@kuznai/inception-engine 0.25.1 → 1.0.2

package/dist/src/core/revert.js

@@ -449,8 +449,7 @@ async function revertConfigPatch(action, dryRun, verbose, home, planned, deps) {
         return result;
     }
     const entry = await lookupDeployment(home, action.target, deps.registry);
-    if (!entry ||
-        entry.kind !== "config-patch" ||
+    if (entry?.kind !== "config-patch" ||
         entry.skill !== action.skill ||
         entry.agent !== action.agent) {
         logger.warn(label, `skipping: ${action.target} is not in the deployment registry — not managed by inception-engine`);
@@ -507,8 +506,7 @@ async function revertTomlPatch(action, dryRun, verbose, home, planned, deps) {
         return result;
     }
     const entry = await lookupDeployment(home, action.target, deps.registry);
-    if (!entry ||
-        entry.kind !== "config-patch" ||
+    if (entry?.kind !== "config-patch" ||
         entry.skill !== action.skill ||
         entry.agent !== action.agent) {
         logger.warn(label, `skipping: ${action.target} is not in the deployment registry — not managed by inception-engine`);

package/dist/src/core/validation.d.ts

@@ -1,6 +1,18 @@
 import type { AgentId } from "../schemas/manifest.ts";
 export declare function sourceAccessError(err: unknown, sourcePath: string): string;
 export declare function validateSourcePath(source: string, skillPath: string, resolvedSourceDir: string, realRoot: string): Promise<void>;
+export type SourcePathValidator = (source: string, manifestPath: string, resolvedSourceDir: string) => Promise<void>;
+/**
+ * Returns a memoizing source-path validator bound to a single `realRoot`.
+ *
+ * The cheap out-of-root string gate still runs on every call so per-entry
+ * `manifestPath` error messages remain accurate. The realpath resolution and
+ * the identity-based ancestor walk are memoized per resolved `source`, which
+ * eliminates repeated syscalls when the same source is referenced across
+ * multiple manifest sections or fans out to multiple agents within one
+ * `planDeploy` invocation.
+ */
+export declare function createSourcePathValidator(realRoot: string): SourcePathValidator;
 export declare function validateSourceFile(sourcePath: string, manifestPath: string): Promise<void>;
 export declare function validateMcpServerConfigShape(config: Record<string, unknown>, entryName: string, agentId: string): void;
 export declare function validatePermissionsConfigShape(config: Record<string, unknown>, entryName: string, agentId: string): void;
@@ -11,7 +23,23 @@ export declare function validateSkillDefinitionFile(sourcePath: string, manifest
     body: string;
 }>;
 /**
- * Validates that an instruction file (agentRules or agentDefinitions) meets
- * the structural requirements of the target agent.
+ * Returns true when the agent requires its instruction-file source to expose
+ * structural YAML frontmatter. Used by adapters to decide whether to parse
+ * the source document before per-agent validation.
+ */
+export declare function instructionRequiresFrontmatter(agentId: AgentId): boolean;
+/**
+ * Reads and parses an instruction file's YAML frontmatter once. Callers that
+ * fan out to multiple target agents should invoke this at most once per
+ * source file and reuse the returned attributes for each
+ * `validateInstructionAgentRequirements` call.
+ */
+export declare function parseInstructionDocument(sourcePath: string, manifestPath: string): Promise<{
+    attributes: Record<string, unknown>;
+    body: string;
+}>;
+/**
+ * Runs the per-agent structural checks against an already-parsed instruction
+ * document. Agents without frontmatter requirements are a no-op.
  */
-export declare function validateInstructionFileRequirements(sourcePath: string, manifestPath: string, agentId: AgentId): Promise<void>;
+export declare function validateInstructionAgentRequirements(attributes: Record<string, unknown>, manifestPath: string, agentId: AgentId): void;

package/dist/src/core/validation.js

@@ -54,6 +54,47 @@ export async function validateSourcePath(source, skillPath, resolvedSourceDir, r
         // Source doesn't exist yet — will be caught during execute
     }
 }
+/**
+ * Returns a memoizing source-path validator bound to a single `realRoot`.
+ *
+ * The cheap out-of-root string gate still runs on every call so per-entry
+ * `manifestPath` error messages remain accurate. The realpath resolution and
+ * the identity-based ancestor walk are memoized per resolved `source`, which
+ * eliminates repeated syscalls when the same source is referenced across
+ * multiple manifest sections or fans out to multiple agents within one
+ * `planDeploy` invocation.
+ */
+export function createSourcePathValidator(realRoot) {
+    const cache = new Map();
+    const resolveOutcome = async (source) => {
+        try {
+            const realSource = await realpath(source);
+            if (isSameOrDescendantPath(realSource, realRoot) ||
+                (await isWithinRootByIdentity(realSource, realRoot))) {
+                return { kind: "ok" };
+            }
+            return { kind: "escape", realSource };
+        }
+        catch {
+            // Source doesn't exist yet — will be caught during execute
+            return { kind: "ok" };
+        }
+    };
+    return async (source, manifestPath, resolvedSourceDir) => {
+        if (!source.startsWith(resolvedSourceDir + path.sep)) {
+            throw new UserError("DEPLOY_FAILED", `Skill path "${manifestPath}" resolves outside the repository root: ${source}`);
+        }
+        let pending = cache.get(source);
+        if (!pending) {
+            pending = resolveOutcome(source);
+            cache.set(source, pending);
+        }
+        const outcome = await pending;
+        if (outcome.kind === "escape") {
+            throw new UserError("DEPLOY_FAILED", `Skill path "${manifestPath}" resolves outside the repository root via symlink: ${source} -> ${outcome.realSource}`);
+        }
+    };
+}
 export async function validateSourceFile(sourcePath, manifestPath) {
     let stat;
     try {
@@ -308,24 +349,37 @@ function validateAntigravityRequirements(attributes, manifestPath) {
     }
 }
 /**
- * Validates that an instruction file (agentRules or agentDefinitions) meets
- * the structural requirements of the target agent.
+ * Returns true when the agent requires its instruction-file source to expose
+ * structural YAML frontmatter. Used by adapters to decide whether to parse
+ * the source document before per-agent validation.
  */
-export async function validateInstructionFileRequirements(sourcePath, manifestPath, agentId) {
-    const requiresFrontmatter = AGENT_REGISTRY_BY_ID[agentId]?.instructionFrontmatterRequired === true;
-    if (!requiresFrontmatter)
-        return;
-    let attributes;
+export function instructionRequiresFrontmatter(agentId) {
+    return AGENT_REGISTRY_BY_ID[agentId]?.instructionFrontmatterRequired === true;
+}
+/**
+ * Reads and parses an instruction file's YAML frontmatter once. Callers that
+ * fan out to multiple target agents should invoke this at most once per
+ * source file and reuse the returned attributes for each
+ * `validateInstructionAgentRequirements` call.
+ */
+export async function parseInstructionDocument(sourcePath, manifestPath) {
     try {
-        const result = await validateSkillDefinitionFile(sourcePath, manifestPath);
-        attributes = result.attributes;
+        return await validateSkillDefinitionFile(sourcePath, manifestPath);
     }
     catch (err) {
         if (err instanceof UserError) {
-            throw new UserError("DEPLOY_FAILED", `Instruction file "${manifestPath}" for agent "${agentId}" failed structural validation: ${err.message}`);
+            throw new UserError("DEPLOY_FAILED", `Instruction file "${manifestPath}" failed structural validation: ${err.message}`, { cause: err });
         }
         throw err;
     }
+}
+/**
+ * Runs the per-agent structural checks against an already-parsed instruction
+ * document. Agents without frontmatter requirements are a no-op.
+ */
+export function validateInstructionAgentRequirements(attributes, manifestPath, agentId) {
+    if (!instructionRequiresFrontmatter(agentId))
+        return;
     if (agentId === "github-copilot") {
         validateGithubCopilotRequirements(attributes, manifestPath);
     }

package/dist/src/formatters.js

@@ -27,32 +27,35 @@ export function formatDryRunPlan(planned) {
 }
 function formatPlannedChange(change) {
     const icon = styleText("cyan", "○");
-    const kind = styleText("dim", `[${change.kind}]`);
-    const lines = [
-        `  ${icon} ${kind} ${change.verb} ${styleText("bold", change.skill)}`,
-    ];
+    const lines = [`  ${icon} ${change.verb} ${styleText("bold", change.skill)}`];
     if (change.source !== undefined) {
         lines.push(`    source: ${styleText("dim", change.source)}`);
     }
     lines.push(`    target: ${styleText("dim", change.target)}`);
-    const detail = formatChangeDetail(change);
-    if (detail) {
-        lines.push(`    ${detail}`);
+    const detailLines = formatChangeDetail(change);
+    if (detailLines) {
+        lines.push(...detailLines.map((line) => `    ${line}`));
     }
     return lines.join("\n");
 }
 function formatChangeDetail(change) {
     if (change.verb === "patch-config" && change.patch !== undefined) {
-        return `patch:  ${styleText("dim", JSON.stringify(change.patch))}`;
+        return formatJsonDetail("patch", change.patch);
     }
     if (change.verb === "unapply-patch" && change.patch !== undefined) {
-        return `undo:   ${styleText("dim", JSON.stringify(change.patch))}`;
+        return formatJsonDetail("undo", change.patch);
     }
     if (change.verb === "patch-toml" && change.patch !== undefined) {
-        return `patch:  ${styleText("dim", JSON.stringify(change.patch))}`;
+        return formatJsonDetail("patch", change.patch);
     }
     if (change.verb === "emit-frontmatter" && change.frontmatter !== undefined) {
-        return `frontmatter: ${styleText("dim", JSON.stringify(change.frontmatter))}`;
+        return formatJsonDetail("frontmatter", change.frontmatter);
     }
     return null;
 }
+function formatJsonDetail(label, value) {
+    const jsonLines = JSON.stringify(value, null, 2)
+        .split("\n")
+        .map((line) => styleText("dim", line));
+    return [`${label}:`, ...jsonLines.map((line) => `  ${line}`)];
+}

package/dist/src/schemas/manifest.d.ts

@@ -2,124 +2,124 @@ import { z } from "zod";
 declare const AGENT_IDS: readonly ["claude-code", "codex", "gemini-cli", "antigravity", "opencode", "github-copilot"];
 export { AGENT_IDS };
 export declare const AgentIdSchema: z.ZodEnum<{
+    antigravity: "antigravity";
     "claude-code": "claude-code";
     codex: "codex";
     "gemini-cli": "gemini-cli";
-    antigravity: "antigravity";
-    opencode: "opencode";
     "github-copilot": "github-copilot";
+    opencode: "opencode";
 }>;
 export type AgentId = z.output<typeof AgentIdSchema>;
 export declare const SkillEntrySchema: z.ZodObject<{
     name: z.ZodString;
     path: z.ZodString;
     agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+        antigravity: "antigravity";
         "claude-code": "claude-code";
         codex: "codex";
         "gemini-cli": "gemini-cli";
-        antigravity: "antigravity";
-        opencode: "opencode";
         "github-copilot": "github-copilot";
-    }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+        opencode: "opencode";
+    }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
 }, z.core.$strip>;
 export declare const FileEntrySchema: z.ZodObject<{
     name: z.ZodString;
     path: z.ZodString;
     target: z.ZodString;
     agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+        antigravity: "antigravity";
         "claude-code": "claude-code";
         codex: "codex";
         "gemini-cli": "gemini-cli";
-        antigravity: "antigravity";
-        opencode: "opencode";
         "github-copilot": "github-copilot";
-    }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+        opencode: "opencode";
+    }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
 }, z.core.$strip>;
 export declare const ConfigEntrySchema: z.ZodObject<{
     name: z.ZodString;
     target: z.ZodString;
     patch: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+        antigravity: "antigravity";
         "claude-code": "claude-code";
         codex: "codex";
         "gemini-cli": "gemini-cli";
-        antigravity: "antigravity";
-        opencode: "opencode";
         "github-copilot": "github-copilot";
-    }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+        opencode: "opencode";
+    }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
 }, z.core.$strip>;
 export declare const McpServerEntrySchema: z.ZodObject<{
     name: z.ZodString;
     agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+        antigravity: "antigravity";
         "claude-code": "claude-code";
         codex: "codex";
         "gemini-cli": "gemini-cli";
-        antigravity: "antigravity";
-        opencode: "opencode";
         "github-copilot": "github-copilot";
-    }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+        opencode: "opencode";
+    }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
     config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     scope: z.ZodDefault<z.ZodEnum<{
+        devcontainer: "devcontainer";
         global: "global";
         repo: "repo";
         workspace: "workspace";
-        devcontainer: "devcontainer";
     }>>;
 }, z.core.$strip>;
 export declare const AgentRuleEntrySchema: z.ZodObject<{
     name: z.ZodString;
     agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+        antigravity: "antigravity";
         "claude-code": "claude-code";
         codex: "codex";
         "gemini-cli": "gemini-cli";
-        antigravity: "antigravity";
-        opencode: "opencode";
         "github-copilot": "github-copilot";
-    }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+        opencode: "opencode";
+    }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
     path: z.ZodString;
     scope: z.ZodDefault<z.ZodEnum<{
+        "copilot-repo": "copilot-repo";
+        "copilot-scoped": "copilot-scoped";
         global: "global";
         repo: "repo";
         workspace: "workspace";
-        "copilot-repo": "copilot-repo";
-        "copilot-scoped": "copilot-scoped";
     }>>;
     targetDir: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const PermissionsEntrySchema: z.ZodObject<{
     name: z.ZodString;
     agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+        antigravity: "antigravity";
         "claude-code": "claude-code";
         codex: "codex";
         "gemini-cli": "gemini-cli";
-        antigravity: "antigravity";
-        opencode: "opencode";
         "github-copilot": "github-copilot";
-    }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+        opencode: "opencode";
+    }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
     config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, z.core.$strip>;
 export declare const ExecutionConfigEntrySchema: z.ZodObject<{
     name: z.ZodString;
     agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+        antigravity: "antigravity";
         "claude-code": "claude-code";
         codex: "codex";
         "gemini-cli": "gemini-cli";
-        antigravity: "antigravity";
-        opencode: "opencode";
         "github-copilot": "github-copilot";
-    }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+        opencode: "opencode";
+    }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
     config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, z.core.$strip>;
 export declare const AgentDefinitionEntrySchema: z.ZodObject<{
     name: z.ZodString;
     agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+        antigravity: "antigravity";
         "claude-code": "claude-code";
         codex: "codex";
         "gemini-cli": "gemini-cli";
-        antigravity: "antigravity";
-        opencode: "opencode";
         "github-copilot": "github-copilot";
-    }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+        opencode: "opencode";
+    }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
     path: z.ZodString;
     scope: z.ZodDefault<z.ZodEnum<{
         global: "global";
@@ -130,13 +130,13 @@ export declare const AgentDefinitionEntrySchema: z.ZodObject<{
 export declare const HookEntrySchema: z.ZodObject<{
     name: z.ZodString;
     agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+        antigravity: "antigravity";
         "claude-code": "claude-code";
         codex: "codex";
         "gemini-cli": "gemini-cli";
-        antigravity: "antigravity";
-        opencode: "opencode";
         "github-copilot": "github-copilot";
-    }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+        opencode: "opencode";
+    }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
     config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, z.core.$strip>;
 export declare const ManifestSchema: z.ZodObject<{
@@ -144,100 +144,100 @@ export declare const ManifestSchema: z.ZodObject<{
         name: z.ZodString;
         path: z.ZodString;
         agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+            antigravity: "antigravity";
             "claude-code": "claude-code";
             codex: "codex";
             "gemini-cli": "gemini-cli";
-            antigravity: "antigravity";
-            opencode: "opencode";
             "github-copilot": "github-copilot";
-        }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+            opencode: "opencode";
+        }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
     }, z.core.$strip>>;
     files: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         path: z.ZodString;
         target: z.ZodString;
         agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+            antigravity: "antigravity";
             "claude-code": "claude-code";
             codex: "codex";
             "gemini-cli": "gemini-cli";
-            antigravity: "antigravity";
-            opencode: "opencode";
             "github-copilot": "github-copilot";
-        }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+            opencode: "opencode";
+        }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
     }, z.core.$strip>>>;
     configs: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         target: z.ZodString;
         patch: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+            antigravity: "antigravity";
             "claude-code": "claude-code";
             codex: "codex";
             "gemini-cli": "gemini-cli";
-            antigravity: "antigravity";
-            opencode: "opencode";
             "github-copilot": "github-copilot";
-        }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+            opencode: "opencode";
+        }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
     }, z.core.$strip>>>;
     mcpServers: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+            antigravity: "antigravity";
             "claude-code": "claude-code";
             codex: "codex";
             "gemini-cli": "gemini-cli";
-            antigravity: "antigravity";
-            opencode: "opencode";
             "github-copilot": "github-copilot";
-        }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+            opencode: "opencode";
+        }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
         config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         scope: z.ZodDefault<z.ZodEnum<{
+            devcontainer: "devcontainer";
             global: "global";
             repo: "repo";
             workspace: "workspace";
-            devcontainer: "devcontainer";
         }>>;
     }, z.core.$strip>>>;
     agentRules: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+            antigravity: "antigravity";
             "claude-code": "claude-code";
             codex: "codex";
             "gemini-cli": "gemini-cli";
-            antigravity: "antigravity";
-            opencode: "opencode";
             "github-copilot": "github-copilot";
-        }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+            opencode: "opencode";
+        }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
         path: z.ZodString;
         scope: z.ZodDefault<z.ZodEnum<{
+            "copilot-repo": "copilot-repo";
+            "copilot-scoped": "copilot-scoped";
             global: "global";
             repo: "repo";
             workspace: "workspace";
-            "copilot-repo": "copilot-repo";
-            "copilot-scoped": "copilot-scoped";
         }>>;
         targetDir: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     permissions: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+            antigravity: "antigravity";
             "claude-code": "claude-code";
             codex: "codex";
             "gemini-cli": "gemini-cli";
-            antigravity: "antigravity";
-            opencode: "opencode";
             "github-copilot": "github-copilot";
-        }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+            opencode: "opencode";
+        }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
         config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, z.core.$strip>>>;
     agentDefinitions: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+            antigravity: "antigravity";
             "claude-code": "claude-code";
             codex: "codex";
             "gemini-cli": "gemini-cli";
-            antigravity: "antigravity";
-            opencode: "opencode";
             "github-copilot": "github-copilot";
-        }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+            opencode: "opencode";
+        }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
         path: z.ZodString;
         scope: z.ZodDefault<z.ZodEnum<{
             global: "global";
@@ -248,25 +248,25 @@ export declare const ManifestSchema: z.ZodObject<{
     hooks: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+            antigravity: "antigravity";
             "claude-code": "claude-code";
             codex: "codex";
             "gemini-cli": "gemini-cli";
-            antigravity: "antigravity";
-            opencode: "opencode";
             "github-copilot": "github-copilot";
-        }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+            opencode: "opencode";
+        }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
         config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, z.core.$strip>>>;
     executionConfigs: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         agents: z.ZodPipe<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+            antigravity: "antigravity";
             "claude-code": "claude-code";
             codex: "codex";
             "gemini-cli": "gemini-cli";
-            antigravity: "antigravity";
-            opencode: "opencode";
             "github-copilot": "github-copilot";
-        }>>>, z.ZodTransform<("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[], ("claude-code" | "codex" | "gemini-cli" | "antigravity" | "opencode" | "github-copilot")[]>>;
+            opencode: "opencode";
+        }>>>, z.ZodTransform<("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[], ("antigravity" | "claude-code" | "codex" | "gemini-cli" | "github-copilot" | "opencode")[]>>;
         config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
@@ -281,10 +281,10 @@ export type HookEntry = z.infer<typeof HookEntrySchema>;
 export type ExecutionConfigEntry = z.infer<typeof ExecutionConfigEntrySchema>;
 export type Manifest = z.infer<typeof ManifestSchema>;
 export declare const AgentListSchema: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string[], string>>, z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEnum<{
+    antigravity: "antigravity";
     "claude-code": "claude-code";
     codex: "codex";
     "gemini-cli": "gemini-cli";
-    antigravity: "antigravity";
-    opencode: "opencode";
     "github-copilot": "github-copilot";
+    opencode: "opencode";
 }>>>>;

package/dist/src/schemas/manifest.js

@@ -55,7 +55,7 @@ const targetTemplateField = z
     .string({ message: "target must be a non-empty string" })
     .min(1, { message: "target must be a non-empty string" })
     .refine((t) => TARGET_TEMPLATE_RE.test(t), {
-    message: "target must start with a known placeholder: {home}, {appdata}, {xdg_config}, or {repo}",
+    message: "target must start with a known placeholder: {home}, {appdata}, {xdg_config}, {repo}, or {workspace}",
 })
     .refine((t) => !t.split(/[\\/]+/).includes(".."), {
     message: "target must not escape its placeholder root",