoe/ijfw",
+  "homepage": "https://gitlab.com/therealseandonahoe/ijfw",
   "bugs": {
-    "url": "https://github.com/TheRealSeanDonahoe/ijfw/issues"
+    "url": "https://gitlab.com/therealseandonahoe/ijfw/-/issues"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/TheRealSeanDonahoe/ijfw.git"
+    "url": "git+https://gitlab.com/therealseandonahoe/ijfw.git"
   },
   "publishConfig": {
     "access": "public",

package/src/install.ps1

@@ -6,7 +6,7 @@
 #   -> merge marketplace into %USERPROFILE%\.claude\settings.json -> summary.
 #
 # Usage:
-#   Invoke-Expression (iwr https://raw.githubusercontent.com/TheRealSeanDonahoe/ijfw/main/installer/src/install.ps1).Content
+#   Invoke-Expression (iwr https://gitlab.com/therealseandonahoe/ijfw/-/raw/main/installer/src/install.ps1).Content
 #   or:
 #   .\install.ps1 -Dir C:\Users\me\.ijfw -Branch main
 
@@ -19,7 +19,7 @@ param(
 )
 
 $ErrorActionPreference = "Stop"
-$DEFAULT_REPO = "https://github.com/TheRealSeanDonahoe/ijfw.git"
+$DEFAULT_REPO = "https://gitlab.com/therealseandonahoe/ijfw.git"
 
 function Write-Ok($msg) { Write-Host "  [ok] $msg" -ForegroundColor Green }
 function Write-Info($msg) { Write-Host "  ... $msg" -ForegroundColor Gray }
@@ -208,10 +208,172 @@ function ConvertFrom-Jsonc($raw) {
   return ($intermediate -replace ',(\s*[}\]])','$1')
 }
 
+function Remove-StalePosixLaunchers {
+  # Pre-1.2.7 installs (and any install run from WSL) wrote POSIX bash
+  # launchers into ~/.local/bin/ even on Windows. Windows can't execute
+  # files without an extension, so PATH lookup finds them ahead of npm's
+  # ijfw.cmd shim and Windows hands them to Notepad as plain text.
+  #
+  # On every install, sweep ~/.local/bin/ for the five known POSIX
+  # launchers. Defensive: only remove files whose first line is a shebang
+  # ("#!") so we never delete user content or Windows binaries that
+  # happened to share a name.
+  $localBin = Join-Path $env:USERPROFILE ".local\bin"
+  if (-not (Test-Path $localBin)) { return }
+
+  $launchers = @("ijfw", "ijfw-dashboard", "ijfw-dispatch-plan", "ijfw-memorize", "ijfw-memory")
+  $removed = 0
+  foreach ($name in $launchers) {
+    $path = Join-Path $localBin $name
+    if (-not (Test-Path -LiteralPath $path -PathType Leaf)) { continue }
+    try {
+      $first = (Get-Content -LiteralPath $path -TotalCount 1 -ErrorAction Stop)
+      if ($first -and $first.StartsWith("#!")) {
+        Remove-Item -LiteralPath $path -Force -ErrorAction Stop
+        $removed++
+      }
+    } catch {
+      # Best-effort: keep going on locked / inaccessible files.
+    }
+  }
+  if ($removed -gt 0) {
+    Write-Ok "Cleared $removed stale POSIX launcher$(if ($removed -ne 1) { 's' }) from $localBin (npm shim now wins PATH)"
+  }
+}
+
+function Provision-Plugin {
+  param(
+    [string]$Src,   # Source dir inside repo (relative to $IjfwHome), e.g. "wayland\plugins\ijfw"
+    [string]$Dst,   # Absolute destination path, e.g. "$env:USERPROFILE\.wayland\plugins\ijfw"
+    [string]$IjfwHome
+  )
+  $srcPath = Join-Path $IjfwHome $Src
+  if (-not (Test-Path $srcPath)) {
+    Write-Info "Plugin source not found at $srcPath -- skipping."
+    return
+  }
+  New-Item -ItemType Directory -Force -Path $Dst | Out-Null
+  Copy-Item -Recurse -Force -Path (Join-Path $srcPath "*") -Destination $Dst
+}
+
+function Merge-PluginsEnabled {
+  param(
+    [string]$ConfigPath  # Full path to ~/.hermes/config.yaml
+  )
+  $pluginName = "ijfw"
+  $configDir = Split-Path -Parent $ConfigPath
+
+  # Ensure the directory exists.
+  if (-not (Test-Path $configDir)) { New-Item -ItemType Directory -Force -Path $configDir | Out-Null }
+
+  # Backup before modifying (mirrors Merge-Marketplace pattern).
+  if (Test-Path $ConfigPath) {
+    $ts = Get-Date -Format 'yyyyMMdd-HHmmss'
+    $backup = "$ConfigPath.bak.plugins.$ts"
+    Copy-Item -LiteralPath $ConfigPath -Destination $backup -Force
+  }
+
+  # Read existing YAML or start from empty string.
+  $content = if (Test-Path $ConfigPath) { Get-Content -Raw -LiteralPath $ConfigPath } else { "" }
+  if ($null -eq $content) { $content = "" }
+
+  # Strategy: try python3 first (has real YAML support); fall back to sentinel-anchored
+  # regex that appends to a plugins.enabled: block or creates one.
+
+  $python = Get-Command python3 -ErrorAction SilentlyContinue
+  if ($python) {
+    $pyScript = @"
+import sys, re
+path = sys.argv[1]
+name = sys.argv[2]
+try:
+    with open(path, 'r', encoding='utf-8') as f:
+        text = f.read()
+except FileNotFoundError:
+    text = ''
+
+# Find or create plugins.enabled block.
+block_re = re.compile(r'(?m)^(plugins\s*:\s*\n(?:[ \t]+\S[^\n]*\n)*[ \t]+enabled\s*:\s*\[)([^\]]*)\]')
+inline_re = re.compile(r'(?m)^([ \t]+enabled\s*:\s*\[)([^\]]*)\]')
+plugins_section_re = re.compile(r'(?m)^plugins\s*:', re.MULTILINE)
+
+def ensure_name(lst_str, name):
+    items = [x.strip().strip('"').strip("'") for x in lst_str.split(',') if x.strip()]
+    if name in items:
+        return lst_str
+    items.append(name)
+    return ', '.join(repr(i) for i in items)
+
+m = block_re.search(text)
+if m:
+    new_list = ensure_name(m.group(2), name)
+    text = text[:m.start(2)] + new_list + text[m.end(2):]
+else:
+    m2 = inline_re.search(text)
+    if m2:
+        new_list = ensure_name(m2.group(2), name)
+        text = text[:m2.start(2)] + new_list + text[m2.end(2):]
+    elif plugins_section_re.search(text):
+        # plugins: exists but no enabled key -- append it.
+        text = plugins_section_re.sub(lambda mo: mo.group(0) + '\n  enabled: [' + repr(name) + ']', text, count=1)
+    else:
+        # No plugins section at all.
+        if text and not text.endswith('\n'):
+            text += '\n'
+        text += 'plugins:\n  enabled: [' + repr(name) + ']\n'
+
+with open(path, 'w', encoding='utf-8') as f:
+    f.write(text)
+sys.exit(0)
+"@
+    $tmp = [System.IO.Path]::GetTempFileName() + ".py"
+    [System.IO.File]::WriteAllText($tmp, $pyScript)
+    try {
+      & python3 $tmp $ConfigPath $pluginName
+      $ok = ($LASTEXITCODE -eq 0)
+    } finally {
+      Remove-Item -LiteralPath $tmp -ErrorAction SilentlyContinue
+    }
+    if ($ok) { return $true }
+  }
+
+  # Fallback: pure PowerShell sentinel-anchored regex approach.
+  # If the file has a plugins.enabled: [...] line, splice in the name.
+  # Otherwise append a plugins.enabled block.
+  $enabledRe = [regex]'(?m)^([ \t]+enabled\s*:\s*\[)([^\]]*)\]'
+  $pluginsSectionRe = [regex]'(?m)^plugins\s*:'
+
+  $m = $enabledRe.Match($content)
+  if ($m.Success) {
+    $lst = $m.Groups[2].Value
+    $items = $lst -split ',' | ForEach-Object { $_.Trim().Trim('"').Trim("'") } | Where-Object { $_ -ne '' }
+    if ($pluginName -notin $items) {
+      $items += $pluginName
+      $newLst = ($items | ForEach-Object { '"' + $_ + '"' }) -join ', '
+      $content = $content.Substring(0, $m.Groups[2].Index) + $newLst + $content.Substring($m.Groups[2].Index + $m.Groups[2].Length)
+    }
+  } elseif ($pluginsSectionRe.IsMatch($content)) {
+    $content = $pluginsSectionRe.Replace($content, "plugins:`n  enabled: [""$pluginName""]", 1)
+  } else {
+    if ($content -and -not $content.EndsWith("`n")) { $content += "`n" }
+    $content += "plugins:`n  enabled: [""$pluginName""]`n"
+  }
+
+  $tmp2 = "$ConfigPath.tmp"
+  [System.IO.File]::WriteAllText($tmp2, $content, [System.Text.Encoding]::UTF8)
+  Move-Item -Force -LiteralPath $tmp2 -Destination $ConfigPath
+  return $true
+}
+
 function Merge-Marketplace {
+  param(
+    [string]$IjfwHome  # Install root; the plugin lives at "$IjfwHome\claude".
+  )
   $settingsPath = Join-Path $env:USERPROFILE ".claude\settings.json"
   $settingsDir = Split-Path -Parent $settingsPath
   if (-not (Test-Path $settingsDir)) { New-Item -ItemType Directory -Force -Path $settingsDir | Out-Null }
+  if (-not $IjfwHome) { $IjfwHome = Join-Path $env:USERPROFILE ".ijfw" }
+  $pluginPath = Join-Path $IjfwHome "claude"
 
   $settings = @{}
   if (Test-Path $settingsPath) {
@@ -236,7 +398,11 @@ function Merge-Marketplace {
     }
   }
   if (-not $settings.ContainsKey('extraKnownMarketplaces')) { $settings['extraKnownMarketplaces'] = @{} }
-  $settings.extraKnownMarketplaces['ijfw'] = @{ source = @{ source = 'github'; repo = 'TheRealSeanDonahoe/ijfw' } }
+  # Self-heal: write the directory source matching the actual install. Prior
+  # installs (<= 1.2.6) wrote a github source pointing at TheRealSeanDonahoe/
+  # ijfw, but Claude Code never clones that repo into its marketplaces cache,
+  # so the entry resolved to "Marketplace file not found". Idempotent.
+  $settings.extraKnownMarketplaces['ijfw'] = @{ source = @{ source = 'directory'; path = $pluginPath } }
   if (-not $settings.ContainsKey('enabledPlugins')) { $settings['enabledPlugins'] = @{} }
   # Opportunistically clean up the legacy key written by v1.0.0-1.0.2.
   if ($settings.enabledPlugins.ContainsKey('ijfw-core@ijfw')) {
@@ -260,15 +426,49 @@ if ($issues.Count -gt 0) {
 
 $target = Get-Target
 
+# Sweep stale POSIX bash launchers from ~/.local/bin/ before any other
+# install logic. Without this, leftover #!/usr/bin/env bash files from a
+# pre-1.2.7 install (or one run from WSL) shadow npm's ijfw.cmd shim and
+# Windows opens them in Notepad. (Bug report: John H.)
+Remove-StalePosixLaunchers
+
 # scripts/install.sh owns the summary (Live now / Standing by / next step).
 # Keep clone/pull output suppressed so the final banner reads clean.
 Invoke-CloneOrPull $target $Branch | Out-Null
 
 Invoke-InstallScript $target
 
+# Provision Wayland plugin (~/.wayland/plugins/ijfw/).
+$waylandPluginDst = Join-Path $env:USERPROFILE ".wayland\plugins\ijfw"
+Provision-Plugin -Src "wayland\plugins\ijfw" -Dst $waylandPluginDst -IjfwHome $target
+
+# Provision Hermes plugin (~/.hermes/plugins/ijfw/).
+$hermesPluginDst = Join-Path $env:USERPROFILE ".hermes\plugins\ijfw"
+Provision-Plugin -Src "hermes\plugins\ijfw" -Dst $hermesPluginDst -IjfwHome $target
+
+# Deploy shared patterns.json (~/.ijfw/shared/lib/patterns.json).
+$patternsDir = Join-Path $env:USERPROFILE ".ijfw\shared\lib"
+$patternsSrc = Join-Path $target "shared\lib\patterns.json"
+if (Test-Path $patternsSrc) {
+  New-Item -ItemType Directory -Force -Path $patternsDir | Out-Null
+  Copy-Item -Force -LiteralPath $patternsSrc -Destination (Join-Path $patternsDir "patterns.json")
+}
+
+# Add "ijfw" to plugins.enabled[] in ~/.hermes/config.yaml (Hermes opt-in allow-list).
+$hermesConfig = Join-Path $env:USERPROFILE ".hermes\config.yaml"
+[void](Merge-PluginsEnabled -ConfigPath $hermesConfig)
+
+# Regenerate per-platform rules from shared source.
+if (Get-Command node -ErrorAction SilentlyContinue) {
+  $rulesGen = Join-Path $target "scripts\generate-platform-rules.js"
+  if (Test-Path $rulesGen) { & node $rulesGen }
+}
+
 if (-not $NoMarketplace) {
   # Best-effort: returns $true on success, prints its own message on fallback.
-  [void](Merge-Marketplace)
+  # Pass the resolved install root so the marketplace path matches reality
+  # for both default and --dir installs.
+  [void](Merge-Marketplace -IjfwHome $target)
 }
 
 $log = Join-Path $env:USERPROFILE ".ijfw\install.log"