@typecad/cuttlefish 1.0.0-alpha.7 → 1.0.0-alpha.9

package/dist/emit/route-hal-op.js

@@ -1,13 +1,26 @@
 // ---------------------------------------------------------------------------
 // Op routing — dispatch a HALOpIR to the right strategy resolver.
 //
-// display.* ops go to resolveDisplayOp (graphics-specific); everything else
-// goes to resolveHALOperation (the existing generic seam). Keeps the consumer
-// sites (expression-renderer, statement-renderer, render-expr) DRY.
+// display.* ops go to resolveDisplayOp (graphics-specific).
+// safety.*  ops go to the safety hook's resolveSafetyOp (when @typecad/safety
+//           is loaded) — NEVER to a per-target strategy, because the safety
+//           package is MCU-agnostic by construction.
+// everything else goes to resolveHALOperation (the existing generic seam).
+// Keeps the consumer sites (expression-renderer, statement-renderer,
+// render-expr) DRY.
 // ---------------------------------------------------------------------------
+import { getSafetyHook } from "../safety-hook.js";
 export function routeHALOp(op, strategy) {
-    if (typeof op.operation === "string" && op.operation.startsWith("display.")) {
-        return strategy.resolveDisplayOp?.(op);
+    if (typeof op.operation === "string") {
+        if (op.operation.startsWith("display.")) {
+            return strategy.resolveDisplayOp?.(op);
+        }
+        if (op.operation.startsWith("safety.")) {
+            // Safety ops are resolved by the @typecad/safety package via hook.
+            // Returns undefined if the package is not loaded (caller emits an
+            // unhandled-op warning).
+            return getSafetyHook()?.resolveSafetyOp?.(op);
+        }
     }
     return strategy.resolveHALOperation?.(op);
 }

package/dist/emit/snprintf-helpers.js

@@ -236,11 +236,14 @@ export function inferSnprintfArg(expr, strategy, scopeState, renderExpression, p
                         return { format: "%d", arg: renderExpression(expr), estimatedLength: 12, preludeLines: [] };
                     }
                 }
-                const arduinoIntFunctions = new Set([
-                    "digitalRead", "analogRead", "pulseIn", "pulseInLong",
-                    "Wire_available", "Serial_available",
+                const halIntFunctions = new Set([
+                    ...(strategy?.halCallNames?.() ?? new Set()),
+                    // pulseIn/pulseInLong and the Wire_available/Serial_available forms
+                    // are framework-specific suffix conventions; frameworks may add them
+                    // to halCallNames. Kept as a fallback here until all frameworks do.
+                    "pulseIn", "pulseInLong", "Wire_available", "Serial_available",
                 ]);
-                if (arduinoIntFunctions.has(funcName)) {
+                if (halIntFunctions.has(funcName)) {
                     return { format: "%d", arg: renderExpression(expr), estimatedLength: 12, preludeLines: [] };
                 }
             }

package/dist/emit/statement-renderer.d.ts

@@ -63,6 +63,14 @@ interface StatementRendererContext {
      * list. Optional so ad-hoc/test constructions still work.
      */
     diagnostics?: Diagnostic[];
+    /**
+     * Optional compliance context for A3-9-1 (fixed-width integer default).
+     * When provided and A3-9-1 is enforced, defaultNumericType() returns a
+     * fixed-width type instead of the legacy 'int'.
+     */
+    compliance?: {
+        isBanned(ruleId: string): boolean;
+    };
 }
 /**
  * Renders StatementIR nodes to C++ code strings.
@@ -83,6 +91,8 @@ export declare class StatementRenderer {
     private readonly interfaceFieldTypes;
     /** Shared emit-time diagnostics sink (see StatementRendererContext.diagnostics). */
     private readonly _diagnostics;
+    /** Compliance context for A3-9-1 fixed-width integer default. */
+    private readonly _compliance?;
     constructor(context: StatementRendererContext);
     /**
      * Gets the underlying expression renderer for direct use.

package/dist/emit/statement-renderer.js

@@ -116,6 +116,7 @@ export class StatementRenderer {
         this.namespaceNames = context.namespaceNames ?? new Set();
         this.interfaceFieldTypes = context.interfaceFieldTypes ?? new Map();
         this._diagnostics = context.diagnostics ?? [];
+        this._compliance = context.compliance;
         // Create expression renderer with shared context
         this.expressionRenderer = new ExpressionRenderer({
             strategy: context.strategy,
@@ -324,7 +325,7 @@ export class StatementRenderer {
                     this.expressionRenderer.pushPrelude([
                         `const char* ${idxVar}_keys[] = { ${keysArr} };`,
                     ]);
-                    return `for (${this.strategy.defaultNumericType()} ${idxVar} = 0; ${idxVar} < ${statement.keys.length}; ${idxVar}++)`;
+                    return `for (${this.strategy.defaultNumericType(this._compliance)} ${idxVar} = 0; ${idxVar} < ${statement.keys.length}; ${idxVar}++)`;
                 }
                 const varDecl = statement.variable;
                 if (varDecl.kind === "var_decl") {
@@ -485,6 +486,15 @@ export class StatementRenderer {
             const rawStmt = statement.callee.slice('__RAW_STMT__'.length);
             return forHeader ? rawStmt : `${rawStmt.endsWith(';') ? rawStmt : rawStmt + ';'}`;
         }
+        // Handle expression statements whose IR must render at EMIT time (not the
+        // build-time renderExprAsText). The safe.read().ok().fail() chain uses this:
+        // its lambda args can only render via the emit-time renderLambda (which
+        // produces [&](){...}), so the structured chain IR is carried as args[0]
+        // and rendered here via the expression renderer.
+        if (statement.callee === '__EXPR_STMT__' && statement.args.length >= 1) {
+            const exprText = this.expressionRenderer.render(statement.args[0], undefined, knownVariableTypes);
+            return forHeader ? exprText : `${exprText};`;
+        }
         // Awaited network markers (__WIFI_WAIT__/__HTTP_WAIT__) reaching the
         // plain renderer means the await sits outside an async state machine
         // (top-level await, or a position the state-machine splitter doesn't
@@ -658,13 +668,13 @@ export class StatementRenderer {
                     // that don't support std::vector → emit as a plain C-style array.
                     // Mutable arrays (.push/.pop/.indexOf) are rewritten to StaticArray<int> in
                     // the IR builder (via mutableArrayVars) and never reach this branch.
-                    const elementType = parsedElementString(rawType) ?? this.strategy.defaultNumericType();
+                    const elementType = parsedElementString(rawType) ?? this.strategy.defaultNumericType(this._compliance);
                     return forHeader
                         ? `${elementType} ${safeArrName}[] = { ${elements} }`
                         : `${elementType} ${safeArrName}[] = { ${elements} };`;
                 }
                 // Use "int" for "auto" element type since C arrays need explicit types
-                const arrayType = statement.initializer.elementType === "auto" ? this.strategy.defaultNumericType() : statement.initializer.elementType;
+                const arrayType = statement.initializer.elementType === "auto" ? this.strategy.defaultNumericType(this._compliance) : statement.initializer.elementType;
                 return forHeader
                     ? `${arrayType} ${safeArrName}[] = { ${elements} }`
                     : `${arrayType} ${safeArrName}[] = { ${elements} };`;
@@ -739,7 +749,7 @@ export class StatementRenderer {
             }
             // Handle spread array initializers
             if (statement.initializer.kind === "spread_array") {
-                let arrayType = statement.initializer.elementType === "auto" ? this.strategy.defaultNumericType() : statement.initializer.elementType;
+                let arrayType = statement.initializer.elementType === "auto" ? this.strategy.defaultNumericType(this._compliance) : statement.initializer.elementType;
                 const spreadName = this.expressionRenderer.render(statement.initializer.spreadExpr, calleeTransformer, knownVariableTypes);
                 if (statement.initializer.elementType === "auto" && knownVariableTypes && statement.initializer.spreadExpr.kind === "identifier") {
                     const srcInfo = knownVariableTypes.get(statement.initializer.spreadExpr.value);
@@ -892,11 +902,17 @@ export class StatementRenderer {
         if (this.stringEnumNames.has(typeName)) {
             return this.strategy.normalizeCppType("const char*");
         }
+        // A3-9-1: under autosar, substitute the platform's default numeric type
+        // for the legacy "int" spelling. The IR layer hardcodes "int" for number
+        // literals, so we catch it here at the renderer boundary.
+        if (typeName === "int" && this._compliance?.isBanned("A3-9-1")) {
+            return this.strategy.defaultNumericType(this._compliance);
+        }
         return this.strategy.normalizeCppType(typeName);
     }
     inferFieldType(value, parentName, fieldName) {
         return inferObjectFieldType(value, this.pointerVarTypes, this.knownFunctionReturnTypes, undefined, undefined, undefined, // largeEnumNames - would need to pass through
-        parentName, fieldName, this.strategy.defaultNumericType(), (o, n) => this.strategy.resolvePinType?.(o, n));
+        parentName, fieldName, this.strategy.defaultNumericType(this._compliance), (o, n) => this.strategy.resolvePinType?.(o, n));
     }
     /**
      * Transform console.log/error/warn calls based on target platform.

package/dist/emit/utils/async-state-machine.js

@@ -76,11 +76,23 @@ export function generateAsyncTaskClass(fnName, fnStatements, strategy, knownFunc
     segments.push({ preStatements: currentPre, awaitedArgs: [] });
     const awaitCount = segments.filter((s) => s.awaitedCallee !== undefined).length;
     const stateCount = awaitCount + 1; // STATE_0 … STATE_{awaitCount}; cyclic loops back, linear adds STATE_DONE
+    // State enum is emitted as `enum class State` (AUTOSAR A7-2-1), so all
+    // references must be scope-qualified as `State::STATE_X`. The stateEnumList
+    // (used inside `enum class State { ... }`) uses the bare names; everywhere
+    // else (assignments, case labels, comparisons) uses the qualified form.
     const stateNames = [];
-    for (let i = 0; i < stateCount; i++)
+    const qualifiedStateNames = [];
+    for (let i = 0; i < stateCount; i++) {
         stateNames.push(`STATE_${i}`);
-    if (!isCyclic)
+        qualifiedStateNames.push(`State::STATE_${i}`);
+    }
+    if (!isCyclic) {
         stateNames.push("STATE_DONE");
+        qualifiedStateNames.push("State::STATE_DONE");
+    }
+    const Q = (i) => qualifiedStateNames[i];
+    const Q_DONE = "State::STATE_DONE";
+    const Q_0 = "State::STATE_0";
     // Helper: render a non-await statement as a single C++ line
     const renderStmt = (stmt) => renderStatement(stmt, false, strategy, undefined, undefined, knownFunctionReturnTypes);
     // Collect edge-detection markers from segments
@@ -138,14 +150,14 @@ export function generateAsyncTaskClass(fnName, fnStatements, strategy, knownFunc
         const seg = segments[i];
         const lines = [];
         if (seg.awaitedCallee === undefined) {
-            lines.push(`${pad}_state = ${isCyclic ? "STATE_0" : "STATE_DONE"};`);
+            lines.push(`${pad}_state = ${isCyclic ? Q_0 : Q_DONE};`);
             return lines;
         }
         const edge = edgeInfoMap.get(i);
         const tap = tapInfoMap.get(i);
         const net = netInfoMap.get(i);
         if (edge) {
-            lines.push(`${pad}_edgePrev_p${edge.pin} = digitalRead(${edge.pin});`);
+            lines.push(`${pad}_edgePrev_p${edge.pin} = ${strategy.readDigitalPin?.(String(edge.pin)) ?? `digitalRead(${edge.pin})`};`);
             if (edge.timeout !== null) {
                 lines.push(`${pad}_waitUntil = ${strategy.currentTimeMillis()} + ${edge.timeout};`);
             }
@@ -165,13 +177,13 @@ export function generateAsyncTaskClass(fnName, fnStatements, strategy, knownFunc
             const ms = seg.awaitedArgs[0] ? renderExpression(seg.awaitedArgs[0], strategy) : "0";
             lines.push(`${pad}_waitUntil = ${strategy.currentTimeMillis()} + ${ms};`);
         }
-        lines.push(`${pad}_state = STATE_${i + 1};`);
+        lines.push(`${pad}_state = ${Q(i + 1)};`);
         return lines;
     };
     const caseLines = [];
     for (let i = 0; i < segments.length; i++) {
         const seg = segments[i];
-        const stateName = `STATE_${i}`;
+        const stateName = Q(i);
         const body = [];
         const edgePoll = i > 0 ? edgeInfoMap.get(i - 1) : undefined;
         const tapPoll = i > 0 ? tapInfoMap.get(i - 1) : undefined;
@@ -194,7 +206,7 @@ export function generateAsyncTaskClass(fnName, fnStatements, strategy, knownFunc
                 ? `(${cond}) || ${strategy.currentTimeMillis()} >= _waitUntil`
                 : cond;
             body.push(`        {`);
-            body.push(`          int _cur = digitalRead(${edgePoll.pin});`);
+            body.push(`          int _cur = ${strategy.readDigitalPin?.(String(edgePoll.pin)) ?? `digitalRead(${edgePoll.pin})`};`);
             body.push(`          if (${fullCond}) {`);
             body.push(`            ${prevVar} = _cur;`);
             body.push(...runSegment(`            `));
@@ -242,13 +254,13 @@ export function generateAsyncTaskClass(fnName, fnStatements, strategy, knownFunc
         caseLines.push(`      case ${stateName}:`, `        {`, ...body, `        }`, `        break;`);
     }
     if (!isCyclic)
-        caseLines.push(`      case STATE_DONE:`, `        break;`);
+        caseLines.push(`      case ${Q_DONE}:`, `        break;`);
     const stateEnumList = stateNames.join(", ");
-    const isCompleteExpr = isCyclic ? "false" : "_state == STATE_DONE";
+    const isCompleteExpr = isCyclic ? "false" : `_state == ${Q_DONE}`;
     // Build constructor initializer list and edge/tap member declarations
     const edgeMemberArr = Array.from(edgeMembers);
     const tapMemberArr = Array.from(tapMembers.keys());
-    const inits = [`_state(STATE_0)`, `_waitUntil(0)`];
+    const inits = [`_state(${Q_0})`, `_waitUntil(0)`];
     for (const m of edgeMemberArr)
         inits.push(`${m}(LOW)`);
     for (const m of tapMemberArr)
@@ -263,7 +275,7 @@ export function generateAsyncTaskClass(fnName, fnStatements, strategy, knownFunc
         `// Async state machine for ${fnName}`,
         `class ${className} {`,
         `public:`,
-        `  enum State { ${stateEnumList} };`,
+        `  enum class State { ${stateEnumList} };`,
         `  ${className}() : ${ctorInitList} {}`,
         `  void run() {`,
         `    switch (_state) {`,
@@ -271,7 +283,7 @@ export function generateAsyncTaskClass(fnName, fnStatements, strategy, knownFunc
         `    }`,
         `  }`,
         `  bool isComplete() const { return ${isCompleteExpr}; }`,
-        `  void reset() { _state = STATE_0; _waitUntil = 0;${edgeResetList}${tapResetList} }`,
+        `  void reset() { _state = ${Q_0}; _waitUntil = 0;${edgeResetList}${tapResetList} }`,
         `private:`,
         `  State _state;`,
         `  unsigned long _waitUntil;`,
@@ -394,6 +406,21 @@ function netWaitInfo(op, strategy) {
             }
             break;
         }
+        case "worker.submit": {
+            // Worker offload (Phase 3). `await worker.submit(fn, arg)` rewrites to:
+            // submit the worker (start), then poll worker.done on the same handle.
+            // The submit op is emitted verbatim as the start line; the poll predicate
+            // is worker.done(handle) carrying the SAME handleId. This is a predicate-
+            // poll resume (same per-frame cost as net/timer awaits), NOT an ISR-driven
+            // resume — that defers with DMA-backed awaits.
+            const submit = routeHALOp(op, strategy);
+            // Carry the handle through to the poll so submit + done agree on the slot.
+            const poll = route({ operation: "worker.done", handleId: o.handleId })?.expression ?? null;
+            if (submit?.code && poll) {
+                return { startLines: [submit.code], pollCond: poll, timeoutExpr: null };
+            }
+            break;
+        }
     }
     // Fallback: run the blocking form immediately and complete on the next tick.
     const blocking = routeHALOp(op, strategy);

package/dist/framework-package.js

@@ -50,6 +50,8 @@ export function loadFrameworkPackage(packageName, fromDir = process.cwd()) {
             } : undefined,
             classNameMapBuilder: typeof mod.buildClassNameMap === "function" ? mod.buildClassNameMap : undefined,
             libDeclGenerator: typeof mod.tryGenerateLibDecl === "function" ? mod.tryGenerateLibDecl : undefined,
+            doctor: typeof mod.doctor === "function" ? mod.doctor : undefined,
+            licenses: typeof mod.licenses === "function" ? mod.licenses : undefined,
         };
         setLoadedFramework(framework);
         registerPlatformStrategy(strategy);

package/dist/framework-registry.d.ts

@@ -14,6 +14,16 @@ export interface LoadedFramework {
     classNameMapBuilder?: (imports: any[]) => Map<string, string>;
     /** Framework library .d.ts declaration generation */
     libDeclGenerator?: (modulePath: string, file: string) => string | undefined;
+    /**
+     * Optional subcommand presenters owned by the framework. Cuttlefish dispatches
+     * `cuttlefish doctor` / `cuttlefish licenses` to these when the loaded
+     * framework provides them; otherwise it prints a no-support message. Each
+     * framework decides what (if anything) these do — e.g. framework-arduino
+     * checks arduino-cli + board core (doctor) and scans Arduino library licenses
+     * (licenses).
+     */
+    doctor?: () => void;
+    licenses?: (strict: boolean, all: boolean) => void;
 }
 /**
  * Resolves framework-specific library imports (e.g., Arduino libraries).
@@ -32,6 +42,13 @@ export interface FrameworkToolchain {
     compile(options: ToolchainOptions): CompileResult;
     upload?(options: ToolchainOptions): UploadResult;
     monitor?(options: ToolchainOptions): void;
+    /**
+     * Optional: launch an interactive debugger session for the last build
+     * (e.g. `west debug`). Not invoked by the standard build/compile flow;
+     * powers an explicit debug-attach entry point. Frameworks that support
+     * source-level debugging implement this to spawn their native debugger.
+     */
+    debug?(options: ToolchainOptions): void;
 }
 export declare function setLoadedFramework(framework: LoadedFramework): void;
 export declare function getLoadedFramework(): LoadedFramework;

package/dist/install/framework-catalog.d.ts

@@ -0,0 +1,53 @@
+/** A framework family that ships as an installable @typecad/framework-* package. */
+export interface FrameworkCatalogEntry {
+    /** Short id, e.g. "arduino". Matches the suffix of @typecad/framework-<id>. */
+    id: string;
+    /** Full npm package name, e.g. "@typecad/framework-arduino". */
+    packageName: string;
+    /** Human-readable label shown in the install prompt. */
+    label: string;
+    /**
+     * Whether a real package exists on the registry. Used to filter the prompt:
+     * "esp-idf" is a known family with no published package yet, so it must not
+     * be offered for install (it would fail at the package-manager step).
+     */
+    installable: boolean;
+}
+/**
+ * The installable frameworks. Kept aligned with the packages/ directory:
+ * framework-arduino, framework-native, framework-zephyr all ship real packages.
+ * esp-idf is intentionally absent (no published package in this repo).
+ */
+export declare const FRAMEWORK_CATALOG: readonly FrameworkCatalogEntry[];
+/** Structural shape we need from a board/target. Keeps this module decoupled
+ *  from the create/ module's KnownTarget (and trivially testable with literals). */
+export interface BoardLike {
+    isNative?: boolean;
+    architecture?: string;
+}
+/** Look up a catalog entry by framework id (e.g. "arduino"). */
+export declare function frameworkCatalogEntry(id: string): FrameworkCatalogEntry | undefined;
+/**
+ * The framework ids compatible with a board. Native boards map to ["native"];
+ * embedded boards map via ARCHITECTURE_FRAMEWORKS (falling back to arduino for
+ * unknown architectures). Order is preserved as the catalog order so the most
+ * common framework is offered first in the prompt.
+ */
+export declare function frameworksForTarget(target: BoardLike): FrameworkCatalogEntry[];
+export type PackageManager = "npm" | "pnpm" | "yarn";
+/**
+ * Detect the package manager for a directory. Priority:
+ *   1. package.json#packageManager field (the strongest signal, Corepack-style)
+ *   2. lockfile presence (pnpm-lock.yaml / yarn.lock → otherwise npm)
+ *   3. default "npm"
+ * Never throws — unreadable/missing files fall through to the next signal.
+ */
+export declare function detectPackageManager(cwd: string): PackageManager;
+/**
+ * Build the package-manager invocation that installs `packageName` into the
+ * current project (project-local, never global — per the install command spec).
+ */
+export declare function buildInstallCommand(pm: PackageManager, packageName: string): {
+    bin: string;
+    args: string[];
+};

package/dist/install/framework-catalog.js

@@ -0,0 +1,107 @@
+// Framework catalog + board→framework compatibility for `cuttlefish install`.
+//
+// A "framework" is a `@typecad/framework-<id>` npm package. This module is the
+// single source of truth for which frameworks exist as installable packages and
+// which are compatible with a given board architecture. It is deliberately
+// free of side effects (no fs/process beyond lockfile/package.json reads in
+// detectPackageManager) so it unit-tests cleanly.
+import path from "node:path";
+import fs from "node:fs";
+/**
+ * The installable frameworks. Kept aligned with the packages/ directory:
+ * framework-arduino, framework-native, framework-zephyr all ship real packages.
+ * esp-idf is intentionally absent (no published package in this repo).
+ */
+export const FRAMEWORK_CATALOG = [
+    { id: "arduino", packageName: "@typecad/framework-arduino", label: "Arduino (digitalWrite, Wire, SPI)", installable: true },
+    { id: "zephyr", packageName: "@typecad/framework-zephyr", label: "Zephyr RTOS", installable: true },
+    { id: "native", packageName: "@typecad/framework-native", label: "Native (Windows/Linux executable)", installable: true },
+];
+/**
+ * Architecture → compatible framework ids. Derived from each framework
+ * package's framework.manifest.ts `profile.targets`:
+ *   - arduino: avr, esp32 family, rp2040/rp2350, samd, stm32
+ *   - zephyr:  nrf52 (xiao_ble), esp32, esp32s3
+ *   - native:  desktop only
+ * Unknown embedded architectures fall back to [arduino] (the broadest core).
+ */
+const ARCHITECTURE_FRAMEWORKS = {
+    avr: ["arduino"],
+    esp32: ["arduino", "zephyr"],
+    esp32s2: ["arduino"],
+    esp32s3: ["arduino", "zephyr"],
+    esp32c3: ["arduino"],
+    esp32c6: ["arduino"],
+    rp2040: ["arduino"],
+    rp2350: ["arduino"],
+    samd: ["arduino"],
+    stm32: ["arduino"],
+    nrf52: ["zephyr"],
+};
+const FALLBACK_FRAMEWORKS = ["arduino"];
+/** Look up a catalog entry by framework id (e.g. "arduino"). */
+export function frameworkCatalogEntry(id) {
+    return FRAMEWORK_CATALOG.find((f) => f.id === id);
+}
+/**
+ * The framework ids compatible with a board. Native boards map to ["native"];
+ * embedded boards map via ARCHITECTURE_FRAMEWORKS (falling back to arduino for
+ * unknown architectures). Order is preserved as the catalog order so the most
+ * common framework is offered first in the prompt.
+ */
+export function frameworksForTarget(target) {
+    let ids;
+    if (target.isNative) {
+        ids = ["native"];
+    }
+    else {
+        ids = ARCHITECTURE_FRAMEWORKS[target.architecture ?? ""] ?? FALLBACK_FRAMEWORKS;
+    }
+    // Re-map ids → catalog entries in catalog order (stable ordering), dropping
+    // any id that has no catalog entry (defensive — keeps the prompt clean).
+    return FRAMEWORK_CATALOG.filter((entry) => ids.includes(entry.id));
+}
+/**
+ * Detect the package manager for a directory. Priority:
+ *   1. package.json#packageManager field (the strongest signal, Corepack-style)
+ *   2. lockfile presence (pnpm-lock.yaml / yarn.lock → otherwise npm)
+ *   3. default "npm"
+ * Never throws — unreadable/missing files fall through to the next signal.
+ */
+export function detectPackageManager(cwd) {
+    try {
+        const pkgPath = path.join(cwd, "package.json");
+        const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+        const pm = typeof pkg.packageManager === "string" ? pkg.packageManager : "";
+        if (pm.startsWith("pnpm"))
+            return "pnpm";
+        if (pm.startsWith("yarn"))
+            return "yarn";
+        if (pm.startsWith("npm"))
+            return "npm";
+    }
+    catch {
+        // no package.json or unparseable JSON — fall through to lockfile detection
+    }
+    if (fs.existsSync(path.join(cwd, "pnpm-lock.yaml")))
+        return "pnpm";
+    if (fs.existsSync(path.join(cwd, "yarn.lock")))
+        return "yarn";
+    // package-lock.json implies npm; absence also defaults to npm.
+    return "npm";
+}
+/**
+ * Build the package-manager invocation that installs `packageName` into the
+ * current project (project-local, never global — per the install command spec).
+ */
+export function buildInstallCommand(pm, packageName) {
+    switch (pm) {
+        case "pnpm":
+            return { bin: "pnpm", args: ["add", packageName] };
+        case "yarn":
+            return { bin: "yarn", args: ["add", packageName] };
+        case "npm":
+        default:
+            return { bin: "npm", args: ["install", packageName] };
+    }
+}

package/dist/install/handle-install.d.ts

@@ -0,0 +1,35 @@
+import type { InstallCommandOptions } from "../types.js";
+import { type FrameworkCatalogEntry, type PackageManager } from "./framework-catalog.js";
+interface InstallCommand {
+    bin: string;
+    args: string[];
+    cwd: string;
+}
+interface InstallRunResult {
+    /** Exit status; null when the process could not be launched (ENOENT, etc.). */
+    status: number | null;
+    /** Populated only when the binary could not be launched. */
+    launchError?: string;
+}
+type InstallRunner = (cmd: InstallCommand) => InstallRunResult;
+/**
+ * FOR TESTS ONLY. Replaces the real spawn-based installer with `runner`.
+ * Pass `undefined` to restore the real executor.
+ */
+export declare function __setInstallRunnerForTest(runner: InstallRunner | undefined): void;
+export interface InstallResult {
+    pm: PackageManager;
+    bin: string;
+    args: string[];
+}
+/**
+ * Resolve the package manager and run the install for `entry`'s package. In
+ * dry-run mode the command is printed but not executed. Throws on launch
+ * failure or non-zero exit so the CLI surfaces a clear error.
+ */
+export declare function installFrameworkPackage(entry: FrameworkCatalogEntry, opts: {
+    cwd: string;
+    dryRun?: boolean;
+}): InstallResult;
+export declare function handleInstall(options: InstallCommandOptions): Promise<void>;
+export {};