jorgex-stack 1.9.58 → 1.9.60

package/dist/cli.js

@@ -12,32 +12,27 @@ import {
   inspectOpencodePluginFile,
   opencodeAdapter,
   shouldRetireLegacyEngram
-} from "./chunk-M6QX2F3A.js";
+} from "./chunk-BSHTDTJL.js";
 import {
   claudeCodeAdapter
-} from "./chunk-NNPFC6QV.js";
+} from "./chunk-4USZMJ3I.js";
 import {
   codexAdapter
-} from "./chunk-GOLJ5PA3.js";
+} from "./chunk-KKN4OYHD.js";
 import {
   DEFAULT_MODEL_MAP,
   DEVTOOLS_MCP_SERVER,
+  LEGACY_SYSTEM_PROMPT_SECTIONS,
   SYSTEM_PROMPT_SECTIONS,
   assertSystemPromptFile,
   assertSystemPromptMarkers,
-  copyFile,
-  createBackup,
   detectClaudeCode,
   detectCodex,
   detectEngram,
   detectOpenCode,
   engramVersion,
-  ensureDir,
   ensureModelMapFile,
   hasHealthyManagedMarkdownMarkers,
-  isContainedIn,
-  listBackups,
-  listFilesRecursive,
   loadCanonicalAgents,
   loadCanonicalHooks,
   loadCanonicalMcp,
@@ -46,26 +41,37 @@ import {
   lookPath,
   modelMapFile,
   planDetectedBinCommand,
-  pruneEmptyDirs,
   readSystemPromptFile,
-  readTextIfExists,
   removeMarkdownSection,
   removeSystemPromptSections,
   resolveAgentModel,
-  restoreBackup,
   runDetectedBin,
+  stripLeadingHtmlComments,
+  upsertMarkdownSection
+} from "./chunk-66WVKOU4.js";
+import {
+  piAdapter,
+  piSystemPromptFile
+} from "./chunk-2CBCBOP7.js";
+import {
+  copyFile,
+  createBackup,
+  ensureDir,
+  isContainedIn,
+  listBackups,
+  listFilesRecursive,
+  pruneEmptyDirs,
+  readTextIfExists,
+  restoreBackup,
   runOfficialSetupIfNeeded,
   sameFileContent,
   shouldRunOfficialSetup,
-  stripLeadingHtmlComments,
-  upsertMarkdownSection,
   validateOfficialSetupDestination,
   writeText
-} from "./chunk-KB5IQEKL.js";
+} from "./chunk-B76ZJXXD.js";
 import {
   HOME,
   dataDir,
-  samePath,
   stackRoot
 } from "./chunk-NQZVJFV2.js";
 
@@ -355,7 +361,6 @@ function planSystemPrompt(adapter, ctx) {
   );
   const modules = {
     "system-prompt": composeProgrammaticSystemPrompt(ctx.stackDir, readModule("AGENTS.md"), ctx.mode),
-    "engram-protocol": adapter.injectEngramProtocol(ctx) ? readModule("engram-protocol.md") : void 0,
     context7: readModule("context7.md"),
     playwright: ctx.playwrightCliEnabled ? readModule("browser-playwright.md") : void 0,
     "chrome-devtools": ctx.enabledMcpServers?.has(DEVTOOLS_MCP_SERVER) ? readModule("browser-chrome-devtools.md") : void 0,
@@ -367,6 +372,9 @@ function planSystemPrompt(adapter, ctx) {
     const body = sections[section];
     content = body ? upsertMarkdownSection(content, section, body) : removeMarkdownSection(content, section);
   }
+  for (const section of LEGACY_SYSTEM_PROMPT_SECTIONS) {
+    content = removeMarkdownSection(content, section);
+  }
   return [{ kind: "write", target, content }];
 }
 
@@ -457,12 +465,6 @@ function planPlugins(adapter, ctx) {
     if (content.includes('"{{ENGRAM_BIN}}"')) {
       content = content.replace(/"\{\{ENGRAM_BIN\}\}"/g, JSON.stringify(ctx.engramBin ?? "engram"));
     }
-    if (content.includes('"{{ENGRAM_PROTOCOL}}"')) {
-      const protocol = stripLeadingHtmlComments(
-        fs7.readFileSync(path9.join(ctx.stackDir, "system-prompt", "engram-protocol.md"), "utf8").replace(/\r\n/g, "\n")
-      );
-      content = content.replace(/"\{\{ENGRAM_PROTOCOL\}\}"/g, JSON.stringify(protocol));
-    }
     content = content.replace(/(from\s+["'])(\.{1,2}\/[^"']+?)\.js(["'])/g, "$1$2.ts$3");
     if (content === raw) return { kind: "copy", source: sourceFile, target };
     return { kind: "write", target, content };
@@ -1491,52 +1493,16 @@ async function runInstall(opts) {
 
 // src/uninstall.ts
 import fs12 from "fs";
-import path16 from "path";
+import path15 from "path";
 import * as p2 from "@clack/prompts";
 
 // src/lib/pi-projection-lifecycle.ts
 import fs11 from "fs";
-import path15 from "path";
+import path14 from "path";
 import { createHash } from "crypto";
 
-// src/adapters/pi.ts
-import path13 from "path";
-function piSystemPromptFile(targetDir) {
-  const configDir = targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path13.join(HOME, ".pi", "agent") : path13.join(path13.resolve(targetDir), "pi-agent");
-  return path13.join(configDir, "AGENTS.md");
-}
-var piAdapter = {
-  id: "pi",
-  paths(configDir) {
-    const piConfigDir = path13.dirname(piSystemPromptFile());
-    const agentsHome = samePath(configDir, piConfigDir) ? HOME : path13.join(path13.dirname(configDir), "home");
-    return {
-      systemPromptFile: path13.join(configDir, "AGENTS.md"),
-      agentsDir: path13.join(configDir, "agents"),
-      skillsDir: path13.join(agentsHome, ".agents", "skills"),
-      commandsDir: path13.join(configDir, "prompts"),
-      pluginsDir: null,
-      scriptsDir: path13.join(configDir, "scripts"),
-      outputStylesDir: null,
-      profilesDir: null
-    };
-  },
-  renderCommand(file, content) {
-    return { file, content: content.replace(/\{\{input\}\}/g, "$ARGUMENTS") };
-  },
-  injectEngramProtocol() {
-    return true;
-  },
-  // La guía Context7 se habilita al adoptar su registro HTTP en Pi.
-  adaptSystemPromptSections(sections) {
-    const modular = { ...sections };
-    delete modular.context7;
-    return modular;
-  }
-};
-
 // src/lib/pi-package-lifecycle.ts
-import path14 from "path";
+import path13 from "path";
 var REQUIRED_CAPABILITIES = /* @__PURE__ */ new Set([
   "foundation-contract-v1",
   "runner-json-v1",
@@ -1688,7 +1654,7 @@ function parseReceiptShape(receiptJson) {
       return null;
     }
     if (engram === void 0) return "upgrade-required";
-    if (engram === null || typeof engram !== "object" || Array.isArray(engram) || typeof Reflect.get(engram, "binary") !== "string" || !path14.isAbsolute(Reflect.get(engram, "binary"))) {
+    if (engram === null || typeof engram !== "object" || Array.isArray(engram) || typeof Reflect.get(engram, "binary") !== "string" || !path13.isAbsolute(Reflect.get(engram, "binary"))) {
       return null;
     }
     return parsed;
@@ -1725,7 +1691,7 @@ function planPiPackageLifecycle(input) {
   if (input.receiptJson !== null) {
     const parsedReceipt = parseReceipt(input.receiptJson, input.candidate, {
       kind: input.scope.kind,
-      codingAgentDir: path14.resolve(input.scope.codingAgentDir)
+      codingAgentDir: path13.resolve(input.scope.codingAgentDir)
     }, input.engramBin);
     if (parsedReceipt === "upgrade-required") return blocked(input, "receipt-upgrade-required");
     if (parsedReceipt === null) return blocked(input, "receipt-corrupt");
@@ -1760,7 +1726,7 @@ function planPiPackageLifecycle(input) {
     },
     receipt: expectedReceipt(input.candidate, "installing", {
       kind: input.scope.kind,
-      codingAgentDir: path14.resolve(input.scope.codingAgentDir)
+      codingAgentDir: path13.resolve(input.scope.codingAgentDir)
     }, input.engramBin),
     ownership: ownership(true)
   };
@@ -1775,7 +1741,7 @@ function parseRunnerRecord(stdout, stderr, command, candidate, packageRunner) {
     const parsed = JSON.parse(body);
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return null;
     const record = parsed;
-    if (record.schemaVersion !== candidate.contract.runner.schemaVersion || record.command !== command || record.ok !== true || record.package === null || typeof record.package !== "object" || record.package.name !== candidate.package.name || record.package.version !== candidate.package.version || typeof record.package.root !== "string" || !path14.isAbsolute(record.package.root) || path14.resolve(packageRunner) !== path14.resolve(record.package.root, "bin", "jorgex-pi.mjs")) {
+    if (record.schemaVersion !== candidate.contract.runner.schemaVersion || record.command !== command || record.ok !== true || record.package === null || typeof record.package !== "object" || record.package.name !== candidate.package.name || record.package.version !== candidate.package.version || typeof record.package.root !== "string" || !path13.isAbsolute(record.package.root) || path13.resolve(packageRunner) !== path13.resolve(record.package.root, "bin", "jorgex-pi.mjs")) {
       return null;
     }
     return record;
@@ -1923,10 +1889,10 @@ function validateOwnedOperationState(input) {
   }))) {
     return { kind: "blocked", reason: "receipt-untrusted" };
   }
-  if (receipt.scope.kind !== (input.paths.targetDir ? "target-dir" : "real") || path14.resolve(receipt.scope.codingAgentDir) !== path14.resolve(input.paths.codingAgentDir)) {
+  if (receipt.scope.kind !== (input.paths.targetDir ? "target-dir" : "real") || path13.resolve(receipt.scope.codingAgentDir) !== path13.resolve(input.paths.codingAgentDir)) {
     return { kind: "blocked", reason: "source-divergent" };
   }
-  if (input.engramBin !== null && path14.resolve(receipt.engram.binary) !== path14.resolve(input.engramBin)) {
+  if (input.engramBin !== null && path13.resolve(receipt.engram.binary) !== path13.resolve(input.engramBin)) {
     return { kind: "blocked", reason: "receipt-corrupt" };
   }
   const source = receipt.candidate.package.source;
@@ -2033,7 +1999,7 @@ var RETIRED_PLAYWRIGHT_FILES = [
   "references/video-recording.md"
 ];
 function retiredPlaywrightFiles(scope) {
-  return RETIRED_PLAYWRIGHT_FILES.map((file) => path15.resolve(scope.home, ".agents", "skills", "playwright-cli", file));
+  return RETIRED_PLAYWRIGHT_FILES.map((file) => path14.resolve(scope.home, ".agents", "skills", "playwright-cli", file));
 }
 function handoffEnabled(input, kind) {
   return (kind === "devtools" ? input.devtoolsMcpEnabled : input.playwrightHandoffEnabled) === true;
@@ -2042,18 +2008,18 @@ var preparedPiProjectionUninstalls = /* @__PURE__ */ new WeakMap();
 function projectionScope(scope) {
   return {
     ...scope,
-    settingsFile: path15.join(scope.codingAgentDir, "settings.json")
+    settingsFile: path14.join(scope.codingAgentDir, "settings.json")
   };
 }
 function isInside(root, file) {
-  const relative = path15.relative(path15.resolve(root), path15.resolve(file));
-  return relative === "" || relative !== ".." && !relative.startsWith(`..${path15.sep}`) && !path15.isAbsolute(relative);
+  const relative = path14.relative(path14.resolve(root), path14.resolve(file));
+  return relative === "" || relative !== ".." && !relative.startsWith(`..${path14.sep}`) && !path14.isAbsolute(relative);
 }
 function isManagedPath(scope, file) {
   return isInside(scope.home, file) || isInside(scope.codingAgentDir, file);
 }
 function isAllowedPath(scope, file) {
-  return isManagedPath(scope, file) || path15.resolve(file) === path15.resolve(scope.receiptFile);
+  return isManagedPath(scope, file) || path14.resolve(file) === path14.resolve(scope.receiptFile);
 }
 function projectedPiAdapter(scope) {
   const paths = piAdapter.paths(scope.codingAgentDir);
@@ -2061,7 +2027,7 @@ function projectedPiAdapter(scope) {
     ...piAdapter,
     paths: () => ({
       ...paths,
-      skillsDir: path15.join(scope.home, ".agents", "skills")
+      skillsDir: path14.join(scope.home, ".agents", "skills")
     })
   };
 }
@@ -2105,7 +2071,7 @@ function projectionPlan(input, scope, includePrompt = true) {
   return actions;
 }
 function handoffPath(scope, kind) {
-  return path15.resolve(scope.codingAgentDir, "jorgex-pi", `${kind}.v1.json`);
+  return path14.resolve(scope.codingAgentDir, "jorgex-pi", `${kind}.v1.json`);
 }
 function contentHash(content) {
   return createHash("sha256").update(content).digest("hex");
@@ -2118,7 +2084,7 @@ function hasActionDrift(action, deps) {
 }
 function applyActions(actions, deps, handoffs = []) {
   for (const action of actions) {
-    const handoff = handoffs.find((entry) => path15.resolve(action.target) === entry.file);
+    const handoff = handoffs.find((entry) => path14.resolve(action.target) === entry.file);
     if (handoff) {
       try {
         if (deps.readText(handoff.file) !== handoff.previous) return handoffConflict(handoff.kind, handoff.file);
@@ -2138,9 +2104,9 @@ function assertPlanContained(plan, scope) {
   }
 }
 function receiptFor(plan, scope) {
-  const systemPrompt = path15.join(scope.codingAgentDir, "AGENTS.md");
+  const systemPrompt = path14.join(scope.codingAgentDir, "AGENTS.md");
   const owned = [...new Set(
-    plan.map((action) => path15.resolve(action.target)).filter((target) => target !== systemPrompt)
+    plan.map((action) => path14.resolve(action.target)).filter((target) => target !== systemPrompt)
   )];
   const receipt = {
     schemaVersion: 1,
@@ -2153,7 +2119,7 @@ function receiptFor(plan, scope) {
     owned
   };
   for (const kind of HANDOFF_KINDS) {
-    const action = plan.find((entry) => path15.resolve(entry.target) === handoffPath(scope, kind));
+    const action = plan.find((entry) => path14.resolve(entry.target) === handoffPath(scope, kind));
     if (action) receipt[kind] = { sha256: contentHash(canonicalActionContent(action)) };
   }
   return receipt;
@@ -2194,7 +2160,7 @@ function parseReceipt2(raw, expected) {
     if (matches(expectedOwned)) return { schemaVersion: 1, scope: expected.scope, owned: expectedOwned, ...digests };
     const retired = retiredPlaywrightFiles(expected.scope);
     if (retired.some((file) => expectedOwned.includes(file))) return null;
-    const skillsRoot = `${path15.resolve(expected.scope.home, ".agents", "skills")}${path15.sep}`;
+    const skillsRoot = `${path14.resolve(expected.scope.home, ".agents", "skills")}${path14.sep}`;
     const insertion = expectedOwned.findIndex((file) => !file.startsWith(skillsRoot) || file > retired[0]);
     const legacyOwned = [...expectedOwned];
     legacyOwned.splice(insertion === -1 ? legacyOwned.length : insertion, 0, ...retired);
@@ -2213,8 +2179,8 @@ function realPiProjectionScope() {
   return {
     kind: "real",
     home: HOME,
-    codingAgentDir: path15.dirname(piSystemPromptFile()),
-    receiptFile: path15.join(dataDir(), "pi-projection-receipt.json")
+    codingAgentDir: path14.dirname(piSystemPromptFile()),
+    receiptFile: path14.join(dataDir(), "pi-projection-receipt.json")
   };
 }
 function readTextOnlyIfMissing(file) {
@@ -2252,13 +2218,13 @@ function manifestOwned(manifest) {
   return new Set([
     ...manifest.runtimes.codex?.owned ?? [],
     ...manifest.runtimes.opencode?.owned ?? []
-  ].map((file) => path15.resolve(file)));
+  ].map((file) => path14.resolve(file)));
 }
 function withoutManagedPromptSections(content) {
   return removeSystemPromptSections(content);
 }
 function uniquePaths(paths) {
-  return [...new Set(paths.map((file) => path15.resolve(file)))];
+  return [...new Set(paths.map((file) => path14.resolve(file)))];
 }
 function blocked2(reason, paths, remedy) {
   return { kind: "blocked", reason, paths: uniquePaths(paths), remedy };
@@ -2365,7 +2331,7 @@ function preparePiProjectionUninstall(input, deps) {
   }
   const scope = projectionScope(input.scope);
   const expectedReceipt2 = expectedProjectionReceipt(input, scope);
-  const prompt = path15.join(scope.codingAgentDir, "AGENTS.md");
+  const prompt = path14.join(scope.codingAgentDir, "AGENTS.md");
   let existingPrompt;
   try {
     existingPrompt = deps.readText(prompt);
@@ -2378,7 +2344,7 @@ function preparePiProjectionUninstall(input, deps) {
     return blocked2("projection-prompt-markers", [prompt], error instanceof Error ? error.message : String(error));
   }
   const promptContent = existingPrompt === null ? null : withoutManagedPromptSections(existingPrompt);
-  const promptUpdate = promptContent === null || promptContent === existingPrompt ? null : { file: path15.resolve(prompt), content: promptContent };
+  const promptUpdate = promptContent === null || promptContent === existingPrompt ? null : { file: path14.resolve(prompt), content: promptContent };
   const receiptRead = readProjectionReceipt(scope.receiptFile, deps);
   if (receiptRead.kind === "unreadable") return receiptUnreadable(scope.receiptFile);
   let ownedToRemove = [];
@@ -2396,7 +2362,7 @@ function preparePiProjectionUninstall(input, deps) {
       return cleanupFailure([scope.receiptFile]);
     }
     ownedToRemove = receipt.owned.filter((owned) => !retained.has(owned));
-    receiptFile = path15.resolve(scope.receiptFile);
+    receiptFile = path14.resolve(scope.receiptFile);
     backupTargets = [...backupTargets, ...receipt.owned, receiptFile];
   }
   const handoffs = [];
@@ -2474,16 +2440,16 @@ function runPiProjectionLifecycle(input, deps) {
     const prepared = preparePiProjectionUninstall(input, deps);
     return prepared.kind === "blocked" ? prepared : completePiProjectionUninstall(prepared.plan, deps);
   }
-  const prompt = path15.join(scope.codingAgentDir, "AGENTS.md");
+  const prompt = path14.join(scope.codingAgentDir, "AGENTS.md");
   try {
     assertSystemPromptMarkers(deps.readText(prompt), prompt);
   } catch (error) {
     return blocked2("projection-prompt-markers", [prompt], error instanceof Error ? error.message : String(error));
   }
-  if (input.devtoolsMcpEnabled && (!input.pnpmBin || !path15.isAbsolute(input.pnpmBin))) {
+  if (input.devtoolsMcpEnabled && (!input.pnpmBin || !path14.isAbsolute(input.pnpmBin))) {
     return blocked2("projection-devtools-command", [handoffPath(scope, "devtools")], "DevTools requiere un ejecutable pnpm absoluto disponible en PATH.");
   }
-  if (input.playwrightHandoffEnabled && (!input.playwrightCliCommand || !path15.isAbsolute(input.playwrightCliCommand) || /[\u0000-\u001f\u007f]/.test(input.playwrightCliCommand))) {
+  if (input.playwrightHandoffEnabled && (!input.playwrightCliCommand || !path14.isAbsolute(input.playwrightCliCommand) || /[\u0000-\u001f\u007f]/.test(input.playwrightCliCommand))) {
     return blocked2("projection-playwright-command", [handoffPath(scope, "playwright")], "Playwright requiere un ejecutable absoluto verificado. Abre una terminal nueva tras pnpm setup y reintenta install --playwright.");
   }
   const plan = projectionPlan(input, scope);
@@ -2496,12 +2462,12 @@ function runPiProjectionLifecycle(input, deps) {
   const expectedReceipt2 = receiptContent(receipt);
   const drifted = plan.filter((action) => hasActionDrift(action, deps));
   for (const { kind, file } of checked.handoffs) {
-    if (handoffEnabled(input, kind) && checked.previous?.[kind]?.sha256 !== receipt[kind]?.sha256 && !drifted.some((action) => path15.resolve(action.target) === file)) {
+    if (handoffEnabled(input, kind) && checked.previous?.[kind]?.sha256 !== receipt[kind]?.sha256 && !drifted.some((action) => path14.resolve(action.target) === file)) {
       return input.operation === "doctor" ? { kind: "drift", paths: [file] } : handoffConflict(kind, file);
     }
   }
   if (input.operation === "doctor") {
-    const paths = drifted.map((action) => path15.resolve(action.target));
+    const paths = drifted.map((action) => path14.resolve(action.target));
     paths.push(...removedHandoffs.map(({ file }) => file), ...retiredSkills);
     const currentSettings2 = deps.readText(scope.settingsFile);
     if (currentSettings2 === null || filterProjectedPiPackage(currentSettings2, input.packageSource) !== currentSettings2) {
@@ -2560,12 +2526,12 @@ function runPiProjectionLifecycle(input, deps) {
   return { kind: "synced", changed: drifted.length > 0 || packageWillChange || receiptChanged || removedHandoffs.length > 0 };
 }
 function systemProjectionLifecycle(input) {
-  const targetRoot = input.targetDir === void 0 ? null : path15.resolve(input.targetDir);
+  const targetRoot = input.targetDir === void 0 ? null : path14.resolve(input.targetDir);
   const scope = targetRoot === null ? realPiProjectionScope() : {
     kind: "target-dir",
-    home: path15.join(targetRoot, "home"),
-    codingAgentDir: path15.dirname(piSystemPromptFile(targetRoot)),
-    receiptFile: path15.join(targetRoot, "state", "pi-projection-receipt.json")
+    home: path14.join(targetRoot, "home"),
+    codingAgentDir: path14.dirname(piSystemPromptFile(targetRoot)),
+    receiptFile: path14.join(targetRoot, "state", "pi-projection-receipt.json")
   };
   return {
     input: {
@@ -2586,14 +2552,14 @@ function systemProjectionLifecycle(input) {
       backup: (paths) => createBackup(
         paths,
         `pi-projection-${input.operation}`,
-        targetRoot === null ? void 0 : path15.join(targetRoot, "backups")
+        targetRoot === null ? void 0 : path14.join(targetRoot, "backups")
       ),
       writeText,
       copyFile,
       removeFile: (file) => {
         fs11.rmSync(file, { force: true });
-        if (retiredPlaywrightFiles(scope).includes(path15.resolve(file))) {
-          pruneEmptyDirs(file, path15.join(scope.home, ".agents", "skills"));
+        if (retiredPlaywrightFiles(scope).includes(path14.resolve(file))) {
+          pruneEmptyDirs(file, path14.join(scope.home, ".agents", "skills"));
         }
       },
       readManifest: targetRoot === null ? readManifest : () => ({ runtimes: {} })
@@ -2696,7 +2662,7 @@ async function runUninstall(opts) {
       if (!detection.installed) continue;
       const keepCtx = makeContext(keep, detection.configDir);
       if (!keepCtx) continue;
-      for (const action of buildContentPlan(keep, keepCtx)) retained.add(path16.resolve(action.target));
+      for (const action of buildContentPlan(keep, keepCtx)) retained.add(path15.resolve(action.target));
     }
   }
   for (const id of opts.runtimes) {
@@ -2722,16 +2688,16 @@ async function runUninstall(opts) {
       exitCode = 1;
       continue;
     }
-    const mergedTargets = new Set(unmerge.map((a) => path16.resolve(a.target)));
+    const mergedTargets = new Set(unmerge.map((a) => path15.resolve(a.target)));
     const usingRealConfig = opts.targetDir === void 0;
     const prevOwned = usingRealConfig ? readManifest().runtimes[id]?.owned ?? [] : [];
-    const pruneRoot = usingRealConfig ? HOME : path16.dirname(configDir);
+    const pruneRoot = usingRealConfig ? HOME : path15.dirname(configDir);
     const planTargets = [
-      .../* @__PURE__ */ new Set([...buildContentPlan(adapter, ctx).map((a) => path16.resolve(a.target)), ...prevOwned.map((t) => path16.resolve(t))])
+      .../* @__PURE__ */ new Set([...buildContentPlan(adapter, ctx).map((a) => path15.resolve(a.target)), ...prevOwned.map((t) => path15.resolve(t))])
     ].filter((t) => !mergedTargets.has(t) && fs12.existsSync(t));
     const deleteTargets = planTargets.filter((t) => {
       if (retained.has(t) || !isContainedIn(t, pruneRoot)) return false;
-      if (path16.basename(t) !== "engram.ts") return true;
+      if (path15.basename(t) !== "engram.ts") return true;
       const state = inspectOpencodePluginFile(t);
       if (state === "official" || state === "unknown") return false;
       return !ctx.preserveEngram;
@@ -2814,7 +2780,7 @@ async function runUninstall(opts) {
 }
 
 // src/doctor.ts
-import path17 from "path";
+import path16 from "path";
 import fs13 from "fs";
 import * as p3 from "@clack/prompts";
 function readDoctorTextIfExists(file) {
@@ -2828,12 +2794,12 @@ function readDoctorTextIfExists(file) {
 var STALE_PERMISSIONS_MARKER = "differs from the stack default and was left untouched";
 var UPGRADE_PERMISSIONS_REMEDY = "jorgex-stack sync --upgrade-permissions --dry-run";
 function piAgentDir(targetDir) {
-  return targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path17.join(HOME, ".pi", "agent") : path17.join(targetDir, "pi-agent");
+  return targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path16.join(HOME, ".pi", "agent") : path16.join(targetDir, "pi-agent");
 }
 function reportPiPermissions(targetDir) {
   const agentDir = piAgentDir(targetDir);
-  const configFile = path17.join(agentDir, "extensions", "pi-permission-system", "config.json");
-  const receiptFile = path17.join(agentDir, "jorgex-pi", "permissions-lifecycle.v1.json");
+  const configFile = path16.join(agentDir, "extensions", "pi-permission-system", "config.json");
+  const receiptFile = path16.join(agentDir, "jorgex-pi", "permissions-lifecycle.v1.json");
   let config;
   let receipt;
   try {
@@ -2870,7 +2836,7 @@ function resolvePlaywrightDoctorState(input) {
   return { status: "healthy" };
 }
 function context7KeyConfigured(id, configDir) {
-  const file = id === "codex" ? path17.join(configDir, "config.toml") : id === "claude-code" ? path17.join(path17.dirname(configDir), `${path17.basename(configDir)}.json`) : path17.join(configDir, "opencode.json");
+  const file = id === "codex" ? path16.join(configDir, "config.toml") : id === "claude-code" ? path16.join(path16.dirname(configDir), `${path16.basename(configDir)}.json`) : path16.join(configDir, "opencode.json");
   const content = readTextIfExists(file);
   if (content === null) return null;
   const match = /CONTEXT7_API_KEY"?\s*[:=]\s*"([^"]*)"/.exec(content);
@@ -2890,7 +2856,7 @@ function reportWritingStyle(options, style, mode) {
   for (const id of runtimes) {
     const adapter = id === "pi" ? piAdapter : ADAPTERS[id];
     if (adapter === void 0) continue;
-    const configDir = id === "pi" ? options.targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path17.join(HOME, ".pi", "agent") : path17.join(options.targetDir, "pi-agent") : options.targetDir ?? ADAPTERS[id].detect().configDir;
+    const configDir = id === "pi" ? options.targetDir === void 0 ? process.env.PI_CODING_AGENT_DIR ?? path16.join(HOME, ".pi", "agent") : path16.join(options.targetDir, "pi-agent") : options.targetDir ?? ADAPTERS[id].detect().configDir;
     const file = adapter.paths(configDir).systemPromptFile;
     try {
       const content = readDoctorTextIfExists(file) ?? "";
@@ -2905,7 +2871,7 @@ function reportWritingStyle(options, style, mode) {
         problems++;
       }
       if (id === "codex") {
-        const override = path17.join(configDir, "AGENTS.override.md");
+        const override = path16.join(configDir, "AGENTS.override.md");
         if ((readDoctorTextIfExists(override) ?? "").trim() !== "") {
           p3.log.warn(`Codex: ${override} no vac\xEDo puede ocultar el AGENTS.md gestionado; rev\xEDsalo sin modificarlo autom\xE1ticamente.`);
           problems++;
@@ -2920,7 +2886,7 @@ function reportWritingStyle(options, style, mode) {
 }
 async function verifyOfficialForRuntime(runtime, configDir, engramBin, homeDir, isExplicitClaudeConfigDir) {
   if (runtime === "claude-code") {
-    const { verifyOfficialSetup: verifyOfficialSetup2 } = await import("./claude-code-WY4JJAXP.js");
+    const { verifyOfficialSetup: verifyOfficialSetup2 } = await import("./claude-code-BBHLN5TD.js");
     const explicit = isExplicitClaudeConfigDir ?? process.env.CLAUDE_CONFIG_DIR !== void 0;
     const report2 = await verifyOfficialSetup2({ configDir, engramBin, homeDir, isExplicitClaudeConfigDir: explicit });
     return {
@@ -2930,7 +2896,7 @@ async function verifyOfficialForRuntime(runtime, configDir, engramBin, homeDir,
     };
   }
   if (runtime === "codex") {
-    const { verifyOfficialSetup: verifyOfficialSetup2 } = await import("./codex-WSWHXYJ3.js");
+    const { verifyOfficialSetup: verifyOfficialSetup2 } = await import("./codex-ALGP2YBC.js");
     const report2 = await verifyOfficialSetup2({ configDir, engramBin });
     return {
       ok: report2.ok,
@@ -2938,7 +2904,16 @@ async function verifyOfficialForRuntime(runtime, configDir, engramBin, homeDir,
       ...report2.reason === void 0 ? {} : { reason: report2.reason }
     };
   }
-  const { verifyOfficialSetup } = await import("./opencode-NUDGK6J7.js");
+  if (runtime === "pi") {
+    const { verifyOfficialSetup: verifyOfficialSetup2 } = await import("./pi-CKFSPGJU.js");
+    const report2 = await verifyOfficialSetup2({ configDir, engramBin, homeDir });
+    return {
+      ok: report2.ok,
+      layers: report2.layers,
+      ...report2.reason === void 0 ? {} : { reason: report2.reason }
+    };
+  }
+  const { verifyOfficialSetup } = await import("./opencode-VG2IZRRF.js");
   const report = await verifyOfficialSetup({ configDir, engramBin });
   return {
     ok: report.ok,
@@ -2981,8 +2956,8 @@ async function runDoctor(options = {}) {
       engramBinAvailable = true;
     }
   }
-  const engramDataDir = process.env.ENGRAM_DATA_DIR ?? path17.join(HOME, ".engram");
-  const engramDb = path17.join(engramDataDir, "engram.db");
+  const engramDataDir = process.env.ENGRAM_DATA_DIR ?? path16.join(HOME, ".engram");
+  const engramDb = path16.join(engramDataDir, "engram.db");
   if (fs13.existsSync(engramDb)) {
     const sizeMb = (fs13.statSync(engramDb).size / 1024 / 1024).toFixed(1);
     p3.log.info(`Engram DB: ${engramDb} (${sizeMb} MB de memorias \u2014 el stack no la toca JAM\xC1S).`);
@@ -3087,7 +3062,7 @@ async function runDoctor(options = {}) {
       p3.log.warn(`${adapter.name}: ${orphans.length} archivos hu\xE9rfanos de versiones previas \u2192 ejecuta 'sync'.`);
       problems++;
     }
-    if (adapter.id === "codex" && fs13.existsSync(path17.join(detection.configDir, "hooks.json"))) {
+    if (adapter.id === "codex" && fs13.existsSync(path16.join(detection.configDir, "hooks.json"))) {
       p3.log.info("Codex: recuerda que los hooks requieren aprobaci\xF3n manual \u2014 verifica con /hooks dentro de codex.");
     }
     const key = context7KeyConfigured(adapter.id, detection.configDir);
@@ -3136,14 +3111,14 @@ async function runDoctor(options = {}) {
 
 // src/update.ts
 import fs16 from "fs";
-import path20 from "path";
+import path19 from "path";
 import os3 from "os";
 import { execFileSync as execFileSync4 } from "child_process";
 import * as p4 from "@clack/prompts";
 
 // src/lib/github.ts
 import fs14 from "fs";
-import path18 from "path";
+import path17 from "path";
 import { execFileSync as execFileSync2 } from "child_process";
 import os2 from "os";
 import { Readable } from "stream";
@@ -3180,16 +3155,28 @@ function githubHeaders() {
     ...authHeaders()
   };
 }
+var ENGRAM_REPO = "Gentleman-Programming/engram";
+var ENGRAM_RELEASES_LATEST_URL = `https://api.github.com/repos/${ENGRAM_REPO}/releases/latest`;
+var ENGRAM_DOWNLOAD_PREFIX = `https://github.com/${ENGRAM_REPO}/releases/download/`;
+function expectedEngramAssetName(version, platform, arch) {
+  const osPart = platform === "win32" ? "windows" : platform === "linux" ? "linux" : platform === "darwin" ? "darwin" : null;
+  const archPart = arch === "x64" ? "amd64" : arch === "arm64" ? "arm64" : null;
+  if (osPart === null || archPart === null) return null;
+  const ext = osPart === "windows" ? "zip" : "tar.gz";
+  return `engram_${version}_${osPart}_${archPart}.${ext}`;
+}
+async function fetchLatestGithubRelease(repo, fetchFn = globalThis.fetch) {
+  const res = await fetchFn(`https://api.github.com/repos/${repo}/releases/latest`, {
+    headers: githubHeaders(),
+    signal: AbortSignal.timeout(1e4)
+  });
+  if (!res.ok && (res.status === 403 || res.status === 429)) rateLimitHit = true;
+  return res;
+}
 async function latestGithubRelease(repo) {
   try {
-    const res = await fetch(`https://api.github.com/repos/${repo}/releases/latest`, {
-      headers: githubHeaders(),
-      signal: AbortSignal.timeout(1e4)
-    });
-    if (!res.ok) {
-      if (res.status === 403 || res.status === 429) rateLimitHit = true;
-      return null;
-    }
+    const res = await fetchLatestGithubRelease(repo);
+    if (!res.ok) return null;
     const data = await res.json();
     return data.tag_name?.replace(/^v/, "") ?? null;
   } catch {
@@ -3213,7 +3200,7 @@ async function latestGithubCommit(repo) {
   }
 }
 function validateExtractedTree(destDir) {
-  const resolved = path18.resolve(destDir);
+  const resolved = path17.resolve(destDir);
   const walk = (dir) => {
     let entries;
     try {
@@ -3222,7 +3209,7 @@ function validateExtractedTree(destDir) {
       return false;
     }
     for (const entry of entries) {
-      const full = path18.join(dir, entry.name);
+      const full = path17.join(dir, entry.name);
       let stat;
       try {
         stat = fs14.lstatSync(full);
@@ -3241,12 +3228,12 @@ function validateExtractedTree(destDir) {
 }
 function resolveTarBin() {
   if (process.platform !== "win32") return "tar";
-  const winTar = path18.join(process.env["SystemRoot"] ?? "C:\\Windows", "System32", "tar.exe");
+  const winTar = path17.join(process.env["SystemRoot"] ?? "C:\\Windows", "System32", "tar.exe");
   return fs14.existsSync(winTar) ? winTar : "tar";
 }
 async function downloadRepoTarball(repo, sha, destDir, validateSubdir) {
   const url = `https://codeload.github.com/${repo}/tar.gz/${sha}`;
-  const tmp = path18.join(os2.tmpdir(), `jorgex-tarball-${Date.now()}.tar.gz`);
+  const tmp = path17.join(os2.tmpdir(), `jorgex-tarball-${Date.now()}.tar.gz`);
   const fail = (reason) => {
     try {
       fs14.rmSync(destDir, { recursive: true, force: true });
@@ -3279,8 +3266,8 @@ async function downloadRepoTarball(repo, sha, destDir, validateSubdir) {
       const detail = (e.stderr?.toString().trim() || e.message || "").split("\n")[0];
       return fail(detail ? `tar fall\xF3: ${detail}` : "tar no disponible o fall\xF3 la extracci\xF3n");
     }
-    const resolvedDest = path18.resolve(destDir);
-    const validateRoot = validateSubdir ? path18.resolve(resolvedDest, validateSubdir) : resolvedDest;
+    const resolvedDest = path17.resolve(destDir);
+    const validateRoot = validateSubdir ? path17.resolve(resolvedDest, validateSubdir) : resolvedDest;
     if (validateRoot !== resolvedDest && !isContainedIn(validateRoot, resolvedDest)) {
       return fail(`la ruta de validaci\xF3n "${validateSubdir}" escapa del destino`);
     }
@@ -3302,7 +3289,7 @@ async function downloadRepoTarball(repo, sha, destDir, validateSubdir) {
 
 // src/lib/skill-update.ts
 import fs15 from "fs";
-import path19 from "path";
+import path18 from "path";
 import { execFileSync as execFileSync3 } from "child_process";
 var PROTECTED_SKILLS = /* @__PURE__ */ new Set([
   "agent-delegation",
@@ -3322,10 +3309,10 @@ function sameTextContentNormalized(a, b) {
 }
 function diffSkillDirs(upstreamDir, localDir) {
   const upstreamFiles = new Set(
-    listFilesRecursive(upstreamDir).map((f) => path19.relative(upstreamDir, f))
+    listFilesRecursive(upstreamDir).map((f) => path18.relative(upstreamDir, f))
   );
   const localFiles = new Set(
-    listFilesRecursive(localDir).map((f) => path19.relative(localDir, f))
+    listFilesRecursive(localDir).map((f) => path18.relative(localDir, f))
   );
   const added = [];
   const modified = [];
@@ -3333,7 +3320,7 @@ function diffSkillDirs(upstreamDir, localDir) {
   for (const rel of upstreamFiles) {
     if (!localFiles.has(rel)) {
       added.push(rel);
-    } else if (!sameTextContentNormalized(path19.join(upstreamDir, rel), path19.join(localDir, rel))) {
+    } else if (!sameTextContentNormalized(path18.join(upstreamDir, rel), path18.join(localDir, rel))) {
       modified.push(rel);
     }
   }
@@ -3395,7 +3382,7 @@ function replaceSkill(name, upstreamSkillDir, newCommit, opts) {
   if (PROTECTED_SKILLS.has(name)) {
     throw new Error(`La skill "${name}" es propia del stack y no se actualiza desde upstream.`);
   }
-  const upstreamsFile = upstreamsFilePath ?? path19.join(path19.dirname(stackRoot()), "upstreams.json");
+  const upstreamsFile = upstreamsFilePath ?? path18.join(path18.dirname(stackRoot()), "upstreams.json");
   const raw = fs15.readFileSync(upstreamsFile, "utf8");
   const data = JSON.parse(raw);
   const skillEntry = data?.skills?.[name];
@@ -3405,8 +3392,8 @@ function replaceSkill(name, upstreamSkillDir, newCommit, opts) {
   if (skillEntry.kind === "release") {
     throw new Error(`La skill "${name}" es de tipo release y no se actualiza con replaceSkill.`);
   }
-  const skillsRoot = localSkillsRoot ?? path19.join(stackRoot(), "skills");
-  const localSkillDir = path19.join(skillsRoot, name);
+  const skillsRoot = localSkillsRoot ?? path18.join(stackRoot(), "skills");
+  const localSkillDir = path18.join(skillsRoot, name);
   const localFiles = listFilesRecursive(localSkillDir);
   if (localFiles.length > 0) {
     createBackup(localFiles, `skill-update-${name}`, backupsRoot);
@@ -3419,9 +3406,9 @@ function replaceSkill(name, upstreamSkillDir, newCommit, opts) {
       if (st.isSymbolicLink()) {
         throw new Error(`Symlink rechazado en upstream de skill "${name}": ${src}`);
       }
-      const rel = path19.relative(upstreamSkillDir, src);
-      const dest = path19.join(stagingDir, rel);
-      ensureDir(path19.dirname(dest));
+      const rel = path18.relative(upstreamSkillDir, src);
+      const dest = path18.join(stagingDir, rel);
+      ensureDir(path18.dirname(dest));
       copyFile(src, dest);
     }
     const oldDir = `${localSkillDir}.old-${process.pid}`;
@@ -3446,7 +3433,7 @@ function rateLimitHint(prefix) {
   return ghPresentButTokenFailed() ? `${prefix} Tienes gh instalado pero \`gh auth token\` no devolvi\xF3 credencial (\xBFsesi\xF3n caducada?) \u2014 prueba \`gh auth login\` o define GH_TOKEN.` : `${prefix} Define GH_TOKEN o inicia sesi\xF3n en gh CLI.`;
 }
 function loadUpstreams() {
-  const file = path20.join(path20.dirname(stackRoot()), "upstreams.json");
+  const file = path19.join(path19.dirname(stackRoot()), "upstreams.json");
   return JSON.parse(fs16.readFileSync(file, "utf8"));
 }
 function skillsToScan(maintainer, upstreams) {
@@ -3678,8 +3665,8 @@ function isEngramRunning() {
     return null;
   }
 }
-function isGitClone(projectRoot = path20.dirname(stackRoot())) {
-  return fs16.existsSync(path20.join(projectRoot, ".git"));
+function isGitClone(projectRoot = path19.dirname(stackRoot())) {
+  return fs16.existsSync(path19.join(projectRoot, ".git"));
 }
 var STACK_METHOD_CLONE = "git pull + pnpm install + pnpm build";
 function resolvePnpm() {
@@ -3694,7 +3681,7 @@ function cleanupTmp(dir) {
   }
 }
 function updateStackGitClone() {
-  const projectRoot = path20.dirname(stackRoot());
+  const projectRoot = path19.dirname(stackRoot());
   const git = lookPath("git");
   if (!git) throw new Error("git no encontrado en PATH.");
   const pnpm = resolvePnpm();
@@ -3711,7 +3698,7 @@ function updateStackGlobal() {
   execFileSync4(pnpm, ["add", "-g", "jorgex-stack@latest"], { stdio: "inherit" });
 }
 async function downloadSkillToTemp(repo, sha, skillPath) {
-  const root = fs16.mkdtempSync(path20.join(os3.tmpdir(), "jorgex-skill-"));
+  const root = fs16.mkdtempSync(path19.join(os3.tmpdir(), "jorgex-skill-"));
   try {
     const result = await downloadRepoTarball(repo, sha, root, skillPath);
     if (!result.ok) {
@@ -3719,14 +3706,14 @@ async function downloadSkillToTemp(repo, sha, skillPath) {
       return { error: result.reason };
     }
     if (skillPath) {
-      const sub = path20.resolve(path20.join(root, skillPath));
+      const sub = path19.resolve(path19.join(root, skillPath));
       if (!isContainedIn(sub, root)) {
         cleanupTmp(root);
         return { error: `la ruta "${skillPath}" escapa del directorio temporal` };
       }
       if (fs16.existsSync(sub)) return { dir: sub, root };
       const lastSeg = skillPath.split("/").pop();
-      const sub2 = path20.resolve(path20.join(root, lastSeg));
+      const sub2 = path19.resolve(path19.join(root, lastSeg));
       if (isContainedIn(sub2, root) && fs16.existsSync(sub2)) {
         if (!validateExtractedTree(sub2)) {
           cleanupTmp(root);
@@ -3747,10 +3734,10 @@ function pruneEngramDbBackups() {
   try {
     const dir = dataDir();
     if (!fs16.existsSync(dir)) return;
-    const backups = fs16.readdirSync(dir).filter((f) => f.startsWith("engram-db-backup-") && f.endsWith(".db")).map((f) => ({ name: f, mtime: fs16.statSync(path20.join(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime);
+    const backups = fs16.readdirSync(dir).filter((f) => f.startsWith("engram-db-backup-") && f.endsWith(".db")).map((f) => ({ name: f, mtime: fs16.statSync(path19.join(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime);
     for (const old of backups.slice(3)) {
       try {
-        fs16.rmSync(path20.join(dir, old.name));
+        fs16.rmSync(path19.join(dir, old.name));
       } catch {
       }
     }
@@ -3759,17 +3746,17 @@ function pruneEngramDbBackups() {
 }
 function rotateLockedBinary(binPath, sweepRoot = HOME) {
   if (!fs16.existsSync(binPath)) return null;
-  const dir = path20.dirname(binPath);
-  const base = path20.basename(binPath);
+  const dir = path19.dirname(binPath);
+  const base = path19.basename(binPath);
   const escapedBase = base.replace(/[.*+?^$()|[\]{}\\]/g, "\\$&");
   const oldPattern = new RegExp("^" + escapedBase + "\\.old-\\d+$");
-  const resolvedDir = path20.resolve(dir);
-  if (resolvedDir === path20.resolve(sweepRoot) || isContainedIn(resolvedDir, sweepRoot)) {
+  const resolvedDir = path19.resolve(dir);
+  if (resolvedDir === path19.resolve(sweepRoot) || isContainedIn(resolvedDir, sweepRoot)) {
     try {
       for (const entry of fs16.readdirSync(dir)) {
         if (oldPattern.test(entry)) {
           try {
-            fs16.rmSync(path20.join(dir, entry), { force: true });
+            fs16.rmSync(path19.join(dir, entry), { force: true });
           } catch {
           }
         }
@@ -3777,7 +3764,7 @@ function rotateLockedBinary(binPath, sweepRoot = HOME) {
     } catch {
     }
   }
-  const rotated = path20.join(dir, `${base}.old-${Date.now()}`);
+  const rotated = path19.join(dir, `${base}.old-${Date.now()}`);
   fs16.renameSync(binPath, rotated);
   return rotated;
 }
@@ -3787,8 +3774,8 @@ async function updateEngram(engramRepo, latestVersion) {
       "Engram est\xE1 en ejecuci\xF3n: los procesos vivos seguir\xE1n usando la versi\xF3n antigua hasta que reinicies los clientes (Claude Code/OpenCode/Codex)."
     );
   }
-  const engramDataDir = process.env.ENGRAM_DATA_DIR ?? path20.join(HOME, ".engram");
-  const engramDb = path20.join(engramDataDir, "engram.db");
+  const engramDataDir = process.env.ENGRAM_DATA_DIR ?? path19.join(HOME, ".engram");
+  const engramDb = path19.join(engramDataDir, "engram.db");
   if (fs16.existsSync(engramDb)) {
     const doBackup = await p4.confirm({
       message: `\xBFHacer backup de la DB de Engram antes de actualizar? (${engramDb})`,
@@ -3796,7 +3783,7 @@ async function updateEngram(engramRepo, latestVersion) {
     });
     if (!p4.isCancel(doBackup) && doBackup) {
       const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-      const dest = path20.join(dataDir(), `engram-db-backup-${ts}.db`);
+      const dest = path19.join(dataDir(), `engram-db-backup-${ts}.db`);
       try {
         if (!fs16.existsSync(dataDir())) fs16.mkdirSync(dataDir(), { recursive: true });
         fs16.copyFileSync(engramDb, dest);
@@ -4134,7 +4121,7 @@ async function runInteractiveUpdate(localVersion, yes, dryRun = false, includeBr
       continue;
     }
     const { dir: tmpDir, root: tmpRoot } = tmpResult;
-    const localSkillDir = path20.join(stackRoot(), "skills", skillInfo.name);
+    const localSkillDir = path19.join(stackRoot(), "skills", skillInfo.name);
     const diff = renderSkillDiff(tmpDir, localSkillDir);
     if (diff) {
       p4.log.info(`Diff de ${skillInfo.name}:
@@ -4226,7 +4213,7 @@ ${diff}`);
 }
 
 // src/models-picker.ts
-import path21 from "path";
+import path20 from "path";
 import * as p5 from "@clack/prompts";
 var TIERS = ["strong", "standard", "cheap"];
 var EFFORTS = ["low", "medium", "high", "xhigh"];
@@ -4252,7 +4239,7 @@ function opencodeLiveModels(binPath) {
 }
 function agentsByTier() {
   const grouped = { strong: [], standard: [], cheap: [] };
-  for (const agent of loadCanonicalAgents(path21.join(stackRoot(), "agents"))) {
+  for (const agent of loadCanonicalAgents(path20.join(stackRoot(), "agents"))) {
     if (agent.mode === "subagent") grouped[agent.tier].push(agent.name);
   }
   return grouped;
@@ -4438,15 +4425,15 @@ function cancelled() {
 
 // src/lib/release.ts
 import fs17 from "fs";
-import path22 from "path";
+import path21 from "path";
 import { execFileSync as execFileSync5 } from "child_process";
 import { fileURLToPath } from "url";
 function findPackageJson() {
-  let dir = path22.dirname(fileURLToPath(import.meta.url));
+  let dir = path21.dirname(fileURLToPath(import.meta.url));
   for (let i = 0; i < 6; i++) {
-    const candidate = path22.join(dir, "package.json");
+    const candidate = path21.join(dir, "package.json");
     if (fs17.existsSync(candidate)) return candidate;
-    dir = path22.dirname(dir);
+    dir = path21.dirname(dir);
   }
   throw new Error("No se encontr\xF3 package.json cerca del CLI.");
 }
@@ -4467,7 +4454,7 @@ function readPackageMetadata() {
 
 // src/lib/pi-runtime.ts
 import os4 from "os";
-import path23 from "path";
+import path22 from "path";
 import fs18 from "fs";
 import { spawnSync } from "child_process";
 import { createHash as createHash2 } from "crypto";
@@ -4476,16 +4463,16 @@ import { createHash as createHash2 } from "crypto";
 var pi_runtime_pin_default = {
   package: {
     name: "jorgex-pi",
-    version: "0.8.27",
-    source: "npm:jorgex-pi@0.8.27"
+    version: "0.8.28",
+    source: "npm:jorgex-pi@0.8.28"
   },
   provenance: {
-    commit: "97fb35c88c484f264cbd9dc1f0a3c65da2f9dba1"
+    commit: "056fbc7eeea07466c3ce3a6f85723e94bcf38577"
   },
   tarball: {
-    bytes: 89140773,
-    sha256: "2ac1ed88c419de87d7a519aa269cac7015e477f6c5250fe7d7090a4c40e3fa17",
-    sha512: "6adbdb8dcf35bd7b6eba63ac6b1c7fc2ccf2063f5768a16bdb462104143a09039be629c8d67ab0e058533d882a27fbbc3d753c769297ed9ac1c04775a2f0b614"
+    bytes: 17993987,
+    sha256: "3490845ad6d67c82cb0828847d0c9510a58958f068c4e8408161aadfe6f28ed9",
+    sha512: "7ec1c46ccbafe8052effca13ef5e2bdff2ad09a2624bbe4ad7884622e231bbe25119b7124b6ba8f96916be34d99e511bfd83a9c16708d6f828ccf9f9d705bd7c"
   }
 };
 
@@ -4506,7 +4493,7 @@ var PI_RUNTIME_CANDIDATE = {
       "structured-questions-v1",
       "web-access-v1",
       "goal-continuation-v1",
-      "mcp-adapter-v1",
+      "engram-official-bridge-v1",
       "engram-runtime-tools-v1",
       "context7-http-v1",
       "permissions-policy-v1",
@@ -4603,16 +4590,16 @@ async function resolvePiEngramRequirement(input, deps) {
     };
   }
   const accepted = await deps.confirm({
-    message: "Engram es obligatorio para JorgeX Pi. \xBFInstalar ahora el binario mediante el canal nativo?",
+    message: "Engram es obligatorio para JorgeX Pi. \xBFInstalar ahora el binario oficial verificado?",
     initialValue: false
   });
   if (!accepted) return { kind: "offer", accepted: false };
-  const installed = await deps.installNative({ version: "2.0.0", channels: ["brew", "go", "url"] });
-  if (!installed) {
+  const installed = await deps.installShared();
+  if (!installed.ok) {
     return {
       kind: "blocked",
       reason: "engram-install-failed",
-      remedy: "Instala Engram manualmente o configura ENGRAM_BIN antes de reintentar."
+      remedy: `La instalaci\xF3n de Engram fall\xF3: ${installed.reason} Instala Engram manualmente o configura ENGRAM_BIN antes de reintentar.`
     };
   }
   const detected = deps.detectHost();
@@ -4665,7 +4652,7 @@ function healthyDoctor(stdout, stderr, packageRunner, candidate) {
     if (record === null || typeof record !== "object" || Array.isArray(record)) return false;
     const packageValue = Reflect.get(record, "package");
     const result = Reflect.get(record, "result");
-    return Reflect.get(record, "schemaVersion") === 1 && Reflect.get(record, "command") === "doctor" && Reflect.get(record, "ok") === true && packageValue !== null && typeof packageValue === "object" && Reflect.get(packageValue, "name") === "jorgex-pi" && Reflect.get(packageValue, "version") === (candidate.package?.version ?? /^npm:jorgex-pi@([^\s]+)$/.exec(candidate.source)?.[1]) && path23.resolve(packageRunner) === path23.resolve(String(Reflect.get(packageValue, "root")), "bin", "jorgex-pi.mjs") && result !== null && typeof result === "object" && Reflect.get(result, "healthy") === true;
+    return Reflect.get(record, "schemaVersion") === 1 && Reflect.get(record, "command") === "doctor" && Reflect.get(record, "ok") === true && packageValue !== null && typeof packageValue === "object" && Reflect.get(packageValue, "name") === "jorgex-pi" && Reflect.get(packageValue, "version") === (candidate.package?.version ?? /^npm:jorgex-pi@([^\s]+)$/.exec(candidate.source)?.[1]) && path22.resolve(packageRunner) === path22.resolve(String(Reflect.get(packageValue, "root")), "bin", "jorgex-pi.mjs") && result !== null && typeof result === "object" && Reflect.get(result, "healthy") === true;
   } catch {
     return false;
   }
@@ -4686,7 +4673,7 @@ function provisionalPendingDoctor(exitCode, stdout, stderr, packageRunner, candi
     if (JSON.stringify(Object.keys(packageValue).sort()) !== JSON.stringify(["name", "root", "version"])) return false;
     if (Reflect.get(packageValue, "name") !== "jorgex-pi") return false;
     if (Reflect.get(packageValue, "version") !== (candidate.package?.version ?? /^npm:jorgex-pi@([^\s]+)$/.exec(candidate.source)?.[1])) return false;
-    if (path23.resolve(packageRunner) !== path23.resolve(String(Reflect.get(packageValue, "root")), "bin", "jorgex-pi.mjs")) return false;
+    if (path22.resolve(packageRunner) !== path22.resolve(String(Reflect.get(packageValue, "root")), "bin", "jorgex-pi.mjs")) return false;
     const result = Reflect.get(record, "result");
     if (result === null || typeof result !== "object" || Array.isArray(result)) return false;
     if (JSON.stringify(Object.keys(result).sort()) !== JSON.stringify(["checks", "healthy"])) return false;
@@ -4715,7 +4702,7 @@ function provisionalPendingDoctor(exitCode, stdout, stderr, packageRunner, candi
 }
 function installPiFromVerifiedTarball(input, deps) {
   const paths = input.targetDir === void 0 ? userPaths(input.engramBin, input.piExecutable) : targetPaths(input.targetDir, input.engramBin, input.piExecutable);
-  const destination = input.targetDir === void 0 ? path23.join(dataDir(), "packages", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`) : path23.join(path23.resolve(input.targetDir), "downloads", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`);
+  const destination = input.targetDir === void 0 ? path22.join(dataDir(), "packages", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`) : path22.join(path22.resolve(input.targetDir), "downloads", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`);
   const artifact = deps.download(destination);
   if (artifact.bytes !== input.candidate.bytes || artifact.sha256 !== input.candidate.sha256 || artifact.sha512 !== input.candidate.sha512) {
     return { kind: "blocked", reason: "tarball-integrity" };
@@ -4723,7 +4710,7 @@ function installPiFromVerifiedTarball(input, deps) {
   deps.backupSettings();
   const scope = {
     kind: input.targetDir === void 0 ? "real" : "target-dir",
-    codingAgentDir: path23.resolve(paths.codingAgentDir)
+    codingAgentDir: path22.resolve(paths.codingAgentDir)
   };
   const installing = flatCandidateReceipt(input.candidate, scope, "installing", input.engramBin);
   deps.writeReceiptAtomic(`${JSON.stringify(installing)}
@@ -4754,30 +4741,30 @@ function installPiFromVerifiedTarball(input, deps) {
   return { kind: "installed", receipt };
 }
 function runtimePath(piExecutable) {
-  const entries = process.platform === "win32" ? [piExecutable === void 0 ? null : path23.dirname(piExecutable), path23.dirname(process.execPath), process.env.SystemRoot ? path23.join(process.env.SystemRoot, "System32") : null] : [piExecutable === void 0 ? null : path23.dirname(piExecutable), path23.dirname(process.execPath), "/usr/local/bin", "/usr/bin", "/bin"];
-  return [...new Set(entries.filter((entry) => entry !== null))].join(path23.delimiter);
+  const entries = process.platform === "win32" ? [piExecutable === void 0 ? null : path22.dirname(piExecutable), path22.dirname(process.execPath), process.env.SystemRoot ? path22.join(process.env.SystemRoot, "System32") : null] : [piExecutable === void 0 ? null : path22.dirname(piExecutable), path22.dirname(process.execPath), "/usr/local/bin", "/usr/bin", "/bin"];
+  return [...new Set(entries.filter((entry) => entry !== null))].join(path22.delimiter);
 }
 function targetPaths(targetDir, engramBin, piExecutable) {
-  const root = path23.resolve(targetDir);
-  const codingAgentDir = path23.join(root, "pi-agent");
-  const home = path23.join(root, "home");
-  const temporary = path23.join(root, "tmp");
+  const root = path22.resolve(targetDir);
+  const codingAgentDir = path22.join(root, "pi-agent");
+  const home = path22.join(root, "home");
+  const temporary = path22.join(root, "tmp");
   return {
     codingAgentDir,
-    receiptPath: path23.join(root, "state", "pi-receipt.json"),
-    packageRunner: path23.join(codingAgentDir, "npm", "node_modules", "jorgex-pi", "bin", "jorgex-pi.mjs"),
+    receiptPath: path22.join(root, "state", "pi-receipt.json"),
+    packageRunner: path22.join(codingAgentDir, "npm", "node_modules", "jorgex-pi", "bin", "jorgex-pi.mjs"),
     environment: {
       HOME: home,
       USERPROFILE: home,
-      APPDATA: path23.join(root, "appdata"),
-      LOCALAPPDATA: path23.join(root, "localappdata"),
-      XDG_CONFIG_HOME: path23.join(root, "xdg-config"),
-      XDG_DATA_HOME: path23.join(root, "xdg-data"),
-      XDG_CACHE_HOME: path23.join(root, "xdg-cache"),
+      APPDATA: path22.join(root, "appdata"),
+      LOCALAPPDATA: path22.join(root, "localappdata"),
+      XDG_CONFIG_HOME: path22.join(root, "xdg-config"),
+      XDG_DATA_HOME: path22.join(root, "xdg-data"),
+      XDG_CACHE_HOME: path22.join(root, "xdg-cache"),
       TEMP: temporary,
       TMP: temporary,
       TMPDIR: temporary,
-      npm_config_cache: path23.join(root, "npm-cache"),
+      npm_config_cache: path22.join(root, "npm-cache"),
       NPM_CONFIG_IGNORE_SCRIPTS: "true",
       NPM_CONFIG_UPDATE_NOTIFIER: "false",
       PI_CODING_AGENT_DIR: codingAgentDir,
@@ -4788,15 +4775,15 @@ function targetPaths(targetDir, engramBin, piExecutable) {
 }
 function userPaths(engramBin, piExecutable) {
   const home = os4.homedir();
-  const codingAgentDir = process.env.PI_CODING_AGENT_DIR ?? path23.join(home, ".pi", "agent");
+  const codingAgentDir = process.env.PI_CODING_AGENT_DIR ?? path22.join(home, ".pi", "agent");
   return {
     codingAgentDir,
-    receiptPath: path23.join(dataDir(), "pi-receipt.json"),
-    packageRunner: path23.join(codingAgentDir, "npm", "node_modules", "jorgex-pi", "bin", "jorgex-pi.mjs"),
+    receiptPath: path22.join(dataDir(), "pi-receipt.json"),
+    packageRunner: path22.join(codingAgentDir, "npm", "node_modules", "jorgex-pi", "bin", "jorgex-pi.mjs"),
     environment: {
       HOME: home,
-      XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME ?? path23.join(home, ".config"),
-      XDG_CACHE_HOME: process.env.XDG_CACHE_HOME ?? path23.join(home, ".cache"),
+      XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME ?? path22.join(home, ".config"),
+      XDG_CACHE_HOME: process.env.XDG_CACHE_HOME ?? path22.join(home, ".cache"),
       TMPDIR: os4.tmpdir(),
       NPM_CONFIG_IGNORE_SCRIPTS: "true",
       NPM_CONFIG_UPDATE_NOTIFIER: "false",
@@ -4824,7 +4811,7 @@ function runPiRuntime(input, deps) {
     return { kind: "blocked", reason: "tarball-integrity" };
   }
   const paths = input.targetDir === void 0 ? userPaths(input.engramBin, input.detected.executable) : targetPaths(input.targetDir, input.engramBin, input.detected.executable);
-  const settingsJson = deps.readSettings(path23.join(paths.codingAgentDir, "settings.json"));
+  const settingsJson = deps.readSettings(path22.join(paths.codingAgentDir, "settings.json"));
   const receiptJson = deps.readReceipt(paths.receiptPath);
   const lifecycleInput = {
     candidate: PI_RUNTIME_CANDIDATE,
@@ -4888,14 +4875,14 @@ function readJsonFile(file) {
 function packageVersionFromExecutable(executable) {
   let current;
   try {
-    current = path23.dirname(fs18.realpathSync(executable));
+    current = path22.dirname(fs18.realpathSync(executable));
   } catch {
     return null;
   }
   for (let depth = 0; depth < 8; depth++) {
     const manifests = [
-      path23.join(current, "package.json"),
-      path23.join(current, "node_modules", "@earendil-works", "pi-coding-agent", "package.json")
+      path22.join(current, "package.json"),
+      path22.join(current, "node_modules", "@earendil-works", "pi-coding-agent", "package.json")
     ];
     for (const manifest of manifests) {
       try {
@@ -4906,7 +4893,7 @@ function packageVersionFromExecutable(executable) {
       } catch {
       }
     }
-    const parent = path23.dirname(current);
+    const parent = path22.dirname(current);
     if (parent === current) break;
     current = parent;
   }
@@ -4921,16 +4908,16 @@ function detectPiRuntime() {
     installed: executable !== null,
     executable,
     version: executable === null ? null : packageVersionFromExecutable(executable),
-    codingAgentDir: process.env.PI_CODING_AGENT_DIR ?? path23.join(home, ".pi", "agent")
+    codingAgentDir: process.env.PI_CODING_AGENT_DIR ?? path22.join(home, ".pi", "agent")
   };
 }
 function hasManagedPiRuntime(targetDir) {
-  const receipt = targetDir === void 0 ? path23.join(dataDir(), "pi-receipt.json") : path23.join(path23.resolve(targetDir), "state", "pi-receipt.json");
+  const receipt = targetDir === void 0 ? path22.join(dataDir(), "pi-receipt.json") : path22.join(path22.resolve(targetDir), "state", "pi-receipt.json");
   return fs18.statSync(receipt, { throwIfNoEntry: false })?.isFile() === true;
 }
 function resolvePiEngramBin(targetDir) {
   if (targetDir === void 0) return detectEngram();
-  const candidate = path23.join(path23.resolve(targetDir), "bin", process.platform === "win32" ? "engram.exe" : "engram");
+  const candidate = path22.join(path22.resolve(targetDir), "bin", process.platform === "win32" ? "engram.exe" : "engram");
   return fs18.statSync(candidate, { throwIfNoEntry: false })?.isFile() ? candidate : null;
 }
 function readOptional(file, fallback) {
@@ -4970,7 +4957,7 @@ async function acquirePiTarball(destination) {
     }
     fs18.rmSync(destination, { force: true });
   }
-  fs18.mkdirSync(path23.dirname(destination), { recursive: true });
+  fs18.mkdirSync(path22.dirname(destination), { recursive: true });
   const partial = `${destination}.partial-${process.pid}`;
   const response = await fetch(`https://registry.npmjs.org/jorgex-pi/-/jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`, {
     redirect: "error",
@@ -5013,6 +5000,21 @@ function runProcess(invocation) {
     stderr: result.stderr ?? (result.error?.message ?? "")
   };
 }
+function setupPiFailedRemedy(setup) {
+  const detail = setup.reason ?? setup.stderr ?? "setup oficial Pi fall\xF3";
+  const recovery = setup.recovery ?? "none";
+  const backupId = setup.backupId ?? null;
+  if (recovery === "complete") {
+    return backupId !== null ? `${detail}. Se restaur\xF3 el backup ${backupId}; Pi no qued\xF3 activado.` : `${detail}. Se restaur\xF3 el backup previo; Pi no qued\xF3 activado.`;
+  }
+  if (recovery === "incomplete") {
+    const id2 = backupId !== null ? ` (backup ${backupId})` : " (sin backup v\xE1lido)";
+    const cause = setup.restoreError !== void 0 ? ` ${setup.restoreError}.` : "";
+    return `${detail}. Recuperaci\xF3n incompleta${id2};${cause} revisa manualmente el estado y corrige la causa antes de reintentar; Pi no qued\xF3 activado.`;
+  }
+  const id = backupId !== null ? ` (backup ${backupId})` : " (sin backup v\xE1lido)";
+  return `${detail}. Sin recuperaci\xF3n autom\xE1tica${id}; revisa manualmente el estado y corrige la causa antes de reintentar; Pi no qued\xF3 activado.`;
+}
 async function runPiRuntimeSystem(input) {
   if (input.engramBin === null && input.operation !== "uninstall") return runPiRuntime(input, {
     readSettings: () => {
@@ -5043,7 +5045,32 @@ async function runPiRuntimeSystem(input) {
         remedy: "Instala Engram o configura un ENGRAM_BIN absoluto antes de reintentar."
       };
     }
-    const destination = input.targetDir === void 0 ? path23.join(dataDir(), "packages", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`) : path23.join(path23.resolve(input.targetDir), "downloads", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`);
+    if (input.targetDir === void 0) {
+      const { runOfficialSetupIfNeeded: runOfficialSetupIfNeeded2 } = await import("./official-engram-setup-4WIXM4EF.js");
+      const setup = await runOfficialSetupIfNeeded2("pi", {
+        command: "install",
+        dryRun: false,
+        targetDir: void 0,
+        engramBin: input.engramBin,
+        configDir: paths.codingAgentDir,
+        homeDir: os4.homedir()
+      });
+      if (!setup.ran || !setup.ok) {
+        if (!setup.ran) {
+          return {
+            kind: "blocked",
+            reason: "setup-pi-failed",
+            remedy: "setup oficial Pi omitido en install real. Sin recuperaci\xF3n autom\xE1tica (sin backup v\xE1lido); revisa manualmente el estado y corrige la causa antes de reintentar; Pi no qued\xF3 activado."
+          };
+        }
+        return {
+          kind: "blocked",
+          reason: "setup-pi-failed",
+          remedy: setupPiFailedRemedy(setup)
+        };
+      }
+    }
+    const destination = input.targetDir === void 0 ? path22.join(dataDir(), "packages", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`) : path22.join(path22.resolve(input.targetDir), "downloads", `jorgex-pi-${PI_RUNTIME_CANDIDATE.package.version}.tgz`);
     let artifact;
     try {
       artifact = await acquirePiTarball(destination);
@@ -5064,18 +5091,18 @@ async function runPiRuntimeSystem(input) {
     }, {
       download: () => artifact,
       backupSettings: () => createBackup(
-        [path23.join(paths.codingAgentDir, "settings.json")],
+        [path22.join(paths.codingAgentDir, "settings.json")],
         "pi-package-install",
-        input.targetDir === void 0 ? void 0 : path23.join(path23.resolve(input.targetDir), "backups")
+        input.targetDir === void 0 ? void 0 : path22.join(path22.resolve(input.targetDir), "backups")
       ),
       run: runProcess,
-      readSettings: () => readOptional(path23.join(paths.codingAgentDir, "settings.json"), '{"packages":[]}'),
-      rewriteSettings: (content) => writeText(path23.join(paths.codingAgentDir, "settings.json"), `${content}
+      readSettings: () => readOptional(path22.join(paths.codingAgentDir, "settings.json"), '{"packages":[]}'),
+      rewriteSettings: (content) => writeText(path22.join(paths.codingAgentDir, "settings.json"), `${content}
 `),
       writeReceiptAtomic: (content) => writeText(paths.receiptPath, content)
     });
   }
-  const packageRoot = path23.dirname(path23.dirname(paths.packageRunner));
+  const packageRoot = path22.dirname(path22.dirname(paths.packageRunner));
   const writeReceipt = (receipt) => {
     writeText(paths.receiptPath, `${JSON.stringify(receipt, null, 2)}
 `);
@@ -5093,9 +5120,9 @@ async function runPiRuntimeSystem(input) {
       value,
       {
         backupSettings: () => createBackup(
-          [path23.join(paths.codingAgentDir, "settings.json")],
+          [path22.join(paths.codingAgentDir, "settings.json")],
           "pi-package-uninstall",
-          input.targetDir === void 0 ? void 0 : path23.join(path23.resolve(input.targetDir), "backups")
+          input.targetDir === void 0 ? void 0 : path22.join(path22.resolve(input.targetDir), "backups")
         ),
         run: runProcess,
         isPackageAbsent: () => !fs18.existsSync(packageRoot),
@@ -5274,7 +5301,7 @@ async function runManagedPiSystem(input) {
 }
 
 // src/lib/quality-runner.ts
-import path24 from "path";
+import path23 from "path";
 import { spawn, spawnSync as spawnSync2 } from "child_process";
 function normalizeLimit(value, name) {
   if (value === void 0) return void 0;
@@ -5406,7 +5433,7 @@ function killProcessTree(child) {
   if (pid === void 0) return;
   if (process.platform === "win32") {
     const systemRoot = process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows";
-    const taskkill = path24.join(systemRoot, "System32", "taskkill.exe");
+    const taskkill = path23.join(systemRoot, "System32", "taskkill.exe");
     const result = spawnSync2(taskkill, ["/pid", String(pid), "/t", "/f"], {
       shell: false,
       stdio: "ignore",
@@ -5654,107 +5681,172 @@ async function runQualityPlan(input) {
 // src/lib/engram-install.ts
 import fs19 from "fs";
 import os5 from "os";
-import path25 from "path";
+import path24 from "path";
 import { execFileSync as execFileSync6 } from "child_process";
 import { createHash as createHash3 } from "crypto";
-
-// src/lib/engram-release.json
-var engram_release_default = {
-  assets: {
-    darwin_arm64: {
-      name: "engram_2.0.0_darwin_arm64.tar.gz",
-      sha256: "793c695153e0e76144dc53b006a7039771bd24115385856578bc4d6506d46d7f",
-      size: 7210321
-    },
-    darwin_x64: {
-      name: "engram_2.0.0_darwin_amd64.tar.gz",
-      sha256: "f1dcc343ac241c5001617113279b49dec698005550b538250ccf21655fc728ac",
-      size: 7678428
-    },
-    linux_arm64: {
-      name: "engram_2.0.0_linux_arm64.tar.gz",
-      sha256: "a942e73ab424faaa6e2785d1563e0d9d7f20739944dae0c50071223301d44333",
-      size: 6926960
-    },
-    linux_x64: {
-      name: "engram_2.0.0_linux_amd64.tar.gz",
-      sha256: "23be1c2ce9739c455097ff864736213717b925b3e8821a988dfc619685a5abd5",
-      size: 7544949
-    },
-    windows_arm64: {
-      name: "engram_2.0.0_windows_arm64.zip",
-      sha256: "e4d9074ebf8a839573f62d7bd2719421fc428ab25a9affe82ca4b2d5555183d1",
-      size: 6980876
-    },
-    windows_x64: {
-      name: "engram_2.0.0_windows_amd64.zip",
-      sha256: "fba31e7221702f213954c2081aa83b38833e0e9b824a981f976f8cee2c74548c",
-      size: 7738896
-    }
-  },
-  version: "2.0.0"
-};
-
-// src/lib/engram-install.ts
+var MAX_ENGRAM_ARCHIVE_BYTES = 64 * 1024 * 1024;
+var STABLE_TAG = /^v\d+\.\d+\.\d+$/;
+var DIGEST_RE = /^sha256:[0-9a-f]{64}$/;
 async function installMissingEngram(options = {}) {
   const platform = options.platform ?? process.platform;
   const homeDir = options.homeDir ?? os5.homedir();
-  if (!path25.isAbsolute(homeDir)) return { ok: false, reason: "El directorio personal debe ser absoluto." };
+  if (!path24.isAbsolute(homeDir)) return { ok: false, reason: "El directorio personal debe ser absoluto." };
   const binaryName = platform === "win32" ? "engram.exe" : "engram";
-  const bin = path25.join(homeDir, ".local", "bin", binaryName);
+  const bin = path24.join(homeDir, ".local", "bin", binaryName);
   let staging;
+  let outcome;
   try {
     const existing = fs19.lstatSync(bin, { throwIfNoEntry: false });
     if (existing) {
       if (!fs19.statSync(bin).isFile()) throw new Error(`El destino Engram no es un archivo: ${bin}`);
       fs19.accessSync(bin, platform === "win32" ? fs19.constants.F_OK : fs19.constants.X_OK);
-      return { ok: true, bin };
-    }
-    const key = `${platform === "win32" ? "windows" : platform}_${options.arch ?? process.arch}`;
-    const asset = engram_release_default.assets[key];
-    if (!asset) throw new Error(`Engram no dispone de un binario aprobado para ${key}.`);
-    const response = await (options.fetch ?? globalThis.fetch)(
-      `https://github.com/Gentleman-Programming/engram/releases/download/v${engram_release_default.version}/${asset.name}`,
-      { signal: AbortSignal.timeout(12e4) }
-    );
-    if (!response.ok || !response.body) throw new Error(`Descarga Engram fallida: HTTP ${response.status}.`);
-    const reader = response.body.getReader();
-    const chunks = [];
-    let size = 0;
-    try {
-      while (true) {
-        const chunk = await reader.read();
-        if (chunk.done) break;
-        size += chunk.value.byteLength;
-        if (size > asset.size) throw new Error("El tama\xF1o descargado de Engram supera el aprobado.");
-        chunks.push(chunk.value);
+      outcome = { ok: true, bin };
+    } else {
+      const fetchFn = options.fetch ?? globalThis.fetch;
+      let releaseRes;
+      try {
+        releaseRes = await fetchLatestGithubRelease(ENGRAM_REPO, fetchFn);
+      } catch (error) {
+        const cause = error instanceof Error ? error.message : String(error);
+        throw new Error(
+          `Engram: error de red al consultar los metadatos del release (latest): ${cause}. Reintenta la instalaci\xF3n.`
+        );
       }
-    } finally {
-      await reader.cancel();
-    }
-    const archive = Buffer.concat(chunks);
-    if (size !== asset.size || createHash3("sha256").update(archive).digest("hex") !== asset.sha256) {
-      throw new Error("Engram: tama\xF1o o hash SHA-256 no coincide con el artefacto aprobado.");
-    }
-    fs19.mkdirSync(path25.dirname(bin), { recursive: true });
-    staging = fs19.mkdtempSync(path25.join(path25.dirname(bin), ".engram-install-"));
-    const archivePath = path25.join(staging, asset.name);
-    fs19.writeFileSync(archivePath, archive, { flag: "wx", mode: 384 });
-    const binary = execFileSync6(resolveTarBin(), ["-xOf", archivePath, binaryName], {
-      maxBuffer: 64 * 1024 * 1024,
-      timeout: 3e4,
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    if (binary.length === 0) throw new Error("El artefacto Engram no contiene un binario v\xE1lido.");
-    const stagedBin = path25.join(staging, binaryName);
-    fs19.writeFileSync(stagedBin, binary, { flag: "wx", mode: 493 });
-    fs19.linkSync(stagedBin, bin);
-    return { ok: true, bin };
+      if (!releaseRes.ok) {
+        if (releaseRes.status === 429) {
+          throw new Error(
+            "Engram: metadatos del release no disponibles (HTTP 429 rate limit en la consulta latest/metadatos). Espera y reintenta; define GH_TOKEN o inicia sesi\xF3n con gh auth login para elevar el l\xEDmite."
+          );
+        }
+        if (releaseRes.status === 403) {
+          throw new Error(
+            "Engram: metadatos del release no disponibles (HTTP 403 en la consulta latest/metadatos). Posible rate limit o falta de autenticaci\xF3n; define GH_TOKEN o usa gh auth login y reintenta."
+          );
+        }
+        throw new Error(
+          `Engram: metadatos del release no disponibles (HTTP ${releaseRes.status} en la consulta latest).`
+        );
+      }
+      let raw;
+      try {
+        raw = await releaseRes.json();
+      } catch (error) {
+        if (error instanceof SyntaxError) {
+          throw new Error("Engram: metadatos del release inv\xE1lidos: JSON no parseable.");
+        }
+        const cause = error instanceof Error ? error.message : String(error);
+        const hint = error instanceof Error && error.name === "AbortError" ? "interrumpida (red/cancelada)" : "de red";
+        throw new Error(
+          `Engram: lectura de metadatos del release ${hint}: ${cause}. Reintenta la instalaci\xF3n.`
+        );
+      }
+      if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new Error("Engram: metadatos del release inv\xE1lidos: se esperaba un objeto JSON.");
+      }
+      const releaseJson = raw;
+      const tag = releaseJson.tag_name;
+      if (typeof tag !== "string" || !STABLE_TAG.test(tag)) {
+        throw new Error(`Engram: tag del release inv\xE1lido: ${String(tag)}.`);
+      }
+      const version = tag.slice(1);
+      const expectedName = expectedEngramAssetName(version, platform, options.arch ?? process.arch);
+      if (expectedName === null) {
+        throw new Error(`Engram no dispone de un binario aprobado para ${platform}_${options.arch ?? process.arch}.`);
+      }
+      if (!Array.isArray(releaseJson.assets)) throw new Error("Engram: metadatos del release sin assets.");
+      const matches = releaseJson.assets.filter((asset2) => asset2?.name === expectedName);
+      if (matches.length !== 1) throw new Error("Engram: asset exacto ausente o ambiguo en el release.");
+      const asset = matches[0];
+      if (asset.state !== "uploaded") throw new Error("Engram: asset no publicado.");
+      if (!Number.isInteger(asset.size) || asset.size <= 0) {
+        throw new Error("Engram: tama\xF1o del asset inv\xE1lido.");
+      }
+      const expectedUrl = `${ENGRAM_DOWNLOAD_PREFIX}${tag}/${expectedName}`;
+      if (typeof asset.browser_download_url !== "string" || asset.browser_download_url !== expectedUrl) {
+        throw new Error("Engram: URL del asset no oficial.");
+      }
+      if (typeof asset.digest !== "string" || !DIGEST_RE.test(asset.digest)) {
+        throw new Error("Engram: digest del asset inv\xE1lido.");
+      }
+      const approvedSize = asset.size;
+      if (approvedSize > MAX_ENGRAM_ARCHIVE_BYTES) {
+        throw new Error(
+          `Engram: tama\xF1o del asset aprobado (${approvedSize} bytes) excede el l\xEDmite de 64 MiB (${MAX_ENGRAM_ARCHIVE_BYTES} bytes).`
+        );
+      }
+      const approvedSha = asset.digest.slice("sha256:".length);
+      const response = await fetchFn(asset.browser_download_url, {
+        signal: AbortSignal.timeout(12e4)
+      });
+      if (!response.ok || !response.body) throw new Error(`Descarga Engram fallida: HTTP ${response.status}.`);
+      const reader = response.body.getReader();
+      const chunks = [];
+      let size = 0;
+      let readError;
+      try {
+        try {
+          while (true) {
+            const chunk = await reader.read();
+            if (chunk.done) break;
+            size += chunk.value.byteLength;
+            if (size > approvedSize) throw new Error("El tama\xF1o descargado de Engram supera el aprobado.");
+            chunks.push(chunk.value);
+          }
+        } catch (error) {
+          readError = error;
+          throw error;
+        }
+      } finally {
+        try {
+          await reader.cancel();
+        } catch (cancelError) {
+          const cancelMsg = cancelError instanceof Error ? cancelError.message : String(cancelError);
+          if (readError !== void 0) {
+            const primaryMsg = readError instanceof Error ? readError.message : String(readError);
+            throw new Error(`${primaryMsg} (adem\xE1s fall\xF3 la cancelaci\xF3n del stream: ${cancelMsg})`);
+          }
+          throw cancelError;
+        }
+      }
+      const archive = Buffer.concat(chunks);
+      if (size !== approvedSize || createHash3("sha256").update(archive).digest("hex") !== approvedSha) {
+        throw new Error("Engram: tama\xF1o o hash SHA-256 no coincide con el artefacto aprobado.");
+      }
+      fs19.mkdirSync(path24.dirname(bin), { recursive: true });
+      staging = fs19.mkdtempSync(path24.join(path24.dirname(bin), ".engram-install-"));
+      const archivePath = path24.join(staging, expectedName);
+      fs19.writeFileSync(archivePath, archive, { flag: "wx", mode: 384 });
+      const binary = execFileSync6(resolveTarBin(), ["-xOf", archivePath, binaryName], {
+        maxBuffer: 64 * 1024 * 1024,
+        timeout: 3e4,
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+      if (binary.length === 0) throw new Error("El artefacto Engram no contiene un binario v\xE1lido.");
+      const stagedBin = path24.join(staging, binaryName);
+      fs19.writeFileSync(stagedBin, binary, { flag: "wx", mode: 493 });
+      fs19.linkSync(stagedBin, bin);
+      outcome = { ok: true, bin };
+    }
   } catch (error) {
-    return { ok: false, reason: error instanceof Error ? error.message : String(error) };
-  } finally {
-    if (staging) fs19.rmSync(staging, { recursive: true, force: true });
+    outcome = { ok: false, reason: error instanceof Error ? error.message : String(error) };
   }
+  if (staging !== void 0) {
+    try {
+      fs19.rmSync(staging, { recursive: true, force: true });
+    } catch (cleanupError) {
+      const cleanupMsg = cleanupError instanceof Error ? cleanupError.message : String(cleanupError);
+      if (outcome !== void 0 && outcome.ok) {
+        outcome = {
+          ok: true,
+          bin: outcome.bin,
+          warning: `Limpieza del directorio temporal ${staging} fallida tras instalar Engram: ${cleanupMsg}. El binario qued\xF3 instalado en ${outcome.bin}.`
+        };
+      } else if (outcome !== void 0 && !outcome.ok) {
+        outcome = { ok: false, reason: `${outcome.reason} (adem\xE1s fall\xF3 la limpieza temporal: ${cleanupMsg})` };
+      }
+    }
+  }
+  return outcome ?? { ok: false, reason: "Engram: instalaci\xF3n finaliz\xF3 sin resultado verificable." };
 }
 
 // src/cli.ts
@@ -6088,7 +6180,10 @@ async function resolveHostEngramForInstall(flags) {
   }
   try {
     const result = await installMissingEngram();
-    if (result.ok) return { ok: true, bin: result.bin };
+    if (result.ok) {
+      if (result.warning) p6.log.warn(result.warning);
+      return { ok: true, bin: result.bin };
+    }
     return { ok: false, message: `Engram: ${result.reason}` };
   } catch (error) {
     return { ok: false, message: `Engram: ${error instanceof Error ? error.message : String(error)}` };
@@ -6143,7 +6238,11 @@ async function runSelectedPi(options) {
         const answer = await p6.confirm({ message, initialValue });
         return !p6.isCancel(answer) && answer;
       },
-      installNative: async ({ version }) => updateEngram("Gentleman-Programming/engram", version)
+      installShared: async () => {
+        const result2 = await installMissingEngram();
+        if (result2.ok && result2.warning) p6.log.warn(result2.warning);
+        return result2;
+      }
     });
     if (requirement.kind !== "existing") {
       console.error(requirement.kind === "offer" ? "Pi: instalaci\xF3n cancelada; Engram sigue siendo obligatorio." : `Pi: ${requirement.reason}. ${requirement.remedy}`);