@agentxm/extension-lifecycle 0.29.2 → 0.30.1

package/dist/src/activation/set-activation.js

@@ -10,9 +10,9 @@
  * configuration, a rule or Knowledge bundle through a shared managed region,
  * a Pack through the members it contributes.
  *
- * Two invariants hold across every type. Disabling never removes canonical
- * content or retires an accepted resolution, so re-enabling never re-resolves
- * or re-acquires. And a type whose projection shares a file with instruction
+ * Disabling a leaf preserves its canonical content and accepted resolution.
+ * Disabling a Pack withdraws its dependency route and retires exclusive acquired
+ * members. A type whose projection shares a file with instruction
  * management reconciles that file inside the same transaction, so the
  * workspace is never left with a settings change the files do not reflect.
  *
@@ -25,11 +25,13 @@ import * as Path from "effect/Path";
 import * as Schema from "effect/Schema";
 import { resolveInstalledIdentifierNameOrInput } from "@agentxm/extension-sources";
 import { SourceHostProviders, WorkspaceCatalog, } from "@agentxm/extension-sources";
-import { buildInstallOperation, collectRetainedMaterializeSteps, ExtensionManagers, installMcpServer, RetainedContentUnusable, SubagentManager, } from "@agentxm/extension-materialization";
-import { makeConfiguredReleaseAgeEvaluation, ReleaseAgePosture, resolveConfiguredHook, resolveConfiguredKnowledge, resolveConfiguredRule, } from "@agentxm/extension-resolution";
+import { ExtensionManagers, HookManager, SkillManager, RuleManager, KnowledgeManager, PackManager, McpServerManager, SubagentManager, } from "@agentxm/extension-materialization";
+import {} from "@agentxm/workspace-reconciliation";
+import { collectMaterializeSteps, collectUnreachableRetirement, proposeDesiredState, publishDesiredState, } from "@agentxm/workspace-reconciliation";
+import { ReleaseAgePosture, } from "@agentxm/extension-resolution";
 import { activeInstructionsConfig, applyProjectionPlans, CodingAgentRepository, findManagedSubagentFiles, instructionReconciliationReadiness, observeInstructions, projectionPlanExclusionWarnings, reconcileInstructionTransition, } from "@agentxm/workspace-projection";
-import { OperationJournal, operationPresentation, prepareExecutionCandidate, resolveExecutionCandidate, ResolvePlanInteraction, StepFailure, } from "@agentxm/workspace-operations";
-import { acquiredExtensionDisplayPathFromLockEntry, ConfiguredAgentOutcomesProvider, installedRowsByName, isDesiredExtensionActive, RenderedFilePathSchema, sanitizeName, WorkspaceMutations, } from "@agentxm/workspace-state";
+import { OperationJournal, operationPresentation, prepareExecutionCandidate, resolveExecutionCandidate, ResolvePlanInteraction, } from "@agentxm/workspace-operations";
+import { acceptedCanonicalObservation, usableAcceptedCanonical, LockfileReader, SettingsReader, settingsEntries, SettingsWriter, ConfiguredAgentOutcomesProvider, installedRowsByName, isDesiredExtensionActive, RenderedFilePathSchema, sanitizeName, WorkspaceMutations, } from "@agentxm/workspace-state";
 import { FootprintRecorder, runWorkspaceTransaction, WorkspaceTransactionScope, } from "@agentxm/workspace-transactions";
 import { ExtensionLifecycleFailed } from "../errors.js";
 import { StepFailureConversion, withAdaptedStepFailures, } from "../step-failure-conversion.js";
@@ -39,7 +41,7 @@ import { enableSkill } from "../skills/operations/enable.js";
 import { disableSkill } from "../skills/operations/disable.js";
 import { enableSubagent } from "../subagents/operations/enable.js";
 import { disableSubagent } from "../subagents/operations/disable.js";
-import { canonicalNodeDisplayPath, canonicalRootDisplayPath, lockfileDisplayPath, settingsDisplayPath, } from "./display-paths.js";
+import { settingsDisplayPath } from "./display-paths.js";
 // -----------------------------------------------------------------------------
 // Shared vocabulary
 // -----------------------------------------------------------------------------
@@ -111,30 +113,6 @@ const instructionGate = (ws) => Effect.gen(function* () {
         })),
     };
 });
-const hookLockArtifact = (args) => {
-    if (Option.isNone(args.lockEntry))
-        return settingsArtifact(args.scope);
-    const entry = args.lockEntry.value;
-    const packagePath = acquiredExtensionDisplayPathFromLockEntry(canonicalRootDisplayPath(args.scope), entry, "hooks", args.name);
-    const targets = (args.enabled
-        ? [
-            { path: settingsDisplayPath(args.scope), change: "updated" },
-            { path: lockfileDisplayPath(args.scope), change: "updated" },
-            { path: packagePath, change: "created" },
-        ]
-        : [
-            { path: settingsDisplayPath(args.scope), change: "updated" },
-            { path: packagePath, change: "removed" },
-        ]).sort((left, right) => left.path.localeCompare(right.path));
-    const version = entry.type === "registry" ? entry.resolvedVersion : undefined;
-    return {
-        path: settingsDisplayPath(args.scope),
-        scope: args.scope,
-        ...(args.enabled && version !== undefined ? { version } : {}),
-        change: "updated",
-        targets,
-    };
-};
 /**
  * Settle an activation request into the change it makes.
  *
@@ -143,7 +121,7 @@ const hookLockArtifact = (args) => {
  * of offering to do nothing. A request naming a subject the workspace does
  * not hold fails with the type's own recovery route.
  */
-export const prepareSetActivation = (request) => Effect.gen(function* () {
+const settleActivation = (request) => Effect.gen(function* () {
     const ws = yield* WorkspaceMutations;
     const path = yield* Path.Path;
     const scope = ws.scope;
@@ -182,157 +160,93 @@ export const prepareSetActivation = (request) => Effect.gen(function* () {
                 agentOutcomes: [],
             };
         }
-        case "mcp-server": {
-            const configured = yield* ws.getConfiguredMcpServerEntries();
-            const entry = configured[request.name];
-            if (entry === undefined) {
-                return unchanged(request, request.name, `MCP server "${request.name}" is not configured`);
-            }
-            if (entry.enabled === request.enabled) {
-                return unchanged(request, request.name, `MCP server "${request.name}" is already ${verb}`);
-            }
-            return {
-                _tag: "SetActivation",
-                type: "mcp-server",
-                name: request.name,
-                enabled: request.enabled,
-                scope,
-                artifact: settingsArtifact(scope),
-                transition: { kind: "mcp-server" },
-                instructions: Option.none(),
-                blocked: Option.none(),
-                warning: Option.none(),
-                agentOutcomes: [],
-            };
-        }
-        case "rule": {
-            const configured = yield* ws.getConfiguredRuleEntries();
-            const entry = configured[request.name];
-            if (entry === undefined) {
-                return unchanged(request, request.name, `rule "${request.name}" is not configured`);
-            }
-            if (entry.enabled === request.enabled) {
-                return unchanged(request, request.name, `rule "${request.name}" is already ${verb}`);
-            }
-            const gate = yield* instructionGate(ws);
-            const resolved = request.enabled
-                ? Option.some(yield* resolveConfiguredRule(request.name, entry.source, yield* makeConfiguredReleaseAgeEvaluation()))
-                : Option.none();
-            return {
-                _tag: "SetActivation",
-                type: "rule",
-                name: request.name,
-                enabled: request.enabled,
-                scope,
-                artifact: settingsArtifact(scope),
-                transition: Option.match(resolved, {
-                    onNone: () => ({ kind: "deactivate-rule" }),
-                    onSome: ({ ref, versionRange }) => ({
-                        kind: "reinstall",
-                        ref,
-                        versionRange,
-                    }),
-                }),
-                instructions: gate.config,
-                blocked: gate.blocked,
-                warning: Option.none(),
-                agentOutcomes: [],
-            };
-        }
-        case "hook": {
-            const configured = yield* ws.getConfiguredHookEntries();
-            const entry = configured[request.name];
-            if (entry === undefined) {
-                return unchanged(request, request.name, `hooks package "${request.name}" is not configured`);
-            }
-            if (entry.enabled === request.enabled) {
-                return unchanged(request, request.name, `hooks package "${request.name}" is already ${verb}`);
-            }
-            const lockEntry = yield* ws
-                .getLockedHookEntry(request.name)
-                .pipe(Effect.catch(() => Effect.succeed(Option.none())));
-            const artifact = hookLockArtifact({
-                lockEntry,
-                name: request.name,
-                scope,
-                enabled: request.enabled,
+        case "mcp-server":
+        case "rule":
+        case "hook":
+        case "knowledge": {
+            const name = yield* resolveInstalledIdentifierNameOrInput({
+                input: request.name,
+                resourceType: request.type,
             });
-            if (!request.enabled) {
-                return {
-                    _tag: "SetActivation",
-                    type: "hook",
-                    name: request.name,
-                    enabled: false,
-                    scope,
-                    artifact,
-                    transition: { kind: "deactivate-hook" },
-                    instructions: Option.none(),
-                    blocked: Option.none(),
-                    warning: Option.none(),
-                    agentOutcomes: [],
-                };
+            const currentGraph = yield* ws.getDesiredStateGraph();
+            if (!currentGraph.nodes.some((node) => node.type === request.type && node.name === name)) {
+                if (request.type === "knowledge")
+                    return yield* new ExtensionLifecycleFailed({
+                        category: "not_found",
+                        detail: `Knowledge bundle "${name}" is not configured`,
+                    });
+                const label = request.type === "mcp-server"
+                    ? "MCP server"
+                    : request.type === "hook"
+                        ? "hooks package"
+                        : "rule";
+                return unchanged(request, name, `${label} "${name}" is not configured`);
             }
-            const { ref, versionRange } = yield* resolveConfiguredHook(request.name, entry.source, yield* makeConfiguredReleaseAgeEvaluation());
-            const managers = yield* ExtensionManagers;
-            // Hook packages report per-agent outcomes because a hooks package can
-            // be projected for one agent and not another.
-            const agentOutcomes = managers.hook.configuredAgentOutcomesForRef === undefined
-                ? []
-                : yield* managers.hook.configuredAgentOutcomesForRef(ref, "projected");
-            return {
-                _tag: "SetActivation",
-                type: "hook",
-                name: request.name,
-                enabled: true,
-                scope,
-                artifact,
-                transition: { kind: "reinstall", ref, versionRange },
-                instructions: Option.none(),
-                blocked: Option.none(),
-                warning: Option.none(),
-                agentOutcomes,
-            };
-        }
-        case "knowledge": {
-            const configured = yield* ws.getConfiguredKnowledgeEntries();
-            const entry = configured[request.name];
-            if (entry === undefined) {
+            const proposal = yield* proposeDesiredState([
+                { kind: "activation", type: request.type, name, enabled: request.enabled },
+            ]).pipe(Effect.catchTag("WorkspaceSyncFailed", (failure) => new ExtensionLifecycleFailed({
+                category: failure.category,
+                detail: failure.detail,
+                cause: failure,
+            })));
+            if (!proposal.before.complete || !proposal.after.complete) {
                 return yield* new ExtensionLifecycleFailed({
-                    category: "not_found",
-                    detail: `Knowledge bundle "${request.name}" is not configured`,
+                    category: "conflict",
+                    detail: "Activation requires complete desired state",
                 });
             }
-            if (entry.enabled === request.enabled) {
-                return unchanged(request, request.name, `Knowledge bundle "${request.name}" is already ${verb}`);
+            const node = proposal.before.nodes.find((node) => node.type === request.type && node.name === name);
+            if (node === undefined)
+                return yield* notInstalled(request.type, name, `axm ${request.type}s list`);
+            if (node.enabled === request.enabled && (request.type !== "mcp-server" || !request.enabled))
+                return unchanged(request, name, `${TYPE_LABEL[request.type]} "${name}" is already ${verb}`);
+            if (request.enabled && node.authority !== "inline") {
+                const canonical = yield* usableAcceptedCanonical({
+                    workspace: ws,
+                    type: request.type,
+                    name,
+                });
+                if (Option.isNone(canonical)) {
+                    return yield* new ExtensionLifecycleFailed({
+                        category: "conflict",
+                        detail: `Accepted ${request.type} content for "${name}" is not usable; sync it before enabling`,
+                    });
+                }
             }
-            if (!request.enabled) {
-                return {
-                    _tag: "SetActivation",
-                    type: "knowledge",
-                    name: request.name,
-                    enabled: false,
-                    scope,
-                    artifact: settingsArtifact(scope),
-                    transition: { kind: "deactivate-knowledge" },
-                    instructions: Option.none(),
+            const gate = request.type === "rule"
+                ? yield* instructionGate(ws)
+                : {
+                    config: Option.none(),
                     blocked: Option.none(),
-                    warning: Option.none(),
-                    agentOutcomes: [],
                 };
-            }
-            const { ref, versionRange } = yield* resolveConfiguredKnowledge(request.name, entry.source, yield* makeConfiguredReleaseAgeEvaluation());
+            const entry = settingsEntries["mcp-server"].entry(proposal.settings, name);
+            const managers = yield* ExtensionManagers;
+            const agentOutcomes = request.type === "mcp-server" && request.enabled && Option.isSome(entry)
+                ? yield* managers["mcp-server"].configuredAgentOutcomesForEntry({
+                    name,
+                    entry: entry.value,
+                    state: "projected",
+                })
+                : request.type === "hook" &&
+                    request.enabled &&
+                    managers.hook.configuredAgentOutcomes !== undefined
+                    ? (yield* managers.hook.configuredAgentOutcomes("projected", proposal.after)).filter((outcome) => outcome.name === name)
+                    : [];
             return {
                 _tag: "SetActivation",
-                type: "knowledge",
-                name: request.name,
-                enabled: true,
+                type: request.type,
+                name,
+                enabled: request.enabled,
                 scope,
                 artifact: settingsArtifact(scope),
-                transition: { kind: "reinstall", ref, versionRange },
-                instructions: Option.none(),
-                blocked: Option.none(),
+                transition: request.type === "mcp-server"
+                    ? { kind: "mcp-server" }
+                    : { kind: "aggregate", proposal },
+                proposal,
+                instructions: gate.config,
+                blocked: gate.blocked,
                 warning: Option.none(),
-                agentOutcomes: [],
+                agentOutcomes,
             };
         }
         case "pack": {
@@ -348,7 +262,14 @@ export const prepareSetActivation = (request) => Effect.gen(function* () {
             if (entry.enabled === request.enabled) {
                 return unchanged(request, request.name, `Pack "${request.name}" is already ${verb}`);
             }
-            const graph = yield* ws.getDesiredStateGraph();
+            const proposal = yield* proposeDesiredState([
+                { kind: "activation", type: "pack", name: request.name, enabled: request.enabled },
+            ]).pipe(Effect.mapError((cause) => new ExtensionLifecycleFailed({
+                category: "conflict",
+                detail: "Cannot derive Pack activation",
+                cause,
+            })));
+            const graph = proposal.before;
             if (!graph.complete) {
                 return yield* new ExtensionLifecycleFailed({
                     category: "conflict",
@@ -370,12 +291,52 @@ export const prepareSetActivation = (request) => Effect.gen(function* () {
                 node.enabled &&
                 packContributesTo(node, identity) &&
                 !remainsActiveWithoutPack(node, identity));
-            const contributed = graph.nodes.filter((node) => node.type !== "pack" && packContributesTo(node, identity));
+            const contributed = proposal.after.nodes.filter((node) => node.type !== "pack" && packContributesTo(node, identity));
             const members = request.enabled ? contributed : affected;
-            const memberTargets = members.map((node) => ({
-                path: canonicalNodeDisplayPath(path, ws, node),
-                change: "unchanged",
-            }));
+            const conversion = yield* StepFailureConversion;
+            const adapter = {
+                toStepFailure: (cause) => conversion.toStepFailure(new ExtensionLifecycleFailed({
+                    category: "conflict",
+                    detail: "detail" in cause ? cause.detail : cause._tag,
+                    cause,
+                })),
+            };
+            const retirement = request.enabled
+                ? Option.none()
+                : yield* collectUnreachableRetirement(adapter, {
+                    resultingGraph: proposal.after,
+                    subjects: members,
+                }).pipe(Effect.mapError((cause) => new ExtensionLifecycleFailed({
+                    category: "conflict",
+                    detail: "Cannot verify Pack member retirement",
+                    cause,
+                })));
+            const materialization = request.enabled
+                ? yield* collectMaterializeSteps({
+                    desiredState: proposal.after,
+                    selection: { target: Option.some(identity), type: Option.none() },
+                    adapter,
+                }).pipe(Effect.mapError((cause) => new ExtensionLifecycleFailed({
+                    category: "conflict",
+                    detail: "Cannot prepare Pack member realization",
+                    cause,
+                })))
+                : undefined;
+            const retainedReferences = (yield* Effect.forEach(members, (node) => acceptedCanonicalObservation({ workspace: ws, type: node.type, name: node.name }).pipe(Effect.map((canonical) => {
+                if (Option.isNone(canonical) || canonical.value.observation.path === undefined)
+                    return [];
+                const relative = path.relative(ws.baseDir, canonical.value.observation.path);
+                if (Option.isSome(retirement) &&
+                    retirement.value.artifact?.targets?.some((target) => target.path === relative))
+                    return [];
+                return [
+                    {
+                        path: relative,
+                        state: canonical.value.observation.status === "usable" ? "retained" : "unknown",
+                        reason: "canonical content required by resulting desired state",
+                    },
+                ];
+            })))).flat();
             return {
                 _tag: "SetActivation",
                 type: "pack",
@@ -386,11 +347,22 @@ export const prepareSetActivation = (request) => Effect.gen(function* () {
                     path: settingsDisplayPath(scope),
                     scope,
                     change: "updated",
-                    fileCount: memberTargets.length + 1,
-                    targets: [{ path: settingsDisplayPath(scope), change: "updated" }, ...memberTargets],
+                    fileCount: 1 +
+                        (Option.isSome(retirement) ? (retirement.value.artifact?.targets?.length ?? 0) : 0),
+                    targets: [
+                        { path: settingsDisplayPath(scope), change: "updated" },
+                        ...(Option.isSome(retirement) ? (retirement.value.artifact?.targets ?? []) : []),
+                    ],
+                    references: [
+                        ...retainedReferences,
+                        ...(Option.isSome(retirement) ? (retirement.value.artifact?.references ?? []) : []),
+                    ],
                 },
                 transition: {
                     kind: "pack",
+                    proposal,
+                    retirement,
+                    ...(materialization === undefined ? {} : { materialization }),
                     identity,
                     members,
                     aggregateTypes: new Set(members.map((node) => node.type)),
@@ -424,7 +396,7 @@ const dematerializeMember = (node) => Effect.gen(function* () {
                 workspaceRoot: ws.baseDir,
                 scope: ws.scope,
                 serverName: node.name,
-                disableOnly: true,
+                disableOnly: false,
             })
                 .pipe(Effect.flatMap((outcome) => outcome._tag === "disabled" ||
                 outcome._tag === "nothing-runnable" ||
@@ -508,98 +480,38 @@ const validatePackActivation = (candidate) => Effect.gen(function* () {
         });
     }
 });
-const NO_WARNINGS = [];
-/** Disabling a rule: record the preference, then remove its projection. */
-const deactivateRuleTransition = (candidate) => Effect.gen(function* () {
-    const ws = yield* WorkspaceMutations;
-    const managers = yield* ExtensionManagers;
-    yield* ws.updateRuleEntry(candidate.name, (current) => ({ ...current, enabled: false }));
-    yield* managers.rule.materializeDeactivate({
-        target: { type: "rule", name: candidate.name },
-    });
-    return NO_WARNINGS;
-});
-/** Disabling a hooks package: record the preference, then stop projecting it. */
-const deactivateHookTransition = (candidate) => Effect.gen(function* () {
-    const ws = yield* WorkspaceMutations;
-    const managers = yield* ExtensionManagers;
-    yield* ws.updateHookEntry(candidate.name, (current) => ({ ...current, enabled: false }));
-    yield* managers.hook.materializeDeactivate({
-        target: { type: "hook", name: candidate.name },
-    });
-    return NO_WARNINGS;
-});
-/**
- * Disabling a Knowledge bundle: record the preference, then re-render the
- * discovery region. Re-rendering is what deactivation means for Knowledge, so
- * this step carries the region's own exclusion report.
- */
-const deactivateKnowledgeTransition = (candidate) => Effect.gen(function* () {
-    const ws = yield* WorkspaceMutations;
-    const managers = yield* ExtensionManagers;
-    yield* ws.updateKnowledgeEntry(candidate.name, (current) => ({ ...current, enabled: false }));
-    const plans = yield* managers.knowledge.projectionPlans();
-    yield* applyProjectionPlans(plans);
-    return projectionPlanExclusionWarnings(plans);
+/** Aggregate projections read the accepted content selected by proposed intent. */
+const aggregateTransition = (proposal, type) => Effect.gen(function* () {
+    yield* publishDesiredState(proposal);
+    return yield* reconcileAggregateProjections(new Set([type]));
 });
 /** Enabling a Pack, or disabling it and the members it alone kept active. */
 const packTransition = (candidate, transition) => Effect.gen(function* () {
-    const ws = yield* WorkspaceMutations;
-    const conversion = yield* StepFailureConversion;
-    const configured = yield* ws.getConfiguredPackEntries();
-    const entry = configured[candidate.name];
-    if (entry === undefined) {
-        return yield* new ExtensionLifecycleFailed({
-            category: "not_found",
-            detail: `Pack "${candidate.name}" is no longer configured`,
-        });
-    }
-    yield* ws.setPackEntry(candidate.name, { ...entry, enabled: candidate.enabled });
+    yield* publishDesiredState(transition.proposal);
     if (candidate.enabled) {
-        // A disabled Pack contributes nothing, so the members the planner saw
-        // still carried the old inactive state. Re-read the closure from the
-        // graph this transition just produced: retained re-materialization
-        // covers active members only, and they became active one line ago.
-        const graph = yield* ws.getDesiredStateGraph();
-        const activeMembers = graph.nodes.filter((node) => node.type !== "pack" && packContributesTo(node, transition.identity));
-        // The capability refuses when accepted content is not usable; that is
-        // this feature's own conflict, reported with the recovery route the
-        // operator can actually take.
-        const { steps } = yield* collectRetainedMaterializeSteps({
-            nodes: activeMembers,
-            adapter: { toStepFailure: conversion.toStepFailure },
-            runMcpServerInstall: ({ ref }) => installMcpServer({
-                name: "install-mcp-server",
-                args: {
-                    ref,
-                    nonInteractive: true,
-                    force: false,
-                    allowWorkspaceSourceTransition: false,
-                    versionRange: Option.none(),
-                    skipSettings: Option.some(true),
-                },
-            }).pipe(withAdaptedStepFailures),
-        }).pipe(Effect.mapError((failure) => failure instanceof RetainedContentUnusable
-            ? new ExtensionLifecycleFailed({
-                category: "conflict",
-                detail: failure.detail,
-                suggestions: [
-                    {
-                        description: "Refresh the pack and its retained members",
-                        cmd: "axm packs update --yes",
-                    },
-                ],
-                cause: failure,
-            })
-            : failure));
-        yield* Effect.forEach(steps, (step) => step.readiness === "error"
-            ? Effect.fail(new ExtensionLifecycleFailed({ category: "conflict", detail: step.errorMessage }))
-            : step.run.pipe(Effect.asVoid), { concurrency: 1, discard: true });
+        for (const step of transition.materialization?.steps ?? []) {
+            if (step.readiness === "error")
+                return yield* new ExtensionLifecycleFailed({
+                    category: "conflict",
+                    detail: step.errorMessage,
+                });
+            yield* step.run;
+        }
     }
     else {
         yield* Effect.forEach(transition.members.filter((node) => !AGGREGATE_UNIT_TYPES.has(node.type)), dematerializeMember, { concurrency: 1, discard: true });
     }
-    return yield* reconcileAggregateProjections(transition.aggregateTypes);
+    const warnings = yield* reconcileAggregateProjections(transition.aggregateTypes);
+    if (Option.isSome(transition.retirement)) {
+        const step = transition.retirement.value;
+        if (step.readiness === "error")
+            return yield* new ExtensionLifecycleFailed({
+                category: "conflict",
+                detail: step.errorMessage,
+            });
+        yield* step.run;
+    }
+    return warnings;
 });
 /**
  * The step for a type whose executor owns its whole transition, including the
@@ -617,7 +529,18 @@ const executorStep = (candidate, kind) => {
             : candidate.enabled
                 ? enableMcpServer({ name: "enable-mcp-server", args: { serverName: candidate.name } })
                 : disableMcpServer({ name: "disable-mcp-server", args: { serverName: candidate.name } });
-    return { label: candidate.name, readiness: "ready", run };
+    const applied = candidate.proposal === undefined
+        ? run
+        : runWorkspaceTransaction({
+            transition: publishDesiredState(candidate.proposal).pipe(Effect.andThen(run)),
+            validate: () => Effect.void,
+        }).pipe(withAdaptedStepFailures);
+    return {
+        label: candidate.name,
+        readiness: "ready",
+        ...(candidate.agentOutcomes.length === 0 ? {} : { agentOutcomes: candidate.agentOutcomes }),
+        run: applied,
+    };
 };
 /**
  * The step for a type whose transition this use case composes itself: the
@@ -663,14 +586,8 @@ const activationStep = (candidate) => {
         case "subagent":
         case "mcp-server":
             return executorStep(candidate, transition.kind);
-        case "reinstall":
-            return reinstallStep(candidate, transition);
-        case "deactivate-rule":
-            return transactionStep(candidate, deactivateRuleTransition(candidate), () => Effect.void);
-        case "deactivate-hook":
-            return transactionStep(candidate, deactivateHookTransition(candidate), () => Effect.void);
-        case "deactivate-knowledge":
-            return transactionStep(candidate, deactivateKnowledgeTransition(candidate), () => Effect.void);
+        case "aggregate":
+            return transactionStep(candidate, aggregateTransition(transition.proposal, candidate.type), () => Effect.void);
         case "pack":
             return transactionStep(candidate, packTransition(candidate, transition), () => validatePackActivation({
                 name: candidate.name,
@@ -679,69 +596,13 @@ const activationStep = (candidate) => {
             }));
     }
 };
-/**
- * Enabling a rule, hooks package, or Knowledge bundle re-runs the configured
- * install closure for the entry the workspace already accepted, so the same
- * publisher-trust and release-age evidence a first install carries travels
- * with the re-activation.
- */
-const reinstallStep = (candidate, transition) => {
-    const { artifact } = candidate;
-    const install = (managers, toStepFailure) => {
-        const common = {
-            toStepFailure,
-            versionRange: transition.versionRange,
-            message: `Enabled ${candidate.name}`,
-            buildArtifact: () => Effect.succeed(artifact),
-        };
-        switch (transition.ref.type) {
-            case "rule":
-                return buildInstallOperation(managers.rule, { ...common, ref: transition.ref });
-            case "hook":
-                return buildInstallOperation(managers.hook, { ...common, ref: transition.ref });
-            case "knowledge":
-                return buildInstallOperation(managers.knowledge, { ...common, ref: transition.ref });
-            case "skill":
-                return buildInstallOperation(managers.skill, { ...common, ref: transition.ref });
-            case "subagent":
-                return buildInstallOperation(managers.subagent, { ...common, ref: transition.ref });
-            case "mcp-server":
-                return buildInstallOperation(managers["mcp-server"], { ...common, ref: transition.ref });
-            case "pack":
-                return buildInstallOperation(managers.pack, { ...common, ref: transition.ref });
-        }
-    };
-    const run = Effect.gen(function* () {
-        const ws = yield* WorkspaceMutations;
-        const managers = yield* ExtensionManagers;
-        const conversion = yield* StepFailureConversion;
-        const step = install(managers, conversion.toStepFailure);
-        if (step.readiness === "error") {
-            return yield* new StepFailure({ category: "conflict", detail: step.errorMessage });
-        }
-        return yield* Option.match(candidate.instructions, {
-            onNone: () => step.run,
-            onSome: (config) => runWorkspaceTransaction({
-                transition: reconcileInstructionTransition({ ws, config, transition: step.run }),
-                validate: () => Effect.void,
-            }).pipe(withAdaptedStepFailures),
-        });
-    });
-    return {
-        label: candidate.name,
-        readiness: "ready",
-        artifact,
-        ...(candidate.agentOutcomes.length === 0 ? {} : { agentOutcomes: candidate.agentOutcomes }),
-        run,
-    };
-};
 /**
  * Preview or apply a settled activation. The whole change — the preference,
  * the projections it implies, and any instruction file it shares — runs in
  * one workspace transaction, so a projection that cannot be written never
  * leaves the preference recorded.
  */
-export const previewOrApplySetActivation = (candidate, execution) => Effect.gen(function* () {
+const prepareActivationExecution = (candidate) => Effect.gen(function* () {
     const plan = {
         _tag: "Plan",
         name: `${candidate.enabled ? "Enable" : "Disable"} ${PLAN_SUBJECT[candidate.type]}`,
@@ -762,8 +623,15 @@ export const previewOrApplySetActivation = (candidate, execution) => Effect.gen(
         },
     ];
     const prepared = yield* prepareExecutionCandidate(plan, { configuredAgentOperations });
-    return yield* resolveExecutionCandidate(prepared, execution);
+    return { ...candidate, execution: prepared };
+});
+export const prepareSetActivation = (request) => Effect.gen(function* () {
+    const candidate = yield* settleActivation(request);
+    if (candidate._tag === "Unchanged")
+        return candidate;
+    return yield* prepareActivationExecution(candidate);
 });
+export const previewOrApplySetActivation = (candidate, execution) => resolveExecutionCandidate(candidate.execution, execution);
 /** The activation use case. */
 export const SetActivation = {
     prepare: prepareSetActivation,