devsync 0.11.0__tar.gz → 0.12.0__tar.gz

{devsync-0.11.0 → devsync-0.12.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsync
-Version: 0.11.0
+Version: 0.12.0
 Summary: Distribute and sync dev tool configurations across teams
 Author-email: Troy Larson <troy@calvinware.com>
 License: MIT License
@@ -25,6 +25,7 @@ Requires-Dist: pyyaml>=6.0
 Requires-Dist: textual>=6.0.0
 Requires-Dist: GitPython>=3.1.45
 Requires-Dist: python-dotenv>=1.0.0
+Requires-Dist: httpx>=0.27.0
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
 Requires-Dist: pytest-cov>=5.0.0; extra == "dev"
@@ -40,7 +41,7 @@ Requires-Dist: types-PyYAML>=6.0.12.20240808; extra == "dev"
 
 # DevSync
 
-**Distribute and sync AI coding assistant configurations across your team**
+**AI-powered config distribution for AI coding assistants**
 
 [![CI](https://github.com/troylar/devsync/actions/workflows/ci.yml/badge.svg)](https://github.com/troylar/devsync/actions/workflows/ci.yml)
 [![Docs](https://readthedocs.org/projects/devsync/badge/?version=latest)](https://devsync.readthedocs.io)
@@ -55,31 +56,58 @@ Requires-Dist: types-PyYAML>=6.0.12.20240808; extra == "dev"
 
 ---
 
-DevSync is a CLI tool for managing AI coding assistant instructions, MCP servers, and configuration packages across 22+ IDEs. Download shared configs from Git repos, install them to any tool, and keep your team aligned.
+DevSync uses LLM intelligence to extract coding practices from projects and adapt them to recipients' existing setups -- across 23+ AI coding assistants. Two commands: `extract` and `install`.
 
 ## Quick Start
 
 ```bash
 pip install devsync
 
+# One-time: configure your LLM provider
+devsync setup
+
 # Check detected AI tools
 devsync tools
 
-# Download instructions from a Git repo
-devsync download --from github.com/company/standards --as company
+# Extract practices from a project
+devsync extract
+
+# Install a package into another project
+devsync install ./team-standards
 
-# Install interactively
-devsync install
+# Install from Git
+devsync install https://github.com/company/standards
 ```
 
+No API key? DevSync works without one -- it falls back to file-copy mode. Add `--no-ai` to any command to force this.
+
 ## Features
 
-- **Instructions** -- share coding standards, style guides, and AI prompts from Git repos
-- **MCP Servers** -- distribute Model Context Protocol configs with secure credential management
-- **Packages** -- bundle instructions, MCP servers, hooks, commands, and resources together
-- **23 IDE integrations** -- Claude Code, Cursor, Windsurf, GitHub Copilot, and 19 more
-- **Templates** -- IDE-targeted content with slash commands, hooks, and backups
-- **Conflict resolution** -- skip, overwrite, or rename when files already exist
+- **AI-powered extraction** -- LLM reads your project's rules, MCP configs, and commands to produce abstract practice declarations
+- **AI-powered installation** -- LLM adapts incoming practices to your existing setup with intelligent merging
+- **23+ AI tool integrations** -- Claude Code, Cursor, Windsurf, GitHub Copilot, Kiro, Roo Code, Cline, Codex, and more
+- **MCP credential handling** -- prompts for credentials at install time, never stores them in repos
+- **v1 backward compatibility** -- old `ai-config-kit-package.yaml` packages still install via file-copy
+- **Graceful degradation** -- works without an API key, `--no-ai` flag for explicit file-copy mode
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `devsync setup` | Configure LLM provider (Anthropic, OpenAI, OpenRouter) |
+| `devsync tools` | Detect installed AI coding tools |
+| `devsync extract` | Extract practices from current project into a shareable package |
+| `devsync install <source>` | Install a package with AI-powered adaptation |
+| `devsync list` | Show installed packages |
+| `devsync uninstall <name>` | Remove an installed package |
+
+## Migrating from v1
+
+If you have v1 packages (`ai-config-kit-package.yaml`), they still work with `devsync install`. To upgrade them to v2 format:
+
+```bash
+devsync extract --upgrade ./old-package
+```
 
 ## Documentation
 

{devsync-0.11.0 → devsync-0.12.0}/README.md

@@ -2,7 +2,7 @@
 
 # DevSync
 
-**Distribute and sync AI coding assistant configurations across your team**
+**AI-powered config distribution for AI coding assistants**
 
 [![CI](https://github.com/troylar/devsync/actions/workflows/ci.yml/badge.svg)](https://github.com/troylar/devsync/actions/workflows/ci.yml)
 [![Docs](https://readthedocs.org/projects/devsync/badge/?version=latest)](https://devsync.readthedocs.io)
@@ -17,31 +17,58 @@
 
 ---
 
-DevSync is a CLI tool for managing AI coding assistant instructions, MCP servers, and configuration packages across 22+ IDEs. Download shared configs from Git repos, install them to any tool, and keep your team aligned.
+DevSync uses LLM intelligence to extract coding practices from projects and adapt them to recipients' existing setups -- across 23+ AI coding assistants. Two commands: `extract` and `install`.
 
 ## Quick Start
 
 ```bash
 pip install devsync
 
+# One-time: configure your LLM provider
+devsync setup
+
 # Check detected AI tools
 devsync tools
 
-# Download instructions from a Git repo
-devsync download --from github.com/company/standards --as company
+# Extract practices from a project
+devsync extract
+
+# Install a package into another project
+devsync install ./team-standards
 
-# Install interactively
-devsync install
+# Install from Git
+devsync install https://github.com/company/standards
 ```
 
+No API key? DevSync works without one -- it falls back to file-copy mode. Add `--no-ai` to any command to force this.
+
 ## Features
 
-- **Instructions** -- share coding standards, style guides, and AI prompts from Git repos
-- **MCP Servers** -- distribute Model Context Protocol configs with secure credential management
-- **Packages** -- bundle instructions, MCP servers, hooks, commands, and resources together
-- **23 IDE integrations** -- Claude Code, Cursor, Windsurf, GitHub Copilot, and 19 more
-- **Templates** -- IDE-targeted content with slash commands, hooks, and backups
-- **Conflict resolution** -- skip, overwrite, or rename when files already exist
+- **AI-powered extraction** -- LLM reads your project's rules, MCP configs, and commands to produce abstract practice declarations
+- **AI-powered installation** -- LLM adapts incoming practices to your existing setup with intelligent merging
+- **23+ AI tool integrations** -- Claude Code, Cursor, Windsurf, GitHub Copilot, Kiro, Roo Code, Cline, Codex, and more
+- **MCP credential handling** -- prompts for credentials at install time, never stores them in repos
+- **v1 backward compatibility** -- old `ai-config-kit-package.yaml` packages still install via file-copy
+- **Graceful degradation** -- works without an API key, `--no-ai` flag for explicit file-copy mode
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `devsync setup` | Configure LLM provider (Anthropic, OpenAI, OpenRouter) |
+| `devsync tools` | Detect installed AI coding tools |
+| `devsync extract` | Extract practices from current project into a shareable package |
+| `devsync install <source>` | Install a package with AI-powered adaptation |
+| `devsync list` | Show installed packages |
+| `devsync uninstall <name>` | Remove an installed package |
+
+## Migrating from v1
+
+If you have v1 packages (`ai-config-kit-package.yaml`), they still work with `devsync install`. To upgrade them to v2 format:
+
+```bash
+devsync extract --upgrade ./old-package
+```
 
 ## Documentation
 

devsync-0.12.0/devsync/cli/extract.py

@@ -0,0 +1,232 @@
+"""Extract command — reads project configs and produces a shareable package."""
+
+import shutil
+from pathlib import Path
+from typing import Optional
+
+from rich.console import Console
+from rich.progress import Progress, SpinnerColumn, TextColumn
+
+from devsync.core.extractor import PracticeExtractor
+from devsync.core.package_manifest_v2 import PackageManifestV2, detect_manifest_format, parse_manifest
+from devsync.llm.config import load_config
+from devsync.llm.provider import resolve_provider
+
+console = Console()
+
+
+def extract_command(
+    output: Optional[str] = None,
+    name: Optional[str] = None,
+    no_ai: bool = False,
+    project_dir: Optional[str] = None,
+    upgrade: Optional[str] = None,
+) -> int:
+    """Extract practices from the current project into a shareable package.
+
+    Args:
+        output: Output directory for the package. Defaults to './devsync-package/'.
+        name: Package name. Defaults to project directory name.
+        no_ai: Force file-copy mode (no LLM calls).
+        project_dir: Project directory to extract from. Defaults to cwd.
+        upgrade: Path to a v1 package to convert to v2 format.
+
+    Returns:
+        Exit code (0 = success).
+    """
+    if upgrade:
+        return _upgrade_v1_package(upgrade, output=output, name=name, no_ai=no_ai)
+
+    project_path = Path(project_dir) if project_dir else Path.cwd()
+    if not project_path.is_dir():
+        console.print(f"[red]Not a directory: {project_path}[/red]")
+        return 1
+
+    package_name = name or project_path.name
+    output_path = Path(output) if output else project_path / "devsync-package"
+
+    llm = None
+    if not no_ai:
+        config = load_config()
+        llm = resolve_provider(
+            preferred_provider=config.provider,
+            preferred_model=config.model,
+        )
+        if not llm:
+            console.print("[yellow]No LLM API key found. Using file-copy mode.[/yellow]")
+            console.print("Run [cyan]devsync setup[/cyan] to configure AI features.\n")
+
+    extractor = PracticeExtractor(llm_provider=llm)
+
+    with Progress(
+        SpinnerColumn(),
+        TextColumn("[progress.description]{task.description}"),
+        console=console,
+    ) as progress:
+        task = progress.add_task("Scanning project...", total=None)
+        result = extractor.extract(project_path)
+        progress.update(task, description="Building package...")
+
+    output_path.mkdir(parents=True, exist_ok=True)
+
+    manifest = PackageManifestV2(
+        format_version="2.0",
+        name=package_name,
+        version="1.0.0",
+        description=f"Extracted from {project_path.name}",
+        practices=result.practices,
+        mcp_servers=result.mcp_servers,
+    )
+
+    if not result.ai_powered:
+        _copy_source_files(project_path, output_path, result.source_files)
+        components: dict = {}
+        if result.source_files:
+            from devsync.core.package_manifest_v2 import ComponentRef
+
+            components["instructions"] = [
+                ComponentRef(
+                    name=Path(f).stem,
+                    file=f"instructions/{Path(f).name}",
+                )
+                for f in result.source_files
+            ]
+        manifest.components = components
+
+    manifest_path = output_path / "devsync-package.yaml"
+    manifest_path.write_text(manifest.to_yaml())
+
+    mode = "[green]AI-powered[/green]" if result.ai_powered else "[yellow]file-copy[/yellow]"
+    console.print(f"\nExtracted ({mode}):")
+    console.print(f"  Practices: {len(result.practices)}")
+    console.print(f"  MCP servers: {len(result.mcp_servers)}")
+    console.print(f"  Source files: {len(result.source_files)}")
+    console.print(f"\nPackage written to: [cyan]{output_path}[/cyan]")
+    return 0
+
+
+def _upgrade_v1_package(
+    v1_path: str,
+    output: Optional[str] = None,
+    name: Optional[str] = None,
+    no_ai: bool = False,
+) -> int:
+    """Convert a v1 package to v2 format.
+
+    Reads the v1 manifest, extracts instruction files, and produces a v2
+    package with practice declarations (AI-powered) or literal content (no-AI).
+
+    Args:
+        v1_path: Path to the v1 package directory.
+        output: Output directory for the v2 package.
+        name: Package name override.
+        no_ai: Disable AI-powered conversion.
+
+    Returns:
+        Exit code (0 = success).
+    """
+    package_path = Path(v1_path).expanduser()
+    if not package_path.is_dir():
+        console.print(f"[red]Not a directory: {package_path}[/red]")
+        return 1
+
+    fmt = detect_manifest_format(package_path)
+    if not fmt:
+        console.print(f"[red]No manifest found in {package_path}[/red]")
+        console.print("Expected: ai-config-kit-package.yaml or devsync-package.yaml")
+        return 1
+
+    if fmt == "v2":
+        console.print("[yellow]Package is already v2 format. No upgrade needed.[/yellow]")
+        return 0
+
+    v1_manifest = parse_manifest(package_path)
+    console.print(f"\n[bold]Upgrading v1 package: {v1_manifest.name} v{v1_manifest.version}[/bold]")
+
+    instruction_files: dict[str, str] = {}
+    for comp_type, refs in v1_manifest.components.items():
+        if comp_type != "instructions":
+            continue
+        for ref in refs:
+            src_file = (package_path / ref.file).resolve()
+            try:
+                src_file.relative_to(package_path.resolve())
+            except ValueError:
+                console.print(f"  [red]Rejected (path traversal): {ref.file}[/red]")
+                continue
+            if src_file.exists() and src_file.stat().st_size < 100_000:
+                try:
+                    content = src_file.read_text(encoding="utf-8")
+                    instruction_files[ref.file] = content
+                except (OSError, UnicodeDecodeError):
+                    console.print(f"  [yellow]Could not read: {ref.file}[/yellow]")
+
+    if not instruction_files:
+        console.print("[red]No instruction files found in v1 package.[/red]")
+        return 1
+
+    llm = None
+    if not no_ai:
+        config = load_config()
+        llm = resolve_provider(preferred_provider=config.provider, preferred_model=config.model)
+        if not llm:
+            console.print("[yellow]No LLM API key found. Using file-copy mode.[/yellow]")
+
+    extractor = PracticeExtractor(llm_provider=llm)
+
+    with Progress(
+        SpinnerColumn(),
+        TextColumn("[progress.description]{task.description}"),
+        console=console,
+    ) as progress:
+        task = progress.add_task("Converting to v2...", total=None)
+        if llm:
+            result = extractor._extract_with_ai(instruction_files, [])
+        else:
+            result = extractor._extract_without_ai(instruction_files, [])
+        progress.update(task, description="Building v2 package...")
+
+    output_path = Path(output) if output else package_path.parent / f"{package_path.name}-v2"
+    output_path.mkdir(parents=True, exist_ok=True)
+
+    package_name = name or v1_manifest.name
+
+    v2_manifest = PackageManifestV2(
+        format_version="2.0",
+        name=package_name,
+        version=v1_manifest.version,
+        description=v1_manifest.description or f"Upgraded from v1: {v1_manifest.name}",
+        practices=result.practices,
+        mcp_servers=result.mcp_servers,
+    )
+
+    if not result.ai_powered:
+        _copy_source_files(package_path, output_path, list(instruction_files.keys()))
+        from devsync.core.package_manifest_v2 import ComponentRef
+
+        v2_manifest.components = {
+            "instructions": [
+                ComponentRef(name=Path(f).stem, file=f"instructions/{Path(f).name}") for f in instruction_files
+            ]
+        }
+
+    manifest_path = output_path / "devsync-package.yaml"
+    manifest_path.write_text(v2_manifest.to_yaml())
+
+    mode = "[green]AI-powered[/green]" if result.ai_powered else "[yellow]file-copy[/yellow]"
+    console.print(f"\nUpgraded ({mode}):")
+    console.print(f"  Practices: {len(result.practices)}")
+    console.print(f"  Source files: {len(instruction_files)}")
+    console.print(f"\nv2 package written to: [cyan]{output_path}[/cyan]")
+    return 0
+
+
+def _copy_source_files(project_path: Path, output_path: Path, source_files: list[str]) -> None:
+    """Copy source instruction files to the output package directory."""
+    instructions_dir = output_path / "instructions"
+    instructions_dir.mkdir(parents=True, exist_ok=True)
+    for rel_path in source_files:
+        src = project_path / rel_path
+        if src.exists():
+            dest = instructions_dir / Path(rel_path).name
+            shutil.copy2(str(src), str(dest))

devsync-0.12.0/devsync/cli/install_v2.py

@@ -0,0 +1,274 @@
+"""V2 install command — AI-powered package installation."""
+
+import shutil
+import tempfile
+from pathlib import Path
+from typing import Optional
+
+from rich.console import Console
+from rich.prompt import Confirm
+from rich.table import Table
+
+from devsync.core.adapter import PracticeAdapter
+from devsync.core.mcp_credential_prompter import build_mcp_config, prompt_mcp_credentials
+from devsync.core.package_manifest_v2 import PackageManifestV2, detect_manifest_format, parse_manifest
+from devsync.llm.config import load_config
+from devsync.llm.provider import resolve_provider
+from devsync.llm.response_models import AdaptationPlan
+from devsync.utils.project import find_project_root
+
+console = Console()
+
+
+def install_v2_command(
+    source: str,
+    tool: Optional[list[str]] = None,
+    no_ai: bool = False,
+    conflict: str = "prompt",
+    project_dir: Optional[str] = None,
+) -> int:
+    """Install a package into the current project.
+
+    Accepts Git URLs, local paths, or package directories.
+
+    Args:
+        source: Package source (Git URL, local path, or directory).
+        tool: Target AI tool(s). Auto-detects if not specified.
+        no_ai: Disable AI-powered adaptation.
+        conflict: Conflict strategy ('prompt', 'skip', 'overwrite', 'rename').
+        project_dir: Target project directory. Defaults to cwd.
+
+    Returns:
+        Exit code (0 = success).
+    """
+    project_path = Path(project_dir) if project_dir else Path.cwd()
+    project_root = find_project_root(project_path)
+    if not project_root:
+        project_root = project_path
+
+    cloned_tmp: Path | None = None
+    package_path = _resolve_source(source)
+    if not package_path:
+        console.print(f"[red]Could not resolve source: {source}[/red]")
+        return 1
+
+    # Track if we cloned a temp directory so we can clean it up
+    if source.startswith(("http://", "https://", "git@", "github.com")):
+        cloned_tmp = package_path
+
+    try:
+        fmt = detect_manifest_format(package_path)
+        if not fmt:
+            console.print(f"[red]No manifest found in {package_path}[/red]")
+            console.print("Expected: devsync-package.yaml or ai-config-kit-package.yaml")
+            return 1
+
+        manifest = parse_manifest(package_path)
+        target_tools = _resolve_tools(tool)
+
+        console.print(f"\n[bold]Installing: {manifest.name} v{manifest.version}[/bold]")
+        console.print(f"  {manifest.description}")
+        console.print(f"  Format: {'v2 (AI-native)' if manifest.is_v2 else 'v1 (file-copy)'}")
+        console.print(f"  Tools: {', '.join(target_tools)}")
+
+        if manifest.is_v2 and manifest.has_practices and not no_ai:
+            return _install_v2_ai(manifest, project_root, target_tools)
+        return _install_v2_fallback(manifest, package_path, project_root, target_tools, conflict)
+    finally:
+        if cloned_tmp and cloned_tmp.exists():
+            shutil.rmtree(cloned_tmp, ignore_errors=True)
+
+
+def _resolve_source(source: str) -> Optional[Path]:
+    """Resolve a source string to a local package directory."""
+    source_path = Path(source).expanduser()
+    if source_path.is_dir():
+        return source_path
+
+    if source.startswith(("http://", "https://", "git@", "github.com")):
+        return _clone_source(source)
+
+    if source_path.exists():
+        return source_path
+
+    return None
+
+
+def _clone_source(url: str) -> Optional[Path]:
+    """Clone a Git repository to a temp directory."""
+    try:
+        from devsync.core.git_operations import GitOperations
+
+        tmp_dir = Path(tempfile.mkdtemp(prefix="devsync-"))
+        GitOperations.clone_repository(url, tmp_dir)
+        return tmp_dir
+    except Exception as e:
+        console.print(f"[red]Failed to clone {url}: {e}[/red]")
+        return None
+
+
+def _resolve_tools(tool_names: Optional[list[str]]) -> list[str]:
+    """Resolve target tools (auto-detect if not specified)."""
+    if tool_names:
+        return tool_names
+
+    from devsync.ai_tools.detector import get_detector
+
+    detected = get_detector().detect_installed_tools()
+    if detected:
+        return [t.tool_type.value for t in detected]
+
+    return ["claude"]
+
+
+def _install_v2_ai(
+    manifest: PackageManifestV2,
+    project_root: Path,
+    target_tools: list[str],
+) -> int:
+    """Install using AI-powered adaptation."""
+    config = load_config()
+    llm = resolve_provider(preferred_provider=config.provider, preferred_model=config.model)
+
+    adapter = PracticeAdapter(llm_provider=llm)
+    plan = adapter.adapt(manifest.practices, project_root, target_tools)
+
+    _display_plan(plan)
+
+    if not Confirm.ask("\nProceed with installation?", default=True):
+        console.print("[yellow]Installation cancelled.[/yellow]")
+        return 0
+
+    _execute_plan(plan, project_root, target_tools)
+
+    if manifest.mcp_servers:
+        _install_mcp_servers(manifest, project_root)
+
+    console.print(f"\n[green]Installed {manifest.name} successfully.[/green]")
+    return 0
+
+
+def _install_v2_fallback(
+    manifest: PackageManifestV2,
+    package_path: Path,
+    project_root: Path,
+    target_tools: list[str],
+    conflict: str,
+) -> int:
+    """Install using file-copy mode (v1 compat or --no-ai)."""
+    installed_count = 0
+
+    for component_type, refs in manifest.components.items():
+        if component_type != "instructions":
+            continue
+        for ref in refs:
+            src_file = (package_path / ref.file).resolve()
+            try:
+                src_file.relative_to(package_path.resolve())
+            except ValueError:
+                console.print(f"  [red]Rejected (path traversal): {ref.file}[/red]")
+                continue
+            if not src_file.exists():
+                console.print(f"  [yellow]Missing: {ref.file}[/yellow]")
+                continue
+
+            content = src_file.read_text(encoding="utf-8")
+            for tool_name in target_tools:
+                dest = _get_tool_instruction_path(tool_name, project_root, ref.name)
+                if not dest:
+                    continue
+                if dest.exists():
+                    if conflict == "skip":
+                        console.print(f"  [dim]Skipped (exists): {ref.name} → {dest.relative_to(project_root)}[/dim]")
+                        continue
+                    elif conflict == "overwrite":
+                        dest.write_text(content, encoding="utf-8")
+                        installed_count += 1
+                        console.print(f"  Overwritten: {ref.name} → {dest.relative_to(project_root)}")
+                    elif conflict == "rename":
+                        suffix = 1
+                        renamed = dest.with_stem(f"{dest.stem}-{suffix}")
+                        while renamed.exists():
+                            suffix += 1
+                            renamed = dest.with_stem(f"{dest.stem}-{suffix}")
+                        renamed.parent.mkdir(parents=True, exist_ok=True)
+                        renamed.write_text(content, encoding="utf-8")
+                        installed_count += 1
+                        console.print(f"  Installed (renamed): {ref.name} → {renamed.relative_to(project_root)}")
+                    else:
+                        rel = dest.relative_to(project_root)
+                        console.print(f"  [yellow]Exists: {ref.name} → {rel} (skipped)[/yellow]")
+                else:
+                    dest.parent.mkdir(parents=True, exist_ok=True)
+                    dest.write_text(content, encoding="utf-8")
+                    installed_count += 1
+                    console.print(f"  Installed: {ref.name} → {dest.relative_to(project_root)}")
+
+    if manifest.mcp_servers:
+        _install_mcp_servers(manifest, project_root)
+
+    console.print(f"\n[green]Installed {installed_count} instructions.[/green]")
+    return 0
+
+
+def _display_plan(plan: AdaptationPlan) -> None:
+    """Display the adaptation plan for user review."""
+    table = Table(title="Adaptation Plan")
+    table.add_column("Practice", style="cyan")
+    table.add_column("Action", style="bold")
+    table.add_column("Reason")
+
+    for action in plan.actions:
+        style = {"install": "green", "merge": "yellow", "skip": "dim"}.get(action.action, "")
+        table.add_row(action.practice_name, f"[{style}]{action.action}[/{style}]", action.reason)
+
+    console.print(table)
+    console.print(f"\n  Install: {len(plan.installs)} | Merge: {len(plan.merges)} | Skip: {len(plan.skips)}")
+
+
+def _execute_plan(plan: AdaptationPlan, project_root: Path, target_tools: list[str]) -> None:
+    """Execute the adaptation plan — write files to tool-specific directories."""
+    for action in plan.actions:
+        if action.action == "skip":
+            continue
+        for tool_name in target_tools:
+            dest = _get_tool_instruction_path(tool_name, project_root, action.practice_name)
+            if dest:
+                dest.parent.mkdir(parents=True, exist_ok=True)
+                dest.write_text(action.content, encoding="utf-8")
+                console.print(f"  Installed: {action.practice_name} → {dest.relative_to(project_root)}")
+
+
+def _get_tool_instruction_path(tool_name: str, project_root: Path, instruction_name: str) -> Optional[Path]:
+    """Get the file path for an instruction in a specific tool."""
+    if ".." in instruction_name or "/" in instruction_name or "\\" in instruction_name:
+        return None
+    tool_paths: dict[str, tuple[str, str]] = {
+        "claude": (".claude/rules", ".md"),
+        "cursor": (".cursor/rules", ".mdc"),
+        "windsurf": (".windsurf/rules", ".md"),
+        "copilot": (".github/instructions", ".md"),
+        "kiro": (".kiro/steering", ".md"),
+        "cline": (".clinerules", ".md"),
+        "roo": (".roo/rules", ".md"),
+    }
+    if tool_name not in tool_paths:
+        return None
+    dir_name, ext = tool_paths[tool_name]
+    return project_root / dir_name / f"{instruction_name}{ext}"
+
+
+def _install_mcp_servers(manifest: PackageManifestV2, project_root: Path) -> None:
+    """Install MCP server configurations with credential prompting."""
+    servers_with_creds = [s for s in manifest.mcp_servers if s.credentials]
+    if servers_with_creds:
+        env_path = project_root / ".devsync" / ".env"
+        credentials = prompt_mcp_credentials(servers_with_creds, env_path=env_path)
+
+        for server in manifest.mcp_servers:
+            server_creds = credentials.get(server.name, {})
+            build_mcp_config(server, server_creds)
+            console.print(f"  MCP: {server.name} configured")
+    else:
+        for server in manifest.mcp_servers:
+            console.print(f"  MCP: {server.name} (no credentials needed)")