feat: enable Playwright MCP for existing projects (#30)

* feat(docker-git): format ps output

* feat(docker-git): default to .docker-git and sync codex config

* feat(docker-git): improve TUI ssh flow

* fix(docker-git): suspend TUI during ssh

* fix(tui): disable input during ssh

* chore: add pre-commit large file guard

* feat(docker-git): add tmux attach

* fix(docker-git): stabilize tmux panes

* fix(docker-git): stabilize select view and ssh return

* fix(docker-git): reset tmux layout on mismatch

* fix(docker-git): correct tmux actions pane

* fix(docker-git): bump tmux layout version

* refactor(cli): move docker-git cli and tmux to app

* Restore web package files from local backup

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* feat(docker-git): improve sessions and codex bootstrap

* feat(docker-git): enable zsh autosuggest

* feat(docker-git): enforce gh scopes and protect branches

* feat(docker-git): wait for ssh and track sessions

* feat(docker-git): add codex resume hint

* fix(docker-git): clean ssh login and sync templates

- Print codex resume hint on interactive shells\n- Disable Ubuntu MOTD/last-login noise inside containers\n- Silence SSH host-key warnings via LogLevel=ERROR\n- Force docker compose output to plain/no-ANSI to avoid escape sequences\n- Keep generated project templates in sync on compose up

* fix(docker-git): keep ssh port stable for running projects

Skip port re-selection when docker compose is already running for the project.

* fix(docker-git): escape newline in codex resume hint

* refactor(docker-git): remove legacy greeting scaffold

* fix(docker-git): make generated projects portable

* feat(docker-git): add down-all and per-project stop

* fix(docker-git): show only running containers in stop selector

* refactor(docker-git): remove redundant up from TUI menu

* fix(docker-git): disable mouse scroll for Ink TUI

* feat(docker-git): show connection info via selector

* feat(docker-git): add git-synced state commands

* feat(docker-git): clone state repo on init

* fix(docker-git): wipe volumes on --force

- When --force is set, run docker compose down -v before up to ensure /home/dev volume is clean

- Install pnpm via corepack in generated Dockerfiles for deterministic pnpm availability

- Update CLI/TUI wording to reflect force semantics

* update knowlenge

* feat(docker-git): add safe gitignore for state repo

* fix(docker-git): init state repo for empty remotes

* feat(docker-git): use ~/.docker-git as default projects root

* feat(docker-git): sync state repo with git

- Add "state sync" (commit + fetch/rebase + push)\n- Auto-sync state after create/update operations\n- On conflict/divergence, push a PR branch and print a compare URL

* feat(docker-git): delete project via selector

- Add TUI action to delete a project folder from the state root\n- Best-effort: run docker compose down before deleting\n- Auto-sync state repo after deletion

* feat(docker-git): confirm before deleting project

- Delete flow now requires a second Enter to confirm\n- Esc cancels confirmation\n- Confirmation resets on selection change

* fix(docker-git): auth state git operations via github token

- Read GITHUB_TOKEN from state .orch/env/global.env (or env vars)\n- Use GIT_ASKPASS for non-interactive https push/pull/sync

* fix(docker-git): normalize state sync + refresh stop selector

* fix(hooks): guard push against oversized .knowledge blobs

* feat(docker-git): share Codex auth + better SSH zsh UX

- Share Codex auth.json across projects (symlink) to avoid refresh_token_reused

- Keep per-project Codex sessions/logs under .orch

- Improve SSH terminal UX (ncurses-term, zsh completion ordering, autosuggest from history+completion)

- Support GitHub tree/blob URLs and add parser tests

* feat(docker-git): add Playwright MCP sidecar

- Add --mcp-playwright flag to generate Chromium sidecar container

- Auto-configure Codex MCP server (playwright) in entrypoint

- Provide wrapper to convert CDP HTTP endpoint -> usable WS endpoint

- Update tests + CLI usage

* feat(docker-git): isolate Playwright MCP contexts by default

* fix(docker-git): remove stale Playwright MCP block when disabled

* feat(app): expose Playwright MCP in TUI and help

* docs: add docker-git README

* fix(docker-git): make container IP reachable from external containers

- Connect managed containers to the default bridge network after compose up

- Prefer bridge IP for access logging so other containers can reach services by IP

* feat(docker-git): update default Codex config

- Default model: gpt-5.3-codex (xhigh) with pragmatic personality

- Enable live web search + web_search_request

- Enable shell_snapshot/collab/apps by default

* docs(agents): add sleep and gh workflows guidance

- Allow waiting for remote actions via sleep-based polling

- Prefer gh for issues/PRs and CI checks; wait for Actions after push

* fix(docker-git): propagate default Codex config to new containers

- Rewrite docker-git-managed Codex config.toml when defaults change

- Ensure per-project .orch/auth/codex/config.toml is updated on create and up

* feat(state): track full state dir in git

* feat(templates): allow committing .orch in state repo

* feat(state): ignore volatile Codex artifacts

* refactor(repo): move effect-template workspace to root

* fix(ci): restore checkout permissions

- Grant GITHUB_TOKEN contents:read so actions/checkout can fetch.

- Reduce lint complexity in resolveCreateInputs.

* fix(test): build lib before running app tests

CI test job runs `pnpm test` without building @effect-template/lib, but the package exports types from dist. Add `pretest` to build lib so lint:tests + vitest can resolve imports.

* chore(ci): add lib to checks

* fix(lib): pass effect lint

* fix(lib): pass vibecode-linter

* fix(ci): fail on lib lint errors

* fix(codex-config): remove deprecated web_search_request flag (#6)

Co-authored-by: codex-agent <codex-agent@users.noreply.github.com>

* ci(workflows): align with effect-template and add deps prune check (#8)

* ci(workflows): align with effect-template and add deps prune check

* fix(ci): restore snapshot checkout permission for private repo

* chore(release): version packages

* fix(shell): sync github auth env and improve docker error handling

* feat: parallel issue/PR workspaces in one repository (#9)

* feat(core): isolate issue/pr workspaces for parallel work

* fix(app): remove duplicate workspace path logic

* feat(shell): add issue workspace AGENTS context

* feat(cli): add --force-env soft reset mode

* fix(lib): resolve lint regressions in templates and file writer

* refactor(lib): split long functions for lint constraints

* refactor(lib): replace force flags params with options objects

* refactor(lib): remove forbidden casts in create-project options

* fix(lib): harden issue workspace env reset flow

* fix(lib): split auth sync copy helpers for lint

* fix(lib): manage AGENTS blocks without full overwrite

---------

Co-authored-by: skulidropek <skulidropek@users.noreply.github.com>

* chore(release): version packages

* fix(release): publish app CLI as @prover-coder-ai/docker-git (#16)

* fix(ci): disable npm publish in release workflow

* fix(ci): gate npm publish on token/access checks

* fix(release): publish app cli as @prover-coder-ai/docker-git

* chore(ci): drop custom release workflow changes

* fix(ci): keep app dist free of test-only deps

---------

Co-authored-by: skulidropek <skulidropek@users.noreply.github.com>

* chore(release): version packages

* fix: bridge GH token to git auth (#15)

* fix(shell): bridge gh token to git credentials

* fix(shell): auto-configure git credentials after gh auth

* test(docker-git): assert generated auth helper in entrypoint

* refactor(lib): split entrypoint git template blocks

---------

Co-authored-by: skulidropek <skulidropek@users.noreply.github.com>

* chore(release): version packages

* fix(release): publish only @prover-coder-ai/docker-git (#18)

Co-authored-by: skulidropek <skulidropek@users.noreply.github.com>

* chore(release): version packages

* fix(force-env): refresh managed files and rebuild on recreate (#19)

Co-authored-by: skulidropek <skulidropek@users.noreply.github.com>

* chore(release): version packages

* fix: handle docker socket permission failures early (#20)

* fix(shell): fail fast on docker socket permission errors

* fix(lib): reduce error renderer complexity

---------

Co-authored-by: skulidropek <skulidropek@users.noreply.github.com>

* chore(release): version packages

* fix(ci): validate app and lib in check workflow (#22)

Co-authored-by: skulidropek <skulidropek@users.noreply.github.com>

* fix(ci): enforce effect-ts analyzer on tests (#23)

* fix(lint): include tests in effect-ts analyzer

* chore(ci): retrigger checks after runner stall

---------

Co-authored-by: skulidropek <skulidropek@users.noreply.github.com>

* chore(release): version packages

* fix: support nested docker-git auth bootstrap and compose v2 (#25)

* fix(lib): bootstrap nested docker-git auth and compose v2

* refactor(lib): split nested docker-git entrypoint template

* refactor(lib): reduce lint complexity in path normalization

* chore(release): version packages

* fix(lib): resolve playwright MCP env interpolation in wrapper script

* feat(cli): add mcp-playwright command for existing projects

- Adds docker-git mcp-playwright to enable Playwright MCP + Chromium sidecar after create\n- Rewrites managed templates + docker-git.json, preserves env files and volumes\n- Includes parser + usecase tests

* fix(test): make vibecode-linter resolve pnpm binaries

vibecode-linter shells out to npx biome/tsc, but npm's npx can miss local pnpm workspace bins.\nAdd a small npx shim (pnpm exec) and prepend it to PATH for lint scripts.

* fix(cli): avoid pipe overload in command matcher

Effect\x27s pipe typings cap at 20 args; split Match.orElse into a second pipe call.

* chore(lint): apply autofixes

* feat(cli): add mcp-playwright command for existing projects

- Adds docker-git mcp-playwright to enable Playwright MCP + Chromium sidecar after create\n- Rewrites managed templates + docker-git.json, preserves env files and volumes\n- Includes parser + usecase tests

* fix(test): make vibecode-linter resolve pnpm binaries

vibecode-linter shells out to npx biome/tsc, but npm's npx can miss local pnpm workspace bins.\nAdd a small npx shim (pnpm exec) and prepend it to PATH for lint scripts.

* fix(scripts): make npx shim executable

---------

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
Co-authored-by: codex <codex@users.noreply.github.com>
Co-authored-by: codex-agent <codex-agent@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: skulidropek <skulidropek@users.noreply.github.com>

Author: 5 people

README.md

@@ -93,6 +93,9 @@ Disable sharing (per-project auth):
 Enable during create/clone:
 - Add `--mcp-playwright`
 
+Enable for an existing project directory (preserves `.orch/env/project.env` and volumes):
+- `docker-git mcp-playwright [<url>] [--project-dir <path>]`
+
 This will:
 - Create a Chromium sidecar container: `dg-<repo>-browser`
 - Configure Codex MCP server `playwright` inside the dev container
@@ -119,7 +122,8 @@ Common toggles:
 MCP errors in `codex` UI:
 - `No such file or directory (os error 2)` for `playwright`:
   - `~/.codex/config.toml` contains `[mcp_servers.playwright]`, but the container was created without `--mcp-playwright`.
-  - Fix: recreate with `--force --mcp-playwright` (or remove the block from `config.toml`).
+  - Fix (recommended): run `docker-git mcp-playwright [<url>]` to enable it for the existing project.
+  - Fix (recreate): recreate with `--force-env --mcp-playwright` (keeps volumes) or `--force --mcp-playwright` (wipes volumes).
 - `handshaking ... initialize response`:
   - The configured MCP command is not a real MCP server (example: `command="echo"`).
 

packages/app/src/docker-git/cli/parser-mcp-playwright.ts

@@ -0,0 +1,25 @@
+import { Either } from "effect"
+
+import { type McpPlaywrightUpCommand, type ParseError } from "@effect-template/lib/core/domain"
+
+import { parseProjectDirWithOptions } from "./parser-shared.js"
+
+// CHANGE: parse "mcp-playwright" command for existing docker-git projects
+// WHY: allow enabling Playwright MCP in an already created container/project dir
+// QUOTE(ТЗ): "Добавить возможность поднимать MCP Playrgiht в контейнере который уже создан"
+// REF: issue-29
+// SOURCE: n/a
+// FORMAT THEOREM: forall argv: parseMcpPlaywright(argv) = cmd -> deterministic(cmd)
+// PURITY: CORE
+// EFFECT: Effect<McpPlaywrightUpCommand, ParseError, never>
+// INVARIANT: projectDir is never empty
+// COMPLEXITY: O(n) where n = |argv|
+export const parseMcpPlaywright = (
+  args: ReadonlyArray<string>
+): Either.Either<McpPlaywrightUpCommand, ParseError> =>
+  Either.map(parseProjectDirWithOptions(args), ({ projectDir, raw }) => ({
+    _tag: "McpPlaywrightUp",
+    projectDir,
+    runUp: raw.up ?? true
+  }))
+

packages/app/src/docker-git/cli/parser.ts

@@ -6,6 +6,7 @@ import { parseAttach } from "./parser-attach.js"
 import { parseAuth } from "./parser-auth.js"
 import { parseClone } from "./parser-clone.js"
 import { buildCreateCommand } from "./parser-create.js"
+import { parseMcpPlaywright } from "./parser-mcp-playwright.js"
 import { parseRawOptions } from "./parser-options.js"
 import { parsePanes } from "./parser-panes.js"
 import { parseScrap } from "./parser-scrap.js"
@@ -61,6 +62,7 @@ export const parseArgs = (args: ReadonlyArray<string>): Either.Either<Command, P
       Match.when("terminals", () => parsePanes(rest)),
       Match.when("sessions", () => parseSessions(rest)),
       Match.when("scrap", () => parseScrap(rest)),
+      Match.when("mcp-playwright", () => parseMcpPlaywright(rest)),
       Match.when("help", () => Either.right(helpCommand)),
       Match.when("ps", () => Either.right(statusCommand)),
       Match.when("status", () => Either.right(statusCommand)),
@@ -69,8 +71,10 @@ export const parseArgs = (args: ReadonlyArray<string>): Either.Either<Command, P
       Match.when("kill-all", () => Either.right(downAllCommand)),
       Match.when("menu", () => Either.right(menuCommand)),
       Match.when("ui", () => Either.right(menuCommand)),
-      Match.when("auth", () => parseAuth(rest)),
-      Match.when("state", () => parseState(rest))
+      Match.when("auth", () => parseAuth(rest))
+    )
+    .pipe(
+      Match.when("state", () => parseState(rest)),
+      Match.orElse(() => Either.left(unknownCommandError))
     )
-    .pipe(Match.orElse(() => Either.left(unknownCommandError)))
 }

packages/app/src/docker-git/cli/usage.ts

@@ -5,6 +5,7 @@ import type { ParseError } from "@effect-template/lib/core/domain"
 export const usageText = `docker-git menu
 docker-git create --repo-url <url> [options]
 docker-git clone <url> [options]
+docker-git mcp-playwright [<url>] [options]
 docker-git attach [<url>] [options]
 docker-git panes [<url>] [options]
 docker-git scrap <action> [<url>] [options]
@@ -20,6 +21,7 @@ Commands:
   menu                Interactive menu (default when no args)
   create, init        Generate docker development environment
   clone               Create + run container and clone repo
+  mcp-playwright      Enable Playwright MCP + Chromium sidecar for an existing project dir
   attach, tmux        Open tmux workspace for a docker-git project
   panes, terms        List tmux panes for a docker-git project
   scrap               Export/import project scrap (session snapshot + rebuildable deps)

packages/app/src/docker-git/program.ts

@@ -10,6 +10,7 @@ import {
 } from "@effect-template/lib/usecases/auth"
 import type { AppError } from "@effect-template/lib/usecases/errors"
 import { renderError } from "@effect-template/lib/usecases/errors"
+import { mcpPlaywrightUp } from "@effect-template/lib/usecases/mcp-playwright"
 import { downAllDockerGitProjects, listProjectStatus } from "@effect-template/lib/usecases/projects"
 import { exportScrap, importScrap } from "@effect-template/lib/usecases/scrap"
 import {
@@ -92,7 +93,10 @@ const handleNonBaseCommand = (command: NonBaseCommand) =>
       Match.when({ _tag: "ScrapExport" }, (cmd) => exportScrap(cmd)),
       Match.when({ _tag: "ScrapImport" }, (cmd) => importScrap(cmd))
     )
-    .pipe(Match.exhaustive)
+    .pipe(
+      Match.when({ _tag: "McpPlaywrightUp" }, (cmd) => mcpPlaywrightUp(cmd)),
+      Match.exhaustive
+    )
 
 // CHANGE: compose CLI program with typed errors and shell effects
 // WHY: keep a thin entry layer over pure parsing and template generation

packages/app/tests/docker-git/parser.test.ts

@@ -152,6 +152,34 @@ describe("parseArgs", () => {
       expect(command.projectDir).toBe(".docker-git/org/repo/issue-7")
     }))
 
+  it.effect("parses mcp-playwright command in current directory", () =>
+    Effect.sync(() => {
+      const command = parseOrThrow(["mcp-playwright"])
+      if (command._tag !== "McpPlaywrightUp") {
+        throw new Error("expected McpPlaywrightUp command")
+      }
+      expect(command.projectDir).toBe(".")
+      expect(command.runUp).toBe(true)
+    }))
+
+  it.effect("parses mcp-playwright command with --no-up", () =>
+    Effect.sync(() => {
+      const command = parseOrThrow(["mcp-playwright", "--no-up"])
+      if (command._tag !== "McpPlaywrightUp") {
+        throw new Error("expected McpPlaywrightUp command")
+      }
+      expect(command.runUp).toBe(false)
+    }))
+
+  it.effect("parses mcp-playwright with positional repo url into project dir", () =>
+    Effect.sync(() => {
+      const command = parseOrThrow(["mcp-playwright", "https://github.com/org/repo.git"])
+      if (command._tag !== "McpPlaywrightUp") {
+        throw new Error("expected McpPlaywrightUp command")
+      }
+      expect(command.projectDir).toBe(".docker-git/org/repo")
+    }))
+
   it.effect("parses down-all command", () =>
     Effect.sync(() => {
       const command = parseOrThrow(["down-all"])

packages/lib/src/core/domain.ts

@@ -99,6 +99,12 @@ export interface ScrapImportCommand {
   readonly mode: ScrapMode
 }
 
+export interface McpPlaywrightUpCommand {
+  readonly _tag: "McpPlaywrightUp"
+  readonly projectDir: string
+  readonly runUp: boolean
+}
+
 export interface HelpCommand {
   readonly _tag: "Help"
   readonly message: string
@@ -214,6 +220,7 @@ export type Command =
   | PanesCommand
   | SessionsCommand
   | ScrapCommand
+  | McpPlaywrightUpCommand
   | HelpCommand
   | StatusCommand
   | DownAllCommand

packages/lib/src/usecases/mcp-playwright.ts

@@ -0,0 +1,90 @@
+import type { CommandExecutor } from "@effect/platform/CommandExecutor"
+import type { PlatformError } from "@effect/platform/Error"
+import type { FileSystem } from "@effect/platform/FileSystem"
+import type { Path } from "@effect/platform/Path"
+import { Effect } from "effect"
+
+import type { McpPlaywrightUpCommand, TemplateConfig } from "../core/domain.js"
+import { readProjectConfig } from "../shell/config.js"
+import { ensureDockerDaemonAccess } from "../shell/docker.js"
+import type {
+  ConfigDecodeError,
+  ConfigNotFoundError,
+  DockerAccessError,
+  DockerCommandError,
+  FileExistsError,
+  PortProbeError
+} from "../shell/errors.js"
+import { writeProjectFiles } from "../shell/files.js"
+import { ensureCodexConfigFile } from "./auth-sync.js"
+import { runDockerComposeUpWithPortCheck } from "./projects-up.js"
+
+type McpPlaywrightFilesError = ConfigNotFoundError | ConfigDecodeError | FileExistsError | PlatformError
+type McpPlaywrightFilesEnv = FileSystem | Path
+
+const enableInTemplate = (template: TemplateConfig): TemplateConfig => ({
+  ...template,
+  enableMcpPlaywright: true
+})
+
+// CHANGE: enable Playwright MCP in an existing docker-git project directory (files only)
+// WHY: allow adding the browser sidecar + MCP server config without wiping env or volumes
+// QUOTE(ТЗ): "Добавить возможность поднимать MCP Playrgiht в контейнере который уже создан"
+// REF: issue-29
+// SOURCE: n/a
+// FORMAT THEOREM: forall p: enable(p) -> template(p).enableMcpPlaywright = true
+// PURITY: SHELL
+// EFFECT: Effect<TemplateConfig, ConfigNotFoundError | ConfigDecodeError | FileExistsError | PlatformError, FileSystem | Path>
+// INVARIANT: does not rewrite .orch/env/project.env (only managed templates + docker-git.json)
+// COMPLEXITY: O(n) where n = |managed_files|
+export const enableMcpPlaywrightProjectFiles = (
+  projectDir: string
+): Effect.Effect<TemplateConfig, McpPlaywrightFilesError, McpPlaywrightFilesEnv> =>
+  Effect.gen(function*(_) {
+    const config = yield* _(readProjectConfig(projectDir))
+    const alreadyEnabled = config.template.enableMcpPlaywright
+    const updated = alreadyEnabled ? config.template : enableInTemplate(config.template)
+
+    yield* _(
+      alreadyEnabled
+        ? Effect.log("Playwright MCP is already enabled for this project.")
+        : Effect.log("Enabling Playwright MCP for this project (templates only)...")
+    )
+
+    yield* _(writeProjectFiles(projectDir, updated, true))
+    yield* _(ensureCodexConfigFile(projectDir, updated.codexAuthPath))
+
+    return updated
+  })
+
+export type McpPlaywrightUpError =
+  | McpPlaywrightFilesError
+  | DockerAccessError
+  | DockerCommandError
+  | PortProbeError
+
+type McpPlaywrightUpEnv = McpPlaywrightFilesEnv | CommandExecutor
+
+// CHANGE: enable Playwright MCP in an existing project dir and bring docker compose up
+// WHY: upgrade already created containers to support browser automation without forcing full recreation flows
+// QUOTE(ТЗ): "Добавить возможность поднимать MCP Playrgiht в контейнере который уже создан"
+// REF: issue-29
+// SOURCE: n/a
+// FORMAT THEOREM: forall p: up(p) -> running(p-browser) OR docker_error
+// PURITY: SHELL
+// EFFECT: Effect<TemplateConfig, McpPlaywrightUpError, FileSystem | Path | CommandExecutor>
+// INVARIANT: volumes are preserved (no docker compose down -v)
+// COMPLEXITY: O(command)
+export const mcpPlaywrightUp = (
+  command: McpPlaywrightUpCommand
+): Effect.Effect<TemplateConfig, McpPlaywrightUpError, McpPlaywrightUpEnv> =>
+  Effect.gen(function*(_) {
+    const updated = yield* _(enableMcpPlaywrightProjectFiles(command.projectDir))
+
+    if (!command.runUp) {
+      return updated
+    }
+
+    yield* _(ensureDockerDaemonAccess(process.cwd()))
+    return yield* _(runDockerComposeUpWithPortCheck(command.projectDir))
+  })

packages/lib/tests/usecases/mcp-playwright.test.ts

@@ -0,0 +1,129 @@
+import * as FileSystem from "@effect/platform/FileSystem"
+import * as Path from "@effect/platform/Path"
+import { NodeContext } from "@effect/platform-node"
+import { describe, expect, it } from "@effect/vitest"
+import { Effect } from "effect"
+
+import type { TemplateConfig } from "../../src/core/domain.js"
+import { enableMcpPlaywrightProjectFiles } from "../../src/usecases/mcp-playwright.js"
+import { prepareProjectFiles } from "../../src/usecases/actions/prepare-files.js"
+
+const withTempDir = <A, E, R>(
+  use: (tempDir: string) => Effect.Effect<A, E, R>
+): Effect.Effect<A, E, R | FileSystem.FileSystem> =>
+  Effect.scoped(
+    Effect.gen(function*(_) {
+      const fs = yield* _(FileSystem.FileSystem)
+      const tempDir = yield* _(
+        fs.makeTempDirectoryScoped({
+          prefix: "docker-git-mcp-playwright-"
+        })
+      )
+      return yield* _(use(tempDir))
+    })
+  )
+
+const makeGlobalConfig = (root: string, path: Path.Path): TemplateConfig => ({
+  containerName: "dg-test",
+  serviceName: "dg-test",
+  sshUser: "dev",
+  sshPort: 2222,
+  repoUrl: "https://github.com/org/repo.git",
+  repoRef: "main",
+  targetDir: "/home/dev/org/repo",
+  volumeName: "dg-test-home",
+  dockerGitPath: path.join(root, ".docker-git"),
+  authorizedKeysPath: path.join(root, "authorized_keys"),
+  envGlobalPath: path.join(root, ".orch/env/global.env"),
+  envProjectPath: path.join(root, ".orch/env/project.env"),
+  codexAuthPath: path.join(root, ".orch/auth/codex"),
+  codexSharedAuthPath: path.join(root, ".orch/auth/codex-shared"),
+  codexHome: "/home/dev/.codex",
+  enableMcpPlaywright: false,
+  pnpmVersion: "10.27.0"
+})
+
+const makeProjectConfig = (
+  outDir: string,
+  enableMcpPlaywright: boolean,
+  path: Path.Path
+): TemplateConfig => ({
+  containerName: "dg-test",
+  serviceName: "dg-test",
+  sshUser: "dev",
+  sshPort: 2222,
+  repoUrl: "https://github.com/org/repo.git",
+  repoRef: "main",
+  targetDir: "/home/dev/org/repo",
+  volumeName: "dg-test-home",
+  dockerGitPath: path.join(outDir, ".docker-git"),
+  authorizedKeysPath: path.join(outDir, "authorized_keys"),
+  envGlobalPath: path.join(outDir, ".orch/env/global.env"),
+  envProjectPath: path.join(outDir, ".orch/env/project.env"),
+  codexAuthPath: path.join(outDir, ".orch/auth/codex"),
+  codexSharedAuthPath: path.join(outDir, ".orch/auth/codex-shared"),
+  codexHome: "/home/dev/.codex",
+  enableMcpPlaywright,
+  pnpmVersion: "10.27.0"
+})
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null
+
+const readEnableMcpPlaywrightFlag = (value: unknown): boolean | undefined => {
+  if (!isRecord(value)) {
+    return undefined
+  }
+
+  const template = value.template
+  if (!isRecord(template)) {
+    return undefined
+  }
+
+  const flag = template.enableMcpPlaywright
+  return typeof flag === "boolean" ? flag : undefined
+}
+
+describe("enableMcpPlaywrightProjectFiles", () => {
+  it.effect("enables Playwright MCP for an existing project without rewriting env files", () =>
+    withTempDir((root) =>
+      Effect.gen(function*(_) {
+        const fs = yield* _(FileSystem.FileSystem)
+        const path = yield* _(Path.Path)
+        const outDir = path.join(root, "project")
+        const globalConfig = makeGlobalConfig(root, path)
+        const withoutMcp = makeProjectConfig(outDir, false, path)
+
+        yield* _(
+          prepareProjectFiles(outDir, root, globalConfig, withoutMcp, {
+            force: false,
+            forceEnv: false
+          })
+        )
+
+        const envProjectPath = path.join(outDir, ".orch/env/project.env")
+        yield* _(fs.writeFileString(envProjectPath, "# custom env\nCUSTOM_KEY=1\n"))
+
+        yield* _(enableMcpPlaywrightProjectFiles(outDir))
+
+        const envAfter = yield* _(fs.readFileString(envProjectPath))
+        expect(envAfter).toContain("CUSTOM_KEY=1")
+
+        const composeAfter = yield* _(fs.readFileString(path.join(outDir, "docker-compose.yml")))
+        expect(composeAfter).toContain("dg-test-browser")
+        expect(composeAfter).toContain('MCP_PLAYWRIGHT_ENABLE: "1"')
+
+        const dockerfileAfter = yield* _(fs.readFileString(path.join(outDir, "Dockerfile")))
+        expect(dockerfileAfter).toContain("@playwright/mcp")
+
+        const browserDockerfileExists = yield* _(fs.exists(path.join(outDir, "Dockerfile.browser")))
+        const startExtraExists = yield* _(fs.exists(path.join(outDir, "mcp-playwright-start-extra.sh")))
+        expect(browserDockerfileExists).toBe(true)
+        expect(startExtraExists).toBe(true)
+
+        const configAfterText = yield* _(fs.readFileString(path.join(outDir, "docker-git.json")))
+        const configAfter = yield* _(Effect.sync((): unknown => JSON.parse(configAfterText)))
+        expect(readEnableMcpPlaywrightFlag(configAfter)).toBe(true)
+      })
+    ).pipe(Effect.provide(NodeContext.layer)))
+})

scripts/npx

@@ -34,4 +34,3 @@ if [ "${1-}" = "" ]; then
 fi
 
 exec pnpm exec "$@"
-