@ikon85/agent-workflow-kit 0.26.1 → 0.27.0

package/src/lib/bundle.mjs

@@ -40,8 +40,8 @@ export const HELPER_FILES = [
   { path: 'scripts/wrapup-land.py', kind: 'script', mode: 0o755 },
   // Deterministic release preparation and its manifest-derived local/CI guard.
   // Both are invoked through package scripts by /kit-release.
-  { path: 'scripts/kit-release.mjs', kind: 'script', mode: 0o644 },
-  { path: 'scripts/release-delta-guard.mjs', kind: 'script', mode: 0o644 },
+  { path: 'scripts/kit-release.mjs', kind: 'script', mode: 0o644, installRole: 'maintainer' },
+  { path: 'scripts/release-delta-guard.mjs', kind: 'script', mode: 0o644, installRole: 'maintainer' },
   // Neutral publish/readback parity and externally reconstructable release state.
   // /kit-release uses these after merge; downstream update/consumer flows reuse
   // the parity primitive rather than growing a second registry/GitHub comparison.
@@ -161,7 +161,7 @@ const SURFACE_DIR = { claude: '.claude/skills', codex: '.agents/skills' };
 export function publishableSkills(manifest) {
   return Object.entries(manifest.skills)
     .filter(([, e]) => e.publish)
-    .map(([name, e]) => ({ name, surfaces: e.surfaces }));
+    .map(([name, e]) => ({ name, surfaces: e.surfaces, installRole: e.installRole ?? 'consumer' }));
 }
 
 async function walk(dir) {
@@ -188,17 +188,23 @@ async function walk(dir) {
  */
 export async function collectBundle(repoRoot, manifest) {
   const files = [];
-  for (const { name, surfaces } of publishableSkills(manifest)) {
+  for (const { name, surfaces, installRole } of publishableSkills(manifest)) {
     for (const surface of surfaces) {
       const base = join(SURFACE_DIR[surface], name);
       for (const abs of await walk(join(repoRoot, base))) {
         const rel = relative(repoRoot, abs);
-        files.push({ src: rel, dest: rel, kind: 'skill', ownerSkill: name, surface, mode: 0o644 });
+        files.push({
+          src: rel, dest: rel, kind: 'skill', ownerSkill: name, surface,
+          installRole, mode: 0o644,
+        });
       }
     }
   }
   for (const h of HELPER_FILES) {
-    files.push({ src: h.path, dest: h.path, kind: h.kind, mode: h.mode });
+    files.push({
+      src: h.path, dest: h.path, kind: h.kind,
+      installRole: h.installRole ?? 'consumer', mode: h.mode,
+    });
   }
   return { files, stubs: STUB_TARGETS };
 }

package/src/lib/manifest.mjs

@@ -4,12 +4,15 @@ import { writeAtomic } from './atomicWrite.mjs';
 // Two manifests (Codex R1#9 / R3#1):
 //  - package manifest (shipped with the kit): the desired-state file list.
 //  - consumer manifest (agent-workflow-kit.json in the target repo root): installed state.
-// Both model every file kind:
+// Package entries model every file kind and install role:
 //   { path, kind: 'skill'|'script'|'hook'|'template'|'doc', ownerSkill?, surface?,
-//     sha256, mode, origin: 'kit' }
+//     installRole: 'consumer'|'maintainer', sha256, mode, origin: 'kit' }
+// Consumer manifests record their top-level installRole and retain the role on
+// every installed entry, including edited legacy maintainer files kept in place.
 
 export const CONSUMER_MANIFEST_NAME = 'agent-workflow-kit.json';
 export const PACKAGE_MANIFEST_NAME = 'agent-workflow-kit.package.json';
+export const CONSUMER_INSTALL_ROLE = 'consumer';
 
 /**
  * Parse a JSON manifest, or null if the file does not exist. A corrupt file
@@ -47,7 +50,14 @@ export async function writeManifest(path, obj) {
 }
 
 export function emptyConsumerManifest(kitVersion) {
-  return { kitVersion, installed: [] };
+  return { kitVersion, installRole: CONSUMER_INSTALL_ROLE, installed: [] };
+}
+
+/** Package entries without a role predate role-aware installs and remain consumer-owned. */
+export function filesForInstallRole(manifest, installRole = CONSUMER_INSTALL_ROLE) {
+  return (manifest?.files ?? []).filter(
+    (entry) => (entry.installRole ?? CONSUMER_INSTALL_ROLE) === installRole,
+  );
 }
 
 /** Map a manifest's file list (under `key`) by `path` for quick lookup. */

package/src/lib/updateReconcile.mjs

@@ -5,6 +5,7 @@ import { lineDiff, writeAtomic } from './atomicWrite.mjs';
 import { hookReferenced } from './settings.mjs';
 import {
   CONSUMER_MANIFEST_NAME, PACKAGE_MANIFEST_NAME, emptyConsumerManifest,
+  CONSUMER_INSTALL_ROLE, filesForInstallRole,
   indexByPath, readManifest, writeManifest,
 } from './manifest.mjs';
 
@@ -18,11 +19,13 @@ export async function reconcile({ kitRoot, consumerRoot, decide = () => false, d
   if (!consumer) throw new Error('not initialised — run `init` first');
 
   const installedIdx = indexByPath(consumer, 'installed');
-  const pkgIdx = indexByPath(pkg, 'files');
+  const packageIdx = indexByPath(pkg, 'files');
+  const installable = filesForInstallRole(pkg);
+  const pkgIdx = indexByPath({ files: installable }, 'files');
   const result = emptyResult();
   const nextInstalled = [];
 
-  for (const file of pkg.files) {
+  for (const file of installable) {
     const dest = join(consumerRoot, file.path);
     const prior = installedIdx.get(file.path);
     const current = (await exists(dest)) ? await sha256File(dest) : null;
@@ -41,12 +44,12 @@ export async function reconcile({ kitRoot, consumerRoot, decide = () => false, d
     } else if (userEdited && upstreamChanged) {
       const incoming = await readFile(join(kitRoot, file.path), 'utf8');
       result.conflicts.push({ path: file.path, diff: lineDiff(await readFile(dest, 'utf8'), incoming) });
-      nextInstalled.push(prior);
+      nextInstalled.push(withInstallRole(prior));
     } else if (userEdited) {
-      nextInstalled.push(prior);
+      nextInstalled.push(withInstallRole(prior));
       result.userModified.push(file.path);
     } else {
-      nextInstalled.push(prior);
+      nextInstalled.push(withInstallRole(prior));
       result.unchanged.push(file.path);
     }
   }
@@ -58,7 +61,11 @@ export async function reconcile({ kitRoot, consumerRoot, decide = () => false, d
     const userEdited = current !== null && current !== prior.installedSha256;
     const referenced = prior.kind === 'hook' && (await hookReferenced(consumerRoot, prior.path));
     if (userEdited || referenced || !(await decide('delete', prior.path))) {
-      nextInstalled.push(prior);
+      const packageEntry = packageIdx.get(prior.path);
+      nextInstalled.push(withInstallRole(
+        prior,
+        packageEntry?.installRole ?? prior.installRole ?? CONSUMER_INSTALL_ROLE,
+      ));
       result.keptDeleted.push(prior.path);
     } else {
       if (!dryRun && current !== null) await rm(dest);
@@ -66,6 +73,9 @@ export async function reconcile({ kitRoot, consumerRoot, decide = () => false, d
     }
   }
 
+  result.manifestChanged = consumer.installRole !== CONSUMER_INSTALL_ROLE ||
+    nextInstalled.some((next) => installedIdx.get(next.path)?.installRole !== next.installRole);
+
   if (!dryRun) {
     await writeManifest(join(consumerRoot, CONSUMER_MANIFEST_NAME), {
       ...emptyConsumerManifest(pkg.kitVersion), installed: nextInstalled,
@@ -77,13 +87,17 @@ export async function reconcile({ kitRoot, consumerRoot, decide = () => false, d
 function emptyResult() {
   return {
     unchanged: [], updated: [], conflicts: [], userModified: [],
-    added: [], deleted: [], keptDeleted: [],
+    added: [], deleted: [], keptDeleted: [], manifestChanged: false,
   };
 }
 
 function entry(file, installedSha256) {
   return {
     path: file.path, kind: file.kind, ownerSkill: file.ownerSkill, surface: file.surface,
-    installedSha256, origin: 'kit',
+    installedSha256, origin: 'kit', installRole: CONSUMER_INSTALL_ROLE,
   };
 }
+
+function withInstallRole(installed, installRole = CONSUMER_INSTALL_ROLE) {
+  return { ...installed, installRole };
+}

package/.agents/skills/zoom-out/SKILL.md

@@ -1,7 +0,0 @@
----
-name: zoom-out
-description: "Tell the agent to zoom out and give broader context or a higher-level perspective. Use when you're unfamiliar with a section of code or need to understand how it fits into the bigger picture."
-disable-model-invocation: true
----
-
-I don't know this area of code well. Go up a layer of abstraction. Give me a map of all the relevant modules and callers, using the project's domain glossary vocabulary. (For a full refactor/deepening pass with an HTML report and grilling loop, use `improve-codebase-architecture` instead.)

package/.agents/skills/zoom-out/THIRD-PARTY-NOTICES.md

@@ -1,29 +0,0 @@
-# Third-Party Notices
-
-This skill is adapted from **Matt Pocock's skills**
-(https://github.com/mattpocock/skills), `skills/engineering/zoom-out` @ 2bf7005, Copyright (c) 2026 Matt Pocock,
-used under the MIT License. Locally adapted (fork-and-own); see PROVENANCE.md.
-
-```
-MIT License
-
-Copyright (c) 2026 Matt Pocock
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-```

package/.claude/skills/zoom-out/SKILL.md

@@ -1,7 +0,0 @@
----
-name: zoom-out
-description: Tell the agent to zoom out and give broader context or a higher-level perspective. Use when you're unfamiliar with a section of code or need to understand how it fits into the bigger picture.
-disable-model-invocation: true
----
-
-I don't know this area of code well. Go up a layer of abstraction. Give me a map of all the relevant modules and callers, using the project's domain glossary vocabulary. (For a full refactor/deepening pass with an HTML report and grilling loop, use `improve-codebase-architecture` instead.)

package/.claude/skills/zoom-out/THIRD-PARTY-NOTICES.md

@@ -1,29 +0,0 @@
-# Third-Party Notices
-
-This skill is adapted from **Matt Pocock's skills**
-(https://github.com/mattpocock/skills), `skills/engineering/zoom-out` @ 2bf7005, Copyright (c) 2026 Matt Pocock,
-used under the MIT License. Locally adapted (fork-and-own); see PROVENANCE.md.
-
-```
-MIT License
-
-Copyright (c) 2026 Matt Pocock
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-```