jorgex-stack 1.9.27 → 1.9.29

package/README.md

@@ -56,7 +56,7 @@ pnpm dlx jorgex-stack uninstall       # remove managed files; keep Engram data i
 
 For development from a clone, run the same commands through `pnpm cli <command>` (see [Development](#development)).
 
-Every command supports `--dry-run`, `--yes`, and `--target-dir <dir>` for testing without touching the real config. Writes create automatic backups and verify idempotency; merges into user config are surgical (marked markdown sections, JSON/TOML upserts), so user-owned content is never touched.
+Every command supports `--dry-run`, `--yes`, and `--target-dir <dir>` for testing without touching the real config. Writes create automatic backups and verify idempotency; merges into user config are surgical (marked markdown sections, JSON/TOML upserts), so user-owned content is never touched. `--yes` does not authorize downloading missing Engram; use `--engram` for that explicit consent. The interactive install asks before installing it, while dry-run and target-dir never download it.
 
 Runtime defaults are documented in [docs/references/permissions.md](docs/references/permissions.md) for permissions and [docs/references/models.md](docs/references/models.md) for the Sol primary default, field-level ownership and independent subagent routing. The quality policy and `jorgex.quality.receipt` contract are documented in [docs/references/quality-receipt.md](docs/references/quality-receipt.md). OpenCode remains provider-agnostic for subagents; its primary defaults to the OpenAI OAuth model `openai/gpt-5.6-sol` unless the user replaces it.
 
@@ -132,7 +132,7 @@ Install, sync and uninstall back up every managed file before changing it and ar
 
 The package owns Pi's native primary-model projection: `openai-codex/gpt-5.6-sol`, with a local `contextWindow` request of 872K. It merges only missing compatible fields, records field ownership in `PI_CODING_AGENT_DIR/jorgex-pi/sol-lifecycle.v1.json`, and cleanup removes only still-owned canonical values. Stack does not duplicate that package-owned settings/models logic. The 872K value is local OAuth metadata until a real long-context smoke test confirms backend acceptance; it is not the API context limit.
 
-Engram remains mandatory and user-owned. An existing binary is preserved. Interactive install may offer the native `brew`/`go`/release channel with explicit confirmation; `--yes` and non-TTY installs fail with a remedy when Engram is absent. The database and memories are never updated or deleted, and uninstall never deletes the Engram binary. Under `--target-dir`, Stack accepts only `<target>/bin/engram`, isolates Pi/Home/XDG/AppData/temp/npm-cache paths inside the target, and never consults the host Engram or Pi configuration.
+Engram remains mandatory and user-owned. An existing binary is preserved. `install` resolves or installs the verified official v1.20.0 release before configuring any selected runtime; use `--engram` to authorize that download in non-interactive flows. The release installer writes only `~/.local/bin/engram` (or the platform equivalent), checks the pinned size and SHA-256, and does not use Brew or Go. `sync`, dry-run and `--target-dir` never download it. The database and memories are never updated or deleted, and uninstall never deletes the Engram binary. Under `--target-dir`, Stack accepts only `<target>/bin/engram`, isolates Pi/Home/XDG/AppData/temp/npm-cache paths inside the target, and never consults the host Engram or Pi configuration.
 
 Históricamente, Stack `1.9.7` reconocía el receipt exacto de Pi `npm:jorgex-pi@0.8.4`. Usa versiones exactas, nunca `latest`, y no edites receipts o hashes ni borres `HOME`, Engram o la proyección de otro runtime para forzar confianza. El pin y los comandos actuales de transición y rollback están en [docs/references/pi-runtime.md](docs/references/pi-runtime.md).
 

package/dist/cli.d.ts

@@ -21,6 +21,7 @@ interface Flags {
     list: boolean;
     check: boolean;
     removeEngram: boolean;
+    engram: boolean;
     playwright: boolean;
     removePlaywright: boolean;
     devtools: boolean;

package/dist/cli.js

@@ -15,7 +15,7 @@ import {
 
 // src/cli.ts
 import * as p6 from "@clack/prompts";
-import fs24 from "fs";
+import fs25 from "fs";
 import { pathToFileURL as pathToFileURL2 } from "url";
 
 // src/install.ts
@@ -2154,7 +2154,7 @@ var PLAYWRIGHT_CLI = {
   version: "0.1.18",
   browserInstallAction: "install-browser"
 };
-var PNPM_GLOBAL_BIN_REMEDY = "Ejecuta 'pnpm setup', abre una terminal nueva y reintenta. El stack no modifica PNPM_HOME ni PATH.";
+var PNPM_GLOBAL_BIN_REMEDY = "Ejecuta 'pnpm setup', abre una terminal nueva y reintenta. Sin consentimiento, el stack no modifica la configuraci\xF3n de la shell.";
 function resolvePnpmFailureRemedy(reason) {
   switch (reason) {
     case "pnpm-unavailable":
@@ -2197,6 +2197,34 @@ function resolvePnpmBin() {
   const pnpmCmd = lookPath("pnpm.cmd");
   return pnpmCmd !== null && !pnpmCmd.toLowerCase().endsWith(".ps1") ? pnpmCmd : null;
 }
+function resolvePnpmHome(env = process.env, platform = process.platform, homeDir = os.homedir()) {
+  const paths = platform === "win32" ? path18.win32 : path18.posix;
+  if (env.PNPM_HOME) return env.PNPM_HOME;
+  if (env.XDG_DATA_HOME) return paths.join(env.XDG_DATA_HOME, "pnpm");
+  if (platform === "darwin") return paths.join(homeDir, "Library", "pnpm");
+  if (platform === "win32") return env.LOCALAPPDATA ? paths.join(env.LOCALAPPDATA, "pnpm") : paths.join(homeDir, ".pnpm");
+  return paths.join(homeDir, ".local", "share", "pnpm");
+}
+function setupPnpmGlobal(pnpmBin, env = process.env, platform = process.platform, homeDir = os.homedir()) {
+  const pnpmHome = resolvePnpmHome(env, platform, homeDir);
+  const paths = platform === "win32" ? path18.win32 : path18.posix;
+  if (!paths.isAbsolute(pnpmHome)) return { ok: false, reason: "PNPM_HOME debe ser una ruta absoluta; corrige la configuraci\xF3n antes de reintentar." };
+  const pathEntries = [pnpmHome, paths.join(pnpmHome, "bin")];
+  if (env.PATH !== void 0) pathEntries.push(env.PATH);
+  const childEnv = {
+    ...env,
+    PNPM_HOME: pnpmHome,
+    PATH: pathEntries.join(platform === "win32" ? ";" : ":")
+  };
+  const invocation = planDetectedBinCommand(pnpmBin, ["setup"]);
+  if (invocation === null) return { ok: false, reason: "No se pudo preparar la invocaci\xF3n de pnpm setup." };
+  try {
+    execFileSync2(invocation.command, invocation.args, { stdio: "inherit", env: childEnv });
+    return { ok: true, env: childEnv };
+  } catch (error) {
+    return { ok: false, reason: error instanceof Error ? error.message : String(error) };
+  }
+}
 function isPlaywrightBrowserReady(env = process.env, platform = process.platform, homeDir = os.homedir()) {
   const configuredPath = env.PLAYWRIGHT_BROWSERS_PATH;
   const cacheDir = configuredPath ?? (platform === "win32" ? path18.join(env.LOCALAPPDATA ?? path18.join(homeDir, "AppData", "Local"), "ms-playwright") : platform === "darwin" ? path18.join(homeDir, "Library", "Caches", "ms-playwright") : path18.join(env.XDG_CACHE_HOME ?? path18.join(homeDir, ".cache"), "ms-playwright"));
@@ -2223,13 +2251,16 @@ function planPlaywrightCliCommand(action, pnpmBin) {
       return { command: pnpmBin, args: ["dlx", pinnedPackage, PLAYWRIGHT_CLI.browserInstallAction] };
   }
 }
-function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin()) {
+function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin(), env) {
   if (pnpmBin === null) return { ok: false, reason: "pnpm-unavailable" };
   if (action !== "install-browser") {
     const preflight = planDetectedBinCommand(pnpmBin, ["bin", "--global"]);
     if (preflight === null) return { ok: false, reason: "pnpm-command" };
     try {
-      execFileSync2(preflight.command, preflight.args, { stdio: "inherit" });
+      execFileSync2(preflight.command, preflight.args, {
+        stdio: "inherit",
+        ...env === void 0 ? {} : { env }
+      });
     } catch (error) {
       return { ok: false, reason: hasNonzeroProcessStatus(error) ? "pnpm-global-bin" : "pnpm-command" };
     }
@@ -2238,7 +2269,10 @@ function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin()) {
   const invocation = planDetectedBinCommand(command.command, command.args);
   if (invocation === null) return { ok: false, reason: "pnpm-command" };
   try {
-    execFileSync2(invocation.command, invocation.args, { stdio: "inherit" });
+    execFileSync2(invocation.command, invocation.args, {
+      stdio: "inherit",
+      ...env === void 0 ? {} : { env }
+    });
     return { ok: true };
   } catch {
     return { ok: false, reason: "action-failed" };
@@ -2439,8 +2473,8 @@ var ADAPTERS = {
   "claude-code": claudeCodeAdapter,
   codex: codexAdapter
 };
-function executePlaywrightToolAction2(action) {
-  return executePlaywrightToolAction(action, resolvePnpmBin());
+function executePlaywrightToolAction2(action, pnpmBin = resolvePnpmBin(), env) {
+  return executePlaywrightToolAction(action, pnpmBin, env);
 }
 function resolvePlaywrightToolPlan(consent) {
   if (consent.command !== "install" || consent.targetDir) return { actions: [] };
@@ -2560,15 +2594,16 @@ function collectAllCurrentTargets(mode = DEFAULT_INSTALL_MODE_PREFERENCE) {
   return { targets, complete, warnings };
 }
 async function runInstall(opts) {
-  p.intro(`jorgex-stack ${opts.dryRun ? "install (dry-run)" : "install"}`);
+  const showSummary = opts.showSummary !== false;
+  if (showSummary) p.intro(`jorgex-stack ${opts.dryRun ? "install (dry-run)" : "install"}`);
   const stackDir = stackRoot();
-  const engramBin = detectEngram();
+  const engramBin = opts.engramBin === void 0 ? detectEngram() : opts.engramBin;
   const modePreference = opts.mode === void 0 ? opts.targetDir === void 0 ? loadInstallModePreference() : DEFAULT_INSTALL_MODE_PREFERENCE : normalizeInstallModePreference(opts.mode);
   const useManifest = opts.targetDir === void 0;
   const preferenceErrors = useManifest ? [...browserPreferenceErrors(), primaryModelOwnershipError()].filter((error) => error !== null) : [];
   if (preferenceErrors.length > 0) {
     for (const error of preferenceErrors) p.log.error(error);
-    p.outro("Install cancelado: corrige el estado de configuraci\xF3n indicado arriba antes de reintentar.");
+    if (showSummary) p.outro("Install cancelado: corrige el estado de configuraci\xF3n indicado arriba antes de reintentar.");
     return 1;
   }
   const toolPlan = opts.playwrightToolConsent === void 0 ? null : resolvePlaywrightToolPlan({
@@ -2708,9 +2743,41 @@ async function runInstall(opts) {
     if (opts.dryRun) {
       p.log.info("Playwright CLI: instalaci\xF3n global y navegador previstos (dry-run; no se ejecutan).");
     } else if (exitCode === 0) {
-      const result = await runPlaywrightToolPlan(toolPlan, opts.playwrightToolDeps ?? {
-        run: async (action) => executePlaywrightToolAction2(action),
-        persistEnabled: (enabled) => savePlaywrightCliPreference(playwrightCliPreferenceFile(), enabled)
+      const baseDeps = opts.playwrightToolDeps ?? {
+        run: async (action, env) => {
+          const pnpmBin = resolvePnpmBin();
+          return executePlaywrightToolAction2(action, pnpmBin, env);
+        },
+        persistEnabled: (enabled) => savePlaywrightCliPreference(playwrightCliPreferenceFile(), enabled),
+        setupPnpm: (pnpmBin) => setupPnpmGlobal(pnpmBin)
+      };
+      let setupAttempted = false;
+      let preparedEnv;
+      const result = await runPlaywrightToolPlan(toolPlan, {
+        ...baseDeps,
+        run: async (action) => {
+          const first = await baseDeps.run(action, preparedEnv);
+          if (first === true || first === false || first.ok || first.reason !== "pnpm-global-bin") return first;
+          if (setupAttempted || opts.dryRun || opts.targetDir !== void 0) return first;
+          const consent = opts.playwrightToolConsent;
+          const canAskForSetup = consent?.interactive === true && !opts.yes;
+          if (!canAskForSetup) return first;
+          setupAttempted = true;
+          const accepted = await p.confirm({
+            message: "pnpm no tiene directorio global. \xBFEjecutar 'pnpm setup' ahora? Esto modificar\xE1 la configuraci\xF3n de tu shell.",
+            initialValue: false
+          });
+          if (p.isCancel(accepted) || !accepted) return first;
+          const pnpmBin = resolvePnpmBin();
+          if (pnpmBin === null) return first;
+          const setup = baseDeps.setupPnpm?.(pnpmBin) ?? setupPnpmGlobal(pnpmBin);
+          if (!setup.ok) {
+            p.log.error(`pnpm setup fall\xF3: ${setup.reason}`);
+            return first;
+          }
+          preparedEnv = setup.env;
+          return baseDeps.run(action, preparedEnv);
+        }
       });
       if (!result.ok) {
         const pnpmRemedy = result.reason === void 0 ? null : resolvePnpmFailureRemedy(result.reason);
@@ -2763,7 +2830,9 @@ async function runInstall(opts) {
   if (useManifest && !opts.dryRun && exitCode === 0 && successfulRuns > 0) {
     saveInstallModePreference(installModePreferenceFile(), modePreference);
   }
-  p.outro(opts.dryRun ? exitCode === 0 ? "Dry-run: no se ha escrito nada." : "Dry-run completado con errores (revisa arriba)." : exitCode === 0 ? "Hecho." : "Install completado con errores (revisa arriba).");
+  if (showSummary) {
+    p.outro(opts.dryRun ? exitCode === 0 ? "Dry-run: no se ha escrito nada." : "Dry-run completado con errores (revisa arriba)." : exitCode === 0 ? "Hecho." : "Install completado con errores (revisa arriba).");
+  }
   return exitCode;
 }
 
@@ -5155,16 +5224,16 @@ import { createHash } from "crypto";
 var pi_runtime_pin_default = {
   package: {
     name: "jorgex-pi",
-    version: "0.8.11",
-    source: "npm:jorgex-pi@0.8.11"
+    version: "0.8.12",
+    source: "npm:jorgex-pi@0.8.12"
   },
   provenance: {
-    commit: "8690d0cab6e4149c95e299b2ef3d7277b8b06263"
+    commit: "a041e8f290021b5a6bb161db77e03663f37c82cb"
   },
   tarball: {
-    bytes: 89141979,
-    sha256: "f0b34be384e5c761043348e7eb561fe56d475ef61479a0a93cd563d28dd28d8b",
-    sha512: "ad76a61dc7388b3b077f89a77dc211596f3d82b8f44a503552ba0eff655cbfdc3ee99b395d647806a637e87ed731483e71e6cfef9c21f3945ce3b4b8f3bd7c57"
+    bytes: 89141968,
+    sha256: "eb7739852504bf4cd8cdd9f260c67da979728378a756db7f1ff6b0c1d60368c6",
+    sha512: "a37b36e5c846e1694db3c7bd7e9acf23f39b8ba45d348bf039fd218f90f041a6d95268af2e3b6248fc4e759dfd6441df1c44490411c1e13c2b0cedbc0ef526b2"
   }
 };
 
@@ -6167,6 +6236,112 @@ async function runQualityPlan(input) {
   return { evaluation, receipt };
 }
 
+// src/lib/engram-install.ts
+import fs24 from "fs";
+import os5 from "os";
+import path33 from "path";
+import { execFileSync as execFileSync7 } from "child_process";
+import { createHash as createHash2 } from "crypto";
+
+// src/lib/engram-release.json
+var engram_release_default = {
+  assets: {
+    darwin_arm64: {
+      name: "engram_1.20.0_darwin_arm64.tar.gz",
+      sha256: "2363d5012f23e58878f86c3ddcc1f63cfe9dcf3eec7f413e70eaafcbb9d394cc",
+      size: 6949031
+    },
+    darwin_x64: {
+      name: "engram_1.20.0_darwin_amd64.tar.gz",
+      sha256: "3b9015dcfcdd9f823eb7ad0b590b1dbc4c25bb5d81dda3f84e623709815afe80",
+      size: 7367005
+    },
+    linux_arm64: {
+      name: "engram_1.20.0_linux_arm64.tar.gz",
+      sha256: "7eb815910a76ae6cfa9a5d0161d3701e293dcca71f7743cffa62e236e5af59af",
+      size: 6673857
+    },
+    linux_x64: {
+      name: "engram_1.20.0_linux_amd64.tar.gz",
+      sha256: "7dc3003318e303bee269a4772144f3ce01c8ec700bfd524aaec76770acd389ca",
+      size: 7236400
+    },
+    windows_arm64: {
+      name: "engram_1.20.0_windows_arm64.zip",
+      sha256: "eb93c6d7d5a4020ddcf1ff956909f3e90694f6447519433316b10f964f8f37b5",
+      size: 6723366
+    },
+    windows_x64: {
+      name: "engram_1.20.0_windows_amd64.zip",
+      sha256: "c945c47d58367f943642cb8451fa45f208174407839f1dda33a975a05d6e465b",
+      size: 7416778
+    }
+  },
+  version: "1.20.0"
+};
+
+// src/lib/engram-install.ts
+async function installMissingEngram(options = {}) {
+  const platform = options.platform ?? process.platform;
+  const homeDir = options.homeDir ?? os5.homedir();
+  if (!path33.isAbsolute(homeDir)) return { ok: false, reason: "El directorio personal debe ser absoluto." };
+  const binaryName = platform === "win32" ? "engram.exe" : "engram";
+  const bin = path33.join(homeDir, ".local", "bin", binaryName);
+  let staging;
+  try {
+    const existing = fs24.lstatSync(bin, { throwIfNoEntry: false });
+    if (existing) {
+      if (!fs24.statSync(bin).isFile()) throw new Error(`El destino Engram no es un archivo: ${bin}`);
+      fs24.accessSync(bin, platform === "win32" ? fs24.constants.F_OK : fs24.constants.X_OK);
+      return { ok: true, bin };
+    }
+    const key = `${platform === "win32" ? "windows" : platform}_${options.arch ?? process.arch}`;
+    const asset = engram_release_default.assets[key];
+    if (!asset) throw new Error(`Engram no dispone de un binario aprobado para ${key}.`);
+    const response = await (options.fetch ?? globalThis.fetch)(
+      `https://github.com/Gentleman-Programming/engram/releases/download/v${engram_release_default.version}/${asset.name}`,
+      { signal: AbortSignal.timeout(12e4) }
+    );
+    if (!response.ok || !response.body) throw new Error(`Descarga Engram fallida: HTTP ${response.status}.`);
+    const reader = response.body.getReader();
+    const chunks = [];
+    let size = 0;
+    try {
+      while (true) {
+        const chunk = await reader.read();
+        if (chunk.done) break;
+        size += chunk.value.byteLength;
+        if (size > asset.size) throw new Error("El tama\xF1o descargado de Engram supera el aprobado.");
+        chunks.push(chunk.value);
+      }
+    } finally {
+      await reader.cancel();
+    }
+    const archive = Buffer.concat(chunks);
+    if (size !== asset.size || createHash2("sha256").update(archive).digest("hex") !== asset.sha256) {
+      throw new Error("Engram: tama\xF1o o hash SHA-256 no coincide con el artefacto aprobado.");
+    }
+    fs24.mkdirSync(path33.dirname(bin), { recursive: true });
+    staging = fs24.mkdtempSync(path33.join(path33.dirname(bin), ".engram-install-"));
+    const archivePath = path33.join(staging, asset.name);
+    fs24.writeFileSync(archivePath, archive, { flag: "wx", mode: 384 });
+    const binary = execFileSync7(resolveTarBin(), ["-xOf", archivePath, binaryName], {
+      maxBuffer: 64 * 1024 * 1024,
+      timeout: 3e4,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    if (binary.length === 0) throw new Error("El artefacto Engram no contiene un binario v\xE1lido.");
+    const stagedBin = path33.join(staging, binaryName);
+    fs24.writeFileSync(stagedBin, binary, { flag: "wx", mode: 493 });
+    fs24.linkSync(stagedBin, bin);
+    return { ok: true, bin };
+  } catch (error) {
+    return { ok: false, reason: error instanceof Error ? error.message : String(error) };
+  } finally {
+    if (staging) fs24.rmSync(staging, { recursive: true, force: true });
+  }
+}
+
 // src/cli.ts
 var VERSION = readPackageVersion();
 var COMMANDS = ["install", "sync", "models", "update", "doctor", "restore", "uninstall", "quality"];
@@ -6201,6 +6376,7 @@ function parseFlags(args, allowReceipt = false) {
     list: false,
     check: false,
     removeEngram: false,
+    engram: false,
     playwright: false,
     removePlaywright: false,
     devtools: false,
@@ -6263,6 +6439,7 @@ function parseFlags(args, allowReceipt = false) {
     else if (arg === "--list") flags.list = true;
     else if (arg === "--check") flags.check = true;
     else if (arg === "--remove-engram") flags.removeEngram = true;
+    else if (arg === "--engram") flags.engram = true;
     else if (arg === "--playwright") flags.playwright = true;
     else if (arg === "--remove-playwright") flags.removePlaywright = true;
     else if (arg === "--devtools") flags.devtools = true;
@@ -6413,7 +6590,34 @@ async function resolveRuntimes(flags, includeAvailablePi = false) {
   if (p6.isCancel(choice)) return null;
   return choice;
 }
-async function runSelectedPi(operation, targetDir, yes = false) {
+async function resolveHostEngramForInstall(flags) {
+  if (flags.targetDir !== void 0) return { ok: true, bin: null };
+  const existing = resolvePiEngramBin();
+  if (flags.dryRun) return { ok: true, bin: existing };
+  if (existing !== null) return { ok: true, bin: existing };
+  let accepted = flags.engram;
+  if (!accepted && !flags.yes && process.stdin.isTTY === true && process.stdout.isTTY === true) {
+    const answer = await p6.confirm({
+      message: "Engram no est\xE1 instalado. \xBFDescargar e instalar ahora el binario oficial verificado?",
+      initialValue: false
+    });
+    if (!p6.isCancel(answer)) accepted = answer === true;
+  }
+  if (!accepted) {
+    return {
+      ok: false,
+      message: "Engram no est\xE1 instalado. Usa --engram para autorizar su instalaci\xF3n o inst\xE1lalo antes de reintentar."
+    };
+  }
+  try {
+    const result = await installMissingEngram();
+    if (result.ok) return { ok: true, bin: result.bin };
+    return { ok: false, message: `Engram: ${result.reason}` };
+  } catch (error) {
+    return { ok: false, message: `Engram: ${error instanceof Error ? error.message : String(error)}` };
+  }
+}
+async function runSelectedPi(operation, targetDir, yes = false, resolvedEngramBin) {
   if (targetDir === void 0 && operation !== "models") {
     const preferenceErrors = browserPreferenceErrors();
     if (preferenceErrors.length > 0) {
@@ -6430,7 +6634,7 @@ async function runSelectedPi(operation, targetDir, yes = false) {
     console.error("No se pudo verificar la versi\xF3n instalada de Pi sin ejecutarlo; revisa la instalaci\xF3n de Pi.");
     return 1;
   }
-  let engramBin = resolvePiEngramBin(targetDir);
+  let engramBin = resolvedEngramBin === void 0 ? resolvePiEngramBin(targetDir) : resolvedEngramBin;
   if (operation === "install" && engramBin === null) {
     const requirement = await resolvePiEngramRequirement({
       targetDir,
@@ -6491,6 +6695,7 @@ Opciones:
   --dry-run             Muestra el plan sin escribir nada
   --yes, -y             No interactivo
   --playwright          Autoriza Playwright CLI global y sus navegadores (requerido con --yes/sin TTY)
+  --engram              (install) autoriza instalar el binario Engram si falta
   --devtools            (install/sync) activa Chrome DevTools MCP para los runtimes destino (opt-in)
   --no-devtools         (install/sync) desactiva Chrome DevTools MCP (incompatible con --devtools)
   --remove-engram       (uninstall) desregistra Engram de los runtimes;
@@ -6524,6 +6729,11 @@ Flags disponibles: jorgex-stack --help`
     return;
   }
   const { command, flags } = parsed;
+  if (flags.engram && command !== "install") {
+    console.error("--engram solo se admite durante install.");
+    process.exitCode = 1;
+    return;
+  }
   if (command !== "quality" && flags.targetDir !== void 0 && flags.agents.length !== 1) {
     console.error("--target-dir requiere exactamente un runtime en --agents.");
     process.exitCode = 1;
@@ -6531,7 +6741,7 @@ Flags disponibles: jorgex-stack --help`
   }
   switch (command) {
     case "quality": {
-      if (flags.targetDir !== void 0 || flags.agents.length > 0 || flags.dryRun || flags.yes || flags.mode !== void 0 || flags.subagentConcurrency !== void 0 || flags.list || flags.check || flags.removeEngram || flags.playwright || flags.removePlaywright || flags.devtools || flags.noDevtools) {
+      if (flags.targetDir !== void 0 || flags.agents.length > 0 || flags.dryRun || flags.yes || flags.mode !== void 0 || flags.subagentConcurrency !== void 0 || flags.list || flags.check || flags.removeEngram || flags.engram || flags.playwright || flags.removePlaywright || flags.devtools || flags.noDevtools) {
         console.error("quality solo admite <plan.json> y, opcionalmente, --receipt <path>.");
         process.exitCode = 1;
         return;
@@ -6547,7 +6757,7 @@ Flags disponibles: jorgex-stack --help`
         return;
       }
       try {
-        const plan = JSON.parse(fs24.readFileSync(flags.positional[0], "utf8"));
+        const plan = JSON.parse(fs25.readFileSync(flags.positional[0], "utf8"));
         const result = await runQualityPlan(plan);
         const serialized = serializeQualityReceipt(result.receipt);
         if (flags.receipt === void 0) process.stdout.write(`${serialized}
@@ -6572,33 +6782,55 @@ Flags disponibles: jorgex-stack --help`
       }
       const fileRuntimes = runtimes.filter(isFileManagedRuntime);
       let exitCode = 0;
-      if (fileRuntimes.length > 0) {
-        const mode = await resolveInstallMode(flags);
+      let completed = false;
+      p6.intro(`jorgex-stack ${command}${flags.dryRun ? " (dry-run)" : ""}`);
+      try {
+        if (flags.targetDir === void 0) {
+          const errors = browserPreferenceErrors();
+          if (errors.length > 0) {
+            for (const error of errors) p6.log.error(error);
+            exitCode = 1;
+            return;
+          }
+        }
+        const mode = fileRuntimes.length > 0 ? await resolveInstallMode(flags) : void 0;
         if (mode === null) return;
         const devtoolsMcpSelection = await resolveDevtoolsMcpSelection(command, flags, fileRuntimes);
-        if (devtoolsMcpSelection === null) return;
-        const playwrightToolConsent = await resolvePlaywrightToolConsent(command, flags);
-        if (playwrightToolConsent === null) return;
-        const hasOpenCodeModels = await ensureOpenCodeModelsForInstall(command, flags, fileRuntimes);
-        if (!hasOpenCodeModels) {
-          process.exitCode = 1;
+        if (devtoolsMcpSelection === null) {
+          exitCode = process.exitCode === 1 ? 1 : 0;
           return;
         }
-        exitCode = await runInstall({
-          runtimes: fileRuntimes,
-          targetDir: flags.targetDir,
-          dryRun: flags.dryRun,
-          yes: flags.yes,
-          mode,
-          playwrightToolConsent,
-          devtoolsMcpSelection
-        });
-      }
-      let piCanRun = true;
-      if (command === "install" && fileRuntimes.length === 0 && runtimes.includes("pi")) {
         const playwrightToolConsent = await resolvePlaywrightToolConsent(command, flags);
         if (playwrightToolConsent === null) return;
-        if (resolvePlaywrightToolPlan(playwrightToolConsent).actions.length > 0) {
+        if (!await ensureOpenCodeModelsForInstall(command, flags, fileRuntimes)) {
+          exitCode = 1;
+          return;
+        }
+        let engramBin;
+        if (command === "install") {
+          const engram = await resolveHostEngramForInstall(flags);
+          if (!engram.ok) {
+            p6.log.error(engram.message);
+            exitCode = 1;
+            return;
+          }
+          engramBin = engram.bin;
+        }
+        if (fileRuntimes.length > 0) {
+          exitCode = await runInstall({
+            runtimes: fileRuntimes,
+            targetDir: flags.targetDir,
+            dryRun: flags.dryRun,
+            yes: flags.yes,
+            mode,
+            playwrightToolConsent,
+            devtoolsMcpSelection,
+            engramBin,
+            showSummary: false
+          });
+        }
+        let piCanRun = true;
+        if (command === "install" && fileRuntimes.length === 0 && runtimes.includes("pi") && resolvePlaywrightToolPlan(playwrightToolConsent).actions.length > 0) {
           if (flags.dryRun) {
             p6.log.info("Playwright CLI: instalaci\xF3n global y navegador previstos (dry-run; no se ejecutan).");
           } else {
@@ -6607,17 +6839,31 @@ Flags disponibles: jorgex-stack --help`
               targetDir: flags.targetDir,
               dryRun: false,
               yes: flags.yes,
-              playwrightToolConsent
+              playwrightToolConsent,
+              engramBin,
+              showSummary: false
             });
             piCanRun = exitCode === 0;
           }
         }
+        if (runtimes.includes("pi") && piCanRun) {
+          if (flags.dryRun) p6.log.info(`Pi: ${command} previsto; dry-run no ejecuta subprocess ni escribe receipt.`);
+          else exitCode = Math.max(exitCode, await runSelectedPi(
+            command,
+            flags.targetDir,
+            flags.yes,
+            flags.targetDir === void 0 ? engramBin : void 0
+          ));
+        }
+        completed = true;
+      } catch (error) {
+        p6.log.error(error instanceof Error ? error.message : String(error));
+        exitCode = 1;
+      } finally {
+        if (process.exitCode === 1) exitCode = 1;
+        process.exitCode = exitCode;
+        p6.outro(exitCode !== 0 ? `${command} completado con errores (revisa arriba).` : !completed ? `${command} cancelado.` : flags.dryRun ? "Dry-run: no se ha escrito nada." : "Hecho.");
       }
-      if (runtimes.includes("pi") && piCanRun) {
-        if (flags.dryRun) p6.log.info(`Pi: ${command} previsto; dry-run no ejecuta subprocess ni escribe receipt.`);
-        else exitCode = Math.max(exitCode, await runSelectedPi(command, flags.targetDir, flags.yes));
-      }
-      process.exitCode = exitCode;
       return;
     }
     case "uninstall": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jorgex-stack",
-  "version": "1.9.27",
+  "version": "1.9.29",
   "description": "Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI, OpenCode y Pi",
   "type": "module",
   "license": "MIT",