jorgex-stack 1.9.40 → 1.9.42

package/dist/cli.js

@@ -401,6 +401,12 @@ function readTomlSection(existing, section) {
   if (found === null) return null;
   return lines.slice(found.start + 1, found.end).join("\n");
 }
+function hasTomlChildSection(existing, section) {
+  if (existing === null) return false;
+  const lines = existing.split(/\r?\n/);
+  const mask = multilineStringMask(lines);
+  return lines.some((line, index) => !mask[index] && headerName(line)?.startsWith(`${section}.`) === true);
+}
 
 // src/lib/writing-style.ts
 var DEFAULT_SECTION = "writing-style-default";
@@ -830,19 +836,6 @@ function upsertNativeHooks(existing, canonical, scriptsDir, mapMatcher = (m) =>
   });
 }
 
-// src/lib/git-guard.ts
-var DESTRUCTIVE_GIT_DENY = [
-  "git reset*",
-  "git clean*",
-  "git checkout -- *",
-  "git restore*",
-  "git push*--force*",
-  // posición libre: caza "git push origin main --force[-with-lease]"
-  "git push -f*",
-  "git switch*--discard-changes*"
-];
-var GIT_GUARD_SCRIPT = "block-destructive-git.cjs";
-
 // src/lib/quality-capabilities.ts
 var QUALITY_CAPABILITY_NAMESPACE = "jorgex.quality.capabilities";
 var QUALITY_CAPABILITY_VERSION = 1;
@@ -917,9 +910,36 @@ function localQualityStatus(profile, status) {
 }
 
 // src/adapters/opencode.ts
+var gitReadPrefix = "git --no-pager -c core.fsmonitor=false -c log.showSignature=false";
+var gitReadCommands = [
+  "diff",
+  "diff --stat",
+  "diff --name-only",
+  "diff --cached",
+  "log",
+  "log --oneline -10"
+].map((action) => `${gitReadPrefix} ${action} --no-ext-diff --no-textconv --end-of-options`);
 function yamlString(value) {
   return JSON.stringify(value);
 }
+function readMcpConfig(file) {
+  let content;
+  try {
+    content = fs6.readFileSync(file, "utf8");
+  } catch (error) {
+    const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
+    if (code === "ENOENT") return null;
+    throw new Error(`OpenCode: no se pudo leer la configuraci\xF3n MCP en ${file} (${code}).`);
+  }
+  if (content.trim() !== "") {
+    try {
+      if (objectValue(JSON.parse(content)) === null) throw new Error();
+    } catch {
+      throw new Error(`OpenCode: la configuraci\xF3n MCP en ${file} debe contener un objeto JSON v\xE1lido.`);
+    }
+  }
+  return content;
+}
 function isManagedOptionalStdioServer(server, value) {
   if (!server.optional || server.transport !== "stdio" || value === null || typeof value !== "object" || Array.isArray(value)) {
     return false;
@@ -940,6 +960,31 @@ var PRIMARY_LIMIT_PREFIX = `provider.openai.models.${PRIMARY_MODEL_ID}.limit`;
 function objectValue(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+function isCompatibleContext7Server(server, value) {
+  const current = objectValue(value);
+  if (server.transport !== "http" || typeof server.url !== "string" || current === null) return false;
+  return current.type === "remote" && current.url === server.url && (current.enabled === void 0 || current.enabled === true);
+}
+function canonicalContext7Server(server) {
+  const headers = {};
+  for (const [key, raw] of Object.entries(server.headers ?? {})) {
+    const envRef = /^\$\{(\w+)\}$/.exec(raw);
+    headers[key] = envRef ? `{env:${envRef[1]}}` : raw;
+  }
+  return {
+    type: "remote",
+    url: server.url,
+    ...Object.keys(headers).length > 0 ? { headers } : {}
+  };
+}
+function isCanonicalContext7Server(server, value) {
+  return isCompatibleContext7Server(server, value) && isDeepStrictEqual(value, canonicalContext7Server(server));
+}
+function assertCompatibleContext7(server, value) {
+  if (value !== void 0 && !isCompatibleContext7Server(server, value)) {
+    throw new Error("OpenCode: MCP 'context7' entra en conflicto con una definici\xF3n existente (endpoint, tipo o estado nativo incompatible). Conserva la configuraci\xF3n y corrige el conflicto antes de reintentar.");
+  }
+}
 function ensureObject(parent, key, fieldPath) {
   if (parent[key] === void 0) parent[key] = {};
   const value = objectValue(parent[key]);
@@ -1015,15 +1060,20 @@ var opencodeAdapter = {
       const tierModel = resolveAgentModel(models, agent.name, agent.tier);
       lines.push(`model: ${tierModel.model}`);
       if (tierModel.variant) lines.push(`variant: ${tierModel.variant}`);
-      lines.push("permission:");
-      lines.push(`  edit: ${agent.readonly ? "deny" : "allow"}`);
+      if (agent.readonly || agent.bash !== "full" || !agent.spawn) lines.push("permission:");
+      if (agent.readonly) lines.push("  edit: deny");
       if (agent.bash === "none") lines.push("  bash: deny");
-      else if (agent.bash === "git-read") lines.push('  bash:\n    "git diff*": allow\n    "git log*": allow');
-      else {
-        const deny = DESTRUCTIVE_GIT_DENY.map((p7) => `    ${yamlString(p7)}: deny`).join("\n");
-        lines.push(`  bash:
-    "*": allow
-${deny}`);
+      else if (agent.bash === "git-read") {
+        lines.push('  bash:\n    "*": deny');
+        for (const command of gitReadCommands) {
+          lines.push(`    ${yamlString(command)}: allow`, `    ${yamlString(`${command} *`)}: allow`);
+        }
+        const permission = objectValue(loadCanonicalDefaults(stackRoot())["opencode"]?.permission);
+        const bash = objectValue(permission?.bash);
+        if (bash === null) throw new Error("OpenCode: canonical Bash policy is required for git-read agents.");
+        for (const [pattern, decision] of Object.entries(bash)) {
+          if (decision === "deny") lines.push(`    ${yamlString(pattern)}: deny`);
+        }
       }
       if (!agent.spawn) lines.push("  task: deny");
     }
@@ -1033,7 +1083,11 @@ ${deny}`);
         content: `---
 ${lines.join("\n")}
 ---
-${agent.body}`,
+${agent.body}${agent.bash === "git-read" ? `
+
+Use only these read-only Git command prefixes; put refs and paths after --end-of-options:
+${gitReadCommands.map((command) => `- \`${command}\``).join("\n")}
+` : ""}`,
         kind: "agent"
       }
     ];
@@ -1113,12 +1167,19 @@ ${agent.body}`,
   planMainConfig(canonical, ctx) {
     const file = path9.join(ctx.configDir, "opencode.json");
     const { pluginsDir } = this.paths(ctx.configDir);
-    const original = readTextIfExists(file);
+    const original = readMcpConfig(file);
     const contentSource = original === null || original.trim() === "" ? null : original;
     const isFreshConfig = contentSource === null;
     const mcpOwnership = [];
     const primaryModelOwnership = [];
     const content = upsertJson(contentSource, (root) => {
+      const rawMcp = root["mcp"];
+      if (rawMcp !== void 0 && objectValue(rawMcp) === null) {
+        throw new Error("OpenCode: la clave 'mcp' debe ser un objeto; corr\xEDgela antes de reintentar sync.");
+      }
+      const existingMcp = rawMcp;
+      const context7 = canonical.servers.context7;
+      if (context7 !== void 0) assertCompatibleContext7(context7, existingMcp?.["context7"]);
       root["$schema"] ??= "https://opencode.ai/config.json";
       if (root[PRIMARY_MODEL_FIELD] === void 0) {
         root[PRIMARY_MODEL_FIELD] = PRIMARY_MODEL;
@@ -1145,13 +1206,19 @@ ${agent.body}`,
       if (isFreshConfig && defaults?.["permission"] !== void 0) {
         root["permission"] = defaults["permission"];
         ctx.warnings.push(
-          "OpenCode: fresh config enables read-anywhere via external_directory:*; edits, web egress and arbitrary bash remain approval-gated, but broad local reads can expose secrets not covered by deny rules."
+          "OpenCode: fresh config allows ordinary reads, edits, web access and Bash; sensitive operations ask, while protected paths and obvious destruction are denied. Native matching is not a universal filesystem sandbox."
         );
       }
       const mcp = root["mcp"] ??= {};
       for (const [name, server] of Object.entries(canonical.servers)) {
         const existing = mcp[name];
         const owned = ctx.ownedMcpServers?.has(name) === true;
+        if (name === "context7" && existing !== void 0) {
+          if (owned && !isCanonicalContext7Server(server, existing)) {
+            mcpOwnership.push({ server: name, owned: false });
+          }
+          continue;
+        }
         if (!isCanonicalMcpServerEnabled(name, server, ctx.enabledMcpServers)) {
           if (owned) {
             if (isManagedOptionalStdioServer(server, existing)) delete mcp[name];
@@ -1188,6 +1255,9 @@ ${agent.body}`,
             url: server.url,
             ...Object.keys(headers).length > 0 ? { headers } : {}
           };
+          if (name === "context7" && existing === void 0 && !owned) {
+            mcpOwnership.push({ server: name, owned: true });
+          }
         }
       }
       if (pluginsDir !== null) {
@@ -1222,7 +1292,7 @@ ${agent.body}`,
       actions.push({ kind: "write", target: systemPromptFile, content });
     }
     const configFile = path9.join(ctx.configDir, "opencode.json");
-    const config = readTextIfExists(configFile);
+    const config = readMcpConfig(configFile);
     if (config !== null) {
       const mcpOwnership = [];
       const primaryModelOwnership = [];
@@ -1259,9 +1329,22 @@ ${agent.body}`,
         for (const field of managedFields) {
           if (ctx.ownedPrimaryModelFields?.has(field) === true) primaryModelOwnership.push({ field, owned: false });
         }
-        const mcpBlock = root["mcp"];
-        if (mcpBlock) {
+        const rawMcpBlock = root["mcp"];
+        if (rawMcpBlock !== void 0 && objectValue(rawMcpBlock) === null) {
+          throw new Error("OpenCode: la clave 'mcp' debe ser un objeto; corr\xEDgela antes de reintentar uninstall.");
+        }
+        const mcpBlock = rawMcpBlock;
+        if (mcpBlock !== void 0) {
           for (const [name, server] of Object.entries(mcp.servers)) {
+            if (name === "context7") {
+              const canonical = isCanonicalContext7Server(server, mcpBlock[name]);
+              const owned = ctx.ownedMcpServers?.has(name) === true;
+              if (owned) {
+                if (canonical) delete mcpBlock[name];
+                mcpOwnership.push({ server: name, owned: false });
+              }
+              continue;
+            }
             if (!server.optional) {
               delete mcpBlock[name];
               continue;
@@ -1318,6 +1401,11 @@ ${agent.body}`,
 import path10 from "path";
 import fs7 from "fs";
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
+
+// src/lib/git-guard.ts
+var GIT_GUARD_SCRIPT = "block-destructive-git.cjs";
+
+// src/adapters/claude-code.ts
 function yamlString2(value) {
   return JSON.stringify(value);
 }
@@ -1331,6 +1419,47 @@ var ENGRAM_AGENT_TOOLS = [
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+function readMcpConfig2(file) {
+  let content;
+  try {
+    content = fs7.readFileSync(file, "utf8");
+  } catch (error) {
+    const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
+    if (code === "ENOENT") return null;
+    throw new Error(`Claude Code: no se pudo leer la configuraci\xF3n MCP en ${file} (${code}).`);
+  }
+  if (content.trim() !== "") {
+    try {
+      if (!isRecord(JSON.parse(content))) throw new Error();
+    } catch {
+      throw new Error(`Claude Code: la configuraci\xF3n MCP en ${file} debe contener un objeto JSON v\xE1lido.`);
+    }
+  }
+  return content;
+}
+function isCompatibleContext7Server2(server, value) {
+  if (server.transport !== "http" || typeof server.url !== "string" || !isRecord(value)) return false;
+  return value.type === "http" && value.url === server.url;
+}
+function canonicalContext7Server2(server) {
+  const headers = {};
+  for (const [key, raw] of Object.entries(server.headers ?? {})) {
+    headers[key] = /^\$\{(\w+)\}$/.test(raw) ? "" : raw;
+  }
+  return {
+    type: "http",
+    url: server.url,
+    ...Object.keys(headers).length > 0 ? { headers } : {}
+  };
+}
+function isCanonicalContext7Server2(server, value) {
+  return isCompatibleContext7Server2(server, value) && isDeepStrictEqual2(value, canonicalContext7Server2(server));
+}
+function assertCompatibleContext72(server, value) {
+  if (value !== void 0 && !isCompatibleContext7Server2(server, value)) {
+    throw new Error("Claude Code: MCP 'context7' entra en conflicto con una definici\xF3n existente (endpoint o tipo incompatible). Conserva la configuraci\xF3n y corrige el conflicto antes de reintentar.");
+  }
+}
 function hasClaudeManualApproval(configDir) {
   const content = readTextIfExists(path10.join(configDir, "settings.json"));
   if (content === null) return false;
@@ -1476,11 +1605,24 @@ ${agent.body}`,
   planMainConfig(canonical, ctx) {
     const file = path10.join(path10.dirname(ctx.configDir), `${path10.basename(ctx.configDir)}.json`);
     const mcpOwnership = [];
-    const content = upsertJson(readTextIfExists(file), (root) => {
+    const content = upsertJson(readMcpConfig2(file), (root) => {
+      const rawServers = root["mcpServers"];
+      if (rawServers !== void 0 && !isRecord(rawServers)) {
+        throw new Error("Claude Code: la clave 'mcpServers' debe ser un objeto; corr\xEDgela antes de reintentar sync.");
+      }
+      const existingServers = rawServers;
+      const context7 = canonical.servers.context7;
+      if (context7 !== void 0) assertCompatibleContext72(context7, existingServers?.["context7"]);
       const servers = root["mcpServers"] ??= {};
       for (const [name, server] of Object.entries(canonical.servers)) {
         const existing = servers[name];
         const owned = ctx.ownedMcpServers?.has(name) === true;
+        if (name === "context7" && existing !== void 0) {
+          if (owned && !isCanonicalContext7Server2(server, existing)) {
+            mcpOwnership.push({ server: name, owned: false });
+          }
+          continue;
+        }
         if (!isCanonicalMcpServerEnabled(name, server, ctx.enabledMcpServers)) {
           if (owned) {
             if (isManagedOptionalStdioServer2(server, existing)) delete servers[name];
@@ -1524,6 +1666,9 @@ ${agent.body}`,
             url: server.url,
             ...Object.keys(headers).length > 0 ? { headers } : {}
           };
+          if (name === "context7" && existing === void 0 && !owned) {
+            mcpOwnership.push({ server: name, owned: true });
+          }
         }
       }
     });
@@ -1546,13 +1691,26 @@ ${agent.body}`,
       }
     }
     const mainFile = path10.join(path10.dirname(ctx.configDir), `${path10.basename(ctx.configDir)}.json`);
-    const main2 = readTextIfExists(mainFile);
+    const main2 = readMcpConfig2(mainFile);
     if (main2 !== null) {
       const mcpOwnership = [];
       const content = upsertJson(main2, (root) => {
-        const servers = root["mcpServers"];
-        if (!servers) return;
+        const rawServers = root["mcpServers"];
+        if (rawServers === void 0) return;
+        if (!isRecord(rawServers)) {
+          throw new Error("Claude Code: la clave 'mcpServers' debe ser un objeto; corr\xEDgela antes de reintentar uninstall.");
+        }
+        const servers = rawServers;
         for (const [name, server] of Object.entries(mcp.servers)) {
+          if (name === "context7") {
+            const canonical = isCanonicalContext7Server2(server, servers[name]);
+            const owned = ctx.ownedMcpServers?.has(name) === true;
+            if (owned) {
+              if (canonical) delete servers[name];
+              mcpOwnership.push({ server: name, owned: false });
+            }
+            continue;
+          }
           if (!server.optional) {
             delete servers[name];
             continue;
@@ -1576,6 +1734,15 @@ import fs8 from "fs";
 function tomlString(value) {
   return JSON.stringify(value);
 }
+function readMcpConfig3(file) {
+  try {
+    return fs8.readFileSync(file, "utf8");
+  } catch (error) {
+    const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
+    if (code === "ENOENT") return null;
+    throw new Error(`Codex: no se pudo leer la configuraci\xF3n MCP en ${file} (${code}).`);
+  }
+}
 var PRIMARY_MODEL2 = '"gpt-5.6-sol"';
 var PRIMARY_CONTEXT_WINDOW = "872000";
 var PRIMARY_MODEL_FIELD2 = "model";
@@ -1612,6 +1779,67 @@ var CODEX_JSON_STRING_ARRAY = String.raw`\[(?:\s*${CODEX_JSON_STRING}(?:\s*,\s*$
 var CODEX_KEY = String.raw`(?:[A-Za-z0-9_-]+|${CODEX_JSON_STRING})`;
 var CODEX_ASSIGNMENT = new RegExp(String.raw`^\s*(${CODEX_KEY})\s*=\s*(${CODEX_JSON_STRING_ARRAY}|${CODEX_JSON_VALUE})\s*(?:#.*)?$`);
 var CODEX_HEADER = new RegExp(String.raw`^\[\s*(${CODEX_KEY}(?:\s*\.\s*${CODEX_KEY})*)\s*\]\s*(?:#.*)?$`);
+function tomlAssignment(section, key) {
+  const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const keyPattern = new RegExp(`^\\s*(?:${escaped}|"${escaped}"|'${escaped}')\\s*=`);
+  const lines = section.split(/\r?\n/);
+  const mask = multilineStringMask(lines);
+  for (const [index, line] of lines.entries()) {
+    if (mask[index] || !keyPattern.test(line)) continue;
+    const match = CODEX_ASSIGNMENT.exec(line);
+    if (match) return { present: true, raw: match[2] };
+    const equals = line.indexOf("=");
+    const raw = equals === -1 ? void 0 : line.slice(equals + 1).trim().replace(/\s+#.*$/, "");
+    return { present: true, ...raw?.startsWith("'") && raw.endsWith("'") ? { raw } : {} };
+  }
+  return { present: false };
+}
+function parseTomlString(raw) {
+  if (raw === void 0) return void 0;
+  const value = raw.trim();
+  if (value.startsWith('"')) {
+    try {
+      const parsed = JSON.parse(value);
+      return typeof parsed === "string" ? parsed : void 0;
+    } catch {
+      return void 0;
+    }
+  }
+  if (value.length >= 2 && value.startsWith("'") && value.endsWith("'")) {
+    return value.slice(1, -1);
+  }
+  return void 0;
+}
+function context7HttpSection(server) {
+  const body = [`url = ${tomlString(server.url)}`];
+  const envHeaders = [];
+  const literalHeaders = [];
+  for (const [key, raw] of Object.entries(server.headers ?? {})) {
+    const envRef = /^\$\{(\w+)\}$/.exec(raw);
+    if (envRef) envHeaders.push(`${tomlString(key)} = ${tomlString(envRef[1])}`);
+    else literalHeaders.push(`${tomlString(key)} = ${tomlString(raw)}`);
+  }
+  if (literalHeaders.length > 0) body.push(`http_headers = { ${literalHeaders.join(", ")} }`);
+  if (envHeaders.length > 0) body.push(`env_http_headers = { ${envHeaders.join(", ")} }`);
+  return body.join("\n");
+}
+function isCompatibleContext7Server3(server, section) {
+  if (server.transport !== "http" || typeof server.url !== "string" || section === null) return false;
+  const url = tomlAssignment(section, "url");
+  const command = tomlAssignment(section, "command");
+  const type = tomlAssignment(section, "type");
+  const enabled = tomlAssignment(section, "enabled");
+  const declaredType = type.present ? parseTomlString(type.raw) : "http";
+  return url.present && parseTomlString(url.raw) === server.url && !command.present && declaredType === "http" && (!enabled.present || enabled.raw?.trim() === "true");
+}
+function isCanonicalContext7Server3(server, section, config) {
+  return isCompatibleContext7Server3(server, section) && section.trim() === context7HttpSection(server) && !hasTomlChildSection(config, "mcp_servers.context7");
+}
+function assertCompatibleContext73(server, section, config) {
+  if (section === null && hasTomlChildSection(config, "mcp_servers.context7") || section !== null && !isCompatibleContext7Server3(server, section)) {
+    throw new Error("Codex: MCP 'context7' entra en conflicto con una definici\xF3n existente (endpoint, tipo o estado nativo incompatible). Conserva la configuraci\xF3n y corrige el conflicto antes de reintentar.");
+  }
+}
 var CODEX_PERMISSION_HEADERS = {
   base: "permissions.jorgex-read-anywhere",
   filesystem: "permissions.jorgex-read-anywhere.filesystem",
@@ -1851,11 +2079,15 @@ ${body}`
   },
   planMainConfig(canonical, ctx) {
     const file = path11.join(ctx.configDir, "config.toml");
-    const original = readTextIfExists(file);
+    const original = readMcpConfig3(file);
     const contentSource = original === null || original.trim() === "" ? null : original;
     let content = contentSource;
     const mcpOwnership = [];
     const primaryModelOwnership = [];
+    const context7 = canonical.servers.context7;
+    if (context7 !== void 0) {
+      assertCompatibleContext73(context7, readTomlSection(contentSource, "mcp_servers.context7"), contentSource);
+    }
     if (contentSource === null) {
       const defaults = loadCanonicalDefaults(ctx.stackDir)["codex"] ?? {};
       for (const [key, value] of Object.entries(defaults)) {
@@ -1899,6 +2131,12 @@ ${body}`
       const section = `mcp_servers.${name}`;
       const existing = readTomlSection(content, section);
       const owned = ctx.ownedMcpServers?.has(name) === true;
+      if (name === "context7" && existing !== null) {
+        if (owned && !isCanonicalContext7Server3(server, existing, content)) {
+          mcpOwnership.push({ server: name, owned: false });
+        }
+        continue;
+      }
       if (!isCanonicalMcpServerEnabled(name, server, ctx.enabledMcpServers)) {
         if (owned) {
           if (isManagedOptionalStdioServer3(server, existing)) content = removeTomlSection(content, section);
@@ -1947,6 +2185,9 @@ args = [${(server.args ?? []).map(tomlString).join(", ")}]`);
         if (literalPairs.length > 0) body.push(`http_headers = { ${literalPairs.join(", ")} }`);
         if (refPairs.length > 0) body.push(`env_http_headers = { ${refPairs.join(", ")} }`);
         content = upsertTomlSection(content, section, body.join("\n"));
+        if (name === "context7" && existing === null && !owned) {
+          mcpOwnership.push({ server: name, owned: true });
+        }
       }
     }
     if (content === null) return [];
@@ -1968,7 +2209,7 @@ args = [${(server.args ?? []).map(tomlString).join(", ")}]`);
       actions.push({ kind: "write", target: systemPromptFile, content });
     }
     const configFile = path11.join(ctx.configDir, "config.toml");
-    const config = readTextIfExists(configFile);
+    const config = readMcpConfig3(configFile);
     if (config !== null) {
       let content = config;
       const primaryModelOwnership = [];
@@ -1983,6 +2224,18 @@ args = [${(server.args ?? []).map(tomlString).join(", ")}]`);
       const mcpOwnership = [];
       for (const [name, server] of Object.entries(mcp.servers)) {
         const section = `mcp_servers.${name}`;
+        if (name === "context7") {
+          const current = readTomlSection(content, section);
+          const canonical = isCanonicalContext7Server3(server, current, content);
+          const owned = ctx.ownedMcpServers?.has(name) === true;
+          if (owned) {
+            if (canonical) {
+              content = removeTomlSection(content, section);
+            }
+            mcpOwnership.push({ server: name, owned: false });
+          }
+          continue;
+        }
         if (!server.optional) {
           content = removeTomlSection(content, section);
           continue;
@@ -2772,7 +3025,7 @@ function enabledMcpServers(runtime, explicitDevtoolsEnabled, useBrowserPreferenc
 function ownedMcpServers(runtime, useBrowserPreferences = true) {
   if (!useBrowserPreferences) return /* @__PURE__ */ new Set();
   const file = devtoolsMcpPreferenceFile();
-  return loadDevtoolsMcpOwnership(file, runtime, DEVTOOLS_MCP_SERVER) ? /* @__PURE__ */ new Set([DEVTOOLS_MCP_SERVER]) : /* @__PURE__ */ new Set();
+  return new Set([DEVTOOLS_MCP_SERVER, "context7"].filter((server) => loadDevtoolsMcpOwnership(file, runtime, server)));
 }
 function persistConfigurationOwnershipChanges(runtime, configDir, plan) {
   const latest = /* @__PURE__ */ new Map();
@@ -2804,17 +3057,29 @@ function makeContext(adapter, configDir, mode = DEFAULT_INSTALL_MODE_PREFERENCE,
     ownedPrimaryModelFields: useBrowserPreferences ? loadPrimaryModelOwnership(primaryModelOwnershipFile(), adapter.id, configDir) : /* @__PURE__ */ new Set()
   };
 }
-function buildPlan(adapter, ctx) {
+function buildContentPlan(adapter, ctx) {
   return [
     ...planSystemPrompt(adapter, ctx),
     ...planAgents(adapter, ctx),
     ...planSkills(adapter, ctx),
     ...planCommands(adapter, ctx),
     ...planHooks(adapter, ctx),
-    ...planMcp(adapter, ctx),
     ...planPlugins(adapter, ctx)
   ];
 }
+function buildPlan(adapter, ctx) {
+  return [...planMcp(adapter, ctx), ...buildContentPlan(adapter, ctx)];
+}
+function preflightSelectedMcpConfigs(runtimes, targetDir) {
+  for (const id of runtimes) {
+    const adapter = ADAPTERS[id];
+    if (!adapter) continue;
+    const detection = adapter.detect();
+    if (targetDir === void 0 && !detection.installed) continue;
+    const ctx = makeContext(adapter, targetDir ?? detection.configDir, void 0, targetDir === void 0);
+    if (ctx) planMcp(adapter, ctx);
+  }
+}
 function diffPlan(plan) {
   return plan.map((action) => {
     if (action.kind === "write") {
@@ -2873,6 +3138,13 @@ async function runInstall(opts) {
     p.log.error(error instanceof Error ? error.message : String(error));
     return 1;
   }
+  const modelMap = opts.runtimes.length > 0 ? loadModelMap() : {};
+  try {
+    preflightSelectedMcpConfigs(opts.runtimes, opts.targetDir);
+  } catch (error) {
+    p.log.error(error instanceof Error ? error.message : String(error));
+    return 1;
+  }
   let writingStyle;
   let preparedStyle;
   try {
@@ -2902,7 +3174,6 @@ async function runInstall(opts) {
   const playwrightCapability = opts.dryRun || !useManifest ? void 0 : opts.playwrightCapability ?? (shouldInspectPlaywright ? inspectPlaywrightCapability() : void 0);
   const effectivePlaywright = playwrightCapability?.effective;
   const plannedPlaywright = effectivePlaywright ?? (toolPlan !== null && toolPlan.actions.length > 0 ? false : void 0);
-  const modelMap = hasFileRuntimes ? loadModelMap() : {};
   if (preparedStyle !== void 0) {
     try {
       p.log.info(`Estilo de escritura: ${preparedStyle.sourcePath}${opts.dryRun ? " (instalaci\xF3n prevista; sin escrituras)" : ""}.`);
@@ -2967,7 +3238,7 @@ async function runInstall(opts) {
     let diff = diffPlan(plan);
     let creates = diff.filter((d) => d.status === "create");
     let updates = diff.filter((d) => d.status === "update");
-    let changes = [...creates, ...updates];
+    let changes = diff.filter((change) => change.status !== "unchanged");
     const prevManifest = useManifest ? readManifest().runtimes[id] : void 0;
     const orphans = canOrphan && prevManifest ? findOrphans(prevManifest.owned, current.targets) : [];
     p.log.step(`${adapter.name} \u2192 ${configDir}`);
@@ -3014,7 +3285,7 @@ async function runInstall(opts) {
       diff = diffPlan(plan);
       creates = diff.filter((d) => d.status === "create");
       updates = diff.filter((d) => d.status === "update");
-      changes = [...creates, ...updates];
+      changes = diff.filter((change) => change.status !== "unchanged");
     }
     const backup = useManifest ? createBackup([...updates.map((c) => c.action.target), ...orphans], `install-${id}`) : null;
     if (backup) p.log.info(`Backup: ${backup.id} (${backup.files.length} archivos)`);
@@ -3185,14 +3456,11 @@ var piAdapter = {
   injectEngramProtocol() {
     return true;
   },
-  // Pi 0.8.18 recompone estos marcadores desde su snapshot: no conoce los nuevos.
+  // La guía Context7 se habilita al adoptar su registro HTTP en Pi.
   adaptSystemPromptSections(sections) {
-    const { context7, playwright, "chrome-devtools": devtools, ...legacy } = sections;
-    return {
-      ...legacy,
-      "system-prompt": [legacy["system-prompt"], context7].filter(Boolean).join("\n\n"),
-      browser: [playwright, devtools].filter(Boolean).join("\n\n")
-    };
+    const modular = { ...sections };
+    delete modular.context7;
+    return modular;
   }
 };
 
@@ -4275,7 +4543,7 @@ async function runUninstall(opts) {
       if (!detection.installed) continue;
       const keepCtx = makeContext(keep, detection.configDir);
       if (!keepCtx) continue;
-      for (const action of buildPlan(keep, keepCtx)) retained.add(path26.resolve(action.target));
+      for (const action of buildContentPlan(keep, keepCtx)) retained.add(path26.resolve(action.target));
     }
   }
   for (const id of opts.runtimes) {
@@ -4293,13 +4561,20 @@ async function runUninstall(opts) {
     const ctx = makeContext(adapter, configDir, void 0, useBrowserPreferences);
     if (!ctx) continue;
     ctx.preserveEngram = !removeEngram;
-    const unmerge = adapter.planUnmerge(mcpForUnmerge, hooks, ctx);
+    let unmerge;
+    try {
+      unmerge = adapter.planUnmerge(mcpForUnmerge, hooks, ctx);
+    } catch (error) {
+      p2.log.error(`${adapter.name}: no se pudo planificar la limpieza en ${configDir} \u2014 ${error instanceof Error ? error.message : String(error)}.`);
+      exitCode = 1;
+      continue;
+    }
     const mergedTargets = new Set(unmerge.map((a) => path26.resolve(a.target)));
     const usingRealConfig = opts.targetDir === void 0;
     const prevOwned = usingRealConfig ? readManifest().runtimes[id]?.owned ?? [] : [];
     const pruneRoot = usingRealConfig ? HOME : path26.dirname(configDir);
     const planTargets = [
-      .../* @__PURE__ */ new Set([...buildPlan(adapter, ctx).map((a) => path26.resolve(a.target)), ...prevOwned.map((t) => path26.resolve(t))])
+      .../* @__PURE__ */ new Set([...buildContentPlan(adapter, ctx).map((a) => path26.resolve(a.target)), ...prevOwned.map((t) => path26.resolve(t))])
     ].filter((t) => !mergedTargets.has(t) && fs19.existsSync(t));
     const deleteTargets = planTargets.filter(
       (t) => !retained.has(t) && !(ctx.preserveEngram && path26.basename(t) === "engram.ts") && isContainedIn(t, pruneRoot)
@@ -4569,7 +4844,7 @@ async function runDoctor(options = {}) {
       pending = diffPlan(buildPlan(adapter, ctx)).filter((d) => d.status !== "unchanged").length;
     } catch (err) {
       p3.log.error(
-        `${adapter.name}: config ilegible en ${detection.configDir} \u2014 ${err instanceof Error ? err.message : err}`
+        `${adapter.name}: configuraci\xF3n incompatible o ilegible en ${detection.configDir} \u2014 ${err instanceof Error ? err.message : err}`
       );
       problems++;
       continue;
@@ -5856,16 +6131,16 @@ import { createHash as createHash2 } from "crypto";
 var pi_runtime_pin_default = {
   package: {
     name: "jorgex-pi",
-    version: "0.8.18",
-    source: "npm:jorgex-pi@0.8.18"
+    version: "0.8.20",
+    source: "npm:jorgex-pi@0.8.20"
   },
   provenance: {
-    commit: "61d676b300707d61840165616f0880d8c6588ce7"
+    commit: "c4d021382cd3b752eaa396044753ac7533b6645d"
   },
   tarball: {
-    bytes: 89122709,
-    sha256: "02e5577d95d19ae28de55c170d4b6b48e682fbe741c8eec26cd79587da2f829e",
-    sha512: "a9fa60be18b6a84dca6703bf38a1462482dd3ea00d9eb82aead06e9a86b3d92ce09b68da2968cb760d6b3ad8d5b2b36d53889bed227e7ea6791932ce25153220"
+    bytes: 89127646,
+    sha256: "c7bbb0dc587b10e8e04174589cc519ad7576d2cbbceb5d2d20614d313e1ee884",
+    sha512: "189480a4d812048b65466156479d1d89f7fa7044471ff6a076b710c0014b0e50eaa0261d7a2a8381a5e71a598be61fe2ed714b6b1dacd5a5f955b59a412009c0"
   }
 };
 
@@ -5880,6 +6155,7 @@ var PI_RUNTIME_CANDIDATE = {
     capabilities: [
       "foundation-contract-v1",
       "stack-snapshot-v2",
+      "modular-system-prompts-v1",
       "runtime-agents-v1",
       "permission-gated-tools-v1",
       "structured-questions-v1",
@@ -5887,6 +6163,7 @@ var PI_RUNTIME_CANDIDATE = {
       "goal-continuation-v1",
       "mcp-adapter-v1",
       "engram-runtime-tools-v1",
+      "context7-http-v1",
       "chrome-devtools-handoff-v1",
       "playwright-handoff-v1",
       "runner-json-v1",
@@ -7573,6 +7850,7 @@ Flags disponibles: jorgex-stack --help`
       p6.intro(`jorgex-stack ${command}${flags.dryRun ? " (dry-run)" : ""}`);
       try {
         assertSelectedPromptFiles(runtimes, flags.targetDir);
+        preflightSelectedMcpConfigs(fileRuntimes, flags.targetDir);
         const writingStyle = prepareWritingStyle(resolveWritingStyleFile({ targetDir: flags.targetDir }), { rootDir: flags.targetDir });
         if (flags.targetDir === void 0) {
           const errors = browserPreferenceErrors();