agentplane 0.1.9 → 0.2.0

package/dist/commands/recipes/impl/commands.d.ts

@@ -0,0 +1,8 @@
+export { cmdRecipeListParsed } from "./commands/list.js";
+export { cmdRecipeListRemoteParsed } from "./commands/list-remote.js";
+export { cmdRecipeInfoParsed } from "./commands/info.js";
+export { cmdRecipeExplainParsed } from "./commands/explain.js";
+export { cmdRecipeInstall } from "./commands/install.js";
+export { cmdRecipeRemoveParsed } from "./commands/remove.js";
+export { cmdRecipeCachePruneParsed } from "./commands/cache-prune.js";
+//# sourceMappingURL=commands.d.ts.map

package/dist/commands/recipes/impl/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/commands/recipes/impl/commands.js

@@ -0,0 +1,7 @@
+export { cmdRecipeListParsed } from "./commands/list.js";
+export { cmdRecipeListRemoteParsed } from "./commands/list-remote.js";
+export { cmdRecipeInfoParsed } from "./commands/info.js";
+export { cmdRecipeExplainParsed } from "./commands/explain.js";
+export { cmdRecipeInstall } from "./commands/install.js";
+export { cmdRecipeRemoveParsed } from "./commands/remove.js";
+export { cmdRecipeCachePruneParsed } from "./commands/cache-prune.js";

package/dist/commands/recipes/impl/constants.d.ts

@@ -0,0 +1,13 @@
+export declare const INSTALLED_RECIPES_NAME = "recipes.json";
+export declare const RECIPES_DIR_NAME = "recipes";
+export declare const RECIPES_SCENARIOS_DIR_NAME = "scenarios";
+export declare const RECIPES_SCENARIOS_INDEX_NAME = "scenarios.json";
+export declare const AGENTPLANE_HOME_ENV = "AGENTPLANE_HOME";
+export declare const GLOBAL_RECIPES_DIR_NAME = "recipes";
+export declare const PROJECT_RECIPES_CACHE_DIR_NAME = "recipes-cache";
+export declare const RECIPES_REMOTE_INDEX_NAME = "recipes-index.json";
+export declare const RECIPES_REMOTE_INDEX_SIG_NAME = "recipes-index.json.sig";
+export declare const DEFAULT_RECIPES_INDEX_URL = "https://raw.githubusercontent.com/basilisk-labs/agentplane-recipes/main/index.json";
+export declare const RECIPES_INDEX_PUBLIC_KEYS_ENV = "AGENTPLANE_RECIPES_INDEX_PUBLIC_KEYS";
+export declare const RECIPES_INDEX_PUBLIC_KEYS: Record<string, string>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/commands/recipes/impl/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AACrD,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAC1C,eAAO,MAAM,0BAA0B,cAAc,CAAC;AACtD,eAAO,MAAM,4BAA4B,mBAAmB,CAAC;AAE7D,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD,eAAO,MAAM,uBAAuB,YAAY,CAAC;AACjD,eAAO,MAAM,8BAA8B,kBAAkB,CAAC;AAE9D,eAAO,MAAM,yBAAyB,uBAAuB,CAAC;AAC9D,eAAO,MAAM,6BAA6B,2BAA2B,CAAC;AAEtE,eAAO,MAAM,yBAAyB,uFACgD,CAAC;AAEvF,eAAO,MAAM,6BAA6B,yCAAyC,CAAC;AAEpF,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAI5D,CAAC"}

package/dist/commands/recipes/impl/constants.js

@@ -0,0 +1,16 @@
+export const INSTALLED_RECIPES_NAME = "recipes.json";
+export const RECIPES_DIR_NAME = "recipes";
+export const RECIPES_SCENARIOS_DIR_NAME = "scenarios";
+export const RECIPES_SCENARIOS_INDEX_NAME = "scenarios.json";
+export const AGENTPLANE_HOME_ENV = "AGENTPLANE_HOME";
+export const GLOBAL_RECIPES_DIR_NAME = "recipes";
+export const PROJECT_RECIPES_CACHE_DIR_NAME = "recipes-cache";
+export const RECIPES_REMOTE_INDEX_NAME = "recipes-index.json";
+export const RECIPES_REMOTE_INDEX_SIG_NAME = "recipes-index.json.sig";
+export const DEFAULT_RECIPES_INDEX_URL = "https://raw.githubusercontent.com/basilisk-labs/agentplane-recipes/main/index.json";
+export const RECIPES_INDEX_PUBLIC_KEYS_ENV = "AGENTPLANE_RECIPES_INDEX_PUBLIC_KEYS";
+export const RECIPES_INDEX_PUBLIC_KEYS = {
+    "2026-02": `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAeRWdXKVZtz0v+bnQS3zb24jMfa0gflsRUHQkeJkji6E=
+-----END PUBLIC KEY-----`,
+};

package/dist/commands/recipes/impl/format.d.ts

@@ -0,0 +1,2 @@
+export declare function formatJsonBlock(value: unknown, indent: string): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/commands/recipes/impl/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/format.ts"],"names":[],"mappings":"AAAA,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAOtE"}

package/dist/commands/recipes/impl/format.js

@@ -0,0 +1,9 @@
+export function formatJsonBlock(value, indent) {
+    const payload = JSON.stringify(value, null, 2);
+    if (!payload)
+        return "";
+    return payload
+        .split("\n")
+        .map((line) => `${indent}${line}`)
+        .join("\n");
+}

package/dist/commands/recipes/impl/index.d.ts

@@ -0,0 +1,12 @@
+import type { RecipesIndex } from "./types.js";
+export declare function loadRecipesRemoteIndex(opts: {
+    cwd: string;
+    source?: string;
+    refresh: boolean;
+}): Promise<RecipesIndex>;
+export declare function willFetchRemoteRecipesIndex(opts: {
+    source: string;
+    refresh: boolean;
+    cachePathExists: boolean;
+}): boolean;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/recipes/impl/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/index.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,YAAY,EAAyB,MAAM,YAAY,CAAC;AAyHtE,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,YAAY,CAAC,CA0BxB;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAGV"}

package/dist/commands/recipes/impl/index.js

@@ -0,0 +1,150 @@
+import { createPublicKey, verify } from "node:crypto";
+import { mkdir, readFile } from "node:fs/promises";
+import path from "node:path";
+import { fetchJson, fetchText } from "../../../cli/http.js";
+import { fileExists } from "../../../cli/fs-utils.js";
+import { invalidFieldMessage } from "../../../cli/output.js";
+import { isRecord } from "../../../shared/guards.js";
+import { writeJsonStableIfChanged, writeTextIfChanged } from "../../../shared/write-if-changed.js";
+import { DEFAULT_RECIPES_INDEX_URL, RECIPES_INDEX_PUBLIC_KEYS, RECIPES_INDEX_PUBLIC_KEYS_ENV, } from "./constants.js";
+import { resolveRecipesIndexCachePath, resolveRecipesIndexCacheSigPath } from "./paths.js";
+function loadRecipesIndexPublicKeys() {
+    const raw = process.env[RECIPES_INDEX_PUBLIC_KEYS_ENV];
+    if (!raw)
+        return { ...RECIPES_INDEX_PUBLIC_KEYS };
+    try {
+        const parsed = JSON.parse(raw);
+        const merged = { ...RECIPES_INDEX_PUBLIC_KEYS };
+        for (const [key, value] of Object.entries(parsed)) {
+            if (typeof value === "string" && value.trim())
+                merged[key] = value.trim();
+        }
+        return merged;
+    }
+    catch {
+        return { ...RECIPES_INDEX_PUBLIC_KEYS };
+    }
+}
+function validateRecipesIndexSignature(raw) {
+    if (!isRecord(raw))
+        throw new Error(invalidFieldMessage("recipes index signature", "object"));
+    if (raw.schema_version !== 1) {
+        throw new Error(invalidFieldMessage("recipes index signature.schema_version", "1"));
+    }
+    const keyId = typeof raw.key_id === "string" ? raw.key_id.trim() : "";
+    const signature = typeof raw.signature === "string" ? raw.signature.trim() : "";
+    if (!keyId || !signature) {
+        throw new Error(invalidFieldMessage("recipes index signature", "key_id, signature"));
+    }
+    const algorithm = typeof raw.algorithm === "string" ? raw.algorithm.trim() : undefined;
+    return { schema_version: 1, key_id: keyId, signature, algorithm };
+}
+function verifyRecipesIndexSignature(indexText, signature) {
+    if (signature.algorithm && signature.algorithm !== "ed25519") {
+        throw new Error(invalidFieldMessage("recipes index signature.algorithm", "ed25519"));
+    }
+    const keys = loadRecipesIndexPublicKeys();
+    const publicKey = keys[signature.key_id];
+    if (!publicKey) {
+        throw new Error(invalidFieldMessage("recipes index signature.key_id", "known key id"));
+    }
+    const key = createPublicKey(publicKey);
+    const ok = verify(null, Buffer.from(indexText), key, Buffer.from(signature.signature, "base64"));
+    if (!ok) {
+        throw new Error("Invalid signature for recipes index");
+    }
+}
+function validateRecipesIndex(raw) {
+    if (!isRecord(raw))
+        throw new Error(invalidFieldMessage("recipes index", "object"));
+    if (raw.schema_version !== 1)
+        throw new Error(invalidFieldMessage("recipes index.schema_version", "1"));
+    if (!Array.isArray(raw.recipes))
+        throw new Error(invalidFieldMessage("recipes index.recipes", "array"));
+    const recipes = raw.recipes
+        .filter((entry) => isRecord(entry))
+        .map((entry) => {
+        const id = typeof entry.id === "string" ? entry.id : "";
+        const summary = typeof entry.summary === "string" ? entry.summary : "";
+        const description = typeof entry.description === "string" ? entry.description : undefined;
+        const versionsRaw = Array.isArray(entry.versions) ? entry.versions : [];
+        if (!id || !summary || versionsRaw.length === 0) {
+            throw new Error(invalidFieldMessage("recipes index.recipes[]", "id, summary, versions"));
+        }
+        const versions = versionsRaw
+            .filter((version) => isRecord(version))
+            .map((version) => {
+            const versionId = typeof version.version === "string" ? version.version : "";
+            const url = typeof version.url === "string" ? version.url : "";
+            const sha256 = typeof version.sha256 === "string" ? version.sha256 : "";
+            if (!versionId || !url || !sha256) {
+                throw new Error(invalidFieldMessage("recipes index.recipes[].versions[]", "version, url, sha256"));
+            }
+            return {
+                version: versionId,
+                url,
+                sha256,
+                min_agentplane_version: typeof version.min_agentplane_version === "string"
+                    ? version.min_agentplane_version
+                    : undefined,
+                tags: Array.isArray(version.tags)
+                    ? version.tags.filter((tag) => typeof tag === "string")
+                    : undefined,
+            };
+        });
+        return { id, summary, description, versions };
+    });
+    return { schema_version: 1, recipes };
+}
+function isHttpUrl(value) {
+    return value.startsWith("http://") || value.startsWith("https://");
+}
+async function readRecipesIndexText(source, cwd) {
+    if (isHttpUrl(source)) {
+        return await fetchText(source);
+    }
+    return await readFile(path.resolve(cwd, source), "utf8");
+}
+function signatureSourceForIndex(source) {
+    return `${source}.sig`;
+}
+async function readRecipesIndexSignature(source, cwd) {
+    const sigSource = signatureSourceForIndex(source);
+    if (isHttpUrl(sigSource)) {
+        const raw = await fetchJson(sigSource);
+        return validateRecipesIndexSignature(raw);
+    }
+    const rawText = await readFile(path.resolve(cwd, sigSource), "utf8");
+    return validateRecipesIndexSignature(JSON.parse(rawText));
+}
+export async function loadRecipesRemoteIndex(opts) {
+    const cachePath = resolveRecipesIndexCachePath();
+    const cacheSigPath = resolveRecipesIndexCacheSigPath();
+    const cacheDir = path.dirname(cachePath);
+    let rawIndex;
+    if (opts.refresh || !(await fileExists(cachePath))) {
+        const source = opts.source ?? DEFAULT_RECIPES_INDEX_URL;
+        const indexText = await readRecipesIndexText(source, opts.cwd);
+        const signature = await readRecipesIndexSignature(source, opts.cwd);
+        verifyRecipesIndexSignature(indexText, signature);
+        rawIndex = JSON.parse(indexText);
+        await mkdir(cacheDir, { recursive: true });
+        await writeTextIfChanged(cachePath, indexText);
+        await writeJsonStableIfChanged(cacheSigPath, signature);
+    }
+    else {
+        const [indexText, sigText] = await Promise.all([
+            readFile(cachePath, "utf8"),
+            readFile(cacheSigPath, "utf8"),
+        ]);
+        const signature = validateRecipesIndexSignature(JSON.parse(sigText));
+        verifyRecipesIndexSignature(indexText, signature);
+        rawIndex = JSON.parse(indexText);
+    }
+    return validateRecipesIndex(rawIndex);
+}
+export function willFetchRemoteRecipesIndex(opts) {
+    if (!isHttpUrl(opts.source))
+        return false;
+    return opts.refresh || !opts.cachePathExists;
+}

package/dist/commands/recipes/impl/installed-recipes.d.ts

@@ -0,0 +1,4 @@
+import type { InstalledRecipesFile } from "./types.js";
+export declare function readInstalledRecipesFile(filePath: string): Promise<InstalledRecipesFile>;
+export declare function writeInstalledRecipesFile(filePath: string, file: InstalledRecipesFile): Promise<void>;
+//# sourceMappingURL=installed-recipes.d.ts.map

package/dist/commands/recipes/impl/installed-recipes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed-recipes.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/installed-recipes.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAoCvD,wBAAsB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAS9F;AAED,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/commands/recipes/impl/installed-recipes.js

@@ -0,0 +1,58 @@
+import { mkdir, readFile } from "node:fs/promises";
+import path from "node:path";
+import { invalidFieldMessage } from "../../../cli/output.js";
+import { isRecord } from "../../../shared/guards.js";
+import { writeJsonStableIfChanged } from "../../../shared/write-if-changed.js";
+import { normalizeRecipeTags } from "./normalize.js";
+import { validateRecipeManifest } from "./manifest.js";
+function validateInstalledRecipesFile(raw) {
+    if (!isRecord(raw))
+        throw new Error(invalidFieldMessage("recipes.json", "object"));
+    if (raw.schema_version !== 1)
+        throw new Error(invalidFieldMessage("recipes.json.schema_version", "1"));
+    if (!Array.isArray(raw.recipes))
+        throw new Error(invalidFieldMessage("recipes.json.recipes", "array"));
+    const updatedAt = typeof raw.updated_at === "string" ? raw.updated_at : "";
+    const recipes = raw.recipes
+        .filter((entry) => isRecord(entry))
+        .map((entry) => {
+        const manifest = validateRecipeManifest(entry.manifest);
+        const id = typeof entry.id === "string" ? entry.id.trim() : manifest.id;
+        const version = typeof entry.version === "string" ? entry.version.trim() : manifest.version;
+        const source = typeof entry.source === "string" ? entry.source.trim() : "";
+        const installedAt = typeof entry.installed_at === "string" ? entry.installed_at.trim() : "";
+        if (!id || !version || !source || !installedAt) {
+            throw new Error(invalidFieldMessage("recipes.json.recipes[]", "id, version, source, installed_at"));
+        }
+        if (id !== manifest.id || version !== manifest.version) {
+            throw new Error(invalidFieldMessage("recipes.json.recipes[]", "id/version match manifest"));
+        }
+        const tags = normalizeRecipeTags(entry.tags ?? manifest.tags ?? []);
+        return { id, version, source, installed_at: installedAt, tags, manifest };
+    });
+    return { schema_version: 1, updated_at: updatedAt, recipes };
+}
+function sortInstalledRecipes(file) {
+    const recipes = [...file.recipes].toSorted((a, b) => a.id.localeCompare(b.id));
+    return { schema_version: 1, updated_at: file.updated_at, recipes };
+}
+export async function readInstalledRecipesFile(filePath) {
+    try {
+        const raw = JSON.parse(await readFile(filePath, "utf8"));
+        return sortInstalledRecipes(validateInstalledRecipesFile(raw));
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === "ENOENT")
+            return { schema_version: 1, updated_at: "", recipes: [] };
+        throw err;
+    }
+}
+export async function writeInstalledRecipesFile(filePath, file) {
+    const sorted = sortInstalledRecipes({
+        ...file,
+        updated_at: new Date().toISOString(),
+    });
+    await mkdir(path.dirname(filePath), { recursive: true });
+    await writeJsonStableIfChanged(filePath, sorted);
+}

package/dist/commands/recipes/impl/manifest.d.ts

@@ -0,0 +1,4 @@
+import type { RecipeManifest } from "./types.js";
+export declare function validateRecipeManifest(raw: unknown): RecipeManifest;
+export declare function readRecipeManifest(manifestPath: string): Promise<RecipeManifest>;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/commands/recipes/impl/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/manifest.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAgCnE;AAED,wBAAsB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGtF"}

package/dist/commands/recipes/impl/manifest.js

@@ -0,0 +1,43 @@
+import { readFile } from "node:fs/promises";
+import { invalidFieldMessage, requiredFieldMessage } from "../../../cli/output.js";
+import { isRecord } from "../../../shared/guards.js";
+import { normalizeRecipeId, normalizeRecipeTags } from "./normalize.js";
+export function validateRecipeManifest(raw) {
+    if (!isRecord(raw))
+        throw new Error(invalidFieldMessage("manifest", "object"));
+    if (raw.schema_version !== "1")
+        throw new Error(invalidFieldMessage("manifest.schema_version", '"1"'));
+    if (typeof raw.id !== "string")
+        throw new Error(invalidFieldMessage("manifest.id", "string"));
+    if (typeof raw.version !== "string")
+        throw new Error(invalidFieldMessage("manifest.version", "string"));
+    if (typeof raw.name !== "string")
+        throw new Error(invalidFieldMessage("manifest.name", "string"));
+    if (typeof raw.summary !== "string")
+        throw new Error(invalidFieldMessage("manifest.summary", "string"));
+    if (typeof raw.description !== "string")
+        throw new Error(invalidFieldMessage("manifest.description", "string"));
+    const id = normalizeRecipeId(raw.id);
+    const version = raw.version.trim();
+    if (!version)
+        throw new Error(requiredFieldMessage("manifest.version"));
+    const tags = normalizeRecipeTags(raw.tags);
+    return {
+        schema_version: "1",
+        id,
+        version,
+        name: raw.name.trim(),
+        summary: raw.summary.trim(),
+        description: raw.description.trim(),
+        tags: tags.length > 0 ? tags : undefined,
+        agents: Array.isArray(raw.agents) ? raw.agents : undefined,
+        tools: Array.isArray(raw.tools) ? raw.tools : undefined,
+        scenarios: Array.isArray(raw.scenarios)
+            ? raw.scenarios
+            : undefined,
+    };
+}
+export async function readRecipeManifest(manifestPath) {
+    const raw = JSON.parse(await readFile(manifestPath, "utf8"));
+    return validateRecipeManifest(raw);
+}

package/dist/commands/recipes/impl/normalize.d.ts

@@ -0,0 +1,5 @@
+export declare function normalizeRecipeId(value: string): string;
+export declare function normalizeAgentId(value: string): string;
+export declare function normalizeScenarioId(value: string): string;
+export declare function normalizeRecipeTags(value: unknown): string[];
+//# sourceMappingURL=normalize.d.ts.map

package/dist/commands/recipes/impl/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/normalize.ts"],"names":[],"mappings":"AAOA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUtD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUzD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAQ5D"}

package/dist/commands/recipes/impl/normalize.js

@@ -0,0 +1,50 @@
+import { invalidPathMessage, requiredFieldMessage, invalidFieldMessage, } from "../../../cli/output.js";
+import { dedupeStrings } from "../../../shared/strings.js";
+export function normalizeRecipeId(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        throw new Error(requiredFieldMessage("manifest.id"));
+    if (trimmed.includes("/") || trimmed.includes("\\")) {
+        throw new Error(invalidPathMessage("manifest.id", "must not contain path separators"));
+    }
+    if (trimmed === "." || trimmed === "..") {
+        throw new Error(invalidPathMessage("manifest.id", "must not be '.' or '..'"));
+    }
+    return trimmed;
+}
+export function normalizeAgentId(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        throw new Error(requiredFieldMessage("agent.id"));
+    if (trimmed.includes("/") || trimmed.includes("\\")) {
+        throw new Error(invalidPathMessage("agent.id", "must not contain path separators"));
+    }
+    if (trimmed === "." || trimmed === "..") {
+        throw new Error(invalidPathMessage("agent.id", "must not be '.' or '..'"));
+    }
+    return trimmed;
+}
+export function normalizeScenarioId(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        throw new Error(requiredFieldMessage("scenario.id"));
+    if (trimmed.includes("/") || trimmed.includes("\\")) {
+        throw new Error(invalidPathMessage("scenario.id", "must not contain path separators"));
+    }
+    if (trimmed === "." || trimmed === "..") {
+        throw new Error(invalidPathMessage("scenario.id", "must not be '.' or '..'"));
+    }
+    return trimmed;
+}
+export function normalizeRecipeTags(value) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value))
+        throw new Error(invalidFieldMessage("manifest.tags", "string[]"));
+    const tags = value.map((tag) => {
+        if (typeof tag !== "string")
+            throw new Error(invalidFieldMessage("manifest.tags", "string[]"));
+        return tag.trim();
+    });
+    return dedupeStrings(tags);
+}

package/dist/commands/recipes/impl/paths.d.ts

@@ -0,0 +1,13 @@
+export declare function resolveAgentplaneHome(): string;
+export declare function resolveGlobalRecipesDir(): string;
+export declare function resolveInstalledRecipesPath(): string;
+export declare function resolveRecipesIndexCachePath(): string;
+export declare function resolveRecipesIndexCacheSigPath(): string;
+export declare function resolveInstalledRecipeDir(entry: {
+    id: string;
+    version: string;
+}): string;
+export declare function resolveProjectRecipesCacheDir(resolved: {
+    agentplaneDir: string;
+}): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/commands/recipes/impl/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/paths.ts"],"names":[],"mappings":"AAYA,wBAAgB,qBAAqB,IAAI,MAAM,CAI9C;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD;AAED,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,wBAAgB,+BAA+B,IAAI,MAAM,CAExD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAExF;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEzF"}

package/dist/commands/recipes/impl/paths.js

@@ -0,0 +1,27 @@
+import os from "node:os";
+import path from "node:path";
+import { AGENTPLANE_HOME_ENV, GLOBAL_RECIPES_DIR_NAME, INSTALLED_RECIPES_NAME, PROJECT_RECIPES_CACHE_DIR_NAME, RECIPES_REMOTE_INDEX_NAME, RECIPES_REMOTE_INDEX_SIG_NAME, } from "./constants.js";
+export function resolveAgentplaneHome() {
+    const overridden = process.env[AGENTPLANE_HOME_ENV]?.trim();
+    if (overridden)
+        return overridden;
+    return path.join(os.homedir(), ".agentplane");
+}
+export function resolveGlobalRecipesDir() {
+    return path.join(resolveAgentplaneHome(), GLOBAL_RECIPES_DIR_NAME);
+}
+export function resolveInstalledRecipesPath() {
+    return path.join(resolveAgentplaneHome(), INSTALLED_RECIPES_NAME);
+}
+export function resolveRecipesIndexCachePath() {
+    return path.join(resolveAgentplaneHome(), RECIPES_REMOTE_INDEX_NAME);
+}
+export function resolveRecipesIndexCacheSigPath() {
+    return path.join(resolveAgentplaneHome(), RECIPES_REMOTE_INDEX_SIG_NAME);
+}
+export function resolveInstalledRecipeDir(entry) {
+    return path.join(resolveGlobalRecipesDir(), entry.id, entry.version);
+}
+export function resolveProjectRecipesCacheDir(resolved) {
+    return path.join(resolved.agentplaneDir, PROJECT_RECIPES_CACHE_DIR_NAME);
+}

package/dist/commands/recipes/impl/project.d.ts

@@ -0,0 +1,8 @@
+export declare function maybeResolveProject(opts: {
+    cwd: string;
+    rootOverride?: string;
+}): Promise<{
+    gitRoot: string;
+    agentplaneDir: string;
+} | null>;
+//# sourceMappingURL=project.d.ts.map

package/dist/commands/recipes/impl/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/project.ts"],"names":[],"mappings":"AASA,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAa7D"}

package/dist/commands/recipes/impl/project.js

@@ -0,0 +1,23 @@
+import { resolveProject } from "@agentplaneorg/core";
+function isNotGitRepoError(err) {
+    if (err instanceof Error) {
+        return err.message.startsWith("Not a git repository");
+    }
+    return false;
+}
+export async function maybeResolveProject(opts) {
+    try {
+        return await resolveProject({
+            cwd: opts.cwd,
+            rootOverride: opts.rootOverride ?? null,
+        });
+    }
+    catch (err) {
+        if (isNotGitRepoError(err)) {
+            if (opts.rootOverride)
+                throw err;
+            return null;
+        }
+        throw err;
+    }
+}

package/dist/commands/recipes/impl/scenario.d.ts

@@ -0,0 +1,16 @@
+import type { RecipeManifest, RecipeScenarioDetail, ScenarioDefinition } from "./types.js";
+export declare function readScenarioDefinition(filePath: string): Promise<ScenarioDefinition>;
+export declare function readScenarioIndex(filePath: string): Promise<{
+    schema_version: 1;
+    scenarios: {
+        id: string;
+        summary?: string;
+    }[];
+}>;
+export declare function collectRecipeScenarioDetails(recipeDir: string, manifest: RecipeManifest): Promise<RecipeScenarioDetail[]>;
+export declare function normalizeScenarioToolStep(raw: unknown, sourcePath: string): {
+    tool: string;
+    args: string[];
+    env: Record<string, string>;
+};
+//# sourceMappingURL=scenario.d.ts.map

package/dist/commands/recipes/impl/scenario.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/scenario.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA4B3F,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAG1F;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACjE,cAAc,EAAE,CAAC,CAAC;IAClB,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C,CAAC,CAeD;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA+CjC;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,MAAM,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAyB/D"}