@skillsmith/core 0.9.0 → 0.10.0

package/dist/src/install/agent-home-relocate.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Home-dir relocation test seam for `sklx agent install` (SMI-5456 Wave 1
+ * Step 5).
+ *
+ * `paths.ts`'s `CLIENT_NATIVE_PATHS` and `agent-harness-targets.ts`'s target
+ * tables are computed ONCE at module load via `os.homedir()` — the
+ * established pattern in this codebase (paths.ts has no `homeDir` override;
+ * `enumerateHarnessPresence()` takes none either). Rather than widen that
+ * shared contract (used across many consumers) or fight macOS's
+ * `os.homedir()` ignoring `process.env.HOME` mutations (the exact problem
+ * `journal/path.ts` and `telemetry/agent-marker.ts` solve with their own
+ * per-module env overrides), the installer re-roots any already-computed
+ * absolute path onto an alternate directory for tests: strip the real
+ * `os.homedir()` prefix and re-join under the test's temp `homeDir`. This
+ * keeps every existing static table intact and untouched while giving
+ * `installAgentPack({ homeDir })` a real, disk-backed temp-HOME test seam
+ * (P-5 "install to a temp HOME" requirement) without adding a second
+ * parallel path-computation system to maintain in sync with `paths.ts`.
+ *
+ * @module @skillsmith/core/install/agent-home-relocate
+ */
+/**
+ * Re-root `absolutePath` (assumed computed under the REAL `os.homedir()`)
+ * onto `homeDir`. Returns `absolutePath` unchanged when `homeDir` is
+ * undefined, or when `absolutePath` is not actually under the real home
+ * directory (defensive — never silently misroute an unrelated path).
+ */
+export declare function relocateUnderHome(absolutePath: string, homeDir?: string): string;
+//# sourceMappingURL=agent-home-relocate.d.ts.map

package/dist/src/install/agent-home-relocate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-home-relocate.d.ts","sourceRoot":"","sources":["../../../src/install/agent-home-relocate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAKhF"}

package/dist/src/install/agent-home-relocate.js

@@ -0,0 +1,38 @@
+/**
+ * Home-dir relocation test seam for `sklx agent install` (SMI-5456 Wave 1
+ * Step 5).
+ *
+ * `paths.ts`'s `CLIENT_NATIVE_PATHS` and `agent-harness-targets.ts`'s target
+ * tables are computed ONCE at module load via `os.homedir()` — the
+ * established pattern in this codebase (paths.ts has no `homeDir` override;
+ * `enumerateHarnessPresence()` takes none either). Rather than widen that
+ * shared contract (used across many consumers) or fight macOS's
+ * `os.homedir()` ignoring `process.env.HOME` mutations (the exact problem
+ * `journal/path.ts` and `telemetry/agent-marker.ts` solve with their own
+ * per-module env overrides), the installer re-roots any already-computed
+ * absolute path onto an alternate directory for tests: strip the real
+ * `os.homedir()` prefix and re-join under the test's temp `homeDir`. This
+ * keeps every existing static table intact and untouched while giving
+ * `installAgentPack({ homeDir })` a real, disk-backed temp-HOME test seam
+ * (P-5 "install to a temp HOME" requirement) without adding a second
+ * parallel path-computation system to maintain in sync with `paths.ts`.
+ *
+ * @module @skillsmith/core/install/agent-home-relocate
+ */
+import { homedir } from 'node:os';
+import { isAbsolute, join, relative } from 'node:path';
+/**
+ * Re-root `absolutePath` (assumed computed under the REAL `os.homedir()`)
+ * onto `homeDir`. Returns `absolutePath` unchanged when `homeDir` is
+ * undefined, or when `absolutePath` is not actually under the real home
+ * directory (defensive — never silently misroute an unrelated path).
+ */
+export function relocateUnderHome(absolutePath, homeDir) {
+    if (!homeDir)
+        return absolutePath;
+    const rel = relative(homedir(), absolutePath);
+    if (rel.startsWith('..') || isAbsolute(rel))
+        return absolutePath;
+    return join(homeDir, rel);
+}
+//# sourceMappingURL=agent-home-relocate.js.map

package/dist/src/install/agent-home-relocate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-home-relocate.js","sourceRoot":"","sources":["../../../src/install/agent-home-relocate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,OAAgB;IACtE,IAAI,CAAC,OAAO;QAAE,OAAO,YAAY,CAAA;IACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAA;IAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAA;IAChE,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;AAC3B,CAAC"}

package/dist/src/install/agent-manifest-path-guard.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Manifest-path validation for `uninstallAgentPack` (SMI-5456 governance
+ * follow-up, code review 2026-07-01).
+ *
+ * `uninstallAgentPack` reads `~/.skillsmith/agent-install/manifest.json` and,
+ * for every entry, either `unlinkSync`s `entry.path` or `writeFileSync`s
+ * content read from `entry.backupPath` INTO `entry.path` — with no
+ * validation that either path is one this installer could actually have
+ * produced. The manifest is an ordinary 0600 JSON file under the user's own
+ * HOME, not a signed or otherwise tamper-evident record; if it is ever
+ * corrupted, hand-edited, or overwritten by an unrelated bug elsewhere in
+ * the process (prototype pollution, a bad merge, a copy-paste from another
+ * user's manifest), `uninstallAgentPack` would happily `unlinkSync` or
+ * overwrite ANY path on disk the current user can write to — an
+ * arbitrary-file-delete/overwrite primitive completely disconnected from
+ * "what a real `sklx agent install` run actually wrote".
+ *
+ * This module closes that gap by checking every entry against the FIXED,
+ * finite set of relative-to-HOME suffixes the installer is capable of ever
+ * writing (every {@link CLIENT_NATIVE_PATHS} skill-pack path, every
+ * {@link AGENT_SHIM_TARGETS} shim, every {@link AGENT_HOOK_TARGETS} hook
+ * script + hook config file, every {@link AGENT_MCP_TARGETS} MCP config
+ * file) before any destructive fs call touches it. `backupPath` is checked
+ * separately: it must resolve under the current run's manifest/backups
+ * directory. An entry failing either check is never touched — the caller
+ * treats it as `rejected`, not `removed`/`restored`.
+ *
+ * Suffix (not full-path-prefix) matching is deliberate: `installAgentPack`
+ * supports a `homeDir` test-seam that relocates every target under an
+ * arbitrary temp directory (`agent-home-relocate.ts`), and
+ * `uninstallAgentPack` has no matching `homeDir` wiring (paths recorded in
+ * the manifest are already fully resolved at install time) — validating by
+ * suffix works identically in both the real-HOME production path and the
+ * relocated-HOME test path without needing to thread a redundant `homeDir`
+ * through uninstall. This still shrinks the achievable blast radius from
+ * "any file the process can write" down to "a file whose path happens to end
+ * with one of a dozen known per-harness relative locations" — a tampered
+ * manifest can no longer name `/etc/passwd` or `~/.ssh/id_rsa`.
+ *
+ * @module @skillsmith/core/install/agent-manifest-path-guard
+ */
+/**
+ * True when `path` structurally matches one of the installer's known
+ * relative target locations (see module header). Normalizes via
+ * `path.resolve` first so a `..`-laden path can't dodge the suffix check by
+ * embedding traversal segments before the matched tail.
+ */
+export declare function isAllowedManifestEntryPath(path: string): boolean;
+/**
+ * True when `backupPath` resolves under this run's manifest backups
+ * directory ({@link getAgentInstallBackupsDir}). A `null` backupPath is not
+ * validated here — callers only invoke this when `backupPath` is non-null.
+ */
+export declare function isAllowedManifestBackupPath(backupPath: string): boolean;
+//# sourceMappingURL=agent-manifest-path-guard.d.ts.map

package/dist/src/install/agent-manifest-path-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest-path-guard.d.ts","sourceRoot":"","sources":["../../../src/install/agent-manifest-path-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAsDH;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMhE;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAIvE"}

package/dist/src/install/agent-manifest-path-guard.js

@@ -0,0 +1,109 @@
+/**
+ * Manifest-path validation for `uninstallAgentPack` (SMI-5456 governance
+ * follow-up, code review 2026-07-01).
+ *
+ * `uninstallAgentPack` reads `~/.skillsmith/agent-install/manifest.json` and,
+ * for every entry, either `unlinkSync`s `entry.path` or `writeFileSync`s
+ * content read from `entry.backupPath` INTO `entry.path` — with no
+ * validation that either path is one this installer could actually have
+ * produced. The manifest is an ordinary 0600 JSON file under the user's own
+ * HOME, not a signed or otherwise tamper-evident record; if it is ever
+ * corrupted, hand-edited, or overwritten by an unrelated bug elsewhere in
+ * the process (prototype pollution, a bad merge, a copy-paste from another
+ * user's manifest), `uninstallAgentPack` would happily `unlinkSync` or
+ * overwrite ANY path on disk the current user can write to — an
+ * arbitrary-file-delete/overwrite primitive completely disconnected from
+ * "what a real `sklx agent install` run actually wrote".
+ *
+ * This module closes that gap by checking every entry against the FIXED,
+ * finite set of relative-to-HOME suffixes the installer is capable of ever
+ * writing (every {@link CLIENT_NATIVE_PATHS} skill-pack path, every
+ * {@link AGENT_SHIM_TARGETS} shim, every {@link AGENT_HOOK_TARGETS} hook
+ * script + hook config file, every {@link AGENT_MCP_TARGETS} MCP config
+ * file) before any destructive fs call touches it. `backupPath` is checked
+ * separately: it must resolve under the current run's manifest/backups
+ * directory. An entry failing either check is never touched — the caller
+ * treats it as `rejected`, not `removed`/`restored`.
+ *
+ * Suffix (not full-path-prefix) matching is deliberate: `installAgentPack`
+ * supports a `homeDir` test-seam that relocates every target under an
+ * arbitrary temp directory (`agent-home-relocate.ts`), and
+ * `uninstallAgentPack` has no matching `homeDir` wiring (paths recorded in
+ * the manifest are already fully resolved at install time) — validating by
+ * suffix works identically in both the real-HOME production path and the
+ * relocated-HOME test path without needing to thread a redundant `homeDir`
+ * through uninstall. This still shrinks the achievable blast radius from
+ * "any file the process can write" down to "a file whose path happens to end
+ * with one of a dozen known per-harness relative locations" — a tampered
+ * manifest can no longer name `/etc/passwd` or `~/.ssh/id_rsa`.
+ *
+ * @module @skillsmith/core/install/agent-manifest-path-guard
+ */
+import { homedir } from 'node:os';
+import { join, relative, resolve, sep } from 'node:path';
+import { AGENT_PACK_SKILL_NAME } from '../services/agent-pack/index.js';
+import { AGENT_HOOK_TARGETS, AGENT_MCP_TARGETS, AGENT_SHIM_TARGETS, } from './agent-harness-targets.js';
+import { getAgentInstallBackupsDir } from './agent-manifest.js';
+import { CLIENT_NATIVE_PATHS } from './paths.js';
+/** Relative-to-`os.homedir()` suffix for every path the installer can ever write. */
+function computeAllowedPathSuffixes() {
+    const suffixes = new Set();
+    const home = homedir();
+    const addSuffix = (absPath) => {
+        const rel = relative(home, absPath);
+        // Skip anything that isn't actually under the real home dir (defensive —
+        // every constant table below is homedir()-rooted by construction, so
+        // this should never trigger; guards against a future table that isn't).
+        if (rel.startsWith('..') || rel === '')
+            return;
+        suffixes.add(rel);
+    };
+    for (const nativePath of Object.values(CLIENT_NATIVE_PATHS)) {
+        addSuffix(join(nativePath, AGENT_PACK_SKILL_NAME, 'SKILL.md'));
+    }
+    for (const target of Object.values(AGENT_SHIM_TARGETS)) {
+        if (target)
+            addSuffix(target.path);
+    }
+    for (const target of Object.values(AGENT_HOOK_TARGETS)) {
+        addSuffix(join(target.scriptDir, 'session-start.sh'));
+        addSuffix(join(target.scriptDir, 'session-end.sh'));
+        addSuffix(target.configPath);
+    }
+    for (const target of Object.values(AGENT_MCP_TARGETS)) {
+        addSuffix(target.path);
+    }
+    return suffixes;
+}
+let cachedSuffixes = null;
+/** Lazily computed + cached — the target tables are static, module-load-time constants. */
+function allowedPathSuffixes() {
+    if (!cachedSuffixes)
+        cachedSuffixes = computeAllowedPathSuffixes();
+    return cachedSuffixes;
+}
+/**
+ * True when `path` structurally matches one of the installer's known
+ * relative target locations (see module header). Normalizes via
+ * `path.resolve` first so a `..`-laden path can't dodge the suffix check by
+ * embedding traversal segments before the matched tail.
+ */
+export function isAllowedManifestEntryPath(path) {
+    const normalized = resolve(path);
+    for (const suffix of allowedPathSuffixes()) {
+        if (normalized.endsWith(sep + suffix) || normalized === suffix)
+            return true;
+    }
+    return false;
+}
+/**
+ * True when `backupPath` resolves under this run's manifest backups
+ * directory ({@link getAgentInstallBackupsDir}). A `null` backupPath is not
+ * validated here — callers only invoke this when `backupPath` is non-null.
+ */
+export function isAllowedManifestBackupPath(backupPath) {
+    const backupsDir = resolve(getAgentInstallBackupsDir());
+    const normalized = resolve(backupPath);
+    return normalized === backupsDir || normalized.startsWith(backupsDir + sep);
+}
+//# sourceMappingURL=agent-manifest-path-guard.js.map

package/dist/src/install/agent-manifest-path-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest-path-guard.js","sourceRoot":"","sources":["../../../src/install/agent-manifest-path-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAExD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAEhD,qFAAqF;AACrF,SAAS,0BAA0B;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IAEtB,MAAM,SAAS,GAAG,CAAC,OAAe,EAAQ,EAAE;QAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACnC,yEAAyE;QACzE,qEAAqE;QACrE,wEAAwE;QACxE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE;YAAE,OAAM;QAC9C,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACnB,CAAC,CAAA;IAED,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5D,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC,CAAA;IAChE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvD,IAAI,MAAM;YAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAA;QACrD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAA;QACnD,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC9B,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,IAAI,cAAc,GAA+B,IAAI,CAAA;AAErD,2FAA2F;AAC3F,SAAS,mBAAmB;IAC1B,IAAI,CAAC,cAAc;QAAE,cAAc,GAAG,0BAA0B,EAAE,CAAA;IAClE,OAAO,cAAc,CAAA;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,EAAE,CAAC;QAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;IAC7E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAA;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACtC,OAAO,UAAU,KAAK,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAA;AAC7E,CAAC"}

package/dist/src/install/agent-manifest-path-guard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-manifest-path-guard.test.d.ts.map

package/dist/src/install/agent-manifest-path-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest-path-guard.test.d.ts","sourceRoot":"","sources":["../../../src/install/agent-manifest-path-guard.test.ts"],"names":[],"mappings":""}

package/dist/src/install/agent-manifest-path-guard.test.js

@@ -0,0 +1,72 @@
+/**
+ * @fileoverview Unit tests for the manifest-path validation guard
+ *               (SMI-5456 governance follow-up, code review 2026-07-01).
+ * @module @skillsmith/core/install/agent-manifest-path-guard.test
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { describe, expect, it } from 'vitest';
+import { AGENT_INSTALL_DIR_ENV_VAR, getAgentInstallBackupsDir } from './agent-manifest.js';
+import { isAllowedManifestBackupPath, isAllowedManifestEntryPath, } from './agent-manifest-path-guard.js';
+describe('isAllowedManifestEntryPath', () => {
+    it('allows a real claude-code skill pack path', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.claude', 'skills', 'skillsmith-agent', 'SKILL.md'))).toBe(true);
+    });
+    it('allows a real claude-code settings.json (MCP config target)', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.claude', 'settings.json'))).toBe(true);
+    });
+    it('allows a real hermes YAML config path', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.hermes', 'config.yaml'))).toBe(true);
+    });
+    it('allows a real codex hook script path', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.codex', 'hooks', 'session-start.sh'))).toBe(true);
+    });
+    it('rejects an arbitrary sensitive path never written by the installer', () => {
+        expect(isAllowedManifestEntryPath('/etc/passwd')).toBe(false);
+        expect(isAllowedManifestEntryPath(join(homedir(), '.ssh', 'id_rsa'))).toBe(false);
+    });
+    it('rejects a path that merely CONTAINS a known suffix as a substring, not a true path segment', () => {
+        // "evilclaude/settings.json" is not the same path component as
+        // ".claude/settings.json" — must not match on naive substring search.
+        expect(isAllowedManifestEntryPath(join(homedir(), 'evil.claude', 'settings.json'))).toBe(false);
+    });
+    it('rejects a hand-edited traversal string that resolves outside every known harness dir', () => {
+        // A tampered manifest entry could embed literal ".." segments (not
+        // produced by `path.join`, which would normalize them away before this
+        // function ever sees them) — `resolve()` inside the guard must still
+        // collapse them and reject the resulting real path.
+        expect(isAllowedManifestEntryPath(`${homedir()}/../../../../etc/passwd`)).toBe(false);
+    });
+    it('rejects a bare directory that only partially matches (no filename)', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.claude', 'skills'))).toBe(false);
+    });
+});
+describe('isAllowedManifestBackupPath', () => {
+    it('allows a path under the current backups directory', () => {
+        const backupsDir = getAgentInstallBackupsDir();
+        expect(isAllowedManifestBackupPath(join(backupsDir, '2026-01-01-settings.json.bak'))).toBe(true);
+    });
+    it('rejects a path outside the backups directory', () => {
+        expect(isAllowedManifestBackupPath(join(homedir(), '.ssh', 'id_rsa'))).toBe(false);
+    });
+    it('rejects a path that only shares a string prefix with the backups dir, not a real path boundary', () => {
+        const backupsDir = getAgentInstallBackupsDir();
+        expect(isAllowedManifestBackupPath(`${backupsDir}-evil-sibling/file.bak`)).toBe(false);
+    });
+    it('respects the SKILLSMITH_AGENT_INSTALL_DIR test-isolation override', () => {
+        const prev = process.env[AGENT_INSTALL_DIR_ENV_VAR];
+        process.env[AGENT_INSTALL_DIR_ENV_VAR] = join(homedir(), '.skillsmith-test-override');
+        try {
+            const backupsDir = getAgentInstallBackupsDir();
+            expect(backupsDir).toContain('.skillsmith-test-override');
+            expect(isAllowedManifestBackupPath(join(backupsDir, 'x.bak'))).toBe(true);
+        }
+        finally {
+            if (prev !== undefined)
+                process.env[AGENT_INSTALL_DIR_ENV_VAR] = prev;
+            else
+                delete process.env[AGENT_INSTALL_DIR_ENV_VAR];
+        }
+    });
+});
+//# sourceMappingURL=agent-manifest-path-guard.test.js.map

package/dist/src/install/agent-manifest-path-guard.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest-path-guard.test.js","sourceRoot":"","sources":["../../../src/install/agent-manifest-path-guard.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC1F,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,gCAAgC,CAAA;AAEvC,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CACJ,0BAA0B,CACxB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,CAAC,CACrE,CACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAC7F,IAAI,CACL,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,0BAA0B,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7D,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,+DAA+D;QAC/D,sEAAsE;QACtE,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,mEAAmE;QACnE,uEAAuE;QACvE,qEAAqE;QACrE,oDAAoD;QACpD,MAAM,CAAC,0BAA0B,CAAC,GAAG,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAA;QAC9C,MAAM,CAAC,2BAA2B,CAAC,IAAI,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAA;QAC9C,MAAM,CAAC,2BAA2B,CAAC,GAAG,UAAU,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;QACnD,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,2BAA2B,CAAC,CAAA;QACrF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAA;YAC9C,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAA;YACzD,MAAM,CAAC,2BAA2B,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAA;;gBAChE,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/install/agent-manifest.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Install manifest for `sklx agent install` / `uninstall` (SMI-5456 Wave 1
+ * Step 5).
+ *
+ * `sklx agent uninstall` must reverse EXACTLY what install wrote — per-
+ * changeset file identity, not a re-derivation from the current pack
+ * generator (which could have changed between install and uninstall, e.g.
+ * across a version bump). The manifest is the durable record of every path
+ * the installer created or modified, plus a backup reference for anything it
+ * modified (so a foreign file's pre-existing content is restorable) or `null`
+ * for anything it created outright (so uninstall deletes rather than
+ * restores).
+ *
+ * Location: `~/.skillsmith/agent-install/manifest.json` — a sibling
+ * directory to `~/.skillsmith/journal` (Step 3) and `~/.skillsmith/agent-markers`
+ * (Step 1), following the same `getConfigDir()`-rooted, env-override-for-
+ * tests convention as both.
+ *
+ * @module @skillsmith/core/install/agent-manifest
+ */
+/** Env var overriding the manifest directory (test isolation — mirrors SKILLSMITH_JOURNAL_DIR). */
+export declare const AGENT_INSTALL_DIR_ENV_VAR = "SKILLSMITH_AGENT_INSTALL_DIR";
+export declare const AGENT_MANIFEST_SCHEMA_VERSION = 1;
+export type AgentManifestEntryKind = 'skill' | 'shim' | 'hook-script' | 'mcp-config' | 'hook-config';
+/**
+ * One path the installer touched. `backupPath` is set only when a
+ * PRE-EXISTING file was modified (config-file merges); it is `null` for
+ * anything the installer created fresh (skill pack copies, shim files, hook
+ * scripts) since there is nothing meaningful to restore — uninstall deletes.
+ */
+export interface AgentManifestEntry {
+    path: string;
+    kind: AgentManifestEntryKind;
+    /** Harness this entry belongs to, or null for the harness-neutral SKILL.md pack. */
+    harness: string | null;
+    backupPath: string | null;
+    /** True when the installer set the executable bit (hook scripts). */
+    executable: boolean;
+}
+export interface AgentInstallManifest {
+    schemaVersion: number;
+    installedAt: string;
+    /** `AGENT_PACK_SCHEMA_VERSION` at install time — informational, not enforced. */
+    packSchemaVersion: number;
+    entries: AgentManifestEntry[];
+}
+export declare function getAgentManifestPath(): string;
+export declare function getAgentInstallBackupsDir(): string;
+/** Load the manifest, or an empty (never-installed) manifest if none exists or it is corrupt. */
+export declare function loadAgentManifest(): AgentInstallManifest;
+/**
+ * Persist a manifest, replacing any prior one. Re-running install writes a
+ * fresh manifest reflecting the CURRENT full set of entries (deduped by
+ * `path` — later entries in `entries` win) so a double-install never
+ * accumulates duplicate entries (P-5 idempotency test).
+ */
+export declare function saveAgentManifest(manifest: AgentInstallManifest): void;
+//# sourceMappingURL=agent-manifest.d.ts.map

package/dist/src/install/agent-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest.d.ts","sourceRoot":"","sources":["../../../src/install/agent-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,mGAAmG;AACnG,eAAO,MAAM,yBAAyB,iCAAiC,CAAA;AAEvE,eAAO,MAAM,6BAA6B,IAAI,CAAA;AAE9C,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,YAAY,GAAG,aAAa,CAAA;AAEpG;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,sBAAsB,CAAA;IAC5B,oFAAoF;IACpF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,qEAAqE;IACrE,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,iBAAiB,EAAE,MAAM,CAAA;IACzB,OAAO,EAAE,kBAAkB,EAAE,CAAA;CAC9B;AAOD,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,IAAI,oBAAoB,CAexD;AAWD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAMtE"}

package/dist/src/install/agent-manifest.js

@@ -0,0 +1,103 @@
+/**
+ * Install manifest for `sklx agent install` / `uninstall` (SMI-5456 Wave 1
+ * Step 5).
+ *
+ * `sklx agent uninstall` must reverse EXACTLY what install wrote — per-
+ * changeset file identity, not a re-derivation from the current pack
+ * generator (which could have changed between install and uninstall, e.g.
+ * across a version bump). The manifest is the durable record of every path
+ * the installer created or modified, plus a backup reference for anything it
+ * modified (so a foreign file's pre-existing content is restorable) or `null`
+ * for anything it created outright (so uninstall deletes rather than
+ * restores).
+ *
+ * Location: `~/.skillsmith/agent-install/manifest.json` — a sibling
+ * directory to `~/.skillsmith/journal` (Step 3) and `~/.skillsmith/agent-markers`
+ * (Step 1), following the same `getConfigDir()`-rooted, env-override-for-
+ * tests convention as both.
+ *
+ * @module @skillsmith/core/install/agent-manifest
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getConfigDir } from '../config/index.js';
+/** Env var overriding the manifest directory (test isolation — mirrors SKILLSMITH_JOURNAL_DIR). */
+export const AGENT_INSTALL_DIR_ENV_VAR = 'SKILLSMITH_AGENT_INSTALL_DIR';
+export const AGENT_MANIFEST_SCHEMA_VERSION = 1;
+function getAgentInstallDir() {
+    const override = process.env[AGENT_INSTALL_DIR_ENV_VAR];
+    return override && override.length > 0 ? override : join(getConfigDir(), 'agent-install');
+}
+export function getAgentManifestPath() {
+    return join(getAgentInstallDir(), 'manifest.json');
+}
+export function getAgentInstallBackupsDir() {
+    return join(getAgentInstallDir(), 'backups');
+}
+/** Load the manifest, or an empty (never-installed) manifest if none exists or it is corrupt. */
+export function loadAgentManifest() {
+    const path = getAgentManifestPath();
+    if (!existsSync(path))
+        return emptyManifest();
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+        if (!parsed || !Array.isArray(parsed.entries))
+            return emptyManifest();
+        return {
+            schemaVersion: parsed.schemaVersion ?? AGENT_MANIFEST_SCHEMA_VERSION,
+            installedAt: parsed.installedAt ?? new Date(0).toISOString(),
+            packSchemaVersion: parsed.packSchemaVersion ?? 0,
+            entries: parsed.entries,
+        };
+    }
+    catch {
+        return emptyManifest();
+    }
+}
+function emptyManifest() {
+    return {
+        schemaVersion: AGENT_MANIFEST_SCHEMA_VERSION,
+        installedAt: new Date(0).toISOString(),
+        packSchemaVersion: 0,
+        entries: [],
+    };
+}
+/**
+ * Persist a manifest, replacing any prior one. Re-running install writes a
+ * fresh manifest reflecting the CURRENT full set of entries (deduped by
+ * `path` — later entries in `entries` win) so a double-install never
+ * accumulates duplicate entries (P-5 idempotency test).
+ */
+export function saveAgentManifest(manifest) {
+    const dir = getAgentInstallDir();
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const deduped = dedupeEntriesByPath(manifest.entries);
+    const toWrite = { ...manifest, entries: deduped };
+    writeFileSync(getAgentManifestPath(), JSON.stringify(toWrite, null, 2) + '\n', { mode: 0o600 });
+}
+/**
+ * Dedupe by `path`, keeping the LAST entry's `kind`/`harness`/`executable`
+ * (the most recent write's classification) but preserving a non-null
+ * `backupPath` from ANY entry for that path.
+ *
+ * A single install run can merge into the same shared config file more than
+ * once (claude-code's SessionStart/SessionEnd hooks AND its MCP
+ * registration all touch `~/.claude/settings.json`) — only the FIRST merge
+ * into that file takes a real backup of the genuine pre-install content
+ * (`agent-config-merge.types.ts`'s `alreadyBackedUpPaths`); every
+ * subsequent merge into the same path this run correctly reports
+ * `backupPath: null` (nothing new to back up). A naive "last entry wins"
+ * dedupe would silently drop that first, load-bearing backup reference —
+ * `uninstallAgentPack` would then treat a modified pre-existing file as
+ * "created fresh" and delete it instead of restoring it.
+ */
+function dedupeEntriesByPath(entries) {
+    const byPath = new Map();
+    for (const entry of entries) {
+        const prior = byPath.get(entry.path);
+        const backupPath = entry.backupPath ?? prior?.backupPath ?? null;
+        byPath.set(entry.path, { ...entry, backupPath });
+    }
+    return [...byPath.values()];
+}
+//# sourceMappingURL=agent-manifest.js.map

package/dist/src/install/agent-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest.js","sourceRoot":"","sources":["../../../src/install/agent-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD,mGAAmG;AACnG,MAAM,CAAC,MAAM,yBAAyB,GAAG,8BAA8B,CAAA;AAEvE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAA;AA4B9C,SAAS,kBAAkB;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;IACvD,OAAO,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,eAAe,CAAC,CAAA;AAC3F,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,eAAe,CAAC,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,SAAS,CAAC,CAAA;AAC9C,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAA;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,EAAE,CAAA;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAkC,CAAA;QACvF,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,aAAa,EAAE,CAAA;QACrE,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,6BAA6B;YACpE,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAC5D,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,CAAC;YAChD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,EAAE,CAAA;IACxB,CAAC;AACH,CAAC;AAED,SAAS,aAAa;IACpB,OAAO;QACL,aAAa,EAAE,6BAA6B;QAC5C,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACtC,iBAAiB,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE;KACZ,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA8B;IAC9D,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAA;IAChC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,OAAO,GAAyB,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IACvE,aAAa,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AACjG,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,mBAAmB,CAAC,OAAsC;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAA;IACpD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,EAAE,UAAU,IAAI,IAAI,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;AAC7B,CAAC"}

package/dist/src/install/agent-pack-installer.d.ts

@@ -0,0 +1,39 @@
+/**
+ * `sklx agent install` core orchestration (SMI-5456 Wave 1 Step 5).
+ *
+ * Generates the pack via `generateAgentPack({ toolProfile: AGENT_TOOL_PROFILE_NAMES })`
+ * (QD-2: byte-identical to the committed `packages/mcp-server/src/assets/agent-pack/`
+ * tree by determinism, never read from the mcp-server package) and writes:
+ *   - SKILL.md to the mandatory dual path (claude-code + agents) plus any
+ *     detected Tier-2/3 harness with its own native skill directory
+ *     (opencode, hermes, windsurf).
+ *   - Named-agent shims for every detected harness with a shim target
+ *     (claude-code always; copilot, opencode when detected; codex via its
+ *     own TOML-merge "shim").
+ *   - SessionStart/SessionEnd hooks (+x) for claude-code (always), cursor
+ *     and codex when detected — hook CONFIG wiring ships for claude-code/
+ *     cursor (JSON arrays) and codex (SessionStart ONLY, as a
+ *     marker-delimited `[[hooks.SessionStart]]` TOML block; Codex has no
+ *     SessionEnd event and its Stop event is per-turn — see
+ *     `installCodexHooks` in `agent-pack-installer.harness.ts`).
+ *   - The `skillsmith` MCP server registration (`SKILLSMITH_TOOL_PROFILE=agent`)
+ *     for every detected MCP-capable harness (all 7), backup-first,
+ *     idempotent, preserve-and-prompt on a foreign entry.
+ *
+ * Every write funnels through `writeOwnedArtifactFile` (owned files) or the
+ * `agent-config-merge.*` helpers (shared config files), both of which record
+ * a manifest entry — `uninstallAgentPack` (SMI-5456) reverses exactly what
+ * this function wrote by replaying that manifest, never by re-deriving
+ * "what the current generator would produce".
+ *
+ * @module @skillsmith/core/install/agent-pack-installer
+ */
+import { loadAgentManifest } from './agent-manifest.js';
+import { type AgentInstallOptions, type AgentInstallResult } from './agent-pack-installer.types.js';
+/**
+ * Detect + install the portable Skillsmith Agent pack across every
+ * supported harness. See module header for the full per-harness matrix.
+ */
+export declare function installAgentPack(opts?: AgentInstallOptions): AgentInstallResult;
+export { loadAgentManifest };
+//# sourceMappingURL=agent-pack-installer.d.ts.map

package/dist/src/install/agent-pack-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-installer.d.ts","sourceRoot":"","sources":["../../../src/install/agent-pack-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAWH,OAAO,EAGL,iBAAiB,EAGlB,MAAM,qBAAqB,CAAA;AAS5B,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EAExB,MAAM,iCAAiC,CAAA;AA4FxC;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,mBAAwB,GAAG,kBAAkB,CA6HnF;AAGD,OAAO,EAAE,iBAAiB,EAAE,CAAA"}

package/dist/src/install/agent-pack-installer.entry.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Entry-value builders for `sklx agent install` (SMI-5456 Wave 1 Step 5).
+ *
+ * Pure functions producing the exact MCP-server registration value + the
+ * Codex TOML blocks the installer merges in. Separated from the
+ * orchestrator so the "what do we install" shape is independently testable
+ * from "where do we write it".
+ *
+ * @module @skillsmith/core/install/agent-pack-installer.entry
+ */
+/**
+ * The `skillsmith` MCP server registration value for `mcpServers`-convention
+ * harnesses (claude-code, cursor, copilot, windsurf; hermes uses the same
+ * field names under YAML). OpenCode does NOT use this shape — see
+ * {@link buildOpenCodeMcpEntryValue}.
+ */
+export declare function buildAgentMcpEntryValue(): Record<string, unknown>;
+/**
+ * OpenCode's `mcp`-key entry value (Step-6 verified against
+ * opencode.ai/docs/mcp-servers/): entries are typed `local|remote`,
+ * `command` is an ARRAY (command + args combined), and the env-var field is
+ * named `environment`, not `env`. Writing the generic mcpServers shape here
+ * would produce an entry OpenCode's config schema rejects.
+ */
+export declare function buildOpenCodeMcpEntryValue(): Record<string, unknown>;
+/** Codex `[mcp_servers.skillsmith]` TOML block (text between our markers). */
+export declare function buildCodexMcpTomlBlock(): string;
+/** Regex matching a bare (non-marker-delimited) `[mcp_servers.skillsmith]` table header. */
+export declare const CODEX_MCP_FOREIGN_HEADER: RegExp;
+/** Regex matching a bare (non-marker-delimited) `[agents.skillsmith-agent]` table header. */
+export declare const CODEX_AGENTS_FOREIGN_HEADER: RegExp;
+/**
+ * Codex `[[hooks.SessionStart]]` TOML block (text between our markers) —
+ * shape verified by the Step-6 eval worker against
+ * developers.openai.com/codex/hooks: inline array-of-tables
+ * `[[hooks.SessionStart]]` with a nested `[[hooks.SessionStart.hooks]]`
+ * array carrying `{type, command, timeout, statusMessage}`. Only `type` +
+ * `command` are emitted (timeout/statusMessage stay at Codex defaults).
+ * `JSON.stringify` produces a valid TOML basic string for the absolute
+ * script path — same quoting convention as `renderCodexToml` (shims.ts).
+ */
+export declare function buildCodexSessionStartHookBlock(sessionStartScriptPath: string): string;
+/**
+ * Regex matching a SINGLE-bracket `[hooks.SessionStart]` table header — a
+ * user config that defined `hooks.SessionStart` as a plain TABLE. Appending
+ * our `[[hooks.SessionStart]]` array-of-tables entry to such a file would
+ * produce INVALID TOML (a key cannot be both a table and an array of
+ * tables), so that is the genuine-conflict case. A foreign DOUBLE-bracket
+ * `[[hooks.SessionStart]]` (the user's own hook) is deliberately NOT
+ * matched: TOML permits re-opening an array of tables anywhere in the
+ * document, so appending our own `[[hooks.SessionStart]]` entry alongside a
+ * user's is valid and non-destructive — both hooks run.
+ */
+export declare const CODEX_HOOKS_TABLE_CONFLICT_HEADER: RegExp;
+//# sourceMappingURL=agent-pack-installer.entry.d.ts.map

package/dist/src/install/agent-pack-installer.entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-installer.entry.d.ts","sourceRoot":"","sources":["../../../src/install/agent-pack-installer.entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQjE;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASpE;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,IAAI,MAAM,CAS/C;AAED,4FAA4F;AAC5F,eAAO,MAAM,wBAAwB,QAAoD,CAAA;AAEzF,6FAA6F;AAC7F,eAAO,MAAM,2BAA2B,QAAqD,CAAA;AAE7F;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,sBAAsB,EAAE,MAAM,GAAG,MAAM,CAQtF;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iCAAiC,QAA8B,CAAA"}