@harness-nexus/cli 0.1.0-alpha.1

package/dist/install/adapters/hermes.js

@@ -0,0 +1,267 @@
+/**
+ * Hermes target adapter (Phase 3.4 — first real adapter, priority 1).
+ *
+ * Hermes is a Python agent with a YAML-native config model. An install emits
+ * THREE things:
+ *  A. a Python **plugin bundle** at `~/.hermes/plugins/<profile>/` (skills).
+ *  B. MCP servers merged (YAML add-only) into `~/.hermes/config.yaml` `mcp_servers:`.
+ *  C. rules as `AGENTS.md` at the install root (Hermes auto-loads it).
+ *
+ * sub_agents and hooks are SKIPPED (Hermes has no file format for either —
+ * sub_agents are a runtime `delegate_task` tool; hooks are Python callbacks, not
+ * declarative hooks.json). Both surface as skipped warnings.
+ *
+ * Ground-truth format: `docs/research/phase-3-ecc-install-patterns.md` +
+ * verified against `~/.hermes/hermes-agent/hermes_cli/{plugins,mcp_config}.py`.
+ *
+ * Uninstall/upgrade reliability: the config.yaml merge is a single `write-file`
+ * operation recorded in the install-state ledger, so a future `hnx uninstall`
+ * can roll it back. Hermes's own `hermes plugins remove` has a config-cleanup
+ * gap (leaves stale `plugins.enabled`), so we rely on our ledger, not Hermes.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import yaml from 'js-yaml';
+import { createTargetAdapter } from '../adapter-factory.js';
+import { hnxExecutablePath } from '../../config.js';
+/** The install-state ledger filename inside the Hermes home. */
+const INSTALL_STATE_FILENAME = 'harness-nexus-install-state.json';
+/** A resource kind Hermes cannot emit as a file artifact. */
+const SKIPPED_KINDS = new Set(['sub_agent', 'hook', 'command']);
+/** A sanitizer for profile/plugin names used as a directory + Python module name. */
+function slugify(name) {
+    return (name
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 64) || 'harness-nexus-profile');
+}
+/** Build the `plugin.yaml` content (Hermes PluginManifest schema). */
+function pluginYaml(profile) {
+    const slug = slugify(profile.name);
+    const manifest = {
+        name: slug,
+        version: profile.version || '1.0.0',
+        description: profile.description ?? `Harness Nexus profile '${profile.name}'.`,
+        author: 'Harness Nexus',
+        kind: 'standalone',
+    };
+    return yaml.dump(manifest, { lineWidth: 100 });
+}
+/**
+ * Build the `__init__.py` exposing `register(ctx)`, which registers each skill
+ * via `ctx.register_skill(name, path, description)`. Plugin skills resolve as
+ * `<plugin>:<skill>` in Hermes and are opt-in (not in the system-prompt index).
+ */
+function pluginInitPy(profile, skills) {
+    const slug = slugify(profile.name);
+    const lines = [
+        '"""Harness Nexus profile plugin (auto-generated by `hnx install`)."""',
+        'from pathlib import Path',
+        '',
+        '',
+        'def register(ctx):',
+        '    _root = Path(__file__).parent',
+    ];
+    for (const s of skills) {
+        const pyName = JSON.stringify(s.name);
+        const pyPath = `str(_root / "skills" / ${pyName})`;
+        const pyDesc = JSON.stringify(s.description);
+        lines.push(`    ctx.register_skill(${pyName}, ${pyPath}, ${pyDesc})`);
+    }
+    lines.push('');
+    // Suppress the unused-import lint for `slug` if no skills (keeps it valid Python).
+    void slug;
+    return lines.join('\n');
+}
+/** Extract skill content from a Resource's source (inline / inline-bundle). */
+function skillFiles(artifact) {
+    if (artifact.kind === 'mcp')
+        return [];
+    const resource = artifact.resource;
+    const src = resource.source;
+    const description = resource.description ?? '';
+    if (src.type === 'inline') {
+        return [{ relativePath: 'SKILL.md', content: src.content, description }];
+    }
+    if (src.type === 'inline-bundle') {
+        return Object.entries(src.files).map(([rel, content]) => ({
+            relativePath: rel,
+            content,
+            description,
+        }));
+    }
+    // External sources (git/tarball/local/plugin) are not fetchable by the CLI at
+    // install time; only inline content can be emitted. The resolver would need a
+    // content-fetch step — out of scope for 3.4. Emit nothing + the caller warns.
+    return [];
+}
+/** The Hermes config.yaml path under the install root. */
+function configYamlPath(root) {
+    return path.join(root, 'config.yaml');
+}
+/**
+ * Plan the MCP merge into config.yaml. Reads the existing config (if any),
+ * adds/overwrites the profile's stdio shim entry under `mcp_servers:`,
+ * preserves all other user content, and returns a single `write-file` op with
+ * the full merged YAML. The ledger records this op so uninstall can roll it
+ * back.
+ *
+ * Phase 8 C2: every profile collapses into ONE stdio shim entry —
+ * `hnx mcp serve --profile <id> --server <base>` — regardless of dial sites.
+ * The shim dials client-dialed upstreams itself and reaches server-dialed
+ * ones through the platform outlet, so no credential ever lands in config.yaml
+ * (the pre-C2 direct-mode inlining and the `${HN_PAT_*}` env placeholder are
+ * gone).
+ */
+function planMcpMerge(resolved, root, serverBase) {
+    const cfgPath = configYamlPath(root);
+    let config = {};
+    if (fs.existsSync(cfgPath)) {
+        try {
+            const parsed = yaml.load(fs.readFileSync(cfgPath, 'utf8'));
+            if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+                config = parsed;
+            }
+        }
+        catch {
+            // Unparseable config: leave config empty and overwrite (best-effort).
+        }
+    }
+    const mcpServers = config['mcp_servers'] ?? {};
+    const slug = slugify(resolved.profile.name);
+    const mcpCount = resolved.artifacts.filter((a) => a.kind === 'mcp').length;
+    if (mcpCount > 0) {
+        mcpServers[`harness-nexus-${slug}`] = {
+            command: hnxExecutablePath(),
+            args: ['mcp', 'serve', '--profile', resolved.profile.id, '--server', serverBase],
+        };
+    }
+    config['mcp_servers'] = mcpServers;
+    const dumped = yaml.dump(config, { lineWidth: 100 });
+    return { kind: 'write-file', content: dumped, destinationPath: cfgPath };
+}
+/**
+ * The Hermes adapter. Overrides `planOperations` to emit the plugin bundle,
+ * the config.yaml MCP merge, and the AGENTS.md rule file.
+ */
+export const hermesAdapter = createTargetAdapter({
+    id: 'hermes-home',
+    target: 'hermes',
+    kind: 'home',
+    rootSegments: ['.hermes'],
+    planOperations(resolved, input, adapter) {
+        const root = adapter.resolveRoot(input);
+        const slug = slugify(resolved.profile.name);
+        const pluginDir = path.join(root, 'plugins', slug);
+        const operations = [];
+        const skipped = [];
+        // ---- A. Plugin bundle (skills only) ----
+        const skillArtifacts = resolved.artifacts.filter((a) => a.kind === 'skill');
+        const skillMeta = [];
+        if (skillArtifacts.length > 0) {
+            // plugin.yaml
+            operations.push({
+                kind: 'write-file',
+                content: pluginYaml(resolved.profile),
+                destinationPath: path.join(pluginDir, 'plugin.yaml'),
+            });
+            // skills + collect meta for __init__.py
+            for (const a of skillArtifacts) {
+                if (a.kind === 'mcp')
+                    continue;
+                const files = skillFiles(a);
+                if (files.length === 0) {
+                    skipped.push(`skill:${a.resource.key} (non-inline source not fetchable by CLI)`);
+                    continue;
+                }
+                const skillDir = path.join(pluginDir, 'skills', a.resource.name);
+                for (const f of files) {
+                    operations.push({
+                        kind: 'write-file',
+                        content: f.content,
+                        destinationPath: path.join(skillDir, f.relativePath),
+                    });
+                }
+                skillMeta.push({ name: a.resource.name, description: a.resource.description ?? '' });
+            }
+            // __init__.py
+            operations.push({
+                kind: 'write-file',
+                content: pluginInitPy(resolved.profile, skillMeta),
+                destinationPath: path.join(pluginDir, '__init__.py'),
+            });
+        }
+        // ---- B. MCP merge into config.yaml ----
+        // The shim entry needs the server base URL. The adapter doesn't receive
+        // the resolver's server directly, so the CLI sets HN_SERVER before
+        // planning (see runInstall); a sensible fallback covers direct
+        // planInstall() use in tests.
+        const serverBase = process.env.HN_SERVER ?? 'https://harness-nexus.example.com';
+        const hasMcp = resolved.artifacts.some((a) => a.kind === 'mcp');
+        if (hasMcp) {
+            operations.push(planMcpMerge(resolved, root, serverBase));
+        }
+        // ---- C. Rules → AGENTS.md (auto-loaded by Hermes) ----
+        const ruleArtifacts = resolved.artifacts.filter((a) => a.kind === 'rule');
+        if (ruleArtifacts.length > 0) {
+            // Concatenate rule contents into one AGENTS.md (Hermes loads a single file).
+            const body = ruleArtifacts
+                .map((a) => {
+                if (a.kind === 'mcp')
+                    return '';
+                const src = a.resource.source;
+                return src.type === 'inline'
+                    ? src.content
+                    : `# ${a.resource.name}\n(non-inline source skipped)`;
+            })
+                .filter(Boolean)
+                .join('\n\n---\n\n');
+            if (body) {
+                operations.push({
+                    kind: 'write-file',
+                    content: body,
+                    destinationPath: path.join(root, 'AGENTS.md'),
+                });
+            }
+        }
+        // ---- skipped kinds ----
+        for (const a of resolved.artifacts) {
+            if (SKIPPED_KINDS.has(a.kind)) {
+                if (a.kind === 'mcp')
+                    continue;
+                const reason = a.kind === 'sub_agent'
+                    ? 'Hermes has no file-based sub-agent format (runtime delegate_task only)'
+                    : a.kind === 'hook'
+                        ? 'Hermes hooks are Python callbacks, not declarative hooks.json'
+                        : 'commands are not emitted for Hermes in 3.4';
+                skipped.push(`${a.kind}:${a.resource.key} (${reason})`);
+            }
+        }
+        // Stash diagnostics on the plan via a non-enumerable side channel the CLI
+        // can read (kept simple: module-level last-warnings for 3.4).
+        lastPlanWarnings = {
+            skipped,
+            needsHnx: hasMcp,
+            pluginSlug: slug,
+            needsPluginEnable: skillArtifacts.length > 0,
+        };
+        return {
+            adapter: { id: adapter.id, target: adapter.target, kind: adapter.kind },
+            targetRoot: root,
+            installStatePath: path.join(root, INSTALL_STATE_FILENAME),
+            operations,
+            sensitive: false,
+        };
+    },
+});
+let lastPlanWarnings = {
+    skipped: [],
+    needsHnx: false,
+    pluginSlug: '',
+    needsPluginEnable: false,
+};
+export function getHermesPlanWarnings() {
+    return lastPlanWarnings;
+}
+//# sourceMappingURL=hermes.js.map

package/dist/install/adapters/hermes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes.js","sourceRoot":"","sources":["../../../src/install/adapters/hermes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,SAAS,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAUpD,gEAAgE;AAChE,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAElE,6DAA6D;AAC7D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAEhE,qFAAqF;AACrF,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,CACL,IAAI;SACD,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,uBAAuB,CAC3C,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAS,UAAU,CAAC,OAAmC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,QAAQ,GAA4B;QACxC,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO;QACnC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,0BAA0B,OAAO,CAAC,IAAI,IAAI;QAC9E,MAAM,EAAE,eAAe;QACvB,IAAI,EAAE,YAAY;KACnB,CAAC;IACF,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CACnB,OAAmC,EACnC,MAA+C;IAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG;QACZ,uEAAuE;QACvE,0BAA0B;QAC1B,EAAE;QACF,EAAE;QACF,oBAAoB;QACpB,mCAAmC;KACpC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,0BAA0B,MAAM,GAAG,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,0BAA0B,MAAM,KAAK,MAAM,KAAK,MAAM,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,mFAAmF;IACnF,KAAK,IAAI,CAAC;IACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CACjB,QAA0B;IAE1B,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;IAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACxD,YAAY,EAAE,GAAG;YACjB,OAAO;YACP,WAAW;SACZ,CAAC,CAAC,CAAC;IACN,CAAC;IACD,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,0DAA0D;AAC1D,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,YAAY,CAAC,QAAyB,EAAE,IAAY,EAAE,UAAkB;IAC/E,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,GAAG,MAAiC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAI,MAAM,CAAC,aAAa,CAAyC,IAAI,EAAE,CAAC;IACxF,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;IAC3E,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,UAAU,CAAC,iBAAiB,IAAI,EAAE,CAAC,GAAG;YACpC,OAAO,EAAE,iBAAiB,EAAE;YAC5B,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC;SACjF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAkB,mBAAmB,CAAC;IAC9D,EAAE,EAAE,aAAa;IACjB,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,CAAC,SAAS,CAAC;IAEzB,cAAc,CACZ,QAAyB,EACzB,KAAmB,EACnB,OAAsB;QAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,2CAA2C;QAC3C,MAAM,cAAc,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QAC5E,MAAM,SAAS,GAA4C,EAAE,CAAC;QAE9D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,cAAc;YACd,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACrC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;aACrD,CAAC,CAAC;YACH,wCAAwC;YACxC,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;oBAAE,SAAS;gBAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,2CAA2C,CAAC,CAAC;oBACjF,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACjE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,YAAY;wBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC;qBACrD,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,cAAc;YACd,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;gBAClD,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,wEAAwE;QACxE,mEAAmE;QACnE,+DAA+D;QAC/D,8BAA8B;QAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,mCAAmC,CAAC;QAChF,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QAChE,IAAI,MAAM,EAAE,CAAC;YACX,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,yDAAyD;QACzD,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC1E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,6EAA6E;YAC7E,MAAM,IAAI,GAAG,aAAa;iBACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;oBAAE,OAAO,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC9B,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAC1B,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,+BAA+B,CAAC;YAC1D,CAAC,CAAC;iBACD,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,aAAa,CAAC,CAAC;YACvB,IAAI,IAAI,EAAE,CAAC;gBACT,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,IAAI;oBACb,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;oBAAE,SAAS;gBAC/B,MAAM,MAAM,GACV,CAAC,CAAC,IAAI,KAAK,WAAW;oBACpB,CAAC,CAAC,wEAAwE;oBAC1E,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM;wBACjB,CAAC,CAAC,+DAA+D;wBACjE,CAAC,CAAC,4CAA4C,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,MAAM,GAAG,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,8DAA8D;QAC9D,gBAAgB,GAAG;YACjB,OAAO;YACP,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,IAAI;YAChB,iBAAiB,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;SAC7C,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;YACvE,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC;YACzD,UAAU;YACV,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAUH,IAAI,gBAAgB,GAAuB;IACzC,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,EAAE;IACd,iBAAiB,EAAE,KAAK;CACzB,CAAC;AACF,MAAM,UAAU,qBAAqB;IACnC,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/dist/install/adapters/stub.d.ts

@@ -0,0 +1,2 @@
+export declare const stubAdapter: import("../types.js").TargetAdapter;
+//# sourceMappingURL=stub.d.ts.map

package/dist/install/adapters/stub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stub.d.ts","sourceRoot":"","sources":["../../../src/install/adapters/stub.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,WAAW,qCAKtB,CAAC"}

package/dist/install/adapters/stub.js

@@ -0,0 +1,22 @@
+/**
+ * Stub adapter — a placeholder for `target: 'generic'`. It uses the factory's
+ * default `planOperations`, which writes a minimal `harness-nexus-profile.json`
+ * metadata file. This exists so the plan/apply pipeline is exercisable
+ * end-to-end in Phase 3.3 before any real target adapter ships (3.4+).
+ *
+ * Real adapters (hermes / claude-code / codex) override `planOperations` to
+ * emit their native layout. This stub intentionally does NOT emit any real
+ * target format.
+ *
+ * NOTE: `generic` is the only registered adapter in 3.3. A profile with
+ * `target: 'hermes'` will hit `TARGET_UNSUPPORTED` until the Hermes adapter
+ * lands (3.4) — that's expected; the stub is a pipeline demonstrator only.
+ */
+import { createTargetAdapter } from '../adapter-factory.js';
+export const stubAdapter = createTargetAdapter({
+    id: 'generic-stub',
+    target: 'generic',
+    kind: 'home',
+    rootSegments: ['.harness-nexus'],
+});
+//# sourceMappingURL=stub.js.map

package/dist/install/adapters/stub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stub.js","sourceRoot":"","sources":["../../../src/install/adapters/stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAC;IAC7C,EAAE,EAAE,cAAc;IAClB,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,CAAC,gBAAgB,CAAC;CACjC,CAAC,CAAC"}

package/dist/install/install-state.d.ts

@@ -0,0 +1,31 @@
+import type { InstallPlan } from './types.js';
+export declare const INSTALL_STATE_SCHEMA_VERSION = "harness-nexus.install.v1";
+/**
+ * One ledger operation: the plan op plus the pre-install snapshot of the
+ * destination file (`null` = the file did not exist). Snapshots live ONLY in
+ * the ledger — plans stay pure — and are what `hnx uninstall` restores.
+ */
+export type LedgerOperation = InstallPlan['operations'][number] & {
+    previousContent?: string | null;
+};
+export interface InstallState {
+    schemaVersion: typeof INSTALL_STATE_SCHEMA_VERSION;
+    installedAt: string;
+    target: {
+        id: string;
+        target: string;
+        kind: string;
+        root: string;
+    };
+    profile: {
+        id: string;
+        name: string;
+        version: string;
+    };
+    operations: LedgerOperation[];
+}
+/** Write the ledger to its path inside the target root. */
+export declare function writeInstallState(plan: InstallPlan, state: Omit<InstallState, 'schemaVersion' | 'operations'>, operations?: LedgerOperation[]): void;
+/** Read a previously-written ledger (returns null if absent). */
+export declare function readInstallState(installStatePath: string): InstallState | null;
+//# sourceMappingURL=install-state.d.ts.map

package/dist/install/install-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-state.d.ts","sourceRoot":"","sources":["../../src/install/install-state.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,eAAO,MAAM,4BAA4B,6BAA6B,CAAC;AAEvE;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG;IAChE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,OAAO,4BAA4B,CAAC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AAED,2DAA2D;AAC3D,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,GAAG,YAAY,CAAC,EACzD,UAAU,GAAE,eAAe,EAAoB,GAC9C,IAAI,CAQN;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAG9E"}

package/dist/install/install-state.js

@@ -0,0 +1,29 @@
+/**
+ * install-state ledger — a JSON record written on every `--apply`, enabling
+ * future `doctor` (drift detection) / `repair` / `uninstall` (remove only
+ * managed files). Mirrors ECC's `ecc.install.v1` ledger concept (see
+ * `docs/research/phase-3-ecc-install-patterns.md` Pattern 5).
+ *
+ * Phase 3.3 only writes + reads the ledger; the doctor/repair/uninstall
+ * subcommands come later.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+export const INSTALL_STATE_SCHEMA_VERSION = 'harness-nexus.install.v1';
+/** Write the ledger to its path inside the target root. */
+export function writeInstallState(plan, state, operations = plan.operations) {
+    const full = {
+        schemaVersion: INSTALL_STATE_SCHEMA_VERSION,
+        ...state,
+        operations,
+    };
+    fs.mkdirSync(path.dirname(plan.installStatePath), { recursive: true });
+    fs.writeFileSync(plan.installStatePath, `${JSON.stringify(full, null, 2)}\n`, 'utf8');
+}
+/** Read a previously-written ledger (returns null if absent). */
+export function readInstallState(installStatePath) {
+    if (!fs.existsSync(installStatePath))
+        return null;
+    return JSON.parse(fs.readFileSync(installStatePath, 'utf8'));
+}
+//# sourceMappingURL=install-state.js.map

package/dist/install/install-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-state.js","sourceRoot":"","sources":["../../src/install/install-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AAmBvE,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB,CAC/B,IAAiB,EACjB,KAAyD,EACzD,aAAgC,IAAI,CAAC,UAAU;IAE/C,MAAM,IAAI,GAAiB;QACzB,aAAa,EAAE,4BAA4B;QAC3C,GAAG,KAAK;QACR,UAAU;KACX,CAAC;IACF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACxF,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,gBAAwB;IACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAiB,CAAC;AAC/E,CAAC"}

package/dist/install/installer.d.ts

@@ -0,0 +1,16 @@
+import type { InstallPlan } from './types.js';
+/** Deep-merge `patch` into `base` (objects recurse; non-objects replace). */
+export declare function deepMergeJson(base: unknown, patch: unknown): unknown;
+/**
+ * Materialize a plan to disk. Creates parent dirs, writes every operation, then
+ * records the install-state ledger — each ledger op carrying the pre-install
+ * snapshot of its destination (`null` if absent), which is what
+ * `hnx uninstall` restores. If the plan is sensitive, the target root gets
+ * restrictive permissions (0700).
+ */
+export declare function applyInstall(plan: InstallPlan, meta: {
+    profileId: string;
+    profileName: string;
+    profileVersion: string;
+}): void;
+//# sourceMappingURL=installer.d.ts.map

package/dist/install/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/install/installer.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAa,MAAM,YAAY,CAAC;AAOzD,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAUpE;AA+BD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACvE,IAAI,CAqCN"}

package/dist/install/installer.js

@@ -0,0 +1,96 @@
+/**
+ * Installer — materializes an `InstallPlan` to disk and writes the install-state
+ * ledger. Mirrors ECC's `applyInstallPlan`
+ * (`scripts/lib/install/apply.js`). Three operation kinds:
+ *  - `copy-file`  — copy a resolved artifact verbatim.
+ *  - `write-file` — write adapter-generated inline content.
+ *  - `merge-json` — deep-merge a JSON value into an existing config file.
+ *
+ * If the plan is `sensitive` (carries decrypted direct-mode credentials), the
+ * target root is chmod'd to 0700.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { InstallError } from '../errors.js';
+import { writeInstallState } from './install-state.js';
+/** True for plain objects (not arrays/null) — used by deepMergeJson. */
+function isPlainObject(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+/** Deep-merge `patch` into `base` (objects recurse; non-objects replace). */
+export function deepMergeJson(base, patch) {
+    if (!isPlainObject(base) || !isPlainObject(patch))
+        return structuredClone(patch);
+    const merged = { ...base };
+    for (const [k, v] of Object.entries(patch)) {
+        merged[k] =
+            isPlainObject(v) && isPlainObject(merged[k])
+                ? deepMergeJson(merged[k], v)
+                : structuredClone(v);
+    }
+    return merged;
+}
+/** Capture the destination's pre-install content for the ledger (null = absent). */
+function snapshot(op) {
+    const previousContent = fs.existsSync(op.destinationPath)
+        ? fs.readFileSync(op.destinationPath, 'utf8')
+        : null;
+    return { ...op, previousContent };
+}
+function applyOperation(op) {
+    fs.mkdirSync(path.dirname(op.destinationPath), { recursive: true });
+    switch (op.kind) {
+        case 'copy-file':
+            fs.copyFileSync(op.sourcePath, op.destinationPath);
+            break;
+        case 'write-file':
+            fs.writeFileSync(op.destinationPath, op.content, 'utf8');
+            break;
+        case 'merge-json': {
+            const existing = fs.existsSync(op.destinationPath)
+                ? JSON.parse(fs.readFileSync(op.destinationPath, 'utf8'))
+                : {};
+            const merged = deepMergeJson(existing, op.mergePayload);
+            fs.writeFileSync(op.destinationPath, `${JSON.stringify(merged, null, 2)}\n`, 'utf8');
+            break;
+        }
+    }
+}
+/**
+ * Materialize a plan to disk. Creates parent dirs, writes every operation, then
+ * records the install-state ledger — each ledger op carrying the pre-install
+ * snapshot of its destination (`null` if absent), which is what
+ * `hnx uninstall` restores. If the plan is sensitive, the target root gets
+ * restrictive permissions (0700).
+ */
+export function applyInstall(plan, meta) {
+    const ledgerOps = [];
+    try {
+        for (const op of plan.operations) {
+            ledgerOps.push(snapshot(op));
+            applyOperation(op);
+        }
+    }
+    catch (e) {
+        throw new InstallError(`Failed to write ${plan.operations.length} operations: ${e.message}`, 'APPLY_FAILED', e);
+    }
+    writeInstallState(plan, {
+        installedAt: new Date().toISOString(),
+        target: {
+            id: plan.adapter.id,
+            target: plan.adapter.target,
+            kind: plan.adapter.kind,
+            root: plan.targetRoot,
+        },
+        profile: { id: meta.profileId, name: meta.profileName, version: meta.profileVersion },
+    }, ledgerOps);
+    if (plan.sensitive) {
+        try {
+            fs.chmodSync(plan.targetRoot, 0o700);
+        }
+        catch {
+            // chmod best-effort (e.g. on some filesystems); the warning is printed by the caller.
+        }
+    }
+}
+//# sourceMappingURL=installer.js.map

package/dist/install/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/install/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAwB,MAAM,oBAAoB,CAAC;AAG7E,wEAAwE;AACxE,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,KAAc;IACzD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IACjF,MAAM,MAAM,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC;YACP,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC1C,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC7B,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,SAAS,QAAQ,CAAC,EAAa;IAC7B,MAAM,eAAe,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,eAAe,CAAC;QACvD,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC;QAC7C,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,GAAG,EAAE,EAAE,eAAe,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,EAAa;IACnC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpE,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,WAAW;YACd,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC;YACnD,MAAM;QACR,KAAK,YAAY;YACf,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM;QACR,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,eAAe,CAAC;gBAChD,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAa;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC;YACxD,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrF,MAAM;QACR,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAiB,EACjB,IAAwE;IAExE,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,cAAc,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,YAAY,CACpB,mBAAmB,IAAI,CAAC,UAAU,CAAC,MAAM,gBAAiB,CAAW,CAAC,OAAO,EAAE,EAC/E,cAAc,EACd,CAAC,CACF,CAAC;IACJ,CAAC;IAED,iBAAiB,CACf,IAAI,EACJ;QACE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE;YACN,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YACnB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,IAAI,EAAE,IAAI,CAAC,UAAU;SACtB;QACD,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE;KACtF,EACD,SAAS,CACV,CAAC;IAEF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,sFAAsF;QACxF,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/install/planner.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Planner — resolves a target adapter, validates input, and asks the adapter to
+ * plan file operations. Produces an `InstallPlan` with NO filesystem writes
+ * (the dry-run artifact). Mirrors ECC's `planInstallTargetScaffold`.
+ *
+ * The target resolution rules (from `docs/design/phase-3-install.md`):
+ *  - If `target` is given and the profile is target-bound and they differ →
+ *    `TARGET_MISMATCH`.
+ *  - If `target` is omitted, use the profile's own target.
+ *  - `zcode` (and any unregistered target) → `TARGET_UNSUPPORTED` (from registry).
+ */
+import type { AgentTarget } from '@harness-nexus/core';
+import type { InstallPlan, ResolvedProfile, ResolveInput } from './types.js';
+export interface PlanOptions {
+    /** Explicit --target override; falls back to the profile's own target. */
+    target?: AgentTarget;
+    /** Passthrough to the adapter (outDir / homeDir). */
+    input?: ResolveInput;
+}
+/**
+ * Plan an install: pick the adapter, validate, and produce the operation list.
+ * Does NOT write anything — the caller prints the plan (dry-run) or passes it
+ * to `applyInstall`.
+ */
+export declare function planInstall(resolved: ResolvedProfile, opts?: PlanOptions): InstallPlan;
+//# sourceMappingURL=planner.d.ts.map

package/dist/install/planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.d.ts","sourceRoot":"","sources":["../../src/install/planner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE7E,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qDAAqD;IACrD,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAaD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,GAAE,WAAgB,GAAG,WAAW,CAW1F"}

package/dist/install/planner.js

@@ -0,0 +1,25 @@
+import { InstallError } from '../errors.js';
+import { getAdapter } from './registry.js';
+/** Resolve the effective target, enforcing the mismatch rule. */
+function resolveTarget(profile, requested) {
+    if (requested && requested !== profile.profile.target) {
+        throw new InstallError(`Target '${requested}' does not match profile's target '${profile.profile.target}' (target is immutable; create a new profile or import instead)`, 'TARGET_MISMATCH');
+    }
+    return requested ?? profile.profile.target;
+}
+/**
+ * Plan an install: pick the adapter, validate, and produce the operation list.
+ * Does NOT write anything — the caller prints the plan (dry-run) or passes it
+ * to `applyInstall`.
+ */
+export function planInstall(resolved, opts = {}) {
+    const target = resolveTarget(resolved, opts.target);
+    const adapter = getAdapter(target);
+    const issues = adapter.validate(opts.input ?? {});
+    const blocking = issues.filter((i) => i.severity === 'error');
+    if (blocking.length > 0) {
+        throw new InstallError(blocking.map((i) => i.message).join('; '), 'VALIDATION_FAILED');
+    }
+    return adapter.planOperations(resolved, opts.input ?? {});
+}
+//# sourceMappingURL=planner.js.map

package/dist/install/planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.js","sourceRoot":"","sources":["../../src/install/planner.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAU3C,iEAAiE;AACjE,SAAS,aAAa,CAAC,OAAwB,EAAE,SAAuB;IACtE,IAAI,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,IAAI,YAAY,CACpB,WAAW,SAAS,sCAAsC,OAAO,CAAC,OAAO,CAAC,MAAM,iEAAiE,EACjJ,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,QAAyB,EAAE,OAAoB,EAAE;IAC3E,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC"}

package/dist/install/registry.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Target adapter registry. Each target adapter registers itself here; the
+ * planner looks one up by `AgentTarget`. Mirrors ECC's
+ * `scripts/lib/install-targets/registry.js`.
+ *
+ * Phase 3.3 ships only the stub `generic` adapter. Real adapters (hermes /
+ * claude-code / codex) register here as they land (3.4–3.6). `zcode` has no
+ * adapter → `getAdapter('zcode')` throws `TARGET_UNSUPPORTED`.
+ */
+import type { AgentTarget } from '@harness-nexus/core';
+import type { TargetAdapter } from './types.js';
+/** List every registered adapter (for `--help` / discovery). */
+export declare function listAdapters(): readonly TargetAdapter[];
+/** The targets that have an install adapter (excludes zcode). */
+export declare function supportedTargets(): readonly AgentTarget[];
+/**
+ * Look up an adapter by target. Throws `TARGET_UNSUPPORTED` if none is
+ * registered (e.g. `zcode`).
+ */
+export declare function getAdapter(target: AgentTarget): TargetAdapter;
+//# sourceMappingURL=registry.d.ts.map

package/dist/install/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/install/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAahD,gEAAgE;AAChE,wBAAgB,YAAY,IAAI,SAAS,aAAa,EAAE,CAEvD;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,IAAI,SAAS,WAAW,EAAE,CAEzD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,aAAa,CAS7D"}

package/dist/install/registry.js

@@ -0,0 +1,31 @@
+import { InstallError } from '../errors.js';
+import { stubAdapter } from './adapters/stub.js';
+import { hermesAdapter } from './adapters/hermes.js';
+import { codexAdapter } from './adapters/codex.js';
+import { deepseekAdapter } from './adapters/deepseek.js';
+const ADAPTERS = Object.freeze([
+    stubAdapter,
+    hermesAdapter,
+    codexAdapter,
+    deepseekAdapter,
+]);
+/** List every registered adapter (for `--help` / discovery). */
+export function listAdapters() {
+    return ADAPTERS;
+}
+/** The targets that have an install adapter (excludes zcode). */
+export function supportedTargets() {
+    return ADAPTERS.map((a) => a.target);
+}
+/**
+ * Look up an adapter by target. Throws `TARGET_UNSUPPORTED` if none is
+ * registered (e.g. `zcode`).
+ */
+export function getAdapter(target) {
+    const adapter = ADAPTERS.find((a) => a.target === target);
+    if (!adapter) {
+        throw new InstallError(`No install adapter for target '${target}' (supported: ${supportedTargets().join(', ')})`, 'TARGET_UNSUPPORTED');
+    }
+    return adapter;
+}
+//# sourceMappingURL=registry.js.map

package/dist/install/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/install/registry.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,QAAQ,GAA6B,MAAM,CAAC,MAAM,CAAC;IACvD,WAAW;IACX,aAAa;IACb,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AAEH,gEAAgE;AAChE,MAAM,UAAU,YAAY;IAC1B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CACpB,kCAAkC,MAAM,iBAAiB,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACzF,oBAAoB,CACrB,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}