β.4 — One-lab provisioning slice (bundle + install + healthcheck)

[jack-champagne]

Phase: β — Schuster demo · Plan task: β.4 · Est: 5 pd · Suggested role: Dev B

What to build

Make a clean install self-contained (audit §4 Assumptions 1/3): bundle the solve script + template into the VSIX (no sibling-tree resolution), auto-instantiate the Julia project on install (kill the /tmp/amicode-spike-julia hard-fail), a timed clean-machine install runbook for one lab, and a healthcheck command. (Per-platform sysimage pipeline + multi-lab generalization → Phase 2.)

Acceptance criteria

• Clean-machine install (Julia + sysimage/project + vendored opencode + VSIX + one lab.toml) completes ≤ 60 min and amico-run finds its bundled script (no exit-64 on missing script). (S28, S29)
• healthcheck exits 0 when sysimage/julia + opencode /event SSE 200 + LLM creds + bundled script all resolve; non-zero with a precise message otherwise. (S28)

Blocked by: #1, #2, #3
Authoritative refs: plan §2 β.4 · PRD S28/S29

[jack-champagne]

Carried over from the #8 review (surfaced reviewing packages/extension/scripts/fetch_opencode.mjs) — a provisioning prerequisite for β.4 to handle:

The opencode fetcher is zero-npm-dep but not zero-host-dep: it shells out to tar (linux .tar.gz) and unzip (darwin .zip) to unpack the download. Same-platform builds are fine (tar is universal on Linux; unzip ships on macOS), so it's a non-issue for #8 itself. It only bites at cross-platform packaging time — e.g. building the macOS VSIX from a Linux host, where unzip may not be installed.

Two ways to handle it here in β.4 (either is fine):

1. Declare it — add tar/unzip to the clean-machine install runbook's host prereqs, and have the healthcheck assert they resolve (cheap, fits the existing AC).
2. Remove the dep — make the fetcher unpack natively in node (no shell-out), so it's genuinely host-dep-free.

Flagging so the packaging slice picks the binary up reliably on whatever host runs vsce package per target.

[Rchari1]

Implementation up at #10 (stacked on #9, its own PR — β.6 will be separate). Clean-machine path is self-contained: pinned Piccolo-1.19 julia project bundled + deterministic Pkg.instantiate, install.sh, exit-coded healthcheck (julia+Piccolo / opencode /event 200 / amico-run / Bedrock creds — all ✓ exit 0 on a dev machine), vsce packaging with a manifest assertion proving the VSIX ships amico-run + vendored opencode + template + julia, and a timed ≤60min RUNBOOK. No sysimage / no multi-lab schema (Phase 2).