fix(install): sync providers.json from ~/.claude.json when repo file is empty (#150)

* docs(407): create phase plan for issue 149 - manifest-driven CLI detection with user consent

- Plan to replace hardcoded CLI detection with providers.json manifest
- Add detect+prompt UX for user consent per CLI
- Remove all CCR preset references from install.js
- Single wave, 3 tasks, autonomous execution
- Requirements: ISSUE-149-01 through ISSUE-149-06

* feat(install): remove CCR references and clean up manifest-driven detection (issue 149)

* docs(quick-407): issue 149

* docs(quick-407): update verification status

* test(install): update provider tests for post-CCR manifest-driven detection

* req(quick-407): add INST-11

* feat(providers): add Daintree Z.AI + MiniMax presets via fan-out import, rename link-canopy → link-daintree

Import Daintree claude agent presets (Z.AI and MiniMax) into providers.json
using the existing fan-out import mechanism from /nf:link-canopy. This clones
claude-1 as vanilla and creates claude-z-ai and claude-minimax slots with
preset-specific env overrides (ANTHROPIC_BASE_URL, model mappings).

Also renames the skill from nf:link-canopy to nf:link-daintree to match
the product name.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(providers): remove Daintree presets from repo — secrets must stay local

The fan-out import wrote Z.AI and MiniMax preset entries (containing
ANTHROPIC_AUTH_TOKEN secrets) into the repo's bin/providers.json. These
are user-specific and should only exist in ~/.claude/nf/bin/providers.json
via /nf:link-daintree. Reverted providers.json to 5 vanilla providers and
restored test assertions to match.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* refactor(providers): empty providers.json in repo — populated at install time via /nf:link-daintree

The repo's bin/providers.json is now empty. Provider entries are
user-specific and get populated when the user runs /nf:link-daintree,
which discovers installed Daintree agents, vanilla CLIs, and presets.

This prevents shipping hardcoded provider configs (and potential secrets)
to all npm users. Tests use inline fixture data instead of reading
from providers.json.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* feat(install): PATH scan fallback when providers.json is empty

When the repo's providers.json is empty (no Daintree presets), install.js
now scans PATH for known CLIs (claude, codex, gemini, opencode, copilot)
using the existing resolveCli helper — no Daintree required for vanilla install.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(install): sync providers.json from ~/.claude.json when repo file is empty

- When bin/providers.json is empty (issue 149 convention), ensureMcpSlotsFromProviders()
  now syncs slots from ~/.claude.json MCP servers + PATH scan fallback
- KNOWN_CLI_PREFIXES filter excludes generic MCPs like canopy/sentry
- Fan-out slots (claude-z-ai, claude-minimax) from /nf:link-daintree are included
- Also fix River ML venv creation order — create venv BEFORE checking import
- Update nForma.test.cjs and provider-mapping.test.cjs to use FIXTURE_PROVIDERS
  instead of reading empty bin/providers.json directly

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix: resolve merge conflict markers in formal model registry and related JSON files

Resolving conflict markers left in .planning/ files after the merge:
- .planning/formal/model-registry.json (restored clean version from 7bd1b00)
- .planning/formal/solve-state.json (6 conflicts resolved)
- .planning/formal/proximity-index.json (1 conflict resolved)
- .planning/formal/evidence/doc-claims.json (3 conflicts resolved)
- .planning/formal/solve-trend.jsonl (1 conflict resolved)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(formal): give max_retries a safe default value in oauth-rotation.pm

PRISM requires all constants to be defined before model checking. The
max_retries constant was declared without a default, relying entirely on
run-oauth-rotation-prism.cjs to inject it via -const. When the runner is
invoked without -const (e.g. in CI's formal-verify pipeline that calls
the script directly), PRISM fails with "Undefined constant max_retries".

Fix: initialize max_retries = 3 as the safe default (matches the legacy
gemini-1 config). The runner still overrides it live from providers.json
when available.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

---------

Co-authored-by: jobordu <jonathan@jonathanborduas.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

Author: 3 people

.planning/STATE.md

@@ -42,6 +42,7 @@ See: .planning/PROJECT.md
 | 404 | Build nf:debug autonomy benchmark with graded difficulty stubs, fix-cycle runner, and standalone scorer | 2026-04-17 | 27ad207d | Verified | [404-build-nf-debug-autonomy-benchmark-with-g](.planning/quick/404-build-nf-debug-autonomy-benchmark-with-g/) |
 | 405 | Implement PR merge-readiness autopilot script (issue #136) | 2026-04-30 | c86519ab | Verified | [405-work-on-issue-136](./quick/405-work-on-issue-136/) |
 | 405 | Bidirectional fleet sync: Canopy presets <-> nForma providers (issue 138) | 2026-05-01 | fc2a0e25 | Needs Review | [405-bidirectional-fleet-sync-canopy-presets-](./quick/405-bidirectional-fleet-sync-canopy-presets-/) |
+| 407 | Cleanup manifest-driven CLI detection (issue 149) | 2026-05-01 | 3f19b4c7 | Verified | [407-issue-149](./quick/407-issue-149/) |
 
 ## Session Log
 
@@ -66,4 +67,4 @@ See: .planning/PROJECT.md
 - 2026-04-10 - Completed quick task 388: Sync baseline requirements and audit solver-generated formal models and test stubs
 - 2026-04-11 - Completed quick task 389: Fix shell-prompt-quorum-dedup.als Alloy assertion failure
 
-Last activity: 2026-05-01 - Completed quick task 405: Bidirectional fleet sync (issue 138)
+Last activity: 2026-05-01 - Completed quick task 407: Cleanup manifest-driven CLI detection (issue 149)

.planning/formal/evidence/doc-claims.json

@@ -1,14 +1,4 @@
 {
-<<<<<<< HEAD
-  "generated": "2026-04-20T18:19:34.054Z",
-  "total_claims_checked": 188,
-  "doc_files_scanned": 8,
-  "raw_broken_count": 49,
-  "weighted_residual": 96,
-  "suppressed_fp_count": 9,
-  "category_breakdown": {
-    "user": 47,
-=======
   "generated": "2026-04-16T21:04:43.632Z",
   "total_claims_checked": 188,
   "doc_files_scanned": 8,
@@ -17,7 +7,6 @@
   "suppressed_fp_count": 7,
   "category_breakdown": {
     "user": 56,
->>>>>>> origin/main
     "developer": 2
   },
   "broken_claims": [
@@ -41,18 +30,6 @@
     },
     {
       "doc_file": "README.md",
-<<<<<<< HEAD
-      "line": 685,
-      "type": "file_path",
-      "value": "gates/gate-a-grounding.json",
-      "reason": "file not found",
-      "category": "user",
-      "weight": 2
-    },
-    {
-      "doc_file": "README.md",
-=======
->>>>>>> origin/main
       "line": 964,
       "type": "dependency",
       "value": "api-and-interface-design",
@@ -79,18 +56,6 @@
       "weight": 1
     },
     {
-<<<<<<< HEAD
-      "doc_file": "docs/dev/requirements-coverage.md",
-      "line": 1997,
-      "type": "file_path",
-      "value": ".planning/formal/promotion-changelog.json",
-      "reason": "file not found",
-      "category": "developer",
-      "weight": 1
-    },
-    {
-=======
->>>>>>> origin/main
       "doc_file": "docs/USER-GUIDE.md",
       "line": 362,
       "type": "dependency",
@@ -569,3 +534,4 @@
     }
   ]
 }
+