@amsterdamdatalabs/enact-extensions 0.1.0 → 0.1.1

package/README.md

@@ -3,24 +3,24 @@
 Multi-surface **plugin manifest** tooling for Enact: schemas, validation, sync, and the plugin-dev toolkit for ENACT-native bundles plus derived Claude Code, Codex, and Cursor projections.
 
 **Repository:** https://dev.azure.com/amsterdamdatalabs/Enact/_git/enact-extensions
-**Package:** `@enact/extensions`
+**Package:** `@amsterdamdatalabs/enact-extensions`
 **CLI:** `enact-extensions`
 
 ## Scope
 
-This repo is the manifest tooling package (`@enact/extensions`) plus the bundled `plugin-dev` toolkit under `extensions/`. It owns:
+This repo is the manifest tooling package (`@amsterdamdatalabs/enact-extensions`) plus a set of self-contained plugin bundles under `extensions/`. It owns:
 
-- `spec/` — JSON schemas (canonical: `enact.json`) + per-host schemas (`claude-plugin.json`, `codex-plugin.json`, `cursor-plugin.json`)
-- `src/` — `create/*` and `validate/*` TypeScript library
-- `scripts/` — CLI: `enact-extensions` (`validate` | `sync` | `install`, path defaults to cwd)
-- `extensions/` — distributable `plugin-dev` bundle (plugin-development skills, agents, commands)
-- `catalog/` — registered sibling bundle roots for `validate:catalog` (ADR 0010)
+- `spec/` — JSON schemas (canonical: `enact.json`) + per-host schemas (`claude-plugin.json`, `codex-plugin.json`, `cursor-plugin.json`) + `index.json` (discovery index schema)
+- `src/` — `create/*`, `validate/*`, and `install` TypeScript library
+- `scripts/` — CLI: `enact-extensions` (`validate` | `sync` | `install` | `uninstall` | `list` | `index` | `log` | `outdated` | `update` | `serve` | `hooks`, path defaults to cwd)
+- `extensions/<plugin>/` — one self-contained bundle per plugin (e.g. `plugin-dev`, `cmux`, `devops`, `dev-state`, `net-revenue-management`), each with a canonical `.agents/plugin.json` + skills/agents/hooks
+- `web/` — vendored ADL design assets (`web/assets/tokens/*.css`, `web/assets/logo-*.png`) + `web/index.html` (the management UI served by `serve`)
 
-It does **not** ship product plugins. The consumer product plugins — `enact-context`, `enact-factory`, `enact-operator`, `enact-wiki` — live as **sibling top-level submodules of `enact-os/`**, each owning its own `extensions/` bundle. They are listed in `catalog/` so this repo's `validate:catalog` script can audit them from a single place.
+Distribution is **install-only**: there is no pre-built marketplace artifact and no central registry. `enact-extensions install <bundle>` projects the per-surface manifest from `.agents/plugin.json` on the fly, copies the bundle into the target home, and enables it.
 
 ## Surface Contract
 
-`extensions/.agents/plugin.json` is the canonical source manifest. `enact-extensions sync` derives `.claude-plugin/`, `.codex-plugin/`, and `.cursor-plugin/` from that source.
+Each `extensions/<plugin>/.agents/plugin.json` is the canonical source manifest. `enact-extensions sync` (and `install`) derive `.claude-plugin/`, `.codex-plugin/`, and `.cursor-plugin/` from that source — those projections are generated, never committed.
 
 Author skills, commands, and hooks so they are valid on **all projected surfaces by default**:
 
@@ -44,21 +44,63 @@ This repo has no submodules of its own. Sibling product packages are submoduled
 ```bash
 npm install
 npm run build
-npm run validate       # validate this repo's own extensions/ bundle
-npm run sync           # regenerate host manifests for extensions/ from .agents/plugin.json
-npm run validate:catalog
+npm run validate       # validate the plugin-dev bundle
+npm run sync           # regenerate host manifests for plugin-dev from .agents/plugin.json
 ```
 
-To validate a sibling product bundle (e.g. the operator package at `../enact-operator/extensions`):
+To validate, install, list, or index any bundle:
 
 ```bash
 npm run build
-node scripts/enact-extensions.mjs validate ../enact-operator/extensions
+node scripts/enact-extensions.mjs validate extensions/net-revenue-management
+node scripts/enact-extensions.mjs install extensions/net-revenue-management --platform enact --global
+node scripts/enact-extensions.mjs install extensions/net-revenue-management --platform enact --local
+
+# Install by bare name (resolves from extensions/ tree)
+node scripts/enact-extensions.mjs install net-revenue-management --platform enact --global
+
+# Install to multiple platforms at once
+node scripts/enact-extensions.mjs install net-revenue-management --platform all
+node scripts/enact-extensions.mjs install net-revenue-management --platform claude,cursor
+
+# List available bundles
+node scripts/enact-extensions.mjs list
+node scripts/enact-extensions.mjs list --json
+
+# Generate local discovery index (gitignored artifact; spec/index.json is the committed schema)
+node scripts/enact-extensions.mjs index
+node scripts/enact-extensions.mjs index --stdout
+
+# Uninstall a plugin (full remove: files + marketplace entry + config.toml entry)
+node scripts/enact-extensions.mjs uninstall net-revenue-management --platform enact
+node scripts/enact-extensions.mjs uninstall net-revenue-management --platform all
+
+# View the install ledger (most recent first)
+node scripts/enact-extensions.mjs log
+node scripts/enact-extensions.mjs log --json
+
+# Check freshness drift (installed vs canonical source, per plugin+surface)
+node scripts/enact-extensions.mjs outdated
+node scripts/enact-extensions.mjs outdated --json
+
+# Refresh outdated plugins (ledger-driven, per-surface)
+node scripts/enact-extensions.mjs update --all
+node scripts/enact-extensions.mjs update net-revenue-management
+node scripts/enact-extensions.mjs update --all --dry-run
+
+# Install the session-start drift-check hook
+node scripts/enact-extensions.mjs hooks setup --all
+node scripts/enact-extensions.mjs hooks setup --surfaces claude,codex
+node scripts/enact-extensions.mjs hooks setup --all --remove
+
+# Start the localhost management UI + API
+node scripts/enact-extensions.mjs serve
+node scripts/enact-extensions.mjs serve --port 43217 --open
 ```
 
 ## CLI (`enact-extensions`)
 
-Published from `@enact/extensions`. Path defaults to **cwd**:
+Published from `@amsterdamdatalabs/enact-extensions`. Path defaults to **cwd**:
 
 ```bash
 cd ../enact-operator/extensions
@@ -66,23 +108,55 @@ enact-extensions validate
 enact-extensions sync
 ```
 
+Subcommands: `validate` | `sync` | `install` | `uninstall` | `list` | `index` | `log` | `outdated` | `update` | `serve` | `hooks`.
+
 Link locally:
 
 ```bash
 npm run build && npm link
 ```
 
+## Freshness
+
+The freshness loop keeps installed plugins in sync with their canonical source without requiring manual tracking:
+
+1. **Install records a content hash** — `enact-extensions install` writes a sha256 hash of the canonical bundle into the ledger entry alongside the version.
+2. **`outdated` detects drift per surface** — compares the recorded hash against the current canonical source hash for each `(plugin, surface)` pair. Status values: `fresh` / `outdated` / `orphaned`. Exit 0 always (report only).
+3. **`update` refreshes the installed surfaces** — driven by the ledger; only the surfaces a plugin is actually installed on are updated. `--all` refreshes every outdated surface; `<name>` refreshes that plugin's outdated surfaces; `--dry-run` shows what would change without touching anything.
+4. **Session-start hook (optional)** — `enact-extensions hooks setup` installs a fast, fail-silent hook that runs `outdated` at the start of each agent session and prints a single advisory line (the exact `enact-extensions update --all` command) when anything is stale. It never auto-updates. Interactive surface picker when run in a TTY with no flags.
+
+**npm postinstall surface-picker:** when you `npm install @amsterdamdatalabs/enact-extensions` in an interactive terminal, a TTY-aware postinstall script prompts which surfaces should receive the drift hook. In non-interactive terminals and CI environments it prints a one-line notice (`Run enact-extensions hooks setup …`) and exits immediately — it never blocks installs or hangs pipelines.
+
+## Web UI (`serve`)
+
+`enact-extensions serve` starts a dependency-free localhost management UI at `http://127.0.0.1:43217` (default port). From the UI you can browse all available extensions and one-click install or uninstall them to any platform surface. Pass `--open` to launch the browser automatically.
+
+The server binds to `127.0.0.1` only — it is never reachable from other machines. API routes: `GET /` (UI), `GET /assets/*` (static assets), `GET /api/index` (discovery index), `GET /api/installed` (current installs), `POST /api/install`, `POST /api/uninstall`.
+
+## Install ledger
+
+Every install and uninstall is appended to a single global JSONL file at `~/.enact/extensions/ledger.jsonl`. Each record contains `{ts, action, name, version, platform, scope, home, path, hash}`. The `hash` field is a sha256 content hash of the canonical bundle at install time — this is the drift detector used by `outdated` to catch content changes even without a version bump. The ledger is best-effort: a write failure never fails the install/uninstall operation. View it with:
+
+```bash
+enact-extensions log           # human-readable, newest first
+enact-extensions log --json    # raw JSON array
+```
+
 ## Layout
 
 ```text
-enact-extensions/           # @enact/extensions package root
-├── src/ spec/ scripts/     # manifest library + CLI
-├── extensions/             # plugin-dev toolkit bundle (this repo's own plugin)
-└── catalog/                # registered sibling bundle roots (validate:catalog target)
+enact-extensions/                    # @amsterdamdatalabs/enact-extensions package root
+├── src/ spec/ scripts/              # manifest library + CLI (validate | sync | install | uninstall | list | index | log | outdated | update | serve | hooks)
+├── web/                             # management UI — web/index.html + web/assets/tokens/*.css + web/assets/logo-*.png
+├── generated/                       # gitignored — local discovery artifacts (e.g. index.json)
+└── extensions/                      # self-contained plugin bundles
+    ├── plugin-dev/                  #   plugin authoring toolkit
+    ├── cmux/ devops/ dev-state/     #   first-party skill bundles
+    └── net-revenue-management/      #   product plugin (Finance)
 ```
 
 ## enact-os integration
 
 `enact-os` submodules **this** repo at `enact-extensions/` for manifest tooling, and separately submodules the product packages (`enact-context`, `enact-factory`, `enact-operator`, `enact-wiki`) at top level. Factory and config paths in `enact-os/config.toml` target each product package by its top-level path.
 
-Skill or manifest changes for a product plugin ship from that product's own `extensions/` bundle (e.g. `enact-operator/extensions/`); validate with `enact-extensions` from inside that bundle. `@enact/extensions` owns manifest tooling only; `enact-factory setup` or `enact-factory plugins delivery` persists the local install scope.
+Skill or manifest changes for a product plugin ship from that product's own `extensions/` bundle (e.g. `enact-operator/extensions/`); validate with `enact-extensions` from inside that bundle. `@amsterdamdatalabs/enact-extensions` owns manifest tooling only; `enact-factory setup` or `enact-factory plugins delivery` persists the local install scope.

package/dist/index.d.ts

@@ -6,9 +6,9 @@ export { defaultCursorHome } from "./internal/cursor.js";
 export { MANIFEST_BY_PLATFORM, MANIFEST_FIELDS, manifestRelPath, DEFAULT_TARGETS, DEFAULT_PATHS, } from "./internal/platform.js";
 export { defaultCodexHome, defaultEnactHome, ensureMarketplace, ensureMcpServer, isPluginEnabled, readCodexConfig, readCodexConfigProbe, resolveCodexInstallHomes, removeMcpServer, removePluginConfig, setPluginEnabled, writeCodexConfig, } from "./internal/codex.js";
 export { createEnactManifest, deriveClaudeManifest, deriveCodexManifest, deriveCursorManifest, deriveManifest, resolveTargets, scaffoldPlugin, syncPlatformManifests, manifestForPlatform, } from "./create/index.js";
-export { validateEnactManifest, assertEnactManifest, validateClaudeManifest, validateCodexManifest, validateCursorManifest, validateManifest, validatePluginManifest, validatePluginBundle, checkComponentPaths, checkPluginBundleComponentPaths, readManifestFile, } from "./validate/index.js";
+export { validateEnactManifest, assertEnactManifest, validateClaudeManifest, validateCodexManifest, validateCursorManifest, validateManifest, validatePluginManifest, validatePluginBundle, validatePluginBundleFromCanonical, checkComponentPaths, checkPluginBundleComponentPaths, checkPluginBundleComponentPathsFromCanonical, readManifestFile, } from "./validate/index.js";
 export type { PluginValidationReport } from "./validate/index.js";
 export type { ScaffoldOptions } from "./create/index.js";
-export { installCodexPluginBundle, installPluginBundle, installClaudePluginBundle, installCursorPluginBundle, } from "./install.js";
-export type { CodexPluginInstallOptions, CodexPluginInstallResult, MultiCodexPluginInstallOptions, MultiCodexPluginInstallResult, ClaudePluginInstallOptions, ClaudePluginInstallResult, CursorPluginInstallOptions, CursorPluginInstallResult, } from "./install.js";
+export { installCodexPluginBundle, installPluginBundle, installClaudePluginBundle, installCursorPluginBundle, installSharedPluginBundle, defaultSharedHome, uninstallCodexPluginBundle, uninstallClaudePluginBundle, uninstallCursorPluginBundle, uninstallSharedPluginBundle, } from "./install.js";
+export type { CodexPluginInstallOptions, CodexPluginInstallResult, MultiCodexPluginInstallOptions, MultiCodexPluginInstallResult, ClaudePluginInstallOptions, ClaudePluginInstallResult, CursorPluginInstallOptions, CursorPluginInstallResult, SharedPluginInstallOptions, SharedPluginInstallResult, CodexPluginUninstallOptions, CodexPluginUninstallResult, ClaudePluginUninstallOptions, ClaudePluginUninstallResult, CursorPluginUninstallOptions, CursorPluginUninstallResult, SharedPluginUninstallOptions, SharedPluginUninstallResult, } from "./install.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,QAAQ,EACR,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,+BAA+B,EAC/B,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,yBAAyB,EACzB,wBAAwB,EACxB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,QAAQ,EACR,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,iCAAiC,EACjC,mBAAmB,EACnB,+BAA+B,EAC/B,4CAA4C,EAC5C,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,yBAAyB,EACzB,wBAAwB,EACxB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -4,6 +4,6 @@ export { defaultCursorHome } from "./internal/cursor.js";
 export { MANIFEST_BY_PLATFORM, MANIFEST_FIELDS, manifestRelPath, DEFAULT_TARGETS, DEFAULT_PATHS, } from "./internal/platform.js";
 export { defaultCodexHome, defaultEnactHome, ensureMarketplace, ensureMcpServer, isPluginEnabled, readCodexConfig, readCodexConfigProbe, resolveCodexInstallHomes, removeMcpServer, removePluginConfig, setPluginEnabled, writeCodexConfig, } from "./internal/codex.js";
 export { createEnactManifest, deriveClaudeManifest, deriveCodexManifest, deriveCursorManifest, deriveManifest, resolveTargets, scaffoldPlugin, syncPlatformManifests, manifestForPlatform, } from "./create/index.js";
-export { validateEnactManifest, assertEnactManifest, validateClaudeManifest, validateCodexManifest, validateCursorManifest, validateManifest, validatePluginManifest, validatePluginBundle, checkComponentPaths, checkPluginBundleComponentPaths, readManifestFile, } from "./validate/index.js";
-export { installCodexPluginBundle, installPluginBundle, installClaudePluginBundle, installCursorPluginBundle, } from "./install.js";
+export { validateEnactManifest, assertEnactManifest, validateClaudeManifest, validateCodexManifest, validateCursorManifest, validateManifest, validatePluginManifest, validatePluginBundle, validatePluginBundleFromCanonical, checkComponentPaths, checkPluginBundleComponentPaths, checkPluginBundleComponentPathsFromCanonical, readManifestFile, } from "./validate/index.js";
+export { installCodexPluginBundle, installPluginBundle, installClaudePluginBundle, installCursorPluginBundle, installSharedPluginBundle, defaultSharedHome, uninstallCodexPluginBundle, uninstallClaudePluginBundle, uninstallCursorPluginBundle, uninstallSharedPluginBundle, } from "./install.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,+BAA+B,EAC/B,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,iCAAiC,EACjC,mBAAmB,EACnB,+BAA+B,EAC/B,4CAA4C,EAC5C,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,cAAc,CAAC"}

package/dist/install.d.ts

@@ -57,4 +57,93 @@ export declare function installCodexPluginBundle(options: CodexPluginInstallOpti
 export declare function installPluginBundle(options: MultiCodexPluginInstallOptions): MultiCodexPluginInstallResult;
 export declare function installClaudePluginBundle(options: ClaudePluginInstallOptions): ClaudePluginInstallResult;
 export declare function installCursorPluginBundle(options: CursorPluginInstallOptions): CursorPluginInstallResult;
+export interface CodexPluginUninstallOptions {
+    codexHome?: string;
+    marketplaceName?: string;
+}
+export interface CodexPluginUninstallResult {
+    name: string;
+    marketplaceName: string;
+    removedPaths: string[];
+    /** true when nothing was installed (idempotent no-op) */
+    noop: boolean;
+}
+export interface ClaudePluginUninstallOptions {
+    claudeHome?: string;
+    marketplaceName?: string;
+}
+export interface ClaudePluginUninstallResult {
+    name: string;
+    removedPaths: string[];
+    noop: boolean;
+}
+export interface CursorPluginUninstallOptions {
+    cursorHome?: string;
+}
+export interface CursorPluginUninstallResult {
+    name: string;
+    removedPaths: string[];
+    noop: boolean;
+}
+export interface SharedPluginUninstallOptions {
+    sharedHome?: string;
+}
+export interface SharedPluginUninstallResult {
+    name: string;
+    installedSkillsPath: string;
+    removedPaths: string[];
+    noop: boolean;
+}
+/**
+ * Fully uninstall a Codex/Enact plugin from the given home, reversing installCodexPluginBundle:
+ * - removes <home>/plugins/<name>/ (installed dir)
+ * - removes <home>/marketplaces/<marketplace>/plugins/<name>/ (marketplace plugin dir)
+ * - removes <home>/plugins/cache/<marketplace>/<name>/ (cache dir)
+ * - removes the plugin's entry from marketplace.json (preserves other entries + marketplace reg)
+ * - removes [plugins."<name>@<marketplace>"] from config.toml (preserves [marketplaces.*] etc.)
+ */
+export declare function uninstallCodexPluginBundle(name: string, options?: CodexPluginUninstallOptions): CodexPluginUninstallResult;
+/**
+ * Fully uninstall a Claude plugin, reversing installClaudePluginBundle:
+ * - removes <claudeHome>/plugins/marketplaces/<marketplace>/plugins/<name>/
+ * Note: the marketplace registration in known_marketplaces.json is LEFT intact
+ * (the marketplace itself persists even after its last plugin is removed).
+ */
+export declare function uninstallClaudePluginBundle(name: string, options?: ClaudePluginUninstallOptions): ClaudePluginUninstallResult;
+/**
+ * Fully uninstall a Cursor plugin, reversing installCursorPluginBundle:
+ * - removes <cursorHome>/plugins/local/<name>/
+ */
+export declare function uninstallCursorPluginBundle(name: string, options?: CursorPluginUninstallOptions): CursorPluginUninstallResult;
+export interface SharedPluginInstallOptions {
+    pluginRoot: string;
+    /** Explicit shared home. Defaults to ~/.agents (global) or ./.agents (local). */
+    sharedHome?: string;
+}
+export interface SharedPluginInstallResult {
+    name: string;
+    version: string;
+    /** Absolute path to the installed skills directory: <sharedHome>/.agents/skills/<name> */
+    installedSkillsPath: string;
+}
+/**
+ * Default global shared home base. The convention is that skills live at
+ * `~/.agents/skills/<plugin>/`, so this returns `homedir()` and the install
+ * function appends `.agents/skills/<name>`.
+ *
+ * Pass an explicit `sharedHome` to override (useful in tests or local scope).
+ */
+export declare function defaultSharedHome(): string;
+/**
+ * Install the bundle's skills tree into <sharedHome>/.agents/skills/<plugin>/.
+ * Does NOT write a marketplace entry, config.toml, or any platform-specific
+ * manifest — this is a pure host-neutral skills drop that any host reading
+ * `.agents/skills/` (Codex, Cursor, Gemini, etc.) can pick up.
+ */
+export declare function installSharedPluginBundle(options: SharedPluginInstallOptions): SharedPluginInstallResult;
+/**
+ * Uninstall a shared plugin by removing its skills directory.
+ * Reverses installSharedPluginBundle.
+ */
+export declare function uninstallSharedPluginBundle(name: string, options?: SharedPluginUninstallOptions): SharedPluginUninstallResult;
 //# sourceMappingURL=install.d.ts.map

package/dist/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAkB,UAAU,EAAkB,MAAM,qBAAqB,CAAC;AAYtF,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,8BAA+B,SAAQ,yBAAyB;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,wBAAwB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AA0KD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,wBAAwB,CAoDrG;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,8BAA8B,GAAG,6BAA6B,CAY1G;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,0BAA0B,GAAG,yBAAyB,CA2BxG;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,0BAA0B,GAAG,yBAAyB,CAsBxG"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAkB,UAAU,EAAkB,MAAM,qBAAqB,CAAC;AAYtF,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,8BAA+B,SAAQ,yBAAyB;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,wBAAwB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AA+LD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,wBAAwB,CAqDrG;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,8BAA8B,GAAG,6BAA6B,CAY1G;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,0BAA0B,GAAG,yBAAyB,CA2BxG;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,0BAA0B,GAAG,yBAAyB,CAsBxG;AAMD,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,yDAAyD;IACzD,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;CACf;AAsCD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,2BAAgC,GACxC,0BAA0B,CA4C5B;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,4BAAiC,GACzC,2BAA2B,CAgB7B;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,4BAAiC,GACzC,2BAA2B,CAc7B;AAMD,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,0BAA0B,GAAG,yBAAyB,CA2CxG;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,4BAAiC,GACzC,2BAA2B,CAa7B"}

package/dist/install.js

@@ -1,8 +1,9 @@
 import { cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
-import { defaultCodexHome, ensureMarketplace, readCodexConfig, resolveCodexInstallHomes, setPluginEnabled, writeCodexConfig, } from "./internal/codex.js";
-import { syncPlatformManifests } from "./create/index.js";
-import { checkPluginBundleComponentPaths, readManifestFile, validateClaudeManifest, validateCodexManifest, validateCursorManifest, } from "./validate/index.js";
+import { homedir } from "node:os";
+import { defaultCodexHome, ensureMarketplace, readCodexConfig, removePluginConfig, resolveCodexInstallHomes, setPluginEnabled, writeCodexConfig, } from "./internal/codex.js";
+import { manifestForPlatform } from "./create/index.js";
+import { checkComponentPaths, readManifestFile, validateClaudeManifest, validateCodexManifest, validateCursorManifest, } from "./validate/index.js";
 import { defaultClaudeHome, registerLocalMarketplace } from "./internal/claude.js";
 import { defaultCursorHome } from "./internal/cursor.js";
 function readJson(path, fallback) {
@@ -61,12 +62,30 @@ function projectBundle(sourceRoot, targetRoot, manifest, platformDir) {
     }
     writeJson(join(targetRoot, platformDir, "plugin.json"), manifest);
 }
-function maybeSync(pluginRoot, platform) {
+/**
+ * Derive a per-surface plugin manifest IN MEMORY from the bundle's canonical
+ * Enact manifest. Installs must never write a `.<platform>-plugin/` projection
+ * back into the SOURCE bundle dir — the derived manifest is handed to
+ * `projectBundle`, which writes it ONLY to the install target.
+ *
+ * Backward-compat: some legacy bundles ship a pre-derived per-surface manifest
+ * (`.codex-plugin/plugin.json`) with NO canonical `.agents/plugin.json`. In that
+ * case we fall back to reading the existing per-surface manifest from source —
+ * this is a read, not a write, so the source stays clean.
+ */
+function deriveTargetManifest(pluginRoot, platform) {
     const enactManifestPath = join(pluginRoot, ".agents", "plugin.json");
-    if (!existsSync(enactManifestPath))
-        return [];
-    const enact = readManifestFile(pluginRoot, "enact");
-    return syncPlatformManifests(pluginRoot, enact, [platform]);
+    if (existsSync(enactManifestPath)) {
+        const enact = readManifestFile(pluginRoot, "enact");
+        return manifestForPlatform(platform, enact);
+    }
+    // Legacy fallback: a per-surface-only bundle (no canonical Enact manifest).
+    const surfaceManifestPath = join(pluginRoot, `.${platform}-plugin`, "plugin.json");
+    if (existsSync(surfaceManifestPath)) {
+        return readManifestFile(pluginRoot, platform);
+    }
+    throw new Error(`Cannot derive ${platform} manifest: no canonical manifest at ${enactManifestPath} ` +
+        `and no ${platform} manifest at ${surfaceManifestPath}`);
 }
 function stringField(manifest, key) {
     const value = manifest[key];
@@ -138,13 +157,14 @@ function upsertMarketplaceEntry(codexHome, marketplaceName, manifest, pluginName
 export function installCodexPluginBundle(options) {
     const codexHome = options.codexHome ?? defaultCodexHome();
     const marketplaceName = options.marketplaceName ?? "enact-os-plugins";
-    const syncResults = options.sync !== false ? maybeSync(options.pluginRoot, "codex") : [];
-    const codexManifest = readManifestFile(options.pluginRoot, "codex");
+    // Per-surface manifests are derived IN MEMORY; install never writes to source.
+    const codexManifest = deriveTargetManifest(options.pluginRoot, "codex");
     const validation = validateCodexManifest(codexManifest);
     if (!validation.ok) {
         throw new Error(`Invalid Codex plugin manifest:\n${validation.errors.join("\n")}`);
     }
-    const componentIssues = checkPluginBundleComponentPaths(options.pluginRoot, ["codex"]);
+    const componentIssues = checkComponentPaths(options.pluginRoot, codexManifest)
+        .map((issue) => `codex ${issue}`);
     if (componentIssues.length > 0) {
         throw new Error(`Plugin component paths are not installable:\n${componentIssues.join("\n")}`);
     }
@@ -182,7 +202,7 @@ export function installCodexPluginBundle(options) {
         installedPluginPath: installedPath,
         cachePluginPath: cachePath,
         refreshedPaths: [mktPluginPath, installedPath, cachePath],
-        syncResults,
+        syncResults: [],
     };
 }
 export function installPluginBundle(options) {
@@ -199,8 +219,8 @@ export function installPluginBundle(options) {
 export function installClaudePluginBundle(options) {
     const claudeHome = options.claudeHome ?? defaultClaudeHome();
     const marketplaceName = options.marketplaceName ?? "enact-os-plugins";
-    const syncResults = options.sync !== false ? maybeSync(options.pluginRoot, "claude") : [];
-    const claudeManifest = readManifestFile(options.pluginRoot, "claude");
+    // Per-surface manifest derived IN MEMORY; install never writes to source.
+    const claudeManifest = deriveTargetManifest(options.pluginRoot, "claude");
     const validation = validateClaudeManifest(claudeManifest);
     if (!validation.ok) {
         throw new Error(`Invalid Claude plugin manifest:\n${validation.errors.join("\n")}`);
@@ -221,13 +241,13 @@ export function installClaudePluginBundle(options) {
         marketplaceDir,
         installedPluginPath: installedPath,
         refreshedPaths: [installedPath],
-        syncResults,
+        syncResults: [],
     };
 }
 export function installCursorPluginBundle(options) {
     const cursorHome = options.cursorHome ?? defaultCursorHome();
-    const syncResults = options.sync !== false ? maybeSync(options.pluginRoot, "cursor") : [];
-    const cursorManifest = readManifestFile(options.pluginRoot, "cursor");
+    // Per-surface manifest derived IN MEMORY; install never writes to source.
+    const cursorManifest = deriveTargetManifest(options.pluginRoot, "cursor");
     const validation = validateCursorManifest(cursorManifest);
     if (!validation.ok) {
         throw new Error(`Invalid Cursor plugin manifest:\n${validation.errors.join("\n")}`);
@@ -244,7 +264,188 @@ export function installCursorPluginBundle(options) {
         version,
         installedPluginPath: installedPath,
         refreshedPaths: [installedPath],
-        syncResults,
+        syncResults: [],
     };
 }
+/**
+ * Guard: ensure the target path stays within the expected base directory
+ * to prevent accidental deletion outside a known home.
+ */
+function assertWithinBase(base, target) {
+    const resolvedBase = resolve(base);
+    const resolvedTarget = resolve(target);
+    if (!resolvedTarget.startsWith(resolvedBase + "/") && resolvedTarget !== resolvedBase) {
+        throw new Error(`Safety check failed: resolved path ${resolvedTarget} is not within base ${resolvedBase}`);
+    }
+}
+/**
+ * Remove a marketplace.json entry for `pluginName`.
+ * If the file doesn't exist or the entry isn't there, this is a no-op.
+ * The marketplace registration entry (top-level name/interface fields) is preserved.
+ * Other plugin entries are preserved.
+ */
+function removeMarketplaceEntry(codexHome, marketplaceName, pluginName) {
+    const path = marketplacePath(codexHome, marketplaceName);
+    if (!existsSync(path))
+        return;
+    const current = readJson(path, { name: marketplaceName, plugins: [] });
+    const filtered = (current.plugins ?? []).filter((p) => p.name !== pluginName);
+    writeJson(path, {
+        name: current.name || marketplaceName,
+        ...(current.interface ? { interface: current.interface } : {}),
+        plugins: filtered,
+    });
+}
+/**
+ * Fully uninstall a Codex/Enact plugin from the given home, reversing installCodexPluginBundle:
+ * - removes <home>/plugins/<name>/ (installed dir)
+ * - removes <home>/marketplaces/<marketplace>/plugins/<name>/ (marketplace plugin dir)
+ * - removes <home>/plugins/cache/<marketplace>/<name>/ (cache dir)
+ * - removes the plugin's entry from marketplace.json (preserves other entries + marketplace reg)
+ * - removes [plugins."<name>@<marketplace>"] from config.toml (preserves [marketplaces.*] etc.)
+ */
+export function uninstallCodexPluginBundle(name, options = {}) {
+    const codexHome = options.codexHome ?? defaultCodexHome();
+    const mktName = options.marketplaceName ?? "enact-os-plugins";
+    const pluginConfigKey = `${name}@${mktName}`;
+    const installedPath = installedPluginPath(codexHome, name);
+    const mktPluginPath = marketplacePluginPath(codexHome, mktName, name);
+    // Cache dir is versioned; remove the entire <cache>/<marketplace>/<name>/ subtree
+    const cacheDirForPlugin = join(codexHome, "plugins", "cache", mktName, name);
+    const noop = !existsSync(installedPath) &&
+        !existsSync(mktPluginPath) &&
+        !existsSync(cacheDirForPlugin);
+    const removedPaths = [];
+    if (existsSync(installedPath)) {
+        assertWithinBase(join(codexHome, "plugins"), installedPath);
+        rmSync(installedPath, { recursive: true, force: true });
+        removedPaths.push(installedPath);
+    }
+    if (existsSync(mktPluginPath)) {
+        assertWithinBase(join(codexHome, "marketplaces"), mktPluginPath);
+        rmSync(mktPluginPath, { recursive: true, force: true });
+        removedPaths.push(mktPluginPath);
+    }
+    if (existsSync(cacheDirForPlugin)) {
+        assertWithinBase(join(codexHome, "plugins", "cache"), cacheDirForPlugin);
+        rmSync(cacheDirForPlugin, { recursive: true, force: true });
+        removedPaths.push(cacheDirForPlugin);
+    }
+    // Remove plugin entry from marketplace.json (leave file + other entries intact)
+    removeMarketplaceEntry(codexHome, mktName, name);
+    // Remove [plugins."<name>@<marketplace>"] from config.toml (leave marketplaces.* intact)
+    const config = readCodexConfig(codexHome);
+    removePluginConfig(config, pluginConfigKey);
+    if (existsSync(join(codexHome, "config.toml"))) {
+        writeCodexConfig(codexHome, config);
+    }
+    return { name, marketplaceName: mktName, removedPaths, noop };
+}
+/**
+ * Fully uninstall a Claude plugin, reversing installClaudePluginBundle:
+ * - removes <claudeHome>/plugins/marketplaces/<marketplace>/plugins/<name>/
+ * Note: the marketplace registration in known_marketplaces.json is LEFT intact
+ * (the marketplace itself persists even after its last plugin is removed).
+ */
+export function uninstallClaudePluginBundle(name, options = {}) {
+    const claudeHome = options.claudeHome ?? defaultClaudeHome();
+    const mktName = options.marketplaceName ?? "enact-os-plugins";
+    const marketplaceDir = join(claudeHome, "plugins", "marketplaces", mktName);
+    const installedPath = join(marketplaceDir, "plugins", name);
+    const noop = !existsSync(installedPath);
+    const removedPaths = [];
+    if (existsSync(installedPath)) {
+        assertWithinBase(marketplaceDir, installedPath);
+        rmSync(installedPath, { recursive: true, force: true });
+        removedPaths.push(installedPath);
+    }
+    return { name, removedPaths, noop };
+}
+/**
+ * Fully uninstall a Cursor plugin, reversing installCursorPluginBundle:
+ * - removes <cursorHome>/plugins/local/<name>/
+ */
+export function uninstallCursorPluginBundle(name, options = {}) {
+    const cursorHome = options.cursorHome ?? defaultCursorHome();
+    const installedPath = join(cursorHome, "plugins", "local", name);
+    const noop = !existsSync(installedPath);
+    const removedPaths = [];
+    if (existsSync(installedPath)) {
+        assertWithinBase(join(cursorHome, "plugins", "local"), installedPath);
+        rmSync(installedPath, { recursive: true, force: true });
+        removedPaths.push(installedPath);
+    }
+    return { name, removedPaths, noop };
+}
+/**
+ * Default global shared home base. The convention is that skills live at
+ * `~/.agents/skills/<plugin>/`, so this returns `homedir()` and the install
+ * function appends `.agents/skills/<name>`.
+ *
+ * Pass an explicit `sharedHome` to override (useful in tests or local scope).
+ */
+export function defaultSharedHome() {
+    return homedir();
+}
+/**
+ * Install the bundle's skills tree into <sharedHome>/.agents/skills/<plugin>/.
+ * Does NOT write a marketplace entry, config.toml, or any platform-specific
+ * manifest — this is a pure host-neutral skills drop that any host reading
+ * `.agents/skills/` (Codex, Cursor, Gemini, etc.) can pick up.
+ */
+export function installSharedPluginBundle(options) {
+    const sharedHome = options.sharedHome ?? defaultSharedHome();
+    // Read the enact manifest for name/version; fall back to codex if no enact manifest.
+    const enactManifestPath = join(options.pluginRoot, ".agents", "plugin.json");
+    let manifest;
+    if (existsSync(enactManifestPath)) {
+        manifest = readManifestFile(options.pluginRoot, "enact");
+    }
+    else {
+        manifest = readManifestFile(options.pluginRoot, "codex");
+    }
+    const name = stringField(manifest, "name");
+    if (!name) {
+        throw new Error("Plugin manifest is missing name");
+    }
+    const version = stringField(manifest, "version") ?? "0.0.0";
+    // Resolve the skills source path from the manifest
+    const rawSkills = stringField(manifest, "skills");
+    if (!rawSkills) {
+        throw new Error(`Plugin manifest for '${name}' has no 'skills' field — nothing to install for shared target`);
+    }
+    const cleanedSkills = rawSkills.replace(/^\.\//, "").replace(/\/+$/, "");
+    const skillsSource = resolve(options.pluginRoot, cleanedSkills);
+    // shared is a skills-only surface: a missing skills source is misuse.
+    // Fail loudly before touching the target rather than producing an empty dir.
+    if (!existsSync(skillsSource)) {
+        throw new Error(`Cannot install shared bundle "${name}": skills source not found at ${skillsSource}`);
+    }
+    // Target: <sharedHome>/.agents/skills/<name>/
+    const installedSkillsPath = join(sharedHome, ".agents", "skills", name);
+    rmSync(installedSkillsPath, { recursive: true, force: true });
+    mkdirSync(installedSkillsPath, { recursive: true });
+    cpSync(skillsSource, installedSkillsPath, { recursive: true, force: true });
+    return {
+        name,
+        version,
+        installedSkillsPath,
+    };
+}
+/**
+ * Uninstall a shared plugin by removing its skills directory.
+ * Reverses installSharedPluginBundle.
+ */
+export function uninstallSharedPluginBundle(name, options = {}) {
+    const sharedHome = options.sharedHome ?? defaultSharedHome();
+    const installedSkillsPath = join(sharedHome, ".agents", "skills", name);
+    const noop = !existsSync(installedSkillsPath);
+    const removedPaths = [];
+    if (existsSync(installedSkillsPath)) {
+        assertWithinBase(join(sharedHome, ".agents", "skills"), installedSkillsPath);
+        rmSync(installedSkillsPath, { recursive: true, force: true });
+        removedPaths.push(installedSkillsPath);
+    }
+    return { name, installedSkillsPath, removedPaths, noop };
+}
 //# sourceMappingURL=install.js.map