agentplane 0.3.4 → 0.3.6

package/dist/commands/recipes/impl/commands/install.js

@@ -1,7 +1,7 @@
 import { cp, mkdir, mkdtemp, rm } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
-import { defaultConfig, loadConfig } from "@agentplaneorg/core";
+import { defaultConfig, loadConfig, resolveProject } from "@agentplaneorg/core";
 import { extractArchive } from "../../../../cli/archive.js";
 import { sha256File } from "../../../../cli/checksum.js";
 import { mapCoreError } from "../../../../cli/error-map.js";
@@ -12,26 +12,27 @@ import { getBundledRecipeEntry, resolveBundledRecipeSourcePath, } from "../../..
 import { CliError } from "../../../../shared/errors.js";
 import { ensureNetworkApproved } from "../../../shared/network-approval.js";
 import { resolvePathFallback } from "../../../shared/path.js";
-import { applyRecipeAgents, applyRecipeScenarios, moveRecipeDir } from "../apply.js";
+import { moveRecipeDir, validateRecipeAssets } from "../apply.js";
 import { resolveRecipeRoot } from "../archive.js";
-import { DEFAULT_RECIPES_INDEX_URL } from "../constants.js";
+import { DEFAULT_RECIPES_INDEX_URL, RECIPE_RUNS_DIR_NAME } from "../constants.js";
 import { loadRecipesRemoteIndex, willFetchRemoteRecipesIndex } from "../index.js";
-import { readInstalledRecipesFile, writeInstalledRecipesFile } from "../installed-recipes.js";
 import { readRecipeManifest } from "../manifest.js";
 import { normalizeRecipeTags } from "../normalize.js";
-import { resolveGlobalRecipesDir, resolveInstalledRecipeDir, resolveInstalledRecipesPath, resolveRecipesIndexCachePath, } from "../paths.js";
-import { maybeResolveProject } from "../project.js";
+import { writeRecipeInstallMetadata } from "../project-installed-recipes.js";
+import { resolveProjectInstalledRecipeDir, resolveProjectRecipeInstallMetaPath, resolveProjectRecipesDir, resolveRecipesIndexCachePath, } from "../paths.js";
 function isHttpUrl(value) {
     return value.startsWith("http://") || value.startsWith("https://");
 }
 export async function cmdRecipeInstall(opts) {
+    void opts.onConflict;
     try {
-        const project = await maybeResolveProject({ cwd: opts.cwd, rootOverride: opts.rootOverride });
+        const project = await resolveProject({
+            cwd: opts.cwd,
+            rootOverride: opts.rootOverride ?? null,
+        });
         let config = defaultConfig();
-        if (project) {
-            const loaded = await loadConfig(project.agentplaneDir);
-            config = loaded.config;
-        }
+        const loaded = await loadConfig(project.agentplaneDir);
+        config = loaded.config;
         let networkApproved = false;
         const ensureApproved = async (reason) => {
             if (networkApproved)
@@ -173,7 +174,8 @@ export async function cmdRecipeInstall(opts) {
             const manifest = await readRecipeManifest(path.join(recipeRoot, "manifest.json"));
             const resolvedTags = manifest.tags && manifest.tags.length > 0 ? manifest.tags : normalizeRecipeTags(indexTags);
             const manifestWithTags = resolvedTags.length > 0 ? { ...manifest, tags: resolvedTags } : manifest;
-            const installDir = resolveInstalledRecipeDir(manifestWithTags);
+            await validateRecipeAssets({ manifest: manifestWithTags, recipeDir: recipeRoot });
+            const installDir = resolveProjectInstalledRecipeDir(project, manifestWithTags.id);
             const installKind = await getPathKind(installDir);
             if (installKind && installKind !== "dir") {
                 throw new CliError({
@@ -183,21 +185,31 @@ export async function cmdRecipeInstall(opts) {
                 });
             }
             const hadExisting = Boolean(installKind);
+            const existingRunsDir = path.join(installDir, RECIPE_RUNS_DIR_NAME);
+            const preservedRunsDir = path.join(tempRoot, RECIPE_RUNS_DIR_NAME);
             if (installKind) {
+                if ((await getPathKind(existingRunsDir)) === "dir") {
+                    await cp(existingRunsDir, preservedRunsDir, { recursive: true });
+                }
                 await rm(installDir, { recursive: true, force: true });
             }
-            await mkdir(resolveGlobalRecipesDir(), { recursive: true });
+            await mkdir(resolveProjectRecipesDir(project), { recursive: true });
             await moveRecipeDir({ from: recipeRoot, to: installDir });
             try {
-                if (project) {
-                    await applyRecipeAgents({
-                        manifest: manifestWithTags,
-                        recipeDir: installDir,
-                        agentplaneDir: project.agentplaneDir,
-                        onConflict: opts.onConflict,
+                if ((await getPathKind(preservedRunsDir)) === "dir") {
+                    await cp(preservedRunsDir, path.join(installDir, RECIPE_RUNS_DIR_NAME), {
+                        recursive: true,
                     });
                 }
-                await applyRecipeScenarios({ manifest: manifestWithTags, recipeDir: installDir });
+                await writeRecipeInstallMetadata(resolveProjectRecipeInstallMetaPath(project, manifestWithTags.id), {
+                    schema_version: 1,
+                    id: manifestWithTags.id,
+                    version: manifestWithTags.version,
+                    source: sourceLabel,
+                    installed_at: new Date().toISOString(),
+                    tags: resolvedTags,
+                    install_mode: "project-local",
+                });
             }
             catch (err) {
                 if (!hadExisting) {
@@ -205,22 +217,6 @@ export async function cmdRecipeInstall(opts) {
                 }
                 throw err;
             }
-            const recipesPath = resolveInstalledRecipesPath();
-            const installed = await readInstalledRecipesFile(recipesPath);
-            const updated = installed.recipes.filter((entry) => entry.id !== manifestWithTags.id);
-            updated.push({
-                id: manifestWithTags.id,
-                version: manifestWithTags.version,
-                source: sourceLabel,
-                installed_at: new Date().toISOString(),
-                tags: resolvedTags,
-                manifest: manifestWithTags,
-            });
-            await writeInstalledRecipesFile(recipesPath, {
-                schema_version: 1,
-                updated_at: installed.updated_at,
-                recipes: updated,
-            });
             process.stdout.write(`Installed recipe ${manifestWithTags.id}@${manifestWithTags.version}\n`);
             return 0;
         }

package/dist/commands/recipes/impl/commands/list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/list.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,eAAe,CAAC;CACxB,GAAG,OAAO,CAAC,MAAM,CAAC,CA+ClB"}
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/list.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,eAAe,CAAC;CACxB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkDlB"}

package/dist/commands/recipes/impl/commands/list.js

@@ -1,13 +1,16 @@
+import { resolveProject } from "@agentplaneorg/core";
 import { mapCoreError } from "../../../../cli/error-map.js";
 import { emptyStateMessage } from "../../../../cli/output.js";
 import { CliError } from "../../../../shared/errors.js";
-import { readInstalledRecipesFile } from "../installed-recipes.js";
-import { resolveInstalledRecipesPath } from "../paths.js";
+import { readProjectInstalledRecipes } from "../project-installed-recipes.js";
 export async function cmdRecipeListParsed(opts) {
     const flags = opts.flags;
     try {
-        const filePath = resolveInstalledRecipesPath();
-        const installed = await readInstalledRecipesFile(filePath);
+        const resolved = await resolveProject({
+            cwd: opts.cwd,
+            rootOverride: opts.rootOverride ?? null,
+        });
+        const installed = await readProjectInstalledRecipes(resolved);
         let recipes = installed.recipes;
         if (flags.tag) {
             const needle = flags.tag.toLowerCase();

package/dist/commands/recipes/impl/commands/remove.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/remove.ts"],"names":[],"mappings":"AAUA,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BlB"}
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/remove.ts"],"names":[],"mappings":"AAYA,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBlB"}

package/dist/commands/recipes/impl/commands/remove.js

@@ -1,14 +1,18 @@
+import { resolveProject } from "@agentplaneorg/core";
 import { rm } from "node:fs/promises";
 import { mapCoreError } from "../../../../cli/error-map.js";
 import { exitCodeForError } from "../../../../cli/exit-codes.js";
 import { successMessage } from "../../../../cli/output.js";
 import { CliError } from "../../../../shared/errors.js";
-import { readInstalledRecipesFile, writeInstalledRecipesFile } from "../installed-recipes.js";
-import { resolveInstalledRecipeDir, resolveInstalledRecipesPath } from "../paths.js";
+import { readProjectInstalledRecipes } from "../project-installed-recipes.js";
+import { resolveProjectInstalledRecipeDir } from "../paths.js";
 export async function cmdRecipeRemoveParsed(opts) {
     try {
-        const recipesPath = resolveInstalledRecipesPath();
-        const installed = await readInstalledRecipesFile(recipesPath);
+        const resolved = await resolveProject({
+            cwd: opts.cwd,
+            rootOverride: opts.rootOverride ?? null,
+        });
+        const installed = await readProjectInstalledRecipes(resolved);
         const entry = installed.recipes.find((recipe) => recipe.id === opts.id);
         if (!entry) {
             throw new CliError({
@@ -17,14 +21,8 @@ export async function cmdRecipeRemoveParsed(opts) {
                 message: `Recipe not installed: ${opts.id}`,
             });
         }
-        const recipeDir = resolveInstalledRecipeDir(entry);
+        const recipeDir = resolveProjectInstalledRecipeDir(resolved, entry.id);
         await rm(recipeDir, { recursive: true, force: true });
-        const updated = installed.recipes.filter((recipe) => recipe.id !== opts.id);
-        await writeInstalledRecipesFile(recipesPath, {
-            schema_version: 1,
-            updated_at: installed.updated_at,
-            recipes: updated,
-        });
         process.stdout.write(`${successMessage("removed recipe", `${entry.id}@${entry.version}`)}\n`);
         return 0;
     }

package/dist/commands/recipes/impl/constants.d.ts

@@ -2,6 +2,8 @@ export declare const INSTALLED_RECIPES_NAME = "recipes.json";
 export declare const RECIPES_DIR_NAME = "recipes";
 export declare const RECIPES_SCENARIOS_DIR_NAME = "scenarios";
 export declare const RECIPES_SCENARIOS_INDEX_NAME = "scenarios.json";
+export declare const RECIPE_INSTALL_META_NAME = ".install.json";
+export declare const RECIPE_RUNS_DIR_NAME = "runs";
 export declare const AGENTPLANE_HOME_ENV = "AGENTPLANE_HOME";
 export declare const GLOBAL_RECIPES_DIR_NAME = "recipes";
 export declare const PROJECT_RECIPES_CACHE_DIR_NAME = "recipes-cache";

package/dist/commands/recipes/impl/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AACrD,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAC1C,eAAO,MAAM,0BAA0B,cAAc,CAAC;AACtD,eAAO,MAAM,4BAA4B,mBAAmB,CAAC;AAE7D,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD,eAAO,MAAM,uBAAuB,YAAY,CAAC;AACjD,eAAO,MAAM,8BAA8B,kBAAkB,CAAC;AAE9D,eAAO,MAAM,yBAAyB,uBAAuB,CAAC;AAC9D,eAAO,MAAM,6BAA6B,2BAA2B,CAAC;AAEtE,eAAO,MAAM,yBAAyB,uFACgD,CAAC;AAEvF,eAAO,MAAM,6BAA6B,yCAAyC,CAAC;AAEpF,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAI5D,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AACrD,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAC1C,eAAO,MAAM,0BAA0B,cAAc,CAAC;AACtD,eAAO,MAAM,4BAA4B,mBAAmB,CAAC;AAC7D,eAAO,MAAM,wBAAwB,kBAAkB,CAAC;AACxD,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAE3C,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD,eAAO,MAAM,uBAAuB,YAAY,CAAC;AACjD,eAAO,MAAM,8BAA8B,kBAAkB,CAAC;AAE9D,eAAO,MAAM,yBAAyB,uBAAuB,CAAC;AAC9D,eAAO,MAAM,6BAA6B,2BAA2B,CAAC;AAEtE,eAAO,MAAM,yBAAyB,uFACgD,CAAC;AAEvF,eAAO,MAAM,6BAA6B,yCAAyC,CAAC;AAEpF,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAI5D,CAAC"}

package/dist/commands/recipes/impl/constants.js

@@ -2,6 +2,8 @@ export const INSTALLED_RECIPES_NAME = "recipes.json";
 export const RECIPES_DIR_NAME = "recipes";
 export const RECIPES_SCENARIOS_DIR_NAME = "scenarios";
 export const RECIPES_SCENARIOS_INDEX_NAME = "scenarios.json";
+export const RECIPE_INSTALL_META_NAME = ".install.json";
+export const RECIPE_RUNS_DIR_NAME = "runs";
 export const AGENTPLANE_HOME_ENV = "AGENTPLANE_HOME";
 export const GLOBAL_RECIPES_DIR_NAME = "recipes";
 export const PROJECT_RECIPES_CACHE_DIR_NAME = "recipes-cache";

package/dist/commands/recipes/impl/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/manifest.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAgCnE;AAED,wBAAsB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGtF"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/manifest.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAGV,cAAc,EAKf,MAAM,YAAY,CAAC;AAyPpB,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAsDnE;AAED,wBAAsB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGtF"}

package/dist/commands/recipes/impl/manifest.js

@@ -1,40 +1,236 @@
 import { readFile } from "node:fs/promises";
 import { invalidFieldMessage, requiredFieldMessage } from "../../../cli/output.js";
 import { isRecord } from "../../../shared/guards.js";
-import { normalizeRecipeId, normalizeRecipeTags } from "./normalize.js";
+import { dedupeStrings } from "../../../shared/strings.js";
+import { normalizeAgentId, normalizeRecipeId, normalizeRecipeRelativePath, normalizeRecipeTags, normalizeScenarioId, normalizeSkillId, normalizeToolId, } from "./normalize.js";
+function normalizeRequiredString(raw, field) {
+    if (typeof raw !== "string")
+        throw new Error(invalidFieldMessage(field, "string"));
+    const value = raw.trim();
+    if (!value)
+        throw new Error(requiredFieldMessage(field));
+    return value;
+}
+function normalizeOptionalString(raw, field) {
+    if (raw === undefined)
+        return undefined;
+    if (typeof raw !== "string")
+        throw new Error(invalidFieldMessage(field, "string"));
+    const value = raw.trim();
+    return value || undefined;
+}
+function normalizeStringList(raw, field, opts) {
+    if (!Array.isArray(raw))
+        throw new Error(invalidFieldMessage(field, "string[]"));
+    const values = raw.map((value) => {
+        if (typeof value !== "string")
+            throw new Error(invalidFieldMessage(field, "string[]"));
+        const trimmed = value.trim();
+        if (!trimmed)
+            throw new Error(invalidFieldMessage(field, "string[]"));
+        return trimmed;
+    });
+    const deduped = dedupeStrings(values);
+    if ((opts?.minLength ?? 0) > 0 && deduped.length < (opts?.minLength ?? 0)) {
+        throw new Error(invalidFieldMessage(field, `string[${opts?.minLength ?? 0}+]`));
+    }
+    return deduped;
+}
+function normalizeOptionalStringList(raw, field) {
+    if (raw === undefined)
+        return undefined;
+    return normalizeStringList(raw, field);
+}
+function normalizeBoolean(raw, field) {
+    if (raw === undefined)
+        return undefined;
+    if (typeof raw !== "boolean")
+        throw new Error(invalidFieldMessage(field, "boolean"));
+    return raw;
+}
+function normalizeNumber(raw, field) {
+    if (raw === undefined)
+        return undefined;
+    if (typeof raw !== "number" || Number.isNaN(raw)) {
+        throw new Error(invalidFieldMessage(field, "number"));
+    }
+    return raw;
+}
+function normalizeCompatibility(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (!isRecord(raw))
+        throw new Error(invalidFieldMessage("manifest.compatibility", "object"));
+    return {
+        min_agentplane_version: normalizeOptionalString(raw.min_agentplane_version, "manifest.compatibility.min_agentplane_version"),
+        manifest_api_version: normalizeOptionalString(raw.manifest_api_version, "manifest.compatibility.manifest_api_version"),
+        scenario_api_version: normalizeOptionalString(raw.scenario_api_version, "manifest.compatibility.scenario_api_version"),
+        runtime_api_version: normalizeOptionalString(raw.runtime_api_version, "manifest.compatibility.runtime_api_version"),
+        platforms: normalizeOptionalStringList(raw.platforms, "manifest.compatibility.platforms"),
+        repo_types: normalizeOptionalStringList(raw.repo_types, "manifest.compatibility.repo_types"),
+    };
+}
+function normalizeRunProfile(raw, field) {
+    if (!isRecord(raw))
+        throw new Error(invalidFieldMessage(field, "object"));
+    return {
+        mode: normalizeRequiredString(raw.mode, `${field}.mode`),
+        sandbox: normalizeOptionalString(raw.sandbox, `${field}.sandbox`),
+        network: normalizeBoolean(raw.network, `${field}.network`),
+        requires_human_approval: normalizeBoolean(raw.requires_human_approval, `${field}.requires_human_approval`),
+        writes_artifacts_to: normalizeOptionalStringList(raw.writes_artifacts_to, `${field}.writes_artifacts_to`),
+        expected_exit_contract: normalizeOptionalString(raw.expected_exit_contract, `${field}.expected_exit_contract`),
+    };
+}
+function normalizeSkills(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (!Array.isArray(raw))
+        throw new Error(invalidFieldMessage("manifest.skills", "array"));
+    return raw.map((entry, index) => {
+        if (!isRecord(entry))
+            throw new Error(invalidFieldMessage(`manifest.skills[${index}]`, "object"));
+        return {
+            id: normalizeSkillId(normalizeRequiredString(entry.id, `manifest.skills[${index}].id`)),
+            summary: normalizeRequiredString(entry.summary, `manifest.skills[${index}].summary`),
+            kind: normalizeRequiredString(entry.kind, `manifest.skills[${index}].kind`),
+            file: normalizeRecipeRelativePath(`manifest.skills[${index}].file`, normalizeRequiredString(entry.file, `manifest.skills[${index}].file`)),
+        };
+    });
+}
+function normalizeTools(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (!Array.isArray(raw))
+        throw new Error(invalidFieldMessage("manifest.tools", "array"));
+    return raw.map((entry, index) => {
+        if (!isRecord(entry))
+            throw new Error(invalidFieldMessage(`manifest.tools[${index}]`, "object"));
+        const runtime = normalizeRequiredString(entry.runtime, `manifest.tools[${index}].runtime`);
+        if (runtime !== "node" && runtime !== "bash") {
+            throw new Error(invalidFieldMessage(`manifest.tools[${index}].runtime`, '"node" | "bash"'));
+        }
+        return {
+            id: normalizeToolId(normalizeRequiredString(entry.id, `manifest.tools[${index}].id`)),
+            summary: normalizeRequiredString(entry.summary, `manifest.tools[${index}].summary`),
+            runtime,
+            entrypoint: normalizeRecipeRelativePath(`manifest.tools[${index}].entrypoint`, normalizeRequiredString(entry.entrypoint, `manifest.tools[${index}].entrypoint`)),
+            permissions: normalizeOptionalStringList(entry.permissions, `manifest.tools[${index}].permissions`),
+            timeout_ms: normalizeNumber(entry.timeout_ms, `manifest.tools[${index}].timeout_ms`),
+            cwd_policy: normalizeOptionalString(entry.cwd_policy, `manifest.tools[${index}].cwd_policy`),
+        };
+    });
+}
+function normalizeAgents(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (!Array.isArray(raw))
+        throw new Error(invalidFieldMessage("manifest.agents", "array"));
+    return raw.map((entry, index) => {
+        if (!isRecord(entry))
+            throw new Error(invalidFieldMessage(`manifest.agents[${index}]`, "object"));
+        return {
+            id: normalizeAgentId(normalizeRequiredString(entry.id, `manifest.agents[${index}].id`)),
+            display_name: normalizeRequiredString(entry.display_name, `manifest.agents[${index}].display_name`),
+            role: normalizeRequiredString(entry.role, `manifest.agents[${index}].role`),
+            summary: normalizeRequiredString(entry.summary, `manifest.agents[${index}].summary`),
+            skills: normalizeOptionalStringList(entry.skills, `manifest.agents[${index}].skills`),
+            tools: normalizeOptionalStringList(entry.tools, `manifest.agents[${index}].tools`),
+            file: normalizeRecipeRelativePath(`manifest.agents[${index}].file`, normalizeRequiredString(entry.file, `manifest.agents[${index}].file`)),
+        };
+    });
+}
+function normalizeScenarios(raw) {
+    if (!Array.isArray(raw) || raw.length === 0) {
+        throw new Error(invalidFieldMessage("manifest.scenarios", "non-empty array"));
+    }
+    return raw.map((entry, index) => {
+        if (!isRecord(entry)) {
+            throw new Error(invalidFieldMessage(`manifest.scenarios[${index}]`, "object"));
+        }
+        return {
+            id: normalizeScenarioId(normalizeRequiredString(entry.id, `manifest.scenarios[${index}].id`)),
+            name: normalizeRequiredString(entry.name, `manifest.scenarios[${index}].name`),
+            summary: normalizeRequiredString(entry.summary, `manifest.scenarios[${index}].summary`),
+            description: normalizeOptionalString(entry.description, `manifest.scenarios[${index}].description`),
+            use_when: normalizeStringList(entry.use_when, `manifest.scenarios[${index}].use_when`, {
+                minLength: 1,
+            }),
+            avoid_when: normalizeOptionalStringList(entry.avoid_when, `manifest.scenarios[${index}].avoid_when`),
+            required_inputs: normalizeStringList(entry.required_inputs, `manifest.scenarios[${index}].required_inputs`),
+            outputs: normalizeStringList(entry.outputs, `manifest.scenarios[${index}].outputs`),
+            permissions: normalizeStringList(Array.isArray(entry.permissions) ? entry.permissions : [], `manifest.scenarios[${index}].permissions`),
+            artifacts: normalizeStringList(Array.isArray(entry.artifacts) ? entry.artifacts : [], `manifest.scenarios[${index}].artifacts`),
+            agents_involved: normalizeStringList(entry.agents_involved, `manifest.scenarios[${index}].agents_involved`, { minLength: 1 }),
+            skills_used: normalizeStringList(Array.isArray(entry.skills_used) ? entry.skills_used : [], `manifest.scenarios[${index}].skills_used`),
+            tools_used: normalizeStringList(Array.isArray(entry.tools_used) ? entry.tools_used : [], `manifest.scenarios[${index}].tools_used`),
+            run_profile: normalizeRunProfile(entry.run_profile, `manifest.scenarios[${index}].run_profile`),
+            file: normalizeRecipeRelativePath(`manifest.scenarios[${index}].file`, normalizeRequiredString(entry.file, `manifest.scenarios[${index}].file`)),
+        };
+    });
+}
+function assertUniqueIds(field, items) {
+    const seen = new Set();
+    for (const item of items) {
+        if (seen.has(item.id)) {
+            throw new Error(invalidFieldMessage(field, `unique ids (duplicate: ${item.id})`));
+        }
+        seen.add(item.id);
+    }
+}
+function assertKnownReferences(field, refs, known) {
+    if (!refs || refs.length === 0)
+        return;
+    const missing = refs.filter((ref) => !known.has(ref));
+    if (missing.length > 0) {
+        throw new Error(invalidFieldMessage(field, `known ids (missing: ${missing.join(", ")})`));
+    }
+}
 export function validateRecipeManifest(raw) {
     if (!isRecord(raw))
         throw new Error(invalidFieldMessage("manifest", "object"));
     if (raw.schema_version !== "1")
         throw new Error(invalidFieldMessage("manifest.schema_version", '"1"'));
-    if (typeof raw.id !== "string")
-        throw new Error(invalidFieldMessage("manifest.id", "string"));
-    if (typeof raw.version !== "string")
-        throw new Error(invalidFieldMessage("manifest.version", "string"));
-    if (typeof raw.name !== "string")
-        throw new Error(invalidFieldMessage("manifest.name", "string"));
-    if (typeof raw.summary !== "string")
-        throw new Error(invalidFieldMessage("manifest.summary", "string"));
-    if (typeof raw.description !== "string")
-        throw new Error(invalidFieldMessage("manifest.description", "string"));
-    const id = normalizeRecipeId(raw.id);
-    const version = raw.version.trim();
-    if (!version)
-        throw new Error(requiredFieldMessage("manifest.version"));
+    const id = normalizeRecipeId(normalizeRequiredString(raw.id, "manifest.id"));
+    const version = normalizeRequiredString(raw.version, "manifest.version");
     const tags = normalizeRecipeTags(raw.tags);
+    const compatibility = normalizeCompatibility(raw.compatibility);
+    const skills = normalizeSkills(raw.skills);
+    const tools = normalizeTools(raw.tools);
+    const agents = normalizeAgents(raw.agents);
+    const scenarios = normalizeScenarios(raw.scenarios);
+    if (skills)
+        assertUniqueIds("manifest.skills", skills);
+    if (tools)
+        assertUniqueIds("manifest.tools", tools);
+    if (agents)
+        assertUniqueIds("manifest.agents", agents);
+    assertUniqueIds("manifest.scenarios", scenarios);
+    const skillIds = new Set((skills ?? []).map((skill) => skill.id));
+    const toolIds = new Set((tools ?? []).map((tool) => tool.id));
+    const agentIds = new Set((agents ?? []).map((agent) => agent.id));
+    for (const [index, agent] of (agents ?? []).entries()) {
+        assertKnownReferences(`manifest.agents[${index}].skills`, agent.skills, skillIds);
+        assertKnownReferences(`manifest.agents[${index}].tools`, agent.tools, toolIds);
+    }
+    for (const [index, scenario] of scenarios.entries()) {
+        assertKnownReferences(`manifest.scenarios[${index}].agents_involved`, scenario.agents_involved, agentIds);
+        assertKnownReferences(`manifest.scenarios[${index}].skills_used`, scenario.skills_used, skillIds);
+        assertKnownReferences(`manifest.scenarios[${index}].tools_used`, scenario.tools_used, toolIds);
+    }
     return {
         schema_version: "1",
         id,
         version,
-        name: raw.name.trim(),
-        summary: raw.summary.trim(),
-        description: raw.description.trim(),
+        name: normalizeRequiredString(raw.name, "manifest.name"),
+        summary: normalizeRequiredString(raw.summary, "manifest.summary"),
+        description: normalizeRequiredString(raw.description, "manifest.description"),
         tags: tags.length > 0 ? tags : undefined,
-        agents: Array.isArray(raw.agents) ? raw.agents : undefined,
-        tools: Array.isArray(raw.tools) ? raw.tools : undefined,
-        scenarios: Array.isArray(raw.scenarios)
-            ? raw.scenarios
-            : undefined,
+        compatibility,
+        skills,
+        agents,
+        tools,
+        scenarios,
     };
 }
 export async function readRecipeManifest(manifestPath) {

package/dist/commands/recipes/impl/normalize.d.ts

@@ -1,5 +1,8 @@
 export declare function normalizeRecipeId(value: string): string;
 export declare function normalizeAgentId(value: string): string;
+export declare function normalizeSkillId(value: string): string;
+export declare function normalizeToolId(value: string): string;
 export declare function normalizeScenarioId(value: string): string;
 export declare function normalizeRecipeTags(value: unknown): string[];
+export declare function normalizeRecipeRelativePath(field: string, value: string): string;
 //# sourceMappingURL=normalize.d.ts.map

package/dist/commands/recipes/impl/normalize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/normalize.ts"],"names":[],"mappings":"AAOA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUtD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUzD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAQ5D"}
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/normalize.ts"],"names":[],"mappings":"AAmBA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAQ5D;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAWhF"}

package/dist/commands/recipes/impl/normalize.js

@@ -1,40 +1,31 @@
 import { invalidPathMessage, requiredFieldMessage, invalidFieldMessage, } from "../../../cli/output.js";
 import { dedupeStrings } from "../../../shared/strings.js";
-export function normalizeRecipeId(value) {
+function normalizeScopedId(field, value) {
     const trimmed = value.trim();
     if (!trimmed)
-        throw new Error(requiredFieldMessage("manifest.id"));
+        throw new Error(requiredFieldMessage(field));
     if (trimmed.includes("/") || trimmed.includes("\\")) {
-        throw new Error(invalidPathMessage("manifest.id", "must not contain path separators"));
+        throw new Error(invalidPathMessage(field, "must not contain path separators"));
     }
     if (trimmed === "." || trimmed === "..") {
-        throw new Error(invalidPathMessage("manifest.id", "must not be '.' or '..'"));
+        throw new Error(invalidPathMessage(field, "must not be '.' or '..'"));
     }
     return trimmed;
 }
+export function normalizeRecipeId(value) {
+    return normalizeScopedId("manifest.id", value);
+}
 export function normalizeAgentId(value) {
-    const trimmed = value.trim();
-    if (!trimmed)
-        throw new Error(requiredFieldMessage("agent.id"));
-    if (trimmed.includes("/") || trimmed.includes("\\")) {
-        throw new Error(invalidPathMessage("agent.id", "must not contain path separators"));
-    }
-    if (trimmed === "." || trimmed === "..") {
-        throw new Error(invalidPathMessage("agent.id", "must not be '.' or '..'"));
-    }
-    return trimmed;
+    return normalizeScopedId("agent.id", value);
+}
+export function normalizeSkillId(value) {
+    return normalizeScopedId("skill.id", value);
+}
+export function normalizeToolId(value) {
+    return normalizeScopedId("tool.id", value);
 }
 export function normalizeScenarioId(value) {
-    const trimmed = value.trim();
-    if (!trimmed)
-        throw new Error(requiredFieldMessage("scenario.id"));
-    if (trimmed.includes("/") || trimmed.includes("\\")) {
-        throw new Error(invalidPathMessage("scenario.id", "must not contain path separators"));
-    }
-    if (trimmed === "." || trimmed === "..") {
-        throw new Error(invalidPathMessage("scenario.id", "must not be '.' or '..'"));
-    }
-    return trimmed;
+    return normalizeScopedId("scenario.id", value);
 }
 export function normalizeRecipeTags(value) {
     if (value === undefined)
@@ -48,3 +39,16 @@ export function normalizeRecipeTags(value) {
     });
     return dedupeStrings(tags);
 }
+export function normalizeRecipeRelativePath(field, value) {
+    const trimmed = value.trim().replaceAll("\\", "/");
+    if (!trimmed)
+        throw new Error(requiredFieldMessage(field));
+    if (trimmed.startsWith("/")) {
+        throw new Error(invalidPathMessage(field, "must be relative"));
+    }
+    const segments = trimmed.split("/");
+    if (segments.some((segment) => !segment || segment === "." || segment === "..")) {
+        throw new Error(invalidPathMessage(field, "must stay within the recipe root"));
+    }
+    return trimmed;
+}

package/dist/commands/recipes/impl/paths.d.ts

@@ -7,6 +7,15 @@ export declare function resolveInstalledRecipeDir(entry: {
     id: string;
     version: string;
 }): string;
+export declare function resolveProjectRecipesDir(resolved: {
+    agentplaneDir: string;
+}): string;
+export declare function resolveProjectInstalledRecipeDir(resolved: {
+    agentplaneDir: string;
+}, recipeId: string): string;
+export declare function resolveProjectRecipeInstallMetaPath(resolved: {
+    agentplaneDir: string;
+}, recipeId: string): string;
 export declare function resolveProjectRecipesCacheDir(resolved: {
     agentplaneDir: string;
 }): string;

package/dist/commands/recipes/impl/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/paths.ts"],"names":[],"mappings":"AAYA,wBAAgB,qBAAqB,IAAI,MAAM,CAI9C;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD;AAED,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,wBAAgB,+BAA+B,IAAI,MAAM,CAExD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAExF;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEzF"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/paths.ts"],"names":[],"mappings":"AAcA,wBAAgB,qBAAqB,IAAI,MAAM,CAI9C;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD;AAED,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,wBAAgB,+BAA+B,IAAI,MAAM,CAExD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAExF;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEpF;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,EACnC,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,EACnC,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEzF"}

package/dist/commands/recipes/impl/paths.js

@@ -1,6 +1,6 @@
 import os from "node:os";
 import path from "node:path";
-import { AGENTPLANE_HOME_ENV, GLOBAL_RECIPES_DIR_NAME, INSTALLED_RECIPES_NAME, PROJECT_RECIPES_CACHE_DIR_NAME, RECIPES_REMOTE_INDEX_NAME, RECIPES_REMOTE_INDEX_SIG_NAME, } from "./constants.js";
+import { AGENTPLANE_HOME_ENV, GLOBAL_RECIPES_DIR_NAME, INSTALLED_RECIPES_NAME, RECIPE_INSTALL_META_NAME, PROJECT_RECIPES_CACHE_DIR_NAME, RECIPES_DIR_NAME, RECIPES_REMOTE_INDEX_NAME, RECIPES_REMOTE_INDEX_SIG_NAME, } from "./constants.js";
 export function resolveAgentplaneHome() {
     const overridden = process.env[AGENTPLANE_HOME_ENV]?.trim();
     if (overridden)
@@ -22,6 +22,15 @@ export function resolveRecipesIndexCacheSigPath() {
 export function resolveInstalledRecipeDir(entry) {
     return path.join(resolveGlobalRecipesDir(), entry.id, entry.version);
 }
+export function resolveProjectRecipesDir(resolved) {
+    return path.join(resolved.agentplaneDir, RECIPES_DIR_NAME);
+}
+export function resolveProjectInstalledRecipeDir(resolved, recipeId) {
+    return path.join(resolveProjectRecipesDir(resolved), recipeId);
+}
+export function resolveProjectRecipeInstallMetaPath(resolved, recipeId) {
+    return path.join(resolveProjectInstalledRecipeDir(resolved, recipeId), RECIPE_INSTALL_META_NAME);
+}
 export function resolveProjectRecipesCacheDir(resolved) {
     return path.join(resolved.agentplaneDir, PROJECT_RECIPES_CACHE_DIR_NAME);
 }

package/dist/commands/recipes/impl/project-installed-recipes.d.ts

@@ -0,0 +1,7 @@
+import type { InstalledRecipesFile, RecipeInstallMetadata } from "./types.js";
+export declare function readRecipeInstallMetadata(filePath: string): Promise<RecipeInstallMetadata | null>;
+export declare function writeRecipeInstallMetadata(filePath: string, metadata: RecipeInstallMetadata): Promise<void>;
+export declare function readProjectInstalledRecipes(opts: {
+    agentplaneDir: string;
+}): Promise<InstalledRecipesFile>;
+//# sourceMappingURL=project-installed-recipes.d.ts.map

package/dist/commands/recipes/impl/project-installed-recipes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-installed-recipes.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/project-installed-recipes.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAwB,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAuCpG,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CASvC;AAED,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA0DhC"}