@piagent/platform 1.1.9 → 1.2.0

package/scripts/team-doctor.sh

@@ -137,7 +137,7 @@ function runtimeMatrixStatus() {
     surface: `${platform}/${arch}`,
     status: "outside-release-matrix",
     teamRolloutReady: false,
-    note: "This runtime is outside the documented v1.1.9 support matrix."
+    note: "This runtime is outside the documented v1.2.0 support matrix."
   };
 }
 
@@ -169,7 +169,7 @@ for (const rel of [
   "templates/project/.pi/memory/memory_summary.md",
   "templates/project/.pi/memory/MEMORY.md",
   "scripts/setup.sh",
-  "scripts/configure-mcp.sh",
+  "scripts/mcp-manage.mjs",
   "scripts/configure-subagents.sh"
 ]) {
   if (!exists(rel)) errors.push(`missing platform file: ${rel}`);
@@ -247,6 +247,22 @@ if (piHasMcpAdapter && totalMcpServers === 0) {
   warnings.push("Pi MCP adapter is installed but no MCP servers are configured; run `piagent-mcp --preset core --scope global` or `/mcp setup`");
 }
 
+// Counting servers says nothing about whether any of them can answer. A server
+// whose token is not exported, or which this repository defines and nobody
+// approved, is configured and unusable, and finding that out when a call fails
+// is the thing this check exists to prevent.
+try {
+  const { collectServers } = await import(pathToFileURL(path.join(platformRoot, "packages", "piagent-core", "mcp", "mcp-config-layers.js")).href);
+  const { evaluateServerReadiness, BLOCKING_STATES } = await import(pathToFileURL(path.join(platformRoot, "packages", "piagent-core", "mcp", "mcp-auth-readiness.js")).href);
+  for (const server of collectServers({ projectPath })) {
+    const readiness = evaluateServerReadiness(server, { projectPath });
+    if (!BLOCKING_STATES.has(readiness.state)) continue;
+    warnings.push(`MCP server ${server.name} (${server.scope}) is configured but not usable: ${readiness.detail}${readiness.remedy ? `; ${readiness.remedy}` : ""}`);
+  }
+} catch (error) {
+  warnings.push(`MCP readiness check could not run: ${error instanceof Error ? error.message : String(error)}`);
+}
+
 const subagentConfigPath = path.join(process.env.PI_CODING_AGENT_DIR || path.join(process.env.HOME || "", ".pi", "agent"), "extensions", "subagent", "config.json");
 const subagentConfig = readJsonIfPresent(subagentConfigPath);
 if (piHasSubagents && !subagentConfig) {

package/scripts/verify-local.sh

@@ -126,9 +126,16 @@ required_files=(
   "$ROOT/docs/capability-packs.md"
   "$ROOT/docs/runtime-policy-design.md"
   "$ROOT/docs-site/index.html"
+  "$ROOT/docs-site/mcp.html"
   "$ROOT/docs-site/favicon.svg"
   "$ROOT/docs-site/assets/piagent-logo.svg"
+  "$ROOT/docs-site/assets/docs.css"
+  "$ROOT/docs-site/assets/docs.js"
+  "$ROOT/docs-site/content/index.html"
+  "$ROOT/docs-site/content/mcp.html"
   "$ROOT/docs-site/vercel.json"
+  "$ROOT/scripts/build-docs-site.mjs"
+  "$ROOT/scripts/preview-docs-site.mjs"
   "$ROOT/schemas/project-profile.schema.json"
   "$ROOT/schemas/task-contract.schema.json"
   "$ROOT/schemas/capability-pack.schema.json"
@@ -160,7 +167,7 @@ required_files=(
   "$ROOT/scripts/pi-auto.sh"
   "$ROOT/scripts/pi-model-catalog.sh"
   "$ROOT/scripts/configure-model-scope.sh"
-  "$ROOT/scripts/configure-mcp.sh"
+  "$ROOT/scripts/mcp-manage.mjs"
   "$ROOT/scripts/configure-subagents.sh"
   "$ROOT/scripts/capability-catalog.mjs"
   "$ROOT/scripts/migrate-project-state.mjs"
@@ -182,6 +189,9 @@ required_files=(
   "$ROOT/tests/document-intake.test.mjs"
   "$ROOT/tests/runtime-advisories.test.mjs"
   "$ROOT/scripts/check-runtime-advisories.mjs"
+  "$ROOT/packages/piagent-core/mcp/mcp-session-view.js"
+  "$ROOT/packages/piagent-core/mcp/mcp-command-actions.js"
+  "$ROOT/tests/mcp-session-command.test.mjs"
   "$ROOT/tests/migrate-project-state.test.mjs"
   "$ROOT/tests/uninstall-global.test.mjs"
   "$ROOT/tests/import-agent-instructions.test.mjs"
@@ -413,33 +423,33 @@ require_documented "gpt-5.6" "$ROOT/README.md" "$ROOT/docs/model-options.md" "$R
 require_documented "claude-fable-5" "$ROOT/README.md" "$ROOT/docs/model-options.md" "$ROOT/packages/piagent-core/prompts/model-options.md"
 require_documented "piagent-models" "$ROOT/README.md" "$ROOT/docs/model-options.md"
 require_documented "enabledModels" "$ROOT/templates/global/settings.json" "$ROOT/docs/model-options.md" "$ROOT/scripts/configure-model-scope.sh"
-require_documented "piagent-mcp" "$ROOT/README.md" "$ROOT/docs/mcp-and-tools.md" "$ROOT/scripts/configure-mcp.sh"
+require_documented "piagent-mcp" "$ROOT/README.md" "$ROOT/docs/mcp-and-tools.md" "$ROOT/scripts/mcp-manage.mjs"
 require_documented "pi-mcp-adapter" "$ROOT/README.md" "$ROOT/docs/mcp-and-tools.md" "$ROOT/scripts/install-global.sh"
 require_documented "piagent-subagents" "$ROOT/README.md" "$ROOT/docs/subagents-and-multiagent.md" "$ROOT/scripts/configure-subagents.sh"
 require_documented "subagents-fleet" "$ROOT/docs/command-reference-vietnamese.md" "$ROOT/docs/subagents-and-multiagent.md" "$ROOT/README.md"
 require_documented "health check" "$ROOT/docs/command-reference-vietnamese.md" "$ROOT/docs/subagents-and-multiagent.md" "$ROOT/README.md"
 require_documented "pi-subagents" "$ROOT/README.md" "$ROOT/docs/subagents-and-multiagent.md" "$ROOT/scripts/install-global.sh" "$ROOT/scripts/setup.sh"
 require_documented "piagent-scout" "$ROOT/README.md" "$ROOT/docs/subagents-and-multiagent.md" "$ROOT/packages/piagent-core/subagents"
-grep -F "@upstash/context7-mcp@3.2.4" "$ROOT/scripts/configure-mcp.sh" >/dev/null
+grep -F "@upstash/context7-mcp@3.2.4" "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" >/dev/null
 grep -F "@upstash/context7-mcp@3.2.4" "$ROOT/docs/mcp-and-tools.md" >/dev/null
-grep -F "chrome-devtools-mcp@1.6.0" "$ROOT/scripts/configure-mcp.sh" >/dev/null
+grep -F "chrome-devtools-mcp@1.6.0" "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" >/dev/null
 grep -F "chrome-devtools-mcp@1.6.0" "$ROOT/docs/mcp-and-tools.md" >/dev/null
-grep -F "@playwright/mcp@0.0.78" "$ROOT/scripts/configure-mcp.sh" >/dev/null
+grep -F "@playwright/mcp@0.0.78" "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" >/dev/null
 grep -F "@playwright/mcp@0.0.78" "$ROOT/docs/mcp-and-tools.md" >/dev/null
-require_documented "https://mcp.figma.com/mcp" "$ROOT/scripts/configure-mcp.sh" "$ROOT/docs/mcp-and-tools.md"
-grep -F "ghcr.io/github/github-mcp-server@sha256:2b0c48b070f61e9d3969269ead600f62d00fb237b60ac849ef3d166ee7de9ad3" "$ROOT/scripts/configure-mcp.sh" >/dev/null
+require_documented "https://mcp.figma.com/mcp" "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" "$ROOT/docs/mcp-and-tools.md"
+grep -F "ghcr.io/github/github-mcp-server@sha256:2b0c48b070f61e9d3969269ead600f62d00fb237b60ac849ef3d166ee7de9ad3" "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" >/dev/null
 grep -F "ghcr.io/github/github-mcp-server@sha256:2b0c48b070f61e9d3969269ead600f62d00fb237b60ac849ef3d166ee7de9ad3" "$ROOT/docs/mcp-and-tools.md" >/dev/null
-grep -F '"GITHUB_READ_ONLY=1"' "$ROOT/scripts/configure-mcp.sh" >/dev/null
+grep -F '"GITHUB_READ_ONLY=1"' "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" >/dev/null
 grep -F '"GITHUB_READ_ONLY=1"' "$ROOT/docs/mcp-and-tools.md" >/dev/null
-grep -F '"GITHUB_LOCKDOWN_MODE=1"' "$ROOT/scripts/configure-mcp.sh" >/dev/null
+grep -F '"GITHUB_LOCKDOWN_MODE=1"' "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" >/dev/null
 grep -F '"GITHUB_LOCKDOWN_MODE=1"' "$ROOT/docs/mcp-and-tools.md" >/dev/null
-grep -F 'CHROME_DEVTOOLS_MCP_NO_USAGE_STATISTICS: "1"' "$ROOT/scripts/configure-mcp.sh" >/dev/null
+grep -F 'CHROME_DEVTOOLS_MCP_NO_USAGE_STATISTICS: "1"' "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" >/dev/null
 grep -F '"CHROME_DEVTOOLS_MCP_NO_USAGE_STATISTICS": "1"' "$ROOT/docs/mcp-and-tools.md" >/dev/null
-grep -F 'CHROME_DEVTOOLS_MCP_NO_UPDATE_CHECKS: "1"' "$ROOT/scripts/configure-mcp.sh" >/dev/null
+grep -F 'CHROME_DEVTOOLS_MCP_NO_UPDATE_CHECKS: "1"' "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" >/dev/null
 grep -F '"CHROME_DEVTOOLS_MCP_NO_UPDATE_CHECKS": "1"' "$ROOT/docs/mcp-and-tools.md" >/dev/null
-grep -F 'configure-mcp.sh" --scope global --preset "$MCP_PRESET" --replace' "$ROOT/scripts/install-global.sh" >/dev/null
-grep -F 'piagent-mcp --preset core --scope global --replace' "$ROOT/scripts/configure-mcp.sh" >/dev/null
-if grep -E '@latest|"@upstash/context7-mcp"|"chrome-devtools-mcp"|"@playwright/mcp"|"ghcr\.io/github/github-mcp-server"' "$ROOT/scripts/configure-mcp.sh" >/dev/null; then
+grep -F 'mcp-manage.mjs" --scope global --preset "$MCP_PRESET" --replace' "$ROOT/scripts/install-global.sh" >/dev/null
+grep -F 'piagent-mcp --preset core --scope global --replace' "$ROOT/scripts/mcp-manage.mjs" >/dev/null
+if grep -E '@latest|"@upstash/context7-mcp"|"chrome-devtools-mcp"|"@playwright/mcp"|"ghcr\.io/github/github-mcp-server"' "$ROOT/packages/piagent-core/mcp/mcp-server-catalog.js" >/dev/null; then
   echo "MCP production presets contain a mutable dependency source"
   exit 1
 fi
@@ -471,6 +481,9 @@ const terms = [
   ["mit", "suhiko"].join(""),
   ["Cod", "ex CLI"].join(""),
   ["Claude", " CLI"].join(""),
+  ["Claude", " Code"].join(""),
+  ["claude", " mcp"].join(""),
+  ["codex", " mcp"].join(""),
   ["Cod", "ex-inspired"].join(""),
   ["Cod", "ex-grade"].join(""),
   ["Pi vs ", "Codex"].join(""),
@@ -485,12 +498,21 @@ console.log(terms.map(escapeRegex).join("|"));
 NODE
 )"
 
+# Every surface an outsider reads: the published docs, the site, and the strings
+# the runtime prints back at an operator. The site is checked at its source,
+# since `build-docs-site.mjs --check` separately proves the committed pages match
+# it; the builder itself is listed too, because navigation labels and page titles
+# live there rather than in a content fragment.
 if grep -R -E -i \
   "$public_wording_pattern" \
   "$ROOT/README.md" \
   "$ROOT/docs" \
+  "$ROOT/docs-site/content" \
+  "$ROOT/scripts/build-docs-site.mjs" \
   "$ROOT/packages/piagent-core/README.md" \
   "$ROOT/packages/piagent-core/prompts" \
+  "$ROOT/packages/piagent-core/mcp" \
+  "$ROOT/packages/piagent-core/extensions" \
   "$ROOT/templates/project/AGENTS.md" >/dev/null; then
   echo "Public docs contain non-neutral platform wording"
   exit 1
@@ -509,6 +531,8 @@ node --check "$ROOT/scripts/migrate-project-state.mjs" >/dev/null
 node --check "$ROOT/scripts/import-agent-instructions.mjs" >/dev/null
 node --check "$ROOT/scripts/check-runtime-advisories.mjs" >/dev/null
 node --check "$ROOT/scripts/check-published-site.mjs" >/dev/null
+node --check "$ROOT/scripts/build-docs-site.mjs" >/dev/null
+node --check "$ROOT/scripts/preview-docs-site.mjs" >/dev/null
 run_quietly "npm test" npm test
 if [[ -x "$ROOT/node_modules/.bin/tsc" ]]; then
   run_quietly "npm run typecheck" npm run typecheck
@@ -519,7 +543,9 @@ bash -n "$ROOT/scripts/pi-session-stats.sh"
 bash -n "$ROOT/scripts/pi-auto.sh"
 bash -n "$ROOT/scripts/pi-model-catalog.sh"
 bash -n "$ROOT/scripts/configure-model-scope.sh"
-bash -n "$ROOT/scripts/configure-mcp.sh"
+node --check "$ROOT/scripts/mcp-manage.mjs"
+node --check "$ROOT/packages/piagent-core/mcp/mcp-session-view.js"
+node --check "$ROOT/packages/piagent-core/mcp/mcp-command-actions.js"
 bash -n "$ROOT/scripts/configure-subagents.sh"
 bash -n "$ROOT/scripts/install-global.sh"
 bash -n "$ROOT/scripts/init-project.sh"
@@ -531,8 +557,8 @@ else
   bash "$ROOT/scripts/pi-model-catalog.sh" --json >/dev/null
 fi
 bash "$ROOT/scripts/configure-model-scope.sh" --dry-run --preset full --default-model openai-codex/gpt-5.5:xhigh >/dev/null
-bash "$ROOT/scripts/configure-mcp.sh" --list >/dev/null
-bash "$ROOT/scripts/configure-mcp.sh" --dry-run --preset popular --scope project --project "$ROOT" >/dev/null
+node "$ROOT/scripts/mcp-manage.mjs" --list >/dev/null
+node "$ROOT/scripts/mcp-manage.mjs" --dry-run --preset popular --scope project --project "$ROOT" >/dev/null
 node --input-type=module - "$ROOT" <<'NODE'
 import assert from "node:assert/strict";
 import { execFileSync } from "node:child_process";
@@ -553,8 +579,8 @@ try {
       internal: { url: "https://mcp.example.invalid/api" }
     }
   }, null, 2)}\n`);
-  execFileSync("bash", [
-    path.join(root, "scripts", "configure-mcp.sh"),
+  execFileSync(process.execPath, [
+    path.join(root, "scripts", "mcp-manage.mjs"),
     "--config", configPath,
     "--preset", "popular",
     "--replace"
@@ -577,6 +603,7 @@ bash "$ROOT/scripts/configure-subagents.sh" --list >/dev/null
 bash "$ROOT/scripts/configure-subagents.sh" --dry-run --preset safe >/dev/null
 bash "$ROOT/scripts/runtime-policy-smoke.sh" >/dev/null
 
+node "$ROOT/scripts/build-docs-site.mjs" --check >/dev/null
 node "$ROOT/scripts/capability-catalog.mjs" catalog --check >/dev/null
 node "$ROOT/scripts/capability-catalog.mjs" doctor --profile "$ROOT/.pi/piagent-profile.json" --lock "$ROOT/.pi/piagent-profile.lock.json" >/dev/null
 node "$ROOT/scripts/capability-catalog.mjs" doctor --profile "$ROOT/adapters/generic/profile.json" >/dev/null

package/scripts/verify-release-identity.mjs

@@ -71,8 +71,14 @@ if (capabilityLock.core?.packageVersion !== version) fail("capability lock packa
 const changelog = fs.readFileSync(path.join(root, "CHANGELOG.md"), "utf8");
 if (!changelog.includes(`## ${expectedTag} -`)) fail(`CHANGELOG.md has no ${expectedTag} release section`);
 
-const docsSite = fs.readFileSync(path.join(root, "docs-site/index.html"), "utf8");
-if (!docsSite.includes(`${expectedTag} docs`)) fail(`docs-site version badge does not identify ${expectedTag}`);
+// The badge is generated onto every page, so a stale build shows up as one page
+// still carrying the previous version rather than as a single missed edit.
+const docsPages = fs.readdirSync(path.join(root, "docs-site")).filter((name) => name.endsWith(".html"));
+if (docsPages.length === 0) fail("docs-site has no generated pages");
+for (const page of docsPages) {
+  const html = fs.readFileSync(path.join(root, "docs-site", page), "utf8");
+  if (!html.includes(`${expectedTag} docs`)) fail(`docs-site/${page} version badge does not identify ${expectedTag}`);
+}
 
 if (options.tag) {
   if (options.tag !== expectedTag) fail(`release tag ${options.tag} does not match package version ${expectedTag}`);

package/scripts/configure-mcp.sh

@@ -1,349 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-usage() {
-  cat <<'USAGE'
-Usage:
-  scripts/configure-mcp.sh [options]
-
-Purpose:
-  Merge a safe MCP baseline into a standard MCP config file for Pi and other MCP clients.
-  Secrets are never written directly; configs reference environment variables.
-
-Options:
-  --scope <global|pi-global|project|pi-project>
-                                  Config target (default: global)
-  --project <path>                Project path for project/pi-project scopes (default: current directory)
-  --config <path>                 Explicit config path; overrides --scope/--project
-  --preset <minimal|docs|browser|github|design|design-local|web|core|popular|all>
-                                  MCP preset to merge (default: core)
-  --replace                       Replace existing definitions for servers in the preset
-  --dry-run                       Print the merged JSON without writing
-  --list                          Print available presets/servers
-  -h, --help
-
-Recommended presets:
-  core       Context7 docs + Chrome DevTools + GitHub
-  popular    core + Playwright + Figma remote MCP
-  all        popular + Figma desktop/local MCP
-
-Examples:
-  piagent-mcp --preset core --scope global --replace
-  piagent-mcp --preset popular --scope project --project /path/to/repo
-  piagent-mcp --preset design-local --scope project
-
-After writing config:
-  pi
-  /mcp
-  /mcp setup
-  /mcp reconnect
-USAGE
-}
-
-PLATFORM_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-SCOPE="global"
-PROJECT_PATH="$PWD"
-CONFIG_PATH=""
-PRESET="core"
-REPLACE=false
-DRY_RUN=false
-LIST=false
-# Answers "is this preset name real?" and writes nothing, so a caller can reject
-# a bad preset before it installs anything.
-VALIDATE_PRESET=false
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --scope)
-      SCOPE="${2:-}"
-      shift 2
-      ;;
-    --project)
-      PROJECT_PATH="${2:-}"
-      shift 2
-      ;;
-    --config)
-      CONFIG_PATH="${2:-}"
-      shift 2
-      ;;
-    --preset)
-      PRESET="${2:-}"
-      shift 2
-      ;;
-    --replace)
-      REPLACE=true
-      shift
-      ;;
-    --dry-run)
-      DRY_RUN=true
-      shift
-      ;;
-    --list)
-      LIST=true
-      shift
-      ;;
-    --validate-preset)
-      VALIDATE_PRESET=true
-      shift
-      ;;
-    -h|--help)
-      usage
-      exit 0
-      ;;
-    *)
-      echo "Unknown option: $1" >&2
-      usage >&2
-      exit 2
-      ;;
-  esac
-done
-
-if [[ -z "$PRESET" ]]; then
-  echo "FAIL: --preset cannot be empty" >&2
-  exit 2
-fi
-
-if [[ -z "$CONFIG_PATH" ]]; then
-  case "$SCOPE" in
-    global)
-      CONFIG_PATH="${XDG_CONFIG_HOME:-"${HOME}/.config"}/mcp/mcp.json"
-      ;;
-    pi-global)
-      CONFIG_PATH="${PI_CODING_AGENT_DIR:-"${HOME}/.pi/agent"}/mcp.json"
-      ;;
-    project)
-      CONFIG_PATH="$PROJECT_PATH/.mcp.json"
-      ;;
-    pi-project)
-      CONFIG_PATH="$PROJECT_PATH/.pi/mcp.json"
-      ;;
-    *)
-      echo "FAIL: unsupported scope: $SCOPE" >&2
-      usage >&2
-      exit 2
-      ;;
-  esac
-fi
-
-node --input-type=module - "$CONFIG_PATH" "$PRESET" "$REPLACE" "$DRY_RUN" "$LIST" "$VALIDATE_PRESET" <<'NODE'
-import fs from "node:fs";
-import path from "node:path";
-
-const [configPath, presetName, replaceRaw, dryRunRaw, listRaw, validateRaw] = process.argv.slice(2);
-const replace = replaceRaw === "true";
-const dryRun = dryRunRaw === "true";
-const listOnly = listRaw === "true";
-const validateOnly = validateRaw === "true";
-
-const baselineSettings = {
-  toolPrefix: "server",
-  directTools: false,
-  idleTimeout: 10,
-  outputGuard: true
-};
-
-const servers = {
-  context7: {
-    description: "Official Context7 MCP server for up-to-date library/framework docs.",
-    config: {
-      command: "npx",
-      args: ["-y", "@upstash/context7-mcp@3.2.4"],
-      env: {
-        CONTEXT7_API_KEY: "${CONTEXT7_API_KEY}"
-      },
-      lifecycle: "lazy",
-      directTools: false
-    }
-  },
-  "chrome-devtools": {
-    description: "Chrome DevTools MCP for runtime browser inspection, console logs, screenshots, and performance checks.",
-    config: {
-      command: "npx",
-      args: ["-y", "chrome-devtools-mcp@1.6.0", "--no-performance-crux"],
-      env: {
-        CHROME_DEVTOOLS_MCP_NO_USAGE_STATISTICS: "1",
-        CHROME_DEVTOOLS_MCP_NO_UPDATE_CHECKS: "1"
-      },
-      lifecycle: "lazy",
-      directTools: false
-    }
-  },
-  playwright: {
-    description: "Playwright MCP for browser automation and UI verification workflows.",
-    config: {
-      command: "npx",
-      args: ["-y", "@playwright/mcp@0.0.78"],
-      lifecycle: "lazy",
-      directTools: false
-    }
-  },
-  github: {
-    description: "Official GitHub MCP server via Docker. Requires Docker and GITHUB_PERSONAL_ACCESS_TOKEN when used.",
-    config: {
-      command: "docker",
-      args: [
-        "run",
-        "-i",
-        "--rm",
-        "-e",
-        "GITHUB_PERSONAL_ACCESS_TOKEN",
-        "-e",
-        "GITHUB_READ_ONLY=1",
-        "-e",
-        "GITHUB_LOCKDOWN_MODE=1",
-        "ghcr.io/github/github-mcp-server@sha256:2b0c48b070f61e9d3969269ead600f62d00fb237b60ac849ef3d166ee7de9ad3"
-      ],
-      env: {
-        GITHUB_PERSONAL_ACCESS_TOKEN: "${GITHUB_PERSONAL_ACCESS_TOKEN}"
-      },
-      lifecycle: "lazy",
-      directTools: false
-    }
-  },
-  figma: {
-    description: "Figma remote MCP server. Requires Figma OAuth from the MCP panel when first used.",
-    config: {
-      url: "https://mcp.figma.com/mcp",
-      auth: "oauth",
-      lifecycle: "lazy",
-      directTools: false
-    }
-  },
-  "figma-desktop": {
-    description: "Figma desktop/local MCP server. Requires Figma desktop Dev Mode MCP enabled.",
-    config: {
-      url: "http://127.0.0.1:3845/mcp",
-      lifecycle: "lazy",
-      directTools: false
-    }
-  }
-};
-
-// Writing a server definition does not make it usable. What each one still
-// needs from the operator is stated here so it can be printed at the moment the
-// definition is written, rather than living only in a description string that
-// shows up under --list.
-const prerequisites = {
-  context7: ["optional: export CONTEXT7_API_KEY for a higher documentation quota"],
-  "chrome-devtools": ["a local Chrome installation"],
-  github: [
-    "Docker running",
-    "export GITHUB_PERSONAL_ACCESS_TOKEN with the scopes you intend to use"
-  ],
-  playwright: ["browsers installed on first use (npx playwright install)"],
-  figma: ["Figma OAuth, completed from the Pi MCP panel on first use"],
-  "figma-desktop": ["Figma desktop running with Dev Mode MCP enabled"]
-};
-
-const presets = {
-  minimal: [],
-  docs: ["context7"],
-  browser: ["chrome-devtools", "playwright"],
-  github: ["github"],
-  design: ["figma"],
-  "design-local": ["figma-desktop"],
-  web: ["context7", "chrome-devtools", "playwright"],
-  core: ["context7", "chrome-devtools", "github"],
-  popular: ["context7", "chrome-devtools", "playwright", "github", "figma"],
-  all: ["context7", "chrome-devtools", "playwright", "github", "figma", "figma-desktop"]
-};
-
-if (listOnly) {
-  console.log(JSON.stringify({
-    presets,
-    servers: Object.fromEntries(Object.entries(servers).map(([name, value]) => [
-      name,
-      { description: value.description, requires: prerequisites[name] ?? [] }
-    ]))
-  }, null, 2));
-  process.exit(0);
-}
-
-if (!Object.hasOwn(presets, presetName)) {
-  console.error(`FAIL: unknown preset: ${presetName}`);
-  console.error(`Available presets: ${Object.keys(presets).join(", ")}`);
-  process.exit(2);
-}
-
-// Answering the name question and stopping, so a caller can ask before it
-// installs rather than discovering the typo after two packages have landed.
-if (validateOnly) {
-  process.stdout.write(`${presetName}\n`);
-  process.exit(0);
-}
-
-let current = {};
-if (fs.existsSync(configPath)) {
-  try {
-    current = JSON.parse(fs.readFileSync(configPath, "utf8"));
-  } catch (error) {
-    console.error(`FAIL: cannot parse existing MCP config: ${configPath}`);
-    console.error(error instanceof Error ? error.message : String(error));
-    process.exit(1);
-  }
-}
-
-if (!current || typeof current !== "object" || Array.isArray(current)) current = {};
-if (!current.settings || typeof current.settings !== "object" || Array.isArray(current.settings)) current.settings = {};
-if (!current.mcpServers || typeof current.mcpServers !== "object" || Array.isArray(current.mcpServers)) current.mcpServers = {};
-
-current.settings = {
-  ...baselineSettings,
-  ...current.settings
-};
-
-const added = [];
-const kept = [];
-const replaced = [];
-for (const name of presets[presetName]) {
-  if (!Object.hasOwn(servers, name)) {
-    throw new Error(`Preset ${presetName} references missing server ${name}`);
-  }
-  if (Object.hasOwn(current.mcpServers, name)) {
-    if (replace) {
-      current.mcpServers[name] = servers[name].config;
-      replaced.push(name);
-    } else {
-      kept.push(name);
-    }
-  } else {
-    current.mcpServers[name] = servers[name].config;
-    added.push(name);
-  }
-}
-
-const output = `${JSON.stringify(current, null, 2)}\n`;
-const report = {
-  configPath,
-  preset: presetName,
-  dryRun,
-  replace,
-  added,
-  kept,
-  replaced,
-  serverCount: Object.keys(current.mcpServers).length
-};
-
-// stdout stays machine-readable; the operator note goes to stderr.
-function reportPrerequisites() {
-  const lines = [];
-  for (const name of presets[presetName]) {
-    for (const item of prerequisites[name] ?? []) lines.push(`  ${name}: ${item}`);
-  }
-  if (lines.length === 0) return;
-  console.error("");
-  console.error("Server definitions are written. Each still needs this before it can connect:");
-  for (const line of lines) console.error(line);
-  console.error("Servers connect lazily, so nothing above is checked until the first call.");
-}
-
-if (dryRun) {
-  console.log(JSON.stringify(report, null, 2));
-  console.log(output);
-} else {
-  fs.mkdirSync(path.dirname(configPath), { recursive: true });
-  fs.writeFileSync(configPath, output);
-  console.log(JSON.stringify(report, null, 2));
-  reportPrerequisites();
-}
-NODE