@agentxm/extension-lifecycle 0.29.4 → 0.30.2

package/dist/src/demote/demote-to-external-source.d.ts

@@ -69,7 +69,7 @@ declare const settleDemotion: (request: DemoteRequest) => Effect.Effect<{
     fqn: string;
     authoredPath: string;
     execution: ExecutionCandidate<InstallStepRequirements, never>;
-}, ExtensionLifecycleFailed | import("@agentxm/workspace-state").PathTraversalDetected | import("@agentxm/extension-sources").SourceSyntaxInvalid | import("@agentxm/extension-sources").SourceHostNotConfigured | import("@agentxm/extension-sources").SourceNotResolvable | import("@agentxm/extension-sources").SourceNetworkFailure | import("@agentxm/extension-sources").GitOperationFailed | import("@agentxm/extension-sources").WorkspaceCatalogUnavailable | import("@agentxm/extension-sources").AxmSkillGateUnavailable | import("@agentxm/registry-client").RegistryProblem | import("@agentxm/registry-client").RegistryRequestFailed | import("@agentxm/registry-client").RegistryOperationFailed | import("@agentxm/workspace-state").LockfileIoError | import("@agentxm/workspace-state").LockfileParseError | import("@agentxm/workspace-state").LockfileDecodeError | import("@agentxm/workspace-state").LockfileVersionUnsupported | WorkspaceSettingsReadFailure | import("@agentxm/workspace-state").LockfileValidationError | import("@agentxm/workspace-state").LockEntrySourceMissing | import("@agentxm/workspace-state").LockEntryUrlInvalid | import("@agentxm/workspace-state").LockEntryNameInvalid | import("@agentxm/workspace-state").LockEntryEndpointConflict | import("@agentxm/workspace-state").LockEntrySourceTypeConflict | import("@agentxm/workspace-state").AcceptedResolutionMissing | import("@agentxm/workspace-state").InlineExtensionSourceMissing | import("@agentxm/workspace-state").PackageContentHashFailed | import("@agentxm/workspace-state").WorkspaceSourceInvalid | import("@agentxm/extension-model/unstable/extensions").FqnInvalidError | import("@agentxm/extension-resolution").ExtensionResolutionFailed | import("@agentxm/workspace-operations").CandidateFingerprintFailed, FileSystem.FileSystem | Path.Path | WorkspaceMutations | import("@agentxm/workspace-state").ConfiguredAgentOutcomesProvider | ExtensionManagers | import("effect/unstable/http/HttpClient").HttpClient | import("@agentxm/extension-resolution").ReleaseAgePosture | import("effect/Scope").Scope | import("@agentxm/extension-sources").SourceHostProviders | import("@agentxm/extension-sources").WorkspaceCatalog>;
+}, ExtensionLifecycleFailed | import("@agentxm/workspace-state").PathTraversalDetected | import("@agentxm/extension-sources").SourceSyntaxInvalid | import("@agentxm/extension-sources").SourceHostNotConfigured | import("@agentxm/extension-sources").SourceNotResolvable | import("@agentxm/extension-sources").SourceNetworkFailure | import("@agentxm/extension-sources").GitOperationFailed | import("@agentxm/extension-sources").WorkspaceCatalogUnavailable | import("@agentxm/extension-sources").AxmSkillGateUnavailable | import("@agentxm/registry-client").RegistryProblem | import("@agentxm/registry-client").RegistryRequestFailed | import("@agentxm/registry-client").RegistryOperationFailed | import("@agentxm/workspace-state").LockfileIoError | import("@agentxm/workspace-state").LockfileParseError | import("@agentxm/workspace-state").LockfileDecodeError | import("@agentxm/workspace-state").LockfileVersionUnsupported | WorkspaceSettingsReadFailure | import("@agentxm/workspace-state").LockfileValidationError | import("@agentxm/workspace-state").LockEntrySourceMissing | import("@agentxm/workspace-state").LockEntryUrlInvalid | import("@agentxm/workspace-state").LockEntryNameInvalid | import("@agentxm/workspace-state").LockEntryEndpointConflict | import("@agentxm/workspace-state").LockEntrySourceTypeConflict | import("@agentxm/workspace-state").AcceptedResolutionMissing | import("@agentxm/workspace-state").InlineExtensionSourceMissing | import("@agentxm/workspace-state").PackageContentHashFailed | import("@agentxm/workspace-state").WorkspaceSourceInvalid | import("@agentxm/extension-model/unstable/extensions").FqnInvalidError | import("@agentxm/extension-resolution").ExtensionResolutionFailed | import("@agentxm/workspace-operations").CandidateFingerprintFailed, FileSystem.FileSystem | Path.Path | WorkspaceMutations | import("effect/unstable/http/HttpClient").HttpClient | import("@agentxm/workspace-state").ConfiguredAgentOutcomesProvider | ExtensionManagers | import("@agentxm/extension-resolution").ReleaseAgePosture | import("effect/Scope").Scope | import("@agentxm/extension-sources").SourceHostProviders | import("@agentxm/extension-sources").WorkspaceCatalog>;
 export declare const prepareDemote: (request: DemoteRequest) => Effect.Effect<DemoteCandidate, DemoteFailure, PrepareDemoteRequirements>;
 /** Preview or apply a settled demotion, resolving to one operation outcome. */
 export declare const previewOrApplyDemote: (candidate: DemoteCandidate, execution: PlanExecution) => Effect.Effect<import("@agentxm/workspace-operations").OperationResolution<never>, WorkspaceSettingsReadFailure | import("@agentxm/workspace-operations").ApprovalRecoveryMissing | import("@agentxm/workspace-operations").PlanInteractionFailed | import("@agentxm/workspace-transactions").WorkspaceTransitionAcquireFailure, import("@agentxm/workspace-state").ConfiguredAgentOutcomesProvider | import("@agentxm/workspace-transactions").FootprintRecorder | import("@agentxm/workspace-operations").OperationJournal | import("@agentxm/workspace-operations").ResolvePlanInteraction | InstallStepRequirements>;

package/dist/src/demote/demote-to-external-source.js

@@ -20,7 +20,8 @@ import * as Effect from "effect/Effect";
 import * as FileSystem from "effect/FileSystem";
 import * as Option from "effect/Option";
 import * as Path from "effect/Path";
-import { ExtensionManagers, buildInstallOperation } from "@agentxm/extension-materialization";
+import { ExtensionManagers } from "@agentxm/extension-materialization";
+import { buildInstallOperation } from "@agentxm/workspace-reconciliation";
 import { formatFqn, parseFqn, } from "@agentxm/extension-model/unstable/extensions";
 import { isWorkspaceSourceLocator } from "@agentxm/extension-model/unstable/sources/workspace";
 import { makeConfiguredReleaseAgeEvaluation, resolveConfiguredHook, resolveConfiguredKnowledge, resolveConfiguredMcpServer, resolveConfiguredPack, resolveConfiguredRule, resolveConfiguredSkill, resolveConfiguredSubagent, } from "@agentxm/extension-resolution";
@@ -88,7 +89,7 @@ const restoreDisabledState = (ws, type, name) => {
 // -----------------------------------------------------------------------------
 /**
  * Resolve the replacement package from its new source and compose the install
- * that replaces the authored content. `allowWorkspaceReplacement` is the one
+ * that replaces the authored content. `sourceReplacements` is the one
  * place source authority is deliberately overridden, and it is named here so
  * no other route can reach it by accident.
  */
@@ -98,43 +99,71 @@ const replacementStep = Effect.fn("Demote.replacementStep")(function* (type, nam
     // The one place source authority is deliberately overridden.
     const common = {
         toStepFailure: lifecycleStepFailure,
-        allowWorkspaceReplacement: true,
+        sourceReplacements: [{ type, name }],
     };
     switch (type) {
         case "skill":
-            return buildInstallOperation(managers.skill, {
-                ...common,
-                ...(yield* resolveConfiguredSkill(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredSkill(name, source, evaluation);
+                return buildInstallOperation(managers.skill, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "mcp-server":
-            return buildInstallOperation(managers["mcp-server"], {
-                ...common,
-                ...(yield* resolveConfiguredMcpServer(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredMcpServer(name, source, evaluation);
+                return buildInstallOperation(managers["mcp-server"], {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "subagent":
-            return buildInstallOperation(managers.subagent, {
-                ...common,
-                ...(yield* resolveConfiguredSubagent(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredSubagent(name, source, evaluation);
+                return buildInstallOperation(managers.subagent, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "rule":
-            return buildInstallOperation(managers.rule, {
-                ...common,
-                ...(yield* resolveConfiguredRule(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredRule(name, source, evaluation);
+                return buildInstallOperation(managers.rule, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "hook":
-            return buildInstallOperation(managers.hook, {
-                ...common,
-                ...(yield* resolveConfiguredHook(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredHook(name, source, evaluation);
+                return buildInstallOperation(managers.hook, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "knowledge":
-            return buildInstallOperation(managers.knowledge, {
-                ...common,
-                ...(yield* resolveConfiguredKnowledge(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredKnowledge(name, source, evaluation);
+                return buildInstallOperation(managers.knowledge, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
         case "pack":
-            return buildInstallOperation(managers.pack, {
-                ...common,
-                ...(yield* resolveConfiguredPack(name, source, evaluation)),
+            return yield* Effect.gen(function* () {
+                const resolved = yield* resolveConfiguredPack(name, source, evaluation);
+                return buildInstallOperation(managers.pack, {
+                    ...common,
+                    ...resolved,
+                    declaration: { name, versionRange: resolved.versionRange },
+                });
             });
     }
 });

package/dist/src/hooks/install/plan.js

@@ -9,7 +9,8 @@
  */
 import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
-import { HookManager, buildInstallOperation } from "@agentxm/extension-materialization";
+import { HookManager } from "@agentxm/extension-materialization";
+import { buildInstallOperation } from "@agentxm/workspace-reconciliation";
 import { parseSourceQualifiedRegistrySourcePatternParts, } from "@agentxm/extension-model/unstable/extensions";
 import { HOOK_EXTENSION_DIR } from "@agentxm/extension-model/unstable/hooks/manifest-schema";
 import { SourceHostProviders, resolveSource } from "@agentxm/extension-sources";
@@ -137,8 +138,10 @@ export const planHookInstall = Effect.fn("InstallExtensions.planHooks")(function
         const operation = buildInstallOperation(hookManager, {
             toStepFailure: lifecycleStepFailure,
             ref,
-            versionRange,
-            skipProjections: deferProjections,
+            declaration: { name: ref.hook.name, versionRange },
+            ...(deferProjections
+                ? { enclosingClosure: { projections: [ref.type], postconditions: [] } }
+                : {}),
             installedBefore: Effect.succeed(installedBefore),
             message: `Installed ${ref.hook.name}`,
             buildArtifact: ({ installedBefore }) => Effect.gen(function* () {

package/dist/src/hooks/uninstall/plan.js

@@ -9,11 +9,12 @@
  */
 import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
-import { HookManager, buildUninstallOperation } from "@agentxm/extension-materialization";
+import { HookManager } from "@agentxm/extension-materialization";
+import { buildUninstallOperation } from "@agentxm/workspace-reconciliation";
 import { WorkspaceMutations, acquiredExtensionDisplayPathFromLockEntry, } from "@agentxm/workspace-state";
 import { lifecycleStepFailure } from "../../step-failure.js";
 import { installRefused } from "../../install/vocabulary.js";
-import { makeWorkspaceRetentionPolicy } from "../../uninstall/retention-policy.js";
+import { makeWorkspaceRetentionPolicy } from "@agentxm/workspace-reconciliation";
 import { workspaceCanonicalRoot, workspaceLockfilePath, workspaceSettingsPath, } from "../../workspace-paths.js";
 const hookUninstallArtifactTargets = (entry, retained, targetName, scope) => {
     if (Option.isNone(entry))
@@ -47,7 +48,7 @@ export const parseHookUninstallRequest = Effect.fn("UninstallExtensions.parseHoo
 export const planHookUninstall = Effect.fn("UninstallExtensions.planHooks")(function* (intent) {
     const ws = yield* WorkspaceMutations;
     const hookManager = yield* HookManager;
-    const retentionPolicy = makeWorkspaceRetentionPolicy(ws);
+    const retentionPolicy = makeWorkspaceRetentionPolicy(ws, lifecycleStepFailure);
     const steps = yield* Effect.forEach(intent.targets, (target) => Effect.gen(function* () {
         const lockEntry = yield* ws
             .getLockedHookEntry(target.name)

package/dist/src/index.d.ts

@@ -15,7 +15,6 @@ export type { SetActivationExecutionFailure } from "./activation/errors.js";
 export { PUBLISHER_CHANGE_CONDITION_ID, publisherChangeRiskCondition, withPublisherTrust, withPublisherTrustConditions, } from "./publisher-binding.js";
 export { InstallExtensions, prepareInstallExtensions, previewOrApplyInstallExtensions, type InstallDiagnostics, type InstallExtensionsCandidate, type InstallExtensionsFailure, type InstallExtensionsRequest, type InstallSubject, } from "./install/install-extensions.js";
 export { installRefused, type HookInstallIntent, type InstallStepRequirements, type KnowledgeInstallIntent, type McpServerInstallIntent, type PackInstallIntent, type PackRecoveryDependencyResolver, type PrepareInstallRequirements, type ResolveInstallRequirements, type RuleInstallIntent, type SkillInstallIntent, type SubagentInstallIntent, } from "./install/vocabulary.js";
-export { ExtensionSelectionCancelled, ExtensionSelectionInteraction, type ExtensionSelectionFailure, type ExtensionSelectionInteractionService, } from "./install/selection-interaction.js";
 export { resolveRootInstallIntent, rootInstallableTypeSegments, RootInstallableTypeSegmentSchema, type RootInstallIntent, type RootInstallableType, type RootInstallableTypeSegment, } from "./install/root-intent.js";
 export { installCommandFor, perTypeInstallPluralSegments } from "./install/per-type-install.js";
 export { buildConfiguredInstallPlan, buildConfiguredPackInstallPlan, type ConfiguredInstallPlanResult, type ConfiguredInstallRequirements, type ConfiguredInstallableType, } from "./install/configured.js";
@@ -30,17 +29,14 @@ export { planRuleInstall } from "./rules/install/plan.js";
 export { planSkillInstall } from "./skills/install/plan.js";
 export { planSubagentInstall } from "./subagents/install/plan.js";
 export { BUNDLED_AXM_SKILL_AUTHORED_BLOCKER, BundledAxmSkillAsset, bundledAxmSkillCanonicalPath, inspectBundledAxmSkillReadiness, installBundledAxmSkill, type BundledAxmSkillAssetService, type BundledAxmSkillReadiness, type BundledAxmSkillSourceFile, } from "./skills/install/bundled.js";
-export { buildAtomicPackGraphStep, validatePackGraphPostcondition, type AtomicPackGraphChild, } from "./packs/graph-transition.js";
+export { validatePackGraphPostcondition } from "./packs/graph-transition.js";
 export { buildPackMemberInstallStep, type PackMemberRef } from "./packs/member-install-step.js";
 export { configuredPackConstraintBlockPlan, prospectivePackConstraintProblems, relevantPackConstraintProblems, } from "./packs/constraint-gate.js";
 export { UninstallExtensions, prepareUninstallExtensions, previewOrApplyUninstallExtensions, type PrepareUninstallRequirements, type UninstallExtensionsCandidate, type UninstallExtensionsFailure, type UninstallExtensionsRequest, } from "./uninstall/uninstall-extensions.js";
 export { resolveRootUninstallIntent, rootUninstallableTypeSegments, type RootUninstallIntent, type RootUninstallableType, } from "./uninstall/root-intent.js";
-export { exclusiveMemberRetentionPolicy, makeWorkspaceRetentionPolicy, } from "./uninstall/retention-policy.js";
 export { PACK_UNINSTALL_GRAPH_BLOCKER_ID, packUninstallRecoveryIdentifiers, planPackUninstallGraphReadiness, type PackRetirement, type PackUninstallGraphReadiness, } from "./packs/uninstall/readiness.js";
 export { type PackUninstallIntent, type PackUninstallRequirements, type ResolvedPackUninstallTarget, } from "./packs/uninstall/plan.js";
 export { getSkillDisplayName } from "./skills/utils.js";
-export { gitHostedSkillArtifactSource, installSkill, type InstallSkillOperation, type InstallSkillOperationArgs, } from "./skills/operations/install.js";
-export type { InstallResult } from "./skills/operations/install-result.js";
 export { enableSkill, type EnableSkillOperation } from "./skills/operations/enable.js";
 export { disableSkill, type DisableSkillOperation } from "./skills/operations/disable.js";
 export { uninstallMcpServer, type UninstallMcpServerOperation, type UninstallMcpServerOperationArgs, } from "./mcps/operations/uninstall.js";

package/dist/src/index.js

@@ -17,7 +17,6 @@ export { PUBLISHER_CHANGE_CONDITION_ID, publisherChangeRiskCondition, withPublis
 // already declares, as one use case behind every command spelling.
 export { InstallExtensions, prepareInstallExtensions, previewOrApplyInstallExtensions, } from "./install/install-extensions.js";
 export { installRefused, } from "./install/vocabulary.js";
-export { ExtensionSelectionCancelled, ExtensionSelectionInteraction, } from "./install/selection-interaction.js";
 export { resolveRootInstallIntent, rootInstallableTypeSegments, RootInstallableTypeSegmentSchema, } from "./install/root-intent.js";
 export { installCommandFor, perTypeInstallPluralSegments } from "./install/per-type-install.js";
 export { buildConfiguredInstallPlan, buildConfiguredPackInstallPlan, } from "./install/configured.js";
@@ -35,18 +34,16 @@ export { planSubagentInstall } from "./subagents/install/plan.js";
 // The bundled official AXM skill, and the asset port the application fills.
 export { BUNDLED_AXM_SKILL_AUTHORED_BLOCKER, BundledAxmSkillAsset, bundledAxmSkillCanonicalPath, inspectBundledAxmSkillReadiness, installBundledAxmSkill, } from "./skills/install/bundled.js";
 // Pack graph transitions: the atomic step and its desired-state predicate.
-export { buildAtomicPackGraphStep, validatePackGraphPostcondition, } from "./packs/graph-transition.js";
+export { validatePackGraphPostcondition } from "./packs/graph-transition.js";
 export { buildPackMemberInstallStep } from "./packs/member-install-step.js";
 export { configuredPackConstraintBlockPlan, prospectivePackConstraintProblems, relevantPackConstraintProblems, } from "./packs/constraint-gate.js";
 // Uninstall: withdrawing extensions, as one use case behind every spelling.
 export { UninstallExtensions, prepareUninstallExtensions, previewOrApplyUninstallExtensions, } from "./uninstall/uninstall-extensions.js";
 export { resolveRootUninstallIntent, rootUninstallableTypeSegments, } from "./uninstall/root-intent.js";
-export { exclusiveMemberRetentionPolicy, makeWorkspaceRetentionPolicy, } from "./uninstall/retention-policy.js";
 export { PACK_UNINSTALL_GRAPH_BLOCKER_ID, packUninstallRecoveryIdentifiers, planPackUninstallGraphReadiness, } from "./packs/uninstall/readiness.js";
 export {} from "./packs/uninstall/plan.js";
 // Skill lifecycle operations
 export { getSkillDisplayName } from "./skills/utils.js";
-export { gitHostedSkillArtifactSource, installSkill, } from "./skills/operations/install.js";
 export { enableSkill } from "./skills/operations/enable.js";
 export { disableSkill } from "./skills/operations/disable.js";
 // MCP server lifecycle operations. Installation itself is a materialization

package/dist/src/install/install-extensions.d.ts

@@ -23,8 +23,8 @@ import type { ExtensionResolutionFailed } from "@agentxm/extension-resolution";
 import type { ExtensionLifecycleFailed } from "../errors.js";
 import { BundledAxmSkillAsset } from "../skills/install/bundled.js";
 import { type ConfiguredInstallRequirements } from "./configured.js";
-import type { ExtensionSelectionCancelled } from "./selection-interaction.js";
-import { ExtensionSelectionInteraction } from "./selection-interaction.js";
+import { SkillSelectionInteraction, type SkillSelectionFailure } from "../skills/application/index.js";
+import { SubagentSelectionInteraction, type SubagentSelectionFailure } from "../subagents/application/index.js";
 import { type InstallExecutionFailure, type InstallStepRequirements, type PrepareInstallRequirements } from "./vocabulary.js";
 /**
  * What the request installs: the extensions the workspace already declares,
@@ -91,9 +91,9 @@ export interface InstallExtensionsCandidate {
  * A configured entry's resolution refusal travels with its own category and
  * sentence rather than as this feature's generic refusal.
  */
-export type InstallExtensionsFailure = ExtensionLifecycleFailed | ExtensionResolutionFailed | ExtensionSelectionCancelled | InstallExecutionFailure;
+export type InstallExtensionsFailure = ExtensionLifecycleFailed | ExtensionResolutionFailed | SkillSelectionFailure | SubagentSelectionFailure | InstallExecutionFailure;
 /** Settle an install without writing anything. */
-export declare const prepareInstallExtensions: (request: InstallExtensionsRequest) => Effect.Effect<InstallExtensionsCandidate, InstallExtensionsFailure, PrepareInstallRequirements | ConfiguredInstallRequirements | ExtensionSelectionInteraction | BundledAxmSkillAsset>;
+export declare const prepareInstallExtensions: (request: InstallExtensionsRequest) => Effect.Effect<InstallExtensionsCandidate, InstallExtensionsFailure, PrepareInstallRequirements | ConfiguredInstallRequirements | SkillSelectionInteraction | SubagentSelectionInteraction | BundledAxmSkillAsset>;
 /**
  * Everything resolving a settled install writes through: the candidate's own
  * step requirements plus the operation boundary that presents, journals, and
@@ -104,7 +104,7 @@ export type ResolveInstallExtensionsRequirements = PrepareInstallRequirements |
 export declare const previewOrApplyInstallExtensions: (candidate: InstallExtensionsCandidate, execution: PlanExecution) => Effect.Effect<OperationResolution, InstallExtensionsFailure, ResolveInstallExtensionsRequirements>;
 /** The install use case: settle a request, then preview or apply it. */
 export declare const InstallExtensions: {
-    readonly prepare: (request: InstallExtensionsRequest) => Effect.Effect<InstallExtensionsCandidate, InstallExtensionsFailure, PrepareInstallRequirements | ConfiguredInstallRequirements | ExtensionSelectionInteraction | BundledAxmSkillAsset>;
+    readonly prepare: (request: InstallExtensionsRequest) => Effect.Effect<InstallExtensionsCandidate, InstallExtensionsFailure, PrepareInstallRequirements | ConfiguredInstallRequirements | SkillSelectionInteraction | SubagentSelectionInteraction | BundledAxmSkillAsset>;
     readonly previewOrApply: (candidate: InstallExtensionsCandidate, execution: PlanExecution) => Effect.Effect<OperationResolution, InstallExtensionsFailure, ResolveInstallExtensionsRequirements>;
 };
 //# sourceMappingURL=install-extensions.d.ts.map

package/dist/src/install/install-extensions.js

@@ -31,7 +31,8 @@ import { BundledAxmSkillAsset, planBundledAxmSkillInstall } from "../skills/inst
 import { buildConfiguredInstallPlan } from "./configured.js";
 import { formatRegistryProbe } from "./registry-source-resolution.js";
 import { resolveRootInstallIntent } from "./root-intent.js";
-import { ExtensionSelectionInteraction } from "./selection-interaction.js";
+import { SkillSelectionInteraction, } from "../skills/application/index.js";
+import { SubagentSelectionInteraction, } from "../subagents/application/index.js";
 import { installRefused, } from "./vocabulary.js";
 const EMPTY_DIAGNOSTICS = { resolutionLines: [], companionPackages: [] };
 const emptyPlan = (request) => ({

package/dist/src/install/root-intent.d.ts

@@ -2,8 +2,8 @@ import * as Effect from "effect/Effect";
 import * as Schema from "effect/Schema";
 import type { ExtensionLifecycleFailed } from "../errors.js";
 import { type InstallableExtensionType } from "@agentxm/extension-model/unstable/extensions/installable-types";
-export declare const rootInstallableTypeSegments: readonly ("knowledge" | "rules" | "hooks" | "mcps" | "skills" | "subagents" | "packs")[];
-export declare const RootInstallableTypeSegmentSchema: Schema.Literals<readonly ("knowledge" | "rules" | "hooks" | "mcps" | "skills" | "subagents" | "packs")[]>;
+export declare const rootInstallableTypeSegments: readonly ("knowledge" | "rules" | "hooks" | "skills" | "subagents" | "packs" | "mcps")[];
+export declare const RootInstallableTypeSegmentSchema: Schema.Literals<readonly ("knowledge" | "rules" | "hooks" | "skills" | "subagents" | "packs" | "mcps")[]>;
 export type RootInstallableTypeSegment = typeof RootInstallableTypeSegmentSchema.Type;
 export type RootInstallableType = InstallableExtensionType;
 export interface RootInstallIntent {

package/dist/src/install/vocabulary.d.ts

@@ -15,7 +15,8 @@ import type * as Path from "effect/Path";
 import type * as Scope from "effect/Scope";
 import type * as HttpClient from "effect/unstable/http/HttpClient";
 import type { NativeWriteAuthority } from "@agentxm/agent-integration";
-import type { ManagerRequirements, McpSecretStore, RecipeRequirements } from "@agentxm/extension-materialization";
+import type { ManagerRequirements, McpSecretStore } from "@agentxm/extension-materialization";
+import type { RecipeRequirements } from "@agentxm/workspace-reconciliation";
 import type { ExtensionName } from "@agentxm/extension-model/unstable/extensions";
 import type { HookExtensionRef } from "@agentxm/extension-model/unstable/extensions/refs/hook";
 import type { KnowledgeExtensionRef } from "@agentxm/extension-model/unstable/extensions/refs/knowledge";
@@ -29,8 +30,8 @@ import type { VersionRange } from "@agentxm/extension-model/unstable/version-con
 import type { ExtensionResolutionFailed, PackDependencyRefResolver } from "@agentxm/extension-resolution";
 import type { SourceHostProviders, WorkspaceCatalog } from "@agentxm/extension-sources";
 import type { ApprovalRecoveryMissing, CandidateFingerprintFailed, OperationJournal, PlanInteractionFailed, ResolvePlanInteraction } from "@agentxm/workspace-operations";
-import type { CodingAgentRepository } from "@agentxm/workspace-projection";
-import type { AcceptedCanonicalRefError, ConfiguredAgentOutcomesProvider, LockfileValidationError, WorkspaceMutations, WorkspaceSettingsReadFailure, WorkspaceStateReadFailure } from "@agentxm/workspace-state";
+import type { CodingAgentRepository, WorkspaceInvariantFacts } from "@agentxm/workspace-projection";
+import type { AcceptedCanonicalRefError, ConfiguredAgentOutcomesProvider, LockfileValidationError, LockfileReader, WorkspaceMutations, WorkspaceSettingsReadFailure, WorkspaceStateReadFailure } from "@agentxm/workspace-state";
 import type { FootprintRecorder, WorkspaceTransactionScope, WorkspaceTransitionAcquireFailure } from "@agentxm/workspace-transactions";
 import { ExtensionLifecycleFailed } from "../errors.js";
 /**
@@ -41,7 +42,7 @@ import { ExtensionLifecycleFailed } from "../errors.js";
  * composed once at the application's runtime boundary; nothing is captured
  * into a step's closure on the way, and no failure adapter is among them.
  */
-export type InstallStepRequirements = ManagerRequirements | RecipeRequirements | McpSecretStore | CodingAgentRepository | WorkspaceMutations | NativeWriteAuthority;
+export type InstallStepRequirements = ManagerRequirements | RecipeRequirements | McpSecretStore | CodingAgentRepository | LockfileReader | WorkspaceInvariantFacts | WorkspaceMutations | NativeWriteAuthority;
 /**
  * What routing a source locator, probing configured registries, and reading
  * what a source contains all need.

package/dist/src/knowledge/install/plan.js

@@ -9,7 +9,8 @@
  */
 import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
-import { KnowledgeManager, extensionRefLifecycleWarnings, extensionRefRegistryLifecycle, targetFromRef, toLabelWithCompanions, toStepKey, } from "@agentxm/extension-materialization";
+import { KnowledgeManager } from "@agentxm/extension-materialization";
+import { extensionRefLifecycleWarnings, extensionRefRegistryLifecycle, targetFromRef, toLabelWithCompanions, toStepKey, } from "@agentxm/workspace-reconciliation";
 import { parseSourceQualifiedRegistrySourcePatternParts, } from "@agentxm/extension-model/unstable/extensions";
 import { SourceHostProviders, resolveSource } from "@agentxm/extension-sources";
 import { operationPresentation, } from "@agentxm/workspace-operations";

package/dist/src/knowledge/uninstall/plan.js

@@ -12,14 +12,15 @@ import * as Effect from "effect/Effect";
 import * as FileSystem from "effect/FileSystem";
 import * as Option from "effect/Option";
 import * as Path from "effect/Path";
-import { KnowledgeManager, KnowledgeUnavailable, buildUninstallOperation, } from "@agentxm/extension-materialization";
+import { KnowledgeManager, KnowledgeUnavailable } from "@agentxm/extension-materialization";
+import { buildUninstallOperation } from "@agentxm/workspace-reconciliation";
 import { makeWorkspaceRelativePath } from "@agentxm/extension-model/unstable/path-types";
 import { resolveInstructionsConfig } from "@agentxm/workspace-projection";
 import { WorkspaceMutations, acceptedCanonicalObservation, computeExtensionPathsForLayout, extensionPathSourceFromLockEntry, } from "@agentxm/workspace-state";
 import { ExtensionLifecycleFailed } from "../../errors.js";
 import { lifecycleStepFailure } from "../../step-failure.js";
 import { installRefused } from "../../install/vocabulary.js";
-import { makeWorkspaceRetentionPolicy } from "../../uninstall/retention-policy.js";
+import { makeWorkspaceRetentionPolicy } from "@agentxm/workspace-reconciliation";
 const lockCanonicalRoot = (path, layout, locked) => computeExtensionPathsForLayout(path.join, layout, extensionPathSourceFromLockEntry(locked), "knowledge", locked.workspaceName).canonicalPath;
 /** Settle whether this Knowledge bundle has anything to remove. */
 export const parseKnowledgeUninstallRequest = Effect.fn("UninstallExtensions.parseKnowledgeRequest")(function* (selector) {
@@ -107,7 +108,7 @@ const inspectOwnership = Effect.fn("UninstallExtensions.inspectKnowledgeOwnershi
 export const planKnowledgeUninstall = Effect.fn("UninstallExtensions.planKnowledge")(function* (intent) {
     const ws = yield* WorkspaceMutations;
     const manager = yield* KnowledgeManager;
-    const retentionPolicy = makeWorkspaceRetentionPolicy(ws);
+    const retentionPolicy = makeWorkspaceRetentionPolicy(ws, lifecycleStepFailure);
     /** The accepted ownership fact, not on-disk presence, decides removability. */
     const isAcceptedTargetPresent = (target) => Effect.gen(function* () {
         const graph = yield* ws.getDesiredStateGraph();

package/dist/src/mcps/install/plan.d.ts

@@ -14,7 +14,7 @@ import { type ExtensionName, type Handle } from "@agentxm/extension-model/unstab
 import type { McpServerExtensionRef } from "@agentxm/extension-model/unstable/extensions/refs/mcp-server";
 import type { RegistrySource } from "@agentxm/extension-model/unstable/sources/types";
 import { type Plan } from "@agentxm/workspace-operations";
-import type { ExtensionLifecycleFailed } from "../../errors.js";
+import { ExtensionLifecycleFailed } from "../../errors.js";
 import { type InstallStepRequirements, type McpServerInstallIntent, type ResolveInstallRequirements } from "../../install/vocabulary.js";
 /** An MCP install request after grammar parsing, before anything is discovered. */
 export interface ParsedMcpServerInstallRequest {

package/dist/src/mcps/install/plan.js

@@ -9,16 +9,21 @@
  * @experimental This API is unstable and may change without notice.
  */
 import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Path from "effect/Path";
 import * as Option from "effect/Option";
 import * as Result from "effect/Result";
 import * as Schema from "effect/Schema";
-import { installMcpServer } from "@agentxm/extension-materialization";
+import { installMcpServer, readMcpServerManifest } from "@agentxm/workspace-reconciliation";
+import { materializeRegistryPackage } from "@agentxm/extension-materialization";
+import { validateManifestMcpServerTargets } from "@agentxm/agent-integration";
 import { CONFIGURABLE_AGENTS_BY_ID, } from "@agentxm/extension-model/unstable/agent-capabilities";
 import { ExtensionNameSchema, } from "@agentxm/extension-model/unstable/extensions";
 import { intersectVersionConstraints } from "@agentxm/extension-model/unstable/version-constraints";
 import { SourceHostProviders, resolveSource } from "@agentxm/extension-sources";
 import { operationPresentation } from "@agentxm/workspace-operations";
 import { WorkspaceMutations, mcpRegistryResolutionKey } from "@agentxm/workspace-state";
+import { ExtensionLifecycleFailed } from "../../errors.js";
 import { lifecycleStepFailure } from "../../step-failure.js";
 import { registryLoginSuggestions } from "../../install/registry-login-suggestion.js";
 import { parseRegistryInstallTarget } from "../../install/registry-install-target.js";
@@ -267,6 +272,58 @@ export const planMcpServerInstall = Effect.fn("InstallExtensions.planMcpServer")
             });
         }
     }
+    yield* Effect.scoped(Effect.gen(function* () {
+        const fs = yield* FileSystem.FileSystem;
+        const path = yield* Path.Path;
+        const ref = intent.ref;
+        // Inspect verified package bytes outside the workspace. A fresh install
+        // has no canonical manifest for the usual projection inspection to read.
+        const manifestPath = ref.refType === "registry"
+            ? yield* Effect.gen(function* () {
+                const scratch = yield* fs.makeTempDirectoryScoped({ prefix: "axm-mcp-preflight-" });
+                return yield* materializeRegistryPackage({
+                    baseDir: scratch,
+                    destinationPath: path.join(scratch, "package"),
+                    sourceLocation: ref.source.location,
+                    owner: ref.owner,
+                    type: "mcp-server",
+                    name: ref.name,
+                    version: ref.version,
+                    integrity: ref.integrity,
+                    messages: {
+                        integrityMismatchDetail: `Integrity mismatch for ${ref.name}@${ref.version}`,
+                    },
+                });
+            })
+            : ref.location;
+        const manifest = yield* readMcpServerManifest(manifestPath);
+        if (Option.isNone(manifest)) {
+            return yield* installRefused({
+                category: "validation",
+                detail: `Cannot read MCP manifest for ${intent.localName}`,
+            });
+        }
+        const entries = yield* ws.getConfiguredMcpServerEntries();
+        yield* validateManifestMcpServerTargets({
+            manifest: manifest.value,
+            agentIds: yield* ws.getConfiguredAgents(),
+            scope: ws.scope,
+            serverName: intent.localName,
+            values: { ...entries[intent.localName]?.env, ...intent.env },
+            enabled: entries[intent.localName]?.enabled ?? true,
+        }).pipe(Effect.mapError((cause) => installRefused({
+            category: "conflict",
+            detail: cause.reason,
+            recover: "Use an MCP package whose transport and symbolic inputs are supported by every configured reader of the shared target.",
+            cause,
+        })));
+    })).pipe(Effect.mapError((cause) => cause instanceof ExtensionLifecycleFailed
+        ? cause
+        : installRefused({
+            category: "validation",
+            detail: `Cannot inspect MCP package ${intent.localName}`,
+            cause,
+        })));
     return {
         _tag: "Plan",
         name: "Install MCP server",
@@ -287,8 +344,7 @@ export const planMcpServerInstall = Effect.fn("InstallExtensions.planMcpServer")
                                 localName: intent.localName,
                                 nonInteractive: intent.nonInteractive,
                                 force: intent.force,
-                                versionRange: intent.versionRange,
-                                skipSettings: Option.none(),
+                                declaration: { name: intent.localName, versionRange: intent.versionRange },
                                 env: Option.some(intent.env ?? {}),
                             },
                         }).pipe(Effect.mapError(lifecycleStepFailure)),

package/dist/src/mcps/operations/uninstall.js

@@ -18,7 +18,8 @@ import { appendWarningsToMessage } from "@agentxm/workspace-operations";
 import { WorkspaceMutations } from "@agentxm/workspace-state";
 import { removeIfExists } from "@agentxm/workspace-state";
 import { acceptedCanonicalObservation, acceptedLockedCanonicalPath, removableAcceptedCanonicalPath, } from "@agentxm/workspace-state";
-import { agentConfigTarget, collectSecretInputNames, deleteMcpSecrets, mcpServerArtifact, mcpSettingsTarget, readMcpServerManifest, McpSecretStore, } from "@agentxm/extension-materialization";
+import { agentConfigTarget, mcpServerArtifact, mcpSettingsTarget, McpSecretStore, } from "@agentxm/extension-materialization";
+import { collectSecretInputNames, deleteMcpSecrets, readMcpServerManifest, } from "@agentxm/workspace-reconciliation";
 import { StepFailureConversion, withAdaptedStepFailures } from "../../step-failure-conversion.js";
 import { ExtensionLifecycleFailed } from "../../errors.js";
 const REQUIRED_AGENT_IDS = new Set([

package/dist/src/mcps/uninstall/plan.js

@@ -13,11 +13,13 @@ import * as Effect from "effect/Effect";
 import * as FileSystem from "effect/FileSystem";
 import * as Option from "effect/Option";
 import * as Path from "effect/Path";
-import { McpServerManager, buildUninstallOperation, collectSecretInputNames, deleteMcpSecrets, mcpServerArtifact, mcpSourceTarget, readMcpServerManifest, } from "@agentxm/extension-materialization";
+import { McpServerManager, mcpServerArtifact, mcpSourceTarget, } from "@agentxm/extension-materialization";
+import { collectSecretInputNames, deleteMcpSecrets, readMcpServerManifest, } from "@agentxm/workspace-reconciliation";
+import { buildUninstallOperation } from "@agentxm/workspace-reconciliation";
 import { appendWarningsToMessage, } from "@agentxm/workspace-operations";
 import { WorkspaceMutations, acceptedLockedCanonicalPath, } from "@agentxm/workspace-state";
 import { lifecycleStepFailure } from "../../step-failure.js";
-import { makeWorkspaceRetentionPolicy } from "../../uninstall/retention-policy.js";
+import { makeWorkspaceRetentionPolicy } from "@agentxm/workspace-reconciliation";
 import { workspaceLockfilePath, workspaceSettingsPath } from "../../workspace-paths.js";
 /** One local connection name is removed at a time. */
 export const parseMcpServerUninstallRequest = (selector) => ({
@@ -28,7 +30,7 @@ export const planMcpServerUninstall = Effect.fn("UninstallExtensions.planMcpServ
     const ws = yield* WorkspaceMutations;
     const mcpServerManager = yield* McpServerManager;
     const path = yield* Path.Path;
-    const retentionPolicy = makeWorkspaceRetentionPolicy(ws);
+    const retentionPolicy = makeWorkspaceRetentionPolicy(ws, lifecycleStepFailure);
     const steps = intent.targets.map((target) => {
         const step = buildUninstallOperation(mcpServerManager, retentionPolicy, {
             toStepFailure: lifecycleStepFailure,
@@ -63,7 +65,14 @@ export const planMcpServerUninstall = Effect.fn("UninstallExtensions.planMcpServ
                     onNone: () => new Set(),
                     onSome: collectSecretInputNames,
                 });
-                const secretDeletionWarnings = unchanged || desiredNode === undefined || desiredNode.authority === "inline"
+                const remaining = yield* ws
+                    .getDesiredStateGraph()
+                    .pipe(Effect.mapError(lifecycleStepFailure));
+                const remainsDesired = remaining.nodes.some((node) => node.type === "mcp-server" && node.name === target.name);
+                const secretDeletionWarnings = unchanged ||
+                    remainsDesired ||
+                    desiredNode === undefined ||
+                    desiredNode.authority === "inline"
                     ? []
                     : (yield* deleteMcpSecrets({
                         scopeRoot: path.resolve(ws.baseDir),

package/dist/src/packs/graph-transition.d.ts

@@ -11,32 +11,7 @@
  */
 import * as Effect from "effect/Effect";
 import { WorkspaceMutations, type DesiredExtensionNode } from "@agentxm/workspace-state";
-import { type JobStepArtifact, type PlannedJobStep } from "@agentxm/workspace-operations";
 import type { ExtensionLifecycleFailed } from "../errors.js";
-import { type LifecycleStepFailure } from "../step-failure.js";
-import { type InstallStepRequirements } from "../install/vocabulary.js";
-export interface AtomicPackGraphChild {
-    readonly step: PlannedJobStep<InstallStepRequirements>;
-    readonly coverage: "eligible" | "ineligible";
-}
-/**
- * What a pack transition checks before it writes and after it commits. The
- * checks are the planner's, so their failure family and their requirements
- * travel with them rather than being fixed here.
- */
-export interface AtomicPackGraphStepArgs<E extends LifecycleStepFailure, R> {
-    readonly label: string;
-    readonly message: string;
-    readonly artifact: JobStepArtifact;
-    readonly children: ReadonlyArray<AtomicPackGraphChild>;
-    readonly reportUnchangedWhenChildrenUnchanged?: boolean;
-    /** A stale-candidate check that runs under the transition, before any write. */
-    readonly preTransition?: Effect.Effect<void, E, R>;
-    /** The desired-graph predicate the committed transition must satisfy. */
-    readonly validate: Effect.Effect<void, E, R>;
-}
-/** Wrap a pack transition's children in one workspace transaction. */
-export declare const buildAtomicPackGraphStep: <E extends LifecycleStepFailure, R>(args: AtomicPackGraphStepArgs<E, R>) => Effect.Effect<PlannedJobStep<InstallStepRequirements | R>>;
 interface RequiredPack {
     readonly name: string;
     readonly identity: string;