jorgex-stack 1.9.41 → 1.9.43

package/README.md

@@ -114,7 +114,7 @@ Programmatic mode does **not** provide:
 
 ### Pi runtime
 
-El canon de Stack y el paquete Pi adoptado mantienen una snapshot de 17 skills y 89 archivos. La identidad, procedencia e integridad del paquete adoptado son autoritativas en `src/lib/pi-runtime-pin.json`.
+El canon de Stack y el paquete Pi adoptado mantienen una snapshot de 17 árboles de skills con 89 archivos de skill. La identidad, procedencia e integridad del paquete adoptado son autoritativas en `src/lib/pi-runtime-pin.json`.
 
 Pi combines the frozen **snapshot v2** package with a Stack-owned shared projection. The version references that follow describe historical Stack/Pi transitions, not the current pin. The current pin, package integrity and lifecycle are maintained in [docs/references/pi-runtime.md](docs/references/pi-runtime.md) and `src/lib/pi-runtime-pin.json`; this README does not imply a future release.
 
@@ -128,7 +128,9 @@ pnpm dlx jorgex-stack@1.9.7 sync --agents pi
 pnpm dlx jorgex-stack@1.9.7 uninstall --agents pi
 ```
 
-Stack downloads the frozen registry tarball, verifies its exact size plus SHA-256/SHA-512, backs up Pi's `settings.json`, and only then asks Pi to install that local file. The exact artifact and integrity values are authoritative in `src/lib/pi-runtime-pin.json`, while the lifecycle remains authoritative in `src/lib/pi-runtime.ts`. Pi's own package-manager invocation is the narrow runtime exception to the repository's pnpm-only rule; the Stack lifecycle never launches npm directly. After the package is healthy, Stack projects the shared resources into Pi: marked `jorgex:system-prompt` and `jorgex:engram-protocol` sections in `~/.pi/agent/AGENTS.md`, canonical skills under `~/.agents/skills`, and `~/.pi/agent/prompts/lean-audit.md`. Pi 0.8.18 is a legacy projection: its adapter folds the Context7 text into the base system-prompt block and combines the selected browser guides in `jorgex:browser`; it does not provide a Context7 MCP server. For the file runtimes, Context7, Playwright and DevTools use independent managed sections. The global Playwright package and Chromium cache are shared by the machine; `--playwright-runtimes` controls which runtime receives the guide. The adopted Pi package implements and tests `playwright-handoff-v1` through `PI_CODING_AGENT_DIR/jorgex-pi/playwright.v1.json`. Historical package entries do not describe the current pin. Filters are applied only after this projection exists, so the package does not duplicate shared resources. Package ownership is recorded separately in `~/.jorgex-stack/pi-receipt.json`; projection ownership is recorded in `~/.jorgex-stack/pi-projection-receipt.json`. Package receipts reject manual, duplicate, divergent, partial, corrupt, copied-to-another-scope, or unknown-history state. Projection cleanup requires an exact scope-bound ownership receipt; DevTools conflicts preserve the handoff for review.
+Stack downloads the frozen registry tarball, verifies its exact size plus SHA-256/SHA-512, backs up Pi's `settings.json`, and only then asks Pi to install that local file. The exact artifact and integrity values are authoritative in `src/lib/pi-runtime-pin.json`, while the lifecycle remains authoritative in `src/lib/pi-runtime.ts`. Pi's own package-manager invocation is the narrow runtime exception to the repository's pnpm-only rule; the Stack lifecycle never launches npm directly. After the package is healthy, Stack projects the shared resources into Pi: marked `jorgex:system-prompt` and `jorgex:engram-protocol` sections in `~/.pi/agent/AGENTS.md`, canonical skills under `~/.agents/skills`, and `~/.pi/agent/prompts/lean-audit.md`. Pi 0.8.21 registers Context7 through an isolated in-memory HTTP bridge during bootstrap; `available` means configuration permits registration and does not imply an HTTP handshake. A conflict preserves the existing MCP file and blocks managed activation. No MCP configuration or credentials are written. For the file runtimes, Context7, Playwright and DevTools use independent managed sections. The global Playwright package and Chromium cache are shared by the machine; `--playwright-runtimes` controls which runtime receives the guide. The adopted Pi package implements and tests `playwright-handoff-v1` through `PI_CODING_AGENT_DIR/jorgex-pi/playwright.v1.json`. Historical package entries do not describe the current pin. Filters are applied only after this projection exists, so the package does not duplicate shared resources. Package ownership is recorded separately in `~/.jorgex-stack/pi-receipt.json`; projection ownership is recorded in `~/.jorgex-stack/pi-projection-receipt.json`. Package receipts reject manual, duplicate, divergent, partial, corrupt, copied-to-another-scope, or unknown-history state. Projection cleanup requires an exact scope-bound ownership receipt; DevTools conflicts preserve the handoff for review.
+
+The static `AGENTS.md` projected by Stack does not include Context7; Pi's native bootstrap adds that section after registering the isolated bridge. Pi never writes, owns or removes MCP files. In Claude Code, Codex and OpenCode, a compatible existing Context7 entry is preserved and removed only with explicit canonical Stack ownership.
 
 Historically, the published Pi 0.8.0 direct-package snapshot added `work-audit`: the snapshot grew from **17 to 18 skill trees** (96 to 97 files), and the active runtime allowlist grew from **16 to 17 skills**. The historical Pi 0.8.5 snapshot reference records 18 skill trees and 98 files; it does not describe the adopted pin. Reference F2-A is included while the private F1 skills remain preserved. `playwright-cli` remains in the snapshot but inactive because browser automation is a separate opt-in integration.
 
@@ -190,7 +192,7 @@ Daily operation:
 - `doctor` reports the Playwright CLI state (`disabled`, `healthy`, `missing:package`, `missing:browser`, `unreadable`, `broken`, `outdated`) and, when the opt-in package and browser cache are present, verifies one local headless Chromium launch against `about:blank`; it does not open external sites or repair state. An `unreadable` browser cache includes its exact path and filesystem error code so permissions or another local cause can be investigated. If either preference file is corrupt, doctor prints the exact path and the remedy (`Corrige o borra ese archivo antes de reintentar`) before any other browser check; in that case `install`/`uninstall`/`update`/`update --check` will abort with exit 1 until the file is fixed, so the corruption cannot be reconciled destructively.
 - `update --check` only inspects Playwright CLI when its preference is `enabled` (a binary appearing in `PATH` is not consent). It compares the installed version against the approved pin `0.1.18` — it does not consult npm latest, and a Playwright CLI binary-only update does not require `sync` afterwards.
 - `uninstall` preserves the global `@playwright/cli` package and all browser data by default; `--remove-playwright` removes the package only (never the browser cache, profiles, cookies, storage state, traces, screenshots or videos). If `pnpm remove --global @playwright/cli` exits non-zero, `uninstall` reports the failure instead of a success outro. For DevTools MCP, ownership is released only after the corresponding unmerge is applied; if no unmerge action is written, the ownership marker is preserved for a later retry.
-- `install`/`sync` also inject (and `disable`/`uninstall` remove) managed capability sections in `AGENTS.md` (OpenCode, Codex) or `CLAUDE.md` (Claude Code). File runtimes keep `jorgex:playwright`, `jorgex:chrome-devtools` and `jorgex:context7` independent; Pi 0.8.18 adapts them to its legacy `jorgex:browser`/base projection. User content outside managed markers is preserved. `--target-dir` never reads the real preferences, so by default no section is emitted in target-dir runs — but explicit flags like `--devtools` simulate the MCP entry (and its DevTools block) inside the temp target without touching the real global state, and `install --dry-run --playwright` projects the Playwright section into the plan preview without installing anything. If reconciliation detects a partial or ambiguous system-prompt state, the CLI exits non-zero and recommends repairing it with `sync` or a repeated install; no write is attempted before marker validation. See [docs/references/browser-automation.md](docs/references/browser-automation.md) §2.7 for the full lifecycle.
+- `install`/`sync` also inject (and `disable`/`uninstall` remove) managed capability sections in `AGENTS.md` (OpenCode, Codex) or `CLAUDE.md` (Claude Code). File runtimes keep `jorgex:playwright`, `jorgex:chrome-devtools` and `jorgex:context7` independent; Pi 0.8.21 projects the Context7 section after registering its isolated HTTP bridge and keeps the legacy `jorgex:browser` format for migration. User content outside managed markers is preserved. `--target-dir` never reads the real preferences, so by default no section is emitted in target-dir runs — but explicit flags like `--devtools` simulate the MCP entry (and its DevTools block) inside the temp target without touching the real global state, and `install --dry-run --playwright` projects the Playwright section into the plan preview without installing anything. If reconciliation detects a partial or ambiguous system-prompt state, the CLI exits non-zero and recommends repairing it with `sync` or a repeated install; no write is attempted before marker validation. See [docs/references/browser-automation.md](docs/references/browser-automation.md) §2.7 for the full lifecycle.
 
 ### Update: Interactive Flow
 

package/dist/cli.js

@@ -401,6 +401,12 @@ function readTomlSection(existing, section) {
   if (found === null) return null;
   return lines.slice(found.start + 1, found.end).join("\n");
 }
+function hasTomlChildSection(existing, section) {
+  if (existing === null) return false;
+  const lines = existing.split(/\r?\n/);
+  const mask = multilineStringMask(lines);
+  return lines.some((line, index) => !mask[index] && headerName(line)?.startsWith(`${section}.`) === true);
+}
 
 // src/lib/writing-style.ts
 var DEFAULT_SECTION = "writing-style-default";
@@ -916,6 +922,24 @@ var gitReadCommands = [
 function yamlString(value) {
   return JSON.stringify(value);
 }
+function readMcpConfig(file) {
+  let content;
+  try {
+    content = fs6.readFileSync(file, "utf8");
+  } catch (error) {
+    const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
+    if (code === "ENOENT") return null;
+    throw new Error(`OpenCode: no se pudo leer la configuraci\xF3n MCP en ${file} (${code}).`);
+  }
+  if (content.trim() !== "") {
+    try {
+      if (objectValue(JSON.parse(content)) === null) throw new Error();
+    } catch {
+      throw new Error(`OpenCode: la configuraci\xF3n MCP en ${file} debe contener un objeto JSON v\xE1lido.`);
+    }
+  }
+  return content;
+}
 function isManagedOptionalStdioServer(server, value) {
   if (!server.optional || server.transport !== "stdio" || value === null || typeof value !== "object" || Array.isArray(value)) {
     return false;
@@ -936,6 +960,31 @@ var PRIMARY_LIMIT_PREFIX = `provider.openai.models.${PRIMARY_MODEL_ID}.limit`;
 function objectValue(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+function isCompatibleContext7Server(server, value) {
+  const current = objectValue(value);
+  if (server.transport !== "http" || typeof server.url !== "string" || current === null) return false;
+  return current.type === "remote" && current.url === server.url && (current.enabled === void 0 || current.enabled === true);
+}
+function canonicalContext7Server(server) {
+  const headers = {};
+  for (const [key, raw] of Object.entries(server.headers ?? {})) {
+    const envRef = /^\$\{(\w+)\}$/.exec(raw);
+    headers[key] = envRef ? `{env:${envRef[1]}}` : raw;
+  }
+  return {
+    type: "remote",
+    url: server.url,
+    ...Object.keys(headers).length > 0 ? { headers } : {}
+  };
+}
+function isCanonicalContext7Server(server, value) {
+  return isCompatibleContext7Server(server, value) && isDeepStrictEqual(value, canonicalContext7Server(server));
+}
+function assertCompatibleContext7(server, value) {
+  if (value !== void 0 && !isCompatibleContext7Server(server, value)) {
+    throw new Error("OpenCode: MCP 'context7' entra en conflicto con una definici\xF3n existente (endpoint, tipo o estado nativo incompatible). Conserva la configuraci\xF3n y corrige el conflicto antes de reintentar.");
+  }
+}
 function ensureObject(parent, key, fieldPath) {
   if (parent[key] === void 0) parent[key] = {};
   const value = objectValue(parent[key]);
@@ -1118,12 +1167,19 @@ ${gitReadCommands.map((command) => `- \`${command}\``).join("\n")}
   planMainConfig(canonical, ctx) {
     const file = path9.join(ctx.configDir, "opencode.json");
     const { pluginsDir } = this.paths(ctx.configDir);
-    const original = readTextIfExists(file);
+    const original = readMcpConfig(file);
     const contentSource = original === null || original.trim() === "" ? null : original;
     const isFreshConfig = contentSource === null;
     const mcpOwnership = [];
     const primaryModelOwnership = [];
     const content = upsertJson(contentSource, (root) => {
+      const rawMcp = root["mcp"];
+      if (rawMcp !== void 0 && objectValue(rawMcp) === null) {
+        throw new Error("OpenCode: la clave 'mcp' debe ser un objeto; corr\xEDgela antes de reintentar sync.");
+      }
+      const existingMcp = rawMcp;
+      const context7 = canonical.servers.context7;
+      if (context7 !== void 0) assertCompatibleContext7(context7, existingMcp?.["context7"]);
       root["$schema"] ??= "https://opencode.ai/config.json";
       if (root[PRIMARY_MODEL_FIELD] === void 0) {
         root[PRIMARY_MODEL_FIELD] = PRIMARY_MODEL;
@@ -1157,6 +1213,12 @@ ${gitReadCommands.map((command) => `- \`${command}\``).join("\n")}
       for (const [name, server] of Object.entries(canonical.servers)) {
         const existing = mcp[name];
         const owned = ctx.ownedMcpServers?.has(name) === true;
+        if (name === "context7" && existing !== void 0) {
+          if (owned && !isCanonicalContext7Server(server, existing)) {
+            mcpOwnership.push({ server: name, owned: false });
+          }
+          continue;
+        }
         if (!isCanonicalMcpServerEnabled(name, server, ctx.enabledMcpServers)) {
           if (owned) {
             if (isManagedOptionalStdioServer(server, existing)) delete mcp[name];
@@ -1193,6 +1255,9 @@ ${gitReadCommands.map((command) => `- \`${command}\``).join("\n")}
             url: server.url,
             ...Object.keys(headers).length > 0 ? { headers } : {}
           };
+          if (name === "context7" && existing === void 0 && !owned) {
+            mcpOwnership.push({ server: name, owned: true });
+          }
         }
       }
       if (pluginsDir !== null) {
@@ -1227,7 +1292,7 @@ ${gitReadCommands.map((command) => `- \`${command}\``).join("\n")}
       actions.push({ kind: "write", target: systemPromptFile, content });
     }
     const configFile = path9.join(ctx.configDir, "opencode.json");
-    const config = readTextIfExists(configFile);
+    const config = readMcpConfig(configFile);
     if (config !== null) {
       const mcpOwnership = [];
       const primaryModelOwnership = [];
@@ -1264,9 +1329,22 @@ ${gitReadCommands.map((command) => `- \`${command}\``).join("\n")}
         for (const field of managedFields) {
           if (ctx.ownedPrimaryModelFields?.has(field) === true) primaryModelOwnership.push({ field, owned: false });
         }
-        const mcpBlock = root["mcp"];
-        if (mcpBlock) {
+        const rawMcpBlock = root["mcp"];
+        if (rawMcpBlock !== void 0 && objectValue(rawMcpBlock) === null) {
+          throw new Error("OpenCode: la clave 'mcp' debe ser un objeto; corr\xEDgela antes de reintentar uninstall.");
+        }
+        const mcpBlock = rawMcpBlock;
+        if (mcpBlock !== void 0) {
           for (const [name, server] of Object.entries(mcp.servers)) {
+            if (name === "context7") {
+              const canonical = isCanonicalContext7Server(server, mcpBlock[name]);
+              const owned = ctx.ownedMcpServers?.has(name) === true;
+              if (owned) {
+                if (canonical) delete mcpBlock[name];
+                mcpOwnership.push({ server: name, owned: false });
+              }
+              continue;
+            }
             if (!server.optional) {
               delete mcpBlock[name];
               continue;
@@ -1341,6 +1419,47 @@ var ENGRAM_AGENT_TOOLS = [
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+function readMcpConfig2(file) {
+  let content;
+  try {
+    content = fs7.readFileSync(file, "utf8");
+  } catch (error) {
+    const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
+    if (code === "ENOENT") return null;
+    throw new Error(`Claude Code: no se pudo leer la configuraci\xF3n MCP en ${file} (${code}).`);
+  }
+  if (content.trim() !== "") {
+    try {
+      if (!isRecord(JSON.parse(content))) throw new Error();
+    } catch {
+      throw new Error(`Claude Code: la configuraci\xF3n MCP en ${file} debe contener un objeto JSON v\xE1lido.`);
+    }
+  }
+  return content;
+}
+function isCompatibleContext7Server2(server, value) {
+  if (server.transport !== "http" || typeof server.url !== "string" || !isRecord(value)) return false;
+  return value.type === "http" && value.url === server.url;
+}
+function canonicalContext7Server2(server) {
+  const headers = {};
+  for (const [key, raw] of Object.entries(server.headers ?? {})) {
+    headers[key] = /^\$\{(\w+)\}$/.test(raw) ? "" : raw;
+  }
+  return {
+    type: "http",
+    url: server.url,
+    ...Object.keys(headers).length > 0 ? { headers } : {}
+  };
+}
+function isCanonicalContext7Server2(server, value) {
+  return isCompatibleContext7Server2(server, value) && isDeepStrictEqual2(value, canonicalContext7Server2(server));
+}
+function assertCompatibleContext72(server, value) {
+  if (value !== void 0 && !isCompatibleContext7Server2(server, value)) {
+    throw new Error("Claude Code: MCP 'context7' entra en conflicto con una definici\xF3n existente (endpoint o tipo incompatible). Conserva la configuraci\xF3n y corrige el conflicto antes de reintentar.");
+  }
+}
 function hasClaudeManualApproval(configDir) {
   const content = readTextIfExists(path10.join(configDir, "settings.json"));
   if (content === null) return false;
@@ -1486,11 +1605,24 @@ ${agent.body}`,
   planMainConfig(canonical, ctx) {
     const file = path10.join(path10.dirname(ctx.configDir), `${path10.basename(ctx.configDir)}.json`);
     const mcpOwnership = [];
-    const content = upsertJson(readTextIfExists(file), (root) => {
+    const content = upsertJson(readMcpConfig2(file), (root) => {
+      const rawServers = root["mcpServers"];
+      if (rawServers !== void 0 && !isRecord(rawServers)) {
+        throw new Error("Claude Code: la clave 'mcpServers' debe ser un objeto; corr\xEDgela antes de reintentar sync.");
+      }
+      const existingServers = rawServers;
+      const context7 = canonical.servers.context7;
+      if (context7 !== void 0) assertCompatibleContext72(context7, existingServers?.["context7"]);
       const servers = root["mcpServers"] ??= {};
       for (const [name, server] of Object.entries(canonical.servers)) {
         const existing = servers[name];
         const owned = ctx.ownedMcpServers?.has(name) === true;
+        if (name === "context7" && existing !== void 0) {
+          if (owned && !isCanonicalContext7Server2(server, existing)) {
+            mcpOwnership.push({ server: name, owned: false });
+          }
+          continue;
+        }
         if (!isCanonicalMcpServerEnabled(name, server, ctx.enabledMcpServers)) {
           if (owned) {
             if (isManagedOptionalStdioServer2(server, existing)) delete servers[name];
@@ -1534,6 +1666,9 @@ ${agent.body}`,
             url: server.url,
             ...Object.keys(headers).length > 0 ? { headers } : {}
           };
+          if (name === "context7" && existing === void 0 && !owned) {
+            mcpOwnership.push({ server: name, owned: true });
+          }
         }
       }
     });
@@ -1556,13 +1691,26 @@ ${agent.body}`,
       }
     }
     const mainFile = path10.join(path10.dirname(ctx.configDir), `${path10.basename(ctx.configDir)}.json`);
-    const main2 = readTextIfExists(mainFile);
+    const main2 = readMcpConfig2(mainFile);
     if (main2 !== null) {
       const mcpOwnership = [];
       const content = upsertJson(main2, (root) => {
-        const servers = root["mcpServers"];
-        if (!servers) return;
+        const rawServers = root["mcpServers"];
+        if (rawServers === void 0) return;
+        if (!isRecord(rawServers)) {
+          throw new Error("Claude Code: la clave 'mcpServers' debe ser un objeto; corr\xEDgela antes de reintentar uninstall.");
+        }
+        const servers = rawServers;
         for (const [name, server] of Object.entries(mcp.servers)) {
+          if (name === "context7") {
+            const canonical = isCanonicalContext7Server2(server, servers[name]);
+            const owned = ctx.ownedMcpServers?.has(name) === true;
+            if (owned) {
+              if (canonical) delete servers[name];
+              mcpOwnership.push({ server: name, owned: false });
+            }
+            continue;
+          }
           if (!server.optional) {
             delete servers[name];
             continue;
@@ -1586,6 +1734,15 @@ import fs8 from "fs";
 function tomlString(value) {
   return JSON.stringify(value);
 }
+function readMcpConfig3(file) {
+  try {
+    return fs8.readFileSync(file, "utf8");
+  } catch (error) {
+    const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
+    if (code === "ENOENT") return null;
+    throw new Error(`Codex: no se pudo leer la configuraci\xF3n MCP en ${file} (${code}).`);
+  }
+}
 var PRIMARY_MODEL2 = '"gpt-5.6-sol"';
 var PRIMARY_CONTEXT_WINDOW = "872000";
 var PRIMARY_MODEL_FIELD2 = "model";
@@ -1622,6 +1779,67 @@ var CODEX_JSON_STRING_ARRAY = String.raw`\[(?:\s*${CODEX_JSON_STRING}(?:\s*,\s*$
 var CODEX_KEY = String.raw`(?:[A-Za-z0-9_-]+|${CODEX_JSON_STRING})`;
 var CODEX_ASSIGNMENT = new RegExp(String.raw`^\s*(${CODEX_KEY})\s*=\s*(${CODEX_JSON_STRING_ARRAY}|${CODEX_JSON_VALUE})\s*(?:#.*)?$`);
 var CODEX_HEADER = new RegExp(String.raw`^\[\s*(${CODEX_KEY}(?:\s*\.\s*${CODEX_KEY})*)\s*\]\s*(?:#.*)?$`);
+function tomlAssignment(section, key) {
+  const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const keyPattern = new RegExp(`^\\s*(?:${escaped}|"${escaped}"|'${escaped}')\\s*=`);
+  const lines = section.split(/\r?\n/);
+  const mask = multilineStringMask(lines);
+  for (const [index, line] of lines.entries()) {
+    if (mask[index] || !keyPattern.test(line)) continue;
+    const match = CODEX_ASSIGNMENT.exec(line);
+    if (match) return { present: true, raw: match[2] };
+    const equals = line.indexOf("=");
+    const raw = equals === -1 ? void 0 : line.slice(equals + 1).trim().replace(/\s+#.*$/, "");
+    return { present: true, ...raw?.startsWith("'") && raw.endsWith("'") ? { raw } : {} };
+  }
+  return { present: false };
+}
+function parseTomlString(raw) {
+  if (raw === void 0) return void 0;
+  const value = raw.trim();
+  if (value.startsWith('"')) {
+    try {
+      const parsed = JSON.parse(value);
+      return typeof parsed === "string" ? parsed : void 0;
+    } catch {
+      return void 0;
+    }
+  }
+  if (value.length >= 2 && value.startsWith("'") && value.endsWith("'")) {
+    return value.slice(1, -1);
+  }
+  return void 0;
+}
+function context7HttpSection(server) {
+  const body = [`url = ${tomlString(server.url)}`];
+  const envHeaders = [];
+  const literalHeaders = [];
+  for (const [key, raw] of Object.entries(server.headers ?? {})) {
+    const envRef = /^\$\{(\w+)\}$/.exec(raw);
+    if (envRef) envHeaders.push(`${tomlString(key)} = ${tomlString(envRef[1])}`);
+    else literalHeaders.push(`${tomlString(key)} = ${tomlString(raw)}`);
+  }
+  if (literalHeaders.length > 0) body.push(`http_headers = { ${literalHeaders.join(", ")} }`);
+  if (envHeaders.length > 0) body.push(`env_http_headers = { ${envHeaders.join(", ")} }`);
+  return body.join("\n");
+}
+function isCompatibleContext7Server3(server, section) {
+  if (server.transport !== "http" || typeof server.url !== "string" || section === null) return false;
+  const url = tomlAssignment(section, "url");
+  const command = tomlAssignment(section, "command");
+  const type = tomlAssignment(section, "type");
+  const enabled = tomlAssignment(section, "enabled");
+  const declaredType = type.present ? parseTomlString(type.raw) : "http";
+  return url.present && parseTomlString(url.raw) === server.url && !command.present && declaredType === "http" && (!enabled.present || enabled.raw?.trim() === "true");
+}
+function isCanonicalContext7Server3(server, section, config) {
+  return isCompatibleContext7Server3(server, section) && section.trim() === context7HttpSection(server) && !hasTomlChildSection(config, "mcp_servers.context7");
+}
+function assertCompatibleContext73(server, section, config) {
+  if (section === null && hasTomlChildSection(config, "mcp_servers.context7") || section !== null && !isCompatibleContext7Server3(server, section)) {
+    throw new Error("Codex: MCP 'context7' entra en conflicto con una definici\xF3n existente (endpoint, tipo o estado nativo incompatible). Conserva la configuraci\xF3n y corrige el conflicto antes de reintentar.");
+  }
+}
 var CODEX_PERMISSION_HEADERS = {
   base: "permissions.jorgex-read-anywhere",
   filesystem: "permissions.jorgex-read-anywhere.filesystem",
@@ -1861,11 +2079,15 @@ ${body}`
   },
   planMainConfig(canonical, ctx) {
     const file = path11.join(ctx.configDir, "config.toml");
-    const original = readTextIfExists(file);
+    const original = readMcpConfig3(file);
     const contentSource = original === null || original.trim() === "" ? null : original;
     let content = contentSource;
     const mcpOwnership = [];
     const primaryModelOwnership = [];
+    const context7 = canonical.servers.context7;
+    if (context7 !== void 0) {
+      assertCompatibleContext73(context7, readTomlSection(contentSource, "mcp_servers.context7"), contentSource);
+    }
     if (contentSource === null) {
       const defaults = loadCanonicalDefaults(ctx.stackDir)["codex"] ?? {};
       for (const [key, value] of Object.entries(defaults)) {
@@ -1909,6 +2131,12 @@ ${body}`
       const section = `mcp_servers.${name}`;
       const existing = readTomlSection(content, section);
       const owned = ctx.ownedMcpServers?.has(name) === true;
+      if (name === "context7" && existing !== null) {
+        if (owned && !isCanonicalContext7Server3(server, existing, content)) {
+          mcpOwnership.push({ server: name, owned: false });
+        }
+        continue;
+      }
       if (!isCanonicalMcpServerEnabled(name, server, ctx.enabledMcpServers)) {
         if (owned) {
           if (isManagedOptionalStdioServer3(server, existing)) content = removeTomlSection(content, section);
@@ -1957,6 +2185,9 @@ args = [${(server.args ?? []).map(tomlString).join(", ")}]`);
         if (literalPairs.length > 0) body.push(`http_headers = { ${literalPairs.join(", ")} }`);
         if (refPairs.length > 0) body.push(`env_http_headers = { ${refPairs.join(", ")} }`);
         content = upsertTomlSection(content, section, body.join("\n"));
+        if (name === "context7" && existing === null && !owned) {
+          mcpOwnership.push({ server: name, owned: true });
+        }
       }
     }
     if (content === null) return [];
@@ -1978,7 +2209,7 @@ args = [${(server.args ?? []).map(tomlString).join(", ")}]`);
       actions.push({ kind: "write", target: systemPromptFile, content });
     }
     const configFile = path11.join(ctx.configDir, "config.toml");
-    const config = readTextIfExists(configFile);
+    const config = readMcpConfig3(configFile);
     if (config !== null) {
       let content = config;
       const primaryModelOwnership = [];
@@ -1993,6 +2224,18 @@ args = [${(server.args ?? []).map(tomlString).join(", ")}]`);
       const mcpOwnership = [];
       for (const [name, server] of Object.entries(mcp.servers)) {
         const section = `mcp_servers.${name}`;
+        if (name === "context7") {
+          const current = readTomlSection(content, section);
+          const canonical = isCanonicalContext7Server3(server, current, content);
+          const owned = ctx.ownedMcpServers?.has(name) === true;
+          if (owned) {
+            if (canonical) {
+              content = removeTomlSection(content, section);
+            }
+            mcpOwnership.push({ server: name, owned: false });
+          }
+          continue;
+        }
         if (!server.optional) {
           content = removeTomlSection(content, section);
           continue;
@@ -2782,7 +3025,7 @@ function enabledMcpServers(runtime, explicitDevtoolsEnabled, useBrowserPreferenc
 function ownedMcpServers(runtime, useBrowserPreferences = true) {
   if (!useBrowserPreferences) return /* @__PURE__ */ new Set();
   const file = devtoolsMcpPreferenceFile();
-  return loadDevtoolsMcpOwnership(file, runtime, DEVTOOLS_MCP_SERVER) ? /* @__PURE__ */ new Set([DEVTOOLS_MCP_SERVER]) : /* @__PURE__ */ new Set();
+  return new Set([DEVTOOLS_MCP_SERVER, "context7"].filter((server) => loadDevtoolsMcpOwnership(file, runtime, server)));
 }
 function persistConfigurationOwnershipChanges(runtime, configDir, plan) {
   const latest = /* @__PURE__ */ new Map();
@@ -2814,17 +3057,29 @@ function makeContext(adapter, configDir, mode = DEFAULT_INSTALL_MODE_PREFERENCE,
     ownedPrimaryModelFields: useBrowserPreferences ? loadPrimaryModelOwnership(primaryModelOwnershipFile(), adapter.id, configDir) : /* @__PURE__ */ new Set()
   };
 }
-function buildPlan(adapter, ctx) {
+function buildContentPlan(adapter, ctx) {
   return [
     ...planSystemPrompt(adapter, ctx),
     ...planAgents(adapter, ctx),
     ...planSkills(adapter, ctx),
     ...planCommands(adapter, ctx),
     ...planHooks(adapter, ctx),
-    ...planMcp(adapter, ctx),
     ...planPlugins(adapter, ctx)
   ];
 }
+function buildPlan(adapter, ctx) {
+  return [...planMcp(adapter, ctx), ...buildContentPlan(adapter, ctx)];
+}
+function preflightSelectedMcpConfigs(runtimes, targetDir) {
+  for (const id of runtimes) {
+    const adapter = ADAPTERS[id];
+    if (!adapter) continue;
+    const detection = adapter.detect();
+    if (targetDir === void 0 && !detection.installed) continue;
+    const ctx = makeContext(adapter, targetDir ?? detection.configDir, void 0, targetDir === void 0);
+    if (ctx) planMcp(adapter, ctx);
+  }
+}
 function diffPlan(plan) {
   return plan.map((action) => {
     if (action.kind === "write") {
@@ -2883,6 +3138,13 @@ async function runInstall(opts) {
     p.log.error(error instanceof Error ? error.message : String(error));
     return 1;
   }
+  const modelMap = opts.runtimes.length > 0 ? loadModelMap() : {};
+  try {
+    preflightSelectedMcpConfigs(opts.runtimes, opts.targetDir);
+  } catch (error) {
+    p.log.error(error instanceof Error ? error.message : String(error));
+    return 1;
+  }
   let writingStyle;
   let preparedStyle;
   try {
@@ -2912,7 +3174,6 @@ async function runInstall(opts) {
   const playwrightCapability = opts.dryRun || !useManifest ? void 0 : opts.playwrightCapability ?? (shouldInspectPlaywright ? inspectPlaywrightCapability() : void 0);
   const effectivePlaywright = playwrightCapability?.effective;
   const plannedPlaywright = effectivePlaywright ?? (toolPlan !== null && toolPlan.actions.length > 0 ? false : void 0);
-  const modelMap = hasFileRuntimes ? loadModelMap() : {};
   if (preparedStyle !== void 0) {
     try {
       p.log.info(`Estilo de escritura: ${preparedStyle.sourcePath}${opts.dryRun ? " (instalaci\xF3n prevista; sin escrituras)" : ""}.`);
@@ -2977,7 +3238,7 @@ async function runInstall(opts) {
     let diff = diffPlan(plan);
     let creates = diff.filter((d) => d.status === "create");
     let updates = diff.filter((d) => d.status === "update");
-    let changes = [...creates, ...updates];
+    let changes = diff.filter((change) => change.status !== "unchanged");
     const prevManifest = useManifest ? readManifest().runtimes[id] : void 0;
     const orphans = canOrphan && prevManifest ? findOrphans(prevManifest.owned, current.targets) : [];
     p.log.step(`${adapter.name} \u2192 ${configDir}`);
@@ -3024,7 +3285,7 @@ async function runInstall(opts) {
       diff = diffPlan(plan);
       creates = diff.filter((d) => d.status === "create");
       updates = diff.filter((d) => d.status === "update");
-      changes = [...creates, ...updates];
+      changes = diff.filter((change) => change.status !== "unchanged");
     }
     const backup = useManifest ? createBackup([...updates.map((c) => c.action.target), ...orphans], `install-${id}`) : null;
     if (backup) p.log.info(`Backup: ${backup.id} (${backup.files.length} archivos)`);
@@ -3195,14 +3456,11 @@ var piAdapter = {
   injectEngramProtocol() {
     return true;
   },
-  // Pi 0.8.18 recompone estos marcadores desde su snapshot: no conoce los nuevos.
+  // La guía Context7 se habilita al adoptar su registro HTTP en Pi.
   adaptSystemPromptSections(sections) {
-    const { context7, playwright, "chrome-devtools": devtools, ...legacy } = sections;
-    return {
-      ...legacy,
-      "system-prompt": [legacy["system-prompt"], context7].filter(Boolean).join("\n\n"),
-      browser: [playwright, devtools].filter(Boolean).join("\n\n")
-    };
+    const modular = { ...sections };
+    delete modular.context7;
+    return modular;
   }
 };
 
@@ -3218,22 +3476,30 @@ var ALLOWED_EXTERNAL_WRITES = /* @__PURE__ */ new Set([
   "models.json",
   "jorgex-pi/sol-lifecycle.v1.json"
 ]);
+var PERMISSIONS_EXTERNAL_WRITES = /* @__PURE__ */ new Set([
+  ...ALLOWED_EXTERNAL_WRITES,
+  "extensions/pi-permission-system/config.json",
+  "jorgex-pi/permissions-lifecycle.v1.json",
+  "jorgex-pi/permissions-backups"
+]);
 function sameRecord(left, right) {
   return JSON.stringify(left) === JSON.stringify(right);
 }
-function managedExternalWritesAreSafe(writes) {
-  if (writes.length !== ALLOWED_EXTERNAL_WRITES.size) return false;
+function managedExternalWritesAreSafe(writes, capabilities) {
+  if (!Array.isArray(capabilities)) return false;
+  const allowed = capabilities.includes("permissions-policy-v1") ? PERMISSIONS_EXTERNAL_WRITES : ALLOWED_EXTERNAL_WRITES;
+  if (writes.length !== allowed.size) return false;
   const seen = /* @__PURE__ */ new Set();
   for (const write of writes) {
     if (write === null || typeof write !== "object" || Array.isArray(write)) return false;
     if (Object.keys(write).sort().join(",") !== "owner,relativePath,root,semantics") return false;
     if (write.owner !== "jorgex-pi" || write.root !== "PI_CODING_AGENT_DIR") return false;
-    if (typeof write.relativePath !== "string" || !ALLOWED_EXTERNAL_WRITES.has(write.relativePath)) return false;
+    if (typeof write.relativePath !== "string" || !allowed.has(write.relativePath)) return false;
     if (/^(?:[A-Za-z]:|[\\/])/.test(write.relativePath) || write.relativePath.split(/[\\/]/).includes("..")) return false;
     if (typeof write.semantics !== "string" || write.semantics.trim() === "" || seen.has(write.relativePath)) return false;
     seen.add(write.relativePath);
   }
-  return seen.size === ALLOWED_EXTERNAL_WRITES.size;
+  return seen.size === allowed.size;
 }
 function ownership(receipt) {
   return { receipt, adapters: false, manifest: false, modelMap: false };
@@ -3354,7 +3620,7 @@ function parseReceipt(receiptJson, candidate, scope, engramBin) {
   return sameRecord(parsed, expected) ? expected : null;
 }
 function candidateIsValid(candidate, observed) {
-  return candidate.package.name === "jorgex-pi" && candidate.package.source === `npm:${candidate.package.name}@${candidate.package.version}` && candidate.contract.schemaVersion === 1 && candidate.contract.runner.schemaVersion === 1 && candidate.contract.runner.bin === "jorgex-pi" && candidate.contract.runner.maxStdoutBytes === 65536 && managedExternalWritesAreSafe(candidate.contract.managedExternalWrites) && [...REQUIRED_CAPABILITIES].every((capability) => candidate.contract.capabilities.includes(capability)) && sameRecord(candidate.tarball, observed);
+  return candidate.package.name === "jorgex-pi" && candidate.package.source === `npm:${candidate.package.name}@${candidate.package.version}` && candidate.contract.schemaVersion === 1 && candidate.contract.runner.schemaVersion === 1 && candidate.contract.runner.bin === "jorgex-pi" && candidate.contract.runner.maxStdoutBytes === 65536 && managedExternalWritesAreSafe(candidate.contract.managedExternalWrites, candidate.contract.capabilities) && [...REQUIRED_CAPABILITIES].every((capability) => candidate.contract.capabilities.includes(capability)) && sameRecord(candidate.tarball, observed);
 }
 function planPiPackageLifecycle(input) {
   if (!candidateIsValid(input.candidate, input.observedTarball)) {
@@ -4285,7 +4551,7 @@ async function runUninstall(opts) {
       if (!detection.installed) continue;
       const keepCtx = makeContext(keep, detection.configDir);
       if (!keepCtx) continue;
-      for (const action of buildPlan(keep, keepCtx)) retained.add(path26.resolve(action.target));
+      for (const action of buildContentPlan(keep, keepCtx)) retained.add(path26.resolve(action.target));
     }
   }
   for (const id of opts.runtimes) {
@@ -4303,13 +4569,20 @@ async function runUninstall(opts) {
     const ctx = makeContext(adapter, configDir, void 0, useBrowserPreferences);
     if (!ctx) continue;
     ctx.preserveEngram = !removeEngram;
-    const unmerge = adapter.planUnmerge(mcpForUnmerge, hooks, ctx);
+    let unmerge;
+    try {
+      unmerge = adapter.planUnmerge(mcpForUnmerge, hooks, ctx);
+    } catch (error) {
+      p2.log.error(`${adapter.name}: no se pudo planificar la limpieza en ${configDir} \u2014 ${error instanceof Error ? error.message : String(error)}.`);
+      exitCode = 1;
+      continue;
+    }
     const mergedTargets = new Set(unmerge.map((a) => path26.resolve(a.target)));
     const usingRealConfig = opts.targetDir === void 0;
     const prevOwned = usingRealConfig ? readManifest().runtimes[id]?.owned ?? [] : [];
     const pruneRoot = usingRealConfig ? HOME : path26.dirname(configDir);
     const planTargets = [
-      .../* @__PURE__ */ new Set([...buildPlan(adapter, ctx).map((a) => path26.resolve(a.target)), ...prevOwned.map((t) => path26.resolve(t))])
+      .../* @__PURE__ */ new Set([...buildContentPlan(adapter, ctx).map((a) => path26.resolve(a.target)), ...prevOwned.map((t) => path26.resolve(t))])
     ].filter((t) => !mergedTargets.has(t) && fs19.existsSync(t));
     const deleteTargets = planTargets.filter(
       (t) => !retained.has(t) && !(ctx.preserveEngram && path26.basename(t) === "engram.ts") && isContainedIn(t, pruneRoot)
@@ -4579,7 +4852,7 @@ async function runDoctor(options = {}) {
       pending = diffPlan(buildPlan(adapter, ctx)).filter((d) => d.status !== "unchanged").length;
     } catch (err) {
       p3.log.error(
-        `${adapter.name}: config ilegible en ${detection.configDir} \u2014 ${err instanceof Error ? err.message : err}`
+        `${adapter.name}: configuraci\xF3n incompatible o ilegible en ${detection.configDir} \u2014 ${err instanceof Error ? err.message : err}`
       );
       problems++;
       continue;
@@ -5866,16 +6139,16 @@ import { createHash as createHash2 } from "crypto";
 var pi_runtime_pin_default = {
   package: {
     name: "jorgex-pi",
-    version: "0.8.18",
-    source: "npm:jorgex-pi@0.8.18"
+    version: "0.8.21",
+    source: "npm:jorgex-pi@0.8.21"
   },
   provenance: {
-    commit: "61d676b300707d61840165616f0880d8c6588ce7"
+    commit: "425356a083708aa873a14a094d06bd7abe302bc0"
   },
   tarball: {
-    bytes: 89122709,
-    sha256: "02e5577d95d19ae28de55c170d4b6b48e682fbe741c8eec26cd79587da2f829e",
-    sha512: "a9fa60be18b6a84dca6703bf38a1462482dd3ea00d9eb82aead06e9a86b3d92ce09b68da2968cb760d6b3ad8d5b2b36d53889bed227e7ea6791932ce25153220"
+    bytes: 89139189,
+    sha256: "bf8846caf25eddebe31edc396ed9acc0b5636f7a2a4edd5df4f166beadec40e7",
+    sha512: "74184929ee136671dd3160f76f96a57a4d9299a2dcae2608ca476220a3ea8a7e9cf32fc6a9bbd09334d16c21b7e52dc46c1b5dd76107ad936e4b4c651f1fa684"
   }
 };
 
@@ -5890,6 +6163,7 @@ var PI_RUNTIME_CANDIDATE = {
     capabilities: [
       "foundation-contract-v1",
       "stack-snapshot-v2",
+      "modular-system-prompts-v1",
       "runtime-agents-v1",
       "permission-gated-tools-v1",
       "structured-questions-v1",
@@ -5897,6 +6171,8 @@ var PI_RUNTIME_CANDIDATE = {
       "goal-continuation-v1",
       "mcp-adapter-v1",
       "engram-runtime-tools-v1",
+      "context7-http-v1",
+      "permissions-policy-v1",
       "chrome-devtools-handoff-v1",
       "playwright-handoff-v1",
       "runner-json-v1",
@@ -5929,6 +6205,24 @@ var PI_RUNTIME_CANDIDATE = {
         root: "PI_CODING_AGENT_DIR",
         relativePath: "jorgex-pi/sol-lifecycle.v1.json",
         semantics: "record field, container, and file ownership; remove the receipt when empty"
+      },
+      {
+        owner: "jorgex-pi",
+        root: "PI_CODING_AGENT_DIR",
+        relativePath: "extensions/pi-permission-system/config.json",
+        semantics: "seed the generated permission policy only when absent; publish exclusively, preserve preexisting or invalid user state, and remove only an exact owned copy during cleanup"
+      },
+      {
+        owner: "jorgex-pi",
+        root: "PI_CODING_AGENT_DIR",
+        relativePath: "jorgex-pi/permissions-lifecycle.v1.json",
+        semantics: "record initialization and exact permission-config ownership without storing user configuration or credentials"
+      },
+      {
+        owner: "jorgex-pi",
+        root: "PI_CODING_AGENT_DIR",
+        relativePath: "jorgex-pi/permissions-backups",
+        semantics: "retain cleanup backups of exact owned permission policy bytes"
       }
     ]
   }
@@ -7583,6 +7877,7 @@ Flags disponibles: jorgex-stack --help`
       p6.intro(`jorgex-stack ${command}${flags.dryRun ? " (dry-run)" : ""}`);
       try {
         assertSelectedPromptFiles(runtimes, flags.targetDir);
+        preflightSelectedMcpConfigs(fileRuntimes, flags.targetDir);
         const writingStyle = prepareWritingStyle(resolveWritingStyleFile({ targetDir: flags.targetDir }), { rootDir: flags.targetDir });
         if (flags.targetDir === void 0) {
           const errors = browserPreferenceErrors();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jorgex-stack",
-  "version": "1.9.41",
+  "version": "1.9.43",
   "description": "Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI, OpenCode y Pi",
   "type": "module",
   "license": "MIT",