feat: install pinned native components with brigade setup (#368)

* docs: plan pinned component setup

Co-authored-by: Cursor <cursoragent@cursor.com>

* docs(setup): fix phase-355 executable spec defects

Replace impossible asset_bytes synthesis with fixture_payload-derived
digests, split Task 6 engine dry-run from Task 9 CLI wiring, and
standardize installed state on installed_at.

Co-authored-by: Cursor <cursoragent@cursor.com>

* docs(setup): align phase-355 helpers with manifest loader

Publish the full five-platform matrix in write_test_manifest, use owner/name
repository values, derive fixture bytes from runnable smoke stubs, and delegate
the smoke test runner to subprocess.run while recording argv.

Co-authored-by: Cursor <cursoragent@cursor.com>

* chore(components): publish graphtrail v0.4.0 manifest assets

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(components): add installed state schema v1

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(components): verify cache bytes and brigade version

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(components): download assets into digest cache

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(components): materialize managed executables safely

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(components): add post-install smoke suite

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(components): add setup dry-run planning

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat(components): install pinned native components

* feat(components): add setup rollback

* feat(cli): register brigade setup command

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(components): bound downloads and repair executable mode

Co-authored-by: Cursor <cursoragent@cursor.com>

* test(components): cover download hardening edge cases

Co-authored-by: Cursor <cursoragent@cursor.com>

* docs: refresh command inventory

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: solomonneas

docs/command-inventory.md

@@ -59,6 +59,7 @@ enabled: run `brigade extras on` once, or set `BRIGADE_EXTRAS=1`.
 - `brigade scrub`: 1 command path(s)
 - `brigade search`: 3 command path(s)
 - `brigade security`: 15 command path(s)
+- `brigade setup`: 1 command path(s)
 - `brigade skills`: 29 command path(s)
 - `brigade stations`: 3 command path(s)
 - `brigade status`: 1 command path(s)
@@ -432,6 +433,7 @@ enabled: run `brigade extras on` once, or set `BRIGADE_EXTRAS=1`.
 - `brigade security suppress`
 - `brigade security template-audit`
 - `brigade security unsuppress`
+- `brigade setup`
 - `brigade skills adapters init`
 - `brigade skills adapters list`
 - `brigade skills adapters show`

docs/phase-355-pinned-component-setup.md

@@ -31,6 +31,7 @@
     receipts as _receipts_group,
     daily as _daily_group,
     add as _add_group,
+    setup as _setup_group,
     stations as _stations_group,
     pantry as _pantry_group,
     evidence as _evidence_group,
@@ -129,6 +130,7 @@ def _build_parser() -> argparse.ArgumentParser:
     _receipts_group.register(sub)
     _daily_group.register(sub)
     _add_group.register(sub)
+    _setup_group.register(sub)
     _stations_group.register(sub)
     _evidence_group.register(sub)
     _search_group.register(sub)

src/brigade/cli/__init__.py

@@ -24,6 +24,7 @@
         "Stations and tools",
         [
             "add",
+            "setup",
             "stations",
             "skills",
             "harness",

src/brigade/cli/_common.py

@@ -0,0 +1,23 @@
+"""brigade setup command group."""
+
+from __future__ import annotations
+
+import argparse
+
+
+def register(sub: argparse._SubParsersAction) -> None:
+    p_setup = sub.add_parser("setup", help="Install pinned native Brigade components.")
+    p_setup.add_argument("--dry-run", action="store_true", help="Report planned actions without writing.")
+    p_setup.add_argument("--offline", action="store_true", help="Use verified cache only; fail if missing.")
+    p_setup.add_argument("--rollback", action="store_true", help="Restore the previous installed manifest.")
+    p_setup.set_defaults(func=dispatch)
+
+
+def dispatch(args) -> int:
+    from ..component_install import setup_native_components
+
+    return setup_native_components(
+        dry_run=args.dry_run,
+        offline=args.offline,
+        rollback=args.rollback,
+    )