Module install 

Install / remove logic: wire an addon’s MCP server into the global gateway and record it in the installed store.

Pure state mutation — any interactive confirmation belongs in the CLI layer (so this stays unit-testable). Installation goes through Config::update_global, the canonical safe-persistence entry point: it reads only the global config (no project-local merge) and refuses to clobber an unparseable file.

Structs

InstallOutcome

Result of a successful install.

RemoveOutcome

Result of a successful remove.

Functions

install

Wire manifest into the global gateway and record it in the store.

preflight

Pure pre-persist gate shared by install and the CLI. Runs every check that can reject an addon before anything is wired or any health probe spawns a process — validation, runnable endpoint, kill-switch, the org install policy, and the capability-coherence gate (#1080) — and returns the resolved GatewayServer so the caller can reuse it. Pure + deterministic.

remove

Unwire an installed addon: drop its gateway server and store entry.