@agentxm/extension-lifecycle 0.29.4 → 0.30.1

package/dist/src/demote/demote-to-external-source.d.ts

@@ -69,7 +69,7 @@ declare const settleDemotion: (request: DemoteRequest) => Effect.Effect<{
     fqn: string;
     authoredPath: string;
     execution: ExecutionCandidate<InstallStepRequirements, never>;
-}, ExtensionLifecycleFailed | import("@agentxm/workspace-state").PathTraversalDetected | import("@agentxm/extension-sources").SourceSyntaxInvalid | import("@agentxm/extension-sources").SourceHostNotConfigured | import("@agentxm/extension-sources").SourceNotResolvable | import("@agentxm/extension-sources").SourceNetworkFailure | import("@agentxm/extension-sources").GitOperationFailed | import("@agentxm/extension-sources").WorkspaceCatalogUnavailable | import("@agentxm/extension-sources").AxmSkillGateUnavailable | import("@agentxm/registry-client").RegistryProblem | import("@agentxm/registry-client").RegistryRequestFailed | import("@agentxm/registry-client").RegistryOperationFailed | import("@agentxm/workspace-state").LockfileIoError | import("@agentxm/workspace-state").LockfileParseError | import("@agentxm/workspace-state").LockfileDecodeError | import("@agentxm/workspace-state").LockfileVersionUnsupported | WorkspaceSettingsReadFailure | import("@agentxm/workspace-state").LockfileValidationError | import("@agentxm/workspace-state").LockEntrySourceMissing | import("@agentxm/workspace-state").LockEntryUrlInvalid | import("@agentxm/workspace-state").LockEntryNameInvalid | import("@agentxm/workspace-state").LockEntryEndpointConflict | import("@agentxm/workspace-state").LockEntrySourceTypeConflict | import("@agentxm/workspace-state").AcceptedResolutionMissing | import("@agentxm/workspace-state").InlineExtensionSourceMissing | import("@agentxm/workspace-state").PackageContentHashFailed | import("@agentxm/workspace-state").WorkspaceSourceInvalid | import("@agentxm/extension-model/unstable/extensions").FqnInvalidError | import("@agentxm/extension-resolution").ExtensionResolutionFailed | import("@agentxm/workspace-operations").CandidateFingerprintFailed, FileSystem.FileSystem | Path.Path | WorkspaceMutations | import("@agentxm/workspace-state").ConfiguredAgentOutcomesProvider | ExtensionManagers | import("effect/unstable/http/HttpClient").HttpClient | import("@agentxm/extension-resolution").ReleaseAgePosture | import("effect/Scope").Scope | import("@agentxm/extension-sources").SourceHostProviders | import("@agentxm/extension-sources").WorkspaceCatalog>;
+}, ExtensionLifecycleFailed | import("@agentxm/workspace-state").PathTraversalDetected | import("@agentxm/extension-sources").SourceSyntaxInvalid | import("@agentxm/extension-sources").SourceHostNotConfigured | import("@agentxm/extension-sources").SourceNotResolvable | import("@agentxm/extension-sources").SourceNetworkFailure | import("@agentxm/extension-sources").GitOperationFailed | import("@agentxm/extension-sources").WorkspaceCatalogUnavailable | import("@agentxm/extension-sources").AxmSkillGateUnavailable | import("@agentxm/registry-client").RegistryProblem | import("@agentxm/registry-client").RegistryRequestFailed | import("@agentxm/registry-client").RegistryOperationFailed | import("@agentxm/workspace-state").LockfileIoError | import("@agentxm/workspace-state").LockfileParseError | import("@agentxm/workspace-state").LockfileDecodeError | import("@agentxm/workspace-state").LockfileVersionUnsupported | WorkspaceSettingsReadFailure | import("@agentxm/workspace-state").LockfileValidationError | import("@agentxm/workspace-state").LockEntrySourceMissing | import("@agentxm/workspace-state").LockEntryUrlInvalid | import("@agentxm/workspace-state").LockEntryNameInvalid | import("@agentxm/workspace-state").LockEntryEndpointConflict | import("@agentxm/workspace-state").LockEntrySourceTypeConflict | import("@agentxm/workspace-state").AcceptedResolutionMissing | import("@agentxm/workspace-state").InlineExtensionSourceMissing | import("@agentxm/workspace-state").PackageContentHashFailed | import("@agentxm/workspace-state").WorkspaceSourceInvalid | import("@agentxm/extension-model/unstable/extensions").FqnInvalidError | import("@agentxm/extension-resolution").ExtensionResolutionFailed | import("@agentxm/workspace-operations").CandidateFingerprintFailed, FileSystem.FileSystem | Path.Path | WorkspaceMutations | import("effect/unstable/http/HttpClient").HttpClient | import("@agentxm/workspace-state").ConfiguredAgentOutcomesProvider | ExtensionManagers | import("@agentxm/extension-resolution").ReleaseAgePosture | import("effect/Scope").Scope | import("@agentxm/extension-sources").SourceHostProviders | import("@agentxm/extension-sources").WorkspaceCatalog>;
 export declare const prepareDemote: (request: DemoteRequest) => Effect.Effect<DemoteCandidate, DemoteFailure, PrepareDemoteRequirements>;
 /** Preview or apply a settled demotion, resolving to one operation outcome. */
 export declare const previewOrApplyDemote: (candidate: DemoteCandidate, execution: PlanExecution) => Effect.Effect<import("@agentxm/workspace-operations").OperationResolution<never>, WorkspaceSettingsReadFailure | import("@agentxm/workspace-operations").ApprovalRecoveryMissing | import("@agentxm/workspace-operations").PlanInteractionFailed | import("@agentxm/workspace-transactions").WorkspaceTransitionAcquireFailure, import("@agentxm/workspace-state").ConfiguredAgentOutcomesProvider | import("@agentxm/workspace-transactions").FootprintRecorder | import("@agentxm/workspace-operations").OperationJournal | import("@agentxm/workspace-operations").ResolvePlanInteraction | InstallStepRequirements>;

package/dist/src/demote/demote-to-external-source.js

@@ -20,7 +20,8 @@ import * as Effect from "effect/Effect";
 import * as FileSystem from "effect/FileSystem";
 import * as Option from "effect/Option";
 import * as Path from "effect/Path";
-import { ExtensionManagers, buildInstallOperation } from "@agentxm/extension-materialization";
+import { ExtensionManagers } from "@agentxm/extension-materialization";
+import { buildInstallOperation } from "@agentxm/workspace-reconciliation";
 import { formatFqn, parseFqn, } from "@agentxm/extension-model/unstable/extensions";
 import { isWorkspaceSourceLocator } from "@agentxm/extension-model/unstable/sources/workspace";
 import { makeConfiguredReleaseAgeEvaluation, resolveConfiguredHook, resolveConfiguredKnowledge, resolveConfiguredMcpServer, resolveConfiguredPack, resolveConfiguredRule, resolveConfiguredSkill, resolveConfiguredSubagent, } from "@agentxm/extension-resolution";
@@ -88,7 +89,7 @@ const restoreDisabledState = (ws, type, name) => {
 // -----------------------------------------------------------------------------
 /**
  * Resolve the replacement package from its new source and compose the install
- * that replaces the authored content. `allowWorkspaceReplacement` is the one
+ * that replaces the authored content. `sourceReplacements` is the one
  * place source authority is deliberately overridden, and it is named here so
  * no other route can reach it by accident.
  */
@@ -98,43 +99,71 @@ const replacementStep = Effect.fn("Demote.replacementStep")(function* (type, nam
     // The one place source authority is deliberately overridden.
     const common = {
         toStepFailure: lifecycleStepFailure,
-        allowWorkspaceReplacement: true,
+        sourceReplacements: [{ type, name }],
     };
     switch (type) {
         case "skill":
-            return buildInstallOperation(managers.skill, {
-                ...common,
-                ...(yield* resolveConfiguredSkill(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredSkill(name, source, evaluation);
+                return buildInstallOperation(managers.skill, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "mcp-server":
-            return buildInstallOperation(managers["mcp-server"], {
-                ...common,
-                ...(yield* resolveConfiguredMcpServer(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredMcpServer(name, source, evaluation);
+                return buildInstallOperation(managers["mcp-server"], {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "subagent":
-            return buildInstallOperation(managers.subagent, {
-                ...common,
-                ...(yield* resolveConfiguredSubagent(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredSubagent(name, source, evaluation);
+                return buildInstallOperation(managers.subagent, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "rule":
-            return buildInstallOperation(managers.rule, {
-                ...common,
-                ...(yield* resolveConfiguredRule(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredRule(name, source, evaluation);
+                return buildInstallOperation(managers.rule, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "hook":
-            return buildInstallOperation(managers.hook, {
-                ...common,
-                ...(yield* resolveConfiguredHook(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredHook(name, source, evaluation);
+                return buildInstallOperation(managers.hook, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "knowledge":
-            return buildInstallOperation(managers.knowledge, {
-                ...common,
-                ...(yield* resolveConfiguredKnowledge(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredKnowledge(name, source, evaluation);
+                return buildInstallOperation(managers.knowledge, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "pack":
-            return buildInstallOperation(managers.pack, {
-                ...common,
-                ...(yield* resolveConfiguredPack(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredPack(name, source, evaluation);
+                return buildInstallOperation(managers.pack, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
     }
 });

package/dist/src/hooks/install/plan.js

@@ -9,7 +9,8 @@
  */
 import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
-import { HookManager, buildInstallOperation } from "@agentxm/extension-materialization";
+import { HookManager } from "@agentxm/extension-materialization";
+import { buildInstallOperation } from "@agentxm/workspace-reconciliation";
 import { parseSourceQualifiedRegistrySourcePatternParts, } from "@agentxm/extension-model/unstable/extensions";
 import { HOOK_EXTENSION_DIR } from "@agentxm/extension-model/unstable/hooks/manifest-schema";
 import { SourceHostProviders, resolveSource } from "@agentxm/extension-sources";
@@ -137,8 +138,10 @@ export const planHookInstall = Effect.fn("InstallExtensions.planHooks")(function
         const operation = buildInstallOperation(hookManager, {
             toStepFailure: lifecycleStepFailure,
             ref,
-            versionRange,
-            skipProjections: deferProjections,
+            declaration: { name: ref.hook.name, versionRange },
+            ...(deferProjections
+                ? { enclosingClosure: { projections: [ref.type], postconditions: [] } }
+                : {}),
             installedBefore: Effect.succeed(installedBefore),
             message: `Installed ${ref.hook.name}`,
             buildArtifact: ({ installedBefore }) => Effect.gen(function* () {

package/dist/src/hooks/uninstall/plan.js

@@ -9,11 +9,12 @@
  */
 import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
-import { HookManager, buildUninstallOperation } from "@agentxm/extension-materialization";
+import { HookManager } from "@agentxm/extension-materialization";
+import { buildUninstallOperation } from "@agentxm/workspace-reconciliation";
 import { WorkspaceMutations, acquiredExtensionDisplayPathFromLockEntry, } from "@agentxm/workspace-state";
 import { lifecycleStepFailure } from "../../step-failure.js";
 import { installRefused } from "../../install/vocabulary.js";
-import { makeWorkspaceRetentionPolicy } from "../../uninstall/retention-policy.js";
+import { makeWorkspaceRetentionPolicy } from "@agentxm/workspace-reconciliation";
 import { workspaceCanonicalRoot, workspaceLockfilePath, workspaceSettingsPath, } from "../../workspace-paths.js";
 const hookUninstallArtifactTargets = (entry, retained, targetName, scope) => {
     if (Option.isNone(entry))
@@ -47,7 +48,7 @@ export const parseHookUninstallRequest = Effect.fn("UninstallExtensions.parseHoo
 export const planHookUninstall = Effect.fn("UninstallExtensions.planHooks")(function* (intent) {
     const ws = yield* WorkspaceMutations;
     const hookManager = yield* HookManager;
-    const retentionPolicy = makeWorkspaceRetentionPolicy(ws);
+    const retentionPolicy = makeWorkspaceRetentionPolicy(ws, lifecycleStepFailure);
     const steps = yield* Effect.forEach(intent.targets, (target) => Effect.gen(function* () {
         const lockEntry = yield* ws
             .getLockedHookEntry(target.name)

package/dist/src/index.d.ts

@@ -30,12 +30,11 @@ export { planRuleInstall } from "./rules/install/plan.js";
 export { planSkillInstall } from "./skills/install/plan.js";
 export { planSubagentInstall } from "./subagents/install/plan.js";
 export { BUNDLED_AXM_SKILL_AUTHORED_BLOCKER, BundledAxmSkillAsset, bundledAxmSkillCanonicalPath, inspectBundledAxmSkillReadiness, installBundledAxmSkill, type BundledAxmSkillAssetService, type BundledAxmSkillReadiness, type BundledAxmSkillSourceFile, } from "./skills/install/bundled.js";
-export { buildAtomicPackGraphStep, validatePackGraphPostcondition, type AtomicPackGraphChild, } from "./packs/graph-transition.js";
+export { validatePackGraphPostcondition } from "./packs/graph-transition.js";
 export { buildPackMemberInstallStep, type PackMemberRef } from "./packs/member-install-step.js";
 export { configuredPackConstraintBlockPlan, prospectivePackConstraintProblems, relevantPackConstraintProblems, } from "./packs/constraint-gate.js";
 export { UninstallExtensions, prepareUninstallExtensions, previewOrApplyUninstallExtensions, type PrepareUninstallRequirements, type UninstallExtensionsCandidate, type UninstallExtensionsFailure, type UninstallExtensionsRequest, } from "./uninstall/uninstall-extensions.js";
 export { resolveRootUninstallIntent, rootUninstallableTypeSegments, type RootUninstallIntent, type RootUninstallableType, } from "./uninstall/root-intent.js";
-export { exclusiveMemberRetentionPolicy, makeWorkspaceRetentionPolicy, } from "./uninstall/retention-policy.js";
 export { PACK_UNINSTALL_GRAPH_BLOCKER_ID, packUninstallRecoveryIdentifiers, planPackUninstallGraphReadiness, type PackRetirement, type PackUninstallGraphReadiness, } from "./packs/uninstall/readiness.js";
 export { type PackUninstallIntent, type PackUninstallRequirements, type ResolvedPackUninstallTarget, } from "./packs/uninstall/plan.js";
 export { getSkillDisplayName } from "./skills/utils.js";

package/dist/src/index.js

@@ -35,13 +35,12 @@ export { planSubagentInstall } from "./subagents/install/plan.js";
 // The bundled official AXM skill, and the asset port the application fills.
 export { BUNDLED_AXM_SKILL_AUTHORED_BLOCKER, BundledAxmSkillAsset, bundledAxmSkillCanonicalPath, inspectBundledAxmSkillReadiness, installBundledAxmSkill, } from "./skills/install/bundled.js";
 // Pack graph transitions: the atomic step and its desired-state predicate.
-export { buildAtomicPackGraphStep, validatePackGraphPostcondition, } from "./packs/graph-transition.js";
+export { validatePackGraphPostcondition } from "./packs/graph-transition.js";
 export { buildPackMemberInstallStep } from "./packs/member-install-step.js";
 export { configuredPackConstraintBlockPlan, prospectivePackConstraintProblems, relevantPackConstraintProblems, } from "./packs/constraint-gate.js";
 // Uninstall: withdrawing extensions, as one use case behind every spelling.
 export { UninstallExtensions, prepareUninstallExtensions, previewOrApplyUninstallExtensions, } from "./uninstall/uninstall-extensions.js";
 export { resolveRootUninstallIntent, rootUninstallableTypeSegments, } from "./uninstall/root-intent.js";
-export { exclusiveMemberRetentionPolicy, makeWorkspaceRetentionPolicy, } from "./uninstall/retention-policy.js";
 export { PACK_UNINSTALL_GRAPH_BLOCKER_ID, packUninstallRecoveryIdentifiers, planPackUninstallGraphReadiness, } from "./packs/uninstall/readiness.js";
 export {} from "./packs/uninstall/plan.js";
 // Skill lifecycle operations

package/dist/src/install/root-intent.d.ts

@@ -2,8 +2,8 @@ import * as Effect from "effect/Effect";
 import * as Schema from "effect/Schema";
 import type { ExtensionLifecycleFailed } from "../errors.js";
 import { type InstallableExtensionType } from "@agentxm/extension-model/unstable/extensions/installable-types";
-export declare const rootInstallableTypeSegments: readonly ("knowledge" | "rules" | "hooks" | "mcps" | "skills" | "subagents" | "packs")[];
-export declare const RootInstallableTypeSegmentSchema: Schema.Literals<readonly ("knowledge" | "rules" | "hooks" | "mcps" | "skills" | "subagents" | "packs")[]>;
+export declare const rootInstallableTypeSegments: readonly ("knowledge" | "rules" | "hooks" | "skills" | "subagents" | "packs" | "mcps")[];
+export declare const RootInstallableTypeSegmentSchema: Schema.Literals<readonly ("knowledge" | "rules" | "hooks" | "skills" | "subagents" | "packs" | "mcps")[]>;
 export type RootInstallableTypeSegment = typeof RootInstallableTypeSegmentSchema.Type;
 export type RootInstallableType = InstallableExtensionType;
 export interface RootInstallIntent {

package/dist/src/install/vocabulary.d.ts

@@ -15,7 +15,8 @@ import type * as Path from "effect/Path";
 import type * as Scope from "effect/Scope";
 import type * as HttpClient from "effect/unstable/http/HttpClient";
 import type { NativeWriteAuthority } from "@agentxm/agent-integration";
-import type { ManagerRequirements, McpSecretStore, RecipeRequirements } from "@agentxm/extension-materialization";
+import type { ManagerRequirements, McpSecretStore } from "@agentxm/extension-materialization";
+import type { RecipeRequirements } from "@agentxm/workspace-reconciliation";
 import type { ExtensionName } from "@agentxm/extension-model/unstable/extensions";
 import type { HookExtensionRef } from "@agentxm/extension-model/unstable/extensions/refs/hook";
 import type { KnowledgeExtensionRef } from "@agentxm/extension-model/unstable/extensions/refs/knowledge";
@@ -29,8 +30,8 @@ import type { VersionRange } from "@agentxm/extension-model/unstable/version-con
 import type { ExtensionResolutionFailed, PackDependencyRefResolver } from "@agentxm/extension-resolution";
 import type { SourceHostProviders, WorkspaceCatalog } from "@agentxm/extension-sources";
 import type { ApprovalRecoveryMissing, CandidateFingerprintFailed, OperationJournal, PlanInteractionFailed, ResolvePlanInteraction } from "@agentxm/workspace-operations";
-import type { CodingAgentRepository } from "@agentxm/workspace-projection";
-import type { AcceptedCanonicalRefError, ConfiguredAgentOutcomesProvider, LockfileValidationError, WorkspaceMutations, WorkspaceSettingsReadFailure, WorkspaceStateReadFailure } from "@agentxm/workspace-state";
+import type { CodingAgentRepository, WorkspaceInvariantFacts } from "@agentxm/workspace-projection";
+import type { AcceptedCanonicalRefError, ConfiguredAgentOutcomesProvider, LockfileValidationError, LockfileReader, WorkspaceMutations, WorkspaceSettingsReadFailure, WorkspaceStateReadFailure } from "@agentxm/workspace-state";
 import type { FootprintRecorder, WorkspaceTransactionScope, WorkspaceTransitionAcquireFailure } from "@agentxm/workspace-transactions";
 import { ExtensionLifecycleFailed } from "../errors.js";
 /**
@@ -41,7 +42,7 @@ import { ExtensionLifecycleFailed } from "../errors.js";
  * composed once at the application's runtime boundary; nothing is captured
  * into a step's closure on the way, and no failure adapter is among them.
  */
-export type InstallStepRequirements = ManagerRequirements | RecipeRequirements | McpSecretStore | CodingAgentRepository | WorkspaceMutations | NativeWriteAuthority;
+export type InstallStepRequirements = ManagerRequirements | RecipeRequirements | McpSecretStore | CodingAgentRepository | LockfileReader | WorkspaceInvariantFacts | WorkspaceMutations | NativeWriteAuthority;
 /**
  * What routing a source locator, probing configured registries, and reading
  * what a source contains all need.

package/dist/src/knowledge/install/plan.js

@@ -9,7 +9,8 @@
  */
 import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
-import { KnowledgeManager, extensionRefLifecycleWarnings, extensionRefRegistryLifecycle, targetFromRef, toLabelWithCompanions, toStepKey, } from "@agentxm/extension-materialization";
+import { KnowledgeManager } from "@agentxm/extension-materialization";
+import { extensionRefLifecycleWarnings, extensionRefRegistryLifecycle, targetFromRef, toLabelWithCompanions, toStepKey, } from "@agentxm/workspace-reconciliation";
 import { parseSourceQualifiedRegistrySourcePatternParts, } from "@agentxm/extension-model/unstable/extensions";
 import { SourceHostProviders, resolveSource } from "@agentxm/extension-sources";
 import { operationPresentation, } from "@agentxm/workspace-operations";

package/dist/src/knowledge/uninstall/plan.js

@@ -12,14 +12,15 @@ import * as Effect from "effect/Effect";
 import * as FileSystem from "effect/FileSystem";
 import * as Option from "effect/Option";
 import * as Path from "effect/Path";
-import { KnowledgeManager, KnowledgeUnavailable, buildUninstallOperation, } from "@agentxm/extension-materialization";
+import { KnowledgeManager, KnowledgeUnavailable } from "@agentxm/extension-materialization";
+import { buildUninstallOperation } from "@agentxm/workspace-reconciliation";
 import { makeWorkspaceRelativePath } from "@agentxm/extension-model/unstable/path-types";
 import { resolveInstructionsConfig } from "@agentxm/workspace-projection";
 import { WorkspaceMutations, acceptedCanonicalObservation, computeExtensionPathsForLayout, extensionPathSourceFromLockEntry, } from "@agentxm/workspace-state";
 import { ExtensionLifecycleFailed } from "../../errors.js";
 import { lifecycleStepFailure } from "../../step-failure.js";
 import { installRefused } from "../../install/vocabulary.js";
-import { makeWorkspaceRetentionPolicy } from "../../uninstall/retention-policy.js";
+import { makeWorkspaceRetentionPolicy } from "@agentxm/workspace-reconciliation";
 const lockCanonicalRoot = (path, layout, locked) => computeExtensionPathsForLayout(path.join, layout, extensionPathSourceFromLockEntry(locked), "knowledge", locked.workspaceName).canonicalPath;
 /** Settle whether this Knowledge bundle has anything to remove. */
 export const parseKnowledgeUninstallRequest = Effect.fn("UninstallExtensions.parseKnowledgeRequest")(function* (selector) {
@@ -107,7 +108,7 @@ const inspectOwnership = Effect.fn("UninstallExtensions.inspectKnowledgeOwnershi
 export const planKnowledgeUninstall = Effect.fn("UninstallExtensions.planKnowledge")(function* (intent) {
     const ws = yield* WorkspaceMutations;
     const manager = yield* KnowledgeManager;
-    const retentionPolicy = makeWorkspaceRetentionPolicy(ws);
+    const retentionPolicy = makeWorkspaceRetentionPolicy(ws, lifecycleStepFailure);
     /** The accepted ownership fact, not on-disk presence, decides removability. */
     const isAcceptedTargetPresent = (target) => Effect.gen(function* () {
         const graph = yield* ws.getDesiredStateGraph();

package/dist/src/mcps/install/plan.js

@@ -12,7 +12,7 @@ import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
 import * as Result from "effect/Result";
 import * as Schema from "effect/Schema";
-import { installMcpServer } from "@agentxm/extension-materialization";
+import { installMcpServer } from "@agentxm/workspace-reconciliation";
 import { CONFIGURABLE_AGENTS_BY_ID, } from "@agentxm/extension-model/unstable/agent-capabilities";
 import { ExtensionNameSchema, } from "@agentxm/extension-model/unstable/extensions";
 import { intersectVersionConstraints } from "@agentxm/extension-model/unstable/version-constraints";
@@ -287,8 +287,7 @@ export const planMcpServerInstall = Effect.fn("InstallExtensions.planMcpServer")
                                 localName: intent.localName,
                                 nonInteractive: intent.nonInteractive,
                                 force: intent.force,
-                                versionRange: intent.versionRange,
-                                skipSettings: Option.none(),
+                                declaration: { name: intent.localName, versionRange: intent.versionRange },
                                 env: Option.some(intent.env ?? {}),
                             },
                         }).pipe(Effect.mapError(lifecycleStepFailure)),

package/dist/src/mcps/operations/uninstall.js

@@ -18,7 +18,8 @@ import { appendWarningsToMessage } from "@agentxm/workspace-operations";
 import { WorkspaceMutations } from "@agentxm/workspace-state";
 import { removeIfExists } from "@agentxm/workspace-state";
 import { acceptedCanonicalObservation, acceptedLockedCanonicalPath, removableAcceptedCanonicalPath, } from "@agentxm/workspace-state";
-import { agentConfigTarget, collectSecretInputNames, deleteMcpSecrets, mcpServerArtifact, mcpSettingsTarget, readMcpServerManifest, McpSecretStore, } from "@agentxm/extension-materialization";
+import { agentConfigTarget, mcpServerArtifact, mcpSettingsTarget, McpSecretStore, } from "@agentxm/extension-materialization";
+import { collectSecretInputNames, deleteMcpSecrets, readMcpServerManifest, } from "@agentxm/workspace-reconciliation";
 import { StepFailureConversion, withAdaptedStepFailures } from "../../step-failure-conversion.js";
 import { ExtensionLifecycleFailed } from "../../errors.js";
 const REQUIRED_AGENT_IDS = new Set([

package/dist/src/mcps/uninstall/plan.js

@@ -13,11 +13,13 @@ import * as Effect from "effect/Effect";
 import * as FileSystem from "effect/FileSystem";
 import * as Option from "effect/Option";
 import * as Path from "effect/Path";
-import { McpServerManager, buildUninstallOperation, collectSecretInputNames, deleteMcpSecrets, mcpServerArtifact, mcpSourceTarget, readMcpServerManifest, } from "@agentxm/extension-materialization";
+import { McpServerManager, mcpServerArtifact, mcpSourceTarget, } from "@agentxm/extension-materialization";
+import { collectSecretInputNames, deleteMcpSecrets, readMcpServerManifest, } from "@agentxm/workspace-reconciliation";
+import { buildUninstallOperation } from "@agentxm/workspace-reconciliation";
 import { appendWarningsToMessage, } from "@agentxm/workspace-operations";
 import { WorkspaceMutations, acceptedLockedCanonicalPath, } from "@agentxm/workspace-state";
 import { lifecycleStepFailure } from "../../step-failure.js";
-import { makeWorkspaceRetentionPolicy } from "../../uninstall/retention-policy.js";
+import { makeWorkspaceRetentionPolicy } from "@agentxm/workspace-reconciliation";
 import { workspaceLockfilePath, workspaceSettingsPath } from "../../workspace-paths.js";
 /** One local connection name is removed at a time. */
 export const parseMcpServerUninstallRequest = (selector) => ({
@@ -28,7 +30,7 @@ export const planMcpServerUninstall = Effect.fn("UninstallExtensions.planMcpServ
     const ws = yield* WorkspaceMutations;
     const mcpServerManager = yield* McpServerManager;
     const path = yield* Path.Path;
-    const retentionPolicy = makeWorkspaceRetentionPolicy(ws);
+    const retentionPolicy = makeWorkspaceRetentionPolicy(ws, lifecycleStepFailure);
     const steps = intent.targets.map((target) => {
         const step = buildUninstallOperation(mcpServerManager, retentionPolicy, {
             toStepFailure: lifecycleStepFailure,
@@ -63,7 +65,14 @@ export const planMcpServerUninstall = Effect.fn("UninstallExtensions.planMcpServ
                     onNone: () => new Set(),
                     onSome: collectSecretInputNames,
                 });
-                const secretDeletionWarnings = unchanged || desiredNode === undefined || desiredNode.authority === "inline"
+                const remaining = yield* ws
+                    .getDesiredStateGraph()
+                    .pipe(Effect.mapError(lifecycleStepFailure));
+                const remainsDesired = remaining.nodes.some((node) => node.type === "mcp-server" && node.name === target.name);
+                const secretDeletionWarnings = unchanged ||
+                    remainsDesired ||
+                    desiredNode === undefined ||
+                    desiredNode.authority === "inline"
                     ? []
                     : (yield* deleteMcpSecrets({
                         scopeRoot: path.resolve(ws.baseDir),

package/dist/src/packs/graph-transition.d.ts

@@ -11,32 +11,7 @@
  */
 import * as Effect from "effect/Effect";
 import { WorkspaceMutations, type DesiredExtensionNode } from "@agentxm/workspace-state";
-import { type JobStepArtifact, type PlannedJobStep } from "@agentxm/workspace-operations";
 import type { ExtensionLifecycleFailed } from "../errors.js";
-import { type LifecycleStepFailure } from "../step-failure.js";
-import { type InstallStepRequirements } from "../install/vocabulary.js";
-export interface AtomicPackGraphChild {
-    readonly step: PlannedJobStep<InstallStepRequirements>;
-    readonly coverage: "eligible" | "ineligible";
-}
-/**
- * What a pack transition checks before it writes and after it commits. The
- * checks are the planner's, so their failure family and their requirements
- * travel with them rather than being fixed here.
- */
-export interface AtomicPackGraphStepArgs<E extends LifecycleStepFailure, R> {
-    readonly label: string;
-    readonly message: string;
-    readonly artifact: JobStepArtifact;
-    readonly children: ReadonlyArray<AtomicPackGraphChild>;
-    readonly reportUnchangedWhenChildrenUnchanged?: boolean;
-    /** A stale-candidate check that runs under the transition, before any write. */
-    readonly preTransition?: Effect.Effect<void, E, R>;
-    /** The desired-graph predicate the committed transition must satisfy. */
-    readonly validate: Effect.Effect<void, E, R>;
-}
-/** Wrap a pack transition's children in one workspace transaction. */
-export declare const buildAtomicPackGraphStep: <E extends LifecycleStepFailure, R>(args: AtomicPackGraphStepArgs<E, R>) => Effect.Effect<PlannedJobStep<InstallStepRequirements | R>>;
 interface RequiredPack {
     readonly name: string;
     readonly identity: string;

package/dist/src/packs/graph-transition.js

@@ -11,109 +11,8 @@
  */
 import * as Effect from "effect/Effect";
 import { WorkspaceMutations, desiredStateProblemsText, } from "@agentxm/workspace-state";
-import { runWorkspaceTransaction } from "@agentxm/workspace-transactions";
-import { StepFailure, } from "@agentxm/workspace-operations";
-import { lifecycleStepFailure } from "../step-failure.js";
 import { installRefused } from "../install/vocabulary.js";
 const normalizedIdentity = (identity) => identity.startsWith("workspace:") ? identity.slice("workspace:".length) : identity;
-const failedStep = (label, result) => result.result === "error"
-    ? Effect.fail(result.error ??
-        lifecycleStepFailure(installRefused({
-            category: "internal",
-            detail: `${label} failed: ${result.message}`,
-        })))
-    : Effect.succeed(result);
-const aggregatePackCoverage = (results, scope) => Effect.gen(function* () {
-    const applicableArtifacts = results.flatMap(({ result, coverage }) => coverage === "eligible" &&
-        result.result === "success" &&
-        result.artifact?.agents !== undefined
-        ? [result.artifact]
-        : []);
-    const agents = [];
-    for (const artifact of applicableArtifacts) {
-        if (artifact.scope !== scope) {
-            return yield* installRefused({
-                category: "internal",
-                detail: `Pack coverage spans ${scope} and ${artifact.scope} scopes`,
-            });
-        }
-        const artifactAgents = new Set(artifact.agents);
-        for (const target of artifact.targets ?? []) {
-            for (const agent of target.agentIds ?? []) {
-                if (!artifactAgents.has(agent)) {
-                    return yield* installRefused({
-                        category: "internal",
-                        detail: `Pack child target agent ${agent} is absent from its artifact agents`,
-                    });
-                }
-            }
-        }
-        for (const agent of artifact.agents ?? []) {
-            if (agent !== "universal" && !agents.includes(agent))
-                agents.push(agent);
-        }
-    }
-    return { applicable: applicableArtifacts.length > 0, agents };
-});
-/** Wrap a pack transition's children in one workspace transaction. */
-export const buildAtomicPackGraphStep = (args) => Effect.sync(() => {
-    const readinessErrors = args.children.flatMap(({ step }) => step.readiness === "error" ? [step.errorMessage] : []);
-    if (readinessErrors.length > 0) {
-        const blockingConditionIds = args.children.flatMap(({ step }) => step.readiness === "error" ? (step.blockingConditionIds ?? []) : []);
-        return {
-            readiness: "error",
-            label: args.label,
-            errorMessage: readinessErrors.join("; "),
-            artifact: args.artifact,
-            ...(blockingConditionIds.length === 0 ? {} : { blockingConditionIds }),
-        };
-    }
-    const readinessWarnings = args.children.flatMap(({ step }) => step.readiness === "warn" ? [step.warnMessage] : []);
-    const runnableChildren = args.children.filter((child) => child.step.readiness !== "error");
-    let validatedCoverage = { applicable: false, agents: [] };
-    const run = runWorkspaceTransaction({
-        transition: Effect.gen(function* () {
-            if (args.preTransition !== undefined) {
-                yield* args.preTransition.pipe(Effect.mapError(lifecycleStepFailure));
-            }
-            return yield* Effect.forEach(runnableChildren, ({ step, coverage }) => step.run.pipe(Effect.flatMap((result) => failedStep(step.label, result)), Effect.map((result) => ({ result, coverage }))), { concurrency: 1 });
-        }),
-        validate: (results) => Effect.gen(function* () {
-            yield* args.validate;
-            validatedCoverage = yield* aggregatePackCoverage(results, args.artifact.scope);
-        }).pipe(Effect.mapError(lifecycleStepFailure)),
-    }).pipe(Effect.mapError(lifecycleStepFailure), Effect.map((results) => {
-        const warnings = results.flatMap(({ result }) => result.result === "success" ? (result.warnings ?? []) : []);
-        const allChildrenUnchanged = args.reportUnchangedWhenChildrenUnchanged === true &&
-            results.length > 0 &&
-            results.every(({ result }) => result.result === "success" && result.artifact?.change === "unchanged");
-        const artifact = allChildrenUnchanged
-            ? { ...args.artifact, change: "unchanged" }
-            : args.artifact;
-        return {
-            result: "success",
-            message: args.message,
-            artifact: !validatedCoverage.applicable
-                ? artifact
-                : { ...artifact, agents: validatedCoverage.agents },
-            ...(warnings.length === 0 ? {} : { warnings }),
-        };
-    }));
-    return readinessWarnings.length === 0
-        ? {
-            readiness: "ready",
-            label: args.label,
-            artifact: args.artifact,
-            run,
-        }
-        : {
-            readiness: "warn",
-            label: args.label,
-            warnMessage: readinessWarnings.join("; "),
-            artifact: args.artifact,
-            run,
-        };
-});
 /** The desired-graph predicate a completed pack transition must satisfy. */
 export const validatePackGraphPostcondition = (args) => Effect.gen(function* () {
     const ws = yield* WorkspaceMutations;

package/dist/src/packs/install/plan.d.ts

@@ -1,16 +1,3 @@
-/**
- * Installing a pack.
- *
- * A pack install is a graph transition, not a package copy: the pack's own
- * package, every member its manifest resolves to, and every member the
- * previous graph owned and this one drops all change together. Workspace
- * source authority decides whether a locally-authored package may stand in
- * for a declared member, the minimum-release-age policy decides whether a
- * held-back release preserves the current graph or blocks, and the transition
- * is refused if the authority it was planned against changed underneath it.
- *
- * @experimental This API is unstable and may change without notice.
- */
 import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
 import * as Path from "effect/Path";

package/dist/src/packs/install/plan.js

@@ -1,3 +1,4 @@
+import { buildReconciliationClosure } from "@agentxm/workspace-reconciliation";
 /**
  * Installing a pack.
  *
@@ -16,7 +17,8 @@ import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
 import * as Path from "effect/Path";
 import * as Result from "effect/Result";
-import { HookManager, KnowledgeManager, McpServerManager, PackManager, RuleManager, SkillManager, SubagentManager, buildInstallOperation, buildUninstallOperation, targetFromRef, toLabel, } from "@agentxm/extension-materialization";
+import { HookManager, KnowledgeManager, McpServerManager, PackManager, RuleManager, SkillManager, SubagentManager, } from "@agentxm/extension-materialization";
+import { buildInstallOperation, buildUninstallOperation, targetFromRef, toLabel, } from "@agentxm/workspace-reconciliation";
 import { parseExtensionFqnParts, toExtensionTypePlural, } from "@agentxm/extension-model/unstable/extensions";
 import { isWorkspaceSourceLocator } from "@agentxm/extension-model/unstable/sources/workspace";
 import { versionSatisfiesRange, } from "@agentxm/extension-model/unstable/version-constraints";
@@ -31,10 +33,10 @@ import { registryLoginSuggestions } from "../../install/registry-login-suggestio
 import { formatRegistryProbe, sourceFailureDetail, } from "../../install/registry-source-resolution.js";
 import { installRefused, } from "../../install/vocabulary.js";
 import { expandPackInstallRefs, expandPackInstallRefsWithReleaseAge } from "../expansion.js";
-import { buildAtomicPackGraphStep, validatePackGraphPostcondition } from "../graph-transition.js";
+import { validatePackGraphPostcondition } from "../graph-transition.js";
 import { buildPackMemberInstallStep } from "../member-install-step.js";
 import { registrySourceArtifact, registrySourcePath } from "../artifact.js";
-import { makeWorkspaceRetentionPolicy } from "../../uninstall/retention-policy.js";
+import { makeWorkspaceRetentionPolicy } from "@agentxm/workspace-reconciliation";
 const isRemoteReadNotImplemented = (error) => {
     const detail = sourceFailureDetail(error);
     return detail.includes("not implemented") || detail.includes("not yet supported");
@@ -661,12 +663,12 @@ export const planPackInstall = Effect.fn("InstallExtensions.planPack")(function*
     // cleanup by suppressing dropped-member removal until the pre-install graph
     // is complete.
     const existingPack = graph.complete ? currentPackNode : undefined;
-    const retentionPolicy = makeWorkspaceRetentionPolicy(ws);
+    const retentionPolicy = makeWorkspaceRetentionPolicy(ws, lifecycleStepFailure);
     const installSteps = yield* Effect.forEach(refs, (ref) => ref.type === "pack"
         ? Effect.succeed(buildInstallOperation(packManager, {
             toStepFailure: lifecycleStepFailure,
             ref,
-            versionRange: intent.versionRange,
+            declaration: { name: ref.pack.name, versionRange: intent.versionRange },
             ...(intent.forceCanonical === true ? { force: true } : {}),
             installedBefore: graph.complete
                 ? packManager.isInstalled({
@@ -724,19 +726,19 @@ export const planPackInstall = Effect.fn("InstallExtensions.planPack")(function*
                 return buildUninstallOperation(ruleManager, retentionPolicy, {
                     toStepFailure: lifecycleStepFailure,
                     target,
-                    skipProjections: true,
+                    enclosingClosure: { projections: [target.type] },
                 });
             case "hook":
                 return buildUninstallOperation(hookManager, retentionPolicy, {
                     toStepFailure: lifecycleStepFailure,
                     target,
-                    skipProjections: true,
+                    enclosingClosure: { projections: [target.type] },
                 });
             case "knowledge":
                 return buildUninstallOperation(knowledgeManager, retentionPolicy, {
                     toStepFailure: lifecycleStepFailure,
                     target,
-                    skipProjections: true,
+                    enclosingClosure: { projections: [target.type] },
                 });
         }
     });
@@ -777,7 +779,8 @@ export const planPackInstall = Effect.fn("InstallExtensions.planPack")(function*
                 ...droppedTargets.map(({ target }) => target.type),
             ]),
         });
-    const graphStep = yield* buildAtomicPackGraphStep({
+    const graphStep = yield* buildReconciliationClosure({
+        toStepFailure: lifecycleStepFailure,
         label: packIdentity,
         message: `Installed ${packIdentity} and ${refs.length - 1} pack member${refs.length === 2 ? "" : "s"}`,
         artifact: {