jorgex-stack 1.9.28 → 1.9.30

package/README.md

@@ -56,7 +56,7 @@ pnpm dlx jorgex-stack uninstall       # remove managed files; keep Engram data i
 
 For development from a clone, run the same commands through `pnpm cli <command>` (see [Development](#development)).
 
-Every command supports `--dry-run`, `--yes`, and `--target-dir <dir>` for testing without touching the real config. Writes create automatic backups and verify idempotency; merges into user config are surgical (marked markdown sections, JSON/TOML upserts), so user-owned content is never touched.
+Every command supports `--dry-run`, `--yes`, and `--target-dir <dir>` for testing without touching the real config. Writes create automatic backups and verify idempotency; merges into user config are surgical (marked markdown sections, JSON/TOML upserts), so user-owned content is never touched. `--yes` does not authorize downloading missing Engram; use `--engram` for that explicit consent. The interactive install asks before installing it, while dry-run and target-dir never download it.
 
 Runtime defaults are documented in [docs/references/permissions.md](docs/references/permissions.md) for permissions and [docs/references/models.md](docs/references/models.md) for the Sol primary default, field-level ownership and independent subagent routing. The quality policy and `jorgex.quality.receipt` contract are documented in [docs/references/quality-receipt.md](docs/references/quality-receipt.md). OpenCode remains provider-agnostic for subagents; its primary defaults to the OpenAI OAuth model `openai/gpt-5.6-sol` unless the user replaces it.
 
@@ -120,7 +120,7 @@ pnpm dlx jorgex-stack@1.9.7 sync --agents pi
 pnpm dlx jorgex-stack@1.9.7 uninstall --agents pi
 ```
 
-Stack downloads the frozen registry tarball, verifies its exact size plus SHA-256/SHA-512, backs up Pi's `settings.json`, and only then asks Pi to install that local file. The historical `0.8.0` tarball was `89128340` bytes; the exact adopted artifact and integrity values are authoritative in `src/lib/pi-runtime-pin.json`, while the lifecycle remains authoritative in `src/lib/pi-runtime.ts`. Pi's own package-manager invocation is the narrow runtime exception to the repository's pnpm-only rule; the Stack lifecycle never launches npm directly. After the package is healthy, Stack projects the shared resources into Pi: marked `jorgex:system-prompt` and `jorgex:engram-protocol` sections in `~/.pi/agent/AGENTS.md`, canonical skills under `~/.agents/skills`, and `~/.pi/agent/prompts/lean-audit.md`. When the managed Playwright preference is active, the projection also adds or removes the marked `jorgex:browser` section dynamically. The Pi-only `install --agents pi --playwright` flow installs and persists that Playwright capability just like the other harnesses. Chrome DevTools MCP and Context7 remain outside the Pi scope. The published `1.9.7` entry `{ "source": "npm:jorgex-pi@0.8.4", "skills": [], "prompts": [] }` and the `0.8.5` snapshot reference are historical; they do not describe the adopted pin. Filters are applied only after this projection exists, so the package does not duplicate shared resources. Package ownership is recorded separately in `~/.jorgex-stack/pi-receipt.json`; projection ownership is recorded in `~/.jorgex-stack/pi-projection-receipt.json`. Both receipts are scope-bound and fail closed for manual, duplicate, divergent, partial, corrupt, copied-to-another-scope, or unknown-history state.
+Stack downloads the frozen registry tarball, verifies its exact size plus SHA-256/SHA-512, backs up Pi's `settings.json`, and only then asks Pi to install that local file. The historical `0.8.0` tarball was `89128340` bytes; the exact adopted artifact and integrity values are authoritative in `src/lib/pi-runtime-pin.json`, while the lifecycle remains authoritative in `src/lib/pi-runtime.ts`. Pi's own package-manager invocation is the narrow runtime exception to the repository's pnpm-only rule; the Stack lifecycle never launches npm directly. After the package is healthy, Stack projects the shared resources into Pi: marked `jorgex:system-prompt` and `jorgex:engram-protocol` sections in `~/.pi/agent/AGENTS.md`, canonical skills under `~/.agents/skills`, and `~/.pi/agent/prompts/lean-audit.md`. When the managed Playwright preference is active, the projection also adds or removes the marked `jorgex:browser` section dynamically. The Pi-only `install --agents pi --playwright` flow installs and persists that Playwright capability just like the other harnesses. The adopted Pi `0.8.13` candidate also supports the optional Chrome DevTools handoff; Stack persists the selected handoff as part of the Pi projection and records its SHA-256 in the optional `devtools.sha256` field of `~/.jorgex-stack/pi-projection-receipt.json` after a successful operation. Context7 remains outside the Pi scope. The published `1.9.7` entry `{ "source": "npm:jorgex-pi@0.8.4", "skills": [], "prompts": [] }` and the `0.8.5` snapshot reference are historical; they do not describe the adopted pin. Filters are applied only after this projection exists, so the package does not duplicate shared resources. Package ownership is recorded separately in `~/.jorgex-stack/pi-receipt.json`; projection ownership is recorded in `~/.jorgex-stack/pi-projection-receipt.json`. Package receipts reject manual, duplicate, divergent, partial, corrupt, copied-to-another-scope, or unknown-history state. Projection cleanup requires an exact scope-bound ownership receipt; DevTools conflicts preserve the handoff for review.
 
 Historically, the published Pi 0.8.0 direct-package snapshot added `work-audit`: the snapshot grew from **17 to 18 skill trees** (96 to 97 files), and the active runtime allowlist grew from **16 to 17 skills**. The historical Pi 0.8.5 snapshot reference records 18 skill trees and 98 files; it does not describe the adopted pin. Reference F2-A is included while the private F1 skills remain preserved. `playwright-cli` remains in the snapshot but inactive because browser automation is a separate opt-in integration.
 
@@ -132,7 +132,7 @@ Install, sync and uninstall back up every managed file before changing it and ar
 
 The package owns Pi's native primary-model projection: `openai-codex/gpt-5.6-sol`, with a local `contextWindow` request of 872K. It merges only missing compatible fields, records field ownership in `PI_CODING_AGENT_DIR/jorgex-pi/sol-lifecycle.v1.json`, and cleanup removes only still-owned canonical values. Stack does not duplicate that package-owned settings/models logic. The 872K value is local OAuth metadata until a real long-context smoke test confirms backend acceptance; it is not the API context limit.
 
-Engram remains mandatory and user-owned. An existing binary is preserved. Interactive install may offer the native `brew`/`go`/release channel with explicit confirmation; `--yes` and non-TTY installs fail with a remedy when Engram is absent. The database and memories are never updated or deleted, and uninstall never deletes the Engram binary. Under `--target-dir`, Stack accepts only `<target>/bin/engram`, isolates Pi/Home/XDG/AppData/temp/npm-cache paths inside the target, and never consults the host Engram or Pi configuration.
+Engram remains mandatory and user-owned. An existing binary is preserved. `install` resolves or installs the verified official v1.20.0 release before configuring any selected runtime; use `--engram` to authorize that download in non-interactive flows. The release installer writes only `~/.local/bin/engram` (or the platform equivalent), checks the pinned size and SHA-256, and does not use Brew or Go. `sync`, dry-run and `--target-dir` never download it. The database and memories are never updated or deleted, and uninstall never deletes the Engram binary. Under `--target-dir`, Stack accepts only `<target>/bin/engram`, isolates Pi/Home/XDG/AppData/temp/npm-cache paths inside the target, and never consults the host Engram or Pi configuration.
 
 Históricamente, Stack `1.9.7` reconocía el receipt exacto de Pi `npm:jorgex-pi@0.8.4`. Usa versiones exactas, nunca `latest`, y no edites receipts o hashes ni borres `HOME`, Engram o la proyección de otro runtime para forzar confianza. El pin y los comandos actuales de transición y rollback están en [docs/references/pi-runtime.md](docs/references/pi-runtime.md).
 
@@ -159,6 +159,8 @@ pnpm dlx jorgex-stack install --yes --playwright
 # Enable Chrome DevTools MCP explicitly per runtime.
 pnpm dlx jorgex-stack install --devtools
 pnpm dlx jorgex-stack install --no-devtools
+pnpm dlx jorgex-stack install --agents pi --devtools
+pnpm dlx jorgex-stack sync --agents pi --no-devtools
 ```
 
 Under the hood, `--playwright` runs two `pnpm` argv-only plans back to back: `pnpm add --global @playwright/cli@0.1.18` (the package) and then `pnpm dlx @playwright/cli@0.1.18 install-browser` (the browser binary cache). Removal is `pnpm remove --global @playwright/cli` (no version suffix). If installation fails, the error identifies the failed phase — global package, browser download, or preference persistence — and recommends `jorgex-stack install --playwright`; the preference is not marked enabled unless the complete plan succeeds.

package/dist/cli.d.ts

@@ -21,6 +21,7 @@ interface Flags {
     list: boolean;
     check: boolean;
     removeEngram: boolean;
+    engram: boolean;
     playwright: boolean;
     removePlaywright: boolean;
     devtools: boolean;

package/dist/cli.js

@@ -15,7 +15,7 @@ import {
 
 // src/cli.ts
 import * as p6 from "@clack/prompts";
-import fs24 from "fs";
+import fs25 from "fs";
 import { pathToFileURL as pathToFileURL2 } from "url";
 
 // src/install.ts
@@ -2154,7 +2154,7 @@ var PLAYWRIGHT_CLI = {
   version: "0.1.18",
   browserInstallAction: "install-browser"
 };
-var PNPM_GLOBAL_BIN_REMEDY = "Ejecuta 'pnpm setup', abre una terminal nueva y reintenta. El stack no modifica PNPM_HOME ni PATH.";
+var PNPM_GLOBAL_BIN_REMEDY = "Ejecuta 'pnpm setup', abre una terminal nueva y reintenta. Sin consentimiento, el stack no modifica la configuraci\xF3n de la shell.";
 function resolvePnpmFailureRemedy(reason) {
   switch (reason) {
     case "pnpm-unavailable":
@@ -2197,6 +2197,34 @@ function resolvePnpmBin() {
   const pnpmCmd = lookPath("pnpm.cmd");
   return pnpmCmd !== null && !pnpmCmd.toLowerCase().endsWith(".ps1") ? pnpmCmd : null;
 }
+function resolvePnpmHome(env = process.env, platform = process.platform, homeDir = os.homedir()) {
+  const paths = platform === "win32" ? path18.win32 : path18.posix;
+  if (env.PNPM_HOME) return env.PNPM_HOME;
+  if (env.XDG_DATA_HOME) return paths.join(env.XDG_DATA_HOME, "pnpm");
+  if (platform === "darwin") return paths.join(homeDir, "Library", "pnpm");
+  if (platform === "win32") return env.LOCALAPPDATA ? paths.join(env.LOCALAPPDATA, "pnpm") : paths.join(homeDir, ".pnpm");
+  return paths.join(homeDir, ".local", "share", "pnpm");
+}
+function setupPnpmGlobal(pnpmBin, env = process.env, platform = process.platform, homeDir = os.homedir()) {
+  const pnpmHome = resolvePnpmHome(env, platform, homeDir);
+  const paths = platform === "win32" ? path18.win32 : path18.posix;
+  if (!paths.isAbsolute(pnpmHome)) return { ok: false, reason: "PNPM_HOME debe ser una ruta absoluta; corrige la configuraci\xF3n antes de reintentar." };
+  const pathEntries = [pnpmHome, paths.join(pnpmHome, "bin")];
+  if (env.PATH !== void 0) pathEntries.push(env.PATH);
+  const childEnv = {
+    ...env,
+    PNPM_HOME: pnpmHome,
+    PATH: pathEntries.join(platform === "win32" ? ";" : ":")
+  };
+  const invocation = planDetectedBinCommand(pnpmBin, ["setup"]);
+  if (invocation === null) return { ok: false, reason: "No se pudo preparar la invocaci\xF3n de pnpm setup." };
+  try {
+    execFileSync2(invocation.command, invocation.args, { stdio: "inherit", env: childEnv });
+    return { ok: true, env: childEnv };
+  } catch (error) {
+    return { ok: false, reason: error instanceof Error ? error.message : String(error) };
+  }
+}
 function isPlaywrightBrowserReady(env = process.env, platform = process.platform, homeDir = os.homedir()) {
   const configuredPath = env.PLAYWRIGHT_BROWSERS_PATH;
   const cacheDir = configuredPath ?? (platform === "win32" ? path18.join(env.LOCALAPPDATA ?? path18.join(homeDir, "AppData", "Local"), "ms-playwright") : platform === "darwin" ? path18.join(homeDir, "Library", "Caches", "ms-playwright") : path18.join(env.XDG_CACHE_HOME ?? path18.join(homeDir, ".cache"), "ms-playwright"));
@@ -2223,13 +2251,16 @@ function planPlaywrightCliCommand(action, pnpmBin) {
       return { command: pnpmBin, args: ["dlx", pinnedPackage, PLAYWRIGHT_CLI.browserInstallAction] };
   }
 }
-function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin()) {
+function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin(), env) {
   if (pnpmBin === null) return { ok: false, reason: "pnpm-unavailable" };
   if (action !== "install-browser") {
     const preflight = planDetectedBinCommand(pnpmBin, ["bin", "--global"]);
     if (preflight === null) return { ok: false, reason: "pnpm-command" };
     try {
-      execFileSync2(preflight.command, preflight.args, { stdio: "inherit" });
+      execFileSync2(preflight.command, preflight.args, {
+        stdio: "inherit",
+        ...env === void 0 ? {} : { env }
+      });
     } catch (error) {
       return { ok: false, reason: hasNonzeroProcessStatus(error) ? "pnpm-global-bin" : "pnpm-command" };
     }
@@ -2238,7 +2269,10 @@ function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin()) {
   const invocation = planDetectedBinCommand(command.command, command.args);
   if (invocation === null) return { ok: false, reason: "pnpm-command" };
   try {
-    execFileSync2(invocation.command, invocation.args, { stdio: "inherit" });
+    execFileSync2(invocation.command, invocation.args, {
+      stdio: "inherit",
+      ...env === void 0 ? {} : { env }
+    });
     return { ok: true };
   } catch {
     return { ok: false, reason: "action-failed" };
@@ -2307,7 +2341,7 @@ function parseDevtoolsMcpState(raw) {
     if (!isRecord2(value) || value.version !== DEVTOOLS_MCP_PREFERENCE_VERSION || !isRecord2(value.enabled) || !isRecord2(value.owned)) return null;
     const enabled = {};
     for (const [runtime, selected] of Object.entries(value.enabled)) {
-      if (!isRuntimeId(runtime) || typeof selected !== "boolean") return null;
+      if (!isRuntimeId(runtime) && runtime !== "pi" || typeof selected !== "boolean") return null;
       enabled[runtime] = selected;
     }
     const owned = {};
@@ -2439,8 +2473,8 @@ var ADAPTERS = {
   "claude-code": claudeCodeAdapter,
   codex: codexAdapter
 };
-function executePlaywrightToolAction2(action) {
-  return executePlaywrightToolAction(action, resolvePnpmBin());
+function executePlaywrightToolAction2(action, pnpmBin = resolvePnpmBin(), env) {
+  return executePlaywrightToolAction(action, pnpmBin, env);
 }
 function resolvePlaywrightToolPlan(consent) {
   if (consent.command !== "install" || consent.targetDir) return { actions: [] };
@@ -2560,15 +2594,16 @@ function collectAllCurrentTargets(mode = DEFAULT_INSTALL_MODE_PREFERENCE) {
   return { targets, complete, warnings };
 }
 async function runInstall(opts) {
-  p.intro(`jorgex-stack ${opts.dryRun ? "install (dry-run)" : "install"}`);
+  const showSummary = opts.showSummary !== false;
+  if (showSummary) p.intro(`jorgex-stack ${opts.dryRun ? "install (dry-run)" : "install"}`);
   const stackDir = stackRoot();
-  const engramBin = detectEngram();
+  const engramBin = opts.engramBin === void 0 ? detectEngram() : opts.engramBin;
   const modePreference = opts.mode === void 0 ? opts.targetDir === void 0 ? loadInstallModePreference() : DEFAULT_INSTALL_MODE_PREFERENCE : normalizeInstallModePreference(opts.mode);
   const useManifest = opts.targetDir === void 0;
   const preferenceErrors = useManifest ? [...browserPreferenceErrors(), primaryModelOwnershipError()].filter((error) => error !== null) : [];
   if (preferenceErrors.length > 0) {
     for (const error of preferenceErrors) p.log.error(error);
-    p.outro("Install cancelado: corrige el estado de configuraci\xF3n indicado arriba antes de reintentar.");
+    if (showSummary) p.outro("Install cancelado: corrige el estado de configuraci\xF3n indicado arriba antes de reintentar.");
     return 1;
   }
   const toolPlan = opts.playwrightToolConsent === void 0 ? null : resolvePlaywrightToolPlan({
@@ -2708,9 +2743,41 @@ async function runInstall(opts) {
     if (opts.dryRun) {
       p.log.info("Playwright CLI: instalaci\xF3n global y navegador previstos (dry-run; no se ejecutan).");
     } else if (exitCode === 0) {
-      const result = await runPlaywrightToolPlan(toolPlan, opts.playwrightToolDeps ?? {
-        run: async (action) => executePlaywrightToolAction2(action),
-        persistEnabled: (enabled) => savePlaywrightCliPreference(playwrightCliPreferenceFile(), enabled)
+      const baseDeps = opts.playwrightToolDeps ?? {
+        run: async (action, env) => {
+          const pnpmBin = resolvePnpmBin();
+          return executePlaywrightToolAction2(action, pnpmBin, env);
+        },
+        persistEnabled: (enabled) => savePlaywrightCliPreference(playwrightCliPreferenceFile(), enabled),
+        setupPnpm: (pnpmBin) => setupPnpmGlobal(pnpmBin)
+      };
+      let setupAttempted = false;
+      let preparedEnv;
+      const result = await runPlaywrightToolPlan(toolPlan, {
+        ...baseDeps,
+        run: async (action) => {
+          const first = await baseDeps.run(action, preparedEnv);
+          if (first === true || first === false || first.ok || first.reason !== "pnpm-global-bin") return first;
+          if (setupAttempted || opts.dryRun || opts.targetDir !== void 0) return first;
+          const consent = opts.playwrightToolConsent;
+          const canAskForSetup = consent?.interactive === true && !opts.yes;
+          if (!canAskForSetup) return first;
+          setupAttempted = true;
+          const accepted = await p.confirm({
+            message: "pnpm no tiene directorio global. \xBFEjecutar 'pnpm setup' ahora? Esto modificar\xE1 la configuraci\xF3n de tu shell.",
+            initialValue: false
+          });
+          if (p.isCancel(accepted) || !accepted) return first;
+          const pnpmBin = resolvePnpmBin();
+          if (pnpmBin === null) return first;
+          const setup = baseDeps.setupPnpm?.(pnpmBin) ?? setupPnpmGlobal(pnpmBin);
+          if (!setup.ok) {
+            p.log.error(`pnpm setup fall\xF3: ${setup.reason}`);
+            return first;
+          }
+          preparedEnv = setup.env;
+          return baseDeps.run(action, preparedEnv);
+        }
       });
       if (!result.ok) {
         const pnpmRemedy = result.reason === void 0 ? null : resolvePnpmFailureRemedy(result.reason);
@@ -2763,7 +2830,9 @@ async function runInstall(opts) {
   if (useManifest && !opts.dryRun && exitCode === 0 && successfulRuns > 0) {
     saveInstallModePreference(installModePreferenceFile(), modePreference);
   }
-  p.outro(opts.dryRun ? exitCode === 0 ? "Dry-run: no se ha escrito nada." : "Dry-run completado con errores (revisa arriba)." : exitCode === 0 ? "Hecho." : "Install completado con errores (revisa arriba).");
+  if (showSummary) {
+    p.outro(opts.dryRun ? exitCode === 0 ? "Dry-run: no se ha escrito nada." : "Dry-run completado con errores (revisa arriba)." : exitCode === 0 ? "Hecho." : "Install completado con errores (revisa arriba).");
+  }
   return exitCode;
 }
 
@@ -2775,6 +2844,7 @@ import * as p2 from "@clack/prompts";
 // src/lib/pi-projection-lifecycle.ts
 import fs16 from "fs";
 import path23 from "path";
+import { createHash } from "crypto";
 
 // src/adapters/pi.ts
 import path21 from "path";
@@ -3238,14 +3308,33 @@ function projectionPlan(input, scope) {
     engramBin: input.engramBin,
     models: DEFAULT_MODEL_MAP.codex,
     warnings: [],
-    playwrightCliEnabled: input.playwrightCliEnabled
+    playwrightCliEnabled: input.playwrightCliEnabled,
+    enabledMcpServers: input.devtoolsMcpEnabled ? /* @__PURE__ */ new Set([DEVTOOLS_MCP_SERVER]) : void 0
   };
   const adapter = projectedPiAdapter(scope);
-  return [
+  const actions = [
     ...planSystemPrompt(adapter, ctx),
     ...planSkills(adapter, ctx),
     ...planCommands(adapter, ctx)
   ];
+  if (input.devtoolsMcpEnabled && input.pnpmBin) {
+    const server = loadCanonicalMcp(input.stackDir).servers[DEVTOOLS_MCP_SERVER];
+    if (server?.transport !== "stdio" || !Array.isArray(server.args)) throw new Error("Falta la configuraci\xF3n can\xF3nica de DevTools.");
+    actions.push({ kind: "write", target: devtoolsPath(scope), content: `${JSON.stringify({
+      schemaVersion: 1,
+      enabled: true,
+      command: input.pnpmBin,
+      args: server.args
+    }, null, 2)}
+` });
+  }
+  return actions;
+}
+function devtoolsPath(scope) {
+  return path23.resolve(scope.codingAgentDir, "jorgex-pi", "devtools.v1.json");
+}
+function contentHash(content) {
+  return createHash("sha256").update(content).digest("hex");
 }
 function canonicalActionContent(action) {
   return action.kind === "write" ? action.content : fs16.readFileSync(action.source, "utf8");
@@ -3253,8 +3342,15 @@ function canonicalActionContent(action) {
 function hasActionDrift(action, deps) {
   return deps.readText(action.target) !== canonicalActionContent(action);
 }
-function applyActions(actions, deps) {
+function applyActions(actions, deps, handoff) {
   for (const action of actions) {
+    if (handoff && path23.resolve(action.target) === handoff.file) {
+      try {
+        if (deps.readText(handoff.file) !== handoff.previous) return devtoolsConflict(handoff.file);
+      } catch {
+        return devtoolsConflict(handoff.file);
+      }
+    }
     if (action.kind === "write") deps.writeText(action.target, action.content);
     else deps.copyFile(action.source, action.target);
   }
@@ -3271,6 +3367,7 @@ function receiptFor(plan, scope) {
   const owned = [...new Set(
     plan.map((action) => path23.resolve(action.target)).filter((target) => target !== systemPrompt)
   )];
+  const handoff = plan.find((action) => path23.resolve(action.target) === devtoolsPath(scope));
   return {
     schemaVersion: 1,
     scope: {
@@ -3279,7 +3376,8 @@ function receiptFor(plan, scope) {
       codingAgentDir: scope.codingAgentDir,
       receiptFile: scope.receiptFile
     },
-    owned
+    owned,
+    ...handoff ? { devtools: { sha256: contentHash(canonicalActionContent(handoff)) } } : {}
   };
 }
 function receiptContent(receipt) {
@@ -3298,16 +3396,25 @@ function parseReceipt2(raw, expected) {
     const version = Reflect.get(receipt, "schemaVersion");
     const receivedScope = Reflect.get(receipt, "scope");
     const owned = Reflect.get(receipt, "owned");
-    if (version !== expected.schemaVersion || !hasExactKeys(receipt, ["schemaVersion", "scope", "owned"]) || receivedScope === null || typeof receivedScope !== "object" || Array.isArray(receivedScope) || !hasExactKeys(receivedScope, ["kind", "home", "codingAgentDir", "receiptFile"])) {
-      return null;
-    }
-    if (Reflect.get(receivedScope, "kind") !== expected.scope.kind || Reflect.get(receivedScope, "home") !== expected.scope.home || Reflect.get(receivedScope, "codingAgentDir") !== expected.scope.codingAgentDir || Reflect.get(receivedScope, "receiptFile") !== expected.scope.receiptFile || !Array.isArray(owned) || owned.length !== expected.owned.length) {
+    const devtools = Reflect.get(receipt, "devtools");
+    const hasDevtools = Object.hasOwn(receipt, "devtools");
+    if (version !== expected.schemaVersion || !hasExactKeys(receipt, ["schemaVersion", "scope", "owned", ...hasDevtools ? ["devtools"] : []]) || receivedScope === null || typeof receivedScope !== "object" || Array.isArray(receivedScope) || !hasExactKeys(receivedScope, ["kind", "home", "codingAgentDir", "receiptFile"])) {
       return null;
     }
-    if (!owned.every((file, index) => typeof file === "string" && file === expected.owned[index])) {
+    if (Reflect.get(receivedScope, "kind") !== expected.scope.kind || Reflect.get(receivedScope, "home") !== expected.scope.home || Reflect.get(receivedScope, "codingAgentDir") !== expected.scope.codingAgentDir || Reflect.get(receivedScope, "receiptFile") !== expected.scope.receiptFile || !Array.isArray(owned)) {
       return null;
     }
-    return expected;
+    if (hasDevtools && (devtools === null || typeof devtools !== "object" || Array.isArray(devtools) || !hasExactKeys(devtools, ["sha256"]) || typeof Reflect.get(devtools, "sha256") !== "string" || !/^[a-f0-9]{64}$/.test(Reflect.get(devtools, "sha256")))) return null;
+    const handoff = devtoolsPath(expected.scope);
+    const expectedOwned = expected.owned.filter((file) => file !== handoff);
+    if (hasDevtools) expectedOwned.push(handoff);
+    if (owned.length !== expectedOwned.length || !owned.every((file, index) => typeof file === "string" && file === expectedOwned[index])) return null;
+    return {
+      schemaVersion: 1,
+      scope: expected.scope,
+      owned: expectedOwned,
+      ...hasDevtools ? { devtools: { sha256: Reflect.get(devtools, "sha256") } } : {}
+    };
   } catch {
     return null;
   }
@@ -3433,6 +3540,35 @@ function readProjectionReceipt(receiptFile, deps) {
     return { kind: "unreadable" };
   }
 }
+function devtoolsConflict(file) {
+  return blocked2(
+    "projection-devtools-conflict",
+    [file],
+    "El handoff de DevTools es ajeno o fue modificado. Cons\xE9rvalo y revisa su propiedad antes de reintentar; Stack no lo sobrescribe ni elimina."
+  );
+}
+function inspectDevtools(input, scope, expected, deps) {
+  const file = devtoolsPath(scope);
+  const read = readProjectionReceipt(scope.receiptFile, deps);
+  if (read.kind === "unreadable") return receiptUnreadable(scope.receiptFile);
+  const previous = read.kind === "present" ? parseReceipt2(read.content, expected) : null;
+  let content;
+  try {
+    content = deps.readText(file);
+  } catch {
+    return devtoolsConflict(file);
+  }
+  let recordedDevtools = false;
+  if (read.kind === "present") {
+    try {
+      recordedDevtools = Object.hasOwn(JSON.parse(read.content), "devtools");
+    } catch {
+    }
+    if (!previous && (input.devtoolsMcpEnabled || content !== null || recordedDevtools)) return receiptInvalid(scope.receiptFile);
+  }
+  if (content !== null && (!previous?.devtools || contentHash(content) !== previous.devtools.sha256)) return devtoolsConflict(file);
+  return { kind: "checked", previous, content };
+}
 function preparePiProjectionUninstall(input, deps) {
   if (input.operation !== "uninstall") {
     return cleanupFailure([]);
@@ -3451,11 +3587,13 @@ function preparePiProjectionUninstall(input, deps) {
   const receiptRead = readProjectionReceipt(scope.receiptFile, deps);
   if (receiptRead.kind === "unreadable") return receiptUnreadable(scope.receiptFile);
   let ownedToRemove = [];
+  let ownedReceipt = null;
   let receiptFile = null;
   let backupTargets = promptUpdate === null ? [] : [promptUpdate.file];
   if (receiptRead.kind === "present") {
     const receipt = parseReceipt2(receiptRead.content, expectedReceipt2);
     if (receipt === null) return receiptInvalid(scope.receiptFile);
+    ownedReceipt = receipt;
     let retained;
     try {
       retained = manifestOwned(deps.readManifest());
@@ -3466,13 +3604,22 @@ function preparePiProjectionUninstall(input, deps) {
     receiptFile = path23.resolve(scope.receiptFile);
     backupTargets = [...backupTargets, ...receipt.owned, receiptFile];
   }
+  const handoff = devtoolsPath(scope);
+  let handoffContent;
+  try {
+    handoffContent = deps.readText(handoff);
+  } catch {
+    return devtoolsConflict(handoff);
+  }
+  if (handoffContent !== null && (!ownedReceipt?.devtools || contentHash(handoffContent) !== ownedReceipt.devtools.sha256)) return devtoolsConflict(handoff);
   const backup = backupExisting(backupTargets, deps);
   if (backup.kind === "backup-failed") return backupFailure(backup.paths);
   const token = {};
   preparedPiProjectionUninstalls.set(token, {
     prompt: promptUpdate,
     ownedToRemove,
-    receiptFile
+    receiptFile,
+    ...ownedReceipt?.devtools ? { devtools: { file: handoff, sha256: ownedReceipt.devtools.sha256 } } : {}
   });
   return { kind: "prepared", plan: token };
 }
@@ -3484,6 +3631,15 @@ function completePiProjectionUninstall(plan, deps) {
   if (prepared === void 0) {
     return cleanupFailure([]);
   }
+  if (prepared.devtools) {
+    let current;
+    try {
+      current = deps.readText(prepared.devtools.file);
+    } catch {
+      return devtoolsConflict(prepared.devtools.file);
+    }
+    if (current !== null && contentHash(current) !== prepared.devtools.sha256) return devtoolsConflict(prepared.devtools.file);
+  }
   if (prepared.prompt !== null) {
     try {
       deps.writeText(prepared.prompt.file, prepared.prompt.content);
@@ -3493,6 +3649,10 @@ function completePiProjectionUninstall(plan, deps) {
   }
   for (const owned of prepared.ownedToRemove) {
     try {
+      if (prepared.devtools?.file === owned) {
+        const current = deps.readText(owned);
+        if (current !== null && contentHash(current) !== prepared.devtools.sha256) return devtoolsConflict(owned);
+      }
       deps.removeFile(owned);
     } catch {
       return cleanupFailure([owned]);
@@ -3513,13 +3673,23 @@ function runPiProjectionLifecycle(input, deps) {
     const prepared = preparePiProjectionUninstall(input, deps);
     return prepared.kind === "blocked" ? prepared : completePiProjectionUninstall(prepared.plan, deps);
   }
+  if (input.devtoolsMcpEnabled && (!input.pnpmBin || !path23.isAbsolute(input.pnpmBin))) {
+    return blocked2("projection-devtools-command", [devtoolsPath(scope)], "DevTools requiere un ejecutable pnpm absoluto disponible en PATH.");
+  }
   const plan = projectionPlan(input, scope);
   assertPlanContained(plan, scope);
   const receipt = receiptFor(plan, scope);
+  const devtools = inspectDevtools(input, scope, receipt, deps);
+  if (devtools.kind === "blocked") return input.operation === "doctor" ? { kind: "drift", paths: devtools.paths } : devtools;
+  const removeHandoff = !input.devtoolsMcpEnabled && devtools.previous?.devtools !== void 0 && devtools.content !== null;
   const expectedReceipt2 = receiptContent(receipt);
   const drifted = plan.filter((action) => hasActionDrift(action, deps));
+  if (input.devtoolsMcpEnabled && devtools.previous?.devtools?.sha256 !== receipt.devtools?.sha256 && !drifted.some((action) => path23.resolve(action.target) === devtoolsPath(scope))) {
+    return input.operation === "doctor" ? { kind: "drift", paths: [devtoolsPath(scope)] } : devtoolsConflict(devtoolsPath(scope));
+  }
   if (input.operation === "doctor") {
     const paths = drifted.map((action) => path23.resolve(action.target));
+    if (removeHandoff) paths.push(devtoolsPath(scope));
     const currentSettings2 = deps.readText(scope.settingsFile);
     if (currentSettings2 === null || filterProjectedPiPackage(currentSettings2, input.packageSource) !== currentSettings2) {
       paths.push(scope.settingsFile);
@@ -3535,19 +3705,30 @@ function runPiProjectionLifecycle(input, deps) {
   }
   const packageWillChange = filteredSettings !== null && filteredSettings !== currentSettings;
   const receiptChanged = deps.readText(scope.receiptFile) !== expectedReceipt2;
-  if (drifted.length > 0 || packageWillChange || receiptChanged) {
+  if (drifted.length > 0 || packageWillChange || receiptChanged || removeHandoff) {
     const backup = backupExisting([
       ...drifted.map((action) => action.target),
+      ...removeHandoff ? [devtoolsPath(scope)] : [],
       ...packageWillChange ? [scope.settingsFile] : [],
       ...receiptChanged ? [scope.receiptFile] : []
     ], deps);
     if (backup.kind === "backup-failed") return backupFailure(backup.paths);
   }
-  applyActions(drifted, deps);
+  if (removeHandoff) {
+    try {
+      const current = deps.readText(devtoolsPath(scope));
+      if (current !== null && contentHash(current) !== devtools.previous?.devtools?.sha256) return devtoolsConflict(devtoolsPath(scope));
+      deps.removeFile(devtoolsPath(scope));
+    } catch {
+      return cleanupFailure([devtoolsPath(scope)]);
+    }
+  }
+  const writeResult = applyActions(drifted, deps, input.devtoolsMcpEnabled ? { file: devtoolsPath(scope), previous: devtools.content } : void 0);
+  if (writeResult) return writeResult;
   if (packageWillChange && filteredSettings !== null) deps.writeText(scope.settingsFile, filteredSettings);
   if (receiptChanged) deps.writeText(scope.receiptFile, expectedReceipt2);
   if (input.operation === "install") return { kind: "installed", receipt };
-  return { kind: "synced", changed: drifted.length > 0 || packageWillChange || receiptChanged };
+  return { kind: "synced", changed: drifted.length > 0 || packageWillChange || receiptChanged || removeHandoff };
 }
 function systemProjectionLifecycle(input) {
   const targetRoot = input.targetDir === void 0 ? null : path23.resolve(input.targetDir);
@@ -3564,7 +3745,9 @@ function systemProjectionLifecycle(input) {
       packageSource: input.packageSource,
       stackDir: stackRoot(),
       engramBin: input.engramBin ?? "",
-      playwrightCliEnabled: input.playwrightCliEnabled
+      playwrightCliEnabled: input.playwrightCliEnabled,
+      devtoolsMcpEnabled: input.devtoolsMcpEnabled,
+      pnpmBin: input.pnpmBin
     },
     deps: {
       readText: readTextOnlyIfMissing,
@@ -5149,22 +5332,22 @@ import os4 from "os";
 import path31 from "path";
 import fs23 from "fs";
 import { spawnSync } from "child_process";
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 
 // src/lib/pi-runtime-pin.json
 var pi_runtime_pin_default = {
   package: {
     name: "jorgex-pi",
-    version: "0.8.12",
-    source: "npm:jorgex-pi@0.8.12"
+    version: "0.8.13",
+    source: "npm:jorgex-pi@0.8.13"
   },
   provenance: {
-    commit: "a041e8f290021b5a6bb161db77e03663f37c82cb"
+    commit: "e28a677da0a112925251cf11269b70cb5c8aa15e"
   },
   tarball: {
-    bytes: 89141968,
-    sha256: "eb7739852504bf4cd8cdd9f260c67da979728378a756db7f1ff6b0c1d60368c6",
-    sha512: "a37b36e5c846e1694db3c7bd7e9acf23f39b8ba45d348bf039fd218f90f041a6d95268af2e3b6248fc4e759dfd6441df1c44490411c1e13c2b0cedbc0ef526b2"
+    bytes: 89143404,
+    sha256: "6bbe877249b900af582c8881e0dd7993951ea1cef6e7252522c626c078de7478",
+    sha512: "bb527d1f3812406f2184f778b22cca00ead33692fecac0012cf8cdcdc469b7cccf3c789c35b4327dd599d06542162bd07eefeeaaa40de19662ec5fc422b14af8"
   }
 };
 
@@ -5186,6 +5369,7 @@ var PI_RUNTIME_CANDIDATE = {
       "goal-continuation-v1",
       "mcp-adapter-v1",
       "engram-runtime-tools-v1",
+      "chrome-devtools-handoff-v1",
       "runner-json-v1",
       "tui-branding-v1",
       "managed-primary-model-v1",
@@ -5538,8 +5722,8 @@ function readOptional(file, fallback) {
 }
 function hashPiTarball(file) {
   const descriptor = fs23.openSync(file, "r");
-  const sha2562 = createHash("sha256");
-  const sha512 = createHash("sha512");
+  const sha2562 = createHash2("sha256");
+  const sha512 = createHash2("sha512");
   const buffer = Buffer.allocUnsafe(1024 * 1024);
   let bytes = 0;
   try {
@@ -5757,36 +5941,44 @@ function managedPackageResult(result) {
   return result;
 }
 async function runManagedPiSystem(input) {
+  const { devtoolsMcpEnabled: explicitDevtools, ...runtimeInput } = input;
+  const devtoolsMcpEnabled = explicitDevtools ?? (input.targetDir === void 0 && loadDevtoolsMcpPreference(devtoolsMcpPreferenceFile(), "pi"));
   const playwrightCliEnabled = input.targetDir === void 0 && loadPlaywrightCliPreference() === true;
   const projectionInput = {
     targetDir: input.targetDir,
     packageSource: PI_RUNTIME_CANDIDATE.package.source,
     engramBin: input.engramBin,
-    playwrightCliEnabled
+    playwrightCliEnabled,
+    devtoolsMcpEnabled,
+    pnpmBin: devtoolsMcpEnabled && input.operation !== "uninstall" ? resolvePnpmBin() : null
   };
-  return runManagedPiOperation(input.operation, {
+  const result = await runManagedPiOperation(input.operation, {
     async runPackage(operation) {
-      return managedPackageResult(await runPiRuntimeSystem({ ...input, operation }));
+      return managedPackageResult(await runPiRuntimeSystem({ ...runtimeInput, operation }));
     },
     runProjection(operation) {
-      const result = runPiProjectionLifecycleSystem({
+      const result2 = runPiProjectionLifecycleSystem({
         operation,
         ...projectionInput
       });
-      return Promise.resolve(result.kind === "drift" ? {
+      return Promise.resolve(result2.kind === "drift" ? {
         kind: "drift",
-        paths: result.paths,
+        paths: result2.paths,
         remedy: "Ejecuta sync --agents pi para reparar la proyecci\xF3n de Pi."
-      } : result);
+      } : result2);
     },
     prepareProjectionUninstall() {
-      const result = preparePiProjectionUninstallSystem({ operation: "uninstall", ...projectionInput });
-      return Promise.resolve(result.kind === "prepared" ? { kind: "prepared", token: result.plan } : result);
+      const result2 = preparePiProjectionUninstallSystem({ operation: "uninstall", ...projectionInput });
+      return Promise.resolve(result2.kind === "prepared" ? { kind: "prepared", token: result2.plan } : result2);
     },
     completeProjectionUninstall(token) {
       return Promise.resolve(completePiProjectionUninstallSystem(token, { operation: "uninstall", ...projectionInput }));
     }
   });
+  if (input.targetDir === void 0 && explicitDevtools !== void 0 && (input.operation === "install" || input.operation === "sync") && result.kind !== "blocked") {
+    saveDevtoolsMcpPreference(devtoolsMcpPreferenceFile(), "pi", explicitDevtools);
+  }
+  return result;
 }
 
 // src/lib/quality-runner.ts
@@ -6167,6 +6359,112 @@ async function runQualityPlan(input) {
   return { evaluation, receipt };
 }
 
+// src/lib/engram-install.ts
+import fs24 from "fs";
+import os5 from "os";
+import path33 from "path";
+import { execFileSync as execFileSync7 } from "child_process";
+import { createHash as createHash3 } from "crypto";
+
+// src/lib/engram-release.json
+var engram_release_default = {
+  assets: {
+    darwin_arm64: {
+      name: "engram_1.20.0_darwin_arm64.tar.gz",
+      sha256: "2363d5012f23e58878f86c3ddcc1f63cfe9dcf3eec7f413e70eaafcbb9d394cc",
+      size: 6949031
+    },
+    darwin_x64: {
+      name: "engram_1.20.0_darwin_amd64.tar.gz",
+      sha256: "3b9015dcfcdd9f823eb7ad0b590b1dbc4c25bb5d81dda3f84e623709815afe80",
+      size: 7367005
+    },
+    linux_arm64: {
+      name: "engram_1.20.0_linux_arm64.tar.gz",
+      sha256: "7eb815910a76ae6cfa9a5d0161d3701e293dcca71f7743cffa62e236e5af59af",
+      size: 6673857
+    },
+    linux_x64: {
+      name: "engram_1.20.0_linux_amd64.tar.gz",
+      sha256: "7dc3003318e303bee269a4772144f3ce01c8ec700bfd524aaec76770acd389ca",
+      size: 7236400
+    },
+    windows_arm64: {
+      name: "engram_1.20.0_windows_arm64.zip",
+      sha256: "eb93c6d7d5a4020ddcf1ff956909f3e90694f6447519433316b10f964f8f37b5",
+      size: 6723366
+    },
+    windows_x64: {
+      name: "engram_1.20.0_windows_amd64.zip",
+      sha256: "c945c47d58367f943642cb8451fa45f208174407839f1dda33a975a05d6e465b",
+      size: 7416778
+    }
+  },
+  version: "1.20.0"
+};
+
+// src/lib/engram-install.ts
+async function installMissingEngram(options = {}) {
+  const platform = options.platform ?? process.platform;
+  const homeDir = options.homeDir ?? os5.homedir();
+  if (!path33.isAbsolute(homeDir)) return { ok: false, reason: "El directorio personal debe ser absoluto." };
+  const binaryName = platform === "win32" ? "engram.exe" : "engram";
+  const bin = path33.join(homeDir, ".local", "bin", binaryName);
+  let staging;
+  try {
+    const existing = fs24.lstatSync(bin, { throwIfNoEntry: false });
+    if (existing) {
+      if (!fs24.statSync(bin).isFile()) throw new Error(`El destino Engram no es un archivo: ${bin}`);
+      fs24.accessSync(bin, platform === "win32" ? fs24.constants.F_OK : fs24.constants.X_OK);
+      return { ok: true, bin };
+    }
+    const key = `${platform === "win32" ? "windows" : platform}_${options.arch ?? process.arch}`;
+    const asset = engram_release_default.assets[key];
+    if (!asset) throw new Error(`Engram no dispone de un binario aprobado para ${key}.`);
+    const response = await (options.fetch ?? globalThis.fetch)(
+      `https://github.com/Gentleman-Programming/engram/releases/download/v${engram_release_default.version}/${asset.name}`,
+      { signal: AbortSignal.timeout(12e4) }
+    );
+    if (!response.ok || !response.body) throw new Error(`Descarga Engram fallida: HTTP ${response.status}.`);
+    const reader = response.body.getReader();
+    const chunks = [];
+    let size = 0;
+    try {
+      while (true) {
+        const chunk = await reader.read();
+        if (chunk.done) break;
+        size += chunk.value.byteLength;
+        if (size > asset.size) throw new Error("El tama\xF1o descargado de Engram supera el aprobado.");
+        chunks.push(chunk.value);
+      }
+    } finally {
+      await reader.cancel();
+    }
+    const archive = Buffer.concat(chunks);
+    if (size !== asset.size || createHash3("sha256").update(archive).digest("hex") !== asset.sha256) {
+      throw new Error("Engram: tama\xF1o o hash SHA-256 no coincide con el artefacto aprobado.");
+    }
+    fs24.mkdirSync(path33.dirname(bin), { recursive: true });
+    staging = fs24.mkdtempSync(path33.join(path33.dirname(bin), ".engram-install-"));
+    const archivePath = path33.join(staging, asset.name);
+    fs24.writeFileSync(archivePath, archive, { flag: "wx", mode: 384 });
+    const binary = execFileSync7(resolveTarBin(), ["-xOf", archivePath, binaryName], {
+      maxBuffer: 64 * 1024 * 1024,
+      timeout: 3e4,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    if (binary.length === 0) throw new Error("El artefacto Engram no contiene un binario v\xE1lido.");
+    const stagedBin = path33.join(staging, binaryName);
+    fs24.writeFileSync(stagedBin, binary, { flag: "wx", mode: 493 });
+    fs24.linkSync(stagedBin, bin);
+    return { ok: true, bin };
+  } catch (error) {
+    return { ok: false, reason: error instanceof Error ? error.message : String(error) };
+  } finally {
+    if (staging) fs24.rmSync(staging, { recursive: true, force: true });
+  }
+}
+
 // src/cli.ts
 var VERSION = readPackageVersion();
 var COMMANDS = ["install", "sync", "models", "update", "doctor", "restore", "uninstall", "quality"];
@@ -6201,6 +6499,7 @@ function parseFlags(args, allowReceipt = false) {
     list: false,
     check: false,
     removeEngram: false,
+    engram: false,
     playwright: false,
     removePlaywright: false,
     devtools: false,
@@ -6263,6 +6562,7 @@ function parseFlags(args, allowReceipt = false) {
     else if (arg === "--list") flags.list = true;
     else if (arg === "--check") flags.check = true;
     else if (arg === "--remove-engram") flags.removeEngram = true;
+    else if (arg === "--engram") flags.engram = true;
     else if (arg === "--playwright") flags.playwright = true;
     else if (arg === "--remove-playwright") flags.removePlaywright = true;
     else if (arg === "--devtools") flags.devtools = true;
@@ -6367,8 +6667,9 @@ async function resolveDevtoolsMcpSelection(command, flags, runtimes) {
   }
   const file = devtoolsMcpPreferenceFile();
   const selected = await p6.multiselect({
-    message: "Chrome DevTools MCP avanzado (full: ~29 tools y ~5.8\u20137.7k tokens de schemas). \xBFEn qu\xE9 runtimes activarlo?",
-    options: runtimes.map((runtime) => ({ value: runtime, label: ADAPTERS[runtime]?.name ?? runtime })),
+    message: "Chrome DevTools MCP avanzado (opcional). \xBFEn qu\xE9 runtimes activarlo?",
+    required: false,
+    options: runtimes.map((runtime) => ({ value: runtime, label: runtime === "pi" ? "Pi" : ADAPTERS[runtime]?.name ?? runtime })),
     initialValues: runtimes.filter((runtime) => loadDevtoolsMcpPreference(file, runtime))
   });
   if (p6.isCancel(selected)) return null;
@@ -6413,7 +6714,34 @@ async function resolveRuntimes(flags, includeAvailablePi = false) {
   if (p6.isCancel(choice)) return null;
   return choice;
 }
-async function runSelectedPi(operation, targetDir, yes = false) {
+async function resolveHostEngramForInstall(flags) {
+  if (flags.targetDir !== void 0) return { ok: true, bin: null };
+  const existing = resolvePiEngramBin();
+  if (flags.dryRun) return { ok: true, bin: existing };
+  if (existing !== null) return { ok: true, bin: existing };
+  let accepted = flags.engram;
+  if (!accepted && !flags.yes && process.stdin.isTTY === true && process.stdout.isTTY === true) {
+    const answer = await p6.confirm({
+      message: "Engram no est\xE1 instalado. \xBFDescargar e instalar ahora el binario oficial verificado?",
+      initialValue: false
+    });
+    if (!p6.isCancel(answer)) accepted = answer === true;
+  }
+  if (!accepted) {
+    return {
+      ok: false,
+      message: "Engram no est\xE1 instalado. Usa --engram para autorizar su instalaci\xF3n o inst\xE1lalo antes de reintentar."
+    };
+  }
+  try {
+    const result = await installMissingEngram();
+    if (result.ok) return { ok: true, bin: result.bin };
+    return { ok: false, message: `Engram: ${result.reason}` };
+  } catch (error) {
+    return { ok: false, message: `Engram: ${error instanceof Error ? error.message : String(error)}` };
+  }
+}
+async function runSelectedPi(operation, targetDir, yes = false, resolvedEngramBin, devtoolsMcpEnabled) {
   if (targetDir === void 0 && operation !== "models") {
     const preferenceErrors = browserPreferenceErrors();
     if (preferenceErrors.length > 0) {
@@ -6430,7 +6758,7 @@ async function runSelectedPi(operation, targetDir, yes = false) {
     console.error("No se pudo verificar la versi\xF3n instalada de Pi sin ejecutarlo; revisa la instalaci\xF3n de Pi.");
     return 1;
   }
-  let engramBin = resolvePiEngramBin(targetDir);
+  let engramBin = resolvedEngramBin === void 0 ? resolvePiEngramBin(targetDir) : resolvedEngramBin;
   if (operation === "install" && engramBin === null) {
     const requirement = await resolvePiEngramRequirement({
       targetDir,
@@ -6455,7 +6783,8 @@ async function runSelectedPi(operation, targetDir, yes = false) {
     operation,
     targetDir,
     detected: { executable: detected.executable, version: detected.version },
-    engramBin
+    engramBin,
+    ...devtoolsMcpEnabled === void 0 ? {} : { devtoolsMcpEnabled }
   });
   if (result.kind === "blocked") {
     const paths = "paths" in result ? `: ${result.paths.join(", ")}` : "";
@@ -6491,6 +6820,7 @@ Opciones:
   --dry-run             Muestra el plan sin escribir nada
   --yes, -y             No interactivo
   --playwright          Autoriza Playwright CLI global y sus navegadores (requerido con --yes/sin TTY)
+  --engram              (install) autoriza instalar el binario Engram si falta
   --devtools            (install/sync) activa Chrome DevTools MCP para los runtimes destino (opt-in)
   --no-devtools         (install/sync) desactiva Chrome DevTools MCP (incompatible con --devtools)
   --remove-engram       (uninstall) desregistra Engram de los runtimes;
@@ -6524,6 +6854,11 @@ Flags disponibles: jorgex-stack --help`
     return;
   }
   const { command, flags } = parsed;
+  if (flags.engram && command !== "install") {
+    console.error("--engram solo se admite durante install.");
+    process.exitCode = 1;
+    return;
+  }
   if (command !== "quality" && flags.targetDir !== void 0 && flags.agents.length !== 1) {
     console.error("--target-dir requiere exactamente un runtime en --agents.");
     process.exitCode = 1;
@@ -6531,7 +6866,7 @@ Flags disponibles: jorgex-stack --help`
   }
   switch (command) {
     case "quality": {
-      if (flags.targetDir !== void 0 || flags.agents.length > 0 || flags.dryRun || flags.yes || flags.mode !== void 0 || flags.subagentConcurrency !== void 0 || flags.list || flags.check || flags.removeEngram || flags.playwright || flags.removePlaywright || flags.devtools || flags.noDevtools) {
+      if (flags.targetDir !== void 0 || flags.agents.length > 0 || flags.dryRun || flags.yes || flags.mode !== void 0 || flags.subagentConcurrency !== void 0 || flags.list || flags.check || flags.removeEngram || flags.engram || flags.playwright || flags.removePlaywright || flags.devtools || flags.noDevtools) {
         console.error("quality solo admite <plan.json> y, opcionalmente, --receipt <path>.");
         process.exitCode = 1;
         return;
@@ -6547,7 +6882,7 @@ Flags disponibles: jorgex-stack --help`
         return;
       }
       try {
-        const plan = JSON.parse(fs24.readFileSync(flags.positional[0], "utf8"));
+        const plan = JSON.parse(fs25.readFileSync(flags.positional[0], "utf8"));
         const result = await runQualityPlan(plan);
         const serialized = serializeQualityReceipt(result.receipt);
         if (flags.receipt === void 0) process.stdout.write(`${serialized}
@@ -6572,33 +6907,55 @@ Flags disponibles: jorgex-stack --help`
       }
       const fileRuntimes = runtimes.filter(isFileManagedRuntime);
       let exitCode = 0;
-      if (fileRuntimes.length > 0) {
-        const mode = await resolveInstallMode(flags);
+      let completed = false;
+      p6.intro(`jorgex-stack ${command}${flags.dryRun ? " (dry-run)" : ""}`);
+      try {
+        if (flags.targetDir === void 0) {
+          const errors = browserPreferenceErrors();
+          if (errors.length > 0) {
+            for (const error of errors) p6.log.error(error);
+            exitCode = 1;
+            return;
+          }
+        }
+        const mode = fileRuntimes.length > 0 ? await resolveInstallMode(flags) : void 0;
         if (mode === null) return;
-        const devtoolsMcpSelection = await resolveDevtoolsMcpSelection(command, flags, fileRuntimes);
-        if (devtoolsMcpSelection === null) return;
-        const playwrightToolConsent = await resolvePlaywrightToolConsent(command, flags);
-        if (playwrightToolConsent === null) return;
-        const hasOpenCodeModels = await ensureOpenCodeModelsForInstall(command, flags, fileRuntimes);
-        if (!hasOpenCodeModels) {
-          process.exitCode = 1;
+        const devtoolsMcpSelection = await resolveDevtoolsMcpSelection(command, flags, runtimes);
+        if (devtoolsMcpSelection === null) {
+          exitCode = process.exitCode === 1 ? 1 : 0;
           return;
         }
-        exitCode = await runInstall({
-          runtimes: fileRuntimes,
-          targetDir: flags.targetDir,
-          dryRun: flags.dryRun,
-          yes: flags.yes,
-          mode,
-          playwrightToolConsent,
-          devtoolsMcpSelection
-        });
-      }
-      let piCanRun = true;
-      if (command === "install" && fileRuntimes.length === 0 && runtimes.includes("pi")) {
         const playwrightToolConsent = await resolvePlaywrightToolConsent(command, flags);
         if (playwrightToolConsent === null) return;
-        if (resolvePlaywrightToolPlan(playwrightToolConsent).actions.length > 0) {
+        if (!await ensureOpenCodeModelsForInstall(command, flags, fileRuntimes)) {
+          exitCode = 1;
+          return;
+        }
+        let engramBin;
+        if (command === "install") {
+          const engram = await resolveHostEngramForInstall(flags);
+          if (!engram.ok) {
+            p6.log.error(engram.message);
+            exitCode = 1;
+            return;
+          }
+          engramBin = engram.bin;
+        }
+        if (fileRuntimes.length > 0) {
+          exitCode = await runInstall({
+            runtimes: fileRuntimes,
+            targetDir: flags.targetDir,
+            dryRun: flags.dryRun,
+            yes: flags.yes,
+            mode,
+            playwrightToolConsent,
+            devtoolsMcpSelection,
+            engramBin,
+            showSummary: false
+          });
+        }
+        let piCanRun = true;
+        if (command === "install" && fileRuntimes.length === 0 && runtimes.includes("pi") && resolvePlaywrightToolPlan(playwrightToolConsent).actions.length > 0) {
           if (flags.dryRun) {
             p6.log.info("Playwright CLI: instalaci\xF3n global y navegador previstos (dry-run; no se ejecutan).");
           } else {
@@ -6607,17 +6964,32 @@ Flags disponibles: jorgex-stack --help`
               targetDir: flags.targetDir,
               dryRun: false,
               yes: flags.yes,
-              playwrightToolConsent
+              playwrightToolConsent,
+              engramBin,
+              showSummary: false
             });
             piCanRun = exitCode === 0;
           }
         }
+        if (runtimes.includes("pi") && piCanRun) {
+          if (flags.dryRun) p6.log.info(`Pi: ${command} previsto; dry-run no ejecuta subprocess ni escribe receipt.`);
+          else exitCode = Math.max(exitCode, await runSelectedPi(
+            command,
+            flags.targetDir,
+            flags.yes,
+            flags.targetDir === void 0 ? engramBin : void 0,
+            devtoolsMcpSelection.pi
+          ));
+        }
+        completed = true;
+      } catch (error) {
+        p6.log.error(error instanceof Error ? error.message : String(error));
+        exitCode = 1;
+      } finally {
+        if (process.exitCode === 1) exitCode = 1;
+        process.exitCode = exitCode;
+        p6.outro(exitCode !== 0 ? `${command} completado con errores (revisa arriba).` : !completed ? `${command} cancelado.` : flags.dryRun ? "Dry-run: no se ha escrito nada." : "Hecho.");
       }
-      if (runtimes.includes("pi") && piCanRun) {
-        if (flags.dryRun) p6.log.info(`Pi: ${command} previsto; dry-run no ejecuta subprocess ni escribe receipt.`);
-        else exitCode = Math.max(exitCode, await runSelectedPi(command, flags.targetDir, flags.yes));
-      }
-      process.exitCode = exitCode;
       return;
     }
     case "uninstall": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jorgex-stack",
-  "version": "1.9.28",
+  "version": "1.9.30",
   "description": "Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI, OpenCode y Pi",
   "type": "module",
   "license": "MIT",