@skillsmith/core 0.9.0 → 0.11.0

package/dist/src/install/agent-manifest.js

@@ -0,0 +1,103 @@
+/**
+ * Install manifest for `sklx agent install` / `uninstall` (SMI-5456 Wave 1
+ * Step 5).
+ *
+ * `sklx agent uninstall` must reverse EXACTLY what install wrote — per-
+ * changeset file identity, not a re-derivation from the current pack
+ * generator (which could have changed between install and uninstall, e.g.
+ * across a version bump). The manifest is the durable record of every path
+ * the installer created or modified, plus a backup reference for anything it
+ * modified (so a foreign file's pre-existing content is restorable) or `null`
+ * for anything it created outright (so uninstall deletes rather than
+ * restores).
+ *
+ * Location: `~/.skillsmith/agent-install/manifest.json` — a sibling
+ * directory to `~/.skillsmith/journal` (Step 3) and `~/.skillsmith/agent-markers`
+ * (Step 1), following the same `getConfigDir()`-rooted, env-override-for-
+ * tests convention as both.
+ *
+ * @module @skillsmith/core/install/agent-manifest
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getConfigDir } from '../config/index.js';
+/** Env var overriding the manifest directory (test isolation — mirrors SKILLSMITH_JOURNAL_DIR). */
+export const AGENT_INSTALL_DIR_ENV_VAR = 'SKILLSMITH_AGENT_INSTALL_DIR';
+export const AGENT_MANIFEST_SCHEMA_VERSION = 1;
+function getAgentInstallDir() {
+    const override = process.env[AGENT_INSTALL_DIR_ENV_VAR];
+    return override && override.length > 0 ? override : join(getConfigDir(), 'agent-install');
+}
+export function getAgentManifestPath() {
+    return join(getAgentInstallDir(), 'manifest.json');
+}
+export function getAgentInstallBackupsDir() {
+    return join(getAgentInstallDir(), 'backups');
+}
+/** Load the manifest, or an empty (never-installed) manifest if none exists or it is corrupt. */
+export function loadAgentManifest() {
+    const path = getAgentManifestPath();
+    if (!existsSync(path))
+        return emptyManifest();
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+        if (!parsed || !Array.isArray(parsed.entries))
+            return emptyManifest();
+        return {
+            schemaVersion: parsed.schemaVersion ?? AGENT_MANIFEST_SCHEMA_VERSION,
+            installedAt: parsed.installedAt ?? new Date(0).toISOString(),
+            packSchemaVersion: parsed.packSchemaVersion ?? 0,
+            entries: parsed.entries,
+        };
+    }
+    catch {
+        return emptyManifest();
+    }
+}
+function emptyManifest() {
+    return {
+        schemaVersion: AGENT_MANIFEST_SCHEMA_VERSION,
+        installedAt: new Date(0).toISOString(),
+        packSchemaVersion: 0,
+        entries: [],
+    };
+}
+/**
+ * Persist a manifest, replacing any prior one. Re-running install writes a
+ * fresh manifest reflecting the CURRENT full set of entries (deduped by
+ * `path` — later entries in `entries` win) so a double-install never
+ * accumulates duplicate entries (P-5 idempotency test).
+ */
+export function saveAgentManifest(manifest) {
+    const dir = getAgentInstallDir();
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const deduped = dedupeEntriesByPath(manifest.entries);
+    const toWrite = { ...manifest, entries: deduped };
+    writeFileSync(getAgentManifestPath(), JSON.stringify(toWrite, null, 2) + '\n', { mode: 0o600 });
+}
+/**
+ * Dedupe by `path`, keeping the LAST entry's `kind`/`harness`/`executable`
+ * (the most recent write's classification) but preserving a non-null
+ * `backupPath` from ANY entry for that path.
+ *
+ * A single install run can merge into the same shared config file more than
+ * once (claude-code's SessionStart/SessionEnd hooks AND its MCP
+ * registration all touch `~/.claude/settings.json`) — only the FIRST merge
+ * into that file takes a real backup of the genuine pre-install content
+ * (`agent-config-merge.types.ts`'s `alreadyBackedUpPaths`); every
+ * subsequent merge into the same path this run correctly reports
+ * `backupPath: null` (nothing new to back up). A naive "last entry wins"
+ * dedupe would silently drop that first, load-bearing backup reference —
+ * `uninstallAgentPack` would then treat a modified pre-existing file as
+ * "created fresh" and delete it instead of restoring it.
+ */
+function dedupeEntriesByPath(entries) {
+    const byPath = new Map();
+    for (const entry of entries) {
+        const prior = byPath.get(entry.path);
+        const backupPath = entry.backupPath ?? prior?.backupPath ?? null;
+        byPath.set(entry.path, { ...entry, backupPath });
+    }
+    return [...byPath.values()];
+}
+//# sourceMappingURL=agent-manifest.js.map

package/dist/src/install/agent-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest.js","sourceRoot":"","sources":["../../../src/install/agent-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD,mGAAmG;AACnG,MAAM,CAAC,MAAM,yBAAyB,GAAG,8BAA8B,CAAA;AAEvE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAA;AA4B9C,SAAS,kBAAkB;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;IACvD,OAAO,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,eAAe,CAAC,CAAA;AAC3F,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,eAAe,CAAC,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,SAAS,CAAC,CAAA;AAC9C,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAA;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,EAAE,CAAA;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAkC,CAAA;QACvF,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,aAAa,EAAE,CAAA;QACrE,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,6BAA6B;YACpE,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAC5D,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,CAAC;YAChD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,EAAE,CAAA;IACxB,CAAC;AACH,CAAC;AAED,SAAS,aAAa;IACpB,OAAO;QACL,aAAa,EAAE,6BAA6B;QAC5C,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACtC,iBAAiB,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE;KACZ,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA8B;IAC9D,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAA;IAChC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,OAAO,GAAyB,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IACvE,aAAa,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AACjG,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,mBAAmB,CAAC,OAAsC;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAA;IACpD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,EAAE,UAAU,IAAI,IAAI,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;AAC7B,CAAC"}

package/dist/src/install/agent-pack-installer.d.ts

@@ -0,0 +1,39 @@
+/**
+ * `sklx agent install` core orchestration (SMI-5456 Wave 1 Step 5).
+ *
+ * Generates the pack via `generateAgentPack({ toolProfile: AGENT_TOOL_PROFILE_NAMES })`
+ * (QD-2: byte-identical to the committed `packages/mcp-server/src/assets/agent-pack/`
+ * tree by determinism, never read from the mcp-server package) and writes:
+ *   - SKILL.md to the mandatory dual path (claude-code + agents) plus any
+ *     detected Tier-2/3 harness with its own native skill directory
+ *     (opencode, hermes, windsurf).
+ *   - Named-agent shims for every detected harness with a shim target
+ *     (claude-code always; copilot, opencode when detected; codex via its
+ *     own TOML-merge "shim").
+ *   - SessionStart/SessionEnd hooks (+x) for claude-code (always), cursor
+ *     and codex when detected — hook CONFIG wiring ships for claude-code/
+ *     cursor (JSON arrays) and codex (SessionStart ONLY, as a
+ *     marker-delimited `[[hooks.SessionStart]]` TOML block; Codex has no
+ *     SessionEnd event and its Stop event is per-turn — see
+ *     `installCodexHooks` in `agent-pack-installer.harness.ts`).
+ *   - The `skillsmith` MCP server registration (`SKILLSMITH_TOOL_PROFILE=agent`)
+ *     for every detected MCP-capable harness (all 7), backup-first,
+ *     idempotent, preserve-and-prompt on a foreign entry.
+ *
+ * Every write funnels through `writeOwnedArtifactFile` (owned files) or the
+ * `agent-config-merge.*` helpers (shared config files), both of which record
+ * a manifest entry — `uninstallAgentPack` (SMI-5456) reverses exactly what
+ * this function wrote by replaying that manifest, never by re-deriving
+ * "what the current generator would produce".
+ *
+ * @module @skillsmith/core/install/agent-pack-installer
+ */
+import { loadAgentManifest } from './agent-manifest.js';
+import { type AgentInstallOptions, type AgentInstallResult } from './agent-pack-installer.types.js';
+/**
+ * Detect + install the portable Skillsmith Agent pack across every
+ * supported harness. See module header for the full per-harness matrix.
+ */
+export declare function installAgentPack(opts?: AgentInstallOptions): AgentInstallResult;
+export { loadAgentManifest };
+//# sourceMappingURL=agent-pack-installer.d.ts.map

package/dist/src/install/agent-pack-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-installer.d.ts","sourceRoot":"","sources":["../../../src/install/agent-pack-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAWH,OAAO,EAGL,iBAAiB,EAGlB,MAAM,qBAAqB,CAAA;AAS5B,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EAExB,MAAM,iCAAiC,CAAA;AA4FxC;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,mBAAwB,GAAG,kBAAkB,CA6HnF;AAGD,OAAO,EAAE,iBAAiB,EAAE,CAAA"}

package/dist/src/install/agent-pack-installer.entry.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Entry-value builders for `sklx agent install` (SMI-5456 Wave 1 Step 5).
+ *
+ * Pure functions producing the exact MCP-server registration value + the
+ * Codex TOML blocks the installer merges in. Separated from the
+ * orchestrator so the "what do we install" shape is independently testable
+ * from "where do we write it".
+ *
+ * @module @skillsmith/core/install/agent-pack-installer.entry
+ */
+/**
+ * The `skillsmith` MCP server registration value for `mcpServers`-convention
+ * harnesses (claude-code, cursor, copilot, windsurf; hermes uses the same
+ * field names under YAML). OpenCode does NOT use this shape — see
+ * {@link buildOpenCodeMcpEntryValue}.
+ */
+export declare function buildAgentMcpEntryValue(): Record<string, unknown>;
+/**
+ * OpenCode's `mcp`-key entry value (Step-6 verified against
+ * opencode.ai/docs/mcp-servers/): entries are typed `local|remote`,
+ * `command` is an ARRAY (command + args combined), and the env-var field is
+ * named `environment`, not `env`. Writing the generic mcpServers shape here
+ * would produce an entry OpenCode's config schema rejects.
+ */
+export declare function buildOpenCodeMcpEntryValue(): Record<string, unknown>;
+/** Codex `[mcp_servers.skillsmith]` TOML block (text between our markers). */
+export declare function buildCodexMcpTomlBlock(): string;
+/** Regex matching a bare (non-marker-delimited) `[mcp_servers.skillsmith]` table header. */
+export declare const CODEX_MCP_FOREIGN_HEADER: RegExp;
+/** Regex matching a bare (non-marker-delimited) `[agents.skillsmith-agent]` table header. */
+export declare const CODEX_AGENTS_FOREIGN_HEADER: RegExp;
+/**
+ * Codex `[[hooks.SessionStart]]` TOML block (text between our markers) —
+ * shape verified by the Step-6 eval worker against
+ * developers.openai.com/codex/hooks: inline array-of-tables
+ * `[[hooks.SessionStart]]` with a nested `[[hooks.SessionStart.hooks]]`
+ * array carrying `{type, command, timeout, statusMessage}`. Only `type` +
+ * `command` are emitted (timeout/statusMessage stay at Codex defaults).
+ * `JSON.stringify` produces a valid TOML basic string for the absolute
+ * script path — same quoting convention as `renderCodexToml` (shims.ts).
+ */
+export declare function buildCodexSessionStartHookBlock(sessionStartScriptPath: string): string;
+/**
+ * Regex matching a SINGLE-bracket `[hooks.SessionStart]` table header — a
+ * user config that defined `hooks.SessionStart` as a plain TABLE. Appending
+ * our `[[hooks.SessionStart]]` array-of-tables entry to such a file would
+ * produce INVALID TOML (a key cannot be both a table and an array of
+ * tables), so that is the genuine-conflict case. A foreign DOUBLE-bracket
+ * `[[hooks.SessionStart]]` (the user's own hook) is deliberately NOT
+ * matched: TOML permits re-opening an array of tables anywhere in the
+ * document, so appending our own `[[hooks.SessionStart]]` entry alongside a
+ * user's is valid and non-destructive — both hooks run.
+ */
+export declare const CODEX_HOOKS_TABLE_CONFLICT_HEADER: RegExp;
+//# sourceMappingURL=agent-pack-installer.entry.d.ts.map

package/dist/src/install/agent-pack-installer.entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-installer.entry.d.ts","sourceRoot":"","sources":["../../../src/install/agent-pack-installer.entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQjE;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASpE;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,IAAI,MAAM,CAS/C;AAED,4FAA4F;AAC5F,eAAO,MAAM,wBAAwB,QAAoD,CAAA;AAEzF,6FAA6F;AAC7F,eAAO,MAAM,2BAA2B,QAAqD,CAAA;AAE7F;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,sBAAsB,EAAE,MAAM,GAAG,MAAM,CAQtF;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iCAAiC,QAA8B,CAAA"}

package/dist/src/install/agent-pack-installer.entry.js

@@ -0,0 +1,90 @@
+/**
+ * Entry-value builders for `sklx agent install` (SMI-5456 Wave 1 Step 5).
+ *
+ * Pure functions producing the exact MCP-server registration value + the
+ * Codex TOML blocks the installer merges in. Separated from the
+ * orchestrator so the "what do we install" shape is independently testable
+ * from "where do we write it".
+ *
+ * @module @skillsmith/core/install/agent-pack-installer.entry
+ */
+import { AGENT_TOOL_PROFILE_ENV_VAR, AGENT_TOOL_PROFILE_VALUE, } from '../services/agent-tool-profile.js';
+/**
+ * The `skillsmith` MCP server registration value for `mcpServers`-convention
+ * harnesses (claude-code, cursor, copilot, windsurf; hermes uses the same
+ * field names under YAML). OpenCode does NOT use this shape — see
+ * {@link buildOpenCodeMcpEntryValue}.
+ */
+export function buildAgentMcpEntryValue() {
+    return {
+        command: 'npx',
+        args: ['-y', '@skillsmith/mcp-server'],
+        env: {
+            [AGENT_TOOL_PROFILE_ENV_VAR]: AGENT_TOOL_PROFILE_VALUE,
+        },
+    };
+}
+/**
+ * OpenCode's `mcp`-key entry value (Step-6 verified against
+ * opencode.ai/docs/mcp-servers/): entries are typed `local|remote`,
+ * `command` is an ARRAY (command + args combined), and the env-var field is
+ * named `environment`, not `env`. Writing the generic mcpServers shape here
+ * would produce an entry OpenCode's config schema rejects.
+ */
+export function buildOpenCodeMcpEntryValue() {
+    return {
+        type: 'local',
+        command: ['npx', '-y', '@skillsmith/mcp-server'],
+        enabled: true,
+        environment: {
+            [AGENT_TOOL_PROFILE_ENV_VAR]: AGENT_TOOL_PROFILE_VALUE,
+        },
+    };
+}
+/** Codex `[mcp_servers.skillsmith]` TOML block (text between our markers). */
+export function buildCodexMcpTomlBlock() {
+    return [
+        '[mcp_servers.skillsmith]',
+        'command = "npx"',
+        'args = ["-y", "@skillsmith/mcp-server"]',
+        '',
+        '[mcp_servers.skillsmith.env]',
+        `${AGENT_TOOL_PROFILE_ENV_VAR} = "${AGENT_TOOL_PROFILE_VALUE}"`,
+    ].join('\n');
+}
+/** Regex matching a bare (non-marker-delimited) `[mcp_servers.skillsmith]` table header. */
+export const CODEX_MCP_FOREIGN_HEADER = /^\[mcp_servers\.skillsmith(\.[a-zA-Z0-9_]+)?\]/m;
+/** Regex matching a bare (non-marker-delimited) `[agents.skillsmith-agent]` table header. */
+export const CODEX_AGENTS_FOREIGN_HEADER = /^\[agents\.skillsmith-agent(\.[a-zA-Z0-9_]+)?\]/m;
+/**
+ * Codex `[[hooks.SessionStart]]` TOML block (text between our markers) —
+ * shape verified by the Step-6 eval worker against
+ * developers.openai.com/codex/hooks: inline array-of-tables
+ * `[[hooks.SessionStart]]` with a nested `[[hooks.SessionStart.hooks]]`
+ * array carrying `{type, command, timeout, statusMessage}`. Only `type` +
+ * `command` are emitted (timeout/statusMessage stay at Codex defaults).
+ * `JSON.stringify` produces a valid TOML basic string for the absolute
+ * script path — same quoting convention as `renderCodexToml` (shims.ts).
+ */
+export function buildCodexSessionStartHookBlock(sessionStartScriptPath) {
+    return [
+        '[[hooks.SessionStart]]',
+        '',
+        '[[hooks.SessionStart.hooks]]',
+        'type = "command"',
+        `command = ${JSON.stringify(sessionStartScriptPath)}`,
+    ].join('\n');
+}
+/**
+ * Regex matching a SINGLE-bracket `[hooks.SessionStart]` table header — a
+ * user config that defined `hooks.SessionStart` as a plain TABLE. Appending
+ * our `[[hooks.SessionStart]]` array-of-tables entry to such a file would
+ * produce INVALID TOML (a key cannot be both a table and an array of
+ * tables), so that is the genuine-conflict case. A foreign DOUBLE-bracket
+ * `[[hooks.SessionStart]]` (the user's own hook) is deliberately NOT
+ * matched: TOML permits re-opening an array of tables anywhere in the
+ * document, so appending our own `[[hooks.SessionStart]]` entry alongside a
+ * user's is valid and non-destructive — both hooks run.
+ */
+export const CODEX_HOOKS_TABLE_CONFLICT_HEADER = /^\[hooks\.SessionStart\]/m;
+//# sourceMappingURL=agent-pack-installer.entry.js.map

package/dist/src/install/agent-pack-installer.entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-installer.entry.js","sourceRoot":"","sources":["../../../src/install/agent-pack-installer.entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,mCAAmC,CAAA;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC;QACtC,GAAG,EAAE;YACH,CAAC,0BAA0B,CAAC,EAAE,wBAAwB;SACvD;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,wBAAwB,CAAC;QAChD,OAAO,EAAE,IAAI;QACb,WAAW,EAAE;YACX,CAAC,0BAA0B,CAAC,EAAE,wBAAwB;SACvD;KACF,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,0BAA0B;QAC1B,iBAAiB;QACjB,yCAAyC;QACzC,EAAE;QACF,8BAA8B;QAC9B,GAAG,0BAA0B,OAAO,wBAAwB,GAAG;KAChE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,wBAAwB,GAAG,iDAAiD,CAAA;AAEzF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,2BAA2B,GAAG,kDAAkD,CAAA;AAE7F;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAAC,sBAA8B;IAC5E,OAAO;QACL,wBAAwB;QACxB,EAAE;QACF,8BAA8B;QAC9B,kBAAkB;QAClB,aAAa,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAA"}

package/dist/src/install/agent-pack-installer.fs-helpers.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Filesystem primitives shared by `installAgentPack` (SMI-5456 Wave 1 Step 5).
+ *
+ * `writeOwnedArtifactFile` is the idempotency backbone for the P-5
+ * "double-install produces identical filesystem state, no duplicate
+ * backups" test: byte-identical content at an already-correct path is a
+ * true no-op (no write, no backup, no manifest churn beyond re-recording the
+ * same entry).
+ *
+ * @module @skillsmith/core/install/agent-pack-installer.fs-helpers
+ */
+export interface WriteOwnedFileOptions {
+    path: string;
+    content: string;
+    executable: boolean;
+    backupDir: string;
+}
+export interface WriteOwnedFileResult {
+    /** True when a write actually happened (content or executable-bit changed, or the file was new). */
+    changed: boolean;
+    /** Backup of PRE-EXISTING different content, or null (nothing existed, or content already matched). */
+    backupPath: string | null;
+}
+/**
+ * Write a file the installer fully owns by path convention (SKILL.md copies,
+ * shim files, hook scripts). Idempotent: re-writing identical content with
+ * the correct executable bit is a no-op. A pre-existing file with DIFFERENT
+ * content is backed up before being overwritten (defensive — these paths are
+ * namespaced (`skillsmith-agent`) so a genuine foreign collision is unlikely,
+ * but never silently destroying user data is the house floor).
+ */
+export declare function writeOwnedArtifactFile(opts: WriteOwnedFileOptions): WriteOwnedFileResult;
+//# sourceMappingURL=agent-pack-installer.fs-helpers.d.ts.map

package/dist/src/install/agent-pack-installer.fs-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-installer.fs-helpers.d.ts","sourceRoot":"","sources":["../../../src/install/agent-pack-installer.fs-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,oGAAoG;IACpG,OAAO,EAAE,OAAO,CAAA;IAChB,uGAAuG;IACvG,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,CAoBxF"}

package/dist/src/install/agent-pack-installer.fs-helpers.js

@@ -0,0 +1,59 @@
+/**
+ * Filesystem primitives shared by `installAgentPack` (SMI-5456 Wave 1 Step 5).
+ *
+ * `writeOwnedArtifactFile` is the idempotency backbone for the P-5
+ * "double-install produces identical filesystem state, no duplicate
+ * backups" test: byte-identical content at an already-correct path is a
+ * true no-op (no write, no backup, no manifest churn beyond re-recording the
+ * same entry).
+ *
+ * @module @skillsmith/core/install/agent-pack-installer.fs-helpers
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+/**
+ * Write a file the installer fully owns by path convention (SKILL.md copies,
+ * shim files, hook scripts). Idempotent: re-writing identical content with
+ * the correct executable bit is a no-op. A pre-existing file with DIFFERENT
+ * content is backed up before being overwritten (defensive — these paths are
+ * namespaced (`skillsmith-agent`) so a genuine foreign collision is unlikely,
+ * but never silently destroying user data is the house floor).
+ */
+export function writeOwnedArtifactFile(opts) {
+    const { path, content, executable, backupDir } = opts;
+    if (existsSync(path)) {
+        const existing = readFileSync(path, 'utf-8');
+        const currentlyExecutable = isExecutable(path);
+        if (existing === content && currentlyExecutable === executable) {
+            return { changed: false, backupPath: null };
+        }
+        const backupPath = writeBackup(path, backupDir);
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, content, 'utf-8');
+        if (executable)
+            chmodSync(path, 0o755);
+        return { changed: true, backupPath };
+    }
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, content, 'utf-8');
+    if (executable)
+        chmodSync(path, 0o755);
+    return { changed: true, backupPath: null };
+}
+function isExecutable(path) {
+    try {
+        return (statSync(path).mode & 0o111) !== 0;
+    }
+    catch {
+        return false;
+    }
+}
+function writeBackup(sourcePath, backupDir) {
+    mkdirSync(backupDir, { recursive: true, mode: 0o700 });
+    const stamp = new Date().toISOString().replace(/[:.]/g, '-');
+    const baseName = sourcePath.split('/').pop() ?? 'file';
+    const backupPath = join(backupDir, `${stamp}-${baseName}.bak`);
+    writeFileSync(backupPath, readFileSync(sourcePath, 'utf-8'), { mode: 0o600 });
+    return backupPath;
+}
+//# sourceMappingURL=agent-pack-installer.fs-helpers.js.map

package/dist/src/install/agent-pack-installer.fs-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-installer.fs-helpers.js","sourceRoot":"","sources":["../../../src/install/agent-pack-installer.fs-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAgBzC;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAA2B;IAChE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAErD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC5C,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,QAAQ,KAAK,OAAO,IAAI,mBAAmB,KAAK,UAAU,EAAE,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;QAC7C,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QAC/C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACrC,IAAI,UAAU;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IACtC,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACrC,IAAI,UAAU;QAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,SAAiB;IACxD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACtD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAA;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,IAAI,QAAQ,MAAM,CAAC,CAAA;IAC9D,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7E,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/dist/src/install/agent-pack-installer.harness.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Per-harness install step for `installAgentPack` (SMI-5456 Wave 1 Step 5).
+ *
+ * One function per concern (shim, hooks, MCP registration) so the
+ * orchestrator (`agent-pack-installer.ts`) stays a readable top-level loop.
+ * Every function is additive to `entries`/`report` in place — the caller
+ * owns aggregation and the manifest save.
+ *
+ * @module @skillsmith/core/install/agent-pack-installer.harness
+ */
+import type { AgentPackArtifact, HarnessId } from '../services/agent-pack/index.js';
+import { type McpHarnessId } from './agent-harness-targets.js';
+import type { AgentManifestEntry } from './agent-manifest.js';
+import type { HarnessInstallReport } from './agent-pack-installer.types.js';
+export interface HarnessInstallCtx {
+    homeDir: string | undefined;
+    force: boolean;
+    backupDir: string;
+    entries: AgentManifestEntry[];
+    /**
+     * Config-file paths already backed up during THIS install run. Shared
+     * across every merge call so a harness whose hooks + MCP registration
+     * share one file (claude-code: `settings.json`; codex: `config.toml`)
+     * only backs it up once, capturing genuine pre-install state rather than
+     * repeatedly "backing up" content this same run already wrote.
+     */
+    backedUpPaths: Set<string>;
+}
+/** Write the named-agent shim for `harness` when a target exists (claude-code/copilot/opencode). */
+export declare function installShim(harness: HarnessId, artifact: AgentPackArtifact | undefined, ctx: HarnessInstallCtx, report: HarnessInstallReport): void;
+/** Install + wire SessionStart/SessionEnd hook scripts for claude-code/cursor (JSON hook config). */
+export declare function installJsonHooks(harness: 'claude-code' | 'cursor', startArtifact: AgentPackArtifact | undefined, endArtifact: AgentPackArtifact | undefined, ctx: HarnessInstallCtx, report: HarnessInstallReport): void;
+/**
+ * Install hook scripts for Codex (+x) and wire the SessionStart hook into
+ * `~/.codex/config.toml` as a marker-delimited `[[hooks.SessionStart]]`
+ * array-of-tables block (shape Step-6-verified against
+ * developers.openai.com/codex/hooks).
+ *
+ * SessionStart ONLY — deliberate, do not "complete" this:
+ *   - Codex has NO SessionEnd event. There is nothing to wire the
+ *     session-end.sh cleanup script to.
+ *   - Codex's Stop event fires PER-TURN, not per-session. Wiring the marker
+ *     cleanup there would delete the agent-mediation marker file after the
+ *     FIRST turn, silently unmarking every subsequent tool call in the same
+ *     session and corrupting the mediation-share metric the whole Wave-1
+ *     bet is measured by.
+ *   - Cleanup therefore rides the server's 12h marker TTL
+ *     (`telemetry/agent-marker.ts` `AGENT_MARKER_TTL_MS`) — the same
+ *     crash-backstop path every harness already relies on.
+ *
+ * session-end.sh is still installed (inert on Codex — nothing invokes it):
+ * it keeps the on-disk script tree identical across hook-capable harnesses
+ * and stays manifest-tracked, so uninstall removes it like any other owned
+ * file. Zero uninstall complication.
+ */
+export declare function installCodexHooks(startArtifact: AgentPackArtifact | undefined, endArtifact: AgentPackArtifact | undefined, ctx: HarnessInstallCtx, report: HarnessInstallReport): void;
+/**
+ * Codex's named-agent "shim" is a `[agents.skillsmith-agent]` TOML entry
+ * merged into the same `~/.codex/config.toml` as its MCP registration —
+ * the artifact's content (`shims/codex/agents.toml`, rendered by the
+ * locked `renderCodexToml`) is already the exact block text to install.
+ */
+export declare function installCodexAgentsShim(artifact: AgentPackArtifact | undefined, ctx: HarnessInstallCtx, report: HarnessInstallReport): void;
+/** Merge the `skillsmith` MCP server registration for any of the 7 MCP-capable harnesses. */
+export declare function installMcpConfig(harness: McpHarnessId, ctx: HarnessInstallCtx, report: HarnessInstallReport): void;
+//# sourceMappingURL=agent-pack-installer.harness.d.ts.map

package/dist/src/install/agent-pack-installer.harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pack-installer.harness.d.ts","sourceRoot":"","sources":["../../../src/install/agent-pack-installer.harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AACnF,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,4BAA4B,CAAA;AAgBnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAqB3E,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,kBAAkB,EAAE,CAAA;IAC7B;;;;;;OAMG;IACH,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAC3B;AAED,oGAAoG;AACpG,wBAAgB,WAAW,CACzB,OAAO,EAAE,SAAS,EAClB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,oBAAoB,GAC3B,IAAI,CAoBN;AAED,qGAAqG;AACrG,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,aAAa,GAAG,QAAQ,EACjC,aAAa,EAAE,iBAAiB,GAAG,SAAS,EAC5C,WAAW,EAAE,iBAAiB,GAAG,SAAS,EAC1C,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,oBAAoB,GAC3B,IAAI,CAgEN;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,iBAAiB,GAAG,SAAS,EAC5C,WAAW,EAAE,iBAAiB,GAAG,SAAS,EAC1C,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,oBAAoB,GAC3B,IAAI,CAmEN;AAgBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,oBAAoB,GAC3B,IAAI,CA+BN;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,oBAAoB,GAC3B,IAAI,CAwDN"}