Module provisioner 

Provisioner (RFC-041 Phase 4).

Executes SkillInstallSpecs as a privileged kernel operation — the same pattern the clawhub/skills_sh installers use (tokio::process::Command directly), NOT the agent-sandbox ExecTool. Per D8, ExecTool’s allowlist and metacharacter blocking defend against untrusted agent command strings; here the command is kernel-constructed from a trusted registry spec, so those defenses are redundant. The security gate is user consent at the API layer

• audit logging + registry-derived command (no free text → no injection).

Covers the package-manager install kinds (brew/node/bun/cargo/ pip/go/uv). The download kind fetches an archive and extracts it.

Structs

InstallOutput

Outcome of an install attempt.

Functions

build_command

Build the command line for a single spec (no spawn). Used by dry-run + tests.

install

Run the first applicable spec from a list (the first whose kind’s manager is available, else the first spec). Package-manager specs spawn directly; download specs fetch+extract.

install_download

Fetch a download spec’s archive and extract it into target_dir.

install_manager

Run a package-manager install spec. Spawns the command directly (D8).