@skillsmith/core 0.9.0 → 0.11.0

package/dist/src/install/agent-harness-targets.js

@@ -0,0 +1,154 @@
+/**
+ * Per-harness on-disk targets for the `sklx agent install` / `uninstall`
+ * commands (SMI-5456 Wave 1 Step 5).
+ *
+ * This module is pure data (no filesystem access) — it says WHERE each
+ * harness's MCP config and hook config live and in what format, so
+ * `agent-config-merge*.ts` can merge into them generically and
+ * `agent-pack-installer.ts` doesn't hard-code per-harness path logic inline.
+ *
+ * Confidence levels (documented per plan's own Validation Ladder philosophy —
+ * Level 2a/3 in docs/internal/implementation/smi-5456-skillsmith-agent-wave1.md
+ * is explicitly where per-harness wire formats get confirmed against real
+ * harness binaries; Step-6 eval-worker web-verification 2026-07-01 upgraded
+ * three rows from the original Step-5 estimates):
+ *   - claude-code, cursor, windsurf: HIGH — MCP config path/shape verified
+ *     against `packages/cli/src/templates/mcp-server.template.snippets.ts`
+ *     (SMI-4580, already shipped and used in docs/website).
+ *   - hermes: HIGH for the skill path + YAML config shape (spike report §(b),
+ *     3 independent official doc pages agree); hooks are spike-verified
+ *     ABSENT (no SessionStart equivalent) — {@link AGENT_HOOK_TARGETS}
+ *     therefore carries no hook target for hermes.
+ *   - codex: HIGH for the config file path (`~/.codex/config.toml`, same
+ *     snippet table) AND — per Step-6 verification of
+ *     developers.openai.com/codex/hooks — HIGH for the hook-registration
+ *     shape: inline `[[hooks.SessionStart]]` / `[[hooks.SessionStart.hooks]]`
+ *     array-of-tables carrying `{type, command, timeout, statusMessage}`.
+ *     Codex has NO SessionEnd event, and its Stop event fires PER-TURN (not
+ *     per-session) — see `installCodexHooks` in
+ *     `agent-pack-installer.harness.ts` for why nothing is wired for cleanup.
+ *   - copilot: HIGH — `~/.copilot/mcp-config.json`, top-level `mcpServers`
+ *     key (Step-6 verified; the earlier `mcp.json` guess was wrong). Global,
+ *     not VS Code's workspace `.vscode/mcp.json`, remains correct: Copilot
+ *     CLI removed `.vscode/mcp.json` support, and `sklx agent install` is a
+ *     global (not per-project) command.
+ *   - opencode: HIGH — `~/.config/opencode/opencode.json` under the `mcp`
+ *     key, entries typed `local|remote` (Step-6 verified against
+ *     opencode.ai/docs; entry VALUE shape differs from the mcpServers
+ *     convention — see `buildOpenCodeMcpEntryValue` in
+ *     `agent-pack-installer.entry.ts`). Agent markdown lives at
+ *     `~/.config/opencode/agents/` — plural (opencode.ai/docs/agents/; the
+ *     earlier singular `agent/` guess was wrong).
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+const home = homedir();
+/** MCP registration targets for every harness the pack supports (PRD §3.1). */
+export const AGENT_MCP_TARGETS = {
+    'claude-code': {
+        harness: 'claude-code',
+        path: join(home, '.claude', 'settings.json'),
+        format: 'json',
+        keyPath: ['mcpServers'],
+    },
+    cursor: {
+        harness: 'cursor',
+        path: join(home, '.cursor', 'mcp.json'),
+        format: 'json',
+        keyPath: ['mcpServers'],
+    },
+    copilot: {
+        harness: 'copilot',
+        path: join(home, '.copilot', 'mcp-config.json'),
+        format: 'json',
+        keyPath: ['mcpServers'],
+    },
+    windsurf: {
+        harness: 'windsurf',
+        path: join(home, '.codeium', 'windsurf', 'mcp_config.json'),
+        format: 'json',
+        keyPath: ['mcpServers'],
+    },
+    opencode: {
+        harness: 'opencode',
+        path: join(home, '.config', 'opencode', 'opencode.json'),
+        format: 'json',
+        keyPath: ['mcp'],
+    },
+    codex: {
+        harness: 'codex',
+        path: join(home, '.codex', 'config.toml'),
+        format: 'toml-block',
+        keyPath: [],
+    },
+    hermes: {
+        harness: 'hermes',
+        path: join(home, '.hermes', 'config.yaml'),
+        format: 'yaml',
+        keyPath: ['mcp_servers'],
+    },
+};
+/**
+ * Named-agent shim file targets, per {@link HarnessId} (PRD §3.1 constraint
+ * 2 / architecture doc artifacts A2-A5). Cursor and (VS Code's) Copilot both
+ * read `.claude/agents/*.md` natively per the constraint matrix, so they
+ * share the claude-code shim file rather than getting a second copy — only
+ * harnesses with their OWN native shim format get a dedicated target here.
+ */
+export const AGENT_SHIM_TARGETS = {
+    'claude-code': {
+        harness: 'claude-code',
+        path: join(home, '.claude', 'agents', 'skillsmith-agent.md'),
+    },
+    // Cursor 2.4+ reads `.claude/agents/` natively — no separate shim file.
+    cursor: null,
+    copilot: {
+        harness: 'copilot',
+        path: join(home, '.copilot', 'agents', 'skillsmith-agent.agent.md'),
+    },
+    opencode: {
+        harness: 'opencode',
+        // Step-6 verified (opencode.ai/docs/agents/): global agent markdown
+        // lives at ~/.config/opencode/agents/ — plural.
+        path: join(home, '.config', 'opencode', 'agents', 'skillsmith-agent.md'),
+    },
+    // Codex's shim is a TOML `[agents.*]` table entry merged into
+    // ~/.codex/config.toml, not a standalone file — see AGENT_MCP_TARGETS.codex
+    // and agent-config-merge.toml-block.ts. No separate ShimTarget.
+    codex: null,
+};
+/** Hook install targets — only harnesses with a real SessionStart hook (HOOK_HARNESSES). */
+export const AGENT_HOOK_TARGETS = {
+    'claude-code': {
+        harness: 'claude-code',
+        scriptDir: join(home, '.claude', 'hooks'),
+        configPath: join(home, '.claude', 'settings.json'),
+        configFormat: 'json',
+        sessionStartKeyPath: ['hooks', 'SessionStart'],
+        sessionEndKeyPath: ['hooks', 'SessionEnd'],
+    },
+    cursor: {
+        harness: 'cursor',
+        scriptDir: join(home, '.cursor', 'hooks'),
+        configPath: join(home, '.cursor', 'hooks.json'),
+        configFormat: 'json',
+        // Cursor's hooks.json is Claude-compatible (PRD §3.1) but is itself the
+        // hooks map (no wrapping "hooks" key) — see module header confidence note.
+        sessionStartKeyPath: ['SessionStart'],
+        sessionEndKeyPath: ['SessionEnd'],
+    },
+    codex: {
+        harness: 'codex',
+        scriptDir: join(home, '.codex', 'hooks'),
+        configPath: join(home, '.codex', 'config.toml'),
+        configFormat: 'toml-block',
+        // Unused for toml-block wiring (the block text carries its own
+        // `[[hooks.SessionStart]]` headers); SessionEnd does not exist as a
+        // Codex event at all — see `installCodexHooks`.
+        sessionStartKeyPath: [],
+        sessionEndKeyPath: [],
+    },
+};
+/** Codex's `[agents.skillsmith-agent]` TOML entry lives in the same config file as its MCP registration. */
+export const CODEX_CONFIG_TOML_PATH = AGENT_MCP_TARGETS.codex.path;
+//# sourceMappingURL=agent-harness-targets.js.map

package/dist/src/install/agent-harness-targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-harness-targets.js","sourceRoot":"","sources":["../../../src/install/agent-harness-targets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAiDhC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;AAEtB,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAoD;IAChF,aAAa,EAAE;QACb,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QAC5C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,CAAC,YAAY,CAAC;KACxB;IACD,MAAM,EAAE;QACN,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,CAAC,YAAY,CAAC;KACxB;IACD,OAAO,EAAE;QACP,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC;QAC/C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,CAAC,YAAY,CAAC;KACxB;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,CAAC,YAAY,CAAC;KACxB;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC;QACxD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB;IACD,KAAK,EAAE;QACL,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC;QACzC,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,EAAE;KACZ;IACD,MAAM,EAAE;QACN,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,CAAC,aAAa,CAAC;KACzB;CACF,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAmD;IAChF,aAAa,EAAE;QACb,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,qBAAqB,CAAC;KAC7D;IACD,wEAAwE;IACxE,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE;QACP,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,2BAA2B,CAAC;KACpE;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,UAAU;QACnB,oEAAoE;QACpE,gDAAgD;QAChD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,qBAAqB,CAAC;KACzE;IACD,8DAA8D;IAC9D,4EAA4E;IAC5E,gEAAgE;IAChE,KAAK,EAAE,IAAI;CACZ,CAAA;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kBAAkB,GAE3B;IACF,aAAa,EAAE;QACb,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;QACzC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QAClD,YAAY,EAAE,MAAM;QACpB,mBAAmB,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;QAC9C,iBAAiB,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;KAC3C;IACD,MAAM,EAAE;QACN,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;QACzC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC;QAC/C,YAAY,EAAE,MAAM;QACpB,wEAAwE;QACxE,2EAA2E;QAC3E,mBAAmB,EAAE,CAAC,cAAc,CAAC;QACrC,iBAAiB,EAAE,CAAC,YAAY,CAAC;KAClC;IACD,KAAK,EAAE;QACL,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;QACxC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC;QAC/C,YAAY,EAAE,YAAY;QAC1B,+DAA+D;QAC/D,oEAAoE;QACpE,gDAAgD;QAChD,mBAAmB,EAAE,EAAE;QACvB,iBAAiB,EAAE,EAAE;KACtB;CACF,CAAA;AAED,4GAA4G;AAC5G,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAA"}

package/dist/src/install/agent-home-relocate.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Home-dir relocation test seam for `sklx agent install` (SMI-5456 Wave 1
+ * Step 5).
+ *
+ * `paths.ts`'s `CLIENT_NATIVE_PATHS` and `agent-harness-targets.ts`'s target
+ * tables are computed ONCE at module load via `os.homedir()` — the
+ * established pattern in this codebase (paths.ts has no `homeDir` override;
+ * `enumerateHarnessPresence()` takes none either). Rather than widen that
+ * shared contract (used across many consumers) or fight macOS's
+ * `os.homedir()` ignoring `process.env.HOME` mutations (the exact problem
+ * `journal/path.ts` and `telemetry/agent-marker.ts` solve with their own
+ * per-module env overrides), the installer re-roots any already-computed
+ * absolute path onto an alternate directory for tests: strip the real
+ * `os.homedir()` prefix and re-join under the test's temp `homeDir`. This
+ * keeps every existing static table intact and untouched while giving
+ * `installAgentPack({ homeDir })` a real, disk-backed temp-HOME test seam
+ * (P-5 "install to a temp HOME" requirement) without adding a second
+ * parallel path-computation system to maintain in sync with `paths.ts`.
+ *
+ * @module @skillsmith/core/install/agent-home-relocate
+ */
+/**
+ * Re-root `absolutePath` (assumed computed under the REAL `os.homedir()`)
+ * onto `homeDir`. Returns `absolutePath` unchanged when `homeDir` is
+ * undefined, or when `absolutePath` is not actually under the real home
+ * directory (defensive — never silently misroute an unrelated path).
+ */
+export declare function relocateUnderHome(absolutePath: string, homeDir?: string): string;
+//# sourceMappingURL=agent-home-relocate.d.ts.map

package/dist/src/install/agent-home-relocate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-home-relocate.d.ts","sourceRoot":"","sources":["../../../src/install/agent-home-relocate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAKhF"}

package/dist/src/install/agent-home-relocate.js

@@ -0,0 +1,38 @@
+/**
+ * Home-dir relocation test seam for `sklx agent install` (SMI-5456 Wave 1
+ * Step 5).
+ *
+ * `paths.ts`'s `CLIENT_NATIVE_PATHS` and `agent-harness-targets.ts`'s target
+ * tables are computed ONCE at module load via `os.homedir()` — the
+ * established pattern in this codebase (paths.ts has no `homeDir` override;
+ * `enumerateHarnessPresence()` takes none either). Rather than widen that
+ * shared contract (used across many consumers) or fight macOS's
+ * `os.homedir()` ignoring `process.env.HOME` mutations (the exact problem
+ * `journal/path.ts` and `telemetry/agent-marker.ts` solve with their own
+ * per-module env overrides), the installer re-roots any already-computed
+ * absolute path onto an alternate directory for tests: strip the real
+ * `os.homedir()` prefix and re-join under the test's temp `homeDir`. This
+ * keeps every existing static table intact and untouched while giving
+ * `installAgentPack({ homeDir })` a real, disk-backed temp-HOME test seam
+ * (P-5 "install to a temp HOME" requirement) without adding a second
+ * parallel path-computation system to maintain in sync with `paths.ts`.
+ *
+ * @module @skillsmith/core/install/agent-home-relocate
+ */
+import { homedir } from 'node:os';
+import { isAbsolute, join, relative } from 'node:path';
+/**
+ * Re-root `absolutePath` (assumed computed under the REAL `os.homedir()`)
+ * onto `homeDir`. Returns `absolutePath` unchanged when `homeDir` is
+ * undefined, or when `absolutePath` is not actually under the real home
+ * directory (defensive — never silently misroute an unrelated path).
+ */
+export function relocateUnderHome(absolutePath, homeDir) {
+    if (!homeDir)
+        return absolutePath;
+    const rel = relative(homedir(), absolutePath);
+    if (rel.startsWith('..') || isAbsolute(rel))
+        return absolutePath;
+    return join(homeDir, rel);
+}
+//# sourceMappingURL=agent-home-relocate.js.map

package/dist/src/install/agent-home-relocate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-home-relocate.js","sourceRoot":"","sources":["../../../src/install/agent-home-relocate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,OAAgB;IACtE,IAAI,CAAC,OAAO;QAAE,OAAO,YAAY,CAAA;IACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAA;IAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAA;IAChE,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;AAC3B,CAAC"}

package/dist/src/install/agent-manifest-path-guard.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Manifest-path validation for `uninstallAgentPack` (SMI-5456 governance
+ * follow-up, code review 2026-07-01).
+ *
+ * `uninstallAgentPack` reads `~/.skillsmith/agent-install/manifest.json` and,
+ * for every entry, either `unlinkSync`s `entry.path` or `writeFileSync`s
+ * content read from `entry.backupPath` INTO `entry.path` — with no
+ * validation that either path is one this installer could actually have
+ * produced. The manifest is an ordinary 0600 JSON file under the user's own
+ * HOME, not a signed or otherwise tamper-evident record; if it is ever
+ * corrupted, hand-edited, or overwritten by an unrelated bug elsewhere in
+ * the process (prototype pollution, a bad merge, a copy-paste from another
+ * user's manifest), `uninstallAgentPack` would happily `unlinkSync` or
+ * overwrite ANY path on disk the current user can write to — an
+ * arbitrary-file-delete/overwrite primitive completely disconnected from
+ * "what a real `sklx agent install` run actually wrote".
+ *
+ * This module closes that gap by checking every entry against the FIXED,
+ * finite set of relative-to-HOME suffixes the installer is capable of ever
+ * writing (every {@link CLIENT_NATIVE_PATHS} skill-pack path, every
+ * {@link AGENT_SHIM_TARGETS} shim, every {@link AGENT_HOOK_TARGETS} hook
+ * script + hook config file, every {@link AGENT_MCP_TARGETS} MCP config
+ * file) before any destructive fs call touches it. `backupPath` is checked
+ * separately: it must resolve under the current run's manifest/backups
+ * directory. An entry failing either check is never touched — the caller
+ * treats it as `rejected`, not `removed`/`restored`.
+ *
+ * Suffix (not full-path-prefix) matching is deliberate: `installAgentPack`
+ * supports a `homeDir` test-seam that relocates every target under an
+ * arbitrary temp directory (`agent-home-relocate.ts`), and
+ * `uninstallAgentPack` has no matching `homeDir` wiring (paths recorded in
+ * the manifest are already fully resolved at install time) — validating by
+ * suffix works identically in both the real-HOME production path and the
+ * relocated-HOME test path without needing to thread a redundant `homeDir`
+ * through uninstall. This still shrinks the achievable blast radius from
+ * "any file the process can write" down to "a file whose path happens to end
+ * with one of a dozen known per-harness relative locations" — a tampered
+ * manifest can no longer name `/etc/passwd` or `~/.ssh/id_rsa`.
+ *
+ * @module @skillsmith/core/install/agent-manifest-path-guard
+ */
+/**
+ * True when `path` structurally matches one of the installer's known
+ * relative target locations (see module header). Normalizes via
+ * `path.resolve` first so a `..`-laden path can't dodge the suffix check by
+ * embedding traversal segments before the matched tail.
+ */
+export declare function isAllowedManifestEntryPath(path: string): boolean;
+/**
+ * True when `backupPath` resolves under this run's manifest backups
+ * directory ({@link getAgentInstallBackupsDir}). A `null` backupPath is not
+ * validated here — callers only invoke this when `backupPath` is non-null.
+ */
+export declare function isAllowedManifestBackupPath(backupPath: string): boolean;
+//# sourceMappingURL=agent-manifest-path-guard.d.ts.map

package/dist/src/install/agent-manifest-path-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest-path-guard.d.ts","sourceRoot":"","sources":["../../../src/install/agent-manifest-path-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAsDH;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMhE;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAIvE"}

package/dist/src/install/agent-manifest-path-guard.js

@@ -0,0 +1,109 @@
+/**
+ * Manifest-path validation for `uninstallAgentPack` (SMI-5456 governance
+ * follow-up, code review 2026-07-01).
+ *
+ * `uninstallAgentPack` reads `~/.skillsmith/agent-install/manifest.json` and,
+ * for every entry, either `unlinkSync`s `entry.path` or `writeFileSync`s
+ * content read from `entry.backupPath` INTO `entry.path` — with no
+ * validation that either path is one this installer could actually have
+ * produced. The manifest is an ordinary 0600 JSON file under the user's own
+ * HOME, not a signed or otherwise tamper-evident record; if it is ever
+ * corrupted, hand-edited, or overwritten by an unrelated bug elsewhere in
+ * the process (prototype pollution, a bad merge, a copy-paste from another
+ * user's manifest), `uninstallAgentPack` would happily `unlinkSync` or
+ * overwrite ANY path on disk the current user can write to — an
+ * arbitrary-file-delete/overwrite primitive completely disconnected from
+ * "what a real `sklx agent install` run actually wrote".
+ *
+ * This module closes that gap by checking every entry against the FIXED,
+ * finite set of relative-to-HOME suffixes the installer is capable of ever
+ * writing (every {@link CLIENT_NATIVE_PATHS} skill-pack path, every
+ * {@link AGENT_SHIM_TARGETS} shim, every {@link AGENT_HOOK_TARGETS} hook
+ * script + hook config file, every {@link AGENT_MCP_TARGETS} MCP config
+ * file) before any destructive fs call touches it. `backupPath` is checked
+ * separately: it must resolve under the current run's manifest/backups
+ * directory. An entry failing either check is never touched — the caller
+ * treats it as `rejected`, not `removed`/`restored`.
+ *
+ * Suffix (not full-path-prefix) matching is deliberate: `installAgentPack`
+ * supports a `homeDir` test-seam that relocates every target under an
+ * arbitrary temp directory (`agent-home-relocate.ts`), and
+ * `uninstallAgentPack` has no matching `homeDir` wiring (paths recorded in
+ * the manifest are already fully resolved at install time) — validating by
+ * suffix works identically in both the real-HOME production path and the
+ * relocated-HOME test path without needing to thread a redundant `homeDir`
+ * through uninstall. This still shrinks the achievable blast radius from
+ * "any file the process can write" down to "a file whose path happens to end
+ * with one of a dozen known per-harness relative locations" — a tampered
+ * manifest can no longer name `/etc/passwd` or `~/.ssh/id_rsa`.
+ *
+ * @module @skillsmith/core/install/agent-manifest-path-guard
+ */
+import { homedir } from 'node:os';
+import { join, relative, resolve, sep } from 'node:path';
+import { AGENT_PACK_SKILL_NAME } from '../services/agent-pack/index.js';
+import { AGENT_HOOK_TARGETS, AGENT_MCP_TARGETS, AGENT_SHIM_TARGETS, } from './agent-harness-targets.js';
+import { getAgentInstallBackupsDir } from './agent-manifest.js';
+import { CLIENT_NATIVE_PATHS } from './paths.js';
+/** Relative-to-`os.homedir()` suffix for every path the installer can ever write. */
+function computeAllowedPathSuffixes() {
+    const suffixes = new Set();
+    const home = homedir();
+    const addSuffix = (absPath) => {
+        const rel = relative(home, absPath);
+        // Skip anything that isn't actually under the real home dir (defensive —
+        // every constant table below is homedir()-rooted by construction, so
+        // this should never trigger; guards against a future table that isn't).
+        if (rel.startsWith('..') || rel === '')
+            return;
+        suffixes.add(rel);
+    };
+    for (const nativePath of Object.values(CLIENT_NATIVE_PATHS)) {
+        addSuffix(join(nativePath, AGENT_PACK_SKILL_NAME, 'SKILL.md'));
+    }
+    for (const target of Object.values(AGENT_SHIM_TARGETS)) {
+        if (target)
+            addSuffix(target.path);
+    }
+    for (const target of Object.values(AGENT_HOOK_TARGETS)) {
+        addSuffix(join(target.scriptDir, 'session-start.sh'));
+        addSuffix(join(target.scriptDir, 'session-end.sh'));
+        addSuffix(target.configPath);
+    }
+    for (const target of Object.values(AGENT_MCP_TARGETS)) {
+        addSuffix(target.path);
+    }
+    return suffixes;
+}
+let cachedSuffixes = null;
+/** Lazily computed + cached — the target tables are static, module-load-time constants. */
+function allowedPathSuffixes() {
+    if (!cachedSuffixes)
+        cachedSuffixes = computeAllowedPathSuffixes();
+    return cachedSuffixes;
+}
+/**
+ * True when `path` structurally matches one of the installer's known
+ * relative target locations (see module header). Normalizes via
+ * `path.resolve` first so a `..`-laden path can't dodge the suffix check by
+ * embedding traversal segments before the matched tail.
+ */
+export function isAllowedManifestEntryPath(path) {
+    const normalized = resolve(path);
+    for (const suffix of allowedPathSuffixes()) {
+        if (normalized.endsWith(sep + suffix) || normalized === suffix)
+            return true;
+    }
+    return false;
+}
+/**
+ * True when `backupPath` resolves under this run's manifest backups
+ * directory ({@link getAgentInstallBackupsDir}). A `null` backupPath is not
+ * validated here — callers only invoke this when `backupPath` is non-null.
+ */
+export function isAllowedManifestBackupPath(backupPath) {
+    const backupsDir = resolve(getAgentInstallBackupsDir());
+    const normalized = resolve(backupPath);
+    return normalized === backupsDir || normalized.startsWith(backupsDir + sep);
+}
+//# sourceMappingURL=agent-manifest-path-guard.js.map

package/dist/src/install/agent-manifest-path-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest-path-guard.js","sourceRoot":"","sources":["../../../src/install/agent-manifest-path-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAExD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAEhD,qFAAqF;AACrF,SAAS,0BAA0B;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IAEtB,MAAM,SAAS,GAAG,CAAC,OAAe,EAAQ,EAAE;QAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACnC,yEAAyE;QACzE,qEAAqE;QACrE,wEAAwE;QACxE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE;YAAE,OAAM;QAC9C,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACnB,CAAC,CAAA;IAED,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5D,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC,CAAA;IAChE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvD,IAAI,MAAM;YAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAA;QACrD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAA;QACnD,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC9B,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,IAAI,cAAc,GAA+B,IAAI,CAAA;AAErD,2FAA2F;AAC3F,SAAS,mBAAmB;IAC1B,IAAI,CAAC,cAAc;QAAE,cAAc,GAAG,0BAA0B,EAAE,CAAA;IAClE,OAAO,cAAc,CAAA;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,EAAE,CAAC;QAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;IAC7E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAA;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACtC,OAAO,UAAU,KAAK,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAA;AAC7E,CAAC"}

package/dist/src/install/agent-manifest-path-guard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-manifest-path-guard.test.d.ts.map

package/dist/src/install/agent-manifest-path-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest-path-guard.test.d.ts","sourceRoot":"","sources":["../../../src/install/agent-manifest-path-guard.test.ts"],"names":[],"mappings":""}

package/dist/src/install/agent-manifest-path-guard.test.js

@@ -0,0 +1,72 @@
+/**
+ * @fileoverview Unit tests for the manifest-path validation guard
+ *               (SMI-5456 governance follow-up, code review 2026-07-01).
+ * @module @skillsmith/core/install/agent-manifest-path-guard.test
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { describe, expect, it } from 'vitest';
+import { AGENT_INSTALL_DIR_ENV_VAR, getAgentInstallBackupsDir } from './agent-manifest.js';
+import { isAllowedManifestBackupPath, isAllowedManifestEntryPath, } from './agent-manifest-path-guard.js';
+describe('isAllowedManifestEntryPath', () => {
+    it('allows a real claude-code skill pack path', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.claude', 'skills', 'skillsmith-agent', 'SKILL.md'))).toBe(true);
+    });
+    it('allows a real claude-code settings.json (MCP config target)', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.claude', 'settings.json'))).toBe(true);
+    });
+    it('allows a real hermes YAML config path', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.hermes', 'config.yaml'))).toBe(true);
+    });
+    it('allows a real codex hook script path', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.codex', 'hooks', 'session-start.sh'))).toBe(true);
+    });
+    it('rejects an arbitrary sensitive path never written by the installer', () => {
+        expect(isAllowedManifestEntryPath('/etc/passwd')).toBe(false);
+        expect(isAllowedManifestEntryPath(join(homedir(), '.ssh', 'id_rsa'))).toBe(false);
+    });
+    it('rejects a path that merely CONTAINS a known suffix as a substring, not a true path segment', () => {
+        // "evilclaude/settings.json" is not the same path component as
+        // ".claude/settings.json" — must not match on naive substring search.
+        expect(isAllowedManifestEntryPath(join(homedir(), 'evil.claude', 'settings.json'))).toBe(false);
+    });
+    it('rejects a hand-edited traversal string that resolves outside every known harness dir', () => {
+        // A tampered manifest entry could embed literal ".." segments (not
+        // produced by `path.join`, which would normalize them away before this
+        // function ever sees them) — `resolve()` inside the guard must still
+        // collapse them and reject the resulting real path.
+        expect(isAllowedManifestEntryPath(`${homedir()}/../../../../etc/passwd`)).toBe(false);
+    });
+    it('rejects a bare directory that only partially matches (no filename)', () => {
+        expect(isAllowedManifestEntryPath(join(homedir(), '.claude', 'skills'))).toBe(false);
+    });
+});
+describe('isAllowedManifestBackupPath', () => {
+    it('allows a path under the current backups directory', () => {
+        const backupsDir = getAgentInstallBackupsDir();
+        expect(isAllowedManifestBackupPath(join(backupsDir, '2026-01-01-settings.json.bak'))).toBe(true);
+    });
+    it('rejects a path outside the backups directory', () => {
+        expect(isAllowedManifestBackupPath(join(homedir(), '.ssh', 'id_rsa'))).toBe(false);
+    });
+    it('rejects a path that only shares a string prefix with the backups dir, not a real path boundary', () => {
+        const backupsDir = getAgentInstallBackupsDir();
+        expect(isAllowedManifestBackupPath(`${backupsDir}-evil-sibling/file.bak`)).toBe(false);
+    });
+    it('respects the SKILLSMITH_AGENT_INSTALL_DIR test-isolation override', () => {
+        const prev = process.env[AGENT_INSTALL_DIR_ENV_VAR];
+        process.env[AGENT_INSTALL_DIR_ENV_VAR] = join(homedir(), '.skillsmith-test-override');
+        try {
+            const backupsDir = getAgentInstallBackupsDir();
+            expect(backupsDir).toContain('.skillsmith-test-override');
+            expect(isAllowedManifestBackupPath(join(backupsDir, 'x.bak'))).toBe(true);
+        }
+        finally {
+            if (prev !== undefined)
+                process.env[AGENT_INSTALL_DIR_ENV_VAR] = prev;
+            else
+                delete process.env[AGENT_INSTALL_DIR_ENV_VAR];
+        }
+    });
+});
+//# sourceMappingURL=agent-manifest-path-guard.test.js.map

package/dist/src/install/agent-manifest-path-guard.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest-path-guard.test.js","sourceRoot":"","sources":["../../../src/install/agent-manifest-path-guard.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC1F,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,gCAAgC,CAAA;AAEvC,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CACJ,0BAA0B,CACxB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,CAAC,CACrE,CACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAC7F,IAAI,CACL,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,0BAA0B,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7D,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,+DAA+D;QAC/D,sEAAsE;QACtE,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,mEAAmE;QACnE,uEAAuE;QACvE,qEAAqE;QACrE,oDAAoD;QACpD,MAAM,CAAC,0BAA0B,CAAC,GAAG,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAA;QAC9C,MAAM,CAAC,2BAA2B,CAAC,IAAI,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAA;QAC9C,MAAM,CAAC,2BAA2B,CAAC,GAAG,UAAU,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;QACnD,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,2BAA2B,CAAC,CAAA;QACrF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAA;YAC9C,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAA;YACzD,MAAM,CAAC,2BAA2B,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAA;;gBAChE,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/install/agent-manifest.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Install manifest for `sklx agent install` / `uninstall` (SMI-5456 Wave 1
+ * Step 5).
+ *
+ * `sklx agent uninstall` must reverse EXACTLY what install wrote — per-
+ * changeset file identity, not a re-derivation from the current pack
+ * generator (which could have changed between install and uninstall, e.g.
+ * across a version bump). The manifest is the durable record of every path
+ * the installer created or modified, plus a backup reference for anything it
+ * modified (so a foreign file's pre-existing content is restorable) or `null`
+ * for anything it created outright (so uninstall deletes rather than
+ * restores).
+ *
+ * Location: `~/.skillsmith/agent-install/manifest.json` — a sibling
+ * directory to `~/.skillsmith/journal` (Step 3) and `~/.skillsmith/agent-markers`
+ * (Step 1), following the same `getConfigDir()`-rooted, env-override-for-
+ * tests convention as both.
+ *
+ * @module @skillsmith/core/install/agent-manifest
+ */
+/** Env var overriding the manifest directory (test isolation — mirrors SKILLSMITH_JOURNAL_DIR). */
+export declare const AGENT_INSTALL_DIR_ENV_VAR = "SKILLSMITH_AGENT_INSTALL_DIR";
+export declare const AGENT_MANIFEST_SCHEMA_VERSION = 1;
+export type AgentManifestEntryKind = 'skill' | 'shim' | 'hook-script' | 'mcp-config' | 'hook-config';
+/**
+ * One path the installer touched. `backupPath` is set only when a
+ * PRE-EXISTING file was modified (config-file merges); it is `null` for
+ * anything the installer created fresh (skill pack copies, shim files, hook
+ * scripts) since there is nothing meaningful to restore — uninstall deletes.
+ */
+export interface AgentManifestEntry {
+    path: string;
+    kind: AgentManifestEntryKind;
+    /** Harness this entry belongs to, or null for the harness-neutral SKILL.md pack. */
+    harness: string | null;
+    backupPath: string | null;
+    /** True when the installer set the executable bit (hook scripts). */
+    executable: boolean;
+}
+export interface AgentInstallManifest {
+    schemaVersion: number;
+    installedAt: string;
+    /** `AGENT_PACK_SCHEMA_VERSION` at install time — informational, not enforced. */
+    packSchemaVersion: number;
+    entries: AgentManifestEntry[];
+}
+export declare function getAgentManifestPath(): string;
+export declare function getAgentInstallBackupsDir(): string;
+/** Load the manifest, or an empty (never-installed) manifest if none exists or it is corrupt. */
+export declare function loadAgentManifest(): AgentInstallManifest;
+/**
+ * Persist a manifest, replacing any prior one. Re-running install writes a
+ * fresh manifest reflecting the CURRENT full set of entries (deduped by
+ * `path` — later entries in `entries` win) so a double-install never
+ * accumulates duplicate entries (P-5 idempotency test).
+ */
+export declare function saveAgentManifest(manifest: AgentInstallManifest): void;
+//# sourceMappingURL=agent-manifest.d.ts.map

package/dist/src/install/agent-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest.d.ts","sourceRoot":"","sources":["../../../src/install/agent-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,mGAAmG;AACnG,eAAO,MAAM,yBAAyB,iCAAiC,CAAA;AAEvE,eAAO,MAAM,6BAA6B,IAAI,CAAA;AAE9C,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,YAAY,GAAG,aAAa,CAAA;AAEpG;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,sBAAsB,CAAA;IAC5B,oFAAoF;IACpF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,qEAAqE;IACrE,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,iBAAiB,EAAE,MAAM,CAAA;IACzB,OAAO,EAAE,kBAAkB,EAAE,CAAA;CAC9B;AAOD,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,IAAI,oBAAoB,CAexD;AAWD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAMtE"}