Stacked on #12 (which is stacked on #11). Merge order: #11 → #12 → this. GitHub retargets each to main as its base merges.

Final slice of the installer migration: agent plugin/extension install moves out of install.sh into the binary.

What changed

• src/setup.rs embeds the plugin sources with include_str!, so plugin install now works under curl | bash — where there's no local checkout to copy from and the old shell path silently skipped ("Plugin source not found"). New flags: --install-opencode, --offer-opencode, --install-pi, --offer-pi. Detection, the y/N prompt (read from /dev/tty in-process, so it can't consume the piped script), and the write are all Rust and unit-tested.
• install.sh shrinks from 365 → 173 lines. Gone: plugin-source resolution, the copy helpers, agent detection, the TTY_IN/resolve_tty_in machinery, and the last bash read prompts. It's now a bootstrap — detect platform, download binary, set PATH — that hands off to code-trace setup for every configuration step.
• Tests — 5 new unit tests (embedded sources present, plugin paths, detection, install write) + 4 integration tests driving the real binary (install writes the embedded source and it byte-matches the repo file; offer skips cleanly when the agent isn't detected).

Verification

• cargo test (108 lib incl. 29 setup + 16 integration) and cargo clippy --all-targets clean.
• End to end through a piped curl | bash simulation with OpenCode present: the plugin is offered, installed from the embedded source, and the email prompt still works — all in one run.

Where this leaves install.sh

It's now a thin bootstrap. Every fragile, growing piece — JSON hook editing, config writing, prompts, plugin install — lives in the tested binary. python3 is gone; no interpreter is required. The three prompt/read bugs we chased earlier can't recur, because prompts run in a separate process reading /dev/tty rather than in a shell reading the piped script.

🤖 Generated with Claude Code