From 08f9a85de5bc75dbf54aeb339a070c297f2f5c14 Mon Sep 17 00:00:00 2001
From: "projectbluefin[bot]" <projectbluefin[bot]@users.noreply.github.com>
Date: Wed, 19 Aug 2026 21:26:20 -0400
Subject: [PATCH] [scanner] fix: configure opt-in bluespeed tools

Signed-off-by: projectbluefin[bot] <projectbluefin[bot]@users.noreply.github.com>
---
 .../usr/share/ublue-os/goose/config.yaml      | 11 ++++++++++
 .../shared/usr/share/ublue-os/just/apps.just  | 21 +++++++++++++++++++
 2 files changed, 32 insertions(+)
 create mode 100644 system_files/shared/usr/share/ublue-os/goose/config.yaml

diff --git a/system_files/shared/usr/share/ublue-os/goose/config.yaml b/system_files/shared/usr/share/ublue-os/goose/config.yaml
new file mode 100644
index 000000000..518d90855
--- /dev/null
+++ b/system_files/shared/usr/share/ublue-os/goose/config.yaml
@@ -0,0 +1,11 @@
+# Bluefin default Goose configuration.
+extensions:
+  linux-mcp-server:
+    args: []
+    bundled: false
+    cmd: linux-mcp-server
+    enabled: true
+    envs: {}
+    name: linux-mcp-server
+    timeout: 300
+    type: stdio
diff --git a/system_files/shared/usr/share/ublue-os/just/apps.just b/system_files/shared/usr/share/ublue-os/just/apps.just
index 7ca0cb8e2..096893e91 100644
--- a/system_files/shared/usr/share/ublue-os/just/apps.just
+++ b/system_files/shared/usr/share/ublue-os/just/apps.just
@@ -54,6 +54,27 @@ cncf:
     brew bundle --file=/usr/share/ublue-os/homebrew/cncf.Brewfile
     [[ -t 0 ]] && ujust --choose || true
 
+# Install Goose and configure the read-only Linux diagnostics MCP server.
+[group('Apps')]
+install-ai-tools:
+    #!/usr/bin/env bash
+    set -euo pipefail
+    brew bundle --file=/usr/share/ublue-os/homebrew/ai-tools.Brewfile
+
+    CONFIG_DIR="${XDG_CONFIG_HOME:-${HOME}/.config}/goose"
+    CONFIG_FILE="${CONFIG_DIR}/config.yaml"
+    TEMPLATE="/usr/share/ublue-os/goose/config.yaml"
+    mkdir -p "${CONFIG_DIR}"
+
+    if [[ -e "${CONFIG_FILE}" ]]; then
+        echo "Goose config already exists: ${CONFIG_FILE}"
+        echo "Review ${TEMPLATE} and merge its linux-mcp-server extension if needed."
+        exit 0
+    fi
+
+    install -m0644 "${TEMPLATE}" "${CONFIG_FILE}"
+    echo "Goose configured with read-only Linux diagnostics."
+
 # Install ASUS laptop tools (asusctl daemon + ROG Control Center) | https://gitlab.com/asus-linux/asusctl
 [group('Apps')]
 install-asus: