jorgex-stack 1.9.57 → 1.9.58

package/dist/cli.js

@@ -1,443 +1,115 @@
 #!/usr/bin/env node
 import {
-  HOME,
   QUALITY_PROFILES,
   canonicalJson,
   createQualityReceipt,
-  dataDir,
   evaluateQualityPolicy,
-  samePath,
   serializeQualityReceipt,
   sha256,
-  stackRoot,
   validateQualityReceipt
-} from "./chunk-IO2FFZOH.js";
+} from "./chunk-N5IC2JBJ.js";
+import {
+  inspectOpencodePluginFile,
+  opencodeAdapter,
+  shouldRetireLegacyEngram
+} from "./chunk-M6QX2F3A.js";
+import {
+  claudeCodeAdapter
+} from "./chunk-NNPFC6QV.js";
+import {
+  codexAdapter
+} from "./chunk-GOLJ5PA3.js";
+import {
+  DEFAULT_MODEL_MAP,
+  DEVTOOLS_MCP_SERVER,
+  SYSTEM_PROMPT_SECTIONS,
+  assertSystemPromptFile,
+  assertSystemPromptMarkers,
+  copyFile,
+  createBackup,
+  detectClaudeCode,
+  detectCodex,
+  detectEngram,
+  detectOpenCode,
+  engramVersion,
+  ensureDir,
+  ensureModelMapFile,
+  hasHealthyManagedMarkdownMarkers,
+  isContainedIn,
+  listBackups,
+  listFilesRecursive,
+  loadCanonicalAgents,
+  loadCanonicalHooks,
+  loadCanonicalMcp,
+  loadModelMap,
+  localQualityStatus,
+  lookPath,
+  modelMapFile,
+  planDetectedBinCommand,
+  pruneEmptyDirs,
+  readSystemPromptFile,
+  readTextIfExists,
+  removeMarkdownSection,
+  removeSystemPromptSections,
+  resolveAgentModel,
+  restoreBackup,
+  runDetectedBin,
+  runOfficialSetupIfNeeded,
+  sameFileContent,
+  shouldRunOfficialSetup,
+  stripLeadingHtmlComments,
+  upsertMarkdownSection,
+  validateOfficialSetupDestination,
+  writeText
+} from "./chunk-KB5IQEKL.js";
+import {
+  HOME,
+  dataDir,
+  samePath,
+  stackRoot
+} from "./chunk-NQZVJFV2.js";
 
 // src/cli.ts
 import * as p6 from "@clack/prompts";
-import fs27 from "fs";
-import { pathToFileURL as pathToFileURL2 } from "url";
+import fs20 from "fs";
+import { pathToFileURL } from "url";
 
 // src/install.ts
-import fs17 from "fs";
-import path22 from "path";
+import fs10 from "fs";
+import path12 from "path";
 import * as p from "@clack/prompts";
 
 // src/lib/writing-style.ts
-import fs3 from "fs";
-import path3 from "path";
-
-// src/lib/backup.ts
-import fs2 from "fs";
-import path2 from "path";
-import crypto from "crypto";
-
-// src/lib/fsx.ts
 import fs from "fs";
 import path from "path";
-function readTextIfExists(file) {
-  try {
-    return fs.readFileSync(file, "utf8");
-  } catch {
-    return null;
-  }
-}
-function ensureDir(dir) {
-  fs.mkdirSync(dir, { recursive: true });
-}
-var tmpCounter = 0;
-function tmpPath(target) {
-  return path.join(path.dirname(target), `.jorgex-${process.pid}-${tmpCounter++}.tmp`);
-}
-function renameInto(tmp, target) {
-  try {
-    fs.renameSync(tmp, target);
-  } catch (err) {
-    fs.rmSync(tmp, { force: true });
-    throw err;
-  }
-}
-function writeText(file, content, mode) {
-  ensureDir(path.dirname(file));
-  const tmp = tmpPath(file);
-  fs.writeFileSync(tmp, content, { encoding: "utf8", mode });
-  renameInto(tmp, file);
-}
-function copyFile(source, target) {
-  ensureDir(path.dirname(target));
-  const tmp = tmpPath(target);
-  fs.copyFileSync(source, tmp);
-  renameInto(tmp, target);
-}
-function isContainedIn(child, root) {
-  const rel = path.relative(path.resolve(root), path.resolve(child));
-  return rel !== "" && rel !== ".." && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel);
-}
-function pruneEmptyDirs(file, root) {
-  let dir = path.dirname(file);
-  while (dir.startsWith(root) && dir !== root) {
-    try {
-      if (fs.readdirSync(dir).length > 0) return;
-      fs.rmdirSync(dir);
-    } catch {
-      return;
-    }
-    dir = path.dirname(dir);
-  }
-}
-function sameFileContent(a, b) {
-  try {
-    const bufA = fs.readFileSync(a);
-    const bufB = fs.readFileSync(b);
-    return bufA.equals(bufB);
-  } catch {
-    return false;
-  }
-}
-function listFilesRecursive(dir) {
-  const out = [];
-  if (!fs.existsSync(dir)) return out;
-  const walk = (d) => {
-    for (const entry of fs.readdirSync(d, { withFileTypes: true })) {
-      const p7 = path.join(d, entry.name);
-      if (entry.isDirectory()) walk(p7);
-      else out.push(p7);
-    }
-  };
-  walk(dir);
-  return out;
-}
-
-// src/lib/backup.ts
-var KEEP_BACKUPS = 10;
-function backupsRoot() {
-  return path2.join(dataDir(), "backups");
-}
-function compositeChecksum(files) {
-  const hash = crypto.createHash("sha256");
-  for (const file of [...files].sort()) {
-    const content = crypto.createHash("sha256").update(fs2.readFileSync(file)).digest("hex");
-    hash.update(`${file}:${content}
-`);
-  }
-  return hash.digest("hex");
-}
-function createBackup(files, label, root = backupsRoot()) {
-  const existing = [...new Set(files)].filter((f) => fs2.existsSync(f));
-  if (existing.length === 0) return null;
-  const checksum = compositeChecksum(existing);
-  const latest = listBackups(root)[0];
-  if (latest?.checksum === checksum) return latest;
-  const base = `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}-${label}`;
-  let id = base;
-  let dir = path2.join(root, id);
-  for (let n = 1; fs2.existsSync(dir); n++) {
-    id = `${base}-${n}`;
-    dir = path2.join(root, id);
-  }
-  ensureDir(path2.join(dir, "files"));
-  const entries = existing.map((original, i) => {
-    const stored = path2.join(dir, "files", `${String(i).padStart(4, "0")}-${path2.basename(original)}`);
-    fs2.copyFileSync(original, stored);
-    return { original, stored };
-  });
-  const info = { id, label, createdAt: (/* @__PURE__ */ new Date()).toISOString(), files: entries, checksum };
-  writeText(path2.join(dir, "manifest.json"), JSON.stringify(info, null, 2) + "\n");
-  pruneBackups(root);
-  return info;
-}
-function listBackups(root = backupsRoot()) {
-  if (!fs2.existsSync(root)) return [];
-  const infos = [];
-  for (const entry of fs2.readdirSync(root, { withFileTypes: true })) {
-    if (!entry.isDirectory()) continue;
-    const manifest = readTextIfExists(path2.join(root, entry.name, "manifest.json"));
-    if (manifest === null) continue;
-    try {
-      infos.push(JSON.parse(manifest));
-    } catch {
-      infos.push({ id: entry.name, label: "(manifest corrupto)", createdAt: "", files: [] });
-    }
-  }
-  return infos.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
-}
-function restoreBackup(id, root = backupsRoot(), boundary = HOME) {
-  const info = listBackups(root).find((b) => b.id === id);
-  if (!info) throw new Error(`Backup no encontrado: ${id}`);
-  let restored = 0;
-  for (const { original, stored } of info.files) {
-    if (!fs2.existsSync(stored)) continue;
-    if (!isContainedIn(original, boundary)) continue;
-    ensureDir(path2.dirname(original));
-    fs2.copyFileSync(stored, original);
-    restored++;
-  }
-  return restored;
-}
-function pruneBackups(root) {
-  const all = listBackups(root);
-  for (const old of all.slice(KEEP_BACKUPS)) {
-    fs2.rmSync(path2.join(root, old.id), { recursive: true, force: true });
-  }
-}
-
-// src/lib/filemerge.ts
-function markers(name) {
-  return { open: `<!-- jorgex:${name} -->`, close: `<!-- /jorgex:${name} -->` };
-}
-function hasHealthyManagedMarkdownMarkers(existing, name) {
-  const { open, close } = markers(name);
-  const count = (marker) => existing.split(marker).length - 1;
-  const onOwnLine = (marker) => existing.split("\n").some((line) => line.trim() === marker);
-  return count(open) === 1 && count(close) === 1 && existing.indexOf(close) > existing.indexOf(open) && onOwnLine(open) && onOwnLine(close);
-}
-function repairOrphanMarkers(existing, name) {
-  const { open, close } = markers(name);
-  const count = (marker) => existing.split(marker).length - 1;
-  const opens = count(open);
-  const closes = count(close);
-  if (opens === 0 && closes === 0) return existing;
-  if (hasHealthyManagedMarkdownMarkers(existing, name)) return existing;
-  return existing.split("\n").map((line) => line.trim() === open || line.trim() === close ? null : line.split(open).join("").split(close).join("")).filter((line) => line !== null).join("\n");
-}
-function upsertMarkdownSection(existing, name, content) {
-  const { open, close } = markers(name);
-  const block = `${open}
-${content.trim()}
-${close}`;
-  if (existing === null || existing.trim() === "") return block + "\n";
-  existing = repairOrphanMarkers(existing, name);
-  const start = existing.indexOf(open);
-  const end = existing.indexOf(close);
-  if (start !== -1 && end !== -1 && end > start) {
-    return existing.slice(0, start) + block + existing.slice(end + close.length);
-  }
-  const sep = existing.endsWith("\n\n") ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
-  return existing + sep + block + "\n";
-}
-function removeMarkdownSection(existing, name) {
-  existing = repairOrphanMarkers(existing, name);
-  const { open, close } = markers(name);
-  const start = existing.indexOf(open);
-  const end = existing.indexOf(close);
-  if (start === -1 || end === -1 || end < start) return existing;
-  const before = existing.slice(0, start).replace(/\n+$/, "\n");
-  const after = existing.slice(end + close.length).replace(/^\n+/, "\n");
-  const joined = before + after;
-  return joined.trim() === "" ? "" : joined.replace(/^\n+/, "");
-}
-function stripLeadingHtmlComments(md) {
-  let out = md.trimStart();
-  while (out.startsWith("<!--")) {
-    const end = out.indexOf("-->");
-    if (end === -1) break;
-    out = out.slice(end + 3).trimStart();
-  }
-  return out;
-}
-function upsertJson(existing, mutate) {
-  let root = {};
-  if (existing !== null && existing.trim() !== "") {
-    root = JSON.parse(existing);
-  }
-  mutate(root);
-  return JSON.stringify(root, null, 2) + "\n";
-}
-function tomlRootEnd(lines) {
-  const mask = multilineStringMask(lines);
-  const index = lines.findIndex((line, lineIndex) => !mask[lineIndex] && headerName(line) !== null);
-  return index === -1 ? lines.length : index;
-}
-function rootKeyLineIndex(lines, key) {
-  const end = tomlRootEnd(lines);
-  const mask = multilineStringMask(lines);
-  const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const pattern = new RegExp(`^\\s*(?:${escaped}|"${escaped}"|'${escaped}')\\s*=`);
-  return lines.slice(0, end).findIndex((line, index) => !mask[index] && pattern.test(line));
-}
-function hasTomlRootKey(existing, key) {
-  if (existing === null || existing === "") return false;
-  return rootKeyLineIndex(existing.replace(/\r\n/g, "\n").split("\n"), key) !== -1;
-}
-function upsertTomlRootKeyIfMissing(existing, key, value) {
-  if (hasTomlRootKey(existing, key)) return existing;
-  const eol = existing?.includes("\r\n") ? "\r\n" : "\n";
-  const normalized = (existing ?? "").replace(/\r\n/g, "\n");
-  const lines = normalized === "" ? [] : normalized.split("\n");
-  const index = tomlRootEnd(lines);
-  lines.splice(index, 0, `${key} = ${value}`);
-  return lines.join(eol);
-}
-function removeTomlRootKeyIfExact(existing, key, value) {
-  const eol = existing.includes("\r\n") ? "\r\n" : "\n";
-  const normalized = existing.replace(/\r\n/g, "\n");
-  const lines = normalized.split("\n");
-  const index = rootKeyLineIndex(lines, key);
-  if (index === -1) return existing;
-  const escapedKey = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const escapedValue = value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const exact = new RegExp(`^\\s*(?:${escapedKey}|"${escapedKey}"|'${escapedKey}')\\s*=\\s*${escapedValue}\\s*(?:#.*)?$`);
-  if (!exact.test(lines[index])) return existing;
-  lines.splice(index, 1);
-  return lines.join(eol);
-}
-function headerName(line) {
-  const match = /^\s*\[\s*([^\]]+?)\s*\]\s*(#.*)?$/.exec(line);
-  if (!match) return null;
-  return match[1].split(".").map((part) => part.trim().replace(/^["']|["']$/g, "")).join(".");
-}
-function quoteRunLength(line, start, quote) {
-  let end = start + 1;
-  while (end < line.length && line[end] === quote) end++;
-  return end - start;
-}
-function skipShortString(line, start, quote) {
-  let index = start + 1;
-  while (index < line.length) {
-    if (line[index] === quote) return index + 1;
-    if (quote === '"' && line[index] === "\\") {
-      index += 2;
-      continue;
-    }
-    index++;
-  }
-  return line.length;
-}
-function scanTomlLine(line, initial) {
-  let inside = initial;
-  let index = 0;
-  while (index < line.length) {
-    if (inside !== null) {
-      const quote = inside === '"""' ? '"' : "'";
-      if (line[index] === quote) {
-        const run2 = quoteRunLength(line, index, quote);
-        if (run2 >= 3) {
-          inside = null;
-        }
-        index += run2;
-        continue;
-      }
-      if (inside === '"""' && line[index] === "\\") {
-        index += 2;
-        continue;
-      }
-      index++;
-      continue;
-    }
-    const char = line[index];
-    if (char === "#") break;
-    if (char !== '"' && char !== "'") {
-      index++;
-      continue;
-    }
-    const run = quoteRunLength(line, index, char);
-    if (run >= 3) {
-      inside = char === '"' ? '"""' : "'''";
-      index += 3;
-    } else {
-      index = skipShortString(line, index, char);
-    }
-  }
-  return inside;
-}
-function multilineStringMask(lines) {
-  const mask = [];
-  let inside = null;
-  for (const line of lines) {
-    mask.push(inside !== null);
-    inside = scanTomlLine(line, inside);
-  }
-  return mask;
-}
-function findTomlSection(lines, section) {
-  const mask = multilineStringMask(lines);
-  const start = lines.findIndex((line, i) => !mask[i] && headerName(line) === section);
-  if (start === -1) return null;
-  let end = start + 1;
-  while (end < lines.length && (mask[end] || headerName(lines[end]) === null)) end++;
-  return { start, end };
-}
-function upsertTomlSection(existing, section, body) {
-  const header = `[${section}]`;
-  const target = headerName(header) ?? section;
-  const block = `${header}
-${body.trim()}
-`;
-  if (existing === null || existing.trim() === "") return block;
-  const rawLines = existing.split("\n");
-  const lines = rawLines.map((line) => line.endsWith("\r") ? line.slice(0, -1) : line);
-  const lineStarts = [];
-  let offset = 0;
-  for (let index = 0; index < rawLines.length; index++) {
-    lineStarts.push(offset);
-    offset += rawLines[index].length;
-    if (index < rawLines.length - 1) offset++;
-  }
-  const found = findTomlSection(lines, target);
-  if (found === null) {
-    const sep = existing.endsWith("\n") ? "\n" : "\n\n";
-    return existing + sep + block;
-  }
-  let sectionEnd = found.end;
-  while (sectionEnd > found.start + 1 && lines[sectionEnd - 1].trim() === "") sectionEnd--;
-  const startOffset = lineStarts[found.start];
-  const endOffset = lineStarts[sectionEnd] ?? existing.length;
-  return existing.slice(0, startOffset) + block.trimEnd() + "\n" + existing.slice(endOffset);
-}
-function removeTomlSection(existing, section) {
-  const eol = existing.includes("\r\n") ? "\r\n" : "\n";
-  const lines = existing.split(/\r?\n/);
-  const found = findTomlSection(lines, section);
-  if (found === null) return existing;
-  let realStart = found.start;
-  while (realStart > 0 && lines[realStart - 1].trim() === "") realStart--;
-  const result = [...lines.slice(0, realStart), ...lines.slice(found.end)].join(eol);
-  if (result.trim() === "") return "";
-  return result.endsWith(eol) ? result : result + eol;
-}
-function readTomlSection(existing, section) {
-  if (existing === null) return null;
-  const lines = existing.split(/\r?\n/);
-  const found = findTomlSection(lines, section);
-  if (found === null) return null;
-  return lines.slice(found.start + 1, found.end).join("\n");
-}
-function hasTomlChildSection(existing, section) {
-  if (existing === null) return false;
-  const lines = existing.split(/\r?\n/);
-  const mask = multilineStringMask(lines);
-  return lines.some((line, index) => !mask[index] && headerName(line)?.startsWith(`${section}.`) === true);
-}
-
-// src/lib/writing-style.ts
 var DEFAULT_SECTION = "writing-style-default";
 var DEFAULT_OPEN = `<!-- jorgex:${DEFAULT_SECTION} -->`;
 var DEFAULT_CLOSE = `<!-- /jorgex:${DEFAULT_SECTION} -->`;
 function assertContained(file, rootDir) {
-  const relative = path3.relative(fs3.realpathSync(rootDir), fs3.realpathSync(file));
-  if (relative === ".." || relative.startsWith(`..${path3.sep}`) || path3.isAbsolute(relative)) {
+  const relative = path.relative(fs.realpathSync(rootDir), fs.realpathSync(file));
+  if (relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {
     throw new Error(`La ruta de estilo ${file} sale del destino aislado.`);
   }
 }
 function validateBackupRoot(rootDir) {
   if (rootDir === void 0) return;
-  const backupRoot = path3.join(rootDir, "backups");
+  const backupRoot = path.join(rootDir, "backups");
   try {
-    fs3.lstatSync(backupRoot);
+    fs.lstatSync(backupRoot);
   } catch (error) {
     if (error.code === "ENOENT") return;
     throw error;
   }
   assertContained(backupRoot, rootDir);
-  if (!fs3.statSync(backupRoot).isDirectory()) throw new Error(`El destino de backups ${backupRoot} no es un directorio.`);
+  if (!fs.statSync(backupRoot).isDirectory()) throw new Error(`El destino de backups ${backupRoot} no es un directorio.`);
 }
 function resolveWritingStyleFile(options = {}) {
-  return path3.join(options.targetDir ?? options.stateDir ?? dataDir(), "writing-style.md");
+  return path.join(options.targetDir ?? options.stateDir ?? dataDir(), "writing-style.md");
 }
 function readStyleText(sourcePath, options = {}) {
   let stat;
   try {
-    stat = fs3.lstatSync(sourcePath);
+    stat = fs.lstatSync(sourcePath);
   } catch (error) {
     if (error.code === "ENOENT") return null;
     throw new Error(`No se puede leer el estilo ${sourcePath}. Revisa los permisos del archivo.`, { cause: error });
@@ -445,12 +117,12 @@ function readStyleText(sourcePath, options = {}) {
   if (options.rootDir !== void 0) {
     assertContained(sourcePath, options.rootDir);
   }
-  if (!(stat.isSymbolicLink() ? fs3.statSync(sourcePath) : stat).isFile()) {
+  if (!(stat.isSymbolicLink() ? fs.statSync(sourcePath) : stat).isFile()) {
     throw new Error(`La fuente de estilo ${sourcePath} debe ser un archivo.`);
   }
   let bytes;
   try {
-    bytes = fs3.readFileSync(sourcePath);
+    bytes = fs.readFileSync(sourcePath);
   } catch (error) {
     throw new Error(`No se puede leer el estilo ${sourcePath}. Revisa los permisos del archivo.`, { cause: error });
   }
@@ -468,1884 +140,46 @@ function readWritingStyle(sourcePath, options = {}) {
   return { sourcePath, content: content || null };
 }
 function prepareWritingStyle(sourcePath, options = {}) {
-  const canonicalPath = path3.join(options.stackDir ?? stackRoot(), "system-prompt", "writing-style.md");
+  const canonicalPath = path.join(options.stackDir ?? stackRoot(), "system-prompt", "writing-style.md");
   const canonical = readWritingStyle(canonicalPath).content;
   if (canonical === null) throw new Error(`Falta el estilo can\xF3nico o est\xE1 vac\xEDo en ${canonicalPath}; repara la instalaci\xF3n de Stack.`);
   const originalContent = readStyleText(sourcePath, options);
   if (originalContent?.includes("jorgex:")) {
     if (!hasHealthyManagedMarkdownMarkers(originalContent, DEFAULT_SECTION) || originalContent.replace(DEFAULT_OPEN, "").replace(DEFAULT_CLOSE, "").includes("jorgex:")) {
-      throw new Error(`Marcadores de estilo ambiguos o desconocidos en ${sourcePath}; revisa el bloque ${DEFAULT_SECTION}.`);
-    }
-  }
-  const installedContent = upsertMarkdownSection(originalContent, DEFAULT_SECTION, canonical);
-  if (originalContent !== null && originalContent !== installedContent) validateBackupRoot(options.rootDir);
-  const content = installedContent.replace(DEFAULT_OPEN, "").replace(DEFAULT_CLOSE, "").replace(/\r\n?/g, "\n").trim();
-  return {
-    sourcePath,
-    content,
-    canonicalPath,
-    originalContent,
-    installedContent,
-    rootDir: options.rootDir,
-    backupRoot: options.rootDir === void 0 ? void 0 : path3.join(options.rootDir, "backups")
-  };
-}
-function applyWritingStyle(plan, dryRun = false) {
-  if (dryRun) return;
-  const current = readStyleText(plan.sourcePath, { rootDir: plan.rootDir });
-  if (current === plan.installedContent) return;
-  if (current !== plan.originalContent) {
-    throw new Error(`El estilo ${plan.sourcePath} cambi\xF3 durante la preparaci\xF3n; vuelve a ejecutar el comando.`);
-  }
-  if (current !== null) {
-    validateBackupRoot(plan.rootDir);
-    createBackup([plan.sourcePath], "writing-style", plan.backupRoot);
-  }
-  const mode = current === null ? 384 : fs3.statSync(plan.sourcePath).mode & 511;
-  writeText(plan.sourcePath, plan.installedContent, mode);
-}
-
-// src/lib/system-prompt-sections.ts
-import fs4 from "fs";
-import path4 from "path";
-var SYSTEM_PROMPT_SECTIONS = [
-  "system-prompt",
-  "engram-protocol",
-  "context7",
-  "playwright",
-  "chrome-devtools",
-  "browser",
-  "writing-style"
-];
-function assertSystemPromptMarkers(content, target) {
-  if (content === null) return;
-  const ranges = [];
-  for (const section of SYSTEM_PROMPT_SECTIONS) {
-    const markers2 = [...content.matchAll(new RegExp(`<!--\\s*\\/?jorgex:${section}(?=[\\s>]|-->|$)`, "g"))];
-    if (markers2.length === 0) continue;
-    if (markers2.length !== 2 || !hasHealthyManagedMarkdownMarkers(content, section)) {
-      throw new Error(`Marcadores jorgex:${section} ambiguos en ${target}. Repara el bloque antes de reintentar; su contenido se conserva.`);
-    }
-    ranges.push({
-      section,
-      start: content.indexOf(`<!-- jorgex:${section} -->`),
-      end: content.indexOf(`<!-- /jorgex:${section} -->`) + `<!-- /jorgex:${section} -->`.length
-    });
-  }
-  ranges.sort((a, b) => a.start - b.start);
-  for (let index = 1; index < ranges.length; index++) {
-    if (ranges[index].start < ranges[index - 1].end) {
-      throw new Error(`Marcadores jorgex:${ranges[index].section} anidados en ${target}. Separa los bloques antes de reintentar; su contenido se conserva.`);
-    }
-  }
-}
-function readSystemPromptFile(target, rootDir) {
-  if (rootDir !== void 0) {
-    const probe = fs4.existsSync(target) ? target : path4.dirname(target);
-    if (fs4.existsSync(probe) && fs4.existsSync(rootDir)) {
-      const resolved = fs4.realpathSync(probe);
-      const root = fs4.realpathSync(rootDir);
-      if (resolved !== root && !isContainedIn(resolved, root)) {
-        throw new Error(`El prompt ${target} sale del destino aislado.`);
-      }
-    }
-  }
-  let bytes;
-  try {
-    bytes = fs4.readFileSync(target);
-  } catch (error) {
-    if (error.code === "ENOENT") return null;
-    throw new Error(`No se puede leer el prompt ${target}. Revisa los permisos y el tipo de archivo.`, { cause: error });
-  }
-  try {
-    return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes);
-  } catch (error) {
-    throw new Error(`El prompt ${target} debe usar UTF-8 v\xE1lido.`, { cause: error });
-  }
-}
-function assertSystemPromptFile(target, rootDir) {
-  assertSystemPromptMarkers(readSystemPromptFile(target, rootDir), target);
-}
-function removeSystemPromptSections(content) {
-  assertSystemPromptMarkers(content, "system prompt");
-  return SYSTEM_PROMPT_SECTIONS.reduce((current, section) => removeMarkdownSection(current, section), content);
-}
-
-// src/adapters/opencode.ts
-import path9 from "path";
-import fs6 from "fs";
-import { isDeepStrictEqual } from "util";
-import { pathToFileURL } from "url";
-
-// src/lib/canonical.ts
-import path5 from "path";
-import fs5 from "fs";
-function parseCanonicalAgent(source, file) {
-  const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/.exec(source);
-  if (!match) throw new Error(`Agente sin frontmatter: ${file}`);
-  const fields = {};
-  for (const line of match[1].split(/\r?\n/)) {
-    const sep = line.indexOf(":");
-    if (sep === -1) continue;
-    fields[line.slice(0, sep).trim()] = line.slice(sep + 1).trim();
-  }
-  const required = ["name", "description", "mode", "tier"];
-  for (const key of required) {
-    if (!fields[key]) throw new Error(`Agente ${file}: falta '${key}' en el frontmatter`);
-  }
-  return {
-    name: fields.name,
-    description: fields.description,
-    mode: fields.mode === "primary" ? "primary" : "subagent",
-    tier: fields.tier,
-    readonly: fields.readonly === "true",
-    bash: fields.bash ?? "full",
-    spawn: fields.spawn !== "false",
-    body: source.slice(match[0].length)
-  };
-}
-function loadCanonicalAgents(agentsDir) {
-  return fs5.readdirSync(agentsDir).filter((f) => f.endsWith(".md") && f.toLowerCase() !== "readme.md").map((f) => {
-    const file = path5.join(agentsDir, f);
-    const source = fs5.readFileSync(file, "utf8").replace(/\r\n/g, "\n");
-    return parseCanonicalAgent(source, file);
-  });
-}
-var DEVTOOLS_MCP_SERVER = "chrome-devtools";
-function isCanonicalMcpServerEnabled(name, server, enabledServers) {
-  return !server.optional || server.defaultEnabled === true || enabledServers?.has(name) === true;
-}
-function loadCanonicalMcp(stackDir) {
-  return JSON.parse(fs5.readFileSync(path5.join(stackDir, "mcp", "servers.json"), "utf8"));
-}
-function loadCanonicalHooks(stackDir) {
-  return JSON.parse(fs5.readFileSync(path5.join(stackDir, "hooks", "hooks.json"), "utf8"));
-}
-function loadCanonicalDefaults(stackDir) {
-  const file = path5.join(stackDir, "config", "defaults.json");
-  if (!fs5.existsSync(file)) return {};
-  const parsed = JSON.parse(fs5.readFileSync(file, "utf8"));
-  delete parsed["$comment"];
-  return parsed;
-}
-
-// src/lib/model-map.ts
-import path6 from "path";
-import { existsSync } from "fs";
-function resolveAgentModel(models, agentName, tier) {
-  const base = models[tier];
-  const override = models.overrides?.[agentName];
-  if (!override) return base;
-  return {
-    model: override.model || base.model,
-    variant: "variant" in override ? override.variant || void 0 : base.variant
-  };
-}
-var DEFAULT_MODEL_MAP = {
-  "claude-code": {
-    strong: { model: "fable" },
-    standard: { model: "sonnet" },
-    cheap: { model: "haiku" }
-  },
-  // El primary (orchestrator) no usa estos tiers: tanto el profile de CLI como
-  // la skill de la app heredan el modelo elegido por el usuario. Estos defaults
-  // son solo para subagentes; variant → model_reasoning_effort.
-  codex: {
-    strong: { model: "gpt-6-astra", variant: "low" },
-    standard: { model: "gpt-5.6-luna", variant: "max" },
-    cheap: { model: "gpt-5.6-luna", variant: "medium" }
-  }
-};
-function modelMapFile() {
-  return path6.join(dataDir(), "model-map.json");
-}
-function loadModelMap() {
-  const file = modelMapFile();
-  const raw = readTextIfExists(file);
-  if (raw === null) return DEFAULT_MODEL_MAP;
-  let fromDisk;
-  try {
-    fromDisk = JSON.parse(raw);
-  } catch {
-    throw new Error(`El mapa de modelos ${file} contiene JSON inv\xE1lido. Corrige el JSON o restaura una copia antes de continuar.`);
-  }
-  const merged = { ...fromDisk };
-  for (const id of Object.keys(DEFAULT_MODEL_MAP)) {
-    merged[id] = { ...DEFAULT_MODEL_MAP[id], ...fromDisk[id] ?? {} };
-    if (fromDisk[id] && !Object.hasOwn(fromDisk[id], "overrides")) delete merged[id].overrides;
-  }
-  return merged;
-}
-function ensureModelMapFile() {
-  const file = modelMapFile();
-  if (!existsSync(file)) {
-    writeText(file, JSON.stringify(DEFAULT_MODEL_MAP, null, 2) + "\n");
-  }
-  return file;
-}
-
-// src/lib/detect.ts
-import path7 from "path";
-import { existsSync as existsSync2, statSync } from "fs";
-import { execFileSync } from "child_process";
-function lookPath(cmd, env = process.env) {
-  const exts = process.platform === "win32" ? [".exe", ".cmd", ".bat", ".ps1", ""] : [""];
-  for (const dir of (env.PATH ?? "").split(path7.delimiter)) {
-    if (!dir) continue;
-    for (const ext of exts) {
-      const candidate = path7.join(dir, cmd + ext);
-      if (statSync(candidate, { throwIfNoEntry: false })?.isFile()) return candidate;
-    }
-  }
-  return null;
-}
-function planDetectedBinCommand(bin, args) {
-  if (process.platform !== "win32" || !/\.(cmd|bat)$/i.test(bin)) return { command: bin, args };
-  if ([bin, ...args].some((part) => /[&|<>()^%!"\r\n]/.test(part))) return null;
-  const quote = (part) => part === "" || /\s/.test(part) ? `"${part}"` : part;
-  return {
-    command: process.env.ComSpec ?? "cmd.exe",
-    args: ["/d", "/s", "/c", [quote(bin), ...args.map(quote)].join(" ")]
-  };
-}
-function runDetectedBin(bin, args, timeoutMs, envOverrides) {
-  try {
-    const command = planDetectedBinCommand(bin, args);
-    if (command === null) return null;
-    return execFileSync(command.command, command.args, {
-      encoding: "utf8",
-      timeout: timeoutMs,
-      stdio: ["ignore", "pipe", "pipe"],
-      ...envOverrides === void 0 ? {} : { env: { ...process.env, ...envOverrides } }
-    });
-  } catch {
-    return null;
-  }
-}
-function detectOpenCode() {
-  const configDir = process.env.OPENCODE_CONFIG_DIR ?? path7.join(HOME, ".config", "opencode");
-  const binPath = lookPath("opencode");
-  return {
-    id: "opencode",
-    name: "OpenCode",
-    installed: binPath !== null || existsSync2(configDir),
-    binPath,
-    configDir
-  };
-}
-function detectClaudeCode() {
-  const configDir = path7.join(HOME, ".claude");
-  const binPath = lookPath("claude");
-  return {
-    id: "claude-code",
-    name: "Claude Code",
-    installed: binPath !== null || existsSync2(configDir),
-    binPath,
-    configDir
-  };
-}
-function detectCodex() {
-  const configDir = process.env.CODEX_HOME ?? path7.join(HOME, ".codex");
-  const binPath = lookPath("codex");
-  return {
-    id: "codex",
-    name: "Codex CLI",
-    installed: binPath !== null || existsSync2(configDir),
-    binPath,
-    configDir
-  };
-}
-function detectEngram() {
-  const fromEnv = process.env.ENGRAM_BIN;
-  if (fromEnv && existsSync2(fromEnv)) return fromEnv;
-  const onPath = lookPath("engram");
-  if (onPath) return onPath;
-  const candidates = [
-    path7.join(HOME, "go", "bin", "engram.exe"),
-    path7.join(HOME, "go", "bin", "engram"),
-    path7.join(HOME, ".local", "bin", "engram.exe"),
-    path7.join(HOME, ".local", "bin", "engram")
-  ];
-  for (const c of candidates) if (existsSync2(c)) return c;
-  return null;
-}
-
-// src/lib/hooks-format.ts
-import path8 from "path";
-function hookScriptNames(canonical) {
-  return Object.values(canonical.hooks).flat().flatMap((entry) => entry.hooks).map((h) => /\{\{SCRIPTS_DIR\}\}[/\\]([\w./-]+)/.exec(h.command)?.[1]).filter((s) => s !== void 0).map((s) => path8.basename(s));
-}
-function plainHookCommands(canonical) {
-  return new Set(
-    Object.values(canonical.hooks).flat().flatMap((entry) => entry.hooks).map((h) => h.command).filter((c) => !c.includes("{{SCRIPTS_DIR}}"))
-  );
-}
-function removeNativeHooks(existing, canonical) {
-  if (existing === null || existing.trim() === "") return existing;
-  const scriptNames = hookScriptNames(canonical);
-  const plainCommands = plainHookCommands(canonical);
-  return upsertJson(existing, (root) => {
-    const hooks = root["hooks"];
-    if (!hooks) return;
-    for (const event of Object.keys(hooks)) {
-      const list = hooks[event];
-      if (!Array.isArray(list)) continue;
-      hooks[event] = list.filter((entry) => {
-        const e = entry;
-        if (!Array.isArray(e?.hooks)) return true;
-        const ours = e.hooks.some((hh) => {
-          const cmd = String(hh?.command ?? "");
-          return scriptNames.some((s) => cmd.includes(s)) || plainCommands.has(cmd);
-        });
-        return !ours;
-      });
-      if (hooks[event].length === 0) delete hooks[event];
-    }
-    if (Object.keys(hooks).length === 0) delete root["hooks"];
-  });
-}
-function upsertNativeHooks(existing, canonical, scriptsDir, mapMatcher = (m) => m) {
-  const scriptsDirForCommand = scriptsDir.replace(/\\/g, "/");
-  return upsertJson(existing, (root) => {
-    const hooks = root["hooks"] ??= {};
-    for (const [event, entries] of Object.entries(canonical.hooks)) {
-      const list = hooks[event] ??= [];
-      for (const entry of entries) {
-        const matcher = entry.matcher !== void 0 ? mapMatcher(entry.matcher) : void 0;
-        const rendered = {
-          ...matcher !== void 0 ? { matcher } : {},
-          hooks: entry.hooks.map((h) => ({
-            type: h.type,
-            command: h.command.replace(/\{\{SCRIPTS_DIR\}\}/g, scriptsDirForCommand),
-            ...h.timeout !== void 0 ? { timeout: h.timeout } : {}
-          }))
-        };
-        const scriptNames = entry.hooks.map((h) => /\{\{SCRIPTS_DIR\}\}[/\\]([\w./-]+)/.exec(h.command)?.[1]).filter((s) => s !== void 0).map((s) => path8.basename(s));
-        const plainCommands = entry.hooks.map((h) => h.command).filter((c) => !c.includes("{{SCRIPTS_DIR}}"));
-        const index = list.findIndex((existingEntry) => {
-          const e = existingEntry;
-          if (!Array.isArray(e?.hooks)) return false;
-          return e.hooks.some((hh) => {
-            const cmd = String(hh?.command ?? "");
-            return scriptNames.some((s) => cmd.includes(s)) || plainCommands.includes(cmd);
-          });
-        });
-        if (index >= 0) list[index] = rendered;
-        else list.push(rendered);
-      }
-    }
-  });
-}
-
-// src/lib/quality-capabilities.ts
-var QUALITY_CAPABILITY_NAMESPACE = "jorgex.quality.capabilities";
-var QUALITY_CAPABILITY_VERSION = 1;
-var QUALITY_CAPABILITY_IDS = [
-  "policy-guidance",
-  "tool-approval",
-  "external-verification"
-];
-var UNAVAILABLE_REASON = "No reviewed local declaration is available";
-var EXTERNAL_VERIFICATION_REASON = "External verification is available only through the external verifier";
-function hasText(value) {
-  return typeof value === "string" && value.trim() !== "";
-}
-function isRuntime(value) {
-  return value === "claude-code" || value === "codex" || value === "opencode" || value === "pi";
-}
-function hasValidEvidence(value) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
-  const evidence = value;
-  return hasText(evidence.source) && hasText(evidence.version);
-}
-function unavailableCapability(id, reason = UNAVAILABLE_REASON) {
-  return { id, state: "unavailable", reason };
-}
-function declarationFor(id, declarations, runtime) {
-  if (runtime === "unknown") {
-    return unavailableCapability(id, "Runtime is unknown; local capability cannot be established");
-  }
-  if (id === "external-verification") {
-    return unavailableCapability(id, EXTERNAL_VERIFICATION_REASON);
-  }
-  const matches = declarations.filter((declaration2) => declaration2?.id === id);
-  if (matches.length === 0) return unavailableCapability(id);
-  if (matches.length !== 1) return unavailableCapability(id, "Duplicate capability declarations are ambiguous");
-  const declaration = matches[0];
-  const state = declaration.state;
-  const reason = hasText(declaration.reason) ? declaration.reason.trim() : void 0;
-  if (!reason) return unavailableCapability(id, "Capability declaration has no reason");
-  if (state !== "prompt-only" && state !== "manual" && state !== "unavailable") {
-    return unavailableCapability(id, "Capability state is not a supported local state");
-  }
-  if (state === "unavailable") return { id, state, reason };
-  if (!hasValidEvidence(declaration.evidence)) {
-    return unavailableCapability(id, "Capability declaration lacks reviewed source/version evidence");
-  }
-  const evidence = declaration.evidence;
-  return {
-    id,
-    state,
-    reason,
-    evidence: {
-      source: evidence.source.trim(),
-      version: evidence.version.trim()
-    }
-  };
-}
-function hasManagedMarkdownSection(content, name) {
-  return content !== null && hasHealthyManagedMarkdownMarkers(content, name);
-}
-function createLocalCapabilityReport(runtime, declarations) {
-  const normalizedRuntime = isRuntime(runtime) ? runtime : "unknown";
-  return {
-    namespace: QUALITY_CAPABILITY_NAMESPACE,
-    version: QUALITY_CAPABILITY_VERSION,
-    runtime: normalizedRuntime,
-    capabilities: QUALITY_CAPABILITY_IDS.map((id) => declarationFor(id, declarations, normalizedRuntime))
-  };
-}
-function localQualityStatus(profile, status) {
-  if ((profile === "high" || profile === "release") && status === "pass") return "incomplete";
-  return status;
-}
-
-// src/adapters/opencode.ts
-var gitReadPrefix = "git --no-pager -c core.fsmonitor=false -c log.showSignature=false";
-var gitReadCommands = [
-  "diff",
-  "diff --stat",
-  "diff --name-only",
-  "diff --cached",
-  "log",
-  "log --oneline -10"
-].map((action) => `${gitReadPrefix} ${action} --no-ext-diff --no-textconv --end-of-options`);
-function yamlString(value) {
-  return JSON.stringify(value);
-}
-function readMcpConfig(file) {
-  let content;
-  try {
-    content = fs6.readFileSync(file, "utf8");
-  } catch (error) {
-    const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
-    if (code === "ENOENT") return null;
-    throw new Error(`OpenCode: no se pudo leer la configuraci\xF3n MCP en ${file} (${code}).`);
-  }
-  if (content.trim() !== "") {
-    try {
-      if (objectValue(JSON.parse(content)) === null) throw new Error();
-    } catch {
-      throw new Error(`OpenCode: la configuraci\xF3n MCP en ${file} debe contener un objeto JSON v\xE1lido.`);
-    }
-  }
-  return content;
-}
-function isManagedOptionalStdioServer(server, value) {
-  if (!server.optional || server.transport !== "stdio" || value === null || typeof value !== "object" || Array.isArray(value)) {
-    return false;
-  }
-  const current = value;
-  const expectedCommand = [server.command, ...server.args ?? []];
-  return Object.keys(current).length === 2 && current.type === "local" && Array.isArray(current.command) && current.command.length === expectedCommand.length && current.command.every((arg, index) => arg === expectedCommand[index]);
-}
-var PRIMARY_MODEL = "openai/gpt-5.6-sol";
-var PRIMARY_MODEL_ID = "gpt-5.6-sol";
-var PRIMARY_LIMITS = { context: 872e3, input: 744e3, output: 128e3 };
-var PRIMARY_MODEL_FIELD = "model";
-var PRIMARY_PROVIDER_FIELD = "provider";
-var PRIMARY_OPENAI_FIELD = "provider.openai";
-var PRIMARY_MODELS_FIELD = "provider.openai.models";
-var PRIMARY_SOL_FIELD = `provider.openai.models.${PRIMARY_MODEL_ID}`;
-var PRIMARY_LIMIT_PREFIX = `provider.openai.models.${PRIMARY_MODEL_ID}.limit`;
-function objectValue(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
-}
-function isCompatibleContext7Server(server, value) {
-  const current = objectValue(value);
-  if (server.transport !== "http" || typeof server.url !== "string" || current === null) return false;
-  return current.type === "remote" && current.url === server.url && (current.enabled === void 0 || current.enabled === true);
-}
-function canonicalContext7Server(server) {
-  const headers = {};
-  for (const [key, raw] of Object.entries(server.headers ?? {})) {
-    const envRef = /^\$\{(\w+)\}$/.exec(raw);
-    headers[key] = envRef ? `{env:${envRef[1]}}` : raw;
-  }
-  return {
-    type: "remote",
-    url: server.url,
-    ...Object.keys(headers).length > 0 ? { headers } : {}
-  };
-}
-function isCanonicalContext7Server(server, value) {
-  return isCompatibleContext7Server(server, value) && isDeepStrictEqual(value, canonicalContext7Server(server));
-}
-function assertCompatibleContext7(server, value) {
-  if (value !== void 0 && !isCompatibleContext7Server(server, value)) {
-    throw new Error("OpenCode: MCP 'context7' entra en conflicto con una definici\xF3n existente (endpoint, tipo o estado nativo incompatible). Conserva la configuraci\xF3n y corrige el conflicto antes de reintentar.");
-  }
-}
-function ensureObject(parent, key, fieldPath) {
-  if (parent[key] === void 0) parent[key] = {};
-  const value = objectValue(parent[key]);
-  if (value === null) throw new Error(`OpenCode: '${fieldPath}' debe ser un objeto; corr\xEDgelo antes de reintentar sync.`);
-  return value;
-}
-function ensureOwnedPrimaryObject(parent, key, field, owned, changes) {
-  const created = parent[key] === void 0;
-  const value = ensureObject(parent, key, field);
-  if (created && owned?.has(field) !== true) changes.push({ field, owned: true });
-  return value;
-}
-function pruneEmpty(parent, key) {
-  const value = objectValue(parent[key]);
-  if (value !== null && Object.keys(value).length === 0) delete parent[key];
-}
-function hasOpenCodeManualApproval(configDir) {
-  const content = readTextIfExists(path9.join(configDir, "opencode.json"));
-  if (content === null) return false;
-  try {
-    const root = JSON.parse(content);
-    const permission = objectValue(objectValue(root)?.permission);
-    const expected = loadCanonicalDefaults(stackRoot())["opencode"]?.["permission"];
-    return permission !== null && expected !== void 0 && isDeepStrictEqual(permission, expected);
-  } catch {
-    return false;
-  }
-}
-var opencodeAdapter = {
-  id: "opencode",
-  name: "OpenCode",
-  detect: detectOpenCode,
-  reportCapabilities(configDir) {
-    const prompt = readTextIfExists(path9.join(configDir, "AGENTS.md"));
-    return createLocalCapabilityReport("opencode", [
-      ...hasManagedMarkdownSection(prompt, "system-prompt") ? [{
-        id: "policy-guidance",
-        state: "prompt-only",
-        reason: "The managed policy prompt is advisory and cannot enforce the policy",
-        evidence: { source: "jorgex-stack-system-prompt", version: "1" }
-      }] : [],
-      ...hasOpenCodeManualApproval(configDir) ? [{
-        id: "tool-approval",
-        state: "manual",
-        reason: "Canonical approval declarations require a human decision; runtime activation is not certified",
-        evidence: { source: "jorgex-stack-opencode-approval-policy", version: "1" }
-      }] : []
-    ]);
-  },
-  injectEngramProtocol() {
-    return false;
-  },
-  paths(configDir) {
-    const isRealConfigDir = samePath(
-      configDir,
-      process.env.OPENCODE_CONFIG_DIR ?? path9.join(HOME, ".config", "opencode")
-    );
-    const agentsHome = isRealConfigDir ? HOME : path9.dirname(configDir);
-    return {
-      systemPromptFile: path9.join(configDir, "AGENTS.md"),
-      agentsDir: path9.join(configDir, "agents"),
-      skillsDir: path9.join(agentsHome, ".agents", "skills"),
-      commandsDir: path9.join(configDir, "commands"),
-      pluginsDir: path9.join(configDir, "plugins"),
-      scriptsDir: path9.join(configDir, "scripts"),
-      outputStylesDir: null,
-      profilesDir: null
-    };
-  },
-  renderAgent(agent, models) {
-    const lines = [`description: ${yamlString(agent.description)}`, `mode: ${agent.mode}`];
-    if (agent.mode === "subagent") {
-      const tierModel = resolveAgentModel(models, agent.name, agent.tier);
-      lines.push(`model: ${tierModel.model}`);
-      if (tierModel.variant) lines.push(`variant: ${tierModel.variant}`);
-      if (agent.readonly || agent.bash !== "full" || !agent.spawn) lines.push("permission:");
-      if (agent.readonly) lines.push("  edit: deny");
-      if (agent.bash === "none") lines.push("  bash: deny");
-      else if (agent.bash === "git-read") {
-        lines.push('  bash:\n    "*": deny');
-        for (const command of gitReadCommands) {
-          lines.push(`    ${yamlString(command)}: allow`, `    ${yamlString(`${command} *`)}: allow`);
-        }
-        const permission = objectValue(loadCanonicalDefaults(stackRoot())["opencode"]?.permission);
-        const bash = objectValue(permission?.bash);
-        if (bash === null) throw new Error("OpenCode: canonical Bash policy is required for git-read agents.");
-        for (const [pattern, decision] of Object.entries(bash)) {
-          if (decision === "deny") lines.push(`    ${yamlString(pattern)}: deny`);
-        }
-      }
-      if (!agent.spawn) lines.push("  task: deny");
-    }
-    return [
-      {
-        file: `${agent.name}.md`,
-        content: `---
-${lines.join("\n")}
----
-${agent.body}${agent.bash === "git-read" ? `
-
-Use only these read-only Git command prefixes; put refs and paths after --end-of-options:
-${gitReadCommands.map((command) => `- \`${command}\``).join("\n")}
-` : ""}`,
-        kind: "agent"
-      }
-    ];
-  },
-  renderCommand(file, content) {
-    return { file, content: content.replace(/\{\{input\}\}/g, "$ARGUMENTS") };
-  },
-  planHooks(canonical, ctx) {
-    const actions = [];
-    const { scriptsDir } = this.paths(ctx.configDir);
-    const bashEntries = {};
-    for (const [event, entries] of Object.entries(canonical.hooks)) {
-      if (event !== "PostToolUse") {
-        ctx.warnings.push(`opencode: evento de hook '${event}' a\xFAn no soportado por el puente \u2014 omitido.`);
-        continue;
-      }
-      for (const entry of entries) {
-        if (!(entry.matcher ?? "").split("|").some((p7) => p7.trim().toLowerCase() === "bash")) {
-          ctx.warnings.push(`opencode: matcher de hook '${entry.matcher}' no soportado \u2014 omitido.`);
-          continue;
-        }
-        const includes = entry["x-command-includes"] ?? "*";
-        for (const hook of entry.hooks) {
-          const match = /\{\{SCRIPTS_DIR\}\}[/\\]([\w./\\-]+)/.exec(hook.command);
-          if (!match) {
-            ctx.warnings.push(`opencode: hook sin {{SCRIPTS_DIR}} no traducible: ${hook.command}`);
-            continue;
-          }
-          const script = `scripts/${path9.basename(match[1])}`;
-          (bashEntries[includes] ??= []).push(script);
-        }
-      }
-    }
-    const hooksFile = path9.join(ctx.configDir, "hooks.json");
-    const content = upsertJson(readTextIfExists(hooksFile), (root) => {
-      const afterValue = root["tool.execute.after"] ??= {};
-      if (afterValue === null || typeof afterValue !== "object" || Array.isArray(afterValue)) {
-        ctx.warnings.push("opencode: tool.execute.after no es un objeto; hooks gestionados omitidos.");
-        return;
-      }
-      const after = afterValue;
-      const bashValue = after["bash"];
-      if (bashValue !== void 0 && !Array.isArray(bashValue) && (bashValue === null || typeof bashValue !== "object")) {
-        ctx.warnings.push("opencode: tool.execute.after.bash no es un array ni un mapa; hooks gestionados omitidos.");
-        return;
-      }
-      const bash = Array.isArray(bashValue) ? { "*": bashValue } : bashValue ?? {};
-      after["bash"] = bash;
-      const managedScripts = new Set(Object.values(bashEntries).flat());
-      for (const [includes, scripts] of Object.entries(bash)) {
-        if (!Array.isArray(scripts)) continue;
-        const preserved = scripts.filter(
-          (script) => typeof script !== "string" || !managedScripts.has(script)
-        );
-        if (preserved.length > 0) bash[includes] = preserved;
-        else delete bash[includes];
-      }
-      for (const [includes, scripts] of Object.entries(bashEntries)) {
-        const current = bash[includes];
-        if (current !== void 0 && !Array.isArray(current)) {
-          ctx.warnings.push(`opencode: trigger bash '${includes}' no es un array; hook gestionado omitido.`);
-          continue;
-        }
-        const list = bash[includes] ??= [];
-        for (const s of scripts) if (!list.includes(s)) list.push(s);
-      }
-    });
-    actions.push({ kind: "write", target: hooksFile, content });
-    const scriptsSource = path9.join(ctx.stackDir, "scripts");
-    if (fs6.existsSync(scriptsSource)) {
-      for (const f of fs6.readdirSync(scriptsSource)) {
-        actions.push({ kind: "copy", source: path9.join(scriptsSource, f), target: path9.join(scriptsDir, f) });
-      }
-    }
-    return actions;
-  },
-  planMainConfig(canonical, ctx) {
-    const file = path9.join(ctx.configDir, "opencode.json");
-    const { pluginsDir } = this.paths(ctx.configDir);
-    const original = readMcpConfig(file);
-    const contentSource = original === null || original.trim() === "" ? null : original;
-    const isFreshConfig = contentSource === null;
-    const mcpOwnership = [];
-    const primaryModelOwnership = [];
-    const content = upsertJson(contentSource, (root) => {
-      const rawMcp = root["mcp"];
-      if (rawMcp !== void 0 && objectValue(rawMcp) === null) {
-        throw new Error("OpenCode: la clave 'mcp' debe ser un objeto; corr\xEDgela antes de reintentar sync.");
-      }
-      const existingMcp = rawMcp;
-      const context7 = canonical.servers.context7;
-      if (context7 !== void 0) assertCompatibleContext7(context7, existingMcp?.["context7"]);
-      root["$schema"] ??= "https://opencode.ai/config.json";
-      if (root[PRIMARY_MODEL_FIELD] === void 0) {
-        root[PRIMARY_MODEL_FIELD] = PRIMARY_MODEL;
-        if (ctx.ownedPrimaryModelFields?.has(PRIMARY_MODEL_FIELD) !== true) {
-          primaryModelOwnership.push({ field: PRIMARY_MODEL_FIELD, owned: true });
-        }
-      } else if (typeof root[PRIMARY_MODEL_FIELD] !== "string" || root[PRIMARY_MODEL_FIELD].trim() === "") {
-        throw new Error("OpenCode: 'model' debe ser un identificador provider/model no vac\xEDo; corr\xEDgelo antes de reintentar sync.");
-      }
-      const provider = ensureOwnedPrimaryObject(root, "provider", PRIMARY_PROVIDER_FIELD, ctx.ownedPrimaryModelFields, primaryModelOwnership);
-      const openai = ensureOwnedPrimaryObject(provider, "openai", PRIMARY_OPENAI_FIELD, ctx.ownedPrimaryModelFields, primaryModelOwnership);
-      const models = ensureOwnedPrimaryObject(openai, "models", PRIMARY_MODELS_FIELD, ctx.ownedPrimaryModelFields, primaryModelOwnership);
-      const sol = ensureOwnedPrimaryObject(models, PRIMARY_MODEL_ID, PRIMARY_SOL_FIELD, ctx.ownedPrimaryModelFields, primaryModelOwnership);
-      const limit = ensureOwnedPrimaryObject(sol, "limit", PRIMARY_LIMIT_PREFIX, ctx.ownedPrimaryModelFields, primaryModelOwnership);
-      for (const [key, value] of Object.entries(PRIMARY_LIMITS)) {
-        if (limit[key] !== void 0) continue;
-        limit[key] = value;
-        const field = `${PRIMARY_LIMIT_PREFIX}.${key}`;
-        if (ctx.ownedPrimaryModelFields?.has(field) !== true) {
-          primaryModelOwnership.push({ field, owned: true });
-        }
-      }
-      const defaults = loadCanonicalDefaults(ctx.stackDir)["opencode"];
-      const canonicalPermission = defaults?.["permission"];
-      if (isFreshConfig) {
-        if (canonicalPermission !== void 0) {
-          root["permission"] = canonicalPermission;
-          ctx.warnings.push(
-            "OpenCode: fresh config allows ordinary reads, edits, web access and Bash; sensitive operations ask, while protected paths and obvious destruction are denied. Native matching is not a universal filesystem sandbox."
-          );
-        }
-      } else if (canonicalPermission !== void 0 && !isDeepStrictEqual(root["permission"], canonicalPermission)) {
-        if (ctx.upgradePermissions === true) {
-          root["permission"] = canonicalPermission;
-        } else {
-          ctx.warnings.push(
-            "OpenCode: permission block differs from the stack default and was left untouched; re-run with --upgrade-permissions to replace it (a backup is created first), or edit it by hand. Overwriting discards your own permission changes, including any extra hardenings."
-          );
-        }
-      }
-      const mcp = root["mcp"] ??= {};
-      for (const [name, server] of Object.entries(canonical.servers)) {
-        const existing = mcp[name];
-        const owned = ctx.ownedMcpServers?.has(name) === true;
-        if (name === "context7" && existing !== void 0) {
-          if (owned && !isCanonicalContext7Server(server, existing)) {
-            mcpOwnership.push({ server: name, owned: false });
-          }
-          continue;
-        }
-        if (!isCanonicalMcpServerEnabled(name, server, ctx.enabledMcpServers)) {
-          if (owned) {
-            if (isManagedOptionalStdioServer(server, existing)) delete mcp[name];
-            mcpOwnership.push({ server: name, owned: false });
-          }
-          continue;
-        }
-        if (server.optional && existing !== void 0) {
-          if (!owned || !isManagedOptionalStdioServer(server, existing)) {
-            if (owned) mcpOwnership.push({ server: name, owned: false });
-            ctx.warnings.push(`OpenCode: MCP opcional '${name}' ya pertenece a la configuraci\xF3n del usuario; se conserva.`);
-            continue;
-          }
-        }
-        if (server.transport === "stdio") {
-          if (server.command === "{{ENGRAM_BIN}}" && ctx.engramBin === null) {
-            ctx.warnings.push(
-              "Engram no detectado: el MCP 'engram' no se registra. Inst\xE1lalo (github.com/Gentleman-Programming/engram) y re-ejecuta sync."
-            );
-            continue;
-          }
-          const command = server.command === "{{ENGRAM_BIN}}" ? ctx.engramBin : server.command;
-          mcp[name] = { type: "local", command: [command, ...server.args ?? []] };
-          if (server.optional && existing === void 0 && !owned) mcpOwnership.push({ server: name, owned: true });
-        } else {
-          const previous = mcp[name];
-          const headers = {};
-          for (const [key, raw] of Object.entries(server.headers ?? {})) {
-            const envRef = /^\$\{(\w+)\}$/.exec(raw);
-            headers[key] = previous?.headers?.[key] || (envRef ? `{env:${envRef[1]}}` : raw);
-          }
-          mcp[name] = {
-            type: "remote",
-            url: server.url,
-            ...Object.keys(headers).length > 0 ? { headers } : {}
-          };
-          if (name === "context7" && existing === void 0 && !owned) {
-            mcpOwnership.push({ server: name, owned: true });
-          }
-        }
-      }
-      if (pluginsDir !== null) {
-        const plugin = root["plugin"];
-        if (Array.isArray(plugin)) {
-          const pluginsDirPrefix = pathToFileURL(pluginsDir).href + "/";
-          const kept = plugin.filter((url) => !url.startsWith(pluginsDirPrefix));
-          if (kept.length === 0) delete root["plugin"];
-          else root["plugin"] = kept;
-          if (kept.some((u) => /engram/i.test(u))) {
-            ctx.warnings.push(
-              "OpenCode: hay un plugin de Engram registrado como paquete \u2014 revisa que no conviva con el engram.ts del stack (duplicar\xEDa la integraci\xF3n)."
-            );
-          }
-        }
-      }
-    });
-    return [{
-      kind: "write",
-      target: file,
-      content,
-      ...mcpOwnership.length > 0 ? { mcpOwnership } : {},
-      ...primaryModelOwnership.length > 0 ? { primaryModelOwnership } : {}
-    }];
-  },
-  planUnmerge(mcp, hooks, ctx) {
-    const actions = [];
-    const { systemPromptFile, pluginsDir } = this.paths(ctx.configDir);
-    const prompt = readTextIfExists(systemPromptFile);
-    if (prompt !== null) {
-      const content = removeSystemPromptSections(prompt);
-      actions.push({ kind: "write", target: systemPromptFile, content });
-    }
-    const configFile = path9.join(ctx.configDir, "opencode.json");
-    const config = readMcpConfig(configFile);
-    if (config !== null) {
-      const mcpOwnership = [];
-      const primaryModelOwnership = [];
-      const content = upsertJson(config, (root) => {
-        if (ctx.ownedPrimaryModelFields?.has(PRIMARY_MODEL_FIELD) === true) {
-          if (root[PRIMARY_MODEL_FIELD] === PRIMARY_MODEL) delete root[PRIMARY_MODEL_FIELD];
-          primaryModelOwnership.push({ field: PRIMARY_MODEL_FIELD, owned: false });
-        }
-        const provider = objectValue(root["provider"]);
-        const openai = provider === null ? null : objectValue(provider["openai"]);
-        const models = openai === null ? null : objectValue(openai["models"]);
-        const sol = models === null ? null : objectValue(models[PRIMARY_MODEL_ID]);
-        const limit = sol === null ? null : objectValue(sol["limit"]);
-        if (limit !== null) {
-          for (const [key, value] of Object.entries(PRIMARY_LIMITS)) {
-            const field = `${PRIMARY_LIMIT_PREFIX}.${key}`;
-            if (ctx.ownedPrimaryModelFields?.has(field) !== true) continue;
-            if (limit[key] === value) delete limit[key];
-          }
-        }
-        if (sol !== null && ctx.ownedPrimaryModelFields?.has(PRIMARY_LIMIT_PREFIX) === true) pruneEmpty(sol, "limit");
-        if (models !== null && ctx.ownedPrimaryModelFields?.has(PRIMARY_SOL_FIELD) === true) pruneEmpty(models, PRIMARY_MODEL_ID);
-        if (openai !== null && ctx.ownedPrimaryModelFields?.has(PRIMARY_MODELS_FIELD) === true) pruneEmpty(openai, "models");
-        if (provider !== null && ctx.ownedPrimaryModelFields?.has(PRIMARY_OPENAI_FIELD) === true) pruneEmpty(provider, "openai");
-        if (ctx.ownedPrimaryModelFields?.has(PRIMARY_PROVIDER_FIELD) === true) pruneEmpty(root, "provider");
-        const managedFields = [
-          PRIMARY_PROVIDER_FIELD,
-          PRIMARY_OPENAI_FIELD,
-          PRIMARY_MODELS_FIELD,
-          PRIMARY_SOL_FIELD,
-          PRIMARY_LIMIT_PREFIX,
-          ...Object.keys(PRIMARY_LIMITS).map((key) => `${PRIMARY_LIMIT_PREFIX}.${key}`)
-        ];
-        for (const field of managedFields) {
-          if (ctx.ownedPrimaryModelFields?.has(field) === true) primaryModelOwnership.push({ field, owned: false });
-        }
-        const rawMcpBlock = root["mcp"];
-        if (rawMcpBlock !== void 0 && objectValue(rawMcpBlock) === null) {
-          throw new Error("OpenCode: la clave 'mcp' debe ser un objeto; corr\xEDgela antes de reintentar uninstall.");
-        }
-        const mcpBlock = rawMcpBlock;
-        if (mcpBlock !== void 0) {
-          for (const [name, server] of Object.entries(mcp.servers)) {
-            if (name === "context7") {
-              const canonical = isCanonicalContext7Server(server, mcpBlock[name]);
-              const owned = ctx.ownedMcpServers?.has(name) === true;
-              if (owned) {
-                if (canonical) delete mcpBlock[name];
-                mcpOwnership.push({ server: name, owned: false });
-              }
-              continue;
-            }
-            if (!server.optional) {
-              delete mcpBlock[name];
-              continue;
-            }
-            if (ctx.ownedMcpServers?.has(name) === true) {
-              if (isManagedOptionalStdioServer(server, mcpBlock[name])) delete mcpBlock[name];
-              mcpOwnership.push({ server: name, owned: false });
-            }
-          }
-          if (Object.keys(mcpBlock).length === 0) delete root["mcp"];
-        }
-        const plugin = root["plugin"];
-        if (Array.isArray(plugin) && pluginsDir !== null) {
-          const pluginsDirPrefix = pathToFileURL(pluginsDir).href + "/";
-          const kept = plugin.filter((url) => !url.startsWith(pluginsDirPrefix));
-          if (kept.length === 0) delete root["plugin"];
-          else root["plugin"] = kept;
-        }
-      });
-      actions.push({
-        kind: "write",
-        target: configFile,
-        content,
-        ...mcpOwnership.length > 0 ? { mcpOwnership } : {},
-        ...primaryModelOwnership.length > 0 ? { primaryModelOwnership } : {}
-      });
-    }
-    const hooksFile = path9.join(ctx.configDir, "hooks.json");
-    const hooksJson = readTextIfExists(hooksFile);
-    if (hooksJson !== null) {
-      const ourScripts = hookScriptNames(hooks);
-      const content = upsertJson(hooksJson, (root) => {
-        const after = root["tool.execute.after"];
-        if (!after) return;
-        for (const tool of Object.keys(after)) {
-          const byCommand = after[tool];
-          for (const includes of Object.keys(byCommand)) {
-            byCommand[includes] = byCommand[includes].filter(
-              (script) => !ourScripts.some((s) => script.includes(s))
-            );
-            if (byCommand[includes].length === 0) delete byCommand[includes];
-          }
-          if (Object.keys(byCommand).length === 0) delete after[tool];
-        }
-        if (Object.keys(after).length === 0) delete root["tool.execute.after"];
-      });
-      actions.push({ kind: "write", target: hooksFile, content: content.trim() === "{}" ? "" : content });
-    }
-    return actions;
-  }
-};
-
-// src/adapters/claude-code.ts
-import path10 from "path";
-import fs7 from "fs";
-import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
-function yamlString2(value) {
-  return JSON.stringify(value);
-}
-var memoryTools = (names) => names.flatMap((n) => [`mcp__engram__${n}`, `mcp__plugin_engram_engram__${n}`]);
-var MEMORY_TOOLS = memoryTools(["mem_save", "mem_search", "mem_context"]);
-var ENGRAM_AGENT_TOOLS = [
-  "Read",
-  "Skill",
-  ...memoryTools(["mem_context", "mem_search", "mem_get_observation", "mem_timeline", "mem_current_project"])
-];
-function isRecord(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function readMcpConfig2(file) {
-  let content;
-  try {
-    content = fs7.readFileSync(file, "utf8");
-  } catch (error) {
-    const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
-    if (code === "ENOENT") return null;
-    throw new Error(`Claude Code: no se pudo leer la configuraci\xF3n MCP en ${file} (${code}).`);
-  }
-  if (content.trim() !== "") {
-    try {
-      if (!isRecord(JSON.parse(content))) throw new Error();
-    } catch {
-      throw new Error(`Claude Code: la configuraci\xF3n MCP en ${file} debe contener un objeto JSON v\xE1lido.`);
-    }
-  }
-  return content;
-}
-function isCompatibleContext7Server2(server, value) {
-  if (server.transport !== "http" || typeof server.url !== "string" || !isRecord(value)) return false;
-  return value.type === "http" && value.url === server.url;
-}
-function canonicalContext7Server2(server) {
-  const headers = {};
-  for (const [key, raw] of Object.entries(server.headers ?? {})) {
-    headers[key] = /^\$\{(\w+)\}$/.test(raw) ? "" : raw;
-  }
-  return {
-    type: "http",
-    url: server.url,
-    ...Object.keys(headers).length > 0 ? { headers } : {}
-  };
-}
-function isCanonicalContext7Server2(server, value) {
-  return isCompatibleContext7Server2(server, value) && isDeepStrictEqual2(value, canonicalContext7Server2(server));
-}
-function assertCompatibleContext72(server, value) {
-  if (value !== void 0 && !isCompatibleContext7Server2(server, value)) {
-    throw new Error("Claude Code: MCP 'context7' entra en conflicto con una definici\xF3n existente (endpoint o tipo incompatible). Conserva la configuraci\xF3n y corrige el conflicto antes de reintentar.");
-  }
-}
-function hasClaudeManualApproval(configDir) {
-  const content = readTextIfExists(path10.join(configDir, "settings.json"));
-  if (content === null) return false;
-  try {
-    const root = JSON.parse(content);
-    const permissions = isRecord(root) ? root.permissions : void 0;
-    const expected = loadCanonicalDefaults(stackRoot())["claude-code"]?.["permissions"];
-    return isRecord(permissions) && expected !== void 0 && isDeepStrictEqual2(permissions, expected);
-  } catch {
-    return false;
-  }
-}
-function toolsFor(agent) {
-  if (agent.name === "engram") return ENGRAM_AGENT_TOOLS.join(", ");
-  if (!agent.readonly) return null;
-  const tools = ["Read", "Grep", "Glob", "Skill"];
-  if (agent.bash !== "none") tools.push("Bash");
-  tools.push(...MEMORY_TOOLS);
-  return tools.join(", ");
-}
-function hasEngramPlugin(configDir) {
-  if (fs7.existsSync(path10.join(configDir, "plugins", "marketplaces", "engram"))) return true;
-  const registry = readTextIfExists(path10.join(configDir, "plugins", "installed_plugins.json"));
-  if (registry === null) return false;
-  try {
-    const parsed = JSON.parse(registry);
-    const keys = [...Object.keys(parsed), ...Object.keys(parsed["plugins"] ?? {})];
-    return keys.some((k) => k === "engram" || k.startsWith("engram@"));
-  } catch {
-    return false;
-  }
-}
-function isManagedOptionalStdioServer2(server, value) {
-  if (!server.optional || server.transport !== "stdio" || value === null || typeof value !== "object" || Array.isArray(value)) {
-    return false;
-  }
-  const current = value;
-  const expectedArgs = server.args ?? [];
-  return Object.keys(current).length === 3 && current.type === "stdio" && current.command === server.command && Array.isArray(current.args) && current.args.length === expectedArgs.length && current.args.every((arg, index) => arg === expectedArgs[index]);
-}
-var claudeCodeAdapter = {
-  id: "claude-code",
-  name: "Claude Code",
-  detect: detectClaudeCode,
-  reportCapabilities(configDir) {
-    const prompt = readTextIfExists(path10.join(configDir, "CLAUDE.md"));
-    return createLocalCapabilityReport("claude-code", [
-      ...hasManagedMarkdownSection(prompt, "system-prompt") ? [{
-        id: "policy-guidance",
-        state: "prompt-only",
-        reason: "The managed policy prompt is advisory and cannot enforce the policy",
-        evidence: { source: "jorgex-stack-system-prompt", version: "1" }
-      }] : [],
-      ...hasClaudeManualApproval(configDir) ? [{
-        id: "tool-approval",
-        state: "manual",
-        reason: "Canonical approval declarations require a human decision; runtime activation is not certified",
-        evidence: { source: "jorgex-stack-claude-approval-policy", version: "1" }
-      }] : []
-    ]);
-  },
-  injectEngramProtocol(ctx) {
-    return !hasEngramPlugin(ctx.configDir);
-  },
-  paths(configDir) {
-    return {
-      systemPromptFile: path10.join(configDir, "CLAUDE.md"),
-      agentsDir: path10.join(configDir, "agents"),
-      skillsDir: path10.join(configDir, "skills"),
-      commandsDir: path10.join(configDir, "commands"),
-      pluginsDir: null,
-      scriptsDir: path10.join(configDir, "scripts"),
-      outputStylesDir: path10.join(configDir, "output-styles"),
-      profilesDir: null
-    };
-  },
-  renderAgent(agent, models) {
-    if (agent.mode === "primary") {
-      const title = agent.name.charAt(0).toUpperCase() + agent.name.slice(1);
-      const style = `---
-name: ${title}
-description: ${yamlString2(agent.description)}
-keep-coding-instructions: true
----
-${agent.body}`;
-      return [{ file: `${agent.name}.md`, content: style, kind: "output-style" }];
-    }
-    const lines = [`name: ${agent.name}`, `description: ${yamlString2(agent.description)}`];
-    const tools = toolsFor(agent);
-    if (tools !== null) lines.push(`tools: ${tools}`);
-    lines.push(`model: ${resolveAgentModel(models, agent.name, agent.tier).model}`);
-    return [
-      {
-        file: `${agent.name}.md`,
-        content: `---
-${lines.join("\n")}
----
-${agent.body}`,
-        kind: "agent"
-      }
-    ];
-  },
-  renderCommand(file, content) {
-    return { file, content: content.replace(/\{\{input\}\}/g, "$ARGUMENTS") };
-  },
-  planHooks(canonical, ctx) {
-    const actions = [];
-    const { scriptsDir } = this.paths(ctx.configDir);
-    const original = readTextIfExists(path10.join(ctx.configDir, "settings.json"));
-    const contentSource = original === null || original.trim() === "" ? null : original;
-    const settingsFile = path10.join(ctx.configDir, "settings.json");
-    let content = upsertNativeHooks(contentSource, canonical, scriptsDir);
-    const defaults = loadCanonicalDefaults(ctx.stackDir)["claude-code"];
-    const canonicalPermissions = defaults?.["permissions"];
-    if (contentSource === null) {
-      if (canonicalPermissions !== void 0) {
-        content = upsertJson(content, (root) => {
-          if (root["permissions"] === void 0) {
-            root["permissions"] = canonicalPermissions;
-            ctx.warnings.push(
-              "Claude Code: fresh config enables read-anywhere via Read/Grep/Glob allow rules; shell, writes and web egress remain approval-gated, but broad local reads can expose secrets not covered by deny rules."
-            );
-          }
-        });
-      }
-    } else if (canonicalPermissions !== void 0) {
-      content = upsertJson(content, (root) => {
-        if (isDeepStrictEqual2(root["permissions"], canonicalPermissions)) return;
-        if (ctx.upgradePermissions === true) {
-          root["permissions"] = canonicalPermissions;
-        } else {
-          ctx.warnings.push(
-            "Claude Code: permissions block differs from the stack default and was left untouched; re-run with --upgrade-permissions to replace it (a backup is created first), or edit it by hand. Overwriting discards your own permission changes, including any extra hardenings."
-          );
-        }
-      });
-    }
-    actions.push({ kind: "write", target: settingsFile, content });
-    const scriptsSource = path10.join(ctx.stackDir, "scripts");
-    if (fs7.existsSync(scriptsSource)) {
-      for (const f of fs7.readdirSync(scriptsSource)) {
-        actions.push({ kind: "copy", source: path10.join(scriptsSource, f), target: path10.join(scriptsDir, f) });
-      }
-    }
-    return actions;
-  },
-  planMainConfig(canonical, ctx) {
-    const file = path10.join(path10.dirname(ctx.configDir), `${path10.basename(ctx.configDir)}.json`);
-    const mcpOwnership = [];
-    const content = upsertJson(readMcpConfig2(file), (root) => {
-      const rawServers = root["mcpServers"];
-      if (rawServers !== void 0 && !isRecord(rawServers)) {
-        throw new Error("Claude Code: la clave 'mcpServers' debe ser un objeto; corr\xEDgela antes de reintentar sync.");
-      }
-      const existingServers = rawServers;
-      const context7 = canonical.servers.context7;
-      if (context7 !== void 0) assertCompatibleContext72(context7, existingServers?.["context7"]);
-      const servers = root["mcpServers"] ??= {};
-      for (const [name, server] of Object.entries(canonical.servers)) {
-        const existing = servers[name];
-        const owned = ctx.ownedMcpServers?.has(name) === true;
-        if (name === "context7" && existing !== void 0) {
-          if (owned && !isCanonicalContext7Server2(server, existing)) {
-            mcpOwnership.push({ server: name, owned: false });
-          }
-          continue;
-        }
-        if (!isCanonicalMcpServerEnabled(name, server, ctx.enabledMcpServers)) {
-          if (owned) {
-            if (isManagedOptionalStdioServer2(server, existing)) delete servers[name];
-            mcpOwnership.push({ server: name, owned: false });
-          }
-          continue;
-        }
-        if (server.optional && existing !== void 0) {
-          if (!owned || !isManagedOptionalStdioServer2(server, existing)) {
-            if (owned) mcpOwnership.push({ server: name, owned: false });
-            ctx.warnings.push(`Claude Code: MCP opcional '${name}' ya pertenece a la configuraci\xF3n del usuario; se conserva.`);
-            continue;
-          }
-        }
-        if (server.transport === "stdio") {
-          if (server.command === "{{ENGRAM_BIN}}" && hasEngramPlugin(ctx.configDir)) {
-            if (name in servers) delete servers[name];
-            ctx.warnings.push(
-              "Claude Code: Engram ya est\xE1 integrado v\xEDa plugin \u2014 no se registra el MCP para no duplicar las tools de memoria."
-            );
-            continue;
-          }
-          if (server.command === "{{ENGRAM_BIN}}" && ctx.engramBin === null) {
-            ctx.warnings.push(
-              "Engram no detectado: el MCP 'engram' no se registra. Inst\xE1lalo (github.com/Gentleman-Programming/engram) y re-ejecuta sync."
-            );
-            continue;
-          }
-          const command = server.command === "{{ENGRAM_BIN}}" ? ctx.engramBin : server.command;
-          servers[name] = { type: "stdio", command, args: server.args ?? [] };
-          if (server.optional && existing === void 0 && !owned) mcpOwnership.push({ server: name, owned: true });
-        } else {
-          const previous = servers[name];
-          const headers = {};
-          for (const [key, raw] of Object.entries(server.headers ?? {})) {
-            const envRef = /^\$\{(\w+)\}$/.exec(raw);
-            headers[key] = previous?.headers?.[key] || (envRef ? "" : raw);
-          }
-          servers[name] = {
-            type: "http",
-            url: server.url,
-            ...Object.keys(headers).length > 0 ? { headers } : {}
-          };
-          if (name === "context7" && existing === void 0 && !owned) {
-            mcpOwnership.push({ server: name, owned: true });
-          }
-        }
-      }
-    });
-    return [{ kind: "write", target: file, content, ...mcpOwnership.length > 0 ? { mcpOwnership } : {} }];
-  },
-  planUnmerge(mcp, hooks, ctx) {
-    const actions = [];
-    const { systemPromptFile } = this.paths(ctx.configDir);
-    const prompt = readTextIfExists(systemPromptFile);
-    if (prompt !== null) {
-      const content = removeSystemPromptSections(prompt);
-      actions.push({ kind: "write", target: systemPromptFile, content });
-    }
-    const settingsFile = path10.join(ctx.configDir, "settings.json");
-    const settings = readTextIfExists(settingsFile);
-    if (settings !== null) {
-      const content = removeNativeHooks(settings, hooks);
-      if (content !== null) {
-        actions.push({ kind: "write", target: settingsFile, content: content.trim() === "{}" ? "" : content });
-      }
-    }
-    const mainFile = path10.join(path10.dirname(ctx.configDir), `${path10.basename(ctx.configDir)}.json`);
-    const main2 = readMcpConfig2(mainFile);
-    if (main2 !== null) {
-      const mcpOwnership = [];
-      const content = upsertJson(main2, (root) => {
-        const rawServers = root["mcpServers"];
-        if (rawServers === void 0) return;
-        if (!isRecord(rawServers)) {
-          throw new Error("Claude Code: la clave 'mcpServers' debe ser un objeto; corr\xEDgela antes de reintentar uninstall.");
-        }
-        const servers = rawServers;
-        for (const [name, server] of Object.entries(mcp.servers)) {
-          if (name === "context7") {
-            const canonical = isCanonicalContext7Server2(server, servers[name]);
-            const owned = ctx.ownedMcpServers?.has(name) === true;
-            if (owned) {
-              if (canonical) delete servers[name];
-              mcpOwnership.push({ server: name, owned: false });
-            }
-            continue;
-          }
-          if (!server.optional) {
-            delete servers[name];
-            continue;
-          }
-          if (ctx.ownedMcpServers?.has(name) === true) {
-            if (isManagedOptionalStdioServer2(server, servers[name])) delete servers[name];
-            mcpOwnership.push({ server: name, owned: false });
-          }
-        }
-        if (Object.keys(servers).length === 0) delete root["mcpServers"];
-      });
-      actions.push({ kind: "write", target: mainFile, content, ...mcpOwnership.length > 0 ? { mcpOwnership } : {} });
-    }
-    return actions;
-  }
-};
-
-// src/adapters/codex.ts
-import path11 from "path";
-import fs8 from "fs";
-function tomlString(value) {
-  return JSON.stringify(value);
-}
-function readMcpConfig3(file) {
-  try {
-    return fs8.readFileSync(file, "utf8");
-  } catch (error) {
-    const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
-    if (code === "ENOENT") return null;
-    throw new Error(`Codex: no se pudo leer la configuraci\xF3n MCP en ${file} (${code}).`);
-  }
-}
-var PRIMARY_MODEL2 = '"gpt-5.6-sol"';
-var PRIMARY_CONTEXT_WINDOW = "872000";
-var PRIMARY_MODEL_FIELD2 = "model";
-var PRIMARY_CONTEXT_FIELD = "model_context_window";
-function tomlMultiline(value) {
-  if (value.includes("'''")) return JSON.stringify(value);
-  return `'''
-${value.replace(/\r\n/g, "\n").trim()}
-'''`;
-}
-function stdioMcpSection(server) {
-  const args = (server.args ?? []).map(tomlString).join(", ");
-  return `command = ${tomlString(server.command)}
-args = [${args}]`;
-}
-function isManagedOptionalStdioServer3(server, section) {
-  return server.optional === true && server.transport === "stdio" && section?.trim() === stdioMcpSection(server);
-}
-function hasActiveEngramPlugin(configDir) {
-  const config = readTextIfExists(path11.join(configDir, "config.toml"));
-  if (config === null) return false;
-  const match = /\[plugins\."engram@[^"]*"\]([^[]*)/.exec(config);
-  return match !== null && !/enabled\s*=\s*false/.test(match[1]);
-}
-function hasEngramProtocol(configDir) {
-  if (hasActiveEngramPlugin(configDir)) return true;
-  if (fs8.existsSync(path11.join(configDir, "engram-instructions.md"))) return true;
-  const config = readTextIfExists(path11.join(configDir, "config.toml"));
-  return config !== null && /engram-instructions\.md/.test(config);
-}
-var CODEX_JSON_STRING = String.raw`"(?:\\.|[^"\\\r\n])*"`;
-var CODEX_JSON_VALUE = String.raw`(?:${CODEX_JSON_STRING}|-?(?:\d+(?:\.\d*)?|\.\d+)(?:[eE][+-]?\d+)?|true|false)`;
-var CODEX_JSON_STRING_ARRAY = String.raw`\[(?:\s*${CODEX_JSON_STRING}(?:\s*,\s*${CODEX_JSON_STRING})*\s*)?\]`;
-var CODEX_KEY = String.raw`(?:[A-Za-z0-9_-]+|${CODEX_JSON_STRING})`;
-var CODEX_ASSIGNMENT = new RegExp(String.raw`^\s*(${CODEX_KEY})\s*=\s*(${CODEX_JSON_STRING_ARRAY}|${CODEX_JSON_VALUE})\s*(?:#.*)?$`);
-var CODEX_HEADER = new RegExp(String.raw`^\[\s*(${CODEX_KEY}(?:\s*\.\s*${CODEX_KEY})*)\s*\]\s*(?:#.*)?$`);
-function tomlAssignment(section, key) {
-  const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const keyPattern = new RegExp(`^\\s*(?:${escaped}|"${escaped}"|'${escaped}')\\s*=`);
-  const lines = section.split(/\r?\n/);
-  const mask = multilineStringMask(lines);
-  for (const [index, line] of lines.entries()) {
-    if (mask[index] || !keyPattern.test(line)) continue;
-    const match = CODEX_ASSIGNMENT.exec(line);
-    if (match) return { present: true, raw: match[2] };
-    const equals = line.indexOf("=");
-    const raw = equals === -1 ? void 0 : line.slice(equals + 1).trim().replace(/\s+#.*$/, "");
-    return { present: true, ...raw?.startsWith("'") && raw.endsWith("'") ? { raw } : {} };
-  }
-  return { present: false };
-}
-function parseTomlString(raw) {
-  if (raw === void 0) return void 0;
-  const value = raw.trim();
-  if (value.startsWith('"')) {
-    try {
-      const parsed = JSON.parse(value);
-      return typeof parsed === "string" ? parsed : void 0;
-    } catch {
-      return void 0;
-    }
-  }
-  if (value.length >= 2 && value.startsWith("'") && value.endsWith("'")) {
-    return value.slice(1, -1);
-  }
-  return void 0;
-}
-function context7HttpSection(server) {
-  const body = [`url = ${tomlString(server.url)}`];
-  const envHeaders = [];
-  const literalHeaders = [];
-  for (const [key, raw] of Object.entries(server.headers ?? {})) {
-    const envRef = /^\$\{(\w+)\}$/.exec(raw);
-    if (envRef) envHeaders.push(`${tomlString(key)} = ${tomlString(envRef[1])}`);
-    else literalHeaders.push(`${tomlString(key)} = ${tomlString(raw)}`);
-  }
-  if (literalHeaders.length > 0) body.push(`http_headers = { ${literalHeaders.join(", ")} }`);
-  if (envHeaders.length > 0) body.push(`env_http_headers = { ${envHeaders.join(", ")} }`);
-  return body.join("\n");
-}
-function isCompatibleContext7Server3(server, section) {
-  if (server.transport !== "http" || typeof server.url !== "string" || section === null) return false;
-  const url = tomlAssignment(section, "url");
-  const command = tomlAssignment(section, "command");
-  const type = tomlAssignment(section, "type");
-  const enabled = tomlAssignment(section, "enabled");
-  const declaredType = type.present ? parseTomlString(type.raw) : "http";
-  return url.present && parseTomlString(url.raw) === server.url && !command.present && declaredType === "http" && (!enabled.present || enabled.raw?.trim() === "true");
-}
-function isCanonicalContext7Server3(server, section, config) {
-  return isCompatibleContext7Server3(server, section) && section.trim() === context7HttpSection(server) && !hasTomlChildSection(config, "mcp_servers.context7");
-}
-function assertCompatibleContext73(server, section, config) {
-  if (section === null && hasTomlChildSection(config, "mcp_servers.context7") || section !== null && !isCompatibleContext7Server3(server, section)) {
-    throw new Error("Codex: MCP 'context7' entra en conflicto con una definici\xF3n existente (endpoint, tipo o estado nativo incompatible). Conserva la configuraci\xF3n y corrige el conflicto antes de reintentar.");
-  }
-}
-var CODEX_PERMISSION_HEADERS = {
-  base: "permissions.jorgex-read-anywhere",
-  filesystem: "permissions.jorgex-read-anywhere.filesystem",
-  workspaceRoots: 'permissions.jorgex-read-anywhere.filesystem.":workspace_roots"'
-};
-var CODEX_PERMISSION_PROFILE = {
-  base: [["extends", ":workspace"]],
-  filesystem: [
-    [":root", "read"],
-    ["*.env", "deny"],
-    ["*.env.*", "deny"],
-    ["~/.ssh/**", "deny"],
-    ["~/.aws/credentials", "deny"],
-    ["~/.npmrc", "deny"],
-    ["~/.git-credentials", "deny"],
-    ["**/id_rsa", "deny"],
-    ["**/id_ed25519", "deny"],
-    ["**/*.pem", "deny"],
-    ["**/*.key", "deny"]
-  ],
-  workspaceRoots: [
-    [".", "write"],
-    ["*.env", "deny"],
-    ["*.env.*", "deny"],
-    [".ssh/**", "deny"],
-    [".aws/credentials", "deny"],
-    [".npmrc", "deny"],
-    [".git-credentials", "deny"],
-    ["**/id_rsa", "deny"],
-    ["**/id_ed25519", "deny"],
-    ["**/*.pem", "deny"],
-    ["**/*.key", "deny"]
-  ]
-};
-var CODEX_PERMISSION_SECTIONS = [
-  { header: CODEX_PERMISSION_HEADERS.base, entries: CODEX_PERMISSION_PROFILE.base, quoteKeys: false },
-  { header: CODEX_PERMISSION_HEADERS.filesystem, entries: CODEX_PERMISSION_PROFILE.filesystem, quoteKeys: true },
-  { header: CODEX_PERMISSION_HEADERS.workspaceRoots, entries: CODEX_PERMISSION_PROFILE.workspaceRoots, quoteKeys: true }
-];
-function renderCodexPermissionEntries(entries, quoteKeys) {
-  return entries.map(([key, value]) => `${quoteKeys ? JSON.stringify(key) : key} = ${JSON.stringify(value)}`).join("\n");
-}
-var CODEX_STALE_PERMISSIONS_WARNING = "Codex: permission profile differs from the stack default and was left untouched; re-run with --upgrade-permissions to replace it (a backup is created first), or edit it by hand. Overwriting discards your own permission changes, including any extra hardenings.";
-function codexNormalizedHeader(header) {
-  return headerName(`[${header}]`) ?? header;
-}
-function readCodexRootValue(config, key) {
-  const lines = config.replace(/\r\n/g, "\n").split("\n");
-  const mask = multilineStringMask(lines);
-  const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const keyPattern = new RegExp(`^\\s*(?:${escaped}|"${escaped}"|'${escaped}')\\s*=`);
-  for (const [index, line] of lines.entries()) {
-    if (mask[index]) continue;
-    if (line.trim().startsWith("[")) break;
-    if (!keyPattern.test(line)) continue;
-    const match = CODEX_ASSIGNMENT.exec(line.trim());
-    return match === null ? void 0 : parseTomlString(match[2]);
-  }
-  return void 0;
-}
-function setCodexRootKey(config, key, value) {
-  const eol = config.includes("\r\n") ? "\r\n" : "\n";
-  const lines = config.replace(/\r\n/g, "\n").split("\n");
-  const mask = multilineStringMask(lines);
-  const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const keyPattern = new RegExp(`^\\s*(?:${escaped}|"${escaped}"|'${escaped}')\\s*=`);
-  const assignment = new RegExp(
-    `^(\\s*(?:${escaped}|"${escaped}"|'${escaped}')\\s*=\\s*)(${CODEX_JSON_STRING_ARRAY}|${CODEX_JSON_VALUE})(\\s*(?:#.*)?)$`
-  );
-  for (const [index, line] of lines.entries()) {
-    if (mask[index]) continue;
-    if (line.trim().startsWith("[")) break;
-    if (!keyPattern.test(line)) continue;
-    const match = assignment.exec(line);
-    lines[index] = match === null ? `${key} = ${value}` : `${match[1]}${value}${match[3]}`;
-    return lines.join(eol);
-  }
-  return upsertTomlRootKeyIfMissing(config, key, value);
-}
-function isCodexPermissionBlockCurrent(config, defaults) {
-  const expectedApproval = defaults["approval_policy"];
-  const expectedDefault = defaults["default_permissions"];
-  if (typeof expectedApproval !== "string" || typeof expectedDefault !== "string") return true;
-  if (readCodexRootValue(config, "approval_policy") !== expectedApproval) return false;
-  if (readCodexRootValue(config, "default_permissions") !== expectedDefault) return false;
-  return CODEX_PERMISSION_SECTIONS.every(
-    ({ header, entries, quoteKeys }) => (readTomlSection(config, codexNormalizedHeader(header)) ?? "").trim() === renderCodexPermissionEntries(entries, quoteKeys).trim()
-  );
-}
-function reseedCodexPermissionBlock(config, defaults) {
-  let out = setCodexRootKey(config, "approval_policy", tomlString(String(defaults["approval_policy"])));
-  out = setCodexRootKey(out, "default_permissions", tomlString(String(defaults["default_permissions"])));
-  for (const { header, entries, quoteKeys } of CODEX_PERMISSION_SECTIONS) {
-    out = upsertTomlSection(out, header, renderCodexPermissionEntries(entries, quoteKeys));
-  }
-  return out;
-}
-function parseCodexKey(raw) {
-  if (!raw.startsWith('"')) return raw;
-  try {
-    const value = JSON.parse(raw);
-    return typeof value === "string" ? value : null;
-  } catch {
-    return null;
-  }
-}
-function parseCodexValue(raw) {
-  try {
-    const value = JSON.parse(raw);
-    return Array.isArray(value) && value.every((item) => typeof item === "string") || !Array.isArray(value) && (value === null || typeof value !== "object") ? value : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function parseCodexHeader(line) {
-  const match = CODEX_HEADER.exec(line.trim());
-  if (match === null) return null;
-  for (const quoted of match[1].match(/"(?:\\.|[^"\\\r\n])*"/g) ?? []) {
-    if (parseCodexKey(quoted) === null) return null;
-  }
-  return match[1].replace(/\s*\.\s*/g, ".");
-}
-function scanCodexToml(config) {
-  if (config.includes("'''") || config.includes('"""')) return null;
-  const root = /* @__PURE__ */ new Map();
-  const sections = /* @__PURE__ */ new Map();
-  const headers = /* @__PURE__ */ new Set();
-  const keys = /* @__PURE__ */ new Set();
-  let section = null;
-  for (const line of config.replace(/\r\n/g, "\n").split("\n")) {
-    const trimmed = line.trim();
-    if (trimmed === "" || trimmed.startsWith("#")) continue;
-    if (trimmed.startsWith("[")) {
-      const header = parseCodexHeader(trimmed);
-      if (header === null || headers.has(header)) return null;
-      headers.add(header);
-      if (header.startsWith(`${CODEX_PERMISSION_HEADERS.base}.`) && !CODEX_PERMISSION_SECTIONS.some((entry) => entry.header === header)) {
-        return null;
-      }
-      section = header;
-      if (CODEX_PERMISSION_SECTIONS.some((entry) => entry.header === header)) sections.set(header, /* @__PURE__ */ new Map());
-      continue;
-    }
-    const relevant = section === null || CODEX_PERMISSION_SECTIONS.some((entry) => entry.header === section);
-    const match = CODEX_ASSIGNMENT.exec(trimmed);
-    if (!relevant && match === null) continue;
-    if (match === null) return null;
-    const key = parseCodexKey(match[1]);
-    const value = parseCodexValue(match[2]);
-    if (key === null || value === void 0) return null;
-    if (section === null && (key === "profile" || key === "sandbox_mode")) return null;
-    const scope = section ?? "<root>";
-    const declaration = `${scope}\0${key}`;
-    if (keys.has(declaration)) return null;
-    keys.add(declaration);
-    if (section === null) root.set(key, value);
-    else if (sections.has(section)) sections.get(section).set(key, value);
-  }
-  return { root, sections };
-}
-function hasCanonicalCodexPermissionProfile(scan) {
-  for (const { header, entries } of CODEX_PERMISSION_SECTIONS) {
-    const actual = scan.sections.get(header);
-    if (actual === void 0 || actual.size !== entries.length) return false;
-    for (const [key, expected] of entries) {
-      if (actual.get(key) !== expected) return false;
+      throw new Error(`Marcadores de estilo ambiguos o desconocidos en ${sourcePath}; revisa el bloque ${DEFAULT_SECTION}.`);
     }
   }
-  return true;
+  const installedContent = upsertMarkdownSection(originalContent, DEFAULT_SECTION, canonical);
+  if (originalContent !== null && originalContent !== installedContent) validateBackupRoot(options.rootDir);
+  const content = installedContent.replace(DEFAULT_OPEN, "").replace(DEFAULT_CLOSE, "").replace(/\r\n?/g, "\n").trim();
+  return {
+    sourcePath,
+    content,
+    canonicalPath,
+    originalContent,
+    installedContent,
+    rootDir: options.rootDir,
+    backupRoot: options.rootDir === void 0 ? void 0 : path.join(options.rootDir, "backups")
+  };
 }
-function hasCodexManualApproval(configDir) {
-  const config = readTextIfExists(path11.join(configDir, "config.toml"));
-  if (config === null) return false;
-  const scan = scanCodexToml(config);
-  if (scan === null) return false;
-  try {
-    const defaults = loadCanonicalDefaults(stackRoot())["codex"];
-    const expectedApproval = defaults?.["approval_policy"];
-    const expectedPermissions = defaults?.["default_permissions"];
-    return typeof expectedApproval === "string" && typeof expectedPermissions === "string" && scan.root.get("approval_policy") === expectedApproval && scan.root.get("default_permissions") === expectedPermissions && hasCanonicalCodexPermissionProfile(scan);
-  } catch {
-    return false;
+function applyWritingStyle(plan, dryRun = false) {
+  if (dryRun) return;
+  const current = readStyleText(plan.sourcePath, { rootDir: plan.rootDir });
+  if (current === plan.installedContent) return;
+  if (current !== plan.originalContent) {
+    throw new Error(`El estilo ${plan.sourcePath} cambi\xF3 durante la preparaci\xF3n; vuelve a ejecutar el comando.`);
   }
-}
-var codexAdapter = {
-  id: "codex",
-  name: "Codex CLI",
-  detect: detectCodex,
-  reportCapabilities(configDir) {
-    const prompt = readTextIfExists(path11.join(configDir, "AGENTS.md"));
-    return createLocalCapabilityReport("codex", [
-      ...hasManagedMarkdownSection(prompt, "system-prompt") ? [{
-        id: "policy-guidance",
-        state: "prompt-only",
-        reason: "The managed policy prompt is advisory and cannot enforce the policy",
-        evidence: { source: "jorgex-stack-system-prompt", version: "1" }
-      }] : [],
-      ...hasCodexManualApproval(configDir) ? [{
-        id: "tool-approval",
-        state: "manual",
-        reason: "Canonical approval declarations require a human decision; runtime activation is not certified",
-        evidence: { source: "jorgex-stack-codex-approval-policy", version: "1" }
-      }] : [],
-      {
-        id: "external-verification",
-        state: "unavailable",
-        reason: "External verification is available only through the external verifier"
-      }
-    ]);
-  },
-  injectEngramProtocol(ctx) {
-    return !hasEngramProtocol(ctx.configDir);
-  },
-  paths(configDir) {
-    const isRealConfigDir = samePath(configDir, process.env.CODEX_HOME ?? path11.join(HOME, ".codex"));
-    const agentsHome = isRealConfigDir ? HOME : path11.dirname(configDir);
-    const skillsDir = path11.join(agentsHome, ".agents", "skills");
-    return {
-      systemPromptFile: path11.join(configDir, "AGENTS.md"),
-      agentsDir: path11.join(configDir, "agents"),
-      skillsDir,
-      // Los custom prompts de Codex están deprecados: los commands se
-      // instalan como skills (renderCommand produce <nombre>/SKILL.md).
-      commandsDir: skillsDir,
-      pluginsDir: null,
-      scriptsDir: path11.join(configDir, "scripts"),
-      outputStylesDir: null,
-      profilesDir: configDir
-    };
-  },
-  renderAgent(agent, models) {
-    const tierModel = resolveAgentModel(models, agent.name, agent.tier);
-    if (agent.mode === "primary") {
-      const profileLines = [
-        "# Managed by jorgex-stack \u2014 modo orquestador del agente principal.",
-        `# Uso: codex --profile ${agent.name}`,
-        `developer_instructions = ${tomlMultiline(agent.body)}`
-      ];
-      return [{ file: `${agent.name}.config.toml`, content: profileLines.join("\n") + "\n", kind: "profile" }];
-    }
-    const lines = [
-      `name = ${tomlString(agent.name)}`,
-      `description = ${tomlString(agent.description)}`
-    ];
-    if (tierModel.model !== "default") lines.push(`model = ${tomlString(tierModel.model)}`);
-    if (tierModel.variant) lines.push(`model_reasoning_effort = ${tomlString(tierModel.variant)}`);
-    lines.push(`sandbox_mode = ${tomlString(agent.readonly ? "read-only" : "workspace-write")}`);
-    lines.push(`developer_instructions = ${tomlMultiline(agent.body)}`);
-    return [{ file: `${agent.name}.toml`, content: lines.join("\n") + "\n", kind: "agent" }];
-  },
-  renderCommand(file, content) {
-    const name = file.replace(/\.md$/, "");
-    let description = name;
-    let body = content;
-    const fm = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/.exec(content);
-    if (fm) {
-      const match = /(?:^|\n)description:\s*(.+)/.exec(fm[1]);
-      if (match) description = match[1].trim();
-      body = content.slice(fm[0].length);
-    }
-    body = body.replace(/\{\{input\}\}/g, "the user's request in this conversation");
-    return {
-      file: `${name}/SKILL.md`,
-      content: `---
-name: ${name}
-description: ${JSON.stringify(description)}
----
-${body}`
-    };
-  },
-  planHooks(canonical, ctx) {
-    const actions = [];
-    const { scriptsDir } = this.paths(ctx.configDir);
-    const hooksFile = path11.join(ctx.configDir, "hooks.json");
-    const content = upsertNativeHooks(
-      readTextIfExists(hooksFile),
-      canonical,
-      scriptsDir,
-      (matcher) => matcher.split("|").some((p7) => p7.trim() === "Bash") ? "shell" : matcher
-    );
-    actions.push({ kind: "write", target: hooksFile, content });
-    ctx.warnings.push(
-      "Codex: los hooks no-managed requieren aprobaci\xF3n manual \u2014 ejecuta /hooks dentro de codex para activarlos."
-    );
-    const scriptsSource = path11.join(ctx.stackDir, "scripts");
-    if (fs8.existsSync(scriptsSource)) {
-      for (const f of fs8.readdirSync(scriptsSource)) {
-        actions.push({ kind: "copy", source: path11.join(scriptsSource, f), target: path11.join(scriptsDir, f) });
-      }
-    }
-    return actions;
-  },
-  planMainConfig(canonical, ctx) {
-    const file = path11.join(ctx.configDir, "config.toml");
-    const original = readMcpConfig3(file);
-    const contentSource = original === null || original.trim() === "" ? null : original;
-    let content = contentSource;
-    const mcpOwnership = [];
-    const primaryModelOwnership = [];
-    const context7 = canonical.servers.context7;
-    if (context7 !== void 0) {
-      assertCompatibleContext73(context7, readTomlSection(contentSource, "mcp_servers.context7"), contentSource);
-    }
-    if (contentSource === null) {
-      const defaults = loadCanonicalDefaults(ctx.stackDir)["codex"] ?? {};
-      for (const [key, value] of Object.entries(defaults)) {
-        const line = `${key} = ${tomlString(String(value))}
-`;
-        content = content === null ? line : line + content;
-      }
-      ctx.warnings.push(
-        "Codex: fresh config enables read-anywhere via the jorgex-read-anywhere permission profile; broad local reads can expose secrets not covered by deny rules."
-      );
-      content = upsertTomlSection(
-        content,
-        CODEX_PERMISSION_HEADERS.base,
-        renderCodexPermissionEntries(CODEX_PERMISSION_PROFILE.base, false)
-      );
-      content = upsertTomlSection(
-        content,
-        CODEX_PERMISSION_HEADERS.filesystem,
-        renderCodexPermissionEntries(CODEX_PERMISSION_PROFILE.filesystem, true)
-      );
-      content += [
-        `
-[${CODEX_PERMISSION_HEADERS.workspaceRoots}]`,
-        renderCodexPermissionEntries(CODEX_PERMISSION_PROFILE.workspaceRoots, true),
-        ""
-      ].join("\n");
-    }
-    if (contentSource !== null) {
-      const codexDefaults = loadCanonicalDefaults(ctx.stackDir)["codex"];
-      if (codexDefaults !== void 0 && !isCodexPermissionBlockCurrent(contentSource, codexDefaults)) {
-        if (ctx.upgradePermissions === true) {
-          content = reseedCodexPermissionBlock(content, codexDefaults);
-        } else {
-          ctx.warnings.push(CODEX_STALE_PERMISSIONS_WARNING);
-        }
-      }
-    }
-    if (!hasTomlRootKey(content, PRIMARY_MODEL_FIELD2)) {
-      content = upsertTomlRootKeyIfMissing(content, PRIMARY_MODEL_FIELD2, PRIMARY_MODEL2);
-      if (ctx.ownedPrimaryModelFields?.has(PRIMARY_MODEL_FIELD2) !== true) {
-        primaryModelOwnership.push({ field: PRIMARY_MODEL_FIELD2, owned: true });
-      }
-    }
-    if (!hasTomlRootKey(content, PRIMARY_CONTEXT_FIELD)) {
-      content = upsertTomlRootKeyIfMissing(content, PRIMARY_CONTEXT_FIELD, PRIMARY_CONTEXT_WINDOW);
-      if (ctx.ownedPrimaryModelFields?.has(PRIMARY_CONTEXT_FIELD) !== true) {
-        primaryModelOwnership.push({ field: PRIMARY_CONTEXT_FIELD, owned: true });
-      }
-    }
-    for (const [name, server] of Object.entries(canonical.servers)) {
-      const section = `mcp_servers.${name}`;
-      const existing = readTomlSection(content, section);
-      const owned = ctx.ownedMcpServers?.has(name) === true;
-      if (name === "context7" && existing !== null) {
-        if (owned && !isCanonicalContext7Server3(server, existing, content)) {
-          mcpOwnership.push({ server: name, owned: false });
-        }
-        continue;
-      }
-      if (!isCanonicalMcpServerEnabled(name, server, ctx.enabledMcpServers)) {
-        if (owned) {
-          if (isManagedOptionalStdioServer3(server, existing)) content = removeTomlSection(content, section);
-          mcpOwnership.push({ server: name, owned: false });
-        }
-        continue;
-      }
-      if (server.optional && existing !== null) {
-        if (!owned || !isManagedOptionalStdioServer3(server, existing)) {
-          if (owned) mcpOwnership.push({ server: name, owned: false });
-          ctx.warnings.push(`Codex: MCP opcional '${name}' ya pertenece a la configuraci\xF3n del usuario; se conserva.`);
-          continue;
-        }
-      }
-      if (server.transport === "stdio") {
-        if (server.command === "{{ENGRAM_BIN}}" && hasActiveEngramPlugin(ctx.configDir)) {
-          if (content !== null) content = removeTomlSection(content, section);
-          ctx.warnings.push(
-            "Codex: Engram ya est\xE1 integrado v\xEDa plugin de marketplace \u2014 no se registra el MCP para no duplicar las tools de memoria."
-          );
-          continue;
-        }
-        if (server.command === "{{ENGRAM_BIN}}" && ctx.engramBin === null) {
-          ctx.warnings.push(
-            "Engram no detectado: el MCP 'engram' no se registra. Inst\xE1lalo (github.com/Gentleman-Programming/engram) y re-ejecuta sync."
-          );
-          continue;
-        }
-        const command = server.command === "{{ENGRAM_BIN}}" ? ctx.engramBin : server.command;
-        content = upsertTomlSection(content, section, `command = ${tomlString(command)}
-args = [${(server.args ?? []).map(tomlString).join(", ")}]`);
-        if (server.optional && existing === null && !owned) mcpOwnership.push({ server: name, owned: true });
-      } else {
-        const previousSection = readTomlSection(content, section);
-        const prevUsesEnvHeaders = previousSection?.includes("env_http_headers") ?? false;
-        const literalPairs = [];
-        const refPairs = [];
-        for (const [key, raw] of Object.entries(server.headers ?? {})) {
-          const envRef = /^\$\{(\w+)\}$/.exec(raw);
-          const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-          const previousValue = !prevUsesEnvHeaders && previousSection !== null ? new RegExp(`(?:^|[{,]\\s*)"?${escaped}"?\\s*=\\s*"([^"]*)"`, "m").exec(previousSection)?.[1] : void 0;
-          if (previousValue) literalPairs.push(`${tomlString(key)} = ${tomlString(previousValue)}`);
-          else refPairs.push(`${tomlString(key)} = ${tomlString(envRef ? envRef[1] : raw)}`);
-        }
-        const body = [`url = ${tomlString(server.url)}`];
-        if (literalPairs.length > 0) body.push(`http_headers = { ${literalPairs.join(", ")} }`);
-        if (refPairs.length > 0) body.push(`env_http_headers = { ${refPairs.join(", ")} }`);
-        content = upsertTomlSection(content, section, body.join("\n"));
-        if (name === "context7" && existing === null && !owned) {
-          mcpOwnership.push({ server: name, owned: true });
-        }
-      }
-    }
-    if (content === null) return [];
-    if (!content.endsWith("\n")) content += "\n";
-    return [{
-      kind: "write",
-      target: file,
-      content,
-      ...mcpOwnership.length > 0 ? { mcpOwnership } : {},
-      ...primaryModelOwnership.length > 0 ? { primaryModelOwnership } : {}
-    }];
-  },
-  planUnmerge(mcp, hooks, ctx) {
-    const actions = [];
-    const { systemPromptFile } = this.paths(ctx.configDir);
-    const prompt = readTextIfExists(systemPromptFile);
-    if (prompt !== null) {
-      const content = removeSystemPromptSections(prompt);
-      actions.push({ kind: "write", target: systemPromptFile, content });
-    }
-    const configFile = path11.join(ctx.configDir, "config.toml");
-    const config = readMcpConfig3(configFile);
-    if (config !== null) {
-      let content = config;
-      const primaryModelOwnership = [];
-      if (ctx.ownedPrimaryModelFields?.has(PRIMARY_MODEL_FIELD2) === true) {
-        content = removeTomlRootKeyIfExact(content, PRIMARY_MODEL_FIELD2, PRIMARY_MODEL2);
-        primaryModelOwnership.push({ field: PRIMARY_MODEL_FIELD2, owned: false });
-      }
-      if (ctx.ownedPrimaryModelFields?.has(PRIMARY_CONTEXT_FIELD) === true) {
-        content = removeTomlRootKeyIfExact(content, PRIMARY_CONTEXT_FIELD, PRIMARY_CONTEXT_WINDOW);
-        primaryModelOwnership.push({ field: PRIMARY_CONTEXT_FIELD, owned: false });
-      }
-      const mcpOwnership = [];
-      for (const [name, server] of Object.entries(mcp.servers)) {
-        const section = `mcp_servers.${name}`;
-        if (name === "context7") {
-          const current = readTomlSection(content, section);
-          const canonical = isCanonicalContext7Server3(server, current, content);
-          const owned = ctx.ownedMcpServers?.has(name) === true;
-          if (owned) {
-            if (canonical) {
-              content = removeTomlSection(content, section);
-            }
-            mcpOwnership.push({ server: name, owned: false });
-          }
-          continue;
-        }
-        if (!server.optional) {
-          content = removeTomlSection(content, section);
-          continue;
-        }
-        if (ctx.ownedMcpServers?.has(name) === true) {
-          if (isManagedOptionalStdioServer3(server, readTomlSection(content, section))) {
-            content = removeTomlSection(content, section);
-          }
-          mcpOwnership.push({ server: name, owned: false });
-        }
-      }
-      actions.push({
-        kind: "write",
-        target: configFile,
-        content,
-        ...mcpOwnership.length > 0 ? { mcpOwnership } : {},
-        ...primaryModelOwnership.length > 0 ? { primaryModelOwnership } : {}
-      });
-    }
-    const hooksFile = path11.join(ctx.configDir, "hooks.json");
-    const hooksJson = readTextIfExists(hooksFile);
-    if (hooksJson !== null) {
-      const content = removeNativeHooks(hooksJson, hooks);
-      if (content !== null) {
-        actions.push({ kind: "write", target: hooksFile, content: content.trim() === "{}" ? "" : content });
-      }
-    }
-    return actions;
+  if (current !== null) {
+    validateBackupRoot(plan.rootDir);
+    createBackup([plan.sourcePath], "writing-style", plan.backupRoot);
   }
-};
+  const mode = current === null ? 384 : fs.statSync(plan.sourcePath).mode & 511;
+  writeText(plan.sourcePath, plan.installedContent, mode);
+}
 
 // src/lib/install-mode.ts
-import fs9 from "fs";
-import path12 from "path";
+import fs2 from "fs";
+import path2 from "path";
 var INSTALL_MODES = /* @__PURE__ */ new Set(["human", "programmatic"]);
 var SUBAGENT_CONCURRENCIES = /* @__PURE__ */ new Set(["serial", "parallel"]);
 var DEFAULT_INSTALL_MODE_PREFERENCE = {
@@ -2353,10 +187,10 @@ var DEFAULT_INSTALL_MODE_PREFERENCE = {
   subagentConcurrency: "serial"
 };
 function installModePreferenceFile() {
-  return path12.join(dataDir(), "install-mode.json");
+  return path2.join(dataDir(), "install-mode.json");
 }
 function hasInstallModePreference(file = installModePreferenceFile()) {
-  return fs9.existsSync(file);
+  return fs2.existsSync(file);
 }
 function isInstallMode(value) {
   return INSTALL_MODES.has(value);
@@ -2387,9 +221,9 @@ function normalizeInstallModePreference(value) {
   throw new Error("Preferencia de instalaci\xF3n inv\xE1lida o corrupta.");
 }
 function loadInstallModePreference(file = installModePreferenceFile()) {
-  if (!fs9.existsSync(file)) return DEFAULT_INSTALL_MODE_PREFERENCE;
+  if (!fs2.existsSync(file)) return DEFAULT_INSTALL_MODE_PREFERENCE;
   try {
-    const raw = fs9.readFileSync(file, "utf8");
+    const raw = fs2.readFileSync(file, "utf8");
     return normalizeInstallModePreference(JSON.parse(raw));
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
@@ -2427,10 +261,10 @@ function parseInstallModePreferenceFlags(mode, subagentConcurrency) {
 }
 
 // src/lib/manifest.ts
-import fs10 from "fs";
-import path13 from "path";
+import fs3 from "fs";
+import path3 from "path";
 function manifestFile() {
-  return path13.join(dataDir(), "manifest.json");
+  return path3.join(dataDir(), "manifest.json");
 }
 function readManifest(file = manifestFile()) {
   const raw = readTextIfExists(file);
@@ -2454,24 +288,24 @@ function removeRuntimeManifest(id, file = manifestFile()) {
   writeText(file, JSON.stringify(manifest, null, 2) + "\n");
 }
 function findOrphans(prevOwned, currentTargets, root = HOME) {
-  return prevOwned.map((f) => path13.resolve(f)).filter(
-    (f) => !currentTargets.has(f) && path13.basename(f) !== "engram.ts" && isContainedIn(f, root) && fs10.existsSync(f)
+  return prevOwned.map((f) => path3.resolve(f)).filter(
+    (f) => !currentTargets.has(f) && path3.basename(f) !== "engram.ts" && isContainedIn(f, root) && fs3.existsSync(f)
   );
 }
 
 // src/components/system-prompt.ts
-import path15 from "path";
-import fs12 from "fs";
+import path5 from "path";
+import fs5 from "fs";
 
 // src/lib/mode-composition.ts
-import fs11 from "fs";
-import path14 from "path";
+import fs4 from "fs";
+import path4 from "path";
 var PROGRAMMATIC_ROOT = ["modes", "programmatic"];
 var PROGRAMMATIC_MARKER = "<!-- jorgex:programmatic-mode -->";
 var LEGACY_RESULT_CONTRACT_SECTION = /\n?##\s+Result contract[\s\S]*$/;
 var normalize = (value) => value.replace(/\r\n/g, "\n");
 function loadProgrammaticAddendum(stackDir, fileName) {
-  return normalize(fs11.readFileSync(path14.join(stackDir, ...PROGRAMMATIC_ROOT, fileName), "utf8")).trim();
+  return normalize(fs4.readFileSync(path4.join(stackDir, ...PROGRAMMATIC_ROOT, fileName), "utf8")).trim();
 }
 function appendAddendum(base, addendum) {
   const normalizedBase = normalize(base);
@@ -2517,7 +351,7 @@ function planSystemPrompt(adapter, ctx) {
   const existing = readSystemPromptFile(target);
   assertSystemPromptMarkers(existing, target);
   const readModule = (file) => stripLeadingHtmlComments(
-    normalize2(fs12.readFileSync(path15.join(ctx.stackDir, "system-prompt", file), "utf8"))
+    normalize2(fs5.readFileSync(path5.join(ctx.stackDir, "system-prompt", file), "utf8"))
   );
   const modules = {
     "system-prompt": composeProgrammaticSystemPrompt(ctx.stackDir, readModule("AGENTS.md"), ctx.mode),
@@ -2537,7 +371,7 @@ function planSystemPrompt(adapter, ctx) {
 }
 
 // src/components/agents.ts
-import path16 from "path";
+import path6 from "path";
 function planAgents(adapter, ctx) {
   const { agentsDir, commandsDir, outputStylesDir, profilesDir, scriptsDir } = adapter.paths(ctx.configDir);
   const dirFor = {
@@ -2547,7 +381,7 @@ function planAgents(adapter, ctx) {
     profile: profilesDir
   };
   const scriptsBase = scriptsDir.replace(/\\/g, "/");
-  return loadCanonicalAgents(path16.join(ctx.stackDir, "agents")).flatMap((agent) => {
+  return loadCanonicalAgents(path6.join(ctx.stackDir, "agents")).flatMap((agent) => {
     const composedAgent = {
       ...agent,
       body: composeProgrammaticAgentBody(ctx.stackDir, agent, ctx.mode, ctx.subagentConcurrency)
@@ -2559,42 +393,42 @@ function planAgents(adapter, ctx) {
         return [];
       }
       const content = rendered.content.replace(/\{\{SCRIPTS_DIR\}\}/g, scriptsBase);
-      return [{ kind: "write", target: path16.join(dir, rendered.file), content }];
+      return [{ kind: "write", target: path6.join(dir, rendered.file), content }];
     });
   });
 }
 
 // src/components/skills.ts
-import path17 from "path";
+import path7 from "path";
 function planSkills(adapter, ctx) {
   const { skillsDir } = adapter.paths(ctx.configDir);
-  const source = path17.join(ctx.stackDir, "skills");
+  const source = path7.join(ctx.stackDir, "skills");
   return listFilesRecursive(source).map((file) => {
-    const relative = path17.relative(source, file);
-    return { kind: "copy", source: file, target: path17.join(skillsDir, relative) };
+    const relative = path7.relative(source, file);
+    return { kind: "copy", source: file, target: path7.join(skillsDir, relative) };
   });
 }
 
 // src/components/commands.ts
-import path18 from "path";
-import fs13 from "fs";
+import path8 from "path";
+import fs6 from "fs";
 function planCommands(adapter, ctx) {
   const { commandsDir } = adapter.paths(ctx.configDir);
-  const source = path18.join(ctx.stackDir, "commands");
-  if (!fs13.existsSync(source)) return [];
+  const source = path8.join(ctx.stackDir, "commands");
+  if (!fs6.existsSync(source)) return [];
   const commandFiles = [
     ...listMarkdownFiles(source),
-    ...listMarkdownFiles(path18.join(source, adapter.id))
+    ...listMarkdownFiles(path8.join(source, adapter.id))
   ];
   return commandFiles.map(({ file, fullPath }) => {
-    const raw = fs13.readFileSync(fullPath, "utf8").replace(/\r\n/g, "\n");
+    const raw = fs6.readFileSync(fullPath, "utf8").replace(/\r\n/g, "\n");
     const rendered = adapter.renderCommand(file, raw);
-    return { kind: "write", target: path18.join(commandsDir, rendered.file), content: rendered.content };
+    return { kind: "write", target: path8.join(commandsDir, rendered.file), content: rendered.content };
   });
 }
 function listMarkdownFiles(dir) {
-  if (!fs13.existsSync(dir)) return [];
-  return fs13.readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".md")).map((entry) => ({ file: entry.name, fullPath: path18.join(dir, entry.name) }));
+  if (!fs6.existsSync(dir)) return [];
+  return fs6.readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".md")).map((entry) => ({ file: entry.name, fullPath: path8.join(dir, entry.name) }));
 }
 
 // src/components/hooks.ts
@@ -2608,23 +442,24 @@ function planMcp(adapter, ctx) {
 }
 
 // src/components/plugins.ts
-import path19 from "path";
-import fs14 from "fs";
+import path9 from "path";
+import fs7 from "fs";
 function planPlugins(adapter, ctx) {
   const { pluginsDir } = adapter.paths(ctx.configDir);
   if (pluginsDir === null) return [];
-  const source = path19.join(ctx.stackDir, "plugins", adapter.id);
-  if (!fs14.existsSync(source)) return [];
-  return listFilesRecursive(source).filter((f) => f.endsWith(".ts")).map((sourceFile) => {
-    const target = path19.join(pluginsDir, path19.relative(source, sourceFile));
-    const raw = fs14.readFileSync(sourceFile, "utf8");
+  const source = path9.join(ctx.stackDir, "plugins", adapter.id);
+  if (!fs7.existsSync(source)) return [];
+  const excluded = new Set(adapter.excludedPluginBasenames ?? []);
+  return listFilesRecursive(source).filter((f) => f.endsWith(".ts")).filter((f) => !excluded.has(path9.basename(f))).map((sourceFile) => {
+    const target = path9.join(pluginsDir, path9.relative(source, sourceFile));
+    const raw = fs7.readFileSync(sourceFile, "utf8");
     let content = raw;
     if (content.includes('"{{ENGRAM_BIN}}"')) {
       content = content.replace(/"\{\{ENGRAM_BIN\}\}"/g, JSON.stringify(ctx.engramBin ?? "engram"));
     }
     if (content.includes('"{{ENGRAM_PROTOCOL}}"')) {
       const protocol = stripLeadingHtmlComments(
-        fs14.readFileSync(path19.join(ctx.stackDir, "system-prompt", "engram-protocol.md"), "utf8").replace(/\r\n/g, "\n")
+        fs7.readFileSync(path9.join(ctx.stackDir, "system-prompt", "engram-protocol.md"), "utf8").replace(/\r\n/g, "\n")
       );
       content = content.replace(/"\{\{ENGRAM_PROTOCOL\}\}"/g, JSON.stringify(protocol));
     }
@@ -2635,10 +470,10 @@ function planPlugins(adapter, ctx) {
 }
 
 // src/lib/external-tools.ts
-import fs15 from "fs";
+import fs8 from "fs";
 import os from "os";
-import path20 from "path";
-import { execFileSync as execFileSync2 } from "child_process";
+import path10 from "path";
+import { execFileSync } from "child_process";
 var PLAYWRIGHT_CLI = {
   packageName: "@playwright/cli",
   bin: "playwright-cli",
@@ -2683,9 +518,9 @@ function detectPlaywrightCli(env) {
   if (binPath === null) {
     const pnpmHome = resolvePnpmHome(actualEnv);
     const name = process.platform === "win32" ? `${PLAYWRIGHT_CLI.bin}.cmd` : PLAYWRIGHT_CLI.bin;
-    const known = [path20.join(pnpmHome, name), path20.join(pnpmHome, "bin", name)].find((file) => {
+    const known = [path10.join(pnpmHome, name), path10.join(pnpmHome, "bin", name)].find((file) => {
       try {
-        return fs15.statSync(file).isFile();
+        return fs8.statSync(file).isFile();
       } catch {
         return false;
       }
@@ -2704,7 +539,7 @@ function resolvePnpmBin(env) {
   return pnpmCmd !== null && !pnpmCmd.toLowerCase().endsWith(".ps1") ? pnpmCmd : null;
 }
 function resolvePnpmHome(env = process.env, platform = process.platform, homeDir = os.homedir()) {
-  const paths = platform === "win32" ? path20.win32 : path20.posix;
+  const paths = platform === "win32" ? path10.win32 : path10.posix;
   if (env.PNPM_HOME) return env.PNPM_HOME;
   if (env.XDG_DATA_HOME) return paths.join(env.XDG_DATA_HOME, "pnpm");
   if (platform === "darwin") return paths.join(homeDir, "Library", "pnpm");
@@ -2713,7 +548,7 @@ function resolvePnpmHome(env = process.env, platform = process.platform, homeDir
 }
 function setupPnpmGlobal(pnpmBin, env = process.env, platform = process.platform, homeDir = os.homedir()) {
   const pnpmHome = resolvePnpmHome(env, platform, homeDir);
-  const paths = platform === "win32" ? path20.win32 : path20.posix;
+  const paths = platform === "win32" ? path10.win32 : path10.posix;
   if (!paths.isAbsolute(pnpmHome)) return { ok: false, reason: "PNPM_HOME debe ser una ruta absoluta; corrige la configuraci\xF3n antes de reintentar." };
   const pathEntries = [pnpmHome, paths.join(pnpmHome, "bin")];
   if (env.PATH !== void 0) pathEntries.push(env.PATH);
@@ -2725,7 +560,7 @@ function setupPnpmGlobal(pnpmBin, env = process.env, platform = process.platform
   const invocation = planDetectedBinCommand(pnpmBin, ["setup"]);
   if (invocation === null) return { ok: false, reason: "No se pudo preparar la invocaci\xF3n de pnpm setup." };
   try {
-    execFileSync2(invocation.command, invocation.args, { stdio: "inherit", env: childEnv });
+    execFileSync(invocation.command, invocation.args, { stdio: "inherit", env: childEnv });
     return { ok: true, env: childEnv };
   } catch (error) {
     return { ok: false, reason: error instanceof Error ? error.message : String(error) };
@@ -2733,10 +568,10 @@ function setupPnpmGlobal(pnpmBin, env = process.env, platform = process.platform
 }
 function isPlaywrightBrowserReady(env = process.env, platform = process.platform, homeDir = os.homedir()) {
   const configuredPath = env.PLAYWRIGHT_BROWSERS_PATH;
-  const cacheDir = configuredPath ?? (platform === "win32" ? path20.join(env.LOCALAPPDATA ?? path20.join(homeDir, "AppData", "Local"), "ms-playwright") : platform === "darwin" ? path20.join(homeDir, "Library", "Caches", "ms-playwright") : path20.join(env.XDG_CACHE_HOME ?? path20.join(homeDir, ".cache"), "ms-playwright"));
+  const cacheDir = configuredPath ?? (platform === "win32" ? path10.join(env.LOCALAPPDATA ?? path10.join(homeDir, "AppData", "Local"), "ms-playwright") : platform === "darwin" ? path10.join(homeDir, "Library", "Caches", "ms-playwright") : path10.join(env.XDG_CACHE_HOME ?? path10.join(homeDir, ".cache"), "ms-playwright"));
   if (configuredPath === "0") return { status: "missing", path: cacheDir, errorCode: "DISABLED" };
   try {
-    const ready = fs15.readdirSync(cacheDir, { withFileTypes: true }).some(
+    const ready = fs8.readdirSync(cacheDir, { withFileTypes: true }).some(
       (entry) => entry.isDirectory() && /^chromium(?:_headless_shell)?-/.test(entry.name)
     );
     return ready ? { status: "ready", path: cacheDir } : { status: "missing", path: cacheDir };
@@ -2761,16 +596,16 @@ function verifyPlaywrightBrowser(pnpmBin, env = process.env, cwd) {
   const rootCommand = planDetectedBinCommand(pnpmBin, ["root", "--global"]);
   if (rootCommand === null) return false;
   try {
-    const root = execFileSync2(rootCommand.command, rootCommand.args, {
+    const root = execFileSync(rootCommand.command, rootCommand.args, {
       encoding: "utf8",
       timeout: 5e3,
       env,
       cwd,
       stdio: ["ignore", "pipe", "inherit"]
     }).trim();
-    if (!path20.isAbsolute(root)) return false;
-    const packageFile = fs15.realpathSync(path20.join(root, "@playwright", "cli", "package.json"));
-    const installed = JSON.parse(fs15.readFileSync(packageFile, "utf8"));
+    if (!path10.isAbsolute(root)) return false;
+    const packageFile = fs8.realpathSync(path10.join(root, "@playwright", "cli", "package.json"));
+    const installed = JSON.parse(fs8.readFileSync(packageFile, "utf8"));
     if (installed.name !== PLAYWRIGHT_CLI.packageName || installed.version !== PLAYWRIGHT_CLI.version) return false;
     const probe = `
       const { createRequire } = require('node:module');
@@ -2783,7 +618,7 @@ function verifyPlaywrightBrowser(pnpmBin, env = process.env, cwd) {
         } finally { await browser.close(); }
       })().catch(error => { console.error(error.message); process.exitCode = 1; });
     `;
-    execFileSync2(process.execPath, ["-e", probe, packageFile], {
+    execFileSync(process.execPath, ["-e", probe, packageFile], {
       timeout: 25e3,
       stdio: "inherit",
       cwd,
@@ -2800,7 +635,7 @@ function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin(), env) {
     const preflight = planDetectedBinCommand(pnpmBin, ["bin", "--global"]);
     if (preflight === null) return { ok: false, reason: "pnpm-command" };
     try {
-      const globalBin = execFileSync2(preflight.command, preflight.args, {
+      const globalBin = execFileSync(preflight.command, preflight.args, {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "inherit"],
         ...env === void 0 ? {} : { env }
@@ -2813,10 +648,10 @@ function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin(), env) {
   const command = planPlaywrightCliCommand(action, pnpmBin);
   const invocation = planDetectedBinCommand(command.command, command.args);
   if (invocation === null) return { ok: false, reason: "pnpm-command" };
-  const cwd = action === "install-browser" ? fs15.mkdtempSync(path20.join(os.tmpdir(), "jorgex-playwright-")) : void 0;
+  const cwd = action === "install-browser" ? fs8.mkdtempSync(path10.join(os.tmpdir(), "jorgex-playwright-")) : void 0;
   const childEnv = action === "install-browser" ? { ...env ?? process.env, NO_UPDATE_NOTIFIER: "1" } : env ?? process.env;
   try {
-    execFileSync2(invocation.command, invocation.args, {
+    execFileSync(invocation.command, invocation.args, {
       stdio: "inherit",
       env: childEnv,
       ...cwd === void 0 ? {} : { cwd }
@@ -2828,7 +663,7 @@ function executePlaywrightToolAction(action, pnpmBin = resolvePnpmBin(), env) {
   } catch {
     return { ok: false, reason: "action-failed" };
   } finally {
-    if (cwd !== void 0) fs15.rmSync(cwd, { recursive: true, force: true });
+    if (cwd !== void 0) fs8.rmSync(cwd, { recursive: true, force: true });
   }
 }
 
@@ -2857,29 +692,29 @@ function inspectPlaywrightCapability(options = {}) {
 }
 
 // src/lib/tool-preferences.ts
-import fs16 from "fs";
-import path21 from "path";
+import fs9 from "fs";
+import path11 from "path";
 var PLAYWRIGHT_CLI_PREFERENCE_VERSION = 1;
 var DEVTOOLS_MCP_PREFERENCE_VERSION = 1;
 var PRIMARY_MODEL_OWNERSHIP_VERSION = 1;
 var PLAYWRIGHT_RUNTIMES = ["opencode", "claude-code", "codex", "pi"];
 function readPreference(file) {
   try {
-    return { raw: fs16.readFileSync(file, "utf8"), errorCode: null };
+    return { raw: fs9.readFileSync(file, "utf8"), errorCode: null };
   } catch (error) {
     const code = error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : "UNKNOWN";
     return code === "ENOENT" ? { raw: null, errorCode: null } : { raw: null, errorCode: code };
   }
 }
 function playwrightCliPreferenceFile(stateDir = dataDir()) {
-  return path21.join(stateDir, "playwright-cli.json");
+  return path11.join(stateDir, "playwright-cli.json");
 }
 function parsePlaywrightCliPreference(raw) {
   try {
     const value = JSON.parse(raw);
-    if (!isRecord2(value)) return void 0;
+    if (!isRecord(value)) return void 0;
     if (value.version === 1 && typeof value.enabled === "boolean") return { version: 1, enabled: value.enabled };
-    if (value.version !== 2 || !isRecord2(value.enabled)) return void 0;
+    if (value.version !== 2 || !isRecord(value.enabled)) return void 0;
     if (Object.entries(value.enabled).some(([runtime, enabled]) => !PLAYWRIGHT_RUNTIMES.includes(runtime) || typeof enabled !== "boolean")) return void 0;
     return { version: 2, enabled: value.enabled };
   } catch {
@@ -2918,12 +753,12 @@ function savePlaywrightCliPreference(file, enabled, selection) {
   writeText(file, content);
 }
 function devtoolsMcpPreferenceFile(stateDir = dataDir()) {
-  return path21.join(stateDir, "devtools-mcp.json");
+  return path11.join(stateDir, "devtools-mcp.json");
 }
 function primaryModelOwnershipFile(stateDir = dataDir()) {
-  return path21.join(stateDir, "primary-model.json");
+  return path11.join(stateDir, "primary-model.json");
 }
-function isRecord2(value) {
+function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function isRuntimeId(value) {
@@ -2932,7 +767,7 @@ function isRuntimeId(value) {
 function parseDevtoolsMcpState(raw) {
   try {
     const value = JSON.parse(raw);
-    if (!isRecord2(value) || value.version !== DEVTOOLS_MCP_PREFERENCE_VERSION || !isRecord2(value.enabled) || !isRecord2(value.owned)) return null;
+    if (!isRecord(value) || value.version !== DEVTOOLS_MCP_PREFERENCE_VERSION || !isRecord(value.enabled) || !isRecord(value.owned)) return null;
     const enabled = {};
     for (const [runtime, selected] of Object.entries(value.enabled)) {
       if (!isRuntimeId(runtime) && runtime !== "pi" || typeof selected !== "boolean") return null;
@@ -2940,7 +775,7 @@ function parseDevtoolsMcpState(raw) {
     }
     const owned = {};
     for (const [runtime, servers] of Object.entries(value.owned)) {
-      if (!isRuntimeId(runtime) || !isRecord2(servers)) return null;
+      if (!isRuntimeId(runtime) || !isRecord(servers)) return null;
       const managed = {};
       for (const [server, marked] of Object.entries(servers)) {
         if (marked !== true) return null;
@@ -2996,13 +831,13 @@ function saveDevtoolsMcpOwnership(file, runtime, server, owned) {
 function parsePrimaryModelOwnership(raw) {
   try {
     const value = JSON.parse(raw);
-    if (!isRecord2(value) || value.version !== PRIMARY_MODEL_OWNERSHIP_VERSION || !isRecord2(value.owned)) return null;
+    if (!isRecord(value) || value.version !== PRIMARY_MODEL_OWNERSHIP_VERSION || !isRecord(value.owned)) return null;
     const owned = {};
     for (const [runtime, configs] of Object.entries(value.owned)) {
-      if (!isRuntimeId(runtime) || !isRecord2(configs)) return null;
+      if (!isRuntimeId(runtime) || !isRecord(configs)) return null;
       const markedConfigs = {};
       for (const [configDir, fields] of Object.entries(configs)) {
-        if (configDir === "" || !isRecord2(fields)) return null;
+        if (configDir === "" || !isRecord(fields)) return null;
         const markedFields = {};
         for (const [field, state] of Object.entries(fields)) {
           if (field === "" || state !== true) return null;
@@ -3031,7 +866,7 @@ function primaryModelOwnershipError(file = primaryModelOwnershipFile()) {
   return `Primary model: ownership inv\xE1lido en ${file}. Corrige o borra ese archivo antes de reintentar.`;
 }
 function primaryModelConfigKey(configDir) {
-  const resolved = path21.resolve(configDir);
+  const resolved = path11.resolve(configDir);
   return process.platform === "win32" ? resolved.toLowerCase() : resolved;
 }
 function loadPrimaryModelOwnership(file, runtime, configDir) {
@@ -3176,7 +1011,7 @@ function diffPlan(plan) {
       if (current === null) return { action, status: "create" };
       return { action, status: current === action.content ? "unchanged" : "update" };
     }
-    if (!fs17.existsSync(action.target)) return { action, status: "create" };
+    if (!fs10.existsSync(action.target)) return { action, status: "create" };
     return { action, status: sameFileContent(action.source, action.target) ? "unchanged" : "update" };
   });
 }
@@ -3202,7 +1037,7 @@ function collectAllCurrentTargets(mode = DEFAULT_INSTALL_MODE_PREFERENCE, playwr
       continue;
     }
     try {
-      for (const action of buildPlan(adapter, ctx)) targets.add(path22.resolve(action.target));
+      for (const action of buildPlan(adapter, ctx)) targets.add(path12.resolve(action.target));
     } catch (error) {
       complete = false;
       warnings.push(
@@ -3212,6 +1047,40 @@ function collectAllCurrentTargets(mode = DEFAULT_INSTALL_MODE_PREFERENCE, playwr
   }
   return { targets, complete, warnings };
 }
+function legacyOpencodePluginPath(configDir) {
+  return path12.resolve(path12.join(configDir, "plugins", "engram.ts"));
+}
+async function runOfficialSetupForInstall(args) {
+  let detectedVersion = null;
+  if (args.runtime === "claude-code" && typeof args.engramBin === "string" && args.engramBin !== "") {
+    try {
+      detectedVersion = engramVersion(args.engramBin);
+    } catch {
+      detectedVersion = null;
+    }
+  }
+  return runOfficialSetupIfNeeded(args.runtime, {
+    command: args.command,
+    dryRun: args.dryRun,
+    targetDir: args.targetDir,
+    engramBin: args.engramBin,
+    configDir: args.configDir,
+    homeDir: HOME,
+    engramVersion: detectedVersion,
+    ...args.runtime === "claude-code" ? { isExplicitClaudeConfigDir: process.env.CLAUDE_CONFIG_DIR !== void 0 } : {}
+  });
+}
+function formatOfficialFailure(adapterName, official) {
+  const detail = official.stderr ?? official.reason ?? "sin detalle";
+  if (official.ok) return `${adapterName}: setup oficial Engram ok.`;
+  if (official.incompleteRecovery === true) {
+    return `${adapterName}: setup oficial Engram fall\xF3 (${detail}). Recuperaci\xF3n incompleta \u2014 revisa el backup ${official.backupId ?? "previo"}.`;
+  }
+  if (official.recovery === "complete") {
+    return `${adapterName}: setup oficial Engram fall\xF3 (${detail}). Se restaur\xF3 el backup previo.`;
+  }
+  return `${adapterName}: setup oficial Engram fall\xF3 (${detail}).`;
+}
 async function runInstall(opts) {
   const showSummary = opts.showSummary !== false;
   if (showSummary) p.intro(`jorgex-stack ${opts.dryRun ? "install (dry-run)" : "install"}`);
@@ -3311,6 +1180,15 @@ async function runInstall(opts) {
       reportStatus(adapter.name, "failed");
       continue;
     }
+    if (shouldRunOfficialSetup({ command: opts.command, dryRun: opts.dryRun, targetDir: opts.targetDir })) {
+      const destinationError = validateOfficialSetupDestination(id, configDir, HOME);
+      if (destinationError !== null) {
+        p.log.error(`${adapter.name}: ${destinationError}`);
+        exitCode = 1;
+        reportStatus(adapter.name, "failed");
+        continue;
+      }
+    }
     const ctx = {
       writingStyle,
       stackDir,
@@ -3355,19 +1233,75 @@ async function runInstall(opts) {
       reportStatus(adapter.name, "preview");
       continue;
     }
-    const writeManifest = () => {
+    const writeManifest = async (official, opts2) => {
       if (!useManifest) return;
-      const unmergeTargets = new Set(adapter.planUnmerge(canonicalMcp, canonicalHooks, ctx).map((a) => path22.resolve(a.target)));
+      const unmergeTargets = new Set(adapter.planUnmerge(canonicalMcp, canonicalHooks, ctx).map((a) => path12.resolve(a.target)));
       const keepTarget = (target) => !unmergeTargets.has(target);
-      const liveOwned = plan.map((a) => path22.resolve(a.target)).filter(keepTarget);
-      const previousOwned = (prevManifest?.owned ?? []).map((target) => path22.resolve(target)).filter(keepTarget);
-      const owned = canOrphan ? liveOwned : [.../* @__PURE__ */ new Set([...previousOwned, ...liveOwned])];
-      writeRuntimeManifest(id, { configDir, owned, updatedAt: (/* @__PURE__ */ new Date()).toISOString() });
+      const liveOwned = plan.map((a) => path12.resolve(a.target)).filter(keepTarget);
+      const previousOwned = (prevManifest?.owned ?? []).map((target) => path12.resolve(target)).filter(keepTarget);
+      const officialFailed = official?.ran === true && !official.ok;
+      let owned;
+      let pendingOrphans;
+      if (!canOrphan) {
+        owned = [.../* @__PURE__ */ new Set([...previousOwned, ...liveOwned])];
+        pendingOrphans = [];
+      } else if (officialFailed) {
+        owned = [.../* @__PURE__ */ new Set([...previousOwned, ...liveOwned])];
+        pendingOrphans = [...orphans];
+      } else {
+        const keepPending = (opts2?.keepPendingOrphans ?? []).map((t) => path12.resolve(t));
+        owned = [...liveOwned];
+        if (id === "opencode") {
+          const legacy = legacyOpencodePluginPath(configDir);
+          if (previousOwned.includes(legacy)) {
+            let state = "unknown";
+            try {
+              fs10.statSync(legacy);
+              state = "present";
+            } catch (error) {
+              const code = error instanceof Error && "code" in error ? error.code : void 0;
+              state = code === "ENOENT" ? "absent" : "unknown";
+            }
+            if (state !== "absent") {
+              let retire = false;
+              if (state === "present" && official?.ran === true && official.ok && official.ownershipTransferred) {
+                try {
+                  retire = (await shouldRetireLegacyEngram({ configDir })).retire;
+                } catch {
+                  retire = false;
+                }
+              }
+              if (!retire && !owned.includes(legacy)) owned.push(legacy);
+            }
+          }
+        }
+        for (const pending of keepPending) {
+          if (!owned.includes(pending)) owned.push(pending);
+        }
+        owned = [...new Set(owned)];
+        pendingOrphans = [...keepPending];
+      }
+      writeRuntimeManifest(id, { configDir, owned, pendingOrphans, updatedAt: (/* @__PURE__ */ new Date()).toISOString() });
     };
     if (changes.length === 0 && orphans.length === 0) {
-      writeManifest();
       if (useManifest) persistConfigurationOwnershipChanges(id, configDir, plan);
       persistDevtoolsSelection();
+      const official = await runOfficialSetupForInstall({
+        runtime: id,
+        configDir,
+        engramBin,
+        command: opts.command,
+        dryRun: opts.dryRun,
+        targetDir: opts.targetDir
+      });
+      if (official.ran && !official.ok) {
+        await writeManifest(official);
+        p.log.error(formatOfficialFailure(adapter.name, official));
+        exitCode = 1;
+        reportStatus(adapter.name, "failed");
+        continue;
+      }
+      await writeManifest(official.ran ? official : void 0);
       p.log.success(`${adapter.name}: ya al d\xEDa (idempotente).`);
       successfulRuns++;
       successfulContexts.push({ adapter, ctx });
@@ -3391,11 +1325,6 @@ async function runInstall(opts) {
     const backup = useManifest ? createBackup([...updates.map((c) => c.action.target), ...orphans], `install-${id}`) : null;
     if (backup) p.log.info(`Backup: ${backup.id} (${backup.files.length} archivos)`);
     applyChanges(changes, useManifest ? (action) => persistConfigurationOwnershipChanges(id, configDir, [action]) : void 0);
-    const pruneRoot = useManifest ? HOME : path22.dirname(configDir);
-    for (const orphan of orphans) {
-      fs17.rmSync(orphan, { force: true });
-      pruneEmptyDirs(orphan, pruneRoot);
-    }
     const verifyCtx = { ...ctx, warnings: [] };
     const dirty = diffPlan(buildPlan(adapter, verifyCtx)).filter((d) => d.status !== "unchanged");
     if (dirty.length > 0) {
@@ -3404,13 +1333,51 @@ async function runInstall(opts) {
       exitCode = 1;
       reportStatus(adapter.name, "failed");
     } else {
-      writeManifest();
       if (useManifest) persistConfigurationOwnershipChanges(id, configDir, plan);
       persistDevtoolsSelection();
-      p.log.success(`${adapter.name}: ${changes.length} archivos aplicados y verificados (idempotente).`);
-      successfulRuns++;
-      successfulContexts.push({ adapter, ctx });
-      reportStatus(adapter.name, "ok");
+      const official = await runOfficialSetupForInstall({
+        runtime: id,
+        configDir,
+        engramBin,
+        command: opts.command,
+        dryRun: opts.dryRun,
+        targetDir: opts.targetDir
+      });
+      if (official.ran && !official.ok) {
+        await writeManifest(official);
+        p.log.error(formatOfficialFailure(adapter.name, official));
+        exitCode = 1;
+        reportStatus(adapter.name, "failed");
+      } else {
+        const pruneRoot = useManifest ? HOME : path12.dirname(configDir);
+        let orphanFailed = null;
+        let failedIndex = null;
+        for (let index = 0; index < orphans.length; index++) {
+          const orphan = orphans[index];
+          if (path12.basename(orphan) === "engram.ts") continue;
+          try {
+            fs10.rmSync(orphan, { force: true });
+            pruneEmptyDirs(orphan, pruneRoot);
+          } catch (error) {
+            orphanFailed = `${orphan} (${error instanceof Error ? error.message : String(error)})`;
+            failedIndex = index;
+            break;
+          }
+        }
+        if (orphanFailed !== null) {
+          const keepPending = failedIndex === null ? [...orphans] : orphans.slice(failedIndex);
+          await writeManifest(official.ran ? official : void 0, { keepPendingOrphans: keepPending });
+          p.log.error(`${adapter.name}: no se pudo eliminar hu\xE9rfano ${orphanFailed} \u2014 se conserva y no se reporta \xE9xito.`);
+          exitCode = 1;
+          reportStatus(adapter.name, "failed");
+        } else {
+          await writeManifest(official.ran ? official : void 0);
+          p.log.success(`${adapter.name}: ${changes.length} archivos aplicados y verificados (idempotente).`);
+          successfulRuns++;
+          successfulContexts.push({ adapter, ctx });
+          reportStatus(adapter.name, "ok");
+        }
+      }
     }
   }
   if (toolPlan?.actions.length) {
@@ -3523,33 +1490,33 @@ async function runInstall(opts) {
 }
 
 // src/uninstall.ts
-import fs19 from "fs";
-import path26 from "path";
+import fs12 from "fs";
+import path16 from "path";
 import * as p2 from "@clack/prompts";
 
 // src/lib/pi-projection-lifecycle.ts
-import fs18 from "fs";
-import path25 from "path";
+import fs11 from "fs";
+import path15 from "path";
 import { createHash } from "crypto";
 
 // src/adapters/pi.ts
-import path23 from "path";
+import path13 from "path";
 function piSystemPromptFile(targetDir) {
-  const configDir = targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path23.join(HOME, ".pi", "agent") : path23.join(path23.resolve(targetDir), "pi-agent");
-  return path23.join(configDir, "AGENTS.md");
+  const configDir = targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path13.join(HOME, ".pi", "agent") : path13.join(path13.resolve(targetDir), "pi-agent");
+  return path13.join(configDir, "AGENTS.md");
 }
 var piAdapter = {
   id: "pi",
   paths(configDir) {
-    const piConfigDir = path23.dirname(piSystemPromptFile());
-    const agentsHome = samePath(configDir, piConfigDir) ? HOME : path23.join(path23.dirname(configDir), "home");
+    const piConfigDir = path13.dirname(piSystemPromptFile());
+    const agentsHome = samePath(configDir, piConfigDir) ? HOME : path13.join(path13.dirname(configDir), "home");
     return {
-      systemPromptFile: path23.join(configDir, "AGENTS.md"),
-      agentsDir: path23.join(configDir, "agents"),
-      skillsDir: path23.join(agentsHome, ".agents", "skills"),
-      commandsDir: path23.join(configDir, "prompts"),
+      systemPromptFile: path13.join(configDir, "AGENTS.md"),
+      agentsDir: path13.join(configDir, "agents"),
+      skillsDir: path13.join(agentsHome, ".agents", "skills"),
+      commandsDir: path13.join(configDir, "prompts"),
       pluginsDir: null,
-      scriptsDir: path23.join(configDir, "scripts"),
+      scriptsDir: path13.join(configDir, "scripts"),
       outputStylesDir: null,
       profilesDir: null
     };
@@ -3569,7 +1536,7 @@ var piAdapter = {
 };
 
 // src/lib/pi-package-lifecycle.ts
-import path24 from "path";
+import path14 from "path";
 var REQUIRED_CAPABILITIES = /* @__PURE__ */ new Set([
   "foundation-contract-v1",
   "runner-json-v1",
@@ -3721,7 +1688,7 @@ function parseReceiptShape(receiptJson) {
       return null;
     }
     if (engram === void 0) return "upgrade-required";
-    if (engram === null || typeof engram !== "object" || Array.isArray(engram) || typeof Reflect.get(engram, "binary") !== "string" || !path24.isAbsolute(Reflect.get(engram, "binary"))) {
+    if (engram === null || typeof engram !== "object" || Array.isArray(engram) || typeof Reflect.get(engram, "binary") !== "string" || !path14.isAbsolute(Reflect.get(engram, "binary"))) {
       return null;
     }
     return parsed;
@@ -3758,7 +1725,7 @@ function planPiPackageLifecycle(input) {
   if (input.receiptJson !== null) {
     const parsedReceipt = parseReceipt(input.receiptJson, input.candidate, {
       kind: input.scope.kind,
-      codingAgentDir: path24.resolve(input.scope.codingAgentDir)
+      codingAgentDir: path14.resolve(input.scope.codingAgentDir)
     }, input.engramBin);
     if (parsedReceipt === "upgrade-required") return blocked(input, "receipt-upgrade-required");
     if (parsedReceipt === null) return blocked(input, "receipt-corrupt");
@@ -3793,7 +1760,7 @@ function planPiPackageLifecycle(input) {
     },
     receipt: expectedReceipt(input.candidate, "installing", {
       kind: input.scope.kind,
-      codingAgentDir: path24.resolve(input.scope.codingAgentDir)
+      codingAgentDir: path14.resolve(input.scope.codingAgentDir)
     }, input.engramBin),
     ownership: ownership(true)
   };
@@ -3808,7 +1775,7 @@ function parseRunnerRecord(stdout, stderr, command, candidate, packageRunner) {
     const parsed = JSON.parse(body);
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return null;
     const record = parsed;
-    if (record.schemaVersion !== candidate.contract.runner.schemaVersion || record.command !== command || record.ok !== true || record.package === null || typeof record.package !== "object" || record.package.name !== candidate.package.name || record.package.version !== candidate.package.version || typeof record.package.root !== "string" || !path24.isAbsolute(record.package.root) || path24.resolve(packageRunner) !== path24.resolve(record.package.root, "bin", "jorgex-pi.mjs")) {
+    if (record.schemaVersion !== candidate.contract.runner.schemaVersion || record.command !== command || record.ok !== true || record.package === null || typeof record.package !== "object" || record.package.name !== candidate.package.name || record.package.version !== candidate.package.version || typeof record.package.root !== "string" || !path14.isAbsolute(record.package.root) || path14.resolve(packageRunner) !== path14.resolve(record.package.root, "bin", "jorgex-pi.mjs")) {
       return null;
     }
     return record;
@@ -3956,10 +1923,10 @@ function validateOwnedOperationState(input) {
   }))) {
     return { kind: "blocked", reason: "receipt-untrusted" };
   }
-  if (receipt.scope.kind !== (input.paths.targetDir ? "target-dir" : "real") || path24.resolve(receipt.scope.codingAgentDir) !== path24.resolve(input.paths.codingAgentDir)) {
+  if (receipt.scope.kind !== (input.paths.targetDir ? "target-dir" : "real") || path14.resolve(receipt.scope.codingAgentDir) !== path14.resolve(input.paths.codingAgentDir)) {
     return { kind: "blocked", reason: "source-divergent" };
   }
-  if (input.engramBin !== null && path24.resolve(receipt.engram.binary) !== path24.resolve(input.engramBin)) {
+  if (input.engramBin !== null && path14.resolve(receipt.engram.binary) !== path14.resolve(input.engramBin)) {
     return { kind: "blocked", reason: "receipt-corrupt" };
   }
   const source = receipt.candidate.package.source;
@@ -4066,7 +2033,7 @@ var RETIRED_PLAYWRIGHT_FILES = [
   "references/video-recording.md"
 ];
 function retiredPlaywrightFiles(scope) {
-  return RETIRED_PLAYWRIGHT_FILES.map((file) => path25.resolve(scope.home, ".agents", "skills", "playwright-cli", file));
+  return RETIRED_PLAYWRIGHT_FILES.map((file) => path15.resolve(scope.home, ".agents", "skills", "playwright-cli", file));
 }
 function handoffEnabled(input, kind) {
   return (kind === "devtools" ? input.devtoolsMcpEnabled : input.playwrightHandoffEnabled) === true;
@@ -4075,18 +2042,18 @@ var preparedPiProjectionUninstalls = /* @__PURE__ */ new WeakMap();
 function projectionScope(scope) {
   return {
     ...scope,
-    settingsFile: path25.join(scope.codingAgentDir, "settings.json")
+    settingsFile: path15.join(scope.codingAgentDir, "settings.json")
   };
 }
 function isInside(root, file) {
-  const relative = path25.relative(path25.resolve(root), path25.resolve(file));
-  return relative === "" || relative !== ".." && !relative.startsWith(`..${path25.sep}`) && !path25.isAbsolute(relative);
+  const relative = path15.relative(path15.resolve(root), path15.resolve(file));
+  return relative === "" || relative !== ".." && !relative.startsWith(`..${path15.sep}`) && !path15.isAbsolute(relative);
 }
 function isManagedPath(scope, file) {
   return isInside(scope.home, file) || isInside(scope.codingAgentDir, file);
 }
 function isAllowedPath(scope, file) {
-  return isManagedPath(scope, file) || path25.resolve(file) === path25.resolve(scope.receiptFile);
+  return isManagedPath(scope, file) || path15.resolve(file) === path15.resolve(scope.receiptFile);
 }
 function projectedPiAdapter(scope) {
   const paths = piAdapter.paths(scope.codingAgentDir);
@@ -4094,7 +2061,7 @@ function projectedPiAdapter(scope) {
     ...piAdapter,
     paths: () => ({
       ...paths,
-      skillsDir: path25.join(scope.home, ".agents", "skills")
+      skillsDir: path15.join(scope.home, ".agents", "skills")
     })
   };
 }
@@ -4138,20 +2105,20 @@ function projectionPlan(input, scope, includePrompt = true) {
   return actions;
 }
 function handoffPath(scope, kind) {
-  return path25.resolve(scope.codingAgentDir, "jorgex-pi", `${kind}.v1.json`);
+  return path15.resolve(scope.codingAgentDir, "jorgex-pi", `${kind}.v1.json`);
 }
 function contentHash(content) {
   return createHash("sha256").update(content).digest("hex");
 }
 function canonicalActionContent(action) {
-  return action.kind === "write" ? action.content : fs18.readFileSync(action.source, "utf8");
+  return action.kind === "write" ? action.content : fs11.readFileSync(action.source, "utf8");
 }
 function hasActionDrift(action, deps) {
   return deps.readText(action.target) !== canonicalActionContent(action);
 }
 function applyActions(actions, deps, handoffs = []) {
   for (const action of actions) {
-    const handoff = handoffs.find((entry) => path25.resolve(action.target) === entry.file);
+    const handoff = handoffs.find((entry) => path15.resolve(action.target) === entry.file);
     if (handoff) {
       try {
         if (deps.readText(handoff.file) !== handoff.previous) return handoffConflict(handoff.kind, handoff.file);
@@ -4171,9 +2138,9 @@ function assertPlanContained(plan, scope) {
   }
 }
 function receiptFor(plan, scope) {
-  const systemPrompt = path25.join(scope.codingAgentDir, "AGENTS.md");
+  const systemPrompt = path15.join(scope.codingAgentDir, "AGENTS.md");
   const owned = [...new Set(
-    plan.map((action) => path25.resolve(action.target)).filter((target) => target !== systemPrompt)
+    plan.map((action) => path15.resolve(action.target)).filter((target) => target !== systemPrompt)
   )];
   const receipt = {
     schemaVersion: 1,
@@ -4186,7 +2153,7 @@ function receiptFor(plan, scope) {
     owned
   };
   for (const kind of HANDOFF_KINDS) {
-    const action = plan.find((entry) => path25.resolve(entry.target) === handoffPath(scope, kind));
+    const action = plan.find((entry) => path15.resolve(entry.target) === handoffPath(scope, kind));
     if (action) receipt[kind] = { sha256: contentHash(canonicalActionContent(action)) };
   }
   return receipt;
@@ -4227,7 +2194,7 @@ function parseReceipt2(raw, expected) {
     if (matches(expectedOwned)) return { schemaVersion: 1, scope: expected.scope, owned: expectedOwned, ...digests };
     const retired = retiredPlaywrightFiles(expected.scope);
     if (retired.some((file) => expectedOwned.includes(file))) return null;
-    const skillsRoot = `${path25.resolve(expected.scope.home, ".agents", "skills")}${path25.sep}`;
+    const skillsRoot = `${path15.resolve(expected.scope.home, ".agents", "skills")}${path15.sep}`;
     const insertion = expectedOwned.findIndex((file) => !file.startsWith(skillsRoot) || file > retired[0]);
     const legacyOwned = [...expectedOwned];
     legacyOwned.splice(insertion === -1 ? legacyOwned.length : insertion, 0, ...retired);
@@ -4246,13 +2213,13 @@ function realPiProjectionScope() {
   return {
     kind: "real",
     home: HOME,
-    codingAgentDir: path25.dirname(piSystemPromptFile()),
-    receiptFile: path25.join(dataDir(), "pi-projection-receipt.json")
+    codingAgentDir: path15.dirname(piSystemPromptFile()),
+    receiptFile: path15.join(dataDir(), "pi-projection-receipt.json")
   };
 }
 function readTextOnlyIfMissing(file) {
   try {
-    return fs18.readFileSync(file, "utf8");
+    return fs11.readFileSync(file, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT") return null;
     throw error;
@@ -4285,13 +2252,13 @@ function manifestOwned(manifest) {
   return new Set([
     ...manifest.runtimes.codex?.owned ?? [],
     ...manifest.runtimes.opencode?.owned ?? []
-  ].map((file) => path25.resolve(file)));
+  ].map((file) => path15.resolve(file)));
 }
 function withoutManagedPromptSections(content) {
   return removeSystemPromptSections(content);
 }
 function uniquePaths(paths) {
-  return [...new Set(paths.map((file) => path25.resolve(file)))];
+  return [...new Set(paths.map((file) => path15.resolve(file)))];
 }
 function blocked2(reason, paths, remedy) {
   return { kind: "blocked", reason, paths: uniquePaths(paths), remedy };
@@ -4398,7 +2365,7 @@ function preparePiProjectionUninstall(input, deps) {
   }
   const scope = projectionScope(input.scope);
   const expectedReceipt2 = expectedProjectionReceipt(input, scope);
-  const prompt = path25.join(scope.codingAgentDir, "AGENTS.md");
+  const prompt = path15.join(scope.codingAgentDir, "AGENTS.md");
   let existingPrompt;
   try {
     existingPrompt = deps.readText(prompt);
@@ -4411,7 +2378,7 @@ function preparePiProjectionUninstall(input, deps) {
     return blocked2("projection-prompt-markers", [prompt], error instanceof Error ? error.message : String(error));
   }
   const promptContent = existingPrompt === null ? null : withoutManagedPromptSections(existingPrompt);
-  const promptUpdate = promptContent === null || promptContent === existingPrompt ? null : { file: path25.resolve(prompt), content: promptContent };
+  const promptUpdate = promptContent === null || promptContent === existingPrompt ? null : { file: path15.resolve(prompt), content: promptContent };
   const receiptRead = readProjectionReceipt(scope.receiptFile, deps);
   if (receiptRead.kind === "unreadable") return receiptUnreadable(scope.receiptFile);
   let ownedToRemove = [];
@@ -4429,7 +2396,7 @@ function preparePiProjectionUninstall(input, deps) {
       return cleanupFailure([scope.receiptFile]);
     }
     ownedToRemove = receipt.owned.filter((owned) => !retained.has(owned));
-    receiptFile = path25.resolve(scope.receiptFile);
+    receiptFile = path15.resolve(scope.receiptFile);
     backupTargets = [...backupTargets, ...receipt.owned, receiptFile];
   }
   const handoffs = [];
@@ -4507,16 +2474,16 @@ function runPiProjectionLifecycle(input, deps) {
     const prepared = preparePiProjectionUninstall(input, deps);
     return prepared.kind === "blocked" ? prepared : completePiProjectionUninstall(prepared.plan, deps);
   }
-  const prompt = path25.join(scope.codingAgentDir, "AGENTS.md");
+  const prompt = path15.join(scope.codingAgentDir, "AGENTS.md");
   try {
     assertSystemPromptMarkers(deps.readText(prompt), prompt);
   } catch (error) {
     return blocked2("projection-prompt-markers", [prompt], error instanceof Error ? error.message : String(error));
   }
-  if (input.devtoolsMcpEnabled && (!input.pnpmBin || !path25.isAbsolute(input.pnpmBin))) {
+  if (input.devtoolsMcpEnabled && (!input.pnpmBin || !path15.isAbsolute(input.pnpmBin))) {
     return blocked2("projection-devtools-command", [handoffPath(scope, "devtools")], "DevTools requiere un ejecutable pnpm absoluto disponible en PATH.");
   }
-  if (input.playwrightHandoffEnabled && (!input.playwrightCliCommand || !path25.isAbsolute(input.playwrightCliCommand) || /[\u0000-\u001f\u007f]/.test(input.playwrightCliCommand))) {
+  if (input.playwrightHandoffEnabled && (!input.playwrightCliCommand || !path15.isAbsolute(input.playwrightCliCommand) || /[\u0000-\u001f\u007f]/.test(input.playwrightCliCommand))) {
     return blocked2("projection-playwright-command", [handoffPath(scope, "playwright")], "Playwright requiere un ejecutable absoluto verificado. Abre una terminal nueva tras pnpm setup y reintenta install --playwright.");
   }
   const plan = projectionPlan(input, scope);
@@ -4529,12 +2496,12 @@ function runPiProjectionLifecycle(input, deps) {
   const expectedReceipt2 = receiptContent(receipt);
   const drifted = plan.filter((action) => hasActionDrift(action, deps));
   for (const { kind, file } of checked.handoffs) {
-    if (handoffEnabled(input, kind) && checked.previous?.[kind]?.sha256 !== receipt[kind]?.sha256 && !drifted.some((action) => path25.resolve(action.target) === file)) {
+    if (handoffEnabled(input, kind) && checked.previous?.[kind]?.sha256 !== receipt[kind]?.sha256 && !drifted.some((action) => path15.resolve(action.target) === file)) {
       return input.operation === "doctor" ? { kind: "drift", paths: [file] } : handoffConflict(kind, file);
     }
   }
   if (input.operation === "doctor") {
-    const paths = drifted.map((action) => path25.resolve(action.target));
+    const paths = drifted.map((action) => path15.resolve(action.target));
     paths.push(...removedHandoffs.map(({ file }) => file), ...retiredSkills);
     const currentSettings2 = deps.readText(scope.settingsFile);
     if (currentSettings2 === null || filterProjectedPiPackage(currentSettings2, input.packageSource) !== currentSettings2) {
@@ -4593,12 +2560,12 @@ function runPiProjectionLifecycle(input, deps) {
   return { kind: "synced", changed: drifted.length > 0 || packageWillChange || receiptChanged || removedHandoffs.length > 0 };
 }
 function systemProjectionLifecycle(input) {
-  const targetRoot = input.targetDir === void 0 ? null : path25.resolve(input.targetDir);
+  const targetRoot = input.targetDir === void 0 ? null : path15.resolve(input.targetDir);
   const scope = targetRoot === null ? realPiProjectionScope() : {
     kind: "target-dir",
-    home: path25.join(targetRoot, "home"),
-    codingAgentDir: path25.dirname(piSystemPromptFile(targetRoot)),
-    receiptFile: path25.join(targetRoot, "state", "pi-projection-receipt.json")
+    home: path15.join(targetRoot, "home"),
+    codingAgentDir: path15.dirname(piSystemPromptFile(targetRoot)),
+    receiptFile: path15.join(targetRoot, "state", "pi-projection-receipt.json")
   };
   return {
     input: {
@@ -4619,14 +2586,14 @@ function systemProjectionLifecycle(input) {
       backup: (paths) => createBackup(
         paths,
         `pi-projection-${input.operation}`,
-        targetRoot === null ? void 0 : path25.join(targetRoot, "backups")
+        targetRoot === null ? void 0 : path15.join(targetRoot, "backups")
       ),
       writeText,
       copyFile,
       removeFile: (file) => {
-        fs18.rmSync(file, { force: true });
-        if (retiredPlaywrightFiles(scope).includes(path25.resolve(file))) {
-          pruneEmptyDirs(file, path25.join(scope.home, ".agents", "skills"));
+        fs11.rmSync(file, { force: true });
+        if (retiredPlaywrightFiles(scope).includes(path15.resolve(file))) {
+          pruneEmptyDirs(file, path15.join(scope.home, ".agents", "skills"));
         }
       },
       readManifest: targetRoot === null ? readManifest : () => ({ runtimes: {} })
@@ -4729,7 +2696,7 @@ async function runUninstall(opts) {
       if (!detection.installed) continue;
       const keepCtx = makeContext(keep, detection.configDir);
       if (!keepCtx) continue;
-      for (const action of buildContentPlan(keep, keepCtx)) retained.add(path26.resolve(action.target));
+      for (const action of buildContentPlan(keep, keepCtx)) retained.add(path16.resolve(action.target));
     }
   }
   for (const id of opts.runtimes) {
@@ -4755,16 +2722,20 @@ async function runUninstall(opts) {
       exitCode = 1;
       continue;
     }
-    const mergedTargets = new Set(unmerge.map((a) => path26.resolve(a.target)));
+    const mergedTargets = new Set(unmerge.map((a) => path16.resolve(a.target)));
     const usingRealConfig = opts.targetDir === void 0;
     const prevOwned = usingRealConfig ? readManifest().runtimes[id]?.owned ?? [] : [];
-    const pruneRoot = usingRealConfig ? HOME : path26.dirname(configDir);
+    const pruneRoot = usingRealConfig ? HOME : path16.dirname(configDir);
     const planTargets = [
-      .../* @__PURE__ */ new Set([...buildContentPlan(adapter, ctx).map((a) => path26.resolve(a.target)), ...prevOwned.map((t) => path26.resolve(t))])
-    ].filter((t) => !mergedTargets.has(t) && fs19.existsSync(t));
-    const deleteTargets = planTargets.filter(
-      (t) => !retained.has(t) && !(ctx.preserveEngram && path26.basename(t) === "engram.ts") && isContainedIn(t, pruneRoot)
-    );
+      .../* @__PURE__ */ new Set([...buildContentPlan(adapter, ctx).map((a) => path16.resolve(a.target)), ...prevOwned.map((t) => path16.resolve(t))])
+    ].filter((t) => !mergedTargets.has(t) && fs12.existsSync(t));
+    const deleteTargets = planTargets.filter((t) => {
+      if (retained.has(t) || !isContainedIn(t, pruneRoot)) return false;
+      if (path16.basename(t) !== "engram.ts") return true;
+      const state = inspectOpencodePluginFile(t);
+      if (state === "official" || state === "unknown") return false;
+      return !ctx.preserveEngram;
+    });
     const sharedKept = planTargets.length - deleteTargets.length;
     p2.log.step(`${adapter.name} \u2192 ${configDir}`);
     p2.log.info(`${deleteTargets.length} archivos a borrar, ${unmerge.length} archivos compartidos a limpiar`);
@@ -4773,7 +2744,7 @@ async function runUninstall(opts) {
     let backup;
     try {
       backup = createBackup(
-        [...deleteTargets, ...unmerge.map((a) => a.target).filter((t) => fs19.existsSync(t))],
+        [...deleteTargets, ...unmerge.map((a) => a.target).filter((t) => fs12.existsSync(t))],
         `uninstall-${id}`
       );
     } catch (error) {
@@ -4783,13 +2754,13 @@ async function runUninstall(opts) {
     }
     if (backup) p2.log.info(`Backup: ${backup.id} (${backup.files.length} archivos)`);
     for (const target of deleteTargets) {
-      fs19.rmSync(target, { force: true });
+      fs12.rmSync(target, { force: true });
       pruneEmptyDirs(target, pruneRoot);
     }
     for (const action of unmerge) {
       if (action.kind !== "write") continue;
       if (action.content.trim() === "") {
-        fs19.rmSync(action.target, { force: true });
+        fs12.rmSync(action.target, { force: true });
       } else {
         writeText(action.target, action.content);
       }
@@ -4843,12 +2814,12 @@ async function runUninstall(opts) {
 }
 
 // src/doctor.ts
-import path27 from "path";
-import fs20 from "fs";
+import path17 from "path";
+import fs13 from "fs";
 import * as p3 from "@clack/prompts";
 function readDoctorTextIfExists(file) {
   try {
-    return fs20.readFileSync(file, "utf8");
+    return fs13.readFileSync(file, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return null;
     throw error;
@@ -4857,12 +2828,12 @@ function readDoctorTextIfExists(file) {
 var STALE_PERMISSIONS_MARKER = "differs from the stack default and was left untouched";
 var UPGRADE_PERMISSIONS_REMEDY = "jorgex-stack sync --upgrade-permissions --dry-run";
 function piAgentDir(targetDir) {
-  return targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path27.join(HOME, ".pi", "agent") : path27.join(targetDir, "pi-agent");
+  return targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path17.join(HOME, ".pi", "agent") : path17.join(targetDir, "pi-agent");
 }
 function reportPiPermissions(targetDir) {
   const agentDir = piAgentDir(targetDir);
-  const configFile = path27.join(agentDir, "extensions", "pi-permission-system", "config.json");
-  const receiptFile = path27.join(agentDir, "jorgex-pi", "permissions-lifecycle.v1.json");
+  const configFile = path17.join(agentDir, "extensions", "pi-permission-system", "config.json");
+  const receiptFile = path17.join(agentDir, "jorgex-pi", "permissions-lifecycle.v1.json");
   let config;
   let receipt;
   try {
@@ -4885,11 +2856,6 @@ function reportPiPermissions(targetDir) {
   );
   return 1;
 }
-function engramVersion(bin) {
-  const out = runDetectedBin(bin, ["--version"], 5e3);
-  if (out === null) return null;
-  return /(\d+\.\d+\.\d+)/.exec(out)?.[1] ?? out.trim().split("\n")[0] ?? null;
-}
 function resolvePlaywrightDoctorState(input) {
   if (input.enabled !== true) return { status: "disabled" };
   if (input.cli.status === "not-in-path") return { status: "not-in-path" };
@@ -4904,7 +2870,7 @@ function resolvePlaywrightDoctorState(input) {
   return { status: "healthy" };
 }
 function context7KeyConfigured(id, configDir) {
-  const file = id === "codex" ? path27.join(configDir, "config.toml") : id === "claude-code" ? path27.join(path27.dirname(configDir), `${path27.basename(configDir)}.json`) : path27.join(configDir, "opencode.json");
+  const file = id === "codex" ? path17.join(configDir, "config.toml") : id === "claude-code" ? path17.join(path17.dirname(configDir), `${path17.basename(configDir)}.json`) : path17.join(configDir, "opencode.json");
   const content = readTextIfExists(file);
   if (content === null) return null;
   const match = /CONTEXT7_API_KEY"?\s*[:=]\s*"([^"]*)"/.exec(content);
@@ -4924,7 +2890,7 @@ function reportWritingStyle(options, style, mode) {
   for (const id of runtimes) {
     const adapter = id === "pi" ? piAdapter : ADAPTERS[id];
     if (adapter === void 0) continue;
-    const configDir = id === "pi" ? options.targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path27.join(HOME, ".pi", "agent") : path27.join(options.targetDir, "pi-agent") : options.targetDir ?? ADAPTERS[id].detect().configDir;
+    const configDir = id === "pi" ? options.targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path17.join(HOME, ".pi", "agent") : path17.join(options.targetDir, "pi-agent") : options.targetDir ?? ADAPTERS[id].detect().configDir;
     const file = adapter.paths(configDir).systemPromptFile;
     try {
       const content = readDoctorTextIfExists(file) ?? "";
@@ -4939,7 +2905,7 @@ function reportWritingStyle(options, style, mode) {
         problems++;
       }
       if (id === "codex") {
-        const override = path27.join(configDir, "AGENTS.override.md");
+        const override = path17.join(configDir, "AGENTS.override.md");
         if ((readDoctorTextIfExists(override) ?? "").trim() !== "") {
           p3.log.warn(`Codex: ${override} no vac\xEDo puede ocultar el AGENTS.md gestionado; rev\xEDsalo sin modificarlo autom\xE1ticamente.`);
           problems++;
@@ -4952,6 +2918,34 @@ function reportWritingStyle(options, style, mode) {
   }
   return problems;
 }
+async function verifyOfficialForRuntime(runtime, configDir, engramBin, homeDir, isExplicitClaudeConfigDir) {
+  if (runtime === "claude-code") {
+    const { verifyOfficialSetup: verifyOfficialSetup2 } = await import("./claude-code-WY4JJAXP.js");
+    const explicit = isExplicitClaudeConfigDir ?? process.env.CLAUDE_CONFIG_DIR !== void 0;
+    const report2 = await verifyOfficialSetup2({ configDir, engramBin, homeDir, isExplicitClaudeConfigDir: explicit });
+    return {
+      ok: report2.ok,
+      layers: report2.layers,
+      ...report2.reason === void 0 ? {} : { reason: report2.reason }
+    };
+  }
+  if (runtime === "codex") {
+    const { verifyOfficialSetup: verifyOfficialSetup2 } = await import("./codex-WSWHXYJ3.js");
+    const report2 = await verifyOfficialSetup2({ configDir, engramBin });
+    return {
+      ok: report2.ok,
+      layers: report2.layers,
+      ...report2.reason === void 0 ? {} : { reason: report2.reason }
+    };
+  }
+  const { verifyOfficialSetup } = await import("./opencode-NUDGK6J7.js");
+  const report = await verifyOfficialSetup({ configDir, engramBin });
+  return {
+    ok: report.ok,
+    layers: report.layers,
+    ...report.reason === void 0 ? {} : { reason: report.reason }
+  };
+}
 async function runDoctor(options = {}) {
   p3.intro("jorgex-stack doctor");
   let writingStyle;
@@ -4973,6 +2967,7 @@ async function runDoctor(options = {}) {
     return problems > 0 ? 1 : 0;
   }
   const engramBin = detectEngram();
+  let engramBinAvailable = false;
   if (engramBin === null) {
     p3.log.warn("Engram: NO detectado. El protocolo de memoria no funcionar\xE1 \u2014 inst\xE1lalo: github.com/Gentleman-Programming/engram");
     problems++;
@@ -4983,15 +2978,17 @@ async function runDoctor(options = {}) {
       problems++;
     } else {
       p3.log.success(`Engram: ${version} (${engramBin})`);
+      engramBinAvailable = true;
     }
   }
-  const engramDataDir = process.env.ENGRAM_DATA_DIR ?? path27.join(HOME, ".engram");
-  const engramDb = path27.join(engramDataDir, "engram.db");
-  if (fs20.existsSync(engramDb)) {
-    const sizeMb = (fs20.statSync(engramDb).size / 1024 / 1024).toFixed(1);
+  const engramDataDir = process.env.ENGRAM_DATA_DIR ?? path17.join(HOME, ".engram");
+  const engramDb = path17.join(engramDataDir, "engram.db");
+  if (fs13.existsSync(engramDb)) {
+    const sizeMb = (fs13.statSync(engramDb).size / 1024 / 1024).toFixed(1);
     p3.log.info(`Engram DB: ${engramDb} (${sizeMb} MB de memorias \u2014 el stack no la toca JAM\xC1S).`);
   }
-  if (!fs20.existsSync(modelMapFile())) p3.log.info("model-map: a\xFAn no creado (se crea en el primer install o con 'models').");
+  const officialResults = [];
+  if (!fs13.existsSync(modelMapFile())) p3.log.info("model-map: a\xFAn no creado (se crea en el primer install o con 'models').");
   const preferenceErrors = browserPreferenceErrors();
   const primaryOwnershipError = primaryModelOwnershipError();
   if (primaryOwnershipError !== null) {
@@ -5090,27 +3087,64 @@ async function runDoctor(options = {}) {
       p3.log.warn(`${adapter.name}: ${orphans.length} archivos hu\xE9rfanos de versiones previas \u2192 ejecuta 'sync'.`);
       problems++;
     }
-    if (adapter.id === "codex" && fs20.existsSync(path27.join(detection.configDir, "hooks.json"))) {
+    if (adapter.id === "codex" && fs13.existsSync(path17.join(detection.configDir, "hooks.json"))) {
       p3.log.info("Codex: recuerda que los hooks requieren aprobaci\xF3n manual \u2014 verifica con /hooks dentro de codex.");
     }
     const key = context7KeyConfigured(adapter.id, detection.configDir);
     if (key === false) p3.log.info(`${adapter.name}: context7 sin key (opcional \u2014 con\xE9ctala cuando quieras).`);
+    try {
+      const explicitClaude = adapter.id === "claude-code" ? process.env.CLAUDE_CONFIG_DIR !== void 0 : void 0;
+      const setup = await verifyOfficialForRuntime(
+        adapter.id,
+        detection.configDir,
+        engramBin ?? "",
+        HOME,
+        explicitClaude
+      );
+      const exposed = setup.layers.includes("mcp") && engramBinAvailable;
+      officialResults.push({ runtime: adapter.id, ok: setup.ok, layers: setup.layers, exposed });
+      if (!setup.ok) {
+        const reason = typeof setup.reason === "string" ? setup.reason.trim() : "";
+        if (reason !== "") {
+          p3.log.warn(`${adapter.name}: ${reason}`);
+        } else {
+          p3.log.warn(
+            `${adapter.name}: setup oficial Engram incompleto (${setup.layers.join(", ")}) \u2192 ejecuta install.`
+          );
+        }
+        problems++;
+      }
+    } catch (error) {
+      p3.log.warn(
+        `${adapter.name}: setup oficial Engram no verificable (${error instanceof Error ? error.message : String(error)}).`
+      );
+      problems++;
+    }
+  }
+  if (officialResults.length === 0) {
+    p3.log.info("Engram official setup: no hay runtimes instalados seleccionados para verificar.");
+    p3.log.info("Engram official exposure: no verificado (sin runtimes instalados seleccionados).");
+  } else {
+    const setupSummary = officialResults.map((r) => `${r.runtime}=${r.ok ? "ok" : "missing"} (${r.layers.join(",")})`).join("; ");
+    const exposureSummary = officialResults.map((r) => `${r.runtime}=${r.exposed ? "exposed" : "not-exposed"}`).join("; ");
+    p3.log.info(`Engram official setup: ${setupSummary}.`);
+    p3.log.info(`Engram official exposure: ${exposureSummary} (MCP registrado y binario disponible; sin certificar carga en runtime).`);
   }
   p3.outro(problems === 0 ? "Doctor: todo sano." : `Doctor: ${problems} aviso(s) \u2014 revisa arriba.`);
   return problems > 0 ? 1 : 0;
 }
 
 // src/update.ts
-import fs23 from "fs";
-import path30 from "path";
+import fs16 from "fs";
+import path20 from "path";
 import os3 from "os";
-import { execFileSync as execFileSync5 } from "child_process";
+import { execFileSync as execFileSync4 } from "child_process";
 import * as p4 from "@clack/prompts";
 
 // src/lib/github.ts
-import fs21 from "fs";
-import path28 from "path";
-import { execFileSync as execFileSync3 } from "child_process";
+import fs14 from "fs";
+import path18 from "path";
+import { execFileSync as execFileSync2 } from "child_process";
 import os2 from "os";
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
@@ -5179,19 +3213,19 @@ async function latestGithubCommit(repo) {
   }
 }
 function validateExtractedTree(destDir) {
-  const resolved = path28.resolve(destDir);
+  const resolved = path18.resolve(destDir);
   const walk = (dir) => {
     let entries;
     try {
-      entries = fs21.readdirSync(dir, { withFileTypes: true });
+      entries = fs14.readdirSync(dir, { withFileTypes: true });
     } catch {
       return false;
     }
     for (const entry of entries) {
-      const full = path28.join(dir, entry.name);
+      const full = path18.join(dir, entry.name);
       let stat;
       try {
-        stat = fs21.lstatSync(full);
+        stat = fs14.lstatSync(full);
       } catch {
         return false;
       }
@@ -5207,15 +3241,15 @@ function validateExtractedTree(destDir) {
 }
 function resolveTarBin() {
   if (process.platform !== "win32") return "tar";
-  const winTar = path28.join(process.env["SystemRoot"] ?? "C:\\Windows", "System32", "tar.exe");
-  return fs21.existsSync(winTar) ? winTar : "tar";
+  const winTar = path18.join(process.env["SystemRoot"] ?? "C:\\Windows", "System32", "tar.exe");
+  return fs14.existsSync(winTar) ? winTar : "tar";
 }
 async function downloadRepoTarball(repo, sha, destDir, validateSubdir) {
   const url = `https://codeload.github.com/${repo}/tar.gz/${sha}`;
-  const tmp = path28.join(os2.tmpdir(), `jorgex-tarball-${Date.now()}.tar.gz`);
+  const tmp = path18.join(os2.tmpdir(), `jorgex-tarball-${Date.now()}.tar.gz`);
   const fail = (reason) => {
     try {
-      fs21.rmSync(destDir, { recursive: true, force: true });
+      fs14.rmSync(destDir, { recursive: true, force: true });
     } catch {
     }
     return { ok: false, reason };
@@ -5234,42 +3268,42 @@ async function downloadRepoTarball(repo, sha, destDir, validateSubdir) {
     if (!res.body) return fail("respuesta HTTP sin cuerpo");
     await pipeline(
       Readable.fromWeb(res.body),
-      fs21.createWriteStream(tmp)
+      fs14.createWriteStream(tmp)
     );
-    fs21.rmSync(destDir, { recursive: true, force: true });
-    fs21.mkdirSync(destDir, { recursive: true });
+    fs14.rmSync(destDir, { recursive: true, force: true });
+    fs14.mkdirSync(destDir, { recursive: true });
     try {
-      execFileSync3(resolveTarBin(), ["-xzf", tmp, "--strip-components=1", "-C", destDir], { stdio: "pipe" });
+      execFileSync2(resolveTarBin(), ["-xzf", tmp, "--strip-components=1", "-C", destDir], { stdio: "pipe" });
     } catch (err) {
       const e = err;
       const detail = (e.stderr?.toString().trim() || e.message || "").split("\n")[0];
       return fail(detail ? `tar fall\xF3: ${detail}` : "tar no disponible o fall\xF3 la extracci\xF3n");
     }
-    const resolvedDest = path28.resolve(destDir);
-    const validateRoot = validateSubdir ? path28.resolve(resolvedDest, validateSubdir) : resolvedDest;
+    const resolvedDest = path18.resolve(destDir);
+    const validateRoot = validateSubdir ? path18.resolve(resolvedDest, validateSubdir) : resolvedDest;
     if (validateRoot !== resolvedDest && !isContainedIn(validateRoot, resolvedDest)) {
       return fail(`la ruta de validaci\xF3n "${validateSubdir}" escapa del destino`);
     }
-    if (fs21.existsSync(validateRoot) && !validateExtractedTree(validateRoot)) {
+    if (fs14.existsSync(validateRoot) && !validateExtractedTree(validateRoot)) {
       return fail("el \xE1rbol extra\xEDdo contiene symlinks o rutas fuera del destino");
     }
-    const validated = fs21.existsSync(validateRoot);
+    const validated = fs14.existsSync(validateRoot);
     return { ok: true, validated };
   } catch (err) {
     const timedOut = err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError");
     return fail(timedOut ? "timeout de descarga (120s)" : err instanceof Error ? `fallo de red: ${err.message}` : "error desconocido");
   } finally {
     try {
-      fs21.rmSync(tmp, { force: true });
+      fs14.rmSync(tmp, { force: true });
     } catch {
     }
   }
 }
 
 // src/lib/skill-update.ts
-import fs22 from "fs";
-import path29 from "path";
-import { execFileSync as execFileSync4 } from "child_process";
+import fs15 from "fs";
+import path19 from "path";
+import { execFileSync as execFileSync3 } from "child_process";
 var PROTECTED_SKILLS = /* @__PURE__ */ new Set([
   "agent-delegation",
   "lean-code",
@@ -5279,8 +3313,8 @@ var PROTECTED_SKILLS = /* @__PURE__ */ new Set([
   "xreview"
 ]);
 function sameTextContentNormalized(a, b) {
-  const ba = fs22.readFileSync(a);
-  const bb = fs22.readFileSync(b);
+  const ba = fs15.readFileSync(a);
+  const bb = fs15.readFileSync(b);
   if (ba.equals(bb)) return true;
   const sa = ba.toString("utf8").replace(/\r\n/g, "\n");
   const sb = bb.toString("utf8").replace(/\r\n/g, "\n");
@@ -5288,10 +3322,10 @@ function sameTextContentNormalized(a, b) {
 }
 function diffSkillDirs(upstreamDir, localDir) {
   const upstreamFiles = new Set(
-    listFilesRecursive(upstreamDir).map((f) => path29.relative(upstreamDir, f))
+    listFilesRecursive(upstreamDir).map((f) => path19.relative(upstreamDir, f))
   );
   const localFiles = new Set(
-    listFilesRecursive(localDir).map((f) => path29.relative(localDir, f))
+    listFilesRecursive(localDir).map((f) => path19.relative(localDir, f))
   );
   const added = [];
   const modified = [];
@@ -5299,7 +3333,7 @@ function diffSkillDirs(upstreamDir, localDir) {
   for (const rel of upstreamFiles) {
     if (!localFiles.has(rel)) {
       added.push(rel);
-    } else if (!sameTextContentNormalized(path29.join(upstreamDir, rel), path29.join(localDir, rel))) {
+    } else if (!sameTextContentNormalized(path19.join(upstreamDir, rel), path19.join(localDir, rel))) {
       modified.push(rel);
     }
   }
@@ -5317,7 +3351,7 @@ function diffSkillDirs(upstreamDir, localDir) {
 var DIFF_MAX_LINES = 400;
 function renderSkillDiff(upstreamDir, localDir) {
   try {
-    execFileSync4("git", ["diff", "--no-index", "--stat", "--", localDir, upstreamDir], {
+    execFileSync3("git", ["diff", "--no-index", "--stat", "--", localDir, upstreamDir], {
       stdio: "pipe",
       encoding: "utf8"
     });
@@ -5334,7 +3368,7 @@ function renderSkillDiff(upstreamDir, localDir) {
     const stat = se.stdout;
     let fullDiff = "";
     try {
-      execFileSync4("git", ["diff", "--no-index", "--", localDir, upstreamDir], {
+      execFileSync3("git", ["diff", "--no-index", "--", localDir, upstreamDir], {
         stdio: "pipe",
         encoding: "utf8"
       });
@@ -5357,12 +3391,12 @@ ${fullDiff}` : stat;
 function replaceSkill(name, upstreamSkillDir, newCommit, opts) {
   const upstreamsFilePath = opts?.upstreamsFilePath;
   const localSkillsRoot = opts?.localSkillsRoot;
-  const backupsRoot2 = opts?.backupsRoot;
+  const backupsRoot = opts?.backupsRoot;
   if (PROTECTED_SKILLS.has(name)) {
     throw new Error(`La skill "${name}" es propia del stack y no se actualiza desde upstream.`);
   }
-  const upstreamsFile = upstreamsFilePath ?? path29.join(path29.dirname(stackRoot()), "upstreams.json");
-  const raw = fs22.readFileSync(upstreamsFile, "utf8");
+  const upstreamsFile = upstreamsFilePath ?? path19.join(path19.dirname(stackRoot()), "upstreams.json");
+  const raw = fs15.readFileSync(upstreamsFile, "utf8");
   const data = JSON.parse(raw);
   const skillEntry = data?.skills?.[name];
   if (!skillEntry) {
@@ -5371,34 +3405,34 @@ function replaceSkill(name, upstreamSkillDir, newCommit, opts) {
   if (skillEntry.kind === "release") {
     throw new Error(`La skill "${name}" es de tipo release y no se actualiza con replaceSkill.`);
   }
-  const skillsRoot = localSkillsRoot ?? path29.join(stackRoot(), "skills");
-  const localSkillDir = path29.join(skillsRoot, name);
+  const skillsRoot = localSkillsRoot ?? path19.join(stackRoot(), "skills");
+  const localSkillDir = path19.join(skillsRoot, name);
   const localFiles = listFilesRecursive(localSkillDir);
   if (localFiles.length > 0) {
-    createBackup(localFiles, `skill-update-${name}`, backupsRoot2);
+    createBackup(localFiles, `skill-update-${name}`, backupsRoot);
   }
   const stagingDir = `${localSkillDir}.staging-${process.pid}`;
   try {
     const upstreamFiles = listFilesRecursive(upstreamSkillDir);
     for (const src of upstreamFiles) {
-      const st = fs22.lstatSync(src);
+      const st = fs15.lstatSync(src);
       if (st.isSymbolicLink()) {
         throw new Error(`Symlink rechazado en upstream de skill "${name}": ${src}`);
       }
-      const rel = path29.relative(upstreamSkillDir, src);
-      const dest = path29.join(stagingDir, rel);
-      ensureDir(path29.dirname(dest));
+      const rel = path19.relative(upstreamSkillDir, src);
+      const dest = path19.join(stagingDir, rel);
+      ensureDir(path19.dirname(dest));
       copyFile(src, dest);
     }
     const oldDir = `${localSkillDir}.old-${process.pid}`;
-    if (fs22.existsSync(localSkillDir)) {
-      fs22.renameSync(localSkillDir, oldDir);
+    if (fs15.existsSync(localSkillDir)) {
+      fs15.renameSync(localSkillDir, oldDir);
     }
-    fs22.renameSync(stagingDir, localSkillDir);
-    fs22.rmSync(oldDir, { recursive: true, force: true });
+    fs15.renameSync(stagingDir, localSkillDir);
+    fs15.rmSync(oldDir, { recursive: true, force: true });
   } catch (err) {
     try {
-      fs22.rmSync(stagingDir, { recursive: true, force: true });
+      fs15.rmSync(stagingDir, { recursive: true, force: true });
     } catch {
     }
     throw err;
@@ -5412,8 +3446,8 @@ function rateLimitHint(prefix) {
   return ghPresentButTokenFailed() ? `${prefix} Tienes gh instalado pero \`gh auth token\` no devolvi\xF3 credencial (\xBFsesi\xF3n caducada?) \u2014 prueba \`gh auth login\` o define GH_TOKEN.` : `${prefix} Define GH_TOKEN o inicia sesi\xF3n en gh CLI.`;
 }
 function loadUpstreams() {
-  const file = path30.join(path30.dirname(stackRoot()), "upstreams.json");
-  return JSON.parse(fs23.readFileSync(file, "utf8"));
+  const file = path20.join(path20.dirname(stackRoot()), "upstreams.json");
+  return JSON.parse(fs16.readFileSync(file, "utf8"));
 }
 function skillsToScan(maintainer, upstreams) {
   return maintainer ? Object.keys(upstreams.skills) : [];
@@ -5442,11 +3476,39 @@ function complementsToScan(upstreams) {
 }
 function resolveComplementUpdateCheck(name, info, upstream) {
   const pinned = info.version ?? null;
-  if (!pinned)
+  const strategy = info.strategy;
+  if (strategy === "provider-managed") {
+    if (!pinned) {
+      if (upstream === null)
+        return {
+          level: "info",
+          message: `${name}: provider-managed sin versi\xF3n fijada (rolling aceptado; no se pudo consultar el upstream).`
+        };
+      return {
+        level: "info",
+        message: `${name}: provider-managed ${upstream} (rolling aceptado; el provider gestiona la versi\xF3n).`
+      };
+    }
+    if (upstream === null)
+      return { level: "info", message: `${name}: provider-managed ${pinned} (no se pudo consultar el upstream).` };
+    if (upstream === pinned)
+      return { level: "success", message: `${name}: al d\xEDa con ${pinned} (provider-managed).` };
+    return {
+      level: "info",
+      message: `${name}: provider-managed (referencia ${pinned}, upstream observado ${upstream}; el provider gestiona la versi\xF3n, sin re-pin requerido).`
+    };
+  }
+  if (!pinned) {
+    if (strategy === "exact")
+      return {
+        level: "error",
+        message: `${name}: estrategia exact sin pin en upstreams.json \u2014 fija la versi\xF3n revisada antes de instalar.`
+      };
     return {
       level: "warn",
       message: `${name}: sin pin en upstreams.json \u2014 fija la versi\xF3n revisada antes de instalar.`
     };
+  }
   if (upstream === null)
     return { level: "info", message: `${name}: pin ${pinned} (no se pudo consultar el upstream).` };
   if (upstream === pinned)
@@ -5580,7 +3642,7 @@ async function runUpdateCheck(localVersion, includeBrowserState = true) {
     for (const { name, upstream } of complementQueries) {
       const report = resolveComplementUpdateCheck(name, upstreams.complements[name], upstream);
       p4.log[report.level](report.message);
-      if (report.level === "warn") movedComplement = true;
+      if (report.level === "warn" || report.level === "error") movedComplement = true;
       if (report.level === "info") unknownComplement = true;
     }
     if (!movedComplement && !unknownComplement) {
@@ -5606,7 +3668,7 @@ function isEngramRunning() {
       const pgrep = lookPath("pgrep");
       if (!pgrep) return null;
       try {
-        execFileSync5(pgrep, ["-x", "engram"], { stdio: "ignore" });
+        execFileSync4(pgrep, ["-x", "engram"], { stdio: "ignore" });
         return true;
       } catch {
         return false;
@@ -5616,8 +3678,8 @@ function isEngramRunning() {
     return null;
   }
 }
-function isGitClone(projectRoot = path30.dirname(stackRoot())) {
-  return fs23.existsSync(path30.join(projectRoot, ".git"));
+function isGitClone(projectRoot = path20.dirname(stackRoot())) {
+  return fs16.existsSync(path20.join(projectRoot, ".git"));
 }
 var STACK_METHOD_CLONE = "git pull + pnpm install + pnpm build";
 function resolvePnpm() {
@@ -5627,29 +3689,29 @@ function resolvePnpm() {
 }
 function cleanupTmp(dir) {
   try {
-    fs23.rmSync(dir, { recursive: true, force: true });
+    fs16.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }
 function updateStackGitClone() {
-  const projectRoot = path30.dirname(stackRoot());
+  const projectRoot = path20.dirname(stackRoot());
   const git = lookPath("git");
   if (!git) throw new Error("git no encontrado en PATH.");
   const pnpm = resolvePnpm();
   p4.log.info("Ejecutando git pull\u2026");
-  execFileSync5(git, ["pull"], { cwd: projectRoot, stdio: "inherit" });
+  execFileSync4(git, ["pull"], { cwd: projectRoot, stdio: "inherit" });
   p4.log.info("Ejecutando pnpm install\u2026");
-  execFileSync5(pnpm, ["install"], { cwd: projectRoot, stdio: "inherit" });
+  execFileSync4(pnpm, ["install"], { cwd: projectRoot, stdio: "inherit" });
   p4.log.info("Ejecutando pnpm build\u2026");
-  execFileSync5(pnpm, ["build"], { cwd: projectRoot, stdio: "inherit" });
+  execFileSync4(pnpm, ["build"], { cwd: projectRoot, stdio: "inherit" });
 }
 function updateStackGlobal() {
   const pnpm = resolvePnpm();
   p4.log.info("Ejecutando pnpm add -g jorgex-stack@latest\u2026");
-  execFileSync5(pnpm, ["add", "-g", "jorgex-stack@latest"], { stdio: "inherit" });
+  execFileSync4(pnpm, ["add", "-g", "jorgex-stack@latest"], { stdio: "inherit" });
 }
 async function downloadSkillToTemp(repo, sha, skillPath) {
-  const root = fs23.mkdtempSync(path30.join(os3.tmpdir(), "jorgex-skill-"));
+  const root = fs16.mkdtempSync(path20.join(os3.tmpdir(), "jorgex-skill-"));
   try {
     const result = await downloadRepoTarball(repo, sha, root, skillPath);
     if (!result.ok) {
@@ -5657,15 +3719,15 @@ async function downloadSkillToTemp(repo, sha, skillPath) {
       return { error: result.reason };
     }
     if (skillPath) {
-      const sub = path30.resolve(path30.join(root, skillPath));
+      const sub = path20.resolve(path20.join(root, skillPath));
       if (!isContainedIn(sub, root)) {
         cleanupTmp(root);
         return { error: `la ruta "${skillPath}" escapa del directorio temporal` };
       }
-      if (fs23.existsSync(sub)) return { dir: sub, root };
+      if (fs16.existsSync(sub)) return { dir: sub, root };
       const lastSeg = skillPath.split("/").pop();
-      const sub2 = path30.resolve(path30.join(root, lastSeg));
-      if (isContainedIn(sub2, root) && fs23.existsSync(sub2)) {
+      const sub2 = path20.resolve(path20.join(root, lastSeg));
+      if (isContainedIn(sub2, root) && fs16.existsSync(sub2)) {
         if (!validateExtractedTree(sub2)) {
           cleanupTmp(root);
           return { error: `el sub\xE1rbol "${lastSeg}" contiene symlinks o rutas fuera del destino` };
@@ -5684,11 +3746,11 @@ async function downloadSkillToTemp(repo, sha, skillPath) {
 function pruneEngramDbBackups() {
   try {
     const dir = dataDir();
-    if (!fs23.existsSync(dir)) return;
-    const backups = fs23.readdirSync(dir).filter((f) => f.startsWith("engram-db-backup-") && f.endsWith(".db")).map((f) => ({ name: f, mtime: fs23.statSync(path30.join(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime);
+    if (!fs16.existsSync(dir)) return;
+    const backups = fs16.readdirSync(dir).filter((f) => f.startsWith("engram-db-backup-") && f.endsWith(".db")).map((f) => ({ name: f, mtime: fs16.statSync(path20.join(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime);
     for (const old of backups.slice(3)) {
       try {
-        fs23.rmSync(path30.join(dir, old.name));
+        fs16.rmSync(path20.join(dir, old.name));
       } catch {
       }
     }
@@ -5696,18 +3758,18 @@ function pruneEngramDbBackups() {
   }
 }
 function rotateLockedBinary(binPath, sweepRoot = HOME) {
-  if (!fs23.existsSync(binPath)) return null;
-  const dir = path30.dirname(binPath);
-  const base = path30.basename(binPath);
+  if (!fs16.existsSync(binPath)) return null;
+  const dir = path20.dirname(binPath);
+  const base = path20.basename(binPath);
   const escapedBase = base.replace(/[.*+?^$()|[\]{}\\]/g, "\\$&");
   const oldPattern = new RegExp("^" + escapedBase + "\\.old-\\d+$");
-  const resolvedDir = path30.resolve(dir);
-  if (resolvedDir === path30.resolve(sweepRoot) || isContainedIn(resolvedDir, sweepRoot)) {
+  const resolvedDir = path20.resolve(dir);
+  if (resolvedDir === path20.resolve(sweepRoot) || isContainedIn(resolvedDir, sweepRoot)) {
     try {
-      for (const entry of fs23.readdirSync(dir)) {
+      for (const entry of fs16.readdirSync(dir)) {
         if (oldPattern.test(entry)) {
           try {
-            fs23.rmSync(path30.join(dir, entry), { force: true });
+            fs16.rmSync(path20.join(dir, entry), { force: true });
           } catch {
           }
         }
@@ -5715,8 +3777,8 @@ function rotateLockedBinary(binPath, sweepRoot = HOME) {
     } catch {
     }
   }
-  const rotated = path30.join(dir, `${base}.old-${Date.now()}`);
-  fs23.renameSync(binPath, rotated);
+  const rotated = path20.join(dir, `${base}.old-${Date.now()}`);
+  fs16.renameSync(binPath, rotated);
   return rotated;
 }
 async function updateEngram(engramRepo, latestVersion) {
@@ -5725,19 +3787,19 @@ async function updateEngram(engramRepo, latestVersion) {
       "Engram est\xE1 en ejecuci\xF3n: los procesos vivos seguir\xE1n usando la versi\xF3n antigua hasta que reinicies los clientes (Claude Code/OpenCode/Codex)."
     );
   }
-  const engramDataDir = process.env.ENGRAM_DATA_DIR ?? path30.join(HOME, ".engram");
-  const engramDb = path30.join(engramDataDir, "engram.db");
-  if (fs23.existsSync(engramDb)) {
+  const engramDataDir = process.env.ENGRAM_DATA_DIR ?? path20.join(HOME, ".engram");
+  const engramDb = path20.join(engramDataDir, "engram.db");
+  if (fs16.existsSync(engramDb)) {
     const doBackup = await p4.confirm({
       message: `\xBFHacer backup de la DB de Engram antes de actualizar? (${engramDb})`,
       initialValue: true
     });
     if (!p4.isCancel(doBackup) && doBackup) {
       const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-      const dest = path30.join(dataDir(), `engram-db-backup-${ts}.db`);
+      const dest = path20.join(dataDir(), `engram-db-backup-${ts}.db`);
       try {
-        if (!fs23.existsSync(dataDir())) fs23.mkdirSync(dataDir(), { recursive: true });
-        fs23.copyFileSync(engramDb, dest);
+        if (!fs16.existsSync(dataDir())) fs16.mkdirSync(dataDir(), { recursive: true });
+        fs16.copyFileSync(engramDb, dest);
         p4.log.success(`DB respaldada en ${dest} (la DB original NO se modifica jam\xE1s).`);
         pruneEngramDbBackups();
       } catch (err) {
@@ -5750,7 +3812,7 @@ async function updateEngram(engramRepo, latestVersion) {
   if (brew) {
     let brewManages = false;
     try {
-      execFileSync5(brew, ["list", "engram"], { stdio: "pipe" });
+      execFileSync4(brew, ["list", "engram"], { stdio: "pipe" });
       brewManages = true;
     } catch {
     }
@@ -5758,7 +3820,7 @@ async function updateEngram(engramRepo, latestVersion) {
       anyChannelTried = true;
       p4.log.info("Actualizando engram con brew\u2026");
       try {
-        execFileSync5(brew, ["upgrade", "engram"], { stdio: "inherit" });
+        execFileSync4(brew, ["upgrade", "engram"], { stdio: "inherit" });
         return true;
       } catch (err) {
         p4.log.error(`brew upgrade engram fall\xF3: ${err instanceof Error ? err.message : err}`);
@@ -5782,15 +3844,15 @@ async function updateEngram(engramRepo, latestVersion) {
     }
     p4.log.info(`Actualizando engram con go install (${latestVersion})\u2026`);
     try {
-      execFileSync5(
+      execFileSync4(
         go,
         ["install", `github.com/Gentleman-Programming/engram/cmd/engram@v${latestVersion}`],
         { stdio: "inherit" }
       );
-      const rollbackOk = resolveEngramRollback({ installOk: true, rotated, bin, binExists: fs23.existsSync(bin ?? "") });
+      const rollbackOk = resolveEngramRollback({ installOk: true, rotated, bin, binExists: fs16.existsSync(bin ?? "") });
       if (rollbackOk.action === "restore") {
         try {
-          fs23.renameSync(rotated, bin);
+          fs16.renameSync(rotated, bin);
           p4.log.warn(rollbackOk.messages.onRestore);
         } catch {
           p4.log.warn(rollbackOk.messages.onRenameFail);
@@ -5798,10 +3860,10 @@ async function updateEngram(engramRepo, latestVersion) {
       }
       return true;
     } catch (err) {
-      const rollbackFail = resolveEngramRollback({ installOk: false, rotated, bin, binExists: fs23.existsSync(bin ?? "") });
+      const rollbackFail = resolveEngramRollback({ installOk: false, rotated, bin, binExists: fs16.existsSync(bin ?? "") });
       if (rollbackFail.action === "restore") {
         try {
-          fs23.renameSync(rotated, bin);
+          fs16.renameSync(rotated, bin);
           p4.log.info(rollbackFail.messages.onRestore);
         } catch {
           p4.log.error(rollbackFail.messages.onRenameFail);
@@ -6072,7 +4134,7 @@ async function runInteractiveUpdate(localVersion, yes, dryRun = false, includeBr
       continue;
     }
     const { dir: tmpDir, root: tmpRoot } = tmpResult;
-    const localSkillDir = path30.join(stackRoot(), "skills", skillInfo.name);
+    const localSkillDir = path20.join(stackRoot(), "skills", skillInfo.name);
     const diff = renderSkillDiff(tmpDir, localSkillDir);
     if (diff) {
       p4.log.info(`Diff de ${skillInfo.name}:
@@ -6164,7 +4226,7 @@ ${diff}`);
 }
 
 // src/models-picker.ts
-import path31 from "path";
+import path21 from "path";
 import * as p5 from "@clack/prompts";
 var TIERS = ["strong", "standard", "cheap"];
 var EFFORTS = ["low", "medium", "high", "xhigh"];
@@ -6190,7 +4252,7 @@ function opencodeLiveModels(binPath) {
 }
 function agentsByTier() {
   const grouped = { strong: [], standard: [], cheap: [] };
-  for (const agent of loadCanonicalAgents(path31.join(stackRoot(), "agents"))) {
+  for (const agent of loadCanonicalAgents(path21.join(stackRoot(), "agents"))) {
     if (agent.mode === "subagent") grouped[agent.tier].push(agent.name);
   }
   return grouped;
@@ -6375,16 +4437,16 @@ function cancelled() {
 }
 
 // src/lib/release.ts
-import fs24 from "fs";
-import path32 from "path";
-import { execFileSync as execFileSync6 } from "child_process";
+import fs17 from "fs";
+import path22 from "path";
+import { execFileSync as execFileSync5 } from "child_process";
 import { fileURLToPath } from "url";
 function findPackageJson() {
-  let dir = path32.dirname(fileURLToPath(import.meta.url));
+  let dir = path22.dirname(fileURLToPath(import.meta.url));
   for (let i = 0; i < 6; i++) {
-    const candidate = path32.join(dir, "package.json");
-    if (fs24.existsSync(candidate)) return candidate;
-    dir = path32.dirname(dir);
+    const candidate = path22.join(dir, "package.json");
+    if (fs17.existsSync(candidate)) return candidate;
+    dir = path22.dirname(dir);
   }
   throw new Error("No se encontr\xF3 package.json cerca del CLI.");
 }
@@ -6393,7 +4455,7 @@ function readPackageVersion() {
 }
 function readPackageMetadata() {
   const packageJson = findPackageJson();
-  const raw = fs24.readFileSync(packageJson, "utf8");
+  const raw = fs17.readFileSync(packageJson, "utf8");
   const parsed = JSON.parse(raw);
   const name = typeof parsed.name === "string" ? parsed.name.trim() : "";
   const version = typeof parsed.version === "string" ? parsed.version.trim() : "";
@@ -6405,8 +4467,8 @@ function readPackageMetadata() {
 
 // src/lib/pi-runtime.ts
 import os4 from "os";
-import path33 from "path";
-import fs25 from "fs";
+import path23 from "path";
+import fs18 from "fs";
 import { spawnSync } from "child_process";
 import { createHash as createHash2 } from "crypto";
 
@@ -6545,7 +4607,7 @@ async function resolvePiEngramRequirement(input, deps) {
     initialValue: false
   });
   if (!accepted) return { kind: "offer", accepted: false };
-  const installed = await deps.installNative({ version: "1.20.0", channels: ["brew", "go", "url"] });
+  const installed = await deps.installNative({ version: "2.0.0", channels: ["brew", "go", "url"] });
   if (!installed) {
     return {
       kind: "blocked",
@@ -6603,7 +4665,7 @@ function healthyDoctor(stdout, stderr, packageRunner, candidate) {
     if (record === null || typeof record !== "object" || Array.isArray(record)) return false;
     const packageValue = Reflect.get(record, "package");
     const result = Reflect.get(record, "result");
-    return Reflect.get(record, "schemaVersion") === 1 && Reflect.get(record, "command") === "doctor" && Reflect.get(record, "ok") === true && packageValue !== null && typeof packageValue === "object" && Reflect.get(packageValue, "name") === "jorgex-pi" && Reflect.get(packageValue, "version") === (candidate.package?.version ?? /^npm:jorgex-pi@([^\s]+)$/.exec(candidate.source)?.[1]) && path33.resolve(packageRunner) === path33.resolve(String(Reflect.get(packageValue, "root")), "bin", "jorgex-pi.mjs") && result !== null && typeof result === "object" && Reflect.get(result, "healthy") === true;
+    return Reflect.get(record, "schemaVersion") === 1 && Reflect.get(record, "command") === "doctor" && Reflect.get(record, "ok") === true && packageValue !== null && typeof packageValue === "object" && Reflect.get(packageValue, "name") === "jorgex-pi" && Reflect.get(packageValue, "version") === (candidate.package?.version ?? /^npm:jorgex-pi@([^\s]+)$/.exec(candidate.source)?.[1]) && path23.resolve(packageRunner) === path23.resolve(String(Reflect.get(packageValue, "root")), "bin", "jorgex-pi.mjs") && result !== null && typeof result === "object" && Reflect.get(result, "healthy") === true;
   } catch {
     return false;
   }
@@ -6624,7 +4686,7 @@ function provisionalPendingDoctor(exitCode, stdout, stderr, packageRunner, candi
     if (JSON.stringify(Object.keys(packageValue).sort()) !== JSON.stringify(["name", "root", "version"])) return false;
     if (Reflect.get(packageValue, "name") !== "jorgex-pi") return false;
     if (Reflect.get(packageValue, "version") !== (candidate.package?.version ?? /^npm:jorgex-pi@([^\s]+)$/.exec(candidate.source)?.[1])) return false;
-    if (path33.resolve(packageRunner) !== path33.resolve(String(Reflect.get(packageValue, "root")), "bin", "jorgex-pi.mjs")) return false;
+    if (path23.resolve(packageRunner) !== path23.resolve(String(Reflect.get(packageValue, "root")), "bin", "jorgex-pi.mjs")) return false;
     const result = Reflect.get(record, "result");
     if (result === null || typeof result !== "object" || Array.isArray(result)) return false;
     if (JSON.stringify(Object.keys(result).sort()) !== JSON.stringify(["checks", "healthy"])) return false;
@@ -6653,7 +4715,7 @@ function provisionalPendingDoctor(exitCode, stdout, stderr, packageRunner, candi
 }
 function installPiFromVerifiedTarball(input, deps) {
   const paths = input.targetDir === void 0 ? userPaths(input.engramBin, input.piExecutable) : targetPaths(input.targetDir, input.engramBin, input.piExecutable);
-  const destination = input.targetDir === void 0 ? path33.join(dataDir(), "packages", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`) : path33.join(path33.resolve(input.targetDir), "downloads", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`);
+  const destination = input.targetDir === void 0 ? path23.join(dataDir(), "packages", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`) : path23.join(path23.resolve(input.targetDir), "downloads", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`);
   const artifact = deps.download(destination);
   if (artifact.bytes !== input.candidate.bytes || artifact.sha256 !== input.candidate.sha256 || artifact.sha512 !== input.candidate.sha512) {
     return { kind: "blocked", reason: "tarball-integrity" };
@@ -6661,7 +4723,7 @@ function installPiFromVerifiedTarball(input, deps) {
   deps.backupSettings();
   const scope = {
     kind: input.targetDir === void 0 ? "real" : "target-dir",
-    codingAgentDir: path33.resolve(paths.codingAgentDir)
+    codingAgentDir: path23.resolve(paths.codingAgentDir)
   };
   const installing = flatCandidateReceipt(input.candidate, scope, "installing", input.engramBin);
   deps.writeReceiptAtomic(`${JSON.stringify(installing)}
@@ -6692,30 +4754,30 @@ function installPiFromVerifiedTarball(input, deps) {
   return { kind: "installed", receipt };
 }
 function runtimePath(piExecutable) {
-  const entries = process.platform === "win32" ? [piExecutable === void 0 ? null : path33.dirname(piExecutable), path33.dirname(process.execPath), process.env.SystemRoot ? path33.join(process.env.SystemRoot, "System32") : null] : [piExecutable === void 0 ? null : path33.dirname(piExecutable), path33.dirname(process.execPath), "/usr/local/bin", "/usr/bin", "/bin"];
-  return [...new Set(entries.filter((entry) => entry !== null))].join(path33.delimiter);
+  const entries = process.platform === "win32" ? [piExecutable === void 0 ? null : path23.dirname(piExecutable), path23.dirname(process.execPath), process.env.SystemRoot ? path23.join(process.env.SystemRoot, "System32") : null] : [piExecutable === void 0 ? null : path23.dirname(piExecutable), path23.dirname(process.execPath), "/usr/local/bin", "/usr/bin", "/bin"];
+  return [...new Set(entries.filter((entry) => entry !== null))].join(path23.delimiter);
 }
 function targetPaths(targetDir, engramBin, piExecutable) {
-  const root = path33.resolve(targetDir);
-  const codingAgentDir = path33.join(root, "pi-agent");
-  const home = path33.join(root, "home");
-  const temporary = path33.join(root, "tmp");
+  const root = path23.resolve(targetDir);
+  const codingAgentDir = path23.join(root, "pi-agent");
+  const home = path23.join(root, "home");
+  const temporary = path23.join(root, "tmp");
   return {
     codingAgentDir,
-    receiptPath: path33.join(root, "state", "pi-receipt.json"),
-    packageRunner: path33.join(codingAgentDir, "npm", "node_modules", "jorgex-pi", "bin", "jorgex-pi.mjs"),
+    receiptPath: path23.join(root, "state", "pi-receipt.json"),
+    packageRunner: path23.join(codingAgentDir, "npm", "node_modules", "jorgex-pi", "bin", "jorgex-pi.mjs"),
     environment: {
       HOME: home,
       USERPROFILE: home,
-      APPDATA: path33.join(root, "appdata"),
-      LOCALAPPDATA: path33.join(root, "localappdata"),
-      XDG_CONFIG_HOME: path33.join(root, "xdg-config"),
-      XDG_DATA_HOME: path33.join(root, "xdg-data"),
-      XDG_CACHE_HOME: path33.join(root, "xdg-cache"),
+      APPDATA: path23.join(root, "appdata"),
+      LOCALAPPDATA: path23.join(root, "localappdata"),
+      XDG_CONFIG_HOME: path23.join(root, "xdg-config"),
+      XDG_DATA_HOME: path23.join(root, "xdg-data"),
+      XDG_CACHE_HOME: path23.join(root, "xdg-cache"),
       TEMP: temporary,
       TMP: temporary,
       TMPDIR: temporary,
-      npm_config_cache: path33.join(root, "npm-cache"),
+      npm_config_cache: path23.join(root, "npm-cache"),
       NPM_CONFIG_IGNORE_SCRIPTS: "true",
       NPM_CONFIG_UPDATE_NOTIFIER: "false",
       PI_CODING_AGENT_DIR: codingAgentDir,
@@ -6726,15 +4788,15 @@ function targetPaths(targetDir, engramBin, piExecutable) {
 }
 function userPaths(engramBin, piExecutable) {
   const home = os4.homedir();
-  const codingAgentDir = process.env.PI_CODING_AGENT_DIR ?? path33.join(home, ".pi", "agent");
+  const codingAgentDir = process.env.PI_CODING_AGENT_DIR ?? path23.join(home, ".pi", "agent");
   return {
     codingAgentDir,
-    receiptPath: path33.join(dataDir(), "pi-receipt.json"),
-    packageRunner: path33.join(codingAgentDir, "npm", "node_modules", "jorgex-pi", "bin", "jorgex-pi.mjs"),
+    receiptPath: path23.join(dataDir(), "pi-receipt.json"),
+    packageRunner: path23.join(codingAgentDir, "npm", "node_modules", "jorgex-pi", "bin", "jorgex-pi.mjs"),
     environment: {
       HOME: home,
-      XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME ?? path33.join(home, ".config"),
-      XDG_CACHE_HOME: process.env.XDG_CACHE_HOME ?? path33.join(home, ".cache"),
+      XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME ?? path23.join(home, ".config"),
+      XDG_CACHE_HOME: process.env.XDG_CACHE_HOME ?? path23.join(home, ".cache"),
       TMPDIR: os4.tmpdir(),
       NPM_CONFIG_IGNORE_SCRIPTS: "true",
       NPM_CONFIG_UPDATE_NOTIFIER: "false",
@@ -6762,7 +4824,7 @@ function runPiRuntime(input, deps) {
     return { kind: "blocked", reason: "tarball-integrity" };
   }
   const paths = input.targetDir === void 0 ? userPaths(input.engramBin, input.detected.executable) : targetPaths(input.targetDir, input.engramBin, input.detected.executable);
-  const settingsJson = deps.readSettings(path33.join(paths.codingAgentDir, "settings.json"));
+  const settingsJson = deps.readSettings(path23.join(paths.codingAgentDir, "settings.json"));
   const receiptJson = deps.readReceipt(paths.receiptPath);
   const lifecycleInput = {
     candidate: PI_RUNTIME_CANDIDATE,
@@ -6821,19 +4883,19 @@ function runPiRuntime(input, deps) {
   return result;
 }
 function readJsonFile(file) {
-  return JSON.parse(fs25.readFileSync(file, "utf8"));
+  return JSON.parse(fs18.readFileSync(file, "utf8"));
 }
 function packageVersionFromExecutable(executable) {
   let current;
   try {
-    current = path33.dirname(fs25.realpathSync(executable));
+    current = path23.dirname(fs18.realpathSync(executable));
   } catch {
     return null;
   }
   for (let depth = 0; depth < 8; depth++) {
     const manifests = [
-      path33.join(current, "package.json"),
-      path33.join(current, "node_modules", "@earendil-works", "pi-coding-agent", "package.json")
+      path23.join(current, "package.json"),
+      path23.join(current, "node_modules", "@earendil-works", "pi-coding-agent", "package.json")
     ];
     for (const manifest of manifests) {
       try {
@@ -6844,7 +4906,7 @@ function packageVersionFromExecutable(executable) {
       } catch {
       }
     }
-    const parent = path33.dirname(current);
+    const parent = path23.dirname(current);
     if (parent === current) break;
     current = parent;
   }
@@ -6859,35 +4921,35 @@ function detectPiRuntime() {
     installed: executable !== null,
     executable,
     version: executable === null ? null : packageVersionFromExecutable(executable),
-    codingAgentDir: process.env.PI_CODING_AGENT_DIR ?? path33.join(home, ".pi", "agent")
+    codingAgentDir: process.env.PI_CODING_AGENT_DIR ?? path23.join(home, ".pi", "agent")
   };
 }
 function hasManagedPiRuntime(targetDir) {
-  const receipt = targetDir === void 0 ? path33.join(dataDir(), "pi-receipt.json") : path33.join(path33.resolve(targetDir), "state", "pi-receipt.json");
-  return fs25.statSync(receipt, { throwIfNoEntry: false })?.isFile() === true;
+  const receipt = targetDir === void 0 ? path23.join(dataDir(), "pi-receipt.json") : path23.join(path23.resolve(targetDir), "state", "pi-receipt.json");
+  return fs18.statSync(receipt, { throwIfNoEntry: false })?.isFile() === true;
 }
 function resolvePiEngramBin(targetDir) {
   if (targetDir === void 0) return detectEngram();
-  const candidate = path33.join(path33.resolve(targetDir), "bin", process.platform === "win32" ? "engram.exe" : "engram");
-  return fs25.statSync(candidate, { throwIfNoEntry: false })?.isFile() ? candidate : null;
+  const candidate = path23.join(path23.resolve(targetDir), "bin", process.platform === "win32" ? "engram.exe" : "engram");
+  return fs18.statSync(candidate, { throwIfNoEntry: false })?.isFile() ? candidate : null;
 }
 function readOptional(file, fallback) {
   try {
-    return fs25.readFileSync(file, "utf8");
+    return fs18.readFileSync(file, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return fallback;
     throw error;
   }
 }
 function hashPiTarball(file) {
-  const descriptor = fs25.openSync(file, "r");
+  const descriptor = fs18.openSync(file, "r");
   const sha2562 = createHash2("sha256");
   const sha512 = createHash2("sha512");
   const buffer = Buffer.allocUnsafe(1024 * 1024);
   let bytes = 0;
   try {
     while (true) {
-      const read = fs25.readSync(descriptor, buffer, 0, buffer.length, null);
+      const read = fs18.readSync(descriptor, buffer, 0, buffer.length, null);
       if (read === 0) break;
       bytes += read;
       const chunk = buffer.subarray(0, read);
@@ -6895,27 +4957,27 @@ function hashPiTarball(file) {
       sha512.update(chunk);
     }
   } finally {
-    fs25.closeSync(descriptor);
+    fs18.closeSync(descriptor);
   }
   return { path: file, bytes, sha256: sha2562.digest("hex"), sha512: sha512.digest("hex") };
 }
 async function acquirePiTarball(destination) {
-  const existing = fs25.statSync(destination, { throwIfNoEntry: false });
+  const existing = fs18.statSync(destination, { throwIfNoEntry: false });
   if (existing?.isFile()) {
     const observed = hashPiTarball(destination);
     if (observed.bytes === PI_RUNTIME_CANDIDATE.tarball.bytes && observed.sha256 === PI_RUNTIME_CANDIDATE.tarball.sha256 && observed.sha512 === PI_RUNTIME_CANDIDATE.tarball.sha512) {
       return observed;
     }
-    fs25.rmSync(destination, { force: true });
+    fs18.rmSync(destination, { force: true });
   }
-  fs25.mkdirSync(path33.dirname(destination), { recursive: true });
+  fs18.mkdirSync(path23.dirname(destination), { recursive: true });
   const partial = `${destination}.partial-${process.pid}`;
   const response = await fetch(`https://registry.npmjs.org/jorgex-pi/-/jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`, {
     redirect: "error",
     headers: { accept: "application/octet-stream" }
   });
   if (!response.ok || response.body === null) throw new Error(`No se pudo descargar jorgex-pi@${PI_RUNTIME_CANDIDATE.package.version} (${response.status}).`);
-  const descriptor = fs25.openSync(partial, "wx", 384);
+  const descriptor = fs18.openSync(partial, "wx", 384);
   let bytes = 0;
   try {
     for await (const chunk of response.body) {
@@ -6923,15 +4985,15 @@ async function acquirePiTarball(destination) {
       bytes += buffer.length;
       if (bytes > PI_RUNTIME_CANDIDATE.tarball.bytes) throw new Error("El tarball de jorgex-pi excede el tama\xF1o fijado.");
       let offset = 0;
-      while (offset < buffer.length) offset += fs25.writeSync(descriptor, buffer, offset);
+      while (offset < buffer.length) offset += fs18.writeSync(descriptor, buffer, offset);
     }
   } catch (error) {
-    fs25.closeSync(descriptor);
-    fs25.rmSync(partial, { force: true });
+    fs18.closeSync(descriptor);
+    fs18.rmSync(partial, { force: true });
     throw error;
   }
-  fs25.closeSync(descriptor);
-  fs25.renameSync(partial, destination);
+  fs18.closeSync(descriptor);
+  fs18.renameSync(partial, destination);
   return hashPiTarball(destination);
 }
 function runProcess(invocation) {
@@ -6981,7 +5043,7 @@ async function runPiRuntimeSystem(input) {
         remedy: "Instala Engram o configura un ENGRAM_BIN absoluto antes de reintentar."
       };
     }
-    const destination = input.targetDir === void 0 ? path33.join(dataDir(), "packages", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`) : path33.join(path33.resolve(input.targetDir), "downloads", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`);
+    const destination = input.targetDir === void 0 ? path23.join(dataDir(), "packages", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`) : path23.join(path23.resolve(input.targetDir), "downloads", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`);
     let artifact;
     try {
       artifact = await acquirePiTarball(destination);
@@ -7002,18 +5064,18 @@ async function runPiRuntimeSystem(input) {
     }, {
       download: () => artifact,
       backupSettings: () => createBackup(
-        [path33.join(paths.codingAgentDir, "settings.json")],
+        [path23.join(paths.codingAgentDir, "settings.json")],
         "pi-package-install",
-        input.targetDir === void 0 ? void 0 : path33.join(path33.resolve(input.targetDir), "backups")
+        input.targetDir === void 0 ? void 0 : path23.join(path23.resolve(input.targetDir), "backups")
       ),
       run: runProcess,
-      readSettings: () => readOptional(path33.join(paths.codingAgentDir, "settings.json"), '{"packages":[]}'),
-      rewriteSettings: (content) => writeText(path33.join(paths.codingAgentDir, "settings.json"), `${content}
+      readSettings: () => readOptional(path23.join(paths.codingAgentDir, "settings.json"), '{"packages":[]}'),
+      rewriteSettings: (content) => writeText(path23.join(paths.codingAgentDir, "settings.json"), `${content}
 `),
       writeReceiptAtomic: (content) => writeText(paths.receiptPath, content)
     });
   }
-  const packageRoot = path33.dirname(path33.dirname(paths.packageRunner));
+  const packageRoot = path23.dirname(path23.dirname(paths.packageRunner));
   const writeReceipt = (receipt) => {
     writeText(paths.receiptPath, `${JSON.stringify(receipt, null, 2)}
 `);
@@ -7031,13 +5093,13 @@ async function runPiRuntimeSystem(input) {
       value,
       {
         backupSettings: () => createBackup(
-          [path33.join(paths.codingAgentDir, "settings.json")],
+          [path23.join(paths.codingAgentDir, "settings.json")],
           "pi-package-uninstall",
-          input.targetDir === void 0 ? void 0 : path33.join(path33.resolve(input.targetDir), "backups")
+          input.targetDir === void 0 ? void 0 : path23.join(path23.resolve(input.targetDir), "backups")
         ),
         run: runProcess,
-        isPackageAbsent: () => !fs25.existsSync(packageRoot),
-        deleteReceipt: () => fs25.rmSync(paths.receiptPath, { force: true })
+        isPackageAbsent: () => !fs18.existsSync(packageRoot),
+        deleteReceipt: () => fs18.rmSync(paths.receiptPath, { force: true })
       }
     )
   };
@@ -7212,7 +5274,7 @@ async function runManagedPiSystem(input) {
 }
 
 // src/lib/quality-runner.ts
-import path34 from "path";
+import path24 from "path";
 import { spawn, spawnSync as spawnSync2 } from "child_process";
 function normalizeLimit(value, name) {
   if (value === void 0) return void 0;
@@ -7232,10 +5294,10 @@ function normalizeTimeout(value) {
   return timeoutMs;
 }
 var COMMIT_SHA_PATTERN = /^[0-9a-f]{40}$/i;
-function isRecord3(value) {
+function isRecord2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-function hasText2(value) {
+function hasText(value) {
   return typeof value === "string" && value.trim() !== "";
 }
 function isDenseStringArray(value) {
@@ -7252,14 +5314,14 @@ function isQualityProfile(value) {
   return typeof value === "string" && QUALITY_PROFILES.includes(value);
 }
 function assertValidEnvironment(value, label) {
-  if (!isRecord3(value)) throw new Error(`Invalid ${label}`);
+  if (!isRecord2(value)) throw new Error(`Invalid ${label}`);
   for (const [key, entry] of Object.entries(value)) {
     if (typeof entry !== "string") throw new Error(`Invalid ${label}.${key}`);
   }
 }
 function assertQualityPlanInput(value) {
-  if (!isRecord3(value)) throw new Error("Invalid quality plan");
-  if (!isRecord3(value.identity)) throw new Error("Invalid quality plan identity");
+  if (!isRecord2(value)) throw new Error("Invalid quality plan");
+  if (!isRecord2(value.identity)) throw new Error("Invalid quality plan identity");
   if (typeof value.identity.baseSha !== "string" || !COMMIT_SHA_PATTERN.test(value.identity.baseSha)) {
     throw new Error("Invalid quality plan identity.baseSha");
   }
@@ -7271,7 +5333,7 @@ function assertQualityPlanInput(value) {
   const controlIds = /* @__PURE__ */ new Set();
   for (let index = 0; index < value.controls.length; index += 1) {
     const control = value.controls[index];
-    if (!isRecord3(control) || !hasText2(control.id) || control.requirement !== "required" && control.requirement !== "optional") {
+    if (!isRecord2(control) || !hasText(control.id) || control.requirement !== "required" && control.requirement !== "optional") {
       throw new Error(`Invalid quality plan controls[${index}]`);
     }
     if (controlIds.has(control.id)) {
@@ -7287,9 +5349,9 @@ function assertQualityPlanInput(value) {
   const commandControlIds = /* @__PURE__ */ new Set();
   for (let index = 0; index < value.commands.length; index += 1) {
     const command = value.commands[index];
-    if (!isRecord3(command)) throw new Error(`Invalid quality plan commands[${index}]`);
+    if (!isRecord2(command)) throw new Error(`Invalid quality plan commands[${index}]`);
     const timeoutMs = command.timeoutMs;
-    if (!hasText2(command.controlId) || !hasText2(command.commandId) || !hasText2(command.executable) || !isDenseStringArray(command.argv) || !isNonNegativeSafeInteger(timeoutMs)) {
+    if (!hasText(command.controlId) || !hasText(command.commandId) || !hasText(command.executable) || !isDenseStringArray(command.argv) || !isNonNegativeSafeInteger(timeoutMs)) {
       throw new Error(`Invalid quality plan commands[${index}]`);
     }
     if (timeoutMs > MAX_NODE_TIMEOUT_MS) {
@@ -7344,7 +5406,7 @@ function killProcessTree(child) {
   if (pid === void 0) return;
   if (process.platform === "win32") {
     const systemRoot = process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows";
-    const taskkill = path34.join(systemRoot, "System32", "taskkill.exe");
+    const taskkill = path24.join(systemRoot, "System32", "taskkill.exe");
     const result = spawnSync2(taskkill, ["/pid", String(pid), "/t", "/f"], {
       shell: false,
       stdio: "ignore",
@@ -7532,7 +5594,7 @@ function missingRequiredResults(controls, commands) {
   const commandControlIds = new Set(commands.map((command) => command.controlId));
   const missing = /* @__PURE__ */ new Set();
   for (const control of controls) {
-    if (control.requirement !== "required" || !hasText2(control.id) || commandControlIds.has(control.id)) continue;
+    if (control.requirement !== "required" || !hasText(control.id) || commandControlIds.has(control.id)) continue;
     missing.add(control.id);
   }
   return [...missing].map((controlId) => ({
@@ -7590,62 +5652,62 @@ async function runQualityPlan(input) {
 }
 
 // src/lib/engram-install.ts
-import fs26 from "fs";
+import fs19 from "fs";
 import os5 from "os";
-import path35 from "path";
-import { execFileSync as execFileSync7 } from "child_process";
+import path25 from "path";
+import { execFileSync as execFileSync6 } from "child_process";
 import { createHash as createHash3 } from "crypto";
 
 // src/lib/engram-release.json
 var engram_release_default = {
   assets: {
     darwin_arm64: {
-      name: "engram_1.20.0_darwin_arm64.tar.gz",
-      sha256: "2363d5012f23e58878f86c3ddcc1f63cfe9dcf3eec7f413e70eaafcbb9d394cc",
-      size: 6949031
+      name: "engram_2.0.0_darwin_arm64.tar.gz",
+      sha256: "793c695153e0e76144dc53b006a7039771bd24115385856578bc4d6506d46d7f",
+      size: 7210321
     },
     darwin_x64: {
-      name: "engram_1.20.0_darwin_amd64.tar.gz",
-      sha256: "3b9015dcfcdd9f823eb7ad0b590b1dbc4c25bb5d81dda3f84e623709815afe80",
-      size: 7367005
+      name: "engram_2.0.0_darwin_amd64.tar.gz",
+      sha256: "f1dcc343ac241c5001617113279b49dec698005550b538250ccf21655fc728ac",
+      size: 7678428
     },
     linux_arm64: {
-      name: "engram_1.20.0_linux_arm64.tar.gz",
-      sha256: "7eb815910a76ae6cfa9a5d0161d3701e293dcca71f7743cffa62e236e5af59af",
-      size: 6673857
+      name: "engram_2.0.0_linux_arm64.tar.gz",
+      sha256: "a942e73ab424faaa6e2785d1563e0d9d7f20739944dae0c50071223301d44333",
+      size: 6926960
     },
     linux_x64: {
-      name: "engram_1.20.0_linux_amd64.tar.gz",
-      sha256: "7dc3003318e303bee269a4772144f3ce01c8ec700bfd524aaec76770acd389ca",
-      size: 7236400
+      name: "engram_2.0.0_linux_amd64.tar.gz",
+      sha256: "23be1c2ce9739c455097ff864736213717b925b3e8821a988dfc619685a5abd5",
+      size: 7544949
     },
     windows_arm64: {
-      name: "engram_1.20.0_windows_arm64.zip",
-      sha256: "eb93c6d7d5a4020ddcf1ff956909f3e90694f6447519433316b10f964f8f37b5",
-      size: 6723366
+      name: "engram_2.0.0_windows_arm64.zip",
+      sha256: "e4d9074ebf8a839573f62d7bd2719421fc428ab25a9affe82ca4b2d5555183d1",
+      size: 6980876
     },
     windows_x64: {
-      name: "engram_1.20.0_windows_amd64.zip",
-      sha256: "c945c47d58367f943642cb8451fa45f208174407839f1dda33a975a05d6e465b",
-      size: 7416778
+      name: "engram_2.0.0_windows_amd64.zip",
+      sha256: "fba31e7221702f213954c2081aa83b38833e0e9b824a981f976f8cee2c74548c",
+      size: 7738896
     }
   },
-  version: "1.20.0"
+  version: "2.0.0"
 };
 
 // src/lib/engram-install.ts
 async function installMissingEngram(options = {}) {
   const platform = options.platform ?? process.platform;
   const homeDir = options.homeDir ?? os5.homedir();
-  if (!path35.isAbsolute(homeDir)) return { ok: false, reason: "El directorio personal debe ser absoluto." };
+  if (!path25.isAbsolute(homeDir)) return { ok: false, reason: "El directorio personal debe ser absoluto." };
   const binaryName = platform === "win32" ? "engram.exe" : "engram";
-  const bin = path35.join(homeDir, ".local", "bin", binaryName);
+  const bin = path25.join(homeDir, ".local", "bin", binaryName);
   let staging;
   try {
-    const existing = fs26.lstatSync(bin, { throwIfNoEntry: false });
+    const existing = fs19.lstatSync(bin, { throwIfNoEntry: false });
     if (existing) {
-      if (!fs26.statSync(bin).isFile()) throw new Error(`El destino Engram no es un archivo: ${bin}`);
-      fs26.accessSync(bin, platform === "win32" ? fs26.constants.F_OK : fs26.constants.X_OK);
+      if (!fs19.statSync(bin).isFile()) throw new Error(`El destino Engram no es un archivo: ${bin}`);
+      fs19.accessSync(bin, platform === "win32" ? fs19.constants.F_OK : fs19.constants.X_OK);
       return { ok: true, bin };
     }
     const key = `${platform === "win32" ? "windows" : platform}_${options.arch ?? process.arch}`;
@@ -7674,24 +5736,24 @@ async function installMissingEngram(options = {}) {
     if (size !== asset.size || createHash3("sha256").update(archive).digest("hex") !== asset.sha256) {
       throw new Error("Engram: tama\xF1o o hash SHA-256 no coincide con el artefacto aprobado.");
     }
-    fs26.mkdirSync(path35.dirname(bin), { recursive: true });
-    staging = fs26.mkdtempSync(path35.join(path35.dirname(bin), ".engram-install-"));
-    const archivePath = path35.join(staging, asset.name);
-    fs26.writeFileSync(archivePath, archive, { flag: "wx", mode: 384 });
-    const binary = execFileSync7(resolveTarBin(), ["-xOf", archivePath, binaryName], {
+    fs19.mkdirSync(path25.dirname(bin), { recursive: true });
+    staging = fs19.mkdtempSync(path25.join(path25.dirname(bin), ".engram-install-"));
+    const archivePath = path25.join(staging, asset.name);
+    fs19.writeFileSync(archivePath, archive, { flag: "wx", mode: 384 });
+    const binary = execFileSync6(resolveTarBin(), ["-xOf", archivePath, binaryName], {
       maxBuffer: 64 * 1024 * 1024,
       timeout: 3e4,
       stdio: ["ignore", "pipe", "pipe"]
     });
     if (binary.length === 0) throw new Error("El artefacto Engram no contiene un binario v\xE1lido.");
-    const stagedBin = path35.join(staging, binaryName);
-    fs26.writeFileSync(stagedBin, binary, { flag: "wx", mode: 493 });
-    fs26.linkSync(stagedBin, bin);
+    const stagedBin = path25.join(staging, binaryName);
+    fs19.writeFileSync(stagedBin, binary, { flag: "wx", mode: 493 });
+    fs19.linkSync(stagedBin, bin);
     return { ok: true, bin };
   } catch (error) {
     return { ok: false, reason: error instanceof Error ? error.message : String(error) };
   } finally {
-    if (staging) fs26.rmSync(staging, { recursive: true, force: true });
+    if (staging) fs19.rmSync(staging, { recursive: true, force: true });
   }
 }
 
@@ -8217,7 +6279,7 @@ Flags disponibles: jorgex-stack --help`
         return;
       }
       try {
-        const plan = JSON.parse(fs27.readFileSync(flags.positional[0], "utf8"));
+        const plan = JSON.parse(fs20.readFileSync(flags.positional[0], "utf8"));
         const result = await runQualityPlan(plan);
         const serialized = serializeQualityReceipt(result.receipt);
         if (flags.receipt === void 0) process.stdout.write(`${serialized}
@@ -8603,13 +6665,22 @@ Flags disponibles: jorgex-stack --help`
         if (!flags.list) console.log("\nUsa: jorgex-stack restore <id>");
         return;
       }
-      const restored = restoreBackup(flags.positional[0]);
+      const targetId = flags.positional[0];
+      const expected = listBackups().find((b) => b.id === targetId)?.files.length;
+      const restored = restoreBackup(targetId);
+      if (expected !== void 0 && restored < expected) {
+        console.error(
+          `Restore incompleto del backup ${targetId}: restaurados ${restored}/${expected} archivos (omisiones de seguridad: symlinks, fuera de HOME o ilegibles). Revisa arriba y restaura a mano lo que falte.`
+        );
+        process.exitCode = 1;
+        return;
+      }
       console.log(`Restaurados ${restored} archivos.`);
       return;
     }
   }
 }
-if (process.argv[1] !== void 0 && import.meta.url === pathToFileURL2(process.argv[1]).href) {
+if (process.argv[1] !== void 0 && import.meta.url === pathToFileURL(process.argv[1]).href) {
   await main().catch((err) => {
     console.error(err instanceof Error ? err.message : String(err));
     process.exitCode = 1;