jorgex-stack 1.9.39 → 1.9.41

package/dist/cli.js

@@ -681,9 +681,9 @@ function ensureModelMapFile() {
 import path7 from "path";
 import { existsSync as existsSync2, statSync } from "fs";
 import { execFileSync } from "child_process";
-function lookPath(cmd) {
+function lookPath(cmd, env = process.env) {
   const exts = process.platform === "win32" ? [".exe", ".cmd", ".bat", ".ps1", ""] : [""];
-  for (const dir of (process.env.PATH ?? "").split(path7.delimiter)) {
+  for (const dir of (env.PATH ?? "").split(path7.delimiter)) {
     if (!dir) continue;
     for (const ext of exts) {
       const candidate = path7.join(dir, cmd + ext);
@@ -830,19 +830,6 @@ function upsertNativeHooks(existing, canonical, scriptsDir, mapMatcher = (m) =>
   });
 }
 
-// src/lib/git-guard.ts
-var DESTRUCTIVE_GIT_DENY = [
-  "git reset*",
-  "git clean*",
-  "git checkout -- *",
-  "git restore*",
-  "git push*--force*",
-  // posición libre: caza "git push origin main --force[-with-lease]"
-  "git push -f*",
-  "git switch*--discard-changes*"
-];
-var GIT_GUARD_SCRIPT = "block-destructive-git.cjs";
-
 // src/lib/quality-capabilities.ts
 var QUALITY_CAPABILITY_NAMESPACE = "jorgex.quality.capabilities";
 var QUALITY_CAPABILITY_VERSION = 1;
@@ -917,6 +904,15 @@ function localQualityStatus(profile, status) {
 }
 
 // src/adapters/opencode.ts
+var gitReadPrefix = "git --no-pager -c core.fsmonitor=false -c log.showSignature=false";
+var gitReadCommands = [
+  "diff",
+  "diff --stat",
+  "diff --name-only",
+  "diff --cached",
+  "log",
+  "log --oneline -10"
+].map((action) => `${gitReadPrefix} ${action} --no-ext-diff --no-textconv --end-of-options`);
 function yamlString(value) {
   return JSON.stringify(value);
 }
@@ -1015,15 +1011,20 @@ var opencodeAdapter = {
       const tierModel = resolveAgentModel(models, agent.name, agent.tier);
       lines.push(`model: ${tierModel.model}`);
       if (tierModel.variant) lines.push(`variant: ${tierModel.variant}`);
-      lines.push("permission:");
-      lines.push(`  edit: ${agent.readonly ? "deny" : "allow"}`);
+      if (agent.readonly || agent.bash !== "full" || !agent.spawn) lines.push("permission:");
+      if (agent.readonly) lines.push("  edit: deny");
       if (agent.bash === "none") lines.push("  bash: deny");
-      else if (agent.bash === "git-read") lines.push('  bash:\n    "git diff*": allow\n    "git log*": allow');
-      else {
-        const deny = DESTRUCTIVE_GIT_DENY.map((p7) => `    ${yamlString(p7)}: deny`).join("\n");
-        lines.push(`  bash:
-    "*": allow
-${deny}`);
+      else if (agent.bash === "git-read") {
+        lines.push('  bash:\n    "*": deny');
+        for (const command of gitReadCommands) {
+          lines.push(`    ${yamlString(command)}: allow`, `    ${yamlString(`${command} *`)}: allow`);
+        }
+        const permission = objectValue(loadCanonicalDefaults(stackRoot())["opencode"]?.permission);
+        const bash = objectValue(permission?.bash);
+        if (bash === null) throw new Error("OpenCode: canonical Bash policy is required for git-read agents.");
+        for (const [pattern, decision] of Object.entries(bash)) {
+          if (decision === "deny") lines.push(`    ${yamlString(pattern)}: deny`);
+        }
       }
       if (!agent.spawn) lines.push("  task: deny");
     }
@@ -1033,7 +1034,11 @@ ${deny}`);
         content: `---
 ${lines.join("\n")}
 ---
-${agent.body}`,
+${agent.body}${agent.bash === "git-read" ? `
+
+Use only these read-only Git command prefixes; put refs and paths after --end-of-options:
+${gitReadCommands.map((command) => `- \`${command}\``).join("\n")}
+` : ""}`,
         kind: "agent"
       }
     ];
@@ -1145,7 +1150,7 @@ ${agent.body}`,
       if (isFreshConfig && defaults?.["permission"] !== void 0) {
         root["permission"] = defaults["permission"];
         ctx.warnings.push(
-          "OpenCode: fresh config enables read-anywhere via external_directory:*; edits, web egress and arbitrary bash remain approval-gated, but broad local reads can expose secrets not covered by deny rules."
+          "OpenCode: fresh config allows ordinary reads, edits, web access and Bash; sensitive operations ask, while protected paths and obvious destruction are denied. Native matching is not a universal filesystem sandbox."
         );
       }
       const mcp = root["mcp"] ??= {};
@@ -1318,6 +1323,11 @@ ${agent.body}`,
 import path10 from "path";
 import fs7 from "fs";
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
+
+// src/lib/git-guard.ts
+var GIT_GUARD_SCRIPT = "block-destructive-git.cjs";
+
+// src/adapters/claude-code.ts
 function yamlString2(value) {
   return JSON.stringify(value);
 }
@@ -2348,10 +2358,11 @@ function resolvePlaywrightCliState({ binPath, versionOutput }) {
     detectedVersion
   };
 }
-function detectPlaywrightCli() {
-  const binPath = lookPath(PLAYWRIGHT_CLI.bin);
+function detectPlaywrightCli(env) {
+  const actualEnv = env ?? process.env;
+  const binPath = env === void 0 ? lookPath(PLAYWRIGHT_CLI.bin) : lookPath(PLAYWRIGHT_CLI.bin, env);
   if (binPath === null) {
-    const pnpmHome = resolvePnpmHome();
+    const pnpmHome = resolvePnpmHome(actualEnv);
     const name = process.platform === "win32" ? `${PLAYWRIGHT_CLI.bin}.cmd` : PLAYWRIGHT_CLI.bin;
     const known = [path20.join(pnpmHome, name), path20.join(pnpmHome, "bin", name)].find((file) => {
       try {
@@ -2364,13 +2375,13 @@ function detectPlaywrightCli() {
   }
   return resolvePlaywrightCliState({
     binPath,
-    versionOutput: binPath ? runDetectedBin(binPath, ["--version"], 5e3, { NO_UPDATE_NOTIFIER: "1" }) : null
+    versionOutput: binPath ? runDetectedBin(binPath, ["--version"], 5e3, { ...actualEnv, NO_UPDATE_NOTIFIER: "1" }) : null
   });
 }
-function resolvePnpmBin() {
-  const pnpm = lookPath("pnpm");
+function resolvePnpmBin(env) {
+  const pnpm = env === void 0 ? lookPath("pnpm") : lookPath("pnpm", env);
   if (pnpm !== null && !pnpm.toLowerCase().endsWith(".ps1")) return pnpm;
-  const pnpmCmd = lookPath("pnpm.cmd");
+  const pnpmCmd = env === void 0 ? lookPath("pnpm.cmd") : lookPath("pnpm.cmd", env);
   return pnpmCmd !== null && !pnpmCmd.toLowerCase().endsWith(".ps1") ? pnpmCmd : null;
 }
 function resolvePnpmHome(env = process.env, platform = process.platform, homeDir = os.homedir()) {
@@ -2502,6 +2513,30 @@ function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin(), env) {
   }
 }
 
+// src/lib/playwright-capability.ts
+function inspectPlaywrightCapability(options = {}) {
+  const env = options.env ?? process.env;
+  const cli = options.env === void 0 ? detectPlaywrightCli() : detectPlaywrightCli(env);
+  const browserCache = options.env === void 0 ? isPlaywrightBrowserReady() : isPlaywrightBrowserReady(env);
+  let browserVerified = false;
+  if (cli.status === "current" && browserCache.status === "ready") {
+    if (options.browserVerified === true) {
+      browserVerified = true;
+    } else {
+      const pnpmBin = options.env === void 0 ? resolvePnpmBin() : resolvePnpmBin(env);
+      if (pnpmBin !== null) {
+        try {
+          browserVerified = verifyPlaywrightBrowser(pnpmBin, env);
+        } catch {
+          browserVerified = false;
+        }
+      }
+    }
+  }
+  const effective = cli.status === "current" && cli.binPath !== null && (options.browserVerified === true || browserCache.status === "ready") && browserVerified;
+  return { cli, browserCache, browserVerified, effective };
+}
+
 // src/lib/tool-preferences.ts
 import fs16 from "fs";
 import path21 from "path";
@@ -2762,7 +2797,7 @@ function persistConfigurationOwnershipChanges(runtime, configDir, plan) {
   const primaryFile = primaryModelOwnershipFile();
   for (const [field, owned] of primary) savePrimaryModelOwnership(primaryFile, runtime, configDir, field, owned);
 }
-function makeContext(adapter, configDir, mode = DEFAULT_INSTALL_MODE_PREFERENCE, useBrowserPreferences = true) {
+function makeContext(adapter, configDir, mode = DEFAULT_INSTALL_MODE_PREFERENCE, useBrowserPreferences = true, playwrightCapability) {
   const models = loadModelMap()[adapter.id];
   if (!models) return null;
   return {
@@ -2774,7 +2809,7 @@ function makeContext(adapter, configDir, mode = DEFAULT_INSTALL_MODE_PREFERENCE,
     models,
     warnings: [],
     enabledMcpServers: enabledMcpServers(adapter.id, void 0, useBrowserPreferences),
-    playwrightCliEnabled: useBrowserPreferences && loadPlaywrightCliPreference(playwrightCliPreferenceFile(), adapter.id) === true,
+    playwrightCliEnabled: useBrowserPreferences && loadPlaywrightCliPreference(playwrightCliPreferenceFile(), adapter.id) === true && (playwrightCapability ?? true),
     ownedMcpServers: ownedMcpServers(adapter.id, useBrowserPreferences),
     ownedPrimaryModelFields: useBrowserPreferences ? loadPrimaryModelOwnership(primaryModelOwnershipFile(), adapter.id, configDir) : /* @__PURE__ */ new Set()
   };
@@ -2809,14 +2844,14 @@ function applyChanges(changes, onOwnershipWritten) {
     } else copyFile(action.source, action.target);
   }
 }
-function collectAllCurrentTargets(mode = DEFAULT_INSTALL_MODE_PREFERENCE) {
+function collectAllCurrentTargets(mode = DEFAULT_INSTALL_MODE_PREFERENCE, playwrightCapability) {
   const targets = /* @__PURE__ */ new Set();
   let complete = true;
   const warnings = [];
   for (const adapter of Object.values(ADAPTERS)) {
     const detection = adapter.detect();
     if (!detection.installed) continue;
-    const ctx = makeContext(adapter, detection.configDir, mode);
+    const ctx = makeContext(adapter, detection.configDir, mode, true, playwrightCapability);
     if (!ctx) {
       complete = false;
       warnings.push(`${adapter.name}: limpieza de hu\xE9rfanos deshabilitada \u2014 falta contexto/model-map instalable para este runtime.`);
@@ -2873,6 +2908,10 @@ async function runInstall(opts) {
   });
   const projectPlaywrightPrompt = opts.dryRun && toolPlan?.persistEnabledOnSuccess === true;
   const hasFileRuntimes = opts.runtimes.length > 0;
+  const shouldInspectPlaywright = useManifest && !opts.dryRun && (toolPlan === null || toolPlan.actions.length === 0) && loadPlaywrightCliPreference() === true;
+  const playwrightCapability = opts.dryRun || !useManifest ? void 0 : opts.playwrightCapability ?? (shouldInspectPlaywright ? inspectPlaywrightCapability() : void 0);
+  const effectivePlaywright = playwrightCapability?.effective;
+  const plannedPlaywright = effectivePlaywright ?? (toolPlan !== null && toolPlan.actions.length > 0 ? false : void 0);
   const modelMap = hasFileRuntimes ? loadModelMap() : {};
   if (preparedStyle !== void 0) {
     try {
@@ -2885,7 +2924,7 @@ async function runInstall(opts) {
   }
   if (hasFileRuntimes && useManifest && !opts.dryRun) ensureModelMapFile();
   p.log.info(engramBin ? `Engram detectado: ${engramBin} (se respeta, D7)` : "Engram NO detectado.");
-  const current = hasFileRuntimes && useManifest ? collectAllCurrentTargets(modePreference) : { targets: /* @__PURE__ */ new Set(), complete: false, warnings: [] };
+  const current = hasFileRuntimes && useManifest ? collectAllCurrentTargets(modePreference, plannedPlaywright) : { targets: /* @__PURE__ */ new Set(), complete: false, warnings: [] };
   const canOrphan = hasFileRuntimes && useManifest && current.complete;
   const canonicalMcp = loadCanonicalMcp(stackDir);
   const canonicalHooks = loadCanonicalHooks(stackDir);
@@ -2924,7 +2963,7 @@ async function runInstall(opts) {
       models,
       warnings: [],
       enabledMcpServers: enabledMcpServers(id, opts.devtoolsMcpSelection?.[id], useManifest),
-      playwrightCliEnabled: projectPlaywrightPrompt ? opts.playwrightToolConsent?.runtimeSelection?.[id] ?? true : useManifest && loadPlaywrightCliPreference(playwrightCliPreferenceFile(), id) === true,
+      playwrightCliEnabled: projectPlaywrightPrompt ? opts.playwrightToolConsent?.runtimeSelection?.[id] ?? true : useManifest && loadPlaywrightCliPreference(playwrightCliPreferenceFile(), id) === true && (plannedPlaywright ?? true),
       ownedMcpServers: ownedMcpServers(id, useManifest),
       ownedPrimaryModelFields: useManifest ? loadPrimaryModelOwnership(primaryModelOwnershipFile(), id, configDir) : /* @__PURE__ */ new Set()
     };
@@ -3090,21 +3129,23 @@ async function runInstall(opts) {
           exitCode = 1;
           p.log.error("Playwright CLI y navegador se han instalado y la preferencia est\xE1 activada, pero la gu\xEDa de navegador qued\xF3 en estado parcial. Ejecuta 'jorgex-stack sync' para repararla.");
         } else {
+          const verified = preparedEnv === void 0 ? inspectPlaywrightCapability({ browserVerified: true }) : inspectPlaywrightCapability({ browserVerified: true, env: preparedEnv });
+          if (verified.effective && verified.cli.status === "current" && verified.cli.binPath !== null && verified.cli.detectedVersion !== null && verified.browserCache.status === "ready") {
+            opts.onPlaywrightCapability?.(verified);
+          }
           p.log.success("Playwright CLI instalado y arranque de Chromium verificado.");
         }
       }
     }
-  } else if (useManifest && opts.playwrightToolConsent?.command === "sync" && loadPlaywrightCliPreference() === true) {
-    const cli = detectPlaywrightCli();
-    if (cli.status !== "current") {
+  } else if (playwrightCapability !== void 0 && !playwrightCapability.effective) {
+    if (playwrightCapability.cli.status !== "current") {
       p.log.warn("Playwright CLI sigue habilitado, pero el paquete no est\xE1 listo; sync no instala herramientas. Ejecuta 'jorgex-stack install --playwright'.");
+    } else if (playwrightCapability.browserCache.status === "unreadable") {
+      p.log.warn(`Playwright CLI sigue habilitado, pero no se puede leer la cach\xE9 de navegadores en ${playwrightCapability.browserCache.path} (${playwrightCapability.browserCache.errorCode}). Revisa permisos o ejecuta 'jorgex-stack install --playwright'.`);
+    } else if (playwrightCapability.browserCache.status === "missing") {
+      p.log.warn("Playwright CLI sigue habilitado, pero falta el navegador; sync no descarga navegadores. Ejecuta 'jorgex-stack install --playwright'.");
     } else {
-      const browserCache = isPlaywrightBrowserReady();
-      if (browserCache.status === "unreadable") {
-        p.log.warn(`Playwright CLI sigue habilitado, pero no se puede leer la cach\xE9 de navegadores en ${browserCache.path} (${browserCache.errorCode}). Revisa permisos o ejecuta 'jorgex-stack install --playwright'.`);
-      } else if (browserCache.status === "missing") {
-        p.log.warn("Playwright CLI sigue habilitado, pero falta el navegador; sync no descarga navegadores. Ejecuta 'jorgex-stack install --playwright'.");
-      }
+      p.log.warn("Playwright CLI sigue habilitado, pero Chromium no arranca; se ha retirado la gu\xEDa. Ejecuta 'jorgex-stack install --playwright' para repararlo.");
     }
   }
   if (useManifest && !opts.dryRun && exitCode === 0 && successfulRuns > 0) {
@@ -4376,6 +4417,7 @@ function resolvePlaywrightDoctorState(input) {
   if (input.browserCache?.status === "unreadable") {
     return { status: "unreadable", path: input.browserCache.path, errorCode: input.browserCache.errorCode };
   }
+  if (input.browserVerified === false && input.browserCache?.status === "ready") return { status: "broken" };
   if (!input.browserReady) return { status: "missing", missing: "browser" };
   return { status: "healthy" };
 }
@@ -4471,21 +4513,28 @@ async function runDoctor(options = {}) {
     p3.log.error(primaryOwnershipError);
     problems++;
   }
+  let effectivePlaywright;
   if (preferenceErrors.length > 0) {
     for (const error of preferenceErrors) p3.log.error(error);
     problems += preferenceErrors.length;
+  } else if (options.dryRun) {
+    p3.log.info("Playwright CLI: comprobaci\xF3n omitida en dry-run; no se eval\xFAa el estado del paquete ni del navegador.");
   } else {
-    const browserCache = isPlaywrightBrowserReady();
+    const enabled = loadPlaywrightCliPreference();
+    const capability = options.playwrightCapability ?? (enabled === true ? inspectPlaywrightCapability() : void 0);
+    effectivePlaywright = capability?.effective;
+    const cli = capability?.cli ?? { status: "absent" };
     const playwright = resolvePlaywrightDoctorState({
-      enabled: loadPlaywrightCliPreference(),
-      cli: detectPlaywrightCli(),
-      browserReady: browserCache.status === "ready",
-      browserCache
+      enabled,
+      cli,
+      browserReady: capability?.effective ?? false,
+      browserVerified: capability?.browserVerified,
+      browserCache: capability?.browserCache
     });
     if (playwright.status === "disabled") {
       p3.log.info("Playwright CLI: deshabilitado (opcional). Usa 'install --playwright' para instalarlo de forma expl\xEDcita.");
     } else if (playwright.status === "healthy") {
-      p3.log.success("Playwright CLI: paquete y cach\xE9 de Chromium detectados (doctor no prueba el arranque).");
+      p3.log.success("Playwright CLI: paquete y arranque de Chromium verificados.");
     } else if (playwright.status === "not-in-path") {
       p3.log.warn("Playwright CLI: instalado en el directorio de pnpm, pero fuera del PATH de esta terminal. Abre una terminal nueva tras pnpm setup; no hace falta reinstalarlo.");
       problems++;
@@ -4494,7 +4543,8 @@ async function runDoctor(options = {}) {
       p3.log.warn(`Playwright CLI: habilitado, pero falta ${target} \u2192 ejecuta 'jorgex-stack install --playwright'.`);
       problems++;
     } else if (playwright.status === "broken") {
-      p3.log.error("Playwright CLI: el binario detectado no responde correctamente \u2192 ejecuta 'jorgex-stack install --playwright'.");
+      const launchFailed = capability?.cli.status === "current" && capability.browserCache.status === "ready" && capability.browserVerified === false;
+      p3.log.error(`Playwright CLI: ${launchFailed ? "Chromium no arranca" : "el binario detectado no responde correctamente"} \u2192 ejecuta 'jorgex-stack install --playwright'.`);
       problems++;
     } else if (playwright.status === "unreadable") {
       p3.log.error(`Playwright CLI: no se puede leer la cach\xE9 de navegadores en ${playwright.path} (${playwright.errorCode}) \u2192 revisa permisos o ejecuta 'jorgex-stack install --playwright'.`);
@@ -4505,7 +4555,7 @@ async function runDoctor(options = {}) {
     }
   }
   const manifest = readManifest();
-  const current = collectAllCurrentTargets(modePreference);
+  const current = collectAllCurrentTargets(modePreference, effectivePlaywright);
   if (!current.complete || current.warnings.length > 0) {
     p3.log.warn("Limpieza de hu\xE9rfanos deshabilitada: no se pudo construir el plan completo de todos los runtimes.");
     for (const warning of current.warnings) p3.log.warn(warning);
@@ -4521,7 +4571,7 @@ async function runDoctor(options = {}) {
     const capabilityReport = adapter.reportCapabilities(detection.configDir);
     const capabilitySummary = capabilityReport.capabilities.map((capability) => `${capability.id}=${capability.state}`).join(", ");
     p3.log.info(`${adapter.name}: capabilities diagnostic (${capabilitySummary}); no certifica enforcement local.`);
-    const ctx = makeContext(adapter, detection.configDir, modePreference);
+    const ctx = makeContext(adapter, detection.configDir, modePreference, true, effectivePlaywright);
     if (!ctx) continue;
     ctx.writingStyle = writingStyle;
     let pending;
@@ -5300,6 +5350,7 @@ async function runInteractiveUpdate(localVersion, yes, dryRun = false, includeBr
   let exitCode = 0;
   let appliedUpdates = false;
   const updated = [];
+  let playwrightCapability;
   const maintainer = isGitClone();
   const spin = p4.spinner();
   spin.start("Consultando versiones upstream\u2026");
@@ -5519,6 +5570,7 @@ ${diff}`);
         p4.log.success("Playwright CLI actualizado al pin aprobado.");
         appliedUpdates = true;
         updated.push("playwright-cli");
+        playwrightCapability = inspectPlaywrightCapability({ browserVerified: true });
       } else {
         const failedResult = packageResult.ok ? browserResult : packageResult;
         const pnpmRemedy = failedResult && !failedResult.ok ? resolvePnpmFailureRemedy(failedResult.reason) : null;
@@ -5555,7 +5607,12 @@ ${diff}`);
     }
   }
   p4.outro(exitCode === 0 ? "Update completado." : "Update completado con errores (revisa arriba).");
-  return { exitCode, appliedUpdates, syncRequired: resolveUpdateSyncRequired(updated) };
+  return {
+    exitCode,
+    appliedUpdates,
+    syncRequired: resolveUpdateSyncRequired(updated),
+    ...playwrightCapability === void 0 ? {} : { playwrightCapability }
+  };
 }
 
 // src/models-picker.ts
@@ -6430,10 +6487,16 @@ async function runManagedPiSystem(input) {
   const {
     devtoolsMcpEnabled: explicitDevtools,
     playwrightCliEnabled: explicitPlaywright,
+    playwrightCapability,
+    packageOnly,
     writingStyle: suppliedStyle,
     writingStyleMode,
     ...runtimeInput
   } = input;
+  if (input.operation === "doctor" && packageOnly) {
+    const result2 = managedPackageResult(await runPiRuntimeSystem(runtimeInput));
+    return result2.kind === "manual-existing" ? manualExistingResult(result2) : result2;
+  }
   const readsStyle = input.operation !== "uninstall" && input.operation !== "models";
   if (input.operation !== "models") {
     try {
@@ -6448,8 +6511,11 @@ async function runManagedPiSystem(input) {
   const writingStyle = style && mode === "programmatic" ? { ...style, content: null } : style;
   const devtoolsMcpEnabled = explicitDevtools ?? (input.targetDir === void 0 && loadDevtoolsMcpPreference(devtoolsMcpPreferenceFile(), "pi"));
   const supportsPlaywright = PI_RUNTIME_CANDIDATE.contract.capabilities.includes("playwright-handoff-v1");
-  const playwrightCliEnabled = input.targetDir === void 0 && supportsPlaywright && (explicitPlaywright ?? loadPlaywrightCliPreference(void 0, "pi") === true);
-  const playwrightCliCommand = playwrightCliEnabled && input.operation !== "uninstall" && input.operation !== "models" ? detectPlaywrightCli().binPath : null;
+  const persistedPlaywright = input.targetDir === void 0 && loadPlaywrightCliPreference(void 0, "pi") === true;
+  const selectedPlaywright = explicitPlaywright ?? persistedPlaywright;
+  const playwrightCapabilityEffective = playwrightCapability?.effective === true;
+  const playwrightCliEnabled = input.targetDir === void 0 && supportsPlaywright && selectedPlaywright && playwrightCapabilityEffective;
+  const playwrightCliCommand = playwrightCliEnabled && input.operation !== "uninstall" && input.operation !== "models" ? playwrightCapability?.cli.binPath ?? null : null;
   const projectionInput = {
     writingStyle,
     targetDir: input.targetDir,
@@ -7001,6 +7067,9 @@ async function ensureOpenCodeModelsForInstall(command, flags, runtimes) {
   );
   return false;
 }
+function shouldInspectPlaywrightCapability(targetDir, dryRun) {
+  return targetDir === void 0 && !dryRun && browserPreferenceErrors().length === 0 && loadPlaywrightCliPreference() === true;
+}
 function parseFlags(args, allowReceipt = false) {
   const flags = {
     agents: [],
@@ -7310,7 +7379,19 @@ async function resolveHostEngramForInstall(flags) {
     return { ok: false, message: `Engram: ${error instanceof Error ? error.message : String(error)}` };
   }
 }
-async function runSelectedPi(operation, targetDir, yes = false, resolvedEngramBin, devtoolsMcpEnabled, writingStyle, modePreference, playwrightCliEnabled) {
+async function runSelectedPi(options) {
+  const {
+    operation,
+    targetDir,
+    yes = false,
+    resolvedEngramBin,
+    devtoolsMcpEnabled,
+    writingStyle: suppliedWritingStyle,
+    modePreference,
+    playwrightCliEnabled,
+    playwrightCapability
+  } = options;
+  let writingStyle = suppliedWritingStyle;
   if (targetDir === void 0 && operation !== "models") {
     const preferenceErrors = browserPreferenceErrors();
     if (preferenceErrors.length > 0) {
@@ -7356,6 +7437,7 @@ async function runSelectedPi(operation, targetDir, yes = false, resolvedEngramBi
     engramBin = requirement.bin;
   }
   const result = await runManagedPiSystem({
+    ...options.packageOnly ? { packageOnly: true } : {},
     writingStyle,
     writingStyleMode: modePreference?.mode,
     operation,
@@ -7363,7 +7445,8 @@ async function runSelectedPi(operation, targetDir, yes = false, resolvedEngramBi
     detected: { executable: detected.executable, version: detected.version },
     engramBin,
     ...devtoolsMcpEnabled === void 0 ? {} : { devtoolsMcpEnabled },
-    ...playwrightCliEnabled === void 0 ? {} : { playwrightCliEnabled }
+    ...playwrightCliEnabled === void 0 ? {} : { playwrightCliEnabled },
+    ...playwrightCapability === void 0 ? {} : { playwrightCapability }
   });
   if (result.kind === "blocked") {
     const paths = "paths" in result ? `: ${result.paths.join(", ")}` : "";
@@ -7521,6 +7604,11 @@ Flags disponibles: jorgex-stack --help`
           exitCode = process.exitCode === 1 ? 1 : 0;
           return;
         }
+        const playwrightToolPlan = resolvePlaywrightToolPlan(playwrightToolConsent);
+        let playwrightCapability = shouldInspectPlaywrightCapability(flags.targetDir, flags.dryRun) && playwrightToolPlan.actions.length === 0 ? inspectPlaywrightCapability() : void 0;
+        const capturePlaywrightCapability = (snapshot) => {
+          playwrightCapability = snapshot;
+        };
         p6.log.info(`Estilo de escritura: ${writingStyle.sourcePath}${flags.dryRun ? " (instalaci\xF3n prevista; sin escrituras)" : ""}.`);
         applyWritingStyle(writingStyle, flags.dryRun);
         if (!await ensureOpenCodeModelsForInstall(command, flags, fileRuntimes)) {
@@ -7548,11 +7636,13 @@ Flags disponibles: jorgex-stack --help`
             playwrightToolConsent,
             devtoolsMcpSelection,
             engramBin,
+            ...playwrightCapability === void 0 ? {} : { playwrightCapability },
+            ...playwrightToolPlan.actions.length === 0 ? {} : { onPlaywrightCapability: capturePlaywrightCapability },
             showSummary: false
           });
         }
         let piCanRun = true;
-        if (command === "install" && fileRuntimes.length === 0 && runtimes.includes("pi") && resolvePlaywrightToolPlan(playwrightToolConsent).actions.length > 0) {
+        if (command === "install" && fileRuntimes.length === 0 && runtimes.includes("pi") && playwrightToolPlan.actions.length > 0) {
           if (flags.dryRun) {
             p6.log.info("Playwright CLI: instalaci\xF3n global y navegador previstos (dry-run; no se ejecutan).");
           } else {
@@ -7564,6 +7654,7 @@ Flags disponibles: jorgex-stack --help`
               yes: flags.yes,
               playwrightToolConsent,
               engramBin,
+              onPlaywrightCapability: capturePlaywrightCapability,
               showSummary: false
             });
             piCanRun = exitCode === 0;
@@ -7572,16 +7663,17 @@ Flags disponibles: jorgex-stack --help`
         if (runtimes.includes("pi") && piCanRun) {
           if (flags.dryRun) p6.log.info(`Pi: ${command} previsto; dry-run no ejecuta subprocess ni escribe receipt.`);
           else {
-            const piExitCode = await runSelectedPi(
-              command,
-              flags.targetDir,
-              flags.yes,
-              flags.targetDir === void 0 ? engramBin : void 0,
-              devtoolsMcpSelection.pi,
+            const piExitCode = await runSelectedPi({
+              operation: command,
+              targetDir: flags.targetDir,
+              yes: flags.yes,
+              resolvedEngramBin: flags.targetDir === void 0 ? engramBin : void 0,
+              devtoolsMcpEnabled: devtoolsMcpSelection.pi,
               writingStyle,
-              mode,
-              flags.targetDir === void 0 && exitCode === 0 && resolvePlaywrightToolPlan(playwrightToolConsent).actions.length > 0 ? playwrightToolConsent.runtimeSelection?.pi : void 0
-            );
+              modePreference: mode,
+              playwrightCliEnabled: flags.targetDir === void 0 && exitCode === 0 && playwrightToolPlan.actions.length > 0 ? playwrightToolConsent.runtimeSelection?.pi : void 0,
+              playwrightCapability
+            });
             exitCode = Math.max(exitCode, piExitCode);
           }
         }
@@ -7623,7 +7715,7 @@ Flags disponibles: jorgex-stack --help`
       }) : 0;
       if (runtimes.includes("pi")) {
         if (flags.dryRun) p6.log.info("Pi: uninstall previsto; dry-run conserva paquete y receipt.");
-        else exitCode = Math.max(exitCode, await runSelectedPi("uninstall", flags.targetDir));
+        else exitCode = Math.max(exitCode, await runSelectedPi({ operation: "uninstall", targetDir: flags.targetDir }));
       }
       process.exitCode = exitCode;
       return;
@@ -7636,8 +7728,25 @@ Flags disponibles: jorgex-stack --help`
         ...Object.values(ADAPTERS).filter((adapter) => adapter.detect().installed).map((adapter) => adapter.id),
         ...piSelected ? ["pi"] : []
       ] : [...Object.keys(ADAPTERS), ...piSelected ? ["pi"] : []];
-      let exitCode = await runDoctor({ targetDir: flags.targetDir, runtimes: doctorRuntimes, mode });
-      if (piSelected) exitCode = Math.max(exitCode, await runSelectedPi("doctor", flags.targetDir, false, void 0, void 0, void 0, mode));
+      const doctorCapability = shouldInspectPlaywrightCapability(flags.targetDir, flags.dryRun) ? inspectPlaywrightCapability() : void 0;
+      let exitCode = await runDoctor({
+        targetDir: flags.targetDir,
+        runtimes: doctorRuntimes,
+        mode,
+        ...flags.dryRun ? { dryRun: true } : {},
+        ...doctorCapability === void 0 ? {} : { playwrightCapability: doctorCapability }
+      });
+      if (piSelected) {
+        if (flags.dryRun) p6.log.info("Pi: doctor previsto; dry-run no ejecuta subprocess ni smoke de Playwright.");
+        else {
+          exitCode = Math.max(exitCode, await runSelectedPi({
+            operation: "doctor",
+            targetDir: flags.targetDir,
+            modePreference: mode,
+            playwrightCapability: doctorCapability
+          }));
+        }
+      }
       process.exitCode = exitCode;
       return;
     }
@@ -7646,7 +7755,16 @@ Flags disponibles: jorgex-stack --help`
         const piExplicit = flags.agents.includes("pi");
         const fileRuntimeExplicit = flags.agents.some(isFileManagedRuntime);
         let exitCode = flags.agents.length === 0 || fileRuntimeExplicit ? await runUpdateCheck(VERSION, flags.targetDir === void 0) : 0;
-        if (piExplicit) exitCode = Math.max(exitCode, await runSelectedPi("doctor", flags.targetDir));
+        if (piExplicit) {
+          if (flags.dryRun) p6.log.info("Pi: doctor previsto; dry-run no ejecuta subprocess ni smoke de Playwright.");
+          else {
+            exitCode = Math.max(exitCode, await runSelectedPi({
+              operation: "doctor",
+              targetDir: flags.targetDir,
+              packageOnly: true
+            }));
+          }
+        }
         process.exitCode = exitCode;
         return;
       }
@@ -7671,8 +7789,15 @@ Flags disponibles: jorgex-stack --help`
         { rootDir: flags.targetDir }
       );
       applyWritingStyle(writingStyle, flags.dryRun);
+      let updateCapability = shouldInspectPlaywrightCapability(flags.targetDir, flags.dryRun) ? inspectPlaywrightCapability() : void 0;
       if (fileRuntimes.length === 0 && runtimes.includes("pi")) {
-        const piExitCode = await runSelectedPi("update", flags.targetDir, false, void 0, void 0, writingStyle, mode);
+        const piExitCode = await runSelectedPi({
+          operation: "update",
+          targetDir: flags.targetDir,
+          writingStyle,
+          modePreference: mode,
+          playwrightCapability: updateCapability
+        });
         process.exitCode = piExitCode;
         persistSuccessfulGlobalMode(mode, flags.targetDir, flags.dryRun, piExitCode);
         return;
@@ -7685,7 +7810,8 @@ Flags disponibles: jorgex-stack --help`
           targetDir: flags.targetDir,
           dryRun: flags.dryRun,
           yes: true,
-          mode
+          mode,
+          ...updateCapability === void 0 ? {} : { playwrightCapability: updateCapability }
         });
         if (code !== 0) {
           process.exitCode = code;
@@ -7701,12 +7827,35 @@ Flags disponibles: jorgex-stack --help`
         flags.targetDir === void 0
       );
       process.exitCode = result.exitCode;
+      let playwrightReconciled = false;
+      if (result.exitCode === 0 && result.playwrightCapability !== void 0) {
+        updateCapability = result.playwrightCapability;
+        if (fileRuntimes.length > 0 && canSync) {
+          const code = await runInstall({
+            runtimes: fileRuntimes,
+            writingStyle,
+            targetDir: flags.targetDir,
+            dryRun: false,
+            yes: true,
+            mode,
+            playwrightCapability: updateCapability
+          });
+          process.exitCode = Math.max(process.exitCode ?? 0, code);
+          playwrightReconciled = true;
+        }
+      }
       if (result.exitCode === 0 && runtimes.includes("pi")) {
-        process.exitCode = Math.max(process.exitCode, await runSelectedPi("update", flags.targetDir, false, void 0, void 0, writingStyle, mode));
+        process.exitCode = Math.max(process.exitCode ?? 0, await runSelectedPi({
+          operation: "update",
+          targetDir: flags.targetDir,
+          writingStyle,
+          modePreference: mode,
+          playwrightCapability: updateCapability
+        }));
       }
       if (result.syncRequired && fileRuntimes.length > 0 && (result.exitCode !== 0 || !canSync)) {
         p6.log.warn("Skills/stack actualizados, pero el sync con los runtimes sigue pendiente. Ejecuta jorgex-stack sync --mode human|programmatic.");
-      } else if (result.exitCode === 0 && result.syncRequired && fileRuntimes.length > 0 && canSync && !flags.yes && process.stdout.isTTY) {
+      } else if (!playwrightReconciled && result.exitCode === 0 && result.syncRequired && fileRuntimes.length > 0 && canSync && !flags.yes && process.stdout.isTTY) {
         const apply = await p6.confirm({ message: "\xBFRe-aplicar a los runtimes ahora? (sync)" });
         if (!p6.isCancel(apply) && apply) {
           process.exitCode = await runInstall({
@@ -7715,7 +7864,8 @@ Flags disponibles: jorgex-stack --help`
             targetDir: flags.targetDir,
             dryRun: false,
             yes: false,
-            mode
+            mode,
+            ...updateCapability === void 0 ? {} : { playwrightCapability: updateCapability }
           });
         } else {
           console.log("Sin aplicar. Cuando quieras: jorgex-stack sync");
@@ -7738,7 +7888,7 @@ Flags disponibles: jorgex-stack --help`
       }
       const fileRuntimes = runtimes.filter(isFileManagedRuntime);
       let code = fileRuntimes.length > 0 ? await runModelsPicker({ yes: flags.yes, runtimes: fileRuntimes }) : 0;
-      if (runtimes.includes("pi")) code = Math.max(code, await runSelectedPi("models", flags.targetDir));
+      if (runtimes.includes("pi")) code = Math.max(code, await runSelectedPi({ operation: "models", targetDir: flags.targetDir }));
       process.exitCode = code;
       if (code === 0 && fileRuntimes.length > 0 && !flags.yes && process.stdout.isTTY) {
         const apply = await p6.confirm({ message: "\xBFAplicar ahora los modelos a los agentes instalados? (sync)" });
@@ -7753,7 +7903,15 @@ Flags disponibles: jorgex-stack --help`
           }
           const mode = await resolveInstallMode(flags, false);
           if (mode === null) return;
-          process.exitCode = await runInstall({ runtimes: fileRuntimes, targetDir: flags.targetDir, dryRun: flags.dryRun, yes: false, mode });
+          const playwrightCapability = shouldInspectPlaywrightCapability(flags.targetDir, flags.dryRun) ? inspectPlaywrightCapability() : void 0;
+          process.exitCode = await runInstall({
+            runtimes: fileRuntimes,
+            targetDir: flags.targetDir,
+            dryRun: flags.dryRun,
+            yes: false,
+            mode,
+            ...playwrightCapability === void 0 ? {} : { playwrightCapability }
+          });
         } else {
           console.log("Sin aplicar. Cuando quieras: jorgex-stack sync");
         }